Function at 0x40afd6
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd0
push 0x24
call fcn.004158a8
add esp, 4
mov dword [ebp - 4], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 9
rep stosd dword es:[edi], eax
add ebx, 0x1c
push ebx
push 0x10
call fcn.004158a8
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
pop ebx
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
push 0x10
call fcn.004158a8
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov dword [ebp - 0x20], 0
push 0x1c
call fcn.004158a8
add esp, 4
mov dword [ebp - 0x24], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
mov dword [ebp - 0x28], 0
push 0xc
call fcn.004158a8
add esp, 4
mov dword [ebp - 0x2c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
push 0x20
call fcn.004158a8
add esp, 4
mov dword [ebp - 0x30], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 8
rep stosd dword es:[edi], eax
push ebx
push 0xc
call fcn.004158a8
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
pop ebx
add ebx, 0x18
push ebx
push 8
call fcn.004158a8
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
push 8
call fcn.004158a8
add esp, 4
mov dword [ebp - 0x34], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push ebx
push 0xc
call fcn.004158a8
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
pop ebx
add ebx, 4
push ebx
push 0x28
call fcn.004158a8
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 0xa
rep stosd dword es:[edi], eax
pop ebx
push 0x18
call fcn.004158a8
add esp, 4
mov dword [ebp - 0x38], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 6
rep stosd dword es:[edi], eax
push ebx
push 0xc
call fcn.004158a8
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
pop ebx
add ebx, 0x10
push ebx
push 0x10
call fcn.004158a8
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
pop ebx
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
push 0x10
call fcn.004158a8
add esp, 4
mov dword [ebp - 0x44], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
push 0x10
call fcn.004158a8
add esp, 4
mov dword [ebp - 0x50], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0x10
call fcn.004158a8
add esp, 4
mov dword [ebp - 0x54], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0x14
call fcn.004158a8
add esp, 4
mov dword [ebp - 0x58], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 5
rep stosd dword es:[edi], eax
push ebx
push 0xc
call fcn.004158a8
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
pop ebx
push 0x18
call fcn.004158a8
add esp, 4
mov dword [ebp - 0x5c], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 6
rep stosd dword es:[edi], eax
push ebx
push 0xc
call fcn.004158a8
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
pop ebx
add ebx, 8
push ebx
push 0x1c
call fcn.004158a8
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
add ebx, 0x10
push ebx
push 0xa
call fcn.004158a8
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x431f95
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
stosb byte es:[edi], al
stosb byte es:[edi], al
pop ebx
add ebx, 0xc
push ebx
push 0x10
call fcn.004158a8
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
pop ebx
push 0xc
call fcn.004158a8
add esp, 4
mov dword [ebp - 0x60], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
push ebx
push 0xc
call fcn.004158a8
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
pop ebx
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x68], 0
cmp dword [ebp + 0xc], 0x2b
jne 0x40d5f6
mov dword [ebp - 0x6c], esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40b44d
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], esp
push 0
push 0x30
mov eax, dword [ebp - 4]
push eax
push 0x30
call fcn.004158a8
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push dword [ebp + 0x14]
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40b51f
push 6
call fcn.004158ae
add esp, 4
push eax
mov ebx, dword [ebp - 0x78]
push ebx
mov edi, dword [ebp - 0x7c]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0x10
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
je 0x40d5f1
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 2
jne 0x40d5f1
mov ebx, dword [ebp - 4]
add ebx, 0xc
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 1
jne 0x40b714
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40b622
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40b635
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x90]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 8
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x431351]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.004027da
dec eax
jns 0x40b68a
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40b69d
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x84], ebx
mov ebx, dword [ebp - 0x84]
mov eax, dword [ebx]
test eax, eax
je 0x40b6ce
push eax
mov ebx, eax
call fcn.00403d1c
inc eax
push eax
call fcn.004158a8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40b6df
push ebx
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x6c], esp
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40b705
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 1
jmp 0x40b841
mov ebx, dword [ebp - 4]
add ebx, 0xc
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 2
jne 0x40b841
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40b754
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40b767
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x90]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 8
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x431351]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.004027da
dec eax
jns 0x40b7bc
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40b7cf
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x84], ebx
mov ebx, dword [ebp - 0x84]
mov eax, dword [ebx]
test eax, eax
je 0x40b800
push eax
mov ebx, eax
call fcn.00403d1c
inc eax
push eax
call fcn.004158a8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40b811
push ebx
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x6c], esp
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40b837
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 1
cmp dword [ebp - 0x10], 0
je 0x40d5f1
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40b876
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40b889
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x90]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 8
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x431351]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.004027da
dec eax
jns 0x40b8de
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40b8f1
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x84], ebx
mov ebx, dword [ebp - 0x84]
cmp dword [ebx], 0
je 0x40c418
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40b938
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40b94b
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
cmp dword [ebx], 0
jle 0x40bccb
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40b997
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40b9aa
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x6c]
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40b9db
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 4]
add ebx, 0x18
mov dword [ebp - 0x6c], ebx
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebx]
dec eax
jns 0x40ba12
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40ba25
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], esp
push dword [ebp - 0x14]
mov ebx, dword [ebp - 0x74]
push dword [ebx]
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.USER32.dll_FillRect]
nop
nop
nop
nop
cmp dword [ebp - 0x78], esp
je 0x40ba67
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x14]
call dword [sym.imp.GDI32.dll_DeleteObject]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40ba89
push 6
call fcn.004158ae
add esp, 4
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40bab4
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40bac7
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebx]
test eax, eax
je 0x40baf8
push eax
mov ebx, eax
call fcn.00403d1c
inc eax
push eax
call fcn.004158a8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40bb09
push ebx
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x6c], esp
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40bb2f
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
add ebx, 0x18
mov dword [ebp - 0x6c], ebx
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebx]
dec eax
jns 0x40bb66
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40bb79
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x6c]
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], esp
mov ebx, dword [ebp - 0x74]
push dword [ebx]
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.GDI32.dll_SetBkColor]
nop
nop
nop
nop
cmp dword [ebp - 0x78], esp
je 0x40bbb5
push 6
call fcn.004158ae
add esp, 4
mov ebx, dword [ebp - 4]
add ebx, 0x18
mov dword [ebp - 0x6c], ebx
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebx]
dec eax
jns 0x40bbe9
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40bbfc
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
mov dword [ebp - 0x74], ebx
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x78], ebx
mov ebx, dword [ebp - 0x78]
mov eax, dword [ebx]
dec eax
jns 0x40bc3f
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40bc52
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x7c], ebx
mov ebx, dword [ebp - 0x7c]
fild dword [ebx]
fstp qword [ebp - 0x84]
fld qword [ebp - 0x84]
fadd qword [0x431655]
fstp qword [ebp - 0x8c]
mov dword [ebp - 0x90], esp
push dword [ebp - 0xc]
push dword [ebp - 8]
fld qword [ebp - 0x8c]
call fcn.004027da
push eax
mov ebx, dword [ebp - 0x74]
push dword [ebx]
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.GDI32.dll_TextOutA]
nop
nop
nop
nop
cmp dword [ebp - 0x90], esp
je 0x40bccb
push 6
call fcn.004158ae
add esp, 4
mov ebx, dword [ebp - 4]
add ebx, 0x14
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 4]
add ebx, 8
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
push 0x187
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40bd10
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jne 0x40be51
mov eax, 0x43165d
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
call fcn.0041242c
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x40bd47
push ebx
call fcn.004158a2
add esp, 4
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x431655]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x1c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x4318a5]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x1c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x431351]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x1c]
add ebx, 0xc
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
add ebx, 0xc
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x431655]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
jmp 0x40bffa
mov dword [ebp - 0x6c], esp
push 0xf0c295
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40be75
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x6c], esp
push 0xf0c295
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40be9c
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 4]
add ebx, 0x18
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], esp
push 0xf0c295
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.GDI32.dll_SetBkColor]
nop
nop
nop
nop
cmp dword [ebp - 0x70], esp
je 0x40bed1
push 6
call fcn.004158ae
add esp, 4
mov eax, 0x4318ad
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
call fcn.0041242c
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x40bef5
push ebx
call fcn.004158a2
add esp, 4
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x431655]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x1c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x4318a5]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x1c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x431351]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x1c]
add ebx, 0xc
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
add ebx, 0xc
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x431655]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40c025
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40c038
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x90]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 8
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x431351]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.004027da
dec eax
jns 0x40c08d
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40c0a0
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x84], ebx
mov ebx, dword [ebp - 0x84]
mov eax, dword [ebx]
test eax, eax
je 0x40c0d1
push eax
mov ebx, eax
call fcn.00403d1c
inc eax
push eax
call fcn.004158a8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40c0e2
push ebx
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x6c], esp
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40c108
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0xc], eax
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40c136
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40c149
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
fadd qword [0x431af5]
fstp qword [ebp - 0x84]
fld qword [ebp - 0x84]
call fcn.004027da
mov ebx, dword [ebp - 0x70]
mov dword [ebx], eax
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40c1bc
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40c1cf
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
add ebx, 8
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x70]
mov dword [ebx], eax
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40c225
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40c238
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x70]
mov dword [ebx], eax
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40c28e
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40c2a1
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
add ebx, 0xc
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x70]
mov dword [ebx], eax
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40c2f7
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40c30a
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
mov eax, dword [ebx]
dec eax
jns 0x40c348
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40c35b
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x90]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 8
mov dword [ebp - 0x78], ebx
mov ebx, dword [ebp - 0x78]
fild dword [ebx]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
fadd qword [0x431351]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
call fcn.004027da
dec eax
jns 0x40c3b6
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40c3c9
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp - 0x8c]
mov eax, dword [ebx]
test eax, eax
je 0x40c3fa
push eax
mov ebx, eax
call fcn.00403d1c
inc eax
push eax
call fcn.004158a8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x70]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40c40d
push ebx
call fcn.004158a2
add esp, 4
pop eax
mov ebx, dword [ebp - 0x70]
mov dword [ebx], eax
jmp 0x40d31c
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40c443
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40c456
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
cmp dword [ebx], 0
jle 0x40cc05
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40c4a2
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40c4b5
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x6c]
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40c4e6
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 4]
add ebx, 0x18
mov dword [ebp - 0x6c], ebx
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebx]
dec eax
jns 0x40c51d
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40c530
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], esp
push dword [ebp - 0x14]
mov ebx, dword [ebp - 0x74]
push dword [ebx]
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.USER32.dll_FillRect]
nop
nop
nop
nop
cmp dword [ebp - 0x78], esp
je 0x40c572
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x14]
call dword [sym.imp.GDI32.dll_DeleteObject]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40c594
push 6
call fcn.004158ae
add esp, 4
mov eax, 0x431afd
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
call fcn.0041242c
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x40c5b8
push ebx
call fcn.004158a2
add esp, 4
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x6c], ebx
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebx]
dec eax
jns 0x40c5ef
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40c602
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
fsub qword [0x431d45]
fstp qword [ebp - 0x84]
fld qword [ebp - 0x84]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x1c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebx]
dec eax
jns 0x40c675
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40c688
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
fsub qword [0x431351]
fstp qword [ebp - 0x84]
fld qword [ebp - 0x84]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x1c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebx]
dec eax
jns 0x40c6fb
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40c70e
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
fadd qword [0x431351]
fstp qword [ebp - 0x84]
fld qword [ebp - 0x84]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x1c]
add ebx, 0xc
mov dword [ebp - 0x6c], ebx
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebx]
dec eax
jns 0x40c784
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40c797
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
fsub qword [0x431655]
fstp qword [ebp - 0x84]
fld qword [ebp - 0x84]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40c804
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40c817
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebx]
test eax, eax
je 0x40c848
push eax
mov ebx, eax
call fcn.00403d1c
inc eax
push eax
call fcn.004158a8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40c859
push ebx
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x6c], esp
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40c87f
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
add ebx, 0x18
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], esp
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [0x4325c1]
nop
nop
nop
nop
cmp dword [ebp - 0x70], esp
je 0x40c8af
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x18]
push dword [ebp - 0x20]
call dword [sym.imp.GDI32.dll_SelectObject]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40c8d7
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x24]
push 0x1c
push dword [ebp - 0x18]
call dword [0x4325bd]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40c901
push 6
call fcn.004158ae
add esp, 4
mov ebx, dword [ebp - 4]
add ebx, 0x18
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x1c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x1c]
add ebx, 8
mov dword [ebp - 0x78], ebx
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x7c], ebx
mov ebx, dword [ebp - 0x78]
fild dword [ebx]
fstp qword [ebp - 0x84]
fld qword [ebp - 0x84]
mov ebx, dword [ebp - 0x7c]
fild dword [ebx]
fstp qword [ebp - 0x8c]
fsub qword [ebp - 0x8c]
fstp qword [ebp - 0x94]
mov ebx, dword [ebp - 0x1c]
add ebx, 0xc
mov dword [ebp - 0x98], ebx
mov ebx, dword [ebp - 0x1c]
add ebx, 4
mov dword [ebp - 0x9c], ebx
mov ebx, dword [ebp - 0x98]
fild dword [ebx]
fstp qword [ebp - 0xa4]
fld qword [ebp - 0xa4]
mov ebx, dword [ebp - 0x9c]
fild dword [ebx]
fstp qword [ebp - 0xac]
fsub qword [ebp - 0xac]
fstp qword [ebp - 0xb4]
mov ebx, dword [ebp - 0x24]
add ebx, 4
mov dword [ebp - 0xb8], ebx
mov ebx, dword [ebp - 0x24]
add ebx, 8
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xc0], esp
push 0xffffff
mov ebx, dword [ebp - 0xbc]
push dword [ebx]
mov ebx, dword [ebp - 0xb8]
push dword [ebx]
push 0
push 0
push dword [ebp - 0x20]
fld qword [ebp - 0xb4]
call fcn.004027da
push eax
fld qword [ebp - 0x94]
call fcn.004027da
push eax
mov ebx, dword [ebp - 0x74]
push dword [ebx]
mov ebx, dword [ebp - 0x70]
push dword [ebx]
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.MSIMG32.dll_TransparentBlt]
nop
nop
nop
nop
cmp dword [ebp - 0xc0], esp
je 0x40ca28
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x20]
call dword [sym.imp.GDI32.dll_DeleteDC]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40ca4a
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x18]
call dword [sym.imp.GDI32.dll_DeleteObject]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40ca6c
push 6
call fcn.004158ae
add esp, 4
mov ebx, dword [ebp - 4]
add ebx, 0x18
mov dword [ebp - 0x6c], ebx
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebx]
dec eax
jns 0x40caa0
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40cab3
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x6c]
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], esp
mov ebx, dword [ebp - 0x74]
push dword [ebx]
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.GDI32.dll_SetBkColor]
nop
nop
nop
nop
cmp dword [ebp - 0x78], esp
je 0x40caef
push 6
call fcn.004158ae
add esp, 4
mov ebx, dword [ebp - 4]
add ebx, 0x18
mov dword [ebp - 0x6c], ebx
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebx]
dec eax
jns 0x40cb23
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40cb36
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
mov dword [ebp - 0x74], ebx
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x78], ebx
mov ebx, dword [ebp - 0x78]
mov eax, dword [ebx]
dec eax
jns 0x40cb79
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40cb8c
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x7c], ebx
mov ebx, dword [ebp - 0x7c]
fild dword [ebx]
fstp qword [ebp - 0x84]
fld qword [ebp - 0x84]
fadd qword [0x431655]
fstp qword [ebp - 0x8c]
mov dword [ebp - 0x90], esp
push dword [ebp - 0xc]
push dword [ebp - 8]
fld qword [ebp - 0x8c]
call fcn.004027da
push eax
mov ebx, dword [ebp - 0x74]
push dword [ebx]
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.GDI32.dll_TextOutA]
nop
nop
nop
nop
cmp dword [ebp - 0x90], esp
je 0x40cc05
push 6
call fcn.004158ae
add esp, 4
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40cc30
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40cc43
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
fadd qword [0x431af5]
fstp qword [ebp - 0x84]
fld qword [ebp - 0x84]
call fcn.004027da
mov ebx, dword [ebp - 0x70]
mov dword [ebx], eax
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40ccb6
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40ccc9
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
add ebx, 8
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x70]
mov dword [ebx], eax
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40cd1f
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40cd32
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x70]
mov dword [ebx], eax
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40cd88
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40cd9b
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
add ebx, 0xc
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x70]
mov dword [ebx], eax
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40cdf1
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40ce04
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x94]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
mov eax, dword [ebx]
dec eax
jns 0x40ce42
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40ce55
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x90]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 8
mov dword [ebp - 0x78], ebx
mov ebx, dword [ebp - 0x78]
fild dword [ebx]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
fadd qword [0x431351]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
call fcn.004027da
dec eax
jns 0x40ceb0
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40cec3
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp - 0x8c]
mov eax, dword [ebx]
test eax, eax
je 0x40cef4
push eax
mov ebx, eax
call fcn.00403d1c
inc eax
push eax
call fcn.004158a8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x70]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40cf07
push ebx
call fcn.004158a2
add esp, 4
pop eax
mov ebx, dword [ebp - 0x70]
mov dword [ebx], eax
mov ebx, dword [ebp - 4]
add ebx, 0x14
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 4]
add ebx, 8
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
push 0x187
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40cf52
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x40cfed
mov dword [ebp - 0x6c], esp
push 0xf0c295
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40cf89
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 4]
add ebx, 0x18
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], esp
push 0xf0c295
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.GDI32.dll_SetBkColor]
nop
nop
nop
nop
cmp dword [ebp - 0x70], esp
je 0x40cfbe
push 6
call fcn.004158ae
add esp, 4
mov eax, 0x431d4d
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
call fcn.0041242c
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x40cfe2
push ebx
call fcn.004158a2
add esp, 4
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x18], eax
jmp 0x40d10c
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40d018
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40d02b
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x6c]
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40d05c
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 4]
add ebx, 0x18
mov dword [ebp - 0x6c], ebx
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebx]
dec eax
jns 0x40d093
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40d0a6
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x6c]
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], esp
mov ebx, dword [ebp - 0x74]
push dword [ebx]
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.GDI32.dll_SetBkColor]
nop
nop
nop
nop
cmp dword [ebp - 0x78], esp
je 0x40d0e2
push 6
call fcn.004158ae
add esp, 4
mov eax, 0x431afd
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
call fcn.0041242c
mov dword [ebp - 0x70], eax
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x40d106
push ebx
call fcn.004158a2
add esp, 4
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x431655]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x1c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x4318a5]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x1c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x431351]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x1c]
add ebx, 0xc
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
add ebx, 0xc
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x431655]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40d236
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40d249
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x90]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 4]
add ebx, 8
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x431351]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.004027da
dec eax
jns 0x40d29e
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40d2b1
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x84], ebx
mov ebx, dword [ebp - 0x84]
mov eax, dword [ebx]
test eax, eax
je 0x40d2e2
push eax
mov ebx, eax
call fcn.00403d1c
inc eax
push eax
call fcn.004158a8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40d2f3
push ebx
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x6c], esp
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40d319
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 4]
add ebx, 0x18
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], esp
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [0x4325c1]
nop
nop
nop
nop
cmp dword [ebp - 0x70], esp
je 0x40d349
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x18]
push dword [ebp - 0x20]
call dword [sym.imp.GDI32.dll_SelectObject]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40d371
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x24]
push 0x1c
push dword [ebp - 0x18]
call dword [0x4325bd]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40d39b
push 6
call fcn.004158ae
add esp, 4
mov ebx, dword [ebp - 4]
add ebx, 0x18
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x1c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x1c]
add ebx, 8
mov dword [ebp - 0x78], ebx
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x7c], ebx
mov ebx, dword [ebp - 0x78]
fild dword [ebx]
fstp qword [ebp - 0x84]
fld qword [ebp - 0x84]
mov ebx, dword [ebp - 0x7c]
fild dword [ebx]
fstp qword [ebp - 0x8c]
fsub qword [ebp - 0x8c]
fstp qword [ebp - 0x94]
mov ebx, dword [ebp - 0x1c]
add ebx, 0xc
mov dword [ebp - 0x98], ebx
mov ebx, dword [ebp - 0x1c]
add ebx, 4
mov dword [ebp - 0x9c], ebx
mov ebx, dword [ebp - 0x98]
fild dword [ebx]
fstp qword [ebp - 0xa4]
fld qword [ebp - 0xa4]
mov ebx, dword [ebp - 0x9c]
fild dword [ebx]
fstp qword [ebp - 0xac]
fsub qword [ebp - 0xac]
fstp qword [ebp - 0xb4]
mov ebx, dword [ebp - 0x24]
add ebx, 4
mov dword [ebp - 0xb8], ebx
mov ebx, dword [ebp - 0x24]
add ebx, 8
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xc0], esp
push 0xffffff
mov ebx, dword [ebp - 0xbc]
push dword [ebx]
mov ebx, dword [ebp - 0xb8]
push dword [ebx]
push 0
push 0
push dword [ebp - 0x20]
fld qword [ebp - 0xb4]
call fcn.004027da
push eax
fld qword [ebp - 0x94]
call fcn.004027da
push eax
mov ebx, dword [ebp - 0x74]
push dword [ebx]
mov ebx, dword [ebp - 0x70]
push dword [ebx]
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.MSIMG32.dll_TransparentBlt]
nop
nop
nop
nop
cmp dword [ebp - 0xc0], esp
je 0x40d4c2
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x20]
call dword [sym.imp.GDI32.dll_DeleteDC]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40d4e4
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x18]
call dword [sym.imp.GDI32.dll_DeleteObject]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40d506
push 6
call fcn.004158ae
add esp, 4
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
add dword [ebx], 0x11
mov ebx, dword [ebp - 4]
add ebx, 0x18
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 4]
add ebx, 0x1c
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
mov ebx, dword [ebp - 0x70]
push dword [ebx]
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.USER32.dll_FillRect]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40d553
push 6
call fcn.004158ae
add esp, 4
mov ebx, dword [ebp - 4]
add ebx, 0x18
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x1c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
fadd qword [0x431655]
fstp qword [ebp - 0x84]
mov dword [ebp - 0x88], esp
push dword [ebp - 0xc]
push dword [ebp - 8]
fld qword [ebp - 0x84]
call fcn.004027da
push eax
mov ebx, dword [ebp - 0x70]
push dword [ebx]
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.GDI32.dll_TextOutA]
nop
nop
nop
nop
cmp dword [ebp - 0x88], esp
je 0x40d5cf
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x14]
call dword [sym.imp.GDI32.dll_DeleteObject]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40d5f1
push 6
call fcn.004158ae
add esp, 4
jmp 0x41223d
cmp dword [ebp + 0xc], 0x138
je 0x40d621
cmp dword [ebp + 0xc], 0x133
je 0x40d621
cmp dword [ebp + 0xc], 0x134
je 0x40d621
xor eax, eax
jmp 0x40d626
mov eax, 1
test eax, eax
je 0x40d7d2
push dword [ebp + 0x14]
call fcn.00412ccb
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jle 0x40d65e
mov ebx, dword [0x4325a1]
call fcn.004023c5
cmp dword [ebp - 0x28], eax
jg 0x40d65e
mov eax, 1
jmp 0x40d660
xor eax, eax
test eax, eax
je 0x40d7cd
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x40d688
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40d69b
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x6c]
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], esp
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
nop
nop
nop
nop
cmp dword [ebp - 0x70], esp
je 0x40d6cc
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x14]
push dword [ebp + 0x10]
call dword [sym.imp.GDI32.dll_SelectObject]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40d6f4
push 6
call fcn.004158ae
add esp, 4
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x40d714
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40d727
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x6c]
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], esp
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
push dword [ebp + 0x10]
call dword [sym.imp.GDI32.dll_SetBkColor]
nop
nop
nop
nop
cmp dword [ebp - 0x70], esp
je 0x40d75b
push 6
call fcn.004158ae
add esp, 4
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x40d77b
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40d78e
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x6c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], esp
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
push dword [ebp + 0x10]
call dword [0x432641]
nop
nop
nop
nop
cmp dword [ebp - 0x70], esp
je 0x40d7c5
push 6
call fcn.004158ae
add esp, 4
mov eax, dword [ebp - 0x14]
jmp 0x4122ba
jmp 0x41223d
cmp dword [ebp + 0xc], 0x111
jne 0x40e621
push dword [ebp + 0x10]
call fcn.0040acd1
mov dword [ebp - 0x6c], eax
mov ebx, dword [0x4325a1]
call fcn.004023c5
cmp dword [ebp - 0x6c], eax
jg 0x40d820
push dword [ebp + 0x10]
call fcn.0040acd1
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jle 0x40d820
mov eax, 1
jmp 0x40d822
xor eax, eax
test eax, eax
je 0x40e61c
push dword [ebp + 0x14]
call fcn.00412d6b
test eax, eax
je 0x40dabe
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jne 0x40d8db
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40d874
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40d887
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x64
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40d8cc
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jne 0x40d97c
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40d915
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40d928
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40d96d
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jne 0x40da1d
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40d9b6
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40d9c9
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x3c
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40da0e
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jne 0x40dab9
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40da57
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40da6a
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x40
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40daaf
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
jmp 0x40e617
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jne 0x40db5f
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40daf8
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40db0b
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x64
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40db50
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 6
jne 0x40dc00
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40db99
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40dbac
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40dbf1
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 7
jne 0x40dca1
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40dc3a
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40dc4d
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40dc92
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x200
jne 0x40dd45
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40dcde
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40dcf1
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40dd36
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x100
jne 0x40dde9
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40dd82
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40dd95
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40ddda
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x300
jne 0x40de8d
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40de26
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40de39
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x68
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40de7e
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x400
jne 0x40df31
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40deca
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40dedd
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40df22
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 9
jne 0x40dfd2
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40df6b
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40df7e
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x28
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40dfc3
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jne 0x40e073
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40e00c
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e01f
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40e064
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jne 0x40e114
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40e0ad
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e0c0
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40e105
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 6
jne 0x40e1b5
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40e14e
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e161
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x68
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40e1a6
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 7
jne 0x40e256
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40e1ef
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e202
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x44
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40e247
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 8
jne 0x40e2f7
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40e290
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e2a3
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x48
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40e2e8
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jne 0x40e398
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40e331
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e344
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40e389
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jne 0x40e439
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40e3d2
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e3e5
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x34
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40e42a
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jne 0x40e4da
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40e473
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e486
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x2c
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40e4cb
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jne 0x40e57b
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40e514
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e527
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40e56c
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 5
jne 0x40e617
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040acd1
dec eax
jns 0x40e5b5
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e5c8
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40e60d
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
jmp 0x40e61c
jmp 0x41223d
cmp dword [ebp + 0xc], 0x4e
jne 0x411728
mov dword [ebp - 0x6c], esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40e64a
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], esp
push 0
push 0xc
push dword [ebp - 0x2c]
push dword [ebp + 0x14]
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40e67f
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x40f3c6
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0
jle 0x40e6cd
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [0x4325a1]
call fcn.004023c5
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], eax
jg 0x40e6cd
mov eax, 1
jmp 0x40e6cf
xor eax, eax
test eax, eax
je 0x40f3c6
mov ebx, dword [ebp - 0x2c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffe6e
jne 0x40e70b
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40e70b
mov eax, 1
jmp 0x40e70d
xor eax, eax
test eax, eax
je 0x40e7a7
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40e740
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e753
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x34
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40e798
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x2c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffdd9
jne 0x40e7db
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40e7db
mov eax, 1
jmp 0x40e7dd
xor eax, eax
test eax, eax
je 0x40e877
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40e810
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e823
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x34
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40e868
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x2c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffdd8
jne 0x40e8ab
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40e8ab
mov eax, 1
jmp 0x40e8ad
xor eax, eax
test eax, eax
je 0x40e947
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40e8e0
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e8f3
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x30
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40e938
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x2c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffffd
jne 0x40e978
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40e978
mov eax, 1
jmp 0x40e97a
xor eax, eax
test eax, eax
je 0x40ea14
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40e9ad
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40e9c0
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40ea05
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x2c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffffe
jne 0x40ea45
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40ea45
mov eax, 1
jmp 0x40ea47
xor eax, eax
test eax, eax
je 0x40eae1
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40ea7a
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40ea8d
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x64
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40ead2
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x2c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffffb
jne 0x40eb12
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40eb12
mov eax, 1
jmp 0x40eb14
xor eax, eax
test eax, eax
je 0x40ebae
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40eb47
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40eb5a
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x24
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40eb9f
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x2c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffffc
jne 0x40ebdf
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40ebdf
mov eax, 1
jmp 0x40ebe1
xor eax, eax
test eax, eax
je 0x40ec7b
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40ec14
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40ec27
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x38
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40ec6c
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x2c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffff9
jne 0x40ecac
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40ecac
mov eax, 1
jmp 0x40ecae
xor eax, eax
test eax, eax
je 0x40ed48
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40ece1
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40ecf4
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40ed39
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x2c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffff8
jne 0x40ed79
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40ed79
mov eax, 1
jmp 0x40ed7b
xor eax, eax
test eax, eax
je 0x40ee15
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40edae
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40edc1
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40ee06
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x2c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xffffff64
jne 0x40ee49
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40ee49
mov eax, 1
jmp 0x40ee4b
xor eax, eax
test eax, eax
je 0x40eee5
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40ee7e
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40ee91
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x5c
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40eed6
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x2c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffd16
jne 0x40ef19
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40ef19
mov eax, 1
jmp 0x40ef1b
xor eax, eax
test eax, eax
je 0x40efb5
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40ef4e
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40ef61
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x28
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40efa6
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x2c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffd13
jne 0x40efe9
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40efe9
mov eax, 1
jmp 0x40efeb
xor eax, eax
test eax, eax
je 0x40f085
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40f01e
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f031
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x34
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40f076
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x2c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffd0e
jne 0x40f0b9
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40f0b9
mov eax, 1
jmp 0x40f0bb
xor eax, eax
test eax, eax
je 0x40f155
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40f0ee
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f101
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x44
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40f146
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x2c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffd0f
jne 0x40f189
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40f189
mov eax, 1
jmp 0x40f18b
xor eax, eax
test eax, eax
je 0x40f225
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40f1be
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f1d1
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x48
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40f216
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x2c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffcc1
jne 0x40f259
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40f259
mov eax, 1
jmp 0x40f25b
xor eax, eax
test eax, eax
je 0x40f2f8
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40f28e
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f2a1
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x80
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40f2e9
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x2c]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffcbf
jne 0x40f32c
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40f32c
mov eax, 1
jmp 0x40f32e
xor eax, eax
test eax, eax
je 0x40f3c6
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x2c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40f361
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f374
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x84
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40f3bc
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov dword [ebp - 0x6c], esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40f3e5
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], esp
mov eax, dword [ebp - 0x30]
push eax
push 0x2c
call fcn.004158a8
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], eax
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call dword [sym.imp.KERNEL32.dll_LocalSize]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40f4a4
push 6
call fcn.004158ae
add esp, 4
push eax
mov ebx, dword [ebp - 0x78]
push ebx
mov edi, dword [ebp - 0x7c]
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0xc
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 8
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x84], esp
push 0
push dword [ebp - 0x80]
mov eax, dword [ebp - 0x30]
push eax
push 0x2c
call fcn.004158a8
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], eax
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push dword [ebp + 0x14]
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x84], esp
je 0x40f620
push 6
call fcn.004158ae
add esp, 4
push eax
mov ebx, dword [ebp - 0x88]
push ebx
mov edi, dword [ebp - 0x8c]
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0xc
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 8
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
je 0x40f9c0
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0
jle 0x40f715
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [0x4325a1]
call fcn.004023c5
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], eax
jg 0x40f715
mov eax, 1
jmp 0x40f717
xor eax, eax
test eax, eax
je 0x40f9c0
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xffffff94
jne 0x40f754
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40f754
mov eax, 1
jmp 0x40f756
xor eax, eax
test eax, eax
je 0x40f801
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40f78b
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f79e
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x4c
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x30]
add ebx, 8
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x74]
push dword [ebx]
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x78], esp
je 0x40f7f2
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xffffff93
jne 0x40f836
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40f836
mov eax, 1
jmp 0x40f838
xor eax, eax
test eax, eax
je 0x40f8e3
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40f86d
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f880
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x50
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x30]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x74]
push dword [ebx]
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x78], esp
je 0x40f8d4
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xffffff87
jne 0x40f918
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40f918
mov eax, 1
jmp 0x40f91a
xor eax, eax
test eax, eax
je 0x40f9c0
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40f94f
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40f962
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x60
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x30]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x74]
push dword [ebx]
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x78], esp
je 0x40f9b6
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov dword [ebp - 0x6c], esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40f9df
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], esp
mov eax, dword [ebp - 0x34]
push eax
push 0x34
call fcn.004158a8
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], eax
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
call dword [sym.imp.KERNEL32.dll_LocalSize]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x40fab2
push 6
call fcn.004158ae
add esp, 4
push eax
mov ebx, dword [ebp - 0x78]
push ebx
mov edi, dword [ebp - 0x7c]
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0xc
pop edi
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0x28
pop edi
add edi, 4
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x84], esp
push 0
push dword [ebp - 0x80]
mov eax, dword [ebp - 0x34]
push eax
push 0x34
call fcn.004158a8
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], eax
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
push dword [ebp + 0x14]
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x84], esp
je 0x40fc56
push 6
call fcn.004158ae
add esp, 4
push eax
mov ebx, dword [ebp - 0x88]
push ebx
mov edi, dword [ebp - 0x8c]
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0xc
pop edi
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0x28
pop edi
add edi, 4
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
je 0x40ff2e
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0
jle 0x40fd5f
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [0x4325a1]
call fcn.004023c5
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], eax
jg 0x40fd5f
mov eax, 1
jmp 0x40fd61
xor eax, eax
test eax, eax
je 0x40ff2e
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xffffff97
jne 0x40fd9e
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40fd9e
mov eax, 1
jmp 0x40fda0
xor eax, eax
test eax, eax
je 0x40fe4e
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40fdd5
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40fde8
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x54
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx + 4]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x74]
push dword [ebx]
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x78], esp
je 0x40fe3f
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xffffff96
jne 0x40fe83
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x40fe83
mov eax, 1
jmp 0x40fe85
xor eax, eax
test eax, eax
je 0x40ff2e
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x40feba
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40fecd
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x58
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx + 4]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x74]
push dword [ebx]
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x78], esp
je 0x40ff24
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov dword [ebp - 0x6c], esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x40ff4d
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], esp
mov eax, dword [ebp - 0x38]
push eax
push 0x2c
call fcn.004158a8
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], eax
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call dword [sym.imp.KERNEL32.dll_LocalSize]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x41000c
push 6
call fcn.004158ae
add esp, 4
push eax
mov ebx, dword [ebp - 0x78]
push ebx
mov edi, dword [ebp - 0x7c]
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0xc
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0x10
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x84], esp
push 0
push dword [ebp - 0x80]
mov eax, dword [ebp - 0x38]
push eax
push 0x2c
call fcn.004158a8
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], eax
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push dword [ebp + 0x14]
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x84], esp
je 0x410188
push 6
call fcn.004158ae
add esp, 4
push eax
mov ebx, dword [ebp - 0x88]
push ebx
mov edi, dword [ebp - 0x8c]
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0xc
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0x10
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
je 0x4109e3
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffcb7
jne 0x4109e3
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x38]
add ebx, 8
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x7c], esp
push 4
push dword [ebp - 0x78]
push dword [ebp - 0x74]
call dword [sym.imp.KERNEL32.dll_lstrcpyn]
nop
nop
nop
nop
cmp dword [ebp - 0x7c], esp
je 0x4102ab
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x84], esp
push dword [ebp - 0x80]
mov ebx, dword [ebp - 0x70]
push dword [ebx]
push 0x409
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x84], esp
je 0x4102eb
push 6
call fcn.004158ae
add esp, 4
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x410318
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41032b
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x74]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x38]
add ebx, 8
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebx]
dec eax
jns 0x41035a
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41036d
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
je 0x4109e3
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x4103b0
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4103c3
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x74]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x38]
add ebx, 8
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebx]
dec eax
jns 0x4103f2
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x410405
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], esp
push 0
push 0
push 0x418
mov ebx, dword [ebp - 0x74]
push dword [ebx]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x78], esp
je 0x410448
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
push eax
lea eax, [ebp - 0x40]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x4107b9
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x410492
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4104a5
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x74]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x38]
add ebx, 8
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebx]
dec eax
jns 0x4104d4
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4104e7
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x74], ebx
fild dword [ebp - 0x40]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
fsub qword [0x431351]
fstp qword [ebp - 0x84]
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0x88], ebx
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x90], esp
push 4
push dword [ebp - 0x8c]
push dword [ebp - 0x88]
call dword [sym.imp.KERNEL32.dll_lstrcpyn]
nop
nop
nop
nop
cmp dword [ebp - 0x90], esp
je 0x410554
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x98], esp
push dword [ebp - 0x94]
fld qword [ebp - 0x84]
call fcn.004027da
push eax
push 0x41d
mov ebx, dword [ebp - 0x74]
push dword [ebx]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x98], esp
je 0x41059b
push 6
call fcn.004158ae
add esp, 4
mov ebx, dword [ebp - 0x44]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x6c]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x80]
fsub qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
call fcn.004027da
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
add ebx, 0xc
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x44]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x6c]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x80]
fsub qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
call fcn.004027da
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x84]
fadd qword [ebp - 0x84]
fstp qword [ebp - 0x8c]
fld qword [ebp - 0x8c]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x44]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fild dword [ebp - 0x48]
fstp qword [ebp - 0x80]
fadd qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x44]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x44]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x1c]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x84]
fadd qword [ebp - 0x84]
fstp qword [ebp - 0x8c]
fld qword [ebp - 0x8c]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x44]
add ebx, 0xc
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x44]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x80]
fadd qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x44]
push dword [ebp - 0x1c]
push dword [ebp - 0x50]
call dword [sym.imp.USER32.dll_IntersectRect]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x41077a
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x50]
push dword [ebp - 0x44]
call dword [sym.imp.USER32.dll_EqualRect]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x41079f
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jne 0x4107b1
jmp 0x4107b9
pop eax
pop ebx
pop ecx
jmp 0x410457
add esp, 0xc
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], esp
push dword [ebp - 0x54]
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [0x4325dd]
nop
nop
nop
nop
cmp dword [ebp - 0x70], esp
je 0x4107eb
push 6
call fcn.004158ae
add esp, 4
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx + 0x10]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx + 0x10]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x6c]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x80]
fsub qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
call fcn.004027da
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx + 0x10]
add ebx, 0xc
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx + 0x10]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x6c]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x80]
fsub qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
call fcn.004027da
mov dword [ebp - 0x4c], eax
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
dec eax
jns 0x4108b1
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4108c4
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x64
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x38]
add ebx, 8
mov dword [ebp - 0x74], ebx
fild dword [ebp - 0x40]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
fsub qword [0x431351]
fstp qword [ebp - 0x84]
mov ebx, dword [ebp - 0x54]
mov dword [ebp - 0x88], ebx
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx + 0x10]
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp - 0x88]
fild dword [ebx]
fstp qword [ebp - 0x94]
fld qword [ebp - 0x94]
mov ebx, dword [ebp - 0x8c]
fild dword [ebx]
fstp qword [ebp - 0x9c]
fadd qword [ebp - 0x9c]
fstp qword [ebp - 0xa4]
mov ebx, dword [ebp - 0x54]
add ebx, 4
mov dword [ebp - 0xa8], ebx
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx + 0x10]
add ebx, 4
mov dword [ebp - 0xac], ebx
mov ebx, dword [ebp - 0xa8]
fild dword [ebx]
fstp qword [ebp - 0xb4]
fld qword [ebp - 0xb4]
mov ebx, dword [ebp - 0xac]
fild dword [ebx]
fstp qword [ebp - 0xbc]
fadd qword [ebp - 0xbc]
fild dword [ebp - 0x4c]
fstp qword [ebp - 0xc4]
fadd qword [ebp - 0xc4]
fstp qword [ebp - 0xcc]
mov dword [ebp - 0xd0], esp
fld qword [ebp - 0xcc]
call fcn.004027da
push eax
fld qword [ebp - 0xa4]
call fcn.004027da
push eax
fld qword [ebp - 0x84]
call fcn.004027da
push eax
mov ebx, dword [ebp - 0x74]
push dword [ebx]
mov ebx, dword [ebp - 0x70]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0xd0], esp
je 0x4109e3
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x6c], esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x410a02
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], esp
push 0
push 0x19
mov eax, dword [ebp - 0x58]
push eax
push 0x19
call fcn.004158a8
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], eax
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov byte [edi], al
inc edi
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push dword [ebp + 0x14]
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x410aa0
push 6
call fcn.004158ae
add esp, 4
push eax
mov ebx, dword [ebp - 0x78]
push ebx
mov edi, dword [ebp - 0x7c]
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0xc
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov al, byte [ebx]
inc ebx
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
je 0x410d13
mov ebx, dword [ebp - 0x58]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x58]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffdf8
jne 0x410b8f
mov ebx, dword [ebp - 0x58]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
cmp dword [ebx], 0
jle 0x410b8f
mov ebx, dword [ebp - 0x58]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x7c], ebx
mov ebx, dword [0x4325a1]
call fcn.004023c5
mov ebx, dword [ebp - 0x7c]
cmp dword [ebx], eax
jg 0x410b8f
mov eax, 1
jmp 0x410b91
xor eax, eax
test eax, eax
je 0x410d13
mov ebx, dword [ebp - 0x58]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x410bc2
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x410bd5
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov dword [ebp - 0x6c], esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x410c0b
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], esp
push 0
push 0x19
push dword [ebp + 0x14]
mov eax, dword [ebp - 0x58]
push eax
push 0x19
call fcn.004158a8
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], eax
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov byte [edi], al
inc edi
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x410ca9
push 6
call fcn.004158ae
add esp, 4
push eax
mov ebx, dword [ebp - 0x78]
push ebx
mov edi, dword [ebp - 0x7c]
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0xc
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov al, byte [ebx]
inc ebx
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 0x6c], esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x410d32
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], esp
mov eax, dword [ebp - 0x5c]
push eax
push 0x3c
call fcn.004158a8
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], eax
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov byte [edi], al
inc edi
mov eax, dword [ebx]
add ebx, 4
mov byte [edi], al
inc edi
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 2
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
call dword [sym.imp.KERNEL32.dll_LocalSize]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x410e3c
push 6
call fcn.004158ae
add esp, 4
push eax
mov ebx, dword [ebp - 0x78]
push ebx
mov edi, dword [ebp - 0x7c]
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0xc
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov al, byte [ebx]
inc ebx
mov dword [edi], eax
add edi, 4
mov al, byte [ebx]
inc ebx
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00415f40
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x410ed8
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x410ed6
imul eax, dword [edi]
jmp 0x410ecb
mov ecx, eax
cmp ecx, 2
jle 0x410ee2
mov ecx, 2
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 2
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0x14
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0x10
pop edi
add edi, 4
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x84], esp
push 0
push dword [ebp - 0x80]
mov eax, dword [ebp - 0x5c]
push eax
push 0x3c
call fcn.004158a8
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], eax
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov byte [edi], al
inc edi
mov eax, dword [ebx]
add ebx, 4
mov byte [edi], al
inc edi
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 2
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
push dword [ebp + 0x14]
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x84], esp
je 0x411085
push 6
call fcn.004158ae
add esp, 4
push eax
mov ebx, dword [ebp - 0x88]
push ebx
mov edi, dword [ebp - 0x8c]
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0xc
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov al, byte [ebx]
inc ebx
mov dword [edi], eax
add edi, 4
mov al, byte [ebx]
inc ebx
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00415f40
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x411121
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x41111f
imul eax, dword [edi]
jmp 0x411114
mov ecx, eax
cmp ecx, 2
jle 0x41112b
mov ecx, 2
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 2
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0x14
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0x10
pop edi
add edi, 4
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
je 0x4114f7
mov ebx, dword [ebp - 0x5c]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jle 0x4111f3
mov ebx, dword [0x4325a1]
call fcn.004023c5
cmp dword [ebp - 0x28], eax
jg 0x4111f3
mov eax, 1
jmp 0x4111f5
xor eax, eax
test eax, eax
je 0x4114f7
mov ebx, dword [ebp - 0x5c]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffd3a
jne 0x4114f7
mov ebx, dword [ebp - 0x5c]
mov ebx, dword [ebx + 0x14]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x5c]
mov ebx, dword [ebx + 0x14]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x6c]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x80]
fsub qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
call fcn.004027da
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x5c]
mov ebx, dword [ebx + 0x14]
add ebx, 0xc
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x5c]
mov ebx, dword [ebx + 0x14]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x6c]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x80]
fsub qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
call fcn.004027da
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x5c]
mov ebx, dword [ebx]
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], esp
push dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [0x4325dd]
nop
nop
nop
nop
cmp dword [ebp - 0x70], esp
je 0x4112df
push 6
call fcn.004158ae
add esp, 4
mov ebx, dword [ebp - 0x5c]
mov ebx, dword [ebx + 0x14]
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x5c]
mov ebx, dword [ebx + 0x14]
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x84]
fadd qword [ebp - 0x84]
fstp qword [ebp - 0x8c]
fld qword [ebp - 0x8c]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x5c]
mov ebx, dword [ebx + 0x14]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x1c]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x5c]
mov ebx, dword [ebx + 0x14]
add ebx, 4
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x84]
fadd qword [ebp - 0x84]
fstp qword [ebp - 0x8c]
fld qword [ebp - 0x8c]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x5c]
mov ebx, dword [ebx + 0x14]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x5c]
mov ebx, dword [ebx + 0x14]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fild dword [ebp - 0x48]
fstp qword [ebp - 0x80]
fadd qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x5c]
mov ebx, dword [ebx + 0x14]
add ebx, 0xc
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x5c]
mov ebx, dword [ebx + 0x14]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x80]
fadd qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
call fcn.004027da
mov ebx, dword [ebp - 0x6c]
mov dword [ebx], eax
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x411441
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411454
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x7c
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x5c]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x70]
fild dword [ebx]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x431351]
fstp qword [ebp - 0x80]
mov ebx, dword [ebp - 0x5c]
mov ebx, dword [ebx + 0x14]
mov dword [ebp - 0x84], ebx
mov ebx, dword [ebp - 0x5c]
mov ebx, dword [ebx + 0x14]
add ebx, 0xc
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x8c], esp
push 0
mov ebx, dword [ebp - 0x88]
push dword [ebx]
mov ebx, dword [ebp - 0x84]
push dword [ebx]
fld qword [ebp - 0x80]
call fcn.004027da
push eax
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x8c], esp
je 0x4114ed
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
mov dword [ebp - 0x6c], esp
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x411516
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], esp
push 0
push 0x14
mov eax, dword [ebp - 0x60]
push eax
push 0x14
call fcn.004158a8
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], eax
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push dword [ebp + 0x14]
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x74], esp
je 0x4115a2
push 6
call fcn.004158ae
add esp, 4
push eax
mov ebx, dword [ebp - 0x78]
push ebx
mov edi, dword [ebp - 0x7c]
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0xc
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.004158a2
add esp, 4
pop eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
je 0x411723
mov ebx, dword [ebp - 0x60]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
mov eax, dword [ebx]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jle 0x411645
mov ebx, dword [0x4325a1]
call fcn.004023c5
cmp dword [ebp - 0x28], eax
jg 0x411645
mov eax, 1
jmp 0x411647
xor eax, eax
test eax, eax
je 0x411723
mov ebx, dword [ebp - 0x60]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0xfffffd2e
jne 0x411723
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x411689
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41169c
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x64
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x60]
add ebx, 4
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0x60]
add ebx, 8
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
fchs
fstp qword [ebp - 0x84]
mov dword [ebp - 0x88], esp
push 0
push 0
fld qword [ebp - 0x84]
call fcn.004027da
push eax
mov ebx, dword [ebp - 0x70]
push dword [ebx]
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x88], esp
je 0x411719
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
jmp 0x41223d
cmp dword [ebp + 0xc], 0x114
je 0x411746
cmp dword [ebp + 0xc], 0x115
je 0x411746
xor eax, eax
jmp 0x41174b
mov eax, 1
test eax, eax
je 0x41217f
push dword [ebp + 0x14]
call fcn.00412e08
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jle 0x411783
mov ebx, dword [0x4325a5]
call fcn.004023c5
cmp dword [ebp - 0x28], eax
jg 0x411783
mov eax, 1
jmp 0x411785
xor eax, eax
test eax, eax
je 0x41217a
push dword [ebp + 0x10]
call fcn.0040acd1
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 5
jne 0x411861
push dword [ebp + 0x10]
call fcn.0040ad0d
mov dword [ebp - 0x64], eax
mov ebx, dword [0x4325a5]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x4117cd
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4117e0
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0
jne 0x41182d
mov dword [ebp - 0x6c], esp
push 1
push dword [ebp - 0x64]
push 0xe0
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x411828
push 6
call fcn.004158ae
add esp, 4
jmp 0x41185c
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x64]
push 1
push 0x405
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x41185c
push 6
call fcn.004158ae
add esp, 4
jmp 0x4120f0
push dword [ebp + 0x10]
call fcn.0040acd1
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jne 0x411a8c
mov ebx, dword [0x4325a5]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x411896
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4118a9
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0
jne 0x41199e
mov dword [ebp - 0x6c], esp
push 0
push 0
push 0xe1
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x4118f3
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x70], eax
mov ebx, dword [0x4325a5]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x411916
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411929
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x74], ebx
fild dword [ebp - 0x70]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x84]
fsub qword [ebp - 0x84]
fstp qword [ebp - 0x8c]
fld qword [ebp - 0x8c]
call fcn.004027da
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x6c], esp
push 1
push dword [ebp - 0x64]
push 0xe0
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x411999
push 6
call fcn.004158ae
add esp, 4
jmp 0x411a87
mov dword [ebp - 0x6c], esp
push 0
push 0
push 0x400
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x4119cf
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x70], eax
mov ebx, dword [0x4325a5]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x4119f2
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411a05
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x74], ebx
fild dword [ebp - 0x70]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x84]
fsub qword [ebp - 0x84]
fstp qword [ebp - 0x8c]
fld qword [ebp - 0x8c]
fadd qword [0x431351]
fstp qword [ebp - 0x94]
fld qword [ebp - 0x94]
call fcn.004027da
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x64]
push 1
push 0x405
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x411a87
push 6
call fcn.004158ae
add esp, 4
jmp 0x4120f0
push dword [ebp + 0x10]
call fcn.0040acd1
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jne 0x411cb7
mov ebx, dword [0x4325a5]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x411ac1
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411ad4
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0
jne 0x411bc9
mov dword [ebp - 0x6c], esp
push 0
push 0
push 0xe1
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x411b1e
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x70], eax
mov ebx, dword [0x4325a5]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x411b41
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411b54
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x74], ebx
fild dword [ebp - 0x70]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x84]
fadd qword [ebp - 0x84]
fstp qword [ebp - 0x8c]
fld qword [ebp - 0x8c]
call fcn.004027da
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x6c], esp
push 1
push dword [ebp - 0x64]
push 0xe0
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x411bc4
push 6
call fcn.004158ae
add esp, 4
jmp 0x411cb2
mov dword [ebp - 0x6c], esp
push 0
push 0
push 0x400
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x411bfa
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x70], eax
mov ebx, dword [0x4325a5]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x411c1d
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411c30
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x74], ebx
fild dword [ebp - 0x70]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x84]
fadd qword [ebp - 0x84]
fstp qword [ebp - 0x8c]
fld qword [ebp - 0x8c]
fsub qword [0x431351]
fstp qword [ebp - 0x94]
fld qword [ebp - 0x94]
call fcn.004027da
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x64]
push 1
push 0x405
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x411cb2
push 6
call fcn.004158ae
add esp, 4
jmp 0x4120f0
push dword [ebp + 0x10]
call fcn.0040acd1
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jne 0x411ed0
mov ebx, dword [0x4325a5]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x411cec
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411cff
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0
jne 0x411df4
mov dword [ebp - 0x6c], esp
push 0
push 0
push 0xe1
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x411d49
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x70], eax
mov ebx, dword [0x4325a5]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x411d6c
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411d7f
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x74], ebx
fild dword [ebp - 0x70]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x84]
fsub qword [ebp - 0x84]
fstp qword [ebp - 0x8c]
fld qword [ebp - 0x8c]
call fcn.004027da
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x6c], esp
push 1
push dword [ebp - 0x64]
push 0xe0
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x411def
push 6
call fcn.004158ae
add esp, 4
jmp 0x411ecb
mov dword [ebp - 0x6c], esp
push 0
push 0
push 0x400
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x411e25
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x70], eax
mov ebx, dword [0x4325a5]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x411e48
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411e5b
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x74], ebx
fild dword [ebp - 0x70]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x84]
fsub qword [ebp - 0x84]
fstp qword [ebp - 0x8c]
fld qword [ebp - 0x8c]
call fcn.004027da
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x64]
push 1
push 0x405
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x411ecb
push 6
call fcn.004158ae
add esp, 4
jmp 0x4120f0
push dword [ebp + 0x10]
call fcn.0040acd1
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jne 0x4120e9
mov ebx, dword [0x4325a5]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x411f05
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411f18
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x6c]
cmp dword [ebx], 0
jne 0x41200d
mov dword [ebp - 0x6c], esp
push 0
push 0
push 0xe1
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x411f62
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x70], eax
mov ebx, dword [0x4325a5]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x411f85
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x411f98
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x74], ebx
fild dword [ebp - 0x70]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x84]
fadd qword [ebp - 0x84]
fstp qword [ebp - 0x8c]
fld qword [ebp - 0x8c]
call fcn.004027da
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x6c], esp
push 1
push dword [ebp - 0x64]
push 0xe0
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x412008
push 6
call fcn.004158ae
add esp, 4
jmp 0x4120e4
mov dword [ebp - 0x6c], esp
push 0
push 0
push 0x400
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x41203e
push 6
call fcn.004158ae
add esp, 4
mov dword [ebp - 0x70], eax
mov ebx, dword [0x4325a5]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x412061
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x412074
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x74], ebx
fild dword [ebp - 0x70]
fstp qword [ebp - 0x7c]
fld qword [ebp - 0x7c]
mov ebx, dword [ebp - 0x74]
fild dword [ebx]
fstp qword [ebp - 0x84]
fadd qword [ebp - 0x84]
fstp qword [ebp - 0x8c]
fld qword [ebp - 0x8c]
call fcn.004027da
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x6c], esp
push dword [ebp - 0x64]
push 1
push 0x405
push dword [ebp + 0x14]
call dword [0x4325c9]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x4120e4
push 6
call fcn.004158ae
add esp, 4
jmp 0x4120f0
mov dword [ebp - 0x64], 0xffffffff
cmp dword [ebp - 0x64], 0
jl 0x412170
mov ebx, dword [0x4325a5]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp - 0x28]
dec eax
jns 0x41211a
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41212d
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], esp
push 0
push 0
push 0
push dword [ebp - 0x64]
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x70], esp
je 0x412170
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
jmp 0x41223d
cmp dword [ebp + 0xc], 0x113
jne 0x41223d
cmp dword [ebp + 0x10], 0
jle 0x4121b1
mov ebx, dword [0x4325a1]
call fcn.004023c5
cmp dword [ebp + 0x10], eax
jg 0x4121b1
mov eax, 1
jmp 0x4121b3
xor eax, eax
test eax, eax
je 0x41223d
mov ebx, dword [0x4325a1]
call fcn.0040185e
push ebx
push ecx
mov eax, dword [ebp + 0x10]
dec eax
jns 0x4121db
push 4
call fcn.004158ae
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4121ee
push 1
call fcn.004158ae
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0x78
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], esp
push 0
push 0
push 0
push 0
mov ebx, dword [ebp - 0x6c]
push dword [ebx]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x70], esp
je 0x412233
push 6
call fcn.004158ae
add esp, 4
mov eax, 0
jmp 0x4122ba
push dword [ebp + 8]
call fcn.00412ea5
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jle 0x41228a
mov dword [ebp - 0x6c], esp
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [ebp - 0x68]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x412280
push 6
call fcn.004158ae
add esp, 4
jmp 0x4122ba
mov dword [ebp - 0x6c], esp
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [0x4325cd]
nop
nop
nop
nop
cmp dword [ebp - 0x6c], esp
je 0x4122b5
push 6
call fcn.004158ae
add esp, 4
jmp 0x4122ba
push eax
mov ebx, dword [ebp - 4]
push ebx
add ebx, 0x1c
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004158a2
add esp, 4
pop ebx
call fcn.004158a2
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4122e7
push ebx
call fcn.004158a2
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
call fcn.004158a2
add esp, 4
mov ebx, dword [ebp - 0x24]
push ebx
call fcn.004158a2
add esp, 4
mov ebx, dword [ebp - 0x2c]
push ebx
call fcn.004158a2
add esp, 4
mov ebx, dword [ebp - 0x30]
push ebx
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004158a2
add esp, 4
pop ebx
add ebx, 0x18
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004158a2
add esp, 4
pop ebx
call fcn.004158a2
add esp, 4
mov ebx, dword [ebp - 0x34]
push ebx
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004158a2
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004158a2
add esp, 4
pop ebx
call fcn.004158a2
add esp, 4
mov ebx, dword [ebp - 0x38]
push ebx
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004158a2
add esp, 4
pop ebx
add ebx, 0x10
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004158a2
add esp, 4
pop ebx
call fcn.004158a2
add esp, 4
mov ebx, dword [ebp - 0x44]
push ebx
call fcn.004158a2
add esp, 4
mov ebx, dword [ebp - 0x50]
push ebx
call fcn.004158a2
add esp, 4
mov ebx, dword [ebp - 0x54]
push ebx
call fcn.004158a2
add esp, 4
mov ebx, dword [ebp - 0x58]
push ebx
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004158a2
add esp, 4
pop ebx
call fcn.004158a2
add esp, 4
mov ebx, dword [ebp - 0x5c]
push ebx
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004158a2
add esp, 4
pop ebx
add ebx, 8
push ebx
mov ebx, dword [ebx]
push ebx
add ebx, 0x10
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004158a2
add esp, 4
pop ebx
call fcn.004158a2
add esp, 4
pop ebx
add ebx, 0xc
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004158a2
add esp, 4
pop ebx
call fcn.004158a2
add esp, 4
mov ebx, dword [ebp - 0x60]
push ebx
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004158a2
add esp, 4
pop ebx
call fcn.004158a2
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x10