Function at 0x403bd0
Capabilities:
Manipulate console buffer
Set console window title

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x248
mov eax, dword [0x442500]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
call fcn.0040a280
test al, al
jne 0x40422b
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x80], 0
push 0x435366
lea ecx, [ebp - 0x90]
movaps xmmword [ebp - 0x90], xmm0
mov dword [ebp - 0x7c], 0
call fcn.00401760
mov dword [ebp - 0x1f8], 0x8313a861
mov dword [ebp - 0x1f4], 0xd49ead03
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x1f8], 0xe092be75
mov dword [ebp - 0x1f4], 0x3b6b7a56
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x1f8], 0xd67795aa
mov dword [ebp - 0x1f4], 0xd532835b
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x1f8], 0xb6faa539
mov dword [ebp - 0x1f4], 0x7c859f4c
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], ecx
mov dword [ebp - 0x1f8], 0x746ba44d
mov dword [ebp - 0x1f4], 0x3b813ce7
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x1f8], 0x18670b99
mov dword [ebp - 0x1f4], 0xd6bdb125
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], ecx
mov dword [ebp - 0x1f8], 0x1e8a233a
mov dword [ebp - 0x1f4], 0x2ec19ced
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x1f8], 0x2ca3ab04
mov dword [ebp - 0x1f4], 0x72ceaff0
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x1f8], 0xf07ac035
mov dword [ebp - 0x1f4], 0xa6fbdb23
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1f8], 0x8efdd706
mov dword [ebp - 0x1f4], 0x1b0d1576
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x23c], ecx
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1f8], 0xf636c1e7
mov dword [ebp - 0x1f4], 0xa043e629
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x234], ecx
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1f8], 0xc59fd750
mov dword [ebp - 0x1f4], 0x12ecc86c
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x22c], ecx
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], ecx
mov dword [ebp - 0x1f8], 0x71ccb29
mov dword [ebp - 0x1f4], 0x1bd164c7
xorps xmm0, xmm0
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1f8], 0x38545bca
mov dword [ebp - 0x1f4], 0xba9dc34a
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x21c], ecx
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1f8], 0x6cef575b
mov dword [ebp - 0x1f4], 0x2ec19ced
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x214], ecx
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1f8], 0x2ca3ab04
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x1f4], 0x72ceaff0
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
movaps xmm1, xmmword [ebp - 0x240]
xorps xmm1, xmmword [ebp - 0x180]
movaps xmmword [ebp - 0x180], xmm1
movaps xmm1, xmmword [ebp - 0x170]
xorps xmm1, xmmword [ebp - 0x230]
movaps xmmword [ebp - 0x170], xmm1
movaps xmm1, xmmword [ebp - 0x160]
xorps xmm1, xmmword [ebp - 0x220]
movaps xmmword [ebp - 0x160], xmm1
movaps xmm1, xmmword [ebp - 0x150]
mov dword [ebp - 0x204], ecx
lea ecx, [ebp - 0x180]
mov dword [ebp - 0x208], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x210]
movaps xmmword [ebp - 0x150], xmm1
movaps xmmword [ebp - 0x140], xmm0
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x403f70
sub ecx, edx
lea eax, [ebp - 0x180]
push ecx
push eax
lea ecx, [ebp - 0x140]
call fcn.00401760
mov dword [ebp - 0x1f8], 0x9e0fa159
xorps xmm0, xmm0
mov dword [ebp - 0x1f4], 0xded6b340
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x1f8], 0xbd8da476
mov dword [ebp - 0x1f4], 0x7e65765b
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x1f8], 0xf636aa84
mov dword [ebp - 0x1f4], 0xa043e629
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1f8], 0xc59fd750
mov dword [ebp - 0x1f4], 0x12ecc86c
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1f8], 0xf07ac035
mov dword [ebp - 0x1f4], 0xa6fbdb23
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x1f8], 0x8efdd706
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x1f8], 0xf636c1e7
mov dword [ebp - 0x1f4], 0xa043e629
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x1f8], 0xc59fd750
mov dword [ebp - 0x1f4], 0x12ecc86c
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
movaps xmm1, xmmword [ebp - 0x60]
xorps xmm1, xmmword [ebp - 0x30]
movaps xmmword [ebp - 0x30], xmm1
movaps xmm1, xmmword [ebp - 0x20]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x48], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x20], xmm1
movaps xmmword [ebp - 0x120], xmm0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4040f8
sub ecx, edx
lea eax, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0x120]
call fcn.00401760
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x120]
push 2
push eax
call fcn.00407280
mov ecx, dword [ebp - 0x10c]
add esp, 0x10
cmp ecx, 0xf
jbe 0x40416a
mov edx, dword [ebp - 0x120]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404160
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404d82
push ecx
push edx
call fcn.00412e0f
add esp, 8
mov ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0xf
mov byte [ebp - 0x120], 0
cmp ecx, 0xf
jbe 0x4041bf
mov edx, dword [ebp - 0x140]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4041b5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404d82
push ecx
push edx
call fcn.00412e0f
add esp, 8
mov ecx, dword [ebp - 0x7c]
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0xf
mov byte [ebp - 0x140], 0
cmp ecx, 0xf
jbe 0x404211
mov edx, dword [ebp - 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404207
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404d82
push ecx
push edx
call fcn.00412e0f
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
xor ecx, ebp
pop esi
call fcn.00412e1d
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
mov dword [ebp - 0x1f8], 0x9e08a55e
mov dword [ebp - 0x1f4], 0x94c8b746
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0x1f8], 0xe291b328
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0x1f8], 0xf07ac035
mov dword [ebp - 0x1f4], 0xa6fbdb23
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x1f8], 0x8efdd706
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
movaps xmm1, xmmword [ebp - 0xf0]
mov dword [ebp - 0x208], eax
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x204], ecx
xorps xmm1, xmmword [ebp - 0x210]
push eax
movaps xmmword [ebp - 0xf0], xmm1
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
test esi, esi
je 0x404d87
mov dword [ebp - 0x1f8], 0x9f16ac74
mov dword [ebp - 0x1f4], 0xc8949840
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], ecx
mov dword [ebp - 0x1f8], 0xeb91b875
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], ecx
mov dword [ebp - 0x1f8], 0xf07ac035
mov dword [ebp - 0x1f4], 0xa6fbdb23
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x1f8], 0x8efdd706
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x208], eax
lea eax, [ebp - 0x100]
push 0x66
mov dword [ebp - 0x20c], ecx
mov ecx, dword [ebp - 0x1f4]
movaps xmm1, xmmword [ebp - 0x100]
push eax
mov dword [ebp - 0x204], ecx
xorps xmm1, xmmword [ebp - 0x210]
push esi
push 0x4433c8
movaps xmmword [ebp - 0x100], xmm1
call fcn.00401490
mov dword [ebp - 0x1f8], 0x951fb273
mov dword [ebp - 0x1f4], 0xd595b460
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x1f8], 0x8e98bb69
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x1f8], 0xf07ac035
mov dword [ebp - 0x1f4], 0xa6fbdb23
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x1f8], 0x8efdd706
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x208], eax
lea eax, [ebp - 0x1a0]
push 0x67
mov dword [ebp - 0x20c], ecx
mov ecx, dword [ebp - 0x1f4]
movaps xmm1, xmmword [ebp - 0x1a0]
push eax
mov dword [ebp - 0x204], ecx
xorps xmm1, xmmword [ebp - 0x210]
push esi
push 0x4433cc
movaps xmmword [ebp - 0x1a0], xmm1
call fcn.00401490
mov dword [ebp - 0x1f8], 0xa30ea572
mov dword [ebp - 0x1f4], 0xc7b3bf57
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1bc], ecx
mov dword [ebp - 0x1f8], 0xeb91b368
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x1f8], 0xf07ac035
mov dword [ebp - 0x1f4], 0xa6fbdb23
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x1f8], 0x8efdd706
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x20c], ecx
mov ecx, dword [ebp - 0x1f4]
movaps xmm1, xmmword [ebp - 0x1c0]
mov dword [ebp - 0x208], eax
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x204], ecx
xorps xmm1, xmmword [ebp - 0x210]
push eax
push esi
movaps xmmword [ebp - 0x1c0], xmm1
call fcn.00402680
add esp, 0x28
mov dword [0x4433d0], eax
test eax, eax
je 0x404f06
mov dword [ebp - 0x1f8], 0xf033c063
lea esi, [ebp - 0xc0]
mov dword [ebp - 0x1f4], 0xa6aedb70
xorps xmm0, xmm0
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x1f8], 0x8eb1d747
mov dword [ebp - 0x1f4], 0x1b4a1556
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x1f8], 0xf677c1b3
mov dword [ebp - 0x1f4], 0xa043e629
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x1f8], 0xc59fd750
mov dword [ebp - 0x1f4], 0x12ecc86c
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x1f8], 0xf07ac035
mov dword [ebp - 0x1f4], 0xa6fbdb23
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1f8], 0x8efdd706
mov dword [ebp - 0x1f4], 0x1b0d1576
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x21c], ecx
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1f8], 0xf636c1e7
mov dword [ebp - 0x1f4], 0xa043e629
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x214], ecx
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1f8], 0xc59fd750
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x1f4], 0x12ecc86c
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
movaps xmm1, xmmword [ebp - 0x220]
xorps xmm1, xmmword [ebp - 0xc0]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x204], ecx
lea ecx, [esi + 2]
mov dword [ebp - 0x208], eax
xorps xmm1, xmmword [ebp - 0x210]
movaps xmmword [ebp - 0xb0], xmm1
movaps xmmword [ebp - 0xe0], xmm0
nop dword [eax + eax]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x404740
sub esi, ecx
sar esi, 1
cmp esi, 0x7ffffffe
ja 0x4050ba
cmp esi, 7
ja 0x404795
mov dword [ebp - 0xd0], esi
lea eax, [ebp - 0xc0]
add esi, esi
mov dword [ebp - 0xcc], 7
push esi
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.004142a0
add esp, 0xc
xor eax, eax
mov word [ebp + esi - 0xe0], ax
jmp 0x4047fe
mov eax, esi
or eax, 7
cmp eax, 0x7ffffffe
jbe 0x4047a8
mov eax, 0x7ffffffe
jmp 0x4047b2
mov ecx, 0xa
cmp eax, ecx
cmovb eax, ecx
mov dword [ebp - 0x1fc], eax
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.004016c0
mov ecx, dword [ebp - 0x1fc]
mov edi, eax
mov dword [ebp - 0xd0], esi
lea eax, [ebp - 0xc0]
add esi, esi
mov dword [ebp - 0xe0], edi
push esi
push eax
push edi
mov dword [ebp - 0xcc], ecx
call fcn.004142a0
add esp, 0x14
xor eax, eax
mov word [esi + edi], ax
call fcn.00402730
mov eax, dword [0x4433d0]
push 0xfffffffffffffff5
call eax
mov esi, eax
push 0x60
push esi
mov dword [ebp - 0x1f4], esi
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea eax, [ebp - 0x1f0]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
movsx edi, word [ebp - 0x1ee]
xor eax, eax
movsx ecx, word [ebp - 0x1f0]
mov dword [ebp - 0x1fc], eax
lea eax, [ebp - 0x244]
mov esi, dword [ebp - 0x1fc]
push eax
imul edi, ecx
push esi
push edi
push 0x20
push dword [ebp - 0x1f4]
call dword [sym.imp.KERNEL32.dll_FillConsoleOutputCharacterA]
lea eax, [ebp - 0x244]
push eax
push esi
push edi
mov edi, dword [ebp - 0x1f4]
push 0x60
push edi
call dword [sym.imp.KERNEL32.dll_FillConsoleOutputAttribute]
push esi
push edi
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
push 0xfde9
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov dword [ebp - 0x1f8], 0xa225b547
mov dword [ebp - 0x1f4], 0xf2aef576
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1f8], 0x8ec5fa40
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x1f8], 0xf07ac035
mov dword [ebp - 0x1f4], 0xa6fbdb23
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x1f8], 0x8efdd706
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x20c], ecx
mov ecx, dword [ebp - 0x1f4]
movaps xmm1, xmmword [ebp - 0x20]
mov dword [ebp - 0x208], eax
lea eax, [ebp - 0x20]
mov dword [ebp - 0x204], ecx
xorps xmm1, xmmword [ebp - 0x210]
push eax
push 0
movaps xmmword [ebp - 0x20], xmm1
call fcn.0041845e
mov dword [ebp - 0x1f8], 0xf43ac42a
mov dword [ebp - 0x1f4], 0xa2c9df1d
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x1f8], 0x8abdd333
mov dword [ebp - 0x1f4], 0x1f431139
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x1f8], 0xf272c1c7
mov dword [ebp - 0x1f4], 0xa47ae219
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x1f8], 0xc1d4d36b
mov dword [ebp - 0x1f4], 0x12c2c842
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x1f8], 0x73ccb07
mov dword [ebp - 0x1f4], 0x1bf164bb
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1f8], 0x38545bca
mov dword [ebp - 0x1f4], 0xba9dc34a
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x1f8], 0xf07ac035
mov dword [ebp - 0x1f4], 0xa6fbdb23
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x1f8], 0x8efdd706
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x1f8], 0xf636c1e7
mov dword [ebp - 0x1f4], 0xa043e629
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x1f8], 0xc59fd750
mov dword [ebp - 0x1f4], 0x12ecc86c
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x1f8], 0x71ccb29
mov dword [ebp - 0x1f4], 0x1bd164c7
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x1f8], 0x38545bca
mov dword [ebp - 0x1f4], 0xba9dc34a
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
movaps xmm1, xmmword [ebp - 0xa0]
xorps xmm1, xmmword [ebp - 0x70]
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0xe0]
movaps xmmword [ebp - 0x70], xmm1
movaps xmm1, xmmword [ebp - 0x60]
xorps xmm1, xmmword [ebp - 0x90]
push eax
movaps xmmword [ebp - 0x60], xmm1
lea eax, [ebp - 0x70]
movaps xmm1, xmmword [ebp - 0x50]
push eax
mov dword [ebp - 0x74], ecx
lea eax, [ebp - 0x1d8]
xorps xmm1, xmmword [ebp - 0x80]
push eax
movaps xmmword [ebp - 0x50], xmm1
call fcn.004013a0
add esp, 0x14
lea eax, [ebp - 0x1d8]
cmp dword [ebp - 0x1c4], 7
cmova eax, dword [ebp - 0x1d8]
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov dword [ebp - 0x1f8], 0xf43ac42a
mov dword [ebp - 0x1f4], 0xa2c9df1b
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x1f8], 0x8abfd333
mov dword [ebp - 0x1f4], 0x1b2d1557
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x1f8], 0xf636c1e7
mov dword [ebp - 0x1f4], 0xa043e629
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1f8], 0xc59fd750
mov dword [ebp - 0x1f4], 0x12ecc86c
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x1f8], 0xf07ac035
mov dword [ebp - 0x1f4], 0xa6fbdb23
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x1f8], 0x8efdd706
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x1f8], 0xf636c1e7
mov dword [ebp - 0x1f4], 0xa043e629
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x1f8], 0xc59fd750
mov dword [ebp - 0x1f4], 0x12ecc86c
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
movaps xmm1, xmmword [ebp - 0x90]
xorps xmm1, xmmword [ebp - 0x60]
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0xe0]
push eax
movaps xmmword [ebp - 0x60], xmm1
lea eax, [ebp - 0x60]
movaps xmm1, xmmword [ebp - 0x50]
push eax
mov dword [ebp - 0x74], ecx
lea eax, [ebp - 0x28]
xorps xmm1, xmmword [ebp - 0x80]
push eax
movaps xmmword [ebp - 0x50], xmm1
call fcn.004013a0
add esp, 0xc
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x404d02
mov eax, dword [eax]
push ecx
push eax
push 0x4435d8
call fcn.004017f0
mov edi, eax
add esp, 0xc
mov ecx, dword [edi]
mov ecx, dword [ecx + 4]
mov ecx, dword [ecx + edi + 0x30]
mov esi, dword [ecx + 4]
mov ecx, esi
mov dword [ebp - 0x34], esi
mov edx, dword [esi]
call dword [edx + 4]
lea eax, [ebp - 0x38]
push eax
call fcn.00401a40
add esp, 4
mov ecx, eax
mov edx, dword [eax]
push 0xa
mov edx, dword [edx + 0x30]
call edx
movzx eax, ax
mov dword [ebp - 0x1f4], eax
test esi, esi
je 0x404d68
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 8]
call eax
test eax, eax
je 0x404d62
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
mov eax, dword [ebp - 0x1f4]
push eax
mov ecx, edi
call fcn.004038e0
mov ecx, edi
call fcn.004034c0
lea ecx, [ebp - 0x28]
call fcn.00402330
nop
jmp 0x404d80
call fcn.00417a0f
mov dword [ebp - 0x1f8], 0x9f08b270
mov dword [ebp - 0x1f4], 0xa6fbdb51
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x1f8], 0x8efdd706
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x1f8], 0xf07ac035
mov dword [ebp - 0x1f4], 0xa6fbdb23
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1f8], 0x8efdd706
mov dword [ebp - 0x1f4], 0x1b0d1576
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x20c], ecx
mov ecx, dword [ebp - 0x1f4]
movaps xmm1, xmmword [ebp - 0x40]
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x204], ecx
xorps xmm1, xmmword [ebp - 0x210]
movaps xmmword [ebp - 0x40], xmm1
mov dword [ebp - 0x1f8], 0x8215b270
mov dword [ebp - 0x1f4], 0x97d8fb51
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1f8], 0x8efde636
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x1f8], 0xf07ac035
mov dword [ebp - 0x1f4], 0xa6fbdb23
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x1f8], 0x8efdd706
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x208], eax
lea eax, [ebp - 0x40]
push 0x10
push eax
mov dword [ebp - 0x20c], ecx
lea eax, [ebp - 0x20]
mov ecx, dword [ebp - 0x1f4]
movaps xmm1, xmmword [ebp - 0x20]
mov dword [ebp - 0x204], ecx
xorps xmm1, xmmword [ebp - 0x210]
push eax
push 0
movaps xmmword [ebp - 0x20], xmm1
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call fcn.00417dea
lea eax, [ebp - 0x1c0]
push 0x68
push eax
call fcn.00403aa0
mov dword [ebp - 0x1f8], 0x8215b270
mov dword [ebp - 0x1f4], 0xa6fbfb51
mov ecx, dword [ebp - 0x1f8]
mov edx, dword [ebp - 0x1f4]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x1f8], 0x8efdd706
mov dword [ebp - 0x1f4], 0x1b0d1576
mov ecx, dword [ebp - 0x1f8]
push eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x1f8], 0xf07ac035
mov dword [ebp - 0x1f4], 0xa6fbdb23
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x1f8], 0x8efdd706
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x208], eax
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20c], ecx
mov ecx, dword [ebp - 0x1f4]
movaps xmm1, xmmword [ebp - 0x20]
push eax
mov dword [ebp - 0x204], ecx
lea eax, [ebp - 0x1a0]
xorps xmm1, xmmword [ebp - 0x210]
push eax
movaps xmmword [ebp - 0x20], xmm1
call fcn.00401330
add esp, 0x14
lea ecx, [ebp - 0x1c0]
call fcn.004022e0
mov dword [ebp - 0x1f8], 0x9f08b270
mov dword [ebp - 0x1f4], 0xa6fbdb51
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x1f8], 0x8efdd706
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x1f8], 0xf07ac035
mov dword [ebp - 0x1f4], 0xa6fbdb23
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1f8], 0x8efdd706
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x1f4], 0x1b0d1576
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
movaps xmm1, xmmword [ebp - 0x40]
mov dword [ebp - 0x204], ecx
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 0x208], eax
xorps xmm1, xmmword [ebp - 0x210]
movaps xmmword [ebp - 0x40], xmm1
call fcn.00403090
push 0x10
lea ecx, [ebp - 0x40]
push ecx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call fcn.00417dea
call fcn.00402f10
int3