Function at 0x412cd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov edx, 0x22d
push edi
push esi
push ebx
mov ebx, 0xfffffffe
sub esp, 0x12c
mov eax, dword [esp + 0x144]
mov ebp, dword [esp + 0x140]
sub eax, 4
mov dword [esp], ebp
imul esi, eax, 0xec
cmp dword [esp + 0x144], 3
lea eax, [esi + 0x64]
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], eax
mov eax, 0x10b
cmovg eax, edx
mov edx, 0x20d
mov dword [esp + 0xc0], eax
mov eax, 0xeb
cmovg eax, edx
mov edx, 0x208
mov dword [esp + 0xbc], eax
mov eax, 0xe6
cmovg eax, edx
mov edx, 0x1e8
mov dword [esp + 0xb8], eax
mov eax, 0xc6
cmovg eax, edx
mov edx, 0x1e3
mov dword [esp + 0xb4], eax
mov eax, 0xc1
cmovg eax, edx
mov edx, 0x1c3
mov dword [esp + 0xb0], eax
mov eax, 0xa1
cmovg eax, edx
mov edx, 0x1be
mov dword [esp + 0xac], eax
mov eax, 0x9c
cmovg eax, edx
mov edx, 0x19e
mov dword [esp + 0xa8], eax
mov eax, 0x7c
cmovg eax, edx
mov edx, 0x198
mov dword [esp + 0xa4], eax
mov eax, 0x76
cmovg eax, edx
mov edx, 0x179
mov dword [esp + 0xa0], eax
mov eax, 0x57
cmovg eax, edx
mov edx, 0x174
mov dword [esp + 0x9c], eax
mov eax, 0x52
cmovg eax, edx
mov edx, 0x154
mov dword [esp + 0x94], eax
mov eax, 0x32
cmovg eax, edx
mov edx, 0x14d
mov dword [esp + 0x90], eax
mov eax, 0x2b
cmovg eax, edx
mov edx, 0x12f
mov dword [esp + 0x88], eax
mov eax, 0xd
cmovg eax, edx
mov edx, 0x1e5
mov dword [esp + 0x84], eax
mov eax, 0xc3
cmovg eax, edx
mov edx, 0x1c0
mov dword [esp + 0x80], eax
mov eax, 0x9e
cmovg eax, edx
mov edx, 0x176
mov dword [esp + 0x70], eax
mov eax, 0x54
cmovg eax, edx
mov edx, 0x20a
mov dword [esp + 0x60], eax
mov eax, 0xe8
cmovg eax, edx
mov edx, 0x151
mov dword [esp + 0x78], eax
mov eax, 0x2f
cmovg eax, edx
mov edx, 0x22f
mov dword [esp + 0x68], eax
mov eax, 0x10d
cmovg eax, edx
mov edx, 0x12c
mov dword [esp + 0x58], eax
mov eax, 0xa
cmovg eax, edx
mov dword [esp + 0x40], eax
mov edi, eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
sub esp, 4
mov dword [esp + 0x74], eax
mov dword [esp], 0xf0f078
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
sub esp, 4
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x144]
mov dword [esp + 4], 1
add eax, 1
mov dword [esp], ebp
mov dword [0x45ae20], eax
mov eax, dword [sym.imp.GDI32.dll_SetBkMode]
mov dword [esp + 0x5c], eax
call eax
sub esp, 8
mov dword [esp + 4], 0x90e890
mov dword [esp], ebp
call dword [sym.imp.GDI32.dll_SetBkColor]
sub esp, 8
mov dword [esp + 4], 0xa04040
mov dword [esp], ebp
call dword [sym.imp.GDI32.dll_SetDCPenColor]
mov eax, dword [sym.imp.GDI32.dll_GetStockObject]
sub esp, 8
mov dword [esp], 0x13
mov dword [esp + 0xc4], eax
call eax
sub esp, 4
mov dword [esp + 4], eax
mov eax, dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp], ebp
mov dword [esp + 0x64], eax
call eax
lea eax, [esi + 0x142]
sub esp, 8
mov dword [esp + 0x3c], eax
lea eax, [esi + 0x6e]
mov esi, dword [sym.imp.GDI32.dll_MoveToEx]
mov dword [esp + 0x50], eax
lea esi, [esi]
mov ecx, dword [0x45a320]
mov eax, edi
mov dword [esp + 0xc], 0
mov dword [esp], ebp
imul eax, ecx
cdq
idiv dword [0x42e2e8]
mov edx, dword [esp + 0x50]
add eax, dword [0x45a318]
cmp ebx, 3
cmova edx, dword [esp + 0x48]
add ebx, 1
mov dword [esp + 8], eax
mov eax, ecx
imul eax, edx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call esi
mov ecx, dword [0x45a320]
mov eax, edi
add edi, 0x25
sub esp, 0x10
imul eax, ecx
mov dword [esp], ebp
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
imul eax, ecx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call dword [sym.imp.GDI32.dll_LineTo]
sub esp, 0xc
cmp ebx, 6
jne 0x412f58
mov edi, dword [esp + 0x40]
mov ecx, dword [0x45a320]
mov dword [esp], ebp
mov ebx, dword [0x42e2e8]
mov dword [esp + 0xc], 0
mov eax, edi
imul eax, ecx
cdq
idiv ebx
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x48]
imul eax, ecx
cdq
idiv ebx
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call esi
mov ecx, dword [0x45a320]
mov ebx, dword [0x42e2e8]
sub esp, 0x10
mov edx, dword [esp + 0x58]
mov dword [esp], ebp
imul edx, ecx
mov eax, edx
cdq
idiv ebx
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x48]
imul eax, ecx
cdq
idiv ebx
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call dword [sym.imp.GDI32.dll_LineTo]
mov ecx, dword [0x45a320]
mov eax, edi
mov ebx, dword [0x42e2e8]
sub esp, 0xc
imul eax, ecx
mov dword [esp + 0x40], edi
mov edi, dword [esp + 0x3c]
mov dword [esp + 0xc], 0
mov dword [esp], ebp
cdq
idiv ebx
mov edx, edi
imul edx, ecx
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, edx
cdq
idiv ebx
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call esi
mov ecx, dword [0x45a320]
mov ebx, dword [0x42e2e8]
sub esp, 0x10
mov edx, dword [esp + 0x58]
mov dword [esp + 0x3c], edi
mov dword [esp], ebp
imul edx, ecx
mov eax, edx
cdq
idiv ebx
imul edi, ecx
add eax, dword [0x45a318]
add eax, 1
mov dword [esp + 8], eax
mov eax, edi
cdq
idiv ebx
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call dword [sym.imp.GDI32.dll_LineTo]
mov ecx, dword [0x45a320]
mov ebx, dword [0x42e2e8]
sub esp, 0xc
mov edx, dword [esp + 0x68]
mov edi, dword [esp + 0x50]
mov dword [esp + 0xc], 0
mov dword [esp], ebp
imul edx, ecx
mov eax, edx
cdq
idiv ebx
mov edx, edi
imul edx, ecx
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, edx
cdq
idiv ebx
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call esi
mov ecx, dword [0x45a320]
mov ebx, dword [0x42e2e8]
sub esp, 0x10
mov edx, dword [esp + 0x78]
imul edi, ecx
mov dword [esp], ebp
imul edx, ecx
mov eax, edx
cdq
idiv ebx
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, edi
cdq
idiv ebx
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call dword [sym.imp.GDI32.dll_LineTo]
mov ecx, dword [0x45a320]
mov edi, dword [0x42e2e8]
sub esp, 0xc
mov edx, dword [esp + 0x68]
mov ebx, dword [esp + 0x44]
mov dword [esp + 0xc], 0
mov dword [esp], ebp
imul edx, ecx
add ebx, 0x104
mov eax, edx
cdq
idiv edi
imul ecx, ebx
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, ecx
cdq
idiv edi
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call esi
mov ecx, dword [0x45a320]
mov edi, dword [0x42e2e8]
sub esp, 0x10
mov eax, dword [esp + 0x60]
imul ebx, ecx
mov dword [esp], ebp
imul eax, ecx
cdq
idiv edi
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, ebx
cdq
idiv edi
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call dword [sym.imp.GDI32.dll_LineTo]
mov ecx, dword [0x45a320]
mov edi, dword [0x42e2e8]
sub esp, 0xc
mov eax, dword [esp + 0x70]
mov ebx, dword [esp + 0x44]
mov dword [esp + 0xc], 0
mov dword [esp], ebp
imul eax, ecx
add ebx, 0xbc
imul ecx, ebx
cdq
idiv edi
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, ecx
cdq
idiv edi
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call esi
mov ecx, dword [0x45a320]
mov edi, dword [0x42e2e8]
sub esp, 0x10
mov eax, dword [esp + 0x80]
mov dword [esp], ebp
imul eax, ecx
cdq
idiv edi
add eax, dword [0x45a318]
imul ecx, ebx
mov dword [esp + 8], eax
mov eax, ecx
cdq
idiv edi
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call dword [sym.imp.GDI32.dll_LineTo]
mov ecx, dword [0x45a320]
mov edi, dword [0x42e2e8]
sub esp, 0xc
mov edx, dword [esp + 0x78]
mov dword [esp + 0xc], 0
mov dword [esp], ebp
imul edx, ecx
imul ecx, ebx
mov eax, edx
cdq
idiv edi
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, ecx
cdq
idiv edi
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call esi
mov esi, dword [0x45a320]
mov ecx, dword [0x42e2e8]
sub esp, 0x10
mov edx, dword [esp + 0x58]
imul ebx, esi
mov dword [esp], ebp
imul edx, esi
mov eax, edx
cdq
idiv ecx
add eax, dword [0x45a318]
mov dword [esp + 8], eax
mov eax, ebx
cdq
idiv ecx
add eax, dword [0x45a31c]
mov dword [esp + 4], eax
call dword [sym.imp.GDI32.dll_LineTo]
mov eax, dword [0x45a310]
sub esp, 0xc
mov esi, dword [esp + 0x74]
mov dword [esp + 4], eax
mov dword [esp], esi
mov esi, dword [esp + 0x64]
call esi
sub esp, 8
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x64], esi
mov dword [esp], ebp
mov dword [esp + 4], ecx
call esi
mov ecx, dword [0x45a320]
mov edi, dword [0x45a318]
sub esp, 8
mov eax, dword [esp + 0x40]
mov dword [esp + 0x20], 0xc000ca
mov dword [esp], ebp
imul eax, ecx
cdq
idiv dword [0x42e2e8]
add edi, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x48]
lea ebx, [edi + 1]
mov edi, dword [0x45a31c]
imul eax, ecx
mov dword [esp + 0x1c], ebx
mov dword [esp + 8], ebx
cdq
idiv dword [0x42e2e8]
mov edx, dword [esp + 0x74]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x68]
imul edx, ecx
mov esi, eax
add edi, eax
mov eax, edx
cdq
add edi, 1
idiv dword [0x42e2e8]
mov edx, dword [esp + 0x40]
mov dword [esp + 0x18], edi
mov dword [esp + 4], edi
sub eax, edx
sub eax, 1
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
imul eax, ecx
cdq
idiv dword [0x42e2e8]
sub eax, esi
sub eax, 1
mov dword [esp + 0xc], eax
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [0x4524f0]
sub esp, 0x24
mov esi, dword [esp + 0x64]
mov dword [esp + 4], eax
mov dword [esp], ebp
call esi
mov edi, dword [sym.imp.GDI32.dll_SetTextColor]
sub esp, 8
mov dword [esp + 0x40], edi
mov dword [esp + 4], 0x804080
mov dword [esp], ebp
call edi
mov ecx, dword [0x45a320]
mov edi, dword [0x45a31c]
sub esp, 8
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x10], 0x25
mov dword [esp + 8], 0xffffffff
lea edx, [ebx + 0x67]
mov ebx, dword [0x42e2e8]
mov dword [esp], ebp
mov dword [esp + 0x80], edx
imul edx, ecx
mov eax, edx
mov esi, edx
cdq
idiv ebx
add eax, edi
mov dword [esp + 0xd0], eax
imul eax, ecx, 0xd7
add eax, esi
mov esi, dword [0x45a318]
cdq
idiv ebx
add eax, edi
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x84]
imul eax, ecx
cdq
idiv ebx
add eax, esi
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x88]
imul eax, ecx
cdq
idiv ebx
mov edx, dword [esp + 0x144]
shl edx, 2
mov dword [esp + 0x60], edx
add eax, esi
mov dword [esp + 0xdc], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x144]
add eax, edx
mov edx, dword [sym.imp.USER32.dll_DrawTextW]
shl eax, 3
lea esi, [eax + 0x458620]
mov eax, dword [eax + 0x458620]
mov dword [esp + 0x3c], edx
mov dword [esp + 4], eax
call edx
mov eax, dword [0x4524ec]
sub esp, 0x14
mov ecx, dword [esp + 0x64]
mov dword [esp + 4], eax
mov dword [esp], ebp
call ecx
sub esp, 8
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], 0x606060
mov dword [esp], ebp
call ecx
mov ecx, dword [0x45a320]
mov ebx, dword [0x42e2e8]
sub esp, 8
mov edi, dword [esp + 0x44]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
lea eax, [edi + 0x71]
mov dword [esp], ebp
mov dword [esp + 0x70], eax
imul eax, ecx
cdq
idiv ebx
add eax, dword [0x45a31c]
mov dword [esp + 0xd0], eax
mov eax, edi
add eax, 0x102
mov dword [esp + 0x84], eax
imul eax, ecx
cdq
idiv ebx
add eax, dword [0x45a31c]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x90]
imul eax, ecx
cdq
idiv ebx
add eax, dword [0x45a318]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x94]
imul eax, ecx
cdq
idiv ebx
mov ebx, dword [0x452484]
mov edx, dword [esp + 0x3c]
add eax, dword [0x45a318]
mov dword [esp + 0xdc], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0xc], eax
lea eax, [ebx + 0x1bc]
mov dword [esp + 4], eax
call edx
sub esp, 0x14
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], 0
mov dword [esp], ebp
call ecx
mov eax, edi
mov ecx, dword [esi + 0x24]
sub esp, 8
add eax, 0xe6
mov dword [esp + 0x88], eax
imul eax, dword [0x45a320]
cdq
idiv dword [0x42e2e8]
mov edx, dword [esi + 0x20]
add eax, dword [0x45a31c]
mov dword [esp + 0xd8], eax
mov eax, 0x3e7
cmp eax, edx
mov eax, 0
sbb eax, ecx
jb 0x414840
mov eax, dword [0x452484]
mov dword [esp + 0xc], edx
mov dword [esp + 4], 0x40
add eax, 0x86a
mov dword [esp + 8], eax
lea eax, [esp + 0xe0]
mov dword [esp], eax
mov dword [esp + 0x58], eax
call fcn.0040fce0
lea eax, [esp + 0xd0]
mov esi, dword [esp + 0x3c]
mov dword [esp], ebp
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], eax
call esi
sub esp, 0x14
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], 0x606060
mov dword [esp], ebp
call ecx
mov ebx, dword [0x42e2e8]
mov esi, dword [0x45a31c]
sub esp, 8
mov edi, dword [esp + 0x44]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
mov ecx, edi
mov dword [esp], ebp
add ecx, 0x107
mov dword [esp + 0x90], ecx
mov edx, ecx
mov ecx, dword [0x45a320]
imul edx, ecx
mov eax, edx
cdq
idiv ebx
mov edx, edi
mov edi, dword [esp + 0x3c]
add edx, 0x140
mov dword [esp + 0x94], edx
add eax, esi
mov dword [esp + 0xd0], eax
mov eax, edx
imul eax, ecx
cdq
idiv ebx
mov ebx, dword [0x452484]
add eax, esi
mov dword [esp + 0xd8], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0xc], eax
lea eax, [ebx + 0x914]
mov dword [esp + 4], eax
call edi
sub esp, 0x14
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], 0
mov dword [esp], ebp
call ecx
sub esp, 8
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x58]
lea ecx, [edx + 0x130]
mov dword [esp + 0x98], ecx
imul ecx, dword [0x45a320]
mov eax, ecx
mov ecx, dword [esp + 0x60]
add ecx, dword [esp + 0x144]
cdq
lea esi, [ecx*8 + 0x458620]
mov ecx, dword [0x452484]
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xd8], eax
movzx eax, byte [esi + 0xc]
mov dword [esp], ebx
mov dword [esp + 0xc], eax
lea eax, [ecx + 0x920]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40
call fcn.0040fce0
lea eax, [esp + 0xd0]
mov dword [esp], ebp
mov dword [esp + 0xc], eax
mov eax, edi
mov dword [esp + 4], ebx
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
call eax
sub esp, 0x14
mov dword [esp + 4], 0x50b0f0
mov dword [esp], ebp
call dword [sym.imp.GDI32.dll_SetDCBrushColor]
mov ebx, dword [0x45a320]
mov ecx, dword [0x45a31c]
sub esp, 8
mov eax, dword [esp + 0x48]
imul eax, ebx
cdq
idiv dword [0x42e2e8]
lea eax, [ecx + eax + 1]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x50]
imul eax, ebx
cdq
idiv dword [0x42e2e8]
add eax, ecx
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x78]
imul eax, ebx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a318]
mov ecx, eax
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x68]
imul eax, ebx
mov ebx, dword [0x45a318]
cdq
idiv dword [0x42e2e8]
lea eax, [ebx + eax + 1]
mov ebx, ecx
sub ebx, eax
movzx eax, byte [esi + 0xc]
imul ebx, eax
mov eax, 0x51eb851f
imul ebx
sar ebx, 0x1f
sar edx, 5
sub edx, ebx
jne 0x414d68
mov dword [esp + 0xd4], 0
mov edi, dword [esp + 0x40]
mov dword [esp + 4], 0x606060
mov dword [esp], ebp
mov eax, edi
call eax
mov ecx, dword [0x45a320]
mov ebx, dword [0x42e2e8]
sub esp, 8
mov esi, dword [0x45a31c]
mov edx, dword [esp + 0x70]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
imul edx, ecx
mov dword [esp], ebp
mov eax, edx
cdq
idiv ebx
mov edx, dword [esp + 0x84]
imul edx, ecx
add eax, esi
mov dword [esp + 0xd0], eax
mov eax, edx
cdq
idiv ebx
mov edx, dword [esp + 0x9c]
imul edx, ecx
add eax, esi
mov esi, dword [0x45a318]
mov dword [esp + 0xd8], eax
mov eax, edx
cdq
idiv ebx
mov edx, dword [esp + 0xa0]
imul edx, ecx
add eax, esi
mov dword [esp + 0xd4], eax
mov eax, edx
cdq
idiv ebx
add eax, esi
mov esi, dword [0x452484]
mov dword [esp + 0xdc], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0xc], eax
lea eax, [esi + 0x1c0]
mov esi, dword [esp + 0x3c]
mov dword [esp + 4], eax
call esi
mov eax, edi
sub esp, 0x14
mov dword [esp + 4], 0
mov dword [esp], ebp
call eax
sub esp, 8
mov eax, dword [esp + 0x88]
imul eax, dword [0x45a320]
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x60]
add eax, dword [esp + 0x144]
mov ecx, dword [eax*8 + 0x458634]
cmp ecx, 0x3e7
ja 0x4147f8
mov eax, dword [0x452484]
mov dword [esp + 0xc], ecx
mov dword [esp + 4], 0x40
add eax, 0x86a
mov dword [esp + 8], eax
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.0040fce0
lea eax, [esp + 0xd0]
mov ebx, dword [esp + 0x3c]
mov dword [esp], ebp
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], eax
call ebx
sub esp, 0x14
mov edi, dword [esp + 0x40]
mov dword [esp + 4], 0x606060
mov dword [esp], ebp
mov eax, edi
call eax
mov esi, dword [0x45a320]
mov ecx, dword [0x42e2e8]
sub esp, 8
mov ebx, dword [0x45a31c]
mov edx, dword [esp + 0x90]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
imul edx, esi
mov dword [esp], ebp
mov eax, edx
cdq
idiv ecx
mov edx, dword [esp + 0x94]
imul edx, esi
mov esi, dword [0x452484]
add eax, ebx
mov dword [esp + 0xd0], eax
mov eax, edx
cdq
idiv ecx
add eax, ebx
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0xd8], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0xc], eax
lea eax, [esi + 0x1bc]
mov dword [esp + 4], eax
call ebx
mov eax, edi
sub esp, 0x14
mov dword [esp + 0x40], edi
mov dword [esp + 4], 0
mov dword [esp], ebp
call eax
sub esp, 8
mov esi, dword [esp + 0x44]
mov ecx, dword [esp + 0x60]
add ecx, dword [esp + 0x144]
mov edi, dword [esp + 0x58]
lea eax, [esi + 0x124]
lea esi, [ecx*8 + 0x458620]
mov ecx, dword [0x452484]
mov dword [esp + 0x78], eax
imul eax, dword [0x45a320]
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xd8], eax
movzx eax, word [esi + 0x10]
mov dword [esp], edi
mov dword [esp + 0xc], eax
lea eax, [ecx + 0x920]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x40
call fcn.0040fce0
lea eax, [esp + 0xd0]
mov dword [esp], ebp
mov dword [esp + 4], edi
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x10], 0x26
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xffffffff
call ebx
sub esp, 0x14
mov edi, dword [esp + 0x40]
mov dword [esp + 4], 0x606060
mov dword [esp], ebp
call edi
mov ecx, dword [0x45a320]
mov ebx, dword [0x42e2e8]
sub esp, 8
mov edx, dword [esp + 0x70]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
imul edx, ecx
mov dword [esp], ebp
mov eax, edx
cdq
idiv ebx
add eax, dword [0x45a31c]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x78]
imul eax, ecx
cdq
idiv ebx
mov edx, dword [esp + 0xa4]
imul edx, ecx
add eax, dword [0x45a31c]
mov dword [esp + 0xd8], eax
mov eax, edx
cdq
idiv ebx
mov edx, dword [esp + 0xa8]
imul edx, ecx
add eax, dword [0x45a318]
mov dword [esp + 0xd4], eax
mov eax, edx
cdq
idiv ebx
mov edx, dword [0x452484]
mov ebx, dword [esp + 0x3c]
add eax, dword [0x45a318]
mov dword [esp + 0xdc], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0xc], eax
lea eax, [edx + 0x940]
mov dword [esp + 4], eax
call ebx
sub esp, 0x14
mov dword [esp + 4], 0
mov dword [esp], ebp
call edi
sub esp, 8
mov eax, dword [esp + 0x44]
add eax, 0x114
imul eax, dword [0x45a320]
cdq
idiv dword [0x42e2e8]
mov edx, dword [esi + 0x1c]
mov dword [esp + 0x54], edx
add eax, dword [0x45a31c]
mov dword [esp + 0xd8], eax
mov eax, dword [esi + 0x18]
mov esi, 0xcccccccd
mov ecx, eax
mov dword [esp + 0x50], eax
add ecx, edx
adc ecx, 0
mov eax, ecx
mul esi
mov eax, dword [esp + 0x50]
mov ebx, edx
and edx, 0xfffffffc
shr ebx, 2
add edx, ebx
xor ebx, ebx
sub ecx, edx
mov edx, dword [esp + 0x54]
sub eax, ecx
sbb edx, ebx
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x48]
imul ecx, edx, 0xcccccccd
imul edx, dword [esp + 0x48], 0xcccccccc
add ecx, edx
mul esi
add edx, ecx
mov ebx, eax
mov esi, edx
shrd ebx, edx, 1
shr esi, 1
mov edi, esi
mov esi, ebx
mov ebx, 0xa
mov eax, esi
imul ecx, edi, 0xa
mov esi, dword [esp + 0x50]
mov edi, dword [esp + 0x54]
mul ebx
mov ebx, edi
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], edi
add edx, ecx
mov ecx, esi
sub ecx, eax
mov eax, 4
sbb ebx, edx
cmp eax, ecx
mov eax, 0
mov edx, edi
sbb eax, ebx
mov eax, esi
jae 0x413cca
add eax, 0xa
adc edx, 0
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x4c]
mov eax, esi
mov ebx, esi
xor esi, esi
shrd eax, edi, 0x14
and ebx, 0xfffff
and eax, 0xfffff
lea ecx, [ebx + eax]
mov eax, edi
shr eax, 8
and eax, 0xfffff
add ecx, eax
mov eax, edi
mov edi, 0xc28f5c29
shr eax, 0x1c
add ecx, eax
mov eax, 0x51eb851f
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
mov edx, dword [esp + 0x4c]
lea eax, [eax + eax*4]
sub ecx, eax
mov eax, dword [esp + 0x48]
mov ebx, ecx
sub eax, ecx
sbb edx, esi
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x68]
imul ecx, edx, 0xc28f5c29
imul edx, dword [esp + 0x68], 0x8f5c28f5
add ecx, edx
mul edi
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x6c], edx
mov edx, 0x19
and eax, 3
add dword [esp + 0x6c], ecx
xor ecx, ecx
mul edx
add edx, ecx
add eax, ebx
adc edx, esi
mov ecx, eax
mov eax, dword [esp + 0x68]
mov ebx, edx
mov edx, dword [esp + 0x6c]
mov esi, ecx
mov edi, ebx
shrd eax, edx, 2
shr edx, 2
add esi, ebx
adc esi, 0
mov dword [esp + 0x88], eax
mov eax, 0xcccccccd
mov dword [esp + 0x8c], edx
mul esi
mov eax, edx
and edx, 0xfffffffc
shr eax, 2
add edx, eax
sub esi, edx
xor edx, edx
mov eax, esi
mov esi, ecx
mov ecx, dword [esp + 0x50]
sub esi, eax
sbb edi, edx
imul eax, esi, 0xcccccccc
imul ebx, edi, 0xcccccccd
add ebx, eax
mov eax, 0xcccccccd
mul esi
add edx, ebx
mov ebx, dword [esp + 0x54]
shrd eax, edx, 1
shr edx, 1
add eax, 0x30
mov dword [esp + 0x68], eax
mov eax, dword [0x452484]
adc edx, 0
xor esi, esi
mov dword [esp + 0x6c], edx
mov dword [esp + 0x84], eax
mov eax, 0x1869f
cmp eax, ecx
mov eax, esi
sbb eax, ebx
jae 0x414d20
lea eax, [esp + 0xc8]
mov edx, dword [esp + 0x4c]
mov dword [esp + 8], 0x186a0
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0xc], 0
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0042d3d0
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0xc8]
mov ebx, dword [esp + 0xc8]
mov edi, dword [esp + 0xcc]
mov dword [esp + 0x88], eax
shrd edx, ecx, 0x14
mov eax, edx
and ebx, 0xfffff
shr edi, 8
and eax, 0xfffff
lea ecx, [ebx + eax]
mov eax, edi
mov edi, dword [esp + 0xcc]
xor ebx, ebx
and eax, 0xfffff
add ecx, eax
shr edi, 0x1c
mov eax, 0x51eb851f
add ecx, edi
mov edi, 0xc28f5c29
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
mov edx, dword [esp + 0xcc]
lea eax, [eax + eax*4]
sub ecx, eax
mov eax, dword [esp + 0xc8]
sub eax, ecx
sbb edx, ebx
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x50]
imul ecx, edx, 0xc28f5c29
imul edx, dword [esp + 0x50], 0x8f5c28f5
add ecx, edx
mul edi
add edx, ecx
mov ecx, eax
mov eax, 0x5f5e0ff
shrd ecx, edx, 2
mov ebx, edx
shr ebx, 2
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x4c]
cmp eax, ecx
sbb esi, ebx
jae 0x4148a8
lea eax, [esp + 0xc8]
mov edx, dword [esp + 0x4c]
mov dword [esp + 8], 0x5f5e100
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0xc], 0
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0042d3d0
mov edx, dword [esp + 0x6c]
mov dword [esp + 8], 0x186a0
mov ebx, eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc], 0
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0xcc]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], edx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xc8]
mov dword [esp], eax
call fcn.0042d2b0
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], 0x40
add eax, 0x968
mov dword [esp + 8], eax
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.0040fce0
lea eax, [esp + 0xd0]
mov dword [esp + 0x10], 0x26
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], ebp
call eax
sub esp, 0x14
mov edi, dword [esp + 0x40]
mov dword [esp + 4], 0x606060
mov dword [esp], ebp
call edi
mov ecx, dword [0x45a320]
mov ebx, dword [0x42e2e8]
sub esp, 8
mov esi, dword [0x45a31c]
mov edx, dword [esp + 0x70]
mov edi, dword [esp + 0x44]
mov dword [esp], ebp
mov dword [esp + 0x10], 0x26
imul edx, ecx
mov dword [esp + 8], 0xffffffff
mov eax, edx
cdq
idiv ebx
add eax, esi
mov dword [esp + 0xd0], eax
lea eax, [edi + 0xba]
mov edi, dword [0x452484]
mov dword [esp + 0x50], eax
imul eax, ecx
cdq
idiv ebx
mov edx, dword [esp + 0xac]
imul edx, ecx
add eax, esi
mov esi, dword [0x45a318]
mov dword [esp + 0xd8], eax
mov eax, edx
cdq
idiv ebx
mov edx, dword [esp + 0xb0]
imul edx, ecx
add eax, esi
mov dword [esp + 0xd4], eax
mov eax, edx
cdq
idiv ebx
add eax, esi
mov dword [esp + 0xdc], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0xc], eax
lea eax, [edi + 0x940]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
call eax
sub esp, 0x14
mov eax, dword [esp + 0x144]
cmp dword [0x45ae14], eax
mov dword [esp], ebp
sete al
movzx eax, al
add eax, 1
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
call eax
sub esp, 8
cmp dword [esp + 0x144], 5
jle 0x414c40
mov eax, dword [esp + 0x44]
mov edi, dword [0x452484]
mov dword [esp + 4], 0x40
mov ebx, dword [esp + 0x58]
add eax, 0xaa
imul eax, dword [0x45a320]
mov dword [esp], ebx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x60]
add eax, dword [esp + 0x144]
lea esi, [eax*8]
movzx edx, word [esi + 0x458632]
mov dword [esp + 0x48], esi
add esi, 0x458620
mov eax, edx
imul edx, edx, 0xcccd
mov ecx, eax
shr edx, 0x13
lea edx, [edx + edx*4]
add edx, edx
sub ecx, edx
lea edx, [eax + 0xa]
cmp cx, 4
cmova eax, edx
mov edx, eax
shr dx, 2
movzx edx, dx
imul edx, edx, 0x147b
shr edx, 0x11
lea ecx, [edx + edx*4]
movzx edx, dx
lea ecx, [ecx + ecx*4]
mov dword [esp + 0xc], edx
shl ecx, 2
sub eax, ecx
movzx eax, ax
imul eax, eax, 0xcccd
shr eax, 0x13
add eax, 0x30
mov dword [esp + 0x10], eax
lea eax, [edi + 0x944]
mov dword [esp + 8], eax
call fcn.0040fce0
lea eax, [esp + 0xd0]
mov dword [esp], ebp
mov dword [esp + 0x58], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0x10], 0x26
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xffffffff
call ebx
sub esp, 0x14
mov edi, dword [esp + 0x5c]
mov dword [esp + 4], 1
mov dword [esp], ebp
call edi
sub esp, 8
mov edx, dword [esp + 0x40]
mov dword [esp + 4], 0x606060
mov dword [esp], ebp
call edx
mov edi, dword [0x452484]
sub esp, 8
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x10], 0x24
mov dword [esp + 8], 0xffffffff
lea edx, [ecx + 0xbf]
mov ecx, dword [0x45a320]
mov dword [esp], ebp
mov dword [esp + 0x68], edx
imul edx, ecx
mov eax, edx
mov ebx, edx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xd0], eax
mov eax, ecx
shl eax, 7
add eax, ecx
add eax, ebx
mov ebx, dword [esp + 0x3c]
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xd8], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0xc], eax
lea eax, [edi + 0x1c4]
mov dword [esp + 4], eax
call ebx
mov edi, dword [0x452484]
sub esp, 0x14
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
lea eax, [ecx + 0xf3]
mov dword [esp], ebp
imul eax, dword [0x45a320]
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xd0], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0xc], eax
lea eax, [edi + 0x940]
mov dword [esp + 4], eax
call ebx
sub esp, 0x14
mov edx, dword [esp + 0x40]
mov dword [esp + 4], 0
mov dword [esp], ebp
call edx
mov edi, dword [0x452484]
sub esp, 8
mov ecx, dword [esp + 0x98]
imul ecx, dword [0x45a320]
mov eax, ecx
cdq
idiv dword [0x42e2e8]
movzx edx, word [esi + 0xe]
mov esi, dword [esp + 0x58]
mov dword [esp + 4], 0x40
mov dword [esp], esi
add eax, dword [0x45a31c]
mov dword [esp + 0xd8], eax
mov eax, edx
imul edx, edx, 0xcccd
mov ecx, eax
shr edx, 0x13
lea edx, [edx + edx*4]
add edx, edx
sub ecx, edx
lea edx, [eax + 0xa]
cmp cx, 4
cmova eax, edx
mov edx, eax
shr dx, 2
movzx edx, dx
imul edx, edx, 0x147b
shr edx, 0x11
lea ecx, [edx + edx*4]
movzx edx, dx
lea ecx, [ecx + ecx*4]
mov dword [esp + 0xc], edx
shl ecx, 2
sub eax, ecx
movzx eax, ax
imul eax, eax, 0xcccd
shr eax, 0x13
add eax, 0x30
mov dword [esp + 0x10], eax
lea eax, [edi + 0x944]
mov dword [esp + 8], eax
call fcn.0040fce0
lea eax, [esp + 0xd0]
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 0x10], 0x26
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xffffffff
call ebx
mov ecx, dword [0x45a320]
mov ebx, dword [0x42e2e8]
sub esp, 0x14
mov esi, dword [0x45a318]
mov eax, dword [esp + 0xb4]
imul eax, ecx
cdq
idiv ebx
add eax, esi
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0xb8]
imul eax, ecx
cdq
idiv ebx
xor edx, edx
add eax, esi
mov dword [esp + 0xdc], eax
mov eax, dword [0x42e2e4]
cmp eax, 6
cmovge eax, edx
imul eax, eax, 0x7c
movzx eax, byte [eax + 0x45694d]
and eax, 0xf
cmp al, 3
je 0x414a80
mov edi, dword [esp + 0x40]
mov dword [esp + 4], 0x606060
mov dword [esp], ebp
call edi
mov esi, dword [0x45a320]
mov ebx, dword [0x45a31c]
sub esp, 8
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x10], 0x24
mov dword [esp + 8], 0xffffffff
imul ecx, esi
mov dword [esp], ebp
mov eax, ecx
cdq
idiv dword [0x42e2e8]
add eax, ebx
mov dword [esp + 0xd0], eax
mov eax, esi
shl eax, 6
add eax, esi
add eax, ecx
cdq
idiv dword [0x42e2e8]
add eax, ebx
xor ebx, ebx
mov dword [esp + 0xd8], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0xc], eax
mov eax, dword [0x452484]
add eax, 0x248
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
call eax
sub esp, 0x14
mov dword [esp + 4], 0x703030
mov dword [esp], ebp
call edi
sub esp, 8
mov eax, dword [esp + 0x44]
mov dword [esp + 0x140], ebp
lea esi, [eax + 0xb2]
mov eax, dword [0x45ae10]
mov ecx, dword [esp + 0x48]
test eax, eax
lea edx, [eax + 3]
cmovns edx, eax
sar edx, 2
cmp byte [ebx + ecx + 0x458624], 0
jne 0x4148f8
cmp dword [esp + 0x144], edx
je 0x414a10
add ebx, 1
add esi, 0x24
cmp ebx, 4
jne 0x414485
mov ebp, dword [esp + 0x140]
mov dword [esp + 4], 1
mov eax, dword [esp + 0x5c]
mov dword [esp], ebp
call eax
sub esp, 8
mov dword [esp + 4], 0x606060
mov eax, dword [esp + 0x40]
mov dword [esp], ebp
call eax
mov ecx, dword [0x45a320]
mov ebx, dword [0x42e2e8]
sub esp, 8
mov esi, dword [0x45a31c]
mov eax, dword [esp + 0x80]
mov dword [esp + 0x10], 0x24
mov dword [esp + 8], 0xffffffff
imul eax, ecx
mov dword [esp], ebp
cdq
idiv ebx
add eax, esi
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x50]
imul eax, ecx
cdq
idiv ebx
add eax, esi
mov esi, dword [0x45a318]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0xbc]
imul eax, ecx
cdq
idiv ebx
add eax, esi
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0xc0]
imul eax, ecx
cdq
idiv ebx
add eax, esi
mov dword [esp + 0xdc], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0xc], eax
mov eax, dword [0x452484]
add eax, 0x24e
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
call eax
mov eax, dword [0x42e2e4]
xor edx, edx
mov ebx, dword [0x45ae0c]
sub esp, 0x14
cmp eax, 6
cmovge eax, edx
mov edx, dword [esp + 0x60]
add edx, dword [esp + 0x144]
movzx ecx, byte [edx*8 + 0x45862a]
imul eax, eax, 0x7c
add eax, 0x4568e0
movzx edx, byte [eax + 0x6d]
and edx, 0xf
cmp dl, 2
je 0x414c10
test cl, cl
jne 0x414c60
cmp dword [esp + 0x144], ebx
je 0x414f48
mov dword [esp], ebp
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], 1
call eax
sub esp, 8
mov dword [esp], ebp
mov esi, dword [esp + 0x40]
mov dword [esp + 4], 0x606060
call esi
mov esi, dword [0x45a320]
mov ebx, dword [0x45a31c]
sub esp, 8
mov edi, dword [0x452484]
mov ecx, dword [esp + 0x68]
mov dword [esp], ebp
mov dword [esp + 0x10], 0x24
imul ecx, esi
mov dword [esp + 8], 0xffffffff
mov eax, ecx
cdq
idiv dword [0x42e2e8]
add eax, ebx
mov dword [esp + 0xd0], eax
mov eax, esi
shl eax, 7
add eax, esi
mov esi, dword [esp + 0x3c]
add eax, ecx
cdq
idiv dword [0x42e2e8]
add eax, ebx
mov dword [esp + 0xd8], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0xc], eax
lea eax, [edi + 0x254]
mov dword [esp + 4], eax
call esi
mov edi, dword [0x452484]
sub esp, 0x14
mov eax, dword [esp + 0x44]
mov dword [esp], ebp
mov dword [esp + 0x3c], esi
add eax, 0xf7
imul eax, dword [0x45a320]
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xd0], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0xc], eax
lea eax, [edi + 0x1bc]
mov dword [esp + 4], eax
call esi
xor eax, eax
sub esp, 0x14
mov edi, dword [esp + 0x144]
mov ebx, dword [esp + 0x5c]
mov dword [esp], ebp
cmp dword [0x45ae08], edi
sete al
add eax, 1
mov dword [esp + 4], eax
call ebx
sub esp, 8
mov dword [esp], ebp
mov ebx, dword [esp + 0x40]
mov dword [esp + 4], 0x703030
call ebx
mov edi, dword [0x452484]
sub esp, 8
mov eax, dword [esp + 0x78]
mov ebx, dword [esp + 0x60]
mov dword [esp + 4], 0x40
imul eax, dword [0x45a320]
add ebx, dword [esp + 0x144]
shl ebx, 3
lea esi, [ebx + 0x458620]
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xd8], eax
movzx eax, byte [ebx + 0x45862b]
add ebx, 0x4584a0
mov dword [esp + 0xc], eax
lea eax, [edi + 0x918]
mov edi, dword [esp + 0x58]
mov dword [esp + 8], eax
mov dword [esp], edi
call fcn.0040fce0
lea eax, [esp + 0xd0]
mov dword [esp], ebp
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], edi
mov dword [esp + 0x10], 0x26
mov dword [esp + 8], 0xffffffff
call eax
sub esp, 0x14
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_DeleteObject]
sub esp, 4
mov eax, dword [esp + 0x74]
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_DeleteDC]
sub esp, 4
call dword [sym.imp.GDI32.dll_GdiFlush]
mov dword [esp + 8], esi
mov dword [esp], ebx
mov dword [esp + 0xc], 0x28
mov dword [esp + 4], 0x28
call dword [0x42e308]
add esp, 0x12c
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x10624dd3
mov dword [esp + 4], 0x40
mul ecx
shr edx, 6
imul eax, edx, 0x3e8
mov dword [esp + 0xc], edx
sub ecx, eax
mov eax, dword [0x452484]
mov dword [esp + 0x10], ecx
add eax, 0x8e6
mov dword [esp + 8], eax
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.0040fce0
jmp 0x4139c7
lea eax, [esp + 0xc8]
mov dword [esp + 8], 0x3e8
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0042d3d0
mov edx, dword [esp + 0xc8]
mov dword [esp + 4], 0x40
mov dword [esp + 0xc], eax
mov eax, dword [0x452484]
mov dword [esp + 0x10], edx
add eax, 0x8e6
mov dword [esp + 8], eax
lea eax, [esp + 0xe0]
mov dword [esp], eax
mov dword [esp + 0x58], eax
call fcn.0040fce0
jmp 0x413662
mov ebx, dword [esp + 0x68]
mov esi, dword [esp + 0x6c]
mov dword [esp + 4], 0x40
mov eax, dword [esp + 0x88]
mov edi, dword [esp + 0x50]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x18], esi
add eax, 0x950
mov dword [esp + 0x10], edi
mov dword [esp + 8], eax
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.0040fce0
jmp 0x413f85
mov ecx, 1
cmp dword [esp + 0x144], edx
je 0x414a60
mov eax, dword [esp + 0x140]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
call eax
mov ebp, dword [0x45a320]
mov eax, esi
mov ecx, dword [0x45a31c]
sub esp, 8
imul eax, ebp
cdq
idiv dword [0x42e2e8]
add eax, ecx
mov dword [esp + 0xd0], eax
lea eax, [esi + 0x1f]
imul eax, ebp
cdq
idiv dword [0x42e2e8]
add eax, ecx
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x48]
movzx edx, byte [ebx + eax + 0x458624]
test dl, dl
jne 0x4149c0
mov dword [esp + 0xe0], 0x200020
xor edx, edx
mov word [esp + 0xe4], dx
lea eax, [esp + 0xd0]
mov dword [esp + 0x10], 0x26
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], eax
mov eax, dword [esp + 0x140]
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
call eax
sub esp, 0x14
jmp 0x4144b4
mov eax, dword [0x42e2e4]
xor edi, edi
mov ebp, dword [0x452484]
cmp eax, 6
cmovge eax, edi
imul eax, eax, 0x7c
add eax, 0x4568e0
movzx ecx, byte [eax + 0x6d]
and ecx, 0xf
cmp cl, 2
je 0x414a30
mov dword [esp + 0xc], edx
add ebp, 0x918
mov eax, dword [esp + 0x58]
mov dword [esp + 8], ebp
mov dword [esp + 4], 0x40
mov dword [esp], eax
call fcn.0040fce0
jmp 0x41497d
cdq
shr edx, 0x1e
add eax, edx
and eax, 3
sub eax, edx
cmp eax, ebx
jne 0x4144b4
mov ecx, 2
jmp 0x41490a
test byte [eax + 0x70], 8
je 0x414e40
mov eax, edx
and eax, 0xf
test dl, 0x10
jne 0x414f3b
mov dword [esp + 0xc], eax
test dl, dl
jns 0x414e50
add ebp, 0x98a
jmp 0x4149f1
cdq
xor ecx, ecx
shr edx, 0x1e
add eax, edx
and eax, 3
sub eax, edx
cmp ebx, eax
sete cl
add ecx, 1
jmp 0x41490a
mov dword [esp + 4], 0x703030
mov eax, dword [esp + 0x40]
xor ebx, ebx
mov dword [esp], ebp
call eax
mov ecx, dword [0x45ae10]
sub esp, 8
mov eax, dword [esp + 0x44]
lea esi, [eax + 0x70]
mov eax, dword [esp + 0x144]
lea eax, [eax + eax*2]
mov edi, eax
mov eax, 0x2aaaaaab
imul ecx
mov eax, ecx
sar eax, 0x1f
sub edx, eax
mov eax, dword [esp + 0x48]
cmp byte [ebx + eax + 0x458624], 0
jne 0x414af0
cmp dword [esp + 0x144], edx
je 0x414bf0
add ebx, 1
cmp ebx, 6
je 0x4144c6
add esi, 0x23
jmp 0x414aaf
mov eax, 1
cmp dword [esp + 0x144], edx
je 0x414da8
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp], ebp
call eax
mov ecx, dword [0x45a320]
mov eax, esi
sub esp, 8
imul eax, ecx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xd0], eax
lea eax, [esi + 0x21]
imul eax, ecx
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x48]
movzx eax, byte [ebx + eax + 0x458624]
test al, al
jne 0x414bc0
mov dword [esp + 0xe0], 0x200020
xor ecx, ecx
mov word [esp + 0xe4], cx
lea eax, [esp + 0xd0]
mov dword [esp + 0x10], 0x26
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], ebp
call eax
sub esp, 0x14
cmp ebx, 5
je 0x414dc8
mov ecx, dword [0x45ae10]
add ebx, 1
add esi, 0x23
jmp 0x414aaf
mov dword [esp + 0xc], eax
mov eax, dword [0x452484]
mov dword [esp + 4], 0x40
add eax, 0x918
mov dword [esp + 8], eax
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.0040fce0
jmp 0x414b70
lea edx, [edi + edi]
mov eax, ecx
sub eax, edx
cmp eax, ebx
jne 0x414ad8
mov eax, 2
jmp 0x414b02
test byte [eax + 0x70], 8
je 0x414e60
and ecx, 0x10
jne 0x414f52
cmp dword [esp + 0x144], ebx
jne 0x4145e3
mov eax, 2
jmp 0x414f61
mov dword [esp + 4], 0x703030
mov eax, dword [esp + 0x40]
mov dword [esp], ebp
call eax
sub esp, 8
jmp 0x4140ad
xor eax, eax
cmp dword [esp + 0x144], ebx
sete al
add eax, 1
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp], ebp
call eax
sub esp, 8
mov dword [esp + 4], 0x703030
mov eax, dword [esp + 0x40]
mov dword [esp], ebp
call eax
sub esp, 8
mov eax, dword [esp + 0x44]
add eax, 0x9f
imul eax, dword [0x45a320]
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x60]
add eax, dword [esp + 0x144]
movzx eax, byte [eax*8 + 0x45862a]
test al, al
jne 0x414f07
mov dword [esp + 0xe0], 0x200020
xor eax, eax
mov word [esp + 0xe4], ax
lea eax, [esp + 0xd0]
mov dword [esp + 0x10], 0x26
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], ebp
call eax
sub esp, 0x14
jmp 0x4145e3
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], 0x40
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x14], edx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x84]
add eax, 0x944
mov dword [esp + 8], eax
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.0040fce0
jmp 0x413f85
sub ecx, edx
mov dword [esp], 0x12
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xd4], ecx
call eax
sub esp, 4
mov dword [esp + 8], eax
lea eax, [esp + 0xd0]
mov dword [esp + 4], eax
mov dword [esp], ebp
call dword [sym.imp.USER32.dll_FillRect]
sub esp, 0xc
jmp 0x41388d
mov eax, dword [esp + 0x144]
lea eax, [eax + eax*2]
add eax, eax
sub ecx, eax
xor eax, eax
cmp ebx, ecx
sete al
add eax, 1
jmp 0x414b02
mov eax, dword [esp + 0x60]
add eax, dword [esp + 0x144]
cmp byte [eax*8 + 0x458629], 0
je 0x4144c6
cmp byte [0x456673], 0
je 0x4144c6
mov dword [esp + 4], 1
mov eax, dword [esp + 0x5c]
mov dword [esp], ebp
call eax
sub esp, 8
lea eax, [esp + 0xd0]
mov dword [esp + 0x10], 0x26
mov dword [esp + 0xc], eax
mov eax, dword [0x452484]
mov dword [esp + 8], 0xffffffff
add eax, 0x73c
mov dword [esp], ebp
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
call eax
sub esp, 0x14
jmp 0x4144c6
movzx eax, dl
cmp dl, 0xa
ja 0x414f38
mov dword [esp + 0xc], eax
add ebp, 0x992
jmp 0x4149f1
cmp cl, 0xa
ja 0x414e79
cmp dword [esp + 0x144], ebx
jne 0x4145e3
mov eax, 2
jmp 0x414e88
xor eax, eax
cmp dword [esp + 0x144], ebx
sete al
add eax, 1
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp], ebp
call eax
mov eax, dword [0x4524f4]
sub esp, 8
mov dword [esp + 4], eax
mov eax, dword [esp + 0x64]
mov dword [esp], ebp
call eax
sub esp, 8
mov dword [esp + 4], 0x703030
mov eax, dword [esp + 0x40]
mov dword [esp], ebp
call eax
sub esp, 8
mov eax, dword [esp + 0x44]
add eax, 0x9f
imul eax, dword [0x45a320]
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x60]
add eax, dword [esp + 0x144]
movzx eax, byte [eax*8 + 0x45862a]
lea edx, [eax - 0xb]
sub eax, 0xa
cmp dl, 3
ja 0x414cd2
mov dword [esp + 0xc], eax
mov eax, dword [0x452484]
mov dword [esp + 4], 0x40
add eax, 0x918
mov dword [esp + 8], eax
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.0040fce0
jmp 0x414ce7
sub eax, 0xa
mov dword [esp + 0xc], eax
jmp 0x4149eb
mov eax, 2
jmp 0x414c6f
xor eax, eax
cmp dword [esp + 0x144], ebx
sete al
add eax, 1
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp], ebp
call eax
mov eax, dword [0x4524f4]
sub esp, 8
mov dword [esp + 4], eax
mov eax, dword [esp + 0x64]
mov dword [esp], ebp
call eax
sub esp, 8
mov dword [esp + 4], 0x703030
mov eax, dword [esp + 0x40]
mov dword [esp], ebp
call eax
sub esp, 8
mov eax, dword [esp + 0x44]
add eax, 0x9f
imul eax, dword [0x45a320]
cdq
idiv dword [0x42e2e8]
add eax, dword [0x45a31c]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x60]
add eax, dword [esp + 0x144]
movzx eax, byte [eax*8 + 0x45862a]
mov edx, eax
and edx, 0xf
je 0x414cd2
test al, 0xc
jne 0x414cd2
movzx edx, dl
mov dword [esp + 0xc], edx
jmp 0x414f0b