Function at 0x401f4e
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42240b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x204
push esi
push edi
lea ecx, [ebp - 0x30]
call fcn.0041c676
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x7c]
call fcn.004036b0
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4313bc], eax
mov eax, dword [0x4313bc]
sub eax, dword [0x4313c0]
mov dword [0x4313b8], eax
cmp dword [0x4313b8], 0x64
jbe 0x401fc7
mov ecx, dword [0x4312b0]
add ecx, 1
mov dword [0x4312b0], ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4313c0], eax
cmp dword [0x4312a4], 0
je 0x402fbc
cmp dword [0x4313d0], 0
jne 0x401fe7
mov dword [0x4313d0], 1
push 1
mov edx, dword [0x431128]
mov eax, dword [0x431128]
mov ecx, dword [edx + 0x1c]
sub ecx, dword [eax + 0x14]
push ecx
mov edx, dword [0x431128]
mov eax, dword [0x431128]
mov ecx, dword [edx + 0x18]
sub ecx, dword [eax + 0x10]
push ecx
mov edx, dword [0x431128]
mov eax, dword [edx + 0x14]
push eax
mov ecx, dword [0x431128]
mov edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
mov ecx, dword [0x431128]
mov eax, dword [ecx + 0x18]
mov edx, dword [0x431128]
add eax, dword [edx + 0x10]
cdq
sub eax, edx
sar eax, 1
mov dword [0x4312dc], eax
mov eax, dword [0x431128]
mov eax, dword [eax + 0x1c]
mov ecx, dword [0x431128]
add eax, dword [ecx + 0x14]
cdq
sub eax, edx
sar eax, 1
mov dword [0x4312d8], eax
mov edx, dword [0x431128]
mov eax, dword [0x431128]
mov ecx, dword [edx + 0x18]
sub ecx, dword [eax + 0x10]
mov dword [0x4312e4], ecx
mov edx, dword [0x431128]
mov eax, dword [0x431128]
mov ecx, dword [edx + 0x1c]
sub ecx, dword [eax + 0x14]
mov dword [0x4312e0], ecx
lea edx, [ebp - 0x70]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_BeginPaint]
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x78]
push ecx
lea ecx, [ebp - 0x30]
call fcn.0041c72d
lea ecx, [ebp - 0xa4]
call fcn.0041c676
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc8]
call fcn.00403860
mov byte [ebp - 4], 3
push 0
lea ecx, [ebp - 0xa4]
call fcn.00403900
mov edx, dword [0x4312e0]
push edx
mov eax, dword [0x4312e4]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0xc8]
call fcn.004038d0
lea edx, [ebp - 0xc8]
push edx
lea ecx, [ebp - 0xa4]
call fcn.00403960
mov dword [ebp - 0xbc], eax
push 0xffffff
mov eax, dword [0x4312e0]
push eax
mov ecx, dword [0x4312e4]
push ecx
push 0
push 0
lea ecx, [ebp - 0xa4]
call fcn.0041e81f
push 0xffffff
lea ecx, [ebp - 0xa4]
call fcn.0041c907
push 0
lea ecx, [ebp - 0xa4]
call fcn.0041c964
push 8
call fcn.00403500
mov dword [ebp - 0xe0], eax
mov byte [ebp - 4], 4
cmp dword [ebp - 0xe0], 0
je 0x402177
mov ecx, dword [ebp - 0xe0]
call fcn.00403730
mov dword [ebp - 0x190], eax
jmp 0x402181
mov dword [ebp - 0x190], 0
mov edx, dword [ebp - 0x190]
mov dword [ebp - 0xdc], edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x20], eax
push 0
push 0x42d1d4
mov eax, dword [0x4312e4]
cdq
mov ecx, 5
idiv ecx
push eax
mov ecx, dword [ebp - 0x20]
call fcn.0041e86b
mov edx, dword [ebp - 0x20]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov dword [ebp - 0x74], eax
push 1
lea ecx, [ebp - 0xa4]
call fcn.0041c936
mov eax, dword [0x431128]
mov ecx, dword [eax + 0x54]
push ecx
push 0x42d1d8
lea edx, [ebp - 0x7c]
push edx
call fcn.00415ca4
add esp, 0xc
lea eax, [ebp - 0x7c]
push eax
mov eax, dword [0x4312e0]
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
mov eax, dword [0x4312e0]
cdq
and edx, 3
add eax, edx
sar eax, 2
sub ecx, eax
mov eax, dword [0x4312e0]
cdq
and edx, 0xf
add eax, edx
sar eax, 4
sub ecx, eax
push ecx
mov eax, dword [0x4312e4]
cdq
sub eax, edx
mov esi, eax
sar esi, 1
lea ecx, [ebp - 0x7c]
call fcn.004036d0
mov ecx, eax
mov eax, dword [0x4312e4]
cdq
mov edi, 0x3c
idiv edi
imul ecx, eax
sub esi, ecx
push esi
lea ecx, [ebp - 0xa4]
call fcn.00403a80
mov eax, dword [0x4312e4]
shl eax, 1
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0x94], eax
mov eax, dword [0x4312e4]
imul eax, eax, 6
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0x8c], eax
mov eax, dword [0x4312e0]
shl eax, 1
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0x90], eax
mov eax, dword [0x4312e0]
shl eax, 2
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0x88], eax
mov dword [ebp - 0xb4], 0
mov edx, dword [0x4312e4]
mov dword [ebp - 0xac], edx
mov eax, dword [0x4312e0]
imul eax, eax, 3
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0xb0], eax
mov eax, dword [0x4312e0]
shl eax, 2
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x84], 8
mov dword [ebp - 0x80], 8
push 8
call fcn.00403500
mov dword [ebp - 0xe8], eax
mov byte [ebp - 4], 5
cmp dword [ebp - 0xe8], 0
je 0x40233a
push 0x8b00
push 5
push 0
mov ecx, dword [ebp - 0xe8]
call fcn.0041cfe4
mov dword [ebp - 0x194], eax
jmp 0x402344
mov dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0xe4], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov dword [ebp - 0x14], eax
push 8
call fcn.00403500
mov dword [ebp - 0xf0], eax
mov byte [ebp - 4], 6
cmp dword [ebp - 0xf0], 0
je 0x4023a1
push 0x8ce6f0
mov ecx, dword [ebp - 0xf0]
call fcn.0041d034
mov dword [ebp - 0x198], eax
jmp 0x4023ab
mov dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0xec], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x84]
push ecx
lea edx, [ebp - 0x94]
push edx
lea ecx, [ebp - 0xa4]
call fcn.00403a00
push 0x431290
lea ecx, [ebp - 0xc0]
call fcn.004173db
mov byte [ebp - 4], 7
mov eax, dword [0x4312ac]
add eax, 1
mov dword [0x4312ac], eax
cmp dword [0x4312ac], 0xa
jg 0x4024b2
push str.____
lea ecx, [ebp - 0xc0]
push ecx
push 0x42d1e4
lea edx, [ebp - 0xf4]
push edx
call fcn.004178c5
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1a0], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x1a0]
push ecx
lea edx, [ebp - 0xf8]
push edx
call fcn.00417851
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1a8], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x1a8]
push ecx
lea ecx, [ebp - 0xc0]
call fcn.0041775b
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xf8]
call fcn.00417666
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xf4]
call fcn.00417666
jmp 0x4025dc
cmp dword [0x4312ac], 0x14
jg 0x402550
push 0x42d1ec
lea edx, [ebp - 0xc0]
push edx
push 0x42d1f0
lea eax, [ebp - 0xfc]
push eax
call fcn.004178c5
mov dword [ebp - 0x1ac], eax
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x1b0], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x1b0]
push edx
lea eax, [ebp - 0x100]
push eax
call fcn.00417851
mov dword [ebp - 0x1b4], eax
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1b8], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x1b8]
push edx
lea ecx, [ebp - 0xc0]
call fcn.0041775b
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x100]
call fcn.00417666
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xfc]
call fcn.00417666
jmp 0x4025dc
push 0x42d1f4
lea eax, [ebp - 0xc0]
push eax
push 0x42d1f8
lea ecx, [ebp - 0x104]
push ecx
call fcn.004178c5
mov dword [ebp - 0x1bc], eax
mov edx, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c0], edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x1c0]
push eax
lea ecx, [ebp - 0x108]
push ecx
call fcn.00417851
mov dword [ebp - 0x1c4], eax
mov edx, dword [ebp - 0x1c4]
mov dword [ebp - 0x1c8], edx
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0041775b
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x108]
call fcn.00417666
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x104]
call fcn.00417666
push 0x11
lea ecx, [ebp - 0xb4]
push ecx
lea edx, [ebp - 0xc0]
push edx
lea ecx, [ebp - 0xa4]
call fcn.00403ac0
mov eax, dword [ebp - 0x74]
push eax
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x20]
call fcn.0041cfce
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x110], ecx
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0x10c], edx
cmp dword [ebp - 0x10c], 0
je 0x40264a
push 1
mov eax, dword [ebp - 0x10c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x10c]
call dword [edx + 4]
mov dword [ebp - 0x1cc], eax
jmp 0x402654
mov dword [ebp - 0x1cc], 0
push 8
call fcn.00403500
mov dword [ebp - 0x118], eax
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x118], 0
je 0x402681
mov ecx, dword [ebp - 0x118]
call fcn.00403730
mov dword [ebp - 0x1d0], eax
jmp 0x40268b
mov dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x114], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x20], ecx
push 0
push str.___
mov eax, dword [0x4312e4]
cdq
mov ecx, 5
idiv ecx
push eax
mov ecx, dword [ebp - 0x20]
call fcn.0041e86b
mov edx, dword [ebp - 0x20]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov dword [ebp - 0x74], eax
mov dword [ebp - 0xb4], 0
mov eax, dword [0x4312e4]
mov dword [ebp - 0xac], eax
mov eax, dword [0x4312e0]
imul eax, eax, 5
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0xb0], eax
mov eax, dword [0x4312e0]
imul eax, eax, 6
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0xa8], eax
push 0x11
lea ecx, [ebp - 0xb4]
push ecx
push 0x431294
lea ecx, [ebp - 0xa4]
call fcn.00403ac0
mov dword [ebp - 0xb4], 0
mov edx, dword [0x4312e4]
mov dword [ebp - 0xac], edx
mov eax, dword [0x4312e0]
imul eax, eax, 6
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0xb0], eax
mov eax, dword [0x4312e0]
imul eax, eax, 7
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0xa8], eax
push 0x11
lea eax, [ebp - 0xb4]
push eax
push 0x431298
lea ecx, [ebp - 0xa4]
call fcn.00403ac0
mov ecx, dword [ebp - 0x74]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x20]
call fcn.0041cfce
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x120], edx
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x4027df
push 1
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x11c]
call dword [edx + 4]
mov dword [ebp - 0x1d4], eax
jmp 0x4027e9
mov dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov ecx, dword [ebp - 0x10]
call fcn.0041cfce
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x128], ecx
mov edx, dword [ebp - 0x128]
mov dword [ebp - 0x124], edx
cmp dword [ebp - 0x124], 0
je 0x402839
push 1
mov eax, dword [ebp - 0x124]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x124]
call dword [edx + 4]
mov dword [ebp - 0x1d8], eax
jmp 0x402843
mov dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1c]
push eax
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov ecx, dword [ebp - 0x18]
call fcn.0041cfce
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x130], ecx
mov edx, dword [ebp - 0x130]
mov dword [ebp - 0x12c], edx
cmp dword [ebp - 0x12c], 0
je 0x402893
push 1
mov eax, dword [ebp - 0x12c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x12c]
call dword [edx + 4]
mov dword [ebp - 0x1dc], eax
jmp 0x40289d
mov dword [ebp - 0x1dc], 0
lea ecx, [ebp - 0xb8]
call fcn.004036b0
mov byte [ebp - 4], 0xf
mov eax, dword [0x4312e4]
imul eax, eax, 3
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0xb4], eax
mov eax, dword [0x4312e4]
mov dword [ebp - 0xac], eax
mov eax, dword [0x4312e0]
imul eax, eax, 7
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0xb0], eax
mov eax, dword [0x4312e0]
shl eax, 3
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp - 0xb4]
sub ecx, 0x78
mov dword [ebp - 0xd8], ecx
mov edx, dword [ebp - 0xd8]
add edx, 0x50
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0xb0]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x50
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
add eax, 0x50
mov dword [ebp - 0xcc], eax
push 8
call fcn.00403500
mov dword [ebp - 0x138], eax
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x138], 0
je 0x402979
push 0xb4b4b4
push 2
push 0
mov ecx, dword [ebp - 0x138]
call fcn.0041cfe4
mov dword [ebp - 0x1e0], eax
jmp 0x402983
mov dword [ebp - 0x1e0], 0
mov ecx, dword [ebp - 0x1e0]
mov dword [ebp - 0x134], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x134]
mov dword [ebp - 0x10], edx
push 8
call fcn.00403500
mov dword [ebp - 0x140], eax
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x140], 0
je 0x4029ce
push 0xb4b4b4
mov ecx, dword [ebp - 0x140]
call fcn.0041d034
mov dword [ebp - 0x1e4], eax
jmp 0x4029d8
mov dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x13c], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
push eax
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0xd8]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.004039c0
mov edx, dword [ebp - 0x14]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov eax, dword [ebp - 0x1c]
push eax
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov ecx, dword [ebp - 0x10]
call fcn.0041cfce
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x148], ecx
mov edx, dword [ebp - 0x148]
mov dword [ebp - 0x144], edx
cmp dword [ebp - 0x144], 0
je 0x402a86
push 1
mov eax, dword [ebp - 0x144]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x144]
call dword [edx + 4]
mov dword [ebp - 0x1e8], eax
jmp 0x402a90
mov dword [ebp - 0x1e8], 0
mov ecx, dword [ebp - 0x18]
call fcn.0041cfce
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x14c], ecx
cmp dword [ebp - 0x14c], 0
je 0x402ad1
push 1
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14c]
call dword [eax + 4]
mov dword [ebp - 0x1ec], eax
jmp 0x402adb
mov dword [ebp - 0x1ec], 0
push 8
call fcn.00403500
mov dword [ebp - 0x158], eax
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x158], 0
je 0x402b11
push 0xffffff
push 5
push 0
mov ecx, dword [ebp - 0x158]
call fcn.0041cfe4
mov dword [ebp - 0x1f0], eax
jmp 0x402b1b
mov dword [ebp - 0x1f0], 0
mov ecx, dword [ebp - 0x1f0]
mov dword [ebp - 0x154], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x154]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0xcc]
cdq
sub eax, edx
mov esi, eax
sar esi, 1
mov ecx, dword [ebp - 0xd0]
sub ecx, dword [ebp - 0xd8]
mov dword [ebp - 0x1f4], ecx
fild dword [ebp - 0x1f4]
fmul qword [0x424648]
fdiv qword [0x424640]
call fcn.0040c170
sub esi, eax
push esi
mov eax, dword [ebp - 0xd0]
add eax, dword [ebp - 0xd8]
cdq
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp - 0x160]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041cbb1
mov eax, 0x50
sub eax, dword [0x4312b0]
mov dword [ebp - 0x1f8], eax
fild dword [ebp - 0x1f8]
fdiv dword [0x42463c]
fmul dword [0x424638]
push ecx
fstp dword [esp]
push 0x42b40000
mov ecx, dword [ebp - 0xd0]
sub ecx, dword [ebp - 0xd8]
mov dword [ebp - 0x1fc], ecx
fild dword [ebp - 0x1fc]
fmul qword [0x424648]
fdiv qword [0x424640]
call fcn.0040c170
push eax
mov eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0xcc]
cdq
sub eax, edx
sar eax, 1
push eax
mov eax, dword [ebp - 0xd0]
add eax, dword [ebp - 0xd8]
cdq
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0xa4]
call fcn.00403b00
push 8
call fcn.00403500
mov dword [ebp - 0x168], eax
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x168], 0
je 0x402c5b
mov ecx, dword [ebp - 0x168]
call fcn.00403730
mov dword [ebp - 0x200], eax
jmp 0x402c65
mov dword [ebp - 0x200], 0
mov edx, dword [ebp - 0x200]
mov dword [ebp - 0x164], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0xd0]
sub ecx, dword [ebp - 0xd8]
mov edx, dword [ebp - 0xcc]
sub edx, dword [ebp - 0xd4]
cmp ecx, edx
jle 0x402cbb
push 0
push 0x42d200
mov eax, dword [ebp - 0xcc]
sub eax, dword [ebp - 0xd4]
imul eax, eax, 3
push eax
mov ecx, dword [ebp - 0x20]
call fcn.0041e86b
jmp 0x402cda
push 0
push 0x42d204
mov ecx, dword [ebp - 0xd0]
sub ecx, dword [ebp - 0xd8]
imul ecx, ecx, 3
push ecx
mov ecx, dword [ebp - 0x20]
call fcn.0041e86b
push 0xffffff
lea ecx, [ebp - 0xa4]
call fcn.0041c964
mov edx, dword [ebp - 0x20]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov dword [ebp - 0x74], eax
mov eax, 0x50
sub eax, dword [0x4312b0]
cdq
mov ecx, 0xa
idiv ecx
add eax, 1
push eax
push 0x42d208
lea edx, [ebp - 0xb8]
push edx
call fcn.00415ca4
add esp, 0xc
push 1
lea ecx, [ebp - 0xa4]
call fcn.0041c936
push 0x25
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0xb8]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.00403ac0
push 0
lea ecx, [ebp - 0xa4]
call fcn.0041c964
mov edx, dword [ebp - 0x74]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x20]
call fcn.0041cfce
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x170], eax
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0x16c], ecx
cmp dword [ebp - 0x16c], 0
je 0x402daf
push 1
mov edx, dword [ebp - 0x16c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x16c]
call dword [eax + 4]
mov dword [ebp - 0x204], eax
jmp 0x402db9
mov dword [ebp - 0x204], 0
mov ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov ecx, dword [ebp - 0x10]
call fcn.0041cfce
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x178], edx
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
je 0x402e09
push 1
mov ecx, dword [ebp - 0x174]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x174]
call dword [edx + 4]
mov dword [ebp - 0x208], eax
jmp 0x402e13
mov dword [ebp - 0x208], 0
push 8
call fcn.00403500
mov dword [ebp - 0x180], eax
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x180], 0
je 0x402e40
mov ecx, dword [ebp - 0x180]
call fcn.00403730
mov dword [ebp - 0x20c], eax
jmp 0x402e4a
mov dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x17c], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x17c]
mov dword [ebp - 0x20], ecx
push 0
push 0x42d20c
mov eax, dword [0x4312e4]
cdq
mov ecx, 6
idiv ecx
push eax
mov ecx, dword [ebp - 0x20]
call fcn.0041e86b
mov edx, dword [ebp - 0x20]
push edx
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov dword [ebp - 0x74], eax
push 1
lea ecx, [ebp - 0xa4]
call fcn.0041c936
push 0x10
lea eax, [ebp - 0xb4]
push eax
push 0x43129c
lea ecx, [ebp - 0xa4]
call fcn.00403ac0
push 0
lea ecx, [ebp - 0xa4]
call fcn.0041c964
mov ecx, dword [ebp - 0x74]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.0041c8c1
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x20]
call fcn.0041cfce
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
je 0x402f18
push 1
mov ecx, dword [ebp - 0x184]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x184]
call dword [edx + 4]
mov dword [ebp - 0x210], eax
jmp 0x402f22
mov dword [ebp - 0x210], 0
push 0xcc0020
push 0
push 0
lea eax, [ebp - 0xa4]
push eax
mov ecx, dword [0x4312e0]
push ecx
mov edx, dword [0x4312e4]
push edx
push 0
push 0
lea ecx, [ebp - 0x30]
call fcn.00403a40
lea ecx, [ebp - 0xc8]
call fcn.0041cfce
lea ecx, [ebp - 0xa4]
call fcn.0041c795
lea ecx, [ebp - 0x30]
call fcn.0041c764
lea ecx, [ebp - 0x30]
call fcn.0041c795
lea eax, [ebp - 0x70]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_EndPaint]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xb8]
call fcn.00417666
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc0]
call fcn.00417666
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc8]
call fcn.004038b0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa4]
call fcn.0041c7ab
mov dword [ebp - 0x18c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x7c]
call fcn.00417666
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.0041c7ab
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0xc