Function at 0x460a2f
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov esi, dword [ebp + 8]
mov ebx, 0x571888
mov edi, 0x57182c
mov dword [edi], 1
mov byte [0x57181e], 0
mov byte [0x57181c], 0
mov byte [0x571818], 0
mov byte [0x571819], 0
mov byte [0x57181a], 0
mov byte [0x57181d], 1
mov dword [0x571824], 0xd
xor eax, eax
mov dword [0x571828], eax
xor edx, edx
mov dword [0x571834], edx
xor ecx, ecx
mov dword [0x571838], ecx
xor eax, eax
mov dword [0x57183c], eax
mov edx, dword [edi]
mov eax, dword [esi + edx*4]
test eax, eax
je 0x460ba5
mov edx, dword [edi]
cmp byte [eax], 0x2d
jne 0x460ba5
push 0x69
mov ecx, dword [edi]
push eax
call fcn.00539518
add esp, 8
test eax, eax
je 0x460acd
mov dword [0x571824], 0xa
push 0x68
mov eax, dword [edi]
push dword [esi + eax*4]
call fcn.00539518
add esp, 8
test eax, eax
je 0x460ae7
mov byte [0x57181e], 1
push 0x6e
mov edx, dword [edi]
push dword [esi + edx*4]
call fcn.00539518
add esp, 8
test eax, eax
je 0x460b01
mov byte [0x57181d], 0
push 0x72
mov ecx, dword [edi]
push dword [esi + ecx*4]
call fcn.00539518
add esp, 8
test eax, eax
je 0x460b1b
mov byte [0x57181c], 1
push 0x66
mov eax, dword [edi]
push dword [esi + eax*4]
call fcn.00539518
add esp, 8
test eax, eax
je 0x460b35
mov byte [0x571818], 1
push 0x65
mov edx, dword [edi]
push dword [esi + edx*4]
call fcn.00539518
add esp, 8
test eax, eax
je 0x460b4f
mov byte [0x571819], 1
push 0x63
mov ecx, dword [edi]
push dword [esi + ecx*4]
call fcn.00539518
add esp, 8
test eax, eax
je 0x460b69
mov byte [0x57181a], 1
push 0x73
mov eax, dword [edi]
push dword [esi + eax*4]
call fcn.00539518
add esp, 8
test eax, eax
je 0x460b86
mov dword [0x571828], 1
push 0x64
mov edx, dword [edi]
push dword [esi + edx*4]
call fcn.00539518
add esp, 8
test eax, eax
je 0x460ba3
mov dword [0x571834], 1
inc dword [edi]
mov ecx, dword [edi]
cmp dword [esi + ecx*4], 0
jne 0x460bbf
push 0
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x461df9
push 0x54bb30
mov eax, dword [edi]
push dword [esi + eax*4]
call fcn.0053977c
add esp, 8
test eax, eax
jne 0x460bdf
xor edx, edx
mov dword [0x571858], edx
jmp 0x460bee
mov ecx, dword [edi]
push dword [esi + ecx*4]
call fcn.005160e8
mov dword [0x571858], eax
mov eax, dword [0x571858]
test eax, eax
je 0x460c09
cmp byte [eax + 0x668], 0
je 0x460c09
cmp dword [eax + 0x77c], 0
jne 0x460c1b
push 7
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x461df9
cmp byte [0x57181e], 0
je 0x460c31
mov edx, dword [0x571858]
push dword [edx]
call fcn.0047f090
inc dword [edi]
mov ecx, dword [edi]
cmp dword [esi + ecx*4], 0
jne 0x460c6b
cmp byte [0x57181d], 0
je 0x460c59
push dword [0x571858]
call fcn.0046051c
mov eax, 1
jmp 0x461df9
push 0
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x461df9
cmp byte [0x57181c], 0
je 0x460c86
mov edx, dword [edi]
push dword [esi + edx*4]
call fcn.00542dbc
pop ecx
mov dword [0x57185c], eax
jmp 0x460cd1
mov ecx, dword [edi]
push dword [esi + ecx*4]
call fcn.00542dbc
pop ecx
mov dword [0x571820], eax
cmp dword [0x571820], 0
jge 0x460cad
mov eax, dword [0x571820]
mov edx, eax
neg eax
mov dword [0x571820], eax
mov eax, dword [0x571820]
cdq
idiv dword [0x54d288]
mov dword [0x571820], edx
mov ecx, dword [0x571820]
mov eax, dword [ecx*4 + 0x56ecb4]
mov dword [0x57185c], eax
inc dword [edi]
mov edx, dword [edi]
cmp dword [esi + edx*4], 0
jne 0x460ced
push 0
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x461df9
mov ecx, dword [ebp + 0xc]
cmp ecx, 5
ja case.0x460cf9.0
jmp dword [ecx*4 + 0x460d00]
mov eax, dword [edi]
push dword [esi + eax*4]
call fcn.00542dbc
pop ecx
mov dword [0x571820], eax
cmp dword [0x571820], 1
jge 0x460d3b
mov dword [0x571820], 1
cmp dword [0x571820], 0x1000
jle 0x460d51
mov dword [0x571820], 1
inc dword [edi]
mov edx, dword [edi]
cmp dword [esi + edx*4], 0
je 0x460d68
mov ecx, dword [edi]
cmp dword [esi + ecx*4 + 4], 0
jne case.0x460cf9.0
push 0
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x461df9
mov eax, dword [edi]
push dword [esi + eax*4]
call fcn.00542dbc
pop ecx
mov dword [0x571820], eax
cmp dword [0x571820], 1
jge 0x460d9d
mov dword [0x571820], 1
cmp dword [0x571820], 0x1000
jle 0x460db3
mov dword [0x571820], 1
inc dword [edi]
mov edx, dword [edi]
cmp dword [esi + edx*4], 0
je 0x460dca
mov ecx, dword [edi]
cmp dword [esi + ecx*4 + 4], 0
jne case.0x460cf9.0
push 0
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x461df9
mov eax, dword [edi]
push dword [esi + eax*4]
call fcn.00542dbc
pop ecx
mov dword [0x571820], eax
cmp dword [0x571820], 1
jge 0x460dff
mov dword [0x571820], 1
cmp dword [0x571820], 0x1000
jle 0x460e15
mov dword [0x571820], 1
inc dword [edi]
mov edx, dword [edi]
cmp dword [esi + edx*4], 0
je 0x460e3e
mov ecx, dword [edi]
cmp dword [esi + ecx*4 + 4], 0
je 0x460e3e
mov eax, dword [edi]
cmp dword [esi + eax*4 + 8], 0
je 0x460e3e
mov edx, dword [edi]
cmp dword [esi + edx*4 + 0xc], 0
jne case.0x460cf9.0
push 0
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x461df9
cmp byte [0x57181c], 0
je 0x460e6b
mov ecx, dword [edi]
push dword [esi + ecx*4]
call fcn.00542dbc
pop ecx
mov dword [0x571860], eax
jmp 0x460eb8
mov eax, dword [edi]
push dword [esi + eax*4]
call fcn.00542dbc
pop ecx
mov dword [0x571820], eax
cmp dword [0x571820], 0
jge 0x460e94
mov edx, dword [0x571820]
mov ecx, edx
neg edx
mov dword [0x571820], edx
mov eax, dword [0x571820]
cdq
idiv dword [0x54d288]
mov dword [0x571820], edx
mov ecx, dword [0x571820]
mov eax, dword [ecx*4 + 0x56ecb4]
mov dword [0x571860], eax
inc dword [edi]
mov edx, dword [edi]
cmp dword [esi + edx*4], 0
je 0x460ecb
mov ecx, dword [edi]
cmp dword [esi + ecx*4 + 4], 0
jne case.0x460cf9.0
push 0
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x461df9
cmp byte [0x57181c], 0
je 0x460ef8
mov eax, dword [edi]
push dword [esi + eax*4]
call fcn.00542dbc
pop ecx
mov dword [0x571860], eax
jmp 0x460f45
mov edx, dword [edi]
push dword [esi + edx*4]
call fcn.00542dbc
pop ecx
mov dword [0x571820], eax
cmp dword [0x571820], 0
jge 0x460f21
mov ecx, dword [0x571820]
mov eax, ecx
neg ecx
mov dword [0x571820], ecx
mov eax, dword [0x571820]
cdq
idiv dword [0x54d288]
mov dword [0x571820], edx
mov ecx, dword [0x571820]
mov eax, dword [ecx*4 + 0x56ecb4]
mov dword [0x571860], eax
inc dword [edi]
mov edx, dword [0x571858]
push dword [edx]
call sub.USER32.dll_GetDC
mov dword [0x571864], eax
cmp dword [0x571864], 0
jne 0x460f69
xor eax, eax
jmp 0x461df9
push dword [0x571864]
call sub.GDI32.dll_CreateCompatibleDC
mov dword [0x571868], eax
cmp dword [0x571868], 0
jne 0x460f9c
push dword [0x571864]
mov edx, dword [0x571858]
push dword [edx]
call sub.USER32.dll_ReleaseDC
xor eax, eax
jmp 0x461df9
mov edx, dword [0x571858]
push dword [edx + 0x77c]
push dword [0x571868]
call sub.GDI32.dll_SelectObject
mov dword [0x57186c], eax
push dword [0x571824]
push dword [0x571868]
call sub.GDI32.dll_SetROP2
push dword [0x571824]
push dword [0x571864]
call sub.GDI32.dll_SetROP2
mov dword [0x571824], eax
xor ecx, ecx
mov dword [0x571854], ecx
mov dword [0x571850], ecx
mov dword [0x57184c], ecx
xor eax, eax
mov dword [0x571840], eax
mov edx, dword [ebp + 0xc]
dec edx
je 0x461011
dec edx
je 0x461037
dec edx
je 0x461061
dec edx
sub edx, 2
jb 0x461011
jmp 0x46109c
push dword [0x57185c]
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x57184c], eax
push dword [0x57185c]
push 1
push 5
call sub.GDI32.dll_CreatePen
mov dword [0x571840], eax
jmp 0x46109c
push dword [0x57185c]
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x57184c], eax
push dword [0x57185c]
push dword [0x571820]
push 0
call sub.GDI32.dll_CreatePen
mov dword [0x571840], eax
jmp 0x46109c
cmp byte [0x571818], 0
je 0x46107c
push dword [0x57185c]
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x57184c], eax
jmp 0x461088
push 5
call sub.GDI32.dll_GetStockObject
mov dword [0x57184c], eax
push dword [0x57185c]
push 1
push 0
call sub.GDI32.dll_CreatePen
mov dword [0x571840], eax
push dword [0x57184c]
push dword [0x571864]
call sub.GDI32.dll_SelectObject
mov dword [0x571850], eax
push dword [0x57184c]
push dword [0x571868]
call sub.GDI32.dll_SelectObject
mov dword [0x571854], eax
push dword [0x571840]
push dword [0x571864]
call sub.GDI32.dll_SelectObject
mov dword [0x571844], eax
push dword [0x571840]
push dword [0x571868]
call sub.GDI32.dll_SelectObject
mov dword [0x571848], eax
mov eax, dword [ebp + 0xc]
cmp eax, 5
ja case.0x461100.0
jmp dword [eax*4 + 0x461107]
mov edx, dword [edi]
push dword [esi + edx*4]
call fcn.00542dbc
pop ecx
mov dword [ebx], eax
mov ecx, dword [edi]
push dword [esi + ecx*4 + 4]
call fcn.00542dbc
pop ecx
mov dword [ebx + 4], eax
cmp dword [0x571820], 1
jne 0x4611be
push dword [0x57185c]
push dword [ebx + 4]
push dword [ebx]
push dword [0x571868]
call sub.GDI32.dll_SetPixel
cmp byte [0x57181d], 0
je 0x461179
push dword [0x57185c]
push dword [ebx + 4]
push dword [ebx]
push dword [0x571864]
call sub.GDI32.dll_SetPixel
mov eax, dword [0x571858]
mov edx, dword [eax + 0x78c]
cmp edx, dword [ebx]
jge 0x461196
mov ecx, dword [0x571858]
mov eax, dword [ebx]
mov dword [ecx + 0x78c], eax
mov edx, dword [0x571858]
mov ecx, dword [edx + 0x790]
cmp ecx, dword [ebx + 4]
jge 0x461277
mov eax, dword [0x571858]
mov edx, dword [ebx + 4]
mov dword [eax + 0x790], edx
jmp 0x461277
mov ecx, dword [ebx]
add ecx, dword [0x571820]
dec ecx
mov dword [ebx + 8], ecx
mov eax, dword [ebx + 4]
add eax, dword [0x571820]
dec eax
mov dword [ebx + 0xc], eax
mov edx, dword [0x571820]
inc edx
sub dword [ebx], edx
mov ecx, dword [0x571820]
inc ecx
sub dword [ebx + 4], ecx
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
push dword [0x571868]
call sub.GDI32.dll_Ellipse
cmp byte [0x57181d], 0
je 0x461238
push 0xcc0020
push dword [ebx + 4]
push dword [ebx]
push dword [0x571868]
mov eax, dword [ebx + 0xc]
sub eax, dword [ebx + 4]
inc eax
push eax
mov edx, dword [ebx + 8]
sub edx, dword [ebx]
inc edx
push edx
push dword [ebx + 4]
push dword [ebx]
push dword [0x571864]
call sub.GDI32.dll_BitBlt
mov ecx, dword [0x571858]
mov eax, dword [ecx + 0x78c]
cmp eax, dword [ebx + 8]
jge 0x461258
mov edx, dword [0x571858]
mov ecx, dword [ebx + 8]
mov dword [edx + 0x78c], ecx
mov eax, dword [0x571858]
mov edx, dword [eax + 0x790]
cmp edx, dword [ebx + 0xc]
jge 0x461277
mov ecx, dword [0x571858]
mov eax, dword [ebx + 0xc]
mov dword [ecx + 0x790], eax
add dword [edi], 2
mov edx, dword [edi]
cmp dword [esi + edx*4], 0
je case.0x461100.0
mov ecx, dword [edi]
cmp dword [esi + ecx*4 + 4], 0
jne case.0x461100.1
jmp case.0x461100.0
mov byte [0x57181b], 1
mov eax, dword [edi]
push dword [esi + eax*4]
call fcn.00542dbc
pop ecx
mov dword [ebx], eax
mov edx, dword [edi]
push dword [esi + edx*4 + 4]
call fcn.00542dbc
pop ecx
mov dword [ebx + 4], eax
cmp byte [0x57181b], 0
je 0x4612fa
push 0
push dword [ebx + 4]
push dword [ebx]
push dword [0x571868]
call sub.GDI32.dll_MoveToEx
cmp byte [0x57181d], 0
je 0x4612f1
push 0
push dword [ebx + 4]
push dword [ebx]
push dword [0x571864]
call sub.GDI32.dll_MoveToEx
mov byte [0x57181b], 0
jmp 0x461360
push dword [ebx + 4]
push dword [ebx]
push dword [0x571868]
call sub.GDI32.dll_LineTo
cmp byte [0x57181d], 0
je 0x461323
push dword [ebx + 4]
push dword [ebx]
push dword [0x571864]
call sub.GDI32.dll_LineTo
mov ecx, dword [0x571858]
mov eax, dword [ecx + 0x78c]
cmp eax, dword [ebx]
jge 0x461341
mov edx, dword [0x571858]
mov ecx, dword [ebx]
mov dword [edx + 0x78c], ecx
mov eax, dword [0x571858]
mov edx, dword [eax + 0x790]
cmp edx, dword [ebx + 4]
jge 0x461360
mov ecx, dword [0x571858]
mov eax, dword [ebx + 4]
mov dword [ecx + 0x790], eax
add dword [edi], 2
mov edx, dword [edi]
cmp dword [esi + edx*4], 0
je case.0x461100.0
mov ecx, dword [edi]
cmp dword [esi + ecx*4 + 4], 0
jne 0x46129f
jmp case.0x461100.0
mov eax, dword [0x571820]
mov dword [0x571828], eax
jmp 0x46176b
dec dword [0x571820]
mov edx, dword [edi]
push dword [esi + edx*4]
call fcn.00542dbc
pop ecx
add eax, dword [0x571820]
mov dword [ebx], eax
mov ecx, dword [edi]
push dword [esi + ecx*4 + 4]
call fcn.00542dbc
pop ecx
add eax, dword [0x571820]
mov dword [ebx + 4], eax
mov eax, dword [edi]
push dword [esi + eax*4 + 8]
call fcn.00542dbc
pop ecx
add eax, dword [ebx]
mov edx, dword [0x571820]
add edx, edx
sub eax, edx
mov dword [ebx + 8], eax
mov ecx, dword [edi]
push dword [esi + ecx*4 + 0xc]
call fcn.00542dbc
pop ecx
add eax, dword [ebx + 4]
mov edx, dword [0x571820]
add edx, edx
sub eax, edx
mov dword [ebx + 0xc], eax
mov edx, dword [ebx + 8]
mov eax, dword [ebx]
cmp edx, eax
jge 0x46140e
mov dword [0x571830], eax
mov dword [ebx], edx
mov ecx, dword [0x571830]
mov dword [ebx + 8], ecx
mov edx, dword [ebx + 0xc]
mov eax, dword [ebx + 4]
cmp edx, eax
jge 0x461429
mov dword [0x571830], eax
mov dword [ebx + 4], edx
mov ecx, dword [0x571830]
mov dword [ebx + 0xc], ecx
cmp byte [0x57181a], 0
je 0x4615a0
dec dword [ebx + 8]
dec dword [ebx + 0xc]
mov eax, dword [ebx]
mov dword [0x571898], eax
jmp 0x461461
push dword [0x57185c]
push dword [ebx + 4]
push eax
push dword [0x571868]
call sub.GDI32.dll_SetPixel
add dword [0x571898], 2
mov eax, dword [0x571898]
cmp eax, dword [ebx + 8]
jle 0x461445
mov edx, dword [ebx + 8]
add edx, 2
cmp edx, dword [0x571898]
jne 0x461487
mov ecx, dword [ebx + 4]
add ecx, 2
mov dword [0x57189c], ecx
jmp 0x4614ae
mov eax, dword [ebx + 4]
inc eax
mov dword [0x57189c], eax
jmp 0x4614ae
push dword [0x57185c]
push eax
push dword [ebx + 8]
push dword [0x571868]
call sub.GDI32.dll_SetPixel
add dword [0x57189c], 2
mov eax, dword [0x57189c]
cmp eax, dword [ebx + 0xc]
jle 0x461492
mov edx, dword [ebx + 0xc]
add edx, 2
cmp edx, dword [0x57189c]
jne 0x4614d4
mov ecx, dword [ebx + 8]
add ecx, 0xfffffffe
mov dword [0x571898], ecx
jmp 0x4614fb
mov eax, dword [ebx + 8]
dec eax
mov dword [0x571898], eax
jmp 0x4614fb
push dword [0x57185c]
push dword [ebx + 0xc]
push eax
push dword [0x571868]
call sub.GDI32.dll_SetPixel
sub dword [0x571898], 2
mov eax, dword [0x571898]
cmp eax, dword [ebx]
jge 0x4614df
mov edx, dword [ebx]
add edx, 0xfffffffe
cmp edx, dword [0x571898]
jne 0x46151f
mov ecx, dword [ebx + 0xc]
add ecx, 0xfffffffe
mov dword [0x57189c], ecx
jmp 0x461545
mov eax, dword [ebx + 0xc]
dec eax
mov dword [0x57189c], eax
jmp 0x461545
push dword [0x57185c]
push eax
push dword [ebx]
push dword [0x571868]
call sub.GDI32.dll_SetPixel
sub dword [0x57189c], 2
mov edx, dword [ebx + 4]
add edx, 2
mov eax, dword [0x57189c]
cmp edx, eax
jle 0x46152a
cmp dword [0x571820], 0
jne 0x46172d
cmp byte [0x57181d], 0
je 0x46172d
push 0xcc0020
mov edx, dword [ebx + 4]
push edx
mov eax, dword [ebx]
push eax
push dword [0x571868]
mov ecx, dword [ebx + 0xc]
sub ecx, edx
inc ecx
push ecx
mov ecx, dword [ebx + 8]
sub ecx, eax
inc ecx
push ecx
push edx
push eax
push dword [0x571864]
call sub.GDI32.dll_BitBlt
jmp 0x46172d
cmp byte [0x571819], 0
je 0x46160b
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
push dword [0x571868]
call sub.GDI32.dll_Ellipse
cmp dword [0x571820], 0
jne 0x46172d
cmp byte [0x57181d], 0
je 0x46172d
push 0xcc0020
push dword [ebx + 4]
push dword [ebx]
push dword [0x571868]
mov eax, dword [ebx + 0xc]
sub eax, dword [ebx + 4]
push eax
mov edx, dword [ebx + 8]
sub edx, dword [ebx]
push edx
push dword [ebx + 4]
push dword [ebx]
push dword [0x571864]
call sub.GDI32.dll_BitBlt
jmp 0x46172d
mov eax, dword [ebx]
cmp eax, dword [ebx + 8]
jne 0x461665
mov edx, dword [ebx + 0xc]
cmp edx, dword [ebx + 4]
jne 0x461665
push dword [0x57185c]
push dword [ebx + 4]
push dword [ebx]
push dword [0x571868]
call sub.GDI32.dll_SetPixel
cmp dword [0x571820], 0
jne 0x4616ee
cmp byte [0x57181d], 0
je 0x4616ee
push dword [0x57185c]
push dword [ebx + 4]
push dword [ebx]
push dword [0x571864]
call sub.GDI32.dll_SetPixel
jmp 0x4616ee
cmp dword [0x571834], 0
je 0x4616d8
mov eax, dword [edi]
cmp dword [esi + eax*4 + 0x10], 0
je 0x4616a5
cmp dword [esi + eax*4 + 0x14], 0
je 0x4616a5
mov edx, dword [edi]
push dword [esi + edx*4 + 0x10]
call fcn.00542dbc
pop ecx
mov dword [0x571838], eax
mov ecx, dword [edi]
push dword [esi + ecx*4 + 0x14]
call fcn.00542dbc
pop ecx
mov dword [0x57183c], eax
add dword [edi], 2
jmp 0x4616b4
mov eax, 0xf
mov dword [0x57183c], eax
mov dword [0x571838], eax
push dword [0x57183c]
push dword [0x571838]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
push dword [0x571868]
call sub.GDI32.dll_RoundRect
jmp 0x4616ee
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
push dword [0x571868]
call sub.GDI32.dll_Rectangle
cmp dword [0x571820], 0
jne 0x46172d
cmp byte [0x57181d], 0
je 0x46172d
push 0xcc0020
mov edx, dword [ebx + 4]
push edx
mov eax, dword [ebx]
push eax
push dword [0x571868]
mov ecx, dword [ebx + 0xc]
sub ecx, edx
inc ecx
push ecx
mov ecx, dword [ebx + 8]
sub ecx, eax
inc ecx
push ecx
push edx
push eax
push dword [0x571864]
call sub.GDI32.dll_BitBlt
mov eax, dword [0x571858]
mov edx, dword [eax + 0x78c]
cmp edx, dword [ebx + 8]
jge 0x46174b
mov eax, dword [0x571858]
mov edx, dword [ebx + 8]
mov dword [eax + 0x78c], edx
mov ecx, dword [0x571858]
mov eax, dword [ecx + 0x790]
cmp eax, dword [ebx + 0xc]
jge 0x46176b
mov edx, dword [0x571858]
mov ecx, dword [ebx + 0xc]
mov dword [edx + 0x790], ecx
cmp dword [0x571820], 0
jg 0x461390
mov eax, dword [0x571828]
mov dword [0x571820], eax
add dword [edi], 4
mov edx, dword [edi]
cmp dword [esi + edx*4], 0
je case.0x461100.0
mov ecx, dword [edi]
cmp dword [esi + ecx*4 + 4], 0
je case.0x461100.0
mov eax, dword [edi]
cmp dword [esi + eax*4 + 8], 0
je case.0x461100.0
mov edx, dword [edi]
cmp dword [esi + edx*4 + 0xc], 0
jne case.0x461100.3
jmp case.0x461100.0
mov ecx, dword [edi]
push dword [esi + ecx*4]
call fcn.00542dbc
pop ecx
mov dword [ebx + 4], eax
mov eax, dword [edi]
push dword [esi + eax*4 + 4]
call fcn.00542dbc
pop ecx
mov dword [ebx], eax
add dword [edi], 2
xor edx, edx
mov dword [0x5718a8], edx
mov ecx, dword [edi]
cmp dword [esi + ecx*4], 0
je 0x46190e
mov eax, dword [edi]
push dword [esi + eax*4]
call fcn.004d5474
test eax, eax
jne 0x46190e
push 0
push 0x104
push 0x57a469
push dword [edi]
push esi
call fcn.004d670d
mov dword [edi], eax
cmp dword [edi], 0
jge 0x46182f
push 3
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x46197a
push 0x57a469
push 0x57a469
call fcn.0041cd2d
test eax, eax
jne 0x461854
push 3
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x46197a
push 0x57a469
call fcn.0041ee0c
test eax, eax
jne 0x461874
push 3
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x46197a
push 0x5718a0
push 0x5718a4
mov edx, dword [0x571858]
push dword [edx]
push 0x57a469
call fcn.0041ee6c
cmp dword [0x5718a4], 0
jne 0x4618bf
push 0x57a469
push dword [esi]
push 0
push 0x835
call fcn.0041c35b
push eax
push 0x5720e8
call sub.USER32.dll_wsprintfA
add esp, 0x10
jmp 0x46197a
push dword [0x5718a4]
call sub.GDI32.dll_CreatePatternBrush
mov dword [0x5718a8], eax
push dword [0x5718a4]
call sub.GDI32.dll_DeleteObject
push dword [0x5718a0]
call sub.GDI32.dll_DeleteObject
push dword [0x571854]
push dword [0x571868]
call sub.GDI32.dll_SelectObject
push dword [0x5718a8]
push dword [0x571868]
call sub.GDI32.dll_SelectObject
mov dword [0x571854], eax
inc dword [edi]
push dword [0x571828]
push dword [0x571860]
push dword [ebx]
push dword [ebx + 4]
push dword [0x571868]
call sub.GDI32.dll_ExtFloodFill
cmp dword [0x5718a8], 0
je 0x461965
push dword [0x571854]
push dword [0x571868]
call sub.GDI32.dll_SelectObject
push dword [0x5718a8]
call sub.GDI32.dll_DeleteObject
push dword [0x57184c]
push dword [0x571868]
call sub.GDI32.dll_SelectObject
mov dword [0x571854], eax
mov ecx, dword [edi]
cmp dword [esi + ecx*4], 0
je 0x46197a
mov eax, dword [edi]
cmp dword [esi + eax*4 + 4], 0
jne case.0x461100.4
push 0x571870
push 0x18
mov edx, dword [0x571858]
push dword [edx + 0x77c]
call sub.GDI32.dll_GetObjectA
cmp byte [0x57181d], 0
je 0x4619c5
push 0xcc0020
push 0
push 0
push dword [0x571868]
push dword [0x571878]
push dword [0x571874]
push 0
push 0
push dword [0x571864]
call sub.GDI32.dll_BitBlt
mov ecx, dword [0x571858]
mov eax, dword [0x571874]
mov dword [ecx + 0x78c], eax
mov edx, dword [0x571858]
mov ecx, dword [0x571878]
mov dword [edx + 0x790], ecx
jmp case.0x461100.0
xor eax, eax
mov dword [0x5718b4], eax
mov dword [0x5718b0], eax
mov dword [0x5718ac], eax
xor edx, edx
mov dword [0x5718bc], edx
mov dword [0x5718b8], edx
push 0x571870
push 0x18
mov eax, dword [0x571858]
push dword [eax + 0x77c]
call sub.GDI32.dll_GetObjectA
xor ecx, ecx
mov dword [ebx], ecx
xor eax, eax
mov dword [ebx + 4], eax
mov edx, dword [0x571874]
mov dword [ebx + 8], edx
mov ecx, dword [0x571878]
mov dword [ebx + 0xc], ecx
push dword [0x57186c]
push dword [0x571868]
call sub.GDI32.dll_SelectObject
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [0x571864]
call sub.GDI32.dll_CreateCompatibleBitmap
mov dword [0x5718b4], eax
cmp dword [0x5718b4], 0
je 0x461ca1
push dword [0x5718b4]
push dword [0x571868]
call sub.GDI32.dll_SelectObject
mov dword [0x57186c], eax
push dword [0x571864]
call sub.GDI32.dll_CreateCompatibleDC
mov dword [0x5718b8], eax
cmp dword [0x5718b8], 0
je 0x461ca1
mov eax, dword [0x571858]
push dword [eax + 0x77c]
push dword [0x5718b8]
call sub.GDI32.dll_SelectObject
mov dword [0x5718ac], eax
push 0xcc0020
push dword [ebx + 4]
push dword [ebx]
push dword [0x5718b8]
push dword [ebx + 0xc]
push dword [ebx + 8]
push 0
push 0
push dword [0x571868]
call sub.GDI32.dll_BitBlt
push dword [0x571864]
call sub.GDI32.dll_CreateCompatibleDC
mov dword [0x5718bc], eax
cmp dword [0x5718bc], 0
je 0x461ca1
push dword [0x57185c]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [0x5718bc]
push dword [0x571868]
call fcn.004633a6
mov dword [0x5718b0], eax
mov edx, dword [edi]
cmp dword [esi + edx*4], 0
je 0x461b81
mov ecx, dword [edi]
cmp dword [esi + ecx*4 + 4], 0
je 0x461b81
mov eax, dword [edi]
cmp dword [esi + eax*4 + 8], 0
je 0x461b81
mov edx, dword [edi]
cmp dword [esi + edx*4 + 0xc], 0
je 0x461b81
mov ecx, dword [edi]
push dword [esi + ecx*4]
call fcn.00542dbc
pop ecx
mov dword [ebx], eax
mov eax, dword [edi]
push dword [esi + eax*4 + 4]
call fcn.00542dbc
pop ecx
mov dword [ebx + 4], eax
mov edx, dword [edi]
push dword [esi + edx*4 + 8]
call fcn.00542dbc
pop ecx
mov dword [ebx + 8], eax
mov ecx, dword [edi]
push dword [esi + ecx*4 + 0xc]
call fcn.00542dbc
pop ecx
mov dword [ebx + 0xc], eax
mov eax, dword [ebx]
mov dword [0x5718c8], eax
mov edx, dword [ebx + 4]
mov dword [0x5718cc], edx
mov ecx, dword [ebx]
add ecx, dword [ebx + 8]
mov dword [0x5718d0], ecx
mov eax, dword [ebx + 4]
add eax, dword [ebx + 0xc]
mov dword [0x5718d4], eax
push 0
call sub.GDI32.dll_GetStockObject
push eax
push 0x5718c8
push dword [0x5718b8]
call sub.USER32.dll_FillRect
push 0
push dword [0x5718b8]
call sub.GDI32.dll_SetTextColor
mov dword [0x5718c0], eax
push dword [0x571860]
push dword [0x5718b8]
call sub.GDI32.dll_SetBkColor
mov dword [0x5718c4], eax
push 0x8800c6
push dword [ebx + 4]
push dword [ebx]
push dword [0x5718bc]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
push dword [0x5718b8]
call sub.GDI32.dll_BitBlt
push 0xee0086
push dword [ebx + 4]
push dword [ebx]
push dword [0x571868]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
push dword [0x5718b8]
call sub.GDI32.dll_BitBlt
push dword [0x5718c0]
push dword [0x5718b8]
call sub.GDI32.dll_SetTextColor
push dword [0x5718c4]
push dword [0x5718b8]
call sub.GDI32.dll_SetBkColor
cmp byte [0x57181d], 0
je 0x461c84
push 0xcc0020
push dword [ebx + 4]
push dword [ebx]
push dword [0x5718b8]
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push dword [ebx]
push dword [0x571864]
call sub.GDI32.dll_BitBlt
mov edx, dword [0x571858]
mov ecx, dword [ebx + 8]
mov dword [edx + 0x78c], ecx
mov eax, dword [0x571858]
mov edx, dword [ebx + 0xc]
mov dword [eax + 0x790], edx
cmp dword [0x5718bc], 0
je 0x461cdf
cmp dword [0x5718b0], 0
je 0x461cd4
push dword [0x5718b0]
push dword [0x5718bc]
call sub.GDI32.dll_SelectObject
mov dword [0x5718b0], eax
push dword [0x5718b0]
call sub.GDI32.dll_DeleteObject
push dword [0x5718bc]
call sub.GDI32.dll_DeleteDC
cmp dword [0x5718b8], 0
je 0x461d0d
cmp dword [0x5718ac], 0
je 0x461d02
push dword [0x5718ac]
push dword [0x5718b8]
call sub.GDI32.dll_SelectObject
push dword [0x5718b8]
call sub.GDI32.dll_DeleteDC
cmp dword [0x5718b4], 0
je 0x461d32
push dword [0x57186c]
push dword [0x571868]
call sub.GDI32.dll_SelectObject
push dword [0x5718b4]
call sub.GDI32.dll_DeleteObject
mov ecx, dword [0x571858]
push dword [ecx + 0x77c]
push dword [0x571868]
call sub.GDI32.dll_SelectObject
mov dword [0x57186c], eax
push dword [0x571848]
push dword [0x571868]
call sub.GDI32.dll_SelectObject
push dword [0x571844]
push dword [0x571864]
call sub.GDI32.dll_SelectObject
push dword [0x571840]
call sub.GDI32.dll_DeleteObject
push dword [0x571854]
push dword [0x571868]
call sub.GDI32.dll_SelectObject
push dword [0x571850]
push dword [0x571864]
call sub.GDI32.dll_SelectObject
push dword [0x57184c]
call sub.GDI32.dll_DeleteObject
push dword [0x57186c]
push dword [0x571868]
call sub.GDI32.dll_SelectObject
push dword [0x571868]
call sub.GDI32.dll_DeleteDC
push dword [0x571824]
push dword [0x571864]
call sub.GDI32.dll_SetROP2
push dword [0x571864]
mov eax, dword [0x571858]
push dword [eax]
call sub.USER32.dll_ReleaseDC
cmp byte [0x5720e8], 0
je 0x461df4
xor eax, eax
jmp 0x461df9
mov eax, 1
pop edi
pop esi
pop ebx
pop ebp
ret 8