Function at 0x4704b0
Capabilities:
Authenticate hmac
Check for unmoving mouse cursor
Check http status code
Create process on windows
Encode data using base64
Log keystrokes via polling
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50bf28
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x1750
call fcn.004d63e0
mov eax, dword [0x57b0c0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
mov dword [ebp - 0x48c], 0xffffffff
lea ecx, [ebp - 0x488]
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x478], eax
call fcn.00401d60
cmp byte [0x5a99bd], 0
jne 0x4778e4
nop word [eax + eax]
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x16f8]
push eax
call fcn.0040e4f0
add esp, 4
lea ecx, [ebp - 0xbc0]
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x46c], eax
lea eax, [ebp - 0x488]
push eax
movq qword [ebp - 0x474], xmm0
call fcn.00401d60
mov edx, eax
lea ecx, [ebp - 0x1018]
call fcn.00403d80
add esp, 4
cmp dword [eax + 4], 0
jl 0x4778cc
jg 0x470594
cmp dword [eax], 0xd1cef00
jb 0x4778cc
cvttsd2si eax, qword [0x5a9928]
test eax, eax
jne 0x470baf
mov eax, dword [0x5a9940]
mov ecx, dword [0x5a993c]
movsx edi, word [ebp - 0x46c]
mov dword [ebp - 0x478], edi
mov edi, eax
lea edx, [eax - 0x60]
lea esi, [ecx - 0x9c]
add ecx, 0xffffffc4
cmp edx, eax
mov dword [ebp - 0x468], esi
mov dword [ebp - 0x460], esi
movsx esi, word [ebp - 0x46e]
cmovle edi, edx
cmovle edx, eax
mov dword [ebp - 0x480], edi
mov eax, dword [ebp - 0x468]
mov edi, dword [ebp - 0x478]
cmp eax, ecx
jle 0x470603
mov dword [ebp - 0x460], ecx
mov ecx, eax
cmp esi, dword [ebp - 0x480]
jl 0x470766
cmp esi, edx
jg 0x470766
cmp edi, dword [ebp - 0x460]
jl 0x470766
cmp edi, ecx
jg 0x470766
mov dl, byte [ebp - 0x470]
test dl, 4
je 0x470722
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0xb98]
push eax
call fcn.0040e4f0
add esp, 4
movq xmm0, qword [eax]
mov ecx, dword [eax + 8]
movq qword [ebp - 0x474], xmm0
mov eax, dword [ebp - 0x470]
shr eax, 0x10
cwde
sub eax, esi
mov dword [ebp - 0x46c], ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 5
jg 0x4706e1
nop word [eax + eax]
mov ax, word [ebp - 0x46c]
cwde
sub eax, edi
cdq
xor eax, edx
sub eax, edx
cmp eax, 5
jg 0x4706e1
test byte [ebp - 0x470], 4
je 0x470754
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0xb98]
push eax
call fcn.0040e4f0
add esp, 4
movq xmm0, qword [eax]
mov ecx, dword [eax + 8]
movq qword [ebp - 0x474], xmm0
mov eax, dword [ebp - 0x470]
shr eax, 0x10
cwde
sub eax, esi
mov dword [ebp - 0x46c], ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 5
jle 0x470680
sub esp, 0xc
mov eax, esp
movq qword [eax], xmm0
mov dword [eax + 8], ecx
call fcn.00470380
mov edx, dword [0x5a9a5c]
add esp, 0xc
call fcn.0040e2d0
lea ecx, [ebp - 0xbb8]
call fcn.00401d60
mov dl, byte [ebp - 0x470]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x488], ecx
mov dword [ebp - 0x484], eax
test dl, 0x10
je 0x47076c
push 0x1001
push 0x553f60
push 0x553f98
push dword [0x5a9a5c]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dl, byte [ebp - 0x470]
cmp eax, 1
jne 0x47076c
mov byte [0x5a99bd], al
jmp 0x47076c
movsd xmm0, qword [0x561138]
movsd qword [0x5a9920], xmm0
jmp 0x470700
mov dl, byte [ebp - 0x470]
cmp byte [0x5a987c], 0
jne 0x470baf
mov eax, dword [0x5aa854]
test eax, eax
sete cl
test eax, eax
jne 0x47079b
cmp byte [0x5a6cbc], al
jne 0x470d8c
test cl, cl
je 0x470d8c
mov eax, dword [0x5a9940]
mov ecx, dword [0x5a993c]
lea esi, [eax - 0x60]
lea edi, [ecx - 0x37]
add ecx, 0xfffffff6
mov dword [ebp - 0x468], edi
cmp esi, eax
mov dword [ebp - 0x460], edi
mov edi, eax
cmovle edi, esi
cmovle esi, eax
mov dword [ebp - 0x478], edi
mov edi, dword [ebp - 0x468]
cmp edi, ecx
jle 0x4707dd
mov dword [ebp - 0x460], ecx
mov ecx, edi
movsx eax, word [ebp - 0x46e]
cmp eax, dword [ebp - 0x478]
jl 0x470d7f
cmp eax, esi
jg 0x470d7f
movsx eax, word [ebp - 0x46c]
cmp eax, dword [ebp - 0x460]
jl 0x470d7f
cmp eax, ecx
jg 0x470d7f
test dl, 4
je 0x470baf
nop dword [eax]
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x16e8]
push eax
call fcn.0040e4f0
mov ecx, dword [0x5a9940]
add esp, 4
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
lea edx, [ecx - 0x60]
mov dword [ebp - 0x46c], eax
mov eax, dword [0x5a993c]
movq qword [ebp - 0x474], xmm0
lea edi, [eax - 0x37]
lea esi, [eax - 0xa]
mov dword [ebp - 0x460], edi
mov eax, dword [ebp - 0x470]
shr eax, 0x10
cmp edx, ecx
cwde
mov dword [ebp - 0x468], eax
mov eax, ecx
cmovle eax, edx
cmovle edx, ecx
cmp edi, esi
jle 0x47088a
mov dword [ebp - 0x460], esi
mov esi, edi
mov ecx, dword [ebp - 0x468]
cmp ecx, eax
jl 0x470b99
cmp ecx, edx
jg 0x470b99
movsx eax, word [ebp - 0x46c]
cmp eax, dword [ebp - 0x460]
jl 0x470b99
cmp eax, esi
jg 0x470b99
test byte [ebp - 0x470], 4
jne 0x470820
xorps xmm0, xmm0
lea ecx, [ebp - 0x1c]
push 0x5a9994
movlpd qword [ebp - 0x1c], xmm0
call fcn.0041be10
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1c]
cmp dword [0x5aaa80], 0
setne byte [ebp - 0x459]
call fcn.0041bdd0
cmp byte [ebp - 0x459], 0
je 0x470924
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x18], 0
je 0x470ba4
push dword [ebp - 0x1c]
call fcn.004bd944
add esp, 4
jmp 0x470ba4
mov ecx, dword [0x5aa854]
test ecx, ecx
je 0x470a2a
mov esi, dword [0x5aa850]
dec ecx
add esi, ecx
mov ecx, 0x5aa844
push esi
call fcn.0041dfc0
push esi
mov edi, dword [eax + 0x70]
call fcn.0041dfc0
push esi
mov eax, dword [eax + 0x6c]
mov dword [ebp - 0x460], eax
call fcn.0041dfc0
cmp dword [eax + 0x6c], 2
jne 0x470983
cmp byte [0x5a987c], 0
jne 0x470983
push esi
call fcn.0041dfc0
mov edx, eax
mov ecx, 0x5a9b00
call fcn.004036f0
test al, al
je 0x47098d
mov ecx, 0x5aa844
call fcn.00478fe0
push ecx
lea ecx, [ebp - 0x1410]
call fcn.00479040
push ecx
mov ecx, eax
call fcn.00478f60
lea ecx, [ebp - 0x1410]
call fcn.00479020
mov ecx, dword [0x5aa854]
test ecx, ecx
je 0x470a14
mov eax, dword [0x5aa850]
dec ecx
add eax, ecx
mov ecx, 0x5aa844
push eax
call fcn.0041dfc0
push eax
mov ecx, 0x5a9b00
call fcn.004d0600
mov ecx, dword [0x5aa854]
mov eax, dword [0x5aa850]
dec ecx
add eax, ecx
mov ecx, 0x5aa844
push eax
call fcn.0041dfc0
add eax, 0x64
push eax
call fcn.00479370
mov ecx, dword [0x5aa854]
mov eax, dword [0x5aa850]
dec ecx
add eax, ecx
mov ecx, 0x5aa844
push eax
call fcn.0041dfc0
mov eax, dword [eax + 0x70]
jmp 0x470a49
cmp edi, 0xa
jg 0x470edd
cmp dword [ebp - 0x460], 2
je 0x470edd
push 1
xor edx, edx
mov ecx, 0x5a9b00
call fcn.0040b730
add esp, 4
call fcn.0041d340
mov byte [0x5a6cbc], 1
xor eax, eax
push 1
mov edx, 0x1000000
mov dword [0x5a9964], eax
mov ecx, 0x5a9b68
call fcn.0040b730
push 0xff
push 0x5a9b00
push 0
xor edx, edx
mov ecx, 0x5a9b68
call fcn.0040b950
add esp, 0x10
cmp byte [0x5a987c], 0
jne 0x470b63
push 0
mov dword [ebp - 0x44], 0x1ff0000
call dword [sym.imp.USER32.dll_GetDC]
mov ecx, 0x5a9b00
mov dword [ebp - 0xa8], 0
mov esi, eax
mov dword [ebp - 0xa4], 0
call fcn.004d0ac0
mov ecx, 0x5a9b00
mov dword [ebp - 0xa0], eax
call fcn.004d0ab0
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x88]
mov dword [ebp - 0x3f0], eax
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x3ec], eax
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x3e4], eax
lea eax, [ebp - 0x44]
push 0x5a9b68
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x3d4], 0
mov dword [ebp - 0x3f8], 0x28
mov dword [ebp - 0x3f4], esi
mov dword [ebp - 0x3e0], 0xffffff
mov dword [ebp - 0x3dc], eax
mov dword [ebp - 0x3d8], 2
call fcn.004cfe70
add esp, 4
mov dword [ebp - 0x3e8], eax
lea eax, [ebp - 0x3f8]
push eax
push dword [0x5a9a60]
call dword [sym.imp.USER32.dll_UpdateLayeredWindowIndirect]
jmp 0x470b7f
mov byte [0x5a9912], 1
mov byte [0x57bb8c], 1
mov byte [0x5a9874], 0
mov byte [0x5a987c], 0
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x18], 0
je 0x470ba4
push dword [ebp - 0x1c]
call fcn.004bd944
add esp, 4
jmp 0x470ba4
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov di, word [ebp - 0x46c]
cvttsd2si eax, qword [0x5a9928]
cmp eax, 1
jne 0x4778d7
mov eax, dword [0x5a9940]
mov ecx, dword [0x5a993c]
movsx edi, di
mov dword [ebp - 0x478], edi
mov edi, eax
lea edx, [eax - 0x60]
lea esi, [ecx - 0x9c]
add ecx, 0xffffffc4
cmp edx, eax
mov dword [ebp - 0x468], esi
mov dword [ebp - 0x460], esi
movsx esi, word [ebp - 0x46e]
cmovle edi, edx
cmovle edx, eax
mov dword [ebp - 0x480], edi
mov eax, dword [ebp - 0x468]
mov edi, dword [ebp - 0x478]
cmp eax, ecx
jle 0x470c22
mov dword [ebp - 0x460], ecx
mov ecx, eax
cmp esi, dword [ebp - 0x480]
jl 0x471402
cmp esi, edx
mov dl, byte [ebp - 0x470]
jg 0x471408
cmp edi, dword [ebp - 0x460]
jl 0x471408
cmp edi, ecx
jg 0x471408
test dl, 4
je 0x470d42
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0xb88]
push eax
call fcn.0040e4f0
add esp, 4
movq xmm0, qword [eax]
mov ecx, dword [eax + 8]
movq qword [ebp - 0x474], xmm0
mov eax, dword [ebp - 0x470]
shr eax, 0x10
cwde
sub eax, esi
mov dword [ebp - 0x46c], ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 5
jg 0x470d01
nop dword [eax]
mov ax, word [ebp - 0x46c]
cwde
sub eax, edi
cdq
xor eax, edx
sub eax, edx
cmp eax, 5
jg 0x470d01
test byte [ebp - 0x470], 4
je 0x4713e2
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0xb88]
push eax
call fcn.0040e4f0
add esp, 4
movq xmm0, qword [eax]
mov ecx, dword [eax + 8]
movq qword [ebp - 0x474], xmm0
mov eax, dword [ebp - 0x470]
shr eax, 0x10
cwde
sub eax, esi
mov dword [ebp - 0x46c], ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 5
jle 0x470ca0
sub esp, 0xc
mov eax, esp
movq qword [eax], xmm0
mov dword [eax + 8], ecx
call fcn.00470380
mov edx, dword [0x5a9a5c]
add esp, 0xc
call fcn.0040e2d0
lea ecx, [ebp - 0x1398]
call fcn.00401d60
mov dl, byte [ebp - 0x470]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x488], ecx
mov dword [ebp - 0x484], eax
test dl, 0x10
je 0x471408
push 0x1001
push 0x554010
push str._fTsQ
push dword [0x5a9a5c]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dl, byte [ebp - 0x470]
cmp eax, 1
jne 0x471408
mov byte [0x5a99bd], al
jmp 0x471408
cmp dword [0x5aa854], 0
jne 0x470baf
mov eax, dword [0x5a9954]
inc eax
cmp dword [0x5a994c], eax
jg 0x470baf
cmp dword [0x5a9950], 0
je 0x470baf
mov eax, dword [0x5a9940]
mov ecx, dword [0x5a993c]
lea esi, [eax - 0x60]
lea edi, [ecx - 0x37]
add ecx, 0xfffffff6
mov dword [ebp - 0x468], edi
cmp esi, eax
mov dword [ebp - 0x460], edi
mov edi, eax
cmovle edi, esi
cmovle esi, eax
mov dword [ebp - 0x478], edi
mov edi, dword [ebp - 0x468]
cmp edi, ecx
jle 0x470ded
mov dword [ebp - 0x460], ecx
mov ecx, edi
movsx eax, word [ebp - 0x46e]
mov di, word [ebp - 0x46c]
cmp eax, dword [ebp - 0x478]
jl 0x470bb6
cmp eax, esi
jg 0x470bb6
movsx eax, di
cmp eax, dword [ebp - 0x460]
jl 0x470bb6
cmp eax, ecx
jg 0x470bb6
test dl, 4
je 0x470bb6
nop
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x16d8]
push eax
call fcn.0040e4f0
mov ecx, dword [0x5a9940]
add esp, 4
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
lea edx, [ecx - 0x60]
mov dword [ebp - 0x46c], eax
mov eax, dword [0x5a993c]
movq qword [ebp - 0x474], xmm0
lea edi, [eax - 0x37]
lea esi, [eax - 0xa]
mov dword [ebp - 0x460], edi
mov eax, dword [ebp - 0x470]
shr eax, 0x10
cmp edx, ecx
cwde
mov dword [ebp - 0x468], eax
mov eax, ecx
cmovle eax, edx
cmovle edx, ecx
cmp edi, esi
jle 0x470e9a
mov dword [ebp - 0x460], esi
mov esi, edi
mov ecx, dword [ebp - 0x468]
mov di, word [ebp - 0x46c]
cmp ecx, eax
jl 0x4713c7
cmp ecx, edx
jg 0x4713c7
movsx eax, di
cmp eax, dword [ebp - 0x460]
jl 0x4713c7
cmp eax, esi
jg 0x4713c7
test byte [ebp - 0x470], 4
jne 0x470e30
jmp 0x470efc
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x18], 0
je 0x470ef5
push dword [ebp - 0x1c]
call fcn.004bd944
add esp, 4
mov di, word [ebp - 0x46c]
mov eax, dword [0x5a9954]
inc eax
cmp dword [0x5a994c], eax
jne 0x470f2f
mov edx, dword [0x5a9a5c]
mov byte [0x5a987c], 1
mov byte [0x57bb8c], 0
mov byte [0x5a9874], 0
call fcn.0040e2d0
jmp 0x470bb6
push 0x553f84
mov ecx, 0x5aa620
call fcn.00491990
mov ecx, dword [0x5a994c]
dec ecx
push ecx
mov ecx, eax
call fcn.00491210
push 0x553fc4
mov ecx, eax
call fcn.00491990
push 4
sub esp, 0x18
mov ecx, eax
push esp
call fcn.00490340
lea ecx, [ebp - 0x14d4]
call fcn.004a4b80
add esp, 0x18
mov ecx, eax
call fcn.00406cd0
push eax
call fcn.004e2a61
add esp, 8
lea ecx, [ebp - 0x14d4]
mov esi, eax
call fcn.00406e20
cmp esi, 0xffffffff
je 0x4713d2
push 0x553fb0
mov ecx, 0x5aa620
call fcn.00491990
mov ecx, dword [0x5a994c]
dec ecx
push ecx
mov ecx, eax
call fcn.00491210
push 0x553fd0
mov ecx, eax
call fcn.00491990
sub esp, 0x1c
mov ecx, eax
push esp
call fcn.00490340
lea ecx, [ebp - 0x14ec]
call fcn.004a4b80
add esp, 0x18
push eax
lea ecx, [ebp - 0xc8]
mov dword [ebp - 4], 1
call fcn.00479ed0
lea ecx, [ebp - 0x14ec]
mov byte [ebp - 4], 3
call fcn.00406e20
lea eax, [ebp - 0x151c]
push eax
lea ecx, [ebp - 0xc8]
call fcn.00421a70
lea ecx, [ebp - 0x1504]
mov byte [ebp - 4], 4
push ecx
mov ecx, eax
call fcn.00421b40
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 5
push ecx
mov ecx, eax
call fcn.00421a50
lea ecx, [ebp - 0x1504]
call fcn.0040ad30
lea ecx, [ebp - 0x151c]
mov byte [ebp - 4], 8
call fcn.0040ad30
lea eax, [ebp - 0x1534]
push eax
lea ecx, [ebp - 0xc8]
call fcn.00421bb0
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 9
push ecx
mov ecx, eax
call fcn.00421a50
lea ecx, [ebp - 0x1534]
mov byte [ebp - 4], 0xb
call fcn.0040ad30
push 0xa8
lea eax, [ebp - 0x3a8]
push 0
push eax
call fcn.004d73b0
push 0x553fcc
lea edx, [ebp - 0x140]
lea ecx, [ebp - 0x1564]
call fcn.00479e50
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0xc
push ecx
mov edx, eax
lea ecx, [ebp - 0x154c]
call fcn.00479f00
add esp, 0xc
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x3a8]
push eax
call fcn.00478e10
lea ecx, [ebp - 0x154c]
call fcn.0040ad30
lea ecx, [ebp - 0x1564]
mov byte [ebp - 4], 0x10
call fcn.0040ad30
push 0x553fec
mov edx, 0x5a9970
lea ecx, [ebp - 0x14bc]
call fcn.00479f70
add esp, 4
lea ecx, [ebp - 0x3a8]
mov edx, eax
call fcn.00479fa0
xorps xmm0, xmm0
mov dword [0x5a9948], 0x1f4
push 0x5a9994
lea ecx, [ebp - 0x24]
movlpd qword [ebp - 0x24], xmm0
call fcn.0041be10
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x24]
cmp dword [0x5aaa80], 0
setne byte [ebp - 0x459]
call fcn.0041bdd0
cmp byte [ebp - 0x459], 0
je 0x4711ab
cmp byte [ebp - 0x20], 0
je 0x471168
push dword [ebp - 0x24]
call fcn.004bd944
add esp, 4
lea ecx, [ebp - 0x3a8]
call fcn.00477910
lea ecx, [ebp - 0xf8]
call fcn.0040ad30
lea ecx, [ebp - 0x140]
call fcn.0040ad30
lea ecx, [ebp - 0xc8]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ad30
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
jmp 0x470bb6
push 0x64
lea eax, [ebp - 0x258]
push 0
push eax
call fcn.004d73b0
add esp, 0xc
lea ecx, [ebp - 0x258]
push 0
push 0
call fcn.004d0180
push 0x553fd8
mov ecx, 0x5aa620
mov byte [ebp - 4], 0x12
call fcn.00491990
mov ecx, dword [0x5a994c]
dec ecx
push ecx
mov ecx, eax
call fcn.00491210
push 0x55401c
mov ecx, eax
call fcn.00491990
push 0
push 0
push 0
sub esp, 0x18
mov ecx, eax
push esp
call fcn.00490340
lea ecx, [ebp - 0x1594]
call fcn.004a4b80
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x157c]
call fcn.004a46c0
mov ecx, eax
mov byte [ebp - 4], 0x14
call fcn.0040ad20
push eax
lea eax, [ebp - 0x258]
push eax
call fcn.004cffb0
add esp, 0x14
lea ecx, [ebp - 0x157c]
call fcn.0040ad30
lea ecx, [ebp - 0x1594]
mov byte [ebp - 4], 0x12
call fcn.00406e20
lea eax, [ebp - 0x258]
mov ecx, 0x5a9b00
push eax
call fcn.004d0600
lea ecx, [ebp - 0xb2c]
call fcn.00403cf0
push eax
call fcn.00479330
lea ecx, [ebp - 0xb2c]
call fcn.00403d30
inc dword [0x5a994c]
mov edx, 0x1000000
push 1
mov ecx, 0x5a9b68
call fcn.0040b730
push 0xff
push 0x5a9b00
push 0
xor edx, edx
mov ecx, 0x5a9b68
call fcn.0040b950
add esp, 0x10
cmp byte [0x57bb8c], 0
je 0x47139b
push 0
mov dword [ebp - 0x48], 0x1ff0000
call dword [sym.imp.USER32.dll_GetDC]
mov ecx, 0x5a9b00
mov dword [ebp - 0x60], 0
mov esi, eax
mov dword [ebp - 0x5c], 0
call fcn.004d0ac0
mov ecx, 0x5a9b00
mov dword [ebp - 0x58], eax
call fcn.004d0ab0
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x50]
mov dword [ebp - 0x3c8], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x3c4], eax
lea eax, [ebp - 0x60]
mov dword [ebp - 0x3bc], eax
lea eax, [ebp - 0x48]
push 0x5a9b68
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x3ac], 0
mov dword [ebp - 0x3d0], 0x28
mov dword [ebp - 0x3cc], esi
mov dword [ebp - 0x3b8], 0xffffff
mov dword [ebp - 0x3b4], eax
mov dword [ebp - 0x3b0], 2
call fcn.004cfe70
add esp, 4
mov dword [ebp - 0x3c0], eax
lea eax, [ebp - 0x3d0]
push eax
push dword [0x5a9a60]
call dword [sym.imp.USER32.dll_UpdateLayeredWindowIndirect]
lea ecx, [ebp - 0x258]
call fcn.004d0520
jmp 0x471157
lea ecx, [ebp - 0x258]
mov byte [0x5a9912], 1
mov byte [0x57bb8c], 1
mov byte [0x5a9874], 0
mov byte [0x5a987c], 0
call fcn.004d0520
jmp 0x471157
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
jmp 0x470bb6
movsd xmm0, qword [0x561138]
movsd qword [0x5a9928], xmm0
xorps xmm0, xmm0
movsd qword [0x5a9920], xmm0
jmp 0x470d20
mov dl, byte [ebp - 0x470]
cmp byte [0x5a987c], 0
jne 0x4715b4
mov eax, dword [0x5a9940]
mov ecx, dword [0x5a993c]
lea esi, [eax - 0x5c]
add eax, 0xfffffffc
lea edi, [ecx - 0xf8]
add ecx, 0xffffff30
mov dword [ebp - 0x468], edi
cmp esi, eax
mov dword [ebp - 0x460], edi
mov edi, eax
cmovle edi, esi
cmovle esi, eax
mov dword [ebp - 0x478], edi
mov edi, dword [ebp - 0x468]
cmp edi, ecx
jle 0x471460
mov dword [ebp - 0x460], ecx
mov ecx, edi
movsx eax, word [ebp - 0x46e]
cmp eax, dword [ebp - 0x478]
jl 0x4715b4
cmp eax, esi
jg 0x4715b4
movsx eax, word [ebp - 0x46c]
cmp eax, dword [ebp - 0x460]
jl 0x4715b4
cmp eax, ecx
jg 0x4715b4
test dl, 4
je 0x4715b4
nop
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x14b0]
push eax
call fcn.0040e4f0
mov ecx, dword [0x5a9940]
add esp, 4
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
lea edx, [ecx - 0x5c]
mov dword [ebp - 0x554], eax
add ecx, 0xfffffffc
mov eax, dword [0x5a993c]
movq qword [ebp - 0x55c], xmm0
lea edi, [eax - 0xf8]
lea esi, [eax - 0xd0]
mov dword [ebp - 0x460], edi
mov eax, dword [ebp - 0x558]
shr eax, 0x10
cmp edx, ecx
cwde
mov dword [ebp - 0x468], eax
mov eax, ecx
cmovle eax, edx
cmovle edx, ecx
cmp edi, esi
jle 0x471513
mov dword [ebp - 0x460], esi
mov esi, edi
mov ecx, dword [ebp - 0x468]
cmp ecx, eax
jl 0x471582
cmp ecx, edx
jg 0x471582
movsx eax, word [ebp - 0x554]
cmp eax, dword [ebp - 0x460]
jl 0x471582
cmp eax, esi
jg 0x471582
test byte [ebp - 0x558], 4
jne 0x4714a0
cmp byte [0x5a986d], 0
je 0x471566
cmp dword [0x5a988c], 2
mov byte [0x5a986d], 0
jne 0x47158d
mov dword [0x5a988c], 1
jmp 0x47158d
cmp dword [0x5a988c], 1
jne 0x471579
mov dword [0x5a988c], 2
mov byte [0x5a986d], 1
jmp 0x47158d
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
lea ecx, [ebp - 0x13a0]
call fcn.00401d60
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x488], ecx
mov dword [ebp - 0x484], eax
cmp dword [0x5a9a58], 0
jne 0x471752
mov eax, dword [0x5a9940]
mov ecx, dword [0x5a993c]
lea edx, [eax - 0x5c]
add eax, 0xfffffffc
lea esi, [ecx - 0xce]
mov edi, eax
add ecx, 0xffffff5a
mov dword [ebp - 0x460], esi
cmp edx, eax
cmovle edi, edx
cmovle edx, eax
cmp esi, ecx
jle 0x4715fa
mov dword [ebp - 0x460], ecx
mov ecx, esi
movsx eax, word [ebp - 0x46e]
cmp eax, edi
jl 0x471752
cmp eax, edx
jg 0x471752
movsx eax, word [ebp - 0x46c]
cmp eax, dword [ebp - 0x460]
jl 0x471752
cmp eax, ecx
jg 0x471752
test byte [ebp - 0x470], 4
je 0x471752
nop dword [eax]
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x14a0]
push eax
call fcn.0040e4f0
mov ecx, dword [0x5a9940]
add esp, 4
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
lea edx, [ecx - 0x5c]
mov dword [ebp - 0x560], eax
add ecx, 0xfffffffc
mov eax, dword [0x5a993c]
movq qword [ebp - 0x568], xmm0
lea edi, [eax - 0xce]
lea esi, [eax - 0xa6]
mov dword [ebp - 0x460], edi
mov eax, dword [ebp - 0x564]
shr eax, 0x10
cmp edx, ecx
cwde
mov dword [ebp - 0x468], eax
mov eax, ecx
cmovle eax, edx
cmovle edx, ecx
cmp edi, esi
jle 0x4716b3
mov dword [ebp - 0x460], esi
mov esi, edi
mov ecx, dword [ebp - 0x468]
cmp ecx, eax
jl 0x471720
cmp ecx, edx
jg 0x471720
movsx eax, word [ebp - 0x560]
cmp eax, dword [ebp - 0x460]
jl 0x471720
cmp eax, esi
jg 0x471720
test byte [ebp - 0x564], 4
jne 0x471640
cmp dword [0x5a988c], 1
je 0x47170d
cmp byte [0x5a987c], 1
mov byte [0x5a986d], 0
jne 0x471701
mov byte [0x5a9888], 1
mov dword [0x5a988c], 1
jmp 0x47172b
mov dword [0x5a988c], 0
mov byte [0x5a9888], 0
jmp 0x47172b
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
lea ecx, [ebp - 0x13a8]
call fcn.00401d60
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x488], ecx
mov dword [ebp - 0x484], eax
mov ecx, dword [0x5a993c]
movsx edi, word [ebp - 0x46e]
movsx esi, word [ebp - 0x46c]
mov dword [ebp - 0x480], esi
lea edx, [ecx - 0x94]
mov dword [ebp - 0x47c], edi
lea eax, [ecx - 0x44]
cmp edx, eax
mov ecx, eax
cmovle ecx, edx
cmovle edx, eax
cmp edi, 8
jl 0x4718d3
cmp edi, 0x58
jg 0x4718d3
cmp esi, ecx
jl 0x4718d3
cmp esi, edx
jg 0x4718d3
test byte [ebp - 0x470], 4
je 0x4718d3
nop dword [eax]
nop dword [eax + eax]
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x1490]
push eax
call fcn.0040e4f0
add esp, 4
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x56c], eax
mov eax, dword [0x5a993c]
movsx edi, word [ebp - 0x56c]
movq qword [ebp - 0x574], xmm0
lea edx, [eax - 0x94]
lea ecx, [eax - 0x44]
mov eax, dword [ebp - 0x570]
shr eax, 0x10
mov esi, ecx
cmp edx, ecx
cwde
cmovle esi, edx
cmovle edx, ecx
add eax, 0xfffffff8
cmp eax, 0x50
ja 0x4718b1
cmp edi, esi
jl 0x4718b1
cmp edi, edx
jg 0x4718b1
test byte [ebp - 0x570], 4
jne 0x4717c0
cmp byte [0x5a987c], 0
jne 0x471892
cmp byte [0x5a9888], 0
movsd xmm0, qword [0x561138]
movsd qword [0x5a9928], xmm0
je 0x471863
cmp byte [0x5a986d], 0
je 0x471874
mov dword [0x5a988c], 0
mov byte [0x5a9888], 0
mov byte [0x57bb8c], 0
mov byte [0x5a9874], 0
mov byte [0x5a987c], 1
mov byte [0x5a986d], 0
jmp 0x4718bc
mov al, byte [0x5a987d]
cmp al, 1
jne 0x4718a4
mov byte [0x5a987d], 0
jmp 0x4718bc
test al, al
jne 0x4718bc
mov byte [0x5a987d], 1
jmp 0x4718bc
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov esi, dword [ebp - 0x480]
mov edi, dword [ebp - 0x47c]
mov ecx, dword [0x5a993c]
lea edx, [ecx - 0x94]
lea eax, [ecx - 0x44]
cmp edx, eax
mov ecx, eax
cmovle ecx, edx
cmovle edx, eax
cmp edi, 0x68
jl 0x471c43
cmp edi, 0xb8
jg 0x471c43
cmp esi, ecx
jl 0x471c43
cmp esi, edx
jg 0x471c43
test byte [ebp - 0x470], 4
je 0x471b1a
mov dword [ebp - 0x48c], 0
nop dword [eax + eax]
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x1480]
push eax
call fcn.0040e4f0
add esp, 4
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x578], eax
mov eax, dword [0x5a993c]
movsx esi, word [ebp - 0x578]
movq qword [ebp - 0x580], xmm0
lea edx, [eax - 0x94]
lea ecx, [eax - 0x44]
mov eax, dword [ebp - 0x57c]
shr eax, 0x10
mov edi, ecx
cmp edx, ecx
cwde
cmovle edi, edx
cmovle edx, ecx
add eax, 0xffffff98
cmp eax, 0x50
ja 0x471b04
cmp esi, edi
jl 0x471b04
cmp esi, edx
jg 0x471b04
mov ecx, dword [ebp - 0x480]
sub ecx, esi
mov eax, ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x14
jl 0x471a1f
movsd xmm0, qword [0x5a9928]
ucomisd xmm0, qword [0x561138]
mov dword [ebp - 0x48c], 1
lahf
test ah, 0x44
jp 0x471930
cmp byte [0x5a9a04], 0
movsd xmm0, qword [0x561148]
mov byte [0x57bb8c], 1
mov byte [0x5a9874], 0
mov byte [0x5a987c], 0
movsd qword [0x5a9928], xmm0
je 0x471930
mov byte [0x5a986d], 0
mov dword [0x5a988c], 1
jmp 0x471930
test byte [ebp - 0x57c], 4
jne 0x471930
cmp byte [0x57bb8c], 0
jne 0x471a7d
cmp byte [0x5a9a04], 0
movsd xmm0, qword [0x561138]
movsd qword [0x5a9928], xmm0
mov byte [0x57bb8c], 1
mov byte [0x5a9874], 0
mov byte [0x5a987c], 0
je 0x471b0f
mov byte [0x5a986d], 0
mov dword [0x5a988c], 1
jmp 0x471b0f
movsd xmm0, qword [0x5a9928]
movsd xmm1, qword [0x561138]
ucomisd xmm0, xmm1
lahf
test ah, 0x44
jp 0x471aaf
movsd xmm0, qword [0x561148]
lea ecx, [ebp - 0x13b0]
movsd qword [0x5a9928], xmm0
jmp 0x471aec
ucomisd xmm0, qword [0x561148]
lahf
test ah, 0x44
jnp 0x471ad9
ucomisd xmm0, qword [0x561150]
lahf
test ah, 0x44
jnp 0x471ad9
ucomisd xmm0, qword [0x561158]
lahf
test ah, 0x44
jp 0x471b0f
cmp ecx, 0x14
jge 0x471b0f
movsd qword [0x5a9928], xmm1
lea ecx, [ebp - 0x13b8]
call fcn.00401d60
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x488], ecx
mov dword [ebp - 0x484], eax
jmp 0x471b0f
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edi, dword [ebp - 0x480]
cmp byte [0x5a9874], 0
jne 0x4769ee
mov ecx, dword [0x5a993c]
lea eax, [ecx - 0x44]
lea edx, [ecx - 0x94]
mov ecx, eax
cmp edx, eax
cmovle ecx, edx
cmovle edx, eax
mov eax, dword [ebp - 0x47c]
cmp eax, 0xc8
jl 0x4769ee
cmp eax, 0x118
jg 0x4769ee
cmp edi, ecx
jl 0x4769ee
cmp edi, edx
mov dl, byte [ebp - 0x470]
jg 0x4769f4
test dl, 4
je 0x4769f4
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x1720]
push eax
call fcn.0040e4f0
add esp, 4
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x5cc], eax
mov eax, dword [0x5a993c]
movsx edi, word [ebp - 0x5cc]
movq qword [ebp - 0x5d4], xmm0
lea edx, [eax - 0x94]
lea ecx, [eax - 0x44]
mov eax, dword [ebp - 0x5d0]
shr eax, 0x10
mov esi, ecx
cmp edx, ecx
cwde
cmovle esi, edx
cmovle edx, ecx
add eax, 0xffffff38
cmp eax, 0x50
ja 0x4769d8
cmp edi, esi
jl 0x4769d8
cmp edi, edx
jg 0x4769d8
test byte [ebp - 0x5d0], 4
jne 0x471b81
cmp byte [0x5a9a04], 0
movsd xmm0, qword [0x561138]
movsd qword [0x5a9928], xmm0
mov byte [0x5a9874], 1
mov byte [0x57bb8c], 0
mov byte [0x5a987c], 0
je 0x4769e3
mov byte [0x5a986d], 0
mov dword [0x5a988c], 1
jmp 0x4769e3
movsd xmm0, qword [0x5a9928]
ucomisd xmm0, qword [0x561148]
lahf
test ah, 0x44
jnp 0x471ca1
movsd xmm2, qword [0x561150]
movsd xmm1, qword [0x561158]
ucomisd xmm0, xmm2
lahf
test ah, 0x44
jnp 0x471c81
ucomisd xmm0, xmm1
lahf
test ah, 0x44
jp 0x471b1a
movsd xmm0, qword [0x5a9928]
ucomisd xmm0, xmm2
lahf
test ah, 0x44
jnp 0x471ca1
ucomisd xmm0, xmm1
lahf
test ah, 0x44
jp 0x471f1e
push 0x1a
xorps xmm0, xmm0
mov dword [ebp - 0x72c], 0
push 0x554024
lea ecx, [ebp - 0x73c]
mov dword [ebp - 0x728], 0
movups xmmword [ebp - 0x73c], xmm0
call fcn.0040d160
mov dword [ebp - 4], 0x15
lea eax, [ebp - 0x73c]
mov esi, dword [ebp - 0x464]
mov ecx, 0x5a9bd4
or esi, 1
push eax
mov dword [ebp - 0x478], esi
call fcn.004791c0
push 0x1a
xorps xmm0, xmm0
lea ecx, [ebp - 0x724]
push 0x5540ac
cvttss2si eax, dword [eax]
mov dword [ebp - 0x714], 0
mov dword [ebp - 0x710], 0
movups xmmword [ebp - 0x724], xmm0
mov dword [ebp - 0x468], eax
call fcn.0040d160
lea eax, [ebp - 0x724]
mov dword [ebp - 4], 0x16
or esi, 2
mov ecx, 0x5a9bd4
push eax
mov dword [ebp - 0x478], esi
call fcn.004791c0
push 0x1a
xorps xmm0, xmm0
lea ecx, [ebp - 0x70c]
push 0x554074
cvttss2si eax, dword [eax]
mov dword [ebp - 0x6fc], 0
mov dword [ebp - 0x6f8], 0
movups xmmword [ebp - 0x70c], xmm0
mov dword [ebp - 0x460], eax
call fcn.0040d160
mov dword [ebp - 4], 0x17
lea ecx, [ebp - 0x6f4]
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x6e4], 0
or esi, 4
mov dword [ebp - 0x6e0], 0
push 0x55411c
mov dword [ebp - 0x478], esi
movups xmmword [ebp - 0x6f4], xmm0
call fcn.0040d160
lea eax, [ebp - 0x6f4]
mov dword [ebp - 4], 0x18
or esi, 8
mov ecx, 0x5a9bd4
push eax
mov dword [ebp - 0x464], esi
mov dword [ebp - 0x478], esi
call fcn.004791c0
mov esi, eax
mov ecx, 0x5a9bd4
lea eax, [ebp - 0x70c]
push eax
call fcn.004791c0
movss xmm0, dword [esi]
lea ecx, [ebp - 0x6dc]
push 0x1a
push 0x5540e4
addss xmm0, dword [eax]
mov dword [ebp - 0x6cc], 0
mov dword [ebp - 0x6c8], 0
cvttss2si edi, xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x6dc], xmm0
call fcn.0040d160
mov dword [ebp - 4], 0x19
lea ecx, [ebp - 0x604]
mov esi, dword [ebp - 0x464]
xorps xmm0, xmm0
push 0x1f
or esi, 0x10
mov dword [ebp - 0x5f4], 0
push 0x554198
mov dword [ebp - 0x478], esi
movups xmmword [ebp - 0x604], xmm0
mov dword [ebp - 0x5f0], 0
call fcn.0040d160
lea eax, [ebp - 0x604]
mov dword [ebp - 4], 0x1a
or esi, 0x20
mov ecx, 0x5a9bd4
push eax
mov dword [ebp - 0x464], esi
mov dword [ebp - 0x478], esi
call fcn.004791c0
mov esi, eax
mov ecx, 0x5a9bd4
lea eax, [ebp - 0x6dc]
push eax
call fcn.004791c0
movss xmm0, dword [esi]
mov esi, edi
mov edx, dword [ebp - 0x468]
cmp edx, edi
mov ecx, dword [ebp - 0x460]
addss xmm0, dword [eax]
cmovle esi, edx
cmovle edx, edi
mov dword [ebp - 0x468], esi
mov esi, ecx
cvttss2si eax, xmm0
cmp esi, eax
jle 0x471ef5
mov ecx, eax
mov eax, esi
mov esi, dword [ebp - 0x47c]
mov edi, dword [ebp - 0x480]
cmp esi, dword [ebp - 0x468]
jl 0x471f2a
cmp esi, edx
jg 0x471f2a
cmp edi, ecx
jl 0x471f2a
cmp edi, eax
jg 0x471f2a
mov byte [ebp - 0x459], 1
jmp 0x471f31
mov edi, dword [ebp - 0x480]
mov esi, dword [ebp - 0x47c]
mov byte [ebp - 0x459], 0
mov dword [ebp - 4], 0x19
mov eax, dword [ebp - 0x464]
test al, 0x20
je 0x471fae
mov ecx, dword [ebp - 0x5f0]
and eax, 0xffffffdf
mov dword [ebp - 0x464], eax
cmp ecx, 7
jbe 0x471f91
mov edx, dword [ebp - 0x604]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x471f81
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
mov eax, dword [ebp - 0x464]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x5f4], 0
mov dword [ebp - 0x5f0], 7
mov word [ebp - 0x604], cx
mov dword [ebp - 4], 0x18
test al, 0x10
je 0x472025
mov ecx, dword [ebp - 0x6c8]
and eax, 0xffffffef
mov dword [ebp - 0x464], eax
cmp ecx, 7
jbe 0x472008
mov edx, dword [ebp - 0x6dc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x471ff8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
mov eax, dword [ebp - 0x464]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x6cc], 0
mov dword [ebp - 0x6c8], 7
mov word [ebp - 0x6dc], cx
mov dword [ebp - 4], 0x17
test al, 8
je 0x47209c
mov ecx, dword [ebp - 0x6e0]
and eax, 0xfffffff7
mov dword [ebp - 0x464], eax
cmp ecx, 7
jbe 0x47207f
mov edx, dword [ebp - 0x6f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47206f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
mov eax, dword [ebp - 0x464]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x6e4], 0
mov dword [ebp - 0x6e0], 7
mov word [ebp - 0x6f4], cx
mov dword [ebp - 4], 0x16
test al, 4
je 0x472113
mov ecx, dword [ebp - 0x6f8]
and eax, 0xfffffffb
mov dword [ebp - 0x464], eax
cmp ecx, 7
jbe 0x4720f6
mov edx, dword [ebp - 0x70c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4720e6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
mov eax, dword [ebp - 0x464]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x6fc], 0
mov dword [ebp - 0x6f8], 7
mov word [ebp - 0x70c], cx
mov dword [ebp - 4], 0x15
test al, 2
je 0x47218a
mov ecx, dword [ebp - 0x710]
and eax, 0xfffffffd
mov dword [ebp - 0x464], eax
cmp ecx, 7
jbe 0x47216d
mov edx, dword [ebp - 0x724]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47215d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
mov eax, dword [ebp - 0x464]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x714], 0
mov dword [ebp - 0x710], 7
mov word [ebp - 0x724], cx
mov dword [ebp - 4], 0xffffffff
test al, 1
je 0x4721fb
mov ecx, dword [ebp - 0x728]
and eax, 0xfffffffe
mov dword [ebp - 0x464], eax
cmp ecx, 7
jbe 0x4721de
mov edx, dword [ebp - 0x73c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4721d4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 0x72c], 0
mov dword [ebp - 0x728], 7
mov word [ebp - 0x73c], ax
cmp byte [ebp - 0x459], 0
je 0x472769
test byte [ebp - 0x470], 4
je 0x476693
nop word [eax + eax]
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x1470]
push eax
call fcn.0040e4f0
add esp, 4
lea ecx, [ebp - 0x7cc]
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ebp - 0x58c], xmm0
xorps xmm0, xmm0
push 0x1a
push 0x55415c
mov dword [ebp - 0x584], eax
movups xmmword [ebp - 0x7cc], xmm0
mov dword [ebp - 0x7bc], 0
mov dword [ebp - 0x7b8], 0
call fcn.0040d160
lea eax, [ebp - 0x7cc]
mov dword [ebp - 4], 0x1b
push eax
mov ecx, 0x5a9bd4
call fcn.004791c0
push 0x1a
xorps xmm0, xmm0
lea ecx, [ebp - 0x7b4]
push 0x554210
cvttss2si eax, dword [eax]
mov dword [ebp - 0x7a4], 0
mov dword [ebp - 0x7a0], 0
movups xmmword [ebp - 0x7b4], xmm0
mov dword [ebp - 0x468], eax
call fcn.0040d160
lea eax, [ebp - 0x7b4]
mov byte [ebp - 4], 0x1c
push eax
mov ecx, 0x5a9bd4
call fcn.004791c0
push 0x1a
xorps xmm0, xmm0
lea ecx, [ebp - 0x79c]
push str.RoundRect_PaintThickness_x
cvttss2si eax, dword [eax]
mov dword [ebp - 0x78c], 0
mov dword [ebp - 0x788], 0
movups xmmword [ebp - 0x79c], xmm0
mov dword [ebp - 0x460], eax
call fcn.0040d160
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x784]
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x774], 0
push str.RoundRect_PaintThickness_width
movups xmmword [ebp - 0x784], xmm0
mov dword [ebp - 0x770], 0
call fcn.0040d160
lea eax, [ebp - 0x784]
mov byte [ebp - 4], 0x1e
push eax
mov ecx, 0x5a9bd4
call fcn.004791c0
mov esi, eax
mov ecx, 0x5a9bd4
lea eax, [ebp - 0x79c]
push eax
call fcn.004791c0
movss xmm0, dword [esi]
lea ecx, [ebp - 0x76c]
push 0x1a
push str.RoundRect_PaintThickness_y
addss xmm0, dword [eax]
mov dword [ebp - 0x75c], 0
mov dword [ebp - 0x758], 0
cvttss2si edi, xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x76c], xmm0
call fcn.0040d160
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x754]
push 0x1f
xorps xmm0, xmm0
mov dword [ebp - 0x744], 0
push str.RoundRect_PaintThickness_height
movups xmmword [ebp - 0x754], xmm0
mov dword [ebp - 0x740], 0
call fcn.0040d160
lea eax, [ebp - 0x754]
mov byte [ebp - 4], 0x20
push eax
mov ecx, 0x5a9bd4
call fcn.004791c0
mov esi, eax
mov ecx, 0x5a9bd4
lea eax, [ebp - 0x76c]
push eax
call fcn.004791c0
movss xmm0, dword [esi]
mov ecx, edi
mov esi, dword [ebp - 0x468]
cmp esi, edi
mov edx, dword [ebp - 0x460]
addss xmm0, dword [eax]
cmovle ecx, esi
cmovle esi, edi
mov edi, edx
mov dword [ebp - 0x478], ecx
movsx ecx, word [ebp - 0x586]
mov dword [ebp - 0x468], esi
movsx esi, word [ebp - 0x584]
cvttss2si eax, xmm0
cmp edi, eax
jle 0x472455
mov edx, eax
mov eax, edi
cmp ecx, dword [ebp - 0x478]
jl 0x472474
cmp ecx, dword [ebp - 0x468]
jg 0x472474
cmp esi, edx
jl 0x472474
mov byte [ebp - 0x459], 1
cmp esi, eax
jle 0x47247b
mov byte [ebp - 0x459], 0
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x740]
cmp ecx, 7
jbe 0x4724bf
mov edx, dword [ebp - 0x754]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4724b5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x758]
mov dword [ebp - 0x744], 0
mov dword [ebp - 0x740], 7
mov word [ebp - 0x754], ax
cmp ecx, 7
jbe 0x472520
mov edx, dword [ebp - 0x76c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x472516
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x75c], 0
mov dword [ebp - 0x758], 7
mov word [ebp - 0x76c], ax
cmp ecx, 7
jbe 0x472581
mov edx, dword [ebp - 0x784]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x472577
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x774], 0
mov dword [ebp - 0x770], 7
mov word [ebp - 0x784], ax
cmp ecx, 7
jbe 0x4725e2
mov edx, dword [ebp - 0x79c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4725d8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x7a0]
mov dword [ebp - 0x78c], 0
mov dword [ebp - 0x788], 7
mov word [ebp - 0x79c], ax
cmp ecx, 7
jbe 0x472643
mov edx, dword [ebp - 0x7b4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x472639
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x7b8]
mov dword [ebp - 0x7a4], 0
mov dword [ebp - 0x7a0], 7
mov word [ebp - 0x7b4], ax
cmp ecx, 7
jbe 0x4726a7
mov edx, dword [ebp - 0x7cc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47269d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 0x7bc], 0
mov dword [ebp - 0x7b8], 7
mov word [ebp - 0x7cc], ax
cmp byte [ebp - 0x459], al
je 0x472748
test byte [ebp - 0x588], 4
jne 0x472220
movsd xmm0, qword [0x5a9928]
movsd xmm1, qword [0x561148]
ucomisd xmm0, xmm1
lahf
test ah, 0x44
jnp 0x472722
ucomisd xmm0, qword [0x561158]
lahf
test ah, 0x44
jnp 0x472722
mov edx, dword [0x5a9a5c]
movaps xmm0, xmm1
movsd qword [0x5a9928], xmm0
call fcn.0040e2d0
lea ecx, [ebp - 0x13c0]
jmp 0x47667d
movsd xmm0, qword [0x561150]
mov edx, dword [0x5a9a5c]
movsd qword [0x5a9928], xmm0
call fcn.0040e2d0
lea ecx, [ebp - 0x13c0]
jmp 0x47667d
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
lea ecx, [ebp - 0x13c0]
jmp 0x47667d
movsd xmm0, qword [0x5a9928]
ucomisd xmm0, qword [0x561150]
lahf
test ah, 0x44
jp 0x473116
mov ecx, dword [0x5a993c]
lea edx, [ecx - 0x12e]
lea eax, [ecx - 0x110]
cmp edx, eax
mov ecx, eax
cmovle ecx, edx
cmovle edx, eax
cmp esi, 0xf
jl 0x472a8c
cmp esi, 0x163
jg 0x472a8c
cmp edi, ecx
jl 0x472a8c
cmp edi, edx
jg 0x472a8c
test byte [ebp - 0x470], 4
je 0x476693
push 0x28
xorps xmm0, xmm0
mov dword [ebp - 0x7ec], 0
push 0x5543a0
lea ecx, [ebp - 0x7fc]
mov dword [ebp - 0x7e8], 0
movups xmmword [ebp - 0x7fc], xmm0
call fcn.0040d160
lea eax, [ebp - 0x7fc]
mov dword [ebp - 4], 0x21
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x27
xorps xmm0, xmm0
lea ecx, [ebp - 0x7e4]
push 0x5542c0
mov dword [eax], 0x41200000
movups xmmword [ebp - 0x7e4], xmm0
mov dword [ebp - 0x7d4], 0
mov dword [ebp - 0x7d0], 0
call fcn.0040d160
lea eax, [ebp - 0x7e4]
mov byte [ebp - 4], 0x22
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov byte [ebp - 4], 0x21
mov dword [eax], 0x41200000
mov ecx, dword [ebp - 0x7d0]
cmp ecx, 7
jbe 0x4728ae
mov edx, dword [ebp - 0x7e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4728a4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x7e8]
mov dword [ebp - 0x7d4], 0
mov dword [ebp - 0x7d0], 7
mov word [ebp - 0x7e4], ax
cmp ecx, 7
jbe 0x472912
mov edx, dword [ebp - 0x7fc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x472908
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 0x7ec], 0
mov word [ebp - 0x7fc], ax
lea eax, [ebp - 0xb0]
push eax
mov dword [ebp - 0x7e8], 7
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [ebp - 0xb0]
sub eax, dword [0x5a9934]
add eax, 0xffffffef
cmp eax, 0x140
jle 0x472a22
mov eax, 0x140
add eax, 0xfffffefc
mov ecx, 0x65
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, qword [0x5614f8]
mulsd xmm0, qword [0x5612e0]
cvttsd2si eax, xmm0
push 1
sub ecx, eax
mov dword [0x57bb90], ecx
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test eax, 0x8000
jne 0x4727d1
push str.RoundRect_PaintThicknessSchedule3_height
lea ecx, [ebp - 0xbf0]
call fcn.0040d110
lea eax, [ebp - 0xbf0]
mov dword [ebp - 4], 0x23
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push str.RoundRect_PaintThicknessSchedule3_width
lea ecx, [ebp - 0xbd8]
mov dword [eax], 0x41a00000
call fcn.0040d110
lea eax, [ebp - 0xbd8]
mov byte [ebp - 4], 0x24
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
lea ecx, [ebp - 0xbd8]
mov dword [eax], 0x41a00000
call fcn.0040ad30
lea ecx, [ebp - 0xbf0]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ad30
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
jmp 0x476693
cmp eax, 0xa
jge 0x472a2e
mov eax, 0xa
jmp 0x472a35
cmp eax, 0xc8
jg 0x472a5a
add eax, 0xfffffff6
mov ecx, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, qword [0x561500]
mulsd xmm0, qword [0x561250]
jmp 0x47297d
cmp eax, 0x104
jg 0x47295b
add eax, 0xffffff38
mov ecx, 0x33
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, qword [0x5614f8]
mulsd xmm0, qword [0x561250]
jmp 0x47297d
mov ecx, dword [0x5a993c]
lea eax, [ecx - 0x133]
add ecx, 0xfffffef5
cmp eax, ecx
mov edx, ecx
mov esi, eax
cmovle edx, eax
cmovle esi, ecx
cmp dword [ebp - 0x47c], 0x163
jl 0x473116
cmp dword [ebp - 0x47c], 0x1c7
jg 0x473116
cmp edi, edx
jl 0x473116
cmp edi, esi
jg 0x473116
sub esp, 0x10
mov edx, edi
cmp dword [0x57bb94], 2
je 0x472e97
mov dword [ebp - 0x9a0], eax
mov eax, esp
mov dword [ebp - 0x998], ecx
mov ecx, dword [ebp - 0x47c]
mov dword [ebp - 0x9a4], 0x16d
mov dword [ebp - 0x99c], 0x18b
movups xmm0, xmmword [ebp - 0x9a4]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
test al, al
je 0x472c19
test byte [ebp - 0x470], 4
je 0x472c19
nop dword [eax + eax]
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x1460]
push eax
call fcn.0040e4f0
add esp, 4
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x590], eax
mov eax, dword [0x5a993c]
movsx edi, word [ebp - 0x590]
movq qword [ebp - 0x598], xmm0
lea edx, [eax - 0x133]
lea ecx, [eax - 0x10b]
mov eax, dword [ebp - 0x594]
shr eax, 0x10
mov esi, ecx
cmp edx, ecx
cwde
cmovle esi, edx
cmovle edx, ecx
add eax, 0xfffffe93
cmp eax, 0x1e
ja 0x472bfd
cmp edi, esi
jl 0x472bfd
cmp edi, edx
jg 0x472bfd
test byte [ebp - 0x594], 4
jne 0x472b40
push 0x5543f8
lea ecx, [ebp - 0xc08]
mov dword [0x57bb90], 3
call fcn.0040d110
lea eax, [ebp - 0xc08]
mov dword [ebp - 4], 0x25
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
lea ecx, [ebp - 0xc08]
mov dword [ebp - 4], 0xffffffff
mov dword [eax], 0x3f800000
call fcn.0040ad30
jmp 0x472c08
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edi, dword [ebp - 0x480]
mov ecx, dword [0x5a993c]
sub esp, 0x10
mov dword [ebp - 0x9b4], 0x18b
mov edx, edi
mov dword [ebp - 0x9ac], 0x1a9
lea eax, [ecx - 0x133]
mov dword [ebp - 0x9b0], eax
lea eax, [ecx - 0x10b]
mov ecx, dword [ebp - 0x47c]
mov dword [ebp - 0x9a8], eax
mov eax, esp
movups xmm0, xmmword [ebp - 0x9b4]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
test al, al
je 0x472d59
test byte [ebp - 0x470], 4
je 0x472d59
nop
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x1450]
push eax
call fcn.0040e4f0
add esp, 4
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x59c], eax
mov eax, dword [0x5a993c]
movsx edi, word [ebp - 0x59c]
movq qword [ebp - 0x5a4], xmm0
lea edx, [eax - 0x133]
lea ecx, [eax - 0x10b]
mov eax, dword [ebp - 0x5a0]
shr eax, 0x10
mov esi, ecx
cmp edx, ecx
cwde
cmovle esi, edx
cmovle edx, ecx
add eax, 0xfffffe75
cmp eax, 0x1e
ja 0x472d3d
cmp edi, esi
jl 0x472d3d
cmp edi, edx
jg 0x472d3d
test byte [ebp - 0x5a0], 4
jne 0x472c80
push str.RoundRect_PaintThicknessSchedule5a_ellipse
lea ecx, [ebp - 0xc20]
mov dword [0x57bb90], 0xa
call fcn.0040d110
lea eax, [ebp - 0xc20]
mov dword [ebp - 4], 0x26
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
lea ecx, [ebp - 0xc20]
mov dword [ebp - 4], 0xffffffff
mov dword [eax], 0x40000000
call fcn.0040ad30
jmp 0x472d48
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edi, dword [ebp - 0x480]
mov ecx, dword [0x5a993c]
sub esp, 0x10
mov dword [ebp - 0x9c4], 0x1a9
mov edx, edi
mov dword [ebp - 0x9bc], 0x1c7
lea eax, [ecx - 0x133]
mov dword [ebp - 0x9c0], eax
lea eax, [ecx - 0x10b]
mov ecx, dword [ebp - 0x47c]
mov dword [ebp - 0x9b8], eax
mov eax, esp
movups xmm0, xmmword [ebp - 0x9c4]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
test al, al
je 0x476693
test byte [ebp - 0x470], 4
je 0x476693
nop
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x1440]
push eax
call fcn.0040e4f0
add esp, 4
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x5a8], eax
mov eax, dword [0x5a993c]
movsx edi, word [ebp - 0x5a8]
movq qword [ebp - 0x5b0], xmm0
lea edx, [eax - 0x133]
lea ecx, [eax - 0x10b]
mov eax, dword [ebp - 0x5ac]
shr eax, 0x10
mov esi, ecx
cmp edx, ecx
cwde
cmovle esi, edx
cmovle edx, ecx
add eax, 0xfffffe57
cmp eax, 0x1e
ja 0x4730fb
cmp edi, esi
jl 0x4730fb
cmp edi, edx
jg 0x4730fb
test byte [ebp - 0x5ac], 4
jne 0x472dc0
push 0x5544a8
lea ecx, [ebp - 0xc38]
mov dword [0x57bb90], 0x14
call fcn.0040d110
lea eax, [ebp - 0xc38]
mov dword [ebp - 4], 0x27
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
lea ecx, [ebp - 0xc38]
mov dword [ebp - 4], 0xffffffff
mov dword [eax], 0x41200000
call fcn.0040ad30
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
jmp 0x476693
mov dword [ebp - 0xa40], eax
mov eax, esp
mov dword [ebp - 0xa38], ecx
mov ecx, dword [ebp - 0x47c]
mov dword [ebp - 0xa44], 0x163
mov dword [ebp - 0xa3c], 0x195
movups xmm0, xmmword [ebp - 0xa44]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
test al, al
je 0x472fc9
test byte [ebp - 0x470], 4
je 0x472fc9
nop word [eax + eax]
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x1430]
push eax
call fcn.0040e4f0
add esp, 4
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x5b4], eax
mov eax, dword [0x5a993c]
movsx edi, word [ebp - 0x5b4]
movq qword [ebp - 0x5bc], xmm0
lea edx, [eax - 0x133]
lea ecx, [eax - 0x10b]
mov eax, dword [ebp - 0x5b8]
shr eax, 0x10
mov esi, ecx
cmp edx, ecx
cwde
cmovle esi, edx
cmovle edx, ecx
add eax, 0xfffffe9d
cmp eax, 0x32
ja 0x472fad
cmp edi, esi
jl 0x472fad
cmp edi, edx
jg 0x472fad
test byte [ebp - 0x5b8], 4
jne 0x472ef0
push str.RoundRect_PaintThicknessSchedule4a_ellipse
lea ecx, [ebp - 0xc50]
mov dword [0x57bb90], 0x23
call fcn.0040d110
lea eax, [ebp - 0xc50]
mov dword [ebp - 4], 0x28
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
lea ecx, [ebp - 0xc50]
mov dword [ebp - 4], 0xffffffff
mov dword [eax], 0x41a00000
call fcn.0040ad30
jmp 0x472fb8
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edi, dword [ebp - 0x480]
mov ecx, dword [0x5a993c]
sub esp, 0x10
mov dword [ebp - 0x9d4], 0x195
mov edx, edi
mov dword [ebp - 0x9cc], 0x1c7
lea eax, [ecx - 0x133]
mov dword [ebp - 0x9d0], eax
lea eax, [ecx - 0x10b]
mov ecx, dword [ebp - 0x47c]
mov dword [ebp - 0x9c8], eax
mov eax, esp
movups xmm0, xmmword [ebp - 0x9d4]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
test al, al
je 0x476693
test byte [ebp - 0x470], 4
je 0x476693
nop
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x1420]
push eax
call fcn.0040e4f0
add esp, 4
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x5c0], eax
mov eax, dword [0x5a993c]
movsx edi, word [ebp - 0x5c0]
movq qword [ebp - 0x5c8], xmm0
lea edx, [eax - 0x133]
lea ecx, [eax - 0x10b]
mov eax, dword [ebp - 0x5c4]
shr eax, 0x10
mov esi, ecx
cmp edx, ecx
cwde
cmovle esi, edx
cmovle edx, ecx
add eax, 0xfffffe6b
cmp eax, 0x32
ja 0x4730fb
cmp edi, esi
jl 0x4730fb
cmp edi, edx
jg 0x4730fb
test byte [ebp - 0x5c4], 4
jne 0x473030
push str.RoundRect_PaintThicknessSchedule6a_ellipse
lea ecx, [ebp - 0xc68]
mov dword [0x57bb90], 0x32
call fcn.0040d110
lea eax, [ebp - 0xc68]
mov dword [ebp - 4], 0x29
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
lea ecx, [ebp - 0xc68]
mov dword [ebp - 4], 0xffffffff
mov dword [eax], 0x41a00000
call fcn.0040ad30
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
jmp 0x476693
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
jmp 0x476693
movsd xmm0, qword [0x5a9928]
ucomisd xmm0, qword [0x561158]
lahf
test ah, 0x44
jp 0x4733d0
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x864], 0
push 0x554644
lea ecx, [ebp - 0x874]
mov dword [ebp - 0x860], 0
movups xmmword [ebp - 0x874], xmm0
call fcn.0040d160
mov dword [ebp - 4], 0x2a
lea eax, [ebp - 0x874]
mov esi, dword [ebp - 0x464]
mov ecx, 0x5a9bdc
or esi, 0x40
push eax
mov dword [ebp - 0x478], esi
call fcn.004791c0
push 0x1c
xorps xmm0, xmm0
lea ecx, [ebp - 0x85c]
push 0x554608
cvttss2si edi, dword [eax]
mov dword [ebp - 0x84c], 0
mov dword [ebp - 0x848], 0
movups xmmword [ebp - 0x85c], xmm0
call fcn.0040d160
lea eax, [ebp - 0x85c]
mov dword [ebp - 4], 0x2b
or esi, 0x80
mov ecx, 0x5a9bdc
push eax
mov dword [ebp - 0x478], esi
call fcn.004791c0
push 0x1c
xorps xmm0, xmm0
lea ecx, [ebp - 0x97c]
push str.RoundRect_BrushColorChoose_x
cvttss2si eax, dword [eax]
mov dword [ebp - 0x96c], 0
mov dword [ebp - 0x968], 0
movups xmmword [ebp - 0x97c], xmm0
mov dword [ebp - 0x460], eax
call fcn.0040d160
mov dword [ebp - 4], 0x2c
lea ecx, [ebp - 0x844]
push 0x20
xorps xmm0, xmm0
mov dword [ebp - 0x834], 0
or esi, 0x100
mov dword [ebp - 0x830], 0
push str.RoundRect_BrushColorChoose_width
mov dword [ebp - 0x478], esi
movups xmmword [ebp - 0x844], xmm0
call fcn.0040d160
lea eax, [ebp - 0x844]
mov dword [ebp - 4], 0x2d
or esi, 0x200
mov ecx, 0x5a9bdc
push eax
mov dword [ebp - 0x464], esi
mov dword [ebp - 0x478], esi
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x97c]
push eax
movss dword [ebp - 0x468], xmm0
call fcn.004791c0
xorps xmm0, xmm0
lea ecx, [ebp - 0x82c]
push 0x1c
push str.RoundRect_BrushColorChoose_y
cvttss2si esi, dword [eax]
mov dword [ebp - 0x81c], 0
mov dword [ebp - 0x818], 0
cvttss2si eax, dword [ebp - 0x468]
movups xmmword [ebp - 0x82c], xmm0
add esi, eax
call fcn.0040d160
mov dword [ebp - 4], 0x2e
lea ecx, [ebp - 0x814]
mov eax, dword [ebp - 0x464]
xorps xmm0, xmm0
or eax, 0x400
mov dword [ebp - 0x804], 0
push 0x21
push str.RoundRect_BrushColorChoose_height
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x478], eax
movups xmmword [ebp - 0x814], xmm0
mov dword [ebp - 0x800], 0
call fcn.0040d160
mov dword [ebp - 4], 0x2f
mov ecx, 0x5a9bdc
mov eax, dword [ebp - 0x464]
or eax, 0x800
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x478], eax
lea eax, [ebp - 0x814]
push eax
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x82c]
push eax
movss dword [ebp - 0x468], xmm0
call fcn.004791c0
mov edx, esi
cvttss2si ecx, dword [eax]
cvttss2si eax, dword [ebp - 0x468]
add ecx, eax
mov eax, dword [ebp - 0x460]
cmp edi, esi
cmovle edx, edi
cmovle edi, esi
mov dword [ebp - 0x468], edx
mov edx, eax
cmp edx, ecx
jle 0x4733a9
mov eax, ecx
mov ecx, edx
mov edx, dword [ebp - 0x47c]
cmp edx, dword [ebp - 0x468]
jl 0x4733d0
cmp edx, edi
jg 0x4733d0
mov edx, dword [ebp - 0x480]
cmp edx, eax
jl 0x4733d0
mov byte [ebp - 0x459], 1
cmp edx, ecx
jle 0x4733d7
mov byte [ebp - 0x459], 0
mov dword [ebp - 4], 0x2e
mov eax, dword [ebp - 0x464]
test eax, 0x800
je 0x473459
mov ecx, dword [ebp - 0x800]
and eax, 0xfffff7ff
mov dword [ebp - 0x464], eax
cmp ecx, 7
jbe 0x47343c
mov edx, dword [ebp - 0x814]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47342c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
mov eax, dword [ebp - 0x464]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x804], 0
mov dword [ebp - 0x800], 7
mov word [ebp - 0x814], cx
mov dword [ebp - 4], 0x2d
test eax, 0x400
je 0x4734d5
mov ecx, dword [ebp - 0x818]
and eax, 0xfffffbff
mov dword [ebp - 0x464], eax
cmp ecx, 7
jbe 0x4734b8
mov edx, dword [ebp - 0x82c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4734a8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
mov eax, dword [ebp - 0x464]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x81c], 0
mov dword [ebp - 0x818], 7
mov word [ebp - 0x82c], cx
mov dword [ebp - 4], 0x2c
test eax, 0x200
je 0x473551
mov ecx, dword [ebp - 0x830]
and eax, 0xfffffdff
mov dword [ebp - 0x464], eax
cmp ecx, 7
jbe 0x473534
mov edx, dword [ebp - 0x844]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x473524
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
mov eax, dword [ebp - 0x464]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x834], 0
mov dword [ebp - 0x830], 7
mov word [ebp - 0x844], cx
mov dword [ebp - 4], 0x2b
test eax, 0x100
je 0x4735cd
mov ecx, dword [ebp - 0x968]
and eax, 0xfffffeff
mov dword [ebp - 0x464], eax
cmp ecx, 7
jbe 0x4735b0
mov edx, dword [ebp - 0x97c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4735a0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
mov eax, dword [ebp - 0x464]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x96c], 0
mov dword [ebp - 0x968], 7
mov word [ebp - 0x97c], cx
mov dword [ebp - 4], 0x2a
test al, al
jns 0x473646
mov ecx, dword [ebp - 0x848]
and eax, 0xffffff7f
mov dword [ebp - 0x464], eax
cmp ecx, 7
jbe 0x473629
mov edx, dword [ebp - 0x85c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x473619
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
mov eax, dword [ebp - 0x464]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x84c], 0
mov dword [ebp - 0x848], 7
mov word [ebp - 0x85c], cx
mov dword [ebp - 4], 0xffffffff
test al, 0x40
je 0x4736b7
mov ecx, dword [ebp - 0x860]
and eax, 0xffffffbf
mov dword [ebp - 0x464], eax
cmp ecx, 7
jbe 0x47369a
mov edx, dword [ebp - 0x874]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x473690
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 0x864], 0
mov dword [ebp - 0x860], 7
mov word [ebp - 0x874], ax
cmp byte [ebp - 0x459], 0
xorps xmm0, xmm0
je 0x474646
push 0x21
push 0x5547c8
lea ecx, [ebp - 0x904]
mov dword [ebp - 0x8f4], 0
movups xmmword [ebp - 0x904], xmm0
mov dword [ebp - 0x8f0], 0
call fcn.0040d160
lea eax, [ebp - 0x904]
mov dword [ebp - 4], 0x30
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x21
xorps xmm0, xmm0
lea ecx, [ebp - 0x8ec]
push 0x554780
cvttss2si edi, dword [eax]
mov dword [ebp - 0x8dc], 0
mov dword [ebp - 0x8d8], 0
movups xmmword [ebp - 0x8ec], xmm0
call fcn.0040d160
lea eax, [ebp - 0x8ec]
mov byte [ebp - 4], 0x31
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x21
xorps xmm0, xmm0
lea ecx, [ebp - 0x8d4]
push 0x554860
cvttss2si eax, dword [eax]
mov dword [ebp - 0x8c4], 0
mov dword [ebp - 0x8c0], 0
movups xmmword [ebp - 0x8d4], xmm0
mov dword [ebp - 0x460], eax
call fcn.0040d160
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x8bc]
push 0x25
xorps xmm0, xmm0
mov dword [ebp - 0x8ac], 0
push 0x554810
movups xmmword [ebp - 0x8bc], xmm0
mov dword [ebp - 0x8a8], 0
call fcn.0040d160
lea eax, [ebp - 0x8bc]
mov byte [ebp - 4], 0x33
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x8d4]
push eax
movss dword [ebp - 0x468], xmm0
call fcn.004791c0
push 0x21
xorps xmm0, xmm0
lea ecx, [ebp - 0x8a4]
push 0x5548f8
cvttss2si esi, dword [eax]
mov dword [ebp - 0x894], 0
mov dword [ebp - 0x890], 0
cvttss2si eax, dword [ebp - 0x468]
movups xmmword [ebp - 0x8a4], xmm0
add esi, eax
call fcn.0040d160
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x88c]
push 0x26
xorps xmm0, xmm0
mov dword [ebp - 0x87c], 0
push 0x5548a8
movups xmmword [ebp - 0x88c], xmm0
mov dword [ebp - 0x878], 0
call fcn.0040d160
lea eax, [ebp - 0x88c]
mov byte [ebp - 4], 0x35
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x8a4]
push eax
movss dword [ebp - 0x468], xmm0
call fcn.004791c0
cvttss2si ecx, dword [ebp - 0x468]
mov edx, esi
cvttss2si eax, dword [eax]
add ecx, eax
mov eax, dword [ebp - 0x460]
cmp edi, esi
cmovle edx, edi
cmovle edi, esi
mov dword [ebp - 0x468], edx
mov edx, eax
cmp edx, ecx
jle 0x4738c7
mov eax, ecx
mov ecx, edx
mov edx, dword [ebp - 0x47c]
cmp edx, dword [ebp - 0x468]
jl 0x4738ee
cmp edx, edi
jg 0x4738ee
mov edx, dword [ebp - 0x480]
cmp edx, eax
jl 0x4738ee
mov byte [ebp - 0x459], 1
cmp edx, ecx
jle 0x4738f5
mov byte [ebp - 0x459], 0
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x878]
cmp ecx, 7
jbe 0x473939
mov edx, dword [ebp - 0x88c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47392f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x890]
mov dword [ebp - 0x87c], 0
mov dword [ebp - 0x878], 7
mov word [ebp - 0x88c], ax
cmp ecx, 7
jbe 0x47399a
mov edx, dword [ebp - 0x8a4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x473990
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x8a8]
mov dword [ebp - 0x894], 0
mov dword [ebp - 0x890], 7
mov word [ebp - 0x8a4], ax
cmp ecx, 7
jbe 0x4739fb
mov edx, dword [ebp - 0x8bc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4739f1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x8c0]
mov dword [ebp - 0x8ac], 0
mov dword [ebp - 0x8a8], 7
mov word [ebp - 0x8bc], ax
cmp ecx, 7
jbe 0x473a5c
mov edx, dword [ebp - 0x8d4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x473a52
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x8d8]
mov dword [ebp - 0x8c4], 0
mov dword [ebp - 0x8c0], 7
mov word [ebp - 0x8d4], ax
cmp ecx, 7
jbe 0x473abd
mov edx, dword [ebp - 0x8ec]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x473ab3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x8f0]
mov dword [ebp - 0x8dc], 0
mov dword [ebp - 0x8d8], 7
mov word [ebp - 0x8ec], ax
cmp ecx, 7
jbe 0x473b21
mov edx, dword [ebp - 0x904]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x473b17
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 0x8f4], 0
mov dword [ebp - 0x8f0], 7
mov word [ebp - 0x904], ax
cmp byte [ebp - 0x459], al
je 0x476693
test byte [ebp - 0x470], 4
je 0x476693
push 0x554990
lea ecx, [ebp - 0xc98]
call fcn.0040d110
push 0x554940
lea ecx, [ebp - 0xc80]
mov dword [ebp - 4], 0x36
call fcn.0040d110
lea eax, [ebp - 0xc80]
mov byte [ebp - 4], 0x37
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0xc98]
push eax
movss dword [ebp - 0x460], xmm0
call fcn.004791c0
movss xmm0, dword [ebp - 0x460]
lea ecx, [ebp - 0xc80]
mulss xmm0, dword [0x5610d8]
addss xmm0, dword [eax]
cvttss2si eax, xmm0
mov dword [ebp - 0x468], eax
call fcn.0040ad30
lea ecx, [ebp - 0xc98]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ad30
push 0x554a28
lea ecx, [ebp - 0xcc8]
call fcn.0040d110
push str.RoundRect_BrushColorChooseWheel_height
lea ecx, [ebp - 0xcb0]
mov dword [ebp - 4], 0x38
call fcn.0040d110
lea eax, [ebp - 0xcb0]
mov byte [ebp - 4], 0x39
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0xcc8]
push eax
movss dword [ebp - 0x460], xmm0
call fcn.004791c0
movss xmm0, dword [ebp - 0x460]
lea ecx, [ebp - 0xcb0]
mulss xmm0, dword [0x5610d8]
addss xmm0, dword [eax]
cvttss2si eax, xmm0
mov dword [ebp - 0x460], eax
call fcn.0040ad30
lea ecx, [ebp - 0xcc8]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ad30
mov dword [0x57bb80], 0xffffffff
mov dword [0x57bb84], 0xffffffff
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [0x5a9934]
lea ecx, [ebp - 0x94c]
sub dword [ebp - 0x38], eax
xorps xmm0, xmm0
mov eax, dword [0x5a9938]
sub dword [ebp - 0x34], eax
push 0x25
push str.RoundRect_BrushColorChooseWheel_width
movups xmmword [ebp - 0x94c], xmm0
mov dword [ebp - 0x93c], 0
mov dword [ebp - 0x938], 0
call fcn.0040d160
mov dword [ebp - 4], 0x3a
lea eax, [ebp - 0x94c]
mov edi, dword [ebp - 0x34]
mov ecx, 0x5a9bdc
mov esi, dword [ebp - 0x38]
neg edi
push eax
neg esi
call fcn.004791c0
mov ecx, dword [ebp - 0x468]
mov dword [ebp - 0x478], eax
lea ecx, [esi + ecx]
call fcn.0041e530
mov esi, dword [ebp - 0x460]
movsd qword [ebp - 0x30], xmm0
lea ecx, [edi + esi]
call fcn.0041e530
addsd xmm0, qword [ebp - 0x30]
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x473d3a
sqrtsd xmm0, xmm0
jmp 0x473d3f
call fcn.004fec00
mov eax, dword [ebp - 0x478]
cvttsd2si ecx, xmm0
movss xmm0, dword [eax]
mulss xmm0, dword [0x5610d8]
subss xmm0, dword [0x561160]
cvttss2si eax, xmm0
cmp eax, ecx
jge 0x473ddf
push 0x25
xorps xmm0, xmm0
mov dword [ebp - 0x90c], 0
push 0x554a70
lea ecx, [ebp - 0x91c]
mov dword [ebp - 0x908], 0
movups xmmword [ebp - 0x91c], xmm0
call fcn.0040d160
mov byte [ebp - 4], 0x3b
mov ecx, 0x5a9bdc
mov eax, dword [ebp - 0x464]
or eax, 0x1000
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x478], eax
lea eax, [ebp - 0x91c]
push eax
call fcn.004791c0
movss xmm0, dword [eax]
mulss xmm0, dword [0x5610d8]
subss xmm0, dword [0x561160]
cvttss2si edi, xmm0
jmp 0x473e19
mov ecx, esi
sub ecx, dword [ebp - 0x34]
call fcn.0041e530
mov ecx, dword [ebp - 0x468]
sub ecx, dword [ebp - 0x38]
movsd qword [ebp - 0x30], xmm0
call fcn.0041e530
addsd xmm0, qword [ebp - 0x30]
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x473e10
sqrtsd xmm0, xmm0
jmp 0x473e15
call fcn.004fec00
cvttsd2si edi, xmm0
mov dword [ebp - 4], 0x3a
mov eax, dword [ebp - 0x464]
test eax, 0x1000
je 0x473e95
mov ecx, dword [ebp - 0x908]
and eax, 0xffffefff
mov dword [ebp - 0x464], eax
cmp ecx, 7
jbe 0x473e78
mov edx, dword [ebp - 0x91c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x473e6e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 0x90c], 0
mov dword [ebp - 0x908], 7
mov word [ebp - 0x91c], ax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x938]
cmp ecx, 7
jbe 0x473edc
mov edx, dword [ebp - 0x94c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x473ed2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 0x93c], 0
mov ecx, esi
mov dword [ebp - 0x938], 7
sub ecx, dword [ebp - 0x34]
mov word [ebp - 0x94c], ax
call fcn.0041e530
mov ecx, dword [ebp - 0x468]
sub ecx, dword [ebp - 0x38]
movsd qword [ebp - 0x30], xmm0
call fcn.0041e530
addsd xmm0, qword [ebp - 0x30]
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x473f2a
sqrtsd xmm0, xmm0
jmp 0x473f2f
call fcn.004fec00
push 0x21
xorps xmm1, xmm1
movsd qword [ebp - 0x30], xmm0
push 0x554b58
lea ecx, [ebp - 0x964]
mov dword [ebp - 0x954], 0
movups xmmword [ebp - 0x964], xmm1
mov dword [ebp - 0x950], 0
call fcn.0040d160
mov dword [ebp - 4], 0x3c
lea eax, [ebp - 0x964]
mov esi, dword [ebp - 0x38]
mov ecx, 0x5a9bd4
sub esi, dword [ebp - 0x468]
push eax
call fcn.004791c0
mov ecx, edi
movd xmm0, dword [ebp - 0x468]
imul ecx, esi
cvtdq2pd xmm0, xmm0
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
divsd xmm1, qword [ebp - 0x30]
addsd xmm1, xmm0
movss xmm0, dword [eax]
cvtps2pd xmm0, xmm0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x950]
subsd xmm1, xmm0
cvttsd2si eax, xmm1
mov dword [ebp - 0x478], eax
cmp ecx, 7
jbe 0x474003
mov edx, dword [ebp - 0x964]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x473ff9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 0x954], 0
push 0x21
xorps xmm0, xmm0
mov dword [ebp - 0x950], 7
push 0x554b10
lea ecx, [ebp - 0x4c0]
mov word [ebp - 0x964], ax
movups xmmword [ebp - 0x4c0], xmm0
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x4ac], eax
call fcn.0040d160
mov dword [ebp - 4], 0x3d
lea eax, [ebp - 0x4c0]
mov esi, dword [ebp - 0x34]
mov ecx, 0x5a9bd4
sub esi, dword [ebp - 0x460]
push eax
call fcn.004791c0
imul esi, edi
movd xmm0, dword [ebp - 0x460]
cvtdq2pd xmm0, xmm0
movd xmm1, esi
cvtdq2pd xmm1, xmm1
divsd xmm1, qword [ebp - 0x30]
addsd xmm1, xmm0
movss xmm0, dword [eax]
cvtps2pd xmm0, xmm0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x4ac]
subsd xmm1, xmm0
cvttsd2si edi, xmm1
mov dword [ebp - 0x18], edi
cmp ecx, 7
jbe 0x4740e2
mov edx, dword [ebp - 0x4c0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4740d8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x4b0], 0
xor eax, eax
movlpd qword [ebp - 0x30], xmm0
push 0x5a9870
mov dword [ebp - 0x4ac], 7
mov word [ebp - 0x4c0], ax
mov dword [ebp - 0x30], 0x5a9870
mov byte [ebp - 0x2c], 1
call fcn.004bd928
add esp, 4
mov ecx, 0x5a9a78
mov dword [ebp - 4], 0x3e
call fcn.004d0ac0
push 0x5a9a78
mov esi, eax
call fcn.004cfe50
imul edi, esi
push 0x5a9870
add edi, dword [ebp - 0x478]
mov ecx, dword [eax + edi*4]
movzx eax, cl
mov dword [ebp - 0x20], eax
mov eax, ecx
shr eax, 8
shr ecx, 0x10
movzx edi, al
movzx esi, cl
call fcn.004bd944
movzx eax, byte [0x57bb9b]
add esp, 8
mov ecx, dword [ebp - 0x20]
shl eax, 8
or eax, ecx
mov byte [ebp - 0x2c], 0
shl eax, 8
shl ecx, 8
or eax, edi
or ecx, edi
shl eax, 8
or eax, esi
shl ecx, 8
or ecx, esi
mov dword [0x57bb9c], eax
mov dword [0x57bb98], eax
call fcn.004031a0
mov esi, dword [ebp - 0x478]
lea ecx, [ebp - 0x508]
mov edi, dword [ebp - 0x18]
xor eax, eax
comisd xmm0, xmmword [0x561180]
push 0x21
mov dword [0x57bb78], esi
mov dword [0x57bb7c], edi
mov dword [ebp - 0x4f8], 0
mov dword [ebp - 0x4f4], 0
push str.RoundRect_BrushColorChooseWheel_x
xorps xmm0, xmm0
movups xmmword [ebp - 0x508], xmm0
setb al
mov dword [0x5a9930], eax
call fcn.0040d160
lea eax, [ebp - 0x508]
mov byte [ebp - 4], 0x3f
push eax
mov ecx, 0x5a9bd4
call fcn.004791c0
movd xmm0, esi
lea ecx, [ebp - 0x4f0]
cvtdq2ps xmm0, xmm0
push 0x20
push 0x554ba0
addss xmm0, dword [eax]
mov dword [ebp - 0x4e0], 0
mov dword [ebp - 0x4dc], 0
subss xmm0, dword [0x5612f4]
movss dword [ebp - 0x478], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x4f0], xmm0
call fcn.0040d160
lea eax, [ebp - 0x4f0]
mov byte [ebp - 4], 0x40
push eax
mov ecx, 0x5a9bd4
call fcn.004791c0
movss xmm0, dword [ebp - 0x478]
lea ecx, [ebp - 0x4d8]
push 0x20
push str.RoundRect_BrushColorChooseMark_x
movss dword [eax], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x4d8], xmm0
mov dword [ebp - 0x4c8], 0
mov dword [ebp - 0x4c4], 0
call fcn.0040d160
lea eax, [ebp - 0x4d8]
mov byte [ebp - 4], 0x41
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
movss xmm0, dword [ebp - 0x478]
mov byte [ebp - 4], 0x40
movss dword [eax], xmm0
mov ecx, dword [ebp - 0x4c4]
cmp ecx, 7
jbe 0x47430c
mov edx, dword [ebp - 0x4d8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x474302
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x4c8], 0
mov dword [ebp - 0x4c4], 7
mov word [ebp - 0x4d8], ax
cmp ecx, 7
jbe 0x47436d
mov edx, dword [ebp - 0x4f0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x474363
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x4f4]
mov dword [ebp - 0x4e0], 0
mov dword [ebp - 0x4dc], 7
mov word [ebp - 0x4f0], ax
cmp ecx, 7
jbe 0x4743ce
mov edx, dword [ebp - 0x508]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4743c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 0x4f8], 0
push 0x21
xorps xmm0, xmm0
mov dword [ebp - 0x4f4], 7
push str.RoundRect_BrushColorChooseWheel_y
lea ecx, [ebp - 0x550]
mov word [ebp - 0x508], ax
movups xmmword [ebp - 0x550], xmm0
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x53c], eax
call fcn.0040d160
lea eax, [ebp - 0x550]
mov byte [ebp - 4], 0x42
push eax
mov ecx, 0x5a9bd4
call fcn.004791c0
movd xmm0, edi
lea ecx, [ebp - 0x538]
cvtdq2ps xmm0, xmm0
push 0x20
push str.RoundRect_BrushColorChooseMark_y
addss xmm0, dword [eax]
mov dword [ebp - 0x528], 0
mov dword [ebp - 0x524], 0
subss xmm0, dword [0x5612f4]
movss dword [ebp - 0x478], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x538], xmm0
call fcn.0040d160
lea eax, [ebp - 0x538]
mov byte [ebp - 4], 0x43
push eax
mov ecx, 0x5a9bd4
call fcn.004791c0
movss xmm0, dword [ebp - 0x478]
lea ecx, [ebp - 0x520]
push 0x20
push 0x554c30
movss dword [eax], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x520], xmm0
mov dword [ebp - 0x510], 0
mov dword [ebp - 0x50c], 0
call fcn.0040d160
lea eax, [ebp - 0x520]
mov byte [ebp - 4], 0x44
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
movss xmm0, dword [ebp - 0x478]
mov byte [ebp - 4], 0x43
movss dword [eax], xmm0
mov ecx, dword [ebp - 0x50c]
cmp ecx, 7
jbe 0x474529
mov edx, dword [ebp - 0x520]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47451f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0x524]
mov dword [ebp - 0x510], 0
mov dword [ebp - 0x50c], 7
mov word [ebp - 0x520], ax
cmp ecx, 7
jbe 0x47458a
mov edx, dword [ebp - 0x538]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x474580
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x53c]
mov dword [ebp - 0x528], 0
mov dword [ebp - 0x524], 7
mov word [ebp - 0x538], ax
cmp ecx, 7
jbe 0x4745eb
mov edx, dword [ebp - 0x550]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4745e1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 0x540], 0
push 1
mov dword [ebp - 0x53c], 7
mov word [ebp - 0x550], ax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov dword [ebp - 4], 0xffffffff
test eax, 0x8000
jne 0x473c93
mov eax, dword [0x57bb78]
mov edx, dword [0x5a9a5c]
mov dword [0x57bb80], eax
mov eax, dword [0x57bb7c]
mov dword [0x57bb84], eax
call fcn.0040e2d0
jmp 0x476693
push 0x17
push 0x554d7c
lea ecx, [ebp - 0x664]
mov dword [ebp - 0x654], 0
movups xmmword [ebp - 0x664], xmm0
mov dword [ebp - 0x650], 0
call fcn.0040d160
lea eax, [ebp - 0x664]
mov dword [ebp - 4], 0x45
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x17
xorps xmm0, xmm0
lea ecx, [ebp - 0x67c]
push 0x554d4c
cvttss2si edi, dword [eax]
mov dword [ebp - 0x66c], 0
mov dword [ebp - 0x668], 0
movups xmmword [ebp - 0x67c], xmm0
call fcn.0040d160
lea eax, [ebp - 0x67c]
mov byte [ebp - 4], 0x46
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x17
xorps xmm0, xmm0
lea ecx, [ebp - 0x694]
push str.RoundRect_BrushColor1_x
cvttss2si eax, dword [eax]
mov dword [ebp - 0x684], 0
mov dword [ebp - 0x680], 0
movups xmmword [ebp - 0x694], xmm0
mov dword [ebp - 0x460], eax
call fcn.0040d160
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x6ac]
push 0x1b
xorps xmm0, xmm0
mov dword [ebp - 0x69c], 0
push str.RoundRect_BrushColor1_width
movups xmmword [ebp - 0x6ac], xmm0
mov dword [ebp - 0x698], 0
call fcn.0040d160
lea eax, [ebp - 0x6ac]
mov byte [ebp - 4], 0x48
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x694]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
push 0x17
xorps xmm0, xmm0
lea ecx, [ebp - 0x6c4]
push str.RoundRect_BrushColor1_y
cvttss2si esi, dword [eax]
mov dword [ebp - 0x6b4], 0
mov dword [ebp - 0x6b0], 0
cvttss2si eax, dword [ebp - 0x18]
movups xmmword [ebp - 0x6c4], xmm0
add esi, eax
call fcn.0040d160
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x934]
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x924], 0
push str.RoundRect_BrushColor1_height
movups xmmword [ebp - 0x934], xmm0
mov dword [ebp - 0x920], 0
call fcn.0040d160
lea eax, [ebp - 0x934]
mov byte [ebp - 4], 0x4a
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x6c4]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si ecx, dword [ebp - 0x18]
mov edx, esi
cvttss2si eax, dword [eax]
add ecx, eax
mov eax, dword [ebp - 0x460]
cmp edi, esi
cmovle edx, edi
cmovle edi, esi
mov dword [ebp - 0x18], edx
mov edx, eax
cmp edx, ecx
jle 0x474837
mov eax, ecx
mov ecx, edx
mov edx, dword [ebp - 0x47c]
mov esi, dword [ebp - 0x480]
cmp edx, dword [ebp - 0x18]
jl 0x47485b
cmp edx, edi
jg 0x47485b
cmp esi, eax
jl 0x47485b
mov byte [ebp - 0x459], 1
cmp esi, ecx
jle 0x474862
mov byte [ebp - 0x459], 0
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp - 0x920]
cmp ecx, 7
jbe 0x4748a6
mov edx, dword [ebp - 0x934]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47489c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0x6b0]
mov dword [ebp - 0x924], 0
mov dword [ebp - 0x920], 7
mov word [ebp - 0x934], ax
cmp ecx, 7
jbe 0x474907
mov edx, dword [ebp - 0x6c4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4748fd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x698]
mov dword [ebp - 0x6b4], 0
mov dword [ebp - 0x6b0], 7
mov word [ebp - 0x6c4], ax
cmp ecx, 7
jbe 0x474968
mov edx, dword [ebp - 0x6ac]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47495e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0x680]
mov dword [ebp - 0x69c], 0
mov dword [ebp - 0x698], 7
mov word [ebp - 0x6ac], ax
cmp ecx, 7
jbe 0x4749c9
mov edx, dword [ebp - 0x694]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4749bf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x668]
mov dword [ebp - 0x684], 0
mov dword [ebp - 0x680], 7
mov word [ebp - 0x694], ax
cmp ecx, 7
jbe 0x474a2a
mov edx, dword [ebp - 0x67c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x474a20
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x650]
mov dword [ebp - 0x66c], 0
mov dword [ebp - 0x668], 7
mov word [ebp - 0x67c], ax
cmp ecx, 7
jbe 0x474a8e
mov edx, dword [ebp - 0x664]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x474a84
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 0x654], 0
mov dword [ebp - 0x650], 7
mov word [ebp - 0x664], ax
cmp byte [ebp - 0x459], al
je 0x474af3
test byte [ebp - 0x470], 4
je 0x476693
push str.RoundRect_BrushColor1_fill
lea ecx, [ebp - 0xce0]
call fcn.0040d110
lea eax, [ebp - 0xce0]
mov dword [ebp - 4], 0x4b
push eax
mov ecx, 0x5aa614
call fcn.004791c0
lea ecx, [ebp - 0xce0]
jmp 0x476076
push 0x17
xorps xmm0, xmm0
mov dword [ebp - 0x60c], eax
push 0x554e80
lea ecx, [ebp - 0x61c]
mov dword [ebp - 0x608], eax
movups xmmword [ebp - 0x61c], xmm0
call fcn.0040d160
lea eax, [ebp - 0x61c]
mov dword [ebp - 4], 0x4c
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x554f18
lea ecx, [ebp - 0xcf8]
cvttss2si eax, dword [eax]
mov dword [ebp - 0x9e4], eax
call fcn.0040d110
lea eax, [ebp - 0xcf8]
mov byte [ebp - 4], 0x4d
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x17
xorps xmm0, xmm0
lea ecx, [ebp - 0x634]
push str.RoundRect_BrushColor2_x
cvttss2si eax, dword [eax]
mov dword [ebp - 0x624], 0
mov dword [ebp - 0x620], 0
movups xmmword [ebp - 0x634], xmm0
mov dword [ebp - 0x9e0], eax
call fcn.0040d160
push str.RoundRect_BrushColor2_width
lea ecx, [ebp - 0xabc]
mov byte [ebp - 4], 0x4e
call fcn.0040d110
lea eax, [ebp - 0xabc]
mov byte [ebp - 4], 0x4f
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x634]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
push 0x17
xorps xmm0, xmm0
push str.RoundRect_BrushColor2_y
cvttss2si ecx, dword [eax]
mov dword [ebp - 0x63c], 0
mov dword [ebp - 0x638], 0
cvttss2si eax, dword [ebp - 0x18]
movups xmmword [ebp - 0x64c], xmm0
add ecx, eax
mov dword [ebp - 0x9dc], ecx
lea ecx, [ebp - 0x64c]
call fcn.0040d160
push str.RoundRect_BrushColor2_height
lea ecx, [ebp - 0xad4]
mov byte [ebp - 4], 0x50
call fcn.0040d110
lea eax, [ebp - 0xad4]
mov byte [ebp - 4], 0x51
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x64c]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si eax, dword [eax]
sub esp, 0x10
mov edx, esi
cvttss2si ecx, dword [ebp - 0x18]
add ecx, eax
mov eax, esp
mov dword [ebp - 0x9d8], ecx
movups xmm0, xmmword [ebp - 0x9e4]
mov ecx, dword [ebp - 0x47c]
movups xmmword [eax], xmm0
call fcn.0040b830
mov byte [ebp - 4], 0x50
add esp, 0x10
mov ecx, dword [ebp - 0xac0]
mov byte [ebp - 0x459], al
cmp ecx, 7
jbe 0x474cdd
mov edx, dword [ebp - 0xad4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x474cd3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0x638]
mov dword [ebp - 0xac4], 0
mov dword [ebp - 0xac0], 7
mov word [ebp - 0xad4], ax
cmp ecx, 7
jbe 0x474d3e
mov edx, dword [ebp - 0x64c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x474d34
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x4e
mov ecx, dword [ebp - 0xaa8]
mov dword [ebp - 0x63c], 0
mov dword [ebp - 0x638], 7
mov word [ebp - 0x64c], ax
cmp ecx, 7
jbe 0x474d9f
mov edx, dword [ebp - 0xabc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x474d95
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x4d
mov ecx, dword [ebp - 0x620]
mov dword [ebp - 0xaac], 0
mov dword [ebp - 0xaa8], 7
mov word [ebp - 0xabc], ax
cmp ecx, 7
jbe 0x474e00
mov edx, dword [ebp - 0x634]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x474df6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 0x624], 0
lea ecx, [ebp - 0xcf8]
mov dword [ebp - 0x620], 7
mov word [ebp - 0x634], ax
call fcn.0040ad30
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x608]
cmp ecx, 7
jbe 0x474e6f
mov edx, dword [ebp - 0x61c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x474e65
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x477902
push ecx
push edx
call fcn.004d54f1
add esp, 8
xor eax, eax
mov dword [ebp - 0x60c], 0
mov dword [ebp - 0x608], 7
mov word [ebp - 0x61c], ax
cmp byte [ebp - 0x459], al
je 0x474efb
test byte [ebp - 0x470], 4
je 0x476693
push str.RoundRect_BrushColor2_fill
lea ecx, [ebp - 0xd10]
call fcn.0040d110
lea eax, [ebp - 0xd10]
mov dword [ebp - 4], 0x52
push eax
mov ecx, 0x5aa614
call fcn.004791c0
lea ecx, [ebp - 0xd10]
mov eax, dword [eax]
or eax, 0xff000000
mov dword [ebp - 4], 0xffffffff
mov dword [0x57bb9c], eax
mov dword [0x57bb98], eax
call fcn.0040ad30
mov dword [0x5a9930], 0
jmp 0x47609d
push 0x555054
lea ecx, [ebp - 0xda0]
call fcn.0040d110
lea eax, [ebp - 0xda0]
mov dword [ebp - 4], 0x53
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x555024
lea ecx, [ebp - 0xd88]
cvttss2si eax, dword [eax]
mov dword [ebp - 0x9f4], eax
call fcn.0040d110
lea eax, [ebp - 0xd88]
mov byte [ebp - 4], 0x54
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push str.RoundRect_BrushColor3_x
lea ecx, [ebp - 0xd70]
cvttss2si eax, dword [eax]
mov dword [ebp - 0x9f0], eax
call fcn.0040d110
push str.RoundRect_BrushColor3_width
lea ecx, [ebp - 0xd58]
mov byte [ebp - 4], 0x55
call fcn.0040d110
lea eax, [ebp - 0xd58]
mov byte [ebp - 4], 0x56
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0xd70]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
push str.RoundRect_BrushColor3_y
cvttss2si ecx, dword [eax]
cvttss2si eax, dword [ebp - 0x18]
add ecx, eax
mov dword [ebp - 0x9ec], ecx
lea ecx, [ebp - 0xd40]
call fcn.0040d110
push str.RoundRect_BrushColor3_height
lea ecx, [ebp - 0xd28]
mov byte [ebp - 4], 0x57
call fcn.0040d110
lea eax, [ebp - 0xd28]
mov byte [ebp - 4], 0x58
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0xd40]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si ecx, dword [ebp - 0x18]
sub esp, 0x10
mov edx, esi
cvttss2si eax, dword [eax]
add ecx, eax
mov eax, esp
mov dword [ebp - 0x9e8], ecx
movups xmm0, xmmword [ebp - 0x9f4]
mov ecx, dword [ebp - 0x47c]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
mov byte [ebp - 0x459], al
lea ecx, [ebp - 0xd28]
call fcn.0040ad30
lea ecx, [ebp - 0xd40]
call fcn.0040ad30
lea ecx, [ebp - 0xd58]
call fcn.0040ad30
lea ecx, [ebp - 0xd70]
call fcn.0040ad30
lea ecx, [ebp - 0xd88]
call fcn.0040ad30
lea ecx, [ebp - 0xda0]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ad30
cmp byte [ebp - 0x459], 0
je 0x4750db
test byte [ebp - 0x470], 4
je 0x476693
push str.RoundRect_BrushColor3_fill
lea ecx, [ebp - 0xdb8]
call fcn.0040d110
lea eax, [ebp - 0xdb8]
mov dword [ebp - 4], 0x59
push eax
mov ecx, 0x5aa614
call fcn.004791c0
lea ecx, [ebp - 0xdb8]
jmp 0x476076
push 0x555158
lea ecx, [ebp - 0xe48]
call fcn.0040d110
lea eax, [ebp - 0xe48]
mov dword [ebp - 4], 0x5a
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x5551f0
lea ecx, [ebp - 0xe30]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa04], eax
call fcn.0040d110
lea eax, [ebp - 0xe30]
mov byte [ebp - 4], 0x5b
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push str.RoundRect_BrushColor4_x
lea ecx, [ebp - 0xe18]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa00], eax
call fcn.0040d110
push str.RoundRect_BrushColor4_width
lea ecx, [ebp - 0xe00]
mov byte [ebp - 4], 0x5c
call fcn.0040d110
lea eax, [ebp - 0xe00]
mov byte [ebp - 4], 0x5d
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0xe18]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si ecx, dword [ebp - 0x18]
push str.RoundRect_BrushColor4_y
cvttss2si eax, dword [eax]
add ecx, eax
mov dword [ebp - 0x9fc], ecx
lea ecx, [ebp - 0xde8]
call fcn.0040d110
push str.RoundRect_BrushColor4_height
lea ecx, [ebp - 0xdd0]
mov byte [ebp - 4], 0x5e
call fcn.0040d110
lea eax, [ebp - 0xdd0]
mov byte [ebp - 4], 0x5f
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0xde8]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si ecx, dword [ebp - 0x18]
sub esp, 0x10
mov edx, esi
cvttss2si eax, dword [eax]
add ecx, eax
mov eax, esp
mov dword [ebp - 0x9f8], ecx
movups xmm0, xmmword [ebp - 0xa04]
mov ecx, dword [ebp - 0x47c]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
mov byte [ebp - 0x459], al
lea ecx, [ebp - 0xdd0]
call fcn.0040ad30
lea ecx, [ebp - 0xde8]
call fcn.0040ad30
lea ecx, [ebp - 0xe00]
call fcn.0040ad30
lea ecx, [ebp - 0xe18]
call fcn.0040ad30
lea ecx, [ebp - 0xe30]
call fcn.0040ad30
lea ecx, [ebp - 0xe48]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ad30
cmp byte [ebp - 0x459], 0
je 0x4752e2
test byte [ebp - 0x470], 4
je 0x476693
push str.RoundRect_BrushColor4_fill
lea ecx, [ebp - 0xe60]
call fcn.0040d110
lea eax, [ebp - 0xe60]
mov dword [ebp - 4], 0x60
push eax
mov ecx, 0x5aa614
call fcn.004791c0
lea ecx, [ebp - 0xe60]
mov eax, dword [eax]
or eax, 0xff000000
mov dword [ebp - 4], 0xffffffff
mov dword [0x57bb9c], eax
mov dword [0x57bb98], eax
call fcn.0040ad30
mov dword [0x5a9930], 0
jmp 0x47609d
push 0x55532c
lea ecx, [ebp - 0xef0]
call fcn.0040d110
lea eax, [ebp - 0xef0]
mov dword [ebp - 4], 0x61
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x5552fc
lea ecx, [ebp - 0xed8]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa14], eax
call fcn.0040d110
lea eax, [ebp - 0xed8]
mov byte [ebp - 4], 0x62
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push str.RoundRect_BrushColor5_x
lea ecx, [ebp - 0xec0]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa10], eax
call fcn.0040d110
push str.RoundRect_BrushColor5_width
lea ecx, [ebp - 0xea8]
mov byte [ebp - 4], 0x63
call fcn.0040d110
lea eax, [ebp - 0xea8]
mov byte [ebp - 4], 0x64
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0xec0]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
push str.RoundRect_BrushColor5_y
cvttss2si ecx, dword [eax]
cvttss2si eax, dword [ebp - 0x18]
add ecx, eax
mov dword [ebp - 0xa0c], ecx
lea ecx, [ebp - 0xe90]
call fcn.0040d110
push str.RoundRect_BrushColor5_height
lea ecx, [ebp - 0xe78]
mov byte [ebp - 4], 0x65
call fcn.0040d110
lea eax, [ebp - 0xe78]
mov byte [ebp - 4], 0x66
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0xe90]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si ecx, dword [ebp - 0x18]
sub esp, 0x10
mov edx, esi
cvttss2si eax, dword [eax]
add ecx, eax
mov eax, esp
mov dword [ebp - 0xa08], ecx
movups xmm0, xmmword [ebp - 0xa14]
mov ecx, dword [ebp - 0x47c]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
mov byte [ebp - 0x459], al
lea ecx, [ebp - 0xe78]
call fcn.0040ad30
lea ecx, [ebp - 0xe90]
call fcn.0040ad30
lea ecx, [ebp - 0xea8]
call fcn.0040ad30
lea ecx, [ebp - 0xec0]
call fcn.0040ad30
lea ecx, [ebp - 0xed8]
call fcn.0040ad30
lea ecx, [ebp - 0xef0]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ad30
cmp byte [ebp - 0x459], 0
je 0x4754c2
test byte [ebp - 0x470], 4
je 0x476693
push str.RoundRect_BrushColor5_fill
lea ecx, [ebp - 0xf08]
call fcn.0040d110
lea eax, [ebp - 0xf08]
mov dword [ebp - 4], 0x67
push eax
mov ecx, 0x5aa614
call fcn.004791c0
lea ecx, [ebp - 0xf08]
jmp 0x476076
push 0x555430
lea ecx, [ebp - 0xf98]
call fcn.0040d110
lea eax, [ebp - 0xf98]
mov dword [ebp - 4], 0x68
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x5554c8
lea ecx, [ebp - 0xf80]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa24], eax
call fcn.0040d110
lea eax, [ebp - 0xf80]
mov byte [ebp - 4], 0x69
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push str.RoundRect_BrushColor6_x
lea ecx, [ebp - 0xf68]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa20], eax
call fcn.0040d110
push str.RoundRect_BrushColor6_width
lea ecx, [ebp - 0xf50]
mov byte [ebp - 4], 0x6a
call fcn.0040d110
lea eax, [ebp - 0xf50]
mov byte [ebp - 4], 0x6b
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0xf68]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si ecx, dword [ebp - 0x18]
push str.RoundRect_BrushColor6_y
cvttss2si eax, dword [eax]
add ecx, eax
mov dword [ebp - 0xa1c], ecx
lea ecx, [ebp - 0xf38]
call fcn.0040d110
push str.RoundRect_BrushColor6_height
lea ecx, [ebp - 0xf20]
mov byte [ebp - 4], 0x6c
call fcn.0040d110
lea eax, [ebp - 0xf20]
mov byte [ebp - 4], 0x6d
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0xf38]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si ecx, dword [ebp - 0x18]
sub esp, 0x10
mov edx, esi
cvttss2si eax, dword [eax]
add ecx, eax
mov eax, esp
mov dword [ebp - 0xa18], ecx
movups xmm0, xmmword [ebp - 0xa24]
mov ecx, dword [ebp - 0x47c]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
mov byte [ebp - 0x459], al
lea ecx, [ebp - 0xf20]
call fcn.0040ad30
lea ecx, [ebp - 0xf38]
call fcn.0040ad30
lea ecx, [ebp - 0xf50]
call fcn.0040ad30
lea ecx, [ebp - 0xf68]
call fcn.0040ad30
lea ecx, [ebp - 0xf80]
call fcn.0040ad30
lea ecx, [ebp - 0xf98]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ad30
cmp byte [ebp - 0x459], 0
je 0x4756c9
test byte [ebp - 0x470], 4
je 0x476693
push str.RoundRect_BrushColor6_fill
lea ecx, [ebp - 0xfb0]
call fcn.0040d110
lea eax, [ebp - 0xfb0]
mov dword [ebp - 4], 0x6e
push eax
mov ecx, 0x5aa614
call fcn.004791c0
lea ecx, [ebp - 0xfb0]
mov eax, dword [eax]
or eax, 0xff000000
mov dword [ebp - 4], 0xffffffff
mov dword [0x57bb9c], eax
mov dword [0x57bb98], eax
call fcn.0040ad30
mov dword [0x5a9930], 0
jmp 0x47609d
push 0x555604
lea ecx, [ebp - 0x1030]
call fcn.0040d110
lea eax, [ebp - 0x1030]
mov dword [ebp - 4], 0x6f
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x5555d4
lea ecx, [ebp - 0x1348]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa34], eax
call fcn.0040d110
lea eax, [ebp - 0x1348]
mov byte [ebp - 4], 0x70
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push str.RoundRect_BrushColor7_x
lea ecx, [ebp - 0x1010]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa30], eax
call fcn.0040d110
push str.RoundRect_BrushColor7_width
lea ecx, [ebp - 0xff8]
mov byte [ebp - 4], 0x71
call fcn.0040d110
lea eax, [ebp - 0xff8]
mov byte [ebp - 4], 0x72
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x1010]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si ecx, dword [ebp - 0x18]
push str.RoundRect_BrushColor7_y
cvttss2si eax, dword [eax]
add ecx, eax
mov dword [ebp - 0xa2c], ecx
lea ecx, [ebp - 0xfe0]
call fcn.0040d110
push str.RoundRect_BrushColor7_height
lea ecx, [ebp - 0xfc8]
mov byte [ebp - 4], 0x73
call fcn.0040d110
lea eax, [ebp - 0xfc8]
mov byte [ebp - 4], 0x74
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0xfe0]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si ecx, dword [ebp - 0x18]
sub esp, 0x10
mov edx, esi
cvttss2si eax, dword [eax]
add ecx, eax
mov eax, esp
mov dword [ebp - 0xa28], ecx
movups xmm0, xmmword [ebp - 0xa34]
mov ecx, dword [ebp - 0x47c]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
mov byte [ebp - 0x459], al
lea ecx, [ebp - 0xfc8]
call fcn.0040ad30
lea ecx, [ebp - 0xfe0]
call fcn.0040ad30
lea ecx, [ebp - 0xff8]
call fcn.0040ad30
lea ecx, [ebp - 0x1010]
call fcn.0040ad30
lea ecx, [ebp - 0x1348]
call fcn.0040ad30
lea ecx, [ebp - 0x1030]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ad30
cmp byte [ebp - 0x459], 0
je 0x4758a9
test byte [ebp - 0x470], 4
je 0x476693
push str.RoundRect_BrushColor7_fill
lea ecx, [ebp - 0x1048]
call fcn.0040d110
lea eax, [ebp - 0x1048]
mov dword [ebp - 4], 0x75
push eax
mov ecx, 0x5aa614
call fcn.004791c0
lea ecx, [ebp - 0x1048]
jmp 0x476076
push 0x555708
lea ecx, [ebp - 0x10d8]
call fcn.0040d110
lea eax, [ebp - 0x10d8]
mov dword [ebp - 4], 0x76
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x5557a0
lea ecx, [ebp - 0x10c0]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa54], eax
call fcn.0040d110
lea eax, [ebp - 0x10c0]
mov byte [ebp - 4], 0x77
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push str.RoundRect_BrushColor8_x
lea ecx, [ebp - 0x10a8]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa50], eax
call fcn.0040d110
push str.RoundRect_BrushColor8_width
lea ecx, [ebp - 0x1090]
mov byte [ebp - 4], 0x78
call fcn.0040d110
lea eax, [ebp - 0x1090]
mov byte [ebp - 4], 0x79
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x10a8]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si ecx, dword [ebp - 0x18]
push str.RoundRect_BrushColor8_y
cvttss2si eax, dword [eax]
add ecx, eax
mov dword [ebp - 0xa4c], ecx
lea ecx, [ebp - 0x1078]
call fcn.0040d110
push str.RoundRect_BrushColor8_height
lea ecx, [ebp - 0x1060]
mov byte [ebp - 4], 0x7a
call fcn.0040d110
lea eax, [ebp - 0x1060]
mov byte [ebp - 4], 0x7b
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x1078]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si ecx, dword [ebp - 0x18]
sub esp, 0x10
mov edx, esi
cvttss2si eax, dword [eax]
add ecx, eax
mov eax, esp
mov dword [ebp - 0xa48], ecx
movups xmm0, xmmword [ebp - 0xa54]
mov ecx, dword [ebp - 0x47c]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
mov byte [ebp - 0x459], al
lea ecx, [ebp - 0x1060]
call fcn.0040ad30
lea ecx, [ebp - 0x1078]
call fcn.0040ad30
lea ecx, [ebp - 0x1090]
call fcn.0040ad30
lea ecx, [ebp - 0x10a8]
call fcn.0040ad30
lea ecx, [ebp - 0x10c0]
call fcn.0040ad30
lea ecx, [ebp - 0x10d8]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ad30
cmp byte [ebp - 0x459], 0
je 0x475ab0
test byte [ebp - 0x470], 4
je 0x476693
push str.RoundRect_BrushColor8_fill
lea ecx, [ebp - 0x10f0]
call fcn.0040d110
lea eax, [ebp - 0x10f0]
mov dword [ebp - 4], 0x7c
push eax
mov ecx, 0x5aa614
call fcn.004791c0
lea ecx, [ebp - 0x10f0]
mov eax, dword [eax]
or eax, 0xff000000
mov dword [ebp - 4], 0xffffffff
mov dword [0x57bb9c], eax
mov dword [0x57bb98], eax
call fcn.0040ad30
mov dword [0x5a9930], 0
jmp 0x47609d
push 0x5558dc
lea ecx, [ebp - 0x1180]
call fcn.0040d110
lea eax, [ebp - 0x1180]
mov dword [ebp - 4], 0x7d
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x5558ac
lea ecx, [ebp - 0x1168]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa64], eax
call fcn.0040d110
lea eax, [ebp - 0x1168]
mov byte [ebp - 4], 0x7e
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push str.RoundRect_BrushColor9_x
lea ecx, [ebp - 0x1150]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa60], eax
call fcn.0040d110
push str.RoundRect_BrushColor9_width
lea ecx, [ebp - 0x1138]
mov byte [ebp - 4], 0x7f
call fcn.0040d110
lea eax, [ebp - 0x1138]
mov byte [ebp - 4], 0x80
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x1150]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
push str.RoundRect_BrushColor9_y
cvttss2si ecx, dword [eax]
cvttss2si eax, dword [ebp - 0x18]
add ecx, eax
mov dword [ebp - 0xa5c], ecx
lea ecx, [ebp - 0x1120]
call fcn.0040d110
push str.RoundRect_BrushColor9_height
lea ecx, [ebp - 0x1108]
mov byte [ebp - 4], 0x81
call fcn.0040d110
lea eax, [ebp - 0x1108]
mov byte [ebp - 4], 0x82
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x1120]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
sub esp, 0x10
mov edx, esi
cvttss2si ecx, dword [eax]
cvttss2si eax, dword [ebp - 0x18]
add ecx, eax
mov eax, esp
mov dword [ebp - 0xa58], ecx
movups xmm0, xmmword [ebp - 0xa64]
mov ecx, dword [ebp - 0x47c]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
mov byte [ebp - 0x459], al
lea ecx, [ebp - 0x1108]
call fcn.0040ad30
lea ecx, [ebp - 0x1120]
call fcn.0040ad30
lea ecx, [ebp - 0x1138]
call fcn.0040ad30
lea ecx, [ebp - 0x1150]
call fcn.0040ad30
lea ecx, [ebp - 0x1168]
call fcn.0040ad30
lea ecx, [ebp - 0x1180]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ad30
cmp byte [ebp - 0x459], 0
je 0x475c90
test byte [ebp - 0x470], 4
je 0x476693
push str.RoundRect_BrushColor9_fill
lea ecx, [ebp - 0x1198]
call fcn.0040d110
lea eax, [ebp - 0x1198]
mov dword [ebp - 4], 0x83
push eax
mov ecx, 0x5aa614
call fcn.004791c0
lea ecx, [ebp - 0x1198]
jmp 0x476076
push 0x5559e0
lea ecx, [ebp - 0x1228]
call fcn.0040d110
lea eax, [ebp - 0x1228]
mov dword [ebp - 4], 0x84
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x555a80
lea ecx, [ebp - 0x1210]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa74], eax
call fcn.0040d110
lea eax, [ebp - 0x1210]
mov byte [ebp - 4], 0x85
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push str.RoundRect_BrushColor10_x
lea ecx, [ebp - 0x11f8]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa70], eax
call fcn.0040d110
push str.RoundRect_BrushColor10_width
lea ecx, [ebp - 0x11e0]
mov byte [ebp - 4], 0x86
call fcn.0040d110
lea eax, [ebp - 0x11e0]
mov byte [ebp - 4], 0x87
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x11f8]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
push str.RoundRect_BrushColor10_y
cvttss2si ecx, dword [eax]
cvttss2si eax, dword [ebp - 0x18]
add ecx, eax
mov dword [ebp - 0xa6c], ecx
lea ecx, [ebp - 0x11c8]
call fcn.0040d110
push str.RoundRect_BrushColor10_height
lea ecx, [ebp - 0x11b0]
mov byte [ebp - 4], 0x88
call fcn.0040d110
lea eax, [ebp - 0x11b0]
mov byte [ebp - 4], 0x89
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x11c8]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si ecx, dword [ebp - 0x18]
sub esp, 0x10
mov edx, esi
cvttss2si eax, dword [eax]
add ecx, eax
mov eax, esp
mov dword [ebp - 0xa68], ecx
movups xmm0, xmmword [ebp - 0xa74]
mov ecx, dword [ebp - 0x47c]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
mov byte [ebp - 0x459], al
lea ecx, [ebp - 0x11b0]
call fcn.0040ad30
lea ecx, [ebp - 0x11c8]
call fcn.0040ad30
lea ecx, [ebp - 0x11e0]
call fcn.0040ad30
lea ecx, [ebp - 0x11f8]
call fcn.0040ad30
lea ecx, [ebp - 0x1210]
call fcn.0040ad30
lea ecx, [ebp - 0x1228]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ad30
cmp byte [ebp - 0x459], 0
je 0x475e97
test byte [ebp - 0x470], 4
je 0x476693
push str.RoundRect_BrushColor10_fill
lea ecx, [ebp - 0x1240]
call fcn.0040d110
lea eax, [ebp - 0x1240]
mov dword [ebp - 4], 0x8a
push eax
mov ecx, 0x5aa614
call fcn.004791c0
lea ecx, [ebp - 0x1240]
mov eax, dword [eax]
or eax, 0xff000000
mov dword [ebp - 4], 0xffffffff
mov dword [0x57bb9c], eax
mov dword [0x57bb98], eax
call fcn.0040ad30
mov dword [0x5a9930], 0
jmp 0x47609d
push 0x555bcc
lea ecx, [ebp - 0x12d0]
call fcn.0040d110
lea eax, [ebp - 0x12d0]
mov dword [ebp - 4], 0x8b
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x555b98
lea ecx, [ebp - 0x12b8]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa84], eax
call fcn.0040d110
lea eax, [ebp - 0x12b8]
mov byte [ebp - 4], 0x8c
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push str.RoundRect_BrushColor11_x
lea ecx, [ebp - 0x12a0]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa80], eax
call fcn.0040d110
push str.RoundRect_BrushColor11_width
lea ecx, [ebp - 0x1288]
mov byte [ebp - 4], 0x8d
call fcn.0040d110
lea eax, [ebp - 0x1288]
mov byte [ebp - 4], 0x8e
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x12a0]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
push str.RoundRect_BrushColor11_y
cvttss2si ecx, dword [eax]
cvttss2si eax, dword [ebp - 0x18]
add ecx, eax
mov dword [ebp - 0xa7c], ecx
lea ecx, [ebp - 0x1270]
call fcn.0040d110
push str.RoundRect_BrushColor11_height
lea ecx, [ebp - 0x1258]
mov byte [ebp - 4], 0x8f
call fcn.0040d110
lea eax, [ebp - 0x1258]
mov byte [ebp - 4], 0x90
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x1270]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
sub esp, 0x10
mov edx, esi
cvttss2si ecx, dword [eax]
cvttss2si eax, dword [ebp - 0x18]
add ecx, eax
mov eax, esp
mov dword [ebp - 0xa78], ecx
movups xmm0, xmmword [ebp - 0xa84]
mov ecx, dword [ebp - 0x47c]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
mov byte [ebp - 0x459], al
lea ecx, [ebp - 0x1258]
call fcn.0040ad30
lea ecx, [ebp - 0x1270]
call fcn.0040ad30
lea ecx, [ebp - 0x1288]
call fcn.0040ad30
lea ecx, [ebp - 0x12a0]
call fcn.0040ad30
lea ecx, [ebp - 0x12b8]
call fcn.0040ad30
lea ecx, [ebp - 0x12d0]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ad30
cmp byte [ebp - 0x459], 0
je 0x4760f5
test byte [ebp - 0x470], 4
je 0x476693
push str.RoundRect_BrushColor11_fill
lea ecx, [ebp - 0x12e8]
call fcn.0040d110
lea eax, [ebp - 0x12e8]
mov dword [ebp - 4], 0x91
push eax
mov ecx, 0x5aa614
call fcn.004791c0
lea ecx, [ebp - 0x12e8]
mov eax, dword [eax]
or eax, 0xff000000
mov dword [ebp - 4], 0xffffffff
mov dword [0x57bb9c], eax
mov dword [0x57bb98], eax
call fcn.0040ad30
mov dword [0x5a9930], 1
movsd xmm0, qword [0x5a9928]
ucomisd xmm0, qword [0x561150]
mov dword [0x57bb7c], 0
mov dword [0x57bb78], 0
lahf
test ah, 0x44
jnp 0x4760d5
ucomisd xmm0, qword [0x561158]
lahf
test ah, 0x44
jp 0x4760e5
movsd xmm0, qword [0x561148]
movsd qword [0x5a9928], xmm0
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
jmp 0x476693
push 0x555ce0
lea ecx, [ebp - 0x1378]
call fcn.0040d110
lea eax, [ebp - 0x1378]
mov dword [ebp - 4], 0x92
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x555d80
lea ecx, [ebp - 0x1360]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa94], eax
call fcn.0040d110
lea eax, [ebp - 0x1360]
mov byte [ebp - 4], 0x93
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x555d4c
lea ecx, [ebp - 0x13e8]
cvttss2si eax, dword [eax]
mov dword [ebp - 0xa90], eax
call fcn.0040d110
push 0x555de8
lea ecx, [ebp - 0x1330]
mov byte [ebp - 4], 0x94
call fcn.0040d110
lea eax, [ebp - 0x1330]
mov byte [ebp - 4], 0x95
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x13e8]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si ecx, dword [ebp - 0x18]
push 0x555db4
cvttss2si eax, dword [eax]
add ecx, eax
mov dword [ebp - 0xa8c], ecx
lea ecx, [ebp - 0x1318]
call fcn.0040d110
push 0x555e58
lea ecx, [ebp - 0x1300]
mov byte [ebp - 4], 0x96
call fcn.0040d110
lea eax, [ebp - 0x1300]
mov byte [ebp - 4], 0x97
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0x1318]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si ecx, dword [ebp - 0x18]
sub esp, 0x10
mov edx, esi
cvttss2si eax, dword [eax]
add ecx, eax
mov eax, esp
mov dword [ebp - 0xa88], ecx
movups xmm0, xmmword [ebp - 0xa94]
mov ecx, dword [ebp - 0x47c]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
mov byte [ebp - 0x459], al
lea ecx, [ebp - 0x1300]
call fcn.0040ad30
lea ecx, [ebp - 0x1318]
call fcn.0040ad30
lea ecx, [ebp - 0x1330]
call fcn.0040ad30
lea ecx, [ebp - 0x13e8]
call fcn.0040ad30
lea ecx, [ebp - 0x1360]
call fcn.0040ad30
lea ecx, [ebp - 0x1378]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ad30
cmp byte [ebp - 0x459], 0
je 0x476693
test byte [ebp - 0x470], 4
je 0x476693
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0xba8]
push eax
call fcn.0040e4f0
add esp, 4
lea ecx, [ebp - 0xb1c]
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
push 0x555e24
movq qword [ebp - 0x498], xmm0
mov dword [ebp - 0x490], eax
call fcn.0040d110
lea eax, [ebp - 0xb1c]
mov dword [ebp - 4], 0x98
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x555ec8
lea ecx, [ebp - 0xaec]
cvttss2si eax, dword [eax]
mov dword [ebp - 0x4a8], eax
call fcn.0040d110
lea eax, [ebp - 0xaec]
mov byte [ebp - 4], 0x99
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push str.RoundRect_BrushColor12_x
lea ecx, [ebp - 0xb04]
cvttss2si eax, dword [eax]
mov dword [ebp - 0x4a4], eax
call fcn.0040d110
push str.RoundRect_BrushColor12_width
lea ecx, [ebp - 0xb44]
mov byte [ebp - 4], 0x9a
call fcn.0040d110
lea eax, [ebp - 0xb44]
mov byte [ebp - 4], 0x9b
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0xb04]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si ecx, dword [ebp - 0x18]
push str.RoundRect_BrushColor12_y
cvttss2si eax, dword [eax]
add ecx, eax
mov dword [ebp - 0x4a0], ecx
lea ecx, [ebp - 0xb5c]
call fcn.0040d110
push str.RoundRect_BrushColor12_height
lea ecx, [ebp - 0xb74]
mov byte [ebp - 4], 0x9c
call fcn.0040d110
lea eax, [ebp - 0xb74]
mov byte [ebp - 4], 0x9d
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0xb5c]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si ecx, dword [ebp - 0x18]
cvttss2si eax, dword [eax]
add ecx, eax
sub esp, 0x10
mov dword [ebp - 0x49c], ecx
mov eax, esp
movups xmm0, xmmword [ebp - 0x4a8]
movsx edx, word [ebp - 0x490]
movsx ecx, word [ebp - 0x492]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
mov byte [ebp - 0x459], al
lea ecx, [ebp - 0xb74]
call fcn.0040ad30
lea ecx, [ebp - 0xb5c]
call fcn.0040ad30
lea ecx, [ebp - 0xb44]
call fcn.0040ad30
lea ecx, [ebp - 0xb04]
call fcn.0040ad30
lea ecx, [ebp - 0xaec]
call fcn.0040ad30
lea ecx, [ebp - 0xb1c]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ad30
cmp byte [ebp - 0x459], 0
je 0x476661
nop word [eax + eax]
test byte [ebp - 0x494], 4
je 0x476713
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0xba8]
push eax
call fcn.0040e4f0
add esp, 4
lea ecx, [ebp - 0xb1c]
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
push 0x555e24
movq qword [ebp - 0x498], xmm0
mov dword [ebp - 0x490], eax
call fcn.0040d110
lea eax, [ebp - 0xb1c]
mov dword [ebp - 4], 0x98
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push 0x555ec8
lea ecx, [ebp - 0xaec]
cvttss2si eax, dword [eax]
mov dword [ebp - 0x4a8], eax
call fcn.0040d110
lea eax, [ebp - 0xaec]
mov byte [ebp - 4], 0x99
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
push str.RoundRect_BrushColor12_x
lea ecx, [ebp - 0xb04]
cvttss2si eax, dword [eax]
mov dword [ebp - 0x4a4], eax
call fcn.0040d110
push str.RoundRect_BrushColor12_width
lea ecx, [ebp - 0xb44]
mov byte [ebp - 4], 0x9a
call fcn.0040d110
lea eax, [ebp - 0xb44]
mov byte [ebp - 4], 0x9b
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0xb04]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
push str.RoundRect_BrushColor12_y
cvttss2si ecx, dword [eax]
cvttss2si eax, dword [ebp - 0x18]
add ecx, eax
mov dword [ebp - 0x4a0], ecx
lea ecx, [ebp - 0xb5c]
call fcn.0040d110
push str.RoundRect_BrushColor12_height
lea ecx, [ebp - 0xb74]
mov byte [ebp - 4], 0x9c
call fcn.0040d110
lea eax, [ebp - 0xb74]
mov byte [ebp - 4], 0x9d
push eax
mov ecx, 0x5a9bdc
call fcn.004791c0
mov ecx, 0x5a9bdc
movss xmm0, dword [eax]
lea eax, [ebp - 0xb5c]
push eax
movss dword [ebp - 0x18], xmm0
call fcn.004791c0
cvttss2si ecx, dword [eax]
cvttss2si eax, dword [ebp - 0x18]
add ecx, eax
sub esp, 0x10
mov dword [ebp - 0x49c], ecx
mov eax, esp
movups xmm0, xmmword [ebp - 0x4a8]
movsx edx, word [ebp - 0x490]
movsx ecx, word [ebp - 0x492]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
mov byte [ebp - 0x459], al
lea ecx, [ebp - 0xb74]
call fcn.0040ad30
lea ecx, [ebp - 0xb5c]
call fcn.0040ad30
lea ecx, [ebp - 0xb44]
call fcn.0040ad30
lea ecx, [ebp - 0xb04]
call fcn.0040ad30
lea ecx, [ebp - 0xaec]
call fcn.0040ad30
lea ecx, [ebp - 0xb1c]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ad30
cmp byte [ebp - 0x459], 0
jne 0x476480
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
lea ecx, [ebp - 0x13c8]
call fcn.00401d60
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x484], eax
mov dword [ebp - 0x488], ecx
mov ecx, dword [0x5a993c]
mov edi, dword [ebp - 0x47c]
lea eax, [ecx - 0x32]
add ecx, 0xffffffec
cmp eax, ecx
mov edx, ecx
mov esi, eax
cmovle edx, eax
cmovle esi, ecx
cmp edi, 5
jl 0x476752
cmp edi, 0x5f
mov edi, dword [ebp - 0x480]
jg 0x476758
cmp edi, edx
jl 0x476758
cmp edi, esi
jg 0x476758
mov al, byte [ebp - 0x470]
test al, 4
je 0x47690e
cmp dword [0x57bb94], 2
jne 0x476704
mov eax, dword [0x57bb90]
mov dword [0x57bba4], eax
mov eax, dword [0x57bba0]
mov dword [0x57bb90], eax
mov dword [0x57bb94], 1
jmp 0x4768f5
movsd xmm0, qword [0x5a9928]
movsd xmm1, qword [0x561158]
ucomisd xmm0, xmm1
lahf
test ah, 0x44
jp 0x476742
movsd xmm0, qword [0x561148]
movsd qword [0x5a9928], xmm0
jmp 0x47666c
movaps xmm0, xmm1
movsd qword [0x5a9928], xmm0
jmp 0x47666c
mov edi, dword [ebp - 0x480]
mov esi, eax
mov edx, ecx
cmp eax, ecx
jle 0x476764
mov esi, edx
mov edx, eax
cmp dword [ebp - 0x47c], 0x5f
jl 0x4767bb
cmp dword [ebp - 0x47c], 0xb9
jg 0x4767bb
cmp edi, esi
jl 0x4767bb
cmp edi, edx
jg 0x4767bb
mov al, byte [ebp - 0x470]
test al, 4
je 0x47690e
cmp dword [0x57bb94], 2
je 0x4767ac
mov eax, dword [0x57bb90]
mov dword [0x57bba0], eax
mov eax, dword [0x57bba4]
mov dword [0x57bb90], eax
mov dword [0x57bb94], 2
jmp 0x4768f5
mov esi, eax
mov edx, ecx
cmp eax, ecx
jle 0x4767c7
mov esi, edx
mov edx, eax
cmp dword [ebp - 0x47c], 0xc3
jl 0x47681b
cmp dword [ebp - 0x47c], 0x11d
jg 0x47681b
cmp edi, esi
jl 0x47681b
cmp edi, edx
jg 0x47681b
mov al, byte [ebp - 0x470]
test al, 4
je 0x47690e
mov eax, dword [0x57bb94]
cmp eax, 1
je 0x4768f5
cmp eax, 2
je 0x4768f5
mov dword [0x57bb94], 1
jmp 0x4768f5
mov esi, eax
mov edx, ecx
cmp eax, ecx
jle 0x476827
mov esi, edx
mov edx, eax
cmp dword [ebp - 0x47c], 0x11d
jl 0x476881
cmp dword [ebp - 0x47c], 0x177
jg 0x476881
cmp edi, esi
jl 0x476881
cmp edi, edx
jg 0x476881
mov al, byte [ebp - 0x470]
test al, 4
je 0x47690e
cmp dword [0x57bb94], 2
jne 0x476872
mov eax, dword [0x57bb90]
mov dword [0x57bba4], eax
mov eax, dword [0x57bba0]
mov dword [0x57bb90], eax
mov dword [0x57bb94], 3
jmp 0x4768f5
mov dword [ebp - 0xaa0], eax
sub esp, 0x10
mov dword [ebp - 0xa98], ecx
mov eax, esp
mov ecx, dword [ebp - 0x47c]
mov edx, edi
mov dword [ebp - 0xaa4], 0x177
mov dword [ebp - 0xa9c], 0x1d1
movups xmm0, xmmword [ebp - 0xaa4]
movups xmmword [eax], xmm0
call fcn.0040b830
add esp, 0x10
test al, al
je 0x476900
mov al, byte [ebp - 0x470]
test al, 4
je 0x47690e
cmp dword [0x57bb94], 2
jne 0x4768eb
mov eax, dword [0x57bb90]
mov dword [0x57bba4], eax
mov eax, dword [0x57bba0]
mov dword [0x57bb90], eax
mov dword [0x57bb94], 4
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov al, byte [ebp - 0x470]
test al, 4
jne 0x471b20
mov ecx, dword [0x5a993c]
mov esi, 1
mov eax, dword [0x5a9940]
add eax, 0xffffff97
lea edx, [ecx - 0x100]
add ecx, 0xffffff5a
mov edi, edx
cmp eax, esi
jge 0x47693a
mov esi, eax
mov eax, 1
cmp edx, ecx
jle 0x476942
mov edi, ecx
mov ecx, edx
mov edx, dword [ebp - 0x47c]
cmp edx, esi
jl 0x476962
cmp edx, eax
jg 0x476962
cmp dword [ebp - 0x480], edi
jl 0x476962
mov edi, dword [ebp - 0x480]
cmp edi, ecx
jle 0x4769b6
mov eax, dword [0x5a9940]
xor edi, edi
mov ecx, dword [0x5a993c]
test eax, eax
mov esi, eax
cmovns esi, edi
test eax, eax
lea edx, [ecx - 0x32]
cmovns edi, eax
cmp edx, ecx
jle 0x476988
mov eax, ecx
mov ecx, edx
jmp 0x47698a
mov eax, edx
mov edx, dword [ebp - 0x47c]
cmp edx, esi
jl 0x471b1a
cmp edx, edi
mov edi, dword [ebp - 0x480]
jg 0x471b20
cmp edi, eax
jl 0x471b20
cmp edi, ecx
jg 0x471b20
cmp dword [ebp - 0x48c], 0
je 0x471b20
movsd xmm0, qword [0x561138]
movsd qword [0x5a9928], xmm0
jmp 0x471b20
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov dl, byte [ebp - 0x470]
mov eax, dword [0x5aa854]
test eax, eax
sete dh
test eax, eax
jne 0x476a16
cmp byte [0x5a6cbc], al
jne 0x476de6
test dh, dh
je 0x4773ff
mov eax, dword [0x5a9940]
mov ecx, dword [0x5a993c]
lea esi, [eax - 0x60]
lea edi, [ecx - 0x37]
add ecx, 0xfffffff6
mov dword [ebp - 0x18], edi
cmp esi, eax
mov edi, eax
cmovle edi, esi
cmovle esi, eax
mov dword [ebp - 0x460], edi
mov edi, dword [ebp - 0x18]
cmp edi, ecx
jle 0x476a4a
mov eax, ecx
mov ecx, edi
jmp 0x476a4c
mov eax, edi
mov edi, dword [ebp - 0x47c]
cmp edi, dword [ebp - 0x460]
jl 0x476de6
cmp edi, esi
jg 0x476de6
mov esi, dword [ebp - 0x480]
cmp esi, eax
jl 0x476de6
cmp esi, ecx
jg 0x476de6
test dl, 4
je 0x4773ff
nop word [eax + eax]
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x16b0]
push eax
call fcn.0040e4f0
mov ecx, dword [0x5a9940]
add esp, 4
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
lea edx, [ecx - 0x60]
mov dword [ebp - 0x46c], eax
mov eax, dword [0x5a993c]
movq qword [ebp - 0x474], xmm0
lea edi, [eax - 0x37]
lea esi, [eax - 0xa]
mov dword [ebp - 0x460], edi
mov eax, dword [ebp - 0x470]
shr eax, 0x10
cmp edx, ecx
cwde
mov dword [ebp - 0x18], eax
mov eax, ecx
cmovle eax, edx
cmovle edx, ecx
cmp edi, esi
jle 0x476af7
mov dword [ebp - 0x460], esi
mov esi, edi
mov ecx, dword [ebp - 0x18]
cmp ecx, eax
jl 0x4773e9
cmp ecx, edx
jg 0x4773e9
movsx eax, word [ebp - 0x46c]
cmp eax, dword [ebp - 0x460]
jl 0x4773e9
cmp eax, esi
jg 0x4773e9
test byte [ebp - 0x470], 4
jne 0x476a90
xorps xmm0, xmm0
movlpd qword [ebp - 0x30], xmm0
push 0x5a9994
mov dword [ebp - 0x30], 0x5a9994
call fcn.004bd928
mov dword [ebp - 4], 0x9e
cmp dword [0x5aaa80], 0
push 0x5a9994
setne byte [ebp - 0x459]
call fcn.004bd944
add esp, 8
mov byte [ebp - 0x2c], 0
cmp byte [ebp - 0x459], 0
je 0x476b86
mov dword [ebp - 4], 0xffffffff
jmp 0x4773f4
mov ecx, dword [0x5aa854]
test ecx, ecx
je 0x476c96
mov esi, dword [0x5aa850]
dec ecx
add esi, ecx
mov ecx, 0x5aa844
push esi
call fcn.0041dfc0
push esi
mov edi, dword [eax + 0x70]
call fcn.0041dfc0
push esi
mov eax, dword [eax + 0x6c]
mov dword [ebp - 0x18], eax
call fcn.0041dfc0
cmp dword [eax + 0x6c], 2
jne 0x476be2
cmp byte [0x5a987c], 0
jne 0x476be2
push esi
call fcn.0041dfc0
mov edx, eax
mov ecx, 0x5a9b00
call fcn.004036f0
test al, al
je 0x476bec
mov ecx, 0x5aa844
call fcn.00478fe0
push ecx
lea ecx, [ebp - 0x13fc]
call fcn.00479040
push ecx
mov ecx, eax
call fcn.00478f60
lea ecx, [ebp - 0x13fc]
call fcn.00479020
mov ecx, dword [0x5aa854]
test ecx, ecx
je 0x476c73
mov eax, dword [0x5aa850]
dec ecx
add eax, ecx
mov ecx, 0x5aa844
push eax
call fcn.0041dfc0
push eax
mov ecx, 0x5a9b00
call fcn.004d0600
mov ecx, dword [0x5aa854]
mov eax, dword [0x5aa850]
dec ecx
add eax, ecx
mov ecx, 0x5aa844
push eax
call fcn.0041dfc0
add eax, 0x64
push eax
call fcn.00479370
mov ecx, dword [0x5aa854]
mov eax, dword [0x5aa850]
dec ecx
add eax, ecx
mov ecx, 0x5aa844
push eax
call fcn.0041dfc0
mov eax, dword [eax + 0x70]
jmp 0x476cb5
cmp edi, 0xa
jle 0x476c84
mov dword [ebp - 4], 0xffffffff
jmp 0x476f22
cmp dword [ebp - 0x18], 2
jne 0x476c96
mov dword [ebp - 4], 0xffffffff
jmp 0x476f22
push 1
xor edx, edx
mov ecx, 0x5a9b00
call fcn.0040b730
add esp, 4
call fcn.0041d340
mov byte [0x5a6cbc], 1
xor eax, eax
push 1
mov edx, 0x1000000
mov dword [0x5a9964], eax
mov ecx, 0x5a9b68
call fcn.0040b730
push 0xff
push 0x5a9b00
push 0
xor edx, edx
mov ecx, 0x5a9b68
call fcn.0040b950
add esp, 0x10
cmp byte [0x5a987c], 0
jne 0x476dbe
push 0
mov dword [ebp - 0x3c], 0x1ff0000
call dword [sym.imp.USER32.dll_GetDC]
mov ecx, 0x5a9b00
mov dword [ebp - 0x78], 0
mov esi, eax
mov dword [ebp - 0x74], 0
call fcn.004d0ac0
mov ecx, 0x5a9b00
mov dword [ebp - 0x70], eax
call fcn.004d0ab0
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x68]
mov dword [ebp - 0x418], eax
lea eax, [ebp - 0x70]
mov dword [ebp - 0x414], eax
lea eax, [ebp - 0x78]
mov dword [ebp - 0x40c], eax
lea eax, [ebp - 0x3c]
push 0x5a9b68
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x3fc], 0
mov dword [ebp - 0x420], 0x28
mov dword [ebp - 0x41c], esi
mov dword [ebp - 0x408], 0xffffff
mov dword [ebp - 0x404], eax
mov dword [ebp - 0x400], 2
call fcn.004cfe70
add esp, 4
mov dword [ebp - 0x410], eax
lea eax, [ebp - 0x420]
push eax
push dword [0x5a9a60]
call dword [sym.imp.USER32.dll_UpdateLayeredWindowIndirect]
mov dword [ebp - 4], 0xffffffff
jmp 0x4773f4
mov byte [0x5a9912], 1
mov byte [0x57bb8c], 1
mov byte [0x5a9874], 0
mov byte [0x5a987c], 0
mov dword [ebp - 4], 0xffffffff
jmp 0x4773f4
test dh, dh
je 0x4773ff
mov eax, dword [0x5a9954]
inc eax
cmp dword [0x5a994c], eax
jg 0x4773ff
cmp dword [0x5a9950], 0
je 0x4773ff
mov eax, dword [0x5a9940]
mov ecx, dword [0x5a993c]
lea esi, [eax - 0x60]
lea edi, [ecx - 0x37]
add ecx, 0xfffffff6
mov dword [ebp - 0x18], edi
cmp esi, eax
mov edi, eax
cmovle edi, esi
cmovle esi, eax
mov dword [ebp - 0x460], edi
mov edi, dword [ebp - 0x18]
cmp edi, ecx
jle 0x476e41
mov eax, ecx
mov ecx, edi
jmp 0x476e43
mov eax, edi
mov edi, dword [ebp - 0x47c]
cmp edi, dword [ebp - 0x460]
jl 0x4773ff
cmp edi, esi
jg 0x4773ff
mov esi, dword [ebp - 0x480]
cmp esi, eax
jl 0x4773ff
cmp esi, ecx
jg 0x4773ff
test dl, 4
je 0x4773ff
nop dword [eax]
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x1760]
push eax
call fcn.0040e4f0
mov ecx, dword [0x5a9940]
add esp, 4
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
lea edx, [ecx - 0x60]
mov dword [ebp - 0x46c], eax
mov eax, dword [0x5a993c]
movq qword [ebp - 0x474], xmm0
lea edi, [eax - 0x37]
lea esi, [eax - 0xa]
mov dword [ebp - 0x460], edi
mov eax, dword [ebp - 0x470]
shr eax, 0x10
cmp edx, ecx
cwde
mov dword [ebp - 0x18], eax
mov eax, ecx
cmovle eax, edx
cmovle edx, ecx
cmp edi, esi
jle 0x476ee7
mov dword [ebp - 0x460], esi
mov esi, edi
mov ecx, dword [ebp - 0x18]
cmp ecx, eax
jl 0x4773e9
cmp ecx, edx
jg 0x4773e9
movsx eax, word [ebp - 0x46c]
cmp eax, dword [ebp - 0x460]
jl 0x4773e9
cmp eax, esi
jg 0x4773e9
test byte [ebp - 0x470], 4
jne 0x476e80
mov eax, dword [0x5a9954]
inc eax
cmp dword [0x5a994c], eax
jne 0x476f4a
mov byte [0x5a987c], 1
mov byte [0x57bb8c], 0
mov byte [0x5a9874], 0
jmp 0x4773f4
push 0x555f6c
mov ecx, 0x5aa620
call fcn.00491990
mov ecx, dword [0x5a994c]
dec ecx
push ecx
mov ecx, eax
call fcn.00491210
push 0x555fd0
mov ecx, eax
call fcn.00491990
push 4
sub esp, 0x18
mov ecx, eax
push esp
call fcn.00490340
lea ecx, [ebp - 0x15ac]
call fcn.004a4b80
add esp, 0x18
mov ecx, eax
call fcn.00406cd0
push eax
call fcn.004e2a61
add esp, 8
lea ecx, [ebp - 0x15ac]
mov esi, eax
call fcn.00406e20
cmp esi, 0xffffffff
je 0x4773f4
push 0x555fbc
mov ecx, 0x5aa620
call fcn.00491990
mov ecx, dword [0x5a994c]
dec ecx
push ecx
mov ecx, eax
call fcn.00491210
push 0x555fdc
mov ecx, eax
call fcn.00491990
sub esp, 0x1c
mov ecx, eax
push esp
call fcn.00490340
lea ecx, [ebp - 0x15c4]
call fcn.004a4b80
add esp, 0x18
push eax
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0x9f
call fcn.00479ed0
lea ecx, [ebp - 0x15c4]
mov byte [ebp - 4], 0xa1
call fcn.00406e20
lea eax, [ebp - 0x15f4]
push eax
lea ecx, [ebp - 0xe0]
call fcn.00421a70
lea ecx, [ebp - 0x15dc]
mov byte [ebp - 4], 0xa2
push ecx
mov ecx, eax
call fcn.00421b40
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0xa3
push ecx
mov ecx, eax
call fcn.00421a50
lea ecx, [ebp - 0x15dc]
call fcn.0040ad30
lea ecx, [ebp - 0x15f4]
mov byte [ebp - 4], 0xa6
call fcn.0040ad30
lea eax, [ebp - 0x160c]
push eax
lea ecx, [ebp - 0xe0]
call fcn.00421bb0
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0xa7
push ecx
mov ecx, eax
call fcn.00421a50
lea ecx, [ebp - 0x160c]
mov byte [ebp - 4], 0xa9
call fcn.0040ad30
push 0xa8
lea eax, [ebp - 0x300]
push 0
push eax
call fcn.004d73b0
push 0x555fd8
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x163c]
call fcn.00479e50
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0xaa
push ecx
mov edx, eax
lea ecx, [ebp - 0x1624]
call fcn.00479f00
add esp, 0xc
mov byte [ebp - 4], 0xab
lea ecx, [ebp - 0x300]
push eax
call fcn.00478e10
lea ecx, [ebp - 0x1624]
call fcn.0040ad30
lea ecx, [ebp - 0x163c]
mov byte [ebp - 4], 0xae
call fcn.0040ad30
push str._Y__m__d__H__M__S
mov edx, 0x5a9970
lea ecx, [ebp - 0x174c]
call fcn.00479f70
add esp, 4
lea ecx, [ebp - 0x300]
mov edx, eax
call fcn.00479fa0
xorps xmm0, xmm0
mov dword [0x5a9948], 0x1f4
push 0x5a9994
lea ecx, [ebp - 0x24]
movlpd qword [ebp - 0x24], xmm0
call fcn.0041be10
mov byte [ebp - 4], 0xaf
lea ecx, [ebp - 0x24]
cmp dword [0x5aaa80], 0
setne byte [ebp - 0x459]
call fcn.0041bdd0
cmp byte [ebp - 0x459], 0
je 0x4771bb
cmp byte [ebp - 0x20], 0
je 0x477183
push dword [ebp - 0x24]
call fcn.004bd944
add esp, 4
lea ecx, [ebp - 0x300]
call fcn.00477910
lea ecx, [ebp - 0x128]
call fcn.0040ad30
lea ecx, [ebp - 0x110]
call fcn.0040ad30
lea ecx, [ebp - 0xe0]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ad30
jmp 0x4773f4
push 0x64
lea eax, [ebp - 0x1f0]
push 0
push eax
call fcn.004d73b0
add esp, 0xc
lea ecx, [ebp - 0x1f0]
push 0
push 0
call fcn.004d0180
push 0x555fe4
mov ecx, 0x5aa620
mov byte [ebp - 4], 0xb0
call fcn.00491990
mov ecx, dword [0x5a994c]
dec ecx
push ecx
mov ecx, eax
call fcn.00491210
push 0x556048
mov ecx, eax
call fcn.00491990
push 0
push 0
push 0
sub esp, 0x18
mov ecx, eax
push esp
call fcn.00490340
lea ecx, [ebp - 0x166c]
call fcn.004a4b80
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0xb1
lea ecx, [ebp - 0x1654]
call fcn.004a46c0
mov ecx, eax
mov byte [ebp - 4], 0xb2
call fcn.0040ad20
push eax
lea eax, [ebp - 0x1f0]
push eax
call fcn.004cffb0
add esp, 0x14
lea ecx, [ebp - 0x1654]
call fcn.0040ad30
lea ecx, [ebp - 0x166c]
mov byte [ebp - 4], 0xb0
call fcn.00406e20
lea eax, [ebp - 0x1f0]
mov ecx, 0x5a9b00
push eax
call fcn.004d0600
lea ecx, [ebp - 0xb24]
call fcn.00403cf0
push eax
call fcn.00479330
lea ecx, [ebp - 0xb24]
call fcn.00403d30
inc dword [0x5a994c]
mov edx, 0x1000000
push 1
mov ecx, 0x5a9b68
call fcn.0040b730
push 0xff
push 0x5a9b00
push 0
xor edx, edx
mov ecx, 0x5a9b68
call fcn.0040b950
add esp, 0x10
cmp byte [0x57bb8c], 0
je 0x4773bd
push 0
mov dword [ebp - 0x40], 0x1ff0000
call dword [sym.imp.USER32.dll_GetDC]
mov ecx, 0x5a9b00
mov dword [ebp - 0x98], 0
mov esi, eax
mov dword [ebp - 0x94], 0
call fcn.004d0ac0
mov ecx, 0x5a9b00
mov dword [ebp - 0x90], eax
call fcn.004d0ab0
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0x440], eax
lea eax, [ebp - 0x90]
mov dword [ebp - 0x43c], eax
lea eax, [ebp - 0x98]
mov dword [ebp - 0x434], eax
lea eax, [ebp - 0x40]
push 0x5a9b68
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x448], 0x28
mov dword [ebp - 0x444], esi
mov dword [ebp - 0x430], 0xffffff
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], 2
call fcn.004cfe70
add esp, 4
mov dword [ebp - 0x438], eax
lea eax, [ebp - 0x448]
push eax
push dword [0x5a9a60]
call dword [sym.imp.USER32.dll_UpdateLayeredWindowIndirect]
lea ecx, [ebp - 0x1f0]
call fcn.004d0520
jmp 0x477172
lea ecx, [ebp - 0x1f0]
mov byte [0x5a9912], 1
mov byte [0x57bb8c], 1
mov byte [0x5a9874], 0
mov byte [0x5a987c], 0
call fcn.004d0520
jmp 0x477172
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov ecx, dword [0x5a993c]
movsx edi, word [ebp - 0x46e]
movsx esi, word [ebp - 0x46c]
mov dword [ebp - 0x18], esi
lea edx, [ecx - 0x94]
mov dword [ebp - 0x20], edi
lea eax, [ecx - 0x44]
cmp edx, eax
mov ecx, eax
cmovle ecx, edx
cmovle edx, eax
cmp edi, 0x128
jl 0x477517
cmp edi, 0x178
jg 0x477517
cmp esi, ecx
jl 0x477517
cmp esi, edx
jg 0x477517
test byte [ebp - 0x470], 4
je 0x477517
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x1740]
push eax
call fcn.0040e4f0
add esp, 4
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x5d8], eax
mov eax, dword [0x5a993c]
movsx edi, word [ebp - 0x5d8]
movq qword [ebp - 0x5e0], xmm0
lea edx, [eax - 0x94]
lea ecx, [eax - 0x44]
mov eax, dword [ebp - 0x5dc]
shr eax, 0x10
mov esi, ecx
cmp edx, ecx
cwde
cmovle esi, edx
cmovle edx, ecx
add eax, 0xfffffed8
cmp eax, 0x50
ja 0x4774df
cmp edi, esi
jl 0x4774df
cmp edi, edx
jg 0x4774df
test byte [ebp - 0x5dc], 4
jne 0x477461
cmp byte [0x5a986c], 0
sete byte [0x5a986c]
jmp 0x4774ea
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
lea ecx, [ebp - 0x13d0]
call fcn.00401d60
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x20]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x488], ecx
mov dword [ebp - 0x484], eax
cmp dword [0x5a9880], 2
jne 0x4778d7
mov ecx, dword [0x5a993c]
lea edx, [ecx - 0x37]
lea eax, [ecx - 0xf]
cmp edx, eax
mov ecx, eax
cmovle ecx, edx
cmovle edx, eax
cmp edi, 2
jl 0x4778d7
cmp edi, 0x66
jg 0x4778d7
cmp esi, ecx
jl 0x4778d7
cmp esi, edx
jg 0x4778d7
test byte [ebp - 0x470], 4
je 0x4778d7
nop dword [eax]
mov edx, dword [0x5a9a5c]
lea eax, [ebp - 0x1730]
push eax
call fcn.0040e4f0
add esp, 4
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x5e4], eax
mov eax, dword [0x5a993c]
movsx edi, word [ebp - 0x5e4]
movq qword [ebp - 0x5ec], xmm0
lea edx, [eax - 0x37]
lea ecx, [eax - 0xf]
mov eax, dword [ebp - 0x5e8]
shr eax, 0x10
mov esi, ecx
cmp edx, ecx
cwde
cmovle esi, edx
cmovle edx, ecx
add eax, 0xfffffffe
cmp eax, 0x64
ja 0x477898
cmp edi, esi
jl 0x477898
cmp edi, edx
jg 0x477898
test byte [ebp - 0x5e8], 4
jne 0x477570
mov edx, 0x5a6d50
lea ecx, [ebp - 0x1710]
call fcn.004a46c0
mov dword [ebp - 4], 0xb3
mov ecx, eax
mov esi, dword [ebp - 0x464]
push 0x15
or esi, 0x2000
push 0x55601c
mov dword [ebp - 0x478], esi
call fcn.0040b220
mov dword [ebp - 0x984], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x994], xmm0
mov dword [ebp - 0x980], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
or esi, 0x40000
movups xmmword [ebp - 0x994], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x984], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 4], 0xb4
lea eax, [ebp - 0x994]
or esi, 0x4000
cmp dword [ebp - 0x980], 7
push ecx
cmova eax, dword [ebp - 0x994]
push eax
mov dword [ebp - 0x464], esi
mov dword [ebp - 0x478], esi
call fcn.004e0c5c
add esp, 8
test eax, eax
jne 0x477729
mov edx, 0x5a6d50
lea ecx, [ebp - 0x169c]
call fcn.004a46c0
mov dword [ebp - 4], 0xb5
lea ecx, [ebp - 0x1684]
or esi, 0x8000
mov edx, eax
push str.plug_in_
mov dword [ebp - 0x478], esi
call fcn.0040af20
add esp, 4
mov dword [ebp - 4], 0xb6
or esi, 0x10000
mov ecx, eax
mov dword [ebp - 0x478], esi
call fcn.0040ad20
push eax
lea ecx, [ebp - 0x1390]
call fcn.0040d110
or esi, 0x20000
lea ecx, [ebp - 0x1390]
mov dword [ebp - 0x464], esi
call fcn.004b8290
mov byte [ebp - 0x459], 1
test al, al
je 0x477730
mov byte [ebp - 0x459], 0
test esi, 0x20000
je 0x47774f
and esi, 0xfffdffff
lea ecx, [ebp - 0x1390]
mov dword [ebp - 0x464], esi
call fcn.0040ad30
test esi, 0x10000
je 0x47776e
and esi, 0xfffeffff
lea ecx, [ebp - 0x1684]
mov dword [ebp - 0x464], esi
call fcn.0040ad30
test esi, 0x8000
je 0x47778d
and esi, 0xffff7fff
lea ecx, [ebp - 0x169c]
mov dword [ebp - 0x464], esi
call fcn.0040ad30
test esi, 0x4000
je 0x4777ac
and esi, 0xffffbfff
lea ecx, [ebp - 0x994]
mov dword [ebp - 0x464], esi
call fcn.0040ad30
mov dword [ebp - 4], 0xffffffff
test esi, 0x2000
je 0x4777d2
and esi, 0xffffdfff
lea ecx, [ebp - 0x1710]
mov dword [ebp - 0x464], esi
call fcn.0040ad30
cmp byte [ebp - 0x459], 0
je 0x4778a3
xorps xmm0, xmm0
mov dword [ebp - 0x188], 0x44
push 0x556050
mov edx, 0x5a6d50
movlpd qword [ebp - 0x184], xmm0
lea ecx, [ebp - 0x16c8]
movlpd qword [ebp - 0x17c], xmm0
movlpd qword [ebp - 0x174], xmm0
movlpd qword [ebp - 0x16c], xmm0
movlpd qword [ebp - 0x164], xmm0
movlpd qword [ebp - 0x15c], xmm0
movlpd qword [ebp - 0x154], xmm0
movlpd qword [ebp - 0x14c], xmm0
movups xmmword [ebp - 0x458], xmm0
call fcn.00479df0
add esp, 4
lea ecx, [ebp - 0x458]
push ecx
lea ecx, [ebp - 0x188]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, eax
call fcn.00406cd0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
lea ecx, [ebp - 0x16c8]
call fcn.00406e20
push dword [ebp - 0x458]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push dword [ebp - 0x454]
call edi
jmp 0x4778a3
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
lea ecx, [ebp - 0xbb0]
call fcn.00401d60
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x488], ecx
mov dword [ebp - 0x484], eax
jmp 0x4778d7
mov edx, dword [0x5a9a5c]
call fcn.0040e2d0
cmp byte [0x5a99bd], 0
je 0x470530
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004d523a
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004deff4
int3