Function at 0x401030
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x674
mov eax, 0x553
mov word [ebp - 0xb4], ax
mov byte [ebp - 2], 0x5b
mov ecx, 0xa0d
mov word [ebp - 0x50], cx
mov byte [ebp - 0x75], 0x7f
mov dword [ebp - 0x64], 0x457b
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x60], 0x861
mov dword [ebp - 0xf8], 0x31
mov edx, 0xf43
mov word [ebp - 0x38], dx
mov byte [ebp - 0xc5], 0x2b
mov dword [ebp - 0x84], 0xe053
mov eax, 0xd53
mov word [ebp - 0x3c], ax
mov dword [ebp - 0xec], 0x7305
mov dword [ebp - 0xa4], 0x7bcd
mov ecx, 0x3d3
mov word [ebp - 0x24], cx
mov edx, 0x2a7
mov word [ebp - 0x10], dx
mov eax, 0x9a1
mov word [ebp - 0x2c], ax
mov dword [ebp - 0x74], 0x172f
mov byte [ebp - 5], 0x69
mov dword [ebp - 0xd0], 0x1277
mov byte [ebp - 4], 0x61
mov dword [ebp - 0x100], 0x72c3
push 0x82a725
mov ecx, dword [ebp - 0x3e8]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
movsx edx, word [section..data]
add edx, 0x731
mov word [section..data], dx
mov dword [ebp - 0x184], 0x9dd5
mov dword [ebp - 0x110], 0x64dc
mov dword [ebp - 0x29c], 0x331
mov dword [ebp - 0x124], 0x4b24
movsx eax, byte [ebp - 4]
shl eax, 3
mov byte [ebp - 4], al
mov dword [ebp - 0x1bc], 0xae97
mov dword [ebp - 0x14c], 0x88bc
mov dword [ebp - 0x120], 0x8742
mov dword [ebp - 0x134], 0x52b1
mov cl, byte [ebp - 4]
mov byte [ebp - 0x394], cl
cmp byte [ebp - 0x394], 8
je 0x40118b
jmp 0x4054ba
mov edx, 0xb91
mov word [0x407018], dx
mov dword [ebp - 0x314], 0xd870
mov dword [ebp - 0x248], 0xaa4b
mov dword [ebp - 0x13c], 0xaa91
mov dword [ebp - 0x210], 0xe0ca
mov dword [ebp - 0x198], 0x66b5
mov dword [ebp - 0x48], 0x5d19
mov dword [ebp - 0x150], 0x3f87
mov dword [ebp - 0x148], 0xa514
movsx eax, word [section..data]
imul ecx, eax, 0x51b
mov word [ebp - 0x10], cx
mov dword [ebp - 0x18c], 0x1c18
mov dword [ebp - 0x11c], 0xd2d4
cmp dword [ebp - 0x110], 0x65d2
ja 0x40123f
mov edx, dword [ebp - 0x110]
add edx, 0xf6
mov dword [ebp - 0x110], edx
movsx eax, byte [ebp - 4]
xor eax, 0x13
mov byte [ebp - 4], al
mov ecx, dword [ebp - 0x48]
or ecx, 0x8e5
mov dword [ebp - 0x48], ecx
jmp 0x401209
movzx edx, byte [0x407002]
and edx, 0x67
mov byte [0x407002], dl
mov dword [ebp - 0x140], 0x8e95
mov dword [ebp - 0x168], 0xa421
mov dword [ebp - 0x114], 0x525f
mov eax, dword [ebp - 0x114]
sub eax, 0x95
mov dword [ebp - 0x114], eax
movzx ecx, byte [0x407002]
sar ecx, 1
mov byte [0x407002], cl
movsx edx, word [section..data]
sar edx, 5
mov word [ebp - 0x10], dx
cmp dword [ebp - 0x114], 0x5135
jae 0x40126d
mov dword [ebp - 0x40], 0x52ab
mov dword [ebp - 0x128], 0xa055
mov dword [ebp - 0x16c], 0x8e22
mov eax, dword [ebp - 0x3ec]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2b0], 0xe91e
mov dword [ebp - 0x118], 0x6274
push 0x4fe7fe
mov ecx, dword [ebp - 0x3f0]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x138], 0x53bb
cmp dword [ebp - 0x118], 0x626b
jbe 0x401337
mov edx, dword [ebp - 0x118]
sub edx, 9
mov dword [ebp - 0x118], edx
push 0x570e56
mov eax, dword [ebp - 0x3f4]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
jmp 0x401305
imul ecx, dword [ebp - 0x48], 0x17ad
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x154], 0x2c36
mov dx, word [ebp - 0x10]
mov word [ebp - 0x20], dx
mov dword [ebp - 0x15c], 0x9298
mov al, byte [0x407002]
mov byte [0x40701a], al
mov ecx, dword [ebp - 0x3f8]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x12c], 0x44ff
mov edx, dword [ebp - 0x48]
and edx, dword [ebp - 0x60]
mov dword [0x407004], edx
mov dword [ebp - 0x1b8], 0x326f
cmp dword [ebp - 0x11c], 0xd336
ja 0x4013c4
mov eax, dword [ebp - 0x11c]
add eax, 0x62
mov dword [ebp - 0x11c], eax
mov ecx, dword [ebp - 0x3fc]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x28], eax
jmp 0x401397
movsx edx, byte [ebp - 4]
or edx, 0xd
mov byte [ebp - 2], dl
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x33c], 0x39db
mov dword [ebp - 0x160], 0x6802
mov dword [ebp - 0x158], 0x28c
mov dword [ebp - 0x240], 0x85f0
push 0x494975
mov ecx, dword [ebp - 0x400]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x130], 0xd5d3
mov dword [ebp - 0x2c8], 0x9b61
mov edx, dword [ebp - 0x120]
add edx, 0xc1
mov dword [ebp - 0x120], edx
mov eax, dword [ebp - 0x60]
xor eax, dword [ebp - 0x48]
mov dword [0x407004], eax
cmp dword [ebp - 0x120], 0x88c4
jb 0x401425
mov ecx, dword [ebp - 0x404]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x180], 0xb9ff
cmp dword [ebp - 0x124], 0x4ace
jb 0x40149d
mov edx, dword [ebp - 0x124]
sub edx, 0x2b
mov dword [ebp - 0x124], edx
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
add ecx, 0xa83b
mov dword [ebp - 0x40], ecx
movsx edx, byte [ebp - 2]
shl edx, 7
mov byte [ebp - 4], dl
jmp 0x401468
cmp dword [ebp - 0x128], 0x9fa0
jbe 0x4014d0
mov eax, dword [ebp - 0x128]
sub eax, 0xb5
mov dword [ebp - 0x128], eax
movzx ecx, word [0x407018]
sub ecx, 0x8f7
mov word [0x407018], cx
jmp 0x40149d
push 0xbcba75
mov edx, dword [ebp - 0x408]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x12c], 0x44ea
jbe 0x401525
mov eax, dword [ebp - 0x12c]
sub eax, 7
mov dword [ebp - 0x12c], eax
mov ecx, dword [ebp - 0x40]
sub ecx, 0x8583
mov edx, dword [ebp - 0x30]
mov dword [edx], ecx
push 0x4d413d
mov eax, dword [ebp - 0x40c]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
jmp 0x4014e5
cmp dword [ebp - 0x130], 0xd68a
jae 0x401565
mov ecx, dword [ebp - 0x130]
add ecx, 0xb7
mov dword [ebp - 0x130], ecx
mov edx, dword [ebp - 0x410]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
movsx eax, word [ebp - 0x20]
movsx ecx, word [ebp - 0x10]
or eax, ecx
mov word [section..data], ax
jmp 0x401525
push 0x9ddd53
mov edx, dword [ebp - 0x414]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x17c], 0xdee6
mov eax, dword [ebp - 0x134]
add eax, 0xe1
mov dword [ebp - 0x134], eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x40]
shl edx, cl
mov eax, dword [ebp - 0x30]
mov dword [eax], edx
cmp dword [ebp - 0x134], 0x5473
jne 0x401584
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x24c], 0x6760
cmp dword [ebp - 0x138], 0x55e9
je 0x4015f0
mov edx, dword [ebp - 0x138]
add edx, 0xba
mov dword [ebp - 0x138], edx
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x30]
mov dword [edx], ecx
jmp 0x4015c3
cmp dword [ebp - 0x13c], 0xaa91
jb 0x401620
mov eax, dword [ebp - 0x13c]
sub eax, 0x88
mov dword [ebp - 0x13c], eax
movsx ecx, word [ebp - 0x20]
movsx edx, word [section..data]
xor ecx, edx
mov word [ebp - 0x10], cx
jmp 0x4015f0
lea eax, [ebp - 2]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x234], 0xba4f
mov dword [ebp - 0x144], 0xaeba
cmp dword [ebp - 0x140], 0x8e95
jb 0x401673
mov ecx, dword [ebp - 0x140]
sub ecx, 0x76
mov dword [ebp - 0x140], ecx
mov edx, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x40]
shr edx, cl
mov eax, dword [ebp - 0x30]
mov dword [eax], edx
mov ecx, dword [ebp - 0x48]
and ecx, dword [0x407004]
mov dword [ebp - 0x60], ecx
jmp 0x40163a
mov edx, dword [ebp - 0x30]
mov eax, dword [edx]
and eax, dword [ebp - 0x40]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x230], 0x5f97
mov dword [ebp - 0x22c], 0x46aa
cmp dword [ebp - 0x144], 0xaeea
je 0x4016d5
mov ecx, dword [ebp - 0x144]
add ecx, 0x30
mov dword [ebp - 0x144], ecx
movzx edx, byte [0x40701a]
add edx, 0xd1
mov byte [0x407002], dl
mov eax, dword [ebp - 0x418]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
jmp 0x401695
cmp dword [ebp - 0x148], 0xa4be
jbe 0x401702
mov ecx, dword [ebp - 0x148]
sub ecx, 0x2b
mov dword [ebp - 0x148], ecx
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x94]
shr edx, cl
mov eax, dword [ebp - 0x30]
mov dword [eax], edx
jmp 0x4016d5
lea ecx, [ebp - 4]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1b4], 0x81f6
mov edx, dword [ebp - 0x41c]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x14c], 0x8974
jae 0x401765
mov eax, dword [ebp - 0x14c]
add eax, 0x5c
mov dword [ebp - 0x14c], eax
push 0x21d200
mov ecx, dword [ebp - 0x420]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
movsx edx, word [ebp - 0x20]
movsx eax, word [section..data]
xor edx, eax
mov word [ebp - 0x10], dx
jmp 0x401722
mov ecx, dword [ebp - 0x424]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
mov edx, dword [0x407004]
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x164], 0xcbf2
mov eax, dword [ebp - 0x150]
add eax, 0x51
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x30]
mov dword [eax], edx
cmp dword [ebp - 0x150], 0x4029
jb 0x401788
cmp dword [ebp - 0x154], 0x2cb2
ja 0x4017f3
mov ecx, dword [ebp - 0x154]
add ecx, 0x7c
mov dword [ebp - 0x154], ecx
push 0x7d7f0d
mov edx, dword [ebp - 0x428]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x40]
or eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
jmp 0x4017b3
cmp dword [ebp - 0x158], 0x20e
jbe 0x401830
mov edx, dword [ebp - 0x158]
sub edx, 0x2a
mov dword [ebp - 0x158], edx
mov eax, dword [ebp - 0x58]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 2]
shl edx, cl
mov eax, dword [ebp - 0x4c]
mov byte [eax], dl
movsx edx, byte [ebp - 4]
mov eax, dword [ebp - 0x4c]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 2], dl
jmp 0x4017f3
push 0xe87c4e
mov ecx, dword [ebp - 0x42c]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x174], 0x1be8
mov dword [ebp - 0x208], 0x3d34
mov dword [ebp - 0x1fc], 0xbf7e
movsx edx, word [ebp - 0x20]
movsx ecx, word [ebp - 0x10]
sar edx, cl
mov word [ebp - 0x24], dx
mov eax, dword [ebp - 0x430]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x15c]
add ecx, 0xc0
mov dword [ebp - 0x15c], ecx
mov edx, dword [ebp - 0x30]
mov eax, dword [edx]
or eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
cmp dword [ebp - 0x15c], 0x9358
jbe 0x401881
cmp dword [ebp - 0x160], 0x685e
ja 0x4018e7
mov edx, dword [ebp - 0x160]
add edx, 0x2e
mov dword [ebp - 0x160], edx
mov eax, dword [ebp - 0x94]
sub eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
mov edx, dword [ebp - 0x434]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x28], eax
jmp 0x4018ac
mov al, byte [0x40701a]
mov byte [ebp - 3], al
mov dword [ebp - 0x190], 0x7f7a
mov dword [ebp - 0x1d0], 0x94c1
mov cx, word [ebp - 0x24]
mov word [0x40701c], cx
mov dword [ebp - 0x170], 0xe69c
mov dword [ebp - 0x178], 0x69e0
push 0x99962f
mov edx, dword [ebp - 0x438]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x188], 0x7f23
mov dword [ebp - 0x1b0], 0x21b0
mov eax, dword [ebp - 0x43c]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x194], 0xe611
lea ecx, [ebp - 2]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x2b8], 0x7d80
mov edx, dword [ebp - 0x164]
sub edx, 0x29
mov dword [ebp - 0x164], edx
movsx eax, word [ebp - 0x20]
movsx ecx, word [ebp - 0x24]
xor eax, ecx
mov word [0x40701c], ax
cmp dword [ebp - 0x164], 0xcba0
ja 0x401975
cmp dword [ebp - 0x168], 0xa49f
jae 0x4019dc
mov edx, dword [ebp - 0x168]
add edx, 0x7e
mov dword [ebp - 0x168], edx
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x30]
mov dword [edx], ecx
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x94], eax
jmp 0x4019a0
push 0x4e61c1
mov ecx, dword [ebp - 0x440]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x280], 0xf046
mov dword [ebp - 0x250], 0xdcbd
cmp dword [ebp - 0x16c], 0x8f48
je 0x401a52
mov edx, dword [ebp - 0x84]
sub edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x30]
mov dword [eax], edx
mov ecx, dword [ebp - 0x16c]
add ecx, 0x62
mov dword [ebp - 0x16c], ecx
movzx edx, byte [0x407002]
movzx eax, byte [0x40701a]
add edx, eax
mov byte [ebp - 3], dl
movsx ecx, byte [ebp - 2]
movsx edx, byte [ebp - 4]
and ecx, edx
mov eax, dword [ebp - 0x5c]
mov byte [eax], cl
jmp 0x401a05
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x84]
xor edx, dword [ecx]
mov dword [0x407008], edx
movsx eax, word [ebp - 0x10]
movsx ecx, word [section..data]
shl eax, cl
mov word [ebp - 0x24], ax
cmp dword [ebp - 0x170], 0xe69c
jb 0x401aa2
mov ecx, dword [ebp - 0x170]
sub ecx, 0xd5
mov dword [ebp - 0x170], ecx
mov edx, dword [0x407004]
mov ecx, dword [ebp - 0x60]
sar edx, cl
mov dword [ebp - 0x48], edx
jmp 0x401a74
mov dword [0x407020], 0x407018
mov dword [ebp - 0x1d4], 0x3e1a
mov dword [ebp - 0x298], 0xc3a6
mov dword [ebp - 0x1dc], 0xe192
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x40]
mov dword [ebp - 0xd0], ecx
mov dl, byte [ebp - 3]
mov byte [ebp - 1], dl
mov eax, dword [ebp - 0x48]
mov dword [0x407024], eax
mov dword [ebp - 0x1ac], 0xe4c4
mov dword [ebp - 0x218], 0xbcfb
movzx ecx, word [0x407018]
mov edx, dword [0x407020]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x2c], cx
mov ecx, dword [ebp - 0x58]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x4c]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0x5c]
mov byte [eax], dl
mov ecx, dword [ebp - 0x444]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
movsx edx, word [ebp - 0x20]
movsx ecx, word [ebp - 0x24]
sar edx, cl
mov word [0x40700c], dx
cmp dword [ebp - 0x174], 0x1be8
ja 0x401b6e
mov eax, dword [ebp - 0x174]
add eax, 0x86
mov dword [ebp - 0x174], eax
mov edx, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x44]
shl edx, cl
mov dword [ebp - 0x48], edx
jmp 0x401b44
mov dword [ebp - 0x54], 0x407008
mov dword [ebp - 0x1e0], 0x2b2a
mov dword [ebp - 0x290], 0xe848
mov dword [ebp - 0x278], 0x62fe
cmp dword [ebp - 0x178], 0x6a02
je 0x401bd8
mov eax, dword [ebp - 0x178]
add eax, 0x22
mov dword [ebp - 0x178], eax
movzx ecx, byte [0x40701a]
movzx edx, byte [ebp - 1]
xor ecx, edx
mov byte [0x407002], cl
push 0x6e79da
mov eax, dword [ebp - 0x448]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
jmp 0x401b93
mov ecx, dword [ebp - 0x44c]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x17c], 0xdfbd
jae 0x401c2b
mov edx, dword [ebp - 0x17c]
add edx, 0xd7
mov dword [ebp - 0x17c], edx
push 0x3d69e9
mov eax, dword [ebp - 0x450]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x94]
sub ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x54]
mov dword [edx], ecx
jmp 0x401be8
mov al, byte [ebp - 2]
mov byte [ebp - 0x11], al
mov dword [ebp - 0x328], 0x360c
mov ecx, dword [ebp - 0x454]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x28], eax
lea edx, [ebp - 0x20]
mov dword [0x407028], edx
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x74], eax
push 0x7d1d7b
mov ecx, dword [ebp - 0x458]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1ec], 0xadc2
mov edx, dword [ebp - 0x54]
mov eax, dword [edx]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0xd0], eax
lea ecx, [ebp - 1]
mov dword [0x40702c], ecx
push 0x118f2
mov edx, dword [ebp - 0x45c]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c4], 0x8c86
movzx eax, word [0x407018]
mov ecx, dword [0x407020]
movzx ecx, word [ecx]
shl eax, cl
mov word [ebp - 0x2c], ax
mov edx, dword [ebp - 0x180]
add edx, 0xd1
mov dword [ebp - 0x180], edx
movsx eax, byte [ebp - 4]
movsx ecx, byte [ebp - 0x11]
sub eax, ecx
mov byte [ebp - 2], al
movsx edx, word [0x40701c]
movsx eax, word [section..data]
xor edx, eax
mov ecx, dword [0x407028]
mov word [ecx], dx
cmp dword [ebp - 0x180], 0xbba1
jb 0x401cb2
lea edx, [ebp - 0x44]
mov dword [ebp - 0x9c], edx
mov dword [ebp - 0x374], 0x183e
mov dword [ebp - 0x264], 0x16aa
mov eax, dword [ebp - 0x184]
sub eax, 0x74
mov dword [ebp - 0x184], eax
mov ecx, dword [ebp - 0x460]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x464]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x184], 0x9ced
jae 0x401d29
mov eax, dword [0x407008]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x1a8], 0x4bfb
mov ecx, dword [0x40702c]
mov dl, byte [ecx]
mov byte [0x40701b], dl
push 0xaefdc4
mov eax, dword [ebp - 0x468]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x98], 0x407018
cmp dword [ebp - 0x188], 0x800f
ja 0x401dd7
mov ecx, dword [ebp - 0x188]
add ecx, 0xec
mov dword [ebp - 0x188], ecx
mov edx, dword [ebp - 0x5c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x58]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 4], al
jmp 0x401da6
lea eax, [ebp - 0x24]
mov dword [0x407030], eax
push 0x721a78
mov ecx, dword [ebp - 0x46c]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2dc], 0x80d1
lea edx, [ebp - 0x44]
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0x1a0], 0x3e78
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax]
and ecx, dword [0x407008]
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0x2e0], 0xed3b
mov dword [ebp - 0x31c], 0xfde7
mov edx, dword [0x40702c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 1]
sar eax, cl
mov byte [0x40701a], al
mov ecx, dword [ebp - 0x470]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1c0], 0xa125
movzx edx, word [0x407018]
mov eax, dword [ebp - 0x98]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x38], dx
mov ecx, dword [ebp - 0x5c]
mov dl, byte [ecx]
mov byte [ebp - 0x19], dl
mov eax, dword [ebp - 0x474]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c8], 0xdce8
lea ecx, [ebp - 0x10]
mov dword [0x407034], ecx
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
imul eax, dword [edx]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x70], 0x407008
mov dword [ebp - 0x1a4], 0xc4c8
mov dword [ebp - 0x200], 0xcc2d
push 0xe19f34
mov ecx, dword [ebp - 0x478]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x274], 0xa54f
mov edx, dword [0x40702c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 3]
and eax, ecx
mov byte [0x407003], al
mov dword [ebp - 0x204], 0x33c7
movzx edx, word [ebp - 0x38]
movzx eax, word [ebp - 0x2c]
or edx, eax
mov word [ebp - 0x3c], dx
mov ecx, dword [ebp - 0x47c]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0x4c]
mov al, byte [edx]
mov byte [ebp - 0x1b], al
movsx eax, word [ebp - 0x20]
cdq
mov ecx, 0x3bd
idiv ecx
mov word [section..data], ax
mov edx, dword [ebp - 0x74]
xor edx, dword [ebp - 0x48]
mov dword [ebp - 0x44], edx
lea eax, [ebp - 0x84]
mov dword [ebp - 0x8c], eax
mov cl, byte [ebp - 1]
mov byte [0x40701e], cl
mov dword [ebp - 0x304], 0x5b5
lea edx, [ebp - 0x3c]
mov dword [ebp - 0x90], edx
mov dword [ebp - 0x1e8], 0xaeca
mov dword [ebp - 0x2bc], 0xa09b
mov dword [ebp - 0x2d4], 0x6d2f
movsx eax, byte [ebp - 0x1b]
mov ecx, dword [ebp - 0x4c]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x19], al
mov eax, dword [0x407034]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x10]
shl edx, cl
mov eax, dword [0x407034]
mov word [eax], dx
cmp dword [ebp - 0x18c], 0x1e6d
je 0x401ff4
mov ecx, dword [ebp - 0x18c]
add ecx, 0xc7
mov dword [ebp - 0x18c], ecx
mov edx, dword [ebp - 0x7c]
mov eax, dword [edx]
sub eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x7c]
mov dword [ecx], eax
push 0x5a4e0d
mov edx, dword [ebp - 0x480]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
jmp 0x401fb2
mov dword [ebp - 0x6c], 0x407008
movzx eax, byte [ebp - 3]
mov ecx, dword [0x40702c]
movzx edx, byte [ecx]
sub eax, edx
mov byte [0x40700e], al
mov dword [ebp - 0x2a0], 0x794c
cmp dword [ebp - 0x190], 0x7f7a
ja 0x40205f
mov eax, dword [ebp - 0x190]
add eax, 0xd3
mov dword [ebp - 0x190], eax
mov ecx, dword [ebp - 0x90]
movzx edx, word [ecx]
movzx eax, word [0x407018]
or edx, eax
mov word [ebp - 0x2c], dx
mov ecx, dword [ebp - 0x5c]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 4]
shl edx, cl
mov eax, dword [ebp - 0x58]
mov byte [eax], dl
jmp 0x402019
mov ecx, dword [ebp - 0x194]
sub ecx, 0x70
mov dword [ebp - 0x194], ecx
movsx edx, word [ebp - 0x24]
movsx eax, word [0x40701c]
add edx, eax
mov word [0x40700c], dx
push 0x3cdbd9
mov ecx, dword [ebp - 0x484]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x194], 0xe531
ja 0x40205f
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x9c]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x198], 0x66b5
ja 0x4020f1
mov edx, dword [ebp - 0x198]
add edx, 0x7e
mov dword [ebp - 0x198], edx
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov eax, dword [ebp - 0x54]
mov dword [eax], edx
mov ecx, dword [ebp - 0x488]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x28], eax
jmp 0x4020b3
lea edx, [ebp - 1]
mov dword [0x407038], edx
mov dword [ebp - 0x1f0], 0x3903
mov dword [ebp - 0x19c], 0xdaaa
mov eax, dword [ebp - 0x19c]
sub eax, 0x81
mov dword [ebp - 0x19c], eax
mov ecx, dword [ebp - 0x98]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x2c]
and edx, eax
mov word [ebp - 0x3c], dx
push 0x3e0455
mov ecx, dword [ebp - 0x48c]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x19c], 0xda29
jae 0x40210e
lea edx, [ebp - 4]
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x284], 0x7ff1
movsx eax, word [ebp - 0x24]
movsx ecx, word [section..data]
and eax, ecx
mov edx, dword [0x407030]
mov word [edx], ax
cmp dword [ebp - 0x1a0], 0x3f58
jae 0x4021bc
mov eax, dword [ebp - 0x1a0]
add eax, 0xe0
mov dword [ebp - 0x1a0], eax
mov ecx, dword [ebp - 0x7c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9c]
add edx, dword [eax]
mov ecx, dword [ebp - 0x7c]
mov dword [ecx], edx
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x70]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov dword [ebp - 0xd0], edx
jmp 0x402179
lea eax, [ebp - 1]
mov dword [0x40703c], eax
mov ecx, dword [ebp - 0x98]
movzx eax, word [ecx]
mov edx, dword [ebp - 0x90]
movzx ecx, word [edx]
cdq
idiv ecx
mov word [ebp - 0x38], ax
mov edx, dword [ebp - 0x490]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x2e8], 0x6f64
mov eax, dword [ebp - 0x4c]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x19]
xor ecx, edx
mov byte [ebp - 5], cl
mov eax, dword [ebp - 0x1a4]
add eax, 0xc5
mov dword [ebp - 0x1a4], eax
movsx ecx, word [ebp - 0x10]
mov edx, dword [0x407034]
movsx eax, word [edx]
sub ecx, eax
mov edx, dword [0x407030]
mov word [edx], cx
mov eax, dword [ebp - 0x494]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x1a4], 0xc652
jb 0x402206
mov ecx, dword [ebp - 0x60]
or ecx, dword [ebp - 0x48]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x54]
mov eax, dword [edx]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x1c4], 0xe8b5
mov dword [ebp - 0x25c], 0x145c
mov dword [ebp - 0x294], 0x96e8
lea ecx, [ebp - 1]
mov dword [0x407040], ecx
mov dword [ebp - 0x21c], 0xd054
cmp dword [ebp - 0x1a8], 0x4aeb
jb 0x4022db
mov edx, dword [ebp - 0x1a8]
sub edx, 0x88
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x90]
movzx edx, word [eax]
mov eax, dword [0x407020]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x98]
mov word [ecx], dx
movsx edx, byte [ebp - 2]
movsx ecx, byte [ebp - 0x19]
shl edx, cl
mov eax, dword [ebp - 0x68]
mov byte [eax], dl
jmp 0x402290
mov ecx, dword [0x407030]
movsx edx, word [ecx]
mov eax, dword [0x407028]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [0x407034]
mov word [ecx], dx
cmp dword [ebp - 0x1ac], 0xe4f7
jae 0x402324
mov edx, dword [ebp - 0x1ac]
add edx, 0x33
mov dword [ebp - 0x1ac], edx
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x60]
or ecx, dword [eax]
mov edx, dword [ebp - 0x7c]
mov dword [edx], ecx
jmp 0x4022f7
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x70]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0xd0], edx
mov dword [ebp - 0x1cc], 0xfe0b
push 0x22d6ed
mov eax, dword [ebp - 0x498]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1f4], 0x85ec
cmp dword [ebp - 0x1b0], 0x22f0
jae 0x4023b0
movzx ecx, byte [ebp - 3]
movzx edx, byte [ebp - 1]
xor ecx, edx
mov eax, dword [0x40703c]
mov byte [eax], cl
mov ecx, dword [ebp - 0x1b0]
add ecx, 0xa0
mov dword [ebp - 0x1b0], ecx
movzx edx, word [ebp - 0x2c]
movzx eax, word [ebp - 0x3c]
and edx, eax
mov ecx, dword [ebp - 0x90]
mov word [ecx], dx
movsx edx, byte [ebp - 4]
movsx eax, byte [ebp - 5]
add edx, eax
mov ecx, dword [ebp - 0x4c]
mov byte [ecx], dl
jmp 0x40235d
mov edx, dword [ebp - 0x1b4]
sub edx, 0x9b
mov dword [ebp - 0x1b4], edx
movsx eax, word [ebp - 0x24]
movsx ecx, word [ebp - 0x10]
sub eax, ecx
mov word [0x40700c], ax
mov edx, dword [ebp - 0x7c]
mov eax, dword [0x407004]
add eax, dword [edx]
mov ecx, dword [ebp - 0x9c]
mov dword [ecx], eax
cmp dword [ebp - 0x1b4], 0x80c0
jae 0x4023b0
cmp dword [ebp - 0x1b8], 0x3336
jae 0x402438
mov edx, dword [ebp - 0x1b8]
add edx, 0xc7
mov dword [ebp - 0x1b8], edx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x30]
mov dword [eax], edx
mov ecx, dword [0x40703c]
movzx edx, byte [ecx]
mov eax, dword [0x40702c]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [0x40701a], dl
jmp 0x4023f0
push 0xebb0d9
mov edx, dword [ebp - 0x49c]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x1bc], 0xae97
jb 0x40247f
mov eax, dword [ebp - 0x1bc]
sub eax, 0xad
mov dword [ebp - 0x1bc], eax
movzx edx, word [ebp - 0x2c]
movzx ecx, word [ebp - 0x3c]
shl edx, cl
mov eax, dword [ebp - 0x98]
mov word [eax], dx
jmp 0x40244d
cmp dword [ebp - 0x1c0], 0xa03a
jbe 0x4024c0
mov ecx, dword [ebp - 0x1c0]
sub ecx, 0xeb
mov dword [ebp - 0x1c0], ecx
mov edx, dword [ebp - 0x4a0]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
movsx eax, byte [ebp - 0x11]
mov ecx, dword [ebp - 0x58]
movsx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x4c]
mov byte [edx], al
jmp 0x40247f
mov eax, dword [ebp - 0x1c4]
add eax, 0x6b
mov dword [ebp - 0x1c4], eax
mov ecx, dword [0x407030]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x10]
or edx, eax
mov ecx, dword [0x407028]
mov word [ecx], dx
mov edx, dword [ebp - 0x9c]
mov eax, dword [edx]
or eax, dword [ebp - 0x74]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x70]
mov eax, dword [ecx]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [ebp - 0x54]
mov dword [ecx], eax
cmp dword [ebp - 0x1c4], 0xe98b
jb 0x4024c0
mov edx, dword [0x40702c]
mov al, byte [edx]
mov byte [0x40701f], al
mov dword [ebp - 0x2e4], 0x379f
mov ecx, dword [ebp - 0x98]
movzx edx, word [ecx]
mov eax, dword [0x407020]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0xb4], dx
mov dword [ebp - 0x288], 0xe1be
mov ecx, dword [ebp - 0x5c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x68]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [ebp - 0x58]
mov byte [eax], dl
mov dword [ebp - 0x358], 0x57be
movsx ecx, word [ebp - 0x10]
mov edx, dword [0x407030]
movsx eax, word [edx]
sub ecx, eax
mov edx, dword [0x407034]
mov word [edx], cx
mov dword [ebp - 0x2b4], 0x7ddc
mov dword [ebp - 0x20c], 0xe1db
lea eax, [ebp - 0x74]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x324], 0x2399
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ecx]
mov dword [ebp - 0x318], edx
cmp dword [ebp - 0x1c8], 0xde14
ja 0x4025eb
mov eax, dword [ebp - 0x1c8]
add eax, 0x96
mov dword [ebp - 0x1c8], eax
movzx ecx, byte [ebp - 3]
mov edx, dword [0x40703c]
movzx eax, byte [edx]
and ecx, eax
mov byte [0x40701b], cl
jmp 0x4025b7
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x37c], ecx
mov dword [ebp - 0x220], 0x521
movsx edx, byte [ebp - 2]
movsx eax, byte [ebp - 5]
add edx, eax
mov ecx, dword [ebp - 0x4c]
mov byte [ecx], dl
lea edx, [ebp - 0x24]
mov dword [0x407044], edx
mov dword [ebp - 0x1e4], 0xedfd
lea eax, [ebp - 0x44]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x1d8], 0x9273
push 0xfe009b
mov ecx, dword [ebp - 0x4a4]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0xd8]
add edx, dword [ebp - 0xd0]
mov dword [ebp - 0xdc], edx
mov eax, dword [0x407040]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 1]
add ecx, edx
mov eax, dword [0x40702c]
mov byte [eax], cl
mov ecx, dword [ebp - 0x4a8]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1f8], 0xfda4
cmp dword [ebp - 0x1cc], 0xfe7f
jae 0x4026be
mov edx, dword [ebp - 0x1cc]
add edx, 0x74
mov dword [ebp - 0x1cc], edx
push 0xf5dcf8
mov eax, dword [ebp - 0x4ac]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
jmp 0x40268c
mov dword [ebp - 0xa8], 0x407018
mov dword [ebp - 0x2a4], 0xab45
mov ecx, dword [ebp - 0x58]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x1b]
shl edx, cl
mov byte [ebp - 5], dl
mov dword [ebp - 0x268], 0xe0b
mov eax, dword [ebp - 0x4b0]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
lea ecx, [ebp - 0x10]
mov dword [0x407048], ecx
cmp dword [ebp - 0x1d0], 0x9464
jbe 0x402739
mov edx, dword [ebp - 0x1d0]
sub edx, 0x5d
mov dword [ebp - 0x1d0], edx
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x9c]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0xc0]
mov dword [eax], edx
jmp 0x402704
cmp dword [ebp - 0x1d4], 0x3e7e
jae 0x402790
mov ecx, dword [ebp - 0x70]
mov edx, dword [0x407008]
sub edx, dword [ecx]
mov dword [ebp - 0x318], edx
mov eax, dword [ebp - 0x1d4]
add eax, 0x32
mov dword [ebp - 0x1d4], eax
push 0xa08821
mov ecx, dword [ebp - 0x4b4]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
mov edx, dword [0x407038]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 3]
xor eax, ecx
mov byte [0x40701e], al
jmp 0x402739
mov edx, dword [ebp - 0x4b8]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x28], eax
movzx eax, word [ebp - 0x38]
mov ecx, dword [ebp - 0x90]
movzx edx, word [ecx]
imul eax, edx
mov word [ebp - 0x50], ax
mov eax, dword [ebp - 0x68]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 2]
or ecx, edx
mov eax, dword [ebp - 0x68]
mov byte [eax], cl
mov dword [ebp - 0x2f4], 0x5bfc
mov ecx, dword [ebp - 0x4bc]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x228], 0xf36
mov edx, dword [0x407048]
movsx eax, word [edx]
mov ecx, dword [0x407034]
movsx ecx, word [ecx]
sar eax, cl
mov edx, dword [0x407044]
mov word [edx], ax
push 0x37b8c1
mov eax, dword [ebp - 0x4c0]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x1d8], 0x9273
jb 0x40285b
mov ecx, dword [ebp - 0x1d8]
sub ecx, 0x12
mov dword [ebp - 0x1d8], ecx
mov edx, dword [0x407004]
mov ecx, dword [ebp - 0x60]
sar edx, cl
mov eax, dword [ebp - 0x9c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0xd8]
or edx, dword [ecx]
mov eax, dword [ebp - 0x6c]
mov dword [eax], edx
jmp 0x40281b
mov ecx, dword [ebp - 0x4c4]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x1dc], 0xe192
jb 0x40289f
mov edx, dword [ebp - 0x1dc]
sub edx, 0xe6
mov dword [ebp - 0x1dc], edx
movzx eax, byte [ebp - 1]
mov ecx, dword [0x40703c]
movzx edx, byte [ecx]
xor eax, edx
mov byte [0x40701a], al
jmp 0x40286b
push 0xeda80e
mov eax, dword [ebp - 0x4c8]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
lea ecx, [ebp - 0x38]
mov dword [ebp - 0xbc], ecx
push 0x9185d8
mov edx, dword [ebp - 0x4cc]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x4d0]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
push 0x10c078
mov ecx, dword [ebp - 0x4d4]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0x68]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x5c]
movsx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0x11], al
lea edx, [ebp - 0x10]
mov dword [0x40704c], edx
mov eax, dword [ebp - 0x5a4]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x1e0]
add ecx, 0x11
mov dword [ebp - 0x1e0], ecx
push 0x20723d
mov edx, dword [ebp - 0x4d8]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0xc0]
mov dword [edx], ecx
cmp dword [ebp - 0x1e0], 0x2b3b
jbe 0x402911
mov eax, dword [ebp - 0x1e4]
sub eax, 0x7e
mov dword [ebp - 0x1e4], eax
mov ecx, dword [ebp - 0x54]
mov edx, dword [0x407008]
and edx, dword [ecx]
mov dword [ebp - 0xdc], edx
cmp dword [ebp - 0x1e4], 0xed7f
jae 0x402961
movzx eax, byte [ebp - 1]
movzx ecx, byte [ebp - 3]
and eax, ecx
mov byte [0x40700e], al
mov dword [ebp - 0x27c], 0xaa55
mov edx, dword [ebp - 0x4dc]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x28], eax
push 0x734db
mov eax, dword [ebp - 0x4e0]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x4e4]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
mov dx, word [0x407018]
mov word [ebp - 0xb8], dx
mov dword [ebp - 0x214], 0xba93
mov eax, dword [ebp - 0x5c]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x11]
and ecx, edx
mov eax, dword [ebp - 0x68]
mov byte [eax], cl
mov ecx, dword [ebp - 0x1e8]
sub ecx, 0xe6
mov dword [ebp - 0x1e8], ecx
push 0x81b64
mov edx, dword [ebp - 0x4e8]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
movsx eax, word [ebp - 0x24]
mov ecx, dword [0x40704c]
movsx edx, word [ecx]
sub eax, edx
mov word [0x40700c], ax
cmp dword [ebp - 0x1e8], 0xacfe
jae 0x402a04
mov eax, dword [ebp - 0xac]
mov edx, dword [ebp - 0x74]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x64], edx
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
xor ecx, dword [0x407008]
mov edx, dword [ebp - 0x6c]
mov dword [edx], ecx
lea eax, [ebp - 1]
mov dword [0x407050], eax
cmp dword [ebp - 0x1ec], 0xadba
jb 0x402ab5
mov ecx, dword [ebp - 0x1ec]
sub ecx, 8
mov dword [ebp - 0x1ec], ecx
mov edx, dword [0x407020]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x2c]
add eax, ecx
mov word [ebp - 0x50], ax
mov edx, dword [ebp - 0x68]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x19]
sar eax, cl
mov ecx, dword [ebp - 0x68]
mov byte [ecx], al
jmp 0x402a74
cmp dword [ebp - 0x1f0], 0x397a
jae 0x402aea
mov edx, dword [ebp - 0x1f0]
add edx, 0x77
mov dword [ebp - 0x1f0], edx
movsx eax, word [0x40700c]
mov ecx, dword [0x40704c]
movsx edx, word [ecx]
or eax, edx
mov word [0x40701c], ax
jmp 0x402ab5
mov eax, dword [ebp - 0x1f4]
add eax, 0xab
mov dword [ebp - 0x1f4], eax
mov ecx, dword [ebp - 0xac]
mov edx, dword [ebp - 0x44]
or edx, dword [ecx]
mov dword [ebp - 0x74], edx
mov eax, dword [ebp - 0x8c]
mov edx, dword [0x407008]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0x70]
mov dword [eax], edx
cmp dword [ebp - 0x1f4], 0x8742
jne 0x402aea
cmp dword [ebp - 0x1f8], 0xfe8d
ja 0x402b63
mov ecx, dword [ebp - 0x1f8]
add ecx, 0xe9
mov dword [ebp - 0x1f8], ecx
mov edx, dword [0x407040]
movzx eax, byte [edx]
mov ecx, dword [0x40702c]
movzx edx, byte [ecx]
add eax, edx
mov byte [0x40701e], al
jmp 0x402b2a
mov eax, dword [ebp - 0xa8]
mov cx, word [eax]
mov word [ebp - 0x88], cx
cmp dword [ebp - 0x1fc], 0xc00a
je 0x402bbd
mov edx, dword [ebp - 0x1fc]
add edx, 0x8c
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x4c]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x19]
xor ecx, edx
mov byte [ebp - 2], cl
mov eax, dword [0x407048]
movsx edx, word [eax]
mov eax, dword [0x407034]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [0x407048]
mov word [ecx], dx
jmp 0x402b73
mov edx, dword [ebp - 0x4ec]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x308], 0xcd38
cmp dword [ebp - 0x200], 0xcc4d
je 0x402c02
mov eax, dword [ebp - 0x200]
add eax, 0x10
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x74]
sub ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0xac]
mov dword [edx], ecx
jmp 0x402bd7
cmp dword [ebp - 0x204], 0x326d
jb 0x402c4e
mov eax, dword [ebp - 0x204]
sub eax, 0xad
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xd8]
mov dword [ebp - 0xdc], edx
mov eax, dword [0x407040]
movzx ecx, byte [eax]
mov edx, dword [0x40702c]
movzx eax, byte [edx]
sub ecx, eax
mov byte [0x40701f], cl
jmp 0x402c02
cmp dword [ebp - 0x208], 0x3d34
ja 0x402c84
mov ecx, dword [ebp - 0x208]
add ecx, 0x45
mov dword [ebp - 0x208], ecx
movzx edx, word [ebp - 0x88]
movzx eax, word [0x407018]
add edx, eax
mov ecx, dword [ebp - 0x90]
mov word [ecx], dx
jmp 0x402c4e
mov edx, dword [ebp - 0x4f0]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x20c], 0xe487
je 0x402cd8
mov eax, dword [ebp - 0x20c]
add eax, 0xe4
mov dword [ebp - 0x20c], eax
mov ecx, dword [ebp - 0x68]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 5]
shl edx, cl
mov byte [ebp - 0x1b], dl
movsx eax, word [ebp - 0x10]
movsx ecx, word [section..data]
xor eax, ecx
mov edx, dword [0x407048]
mov word [edx], ax
jmp 0x402c94
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x7c]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x9c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ecx]
or edx, dword [0x407008]
mov dword [ebp - 0xf8], edx
movzx eax, byte [ebp - 1]
movzx ecx, byte [ebp - 3]
sar eax, cl
mov byte [0x40701b], al
mov ecx, dword [ebp - 0x210]
sub ecx, 0x87
mov dword [ebp - 0x210], ecx
movzx edx, word [ebp - 0x3c]
mov eax, dword [ebp - 0xbc]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0xa8]
mov word [ecx], dx
push 0x7c6412
mov edx, dword [ebp - 0x4f4]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x210], 0xdfbc
ja 0x402d10
cmp dword [ebp - 0x214], 0xba60
jbe 0x402d9d
mov eax, dword [ebp - 0x214]
sub eax, 0x33
mov dword [ebp - 0x214], eax
push 0x9e949c
mov ecx, dword [ebp - 0x4f8]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0x4fc]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
jmp 0x402d5b
cmp dword [ebp - 0x218], 0xbef7
je 0x402dcd
mov eax, dword [ebp - 0x218]
add eax, 0xfe
mov dword [ebp - 0x218], eax
mov ecx, dword [ebp - 0x68]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x19]
or edx, eax
mov ecx, dword [ebp - 0x5c]
mov byte [ecx], dl
jmp 0x402d9d
mov edx, dword [ebp - 0x500]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x21c]
sub eax, 0x4c
mov dword [ebp - 0x21c], eax
push 0xf3ba23
mov ecx, dword [ebp - 0x504]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
movsx edx, word [ebp - 0x20]
mov eax, dword [0x407048]
movsx ecx, word [eax]
and edx, ecx
mov eax, dword [0x407030]
mov word [eax], dx
cmp dword [ebp - 0x21c], 0xcfbc
jae 0x402ddd
mov ecx, dword [ebp - 0x44]
xor ecx, dword [ebp - 0x48]
mov dword [ebp - 0x64], ecx
lea edx, [ebp - 0x84]
mov dword [ebp - 0xb0], edx
lea eax, [ebp - 3]
mov dword [0x407054], eax
mov ecx, dword [ebp - 0x98]
movzx edx, word [ecx]
movzx eax, word [0x407018]
add edx, eax
mov ecx, dword [ebp - 0x90]
mov word [ecx], dx
mov dword [ebp - 0x258], 0x98c4
mov edx, dword [ebp - 0x68]
mov al, byte [edx]
mov byte [ebp - 0x1a], al
mov dword [ebp - 0x360], 0x8e7a
movsx edx, word [ebp - 0x20]
movsx ecx, word [ebp - 0x10]
shl edx, cl
mov eax, dword [0x407028]
mov word [eax], dx
mov edx, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x60]
shl edx, cl
mov dword [ebp - 0x74], edx
lea eax, [ebp - 0x318]
mov dword [ebp - 0xd4], eax
push 0x553758
mov ecx, dword [ebp - 0x508]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
lea edx, [ebp - 1]
mov dword [0x407058], edx
mov dword [ebp - 0x270], 0xd2e8
mov eax, dword [0x407020]
movzx edx, word [eax]
mov eax, dword [ebp - 0x37c]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x98]
mov word [ecx], dx
lea edx, [ebp - 0x19]
mov dword [ebp - 0xf0], edx
mov eax, dword [ebp - 0x50c]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x510]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x350], 0xa1bc
push 0x4839ed
mov edx, dword [ebp - 0x514]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2d0], 0x9e32
mov dword [ebp - 0x244], 0xb73c
mov dword [ebp - 0x2ec], 0x6f7e
mov dword [ebp - 0x224], 0xac82
mov eax, dword [0x407030]
movsx ecx, word [eax]
mov edx, dword [0x407028]
movsx eax, word [edx]
and ecx, eax
mov edx, dword [0x40704c]
mov word [edx], cx
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x64]
imul ecx, dword [eax]
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x2f8], 0xf28
push 0x178f48
mov edx, dword [ebp - 0x518]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xd8]
add eax, dword [0x407008]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0x220], 0x761
je 0x402ffa
mov ecx, dword [ebp - 0x220]
add ecx, 0xc0
mov dword [ebp - 0x220], ecx
mov edx, dword [0x407054]
movzx eax, byte [edx]
mov ecx, dword [0x407040]
movzx edx, byte [ecx]
xor eax, edx
mov byte [0x40701b], al
movzx eax, word [ebp - 0x2c]
movzx ecx, word [0x407018]
sub eax, ecx
mov word [ebp - 0x88], ax
jmp 0x402fad
movsx edx, byte [ebp - 0x1a]
movsx ecx, byte [ebp - 0x11]
sar edx, cl
mov byte [ebp - 0x1b], dl
mov dword [ebp - 0x23c], 0x44c4
movsx eax, word [ebp - 0x10]
movsx ecx, word [ebp - 0x20]
or eax, ecx
mov word [0x407010], ax
mov edx, dword [ebp - 0x51c]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
push 0xc2bc34
mov eax, dword [ebp - 0x520]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x260], 0xd261
cmp dword [ebp - 0x224], 0xac0a
jbe 0x4030ab
mov edx, dword [ebp - 0x224]
sub edx, 0x3c
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
or ecx, dword [ebp - 0xec]
mov dword [ebp - 0x40], ecx
movzx edx, byte [0x407002]
mov eax, dword [0x407058]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x40701f], dl
mov ecx, dword [ebp - 0x524]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
jmp 0x403059
cmp dword [ebp - 0x228], 0xf36
jb 0x4030fb
mov edx, dword [ebp - 0x228]
sub edx, 0xba
mov dword [ebp - 0x228], edx
mov eax, dword [ebp - 0x98]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x88]
sub ecx, edx
mov eax, dword [ebp - 0xbc]
mov word [eax], cx
push 0x92c2e0
mov ecx, dword [ebp - 0x528]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
jmp 0x4030ab
movsx edx, byte [ebp - 2]
movsx eax, byte [ebp - 5]
xor edx, eax
mov byte [ebp - 4], dl
mov ecx, dword [ebp - 0x52c]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
mov edx, dword [0x407028]
movsx eax, word [edx]
mov ecx, dword [0x407044]
movsx edx, word [ecx]
and eax, edx
mov ecx, dword [0x407030]
mov word [ecx], ax
mov dword [ebp - 0x254], 0x4812
cmp dword [ebp - 0x22c], 0x44be
jbe 0x40317b
mov edx, dword [ebp - 0x22c]
sub edx, 0xa4
mov dword [ebp - 0x22c], edx
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x64]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x8c]
mov edx, dword [0x407008]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x6c]
mov dword [eax], edx
jmp 0x40313f
mov cl, byte [ebp - 3]
mov byte [0x40705c], cl
cmp dword [ebp - 0x230], 0x5f97
jb 0x4031b7
mov edx, dword [ebp - 0x230]
sub edx, 0xe2
mov dword [ebp - 0x230], edx
mov eax, dword [ebp - 0xa8]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x2c]
add ecx, edx
mov word [ebp - 0x3c], cx
jmp 0x403184
cmp dword [ebp - 0x234], 0xbb7e
je 0x40320b
mov eax, dword [ebp - 0x234]
add eax, 0x65
mov dword [ebp - 0x234], eax
push 0xf24f75
mov ecx, dword [ebp - 0x530]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
movsx edx, byte [ebp - 0x1b]
movsx eax, byte [ebp - 0x1a]
and edx, eax
mov ecx, dword [ebp - 0xf0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x534]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
jmp 0x4031b7
movsx eax, word [ebp - 0x10]
mov ecx, dword [0x407030]
movsx edx, word [ecx]
xor eax, edx
mov word [0x40700c], ax
mov dword [ebp - 0x238], 0xa4f5
lea eax, [ebp - 0x74]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x2a8], 0x4913
push 0xeb513b
mov ecx, dword [ebp - 0x538]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x310], 0x8727
mov edx, dword [ebp - 0x54]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x84]
shl eax, cl
mov ecx, dword [ebp - 0x6c]
mov dword [ecx], eax
movzx edx, byte [0x40701b]
movzx eax, byte [ebp - 1]
or edx, eax
mov byte [0x40700f], dl
mov ecx, dword [ebp - 0x53c]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x2d8], 0xa705
mov edx, dword [ebp - 0x238]
sub edx, 0x29
mov dword [ebp - 0x238], edx
push 0xc960fd
mov eax, dword [ebp - 0x540]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x544]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
movzx edx, word [ebp - 0xb8]
movzx ecx, word [ebp - 0x38]
sar edx, cl
mov eax, dword [ebp - 0x90]
mov word [eax], dx
cmp dword [ebp - 0x238], 0xa4cc
jae 0x40329b
lea ecx, [ebp - 0x1a]
mov dword [ebp - 0xe0], ecx
movsx edx, word [ebp - 0x24]
mov eax, dword [0x407030]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [0x40704c]
mov word [ecx], dx
mov edx, dword [ebp - 0x23c]
sub edx, 0x66
mov dword [ebp - 0x23c], edx
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0xc4]
sar eax, cl
mov ecx, dword [ebp - 0xac]
mov dword [ecx], eax
cmp dword [ebp - 0x23c], 0x43f8
ja 0x403311
push 0x1ddae9
mov edx, dword [ebp - 0x548]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0xd4]
mov ecx, dword [eax]
or ecx, dword [0x407008]
mov edx, dword [ebp - 0xb0]
mov dword [edx], ecx
mov eax, dword [ebp - 0x54c]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 3]
mov dword [0x407060], ecx
lea edx, [ebp - 0xb8]
mov dword [ebp - 0x10c], edx
mov dword [ebp - 0x26c], 0xd6d4
mov eax, dword [ebp - 0x550]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x58]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 5]
shl edx, cl
mov eax, dword [ebp - 0x68]
mov byte [eax], dl
mov ecx, dword [0x407034]
movsx edx, word [ecx]
movsx eax, word [0x407010]
xor edx, eax
mov word [section..data], dx
push 0x40a06f
mov ecx, dword [ebp - 0x554]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x240], 0x85f0
ja 0x40341b
mov edx, dword [ebp - 0x240]
add edx, 0xea
mov dword [ebp - 0x240], edx
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
sub ecx, dword [0x407004]
mov edx, dword [ebp - 0xc0]
mov dword [edx], ecx
jmp 0x4033e8
mov eax, dword [ebp - 0x94]
and eax, dword [0x407008]
mov dword [ebp - 0x100], eax
mov cl, byte [ebp - 1]
mov byte [0x40705d], cl
mov dword [ebp - 0x34c], 0x3b45
mov edx, dword [0x407020]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x38]
add eax, ecx
mov word [ebp - 0x50], ax
mov dword [ebp - 0x368], 0xdc59
push 0x820a46
mov edx, dword [ebp - 0x558]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x55c]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x244]
sub ecx, 0xc7
mov dword [ebp - 0x244], ecx
mov edx, dword [ebp - 0x5c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x1b]
add eax, ecx
mov byte [ebp - 0x11], al
push 0xddd1e8
mov edx, dword [ebp - 0x560]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x244], 0xb675
jae 0x403482
mov eax, dword [0x40704c]
movsx ecx, word [eax]
mov edx, dword [0x407028]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [0x40704c]
mov word [edx], cx
cmp dword [ebp - 0x248], 0xa889
jbe 0x403512
mov eax, dword [ebp - 0x248]
sub eax, 0xe1
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0xac]
mov edx, dword [0x407024]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x44], edx
jmp 0x4034e0
cmp dword [ebp - 0x24c], 0x6760
jb 0x403556
mov eax, dword [ebp - 0x24c]
sub eax, 0xd2
mov dword [ebp - 0x24c], eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0xb0]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x6c]
mov dword [ecx], eax
movzx edx, byte [0x40701f]
movzx eax, byte [ebp - 3]
sub edx, eax
mov byte [0x40700f], dl
jmp 0x403512
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x5c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x19]
xor eax, ecx
mov edx, dword [ebp - 0xf0]
mov byte [edx], al
lea eax, [ebp - 0x20]
mov dword [0x407064], eax
lea ecx, [ebp - 0x64]
mov dword [ebp - 0xe8], ecx
mov dword [ebp - 0x30c], 0xbc09
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x40]
or eax, dword [edx]
mov dword [ebp - 0xd0], eax
mov ecx, dword [0x407038]
movzx edx, byte [ecx]
mov eax, dword [0x40703c]
movzx ecx, byte [eax]
or edx, ecx
mov byte [0x40701f], dl
mov dx, word [ebp - 0xb8]
mov word [ebp - 0xcc], dx
mov dword [ebp - 0x300], 0x380c
movsx eax, byte [ebp - 5]
mov ecx, dword [ebp - 0x68]
movsx edx, byte [ecx]
or eax, edx
mov ecx, dword [ebp - 0x5c]
mov byte [ecx], al
mov dword [ebp - 0x28c], 0xd518
mov edx, dword [0x407048]
movsx eax, word [edx]
mov ecx, dword [0x407064]
movsx edx, word [ecx]
xor eax, edx
mov word [0x407014], ax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
cdq
idiv dword [ebp - 0x44]
mov dword [ebp - 0xa4], eax
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x70]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xb0]
mov dword [ecx], eax
mov edx, dword [0x407058]
movzx eax, byte [edx]
mov ecx, dword [0x40703c]
movzx ecx, byte [ecx]
sar eax, cl
mov edx, dword [0x407058]
mov byte [edx], al
lea eax, [ebp - 0xcc]
mov dword [ebp - 0xf4], eax
mov ecx, dword [ebp - 0x4c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x5c]
movsx ecx, byte [eax]
and edx, ecx
mov eax, dword [ebp - 0xe0]
mov byte [eax], dl
mov dword [ebp - 0x2ac], 0xc206
lea ecx, [ebp - 0x24]
mov dword [0x407068], ecx
mov edx, dword [ebp - 0x564]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x330], 0x407024
mov eax, dword [ebp - 0xf8]
mov ecx, dword [0x407008]
shl eax, cl
mov dword [ebp - 0xec], eax
mov ecx, dword [ebp - 0x250]
sub ecx, 0xce
mov dword [ebp - 0x250], ecx
mov edx, dword [0x40702c]
movzx eax, byte [edx]
mov ecx, dword [0x407040]
movzx ecx, byte [ecx]
shl eax, cl
mov edx, dword [0x407038]
mov byte [edx], al
cmp dword [ebp - 0x250], 0xdb21
ja 0x4036a5
cmp dword [ebp - 0x254], 0x480f
jbe 0x403728
mov eax, dword [ebp - 0x254]
sub eax, 3
mov dword [ebp - 0x254], eax
push 0xc0a838
mov ecx, dword [ebp - 0x568]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
movzx edx, word [ebp - 0x38]
mov eax, dword [0x407020]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x10c]
mov word [ecx], dx
jmp 0x4036df
cmp dword [ebp - 0x258], 0x99b0
ja 0x403757
mov edx, dword [ebp - 0x258]
add edx, 0xec
mov dword [ebp - 0x258], edx
movsx eax, byte [ebp - 0x1b]
movsx ecx, byte [ebp - 0x11]
xor eax, ecx
mov edx, dword [ebp - 0x58]
mov byte [edx], al
jmp 0x403728
mov eax, dword [0x407044]
movsx ecx, word [eax]
mov edx, dword [0x407028]
movsx eax, word [edx]
and ecx, eax
mov word [0x407014], cx
mov ecx, dword [ebp - 0x56c]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x25c], 0x1398
jb 0x4037c1
mov edx, dword [ebp - 0x25c]
sub edx, 0x62
mov dword [ebp - 0x25c], edx
mov eax, dword [ebp - 0xe4]
mov edx, dword [eax]
mov ecx, dword [0x407004]
sar edx, cl
mov dword [ebp - 0x64], edx
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax]
sub ecx, dword [0x407008]
mov edx, dword [ebp - 0x6c]
mov dword [edx], ecx
jmp 0x403781
mov eax, dword [ebp - 0x260]
sub eax, 0xb4
mov dword [ebp - 0x260], eax
mov ecx, dword [0x407058]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 3]
add edx, eax
mov byte [0x407003], dl
mov ecx, dword [ebp - 0xa8]
movzx edx, word [ecx]
mov eax, dword [0x407020]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x10c]
mov word [eax], dx
cmp dword [ebp - 0x260], 0xd0f9
jae 0x4037c1
push 0x706991
mov ecx, dword [ebp - 0x570]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x264], 0x178e
jae 0x403868
mov edx, dword [ebp - 0x264]
add edx, 0x4c
mov dword [ebp - 0x264], edx
mov eax, dword [ebp - 0x4c]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x11]
sub ecx, edx
mov byte [ebp - 2], cl
movsx eax, word [ebp - 0x20]
mov ecx, dword [0x407030]
movsx ecx, word [ecx]
sar eax, cl
mov edx, dword [0x407068]
mov word [edx], ax
jmp 0x403824
cmp dword [ebp - 0x268], 0xe4f
je 0x4038a5
mov eax, dword [ebp - 0x268]
add eax, 0x22
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x48]
or ecx, dword [ebp - 0xa4]
mov dword [ebp - 0xc4], ecx
mov edx, dword [ebp - 0x84]
and edx, dword [0x407008]
mov eax, dword [ebp - 0x6c]
mov dword [eax], edx
jmp 0x403868
cmp dword [ebp - 0x26c], 0xd659
jbe 0x4038d6
mov ecx, dword [ebp - 0x26c]
sub ecx, 0x7b
mov dword [ebp - 0x26c], ecx
movzx edx, byte [ebp - 1]
mov eax, dword [0x407058]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [0x40701f], dl
jmp 0x4038a5
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x380], edx
mov dword [ebp - 0x2cc], 0xabdf
mov eax, dword [ebp - 0x574]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x354], 0xcbae
cmp dword [ebp - 0x270], 0xd285
jbe 0x40394b
mov ecx, dword [ebp - 0x270]
sub ecx, 0x63
mov dword [ebp - 0x270], ecx
movsx edx, byte [ebp - 4]
mov eax, dword [ebp - 0xf0]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x19], dl
movsx edx, word [section..data]
mov eax, dword [0x407028]
movsx ecx, word [eax]
xor edx, ecx
mov eax, dword [0x407030]
mov word [eax], dx
jmp 0x403903
mov ecx, dword [ebp - 0x578]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x274], 0xa635
ja 0x40399d
mov edx, dword [ebp - 0x274]
add edx, 0x73
mov dword [ebp - 0x274], edx
mov eax, dword [ebp - 0x9c]
mov ecx, dword [0x407024]
and ecx, dword [eax]
mov dword [ebp - 0xa4], ecx
mov edx, dword [0x407008]
or edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x70]
mov dword [eax], edx
jmp 0x40395b
push 0xad339d
mov ecx, dword [ebp - 0x57c]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x278]
add edx, 0xf3
mov dword [ebp - 0x278], edx
mov eax, dword [0x407050]
movzx edx, byte [eax]
mov eax, dword [0x40703c]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x40701e], dl
mov ecx, dword [0x407020]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xbc]
movzx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0xf4]
mov word [eax], dx
cmp dword [ebp - 0x278], 0x64e4
jbe 0x4039b2
mov ecx, dword [ebp - 0x27c]
add ecx, 0xda
mov dword [ebp - 0x27c], ecx
mov edx, dword [ebp - 0xe0]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 2]
shl eax, cl
mov byte [ebp - 0x1a], al
mov ecx, dword [0x40704c]
movsx edx, word [ecx]
mov eax, dword [0x407028]
movsx ecx, word [eax]
add edx, ecx
mov eax, dword [0x407044]
mov word [eax], dx
cmp dword [ebp - 0x27c], 0xab2f
jbe 0x403a05
push 0xdd5d1b
mov ecx, dword [ebp - 0x580]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x280], 0xf0ac
ja 0x403aa7
mov edx, dword [ebp - 0x280]
add edx, 0x33
mov dword [ebp - 0x280], edx
mov eax, dword [ebp - 0xc0]
mov ecx, dword [0x407004]
add ecx, dword [eax]
mov dword [ebp - 0xa4], ecx
mov edx, dword [0x407008]
add edx, dword [ebp - 0x100]
mov eax, dword [ebp - 0x54]
mov dword [eax], edx
jmp 0x403a65
mov ecx, dword [ebp - 0x584]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x284]
add edx, 0x2a
mov dword [ebp - 0x284], edx
mov eax, dword [0x407038]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 3]
shl edx, cl
mov byte [0x40701b], dl
movzx eax, word [ebp - 0x50]
mov ecx, dword [ebp - 0x98]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0xf4]
mov word [ecx], ax
cmp dword [ebp - 0x284], 0x8045
jbe 0x403ab7
mov edx, dword [ebp - 0x588]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x288], 0xe200
jae 0x403b3a
mov eax, dword [ebp - 0x288]
add eax, 0x16
mov dword [ebp - 0x288], eax
movsx edx, byte [ebp - 0x1a]
mov eax, dword [ebp - 0x58]
movsx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 2], dl
jmp 0x403b0e
lea ecx, [ebp - 0x10]
mov dword [0x40706c], ecx
push 0xcd6e17
mov edx, dword [ebp - 0x58c]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x28c], 0xd430
jbe 0x403b9b
mov eax, dword [ebp - 0x28c]
sub eax, 0x74
mov dword [ebp - 0x28c], eax
mov ecx, dword [ebp - 0xe8]
mov edx, dword [ecx]
or edx, dword [0x407024]
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xd4]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x6c]
mov dword [eax], edx
jmp 0x403b58
push 0xefdada
mov ecx, dword [ebp - 0x590]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x290], 0xe758
jb 0x403bdc
mov edx, dword [ebp - 0x290]
sub edx, 0x78
mov dword [ebp - 0x290], edx
movzx eax, byte [ebp - 1]
movzx ecx, byte [ebp - 3]
sub eax, ecx
mov byte [0x40705d], al
jmp 0x403bb0
mov edx, dword [ebp - 0x104]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x90]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0xbc]
mov word [ecx], ax
mov dword [ebp - 0x2f0], 0x2d41
cmp dword [ebp - 0x294], 0x964e
jbe 0x403c47
mov edx, dword [ebp - 0x294]
sub edx, 0x9a
mov dword [ebp - 0x294], edx
movsx eax, byte [ebp - 0x1a]
movsx ecx, byte [ebp - 0x11]
or eax, ecx
mov byte [ebp - 5], al
movsx edx, word [ebp - 0x10]
mov eax, dword [0x407064]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [0x40706c]
mov word [ecx], dx
jmp 0x403c03
mov edx, dword [ebp - 0x594]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x298]
add eax, 0x40
mov dword [ebp - 0x298], eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe8]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x54]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x8c]
mov dword [ecx], eax
cmp dword [ebp - 0x298], 0xc426
jne 0x403c57
mov edx, dword [ebp - 0x598]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x29c], 0x28f
jb 0x403d07
mov eax, dword [0x40702c]
movzx edx, byte [eax]
movzx ecx, byte [0x40701f]
shl edx, cl
mov byte [0x40705c], dl
mov eax, dword [ebp - 0x29c]
sub eax, 0xa2
mov dword [ebp - 0x29c], eax
movzx edx, word [ebp - 0xb4]
movzx ecx, word [ebp - 0x38]
shl edx, cl
mov eax, dword [ebp - 0xa8]
mov word [eax], dx
movsx ecx, byte [ebp - 2]
mov edx, dword [ebp - 0x4c]
movsx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x1b], cl
jmp 0x403cac
mov ecx, dword [0x407064]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x20]
sar edx, cl
mov eax, dword [0x407028]
mov word [eax], dx
push 0x8cc215
mov ecx, dword [ebp - 0x59c]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x7c]
mov eax, dword [edx]
or eax, dword [ebp - 0x60]
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x2a0]
add ecx, 0x2e
mov dword [ebp - 0x2a0], ecx
mov edx, dword [ebp - 0x54]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8c]
add eax, dword [ecx]
mov edx, dword [ebp - 0xb0]
mov dword [edx], eax
mov eax, dword [0x40703c]
movzx ecx, byte [eax]
mov edx, dword [0x40702c]
movzx eax, byte [edx]
and ecx, eax
mov byte [0x40705d], cl
cmp dword [ebp - 0x2a0], 0x79d6
jb 0x403d33
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x38c], ecx
mov edx, dword [ebp - 0x5a0]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x2a4]
add eax, 0xc8
mov dword [ebp - 0x2a4], eax
movsx ecx, byte [ebp - 2]
movsx edx, byte [ebp - 0x11]
sub ecx, edx
mov byte [ebp - 0x19], cl
movsx eax, word [ebp - 0x20]
movsx ecx, word [ebp - 0x24]
sub eax, ecx
mov edx, dword [0x407064]
mov word [edx], ax
cmp dword [ebp - 0x2a4], 0xacd5
jne 0x403da0
cmp dword [ebp - 0x2a8], 0x49c4
ja 0x403e0d
mov eax, dword [ebp - 0x2a8]
add eax, 0xb1
mov dword [ebp - 0x2a8], eax
mov ecx, dword [ebp - 0x7c]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xc4]
mov dword [ebp - 0xa4], edx
jmp 0x403ddd
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x70]
mov edx, dword [eax]
mov ecx, dword [ecx]
shr edx, cl
mov eax, dword [ebp - 0x30]
mov dword [eax], edx
mov dword [ebp - 0x338], 0x4ff4
push 0x627eb3
mov ecx, dword [ebp - 0x674]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x2ac], 0xbfc3
jbe 0x403e77
mov edx, dword [ebp - 0x2ac]
sub edx, 0xc1
mov dword [ebp - 0x2ac], edx
movzx eax, byte [0x40701e]
mov ecx, dword [0x407040]
movzx edx, byte [ecx]
and eax, edx
mov byte [0x40705c], al
jmp 0x403e40
mov dword [ebp - 0x398], 0x407018
push 0x546d3b
mov eax, dword [ebp - 0x5a8]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x2b0]
sub ecx, 0xf9
mov dword [ebp - 0x2b0], ecx
mov edx, dword [ebp - 0x58]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x5c]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x19], al
mov eax, dword [0x40704c]
movsx ecx, word [eax]
mov edx, dword [0x407030]
movsx eax, word [edx]
or ecx, eax
mov edx, dword [0x40706c]
mov word [edx], cx
cmp dword [ebp - 0x2b0], 0xe825
jae 0x403e96
mov eax, dword [ebp - 0x5ac]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x2b4], 0x7ddc
jb 0x403f37
mov ecx, dword [ebp - 0x2b4]
sub ecx, 0x7f
mov dword [ebp - 0x2b4], ecx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xc0]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0xa4], ecx
mov edx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0xd8]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
jmp 0x403ef1
mov edx, dword [ebp - 0x5b0]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x2b8]
add eax, 0x25
mov dword [ebp - 0x2b8], eax
movzx ecx, byte [ebp - 3]
mov edx, dword [0x407054]
movzx eax, byte [edx]
xor ecx, eax
mov byte [0x40705d], cl
cmp dword [ebp - 0x2b8], 0x7def
jb 0x403f47
mov ecx, dword [ebp - 0x10c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xb8]
xor edx, eax
mov ecx, dword [ebp - 0x38c]
mov word [ecx], dx
mov dword [ebp - 0x2fc], 0x552d
cmp dword [ebp - 0x2bc], 0xa08d
jbe 0x403fc8
mov edx, dword [ebp - 0x2bc]
sub edx, 0xe
mov dword [ebp - 0x2bc], edx
movsx eax, byte [ebp - 2]
mov ecx, dword [ebp - 0x5c]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x1b], al
jmp 0x403f9c
lea eax, [ebp - 0x10]
mov dword [0x407070], eax
mov dword [ebp - 0x2c0], 0x7d9e
push 0xb02c16
mov ecx, dword [ebp - 0x5b4]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x2c0], 0x7e47
je 0x40402f
mov edx, dword [ebp - 0x2c0]
add edx, 0xa9
mov dword [ebp - 0x2c0], edx
mov eax, dword [0x407024]
add eax, dword [ebp - 0x60]
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x6c]
mov edx, dword [0x407008]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0xb0]
mov dword [eax], edx
jmp 0x403fef
push 0x7bf1d7
mov ecx, dword [ebp - 0x5b8]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0x2c4]
add edx, 0x8d
mov dword [ebp - 0x2c4], edx
mov eax, dword [0x407058]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 1]
and ecx, edx
mov byte [0x40700e], cl
movzx eax, word [0x407018]
movzx ecx, word [ebp - 0x2c]
sar eax, cl
mov ecx, dword [ebp - 0xa8]
mov word [ecx], ax
cmp dword [ebp - 0x2c4], 0x8e2d
jb 0x404044
mov edx, dword [ebp - 0x2c8]
sub edx, 0x13
mov dword [ebp - 0x2c8], edx
mov eax, dword [ebp - 0x68]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x11]
sar edx, cl
mov byte [ebp - 4], dl
movsx eax, word [0x407014]
mov ecx, dword [0x407064]
movsx ecx, word [ecx]
sar eax, cl
mov edx, dword [0x407068]
mov word [edx], ax
mov eax, dword [ebp - 0x5bc]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x2c8], 0x9b28
ja 0x40408c
cmp dword [ebp - 0x2cc], 0xad5d
jae 0x404120
mov ecx, dword [ebp - 0x2cc]
add ecx, 0xbf
mov dword [ebp - 0x2cc], ecx
mov edx, dword [0x407024]
or edx, dword [ebp - 0xa4]
mov dword [ebp - 0x64], edx
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x84]
and ecx, dword [eax]
mov edx, dword [ebp - 0x54]
mov dword [edx], ecx
jmp 0x4040e1
cmp dword [ebp - 0x2d0], 0x9dfc
jb 0x404160
mov eax, dword [ebp - 0x2d0]
sub eax, 0x1b
mov dword [ebp - 0x2d0], eax
movzx edx, byte [ebp - 1]
movzx ecx, byte [ebp - 3]
shl edx, cl
mov byte [0x407003], dl
movzx eax, word [ebp - 0x3c]
movzx ecx, word [ebp - 0x38]
add eax, ecx
mov edx, dword [ebp - 0xbc]
mov word [edx], ax
jmp 0x404120
push 0x4b3df1
mov eax, dword [ebp - 0x5c0]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x2d4], 0x6dc7
jae 0x4041bf
mov ecx, dword [ebp - 0x2d4]
add ecx, 0x98
mov dword [ebp - 0x2d4], ecx
mov edx, dword [ebp - 0x58]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0xf0]
movsx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0x1a], al
mov eax, dword [0x407044]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x20]
sub ecx, edx
mov eax, dword [0x407070]
mov word [eax], cx
jmp 0x404175
mov ecx, dword [ebp - 0x5c4]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0x2d8]
sub edx, 0x2c
mov dword [ebp - 0x2d8], edx
mov eax, dword [ebp - 0xe8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xc0]
add ecx, dword [edx]
mov dword [ebp - 0x64], ecx
mov eax, dword [ebp - 0xd4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x94]
shl edx, cl
mov eax, dword [ebp - 0x70]
mov dword [eax], edx
cmp dword [ebp - 0x2d8], 0xa6ad
jae 0x4041cf
mov ecx, dword [ebp - 0x5c8]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0x2dc]
add edx, 0xd2
mov dword [ebp - 0x2dc], edx
mov eax, dword [0x40703c]
movzx ecx, byte [eax]
mov edx, dword [0x407040]
movzx eax, byte [edx]
or ecx, eax
mov byte [0x40701a], cl
movzx ecx, word [0x407018]
movzx edx, word [ebp - 0xcc]
and ecx, edx
mov eax, dword [ebp - 0xf4]
mov word [eax], cx
push 0xd68600
mov ecx, dword [ebp - 0x5cc]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x2dc], 0x8275
jb 0x404222
cmp dword [ebp - 0x2e0], 0xede9
je 0x4042b3
mov edx, dword [ebp - 0x2e0]
add edx, 0x57
mov dword [ebp - 0x2e0], edx
mov eax, dword [ebp - 0x68]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 2]
and ecx, edx
mov byte [ebp - 5], cl
jmp 0x404287
movsx eax, word [0x407014]
mov ecx, dword [0x407068]
movsx edx, word [ecx]
and eax, edx
mov ecx, dword [0x407034]
mov word [ecx], ax
push 0x3c6baa
mov edx, dword [ebp - 0x5d0]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x2e4]
add eax, 0x52
mov dword [ebp - 0x2e4], eax
mov ecx, dword [ebp - 0xac]
mov edx, dword [ebp - 0x64]
and edx, dword [ecx]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xf8]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xd4]
mov dword [edx], ecx
cmp dword [ebp - 0x2e4], 0x3843
jb 0x4042e3
mov eax, dword [ebp - 0x5d4]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x2e8]
add ecx, 0x2f
mov dword [ebp - 0x2e8], ecx
movzx edx, byte [ebp - 1]
mov eax, dword [0x407054]
movzx ecx, byte [eax]
or edx, ecx
mov byte [0x407003], dl
movzx edx, word [0x407018]
movzx ecx, word [ebp - 0x50]
shl edx, cl
mov eax, dword [ebp - 0x90]
mov word [eax], dx
cmp dword [ebp - 0x2e8], 0x6fc2
jbe 0x404332
cmp dword [ebp - 0x2ec], 0x6f06
jbe 0x4043a5
mov ecx, dword [ebp - 0x2ec]
sub ecx, 0x28
mov dword [ebp - 0x2ec], ecx
mov edx, dword [ebp - 0x4c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x58]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x1a], al
jmp 0x404377
lea eax, [ebp - 0x10]
mov dword [0x407074], eax
mov ecx, dword [ebp - 0x5d8]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x2f0]
add edx, 0xfc
mov dword [ebp - 0x2f0], edx
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x9c]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0xa4], edx
mov eax, dword [ebp - 0x84]
xor eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0x8c]
mov dword [ecx], eax
push 0x91c5f4
mov edx, dword [ebp - 0x5dc]
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x2f0], 0x2f39
jne 0x4043bd
mov eax, dword [ebp - 0x2f4]
add eax, 0x29
mov dword [ebp - 0x2f4], eax
mov ecx, dword [0x407038]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 3]
xor edx, eax
mov byte [0x407003], dl
movzx ecx, word [ebp - 0x38]
mov edx, dword [ebp - 0x98]
movzx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0xa8]
mov word [edx], cx
cmp dword [ebp - 0x2f4], 0x5c4e
jne 0x40441c
push 0xe94f8
mov eax, dword [ebp - 0x5e0]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x2f8], 0xf28
jb 0x4044aa
mov ecx, dword [ebp - 0x2f8]
sub ecx, 0x5c
mov dword [ebp - 0x2f8], ecx
mov edx, dword [ebp - 0xe0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x4c]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 2], al
jmp 0x404479
movsx eax, word [ebp - 0x24]
movsx ecx, word [ebp - 0x20]
sar eax, cl
mov ecx, dword [0x40704c]
mov word [ecx], ax
mov edx, dword [ebp - 0x2fc]
sub edx, 0xbe
mov dword [ebp - 0x2fc], edx
mov eax, dword [ebp - 0x48]
add eax, dword [0x407004]
mov dword [ebp - 0x44], eax
mov edx, dword [ebp - 0xdc]
mov ecx, dword [0x407008]
shl edx, cl
mov eax, dword [ebp - 0x54]
mov dword [eax], edx
cmp dword [ebp - 0x2fc], 0x53b1
jae 0x4044bd
mov ecx, dword [ebp - 0x5e4]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x300], 0x380c
ja 0x40453e
mov edx, dword [ebp - 0x300]
add edx, 0xda
mov dword [ebp - 0x300], edx
movzx eax, byte [ebp - 1]
mov ecx, dword [0x407058]
movzx edx, byte [ecx]
sub eax, edx
mov byte [0x40701b], al
jmp 0x40450a
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x108], eax
push 0xb6dc14
mov ecx, dword [ebp - 0x5e8]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x304]
sub edx, 0x52
mov dword [ebp - 0x304], edx
movsx eax, byte [ebp - 0x1a]
movsx ecx, byte [ebp - 0x1b]
sub eax, ecx
mov byte [ebp - 5], al
movsx edx, word [ebp - 0x24]
mov eax, dword [0x407028]
movsx ecx, word [eax]
sub edx, ecx
mov eax, dword [0x407030]
mov word [eax], dx
cmp dword [ebp - 0x304], 0x511
jae 0x40455c
mov ecx, dword [ebp - 0x5ec]
push ecx
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x308], 0xcd0b
jb 0x4045ea
mov edx, dword [ebp - 0x308]
sub edx, 0x2d
mov dword [ebp - 0x308], edx
mov eax, dword [ebp - 0x9c]
mov edx, dword [0x407004]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
add ecx, dword [ebp - 0xf8]
mov edx, dword [ebp - 0x54]
mov dword [edx], ecx
jmp 0x4045aa
mov eax, dword [ebp - 0x5f0]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x30c], 0xbcc1
je 0x40462a
movsx eax, byte [ebp - 4]
sub eax, 5
mov byte [ebp - 4], al
mov eax, dword [ebp - 0x390]
mov esp, ebp
pop ebp
ret