Function at 0x45ddec
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffbe8
push ebx
push esi
push edi
mov esi, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov eax, 0x4c12cc
call fcn.0049af0c
xor eax, eax
cmp dword [esi], 1
jne 0x45f651
push 0x4cd13c
call fcn.004975b6
pop ecx
cmp eax, dword [ebx + 0x3f]
je 0x45de60
push 0x4cd13c
call fcn.004975b6
pop ecx
mov dword [ebx + 0x3f], eax
mov edx, dword [ebx + 0x3f]
lea eax, [ebp - 0x104]
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x104], ecx
push eax
mov edx, dword [ebx + 0x23]
lea ecx, [ebp - 0xfc]
push edx
push ecx
call fcn.00475ef3
add esp, 0xc
mov eax, dword [esi + 0x10]
mov cl, 1
test al, 4
sete dl
and edx, 1
test al, 1
mov byte [ebp - 0x105], dl
jne 0x45de78
dec ecx
mov byte [ebp - 0x106], cl
mov dl, 1
test al, 8
jne 0x45de85
dec edx
mov byte [ebp - 0x107], dl
xor eax, eax
mov byte [ebp - 0x10a], al
mov byte [ebp - 0x109], al
mov byte [ebp - 0x108], al
mov edx, dword [esi + 0x2c]
mov dword [ebp - 0x110], edx
cmp dword [ebp - 0x110], 0
je 0x45f64f
push 0x11
lea ecx, [ebp - 0x254]
push ecx
call fcn.00477da0
add esp, 8
mov eax, dword [ebp - 0x110]
cmp dword [eax + 8], 0
jl 0x45df1b
lea edx, [ebp - 0x254]
push edx
push 0
mov ecx, dword [esi + 8]
push ecx
mov eax, dword [esi + 0x14]
push eax
call sub.USER32.dll_GetMenuItemInfoA
test eax, eax
setne dl
and edx, 1
mov byte [ebp - 0x108], dl
cmp dl, 1
jne 0x45df1b
test byte [ebp - 0x247], 0x10
je 0x45df0b
mov byte [ebp - 0x109], 1
test byte [ebp - 0x24b], 2
je 0x45df1b
mov byte [ebp - 0x10a], 1
mov word [ebp - 0xe0], 8
mov eax, dword [esi + 0x18]
push eax
lea ecx, [ebp - 0x20]
push ecx
call fcn.00468899
inc dword [ebp - 0xd4]
xor eax, eax
mov word [ebp - 0xe0], 0x14
mov dword [ebp - 0x114], eax
add esp, 8
cmp dword [ebx + 0x3b], 0
jne 0x45e035
mov edx, 0x154
lea ecx, [ebp - 0x3a8]
mov dword [ebp - 0x3a8], edx
push 0
push ecx
mov eax, dword [ebp - 0x3a8]
push eax
push 0x29
call sub.USER32.dll_SystemParametersInfoA
test eax, eax
je 0x45dfdb
cmp byte [ebp - 0x108], 0
je 0x45df97
cmp byte [ebp - 0x109], 0
je 0x45df97
mov dword [ebp - 0x2f8], 0x2bc
push 5
call fcn.004a4f8c
pop ecx
mov dword [ebp - 0x24], eax
test eax, eax
je 0x45dfd0
mov word [ebp - 0xe0], 0x2c
lea edx, [ebp - 0x308]
push edx
mov ecx, dword [ebp - 0x24]
push ecx
call fcn.0047019a
add esp, 8
mov word [ebp - 0xe0], 0x20
mov eax, dword [ebp - 0x24]
jmp 0x45dfd3
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x114], eax
jmp 0x45e020
push 5
call fcn.004a4f8c
pop ecx
mov dword [ebp - 0x28], eax
test eax, eax
je 0x45e017
mov word [ebp - 0xe0], 0x44
push 0
push 0x11
call sub.GDI32.dll_GetStockObject
push eax
mov edx, dword [ebp - 0x28]
push edx
call fcn.0047000c
add esp, 0xc
mov word [ebp - 0xe0], 0x38
mov ecx, dword [ebp - 0x28]
jmp 0x45e01a
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x114], ecx
mov eax, dword [ebp - 0x114]
push eax
lea edx, [ebp - 0x20]
push edx
call fcn.00468a2a
add esp, 8
jmp 0x45e045
mov eax, dword [ebx + 0x3b]
push eax
lea edx, [ebp - 0x20]
push edx
call fcn.00468a2a
add esp, 8
lea ecx, [ebp - 0x20]
push ecx
mov eax, dword [ebp - 0x1b]
call dword [eax + 0x58]
pop ecx
cmp eax, dword [ebp - 0x20]
je 0x45e060
push 1
mov edx, dword [ebp - 0x20]
push edx
call sub.GDI32.dll_SetBkMode
push 1
lea ecx, [ebp - 0x20]
push ecx
mov eax, dword [ebp - 0x1b]
call dword [eax + 0x58]
pop ecx
push eax
call sub.GDI32.dll_SetBkMode
mov dword [ebp - 0x118], eax
add esi, 0x1c
mov word [ebp - 0xe0], 0x14
mov dword [ebp - 0x11c], esi
lea edi, [ebp - 0x3b8]
mov eax, dword [ebp - 0x11c]
mov ecx, 4
mov esi, eax
rep movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x3b8]
lea edi, [ebp - 0x3c8]
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x3b8]
lea edi, [ebp - 0x3d8]
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x3ac]
sub eax, dword [ebp - 0x3b4]
add eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x3c0], eax
cmp byte [ebx + 0x20], 0
je 0x45e397
cmp dword [ebx + 0x2f], 0
je 0x45e397
cmp dword [ebx + 0x2f], 0
je 0x45e397
mov edx, dword [ebx + 0x2f]
push edx
call fcn.00463771
pop ecx
test eax, eax
jle 0x45e397
mov ecx, dword [ebx + 0x2f]
push ecx
call fcn.00463798
pop ecx
test eax, eax
jle 0x45e397
mov word [ebp - 0xe0], 0x50
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x4c]
push edx
call fcn.00477a4c
add esp, 8
add dword [ebp - 0xd4], 3
mov word [ebp - 0xe0], 0x5c
mov word [ebp - 0xe0], 0x68
push 0x4cd110
lea ecx, [ebp - 0x54]
push ecx
call fcn.00484398
add esp, 8
lea ecx, [ebp - 0x3b8]
add dword [ebp - 0xd4], 2
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
mov edx, dword [eax]
push edx
push ecx
mov eax, dword [ebp - 0x4c]
push eax
call sub.USER32.dll_FillRect
test eax, eax
setne dl
and edx, 1
sub dword [ebp - 0xd4], 2
push 2
lea ecx, [ebp - 0x54]
push ecx
call fcn.004845a3
add esp, 8
mov eax, dword [ebx + 0x2f]
push eax
lea edx, [ebp - 0x4c]
push edx
call fcn.00477bd6
add esp, 8
mov word [ebp - 0xe0], 0x74
push 0x4cd110
lea ecx, [ebp - 0x5c]
push ecx
call fcn.00484398
add esp, 8
lea ecx, [ebp - 0x3b8]
add dword [ebp - 0xd4], 2
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov edx, dword [eax]
push edx
push ecx
mov eax, dword [ebp - 0x20]
push eax
call sub.USER32.dll_FillRect
test eax, eax
setne dl
and edx, 1
sub dword [ebp - 0xd4], 2
push 2
lea ecx, [ebp - 0x5c]
push ecx
call fcn.004845a3
add esp, 8
mov eax, dword [ebx + 0x2f]
push eax
call fcn.00463771
pop ecx
push eax
mov eax, dword [ebp - 0x3b8]
pop edx
mov ecx, edx
cdq
idiv ecx
mov dword [ebp - 0x128], eax
mov word [ebp - 0xe0], 0x5c
mov eax, dword [ebx + 0x2f]
push eax
call fcn.00463771
pop ecx
push eax
mov eax, dword [ebp - 0x3b0]
pop edx
mov ecx, edx
cdq
idiv ecx
inc eax
mov dword [ebp - 0x12c], eax
mov eax, dword [ebx + 0x2f]
push eax
call fcn.00463798
pop ecx
push eax
mov eax, dword [ebp - 0x3b4]
pop edx
mov ecx, edx
cdq
idiv ecx
mov dword [ebp - 0x130], eax
mov eax, dword [ebx + 0x2f]
push eax
call fcn.00463798
pop ecx
push eax
mov eax, dword [ebp - 0x3ac]
pop edx
mov ecx, edx
cdq
idiv ecx
inc eax
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x12c]
jge 0x45e382
mov esi, dword [ebp - 0x130]
cmp esi, dword [ebp - 0x134]
jge 0x45e36a
push 0
mov eax, dword [ebx + 0x2f]
push eax
call fcn.00463798
pop ecx
mov edi, eax
imul edi, esi
mov eax, dword [ebx + 0x2f]
push eax
call fcn.00463771
imul dword [ebp - 0x138]
pop ecx
mov dword [ebp - 0x13c], eax
mov edx, dword [ebp - 0x13c]
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x144], edx
mov dword [ebp - 0x140], edi
push ecx
lea eax, [ebp - 0x4c]
push eax
call fcn.00469000
add esp, 0xc
lea edi, [ebp - 0x3b8]
push 0xcc0020
mov eax, dword [edi + 4]
push eax
mov edx, dword [edi]
push edx
mov ecx, dword [ebp - 0x4c]
push ecx
mov eax, dword [ebp - 0x3ac]
sub eax, dword [ebp - 0x3b4]
push eax
mov edx, dword [ebp - 0x3b0]
sub edx, dword [ebp - 0x3b8]
push edx
mov ecx, dword [ebp - 0x3b4]
push ecx
mov eax, dword [ebp - 0x3b8]
push eax
mov edx, dword [ebp - 0x20]
push edx
call sub.GDI32.dll_BitBlt
test eax, eax
setne cl
and ecx, 1
inc esi
cmp esi, dword [ebp - 0x134]
jl 0x45e2c2
inc dword [ebp - 0x138]
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x12c]
jl 0x45e2b0
sub dword [ebp - 0xd4], 3
push 2
lea edx, [ebp - 0x4c]
push edx
call fcn.00477c43
add esp, 8
mov ecx, dword [ebp - 0x110]
cmp dword [ecx + 8], 0xfffffffd
jne 0x45e578
mov word [ebp - 0xe0], 0x80
push 0
push 1
push 0x4cd140
lea eax, [ebp - 0x64]
push eax
call fcn.0047a3de
add esp, 0x10
add dword [ebp - 0xd4], 2
mov word [ebp - 0xe0], 0x8c
mov word [ebp - 0xe0], 0x98
push 0
push 1
push 0x4cd150
lea edx, [ebp - 0x6c]
push edx
call fcn.0047a3de
add esp, 0x10
lea ecx, [ebp - 0x64]
add dword [ebp - 0xd4], 2
mov word [ebp - 0xe0], 0x8c
push ecx
lea eax, [ebp - 0x20]
push eax
call fcn.004689a4
add esp, 8
mov edx, dword [ebp - 0x3b4]
add edx, 2
mov dword [ebp - 0x148], edx
mov ecx, dword [ebp - 0x3b8]
add ecx, 2
mov dword [ebp - 0x14c], ecx
push 0
mov eax, dword [ebp - 0x148]
push eax
mov edx, dword [ebp - 0x14c]
push edx
mov ecx, dword [ebp - 0x20]
push ecx
call sub.GDI32.dll_MoveToEx
test eax, eax
mov edx, dword [ebp - 0x3b4]
setne al
add edx, 2
and eax, 1
mov dword [ebp - 0x150], edx
mov ecx, dword [ebp - 0x3b0]
add ecx, 0xfffffffe
mov dword [ebp - 0x154], ecx
mov eax, dword [ebp - 0x150]
push eax
mov edx, dword [ebp - 0x154]
push edx
mov ecx, dword [ebp - 0x20]
push ecx
call sub.GDI32.dll_LineTo
test eax, eax
setne al
and eax, 1
lea edx, [ebp - 0x20]
push edx
call fcn.00468adf
pop ecx
lea ecx, [ebp - 0x6c]
push ecx
lea eax, [ebp - 0x20]
push eax
call fcn.004689a4
add esp, 8
mov edx, dword [ebp - 0x3b4]
add edx, 3
mov dword [ebp - 0x158], edx
mov ecx, dword [ebp - 0x3b8]
add ecx, 2
mov dword [ebp - 0x15c], ecx
push 0
mov eax, dword [ebp - 0x158]
push eax
mov edx, dword [ebp - 0x15c]
push edx
mov ecx, dword [ebp - 0x20]
push ecx
call sub.GDI32.dll_MoveToEx
test eax, eax
mov edx, dword [ebp - 0x3b4]
setne al
add edx, 3
and eax, 1
mov dword [ebp - 0x160], edx
mov ecx, dword [ebp - 0x3b0]
add ecx, 0xfffffffe
mov dword [ebp - 0x164], ecx
mov eax, dword [ebp - 0x160]
push eax
mov edx, dword [ebp - 0x164]
push edx
mov ecx, dword [ebp - 0x20]
push ecx
call sub.GDI32.dll_LineTo
test eax, eax
setne al
and eax, 1
lea edx, [ebp - 0x20]
push edx
call fcn.00468adf
pop ecx
sub dword [ebp - 0xd4], 2
add dword [ebp - 0xd4], 2
dec dword [ebp - 0xd4]
push 0
lea ecx, [ebp - 0x6c]
push ecx
call fcn.00474950
add esp, 8
sub dword [ebp - 0xd4], 2
add dword [ebp - 0xd4], 2
dec dword [ebp - 0xd4]
push 0
lea eax, [ebp - 0x64]
push eax
call fcn.00474950
add esp, 8
jmp 0x45f5ad
mov edx, dword [ebp - 0x110]
cmp dword [edx + 8], 0xfffffffc
jne 0x45ea6f
mov word [ebp - 0xe0], 0xa4
mov ecx, dword [ebp - 0x110]
add ecx, 0x10
push ecx
lea eax, [ebp - 0x70]
push eax
call fcn.004a79d0
add esp, 8
inc dword [ebp - 0xd4]
mov word [ebp - 0xe0], 0xb0
lea esi, [ebp - 0x3d8]
lea edi, [ebp - 0x3e8]
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
cmp byte [ebx + 0x1e], 0
je 0x45e7cd
cmp byte [ebp - 0x106], 0
je 0x45e5f2
cmp byte [ebp - 0x105], 0
je 0x45e5f2
inc dword [ebp - 0x3d4]
add dword [ebp - 0x3d8], 2
cmp byte [ebx + 0x20], 0
jne 0x45e655
mov word [ebp - 0xe0], 0xbc
push 0x4cd110
lea eax, [ebp - 0x78]
push eax
call fcn.00484398
add esp, 8
add dword [ebp - 0xd4], 2
mov dword [ebp - 0x168], eax
lea eax, [ebp - 0x3d8]
mov edx, dword [ebp - 0x168]
mov ecx, dword [edx]
push ecx
push eax
mov edx, dword [ebp - 0x20]
push edx
call sub.USER32.dll_FillRect
test eax, eax
setne cl
and ecx, 1
sub dword [ebp - 0xd4], 2
push 2
lea eax, [ebp - 0x78]
push eax
call fcn.004845a3
add esp, 8
cmp byte [ebp - 0x105], 0
je 0x45e6ac
push 0x4cd11c
lea edx, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x16c]
push ecx
call fcn.00468e54
add esp, 0xc
lea eax, [ebp - 0x16c]
push eax
call fcn.004975b6
pop ecx
mov dword [ebp - 0xf4], eax
push 0x25
lea edx, [ebp - 0x3d8]
push edx
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx + 2]
push eax
lea edx, [ebp - 0x20]
push edx
call fcn.0046920f
add esp, 0x14
jmp 0x45e751
push 1
push 1
lea ecx, [ebp - 0x3d8]
push ecx
call fcn.00497a74
add esp, 0xc
push 0x4cd150
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x170]
push edx
call fcn.00468e54
add esp, 0xc
lea ecx, [ebp - 0x170]
push ecx
call fcn.004975b6
pop ecx
mov dword [ebp - 0xf4], eax
push 0x25
lea eax, [ebp - 0x3d8]
push eax
push 0xffffffffffffffff
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx + 2]
push ecx
lea eax, [ebp - 0x20]
push eax
call fcn.0046920f
add esp, 0x14
lea edx, [ebp - 0x3d8]
push 0xffffffffffffffff
push 0xffffffffffffffff
push edx
call fcn.00497a74
add esp, 0xc
push 0x4cd144
lea ecx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x174]
push eax
call fcn.00468e54
add esp, 0xc
push 0x25
lea edx, [ebp - 0x3d8]
push edx
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx + 2]
push eax
lea edx, [ebp - 0x20]
push edx
call fcn.0046920f
add esp, 0x14
mov ecx, dword [ebp - 0xf4]
lea edx, [ebp - 0x180]
mov dword [ebp - 0x17c], ecx
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x180], eax
push edx
push ecx
lea eax, [ebp - 0x178]
push eax
call fcn.00468e54
add esp, 0xc
cmp byte [ebp - 0x106], 0
je 0x45ea56
cmp byte [ebp - 0x105], 0
je 0x45ea56
add esp, 0xfffffffc
mov edx, dword [0x4cd150]
mov dword [esp], edx
add esp, 0xfffffffc
mov ecx, dword [0x4cd140]
mov dword [esp], ecx
lea eax, [ebp - 0x3e8]
push eax
lea edx, [ebp - 0x20]
push edx
call fcn.0045d10c
add esp, 0x10
jmp 0x45ea56
cmp byte [ebx + 0x20], 0
jne 0x45e830
mov word [ebp - 0xe0], 0xc8
push 0x4cd110
lea ecx, [ebp - 0x80]
push ecx
call fcn.00484398
add esp, 8
lea ecx, [ebp - 0x3d8]
add dword [ebp - 0xd4], 2
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov edx, dword [eax]
push edx
push ecx
mov eax, dword [ebp - 0x20]
push eax
call sub.USER32.dll_FillRect
test eax, eax
setne dl
and edx, 1
sub dword [ebp - 0xd4], 2
push 2
lea ecx, [ebp - 0x80]
push ecx
call fcn.004845a3
add esp, 8
cmp byte [ebp - 0x105], 0
je 0x45e992
cmp byte [ebp - 0x106], 0
je 0x45e905
push 0x4cd138
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x188]
push edx
call fcn.00468e54
add esp, 0xc
lea ecx, [ebp - 0x188]
push ecx
call fcn.004975b6
pop ecx
mov dword [ebp - 0xf4], eax
push 0x4cd134
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x18c]
push edx
call fcn.00468e08
add esp, 0xc
lea ecx, [ebp - 0x18c]
push ecx
call fcn.004975b6
pop ecx
mov dword [ebp - 0xf8], eax
mov word [ebp - 0xe0], 0xd4
push 0x4cd134
lea eax, [ebp - 0x88]
push eax
call fcn.00484398
add esp, 8
add dword [ebp - 0xd4], 2
mov dword [ebp - 0x190], eax
lea eax, [ebp - 0x3d8]
mov edx, dword [ebp - 0x190]
mov ecx, dword [edx]
push ecx
push eax
mov edx, dword [ebp - 0x20]
push edx
call sub.USER32.dll_FillRect
test eax, eax
setne cl
and ecx, 1
sub dword [ebp - 0xd4], 2
push 2
lea eax, [ebp - 0x88]
push eax
call fcn.004845a3
add esp, 8
jmp 0x45e930
push 0x4cd11c
lea edx, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x194]
push ecx
call fcn.00468e54
add esp, 0xc
lea eax, [ebp - 0x194]
push eax
call fcn.004975b6
pop ecx
mov dword [ebp - 0xf4], eax
push 0x25
lea edx, [ebp - 0x3d8]
push edx
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx + 2]
push eax
lea edx, [ebp - 0x20]
push edx
call fcn.0046920f
add esp, 0x14
cmp byte [ebp - 0x106], 0
je 0x45ea24
mov ecx, dword [ebp - 0xf8]
lea edx, [ebp - 0x1a0]
mov dword [ebp - 0x19c], ecx
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1a0], eax
push edx
push ecx
lea eax, [ebp - 0x198]
push eax
call fcn.00468e08
add esp, 0xc
jmp 0x45ea24
push 1
push 1
lea edx, [ebp - 0x3d8]
push edx
call fcn.00497a74
add esp, 0xc
push 0x4cd150
lea ecx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1a4]
push eax
call fcn.00468e54
add esp, 0xc
push 0x25
lea edx, [ebp - 0x3d8]
push edx
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx + 2]
push eax
lea edx, [ebp - 0x20]
push edx
call fcn.0046920f
add esp, 0x14
lea ecx, [ebp - 0x3d8]
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
call fcn.00497a74
add esp, 0xc
push 0x4cd144
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1a8]
push edx
call fcn.00468e54
add esp, 0xc
push 0x25
lea ecx, [ebp - 0x3d8]
push ecx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x70]
mov edx, dword [eax + 2]
push edx
lea ecx, [ebp - 0x20]
push ecx
call fcn.0046920f
add esp, 0x14
mov eax, dword [ebp - 0xf4]
lea ecx, [ebp - 0x1b4]
mov dword [ebp - 0x1b0], eax
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x1b4], edx
push ecx
push eax
lea edx, [ebp - 0x1ac]
push edx
call fcn.00468e54
add esp, 0xc
dec dword [ebp - 0xd4]
push 2
lea ecx, [ebp - 0x70]
push ecx
call fcn.004a8304
add esp, 8
jmp 0x45f5ad
mov eax, dword [ebp - 0x3c0]
sub eax, dword [ebp - 0x3c8]
inc eax
add dword [ebp - 0x3d8], eax
cmp byte [ebp - 0x106], 0
je 0x45ec10
mov edx, dword [ebp - 0x110]
cmp dword [edx + 4], 0
jge 0x45eaa8
cmp byte [ebp - 0x107], 0
je 0x45eb7d
mov word [ebp - 0xe0], 0xe0
push 0x4cd134
lea ecx, [ebp - 0x98]
push ecx
call fcn.00484398
add esp, 8
lea ecx, [ebp - 0x3d8]
add dword [ebp - 0xd4], 2
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1b8]
mov edx, dword [eax]
push edx
push ecx
mov eax, dword [ebp - 0x20]
push eax
call sub.USER32.dll_FillRect
test eax, eax
setne dl
and edx, 1
sub dword [ebp - 0xd4], 2
push 2
lea ecx, [ebp - 0x98]
push ecx
call fcn.004845a3
add esp, 8
cmp byte [ebp - 0x107], 0
je 0x45ebe0
mov word [ebp - 0xe0], 0xec
push 0x4cd110
lea eax, [ebp - 0xa0]
push eax
call fcn.00484398
add esp, 8
add dword [ebp - 0xd4], 2
mov dword [ebp - 0x1bc], eax
lea eax, [ebp - 0x3c8]
mov edx, dword [ebp - 0x1bc]
mov ecx, dword [edx]
push ecx
push eax
mov edx, dword [ebp - 0x20]
push edx
call sub.USER32.dll_FillRect
test eax, eax
setne cl
and ecx, 1
sub dword [ebp - 0xd4], 2
push 2
lea eax, [ebp - 0xa0]
push eax
call fcn.004845a3
add esp, 8
jmp 0x45ebe0
mov word [ebp - 0xe0], 0xf8
push 0x4cd134
lea edx, [ebp - 0xa8]
push edx
call fcn.00484398
add esp, 8
lea edx, [ebp - 0x3b8]
add dword [ebp - 0xd4], 2
mov dword [ebp - 0x1c0], eax
mov ecx, dword [ebp - 0x1c0]
mov eax, dword [ecx]
push eax
push edx
mov ecx, dword [ebp - 0x20]
push ecx
call sub.USER32.dll_FillRect
test eax, eax
setne al
and eax, 1
sub dword [ebp - 0xd4], 2
push 2
lea edx, [ebp - 0xa8]
push edx
call fcn.004845a3
add esp, 8
push 0x4cd138
lea ecx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c4]
push eax
call fcn.00468e54
add esp, 0xc
lea edx, [ebp - 0x1c4]
push edx
call fcn.004975b6
pop ecx
mov dword [ebp - 0xf4], eax
jmp 0x45ed86
mov ecx, dword [ebp - 0x110]
cmp dword [ecx + 4], 0
jge 0x45ec29
cmp byte [ebp - 0x107], 0
je 0x45ecf2
cmp byte [ebx + 0x20], 0
jne 0x45ec92
mov word [ebp - 0xe0], 0x104
push 0x4cd110
lea eax, [ebp - 0xb0]
push eax
call fcn.00484398
add esp, 8
add dword [ebp - 0xd4], 2
mov dword [ebp - 0x1c8], eax
lea eax, [ebp - 0x3d8]
mov edx, dword [ebp - 0x1c8]
mov ecx, dword [edx]
push ecx
push eax
mov edx, dword [ebp - 0x20]
push edx
call sub.USER32.dll_FillRect
test eax, eax
setne cl
and ecx, 1
sub dword [ebp - 0xd4], 2
push 2
lea eax, [ebp - 0xb0]
push eax
call fcn.004845a3
add esp, 8
cmp byte [ebp - 0x107], 0
je 0x45ed5b
cmp byte [ebp - 0x105], 0
je 0x45ed5b
push 0xffffffffffffffff
push 0xffffffffffffffff
lea edx, [ebp - 0x3c8]
push edx
call fcn.00497a8d
add esp, 0xc
lea esi, [ebp - 0x3c8]
add esp, 0xfffffff0
mov ecx, 4
mov edi, esp
lea eax, [ebp - 0x20]
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.0045d240
add esp, 0x14
lea edx, [ebp - 0x3c8]
push 1
push 1
push edx
call fcn.00497a8d
add esp, 0xc
jmp 0x45ed5b
cmp byte [ebx + 0x20], 0
jne 0x45ed5b
mov word [ebp - 0xe0], 0x110
push 0x4cd110
lea ecx, [ebp - 0xb8]
push ecx
call fcn.00484398
add esp, 8
lea ecx, [ebp - 0x3b8]
add dword [ebp - 0xd4], 2
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x1cc]
mov edx, dword [eax]
push edx
push ecx
mov eax, dword [ebp - 0x20]
push eax
call sub.USER32.dll_FillRect
test eax, eax
setne dl
and edx, 1
sub dword [ebp - 0xd4], 2
push 2
lea ecx, [ebp - 0xb8]
push ecx
call fcn.004845a3
add esp, 8
push 0x4cd11c
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1d0]
push edx
call fcn.00468e54
add esp, 0xc
lea ecx, [ebp - 0x1d0]
push ecx
call fcn.004975b6
pop ecx
mov dword [ebp - 0xf4], eax
mov esi, dword [ebp - 0x3bc]
sub esi, dword [ebp - 0x3c4]
sub esi, dword [ebx + 0x2b]
sar esi, 1
jns 0x45ed9c
adc esi, 0
mov word [ebp - 0xe0], 0x14
mov edi, dword [ebp - 0x3c0]
sub edi, dword [ebp - 0x3c8]
sub edi, dword [ebx + 0x27]
sar edi, 1
jns 0x45edbb
adc edi, 0
mov eax, dword [ebp - 0x110]
cmp dword [eax + 4], 0
jl 0x45ef61
cmp byte [ebp - 0x106], 0
je 0x45ee42
cmp byte [ebp - 0x105], 0
je 0x45ee42
cmp byte [ebp - 0x107], 0
je 0x45ee16
add esp, 0xfffffffc
mov edx, dword [0x4cd150]
mov dword [esp], edx
add esp, 0xfffffffc
mov ecx, dword [0x4cd140]
mov dword [esp], ecx
lea eax, [ebp - 0x3c8]
push eax
lea edx, [ebp - 0x20]
push edx
call fcn.0045d10c
add esp, 0x10
jmp 0x45eea2
add esp, 0xfffffffc
mov ecx, dword [0x4cd140]
mov dword [esp], ecx
add esp, 0xfffffffc
mov eax, dword [0x4cd150]
mov dword [esp], eax
lea edx, [ebp - 0x3c8]
push edx
lea ecx, [ebp - 0x20]
push ecx
call fcn.0045d10c
add esp, 0x10
jmp 0x45eea2
cmp byte [ebp - 0x107], 0
je 0x45ee77
add esp, 0xfffffffc
mov eax, dword [0x4cd150]
mov dword [esp], eax
add esp, 0xfffffffc
mov edx, dword [0x4cd140]
mov dword [esp], edx
lea ecx, [ebp - 0x3c8]
push ecx
lea eax, [ebp - 0x20]
push eax
call fcn.0045d10c
add esp, 0x10
jmp 0x45eea2
add esp, 0xfffffffc
mov edx, dword [0x4cd110]
mov dword [esp], edx
add esp, 0xfffffffc
mov ecx, dword [0x4cd110]
mov dword [esp], ecx
lea eax, [ebp - 0x3c8]
push eax
lea edx, [ebp - 0x20]
push edx
call fcn.0045d10c
add esp, 0x10
push 0
push 1
mov ecx, dword [ebp - 0x3c4]
lea edx, [ebp - 0x20]
add ecx, esi
push ecx
mov eax, dword [ebp - 0x3c8]
add eax, edi
push eax
push edx
mov ecx, dword [ebp - 0x110]
mov eax, dword [ecx + 4]
push eax
mov edx, dword [ebx + 0x23]
push edx
call fcn.00475af4
add esp, 0x1c
cmp byte [ebp - 0x105], 0
jne 0x45f011
mov ecx, dword [ebp - 0x3c4]
add ecx, esi
add ecx, dword [ebx + 0x2b]
mov dword [ebp - 0x1d4], ecx
mov eax, dword [ebp - 0x3c8]
add eax, edi
add eax, dword [ebx + 0x27]
mov dword [ebp - 0x1d8], eax
add esi, dword [ebp - 0x3c4]
mov dword [ebp - 0x1dc], esi
add edi, dword [ebp - 0x3c8]
mov dword [ebp - 0x1e0], edi
mov edx, dword [ebp - 0x1e0]
mov dword [ebp - 0x3f8], edx
mov ecx, dword [ebp - 0x1dc]
mov dword [ebp - 0x3f4], ecx
lea ecx, [ebp - 0x3f8]
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x3f0], eax
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 0x1d4]
mov dword [ebp - 0x3ec], edx
push ecx
push eax
call fcn.0045d2c0
add esp, 8
jmp 0x45f011
cmp byte [ebp - 0x107], 0
je 0x45f011
push 0xffffffffffffffff
push 0xffffffffffffffff
lea edx, [ebp - 0x3c8]
push edx
call fcn.00497a8d
add esp, 0xc
add esp, 0xfffffffc
mov ecx, dword [0x4cd150]
mov dword [esp], ecx
add esp, 0xfffffffc
mov eax, dword [0x4cd140]
mov dword [esp], eax
lea edx, [ebp - 0x3c8]
push edx
lea ecx, [ebp - 0x20]
push ecx
call fcn.0045d10c
add esp, 0x10
cmp byte [ebp - 0x108], 0
je 0x45efe8
cmp byte [ebp - 0x10a], 0
je 0x45efe8
mov al, byte [ebp - 0x106]
lea ecx, [ebp - 0x20]
push eax
mov dl, byte [ebp - 0x105]
push edx
add esi, dword [ebp - 0x3c4]
push esi
add edi, dword [ebp - 0x3c8]
push edi
push ecx
push ebx
call fcn.00461200
add esp, 0x18
jmp 0x45f011
mov al, byte [ebp - 0x106]
lea ecx, [ebp - 0x20]
push eax
mov dl, byte [ebp - 0x105]
push edx
add esi, dword [ebp - 0x3c4]
push esi
add edi, dword [ebp - 0x3c8]
push edi
push ecx
push ebx
call fcn.0046072c
add esp, 0x18
mov word [ebp - 0xe0], 0x11c
lea eax, [ebp - 0x8c]
push eax
call fcn.004a7930
pop ecx
inc dword [ebp - 0xd4]
mov word [ebp - 0xe0], 0x128
mov word [ebp - 0xe0], 0x134
mov edx, dword [ebp - 0x110]
add edx, 0x10
push edx
lea ecx, [ebp - 0x90]
push ecx
call fcn.004a79d0
add esp, 8
inc dword [ebp - 0xd4]
mov word [ebp - 0xe0], 0x128
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 2]
push edx
call fcn.004987e8
pop ecx
mov dword [ebp - 0x1ec], eax
mov ecx, dword [ebp - 0x90]
lea edx, [ebp - 0x1f8]
mov eax, dword [ecx + 2]
mov dword [ebp - 0x1f0], eax
push edx
mov ecx, dword [ebp - 0x1ec]
lea edx, [ebp - 0x20]
push ecx
mov eax, dword [ebp - 0x1f0]
push eax
push edx
mov ecx, dword [ebp - 0x1b]
call dword [ecx + 0x58]
pop ecx
push eax
call sub.GDI32.dll_GetTextExtentPointA
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x1e8], eax
mov edx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1e4], edx
mov ecx, dword [ebp - 0x3cc]
sub ecx, dword [ebp - 0x3d4]
sub ecx, dword [ebp - 0x1e4]
sar ecx, 1
jns 0x45f0e3
adc ecx, 0
mov dword [ebp - 0x1fc], ecx
mov eax, dword [ebp - 0x1fc]
add dword [ebp - 0x3d4], eax
add dword [ebp - 0x3d8], 2
sub dword [ebp - 0x3d0], 0xf
mov word [ebp - 0xe0], 0x140
push 0x4c1a0c
lea edx, [ebp - 0xbc]
push edx
call fcn.004a79d0
add esp, 8
lea ecx, [ebp - 0xbc]
inc dword [ebp - 0xd4]
lea eax, [ebp - 0x90]
push 0
push ecx
push eax
call fcn.004a7cd8
add esp, 0xc
mov ebx, eax
dec dword [ebp - 0xd4]
lea eax, [ebp - 0xbc]
push 2
push eax
call fcn.004a8304
add esp, 8
mov word [ebp - 0xe0], 0x128
cmp ebx, 0xffffffff
jne 0x45f1b9
mov word [ebp - 0xe0], 0x14c
push 0x4c1a0e
lea edx, [ebp - 0xc0]
push edx
call fcn.004a79d0
add esp, 8
lea ecx, [ebp - 0xc0]
inc dword [ebp - 0xd4]
lea eax, [ebp - 0x90]
push 0
push ecx
push eax
call fcn.004a7cd8
add esp, 0xc
mov ebx, eax
dec dword [ebp - 0xd4]
lea eax, [ebp - 0xc0]
push 2
push eax
call fcn.004a8304
add esp, 8
test ebx, ebx
jl 0x45f434
mov word [ebp - 0xe0], 0x158
lea edx, [ebx + 1]
push edx
lea ecx, [ebp - 0x90]
push ecx
lea eax, [ebp - 0xc4]
push eax
call fcn.004a8958
add esp, 0xc
lea edx, [ebp - 0xc4]
inc dword [ebp - 0xd4]
mov dword [ebp - 0x200], edx
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x200]
push ecx
lea eax, [ebp - 0x8c]
push eax
call fcn.004a7618
add esp, 0x10
dec dword [ebp - 0xd4]
push 2
lea edx, [ebp - 0xc4]
push edx
call fcn.004a8304
add esp, 8
mov word [ebp - 0xe0], 0x164
push ebx
push 0
lea ecx, [ebp - 0x90]
push ecx
lea eax, [ebp - 0xc8]
push eax
call fcn.004a89b0
add esp, 0x10
lea edx, [ebp - 0xc8]
inc dword [ebp - 0xd4]
mov dword [ebp - 0x204], edx
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x204]
push ecx
lea eax, [ebp - 0x90]
push eax
call fcn.004a7618
add esp, 0x10
dec dword [ebp - 0xd4]
push 2
lea edx, [ebp - 0xc8]
push edx
call fcn.004a8304
add esp, 8
cmp byte [ebp - 0x105], 0
jne 0x45f3ed
cmp byte [ebp - 0x106], 0
jne 0x45f38e
lea esi, [ebp - 0x3d8]
lea edi, [ebp - 0x408]
mov ecx, 4
lea eax, [ebp - 0x408]
rep movsd dword es:[edi], dword [esi]
mov word [ebp - 0xe0], 0x128
push 0xffffffffffffffff
push 0xffffffffffffffff
push eax
call fcn.00497a8d
add esp, 0xc
push 0x4cd150
lea edx, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x208]
push ecx
call fcn.00468e54
add esp, 0xc
push 4
lea eax, [ebp - 0x408]
push eax
push 0xffffffffffffffff
mov edx, dword [ebp - 0x90]
mov ecx, dword [edx + 2]
push ecx
lea eax, [ebp - 0x20]
push eax
call fcn.0046920f
add esp, 0x14
push 6
lea edx, [ebp - 0x408]
push edx
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ecx + 2]
push eax
lea edx, [ebp - 0x20]
push edx
call fcn.0046920f
add esp, 0x14
push 0x4cd144
lea ecx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x20c]
push eax
call fcn.00468e54
add esp, 0xc
push 4
lea edx, [ebp - 0x3d8]
push edx
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x90]
mov eax, dword [ecx + 2]
push eax
lea edx, [ebp - 0x20]
push edx
call fcn.0046920f
add esp, 0x14
push 6
lea ecx, [ebp - 0x3d8]
push ecx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x8c]
mov edx, dword [eax + 2]
push edx
lea ecx, [ebp - 0x20]
push ecx
call fcn.0046920f
add esp, 0x14
jmp 0x45f54d
push 0x4cd110
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x210]
push edx
call fcn.00468e54
add esp, 0xc
push 4
lea ecx, [ebp - 0x3d8]
push ecx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 2]
push edx
lea ecx, [ebp - 0x20]
push ecx
call fcn.0046920f
add esp, 0x14
push 6
lea eax, [ebp - 0x3d8]
push eax
push 0xffffffffffffffff
mov edx, dword [ebp - 0x8c]
mov ecx, dword [edx + 2]
push ecx
lea eax, [ebp - 0x20]
push eax
call fcn.0046920f
add esp, 0x14
jmp 0x45f54d
push 4
lea edx, [ebp - 0x3d8]
push edx
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x90]
mov eax, dword [ecx + 2]
push eax
lea edx, [ebp - 0x20]
push edx
call fcn.0046920f
add esp, 0x14
push 6
lea ecx, [ebp - 0x3d8]
push ecx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x8c]
mov edx, dword [eax + 2]
push edx
lea ecx, [ebp - 0x20]
push ecx
call fcn.0046920f
add esp, 0x14
jmp 0x45f54d
cmp byte [ebp - 0x105], 0
jne 0x45f52c
cmp byte [ebp - 0x106], 0
jne 0x45f4f1
lea esi, [ebp - 0x3d8]
lea edi, [ebp - 0x418]
mov ecx, 4
lea eax, [ebp - 0x418]
rep movsd dword es:[edi], dword [esi]
mov word [ebp - 0xe0], 0x128
push 0xffffffffffffffff
push 0xffffffffffffffff
push eax
call fcn.00497a8d
add esp, 0xc
push 0x4cd150
lea edx, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x214]
push ecx
call fcn.00468e54
add esp, 0xc
push 0x44
lea eax, [ebp - 0x418]
push eax
push 0xffffffffffffffff
mov edx, dword [ebp - 0x90]
mov ecx, dword [edx + 2]
push ecx
lea eax, [ebp - 0x20]
push eax
call fcn.0046920f
add esp, 0x14
push 0x4cd144
lea edx, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x218]
push ecx
call fcn.00468e54
add esp, 0xc
push 0x44
lea eax, [ebp - 0x3d8]
push eax
push 0xffffffffffffffff
mov edx, dword [ebp - 0x90]
mov ecx, dword [edx + 2]
push ecx
lea eax, [ebp - 0x20]
push eax
call fcn.0046920f
add esp, 0x14
jmp 0x45f54d
push 0x4cd110
lea edx, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x21c]
push ecx
call fcn.00468e54
add esp, 0xc
push 0x44
lea eax, [ebp - 0x3d8]
push eax
push 0xffffffffffffffff
mov edx, dword [ebp - 0x90]
mov ecx, dword [edx + 2]
push ecx
lea eax, [ebp - 0x20]
push eax
call fcn.0046920f
add esp, 0x14
jmp 0x45f54d
push 0x44
lea edx, [ebp - 0x3d8]
push edx
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x90]
mov eax, dword [ecx + 2]
push eax
lea edx, [ebp - 0x20]
push edx
call fcn.0046920f
add esp, 0x14
mov ecx, dword [ebp - 0xf4]
lea edx, [ebp - 0x228]
mov dword [ebp - 0x224], ecx
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x228], eax
push edx
push ecx
lea eax, [ebp - 0x220]
push eax
call fcn.00468e54
add esp, 0xc
dec dword [ebp - 0xd4]
push 2
lea edx, [ebp - 0x90]
push edx
call fcn.004a8304
add esp, 8
dec dword [ebp - 0xd4]
push 2
lea ecx, [ebp - 0x8c]
push ecx
call fcn.004a8304
add esp, 8
mov ebx, dword [ebp - 0x118]
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 0x1b]
call dword [edx + 0x58]
pop ecx
cmp eax, dword [ebp - 0x20]
je 0x45f5cd
push ebx
mov ecx, dword [ebp - 0x20]
push ecx
call sub.GDI32.dll_SetBkMode
push ebx
lea eax, [ebp - 0x20]
push eax
mov edx, dword [ebp - 0x1b]
call dword [edx + 0x58]
pop ecx
push eax
call sub.GDI32.dll_SetBkMode
lea ecx, [ebp - 0x20]
push ecx
call fcn.00468b33
pop ecx
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
je 0x45f63b
mov word [ebp - 0xe0], 0x17c
add dword [ebp - 0xd4], 2
dec dword [ebp - 0xd4]
push 0
mov edx, dword [ebp - 0xcc]
push edx
call fcn.00474950
add esp, 8
mov ecx, dword [ebp - 0xcc]
push ecx
call fcn.004a4f58
pop ecx
mov word [ebp - 0xe0], 0x170
dec dword [ebp - 0xd4]
push 2
lea eax, [ebp - 0x20]
push eax
call fcn.00468971
add esp, 8
mov al, 1
mov edx, dword [ebp - 0xf0]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret