Function at 0x4109d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
mov ebx, 0xfffffffe
sub esp, 0xfc
mov edx, dword [esp + 0x114]
mov eax, dword [esp + 0x114]
mov ebp, dword [esp + 0x110]
sar edx, 0x1f
shr edx, 0x1e
mov dword [esp], ebp
add eax, edx
and eax, 3
sub eax, edx
mov edx, dword [esp + 0x114]
imul esi, eax, 0x127
lea eax, [esi + 0x64]
mov dword [esp + 0x3c], esi
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x114]
add eax, 3
test edx, edx
cmovns eax, dword [esp + 0x114]
sar eax, 2
imul eax, eax, 0x122
lea edi, [eax + 0xa]
mov dword [esp + 0x44], eax
mov dword [esp + 0x34], edi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
sub esp, 4
mov dword [esp + 0x70], eax
mov dword [esp], 0xf0f078
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
sub esp, 4
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x114]
mov dword [esp + 4], 1
add eax, 1
mov dword [esp], ebp
mov dword [0x45ae20], eax
mov eax, dword [sym.imp.GDI32.dll_SetBkMode]
mov dword [esp + 0x58], eax
call eax
sub esp, 8
mov dword [esp + 4], 0x90e890
mov dword [esp], ebp
call dword [sym.imp.GDI32.dll_SetBkColor]
sub esp, 8
mov dword [esp + 4], 0xa04040
mov dword [esp], ebp
call dword [sym.imp.GDI32.dll_SetDCPenColor]
mov eax, dword [sym.imp.GDI32.dll_GetStockObject]
sub esp, 8
mov dword [esp], 0x13
mov dword [esp + 0x94], eax
call eax
sub esp, 4
mov dword [esp + 4], eax
mov eax, dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp], ebp
mov dword [esp + 0x38], eax
call eax
lea eax, [esi + 0x179]
sub esp, 8
mov dword [esp + 0x30], eax
lea eax, [esi + 0x6e]
mov esi, dword [sym.imp.GDI32.dll_MoveToEx]
mov dword [esp + 0x50], eax
lea esi, [esi]
mov ecx, dword [0x45a320]
mov eax, edi
mov dword [esp + 0xc], 0
mov dword [esp], ebp
imul eax, ecx
cdq
idiv dword [0x42e2e8]
mov edx, dword [esp + 0x50]
add eax, dword [0x45a318]
cmp ebx, 3
cmova edx, dword [esp + 0x48]
add ebx, 1
mov dword [esp + 8], eax
mov eax, ecx
imul eax, edx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call esi
mov ecx, dword [0x45a320]
mov eax, edi
add edi, 0x25
sub esp, 0x10
imul eax, ecx
mov dword [esp], ebp
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x30]
imul eax, ecx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call dword [sym.imp.GDI32.dll_LineTo]
sub esp, 0xc
cmp ebx, 6
jne 0x410b00
mov ecx, dword [0x45a320]
mov eax, dword [esp + 0x34]
mov dword [esp], ebp
mov ebx, dword [0x42e2e8]
mov dword [esp + 0xc], 0
imul eax, ecx
cdq
idiv ebx
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x48]
imul eax, ecx
cdq
idiv ebx
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call esi
mov ecx, dword [0x45a320]
mov ebx, dword [0x42e2e8]
sub esp, 0x10
mov eax, dword [esp + 0x44]
mov dword [esp], ebp
lea edi, [eax + 0x10d]
mov edx, edi
imul edx, ecx
mov eax, edx
cdq
idiv ebx
mov edx, dword [esp + 0x48]
imul edx, ecx
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, edx
cdq
idiv ebx
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call dword [sym.imp.GDI32.dll_LineTo]
mov ecx, dword [0x45a320]
mov ebx, dword [0x42e2e8]
sub esp, 0xc
mov edx, dword [esp + 0x34]
mov dword [esp + 0xc], 0
mov dword [esp], ebp
imul edx, ecx
mov eax, edx
cdq
idiv ebx
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x30]
imul eax, ecx
cdq
idiv ebx
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call esi
mov ecx, dword [0x45a320]
mov eax, edi
mov ebx, dword [0x42e2e8]
sub esp, 0x10
imul eax, ecx
mov dword [esp], ebp
cdq
idiv ebx
add eax, dword [0x45a318]
add eax, 1
mov dword [esp + 8], eax
mov eax, dword [esp + 0x30]
imul eax, ecx
cdq
idiv ebx
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call dword [sym.imp.GDI32.dll_LineTo]
mov ecx, dword [0x45a320]
sub esp, 0xc
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], 0
mov dword [esp], ebp
lea ebx, [eax + 0x2f]
mov edx, ebx
mov ebx, dword [0x42e2e8]
mov dword [esp + 0x60], edx
imul edx, ecx
mov eax, edx
cdq
idiv ebx
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x50]
imul eax, ecx
cdq
idiv ebx
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call esi
mov ebx, dword [0x42e2e8]
sub esp, 0x10
mov eax, dword [esp + 0x44]
mov dword [esp], ebp
lea ecx, [eax + 0xe8]
mov eax, ecx
mov ecx, dword [0x45a320]
mov dword [esp + 0x74], eax
imul eax, ecx
cdq
idiv ebx
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x50]
imul eax, ecx
cdq
idiv ebx
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call dword [sym.imp.GDI32.dll_LineTo]
mov ecx, dword [0x45a320]
sub esp, 0xc
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0xc], 0
mov dword [esp], ebp
imul edx, ecx
add ebx, 0x12c
mov eax, edx
cdq
idiv dword [0x42e2e8]
imul ecx, ebx
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, ecx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call esi
mov ecx, dword [0x45a320]
sub esp, 0x10
mov eax, dword [esp + 0x44]
imul ebx, ecx
mov dword [esp], ebp
add eax, 0x54
imul eax, ecx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, ebx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call dword [sym.imp.GDI32.dll_LineTo]
mov ecx, dword [0x45a320]
sub esp, 0xc
mov eax, dword [esp + 0x44]
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0xc], 0
mov dword [esp], ebp
add eax, 0x9e
add ebx, 0xd2
imul eax, ecx
imul ecx, ebx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, ecx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call esi
mov ecx, dword [0x45a320]
sub esp, 0x10
mov eax, dword [esp + 0x44]
mov dword [esp], ebp
add eax, 0xc3
imul eax, ecx
imul ecx, ebx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, ecx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call dword [sym.imp.GDI32.dll_LineTo]
mov ecx, dword [0x45a320]
sub esp, 0xc
mov eax, dword [esp + 0x74]
mov dword [esp + 0xc], 0
mov dword [esp], ebp
imul eax, ecx
imul ecx, ebx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, ecx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call esi
mov esi, dword [0x45a320]
mov ecx, dword [0x42e2e8]
sub esp, 0x10
imul edi, esi
mov dword [esp], ebp
imul ebx, esi
mov eax, edi
cdq
idiv ecx
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, ebx
cdq
idiv ecx
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call dword [sym.imp.GDI32.dll_LineTo]
mov eax, dword [0x45a310]
sub esp, 0xc
mov esi, dword [esp + 0x70]
mov dword [esp + 4], eax
mov dword [esp], esi
mov esi, dword [esp + 0x38]
call esi
sub esp, 8
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x38], esi
mov dword [esp], ebp
mov dword [esp + 4], ecx
call esi
mov ecx, dword [0x45a320]
sub esp, 8
mov edi, dword [esp + 0x34]
mov dword [esp + 0x20], 0xc000ca
mov dword [esp], ebp
imul edi, ecx
mov eax, edi
mov edi, dword [0x45a318]
cdq
idiv dword [0x42e2e8]
add edi, eax
mov dword [esp + 0x34], eax
lea ebx, [edi + 1]
mov edi, dword [esp + 0x48]
mov dword [esp + 0x1c], ebx
imul edi, ecx
mov dword [esp + 8], ebx
mov eax, edi
mov edi, dword [0x45a31c]
cdq
idiv dword [0x42e2e8]
mov edx, dword [esp + 0x70]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x60]
imul edx, ecx
mov esi, eax
add edi, eax
mov eax, edx
cdq
add edi, 1
idiv dword [0x42e2e8]
mov edx, dword [esp + 0x34]
mov dword [esp + 0x18], edi
mov dword [esp + 4], edi
sub eax, edx
mov edx, dword [esp + 0x30]
sub eax, 1
imul edx, ecx
mov dword [esp + 0x10], eax
mov eax, edx
cdq
idiv dword [0x42e2e8]
sub eax, esi
sub eax, 1
mov dword [esp + 0xc], eax
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [0x4524f0]
sub esp, 0x24
mov esi, dword [esp + 0x38]
mov dword [esp + 4], eax
mov dword [esp], ebp
call esi
mov edi, dword [sym.imp.GDI32.dll_SetTextColor]
sub esp, 8
mov dword [esp + 0x34], edi
mov dword [esp + 4], 0x804080
mov dword [esp], ebp
call edi
mov edi, dword [0x45a31c]
sub esp, 8
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0x10], 0x25
mov dword [esp + 8], 0xffffffff
lea ecx, [ebx + 0x67]
mov ebx, dword [0x42e2e8]
mov dword [esp], ebp
mov dword [esp + 0x7c], ecx
mov edx, ecx
mov ecx, dword [0x45a320]
imul edx, ecx
mov eax, edx
mov esi, edx
cdq
idiv ebx
add eax, edi
mov dword [esp + 0xa0], eax
imul eax, ecx, 0x10e
add eax, esi
cdq
idiv ebx
add eax, edi
mov edi, dword [0x45a318]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x44]
lea esi, [eax + 0xd]
imul esi, ecx
mov eax, esi
cdq
idiv ebx
add eax, edi
mov dword [esp + 0xa4], eax
imul eax, ecx, 0x1e
mov ecx, dword [esp + 0x114]
shl ecx, 2
add eax, esi
mov dword [esp + 0x5c], ecx
add ecx, dword [esp + 0x114]
cdq
idiv ebx
add eax, edi
mov dword [esp + 0xac], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0xc], eax
mov eax, ecx
mov ecx, dword [sym.imp.USER32.dll_DrawTextW]
shl eax, 3
lea esi, [eax + 0x458620]
mov eax, dword [eax + 0x458620]
mov dword [esp + 0x30], ecx
mov dword [esp + 4], eax
call ecx
mov eax, dword [0x4524f4]
sub esp, 0x14
mov ebx, dword [esp + 0x38]
mov dword [esp + 4], eax
mov dword [esp], ebp
call ebx
mov eax, dword [0x4524ec]
sub esp, 8
mov dword [esp + 0x38], ebx
mov dword [esp + 4], eax
mov dword [esp], ebp
call ebx
sub esp, 8
mov edx, dword [esp + 0x34]
mov dword [esp + 4], 0x606060
mov dword [esp], ebp
call edx
mov ecx, dword [0x45a320]
mov ebx, dword [0x45a31c]
sub esp, 8
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
lea edx, [edi + 0x71]
mov dword [esp], ebp
mov dword [esp + 0x68], edx
imul edx, ecx
mov eax, edx
cdq
idiv dword [0x42e2e8]
mov edx, edi
add edx, 0x12a
mov dword [esp + 0x88], edx
imul edx, ecx
add eax, ebx
mov dword [esp + 0xa0], eax
mov eax, edx
cdq
idiv dword [0x42e2e8]
add eax, ebx
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x44]
lea ebx, [eax + 0x32]
imul ebx, ecx
shl ecx, 5
mov eax, ebx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a318]
mov dword [esp + 0xa4], eax
lea eax, [ecx + ebx]
mov ebx, dword [0x452484]
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a318]
mov dword [esp + 0xac], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0xc], eax
lea eax, [ebx + 0x1bc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
call eax
mov eax, dword [0x4524f4]
sub esp, 0x14
mov ecx, dword [esp + 0x38]
mov dword [esp + 4], eax
mov dword [esp], ebp
call ecx
sub esp, 8
mov dword [esp + 4], 0
mov eax, dword [esp + 0x34]
mov dword [esp], ebp
call eax
lea eax, [edi + 0x107]
mov ecx, dword [esi + 0x24]
sub esp, 8
mov dword [esp + 0x80], eax
imul eax, dword [0x45a320]
cdq
idiv dword [0x42e2e8]
mov edx, dword [esi + 0x20]
add eax, dword [0x45a31c]
mov dword [esp + 0xa8], eax
mov eax, 0x3e7
cmp eax, edx
mov eax, 0
sbb eax, ecx
jb 0x412518
mov eax, dword [0x452484]
mov dword [esp + 0xc], edx
mov dword [esp + 4], 0x40
add eax, 0x86a
mov dword [esp + 8], eax
lea eax, [esp + 0xb0]
mov dword [esp], eax
mov dword [esp + 0x40], eax
call fcn.0040fce0
lea eax, [esp + 0xa0]
mov esi, dword [esp + 0x30]
mov dword [esp], ebp
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], eax
call esi
sub esp, 0x14
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], 0x606060
mov dword [esp], ebp
call ecx
mov ebx, dword [0x42e2e8]
mov esi, dword [0x45a31c]
sub esp, 8
mov edi, dword [esp + 0x3c]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
mov ecx, edi
mov dword [esp], ebp
add ecx, 0x12f
mov dword [esp + 0x8c], ecx
mov edx, ecx
mov ecx, dword [0x45a320]
imul edx, ecx
mov eax, edx
cdq
idiv ebx
mov edx, edi
mov edi, dword [esp + 0x30]
add edx, 0x177
mov dword [esp + 0x6c], edx
add eax, esi
mov dword [esp + 0xa0], eax
mov eax, edx
imul eax, ecx
cdq
idiv ebx
mov ebx, dword [0x452484]
add eax, esi
mov dword [esp + 0xa8], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0xc], eax
lea eax, [ebx + 0x914]
mov dword [esp + 4], eax
call edi
sub esp, 0x14
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], 0
mov dword [esp], ebp
call ecx
sub esp, 8
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x40]
lea ecx, [edx + 0x163]
mov dword [esp + 0x90], ecx
imul ecx, dword [0x45a320]
mov eax, ecx
mov ecx, dword [esp + 0x5c]
add ecx, dword [esp + 0x114]
cdq
lea esi, [ecx*8 + 0x458620]
mov ecx, dword [0x452484]
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xa8], eax
movzx eax, byte [esi + 0xc]
mov dword [esp], ebx
mov dword [esp + 0xc], eax
lea eax, [ecx + 0x920]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40
call fcn.0040fce0
lea eax, [esp + 0xa0]
mov dword [esp], ebp
mov dword [esp + 0xc], eax
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
call eax
sub esp, 0x14
mov dword [esp + 4], 0x50b0f0
mov dword [esp], ebp
call dword [sym.imp.GDI32.dll_SetDCBrushColor]
mov ebx, dword [0x45a320]
mov ecx, dword [0x45a31c]
sub esp, 8
mov eax, dword [esp + 0x48]
imul eax, ebx
cdq
idiv dword [0x42e2e8]
lea eax, [ecx + eax + 1]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x50]
imul eax, ebx
cdq
idiv dword [0x42e2e8]
add eax, ecx
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x74]
imul eax, ebx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a318]
mov ecx, eax
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x60]
imul eax, ebx
mov ebx, dword [0x45a318]
cdq
idiv dword [0x42e2e8]
lea eax, [ebx + eax + 1]
mov ebx, ecx
sub ebx, eax
movzx eax, byte [esi + 0xc]
imul ebx, eax
mov eax, 0x51eb851f
imul ebx
sar ebx, 0x1f
sar edx, 5
sub edx, ebx
jne 0x412a48
mov dword [esp + 0xa4], 0
mov eax, dword [0x4524ec]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
call eax
sub esp, 8
mov edi, dword [esp + 0x34]
mov dword [esp + 4], 0x606060
mov dword [esp], ebp
call edi
mov esi, dword [0x45a320]
mov ecx, dword [0x42e2e8]
sub esp, 8
mov ebx, dword [0x45a31c]
mov edx, dword [esp + 0x68]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
imul edx, esi
mov dword [esp], ebp
mov eax, edx
cdq
idiv ecx
mov edx, dword [esp + 0x88]
imul edx, esi
add eax, ebx
mov dword [esp + 0xa0], eax
mov eax, edx
cdq
idiv ecx
add eax, ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0xa8], eax
add ebx, 0x57
imul ebx, esi
mov eax, ebx
cdq
idiv ecx
mov edx, esi
shl edx, 5
add eax, dword [0x45a318]
mov dword [esp + 0xa4], eax
mov eax, edx
sub eax, esi
add eax, ebx
mov ebx, dword [0x452484]
cdq
idiv ecx
add eax, dword [0x45a318]
mov dword [esp + 0xac], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0xc], eax
lea eax, [ebx + 0x1c0]
mov ebx, dword [esp + 0x30]
mov dword [esp + 4], eax
call ebx
mov eax, dword [0x4524f4]
sub esp, 0x14
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
call eax
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], ebp
call edi
sub esp, 8
mov eax, dword [esp + 0x80]
imul eax, dword [0x45a320]
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x5c]
add eax, dword [esp + 0x114]
mov ecx, dword [eax*8 + 0x458634]
cmp ecx, 0x3e7
ja 0x4124d0
mov eax, dword [0x452484]
mov dword [esp + 0xc], ecx
mov dword [esp + 4], 0x40
add eax, 0x86a
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.0040fce0
lea eax, [esp + 0xa0]
mov ebx, dword [esp + 0x30]
mov dword [esp], ebp
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], eax
call ebx
mov eax, dword [0x4524ec]
sub esp, 0x14
mov esi, dword [esp + 0x38]
mov dword [esp + 4], eax
mov dword [esp], ebp
call esi
sub esp, 8
mov edi, dword [esp + 0x34]
mov dword [esp + 4], 0x606060
mov dword [esp], ebp
mov eax, edi
call eax
mov ecx, dword [0x45a320]
mov ebx, dword [0x42e2e8]
sub esp, 8
mov esi, dword [0x45a31c]
mov edx, dword [esp + 0x8c]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
imul edx, ecx
mov dword [esp], ebp
mov eax, edx
cdq
idiv ebx
mov edx, dword [esp + 0x6c]
imul edx, ecx
mov ecx, dword [0x452484]
add eax, esi
mov dword [esp + 0xa0], eax
mov eax, edx
cdq
idiv ebx
mov ebx, dword [esp + 0x30]
add eax, esi
mov dword [esp + 0xa8], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0xc], eax
lea eax, [ecx + 0x1bc]
mov dword [esp + 4], eax
call ebx
mov eax, dword [0x4524f4]
sub esp, 0x14
mov esi, dword [esp + 0x38]
mov dword [esp + 4], eax
mov dword [esp], ebp
call esi
mov eax, edi
sub esp, 8
mov dword [esp + 0x34], edi
mov dword [esp + 4], 0
mov dword [esp], ebp
call eax
sub esp, 8
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x5c]
add ecx, dword [esp + 0x114]
mov edi, dword [esp + 0x40]
lea eax, [esi + 0x154]
lea esi, [ecx*8 + 0x458620]
mov ecx, dword [0x452484]
mov dword [esp + 0x74], eax
imul eax, dword [0x45a320]
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xa8], eax
movzx eax, word [esi + 0x10]
mov dword [esp], edi
mov dword [esp + 0xc], eax
lea eax, [ecx + 0x920]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40
call fcn.0040fce0
lea eax, [esp + 0xa0]
mov dword [esp], ebp
mov dword [esp + 4], edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x10], 0x26
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xffffffff
call ebx
sub esp, 0x14
mov edi, dword [esp + 0x34]
mov dword [esp + 4], 0x606060
mov dword [esp], ebp
call edi
mov ecx, dword [0x45a320]
mov ebx, dword [0x45a31c]
sub esp, 8
mov edx, dword [esp + 0x68]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
imul edx, ecx
mov dword [esp], ebp
mov eax, edx
cdq
idiv dword [0x42e2e8]
add eax, ebx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x74]
imul eax, ecx
cdq
idiv dword [0x42e2e8]
mov edx, dword [esp + 0x44]
add eax, ebx
lea ebx, [edx + 0x7c]
imul ebx, ecx
mov dword [esp + 0xa8], eax
shl ecx, 5
mov eax, ebx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a318]
mov dword [esp + 0xa4], eax
lea eax, [ecx + ebx]
mov ebx, dword [esp + 0x30]
cdq
idiv dword [0x42e2e8]
mov edx, dword [0x452484]
add eax, dword [0x45a318]
mov dword [esp + 0xac], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0xc], eax
lea eax, [edx + 0x940]
mov dword [esp + 4], eax
call ebx
sub esp, 0x14
mov dword [esp + 4], 0
mov dword [esp], ebp
call edi
sub esp, 8
mov eax, dword [esp + 0x3c]
add eax, 0x140
imul eax, dword [0x45a320]
cdq
idiv dword [0x42e2e8]
mov edx, dword [esi + 0x1c]
mov dword [esp + 0x54], edx
add eax, dword [0x45a31c]
mov dword [esp + 0xa8], eax
mov eax, dword [esi + 0x18]
mov esi, 0xcccccccd
mov ecx, eax
mov dword [esp + 0x50], eax
add ecx, edx
adc ecx, 0
mov eax, ecx
mul esi
mov eax, dword [esp + 0x50]
mov ebx, edx
and edx, 0xfffffffc
shr ebx, 2
add edx, ebx
xor ebx, ebx
sub ecx, edx
mov edx, dword [esp + 0x54]
sub eax, ecx
sbb edx, ebx
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x48]
imul ecx, edx, 0xcccccccd
imul edx, dword [esp + 0x48], 0xcccccccc
add ecx, edx
mul esi
add edx, ecx
mov ebx, eax
mov esi, edx
shrd ebx, edx, 1
shr esi, 1
mov edi, esi
mov esi, ebx
mov ebx, 0xa
mov eax, esi
imul ecx, edi, 0xa
mov esi, dword [esp + 0x50]
mov edi, dword [esp + 0x54]
mul ebx
mov ebx, edi
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], edi
add edx, ecx
mov ecx, esi
sub ecx, eax
mov eax, 4
sbb ebx, edx
cmp eax, ecx
mov eax, 0
mov edx, edi
sbb eax, ebx
mov eax, esi
jae 0x411912
add eax, 0xa
adc edx, 0
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x4c]
mov eax, esi
mov ebx, esi
xor esi, esi
shrd eax, edi, 0x14
and ebx, 0xfffff
and eax, 0xfffff
lea ecx, [ebx + eax]
mov eax, edi
shr eax, 8
and eax, 0xfffff
add ecx, eax
mov eax, edi
mov edi, 0xc28f5c29
shr eax, 0x1c
add ecx, eax
mov eax, 0x51eb851f
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
mov edx, dword [esp + 0x4c]
lea eax, [eax + eax*4]
sub ecx, eax
mov eax, dword [esp + 0x48]
mov ebx, ecx
sub eax, ecx
sbb edx, esi
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x60]
imul ecx, edx, 0xc28f5c29
imul edx, dword [esp + 0x60], 0x8f5c28f5
add ecx, edx
mul edi
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x64], edx
mov edx, 0x19
and eax, 3
add dword [esp + 0x64], ecx
xor ecx, ecx
mul edx
add edx, ecx
add eax, ebx
adc edx, esi
mov ecx, eax
mov eax, dword [esp + 0x60]
mov ebx, edx
mov edx, dword [esp + 0x64]
mov esi, ecx
mov edi, ebx
shrd eax, edx, 2
shr edx, 2
add esi, ebx
adc esi, 0
mov dword [esp + 0x80], eax
mov eax, 0xcccccccd
mov dword [esp + 0x84], edx
mul esi
mov eax, edx
and edx, 0xfffffffc
shr eax, 2
add edx, eax
sub esi, edx
xor edx, edx
mov eax, esi
mov esi, ecx
mov ecx, dword [esp + 0x50]
sub esi, eax
sbb edi, edx
imul eax, esi, 0xcccccccc
imul ebx, edi, 0xcccccccd
add ebx, eax
mov eax, 0xcccccccd
mul esi
add edx, ebx
mov ebx, dword [esp + 0x54]
shrd eax, edx, 1
shr edx, 1
add eax, 0x30
mov dword [esp + 0x60], eax
mov eax, dword [0x452484]
adc edx, 0
xor esi, esi
mov dword [esp + 0x64], edx
mov dword [esp + 0x88], eax
mov eax, 0x1869f
cmp eax, ecx
mov eax, esi
sbb eax, ebx
jae 0x412a00
lea eax, [esp + 0x98]
mov edx, dword [esp + 0x4c]
mov dword [esp + 8], 0x186a0
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0xc], 0
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0042d3d0
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x98]
mov edi, dword [esp + 0x9c]
mov dword [esp + 0x80], eax
shrd edx, ecx, 0x14
mov eax, edx
and ebx, 0xfffff
shr edi, 8
and eax, 0xfffff
lea ecx, [ebx + eax]
mov eax, edi
mov edi, dword [esp + 0x9c]
xor ebx, ebx
and eax, 0xfffff
add ecx, eax
shr edi, 0x1c
mov eax, 0x51eb851f
add ecx, edi
mov edi, 0xc28f5c29
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
mov edx, dword [esp + 0x9c]
lea eax, [eax + eax*4]
sub ecx, eax
mov eax, dword [esp + 0x98]
sub eax, ecx
sbb edx, ebx
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x50]
imul ecx, edx, 0xc28f5c29
imul edx, dword [esp + 0x50], 0x8f5c28f5
add ecx, edx
mul edi
add edx, ecx
mov ecx, eax
mov eax, 0x5f5e0ff
shrd ecx, edx, 2
mov ebx, edx
shr ebx, 2
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x4c]
cmp eax, ecx
sbb esi, ebx
jae 0x412580
lea eax, [esp + 0x98]
mov edx, dword [esp + 0x4c]
mov dword [esp + 8], 0x5f5e100
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0xc], 0
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0042d3d0
mov edx, dword [esp + 0x64]
mov dword [esp + 8], 0x186a0
mov ebx, eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], 0
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x9c]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], edx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x98]
mov dword [esp], eax
call fcn.0042d2b0
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], 0x40
add eax, 0x968
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.0040fce0
lea eax, [esp + 0xa0]
mov dword [esp + 0x10], 0x26
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp], ebp
call eax
sub esp, 0x14
mov edi, dword [esp + 0x34]
mov dword [esp + 4], 0x606060
mov dword [esp], ebp
call edi
mov ecx, dword [0x45a320]
mov ebx, dword [0x42e2e8]
sub esp, 8
mov esi, dword [0x45a31c]
mov edx, dword [esp + 0x68]
mov edi, dword [esp + 0x3c]
mov dword [esp], ebp
mov dword [esp + 0x10], 0x26
imul edx, ecx
mov dword [esp + 8], 0xffffffff
mov eax, edx
cdq
idiv ebx
add eax, esi
mov dword [esp + 0xa0], eax
lea eax, [edi + 0xd0]
mov edi, dword [esp + 0x44]
mov dword [esp + 0x50], eax
imul eax, ecx
cdq
idiv ebx
add eax, esi
lea esi, [edi + 0xa1]
mov edi, dword [0x452484]
imul esi, ecx
mov dword [esp + 0xa8], eax
shl ecx, 5
mov eax, esi
cdq
idiv ebx
add eax, dword [0x45a318]
mov dword [esp + 0xa4], eax
lea eax, [ecx + esi]
cdq
idiv ebx
add eax, dword [0x45a318]
mov dword [esp + 0xac], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0xc], eax
lea eax, [edi + 0x940]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
call eax
sub esp, 0x14
mov eax, dword [esp + 0x114]
cmp dword [0x45ae14], eax
mov dword [esp], ebp
sete al
movzx eax, al
add eax, 1
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
call eax
sub esp, 8
cmp dword [esp + 0x114], 5
jle 0x412910
mov eax, dword [esp + 0x3c]
mov edi, dword [0x452484]
mov dword [esp + 4], 0x40
mov ebx, dword [esp + 0x40]
add eax, 0xbc
imul eax, dword [0x45a320]
mov dword [esp], ebx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x5c]
add eax, dword [esp + 0x114]
lea esi, [eax*8]
movzx edx, word [esi + 0x458632]
mov dword [esp + 0x48], esi
add esi, 0x458620
mov eax, edx
imul edx, edx, 0xcccd
mov ecx, eax
shr edx, 0x13
lea edx, [edx + edx*4]
add edx, edx
sub ecx, edx
lea edx, [eax + 0xa]
cmp cx, 4
cmova eax, edx
mov edx, eax
shr dx, 2
movzx edx, dx
imul edx, edx, 0x147b
shr edx, 0x11
lea ecx, [edx + edx*4]
movzx edx, dx
lea ecx, [ecx + ecx*4]
mov dword [esp + 0xc], edx
shl ecx, 2
sub eax, ecx
movzx eax, ax
imul eax, eax, 0xcccd
shr eax, 0x13
add eax, 0x30
mov dword [esp + 0x10], eax
lea eax, [edi + 0x944]
mov dword [esp + 8], eax
call fcn.0040fce0
lea eax, [esp + 0xa0]
mov dword [esp], ebp
mov dword [esp + 0x40], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x10], 0x26
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xffffffff
call ebx
sub esp, 0x14
mov edi, dword [esp + 0x58]
mov dword [esp + 4], 1
mov dword [esp], ebp
call edi
mov eax, dword [0x4524ec]
sub esp, 8
mov edx, dword [esp + 0x38]
mov dword [esp + 4], eax
mov dword [esp], ebp
call edx
sub esp, 8
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], 0x606060
mov dword [esp], ebp
call ecx
mov ebx, dword [0x45a31c]
mov edi, dword [0x452484]
sub esp, 8
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x10], 0x24
mov dword [esp + 8], 0xffffffff
lea edx, [ecx + 0xd5]
mov ecx, dword [0x45a320]
mov dword [esp], ebp
mov dword [esp + 0x60], edx
imul edx, ecx
mov eax, edx
cdq
idiv dword [0x42e2e8]
add eax, ebx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x6c]
imul eax, ecx
cdq
idiv dword [0x42e2e8]
add eax, ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 0xa8], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0xc], eax
lea eax, [edi + 0x1c4]
mov dword [esp + 4], eax
call ebx
mov eax, dword [0x4524f4]
sub esp, 0x14
mov edx, dword [esp + 0x38]
mov dword [esp + 4], eax
mov dword [esp], ebp
call edx
mov edi, dword [0x452484]
sub esp, 8
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
lea eax, [ecx + 0x116]
mov dword [esp], ebp
imul eax, dword [0x45a320]
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xa0], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0xc], eax
lea eax, [edi + 0x940]
mov dword [esp + 4], eax
call ebx
sub esp, 0x14
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], 0
mov dword [esp], ebp
call ecx
mov edi, dword [0x452484]
sub esp, 8
mov ecx, dword [esp + 0x90]
imul ecx, dword [0x45a320]
mov eax, ecx
cdq
idiv dword [0x42e2e8]
movzx edx, word [esi + 0xe]
mov esi, dword [esp + 0x40]
mov dword [esp + 4], 0x40
mov dword [esp], esi
add eax, dword [0x45a31c]
mov dword [esp + 0xa8], eax
mov eax, edx
imul edx, edx, 0xcccd
mov ecx, eax
shr edx, 0x13
lea edx, [edx + edx*4]
add edx, edx
sub ecx, edx
lea edx, [eax + 0xa]
cmp cx, 4
cmova eax, edx
mov edx, eax
shr dx, 2
movzx edx, dx
imul edx, edx, 0x147b
shr edx, 0x11
lea ecx, [edx + edx*4]
movzx edx, dx
lea ecx, [ecx + ecx*4]
mov dword [esp + 0xc], edx
shl ecx, 2
sub eax, ecx
movzx eax, ax
imul eax, eax, 0xcccd
shr eax, 0x13
add eax, 0x30
mov dword [esp + 0x10], eax
lea eax, [edi + 0x944]
mov dword [esp + 8], eax
call fcn.0040fce0
lea eax, [esp + 0xa0]
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 0x10], 0x26
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xffffffff
call ebx
mov ecx, dword [0x45a320]
mov esi, dword [0x45a318]
sub esp, 0x14
mov eax, dword [esp + 0x44]
lea ebx, [eax + 0xc6]
imul ebx, ecx
shl ecx, 5
mov eax, ebx
cdq
idiv dword [0x42e2e8]
add eax, esi
mov dword [esp + 0xa4], eax
lea eax, [ecx + ebx]
cdq
idiv dword [0x42e2e8]
xor edx, edx
add eax, esi
mov dword [esp + 0xac], eax
mov eax, dword [0x42e2e4]
cmp eax, 6
cmovge eax, edx
imul eax, eax, 0x7c
movzx eax, byte [eax + 0x45694d]
and eax, 0xf
cmp al, 3
je 0x412750
mov eax, dword [0x4524ec]
mov edi, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call edi
sub esp, 8
mov dword [esp + 4], 0x606060
mov eax, dword [esp + 0x34]
mov dword [esp], ebp
call eax
mov esi, dword [0x45a320]
mov ebx, dword [0x45a31c]
sub esp, 8
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x10], 0x24
mov dword [esp + 8], 0xffffffff
imul ecx, esi
mov dword [esp], ebp
mov eax, ecx
cdq
idiv dword [0x42e2e8]
mov edx, esi
shl edx, 6
add eax, ebx
mov dword [esp + 0xa0], eax
mov eax, edx
add eax, esi
mov esi, dword [0x452484]
add eax, ecx
cdq
idiv dword [0x42e2e8]
add eax, ebx
xor ebx, ebx
mov dword [esp + 0xa8], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0xc], eax
lea eax, [esi + 0x248]
mov esi, dword [esp + 0x30]
mov dword [esp + 4], eax
call esi
mov eax, dword [0x4524f4]
sub esp, 0x14
mov dword [esp + 4], eax
mov dword [esp], ebp
call edi
sub esp, 8
mov dword [esp + 4], 0x703030
mov eax, dword [esp + 0x34]
mov dword [esp], ebp
call eax
sub esp, 8
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x110], ebp
lea esi, [eax + 0xb7]
mov eax, dword [0x45ae10]
mov ecx, dword [esp + 0x48]
test eax, eax
lea edx, [eax + 3]
cmovns edx, eax
sar edx, 2
cmp byte [ebx + ecx + 0x458624], 0
jne 0x4125d0
cmp dword [esp + 0x114], edx
je 0x4126e0
add ebx, 1
add esi, 0x30
cmp ebx, 4
jne 0x412121
mov ebp, dword [esp + 0x110]
mov dword [esp + 4], 1
mov eax, dword [esp + 0x58]
mov dword [esp], ebp
call eax
mov eax, dword [0x4524ec]
sub esp, 8
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
call eax
sub esp, 8
mov dword [esp + 4], 0x606060
mov eax, dword [esp + 0x34]
mov dword [esp], ebp
call eax
mov ebx, dword [0x45a320]
mov esi, dword [0x42e2e8]
sub esp, 8
mov ecx, dword [0x45a31c]
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x10], 0x24
mov dword [esp + 8], 0xffffffff
imul eax, ebx
mov dword [esp], ebp
cdq
idiv esi
add eax, ecx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x50]
imul eax, ebx
cdq
idiv esi
add eax, ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0xa8], eax
add ecx, 0xeb
imul ecx, ebx
shl ebx, 5
mov eax, ecx
cdq
idiv esi
add eax, dword [0x45a318]
mov dword [esp + 0xa4], eax
lea eax, [ebx + ecx]
cdq
idiv esi
add eax, dword [0x45a318]
mov dword [esp + 0xac], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0xc], eax
mov eax, dword [0x452484]
add eax, 0x24e
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
call eax
mov eax, dword [0x42e2e4]
xor edx, edx
mov ebx, dword [0x45ae0c]
sub esp, 0x14
cmp eax, 6
cmovge eax, edx
mov edx, dword [esp + 0x5c]
add edx, dword [esp + 0x114]
movzx ecx, byte [edx*8 + 0x45862a]
imul eax, eax, 0x7c
add eax, 0x4568e0
movzx edx, byte [eax + 0x6d]
and edx, 0xf
cmp dl, 2
je 0x4128e0
test cl, cl
jne 0x412930
cmp dword [esp + 0x114], ebx
je 0x412c28
mov dword [esp], ebp
mov eax, dword [esp + 0x58]
mov dword [esp + 4], 1
call eax
mov eax, dword [0x4524ec]
sub esp, 8
mov dword [esp], ebp
mov esi, dword [esp + 0x38]
mov dword [esp + 4], eax
call esi
sub esp, 8
mov dword [esp], ebp
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], 0x606060
call ecx
mov esi, dword [0x45a320]
mov ecx, dword [0x42e2e8]
sub esp, 8
mov ebx, dword [0x45a31c]
mov edi, dword [0x452484]
mov eax, dword [esp + 0x60]
mov dword [esp], ebp
mov dword [esp + 0x10], 0x24
imul eax, esi
mov dword [esp + 8], 0xffffffff
cdq
idiv ecx
add eax, ebx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x6c]
imul eax, esi
mov esi, dword [esp + 0x30]
cdq
idiv ecx
add eax, ebx
mov dword [esp + 0xa8], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0xc], eax
lea eax, [edi + 0x254]
mov dword [esp + 4], eax
call esi
mov edi, dword [0x452484]
sub esp, 0x14
mov eax, dword [esp + 0x3c]
mov dword [esp], ebp
mov dword [esp + 0x30], esi
add eax, 0x11b
imul eax, dword [0x45a320]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xa0], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0xc], eax
lea eax, [edi + 0x1bc]
mov dword [esp + 4], eax
call esi
xor eax, eax
sub esp, 0x14
mov edi, dword [esp + 0x114]
mov ebx, dword [esp + 0x58]
mov dword [esp], ebp
cmp dword [0x45ae08], edi
sete al
add eax, 1
mov dword [esp + 4], eax
call ebx
mov eax, dword [0x4524f4]
sub esp, 8
mov dword [esp], ebp
mov ebx, dword [esp + 0x38]
mov dword [esp + 4], eax
call ebx
sub esp, 8
mov ecx, dword [esp + 0x34]
mov dword [esp], ebp
mov dword [esp + 4], 0x703030
call ecx
mov edi, dword [0x452484]
sub esp, 8
mov eax, dword [esp + 0x74]
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], 0x40
imul eax, dword [0x45a320]
add ebx, dword [esp + 0x114]
shl ebx, 3
lea esi, [ebx + 0x458620]
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xa8], eax
movzx eax, byte [ebx + 0x45862b]
add ebx, 0x4584a0
mov dword [esp + 0xc], eax
lea eax, [edi + 0x918]
mov edi, dword [esp + 0x40]
mov dword [esp + 8], eax
mov dword [esp], edi
call fcn.0040fce0
lea eax, [esp + 0xa0]
mov dword [esp], ebp
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], edi
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
call eax
sub esp, 0x14
mov eax, dword [esp + 0x78]
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_DeleteObject]
sub esp, 4
mov eax, dword [esp + 0x70]
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_DeleteDC]
sub esp, 4
call dword [sym.imp.GDI32.dll_GdiFlush]
mov dword [esp + 8], esi
mov dword [esp], ebx
mov dword [esp + 0xc], 0x28
mov dword [esp + 4], 0x28
call dword [0x42e308]
add esp, 0xfc
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x10624dd3
mov dword [esp + 4], 0x40
mul ecx
shr edx, 6
imul eax, edx, 0x3e8
mov dword [esp + 0xc], edx
sub ecx, eax
mov eax, dword [0x452484]
mov dword [esp + 0x10], ecx
add eax, 0x8e6
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.0040fce0
jmp 0x4115e6
lea eax, [esp + 0x98]
mov dword [esp + 8], 0x3e8
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0042d3d0
mov edx, dword [esp + 0x98]
mov dword [esp + 4], 0x40
mov dword [esp + 0xc], eax
mov eax, dword [0x452484]
mov dword [esp + 0x10], edx
add eax, 0x8e6
mov dword [esp + 8], eax
lea eax, [esp + 0xb0]
mov dword [esp], eax
mov dword [esp + 0x40], eax
call fcn.0040fce0
jmp 0x41125d
mov ebx, dword [esp + 0x60]
mov esi, dword [esp + 0x64]
mov dword [esp + 4], 0x40
mov eax, dword [esp + 0x80]
mov edi, dword [esp + 0x50]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x18], esi
add eax, 0x950
mov dword [esp + 0x10], edi
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.0040fce0
jmp 0x411bcd
mov ecx, 1
cmp dword [esp + 0x114], edx
je 0x412730
mov eax, dword [esp + 0x110]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0x58]
call eax
mov ebp, dword [0x45a320]
mov eax, esi
mov ecx, dword [0x45a31c]
sub esp, 8
imul eax, ebp
cdq
idiv dword [0x42e2e8]
add eax, ecx
mov dword [esp + 0xa0], eax
lea eax, [esi + 0x2b]
imul eax, ebp
cdq
idiv dword [0x42e2e8]
add eax, ecx
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x48]
movzx edx, byte [ebx + eax + 0x458624]
test dl, dl
jne 0x412690
mov dword [esp + 0xb0], 0x200020
xor edx, edx
mov word [esp + 0xb4], dx
lea eax, [esp + 0xa0]
mov dword [esp + 0x10], 0x26
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], eax
mov eax, dword [esp + 0x110]
mov dword [esp], eax
mov eax, dword [esp + 0x30]
call eax
sub esp, 0x14
jmp 0x412150
mov eax, dword [0x42e2e4]
xor edi, edi
mov ebp, dword [0x452484]
cmp eax, 6
cmovge eax, edi
imul eax, eax, 0x7c
add eax, 0x4568e0
movzx ecx, byte [eax + 0x6d]
and ecx, 0xf
cmp cl, 2
je 0x412700
mov dword [esp + 0xc], edx
add ebp, 0x918
mov eax, dword [esp + 0x40]
mov dword [esp + 8], ebp
mov dword [esp + 4], 0x40
mov dword [esp], eax
call fcn.0040fce0
jmp 0x412655
cdq
shr edx, 0x1e
add eax, edx
and eax, 3
sub eax, edx
cmp eax, ebx
jne 0x412150
mov ecx, 2
jmp 0x4125e2
test byte [eax + 0x70], 8
je 0x412b20
mov eax, edx
and eax, 0xf
test dl, 0x10
jne 0x412c1b
mov dword [esp + 0xc], eax
test dl, dl
jns 0x412b30
add ebp, 0x98a
jmp 0x4126c1
cdq
xor ecx, ecx
shr edx, 0x1e
add eax, edx
and eax, 3
sub eax, edx
cmp ebx, eax
sete cl
add ecx, 1
jmp 0x4125e2
mov dword [esp + 4], 0x703030
mov eax, dword [esp + 0x34]
xor ebx, ebx
mov dword [esp], ebp
call eax
mov ecx, dword [0x45ae10]
sub esp, 8
mov eax, dword [esp + 0x3c]
lea esi, [eax + 0x73]
mov eax, dword [esp + 0x114]
lea eax, [eax + eax*2]
mov edi, eax
mov eax, 0x2aaaaaab
imul ecx
mov eax, ecx
sar eax, 0x1f
sub edx, eax
mov eax, dword [esp + 0x48]
cmp byte [ebx + eax + 0x458624], 0
jne 0x4127c0
cmp dword [esp + 0x114], edx
je 0x4128c0
add ebx, 1
cmp ebx, 6
je 0x412162
add esi, 0x2c
jmp 0x41277f
mov eax, 1
cmp dword [esp + 0x114], edx
je 0x412a88
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp], ebp
call eax
mov ecx, dword [0x45a320]
mov eax, esi
sub esp, 8
imul eax, ecx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xa0], eax
lea eax, [esi + 0x27]
imul eax, ecx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x48]
movzx eax, byte [ebx + eax + 0x458624]
test al, al
jne 0x412890
mov dword [esp + 0xb0], 0x200020
xor ecx, ecx
mov word [esp + 0xb4], cx
lea eax, [esp + 0xa0]
mov dword [esp + 0x10], 0x26
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp], ebp
call eax
sub esp, 0x14
cmp ebx, 5
je 0x412aa8
mov ecx, dword [0x45ae10]
add ebx, 1
add esi, 0x2c
jmp 0x41277f
mov dword [esp + 0xc], eax
mov eax, dword [0x452484]
mov dword [esp + 4], 0x40
add eax, 0x918
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.0040fce0
jmp 0x412840
lea edx, [edi + edi]
mov eax, ecx
sub eax, edx
cmp eax, ebx
jne 0x4127a8
mov eax, 2
jmp 0x4127d2
test byte [eax + 0x70], 8
je 0x412b40
and ecx, 0x10
jne 0x412c32
cmp dword [esp + 0x114], ebx
jne 0x412294
mov eax, 2
jmp 0x412c41
mov dword [esp + 4], 0x703030
mov eax, dword [esp + 0x34]
mov dword [esp], ebp
call eax
sub esp, 8
jmp 0x411cf4
xor eax, eax
cmp dword [esp + 0x114], ebx
sete al
add eax, 1
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp], ebp
call eax
mov eax, dword [0x4524f4]
sub esp, 8
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
call eax
sub esp, 8
mov dword [esp + 4], 0x703030
mov eax, dword [esp + 0x34]
mov dword [esp], ebp
call eax
sub esp, 8
mov eax, dword [esp + 0x3c]
add eax, 0xad
imul eax, dword [0x45a320]
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x5c]
add eax, dword [esp + 0x114]
movzx eax, byte [eax*8 + 0x45862a]
test al, al
jne 0x412be7
mov dword [esp + 0xb0], 0x200020
xor eax, eax
mov word [esp + 0xb4], ax
lea eax, [esp + 0xa0]
mov dword [esp + 0x10], 0x26
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp], ebp
call eax
sub esp, 0x14
jmp 0x412294
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x64]
mov dword [esp + 4], 0x40
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x14], edx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x88]
add eax, 0x944
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.0040fce0
jmp 0x411bcd
sub ecx, edx
mov dword [esp], 0x12
mov eax, dword [esp + 0x94]
mov dword [esp + 0xa4], ecx
call eax
sub esp, 4
mov dword [esp + 8], eax
lea eax, [esp + 0xa0]
mov dword [esp + 4], eax
mov dword [esp], ebp
call dword [sym.imp.USER32.dll_FillRect]
sub esp, 0xc
jmp 0x411485
mov eax, dword [esp + 0x114]
lea eax, [eax + eax*2]
add eax, eax
sub ecx, eax
xor eax, eax
cmp ebx, ecx
sete al
add eax, 1
jmp 0x4127d2
mov eax, dword [esp + 0x5c]
add eax, dword [esp + 0x114]
cmp byte [eax*8 + 0x458629], 0
je 0x412162
cmp byte [0x456673], 0
je 0x412162
mov dword [esp + 4], 1
mov eax, dword [esp + 0x58]
mov dword [esp], ebp
call eax
sub esp, 8
lea eax, [esp + 0xa0]
mov dword [esp + 0x10], 0x26
mov dword [esp + 0xc], eax
mov eax, dword [0x452484]
mov dword [esp + 8], 0xffffffff
add eax, 0x73c
mov dword [esp], ebp
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
call eax
sub esp, 0x14
jmp 0x412162
movzx eax, dl
cmp dl, 0xa
ja 0x412c18
mov dword [esp + 0xc], eax
add ebp, 0x992
jmp 0x4126c1
cmp cl, 0xa
ja 0x412b59
cmp dword [esp + 0x114], ebx
jne 0x412294
mov eax, 2
jmp 0x412b68
xor eax, eax
cmp dword [esp + 0x114], ebx
sete al
add eax, 1
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp], ebp
call eax
mov eax, dword [0x4524f4]
sub esp, 8
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
call eax
sub esp, 8
mov dword [esp + 4], 0x703030
mov eax, dword [esp + 0x34]
mov dword [esp], ebp
call eax
sub esp, 8
mov eax, dword [esp + 0x3c]
add eax, 0xad
imul eax, dword [0x45a320]
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x5c]
add eax, dword [esp + 0x114]
movzx eax, byte [eax*8 + 0x45862a]
lea edx, [eax - 0xb]
sub eax, 0xa
cmp dl, 3
ja 0x4129b7
mov dword [esp + 0xc], eax
mov eax, dword [0x452484]
mov dword [esp + 4], 0x40
add eax, 0x918
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.0040fce0
jmp 0x4129cc
sub eax, 0xa
mov dword [esp + 0xc], eax
jmp 0x4126bb
mov eax, 2
jmp 0x41293f
xor eax, eax
cmp dword [esp + 0x114], ebx
sete al
add eax, 1
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
mov dword [esp], ebp
call eax
mov eax, dword [0x4524f4]
sub esp, 8
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
call eax
sub esp, 8
mov dword [esp + 4], 0x703030
mov eax, dword [esp + 0x34]
mov dword [esp], ebp
call eax
sub esp, 8
mov eax, dword [esp + 0x3c]
add eax, 0xad
imul eax, dword [0x45a320]
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x5c]
add eax, dword [esp + 0x114]
movzx eax, byte [eax*8 + 0x45862a]
mov edx, eax
and edx, 0xf
je 0x4129b7
test al, 0xc
jne 0x4129b7
movzx edx, dl
mov dword [esp + 0xc], edx
jmp 0x412beb