Function at 0x40659c
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x23c
push ebx
push esi
push edi
cmp dword [ebp + 8], 0x20
jne 0x4065be
mov dword [ebp - 0x38], 0xffffffff
jmp 0x40660e
cmp dword [ebp + 8], 0x1a
je 0x4065d2
cmp dword [ebp + 8], 0x1b
jne 0x4065de
mov dword [ebp - 0x30], 0
jmp 0x4065e5
mov dword [ebp - 0x30], 1
mov eax, dword [ebp - 0x30]
push eax
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp + 0xc]
push eax
call fcn.00407a95
test eax, eax
jne 0x40660e
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x277d
xor eax, eax
jmp 0x4079c3
push 0x2c
lea eax, [ebp - 0x2c]
push eax
call fcn.0040a05a
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x3c], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x238], eax
jmp 0x407915
mov eax, dword [ebp + 0x10]
push eax
call fcn.004079ca
test eax, eax
jne 0x406661
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x277e
jmp 0x407986
mov eax, dword [ebp + 0x10]
push eax
call fcn.00404420
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jb 0x406682
cmp dword [ebp - 0x64], 0x10
jb 0x406690
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x277e
jmp 0x407986
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp + 0x18]
push eax
call fcn.00407b1b
test eax, eax
jne 0x4066bb
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x277f
jmp 0x407986
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x415ce0]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x1c]
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x64]
cmp dword [eax + ecx*4 + 0x34], 0
je 0x406723
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x64]
mov eax, dword [eax + ecx*4 + 0x34]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
jmp 0x4067e1
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x60]
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x415ce0]
push eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov eax, dword [eax + 4]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00409b1c
push 0
mov eax, dword [0x415a88]
push eax
mov eax, dword [ebp - 0x64]
add eax, 0x64
push eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov eax, dword [eax + 4]
push eax
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x5c]
push eax
mov eax, dword [ebp - 0x60]
push eax
push 0x44010000
mov eax, dword [ebp + 0x14]
push eax
push str.BUTTON
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx*4 + 0x4169e0]
mov edx, dword [ebp - 0x64]
mov dword [ecx + edx*4 + 0x34], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x64]
cmp dword [eax + ecx*4 + 0x34], 0
jne 0x4067e1
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2798
jmp 0x407986
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x64]
mov dword [eax + ecx*4 + 0xb4], 1
push 0
mov eax, dword [ebp + 0x14]
push eax
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004083e1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x40684a
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
cmp dword [eax + 0xf4], 0
je 0x40684a
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov eax, dword [eax + 0x1c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004086a5
mov dword [ebp - 0x3c], eax
jmp 0x407986
mov eax, dword [ebp + 0x10]
push eax
call fcn.004079ca
test eax, eax
jne 0x40686e
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2799
jmp 0x407986
mov eax, dword [ebp + 0x10]
push eax
call fcn.00404420
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jb 0x40688f
cmp dword [ebp - 0x68], 0x10
jb 0x40689d
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2799
jmp 0x407986
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x68]
cmp dword [eax + ecx*4 + 0xb4], 0
jne 0x4068c6
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2799
jmp 0x407986
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x68]
mov dword [eax + ecx*4 + 0xb4], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x68]
mov eax, dword [eax + ecx*4 + 0x34]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x406918
push 0
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x68]
mov eax, dword [eax + ecx*4 + 0x34]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x68]
cmp dword [eax + ecx*4 + 0x74], 0
je 0x40694b
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x68]
mov dword [eax + ecx*4 + 0x74], 0
dec dword [0x416cc8]
mov dword [ebp - 0x50], 1
jmp 0x407986
mov eax, dword [ebp + 0x10]
push eax
call fcn.004079ca
test eax, eax
jne 0x406976
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2780
jmp 0x407986
mov eax, dword [ebp + 0x10]
push eax
call fcn.00404420
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jb 0x406997
cmp dword [ebp - 0x6c], 0x10
jb 0x4069a5
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2780
jmp 0x407986
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x6c]
cmp dword [eax + ecx*4 + 0xb4], 0
jne 0x4069ce
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2780
jmp 0x407986
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x6c]
cmp dword [eax + ecx*4 + 0x74], 0
je 0x406a08
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x6c]
mov dword [eax + ecx*4 + 0x74], 0
dec dword [0x416cc8]
mov dword [ebp - 0x50], 1
jmp 0x407986
mov eax, dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x170]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x416a00
push 0x412950
push 0x412954
push 0x412958
push 0x41295c
push 7
mov eax, dword [0x4124bc]
push eax
call fcn.0040c0fc
test eax, eax
jne 0x406a5e
push str.___Unlicensed_
lea eax, [ebp - 0x170]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x170]
push eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov eax, dword [eax + 4]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov dword [ebp - 0x50], eax
jmp 0x407986
mov eax, dword [ebp + 0x10]
push eax
call fcn.00407d5e
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xffffffff
jne 0x406aab
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2781
jmp 0x407986
mov eax, dword [ebp + 0x14]
push eax
call fcn.004079ca
test eax, eax
jne 0x406aca
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2782
jmp 0x407986
mov eax, dword [ebp + 0x14]
push eax
call fcn.00404420
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jb 0x406af3
cmp dword [ebp - 0x178], 7
jbe 0x406b01
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2782
jmp 0x407986
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0xc], eax
push 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004083e1
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x3c], 1
jmp 0x407986
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
cmp dword [eax + 0xf8], 0
je 0x406b4f
jmp case.0x40792f.6
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov dword [eax + 0xf8], 1
mov dword [ebp - 0x1bc], 0
jmp 0x406b78
inc dword [ebp - 0x1bc]
cmp dword [ebp - 0x1bc], 0x10
jae 0x406b9b
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0x1b8], 0
jmp 0x406b72
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1c4], 0
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1c0]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.00408646
test eax, eax
je 0x406c85
cmp dword [ebp - 0x2c], 0x14
jne 0x406c68
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x406c68
mov eax, dword [ebp - 8]
cmp dword [eax + 0x28], 0
je 0x406c54
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx*4 + 0x4169e0]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x28], 0
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx*4 + 0x4169e0]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 8]
cmp dword [eax + 0x1c], ecx
jbe 0x406c54
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx*4 + 0x4169e0]
mov dword [ecx + 0x1c], eax
mov dword [ebp - 0x1c4], 1
jmp 0x406c85
cmp dword [ebp - 0x2c], 0xd
jne 0x406c80
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1b8], 1
jmp 0x406bb8
cmp dword [ebp - 0x1c4], 0
jne 0x406ca0
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x279a
jmp 0x407986
mov dword [ebp - 0x1bc], 0
jmp 0x406cb5
inc dword [ebp - 0x1bc]
cmp dword [ebp - 0x1bc], 0x10
jae 0x406d8d
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x1bc]
cmp dword [eax + ecx*4 + 0xb4], 0
je 0x406d88
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp + eax*4 - 0x1b8], 0
jne 0x406d88
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x1bc]
mov dword [eax + ecx*4 + 0xb4], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x1bc]
mov eax, dword [eax + ecx*4 + 0x34]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x406d4f
push 0
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x1bc]
mov eax, dword [eax + ecx*4 + 0x34]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x1bc]
cmp dword [eax + ecx*4 + 0x74], 0
je 0x406d88
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov ecx, dword [ebp - 0x1bc]
mov dword [eax + ecx*4 + 0x74], 0
dec dword [0x416cc8]
jmp 0x406caf
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov dword [eax + 0xf8], 0
mov dword [ebp - 0x50], 1
jmp 0x407986
push 0
mov eax, dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004083e1
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x3c], 1
jmp 0x407986
cmp dword [ebp - 0x38], 0
jne 0x406e95
mov dword [ebp - 0x50], 1
mov eax, dword [0x4167a4]
push eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov eax, dword [eax + 4]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x1cc], 1
jmp 0x406e0f
inc dword [ebp - 0x1cc]
cmp dword [ebp - 0x1cc], 8
jae 0x406e5f
mov eax, dword [ebp - 0x1cc]
mov eax, dword [eax*4 + 0x4169e0]
cmp dword [eax], 0
je 0x406e5a
push 0
mov eax, dword [ebp - 0x1cc]
push eax
call fcn.0040641a
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
jne 0x406e5a
mov dword [ebp - 0x50], 0
jmp 0x406e09
mov eax, dword [0x4169e0]
cmp dword [eax], 0
je 0x406e90
push 0
push 0
call fcn.0040641a
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
jne 0x406e90
mov dword [ebp - 0x50], 0
jmp 0x406ea3
push 0
mov eax, dword [ebp - 0x38]
push eax
call fcn.0040641a
mov dword [ebp - 0x50], eax
jmp 0x407986
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp + 0x10]
push eax
call fcn.00407b1b
test eax, eax
jne 0x406ed3
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2796
jmp 0x407986
mov eax, dword [ebp + 0x14]
push eax
call fcn.004079ca
test eax, eax
jne 0x406ef2
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2797
jmp 0x407986
mov eax, dword [ebp + 0x14]
push eax
call fcn.00404420
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0
jb 0x406f1b
cmp dword [ebp - 0x1d0], 2
jbe 0x406f29
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2797
jmp 0x407986
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x415ce0]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x1c]
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
push 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004083e1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x406faa
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
cmp dword [eax + 0xf4], 0
je 0x406faa
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov eax, dword [eax + 0x1c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004086a5
mov dword [ebp - 0x3c], eax
jmp 0x407986
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp + 0x10]
push eax
call fcn.00407b1b
test eax, eax
jne 0x406fda
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2784
jmp 0x407986
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x415ce0]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x1c]
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
push 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004083e1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x407052
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
cmp dword [eax + 0xf4], 0
je 0x407052
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov eax, dword [eax + 0x1c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004086a5
mov dword [ebp - 0x3c], eax
jmp 0x407986
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp + 0x10]
push eax
call fcn.00407b1b
test eax, eax
jne 0x407082
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2783
jmp 0x407986
mov eax, dword [ebp + 0x14]
push eax
call fcn.004079ca
test eax, eax
jne 0x4070a1
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2795
jmp 0x407986
mov eax, dword [ebp + 0x14]
push eax
call fcn.00404420
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
jb 0x4070ca
cmp dword [ebp - 0x1d4], 2
jbe 0x4070d8
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2795
jmp 0x407986
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x415ce0]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x1c]
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
push 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004083e1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x407159
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
cmp dword [eax + 0xf4], 0
je 0x407159
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov eax, dword [eax + 0x1c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004086a5
mov dword [ebp - 0x3c], eax
jmp 0x407986
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp + 0x10]
push eax
call fcn.00407b1b
test eax, eax
jne 0x407189
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2790
jmp 0x407986
mov eax, dword [ebp + 0x18]
push eax
call fcn.004079ca
test eax, eax
jne 0x4071a8
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x278e
jmp 0x407986
mov eax, dword [ebp + 0x18]
push eax
call fcn.00404420
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
jb 0x4071d1
cmp dword [ebp - 0x1dc], 1
jbe 0x4071df
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x278e
jmp 0x407986
mov eax, dword [ebp + 0x1c]
push eax
call fcn.004079ca
test eax, eax
jne 0x4071fe
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x278f
jmp 0x407986
mov eax, dword [ebp + 0x1c]
push eax
call fcn.00404420
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jb 0x40722a
cmp dword [ebp - 0x1d8], 0x100
jb 0x407238
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x278f
jmp 0x407986
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x1c]
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x415ce0]
mov dword [ebp - 0x20], eax
push 0
mov eax, dword [ebp + 0x14]
push eax
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004083e1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x4072c4
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
cmp dword [eax + 0xf4], 0
je 0x4072c4
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov eax, dword [eax + 0x1c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004086a5
mov dword [ebp - 0x3c], eax
jmp 0x407986
mov eax, dword [ebp + 0x10]
push eax
call fcn.004079ca
test eax, eax
jne 0x4072e8
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2794
jmp 0x407986
mov eax, dword [ebp + 0x10]
push eax
call fcn.00404420
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jb 0x407311
cmp dword [ebp - 0x1e0], 1
jbe 0x40731f
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2794
jmp 0x407986
mov eax, dword [ebp - 0x1e0]
mov ecx, dword [ebp - 0x38]
mov dword [ecx*4 + 0x415ce0], eax
mov dword [ebp - 0x50], 1
jmp 0x407986
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp + 0x10]
push eax
call fcn.00407b1b
test eax, eax
jne 0x407366
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2785
jmp 0x407986
mov eax, dword [ebp + 0x14]
push eax
call fcn.004079ca
test eax, eax
jne 0x407385
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2786
jmp 0x407986
mov eax, dword [ebp + 0x14]
push eax
call fcn.00404420
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jne 0x4073b0
mov dword [ebp - 0x1e4], 0x800000
jmp 0x4073e7
cmp dword [ebp - 0x1e4], 2
jne 0x4073cc
mov dword [ebp - 0x1e4], 0xc00000
jmp 0x4073e7
cmp dword [ebp - 0x1e4], 0
je 0x4073e7
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2786
jmp 0x407986
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
cmp dword [eax], 0
je 0x407405
push 0
mov eax, dword [ebp - 0x38]
push eax
call fcn.0040641a
lea eax, [ebp - 0x4c]
mov ecx, dword [ebp - 0x38]
shl ecx, 4
add ecx, 0x415d20
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x415ce0]
mov ecx, dword [ebp - 0x38]
mov dword [ecx*4 + 0x415d00], eax
cmp dword [ebp - 0x38], 0
jne 0x407457
mov dword [ebp - 0x1e8], 0
jmp 0x407462
mov eax, dword [0x4124bc]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x415ce0]
push eax
mov eax, dword [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00409b1c
mov eax, dword [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.00405ffa
test eax, eax
jne 0x4074a7
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2787
jmp 0x407986
mov dword [ebp - 0x50], 1
jmp 0x407986
mov eax, dword [ebp + 0x10]
push eax
call fcn.00407d5e
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0xffffffff
jne 0x4074dd
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2788
jmp 0x407986
mov eax, dword [ebp + 0x14]
push eax
call fcn.004079ca
test eax, eax
jne 0x4074fc
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2789
jmp 0x407986
mov eax, dword [ebp + 0x14]
push eax
call fcn.00404420
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0
ja 0x407526
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2789
jmp 0x407986
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x415ce0]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0xc], eax
push 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004083e1
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x3c], 1
jmp 0x407986
mov eax, dword [ebp + 0x10]
push eax
call fcn.00407d5e
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0xffffffff
jne 0x40758f
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x278a
jmp 0x407986
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0xc], eax
push 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004083e1
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x3c], 1
jmp 0x407986
mov eax, dword [ebp + 0x14]
push eax
call fcn.004079ca
test eax, eax
jne 0x4075d7
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x278b
jmp 0x407986
mov eax, dword [ebp + 0x14]
push eax
call fcn.00404420
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
ja 0x407601
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x278b
jmp 0x407986
mov eax, dword [ebp + 0x18]
push eax
call fcn.004079ca
test eax, eax
jne 0x407620
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x278c
jmp 0x407986
mov eax, dword [ebp + 0x18]
push eax
call fcn.00404420
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp + 0x1c]
push eax
call fcn.004079ca
test eax, eax
jne 0x40764e
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x278d
jmp 0x407986
mov eax, dword [ebp + 0x1c]
push eax
call fcn.00404420
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x415ce0]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x1c], eax
push 0
mov eax, dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004083e1
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x3c], 1
jmp 0x407986
mov eax, dword [ebp + 0x10]
push eax
call fcn.004079ca
test eax, eax
jne 0x4076c6
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2791
jmp 0x407986
mov eax, dword [ebp + 0x10]
push eax
call fcn.00404420
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x23c], eax
jmp 0x40778a
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov dword [eax + 0xf4], 0
mov dword [ebp - 0x50], 1
jmp 0x4077b4
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov dword [eax + 0xf4], 1
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov eax, dword [eax + 0x1c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004086a5
mov dword [ebp - 0x50], eax
jmp 0x4077b4
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov eax, dword [eax + 0x1c]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004086a5
mov dword [ebp - 0x50], eax
jmp 0x4077b4
mov eax, dword [ebp - 0x38]
mov eax, dword [eax*4 + 0x4169e0]
mov eax, dword [eax + 0x14]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004086a5
mov dword [ebp - 0x50], eax
jmp 0x4077b4
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2791
jmp 0x4077b4
cmp dword [ebp - 0x23c], 3
ja case.default.0x40779d
mov eax, dword [ebp - 0x23c]
jmp dword [eax*4 + 0x4077a4]
jmp 0x407986
push 1
push 0
push 1
push 0
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp + 0xc]
push eax
call fcn.00407b1b
test eax, eax
jne 0x4077e4
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2792
jmp 0x407986
mov eax, dword [ebp + 0x10]
push eax
call fcn.004079ca
test eax, eax
jne 0x407803
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2793
jmp 0x407986
mov eax, dword [ebp + 0x10]
push eax
call fcn.00404420
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 1
jne 0x40782e
mov dword [ebp - 0x208], 7
jmp 0x407890
cmp dword [ebp - 0x208], 2
jne 0x40784a
mov dword [ebp - 0x208], 1
jmp 0x407890
cmp dword [ebp - 0x208], 3
jne 0x407866
mov dword [ebp - 0x208], 3
jmp 0x407890
cmp dword [ebp - 0x208], 0xffffffff
jne 0x407882
mov dword [ebp - 0x208], 0
jmp 0x407890
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2793
jmp 0x407986
mov dword [ebp - 0x234], 0x2c
lea eax, [ebp - 0x234]
push eax
mov eax, dword [0x4124bc]
push eax
call dword [sym.imp.USER32.dll_GetWindowPlacement]
test eax, eax
je 0x4078e7
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x218]
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
lea eax, [ebp - 0x234]
push eax
mov eax, dword [0x4124bc]
push eax
call dword [sym.imp.USER32.dll_SetWindowPlacement]
mov eax, dword [ebp - 0x208]
push eax
mov eax, dword [0x4124bc]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x50], eax
jmp 0x407986
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x2776
jmp 0x407986
sub dword [ebp - 0x238], 0xd
cmp dword [ebp - 0x238], 0x13
ja case.0x40792f.3
mov eax, dword [ebp - 0x238]
jmp dword [eax*4 + 0x407936]
cmp dword [ebp - 0x34], 0
je 0x4079a1
cmp dword [ebp - 0x3c], 0
je 0x4079a1
mov dword [ebp - 0x50], 1
cmp dword [ebp - 0x34], 0
jne 0x4079bb
mov eax, dword [ebp + 0x20]
mov dword [eax], 0x277c
xor eax, eax
jmp 0x4079c3
mov eax, dword [ebp - 0x50]
jmp 0x4079c3
pop edi
pop esi
pop ebx
leave
ret 0x1c