Function at 0x40af70
Capabilities:
Get common file path
Terminate thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc14
mov eax, dword [0x4cb068]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x4ceda8], 1
push ebx
push esi
push edi
mov byte [0x4cba83], 0
jne 0x40afa3
cmp byte [0x4ced2e], 0
jne 0x40afa3
mov al, 1
jmp 0x40afa5
xor al, al
xor ecx, ecx
movzx eax, al
cmp byte [0x4ceb30], cl
cmove eax, ecx
mov byte [0x4ced2d], al
mov eax, dword [0x571104]
cmp eax, 0xc350
jg 0x40e6c5
test eax, eax
je 0x40e7f7
push dword [0x4cec00]
call dword [sym.imp.USER32.dll_GetDC]
mov esi, dword [sym.imp.USER32.dll_GetClientRect]
mov ebx, eax
push 0x4ced68
push dword [0x4cec00]
mov dword [ebp - 0xc10], ebx
call esi
mov eax, dword [0x4ced70]
add eax, 0xffffffe2
mov dword [0x4cba7c], 0x112
mov dword [0x4cedb8], eax
add eax, 0xffffffe2
cmp byte [0x4ced2d], 0
mov dword [0x4cedb4], eax
mov eax, dword [0x571104]
mov dword [0x4cba78], 0x1e
je 0x40b03f
mov dword [0x4cedb0], 0x64
mov dword [0x4cedac], eax
jmp 0x40b044
mov dword [0x4cedb0], eax
push 0x4ced68
push dword [0x4cec00]
call esi
mov esi, dword [sym.imp.GDI32.dll_GetStockObject]
push 0x13
call esi
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
push eax
push ebx
call edi
push 0xffffff
push ebx
call dword [sym.imp.GDI32.dll_SetDCPenColor]
push 0x12
call esi
push eax
push ebx
call edi
mov edi, dword [sym.imp.GDI32.dll_SetDCBrushColor]
push 0xffffff
push ebx
call edi
mov ecx, dword [0x4cba7c]
mov esi, dword [sym.imp.GDI32.dll_Rectangle]
lea eax, [ecx + 1]
push eax
mov eax, dword [0x4ced70]
add eax, 0xffffffe3
push eax
lea eax, [ecx - 1]
push eax
push 0x1e
push ebx
call esi
mov ecx, dword [0x4cba7c]
lea eax, [ecx + 0xc9]
push eax
push 0x1e
lea eax, [ecx - 1]
push eax
push 1
push ebx
call esi
mov edx, dword [0x4cba7c]
mov ecx, dword [0x4cedb8]
lea eax, [edx + 0xc9]
push eax
lea eax, [ecx + 0x1e]
push eax
lea eax, [edx - 1]
push eax
push ecx
push ebx
call esi
mov ecx, dword [0x4cba7c]
lea eax, [ecx + 0xdc]
push eax
mov eax, dword [0x4cedb8]
add eax, 0x1e
push eax
lea eax, [ecx + 0xc8]
push eax
push 0x1e
push ebx
call esi
push 0x13
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push 0xe8e8e8
push ebx
call dword [sym.imp.GDI32.dll_SetDCPenColor]
push 0x12
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push 0xf8f8f8
push ebx
call edi
mov ecx, dword [0x4cba7c]
lea eax, [ecx + 0xc8]
push eax
push dword [0x4cedb8]
push ecx
push 0x1e
push ebx
call esi
mov eax, dword [0x4cba7c]
mov esi, dword [sym.imp.GDI32.dll_MoveToEx]
add eax, 0x14
push 0
push eax
push 0x1e
push ebx
call esi
mov eax, dword [0x4cba7c]
mov edi, dword [sym.imp.GDI32.dll_LineTo]
add eax, 0x14
push eax
push dword [0x4cedb8]
push ebx
call edi
mov eax, dword [0x4cba7c]
push 0
add eax, 0x28
push eax
push 0x1e
push ebx
call esi
mov eax, dword [0x4cba7c]
add eax, 0x28
push eax
push dword [0x4cedb8]
push ebx
call edi
mov eax, dword [0x4cba7c]
push 0
add eax, 0x3c
push eax
push 0x1e
push ebx
call esi
mov eax, dword [0x4cba7c]
add eax, 0x3c
push eax
push dword [0x4cedb8]
push ebx
call edi
mov eax, dword [0x4cba7c]
push 0
add eax, 0x50
push eax
push 0x1e
push ebx
call esi
mov eax, dword [0x4cba7c]
add eax, 0x50
push eax
push dword [0x4cedb8]
push ebx
call edi
mov eax, dword [0x4cba7c]
push 0
add eax, 0x64
push eax
push 0x1e
push ebx
call esi
mov eax, dword [0x4cba7c]
add eax, 0x64
push eax
push dword [0x4cedb8]
push ebx
call edi
mov eax, dword [0x4cba7c]
push 0
add eax, 0x78
push eax
push 0x1e
push ebx
call esi
mov eax, dword [0x4cba7c]
add eax, 0x78
push eax
push dword [0x4cedb8]
push ebx
call edi
mov eax, dword [0x4cba7c]
push 0
add eax, 0x8c
push eax
push 0x1e
push ebx
call esi
mov eax, dword [0x4cba7c]
add eax, 0x8c
push eax
push dword [0x4cedb8]
push ebx
call edi
mov eax, dword [0x4cba7c]
push 0
add eax, 0xa0
push eax
push 0x1e
push ebx
call esi
mov eax, dword [0x4cba7c]
add eax, 0xa0
push eax
push dword [0x4cedb8]
push ebx
call edi
mov eax, dword [0x4cba7c]
push 0
add eax, 0xb4
push eax
push 0x1e
push ebx
call esi
mov eax, dword [0x4cba7c]
add eax, 0xb4
push eax
push dword [0x4cedb8]
push ebx
call edi
cmp dword [0x571128], 1
jne 0x40b2fe
mov eax, dword [0x4cba7c]
push 0
add eax, 0x63
push eax
push 0x1e
push ebx
call esi
mov eax, dword [0x4cba7c]
add eax, 0x65
push eax
push dword [0x4cedb8]
push ebx
call edi
push 0xc8c8c8
push ebx
call dword [sym.imp.GDI32.dll_SetDCPenColor]
mov eax, dword [0x4cba7c]
push 0
add eax, 0x64
push eax
push 0x1e
push ebx
call esi
mov eax, dword [0x4cba7c]
add eax, 0x64
push eax
push dword [0x4cedb8]
push ebx
call edi
push 0xe8e8e8
push ebx
call dword [sym.imp.GDI32.dll_SetDCPenColor]
push 0x808080
push ebx
call dword [sym.imp.GDI32.dll_SetTextColor]
mov eax, dword [0x4cba7c]
mov esi, dword [sym.imp.GDI32.dll_TextOutW]
add eax, 0xc1
cmp dword [0x571128], 2
push 1
push 0x4c2990
push eax
push 0x12
push ebx
jne 0x40b38f
call esi
mov eax, dword [0x4cba7c]
push 2
push 0x4c1af0
add eax, 0x99
push eax
push 0xa
push ebx
call esi
mov eax, dword [0x4cba7c]
push 2
push 0x4c1920
add eax, 0x71
push eax
push 0xa
push ebx
call esi
mov eax, dword [0x4cba7c]
push 2
push 0x4c1938
add eax, 0x49
push eax
push 0xa
push ebx
call esi
mov eax, dword [0x4cba7c]
push 2
push 0x4c1948
add eax, 0x21
push eax
push 0xa
push ebx
call esi
push 3
push 0x4c1958
jmp 0x40b403
call esi
mov eax, dword [0x4cba7c]
push 2
push 0x4c1920
add eax, 0x99
push eax
push 0xa
push ebx
call esi
mov eax, dword [0x4cba7c]
push 2
push 0x4c1948
add eax, 0x71
push eax
push 0xa
push ebx
call esi
mov eax, dword [0x4cba7c]
push 3
push 0x4c1958
add eax, 0x5d
push eax
push 2
push ebx
call esi
mov eax, dword [0x4cba7c]
push 3
push 0x4c1b98
add eax, 0x49
push eax
push 2
push ebx
call esi
mov eax, dword [0x4cba7c]
push 3
push 0x4c2994
add eax, 0x21
push eax
push 2
push ebx
call esi
push 3
push 0x4c17d8
mov eax, dword [0x4cba7c]
add eax, 0xfffffff9
push eax
push 2
push ebx
call esi
xor eax, eax
mov dword [0x4ced30], 0
cmp eax, 0x32
jae 0x40e80f
mov byte [eax + 0x4ced34], 0
inc eax
mov dword [0x4ced30], eax
cmp eax, 0x32
jl 0x40b420
push 0xa
push 0x4ced34
push dword [0x4cedb0]
call fcn.0045a5e0
xor eax, eax
add esp, 0xc
xor ecx, ecx
mov dword [0x4ced30], eax
mov dword [0x4cedbc], ecx
nop dword [eax]
cmp byte [eax + 0x4ced34], 0
je 0x40b46d
inc eax
inc ecx
jmp 0x40b460
push 0x4c2990
push 0x4ced14
mov dword [0x4ced30], eax
mov dword [0x4cedbc], ecx
mov byte [0x4ced2c], 1
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [0x4cba7c]
add esp, 8
add eax, 0xca
mov dword [0x4ced10], 0xca
push 1
push 0x4ced14
push eax
push 0x1e
push ebx
call esi
mov esi, dword [0x4cedbc]
cmp esi, 1
jne 0x40b5b6
mov edx, dword [0x4cedb0]
mov ecx, esi
mov esi, dword [sym.imp.GDI32.dll_MoveToEx]
mov eax, ecx
mov dword [0x4ced30], ecx
nop dword [eax + eax]
mov dword [ecx*4 + 0x4cedc0], eax
cmp eax, edx
jg 0x40b59f
imul eax, dword [0x4cedb4]
push 0
push dword [0x4cba7c]
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call esi
mov eax, dword [0x4cba7c]
add eax, 0xc8
push eax
mov eax, dword [0x4ced30]
mov eax, dword [eax*4 + 0x4cedc0]
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call edi
mov eax, dword [0x4ced30]
push dword [eax*4 + 0x4cedc0]
push 0x4c1524
push 0x4ced14
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [0x4ced10]
add esp, 0xc
add eax, dword [0x4cba7c]
push dword [0x4cedbc]
push 0x4ced14
push eax
mov eax, dword [0x4ced30]
mov eax, dword [eax*4 + 0x4cedc0]
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
add eax, 0x18
push eax
push ebx
call dword [sym.imp.GDI32.dll_TextOutW]
mov ecx, dword [0x4ced30]
mov edx, dword [0x4cedb0]
inc ecx
mov dword [0x4ced30], ecx
mov eax, ecx
cmp ecx, 0xa
jle 0x40b4e0
jmp 0x40bdcf
mov al, byte [0x4ced34]
cmp al, 0x31
jne 0x40b7c4
mov dword [0x4ced30], 2
mov dword [ebp - 0xc0c], 2
nop word [eax + eax]
movsd xmm0, qword [0x4c32f8]
lea eax, [esi - 2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
call fcn.00494600
movd xmm1, dword [ebp - 0xc0c]
mov eax, dword [0x4ced30]
mov ecx, dword [0x4cedb0]
cvtdq2pd xmm1, xmm1
mulsd xmm0, xmm1
cvttsd2si edx, xmm0
mov dword [eax*4 + 0x4cedc0], edx
cmp edx, ecx
jg 0x40b6d7
imul edx, dword [0x4cedb4]
push 0
push dword [0x4cba7c]
mov eax, edx
cdq
idiv ecx
add eax, 0x1e
push eax
push ebx
call dword [sym.imp.GDI32.dll_MoveToEx]
mov eax, dword [0x4cba7c]
add eax, 0xc8
push eax
mov eax, dword [0x4ced30]
mov eax, dword [eax*4 + 0x4cedc0]
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call edi
mov eax, dword [0x4ced30]
push dword [eax*4 + 0x4cedc0]
push 0x4c1524
push 0x4ced14
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [0x4ced10]
add esp, 0xc
add eax, dword [0x4cba7c]
push dword [0x4cedbc]
push 0x4ced14
push eax
mov eax, dword [0x4ced30]
mov eax, dword [eax*4 + 0x4cedc0]
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
add eax, 0x18
push eax
push ebx
call dword [sym.imp.GDI32.dll_TextOutW]
mov esi, dword [0x4cedbc]
mov eax, dword [0x4ced30]
add eax, 2
mov dword [0x4ced30], eax
mov dword [ebp - 0xc0c], eax
cmp eax, 0x14
jle 0x40b5e0
mov dword [0x4ced30], 1
mov dword [ebp - 0xc0c], 1
nop dword [eax]
nop word [eax + eax]
movsd xmm0, qword [0x4c32f8]
lea eax, [esi - 2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
call fcn.00494600
movd xmm1, dword [ebp - 0xc0c]
mov eax, dword [0x4ced30]
cvtdq2pd xmm1, xmm1
mulsd xmm0, xmm1
cvttsd2si ecx, xmm0
mov dword [eax*4 + 0x4cedc0], ecx
cmp ecx, dword [0x4cedb0]
jg 0x40b7aa
imul ecx, dword [0x4cedb4]
push 0
push dword [0x4cba7c]
mov eax, ecx
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call dword [sym.imp.GDI32.dll_MoveToEx]
mov eax, dword [0x4cba7c]
add eax, 0xc8
push eax
mov eax, dword [0x4ced30]
mov eax, dword [eax*4 + 0x4cedc0]
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call edi
mov esi, dword [0x4cedbc]
mov eax, dword [0x4ced30]
inc eax
mov dword [0x4ced30], eax
mov dword [ebp - 0xc0c], eax
cmp eax, 0x14
jle 0x40b710
jmp 0x40bdcf
cmp al, 0x32
jne 0x40b9c4
mov dword [0x4ced30], 4
mov dword [ebp - 0xc0c], 4
movsd xmm0, qword [0x4c32f8]
lea eax, [esi - 2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
call fcn.00494600
movd xmm1, dword [ebp - 0xc0c]
mov eax, dword [0x4ced30]
mov ecx, dword [0x4cedb0]
cvtdq2pd xmm1, xmm1
mulsd xmm0, xmm1
cvttsd2si edx, xmm0
mov dword [eax*4 + 0x4cedc0], edx
cmp edx, ecx
jg 0x40b8d7
imul edx, dword [0x4cedb4]
push 0
push dword [0x4cba7c]
mov eax, edx
cdq
idiv ecx
add eax, 0x1e
push eax
push ebx
call dword [sym.imp.GDI32.dll_MoveToEx]
mov eax, dword [0x4cba7c]
add eax, 0xc8
push eax
mov eax, dword [0x4ced30]
mov eax, dword [eax*4 + 0x4cedc0]
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call edi
mov eax, dword [0x4ced30]
push dword [eax*4 + 0x4cedc0]
push 0x4c1524
push 0x4ced14
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [0x4ced10]
add esp, 0xc
add eax, dword [0x4cba7c]
push dword [0x4cedbc]
push 0x4ced14
push eax
mov eax, dword [0x4ced30]
mov eax, dword [eax*4 + 0x4cedc0]
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
add eax, 0x18
push eax
push ebx
call dword [sym.imp.GDI32.dll_TextOutW]
mov esi, dword [0x4cedbc]
mov eax, dword [0x4ced30]
add eax, 4
mov dword [0x4ced30], eax
mov dword [ebp - 0xc0c], eax
cmp eax, 0x1e
jle 0x40b7e0
mov dword [0x4ced30], 1
mov dword [ebp - 0xc0c], 1
nop dword [eax]
nop word [eax + eax]
movsd xmm0, qword [0x4c32f8]
lea eax, [esi - 2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
call fcn.00494600
movd xmm1, dword [ebp - 0xc0c]
mov eax, dword [0x4ced30]
cvtdq2pd xmm1, xmm1
mulsd xmm0, xmm1
cvttsd2si ecx, xmm0
mov dword [eax*4 + 0x4cedc0], ecx
cmp ecx, dword [0x4cedb0]
jg 0x40b9aa
imul ecx, dword [0x4cedb4]
push 0
push dword [0x4cba7c]
mov eax, ecx
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call dword [sym.imp.GDI32.dll_MoveToEx]
mov eax, dword [0x4cba7c]
add eax, 0xc8
push eax
mov eax, dword [0x4ced30]
mov eax, dword [eax*4 + 0x4cedc0]
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call edi
mov esi, dword [0x4cedbc]
mov eax, dword [0x4ced30]
inc eax
mov dword [0x4ced30], eax
mov dword [ebp - 0xc0c], eax
cmp eax, 0x1e
jle 0x40b910
jmp 0x40bdcf
cmp al, 0x33
je 0x40bbd6
cmp al, 0x34
je 0x40bbd6
mov dword [0x4ced30], 0xa
mov dword [ebp - 0xc0c], 0xa
nop dword [eax + eax]
movsd xmm0, qword [0x4c32f8]
lea eax, [esi - 2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
call fcn.00494600
movd xmm1, dword [ebp - 0xc0c]
mov eax, dword [0x4ced30]
mov ecx, dword [0x4cedb0]
cvtdq2pd xmm1, xmm1
mulsd xmm0, xmm1
cvttsd2si edx, xmm0
mov dword [eax*4 + 0x4cedc0], edx
cmp edx, ecx
jg 0x40bae7
imul edx, dword [0x4cedb4]
push 0
push dword [0x4cba7c]
mov eax, edx
cdq
idiv ecx
add eax, 0x1e
push eax
push ebx
call dword [sym.imp.GDI32.dll_MoveToEx]
mov eax, dword [0x4cba7c]
add eax, 0xc8
push eax
mov eax, dword [0x4ced30]
mov eax, dword [eax*4 + 0x4cedc0]
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call edi
mov eax, dword [0x4ced30]
push dword [eax*4 + 0x4cedc0]
push 0x4c1524
push 0x4ced14
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [0x4ced10]
add esp, 0xc
add eax, dword [0x4cba7c]
push dword [0x4cedbc]
push 0x4ced14
push eax
mov eax, dword [0x4ced30]
mov eax, dword [eax*4 + 0x4cedc0]
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
add eax, 0x18
push eax
push ebx
call dword [sym.imp.GDI32.dll_TextOutW]
mov esi, dword [0x4cedbc]
mov eax, dword [0x4ced30]
add eax, 0xa
mov dword [0x4ced30], eax
mov dword [ebp - 0xc0c], eax
cmp eax, 0x64
jle 0x40b9f0
mov dword [0x4ced30], 5
mov dword [ebp - 0xc0c], 5
nop dword [eax]
nop word [eax + eax]
movsd xmm0, qword [0x4c32f8]
lea eax, [esi - 2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
call fcn.00494600
movd xmm1, dword [ebp - 0xc0c]
mov eax, dword [0x4ced30]
cvtdq2pd xmm1, xmm1
mulsd xmm0, xmm1
cvttsd2si ecx, xmm0
mov dword [eax*4 + 0x4cedc0], ecx
cmp ecx, dword [0x4cedb0]
jg 0x40bbba
imul ecx, dword [0x4cedb4]
push 0
push dword [0x4cba7c]
mov eax, ecx
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call dword [sym.imp.GDI32.dll_MoveToEx]
mov eax, dword [0x4cba7c]
add eax, 0xc8
push eax
mov eax, dword [0x4ced30]
mov eax, dword [eax*4 + 0x4cedc0]
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call edi
mov esi, dword [0x4cedbc]
mov eax, dword [0x4ced30]
add eax, 5
mov dword [0x4ced30], eax
mov dword [ebp - 0xc0c], eax
cmp eax, 0x64
jle 0x40bb20
jmp 0x40bdcf
mov dword [0x4ced30], 5
mov dword [ebp - 0xc0c], 5
nop word [eax + eax]
movsd xmm0, qword [0x4c32f8]
lea eax, [esi - 2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
call fcn.00494600
movd xmm1, dword [ebp - 0xc0c]
mov eax, dword [0x4ced30]
mov ecx, dword [0x4cedb0]
cvtdq2pd xmm1, xmm1
mulsd xmm0, xmm1
cvttsd2si edx, xmm0
mov dword [eax*4 + 0x4cedc0], edx
cmp edx, ecx
jg 0x40bce7
imul edx, dword [0x4cedb4]
push 0
push dword [0x4cba7c]
mov eax, edx
cdq
idiv ecx
add eax, 0x1e
push eax
push ebx
call dword [sym.imp.GDI32.dll_MoveToEx]
mov eax, dword [0x4cba7c]
add eax, 0xc8
push eax
mov eax, dword [0x4ced30]
mov eax, dword [eax*4 + 0x4cedc0]
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call edi
mov eax, dword [0x4ced30]
push dword [eax*4 + 0x4cedc0]
push 0x4c1524
push 0x4ced14
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [0x4ced10]
add esp, 0xc
add eax, dword [0x4cba7c]
push dword [0x4cedbc]
push 0x4ced14
push eax
mov eax, dword [0x4ced30]
mov eax, dword [eax*4 + 0x4cedc0]
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
add eax, 0x18
push eax
push ebx
call dword [sym.imp.GDI32.dll_TextOutW]
mov esi, dword [0x4cedbc]
mov eax, dword [0x4ced30]
add eax, 5
mov dword [0x4ced30], eax
mov dword [ebp - 0xc0c], eax
cmp eax, 0x32
jle 0x40bbf0
mov dword [0x4ced30], 1
mov dword [ebp - 0xc0c], 1
nop dword [eax]
nop word [eax + eax]
movsd xmm0, qword [0x4c32f8]
lea eax, [esi - 2]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
call fcn.00494600
movd xmm1, dword [ebp - 0xc0c]
mov eax, dword [0x4ced30]
cvtdq2pd xmm1, xmm1
mulsd xmm0, xmm1
cvttsd2si ecx, xmm0
mov dword [eax*4 + 0x4cedc0], ecx
cmp ecx, dword [0x4cedb0]
jg 0x40bdba
imul ecx, dword [0x4cedb4]
push 0
push dword [0x4cba7c]
mov eax, ecx
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call dword [sym.imp.GDI32.dll_MoveToEx]
mov eax, dword [0x4cba7c]
add eax, 0xc8
push eax
mov eax, dword [0x4ced30]
mov eax, dword [eax*4 + 0x4cedc0]
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call edi
mov esi, dword [0x4cedbc]
mov eax, dword [0x4ced30]
inc eax
mov dword [0x4ced30], eax
mov dword [ebp - 0xc0c], eax
cmp eax, 0x32
jle 0x40bd20
cmp byte [0x4ced2d], 0
je 0x40bdea
mov eax, dword [0x4cedac]
add eax, 0xffffff9c
mov dword [0x4ced0c], eax
cmp eax, 1
jge 0x40bdf4
mov dword [0x4ced0c], 1
push 0x13
call dword [sym.imp.GDI32.dll_GetStockObject]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push eax
push ebx
call esi
cmp byte [0x4cf0eb], 0
mov eax, dword [0x4ced0c]
mov dword [0x4ced08], eax
jne 0x40be94
cmp byte [0x4cf0ea], 0
jne 0x40be94
cmp byte [0x4cf0e9], 0
jne 0x40be94
cmp byte [0x4cf0e8], 0
jne 0x40be94
cmp byte [0x4cf0e7], 0
jne 0x40be94
cmp byte [0x4cf0e6], 0
jne 0x40be94
cmp byte [0x4cf0e5], 0
jne 0x40be94
cmp byte [0x4cf0e4], 0
jne 0x40be94
cmp byte [0x4cedab], 0
jne 0x40be94
cmp byte [0x4cba80], 0
jne 0x40be94
cmp byte [0x4ceda9], 0
jne 0x40be94
push 0
push 1
push 0xf1
push 0xf2
push dword [0x4cec00]
mov byte [0x4ceda9], 1
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov ecx, dword [0x571144]
mov edx, 0x4d1
push 3
push 0xa
call fcn.00409e40
add esp, 8
cmp byte [0x4cedab], 0
je 0x40c13e
mov ecx, dword [0x571144]
mov edx, 0x4d1
push 0xd
push 0xa
call fcn.00409e40
add esp, 8
push dword [0x4ced78]
push ebx
call esi
cmp byte [0x4ced2d], 0
mov ecx, dword [0x4cba7c]
mov esi, dword [sym.imp.GDI32.dll_MoveToEx]
push 0
je 0x40bfff
mov eax, dword [0x4ced0c]
movzx eax, byte [eax + 0x4db8a8]
imul eax, dword [0x571128]
sub ecx, eax
add ecx, 0xc8
cmp dword [0x4cedac], 0x64
push ecx
push 0x1f
push ebx
jge 0x40bf86
call esi
mov edx, dword [0x4ced0c]
cmp edx, dword [0x4cedac]
jg 0x40c144
nop
movzx eax, byte [edx + 0x4db8a8]
imul eax, dword [0x571128]
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
inc edx
mov dword [0x4ced0c], edx
cmp edx, dword [0x4cedac]
jle 0x40bf30
jmp 0x40c144
call esi
mov edx, dword [0x4ced0c]
cmp edx, dword [0x4cedac]
jg 0x40c144
nop word [eax + eax]
movzx eax, byte [edx + 0x4db8a8]
imul eax, dword [0x571128]
sub edx, dword [0x4cedac]
mov ecx, dword [0x4cba7c]
add edx, 0x64
imul edx, dword [0x4cedb4]
sub ecx, eax
mov eax, 0x51eb851f
add ecx, 0xc8
push ecx
imul edx
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
inc edx
mov dword [0x4ced0c], edx
cmp edx, dword [0x4cedac]
jle 0x40bfa0
jmp 0x40c144
mov edx, dword [0x4ced0c]
movzx eax, byte [edx + 0x4db8a8]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
cmp byte [0x4cba81], 0
je 0x40c236
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
cmp esi, ecx
jg 0x40c13e
nop dword [eax]
nop dword [eax + eax]
movzx eax, byte [esi + 0x4db8a8]
mov dword [ebp - 0xc0c], eax
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
mov dword [0x4cf0f0], 1
cdq
idiv ecx
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
cmp eax, ecx
jne 0x40c0e4
mov edi, dword [0x4cedb0]
mov ebx, dword [0x4cf0f0]
cmp esi, edi
jg 0x40c0d8
inc esi
mov dword [0x4ced0c], esi
cmp esi, edi
jg 0x40c0b9
movzx eax, byte [esi + 0x4db8a8]
inc ebx
add dword [ebp - 0xc0c], eax
mov dword [0x4cf0f0], ebx
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
cdq
idiv edi
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv edi
cmp eax, ecx
je 0x40c096
mov ebx, dword [ebp - 0xc10]
mov edi, dword [sym.imp.GDI32.dll_LineTo]
mov eax, dword [ebp - 0xc0c]
cdq
idiv dword [0x4cf0f0]
imul esi, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
mov dword [0x4cf0ec], eax
imul eax, dword [0x571128]
sub ecx, eax
mov eax, esi
cdq
add ecx, 0xc8
idiv dword [0x4cedb0]
push ecx
add eax, 0x1e
push eax
push ebx
call edi
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
inc esi
mov dword [0x4ced0c], esi
cmp esi, ecx
jle 0x40c050
mov esi, dword [sym.imp.GDI32.dll_MoveToEx]
cmp byte [0x4cba80], 0
mov eax, dword [0x4ced08]
mov dword [0x4ced0c], eax
je 0x40c503
mov ecx, dword [0x571144]
mov edx, 0x4d1
push 4
push 0xa
call fcn.00409e40
add esp, 8
push dword [0x4ced7c]
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp byte [0x4ced2d], 0
mov ecx, dword [0x4cba7c]
push 0
je 0x40c33d
mov eax, dword [0x4ced0c]
movzx eax, byte [eax + 0x4cf170]
imul eax, dword [0x571128]
sub ecx, eax
add ecx, 0xc8
cmp dword [0x4cedac], 0x64
push ecx
push 0x1f
push ebx
jge 0x40c2ca
call esi
mov edx, dword [0x4ced0c]
cmp edx, dword [0x4cedac]
jg 0x40c503
nop dword [eax]
nop dword [eax + eax]
movzx eax, byte [edx + 0x4cf170]
imul eax, dword [0x571128]
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
inc edx
mov dword [0x4ced0c], edx
cmp edx, dword [0x4cedac]
jle 0x40c1e0
jmp 0x40c503
mov edx, dword [0x4ced0c]
mov ecx, dword [0x4cba7c]
push 0
movzx eax, byte [edx + 0x4db8a8]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
mov eax, dword [0x4ced0c]
cmp eax, dword [0x4cedb0]
jg 0x40c144
nop dword [eax]
nop word [eax + eax]
movzx ecx, byte [eax + 0x4db8a8]
imul ecx, dword [0x571128]
imul eax, dword [0x4cedb4]
mov edx, dword [0x4cba7c]
sub edx, ecx
add edx, 0xc8
push edx
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call edi
mov eax, dword [0x4ced0c]
inc eax
mov dword [0x4ced0c], eax
cmp eax, dword [0x4cedb0]
jle 0x40c280
jmp 0x40c144
call esi
mov edx, dword [0x4ced0c]
mov esi, dword [0x4cedac]
cmp edx, esi
jg 0x40c503
movzx eax, byte [edx + 0x4cf170]
sub edx, esi
imul eax, dword [0x571128]
add edx, 0x64
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
mov esi, dword [0x4cedac]
inc edx
mov dword [0x4ced0c], edx
cmp edx, esi
jle 0x40c2e0
jmp 0x40c503
mov edx, dword [0x4ced0c]
movzx eax, byte [edx + 0x4cf170]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
cmp byte [0x4cba81], 0
je 0x40c483
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
cmp esi, ecx
jg 0x40c503
nop dword [eax]
nop word [eax + eax]
movzx eax, byte [esi + 0x4cf170]
mov dword [ebp - 0xc0c], eax
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
mov dword [0x4cf0f0], 1
cdq
idiv ecx
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
cmp eax, ecx
jne 0x40c424
mov edi, dword [0x4cedb0]
mov ebx, dword [0x4cf0f0]
cmp esi, edi
jg 0x40c418
inc esi
mov dword [0x4ced0c], esi
cmp esi, edi
jg 0x40c3f9
movzx eax, byte [esi + 0x4cf170]
inc ebx
add dword [ebp - 0xc0c], eax
mov dword [0x4cf0f0], ebx
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
cdq
idiv edi
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv edi
cmp eax, ecx
je 0x40c3d6
mov ebx, dword [ebp - 0xc10]
mov edi, dword [sym.imp.GDI32.dll_LineTo]
mov eax, dword [ebp - 0xc0c]
cdq
idiv dword [0x4cf0f0]
imul esi, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
mov dword [0x4cf0ec], eax
imul eax, dword [0x571128]
sub ecx, eax
mov eax, esi
cdq
add ecx, 0xc8
idiv dword [0x4cedb0]
push ecx
add eax, 0x1e
push eax
push ebx
call edi
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
inc esi
mov dword [0x4ced0c], esi
cmp esi, ecx
jle 0x40c390
jmp 0x40c503
mov edx, dword [0x4ced0c]
mov ecx, dword [0x4cba7c]
push 0
movzx eax, byte [edx + 0x4cf170]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
mov eax, dword [0x4ced0c]
mov esi, dword [0x4cedb0]
cmp eax, esi
jg 0x40c503
nop
movzx ecx, byte [eax + 0x4cf170]
imul ecx, dword [0x571128]
imul eax, dword [0x4cedb4]
mov edx, dword [0x4cba7c]
sub edx, ecx
add edx, 0xc8
push edx
cdq
idiv esi
add eax, 0x1e
push eax
push ebx
call edi
mov eax, dword [0x4ced0c]
mov esi, dword [0x4cedb0]
inc eax
mov dword [0x4ced0c], eax
cmp eax, esi
jle 0x40c4c0
cmp byte [0x4ceda9], 0
mov eax, dword [0x4ced08]
mov dword [0x4ced0c], eax
je 0x40c5f1
cmp dword [0x571128], 2
jne 0x40c5f1
mov ecx, dword [0x571144]
mov edx, 0x4d1
push 0xe
push 0xa
call fcn.00409e40
add esp, 8
push dword [0x4ced80]
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp byte [0x4ced2d], 0
mov ecx, dword [0x4cba7c]
push 0
je 0x40c76d
mov eax, dword [0x4ced0c]
movzx eax, byte [eax + 0x4f4718]
imul eax, dword [0x571128]
sub ecx, eax
add ecx, 0xc8
cmp dword [0x4cedac], 0x64
push ecx
push 0x1f
push ebx
jge 0x40c6f6
call dword [sym.imp.GDI32.dll_MoveToEx]
mov edx, dword [0x4ced0c]
cmp edx, dword [0x4cedac]
jg 0x40c5f1
movzx eax, byte [edx + 0x4f4718]
imul eax, dword [0x571128]
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
inc edx
mov dword [0x4ced0c], edx
cmp edx, dword [0x4cedac]
jle 0x40c5a0
mov esi, dword [sym.imp.GDI32.dll_MoveToEx]
cmp byte [0x4ceda9], 0
mov eax, dword [0x4ced08]
mov dword [0x4ced0c], eax
je 0x40cb73
cmp dword [0x571128], 1
jne 0x40cb73
mov ecx, dword [0x571144]
mov edx, 0x4d1
push 0xe
push 0xa
call fcn.00409e40
add esp, 8
push dword [0x4ced80]
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp byte [0x4ced2d], 0
mov ecx, dword [0x4cba7c]
push 0
je 0x40c9ad
mov eax, dword [0x4ced0c]
movzx eax, byte [eax + 0x4e7fe0]
imul eax, dword [0x571128]
sub ecx, eax
add ecx, 0xc8
cmp dword [0x4cedac], 0x64
push ecx
push 0x1f
push ebx
jge 0x40c93a
call esi
mov edx, dword [0x4ced0c]
cmp edx, dword [0x4cedac]
jg 0x40cb73
nop dword [eax]
nop dword [eax + eax]
movzx eax, byte [edx + 0x4e7fe0]
imul eax, dword [0x571128]
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
inc edx
mov dword [0x4ced0c], edx
cmp edx, dword [0x4cedac]
jle 0x40c6a0
jmp 0x40cb73
call dword [sym.imp.GDI32.dll_MoveToEx]
mov edx, dword [0x4ced0c]
mov esi, dword [0x4cedac]
cmp edx, esi
jg 0x40c5f1
movzx eax, byte [edx + 0x4f4718]
sub edx, esi
imul eax, dword [0x571128]
add edx, 0x64
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
mov esi, dword [0x4cedac]
inc edx
mov dword [0x4ced0c], edx
cmp edx, esi
jle 0x40c710
jmp 0x40c5f1
mov edx, dword [0x4ced0c]
mov esi, dword [sym.imp.GDI32.dll_MoveToEx]
movzx eax, byte [edx + 0x4f4718]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
cmp byte [0x4cba81], 0
je 0x40c8b3
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
cmp esi, ecx
jg 0x40c5f1
nop dword [eax + eax]
movzx eax, byte [esi + 0x4f4718]
mov dword [ebp - 0xc0c], eax
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
mov dword [0x4cf0f0], 1
cdq
idiv ecx
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
cmp eax, ecx
jne 0x40c854
mov edi, dword [0x4cedb0]
mov ebx, dword [0x4cf0f0]
cmp esi, edi
jg 0x40c848
inc esi
mov dword [0x4ced0c], esi
cmp esi, edi
jg 0x40c829
movzx eax, byte [esi + 0x4f4718]
inc ebx
add dword [ebp - 0xc0c], eax
mov dword [0x4cf0f0], ebx
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
cdq
idiv edi
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv edi
cmp eax, ecx
je 0x40c806
mov ebx, dword [ebp - 0xc10]
mov edi, dword [sym.imp.GDI32.dll_LineTo]
mov eax, dword [ebp - 0xc0c]
cdq
idiv dword [0x4cf0f0]
imul esi, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
mov dword [0x4cf0ec], eax
imul eax, dword [0x571128]
sub ecx, eax
mov eax, esi
cdq
add ecx, 0xc8
idiv dword [0x4cedb0]
push ecx
add eax, 0x1e
push eax
push ebx
call edi
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
inc esi
mov dword [0x4ced0c], esi
cmp esi, ecx
jle 0x40c7c0
jmp 0x40c5f1
mov edx, dword [0x4ced0c]
mov ecx, dword [0x4cba7c]
push 0
movzx eax, byte [edx + 0x4f4718]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
mov eax, dword [0x4ced0c]
cmp eax, dword [0x4cedb0]
jg 0x40c5f7
movzx ecx, byte [eax + 0x4f4718]
imul ecx, dword [0x571128]
imul eax, dword [0x4cedb4]
mov edx, dword [0x4cba7c]
sub edx, ecx
add edx, 0xc8
push edx
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call edi
mov eax, dword [0x4ced0c]
inc eax
mov dword [0x4ced0c], eax
cmp eax, dword [0x4cedb0]
jle 0x40c8f0
jmp 0x40c5f7
call esi
mov edx, dword [0x4ced0c]
mov esi, dword [0x4cedac]
cmp edx, esi
jg 0x40cb73
movzx eax, byte [edx + 0x4e7fe0]
sub edx, esi
imul eax, dword [0x571128]
add edx, 0x64
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
mov esi, dword [0x4cedac]
inc edx
mov dword [0x4ced0c], edx
cmp edx, esi
jle 0x40c950
jmp 0x40cb73
mov edx, dword [0x4ced0c]
movzx eax, byte [edx + 0x4e7fe0]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
cmp byte [0x4cba81], 0
je 0x40caf3
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
cmp esi, ecx
jg 0x40cb73
nop dword [eax]
nop word [eax + eax]
movzx eax, byte [esi + 0x4e7fe0]
mov dword [ebp - 0xc0c], eax
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
mov dword [0x4cf0f0], 1
cdq
idiv ecx
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
cmp eax, ecx
jne 0x40ca94
mov edi, dword [0x4cedb0]
mov ebx, dword [0x4cf0f0]
cmp esi, edi
jg 0x40ca88
inc esi
mov dword [0x4ced0c], esi
cmp esi, edi
jg 0x40ca69
movzx eax, byte [esi + 0x4e7fe0]
inc ebx
add dword [ebp - 0xc0c], eax
mov dword [0x4cf0f0], ebx
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
cdq
idiv edi
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv edi
cmp eax, ecx
je 0x40ca46
mov ebx, dword [ebp - 0xc10]
mov edi, dword [sym.imp.GDI32.dll_LineTo]
mov eax, dword [ebp - 0xc0c]
cdq
idiv dword [0x4cf0f0]
imul esi, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
mov dword [0x4cf0ec], eax
imul eax, dword [0x571128]
sub ecx, eax
mov eax, esi
cdq
add ecx, 0xc8
idiv dword [0x4cedb0]
push ecx
add eax, 0x1e
push eax
push ebx
call edi
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
inc esi
mov dword [0x4ced0c], esi
cmp esi, ecx
jle 0x40ca00
jmp 0x40cb73
mov edx, dword [0x4ced0c]
mov ecx, dword [0x4cba7c]
push 0
movzx eax, byte [edx + 0x4e7fe0]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
mov eax, dword [0x4ced0c]
mov esi, dword [0x4cedb0]
cmp eax, esi
jg 0x40cb73
nop
movzx ecx, byte [eax + 0x4e7fe0]
imul ecx, dword [0x571128]
imul eax, dword [0x4cedb4]
mov edx, dword [0x4cba7c]
sub edx, ecx
add edx, 0xc8
push edx
cdq
idiv esi
add eax, 0x1e
push eax
push ebx
call edi
mov eax, dword [0x4ced0c]
mov esi, dword [0x4cedb0]
inc eax
mov dword [0x4ced0c], eax
cmp eax, esi
jle 0x40cb30
cmp byte [0x4cf0eb], 0
mov eax, dword [0x4ced08]
mov dword [0x4ced0c], eax
je 0x40ce1e
mov ecx, dword [0x571144]
mov edx, 0x4d1
push 5
push 0xa
call fcn.00409e40
add esp, 8
push dword [0x4ceda0]
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp byte [0x4ced2d], 0
mov ecx, dword [0x4cba7c]
mov esi, dword [sym.imp.GDI32.dll_MoveToEx]
push 0
je 0x40ccdf
mov eax, dword [0x4ced0c]
movzx eax, byte [eax + 0x5580d8]
imul eax, dword [0x571128]
sub ecx, eax
add ecx, 0xc8
cmp dword [0x4cedac], 0x64
push ecx
push 0x1f
push ebx
jge 0x40cc66
call esi
mov edx, dword [0x4ced0c]
cmp edx, dword [0x4cedac]
jg 0x40ce24
nop word [eax + eax]
movzx eax, byte [edx + 0x5580d8]
imul eax, dword [0x571128]
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
inc edx
mov dword [0x4ced0c], edx
cmp edx, dword [0x4cedac]
jle 0x40cc10
jmp 0x40ce24
call esi
mov edx, dword [0x4ced0c]
cmp edx, dword [0x4cedac]
jg 0x40ce24
nop word [eax + eax]
movzx eax, byte [edx + 0x5580d8]
imul eax, dword [0x571128]
sub edx, dword [0x4cedac]
mov ecx, dword [0x4cba7c]
add edx, 0x64
imul edx, dword [0x4cedb4]
sub ecx, eax
mov eax, 0x51eb851f
add ecx, 0xc8
push ecx
imul edx
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
inc edx
mov dword [0x4ced0c], edx
cmp edx, dword [0x4cedac]
jle 0x40cc80
jmp 0x40ce24
mov edx, dword [0x4ced0c]
movzx eax, byte [edx + 0x5580d8]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
cmp byte [0x4cba81], 0
je 0x40cf16
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
cmp esi, ecx
jg 0x40ce1e
nop dword [eax]
nop dword [eax + eax]
movzx eax, byte [esi + 0x5580d8]
mov dword [ebp - 0xc0c], eax
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
mov dword [0x4cf0f0], 1
cdq
idiv ecx
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
cmp eax, ecx
jne 0x40cdc4
mov edi, dword [0x4cedb0]
mov ebx, dword [0x4cf0f0]
cmp esi, edi
jg 0x40cdb8
inc esi
mov dword [0x4ced0c], esi
cmp esi, edi
jg 0x40cd99
movzx eax, byte [esi + 0x5580d8]
inc ebx
add dword [ebp - 0xc0c], eax
mov dword [0x4cf0f0], ebx
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
cdq
idiv edi
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv edi
cmp eax, ecx
je 0x40cd76
mov ebx, dword [ebp - 0xc10]
mov edi, dword [sym.imp.GDI32.dll_LineTo]
mov eax, dword [ebp - 0xc0c]
cdq
idiv dword [0x4cf0f0]
imul esi, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
mov dword [0x4cf0ec], eax
imul eax, dword [0x571128]
sub ecx, eax
mov eax, esi
cdq
add ecx, 0xc8
idiv dword [0x4cedb0]
push ecx
add eax, 0x1e
push eax
push ebx
call edi
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
inc esi
mov dword [0x4ced0c], esi
cmp esi, ecx
jle 0x40cd30
mov esi, dword [sym.imp.GDI32.dll_MoveToEx]
cmp byte [0x4cf0ea], 0
mov eax, dword [0x4ced08]
mov dword [0x4ced0c], eax
je 0x40d1e3
mov ecx, dword [0x571144]
mov edx, 0x4d1
push 6
push 0xa
call fcn.00409e40
add esp, 8
push dword [0x4ced9c]
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp byte [0x4ced2d], 0
mov ecx, dword [0x4cba7c]
push 0
je 0x40d01d
mov eax, dword [0x4ced0c]
movzx eax, byte [eax + 0x54b9a0]
imul eax, dword [0x571128]
sub ecx, eax
add ecx, 0xc8
cmp dword [0x4cedac], 0x64
push ecx
push 0x1f
push ebx
jge 0x40cfaa
call esi
mov edx, dword [0x4ced0c]
cmp edx, dword [0x4cedac]
jg 0x40d1e3
nop dword [eax]
nop dword [eax + eax]
movzx eax, byte [edx + 0x54b9a0]
imul eax, dword [0x571128]
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
inc edx
mov dword [0x4ced0c], edx
cmp edx, dword [0x4cedac]
jle 0x40cec0
jmp 0x40d1e3
mov edx, dword [0x4ced0c]
mov ecx, dword [0x4cba7c]
push 0
movzx eax, byte [edx + 0x5580d8]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
mov eax, dword [0x4ced0c]
cmp eax, dword [0x4cedb0]
jg 0x40ce24
nop dword [eax]
nop word [eax + eax]
movzx ecx, byte [eax + 0x5580d8]
imul ecx, dword [0x571128]
imul eax, dword [0x4cedb4]
mov edx, dword [0x4cba7c]
sub edx, ecx
add edx, 0xc8
push edx
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call edi
mov eax, dword [0x4ced0c]
inc eax
mov dword [0x4ced0c], eax
cmp eax, dword [0x4cedb0]
jle 0x40cf60
jmp 0x40ce24
call esi
mov edx, dword [0x4ced0c]
mov esi, dword [0x4cedac]
cmp edx, esi
jg 0x40d1e3
movzx eax, byte [edx + 0x54b9a0]
sub edx, esi
imul eax, dword [0x571128]
add edx, 0x64
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
mov esi, dword [0x4cedac]
inc edx
mov dword [0x4ced0c], edx
cmp edx, esi
jle 0x40cfc0
jmp 0x40d1e3
mov edx, dword [0x4ced0c]
movzx eax, byte [edx + 0x54b9a0]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
cmp byte [0x4cba81], 0
je 0x40d163
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
cmp esi, ecx
jg 0x40d1e3
nop dword [eax]
nop word [eax + eax]
movzx eax, byte [esi + 0x54b9a0]
mov dword [ebp - 0xc0c], eax
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
mov dword [0x4cf0f0], 1
cdq
idiv ecx
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
cmp eax, ecx
jne 0x40d104
mov edi, dword [0x4cedb0]
mov ebx, dword [0x4cf0f0]
cmp esi, edi
jg 0x40d0f8
inc esi
mov dword [0x4ced0c], esi
cmp esi, edi
jg 0x40d0d9
movzx eax, byte [esi + 0x54b9a0]
inc ebx
add dword [ebp - 0xc0c], eax
mov dword [0x4cf0f0], ebx
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
cdq
idiv edi
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv edi
cmp eax, ecx
je 0x40d0b6
mov ebx, dword [ebp - 0xc10]
mov edi, dword [sym.imp.GDI32.dll_LineTo]
mov eax, dword [ebp - 0xc0c]
cdq
idiv dword [0x4cf0f0]
imul esi, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
mov dword [0x4cf0ec], eax
imul eax, dword [0x571128]
sub ecx, eax
mov eax, esi
cdq
add ecx, 0xc8
idiv dword [0x4cedb0]
push ecx
add eax, 0x1e
push eax
push ebx
call edi
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
inc esi
mov dword [0x4ced0c], esi
cmp esi, ecx
jle 0x40d070
jmp 0x40d1e3
mov edx, dword [0x4ced0c]
mov ecx, dword [0x4cba7c]
push 0
movzx eax, byte [edx + 0x54b9a0]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
mov eax, dword [0x4ced0c]
mov esi, dword [0x4cedb0]
cmp eax, esi
jg 0x40d1e3
nop
movzx ecx, byte [eax + 0x54b9a0]
imul ecx, dword [0x571128]
imul eax, dword [0x4cedb4]
mov edx, dword [0x4cba7c]
sub edx, ecx
add edx, 0xc8
push edx
cdq
idiv esi
add eax, 0x1e
push eax
push ebx
call edi
mov eax, dword [0x4ced0c]
mov esi, dword [0x4cedb0]
inc eax
mov dword [0x4ced0c], eax
cmp eax, esi
jle 0x40d1a0
cmp byte [0x4cf0e9], 0
mov eax, dword [0x4ced08]
mov dword [0x4ced0c], eax
je 0x40d48e
mov ecx, dword [0x571144]
mov edx, 0x4d1
push 7
push 0xa
call fcn.00409e40
add esp, 8
push dword [0x4ced98]
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp byte [0x4ced2d], 0
mov ecx, dword [0x4cba7c]
mov esi, dword [sym.imp.GDI32.dll_MoveToEx]
push 0
je 0x40d34f
mov eax, dword [0x4ced0c]
movzx eax, byte [eax + 0x53f268]
imul eax, dword [0x571128]
sub ecx, eax
add ecx, 0xc8
cmp dword [0x4cedac], 0x64
push ecx
push 0x1f
push ebx
jge 0x40d2d6
call esi
mov edx, dword [0x4ced0c]
cmp edx, dword [0x4cedac]
jg 0x40d494
nop word [eax + eax]
movzx eax, byte [edx + 0x53f268]
imul eax, dword [0x571128]
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
inc edx
mov dword [0x4ced0c], edx
cmp edx, dword [0x4cedac]
jle 0x40d280
jmp 0x40d494
call esi
mov edx, dword [0x4ced0c]
cmp edx, dword [0x4cedac]
jg 0x40d494
nop word [eax + eax]
movzx eax, byte [edx + 0x53f268]
imul eax, dword [0x571128]
sub edx, dword [0x4cedac]
mov ecx, dword [0x4cba7c]
add edx, 0x64
imul edx, dword [0x4cedb4]
sub ecx, eax
mov eax, 0x51eb851f
add ecx, 0xc8
push ecx
imul edx
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
inc edx
mov dword [0x4ced0c], edx
cmp edx, dword [0x4cedac]
jle 0x40d2f0
jmp 0x40d494
mov edx, dword [0x4ced0c]
movzx eax, byte [edx + 0x53f268]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
cmp byte [0x4cba81], 0
je 0x40d586
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
cmp esi, ecx
jg 0x40d48e
nop dword [eax]
nop dword [eax + eax]
movzx eax, byte [esi + 0x53f268]
mov dword [ebp - 0xc0c], eax
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
mov dword [0x4cf0f0], 1
cdq
idiv ecx
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
cmp eax, ecx
jne 0x40d434
mov edi, dword [0x4cedb0]
mov ebx, dword [0x4cf0f0]
cmp esi, edi
jg 0x40d428
inc esi
mov dword [0x4ced0c], esi
cmp esi, edi
jg 0x40d409
movzx eax, byte [esi + 0x53f268]
inc ebx
add dword [ebp - 0xc0c], eax
mov dword [0x4cf0f0], ebx
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
cdq
idiv edi
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv edi
cmp eax, ecx
je 0x40d3e6
mov ebx, dword [ebp - 0xc10]
mov edi, dword [sym.imp.GDI32.dll_LineTo]
mov eax, dword [ebp - 0xc0c]
cdq
idiv dword [0x4cf0f0]
imul esi, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
mov dword [0x4cf0ec], eax
imul eax, dword [0x571128]
sub ecx, eax
mov eax, esi
cdq
add ecx, 0xc8
idiv dword [0x4cedb0]
push ecx
add eax, 0x1e
push eax
push ebx
call edi
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
inc esi
mov dword [0x4ced0c], esi
cmp esi, ecx
jle 0x40d3a0
mov esi, dword [sym.imp.GDI32.dll_MoveToEx]
cmp byte [0x4cf0e8], 0
mov eax, dword [0x4ced08]
mov dword [0x4ced0c], eax
je 0x40d853
mov ecx, dword [0x571144]
mov edx, 0x4d1
push 8
push 0xa
call fcn.00409e40
add esp, 8
push dword [0x4ced94]
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp byte [0x4ced2d], 0
mov ecx, dword [0x4cba7c]
push 0
je 0x40d68d
mov eax, dword [0x4ced0c]
movzx eax, byte [eax + 0x532b30]
imul eax, dword [0x571128]
sub ecx, eax
add ecx, 0xc8
cmp dword [0x4cedac], 0x64
push ecx
push 0x1f
push ebx
jge 0x40d61a
call esi
mov edx, dword [0x4ced0c]
cmp edx, dword [0x4cedac]
jg 0x40d853
nop dword [eax]
nop dword [eax + eax]
movzx eax, byte [edx + 0x532b30]
imul eax, dword [0x571128]
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
inc edx
mov dword [0x4ced0c], edx
cmp edx, dword [0x4cedac]
jle 0x40d530
jmp 0x40d853
mov edx, dword [0x4ced0c]
mov ecx, dword [0x4cba7c]
push 0
movzx eax, byte [edx + 0x53f268]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
mov eax, dword [0x4ced0c]
cmp eax, dword [0x4cedb0]
jg 0x40d494
nop dword [eax]
nop word [eax + eax]
movzx ecx, byte [eax + 0x53f268]
imul ecx, dword [0x571128]
imul eax, dword [0x4cedb4]
mov edx, dword [0x4cba7c]
sub edx, ecx
add edx, 0xc8
push edx
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call edi
mov eax, dword [0x4ced0c]
inc eax
mov dword [0x4ced0c], eax
cmp eax, dword [0x4cedb0]
jle 0x40d5d0
jmp 0x40d494
call esi
mov edx, dword [0x4ced0c]
mov esi, dword [0x4cedac]
cmp edx, esi
jg 0x40d853
movzx eax, byte [edx + 0x532b30]
sub edx, esi
imul eax, dword [0x571128]
add edx, 0x64
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
mov esi, dword [0x4cedac]
inc edx
mov dword [0x4ced0c], edx
cmp edx, esi
jle 0x40d630
jmp 0x40d853
mov edx, dword [0x4ced0c]
movzx eax, byte [edx + 0x532b30]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
cmp byte [0x4cba81], 0
je 0x40d7d3
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
cmp esi, ecx
jg 0x40d853
nop dword [eax]
nop word [eax + eax]
movzx eax, byte [esi + 0x532b30]
mov dword [ebp - 0xc0c], eax
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
mov dword [0x4cf0f0], 1
cdq
idiv ecx
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
cmp eax, ecx
jne 0x40d774
mov edi, dword [0x4cedb0]
mov ebx, dword [0x4cf0f0]
cmp esi, edi
jg 0x40d768
inc esi
mov dword [0x4ced0c], esi
cmp esi, edi
jg 0x40d749
movzx eax, byte [esi + 0x532b30]
inc ebx
add dword [ebp - 0xc0c], eax
mov dword [0x4cf0f0], ebx
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
cdq
idiv edi
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv edi
cmp eax, ecx
je 0x40d726
mov ebx, dword [ebp - 0xc10]
mov edi, dword [sym.imp.GDI32.dll_LineTo]
mov eax, dword [ebp - 0xc0c]
cdq
idiv dword [0x4cf0f0]
imul esi, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
mov dword [0x4cf0ec], eax
imul eax, dword [0x571128]
sub ecx, eax
mov eax, esi
cdq
add ecx, 0xc8
idiv dword [0x4cedb0]
push ecx
add eax, 0x1e
push eax
push ebx
call edi
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
inc esi
mov dword [0x4ced0c], esi
cmp esi, ecx
jle 0x40d6e0
jmp 0x40d853
mov edx, dword [0x4ced0c]
mov ecx, dword [0x4cba7c]
push 0
movzx eax, byte [edx + 0x532b30]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
mov eax, dword [0x4ced0c]
mov esi, dword [0x4cedb0]
cmp eax, esi
jg 0x40d853
nop
movzx ecx, byte [eax + 0x532b30]
imul ecx, dword [0x571128]
imul eax, dword [0x4cedb4]
mov edx, dword [0x4cba7c]
sub edx, ecx
add edx, 0xc8
push edx
cdq
idiv esi
add eax, 0x1e
push eax
push ebx
call edi
mov eax, dword [0x4ced0c]
mov esi, dword [0x4cedb0]
inc eax
mov dword [0x4ced0c], eax
cmp eax, esi
jle 0x40d810
cmp byte [0x4cf0e7], 0
mov eax, dword [0x4ced08]
mov dword [0x4ced0c], eax
je 0x40dafe
mov ecx, dword [0x571144]
mov edx, 0x4d1
push 9
push 0xa
call fcn.00409e40
add esp, 8
push dword [0x4ced90]
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp byte [0x4ced2d], 0
mov ecx, dword [0x4cba7c]
mov esi, dword [sym.imp.GDI32.dll_MoveToEx]
push 0
je 0x40d9bf
mov eax, dword [0x4ced0c]
movzx eax, byte [eax + 0x5263f8]
imul eax, dword [0x571128]
sub ecx, eax
add ecx, 0xc8
cmp dword [0x4cedac], 0x64
push ecx
push 0x1f
push ebx
jge 0x40d946
call esi
mov edx, dword [0x4ced0c]
cmp edx, dword [0x4cedac]
jg 0x40db04
nop dword [eax]
movzx eax, byte [edx + 0x5263f8]
imul eax, dword [0x571128]
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
inc edx
mov dword [0x4ced0c], edx
cmp edx, dword [0x4cedac]
jle 0x40d8f0
jmp 0x40db04
call esi
mov edx, dword [0x4ced0c]
cmp edx, dword [0x4cedac]
jg 0x40db04
nop word [eax + eax]
movzx eax, byte [edx + 0x5263f8]
imul eax, dword [0x571128]
sub edx, dword [0x4cedac]
mov ecx, dword [0x4cba7c]
add edx, 0x64
imul edx, dword [0x4cedb4]
sub ecx, eax
mov eax, 0x51eb851f
add ecx, 0xc8
push ecx
imul edx
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
inc edx
mov dword [0x4ced0c], edx
cmp edx, dword [0x4cedac]
jle 0x40d960
jmp 0x40db04
mov edx, dword [0x4ced0c]
movzx eax, byte [edx + 0x5263f8]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
cmp byte [0x4cba81], 0
je 0x40dbf6
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
cmp esi, ecx
jg 0x40dafe
nop dword [eax]
nop dword [eax + eax]
movzx eax, byte [esi + 0x5263f8]
mov dword [ebp - 0xc0c], eax
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
mov dword [0x4cf0f0], 1
cdq
idiv ecx
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
cmp eax, ecx
jne 0x40daa4
mov edi, dword [0x4cedb0]
mov ebx, dword [0x4cf0f0]
cmp esi, edi
jg 0x40da98
inc esi
mov dword [0x4ced0c], esi
cmp esi, edi
jg 0x40da79
movzx eax, byte [esi + 0x5263f8]
inc ebx
add dword [ebp - 0xc0c], eax
mov dword [0x4cf0f0], ebx
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
cdq
idiv edi
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv edi
cmp eax, ecx
je 0x40da56
mov ebx, dword [ebp - 0xc10]
mov edi, dword [sym.imp.GDI32.dll_LineTo]
mov eax, dword [ebp - 0xc0c]
cdq
idiv dword [0x4cf0f0]
imul esi, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
mov dword [0x4cf0ec], eax
imul eax, dword [0x571128]
sub ecx, eax
mov eax, esi
cdq
add ecx, 0xc8
idiv dword [0x4cedb0]
push ecx
add eax, 0x1e
push eax
push ebx
call edi
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
inc esi
mov dword [0x4ced0c], esi
cmp esi, ecx
jle 0x40da10
mov esi, dword [sym.imp.GDI32.dll_MoveToEx]
cmp byte [0x4cf0e6], 0
mov eax, dword [0x4ced08]
mov dword [0x4ced0c], eax
je 0x40dec3
mov ecx, dword [0x571144]
mov edx, 0x4d1
push 0xa
push 0xa
call fcn.00409e40
add esp, 8
push dword [0x4ced8c]
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp byte [0x4ced2d], 0
mov ecx, dword [0x4cba7c]
push 0
je 0x40dcfd
mov eax, dword [0x4ced0c]
movzx eax, byte [eax + 0x519cc0]
imul eax, dword [0x571128]
sub ecx, eax
add ecx, 0xc8
cmp dword [0x4cedac], 0x64
push ecx
push 0x1f
push ebx
jge 0x40dc8a
call esi
mov edx, dword [0x4ced0c]
cmp edx, dword [0x4cedac]
jg 0x40dec3
nop dword [eax]
nop dword [eax + eax]
movzx eax, byte [edx + 0x519cc0]
imul eax, dword [0x571128]
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
inc edx
mov dword [0x4ced0c], edx
cmp edx, dword [0x4cedac]
jle 0x40dba0
jmp 0x40dec3
mov edx, dword [0x4ced0c]
mov ecx, dword [0x4cba7c]
push 0
movzx eax, byte [edx + 0x5263f8]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
mov eax, dword [0x4ced0c]
cmp eax, dword [0x4cedb0]
jg 0x40db04
nop dword [eax]
nop word [eax + eax]
movzx ecx, byte [eax + 0x5263f8]
imul ecx, dword [0x571128]
imul eax, dword [0x4cedb4]
mov edx, dword [0x4cba7c]
sub edx, ecx
add edx, 0xc8
push edx
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call edi
mov eax, dword [0x4ced0c]
inc eax
mov dword [0x4ced0c], eax
cmp eax, dword [0x4cedb0]
jle 0x40dc40
jmp 0x40db04
call esi
mov edx, dword [0x4ced0c]
mov esi, dword [0x4cedac]
cmp edx, esi
jg 0x40dec3
movzx eax, byte [edx + 0x519cc0]
sub edx, esi
imul eax, dword [0x571128]
add edx, 0x64
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
mov esi, dword [0x4cedac]
inc edx
mov dword [0x4ced0c], edx
cmp edx, esi
jle 0x40dca0
jmp 0x40dec3
mov edx, dword [0x4ced0c]
movzx eax, byte [edx + 0x519cc0]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
cmp byte [0x4cba81], 0
je 0x40de43
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
cmp esi, ecx
jg 0x40dec3
nop dword [eax]
nop word [eax + eax]
movzx eax, byte [esi + 0x519cc0]
mov dword [ebp - 0xc0c], eax
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
mov dword [0x4cf0f0], 1
cdq
idiv ecx
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
cmp eax, ecx
jne 0x40dde4
mov edi, dword [0x4cedb0]
mov ebx, dword [0x4cf0f0]
cmp esi, edi
jg 0x40ddd8
inc esi
mov dword [0x4ced0c], esi
cmp esi, edi
jg 0x40ddb9
movzx eax, byte [esi + 0x519cc0]
inc ebx
add dword [ebp - 0xc0c], eax
mov dword [0x4cf0f0], ebx
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
cdq
idiv edi
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv edi
cmp eax, ecx
je 0x40dd96
mov ebx, dword [ebp - 0xc10]
mov edi, dword [sym.imp.GDI32.dll_LineTo]
mov eax, dword [ebp - 0xc0c]
cdq
idiv dword [0x4cf0f0]
imul esi, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
mov dword [0x4cf0ec], eax
imul eax, dword [0x571128]
sub ecx, eax
mov eax, esi
cdq
add ecx, 0xc8
idiv dword [0x4cedb0]
push ecx
add eax, 0x1e
push eax
push ebx
call edi
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
inc esi
mov dword [0x4ced0c], esi
cmp esi, ecx
jle 0x40dd50
jmp 0x40dec3
mov edx, dword [0x4ced0c]
mov ecx, dword [0x4cba7c]
push 0
movzx eax, byte [edx + 0x519cc0]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
mov eax, dword [0x4ced0c]
mov esi, dword [0x4cedb0]
cmp eax, esi
jg 0x40dec3
nop
movzx ecx, byte [eax + 0x519cc0]
imul ecx, dword [0x571128]
imul eax, dword [0x4cedb4]
mov edx, dword [0x4cba7c]
sub edx, ecx
add edx, 0xc8
push edx
cdq
idiv esi
add eax, 0x1e
push eax
push ebx
call edi
mov eax, dword [0x4ced0c]
mov esi, dword [0x4cedb0]
inc eax
mov dword [0x4ced0c], eax
cmp eax, esi
jle 0x40de80
cmp byte [0x4cf0e5], 0
mov eax, dword [0x4ced08]
mov dword [0x4ced0c], eax
je 0x40e16e
mov ecx, dword [0x571144]
mov edx, 0x4d1
push 0xb
push 0xa
call fcn.00409e40
add esp, 8
push dword [0x4ced88]
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp byte [0x4ced2d], 0
mov ecx, dword [0x4cba7c]
mov esi, dword [sym.imp.GDI32.dll_MoveToEx]
push 0
je 0x40e02f
mov eax, dword [0x4ced0c]
movzx eax, byte [eax + 0x50d588]
imul eax, dword [0x571128]
sub ecx, eax
add ecx, 0xc8
cmp dword [0x4cedac], 0x64
push ecx
push 0x1f
push ebx
jge 0x40dfb6
call esi
mov edx, dword [0x4ced0c]
cmp edx, dword [0x4cedac]
jg 0x40e174
nop dword [eax]
movzx eax, byte [edx + 0x50d588]
imul eax, dword [0x571128]
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
inc edx
mov dword [0x4ced0c], edx
cmp edx, dword [0x4cedac]
jle 0x40df60
jmp 0x40e174
call esi
mov edx, dword [0x4ced0c]
cmp edx, dword [0x4cedac]
jg 0x40e174
nop word [eax + eax]
movzx eax, byte [edx + 0x50d588]
imul eax, dword [0x571128]
sub edx, dword [0x4cedac]
mov ecx, dword [0x4cba7c]
add edx, 0x64
imul edx, dword [0x4cedb4]
sub ecx, eax
mov eax, 0x51eb851f
add ecx, 0xc8
push ecx
imul edx
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
inc edx
mov dword [0x4ced0c], edx
cmp edx, dword [0x4cedac]
jle 0x40dfd0
jmp 0x40e174
mov edx, dword [0x4ced0c]
movzx eax, byte [edx + 0x50d588]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
cmp byte [0x4cba81], 0
je 0x40e266
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
cmp esi, ecx
jg 0x40e16e
nop dword [eax]
nop dword [eax + eax]
movzx eax, byte [esi + 0x50d588]
mov dword [ebp - 0xc0c], eax
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
mov dword [0x4cf0f0], 1
cdq
idiv ecx
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
cmp eax, ecx
jne 0x40e114
mov edi, dword [0x4cedb0]
mov ebx, dword [0x4cf0f0]
cmp esi, edi
jg 0x40e108
inc esi
mov dword [0x4ced0c], esi
cmp esi, edi
jg 0x40e0e9
movzx eax, byte [esi + 0x50d588]
inc ebx
add dword [ebp - 0xc0c], eax
mov dword [0x4cf0f0], ebx
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
cdq
idiv edi
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv edi
cmp eax, ecx
je 0x40e0c6
mov ebx, dword [ebp - 0xc10]
mov edi, dword [sym.imp.GDI32.dll_LineTo]
mov eax, dword [ebp - 0xc0c]
cdq
idiv dword [0x4cf0f0]
imul esi, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
mov dword [0x4cf0ec], eax
imul eax, dword [0x571128]
sub ecx, eax
mov eax, esi
cdq
add ecx, 0xc8
idiv dword [0x4cedb0]
push ecx
add eax, 0x1e
push eax
push ebx
call edi
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
inc esi
mov dword [0x4ced0c], esi
cmp esi, ecx
jle 0x40e080
mov esi, dword [sym.imp.GDI32.dll_MoveToEx]
cmp byte [0x4cf0e4], 0
mov eax, dword [0x4ced08]
mov dword [0x4ced0c], eax
je 0x40e533
mov ecx, dword [0x571144]
mov edx, 0x4d1
push 0xc
push 0xa
call fcn.00409e40
add esp, 8
push dword [0x4ced84]
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp byte [0x4ced2d], 0
mov ecx, dword [0x4cba7c]
push 0
je 0x40e36d
mov eax, dword [0x4ced0c]
movzx eax, byte [eax + 0x500e50]
imul eax, dword [0x571128]
sub ecx, eax
add ecx, 0xc8
cmp dword [0x4cedac], 0x64
push ecx
push 0x1f
push ebx
jge 0x40e2fa
call esi
mov edx, dword [0x4ced0c]
cmp edx, dword [0x4cedac]
jg 0x40e533
nop dword [eax]
nop dword [eax + eax]
movzx eax, byte [edx + 0x500e50]
imul eax, dword [0x571128]
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
inc edx
mov dword [0x4ced0c], edx
cmp edx, dword [0x4cedac]
jle 0x40e210
jmp 0x40e533
mov edx, dword [0x4ced0c]
mov ecx, dword [0x4cba7c]
push 0
movzx eax, byte [edx + 0x50d588]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
mov eax, dword [0x4ced0c]
cmp eax, dword [0x4cedb0]
jg 0x40e174
nop dword [eax]
nop word [eax + eax]
movzx ecx, byte [eax + 0x50d588]
imul ecx, dword [0x571128]
imul eax, dword [0x4cedb4]
mov edx, dword [0x4cba7c]
sub edx, ecx
add edx, 0xc8
push edx
cdq
idiv dword [0x4cedb0]
add eax, 0x1e
push eax
push ebx
call edi
mov eax, dword [0x4ced0c]
inc eax
mov dword [0x4ced0c], eax
cmp eax, dword [0x4cedb0]
jle 0x40e2b0
jmp 0x40e174
call esi
mov edx, dword [0x4ced0c]
mov esi, dword [0x4cedac]
cmp edx, esi
jg 0x40e533
movzx eax, byte [edx + 0x500e50]
sub edx, esi
imul eax, dword [0x571128]
add edx, 0x64
imul edx, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
sub ecx, eax
mov eax, 0x51eb851f
imul edx
add ecx, 0xc8
sar edx, 5
mov eax, edx
add edx, 0x1e
shr eax, 0x1f
push ecx
add eax, edx
push eax
push ebx
call edi
mov edx, dword [0x4ced0c]
mov esi, dword [0x4cedac]
inc edx
mov dword [0x4ced0c], edx
cmp edx, esi
jle 0x40e310
jmp 0x40e533
mov edx, dword [0x4ced0c]
movzx eax, byte [edx + 0x500e50]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
cmp byte [0x4cba81], 0
je 0x40e4b3
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
cmp esi, ecx
jg 0x40e533
nop dword [eax]
nop word [eax + eax]
movzx eax, byte [esi + 0x500e50]
mov dword [ebp - 0xc0c], eax
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
mov dword [0x4cf0f0], 1
cdq
idiv ecx
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv dword [0x4cedb0]
cmp eax, ecx
jne 0x40e454
mov edi, dword [0x4cedb0]
mov ebx, dword [0x4cf0f0]
cmp esi, edi
jg 0x40e448
inc esi
mov dword [0x4ced0c], esi
cmp esi, edi
jg 0x40e429
movzx eax, byte [esi + 0x500e50]
inc ebx
add dword [ebp - 0xc0c], eax
mov dword [0x4cf0f0], ebx
lea eax, [esi + 1]
imul eax, dword [0x4cedb4]
cdq
idiv edi
mov ecx, eax
mov eax, esi
imul eax, dword [0x4cedb4]
cdq
idiv edi
cmp eax, ecx
je 0x40e406
mov ebx, dword [ebp - 0xc10]
mov edi, dword [sym.imp.GDI32.dll_LineTo]
mov eax, dword [ebp - 0xc0c]
cdq
idiv dword [0x4cf0f0]
imul esi, dword [0x4cedb4]
mov ecx, dword [0x4cba7c]
mov dword [0x4cf0ec], eax
imul eax, dword [0x571128]
sub ecx, eax
mov eax, esi
cdq
add ecx, 0xc8
idiv dword [0x4cedb0]
push ecx
add eax, 0x1e
push eax
push ebx
call edi
mov esi, dword [0x4ced0c]
mov ecx, dword [0x4cedb0]
inc esi
mov dword [0x4ced0c], esi
cmp esi, ecx
jle 0x40e3c0
jmp 0x40e533
mov edx, dword [0x4ced0c]
mov ecx, dword [0x4cba7c]
push 0
movzx eax, byte [edx + 0x500e50]
imul eax, dword [0x571128]
sub ecx, eax
lea eax, [edx + 0x1e]
add ecx, 0xc8
push ecx
push eax
push ebx
call esi
mov eax, dword [0x4ced0c]
mov esi, dword [0x4cedb0]
cmp eax, esi
jg 0x40e533
nop
movzx ecx, byte [eax + 0x500e50]
imul ecx, dword [0x571128]
imul eax, dword [0x4cedb4]
mov edx, dword [0x4cba7c]
sub edx, ecx
add edx, 0xc8
push edx
cdq
idiv esi
add eax, 0x1e
push eax
push ebx
call edi
mov eax, dword [0x4ced0c]
mov esi, dword [0x4cedb0]
inc eax
mov dword [0x4ced0c], eax
cmp eax, esi
jle 0x40e4f0
cmp dword [0x571128], 2
mov eax, dword [0x4ced08]
mov dword [0x4ced0c], eax
jne 0x40e553
push dword [0x571080]
push str._d_100
jmp 0x40e55e
push dword [0x57107c]
push str._d_200
push 0x14
push 0x572a38
call fcn.00412f40
mov esi, dword [sym.imp.USER32.dll_PostMessageW]
add esp, 0x10
push 0x572a38
push dword [0x4ceb90]
push 0x1000
push dword [0x4cec00]
call esi
cmp dword [0x571128], 2
jne 0x40e59c
push dword [0x4cec34]
jmp 0x40e5a2
push dword [0x4cec30]
push 0x4c1524
push 0x14
push 0x572bf0
call fcn.00412f40
add esp, 0x10
push 0x572bf0
push dword [0x4ceb8c]
push 0x1000
push dword [0x4cec00]
call esi
cmp dword [0x571128], 2
jne 0x40e627
cmp byte [0x4cedaa], 0
je 0x40e61f
mov ecx, dword [0x4cf0e0]
test ecx, ecx
je 0x40e61f
mov eax, dword [0x571080]
push ecx
sub eax, ecx
push eax
push 0x4c29a4
push 0x200
push 0x571f68
mov dword [0x571080], eax
call fcn.00412f40
mov eax, dword [0x4cf0e0]
add esp, 0x14
add dword [0x571080], eax
jmp 0x40e689
push dword [0x571080]
jmp 0x40e672
cmp byte [0x4cedaa], 0
je 0x40e66c
mov ecx, dword [0x4cf0e0]
test ecx, ecx
je 0x40e66c
mov eax, dword [0x57107c]
push ecx
sub eax, ecx
push eax
push 0x4c29a4
push 0x200
push 0x571f68
mov dword [0x57107c], eax
call fcn.00412f40
mov eax, dword [0x4cf0e0]
add esp, 0x14
add dword [0x57107c], eax
jmp 0x40e689
push dword [0x57107c]
push 0x4c299c
push 0x200
push 0x571f68
call fcn.00412f40
add esp, 0x10
cmp dword [0x5710c4], 0
jne 0x40e69b
cmp dword [0x571080], 0
je 0x40e6b3
push 0x571f68
push dword [0x4cebe0]
push 0x1000
push dword [0x4cec00]
call esi
push ebx
push dword [0x4cec00]
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x40e7f7
mov ecx, dword [0x571144]
mov edx, 0x4d1
push 2
push 0xa
call fcn.00409e40
push 0x800
lea eax, [ebp - 0xc08]
push 0
push eax
call fcn.004519d0
add esp, 0x14
lea eax, [ebp - 0x408]
push 0x400
push 0
push eax
call fcn.004519d0
add esp, 0xc
lea eax, [ebp - 0xc08]
push eax
push 0x400
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push 0x400
lea eax, [ebp - 0xc08]
push eax
push 0x400
lea eax, [ebp - 0x408]
push eax
push 0
call fcn.00466430
add esp, 0x14
push 1
push 0
push 0
call dword [sym.imp.WINMM.dll_PlaySoundW]
cmp byte [0x4ceb31], 0
mov byte [0x571155], 0
je 0x40e75b
call dword [0x571328]
cmp byte [0x4ceb30], 1
jne 0x40e76a
call dword [0x571338]
push 0x384
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x4cec04]
test eax, eax
je 0x40e791
push 0
push eax
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov dword [0x4cec04], 0
mov eax, dword [0x4cba74]
test eax, eax
js 0x40e7ae
push eax
call dword [sym.imp.thinkgear.dll_TG_FreeConnection]
add esp, 4
mov dword [0x4cba74], 0xffffffff
push 0x10
push 0
push 0
push 0
push str.images_stop.bmp
push dword [0x571320]
call dword [sym.imp.USER32.dll_LoadImageW]
push 0xa1
mov edx, 0x32
mov dword [0x571148], eax
mov ecx, eax
call fcn.00409da0
mov ecx, dword [0x571144]
add esp, 4
mov edx, 0x4d1
push 2
push 0xa
call fcn.00409e40
add esp, 8
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov byte [0x4cba83], 1
pop ebx
call fcn.00417280
mov esp, ebp
pop ebp
ret
call fcn.00417470
int3