Function at 0x401a27
Capabilities:
Extract resource via kernel32 functions
Query or enumerate registry key
Suspend thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ca60d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xa6c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x834], 0xb57fd546
mov dword [ebp - 0x830], 0xb57fd546
mov dword [ebp - 0x82c], 0xb57fd546
mov dword [ebp - 0x828], 0xb57fd546
lea ecx, [ebp - 0x269]
call fcn.0040bd2b
push eax
lea eax, [ebp - 0x824]
push eax
lea eax, [ebp - 0x834]
push eax
lea ecx, [ebp - 0x9fc]
call fcn.0040bd2e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x114]
call fcn.0040bcda
mov dword [ebp - 0x14], 0x2bd7b1c2
mov dword [ebp - 0x7c], 0xc1b16eb2
mov dword [ebp - 0x614], 0x251f
mov dword [ebp - 0x1b0], 0
jmp 0x401ada
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 3
jge 0x401af6
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x9e8], 0xccb4f7bc
jmp 0x401acd
mov dword [ebp - 0x14], 3
jmp 0x401b06
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x401e4c
push 3
lea ecx, [ebp - 0x114]
call fcn.0040bd1c
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.0040bd1c
push 1
lea ecx, [ebp - 0x114]
call fcn.0040bd1c
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
cmp eax, 0x55ee
jle 0x401b52
mov dword [ebp - 0x47c], 1
jmp 0x401b59
and dword [ebp - 0x47c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.0040bd1c
mov esi, dword [eax]
imul esi, dword [ebp - 0x47c]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.0040bd1c
cmp esi, dword [eax]
jl 0x401b8e
mov dword [ebp - 0x5c8], 1
jmp 0x401b95
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x5c8]
lea esi, [eax + ecx + 1]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.0040bd1c
imul esi, dword [eax]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.0040bd1c
cmp esi, dword [eax]
jge 0x401bd1
mov dword [ebp - 0x5d8], 1
jmp 0x401bd8
and dword [ebp - 0x5d8], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.0040bd1c
mov esi, eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x5d8]
sub ecx, dword [eax]
cmp dword [esi], ecx
jg 0x401c0e
mov dword [ebp - 0x5e0], 1
jmp 0x401c15
and dword [ebp - 0x5e0], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x5e0]
cmp ecx, dword [eax]
je 0x401c39
mov dword [ebp - 0x5e8], 1
jmp 0x401c40
and dword [ebp - 0x5e8], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.0040bd1c
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5e8]
jge 0x401c64
mov dword [ebp - 0x5f0], 1
jmp 0x401c6b
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x7c], eax
xor eax, eax
je 0x401e06
mov dword [ebp - 0x108], 9
mov dword [ebp - 0x60c], 0xfffffff8
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x14], eax
jne 0x401d67
cmp dword [ebp - 0x7c], 0xd4965da1
jb 0x401cb4
mov dword [ebp - 0x67c], 1
jmp 0x401cbb
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x108]
neg eax
cmp eax, dword [ebp - 0x108]
je 0x401cd7
mov dword [ebp - 0x5f8], 1
jmp 0x401cde
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x5f8], eax
jle 0x401cf5
mov dword [ebp - 0x718], 1
jmp 0x401cfc
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x89c], eax
mov eax, dword [ebp - 0x614]
mov dword [ebp - 0x994], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x928], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.0040bd1c
mov dword [ebp - 0x60c], 0xd890
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x9b8], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.0040bd1c
mov eax, dword [ebp - 0x614]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jne 0x401d67
and dword [ebp - 0x2b0], 0
jmp 0x401d71
mov dword [ebp - 0x2b0], 1
push 3
lea ecx, [ebp - 0x114]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x2b0]
cmp ecx, dword [eax]
jle 0x401d94
mov dword [ebp - 0x560], 1
jmp 0x401d9b
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x560]
sub ecx, 0x3027
sub eax, ecx
cmp eax, dword [ebp - 0x108]
jle 0x401dc0
mov dword [ebp - 0x2b8], 1
jmp 0x401dc7
and dword [ebp - 0x2b8], 0
push 1
lea ecx, [ebp - 0x114]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x2b8]
cmp ecx, dword [eax]
jge 0x401dea
mov dword [ebp - 0x568], 1
jmp 0x401df1
and dword [ebp - 0x568], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x568]
mov dword [ebp + eax - 0x9e8], ecx
jmp 0x401e47
mov dword [ebp - 0x7c], 0
jmp 0x401e16
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jg 0x401e47
mov dword [ebp - 0x720], 0x40774242
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.0040bd1c
cmp dword [eax], 0
je 0x401e3b
jmp 0x401e47
mov dword [ebp - 0x720], 1
jmp 0x401e0f
jmp 0x401aff
lea ecx, [ebp - 0x114]
call fcn.0040bd00
mov dword [ebp - 0x85c], 0xb57fd546
mov dword [ebp - 0x858], 0xb57fd546
mov dword [ebp - 0x854], 0xb57fd546
mov dword [ebp - 0x850], 0xb57fd546
lea ecx, [ebp - 0x209]
call fcn.0040bd2b
push eax
lea eax, [ebp - 0x84c]
push eax
lea eax, [ebp - 0x85c]
push eax
lea ecx, [ebp - 0xa1c]
call fcn.0040bd2e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x104]
call fcn.0040bcda
mov dword [ebp - 0xe8], 1
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x578], 0xba86
mov dword [ebp - 0x750], 0x19c2
mov dword [ebp - 0x758], 0x8cdc14c3
mov eax, dword [ebp - 0xe8]
add eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0xe8]
je 0x401f03
mov dword [ebp - 0x2c0], 1
jmp 0x401f0a
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0xe8]
sub eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x578], 0xfffffff9
jb 0x401f2e
mov dword [ebp - 0x570], 1
jmp 0x401f35
and dword [ebp - 0x570], 0
cmp dword [ebp - 0x570], 0x831e
jl 0x401f4d
mov dword [ebp - 0x728], 1
jmp 0x401f54
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x930], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jg 0x401f71
mov dword [ebp - 0x2c8], 1
jmp 0x401f78
and dword [ebp - 0x2c8], 0
imul eax, dword [ebp - 0x2c8], 0xfffffffb
test eax, eax
je 0x401fa5
mov byte [ebp - 0xa3], 0
movzx eax, byte [ebp - 0xa3]
test eax, eax
je 0x401fa0
push 0x771
call dword [sym.imp.GDI32.dll_UpdateColors]
jmp 0x4021c7
mov dword [ebp - 0x730], 0xfc72fa5d
mov dword [ebp - 0x5a0], 0x5adb51fd
mov dword [ebp - 0x760], 0x87ea82bc
mov dword [ebp - 0x130], 0
jmp 0x401fdc
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 2
jge 0x401ff8
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x6bc], 0xffffffff
jmp 0x401fcf
mov dword [ebp - 0x24], 0
jmp 0x402008
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jg 0x4021a9
mov dword [ebp - 0x284], 1
mov dword [ebp - 0x588], 1
mov byte [ebp - 0x82], 0
movzx eax, byte [ebp - 0x82]
test eax, eax
je 0x40204c
push 0
push 0x1f3a
push 0
push 0x914
call dword [sym.imp.GDI32.dll_GetTextExtentPointW]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x6bc]
mov dword [ebp - 0x998], eax
cmp dword [ebp - 0x284], 0
je 0x402115
cmp dword [ebp - 0x578], 0
jne 0x402109
cmp dword [ebp - 0x284], 0x76e1
jle 0x40208e
mov dword [ebp - 0x2d0], 1
jmp 0x402095
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x284]
cmp dword [ebp - 0x2d0], eax
jg 0x4020bc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6bc], 0
jne 0x4020bc
and dword [ebp - 0x580], 0
jmp 0x4020c6
mov dword [ebp - 0x580], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6bc]
cmp dword [ebp - 0x580], eax
jne 0x4020ed
cmp dword [ebp - 0x24], 0
je 0x4020ed
mov dword [ebp - 0x2d8], 1
jmp 0x4020f4
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x588], eax
cmp dword [ebp - 0x588], 0
je 0x402115
mov dword [ebp - 0x2e0], 1
jmp 0x40211c
and dword [ebp - 0x2e0], 0
cmp dword [ebp - 0x2e0], 0
jae 0x402131
mov dword [ebp - 0x590], 1
jmp 0x402138
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x730]
cmp dword [ebp - 0x590], eax
je 0x402152
mov dword [ebp - 0x2e8], 1
jmp 0x402159
and dword [ebp - 0x2e8], 0
cmp dword [ebp - 0x2e8], 0xfffffff8
jbe 0x40216e
mov dword [ebp - 0x598], 1
jmp 0x402175
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x598]
neg eax
cmp eax, dword [ebp - 0x750]
jg 0x402191
mov dword [ebp - 0x2f0], 1
jmp 0x402198
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x758], eax
jmp 0x402001
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x5a0], eax
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x760], eax
mov dword [ebp - 0x18], 0x2bd7b1c2
mov dword [ebp - 0x70], 0xc1b16eb2
mov dword [ebp - 0x3c], 0xc64a6847
push 1
lea ecx, [ebp - 0x658]
call fcn.0040bc2e
mov dword [ebp - 0x118], 0
jmp 0x402202
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 1
jge 0x402224
push dword [ebp - 0x118]
lea ecx, [ebp - 0x658]
call fcn.0040bd1c
mov dword [eax], 1
jmp 0x4021f5
mov dword [ebp - 0x3c], 0
jmp 0x402234
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x15
jne 0x402254
mov byte [ebp - 0x83], 0
movzx eax, byte [ebp - 0x83]
test eax, eax
je 0x402252
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x40222d
mov dword [ebp - 0x3c], 0
jmp 0x402264
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x4022e7
mov dword [ebp - 0xb8], 0xfffffffc
mov dword [ebp - 0xb8], 0
jmp 0x40228d
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jl 0x4022c0
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x658]
call fcn.0040bd1c
mov esi, eax
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x658]
call fcn.0040bd1c
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x402280
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x658]
call fcn.0040bd1c
mov esi, eax
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x658]
call fcn.0040bd1c
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x40225d
lea ecx, [ebp - 0x658]
call fcn.0040bd00
mov dword [ebp - 0x3d4], 0x251f
mov dword [ebp - 0xd0], 1
mov dword [ebp - 0xd0], 0
jmp 0x40231f
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x1d
je 0x40234f
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x402342
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
cmp dword [ebp - 0xd0], 0
je 0x40234d
jmp 0x402312
jmp 0x402312
mov dword [ebp - 0x34], 0x324ec2e0
mov dword [ebp - 0x74], 0xffffffff
mov dword [ebp - 0x12c], 0x5761ac7e
mov dword [ebp - 0x28c], 0xa258
mov dword [ebp - 0x5b8], 0xd8e65dd4
mov dword [ebp - 0x5c0], 1
mov dword [ebp - 0x34], 0x15
jmp 0x402395
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jl 0x4023c3
mov byte [ebp - 0x84], 0
movzx eax, byte [ebp - 0x84]
test eax, eax
je 0x4023c1
push 0x23a3
push 0
push 0x2661
push 0
call dword [sym.imp.USER32.dll_LoadStringA]
jmp 0x40238e
mov dword [ebp - 0x34], 6
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jne 0x4024ca
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x74]
jg 0x4023f1
mov dword [ebp - 0x2f8], 1
jmp 0x4023f8
and dword [ebp - 0x2f8], 0
cmp dword [ebp - 0x2f8], 0xa0c0e075
ja 0x402410
mov dword [ebp - 0x5a8], 1
jmp 0x402417
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x34], eax
jl 0x402434
mov dword [ebp - 0x300], 1
jmp 0x40243b
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
sub eax, dword [ebp - 0x12c]
sub eax, 0x6728
sub eax, dword [ebp - 0x12c]
cmp eax, 5
jge 0x402469
mov dword [ebp - 0x5b0], 1
jmp 0x402470
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x8a0], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x87c], eax
push 0xfffffffffffffffb
pop eax
cmp eax, 1
jle 0x4024a8
mov dword [ebp - 0x768], 1
jmp 0x4024af
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x880], eax
cmp dword [ebp - 0x34], 2
jbe 0x4024ca
and dword [ebp - 0x308], 0
jmp 0x4024d4
mov dword [ebp - 0x308], 1
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 0
je 0x4024fe
cmp dword [ebp - 0x5c0], 0
je 0x4024fe
mov dword [ebp - 0x314], 1
jmp 0x402505
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x5c0]
cmp dword [ebp - 0x314], eax
jg 0x40251f
mov dword [ebp - 0x4a4], 1
jmp 0x402526
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x4a4]
neg eax
add eax, 4
je 0x402546
push 6
pop eax
test eax, eax
je 0x402546
mov dword [ebp - 0x31c], 1
jmp 0x40254d
and dword [ebp - 0x31c], 0
cmp dword [ebp - 0x31c], 0
je 0x402568
cmp dword [ebp - 0x74], 0
je 0x402568
mov dword [ebp - 0x56c], 1
jmp 0x40256f
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x28], 0x324ec2e0
mov dword [ebp - 0x78], 0xffffffff
mov dword [ebp - 0x184], 0x5761ac7e
mov dword [ebp - 0x278], 0xa258
mov dword [ebp - 0x4b4], 0xd8e65dd4
mov dword [ebp - 0x33c], 1
mov dword [ebp - 0x28], 0x15
jmp 0x4025c1
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jl 0x4025ef
mov byte [ebp - 0xac], 0
movzx eax, byte [ebp - 0xac]
test eax, eax
je 0x4025ed
push 0x23a3
push 0
push 0x2661
push 0
call dword [sym.imp.USER32.dll_LoadStringA]
jmp 0x4025ba
mov dword [ebp - 0x28], 6
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jne 0x4026f6
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x78]
jg 0x40261d
mov dword [ebp - 0x324], 1
jmp 0x402624
and dword [ebp - 0x324], 0
cmp dword [ebp - 0x324], 0xa0c0e075
ja 0x40263c
mov dword [ebp - 0x4ac], 1
jmp 0x402643
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x28], eax
jl 0x402660
mov dword [ebp - 0x32c], 1
jmp 0x402667
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x184]
sub eax, 0x6728
sub eax, dword [ebp - 0x184]
cmp eax, 5
jge 0x402695
mov dword [ebp - 0x5d0], 1
jmp 0x40269c
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x5d0]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x8cc], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x8d4], eax
push 0xfffffffffffffffb
pop eax
cmp eax, 1
jle 0x4026d4
mov dword [ebp - 0x770], 1
jmp 0x4026db
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x8dc], eax
cmp dword [ebp - 0x28], 2
jbe 0x4026f6
and dword [ebp - 0x334], 0
jmp 0x402700
mov dword [ebp - 0x334], 1
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x4b4], eax
cmp dword [ebp - 0x4b4], 0
je 0x40272a
cmp dword [ebp - 0x33c], 0
je 0x40272a
mov dword [ebp - 0x574], 1
jmp 0x402731
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x33c]
cmp dword [ebp - 0x574], eax
jg 0x40274b
mov dword [ebp - 0x344], 1
jmp 0x402752
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x344]
neg eax
add eax, 4
je 0x402772
push 6
pop eax
test eax, eax
je 0x402772
mov dword [ebp - 0x4bc], 1
jmp 0x402779
and dword [ebp - 0x4bc], 0
cmp dword [ebp - 0x4bc], 0
je 0x402794
cmp dword [ebp - 0x78], 0
je 0x402794
mov dword [ebp - 0x34c], 1
jmp 0x40279b
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x134], 0
jmp 0x4027c0
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 3
jge 0x4027dc
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x9f4], 0xccb4f7bc
jmp 0x4027b3
mov dword [ebp - 0x848], 0x606d
mov dword [ebp - 0x844], 0x606d
mov dword [ebp - 0x840], 0x606d
mov dword [ebp - 0x83c], 0x606d
lea ecx, [ebp - 0x259]
call fcn.0040bd2b
push eax
lea eax, [ebp - 0x838]
push eax
lea eax, [ebp - 0x848]
push eax
lea ecx, [ebp - 0xa34]
call fcn.0040bd2e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1fc]
call fcn.0040bcda
mov dword [ebp - 0x8e4], 0
mov dword [ebp - 0x274], 0x7c2
mov dword [ebp - 0x628], 0xffffffff
mov dword [ebp - 0x4d4], 0xda5659cd
mov dword [ebp - 0x218], 0xfc53d8b3
mov dword [ebp - 0x7c0], 5
mov dword [ebp - 0x1c4], 0
jmp 0x40288e
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 4
jge 0x4028aa
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x7f4], 0xea983111
jmp 0x402881
push 3
lea ecx, [ebp - 0x1fc]
call fcn.0040bd1c
push 4
pop ecx
imul ecx, ecx, 3
mov eax, dword [eax]
mov dword [ebp + ecx - 0x7f4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x7f4], 0
jne 0x4028ee
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x7f4], 0
jne 0x4028ee
and dword [ebp - 0x5d4], 0
jmp 0x4028f8
mov dword [ebp - 0x5d4], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x7f4]
cmp dword [ebp - 0x5d4], eax
jge 0x402919
mov dword [ebp - 0x778], 1
jmp 0x402920
and dword [ebp - 0x778], 0
push 3
lea ecx, [ebp - 0x1fc]
call fcn.0040bd1c
push 3
lea ecx, [ebp - 0x1fc]
call fcn.0040bd1c
mov esi, eax
push 3
lea ecx, [ebp - 0x1fc]
call fcn.0040bd1c
mov ecx, dword [esi]
imul ecx, dword [eax]
cmp ecx, 5
jl 0x40295f
mov dword [ebp - 0x354], 1
jmp 0x402966
and dword [ebp - 0x354], 0
cmp dword [ebp - 0x354], 0xa191
jg 0x40297e
mov dword [ebp - 0x4c4], 1
jmp 0x402985
and dword [ebp - 0x4c4], 0
push 3
lea ecx, [ebp - 0x1fc]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x4c4]
cmp ecx, dword [eax]
jg 0x4029b7
push 3
lea ecx, [ebp - 0x1fc]
call fcn.0040bd1c
cmp dword [eax], 0
jne 0x4029b7
and dword [ebp - 0x35c], 0
jmp 0x4029c1
mov dword [ebp - 0x35c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7f4]
cmp eax, dword [ebp - 0x35c]
je 0x4029e2
mov dword [ebp - 0x57c], 1
jmp 0x4029e9
and dword [ebp - 0x57c], 0
cmp dword [ebp - 0x57c], 0x8f8f
jg 0x402a01
mov dword [ebp - 0x364], 1
jmp 0x402a08
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x780], eax
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x7b8], eax
mov eax, dword [ebp - 0x274]
dec eax
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x780]
cmp eax, dword [ebp - 0x7b8]
jge 0x402a47
mov dword [ebp - 0x4cc], 1
jmp 0x402a4e
and dword [ebp - 0x4cc], 0
push 0
lea ecx, [ebp - 0x1fc]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x4cc]
imul ecx, dword [eax]
mov dword [ebp - 0x36c], ecx
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x36c]
mov dword [ebp + eax - 0x7f4], ecx
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 0xfffffff9
jne 0x402a9e
mov dword [ebp - 0x374], 1
jmp 0x402aa5
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x4d4], eax
cmp dword [ebp - 0x4d4], 0
je 0x402ac7
push 2
lea ecx, [ebp - 0x1fc]
call fcn.0040bd1c
push 2
lea ecx, [ebp - 0x1fc]
call fcn.0040bd1c
cmp dword [eax], 0
jne 0x402aeb
cmp dword [ebp - 0x218], 0
jne 0x402aeb
and dword [ebp - 0x37c], 0
jmp 0x402af5
mov dword [ebp - 0x37c], 1
push 1
lea ecx, [ebp - 0x1fc]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x37c]
cmp ecx, dword [eax]
jge 0x402b18
mov dword [ebp - 0x584], 1
jmp 0x402b1f
and dword [ebp - 0x584], 0
push 3
lea ecx, [ebp - 0x1fc]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x584]
cmp ecx, dword [eax]
jge 0x402b42
mov dword [ebp - 0x384], 1
jmp 0x402b49
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x7c0], eax
lea ecx, [ebp - 0x1fc]
call fcn.0040bd00
mov dword [ebp - 0x18], 3
jmp 0x402b7c
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x4030ee
push 3
lea ecx, [ebp - 0x104]
call fcn.0040bd1c
push dword [ebp - 0x18]
lea ecx, [ebp - 0x104]
call fcn.0040bd1c
push 1
lea ecx, [ebp - 0x104]
call fcn.0040bd1c
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x18]
cmp eax, 0x55ee
jle 0x402bc8
mov dword [ebp - 0x4dc], 1
jmp 0x402bcf
and dword [ebp - 0x4dc], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x104]
call fcn.0040bd1c
mov esi, dword [eax]
imul esi, dword [ebp - 0x4dc]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x104]
call fcn.0040bd1c
cmp esi, dword [eax]
jl 0x402c04
mov dword [ebp - 0x38c], 1
jmp 0x402c0b
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x38c]
lea esi, [eax + ecx + 1]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x104]
call fcn.0040bd1c
imul esi, dword [eax]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x104]
call fcn.0040bd1c
cmp esi, dword [eax]
jge 0x402c47
mov dword [ebp - 0x5dc], 1
jmp 0x402c4e
and dword [ebp - 0x5dc], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x104]
call fcn.0040bd1c
mov esi, eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x104]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x5dc]
sub ecx, dword [eax]
cmp dword [esi], ecx
jg 0x402c84
mov dword [ebp - 0x394], 1
jmp 0x402c8b
and dword [ebp - 0x394], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x104]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x394]
cmp ecx, dword [eax]
je 0x402caf
mov dword [ebp - 0x4e4], 1
jmp 0x402cb6
and dword [ebp - 0x4e4], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x104]
call fcn.0040bd1c
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4e4]
jge 0x402cda
mov dword [ebp - 0x39c], 1
jmp 0x402ce1
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x30], 0x324ec2e0
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0x13c], 0x5761ac7e
mov dword [ebp - 0x258], 0xa258
mov dword [ebp - 0x3b4], 0xd8e65dd4
mov dword [ebp - 0x4f4], 1
mov dword [ebp - 0x30], 0x15
jmp 0x402d30
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jl 0x402d5e
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x402d5c
push 0x23a3
push 0
push 0x2661
push 0
call dword [sym.imp.USER32.dll_LoadStringA]
jmp 0x402d29
mov dword [ebp - 0x30], 6
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jne 0x402e65
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x80]
jg 0x402d8c
mov dword [ebp - 0x58c], 1
jmp 0x402d93
and dword [ebp - 0x58c], 0
cmp dword [ebp - 0x58c], 0xa0c0e075
ja 0x402dab
mov dword [ebp - 0x3a4], 1
jmp 0x402db2
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x30], eax
jl 0x402dcf
mov dword [ebp - 0x4ec], 1
jmp 0x402dd6
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
sub eax, dword [ebp - 0x13c]
sub eax, 0x6728
sub eax, dword [ebp - 0x13c]
cmp eax, 5
jge 0x402e04
mov dword [ebp - 0x3ac], 1
jmp 0x402e0b
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x8ec], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x8f4], eax
push 0xfffffffffffffffb
pop eax
cmp eax, 1
jle 0x402e43
mov dword [ebp - 0x7c8], 1
jmp 0x402e4a
and dword [ebp - 0x7c8], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x8fc], eax
cmp dword [ebp - 0x30], 2
jbe 0x402e65
and dword [ebp - 0x610], 0
jmp 0x402e6f
mov dword [ebp - 0x610], 1
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0
je 0x402e99
cmp dword [ebp - 0x4f4], 0
je 0x402e99
mov dword [ebp - 0x3bc], 1
jmp 0x402ea0
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x4f4]
cmp dword [ebp - 0x3bc], eax
jg 0x402eba
mov dword [ebp - 0x594], 1
jmp 0x402ec1
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x594]
neg eax
add eax, 4
je 0x402ee1
push 6
pop eax
test eax, eax
je 0x402ee1
mov dword [ebp - 0x3c4], 1
jmp 0x402ee8
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x3c4], 0
je 0x402f03
cmp dword [ebp - 0x80], 0
je 0x402f03
mov dword [ebp - 0x4fc], 1
jmp 0x402f0a
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x13c], eax
xor eax, eax
je 0x4030a8
mov dword [ebp - 0xf8], 9
mov dword [ebp - 0x5e4], 0xfffffff8
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x18], eax
jne 0x403009
cmp dword [ebp - 0x70], 0xd4965da1
jb 0x402f56
mov dword [ebp - 0x7d0], 1
jmp 0x402f5d
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0xf8]
neg eax
cmp eax, dword [ebp - 0xf8]
je 0x402f79
mov dword [ebp - 0x3cc], 1
jmp 0x402f80
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x3cc], eax
jle 0x402f97
mov dword [ebp - 0x6b0], 1
jmp 0x402f9e
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x904], eax
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x914], eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x104]
call fcn.0040bd1c
mov dword [ebp - 0x5e4], 0xd890
mov eax, dword [ebp - 0x5e4]
mov dword [ebp - 0x91c], eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x104]
call fcn.0040bd1c
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jne 0x403009
and dword [ebp - 0x504], 0
jmp 0x403013
mov dword [ebp - 0x504], 1
push 3
lea ecx, [ebp - 0x104]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x504]
cmp ecx, dword [eax]
jle 0x403036
mov dword [ebp - 0x3dc], 1
jmp 0x40303d
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x3dc]
sub ecx, 0x3027
sub eax, ecx
cmp eax, dword [ebp - 0xf8]
jle 0x403062
mov dword [ebp - 0x59c], 1
jmp 0x403069
and dword [ebp - 0x59c], 0
push 1
lea ecx, [ebp - 0x104]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x59c]
cmp ecx, dword [eax]
jge 0x40308c
mov dword [ebp - 0x3e4], 1
jmp 0x403093
and dword [ebp - 0x3e4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3e4]
mov dword [ebp + eax - 0x9f4], ecx
jmp 0x4030e9
mov dword [ebp - 0x70], 0
jmp 0x4030b8
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jg 0x4030e9
mov dword [ebp - 0x698], 0x40774242
push dword [ebp - 0x18]
lea ecx, [ebp - 0x104]
call fcn.0040bd1c
cmp dword [eax], 0
je 0x4030dd
jmp 0x4030e9
mov dword [ebp - 0x698], 1
jmp 0x4030b1
jmp 0x402b75
lea ecx, [ebp - 0x104]
call fcn.0040bd00
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0x27c], 0x207647f1
mov dword [ebp - 0xbc], 0
jmp 0x403126
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xffffffeb
jne 0x4032ca
mov dword [ebp - 0x678], 0x98764276
mov dword [ebp - 0x674], 0x98764276
mov dword [ebp - 0x670], 0x98764276
mov dword [ebp - 0x66c], 0x98764276
mov dword [ebp - 0x220], 8
mov dword [ebp - 0x748], 0xffffffff
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x678], 1
jl 0x40318b
mov dword [ebp - 0x50c], 1
jmp 0x403192
and dword [ebp - 0x50c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x678]
cmp dword [ebp - 0x50c], eax
jg 0x4031b3
mov dword [ebp - 0x68c], 1
jmp 0x4031ba
and dword [ebp - 0x68c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x678]
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x27c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x678]
cmp dword [ebp - 0x27c], eax
jg 0x4031f9
mov dword [ebp - 0x3ec], 1
jmp 0x403200
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x220]
cmp dword [ebp - 0x3ec], eax
jl 0x40321a
mov dword [ebp - 0x64c], 1
jmp 0x403221
and dword [ebp - 0x64c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x678]
cmp eax, dword [ebp - 0x64c]
jle 0x40324b
cmp dword [ebp - 0x220], 0
je 0x40324b
mov dword [ebp - 0x3f4], 1
jmp 0x403252
and dword [ebp - 0x3f4], 0
cmp dword [ebp - 0x3f4], 0xffffffff
jle 0x403267
mov dword [ebp - 0x514], 1
jmp 0x40326e
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x220]
cmp dword [ebp - 0x514], eax
jne 0x403288
mov dword [ebp - 0x3fc], 1
jmp 0x40328f
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x3fc]
jne 0x4032b2
cmp dword [ebp - 0x27c], 0
je 0x4032b2
mov dword [ebp - 0x5a4], 1
jmp 0x4032b9
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x5a4]
mov dword [ebp - 0x748], eax
jmp 0x403119
mov dword [ebp - 0x7e4], 0x799a
mov dword [ebp - 0x7e0], 0x799a
mov dword [ebp - 0x7dc], 0x799a
mov dword [ebp - 0x7d8], 0x799a
mov dword [ebp - 0x648], 0xa12b57e8
mov dword [ebp - 0x644], 0xa12b57e8
mov dword [ebp - 0x640], 0xa12b57e8
mov dword [ebp - 0x63c], 0xa12b57e8
mov dword [ebp - 0xd8], 0xfffffff9
mov dword [ebp - 0x524], 0x7725
mov dword [ebp - 0x69c], str.gudch_hpsbr_mmwswdtj
cmp dword [ebp - 0x524], 0x7895
jle 0x4033fa
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
and dword [ebp - 0x1b4], 0
jmp 0x403368
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x60ea
jge 0x4033fa
and dword [ebp - 0x18c], 0
jmp 0x40338e
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x4b4e
jge 0x4033f5
and dword [ebp - 0x144], 0
jmp 0x4033b0
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x4c29
jge 0x4033f3
mov eax, dword [ebp - 0x18c]
sub eax, dword [ebp - 0x144]
xor eax, dword [ebp - 0x1b4]
cdq
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x6c4], edx
push dword [ebp - 0x6c4]
push dword [ebp - 0x6c8]
mov ecx, 0xa9b358
call fcn.0040b8d9
jmp 0x4033a3
jmp 0x403381
jmp 0x40335b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x648], 0
jmp 0x403428
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x648]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x648], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x648], 3
jg 0x403628
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x648]
cmp dword [ebp + eax*4 - 0x7e4], 0
je 0x403476
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x403471
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
jmp 0x40358f
mov dword [ebp - 0x694], 0xffffffff
mov dword [ebp - 0x784], 1
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x4034bb
push 0x20b
push 0x118f
push 0x1009
push 0x1744
push 0xa45
call dword [sym.imp.GDI32.dll_Ellipse]
mov eax, dword [ebp - 0x694]
add eax, 0x733e
cmp eax, 0xb64b
jne 0x4034d9
mov dword [ebp - 0x404], 1
jmp 0x4034e0
and dword [ebp - 0x404], 0
cmp dword [ebp - 0x404], 3
jge 0x4034f5
mov dword [ebp - 0x51c], 1
jmp 0x4034fc
and dword [ebp - 0x51c], 0
mov dword [ebp - 0xd8], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x648]
mov eax, dword [ebp + eax*4 - 0x7e4]
mov dword [ebp - 0x40c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x648]
mov ecx, dword [ebp - 0x40c]
mov dword [ebp + eax*4 - 0x7e4], ecx
mov eax, dword [ebp - 0x51c]
cmp eax, dword [ebp - 0x40c]
jl 0x403554
mov dword [ebp - 0x5ec], 1
jmp 0x40355b
and dword [ebp - 0x5ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x648]
cmp dword [ebp - 0x5ec], eax
jge 0x40357c
mov dword [ebp - 0x414], 1
jmp 0x403583
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x784], eax
mov dword [ebp - 0xd8], 3
jmp 0x4035a8
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x403623
mov dword [ebp - 0x14c], 0xffffffff
mov dword [ebp - 0x14c], 0
jmp 0x4035d4
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 3
jg 0x40361e
mov dword [ebp - 0xf0], 0x2c5b641b
mov dword [ebp - 0xf0], 0
jmp 0x403600
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 4
jge 0x40361c
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x7e4], 0
jmp 0x4035f3
jmp 0x4035c7
jmp 0x40359b
jmp 0x40340d
and dword [ebp - 4], 0
cmp dword [ebp - 0x524], 0x7537
jge 0x403648
mov edx, dword [ebp - 0x69c]
mov ecx, 0xa9b358
call fcn.0040e54d
jmp 0x403664
or dword [ebp - 4], 0xffffffff
jmp 0x40366e
mov byte [ebp - 0xb0], 0
movzx eax, byte [ebp - 0xb0]
test eax, eax
je 0x40368b
push 0x683
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 0xc0], 1
mov dword [ebp - 0x260], 0x207647f1
mov dword [ebp - 0xc0], 0
jmp 0x4036b8
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xffffffeb
jne 0x40385c
mov dword [ebp - 0x668], 0x98764276
mov dword [ebp - 0x664], 0x98764276
mov dword [ebp - 0x660], 0x98764276
mov dword [ebp - 0x65c], 0x98764276
mov dword [ebp - 0x228], 8
mov dword [ebp - 0x6a4], 0xffffffff
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x668], 1
jl 0x40371d
mov dword [ebp - 0x41c], 1
jmp 0x403724
and dword [ebp - 0x41c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x668]
cmp dword [ebp - 0x41c], eax
jg 0x403745
mov dword [ebp - 0x74c], 1
jmp 0x40374c
and dword [ebp - 0x74c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x668]
mov dword [ebp - 0x92c], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x260], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x668]
cmp dword [ebp - 0x260], eax
jg 0x40378b
mov dword [ebp - 0x5ac], 1
jmp 0x403792
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0x5ac], eax
jl 0x4037ac
mov dword [ebp - 0x424], 1
jmp 0x4037b3
and dword [ebp - 0x424], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x668]
cmp eax, dword [ebp - 0x424]
jle 0x4037dd
cmp dword [ebp - 0x228], 0
je 0x4037dd
mov dword [ebp - 0x52c], 1
jmp 0x4037e4
and dword [ebp - 0x52c], 0
cmp dword [ebp - 0x52c], 0xffffffff
jle 0x4037f9
mov dword [ebp - 0x42c], 1
jmp 0x403800
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0x42c], eax
jne 0x40381a
mov dword [ebp - 0x618], 1
jmp 0x403821
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0xc0]
add eax, dword [ebp - 0x618]
jne 0x403844
cmp dword [ebp - 0x260], 0
je 0x403844
mov dword [ebp - 0x434], 1
jmp 0x40384b
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x6a4], eax
jmp 0x4036ab
mov dword [ebp - 0x534], 0xa9e
mov dword [ebp - 0x7bc], str.dnnghmvl_trtvxlh_vzu_jqjslxi_vawetdfq_izsjyhlxh_sfoultwn
cmp dword [ebp - 0x534], 0xb04
jle 0x403949
and dword [ebp - 0x1d4], 0
jmp 0x403896
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x10c4
jge 0x403949
and dword [ebp - 0x194], 0
jmp 0x4038bc
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x6fc9
jge 0x403944
and dword [ebp - 0x154], 0
jmp 0x4038de
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x38de
jge 0x40393f
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x154]
sar eax, cl
or eax, dword [ebp - 0x1d4]
cdq
mov dword [ebp - 0x6d4], eax
mov dword [ebp - 0x6d0], edx
push dword [ebp - 0x6d0]
push dword [ebp - 0x6d4]
lea ecx, [ebp - 0xa4c]
call fcn.004019b1
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b8ce
push eax
call fcn.004b4d47
pop ecx
lea ecx, [ebp - 0xa4c]
call fcn.0040b8c4
jmp 0x4038d1
jmp 0x4038af
jmp 0x403889
mov dword [ebp - 0x64], 0xbcd8c45c
mov dword [ebp - 4], 2
cmp dword [ebp - 0x534], 0x6e4
jge 0x40396f
push dword [ebp - 0x7bc]
call fcn.004b4d47
pop ecx
jmp 0x40398b
or dword [ebp - 4], 0xffffffff
jmp 0x403995
mov dword [ebp - 0x20], 0
push 1
lea ecx, [ebp - 0x1f0]
call fcn.0040bc2e
mov dword [ebp - 0x6b4], 0xa2324015
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x230], 0xfffffffc
mov dword [ebp - 0x15c], 0
jmp 0x4039ea
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 1
jge 0x403a0c
push dword [ebp - 0x15c]
lea ecx, [ebp - 0x1f0]
call fcn.0040bd1c
mov dword [eax], 5
jmp 0x4039dd
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x64], 0
jmp 0x403a22
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jg 0x404083
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0x238], 0
push 3
lea ecx, [ebp - 0x874]
call fcn.0040bc2e
push 2
lea ecx, [ebp - 0x790]
call fcn.0040bc2e
mov dword [ebp - 0x44], 0
jmp 0x403a6a
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x403a86
push dword [ebp - 0x44]
lea ecx, [ebp - 0x874]
call fcn.0040bd1c
mov dword [eax], 6
jmp 0x403a63
mov dword [ebp - 0x44], 0
jmp 0x403a96
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x403ab2
push dword [ebp - 0x44]
lea ecx, [ebp - 0x790]
call fcn.0040bd1c
mov dword [eax], 0xfffffff9
jmp 0x403a8f
mov dword [ebp - 0x20], 0x5dae5a6
mov dword [ebp - 0x20], 0
jmp 0x403ac9
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x404068
mov dword [ebp - 0x268], 0x2ade89b9
mov dword [ebp - 0x19c], 0
jmp 0x403af6
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 3
jge 0x403b12
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0x964], 0xffffffff
jmp 0x403ae9
mov eax, 0x8fdeb772
test eax, eax
je 0x403e1f
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f0]
call fcn.0040bd1c
mov dword [ebp - 0x43c], eax
push dword [ebp - 0x64]
lea ecx, [ebp - 0x1f0]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x43c]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x43c]
cmp dword [eax], 0
jne 0x403d9d
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f0]
call fcn.0040bd1c
mov eax, dword [ebp - 0x230]
mov ecx, dword [ebp - 0x230]
dec ecx
mov dword [ebp - 0x230], ecx
test eax, eax
jne 0x403d07
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x934], eax
push dword [ebp - 0x64]
lea ecx, [ebp - 0x1f0]
call fcn.0040bd1c
mov eax, dword [eax]
neg eax
cmp eax, 0x70e7
jg 0x403bb4
mov dword [ebp - 0x288], 1
jmp 0x403bbb
and dword [ebp - 0x288], 0
push 2
lea ecx, [ebp - 0x874]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x288]
mov dword [eax], ecx
cmp dword [ebp - 0x288], 0
je 0x403be5
mov dword [ebp - 0x5b4], 1
jmp 0x403bec
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x5b4]
sub eax, dword [ebp - 0x240]
cmp eax, dword [ebp - 0x88]
jg 0x403c0c
mov dword [ebp - 0x444], 1
jmp 0x403c13
and dword [ebp - 0x444], 0
cmp dword [ebp - 0x444], 1
jle 0x403c28
mov dword [ebp - 0x53c], 1
jmp 0x403c2f
and dword [ebp - 0x53c], 0
cmp dword [ebp - 0x53c], 0xcda6a44f
ja 0x403c47
mov dword [ebp - 0x44c], 1
jmp 0x403c4e
and dword [ebp - 0x44c], 0
mov esi, dword [ebp - 0x44c]
dec esi
dec esi
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f0]
call fcn.0040bd1c
cmp esi, dword [eax]
jne 0x403c74
mov dword [ebp - 0x5f4], 1
jmp 0x403c7b
and dword [ebp - 0x5f4], 0
cmp dword [ebp - 0x5f4], 0xdef0
jle 0x403c93
mov dword [ebp - 0x454], 1
jmp 0x403c9a
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x238]
cmp dword [ebp - 0x268], eax
jl 0x403cc0
mov dword [ebp - 0x6ac], 1
jmp 0x403cc7
and dword [ebp - 0x6ac], 0
cmp dword [ebp - 0x20], 0
je 0x403ce2
mov eax, 0xde1
test eax, eax
je 0x403ce2
mov dword [ebp - 0x544], 1
jmp 0x403ce9
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x544]
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jne 0x403d07
and dword [ebp - 0x45c], 0
jmp 0x403d11
mov dword [ebp - 0x45c], 1
cmp dword [ebp - 0x45c], 0xffffffff
je 0x403d26
mov dword [ebp - 0x754], 1
jmp 0x403d2d
and dword [ebp - 0x754], 0
push 0
lea ecx, [ebp - 0x1f0]
call fcn.0040bd1c
push dword [ebp - 0x64]
lea ecx, [ebp - 0x1f0]
call fcn.0040bd1c
mov eax, dword [ebp - 0x268]
mov ecx, dword [ebp - 0xe0]
lea eax, [eax + ecx - 0x3169]
cmp eax, dword [ebp - 0x240]
jle 0x403d6f
mov dword [ebp - 0x280], 1
jmp 0x403d76
and dword [ebp - 0x280], 0
push 0
lea ecx, [ebp - 0x790]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x280]
mov dword [eax], ecx
cmp dword [ebp - 0x280], 0
jne 0x403d9d
and dword [ebp - 0x5bc], 0
jmp 0x403da7
mov dword [ebp - 0x5bc], 1
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x5bc], eax
jg 0x403dc1
mov dword [ebp - 0x464], 1
jmp 0x403dc8
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x464], eax
jg 0x403de2
mov dword [ebp - 0x54c], 1
jmp 0x403de9
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 6
jbe 0x403dfe
mov dword [ebp - 0x46c], 1
jmp 0x403e05
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x46c], eax
je 0x403e1f
mov dword [ebp - 0x638], 1
jmp 0x403e26
and dword [ebp - 0x638], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x964]
cmp dword [ebp - 0x638], eax
je 0x403e46
mov dword [ebp - 0x474], 1
jmp 0x403e4d
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x474], eax
je 0x403e64
mov dword [ebp - 0x554], 1
jmp 0x403e6b
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x6b4]
cmp dword [ebp - 0x554], eax
jle 0x403e85
mov dword [ebp - 0x2a8], 1
jmp 0x403e8c
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x88], 5
jmp 0x403eb1
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x1d
je 0x404063
mov dword [ebp - 0x164], 3
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f0]
call fcn.0040bd1c
cmp dword [eax], 0
jne 0x404026
mov eax, dword [ebp - 0x164]
sub eax, dword [ebp - 0x164]
cmp eax, 0xfffffff7
jae 0x403efc
mov dword [ebp - 0x5c4], 1
jmp 0x403f03
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x5c4]
je 0x403f1d
mov dword [ebp - 0x484], 1
jmp 0x403f24
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x484], eax
je 0x403f42
push 4
pop eax
test eax, eax
je 0x403f42
mov dword [ebp - 0x55c], 1
jmp 0x403f49
and dword [ebp - 0x55c], 0
push 0
lea ecx, [ebp - 0x790]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x55c]
imul ecx, dword [eax]
imul ecx, dword [ebp - 0x164]
cmp ecx, dword [ebp - 0x20]
je 0x403f77
mov dword [ebp - 0x794], 1
jmp 0x403f7e
and dword [ebp - 0x794], 0
mov eax, 0xfff8
cmp eax, 0x2281
ja 0x403f96
mov dword [ebp - 0x48c], 1
jmp 0x403f9d
and dword [ebp - 0x48c], 0
push 0
lea ecx, [ebp - 0x1f0]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x48c]
cmp ecx, dword [eax]
jge 0x403fc0
mov dword [ebp - 0x248], 1
jmp 0x403fc7
and dword [ebp - 0x248], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x248]
mov dword [ebp + eax - 0x964], ecx
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x248], eax
jle 0x403ff4
mov dword [ebp - 0x6c0], 1
jmp 0x403ffb
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x93c], eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f0]
call fcn.0040bd1c
xor eax, eax
inc eax
jne 0x404026
mov dword [ebp - 0x5cc], 1
jmp 0x40402d
and dword [ebp - 0x5cc], 0
cmp dword [ebp - 0x5cc], 0xffffffff
jle 0x404042
mov dword [ebp - 0x494], 1
jmp 0x404049
and dword [ebp - 0x494], 0
push 0
lea ecx, [ebp - 0x790]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x494]
mov dword [eax], ecx
jmp 0x403ea4
jmp 0x403ac2
lea ecx, [ebp - 0x790]
call fcn.0040bd00
lea ecx, [ebp - 0x874]
call fcn.0040bd00
jmp 0x403a1b
lea ecx, [ebp - 0x1f0]
call fcn.0040bd00
mov dword [ebp - 0x944], 0xfd41
mov dword [ebp - 0x94c], 0xfffffff6
mov dword [ebp - 0x954], 0x98070ade
mov dword [ebp - 0x99c], 1
mov dword [ebp - 0x9a4], 0x4b666a75
mov dword [ebp - 0x9ac], 0xf5ed9a92
mov dword [ebp - 0x9b4], 0x1151c3c3
mov dword [ebp - 0x9bc], 0xa97963ba
mov dword [ebp - 0x9c4], 0xe649f6d4
mov dword [ebp - 0x9cc], 5
mov dword [ebp - 0x9d4], 0xc8f0d071
mov dword [ebp - 0x9dc], 1
mov dword [ebp - 0x990], 0xfffffff7
mov dword [ebp - 0x938], 0xa065c2dd
mov dword [ebp - 0x8a4], 0x3aaf5bfb
mov dword [ebp - 0x564], 0xc41ac3dc
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x404157
push 0
push 0x1d4a
push 0x23a
push 0x2253
call dword [sym.imp.USER32.dll_SetDlgItemInt]
mov eax, dword [ebp - 0x564]
dec eax
mov dword [ebp - 0x564], eax
mov dword [ebp - 0x744], 0x799a
mov dword [ebp - 0x740], 0x799a
mov dword [ebp - 0x73c], 0x799a
mov dword [ebp - 0x738], 0x799a
mov dword [ebp - 0x608], 0xa12b57e8
mov dword [ebp - 0x604], 0xa12b57e8
mov dword [ebp - 0x600], 0xa12b57e8
mov dword [ebp - 0x5fc], 0xa12b57e8
mov dword [ebp - 0xc4], 0xfffffff9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x608], 0
jmp 0x4041ec
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x608]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x608], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x608], 3
jg 0x4043ec
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x608]
cmp dword [ebp + eax*4 - 0x744], 0
je 0x40423a
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x404235
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
jmp 0x404353
mov dword [ebp - 0x75c], 0xffffffff
mov dword [ebp - 0x6cc], 1
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x40427f
push 0x20b
push 0x118f
push 0x1009
push 0x1744
push 0xa45
call dword [sym.imp.GDI32.dll_Ellipse]
mov eax, dword [ebp - 0x75c]
add eax, 0x733e
cmp eax, 0xb64b
jne 0x40429d
mov dword [ebp - 0x49c], 1
jmp 0x4042a4
and dword [ebp - 0x49c], 0
cmp dword [ebp - 0x49c], 3
jge 0x4042b9
mov dword [ebp - 0x30c], 1
jmp 0x4042c0
and dword [ebp - 0x30c], 0
mov dword [ebp - 0xc4], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x608]
mov eax, dword [ebp + eax*4 - 0x744]
mov dword [ebp - 0x310], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x608]
mov ecx, dword [ebp - 0x310]
mov dword [ebp + eax*4 - 0x744], ecx
mov eax, dword [ebp - 0x30c]
cmp eax, dword [ebp - 0x310]
jl 0x404318
mov dword [ebp - 0x318], 1
jmp 0x40431f
and dword [ebp - 0x318], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x608]
cmp dword [ebp - 0x318], eax
jge 0x404340
mov dword [ebp - 0x320], 1
jmp 0x404347
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x6cc], eax
mov dword [ebp - 0xc4], 3
jmp 0x40436c
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jl 0x4043e7
mov dword [ebp - 0x1bc], 0xffffffff
mov dword [ebp - 0x1bc], 0
jmp 0x404398
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 3
jg 0x4043e2
mov dword [ebp - 0xc8], 0x2c5b641b
mov dword [ebp - 0xc8], 0
jmp 0x4043c4
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 4
jge 0x4043e0
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x744], 0
jmp 0x4043b7
jmp 0x40438b
jmp 0x40435f
jmp 0x4041d1
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x404409
push 0x683
call dword [sym.imp.GDI32.dll_GetStockObject]
push 4
lea ecx, [ebp - 0x2a4]
call fcn.0040bc2e
mov dword [ebp - 0x38], 0x52061f6
mov dword [ebp - 0x7cc], 0x42f3d479
mov dword [ebp - 0x16c], 0
jmp 0x404440
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 4
jge 0x404462
push dword [ebp - 0x16c]
lea ecx, [ebp - 0x2a4]
call fcn.0040bd1c
mov dword [eax], 0xe48d327c
jmp 0x404433
mov dword [ebp - 0x38], 3
jmp 0x404472
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x40449c
push dword [ebp - 0x38]
lea ecx, [ebp - 0x2a4]
call fcn.0040bd1c
mov esi, eax
push dword [ebp - 0x38]
lea ecx, [ebp - 0x2a4]
call fcn.0040bd1c
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x40446b
cmp dword [ebp - 0x38], 0
je 0x404504
push 3
lea ecx, [ebp - 0x2a4]
call fcn.0040bd1c
mov dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x884], eax
push 3
lea ecx, [ebp - 0x2a4]
call fcn.0040bd1c
mov esi, dword [ebp - 0x38]
push 0
lea ecx, [ebp - 0x2a4]
call fcn.0040bd1c
imul esi, dword [eax]
push 2
lea ecx, [ebp - 0x2a4]
call fcn.0040bd1c
imul esi, dword [eax]
test esi, esi
je 0x404504
xor eax, eax
inc eax
je 0x404504
mov dword [ebp - 0x328], 1
jmp 0x40450b
and dword [ebp - 0x328], 0
push 1
lea ecx, [ebp - 0x2a4]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x328]
add ecx, dword [eax]
je 0x404533
xor eax, eax
inc eax
je 0x404533
mov dword [ebp - 0x330], 1
jmp 0x40453a
and dword [ebp - 0x330], 0
push 2
lea ecx, [ebp - 0x2a4]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x330]
cmp ecx, dword [eax]
jge 0x40455d
mov dword [ebp - 0x338], 1
jmp 0x404564
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x7cc], eax
lea ecx, [ebp - 0x2a4]
call fcn.0040bd00
mov dword [ebp - 0x8ac], 6
mov eax, 0x5e48d327
test eax, eax
je 0x4045a9
mov dword [ebp - 0x340], 8
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x340], eax
jmp 0x40466d
mov dword [ebp - 0x890], 4
mov dword [ebp - 0x764], 0x3380ee91
mov dword [ebp - 0x1a4], 0
jmp 0x4045d6
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x4045f2
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x270], 2
jmp 0x4045c9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x270]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x270]
test eax, eax
jne 0x404623
mov eax, 0x49c23edb
test eax, eax
jne 0x404623
and dword [ebp - 0x6d8], 0
jmp 0x40462d
mov dword [ebp - 0x6d8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x270]
mov dword [ebp - 0x8b4], eax
xor eax, eax
inc eax
jmp 0x404657
mov dword [ebp - 0x348], 1
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x764], eax
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x40468a
push 0x1a90
call dword [sym.imp.GDI32.dll_SaveDC]
mov dword [ebp - 0x60], 0xbcd8c45c
mov dword [ebp - 0x1c], 0
push 1
lea ecx, [ebp - 0x208]
call fcn.0040bc2e
mov dword [ebp - 0x6f0], 0xa2324015
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x250], 0xfffffffc
mov dword [ebp - 0x174], 0
jmp 0x4046e6
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 1
jge 0x404708
push dword [ebp - 0x174]
lea ecx, [ebp - 0x208]
call fcn.0040bd1c
mov dword [eax], 5
jmp 0x4046d9
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x408], 0xafe
mov dword [ebp - 0x7c4], str.xwdobvmv_tsppmhpv_oeas_mtuvqrarf_wrdqqfhsi_iwqubk_wksfe_tfxriymww_kakvbilu_mocsnhysx_bcl_ilngw
cmp dword [ebp - 0x408], 0xe57
jle 0x40480d
and dword [ebp - 0x124], 0
jmp 0x404748
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x7408
jge 0x40480d
and dword [ebp - 0x1cc], 0
jmp 0x40476e
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x182a
jge 0x404808
and dword [ebp - 0x17c], 0
jmp 0x404794
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x3d26
jge 0x404803
and dword [ebp - 0x128], 0
jmp 0x4047b6
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0xfbb
jge 0x404801
mov ecx, dword [ebp - 0x1cc]
sub ecx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x124]
sar eax, cl
xor eax, dword [ebp - 0x128]
cdq
mov dword [ebp - 0x6e0], eax
mov dword [ebp - 0x6dc], edx
push dword [ebp - 0x6dc]
push dword [ebp - 0x6e0]
mov ecx, 0xa9b358
call fcn.0040b8d9
jmp 0x4047a9
jmp 0x404787
jmp 0x404761
jmp 0x40473b
mov dword [ebp - 0x60], 0
jmp 0x40481d
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jg 0x404e7e
mov dword [ebp - 0xcc], 0xffffffff
mov dword [ebp - 0x214], 0
push 3
lea ecx, [ebp - 0x868]
call fcn.0040bc2e
push 2
lea ecx, [ebp - 0x7a0]
call fcn.0040bc2e
mov dword [ebp - 0x68], 0
jmp 0x404865
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x404881
push dword [ebp - 0x68]
lea ecx, [ebp - 0x868]
call fcn.0040bd1c
mov dword [eax], 6
jmp 0x40485e
mov dword [ebp - 0x68], 0
jmp 0x404891
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x4048ad
push dword [ebp - 0x68]
lea ecx, [ebp - 0x7a0]
call fcn.0040bd1c
mov dword [eax], 0xfffffff9
jmp 0x40488a
mov dword [ebp - 0x1c], 0x5dae5a6
mov dword [ebp - 0x1c], 0
jmp 0x4048c4
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x404e63
mov dword [ebp - 0x21c], 0x2ade89b9
mov dword [ebp - 0x120], 0
jmp 0x4048f1
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 3
jge 0x40490d
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x974], 0xffffffff
jmp 0x4048e4
mov eax, 0x8fdeb772
test eax, eax
je 0x404c1a
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x208]
call fcn.0040bd1c
mov dword [ebp - 0x350], eax
push dword [ebp - 0x60]
lea ecx, [ebp - 0x208]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x350]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x350]
cmp dword [eax], 0
jne 0x404b98
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x208]
call fcn.0040bd1c
mov eax, dword [ebp - 0x250]
mov ecx, dword [ebp - 0x250]
dec ecx
mov dword [ebp - 0x250], ecx
test eax, eax
jne 0x404b02
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x878], eax
push dword [ebp - 0x60]
lea ecx, [ebp - 0x208]
call fcn.0040bd1c
mov eax, dword [eax]
neg eax
cmp eax, 0x70e7
jg 0x4049af
mov dword [ebp - 0x210], 1
jmp 0x4049b6
and dword [ebp - 0x210], 0
push 2
lea ecx, [ebp - 0x868]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x210]
mov dword [eax], ecx
cmp dword [ebp - 0x210], 0
je 0x4049e0
mov dword [ebp - 0x358], 1
jmp 0x4049e7
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x358]
sub eax, dword [ebp - 0x224]
cmp eax, dword [ebp - 0x90]
jg 0x404a07
mov dword [ebp - 0x360], 1
jmp 0x404a0e
and dword [ebp - 0x360], 0
cmp dword [ebp - 0x360], 1
jle 0x404a23
mov dword [ebp - 0x368], 1
jmp 0x404a2a
and dword [ebp - 0x368], 0
cmp dword [ebp - 0x368], 0xcda6a44f
ja 0x404a42
mov dword [ebp - 0x370], 1
jmp 0x404a49
and dword [ebp - 0x370], 0
mov esi, dword [ebp - 0x370]
dec esi
dec esi
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x208]
call fcn.0040bd1c
cmp esi, dword [eax]
jne 0x404a6f
mov dword [ebp - 0x378], 1
jmp 0x404a76
and dword [ebp - 0x378], 0
cmp dword [ebp - 0x378], 0xdef0
jle 0x404a8e
mov dword [ebp - 0x380], 1
jmp 0x404a95
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x21c], eax
jl 0x404abb
mov dword [ebp - 0x6e4], 1
jmp 0x404ac2
and dword [ebp - 0x6e4], 0
cmp dword [ebp - 0x1c], 0
je 0x404add
mov eax, 0xde1
test eax, eax
je 0x404add
mov dword [ebp - 0x388], 1
jmp 0x404ae4
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
jne 0x404b02
and dword [ebp - 0x390], 0
jmp 0x404b0c
mov dword [ebp - 0x390], 1
cmp dword [ebp - 0x390], 0xffffffff
je 0x404b21
mov dword [ebp - 0x7a4], 1
jmp 0x404b28
and dword [ebp - 0x7a4], 0
push 0
lea ecx, [ebp - 0x208]
call fcn.0040bd1c
push dword [ebp - 0x60]
lea ecx, [ebp - 0x208]
call fcn.0040bd1c
mov eax, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0xcc]
lea eax, [eax + ecx - 0x3169]
cmp eax, dword [ebp - 0x224]
jle 0x404b6a
mov dword [ebp - 0x22c], 1
jmp 0x404b71
and dword [ebp - 0x22c], 0
push 0
lea ecx, [ebp - 0x7a0]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x22c]
mov dword [eax], ecx
cmp dword [ebp - 0x22c], 0
jne 0x404b98
and dword [ebp - 0x398], 0
jmp 0x404ba2
mov dword [ebp - 0x398], 1
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x398], eax
jg 0x404bbc
mov dword [ebp - 0x3a0], 1
jmp 0x404bc3
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x3a0], eax
jg 0x404bdd
mov dword [ebp - 0x3a8], 1
jmp 0x404be4
and dword [ebp - 0x3a8], 0
cmp dword [ebp - 0x3a8], 6
jbe 0x404bf9
mov dword [ebp - 0x3b0], 1
jmp 0x404c00
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x3b0], eax
je 0x404c1a
mov dword [ebp - 0x3b8], 1
jmp 0x404c21
and dword [ebp - 0x3b8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x974]
cmp dword [ebp - 0x3b8], eax
je 0x404c41
mov dword [ebp - 0x3c0], 1
jmp 0x404c48
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x3c0], eax
je 0x404c5f
mov dword [ebp - 0x3c8], 1
jmp 0x404c66
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x6f0]
cmp dword [ebp - 0x3c8], eax
jle 0x404c80
mov dword [ebp - 0x3d0], 1
jmp 0x404c87
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x90], 5
jmp 0x404cac
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x1d
je 0x404e5e
mov dword [ebp - 0x138], 3
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x208]
call fcn.0040bd1c
cmp dword [eax], 0
jne 0x404e21
mov eax, dword [ebp - 0x138]
sub eax, dword [ebp - 0x138]
cmp eax, 0xfffffff7
jae 0x404cf7
mov dword [ebp - 0x3d8], 1
jmp 0x404cfe
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x3d8]
je 0x404d18
mov dword [ebp - 0x3e0], 1
jmp 0x404d1f
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x3e0], eax
je 0x404d3d
push 4
pop eax
test eax, eax
je 0x404d3d
mov dword [ebp - 0x3e8], 1
jmp 0x404d44
and dword [ebp - 0x3e8], 0
push 0
lea ecx, [ebp - 0x7a0]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x3e8]
imul ecx, dword [eax]
imul ecx, dword [ebp - 0x138]
cmp ecx, dword [ebp - 0x1c]
je 0x404d72
mov dword [ebp - 0x76c], 1
jmp 0x404d79
and dword [ebp - 0x76c], 0
mov eax, 0xfff8
cmp eax, 0x2281
ja 0x404d91
mov dword [ebp - 0x3f0], 1
jmp 0x404d98
and dword [ebp - 0x3f0], 0
push 0
lea ecx, [ebp - 0x208]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x3f0]
cmp ecx, dword [eax]
jge 0x404dbb
mov dword [ebp - 0x234], 1
jmp 0x404dc2
and dword [ebp - 0x234], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x234]
mov dword [ebp + eax - 0x974], ecx
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x234], eax
jle 0x404def
mov dword [ebp - 0x6fc], 1
jmp 0x404df6
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x8bc], eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x208]
call fcn.0040bd1c
xor eax, eax
inc eax
jne 0x404e21
mov dword [ebp - 0x3f8], 1
jmp 0x404e28
and dword [ebp - 0x3f8], 0
cmp dword [ebp - 0x3f8], 0xffffffff
jle 0x404e3d
mov dword [ebp - 0x400], 1
jmp 0x404e44
and dword [ebp - 0x400], 0
push 0
lea ecx, [ebp - 0x7a0]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x400]
mov dword [eax], ecx
jmp 0x404c9f
jmp 0x4048bd
lea ecx, [ebp - 0x7a0]
call fcn.0040bd00
lea ecx, [ebp - 0x868]
call fcn.0040bd00
jmp 0x404816
mov dword [ebp - 4], 4
cmp dword [ebp - 0x408], 0x73e
jge 0x404ea1
mov edx, dword [ebp - 0x7c4]
mov ecx, 0xa9b358
call fcn.0040e54d
jmp 0x404ebd
or dword [ebp - 4], 0xffffffff
jmp 0x404ec7
lea ecx, [ebp - 0x208]
call fcn.0040bd00
mov dword [ebp - 0x5c], 0x3f4f46db
mov dword [ebp - 0x410], 1
mov dword [ebp - 0x54], 0
jmp 0x404ef3
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x404f09
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x624], 0xffffffff
jmp 0x404eec
mov dword [ebp - 0x54], 0
jmp 0x404f19
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x404f2f
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x458], 0xfffffffa
jmp 0x404f12
mov dword [ebp - 0x5c], 0
jmp 0x404f3f
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jg 0x405104
mov dword [ebp - 0x774], 0xdb821342
mov dword [ebp - 0x450], 0xfffffffa
mov dword [ebp - 0x140], 0
jmp 0x404f76
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 4
jge 0x404f92
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0xa14], 0xffffffff
jmp 0x404f69
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x624]
mov dword [ebp - 0x8c4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x624]
mov dword [ebp - 0x8a8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x624], 0xdb959c45
jae 0x404fd2
mov dword [ebp - 0x420], 1
jmp 0x404fd9
and dword [ebp - 0x420], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x624]
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x418], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x418]
mov dword [ebp + eax - 0x458], ecx
mov eax, dword [ebp - 0x418]
cmp eax, dword [ebp - 0x420]
jg 0x405024
mov dword [ebp - 0x428], 1
jmp 0x40502b
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x624]
cmp dword [ebp - 0x428], eax
jge 0x405049
mov dword [ebp - 0x708], 1
jmp 0x405050
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp + eax*4 - 0x624], 1
jg 0x405069
mov dword [ebp - 0x430], 1
jmp 0x405070
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x624]
cmp eax, dword [ebp - 0x430]
jg 0x40508e
mov dword [ebp - 0x438], 1
jmp 0x405095
and dword [ebp - 0x438], 0
mov eax, 0xffff
sub eax, dword [ebp - 0x438]
mov ecx, dword [ebp - 0x5c]
cmp eax, dword [ebp + ecx*4 - 0x624]
jle 0x4050b8
mov dword [ebp - 0x440], 1
jmp 0x4050bf
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x774]
cmp dword [ebp - 0x440], eax
jge 0x4050d9
mov dword [ebp - 0x448], 1
jmp 0x4050e0
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x450], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x450]
mov dword [ebp + eax - 0xa14], ecx
jmp 0x404f38
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x458], 0xfffffff8
mov dword [ebp - 0xd4], 0x8d4081c2
mov dword [ebp - 0x148], 0
jmp 0x405138
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 2
jge 0x405154
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x88c], 0xffffffff
jmp 0x40512b
mov dword [ebp - 0xd4], 1
jmp 0x40516d
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jl 0x40518a
mov eax, dword [ebp - 0xd4]
cmp dword [ebp + eax*4 - 0x88c], 0
je 0x405188
jmp 0x40518a
jmp 0x405160
mov dword [ebp - 0x9d8], 0xfd41
mov dword [ebp - 0x8b0], 0xfffffff6
mov dword [ebp - 0x940], 0x98070ade
mov dword [ebp - 0x8b8], 1
mov dword [ebp - 0x9a0], 0x4b666a75
mov dword [ebp - 0x8c0], 0xf5ed9a92
mov dword [ebp - 0x948], 0x1151c3c3
mov dword [ebp - 0x8c8], 0xa97963ba
mov dword [ebp - 0x9c0], 0xe649f6d4
mov dword [ebp - 0x8d0], 5
mov dword [ebp - 0x950], 0xc8f0d071
mov dword [ebp - 0x8d8], 1
mov dword [ebp - 0x9a8], 0xfffffff7
mov dword [ebp - 0x8e0], 0xa065c2dd
mov dword [ebp - 0x958], 0x3aaf5bfb
mov dword [ebp - 0x460], 0xc41ac3dc
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x405253
push 0
push 0x1d4a
push 0x23a
push 0x2253
call dword [sym.imp.USER32.dll_SetDlgItemInt]
mov eax, dword [ebp - 0x460]
dec eax
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x48], 0x462d5e48
push 1
lea ecx, [ebp - 0x800]
call fcn.0040bc2e
mov dword [ebp - 0x150], 0
jmp 0x40528d
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 1
jge 0x4052af
push dword [ebp - 0x150]
lea ecx, [ebp - 0x800]
call fcn.0040bd1c
mov dword [eax], 0xfffffff9
jmp 0x405280
mov dword [ebp - 0x48], 0
jmp 0x4052bf
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x19
jge 0x4052ed
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x4052eb
push 0xf34
push 0
push 0x167
push 0x4e
call dword [sym.imp.USER32.dll_MapWindowPoints]
jmp 0x4052b8
mov dword [ebp - 0x48], 0
jmp 0x4052fd
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x40537a
mov dword [ebp - 0xdc], 1
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x40532c
push 0
push 0x5ae
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
mov dword [ebp - 0xdc], 0
jmp 0x405345
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jg 0x405375
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x800]
call fcn.0040bd1c
mov esi, eax
push dword [ebp - 0x48]
lea ecx, [ebp - 0x800]
call fcn.0040bd1c
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x405338
jmp 0x4052f6
lea ecx, [ebp - 0x800]
call fcn.0040bd00
movzx eax, byte [0xa9c4d4]
test eax, eax
je 0x4053a3
mov esi, 0x4dc03c
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x40668f
push 4
lea ecx, [ebp - 0x298]
call fcn.0040bc2e
mov dword [ebp - 0x40], 0x52061f6
mov dword [ebp - 0x7b4], 0x42f3d479
mov dword [ebp - 0x468], 0x4ff0
mov dword [ebp - 0x714], str.xelchgcw_cgcgwd_ecv_wlzzoo_zfsuvdd_mlr_bihqcur_qfjpkqnf
cmp dword [ebp - 0x468], 0x51ba
jle 0x4054cb
push 0
push 0
push 0x205a
push 0
push 0x2038
push 0
push 0
push 0x25d2
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
and dword [ebp - 0x158], 0
jmp 0x40541a
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x5d68
jge 0x4054cb
and dword [ebp - 0x160], 0
jmp 0x405440
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x166e
jge 0x4054c6
and dword [ebp - 0x168], 0
jmp 0x405462
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x6c68
jge 0x4054c1
mov eax, dword [ebp - 0x158]
or eax, dword [ebp - 0x160]
or eax, dword [ebp - 0x168]
cdq
mov dword [ebp - 0x6ec], eax
mov dword [ebp - 0x6e8], edx
push dword [ebp - 0x6e8]
push dword [ebp - 0x6ec]
lea ecx, [ebp - 0xa64]
call fcn.004019b1
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b8ce
push eax
call fcn.004b4d47
pop ecx
lea ecx, [ebp - 0xa64]
call fcn.0040b8c4
jmp 0x405455
jmp 0x405433
jmp 0x40540d
mov dword [ebp - 0x170], 0
jmp 0x4054e4
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 4
jge 0x405506
push dword [ebp - 0x170]
lea ecx, [ebp - 0x298]
call fcn.0040bd1c
mov dword [eax], 0xe48d327c
jmp 0x4054d7
mov dword [ebp - 4], 6
cmp dword [ebp - 0x468], 0x4c6e
jge 0x405525
push dword [ebp - 0x714]
call fcn.004b4d47
pop ecx
jmp 0x405541
or dword [ebp - 4], 0xffffffff
jmp 0x40554b
mov dword [ebp - 0x40], 3
jmp 0x40555b
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x405585
push dword [ebp - 0x40]
lea ecx, [ebp - 0x298]
call fcn.0040bd1c
mov esi, eax
push dword [ebp - 0x40]
lea ecx, [ebp - 0x298]
call fcn.0040bd1c
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x405554
cmp dword [ebp - 0x40], 0
je 0x4055ed
push 3
lea ecx, [ebp - 0x298]
call fcn.0040bd1c
mov dword [ebp - 0x40], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x8e8], eax
push 3
lea ecx, [ebp - 0x298]
call fcn.0040bd1c
mov esi, dword [ebp - 0x40]
push 0
lea ecx, [ebp - 0x298]
call fcn.0040bd1c
imul esi, dword [eax]
push 2
lea ecx, [ebp - 0x298]
call fcn.0040bd1c
imul esi, dword [eax]
test esi, esi
je 0x4055ed
xor eax, eax
inc eax
je 0x4055ed
mov dword [ebp - 0x470], 1
jmp 0x4055f4
and dword [ebp - 0x470], 0
push 1
lea ecx, [ebp - 0x298]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x470]
add ecx, dword [eax]
je 0x40561c
xor eax, eax
inc eax
je 0x40561c
mov dword [ebp - 0x478], 1
jmp 0x405623
and dword [ebp - 0x478], 0
push 2
lea ecx, [ebp - 0x298]
call fcn.0040bd1c
mov ecx, dword [ebp - 0x478]
cmp ecx, dword [eax]
jge 0x405646
mov dword [ebp - 0x480], 1
jmp 0x40564d
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x7b4], eax
lea ecx, [ebp - 0x298]
call fcn.0040bd00
mov dword [ebp - 0x9d0], 0x4dc03c
mov dword [ebp - 0x8f0], 6
mov eax, 0x5e48d327
test eax, eax
je 0x40569c
mov dword [ebp - 0x488], 8
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x488], eax
jmp 0x4058b7
mov dword [ebp - 0x490], 0x4fab
mov dword [ebp - 0x71c], str.ijhukiixm_zkld_zhazurokd_dpplc_sjfwhh_bmesjv_dwgjlhdl_lrhzvr_rwfs_rbyqle_ajcserw_eytjacg_zlhinzx
cmp dword [ebp - 0x490], 0x505a
jle 0x4057ae
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret