Function at 0x4058f9
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x118
push esi
push edi
xor esi, esi
mov dword [ebp - 0x70], edx
push 0xfffffffffffffff7
inc esi
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x18], esi
xor edx, edx
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x14], 2
push 3
mov dword [ebp - 0x20], 0xfffffff8
pop edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], edx
jmp 0x40594f
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x108], 0x4ac0198a
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x40593e
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov dword [ebp - 0x18], 0x18
jmp 0x405a49
mov dword [ebp - 0x2c], 0xfffd
mov dword [ebp - 0x14], 0x7dcd66a0
mov dword [ebp - 0x14], 0x7207182b
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x28], 0x82aa9dad
mov dword [ebp - 0x28], 0xc9fa8bc0
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x28], 0x1720d700
mov dword [ebp - 0x38], 0xbae8b012
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x3c], 0xfffffff8
mov dword [ebp - 4], 0xabac89d7
mov dword [ebp - 0x1c], esi
mov dword [ebp - 4], 0xfffffffc
mov dword [ebp - 4], edx
jmp 0x4059d4
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xbc], 0x377d6446
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x4059c3
mov eax, dword [ebp - 0x3c]
inc eax
jne 0x4059e3
mov eax, dword [ebp - 0x24]
dec dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0xc]
sub edx, eax
mov eax, dword [ebp - 0x2c]
cmp eax, edx
setge cl
cmp ecx, dword [ebp - 0x28]
jge 0x405a21
xor edx, edx
mov byte [ebp - 5], dl
cmp byte [ebp - 5], dl
je 0x405a46
push edx
call ebx
jmp 0x405a44
mov dword [ebp - 0x28], esi
mov eax, dword [ebp - 0x28]
sub eax, 0x3ecb
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setle dl
mov dword [ebp - 0x28], edx
xor edx, edx
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xc
jge 0x405968
mov dword [ebp - 0xc], 0x6568
mov dword [ebp - 4], 0xb5725d36
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
je 0x405a72
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0xc]
sub eax, 0xfff6
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 0xfffffff8
jmp 0x405abd
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], 0x1b
jmp 0x405ab4
cmp dword [ebp - 0x14], edx
jne 0x405aba
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x1d
jg 0x405aac
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x2a
je 0x405aa0
mov dword [ebp - 4], edx
jmp 0x405ad9
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xe0], 0xfffffffd
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x405ac8
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x405af4
push edx
push edx
push edx
push edx
push edx
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
xor edx, edx
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x405b07
push edx
push edx
call dword [sym.imp.GDI32.dll_GetRgnBox]
xor edx, edx
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x18], 0x19d29be1
mov dword [ebp - 0x1c], 0xfffffffc
mov dword [ebp - 0x24], 0x22f50fad
mov dword [ebp - 4], edx
jmp 0x405b32
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x34], 0x6482
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x405b24
mov dword [ebp - 0x18], edx
jmp 0x405d98
mov dword [ebp - 0xc], 0x4e6d4f28
mov dword [ebp - 0x10], 0x5e3d1aa1
mov dword [ebp - 0x20], 0x927db404
mov dword [ebp - 0x38], 0x85c7
mov dword [ebp - 0xc], esi
cmp dword [ebp - 0xc], edx
jl 0x405bfd
mov dword [ebp - 0x14], 0xae9f
mov dword [ebp - 4], edx
jmp 0x405b82
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x6c], 4
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x405b74
mov dword [ebp - 0x64], edx
jmp 0x405bef
mov dword [ebp - 0x28], 0xffffffff
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x34], edx
je 0x405bd9
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x34], edx
jne 0x405bc5
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x68]
imul eax, dword [ebp - 0xc]
neg eax
sbb eax, eax
inc eax
add eax, 0xc4e2
je 0x405bc7
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x34], edx
je 0x405bc7
mov edx, esi
mov eax, dword [ebp - 0xc]
xor ecx, ecx
cmp eax, edx
setle cl
xor edx, edx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], 0xe1054d81
inc dword [ebp - 0x64]
cmp dword [ebp - 0x64], esi
jle 0x405b8d
dec dword [ebp - 0xc]
jns 0x405b68
mov dword [ebp - 0xc], edx
jmp 0x405c19
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp + eax*4 - 0x34]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x34], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c], eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jle 0x405c02
mov dword [ebp - 0x10], esi
cmp dword [ebp - 0x10], edx
jl 0x405d95
mov dword [ebp - 4], 4
mov dword [ebp - 0x14], 0x64f81aa3
mov dword [ebp - 0x1c], edx
jmp 0x405c47
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x7c], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x405c3d
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], edx
jl 0x405d8c
mov dword [ebp - 0x2c], 0x3b5251bb
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x34]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x34]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x34]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
sub eax, 0xb999
je 0x405c8e
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
inc eax
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x30]
test eax, eax
mov eax, dword [ebp - 4]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
neg eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 8
jae 0x405ccb
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x38]
xor edx, edx
cmp dword [ebp - 0xc], edx
je 0x405cdc
mov ecx, esi
cmp dword [ebp - 4], edx
jne 0x405cde
mov ecx, edx
mov eax, dword [ebp - 0x14]
imul eax, ecx
test eax, eax
je 0x405cef
mov ecx, esi
cmp dword [ebp - 0x30], edx
jne 0x405cf1
mov ecx, edx
mov eax, dword [ebp - 4]
xor edx, edx
sub eax, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x34]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x78]
setg dl
sub edx, eax
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp + eax*4 - 0x34]
add esi, edx
sub esi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
neg esi
sbb esi, esi
xor ecx, ecx
inc esi
cmp esi, eax
setle cl
xor eax, eax
cmp ecx, 0x1eb7
setle al
cmp eax, dword [ebp - 0x20]
jg 0x405d40
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 4]
xor edx, edx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
push 1
pop esi
mov eax, dword [ebp + eax*4 - 0x34]
mov eax, dword [ebp - 0xc]
cmp eax, 0xcdf3
mov eax, dword [ebp - 0x78]
setne dl
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 0x1051
setl al
mov dword [ebp - 0x78], eax
dec dword [ebp - 0x1c]
jns 0x405c59
xor edx, edx
dec dword [ebp - 0x10]
jns 0x405c2a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x405b40
mov eax, dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setge dl
mov dword [ebp - 0x1c], edx
xor edx, edx
mov dword [ebp - 0x14], 0xfffffff7
mov dword [ebp - 4], edx
mov dword [ebp - 0x20], 0xfffffffa
mov byte [ebp - 5], dl
cmp byte [ebp - 5], dl
je 0x405de3
push 0x2121
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor edx, edx
mov dword [ebp - 4], edx
jmp 0x405df1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xfffffff7
je 0x405de8
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 0xb13eca4f
mov dword [ebp - 0x14], 0xfda0e60f
mov dword [ebp - 0x14], 0xfffffffc
mov dword [ebp - 0x20], 0xb14f4e79
mov dword [ebp - 4], edx
jmp 0x405e28
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xf8], edi
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x405e1b
mov edi, dword [sym.imp.USER32.dll_GetDC]
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x405e55
push 0xaa7
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_SetMapMode]
xor edx, edx
dec dword [ebp - 0x20]
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x14], 2
mov dword [ebp - 0x28], 0xfffffff8
push 3
pop ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0xc], 0xffffffff
mov dword [ebp - 0x14], 0xfffffffe
mov dword [ebp - 4], edx
jmp 0x405e94
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x50], 0xa8eac8b
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x405e86
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], edx
jl 0x405ef7
mov dword [ebp - 4], 0x7dd68876
mov dword [ebp - 4], edx
jmp 0x405ebb
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xd4], edx
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x405eae
mov dword [ebp - 4], edx
jmp 0x405eed
mov dword [ebp - 0x20], 0xd297
dec dword [ebp - 0x20]
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x405eea
push 1
push edx
call esi
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
push 3
xor edx, edx
pop ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jle 0x405ec6
dec dword [ebp - 0xc]
jns 0x405ea2
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], edx
jl 0x405f8f
mov dword [ebp - 0x2c], 0x8648
mov dword [ebp - 0x20], 0xfffffff9
mov dword [ebp - 0x2c], 0xfffffffd
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x50]
cmp dword [ebp - 0xc], edx
jne 0x405f5d
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x50], 0xa4d9a54e
jb 0x405f3a
cmp dword [ebp - 0x4c], edx
jne 0x405f3a
mov eax, edx
jmp 0x405f3d
xor eax, eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edx
je 0x405f48
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0xc]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x50]
cmp eax, 1
sete cl
mov dword [ebp - 0x14], ecx
dec dword [ebp - 0xc]
jns 0x405f03
xor ecx, ecx
inc ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x14], 5
mov dword [ebp - 0x14], 0x1551da62
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
jmp 0x405fbc
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xec], 0x7633efc0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x405fab
mov dword [ebp - 0x10], edx
jmp 0x405fd8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x84], 9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x405fc7
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x405ffb
push edx
push edx
call esi
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamA]
xor ecx, ecx
xor edx, edx
inc ecx
inc dword [ebp - 0x80]
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x10], edx
jmp 0x406018
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x40], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x40600a
mov dword [ebp - 0x10], edx
jmp 0x406030
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x5c], 8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x406022
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], edx
jl 0x406090
mov dword [ebp - 4], edx
jmp 0x406054
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xcc], 8
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x406043
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x40606f
push edx
call dword [sym.imp.USER32.dll_DestroyIcon]
xor ecx, ecx
xor edx, edx
inc ecx
mov eax, dword [ebp - 0x54]
cmp dword [ebp + eax*4 - 0x40], edx
jne 0x406083
mov eax, dword [ebp - 0x54]
cmp dword [ebp + eax*4 - 0x40], edx
mov eax, edx
je 0x406085
mov eax, ecx
mov dword [ebp - 0xc8], eax
dec dword [ebp - 0x54]
jns 0x40603e
mov dword [ebp - 4], edx
jmp 0x4060a6
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x118], 0x4ac0198a
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x406095
mov dword [ebp - 0x18], 0x18
cmp dword [ebp - 0x18], 0xc
jl 0x4061b1
jmp 0x4060c2
xor ecx, ecx
inc ecx
mov dword [ebp - 0x2c], 0xfffd
mov dword [ebp - 0x14], 0x7dcd66a0
mov dword [ebp - 0xc], 0x7207182b
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x14], 0x82aa9dad
mov dword [ebp - 0x14], 0xc9fa8bc0
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], 0x1720d700
mov dword [ebp - 0x14], 0xbae8b012
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x14], 0xfffffff8
mov dword [ebp - 0x20], 0xabac89d7
mov dword [ebp - 0x20], ecx
mov dword [ebp - 4], 0xfffffffc
mov dword [ebp - 4], edx
jmp 0x40612e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xb4], 0x377d6446
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x40611d
mov eax, dword [ebp - 0x14]
inc eax
jne 0x40613d
mov eax, dword [ebp - 0x1c]
dec dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x3c]
sub edx, eax
mov eax, dword [ebp - 0x2c]
cmp eax, edx
setge cl
cmp ecx, dword [ebp - 0x10]
jge 0x40617b
xor edx, edx
mov byte [ebp - 5], dl
cmp byte [ebp - 5], dl
je 0x4061a4
push edx
call ebx
jmp 0x4061a2
mov dword [ebp - 0x14], 1
mov eax, dword [ebp - 0x14]
sub eax, 0x3ecb
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
cmp ecx, eax
setle dl
mov dword [ebp - 0x14], edx
xor edx, edx
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xc
jge 0x4060bf
mov dword [ebp - 0x18], 0x3fcb50bf
mov dword [ebp - 0x3c], 2
mov dword [ebp - 4], 0x6e6c8cac
mov dword [ebp - 0x28], 0xffff
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 4], edx
jmp 0x4061ea
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x9c], 0xa8eac8b
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x4061d9
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], 3
jg 0x406313
mov ebx, 0x9729cf30
mov dword [ebp - 4], 0xf6b8f3d4
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x14], 0xfffffff8
mov dword [ebp - 4], edx
jmp 0x40623e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x8c], 0xe5b14f4e
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x40622d
inc dword [ebp - 0x88]
mov dword [ebp - 4], 3
cmp dword [ebp - 4], edx
jl 0x406306
mov dword [ebp - 0x10], 0xfffffffa
mov dword [ebp - 0x24], 0x878e
mov dword [ebp - 0x38], 0xbf5e
mov dword [ebp - 0x3c], 1
cmp dword [ebp - 0x3c], edx
je 0x4062ac
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov edx, dword [ebp + eax*4 - 0x9c]
mov eax, dword [ebp - 0x18]
imul edx, dword [ebp + eax*4 - 0x9c]
mov eax, dword [ebp - 0x14]
cmp edx, eax
setge cl
cmp dword [ebp - 4], ecx
jg 0x4062a5
mov eax, dword [ebp - 0x94]
xor eax, eax
inc eax
xor edx, edx
jmp 0x4062ae
mov eax, edx
mov ecx, dword [ebp - 0x24]
imul ecx, eax
add ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
dec dword [ebp - 0x24]
cmp ecx, eax
je 0x4062c6
xor eax, eax
inc eax
jmp 0x4062c8
mov eax, edx
mov dword [ebp - 0x10], eax
xor edx, edx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
dec edx
push 0
mov eax, dword [ebp + eax*4 - 0x9c]
cmp eax, edx
pop edx
setge cl
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x94], 0x6a9cbde6
mov eax, dword [ebp - 4]
dec dword [ebp - 4]
jns 0x40625a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x406202
mov dword [ebp - 4], edx
pop ebx
jmp 0x40633a
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x406337
push edx
push 0x1617
push edx
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
xor edx, edx
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffee
jle 0x406319
mov eax, dword [ebp - 0x70]
mov ecx, 0x3e8
cdq
idiv ecx
mov ecx, dword [ebp - 0x74]
mov esi, edx
mov edi, eax
call fcn.0040547c
add eax, esi
add eax, edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret