Function at 0x70cd9f
Capabilities:
Encode data using base64

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x7afc81
mov eax, dword fs:[0]
push eax
mov eax, 0x110c
call fcn.006e70d0
mov eax, dword [0x8ca144]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x14]
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
mov dword [ebp - 0xfa0], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x103c], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x1040], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xfac], edi
mov dword [ebp - 0xfbc], esi
mov dword [ebp - 0xfc0], ebx
mov dword [ebp - 0x100c], eax
call fcn.006ecba7
cmp dword [ebp - 0xfa0], 0
je 0x70f703
test esi, esi
je 0x70f703
push ebx
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x70f703
mov eax, dword [ebp + 0x28]
xor ecx, ecx
shr eax, 0xa
inc ecx
not al
and al, cl
lea ecx, [ebp - 0xffc]
push 0xa
mov dword [ebp - 0xfe4], eax
pop eax
push eax
mov dword [ebp - 0x1048], eax
call fcn.006f2e53
push 0xa
pop esi
xor eax, eax
lea ecx, [ebp - 0x1018]
push esi
mov dword [ebp - 4], eax
call fcn.006f2e53
xor eax, eax
lea ecx, [ebp - 0xfdc]
inc eax
push esi
mov byte [ebp - 4], al
call fcn.006f2e53
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 2
push eax
xorps xmm0, xmm0
push edi
movups xmmword [ebp - 0xaf8], xmm0
call dword [sym.imp.GDI32.dll_GetClipBox]
mov esi, dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
lea eax, [ebp - 0xaf8]
push eax
call esi
push ebx
mov dword [ebp - 0x1064], eax
call esi
cmp byte [ebp - 0xfe4], 0
mov dword [ebp - 0x10bc], eax
je 0x70ced4
push 1
push eax
push edi
call dword [sym.imp.GDI32.dll_ExtSelectClipRgn]
mov ebx, dword [ebp - 0xfbc]
mov ecx, ebx
call fcn.006f4bde
add eax, 0x90
mov ecx, ebx
mov dword [ebp - 0xfc4], eax
call fcn.006f4bde
push dword [eax]
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x10b0], eax
xor eax, eax
inc eax
push eax
push edi
call dword [sym.imp.GDI32.dll_SetBkMode]
mov eax, dword [ebp + 0x18]
mov ecx, eax
shr ecx, 8
movzx edx, cl
movzx ecx, al
shl ecx, 8
or edx, ecx
shr eax, 0x10
shl edx, 8
movzx eax, al
or edx, eax
push edx
push edi
call dword [sym.imp.GDI32.dll_SetTextColor]
mov ecx, ebx
call fcn.006f4c5b
mov ebx, eax
xor eax, eax
mov dword [ebp - 0x1110], eax
mov dword [ebp - 0x110c], eax
mov dword [ebp - 0x1108], eax
push 0x52
pop ecx
mov esi, str.7PS6Ixs0dttg7UIDnPdvL8xa3hbftY2YGPkAXcARSbYYQiP0GJwkr0TESqWG42HrlNa4jbmKbgwwAPLJOOn5Hfn94bLkZiFzwDN3q8QA7QuJToMOPTclrl0d5fz08VSy8q5GwUJav2iAq4yqgfZbr5II3Sv08wpR1YG7fc1BM3Ck7bQ67Qi0T014Mpo3R2a0RPWy1Gem1Z4AwWHA4f35vFnTP3FwbglcWjafJj7luFRGbwRTfjL62lI7MSft6UrLifHGpSm1S0b4WvO507A8cq9df9EpvacvIzBsHcp9gTUn8GC2q3UWgXztV1uD0UU3qXGziyI
mov byte [ebp - 4], 3
lea edi, [ebp - 0x258]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0xae8]
call fcn.00405a50
lea eax, [ebp - 0xae8]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x1110]
call fcn.004082f0
xor eax, eax
mov byte [ebp - 4], 3
xor esi, esi
lea ecx, [ebp - 0xae8]
push esi
inc eax
push eax
call fcn.004096c0
mov eax, ebx
shr eax, 8
movzx ecx, al
movzx eax, bl
shl eax, 8
or ecx, eax
shr ebx, 0x10
movzx eax, bl
mov ebx, dword [ebp - 0xfac]
shl ecx, 8
or ecx, eax
push ecx
push ebx
call dword [sym.imp.GDI32.dll_SetBkColor]
test byte [ebp + 0x28], 0xf
mov edi, 0x400
je 0x70d0eb
test dword [ebp + 0x28], edi
jne 0x70d0eb
movaps xmm0, xmmword [0x87b040]
movups xmmword [ebp - 0xa98], xmm0
mov dword [ebp - 0x1034], esi
call fcn.006ec2c0
mov eax, dword [ebp + 0x28]
or eax, edi
mov edi, dword [ebp - 0xfbc]
push eax
lea eax, [ebp - 0x1034]
push eax
xor eax, eax
push eax
push eax
push dword [ebp + 0x18]
lea eax, [ebp - 0xa98]
push dword [ebp - 0xfa0]
push eax
push edi
push ebx
call fcn.0070cd9f
add esp, 0x24
test byte [ebp + 0x28], 0x20
je 0x70d08c
mov ebx, dword [ebp - 0xfc0]
xor eax, eax
inc eax
test byte [ebp + 0x28], al
je 0x70d075
mov eax, dword [ebx + 8]
sub eax, dword [ebx]
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [ebp - 0xa90]
sub eax, dword [ebp - 0xa98]
cdq
sub eax, edx
sar ecx, 1
sar eax, 1
sub ecx, eax
mov eax, dword [ebp - 0xa90]
add ecx, dword [ebx]
sub eax, dword [ebp - 0xa98]
add eax, ecx
mov dword [ebx], ecx
mov dword [ebx + 8], eax
test byte [ebp + 0x28], 2
je 0x70d08c
mov eax, dword [ebx + 8]
sub eax, dword [ebp - 0xa90]
add eax, dword [ebp - 0xa98]
mov dword [ebx], eax
test byte [ebp + 0x28], 4
mov ebx, dword [ebp - 0xfc0]
je 0x70d0d1
mov eax, dword [ebp - 0xa8c]
sub eax, dword [ebp - 0xa94]
mov esi, dword [ebx + 4]
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [ebx + 0xc]
sub eax, esi
sar ecx, 1
cdq
sub eax, edx
sar eax, 1
sub eax, ecx
lea ecx, [eax + esi]
mov eax, dword [ebp - 0xa8c]
sub eax, dword [ebp - 0xa94]
add eax, ecx
mov dword [ebx + 4], ecx
mov dword [ebx + 0xc], eax
test byte [ebp + 0x28], 8
je 0x70d0f1
mov eax, dword [ebx + 0xc]
sub eax, dword [ebp - 0xa8c]
add eax, dword [ebp - 0xa94]
mov dword [ebx + 4], eax
jmp 0x70d0f1
mov edi, dword [ebp - 0xfbc]
xor ebx, ebx
lea ecx, [ebp - 0xe94]
mov byte [ebp - 0xfc9], bl
call fcn.006f2e17
mov byte [ebp - 4], 5
call fcn.006f18c0
lea eax, [ebp - 0x1118]
mov ecx, edi
push eax
call fcn.006f52dd
mov edi, dword [ebp - 0x1040]
mov esi, ebx
mov ebx, dword [ebp - 0x103c]
mov eax, dword [ebp - 0x100c]
cmp esi, dword [eax]
jge 0x70d174
push dword [ebp - 0x1114]
push dword [ebp - 0x1118]
push ebx
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x70d160
push edi
lea ecx, [ebp - 0xe94]
call fcn.006f2f38
mov al, 1
mov byte [ebp - 0xfc9], al
jmp 0x70d166
mov al, byte [ebp - 0xfc9]
inc esi
add ebx, 0x10
add edi, 0x84
test al, al
je 0x70d129
call fcn.006f0109
mov eax, dword [ebp - 0xfc0]
lea ecx, [ebp - 0xfdc]
xor ebx, ebx
mov dword [ebp - 0xfe0], ebx
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0xfa8], edx
mov dword [ebp - 0xfc8], eax
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xfdc]
push eax
call fcn.006f330a
mov edi, dword [ebp - 0xfc4]
lea ecx, [ebp - 0x1080]
mov esi, eax
mov dword [ebp - 0x1034], ebx
push ebx
mov dword [ebp - 0xfd0], ebx
add esi, dword [edi + 0x10]
add esi, dword [edi]
mov dword [ebp - 0xfb4], esi
mov dword [ebp - 0x1028], ebx
mov dword [ebp - 0x102c], ebx
mov byte [ebp - 0xfec], bl
mov byte [ebp - 0xfad], bl
mov byte [ebp - 0xfb6], bl
mov byte [ebp - 0xfb5], bl
mov dword [ebp - 0x1038], ebx
call fcn.006f2e53
push ebx
lea ecx, [ebp - 0x1074]
mov byte [ebp - 4], 6
call fcn.006f2e53
push ebx
lea ecx, [ebp - 0x108c]
mov byte [ebp - 4], 7
call fcn.006f2e53
mov eax, dword [ebp - 0xfa0]
mov byte [ebp - 4], 8
mov dword [ebp - 0x1068], eax
mov byte [ebp - 0xfe6], bl
mov byte [ebp - 0xfe5], bl
mov byte [ebp - 0xfca], bl
mov dword [ebp - 0x1008], ebx
mov byte [ebp - 0xfa1], bl
call fcn.00402330
mov ebx, dword [ebp - 0xfa0]
movzx eax, word [ebx]
test ax, ax
je 0x70f627
mov ecx, dword [ebp - 0xfa8]
mov dword [ebp - 0x1044], 0x3c
mov dword [ebp - 0x104c], 0x7b
mov dword [ebp - 0x10c8], 0x61
mov dword [ebp - 0x109c], 0x7a
mov dword [ebp - 0x10c4], 0x20
mov dword [ebp - 0x1050], 0x3e
mov dword [ebp - 0x1054], 0x7d
mov edx, dword [ebp - 0xfc0]
mov edx, dword [edx + 8]
cmp ecx, edx
jge 0x70f041
cmp ax, word [ebp - 0x1048]
je 0x70f04a
cmp byte [ebp - 0xfec], 0
jne 0x70f041
mov dl, byte [ebp - 0xfad]
test dl, dl
jne 0x70ec57
push 0x3c
pop ecx
cmp ax, cx
je 0x70d303
push 0x7b
pop ecx
cmp ax, cx
jne 0x70e677
lea esi, [ebx + 2]
movzx ecx, word [esi]
cmp cx, word [ebp - 0x10c8]
jb 0x70e66e
cmp cx, word [ebp - 0x109c]
ja 0x70e66e
movzx ecx, word [ebx + 4]
cmp cx, word [ebp - 0x10c4]
je 0x70d346
cmp cx, word [ebp - 0x1050]
je 0x70d346
cmp cx, word [ebp - 0x1054]
jne 0x70e66e
mov dword [ebp - 0xfa0], esi
xor ecx, ecx
movzx eax, word [esi]
mov ebx, ecx
cmp eax, 0x70
jg 0x70e29a
je 0x70e1ff
push 0x61
pop ecx
sub eax, ecx
je 0x70df9f
sub eax, 1
je 0x70de76
sub eax, 1
je 0x70ddf6
sub eax, 3
je 0x70dad4
sub eax, 3
je 0x70d3b5
sub eax, 5
jne 0x70e65b
add esi, 2
test byte [ebp + 0x28], 0x20
mov dword [ebp - 0xfa0], esi
jne 0x70e65b
inc ebx
mov byte [ebp - 0xfec], bl
jmp 0x70e65b
lea ebx, [esi - 2]
add esi, 2
push 0xffffffffffffffff
push esi
lea ecx, [ebp - 0xd8c]
mov dword [ebp - 0x1004], ebx
mov dword [ebp - 0xfa0], esi
call fcn.006f2df3
mov eax, dword [ebp - 0xfa0]
push 0x20
mov byte [ebp - 4], 0xd
pop edi
movzx ecx, word [eax]
test cx, cx
je 0x70d3fe
cmp cx, di
ja 0x70d3fe
push eax
call dword [sym.imp.USER32.dll_CharNextW]
mov dword [ebp - 0xfa0], eax
jmp 0x70d3e2
lea ecx, [ebp - 0xe10]
call fcn.006f2e17
mov eax, dword [ebp - 0xfa0]
mov byte [ebp - 4], 0xe
movzx ecx, word [eax]
test cx, cx
je 0x70d468
push 0x7d
pop ebx
push 0x3e
pop edx
cmp cx, dx
je 0x70d462
cmp cx, bx
je 0x70d462
cmp cx, di
je 0x70d462
push eax
call dword [sym.imp.USER32.dll_CharNextW]
mov esi, eax
jmp 0x70d450
add eax, 2
push ecx
lea ecx, [ebp - 0xe10]
mov dword [ebp - 0xfa0], eax
call fcn.006f2fd6
mov eax, dword [ebp - 0xfa0]
movzx ecx, word [eax]
cmp eax, esi
jb 0x70d43b
test cx, cx
jne 0x70d41e
mov ebx, dword [ebp - 0x1004]
call fcn.006eda0d
lea ecx, [ebp - 0xe10]
call fcn.006f34ca
test al, al
je 0x70d5ab
mov ecx, dword [ebp - 0xfbc]
xor eax, eax
mov ebx, eax
call fcn.006f4bde
lea ecx, [ebp - 0xffc]
mov esi, eax
call fcn.00402ee0
test eax, eax
jle 0x70d4ba
lea ecx, [ebp - 0xffc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xffc]
push eax
call fcn.006f330a
mov esi, eax
cmp byte [esi + 0x8e], bl
jne 0x70daaf
xor eax, eax
lea ecx, [esi + 4]
inc eax
push eax
movzx eax, byte [esi + 0x8d]
push eax
movzx eax, byte [esi + 0x8c]
push eax
push dword [esi + 0x88]
call fcn.00605d60
mov ecx, dword [ebp - 0xfbc]
push eax
call fcn.006f4dc4
test eax, eax
jne 0x70d524
inc eax
lea ecx, [esi + 4]
push eax
movzx eax, byte [esi + 0x8d]
push eax
movzx eax, byte [esi + 0x8c]
push eax
push dword [esi + 0x88]
call fcn.00605d60
mov ecx, dword [ebp - 0xfbc]
push eax
call fcn.006f4339
mov ecx, dword [ebp - 0xfbc]
push eax
call fcn.006f4fbe
mov esi, eax
lea ecx, [ebp - 0xffc]
push esi
call fcn.006f2ffa
push dword [esi]
lea edi, [esi + 0x90]
push dword [ebp - 0xfac]
mov dword [ebp - 0xfc4], edi
call dword [sym.imp.GDI32.dll_SelectObject]
lea ecx, [ebp - 0xfdc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xfdc]
push eax
call fcn.006f330a
add eax, dword [edi + 0x10]
add eax, dword [edi]
cmp dword [ebp - 0xfb4], eax
jg 0x70daaf
lea ecx, [ebp - 0xfdc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xfdc]
push eax
call fcn.006f330a
mov edx, eax
add edx, dword [edi + 0x10]
add edx, dword [edi]
mov dword [ebp - 0xfb4], edx
jmp 0x70daaf
mov eax, dword [ebp - 0xfa0]
jmp 0x70d5c5
cmp cx, di
ja 0x70d5cd
push eax
call dword [sym.imp.USER32.dll_CharNextW]
mov dword [ebp - 0xfa0], eax
movzx ecx, word [eax]
test cx, cx
jne 0x70d5b3
push 0xa
pop esi
push esi
lea ecx, [ebp - 0xfa0]
push ecx
push eax
call fcn.0075ffa7
add esp, 0xc
mov edi, eax
test edi, edi
push 1
pop eax
cmovle edi, eax
mov eax, dword [ebp - 0xfa0]
mov dword [ebp - 0x1000], edi
movzx ecx, word [eax]
test cx, cx
je 0x70d622
push 0x20
pop edi
cmp cx, di
ja 0x70d61c
push eax
call dword [sym.imp.USER32.dll_CharNextW]
mov dword [ebp - 0xfa0], eax
movzx ecx, word [eax]
test cx, cx
jne 0x70d602
mov edi, dword [ebp - 0x1000]
push esi
lea ecx, [ebp - 0xfa0]
push ecx
push eax
call fcn.0075ffa7
mov esi, eax
add esp, 0xc
mov dword [ebp - 0x101c], esi
test esi, esi
js 0x70d643
cmp esi, edi
jl 0x70d64b
xor eax, eax
mov dword [ebp - 0x101c], eax
call fcn.006f231c
push 0x87a6e4
lea ecx, [ebp - 0xd8c]
call fcn.00605d60
push eax
call fcn.0074efd5
pop ecx
pop ecx
test eax, eax
jne 0x70d6ae
push str.res
lea ecx, [ebp - 0xd8c]
call fcn.00605d60
push eax
call fcn.0074efd5
pop ecx
pop ecx
test eax, eax
jne 0x70d6ae
push eax
push eax
lea ecx, [ebp - 0xe10]
call fcn.00605d60
mov ecx, dword [ebp - 0xfbc]
push eax
call fcn.006f507f
mov esi, eax
mov dword [ebp - 0x1000], esi
jmp 0x70d816
lea ecx, [ebp - 0xf18]
call fcn.006f2e17
lea ecx, [ebp - 0xf9c]
mov byte [ebp - 4], 0xf
call fcn.006f2e17
lea ecx, [ebp - 0xd8c]
mov byte [ebp - 4], 0x10
call fcn.00605d60
lea ecx, [ebp - 0xc00]
mov esi, eax
call fcn.006f2e17
lea ecx, [ebp - 0xc84]
mov byte [ebp - 4], 0x11
call fcn.006f2e17
xor eax, eax
mov byte [ebp - 4], 0x12
cmp word [esi], ax
je 0x70d7ba
push 0x20
pop ebx
lea ecx, [ebp - 0xc00]
call fcn.006f3179
lea ecx, [ebp - 0xc84]
call fcn.006f3179
jmp 0x70d72b
cmp ax, bx
ja 0x70d777
push esi
call dword [sym.imp.USER32.dll_CharNextW]
mov esi, eax
movzx eax, word [esi]
test ax, ax
jne 0x70d71d
jmp 0x70d777
push 0x3d
pop ecx
cmp ax, cx
je 0x70d77f
cmp ax, bx
jbe 0x70d77f
push esi
call dword [sym.imp.USER32.dll_CharNextW]
xor ecx, ecx
mov edi, eax
sub edi, esi
mov ebx, ecx
inc edi
shr edi, 1
cmp esi, eax
cmova edi, ecx
test edi, edi
je 0x70d774
movzx eax, word [esi]
lea ecx, [ebp - 0xc00]
push eax
call fcn.006f2fd6
add esi, 2
inc ebx
cmp ebx, edi
jb 0x70d75d
push 0x20
pop ebx
movzx eax, word [esi]
test ax, ax
jne 0x70d735
push 0x20
pop ebx
movzx eax, word [esi]
test ax, ax
je 0x70d79a
cmp ax, bx
ja 0x70d79a
push esi
call dword [sym.imp.USER32.dll_CharNextW]
mov esi, eax
jmp 0x70d782
mov ax, word [esi]
add esi, 2
push 0x3d
pop ecx
cmp ax, cx
je 0x70d886
xor eax, eax
mov ebx, dword [ebp - 0x1004]
mov edi, dword [ebp - 0x1000]
push eax
lea ecx, [ebp - 0xf18]
call fcn.00605d60
push eax
lea ecx, [ebp - 0xf9c]
call fcn.00605d60
mov ecx, dword [ebp - 0xfbc]
push eax
call fcn.006f507f
mov esi, eax
lea ecx, [ebp - 0xc84]
mov dword [ebp - 0x1000], esi
call fcn.006f2ec7
lea ecx, [ebp - 0xc00]
call fcn.006f2ec7
lea ecx, [ebp - 0xf9c]
call fcn.006f2ec7
lea ecx, [ebp - 0xf18]
mov byte [ebp - 4], 0xe
call fcn.006f2ec7
test esi, esi
je 0x70daab
mov eax, dword [esi + 4]
xor ecx, ecx
mov esi, dword [esi + 8]
inc ecx
mov dword [ebp - 0x1004], eax
cmp edi, ecx
jle 0x70d83a
cdq
idiv edi
mov dword [ebp - 0x1004], eax
mov edx, dword [ebp - 0xfa8]
lea ecx, [eax + edx]
mov eax, dword [ebp - 0xfc0]
mov dword [ebp - 0x1030], ecx
cmp ecx, dword [eax + 8]
jle 0x70d975
cmp edx, dword [eax]
jle 0x70d975
test byte [ebp + 0x28], 0x20
jne 0x70d975
xor eax, eax
inc eax
mov byte [ebp - 0xfec], al
jmp 0x70daaf
cmp ax, bx
ja 0x70d88e
push esi
call dword [sym.imp.USER32.dll_CharNextW]
mov esi, eax
movzx eax, word [esi]
test ax, ax
jne 0x70d878
mov ax, word [esi]
add esi, 2
push 0x27
pop ecx
cmp ax, cx
jne 0x70d7ac
jmp 0x70d8dc
cmp ax, cx
je 0x70d8e4
push esi
call dword [sym.imp.USER32.dll_CharNextW]
xor ecx, ecx
mov edi, eax
sub edi, esi
mov ebx, ecx
inc edi
shr edi, 1
cmp esi, eax
cmova edi, ecx
test edi, edi
je 0x70d8d9
movzx eax, word [esi]
lea ecx, [ebp - 0xc84]
push eax
call fcn.006f2fd6
add esi, 2
inc ebx
cmp ebx, edi
jb 0x70d8c2
push 0x27
pop ecx
movzx eax, word [esi]
test ax, ax
jne 0x70d8a2
cmp word [esi], cx
jne 0x70d7ac
lea ecx, [ebp - 0xc84]
call fcn.006f34ca
test al, al
jne 0x70d952
push 0x8767e8
lea ecx, [ebp - 0xc00]
call fcn.006f2f7b
test al, al
jne 0x70d940
push 0x8767f4
lea ecx, [ebp - 0xc00]
call fcn.006f2f7b
test al, al
jne 0x70d940
push str.restype
lea ecx, [ebp - 0xc00]
call fcn.006f2f7b
test al, al
je 0x70d952
lea ecx, [ebp - 0xf18]
jmp 0x70d946
lea ecx, [ebp - 0xf9c]
lea eax, [ebp - 0xc84]
push eax
call fcn.006f2f38
mov ax, word [esi + 2]
add esi, 4
push 0x20
pop ebx
cmp ax, bx
jne 0x70d7ac
xor eax, eax
cmp word [esi], ax
jne 0x70d705
jmp 0x70d7ae
xor eax, eax
mov ebx, eax
cmp byte [ebp - 0xfe4], al
je 0x70da6f
cmp byte [ebp - 0xfa1], al
je 0x70da6f
mov eax, dword [ebp - 0xfc8]
add eax, dword [ebp - 0x1008]
mov edi, dword [ebp - 0x1008]
mov edx, dword [ebp - 0xfa8]
sub edi, esi
push eax
push ecx
mov ecx, dword [ebp - 0xfc8]
add ecx, edi
push ecx
push edx
lea ecx, [ebp - 0xac0]
call fcn.006f2d9e
cmp esi, dword [ebp - 0x1008]
jge 0x70d9e9
mov ecx, dword [ebp - 0xab4]
mov eax, edi
cdq
sub eax, edx
sar eax, 1
neg eax
add ecx, eax
mov dword [ebp - 0xab4], ecx
sub ecx, esi
mov dword [ebp - 0xabc], ecx
mov edi, dword [ebp - 0x1004]
lea ecx, [ebp - 0xad0]
push esi
push edi
xor eax, eax
push eax
push eax
call fcn.006f2d9e
mov ecx, dword [ebp - 0x101c]
mov eax, ecx
imul eax, edi
mov dword [ebp - 0xad0], eax
lea eax, [ecx + 1]
imul eax, edi
lea ecx, [ebp - 0xae0]
mov dword [ebp - 0xac8], eax
xor eax, eax
push eax
push eax
push eax
push eax
call fcn.006f2d9e
mov ecx, dword [ebp - 0x1000]
xor eax, eax
push eax
push eax
push eax
movzx eax, byte [ecx + 0x10]
push 0xff
push eax
lea eax, [ebp - 0xae0]
push eax
lea eax, [ebp - 0xad0]
push eax
lea eax, [ebp - 0xac0]
push eax
push eax
push dword [ecx]
push dword [ebp - 0xfac]
call fcn.0070f71f
mov ecx, dword [ebp - 0x1030]
add esp, 0x2c
mov edx, dword [ebp - 0xfb4]
cmp esi, edx
mov eax, dword [ebp - 0xfc8]
cmovg edx, esi
mov dword [ebp - 0xfa8], ecx
add eax, esi
mov dword [ebp - 0xfb4], edx
cmp dword [ebp - 0xfd0], ecx
mov dword [ebp - 0x1034], eax
mov eax, ecx
cmovg eax, dword [ebp - 0xfd0]
mov dword [ebp - 0xfd0], eax
jmp 0x70daaf
xor eax, eax
mov ebx, eax
lea ecx, [ebp - 0xe10]
call fcn.006f2ec7
lea ecx, [ebp - 0xd8c]
mov byte [ebp - 4], 8
call fcn.006f2ec7
mov esi, dword [ebp - 0xfa0]
jmp 0x70e621
push 0x20
add esi, 2
pop ebx
mov dword [ebp - 0xfa0], esi
movzx eax, word [esi]
test ax, ax
je 0x70daf8
cmp ax, bx
ja 0x70daf8
push esi
call dword [sym.imp.USER32.dll_CharNextW]
mov esi, eax
jmp 0x70dada
push 0xa
pop eax
push eax
lea eax, [ebp - 0xfa0]
push eax
push esi
call fcn.0075ffa7
add esp, 0xc
cmp esi, dword [ebp - 0xfa0]
je 0x70db4d
mov ecx, dword [ebp - 0xfbc]
push eax
call fcn.006f4f4e
mov esi, eax
lea ecx, [ebp - 0xffc]
push esi
call fcn.006f2ffa
push dword [esi]
lea edi, [esi + 0x90]
push dword [ebp - 0xfac]
mov dword [ebp - 0xfc4], edi
call dword [sym.imp.GDI32.dll_SelectObject]
jmp 0x70dda1
lea ecx, [ebp - 0xd08]
call fcn.006f2e17
push 0xa
pop esi
mov edi, esi
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xb7c]
mov dword [ebp - 0xff0], edi
call fcn.006f2e17
mov eax, dword [ebp - 0xfa0]
mov byte [ebp - 4], 0xc
movzx ecx, word [eax]
test cx, cx
je 0x70dbe8
push 0x7d
pop edi
push 0x3e
pop edx
cmp cx, dx
je 0x70dbcb
cmp cx, di
je 0x70dbcb
cmp cx, bx
je 0x70dbcb
push eax
call dword [sym.imp.USER32.dll_CharNextW]
mov esi, eax
jmp 0x70dbb9
add eax, 2
push ecx
lea ecx, [ebp - 0xd08]
mov dword [ebp - 0xfa0], eax
call fcn.006f2fd6
mov eax, dword [ebp - 0xfa0]
movzx ecx, word [eax]
cmp eax, esi
jb 0x70dba4
test cx, cx
jne 0x70db87
mov edi, dword [ebp - 0xff0]
push 0xa
pop esi
jmp 0x70dbe8
cmp cx, bx
ja 0x70dbf0
push eax
call dword [sym.imp.USER32.dll_CharNextW]
mov dword [ebp - 0xfa0], eax
movzx ecx, word [eax]
test cx, cx
jne 0x70dbd6
movzx eax, word [eax]
push eax
call fcn.0075f84a
pop ecx
test eax, eax
je 0x70dc1c
push esi
lea eax, [ebp - 0xfa0]
push eax
push dword [ebp - 0xfa0]
call fcn.0075ffa7
add esp, 0xc
mov dword [ebp - 0xff0], eax
mov edi, eax
mov eax, dword [ebp - 0xfa0]
jmp 0x70dc36
cmp cx, bx
ja 0x70dc3e
push eax
call dword [sym.imp.USER32.dll_CharNextW]
mov dword [ebp - 0xfa0], eax
movzx ecx, word [eax]
test cx, cx
jne 0x70dc24
movzx ecx, word [eax]
test cx, cx
je 0x70dc8e
push 0x7d
pop edi
push 0x3e
pop edx
cmp cx, dx
je 0x70dc88
cmp cx, di
je 0x70dc88
push eax
call dword [sym.imp.USER32.dll_CharNextW]
mov esi, eax
jmp 0x70dc76
add eax, 2
push ecx
lea ecx, [ebp - 0xb7c]
mov dword [ebp - 0xfa0], eax
call fcn.006f2fd6
mov eax, dword [ebp - 0xfa0]
movzx ecx, word [eax]
cmp eax, esi
jb 0x70dc61
test cx, cx
jne 0x70dc49
mov edi, dword [ebp - 0xff0]
lea ecx, [ebp - 0xb7c]
call fcn.006f354f
xor ebx, ebx
lea ecx, [ebp - 0xb7c]
push ebx
push str.bold
call fcn.006f31b2
push 1
test eax, eax
movzx ecx, bl
pop eax
cmovns ecx, eax
push ebx
mov byte [ebp - 0x1060], cl
lea ecx, [ebp - 0xb7c]
push str.underline
call fcn.006f31b2
push 1
test eax, eax
movzx ecx, bl
pop eax
cmovns ecx, eax
push ebx
mov byte [ebp - 0x1058], cl
lea ecx, [ebp - 0xb7c]
push str.italic
call fcn.006f31b2
push 1
test eax, eax
movzx ecx, bl
pop eax
cmovns ecx, eax
mov byte [ebp - 0x105c], cl
lea ecx, [ebp - 0xd08]
push dword [ebp - 0x105c]
push dword [ebp - 0x1058]
push dword [ebp - 0x1060]
push edi
call fcn.00605d60
mov ebx, dword [ebp - 0xfbc]
mov ecx, ebx
push eax
call fcn.006f4dc4
test eax, eax
jne 0x70dd57
push dword [ebp - 0x105c]
lea ecx, [ebp - 0xd08]
push dword [ebp - 0x1058]
push dword [ebp - 0x1060]
push edi
call fcn.00605d60
push eax
mov ecx, ebx
call fcn.006f4339
push eax
mov ecx, ebx
call fcn.006f4fbe
mov esi, eax
lea ecx, [ebp - 0xffc]
push esi
call fcn.006f2ffa
push dword [esi]
lea edi, [esi + 0x90]
push dword [ebp - 0xfac]
mov dword [ebp - 0xfc4], edi
call dword [sym.imp.GDI32.dll_SelectObject]
lea ecx, [ebp - 0xb7c]
call fcn.006f2ec7
lea ecx, [ebp - 0xd08]
mov byte [ebp - 4], 8
call fcn.006f2ec7
lea ecx, [ebp - 0xfdc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xfdc]
push eax
call fcn.006f330a
add eax, dword [edi + 0x10]
add eax, dword [edi]
cmp dword [ebp - 0xfb4], eax
jg 0x70ddeb
lea ecx, [ebp - 0xfdc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xfdc]
push eax
call fcn.006f330a
mov ecx, eax
add ecx, dword [edi + 0x10]
add ecx, dword [edi]
mov dword [ebp - 0xfb4], ecx
mov esi, dword [ebp - 0xfa0]
jmp 0x70e65b
add esi, 2
jmp 0x70de0c
push 0x20
pop ecx
cmp ax, cx
ja 0x70de1a
push esi
call dword [sym.imp.USER32.dll_CharNextW]
mov esi, eax
mov dword [ebp - 0xfa0], esi
movzx eax, word [esi]
test ax, ax
jne 0x70ddfb
cmp word [esi], 0x23
jne 0x70de29
add esi, 2
mov dword [ebp - 0xfa0], esi
push 0x10
lea eax, [ebp - 0xfa0]
push eax
push esi
call fcn.0075ffa7
add esp, 0xc
lea ecx, [ebp - 0x1018]
mov ebx, eax
push ebx
call fcn.006f2ffa
mov ecx, ebx
shr ecx, 8
movzx edx, cl
movzx ecx, bl
shl ecx, 8
or edx, ecx
shr ebx, 0x10
shl edx, 8
movzx eax, bl
or edx, eax
push edx
push dword [ebp - 0xfac]
call dword [sym.imp.GDI32.dll_SetTextColor]
jmp 0x70ddeb
mov ebx, dword [ebp - 0xfbc]
add esi, 2
mov ecx, ebx
mov dword [ebp - 0xfa0], esi
call fcn.006f4bde
lea ecx, [ebp - 0xffc]
mov esi, eax
call fcn.00402ee0
test eax, eax
jle 0x70deb7
lea ecx, [ebp - 0xffc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xffc]
push eax
call fcn.006f330a
mov esi, eax
cmp byte [esi + 0x8c], 0
jne 0x70ddeb
movzx eax, byte [esi + 0x8e]
lea ecx, [esi + 4]
push eax
movzx eax, byte [esi + 0x8d]
push eax
xor eax, eax
inc eax
push eax
push dword [esi + 0x88]
call fcn.00605d60
push eax
mov ecx, ebx
call fcn.006f4dc4
test eax, eax
jne 0x70df1c
movzx eax, byte [esi + 0x8e]
lea ecx, [esi + 4]
push eax
movzx eax, byte [esi + 0x8d]
push eax
xor eax, eax
inc eax
push eax
push dword [esi + 0x88]
call fcn.00605d60
push eax
mov ecx, ebx
call fcn.006f4339
push eax
mov ecx, ebx
call fcn.006f4fbe
mov esi, eax
lea ecx, [ebp - 0xffc]
push esi
call fcn.006f2ffa
push dword [esi]
lea edi, [esi + 0x90]
push dword [ebp - 0xfac]
mov dword [ebp - 0xfc4], edi
call dword [sym.imp.GDI32.dll_SelectObject]
lea ecx, [ebp - 0xfdc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xfdc]
push eax
call fcn.006f330a
add eax, dword [edi + 0x10]
add eax, dword [edi]
cmp dword [ebp - 0xfb4], eax
jg 0x70ddeb
lea ecx, [ebp - 0xfdc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xfdc]
push eax
call fcn.006f330a
mov edx, eax
add edx, dword [edi + 0x10]
add edx, dword [edi]
mov dword [ebp - 0xfb4], edx
jmp 0x70ddeb
add esi, 2
jmp 0x70dfb5
push 0x20
pop ecx
cmp ax, cx
ja 0x70dfc3
push esi
call dword [sym.imp.USER32.dll_CharNextW]
mov esi, eax
mov dword [ebp - 0xfa0], esi
movzx eax, word [esi]
test ax, ax
jne 0x70dfa4
mov eax, dword [ebp - 0x100c]
mov edi, dword [ebp - 0xfe0]
cmp edi, dword [eax]
jge 0x70e040
cmp byte [ebp - 0xfa1], bl
jne 0x70e040
imul esi, edi, 0x84
add esi, dword [ebp - 0x1040]
mov ecx, esi
call fcn.006f3179
mov eax, dword [ebp - 0xfa0]
movzx ecx, word [eax]
test cx, cx
je 0x70e040
push 0x3e
pop edx
cmp cx, dx
je 0x70e03a
push 0x7d
pop edx
cmp cx, dx
je 0x70e03a
push eax
call dword [sym.imp.USER32.dll_CharNextW]
mov edi, eax
jmp 0x70e028
add eax, 2
push ecx
mov ecx, esi
mov dword [ebp - 0xfa0], eax
call fcn.006f2fd6
mov eax, dword [ebp - 0xfa0]
movzx ecx, word [eax]
cmp eax, edi
jb 0x70e017
test cx, cx
jne 0x70dffc
mov edi, dword [ebp - 0xfe0]
mov esi, dword [ebp - 0xfbc]
mov ecx, esi
call fcn.006f4c31
cmp byte [ebp - 0xfc9], 0
mov ebx, eax
je 0x70e08c
mov eax, dword [ebp - 0x100c]
cmp edi, dword [eax]
jge 0x70e08c
imul ecx, edi, 0x84
add ecx, dword [ebp - 0x1040]
call fcn.00605d60
push eax
lea ecx, [ebp - 0xe94]
call fcn.006f2f7b
test al, al
je 0x70e08c
mov ecx, esi
call fcn.006f4c46
mov ebx, eax
push ebx
lea ecx, [ebp - 0x1018]
call fcn.006f2ffa
mov eax, ebx
shr eax, 8
movzx ecx, al
movzx eax, bl
shl eax, 8
or ecx, eax
shr ebx, 0x10
movzx eax, bl
mov ebx, dword [ebp - 0xfac]
shl ecx, 8
or ecx, eax
push ecx
push ebx
call dword [sym.imp.GDI32.dll_SetTextColor]
mov ecx, esi
call fcn.006f4bde
lea ecx, [ebp - 0xffc]
mov esi, eax
call fcn.00402ee0
test eax, eax
jle 0x70e0f3
lea ecx, [ebp - 0xffc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xffc]
push eax
call fcn.006f330a
mov esi, eax
cmp byte [esi + 0x8d], 0
jne 0x70e1d9
movzx eax, byte [esi + 0x8e]
lea ecx, [esi + 4]
push eax
xor eax, eax
inc eax
push eax
movzx eax, byte [esi + 0x8c]
push eax
push dword [esi + 0x88]
call fcn.00605d60
mov ecx, dword [ebp - 0xfbc]
push eax
call fcn.006f4dc4
test eax, eax
jne 0x70e160
movzx eax, byte [esi + 0x8e]
lea ecx, [esi + 4]
push eax
xor eax, eax
inc eax
push eax
movzx eax, byte [esi + 0x8c]
push eax
push dword [esi + 0x88]
call fcn.00605d60
mov ecx, dword [ebp - 0xfbc]
push eax
call fcn.006f4339
mov ecx, dword [ebp - 0xfbc]
push eax
call fcn.006f4fbe
mov esi, eax
lea ecx, [ebp - 0xffc]
push esi
call fcn.006f2ffa
push dword [esi]
lea edi, [esi + 0x90]
push ebx
mov dword [ebp - 0xfc4], edi
call dword [sym.imp.GDI32.dll_SelectObject]
lea ecx, [ebp - 0xfdc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xfdc]
push eax
call fcn.006f330a
add eax, dword [edi + 0x10]
add eax, dword [edi]
cmp dword [ebp - 0xfb4], eax
jg 0x70e1d9
lea ecx, [ebp - 0xfdc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xfdc]
push eax
call fcn.006f330a
mov edx, eax
add edx, dword [edi + 0x10]
add edx, dword [edi]
mov dword [ebp - 0xfb4], edx
mov eax, dword [ebp - 0xfc8]
mov edx, dword [ebp - 0xfa8]
mov dword [ebp - 0x102c], eax
xor eax, eax
inc eax
mov dword [ebp - 0x1028], edx
mov byte [ebp - 0xfb6], al
jmp 0x70ddeb
mov eax, dword [ebp - 0xfc0]
add esi, 2
mov ebx, dword [ebp - 0xfec]
mov edx, dword [ebp - 0xfa8]
push 1
cmp edx, dword [eax]
pop eax
movzx ebx, bl
cmovg ebx, eax
mov dword [ebp - 0xfa0], esi
movzx eax, word [esi]
mov dword [ebp - 0xfec], ebx
test ax, ax
je 0x70e258
push 0x20
pop edi
cmp ax, di
ja 0x70e252
push esi
call dword [sym.imp.USER32.dll_CharNextW]
mov esi, eax
mov dword [ebp - 0xfa0], esi
movzx eax, word [esi]
test ax, ax
jne 0x70e236
mov edi, dword [ebp - 0xfc4]
push 0xa
pop eax
push eax
lea eax, [ebp - 0xfa0]
push eax
push esi
call fcn.0075ffa7
add esp, 0xc
lea ecx, [ebp - 0xfdc]
mov esi, eax
push esi
call fcn.006f2ffa
mov ecx, dword [edi + 0x10]
mov eax, dword [edi]
add ecx, esi
add eax, ecx
cmp dword [ebp - 0xfb4], eax
jg 0x70ddeb
mov dword [ebp - 0xfb4], eax
jmp 0x70ddeb
push 0x72
pop edx
sub eax, edx
je 0x70e60f
sub eax, 1
je 0x70e566
dec eax
sub eax, 1
je 0x70e3da
sub eax, 3
je 0x70e309
sub eax, 1
jne 0x70e65b
call fcn.006efc97
mov eax, dword [ebp - 0xfa0]
add eax, 2
jmp 0x70e2e5
push 0x20
pop edx
cmp cx, dx
ja 0x70e2f3
push eax
call dword [sym.imp.USER32.dll_CharNextW]
mov dword [ebp - 0xfa0], eax
movzx ecx, word [eax]
test cx, cx
jne 0x70e2d6
push 0xa
pop ecx
push ecx
lea ecx, [ebp - 0xfa0]
push ecx
push eax
call fcn.0075ffa7
add esp, 0xc
jmp 0x70e28f
mov dword [ebp - 0x10d4], ecx
mov dword [ebp - 0x10d0], ecx
mov dword [ebp - 0x10cc], ecx
push 0x6c
pop ecx
mov esi, str.7Ej4nXcLrJmMdkYGu3MhyxoGXr7zT1a9iJVFm04lTu2HUmCIzyzKUp3eVFBoe8cPQDS9kRdouNxOBrqgB9OnDw3BIMYGU8R9LQq0dBM1YXhij5HV9Ew18OWaWhOHNx5uywYZINonqrtMZnCWYhL8VlmA3zlTf38YnfwjaUy1f4yaqJBUHhLXukq7i8hMZAQcrA9o7yVq1JlTgMY1qjef6rUGNk2r3qQvXHodYoCGY6omucYSHBu9bQosU2PWdcM3HMuJQukzOIGZz4XeuCTCxYdHcBsibN2vPQyZUWrji8hzb6vzox26TbpqBelbf9gSErB4gXs8h4UiHavCv3JfIyUMNglpEFUpMtkMRUerb9J75Qpn5pKMJWz0uOKViWdUyD2ksVQTmEJVEp3iXZERlAhrUmYWJyh4gOpvkT6D5zbjBAh
mov byte [ebp - 4], 0x17
lea edi, [ebp - 0x754]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x754]
push eax
lea ecx, [ebp - 0xab0]
call fcn.00405a50
lea eax, [ebp - 0xab0]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x10d4]
call fcn.004082f0
xor eax, eax
lea ecx, [ebp - 0xab0]
push eax
inc eax
push eax
call fcn.004096c0
mov eax, dword [ebp - 0xfa0]
add eax, 2
jmp 0x70e381
push 0x20
pop edx
cmp cx, dx
ja 0x70e38f
push eax
call dword [sym.imp.USER32.dll_CharNextW]
mov dword [ebp - 0xfa0], eax
movzx ecx, word [eax]
test cx, cx
jne 0x70e372
push 0xa
pop ecx
push ecx
lea ecx, [ebp - 0xfa0]
push ecx
push eax
call fcn.0075ffa7
mov ecx, dword [ebp - 0xfa8]
add esp, 0xc
add ecx, eax
cmp dword [ebp - 0xfd0], ecx
mov eax, ecx
mov dword [ebp - 0xfa8], ecx
lea ecx, [ebp - 0x10d4]
cmovg eax, dword [ebp - 0xfd0]
mov dword [ebp - 0xfd0], eax
mov byte [ebp - 4], 8
call fcn.006ec102
jmp 0x70ddeb
mov dword [ebp - 0x10e0], ecx
mov dword [ebp - 0x10dc], ecx
mov dword [ebp - 0x10d8], ecx
push 0x6f
pop ecx
mov esi, str.Yag5r6aDScdFFsnt2TkutgH59ffsjUw52s21wNMh0csQCfn24GOSllBHVYjYgTdEt6zb1J3y4oPWNzJe1j1OcCvOAP6FMqI6fb4f64Veh8g8tZsRlyyTxAhJkNjTHrbjWtSLvGcJ5Lqae1mQqVh2uJ3FW9M0JlK5KVtPSfEdcRb9mJppM3185LMZVc3hRcFDxS9BDCi6pSiMkZ3I2qUaRCSIPbbOukz5CqCpQ3ERayZXzka1KL16YSRIhWA7ApkhhrsJz8ujV5LcEX5EsDyZ6rdswI8EE0dSnzhGAQlsPmPb8BcXXjoOtXfXQIbvnzZv4PIWt1vFUPcowBd3P9OVlAv0t8hM3Gaw0zjaFZuni1TlZtnFeihzTJ1LnLgYA9JoX80HVs4dVVz7jE0V03J9h8ifg4BsiEu6ncCvtUFz9jWMuNOqZcIYTamZLzZm
mov byte [ebp - 4], 0x15
lea edi, [ebp - 0x5a4]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x5a4]
push eax
lea ecx, [ebp - 0xab0]
movsb byte es:[edi], byte [esi]
call fcn.00405a50
lea eax, [ebp - 0xab0]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x10e0]
call fcn.004082f0
xor eax, eax
mov byte [ebp - 4], 0x15
push eax
inc eax
lea ecx, [ebp - 0xab0]
push eax
call fcn.004096c0
mov ebx, dword [ebp - 0xfbc]
mov ecx, ebx
add dword [ebp - 0xfa0], 2
call fcn.006f4bde
lea ecx, [ebp - 0xffc]
mov esi, eax
call fcn.00402ee0
test eax, eax
jle 0x70e47c
lea ecx, [ebp - 0xffc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xffc]
push eax
call fcn.006f330a
mov esi, eax
cmp byte [esi + 0x8d], 0
jne 0x70e55b
movzx eax, byte [esi + 0x8e]
lea ecx, [esi + 4]
push eax
xor eax, eax
inc eax
push eax
movzx eax, byte [esi + 0x8c]
push eax
push dword [esi + 0x88]
call fcn.00605d60
push eax
mov ecx, ebx
call fcn.006f4dc4
test eax, eax
jne 0x70e4e1
movzx eax, byte [esi + 0x8e]
lea ecx, [esi + 4]
push eax
xor eax, eax
inc eax
push eax
movzx eax, byte [esi + 0x8c]
push eax
push dword [esi + 0x88]
call fcn.00605d60
push eax
mov ecx, ebx
call fcn.006f4339
push eax
mov ecx, ebx
call fcn.006f4fbe
mov esi, eax
lea ecx, [ebp - 0xffc]
push esi
call fcn.006f2ffa
push dword [esi]
lea ebx, [esi + 0x90]
push dword [ebp - 0xfac]
mov dword [ebp - 0xfc4], ebx
call dword [sym.imp.GDI32.dll_SelectObject]
lea ecx, [ebp - 0xfdc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xfdc]
push eax
call fcn.006f330a
add eax, dword [ebx + 0x10]
add eax, dword [ebx]
cmp dword [ebp - 0xfb4], eax
jg 0x70e55b
lea ecx, [ebp - 0xfdc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xfdc]
push eax
call fcn.006f330a
mov edx, eax
add edx, dword [ebx + 0x10]
add edx, dword [ebx]
mov dword [ebp - 0xfb4], edx
lea ecx, [ebp - 0x10e0]
jmp 0x70e3cc
mov dword [ebp - 0x10ec], ecx
mov dword [ebp - 0x10e8], ecx
mov dword [ebp - 0x10e4], ecx
push 0x66
pop ecx
mov esi, str.94y9Su7IOVAnCBNmVjNtqoAMu5URQnAaOmEyl0k2IJvsxla503J3Tr8vZ0T2qFWNJ0dUl9kJln8ReqCtQVeUWWDFngvowgPS2zMTpqp4TlCXexQd7v7bcGth7DifgtWBNz9lJWcFschHjmnhlFV5aS9OfWuqKBtgjaqgzpGZWll7d1hGvFzI0yhVNpqYAwuMOFYZvEQff8x8Zg557WJIuRLoMz4xqFZXEENx3e1NI3D9Fn6FyzFfUf1zaJ4D1hwIWX7anDUYHedPbh2Tup9KXAfodYc0mUvLQjXVXsh3OfmxSmkF64x6WDAWVWIqLFBzKhL1YAFlKwkdZsnOJxjjXLwtvDbFnZ3wGqDhTQPNfgBUAeYRPzF0uGFYLTiiXTmKIkFgMLmRdyfr47DOLPJ4MoW
mov byte [ebp - 4], 0x13
lea edi, [ebp - 0xa88]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xa88]
push eax
lea ecx, [ebp - 0xab0]
call fcn.00405a50
lea eax, [ebp - 0xab0]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x10ec]
call fcn.004082f0
xor eax, eax
lea ecx, [ebp - 0xab0]
xor ebx, ebx
push eax
inc ebx
push ebx
call fcn.004096c0
add dword [ebp - 0xfa0], 2
cmp byte [ebp - 0xfb5], 0
sete al
cmp byte [ebp - 0xfe4], 0
mov byte [ebp - 0xfb5], al
je 0x70e604
cmp byte [ebp - 0xfa1], 0
je 0x70e604
test al, al
je 0x70e5f7
push 2
jmp 0x70e5f8
push ebx
push dword [ebp - 0xfac]
call dword [sym.imp.GDI32.dll_SetBkMode]
lea ecx, [ebp - 0x10ec]
jmp 0x70e3cc
add esi, 2
xor eax, eax
inc eax
mov dword [ebp - 0xfa0], esi
mov byte [ebp - 0xfad], al
test ebx, ebx
je 0x70e65b
mov esi, dword [ebp - 0xfb4]
mov ecx, dword [ebp - 0xfa8]
mov dword [ebp - 0xfa0], ebx
jmp 0x70f285
push 0x3e
pop ecx
cmp ax, cx
je 0x70e663
push 0x7d
pop ecx
cmp ax, cx
je 0x70e663
push esi
call dword [sym.imp.USER32.dll_CharNextW]
mov esi, eax
mov dword [ebp - 0xfa0], esi
movzx eax, word [esi]
test ax, ax
jne 0x70e63c
push esi
call dword [sym.imp.USER32.dll_CharNextW]
mov ebx, eax
jmp 0x70e625
mov esi, dword [ebp - 0xfb4]
push 0x7b
pop ecx
cmp ax, word [ebp - 0x1044]
je 0x70e689
cmp ax, cx
jne 0x70ea24
push 0x2f
pop ecx
cmp word [ebx + 2], cx
jne 0x70ea24
call fcn.006f1450
mov eax, dword [ebp - 0xfa0]
add eax, 4
mov dword [ebp - 0xfa0], eax
movzx ecx, word [eax]
cmp ecx, 0x69
jg 0x70e83b
je 0x70e857
push 0x61
pop edx
sub ecx, edx
je 0x70e75d
sub ecx, 1
je 0x70e857
sub ecx, 1
je 0x70e6e3
sub ecx, 3
je 0x70e857
jmp 0x70ea16
add eax, 2
lea ecx, [ebp - 0x1018]
mov dword [ebp - 0xfa0], eax
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0x1018]
push eax
call fcn.006f35cb
mov ebx, dword [ebp + 0x18]
lea ecx, [ebp - 0x1018]
call fcn.00402ee0
test eax, eax
jle 0x70e730
lea ecx, [ebp - 0x1018]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0x1018]
push eax
call fcn.006f330a
mov ebx, eax
mov ecx, ebx
shr ecx, 8
movzx edx, cl
movzx ecx, bl
shl ecx, 8
or edx, ecx
shr ebx, 0x10
shl edx, 8
movzx eax, bl
or edx, eax
push edx
push dword [ebp - 0xfac]
call dword [sym.imp.GDI32.dll_SetTextColor]
jmp 0x70e9f1
mov eax, dword [ebp - 0x100c]
mov ebx, dword [ebp - 0xfe0]
cmp ebx, dword [eax]
jge 0x70e7be
cmp byte [ebp - 0xfa1], 0
jne 0x70e7b7
mov eax, dword [ebp - 0xfc0]
mov ecx, dword [eax + 8]
cmp dword [ebp - 0xfa8], ecx
mov eax, dword [edi + 0x10]
cmovl ecx, dword [ebp - 0xfa8]
add eax, dword [edi]
add eax, dword [ebp - 0xfc8]
push eax
push ecx
push dword [ebp - 0x102c]
mov eax, ebx
push dword [ebp - 0x1028]
shl eax, 4
add eax, dword [ebp - 0x103c]
push eax
call dword [sym.imp.USER32.dll_SetRect]
inc ebx
mov dword [ebp - 0xfe0], ebx
lea ecx, [ebp - 0x1018]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0x1018]
push eax
call fcn.006f35cb
mov ebx, dword [ebp + 0x18]
lea ecx, [ebp - 0x1018]
call fcn.00402ee0
test eax, eax
jle 0x70e802
lea ecx, [ebp - 0x1018]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0x1018]
push eax
call fcn.006f330a
mov ebx, eax
mov ecx, ebx
shr ecx, 8
movzx edx, cl
movzx ecx, bl
shl ecx, 8
or edx, ecx
shr ebx, 0x10
movzx eax, bl
mov ebx, dword [ebp - 0xfac]
shl edx, 8
or edx, eax
push edx
push ebx
call dword [sym.imp.GDI32.dll_SetTextColor]
xor eax, eax
mov byte [ebp - 0xfb6], al
mov eax, dword [ebp - 0xfa0]
jmp 0x70e85d
sub ecx, 0x70
je 0x70e969
sub ecx, 3
je 0x70e919
dec ecx
sub ecx, 1
jne 0x70ea16
mov ebx, dword [ebp - 0xfac]
add eax, 2
lea ecx, [ebp - 0xffc]
mov dword [ebp - 0xfa0], eax
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xffc]
push eax
call fcn.006f35cb
lea ecx, [ebp - 0xffc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xffc]
push eax
call fcn.006f330a
mov esi, eax
test esi, esi
jne 0x70e8a9
mov ecx, dword [ebp - 0xfbc]
call fcn.006f4bde
mov esi, eax
cmp byte [edi + 0x34], 0
je 0x70e8dc
cmp byte [esi + 0x8e], 0
jne 0x70e8dc
lea eax, [ebp - 0xa94]
push eax
push 0x20
pop eax
push eax
push eax
push ebx
call dword [sym.imp.GDI32.dll_GetCharABCWidthsW]
mov eax, dword [ebp - 0xa8c]
cdq
sub eax, edx
sar eax, 1
add dword [ebp - 0xfa8], eax
push dword [esi]
lea edi, [esi + 0x90]
push ebx
mov dword [ebp - 0xfc4], edi
call dword [sym.imp.GDI32.dll_SelectObject]
lea ecx, [ebp - 0xfdc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xfdc]
push eax
call fcn.006f330a
add eax, dword [edi + 0x10]
add eax, dword [edi]
cmp dword [ebp - 0xfb4], eax
jmp 0x70e9cc
add eax, 2
cmp byte [ebp - 0xfb5], 0
mov dword [ebp - 0xfa0], eax
sete cl
cmp byte [ebp - 0xfe4], 0
mov byte [ebp - 0xfb5], cl
je 0x70ea16
cmp byte [ebp - 0xfa1], 0
je 0x70ea16
test cl, cl
je 0x70e963
push 2
push dword [ebp - 0xfac]
call dword [sym.imp.GDI32.dll_SetBkMode]
jmp 0x70e9f1
xor eax, eax
inc eax
push eax
jmp 0x70e952
mov ecx, dword [ebp - 0xfc0]
add eax, 2
mov edx, dword [ebp - 0xfa8]
mov dword [ebp - 0xfa0], eax
mov eax, dword [ebp - 0xfec]
cmp edx, dword [ecx]
push 1
pop ecx
movzx eax, al
cmovg eax, ecx
lea ecx, [ebp - 0xfdc]
mov byte [ebp - 0xfec], al
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xfdc]
push eax
call fcn.006f35cb
lea ecx, [ebp - 0xfdc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xfdc]
push eax
call fcn.006f330a
add eax, dword [edi + 0x10]
add eax, dword [edi]
cmp esi, eax
jg 0x70e9f1
lea ecx, [ebp - 0xfdc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xfdc]
push eax
call fcn.006f330a
add eax, dword [edi + 0x10]
add eax, dword [edi]
mov dword [ebp - 0xfb4], eax
mov eax, dword [ebp - 0xfa0]
jmp 0x70ea16
push 0x3e
pop edx
cmp cx, dx
je 0x70ea1e
push 0x7d
pop edx
cmp cx, dx
je 0x70ea1e
push eax
call dword [sym.imp.USER32.dll_CharNextW]
mov dword [ebp - 0xfa0], eax
movzx ecx, word [eax]
test cx, cx
jne 0x70e9f9
push eax
jmp 0x70e664
push 0x3c
pop ecx
cmp ax, cx
jne 0x70eb07
push 0x3e
pop ecx
cmp word [ebx + 4], cx
jne 0x70eb07
movzx ecx, word [ebx + 2]
cmp cx, word [ebp - 0x104c]
je 0x70ea57
cmp cx, word [ebp - 0x1054]
jne 0x70eb07
call fcn.00402330
mov ebx, dword [ebp - 0xfac]
xor eax, eax
mov dword [ebp - 0x10ac], eax
mov dword [ebp - 0x10a8], eax
lea eax, [ebp - 0x10ac]
push eax
xor eax, eax
inc eax
push eax
mov eax, dword [ebp - 0xfa0]
add eax, 2
push eax
push ebx
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
cmp byte [ebp - 0xfe4], 0
je 0x70eacc
cmp byte [ebp - 0xfa1], 0
je 0x70eacc
mov edx, dword [ebp - 0xfa8]
xor eax, eax
inc eax
push eax
mov eax, dword [ebp - 0xfa0]
add eax, 2
push eax
mov eax, dword [ebp - 0x1008]
sub eax, dword [edi + 0x10]
sub eax, dword [edi]
add eax, dword [ebp - 0xfc8]
push eax
push edx
push ebx
call dword [sym.imp.GDI32.dll_TextOutW]
mov ecx, dword [ebp - 0xfa8]
add ecx, dword [ebp - 0x10ac]
cmp dword [ebp - 0xfd0], ecx
mov eax, ecx
mov ebx, dword [ebp - 0xfa0]
cmovg eax, dword [ebp - 0xfd0]
add ebx, 6
mov dword [ebp - 0xfd0], eax
mov dword [ebp - 0xfa8], ecx
mov dword [ebp - 0xfa0], ebx
jmp 0x70f285
push 0x7b
pop ecx
cmp ax, cx
jne 0x70ebb6
push 0x7d
pop ecx
cmp word [ebx + 4], cx
jne 0x70ebb6
lea edx, [ebx + 2]
movzx ecx, word [edx]
cmp cx, word [ebp - 0x1044]
je 0x70eb38
cmp cx, word [ebp - 0x1050]
jne 0x70ebb0
mov ebx, dword [ebp - 0xfac]
xor eax, eax
mov dword [ebp - 0x10b8], eax
mov dword [ebp - 0x10b4], eax
lea eax, [ebp - 0x10b8]
push eax
xor eax, eax
inc eax
push eax
push edx
push ebx
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
cmp byte [ebp - 0xfe4], 0
je 0x70eb9f
cmp byte [ebp - 0xfa1], 0
je 0x70eb9f
mov edx, dword [ebp - 0xfa8]
xor eax, eax
inc eax
push eax
mov eax, dword [ebp - 0xfa0]
add eax, 2
push eax
mov eax, dword [ebp - 0x1008]
sub eax, dword [edi + 0x10]
sub eax, dword [edi]
add eax, dword [ebp - 0xfc8]
push eax
push edx
push ebx
call dword [sym.imp.GDI32.dll_TextOutW]
mov ecx, dword [ebp - 0xfa8]
add ecx, dword [ebp - 0x10b8]
jmp 0x70ead8
mov dl, byte [ebp - 0xfad]
push 0x20
pop ecx
cmp ax, cx
jne 0x70ec51
mov ebx, dword [ebp - 0xfac]
xor eax, eax
mov dword [ebp - 0x10a4], eax
mov dword [ebp - 0x10a0], eax
lea eax, [ebp - 0x10a4]
push eax
xor eax, eax
inc eax
push eax
push 0x7e31d8
push ebx
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
cmp byte [ebp - 0xfe4], 0
je 0x70ec28
cmp byte [ebp - 0xfa1], 0
je 0x70ec28
mov edx, dword [ebp - 0xfa8]
xor eax, eax
inc eax
push eax
mov eax, dword [ebp - 0x1008]
sub eax, dword [edi + 0x10]
sub eax, dword [edi]
add eax, dword [ebp - 0xfc8]
push 0x7e31d8
push eax
push edx
push ebx
call dword [sym.imp.GDI32.dll_TextOutW]
mov ecx, dword [ebp - 0xfa8]
add ecx, dword [ebp - 0x10a4]
cmp dword [ebp - 0xfd0], ecx
mov eax, ecx
mov ebx, dword [ebp - 0xfa0]
cmovg eax, dword [ebp - 0xfd0]
add ebx, 2
jmp 0x70eaf0
mov ecx, dword [ebp - 0xfa8]
mov dword [ebp - 0x1004], ecx
xor ecx, ecx
mov dword [ebp - 0x101c], ecx
mov edi, ecx
mov dword [ebp - 0x1000], ecx
mov esi, ecx
mov dword [ebp - 0x1024], ecx
mov dword [ebp - 0x1020], ecx
test dl, dl
jne 0x70ec88
cmp ax, word [ebp - 0x1044]
je 0x70ec91
cmp ax, word [ebp - 0x104c]
jne 0x70ec9c
add ebx, 2
xor eax, eax
lea edi, [eax + 1]
lea esi, [eax + 1]
cmp word [ebx], cx
je 0x70ecfd
movzx eax, word [ebx]
cmp ax, word [ebp - 0x1048]
je 0x70ecfd
push 0x3c
test dl, dl
je 0x70ed68
pop edx
cmp ax, dx
je 0x70ecc9
push 0x7b
pop edx
cmp ax, dx
jne 0x70ed76
push 0x2f
pop eax
cmp word [ebx + 2], ax
jne 0x70ed76
push 0x72
pop eax
cmp word [ebx + 4], ax
jne 0x70ed76
movzx eax, word [ebx + 6]
push 0x3e
pop edx
cmp ax, dx
je 0x70ecf7
push 0x7d
pop edx
cmp ax, dx
jne 0x70ed76
mov byte [ebp - 0xfad], cl
xor ebx, ebx
inc ebx
call fcn.00402330
mov edi, dword [ebp - 0xfac]
lea eax, [ebp - 0x1024]
push eax
push esi
push dword [ebp - 0xfa0]
push edi
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
cmp byte [ebp - 0xfe4], 0
je 0x70f000
cmp byte [ebp - 0xfa1], 0
je 0x70f000
mov eax, dword [ebp + 0x28]
and al, 0x21
cmp al, bl
mov ebx, dword [ebp - 0x1004]
jne 0x70ef86
mov ecx, dword [ebp - 0xfc0]
mov eax, dword [ecx + 8]
sub eax, dword [ebp - 0x1024]
sub eax, dword [ecx]
cdq
sub eax, edx
sar eax, 1
jmp 0x70efa0
pop ecx
cmp ax, cx
je 0x70ecfd
push 0x7b
pop ecx
cmp ax, cx
je 0x70ecfd
push ebx
call dword [sym.imp.USER32.dll_CharNextW]
mov ecx, eax
mov dword [ebp - 0x10c0], eax
mov eax, dword [ebp - 0xfc4]
sub ecx, ebx
sar ecx, 1
inc edi
add esi, ecx
mov dword [ebp - 0xff0], edi
mov dword [ebp - 0x1030], esi
mov ecx, dword [eax + 0x18]
xor eax, eax
imul ecx, edi
mov dword [ebp - 0x1098], eax
mov dword [ebp - 0x1094], eax
mov dword [ebp - 0x1090], eax
mov dword [ebp - 0x1024], ecx
push 0x3f
pop ecx
mov esi, str.SViaC6ntzpOqDbcj7JwWPyvYsqvPuvOlAZg1AkDmtIKyV58KbimHNE3V0u1O6Pu04m9MWRsBWYKxyzVenfpq3j8NxLW6ipfXcX4anfHDPCF5KFNjW7cdtghhaPC4rZAzrLt5tjQrG0Q7L0GTbqeQtvTVnPU8FfihdEFq1givxeyOl6wKukcPyd0d8g3Gfozw4zjxeSqtkEyG970GcAg7CMxxfa3A8gzMbi5mkOWjcVPumLnEaOxkmz9bsubCZP
mov byte [ebp - 4], 0x19
lea edi, [ebp - 0x110]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0xab0]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.00405a50
lea eax, [ebp - 0xab0]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x1098]
call fcn.004082f0
xor eax, eax
lea ecx, [ebp - 0xab0]
push eax
inc eax
push eax
call fcn.004096c0
mov ecx, dword [ebp - 0x1024]
mov edx, dword [ebp - 0xfa8]
mov edi, dword [ebp - 0xfc0]
mov esi, dword [ebp - 0x1030]
lea eax, [ecx + edx]
cmp eax, dword [edi + 8]
jl 0x70ee53
lea eax, [ebp - 0x1024]
push eax
push esi
push dword [ebp - 0xfa0]
push dword [ebp - 0xfac]
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
mov ecx, dword [ebp - 0x1024]
mov edx, dword [ebp - 0xfa8]
lea eax, [ecx + edx]
cmp eax, dword [edi + 8]
jg 0x70eed4
movzx eax, word [ebx]
push 0x61
pop ecx
cmp ax, cx
jb 0x70ee6e
push 0x7a
pop ecx
cmp ax, cx
jbe 0x70ee8c
cmp eax, 0x41
jb 0x70ee78
cmp eax, 0x5a
jbe 0x70ee8c
mov edi, dword [ebp - 0xff0]
mov dword [ebp - 0x101c], edi
mov dword [ebp - 0x1000], esi
jmp 0x70ee92
mov edi, dword [ebp - 0xff0]
push 0x20
pop ecx
cmp ax, cx
jne 0x70eea6
mov dword [ebp - 0x101c], edi
mov dword [ebp - 0x1000], esi
push ebx
call dword [sym.imp.USER32.dll_CharNextW]
lea ecx, [ebp - 0x1098]
mov byte [ebp - 4], 8
mov ebx, eax
call fcn.006ec102
xor ecx, ecx
cmp word [ebx], cx
je 0x70ecfd
mov dl, byte [ebp - 0xfad]
jmp 0x70eca1
lea eax, [ecx + edx]
cmp eax, dword [edi + 8]
jle 0x70eef5
cmp edx, dword [edi]
mov edi, dword [ebp - 0xff0]
je 0x70eefb
mov eax, dword [ebp - 0x10c0]
dec edi
sub eax, ebx
sar eax, 1
sub esi, eax
jmp 0x70eefb
mov edi, dword [ebp - 0xff0]
test byte [ebp + 0x28], 0x10
je 0x70ef13
mov eax, dword [ebp - 0x101c]
test eax, eax
jle 0x70ef13
mov esi, dword [ebp - 0x1000]
mov edi, eax
test dword [ebp + 0x28], 0x8000
je 0x70ef54
test edi, edi
jle 0x70ef54
push ebx
push dword [ebp - 0xfa0]
dec edi
call dword [sym.imp.USER32.dll_CharPrevW]
test edi, edi
jle 0x70ef3f
push eax
push dword [ebp - 0xfa0]
call dword [sym.imp.USER32.dll_CharPrevW]
sub ebx, eax
mov eax, dword [ebp - 0xfc0]
sar ebx, 1
sub esi, ebx
mov edx, dword [eax + 8]
mov dword [ebp - 0xfa8], edx
xor ebx, ebx
mov byte [ebp - 4], 8
inc ebx
lea ecx, [ebp - 0x1098]
cmp dword [ebp - 0xfd0], edx
mov eax, edx
mov byte [ebp - 0xfec], bl
cmovg eax, dword [ebp - 0xfd0]
mov dword [ebp - 0xfd0], eax
call fcn.006ec102
jmp 0x70ed00
mov eax, dword [ebp + 0x28]
and al, 0x22
cmp al, 2
jne 0x70efa2
mov ecx, dword [ebp - 0xfc0]
mov eax, dword [ecx + 8]
sub eax, dword [ebp - 0x1024]
sub eax, dword [ecx]
add ebx, eax
mov ecx, dword [ebp - 0xfc4]
mov eax, dword [ebp - 0x1008]
push esi
push dword [ebp - 0xfa0]
sub eax, dword [ecx + 0x10]
sub eax, dword [ecx]
add eax, dword [ebp - 0xfc8]
push eax
push ebx
push edi
call dword [sym.imp.GDI32.dll_TextOutW]
mov eax, dword [ebp - 0xfc0]
mov ecx, dword [ebp - 0xfa8]
cmp ecx, dword [eax + 8]
jl 0x70f006
test dword [ebp + 0x28], 0x8000
je 0x70f006
mov eax, dword [ebp - 0x1024]
push 3
push 0x7eaa58
push dword [ebp - 0xfc8]
add eax, ebx
push eax
push edi
call dword [sym.imp.GDI32.dll_TextOutW]
mov ecx, dword [ebp - 0xfa8]
add ecx, dword [ebp - 0x1024]
cmp dword [ebp - 0xfd0], ecx
mov eax, ecx
mov dword [ebp - 0xfa8], ecx
cmovg eax, dword [ebp - 0xfd0]
mov dword [ebp - 0xfd0], eax
mov eax, dword [ebp - 0xfa0]
lea ebx, [eax + esi*2]
mov esi, dword [ebp - 0xfb4]
mov dword [ebp - 0xfa0], ebx
jmp 0x70f28b
cmp ax, word [ebp - 0x1048]
jne 0x70f053
add ebx, 2
mov dword [ebp - 0xfa0], ebx
xor ebx, ebx
mov byte [ebp - 0xfec], bl
cmp byte [ebp - 0xfa1], bl
jne 0x70f130
cmp byte [ebp - 0xfb6], bl
mov ebx, dword [ebp - 0xfe0]
je 0x70f0cd
mov eax, dword [ebp - 0x100c]
cmp ebx, dword [eax]
jge 0x70f0cd
mov eax, dword [ebp - 0xfc8]
cmp ecx, edx
cmovl edx, ecx
add eax, esi
push eax
push edx
push dword [ebp - 0x102c]
mov ecx, ebx
push dword [ebp - 0x1028]
shl ecx, 4
add ecx, dword [ebp - 0x103c]
push ecx
call dword [sym.imp.USER32.dll_SetRect]
mov ecx, dword [ebp - 0x1040]
inc ebx
imul eax, ebx, 0x84
mov dword [ebp - 0xfe0], ebx
add ecx, eax
lea eax, [ecx - 0x84]
push eax
call fcn.006f2f38
mov ecx, dword [ebp - 0x1038]
cmp ecx, ebx
jge 0x70f105
mov edx, dword [ebp - 0xfc8]
mov eax, ecx
mov ecx, dword [ebp - 0x103c]
add edx, esi
shl eax, 4
add ecx, 0xc
add ecx, eax
mov eax, ebx
mov ebx, dword [ebp - 0x1038]
sub eax, ebx
mov dword [ecx], edx
lea ecx, [ecx + 0x10]
sub eax, 1
jne 0x70f0f9
jmp 0x70f10b
mov ebx, dword [ebp - 0x1038]
mov ecx, dword [ebp - 0xfe4]
test cl, cl
je 0x70f1df
mov al, byte [ebp - 0xfe5]
mov byte [ebp - 0xfb6], al
mov dword [ebp - 0xfe0], ebx
jmp 0x70f1df
mov dword [ebp - 0x10f8], ebx
mov dword [ebp - 0x10f4], ebx
mov dword [ebp - 0x10f0], ebx
push 0x66
pop ecx
mov esi, str.voYBC9kvAgEetfMea8AzyOaBWmI5IyxmP5sqNDAtZpXMAyPFK9ZSIqZVg2Pqsr80WBkeyjfLQns2oYGNAgHxe6SPY00cRrsocxs23BlHpfKg7Ypn2lapdDBiGybhcZWALmzbiicR8wrC8BT4n12NPIjQmBcqqhkd6DqobvqJZrtsW10brBEY4dzChhVSdEGXNuyAn5AP9tSkNGdzfzCXnLcDvzCBsQpgjSDbULU2OgDtRqGmETQLov7CCJKS4PpvJa12SR4gORCkaO9oDexI7ZpdncHoEdkJpxfs7uBgcHpxW8QGKex3K2RbEOp2LYi3UxWycxbNQWNJS6b0BSmJYDPpRQRB5mZSx5vSQsEHMHkpgv5oSC4X1vBiCSPTBAG0BQpt1gcN6XoAoLQCB9xUBZe5
mov byte [ebp - 4], 9
lea edi, [ebp - 0x8f0]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x8f0]
push eax
lea ecx, [ebp - 0xab0]
movsb byte es:[edi], byte [esi]
call fcn.00405a50
push 0xa
pop eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0x10f8]
lea eax, [ebp - 0xab0]
push eax
call fcn.004082f0
xor eax, eax
lea ecx, [ebp - 0xab0]
push ebx
inc eax
push eax
call fcn.004096c0
mov al, byte [ebp - 0xfb6]
mov ebx, dword [ebp - 0xfe0]
test al, al
je 0x70f1b2
mov ecx, dword [ebp - 0x100c]
cmp ebx, dword [ecx]
jge 0x70f1b2
inc ebx
mov dword [ebp - 0xfe0], ebx
lea ecx, [ebp - 0x10f8]
mov byte [ebp - 0xfe5], al
mov dword [ebp - 0x1038], ebx
mov byte [ebp - 4], 8
call fcn.006ec102
mov edi, dword [ebp - 0xfc4]
mov esi, dword [ebp - 0xfb4]
mov ecx, dword [ebp - 0xfe4]
test byte [ebp + 0x28], 0x20
je 0x70f1fd
test cl, cl
je 0x70f627
mov dl, byte [ebp - 0xfa1]
test dl, dl
jne 0x70f627
jmp 0x70f203
mov dl, byte [ebp - 0xfa1]
test cl, cl
je 0x70f212
test dl, dl
sete dl
mov byte [ebp - 0xfa1], dl
mov ebx, dword [ebp - 0xfc0]
test dl, dl
mov edx, dword [ebp - 0xfc8]
mov eax, dword [ebx]
mov dword [ebp - 0xfa8], eax
jne 0x70f232
add edx, esi
mov dword [ebp - 0xfc8], edx
cmp edx, dword [ebx + 0xc]
jle 0x70f23f
test cl, cl
jne 0x70f627
lea ecx, [ebp - 0xfdc]
mov dword [ebp - 0x1028], eax
mov dword [ebp - 0x102c], edx
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xfdc]
push eax
call fcn.006f330a
mov ecx, dword [ebp - 0xfa8]
mov esi, eax
add esi, dword [edi + 0x10]
add esi, dword [edi]
mov dword [ebp - 0xfb4], esi
cmp ecx, dword [ebx + 8]
jge 0x70f627
mov ebx, dword [ebp - 0xfa0]
mov edi, dword [ebp - 0xfac]
mov eax, dword [ebp - 0xfc0]
cmp ecx, dword [eax + 8]
jge 0x70f2a6
movzx eax, word [ebx]
push 0xa
pop edx
cmp ax, dx
je 0x70f2a6
test ax, ax
jne 0x70f2b1
xor eax, eax
inc eax
mov dword [ebp - 0xfec], eax
jmp 0x70f2b7
mov eax, dword [ebp - 0xfec]
cmp byte [ebp - 0xfe4], 0
je 0x70f60f
test al, al
je 0x70f60f
call fcn.006ed01b
cmp byte [ebp - 0xfa1], 0
jne 0x70f498
call fcn.00402330
lea ecx, [ebp - 0x1080]
call fcn.00402ee0
push eax
lea ecx, [ebp - 0xffc]
call fcn.006f37de
lea ecx, [ebp - 0x1080]
call fcn.00402ee0
shl eax, 2
lea ecx, [ebp - 0x1080]
push eax
call fcn.00605d60
push eax
lea ecx, [ebp - 0xffc]
call fcn.00605d60
push eax
call fcn.0074f6a0
add esp, 0xc
lea ecx, [ebp - 0x1074]
call fcn.00402ee0
push eax
lea ecx, [ebp - 0x1018]
call fcn.006f37de
lea ecx, [ebp - 0x1074]
call fcn.00402ee0
shl eax, 2
lea ecx, [ebp - 0x1074]
push eax
call fcn.00605d60
push eax
lea ecx, [ebp - 0x1018]
call fcn.00605d60
push eax
call fcn.0074f6a0
add esp, 0xc
lea ecx, [ebp - 0x108c]
call fcn.00402ee0
push eax
lea ecx, [ebp - 0xfdc]
call fcn.006f37de
lea ecx, [ebp - 0x108c]
call fcn.00402ee0
shl eax, 2
lea ecx, [ebp - 0x108c]
push eax
call fcn.00605d60
push eax
lea ecx, [ebp - 0xfdc]
call fcn.00605d60
push eax
call fcn.0074f6a0
mov eax, dword [ebp - 0x1068]
add esp, 0xc
mov dword [ebp - 0xfa0], eax
mov al, byte [ebp - 0xfe6]
mov byte [ebp - 0xfad], al
mov al, byte [ebp - 0xfca]
mov dword [ebp - 0x1008], esi
mov byte [ebp - 0xfb5], al
call fcn.00402330
mov ebx, dword [ebp + 0x18]
lea ecx, [ebp - 0x1018]
call fcn.00402ee0
test eax, eax
jle 0x70f410
lea ecx, [ebp - 0x1018]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0x1018]
push eax
call fcn.006f330a
mov ebx, eax
mov ecx, ebx
shr ecx, 8
movzx edx, cl
movzx ecx, bl
shl ecx, 8
or edx, ecx
shr ebx, 0x10
shl edx, 8
movzx eax, bl
or edx, eax
push edx
push edi
call dword [sym.imp.GDI32.dll_SetTextColor]
lea ecx, [ebp - 0xffc]
call fcn.00402ee0
dec eax
lea ecx, [ebp - 0xffc]
push eax
call fcn.006f330a
test eax, eax
jne 0x70f45a
mov ecx, dword [ebp - 0xfbc]
call fcn.006f4bde
push dword [eax]
mov ebx, dword [ebp - 0xfac]
lea edi, [eax + 0x90]
push ebx
mov dword [ebp - 0xfc4], edi
call dword [sym.imp.GDI32.dll_SelectObject]
cmp byte [ebp - 0xfca], 0
je 0x70f487
push 2
push ebx
call dword [sym.imp.GDI32.dll_SetBkMode]
mov ebx, dword [ebp - 0xfa0]
mov ecx, dword [ebp - 0xfa8]
jmp 0x70f615
xor ebx, ebx
mov dword [ebp - 0x1104], ebx
mov dword [ebp - 0x1100], ebx
mov dword [ebp - 0x10fc], ebx
push 0x62
pop ecx
mov esi, str.m3b1SYWN1fS2G71YTqV74TVFuJ4bPH65313KJhVblUhvbmg5rO1oXZiibCyA5AyQCuk4aoXuis20QoHBIRH3AOnNcFiciDKwYxSYjroQ48xS6O2N4KPT4vrbj0HIJ7HbPej8bixYzJseDpk4j08wPcOLp0Xm2uSeZMF2KHqh1qNSsOlbxDStbdSSH6ymnnYqeUh2zJCoID8Sn2QlO9dHcaNcHLlwq1M8WboLeLo2bXSPvv7oT4BHIavE2JPEdg0law936QyJ0TLrGkiNzuwAWZWBflJfTsXHQ3S9WFfwV57CmATBXVnmC87pFKfrk5i9fJaCMSQKmeYZtXaWHaeoOTkNrKWe0gx2yfpggEe0Qyt9RzWVeT7JpXD8aeC3U2ar35qz8GnGr
mov byte [ebp - 4], 0x1b
lea edi, [ebp - 0x3e4]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x3e4]
push eax
lea ecx, [ebp - 0xab0]
movsw word es:[edi], word [esi]
call fcn.00405a50
lea eax, [ebp - 0xab0]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x1104]
call fcn.004082f0
xor eax, eax
mov byte [ebp - 4], 0x1b
push ebx
inc eax
lea ecx, [ebp - 0xab0]
push eax
call fcn.004096c0
lea ecx, [ebp - 0xffc]
call fcn.00402ee0
push eax
lea ecx, [ebp - 0x1080]
call fcn.006f37de
lea ecx, [ebp - 0xffc]
call fcn.00402ee0
shl eax, 2
lea ecx, [ebp - 0xffc]
push eax
call fcn.00605d60
push eax
lea ecx, [ebp - 0x1080]
call fcn.00605d60
push eax
call fcn.0074f6a0
add esp, 0xc
lea ecx, [ebp - 0x1018]
call fcn.00402ee0
push eax
lea ecx, [ebp - 0x1074]
call fcn.006f37de
lea ecx, [ebp - 0x1018]
call fcn.00402ee0
shl eax, 2
lea ecx, [ebp - 0x1018]
push eax
call fcn.00605d60
push eax
lea ecx, [ebp - 0x1074]
call fcn.00605d60
push eax
call fcn.0074f6a0
add esp, 0xc
lea ecx, [ebp - 0xfdc]
call fcn.00402ee0
push eax
lea ecx, [ebp - 0x108c]
call fcn.006f37de
lea ecx, [ebp - 0xfdc]
call fcn.00402ee0
shl eax, 2
lea ecx, [ebp - 0xfdc]
push eax
call fcn.00605d60
push eax
lea ecx, [ebp - 0x108c]
call fcn.00605d60
push eax
call fcn.0074f6a0
mov eax, dword [ebp - 0xfa0]
add esp, 0xc
mov dword [ebp - 0x1068], eax
lea ecx, [ebp - 0x1104]
mov al, byte [ebp - 0xfb5]
mov byte [ebp - 0xfca], al
mov al, byte [ebp - 0xfad]
mov byte [ebp - 0xfe6], al
mov byte [ebp - 4], 8
call fcn.006ec102
mov ebx, dword [ebp - 0xfa0]
mov ecx, dword [ebp - 0xfa8]
mov edi, dword [ebp - 0xfc4]
movzx eax, word [ebx]
mov esi, dword [ebp - 0xfb4]
test ax, ax
jne 0x70d2b6
test dword [ebp + 0x28], 0x400
mov ecx, dword [ebp - 0x100c]
mov eax, dword [ebp - 0xfe0]
mov dword [ecx], eax
je 0x70f66c
mov eax, dword [ebp - 0xfc8]
mov ecx, dword [ebp - 0xfc0]
add eax, esi
cmp dword [ebp - 0x1034], eax
cmovg eax, dword [ebp - 0x1034]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0xfd0]
cmp dword [ecx + 8], eax
cmovl eax, dword [ecx + 8]
mov dword [ecx + 8], eax
cmp byte [ebp - 0xfe4], 0
mov esi, dword [ebp - 0x1064]
je 0x70f688
push esi
push dword [ebp - 0xfac]
call dword [sym.imp.GDI32.dll_SelectClipRgn]
push esi
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
call esi
push dword [ebp - 0x10bc]
call esi
push dword [ebp - 0x10b0]
push dword [ebp - 0xfac]
call dword [sym.imp.GDI32.dll_SelectObject]
lea ecx, [ebp - 0x108c]
call fcn.0073348d
lea ecx, [ebp - 0x1074]
call fcn.0073348d
lea ecx, [ebp - 0x1080]
call fcn.0073348d
lea ecx, [ebp - 0xe94]
call fcn.006f2ec7
lea ecx, [ebp - 0x1110]
call fcn.006ec102
lea ecx, [ebp - 0xfdc]
call fcn.0073348d
lea ecx, [ebp - 0x1018]
call fcn.0073348d
lea ecx, [ebp - 0xffc]
call fcn.0073348d
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006e70bb
mov esp, ebp
pop ebp
ret