Function at 0x50d630
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
mov eax, dword [0x613ad0]
xor eax, ebp
mov dword [ebp - 0xc8], eax
push esi
mov dword [ebp - 0x60], 0
mov dword [ebp - 0xc0], 0xffffffff
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xa16c]
and ecx, 0x10000000
je 0x50d67e
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00509c30
add esp, 8
jmp 0x510170
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x34], 0
jne 0x50d68c
jmp 0x510170
mov edx, dword [ebp + 8]
cmp dword [edx + 0x5ba4], 0
jne 0x50d6d1
mov eax, dword [ebp + 8]
cmp dword [eax + 0x5bb8], 0
jne 0x50d6d1
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x558], 0x114
je 0x50d6d1
mov edx, dword [ebp + 8]
cmp dword [edx + 0x4b48], 0
jne 0x50d6d1
mov eax, dword [ebp + 8]
mov dword [eax + 0x4dc], 1
jmp 0x510170
cmp dword [ebp + 0xc], 0
je 0x50d75e
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x5d8]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x138]
mov edx, dword [ecx + edx*4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x4e4]
cmp ecx, dword [edx + 0x28]
jne 0x50d75e
push 2
push 0x102
push 0x102
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x39c]
push eax
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x50d74c
push 2
push 0x100
push 0x100
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x39c]
push eax
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x50d75e
mov edx, dword [ebp + 8]
mov dword [edx + 0x4dc], 1
jmp 0x510170
mov eax, dword [ebp + 8]
mov dword [eax + 0x5bb8], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x4dc], 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x5d8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004aea30
add esp, 8
mov edx, dword [ebp + 8]
mov dword [edx + 0x4e8], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x5d8]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x138]
mov ecx, dword [eax + ecx*4]
mov edx, dword [ebp + 8]
mov eax, dword [ecx + 0x28]
mov dword [edx + 0x4e4], eax
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x4b48], 0
je 0x50d7e7
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x4b3c]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x138]
mov eax, dword [edx + eax*4]
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 0x14]
mov dword [ecx + 0x2b44], edx
jmp 0x50d808
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x5d8]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x138]
mov ecx, dword [eax + ecx*4]
mov edx, dword [ebp + 8]
mov eax, dword [ecx + 0x14]
mov dword [edx + 0x2b44], eax
push 8
push 5
mov ecx, dword [ebp + 8]
push ecx
call fcn.00521b70
add esp, 0xc
push 9
push 9
mov edx, dword [ebp + 8]
push edx
call fcn.00521b70
add esp, 0xc
push 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xb3f8]
push ecx
call dword [sym.imp.GDI32.dll_SetTextColor]
push 1
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
call dword [sym.imp.GDI32.dll_SetBkMode]
push 7
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 4], eax
push 6
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3b8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xb3f8]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0xb4], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x500]
mov dword [ebp - 0xd8], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x5d8]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004aea30
add esp, 8
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x654], 0
je 0x50d902
fild dword [ebp - 0xd8]
mov edx, dword [ebp - 0x2c]
imul edx, edx, 0x70
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x39c4]
fmul dword [ecx + edx + 0x64]
call fcn.005ac350
mov esi, eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x510]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x500]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x564]
push ecx
call dword [sym.imp.KERNEL32.dll_MulDiv]
lea edx, [esi + eax*2]
mov dword [ebp - 0x7c], edx
jmp 0x50d951
fild dword [ebp - 0xd8]
mov eax, dword [ebp - 0x2c]
imul eax, eax, 0x70
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x39c4]
mov ecx, dword [ebp - 0x2c]
imul ecx, ecx, 0x98
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x39c0]
fld dword [edx + eax + 0x64]
fsub dword [esi + ecx + 4]
mov edx, dword [ebp - 0x2c]
imul edx, edx, 0x98
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x39c0]
fsub dword [ecx + edx + 8]
fmulp st(1)
call fcn.005ac350
mov dword [ebp - 0x7c], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x4bc]
mov ecx, dword [ebp + 8]
add eax, dword [ecx + 0x4b4]
cmp dword [ebp - 0x7c], eax
jge 0x50d97d
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x4bc]
mov ecx, dword [ebp + 8]
add eax, dword [ecx + 0x4b4]
mov dword [ebp - 0x7c], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x5d8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004f5d80
add esp, 8
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jge 0x50d9a3
mov dword [ebp - 0x70], 0
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x70]
mov dword [edx + 0x708], eax
mov ecx, dword [ebp - 0x70]
imul ecx, ecx, 0xb4
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x704]
mov edx, dword [ebp - 0x70]
imul edx, edx, 0xb4
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x704]
mov eax, dword [eax + ecx + 0x14]
add eax, dword [esi + edx + 0x7c]
mov dword [ebp - 0x90], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x434]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x430]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x42c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x428]
push edx
call dword [sym.imp.GDI32.dll_CreateRectRgn]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3a0]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x24]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov eax, dword [ecx + 0x428]
sub eax, dword [edx + 0x418]
mov ecx, dword [ebp + 8]
add eax, dword [ecx + 0x4bc]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x4bc]
mov ecx, dword [ebp + 8]
add eax, dword [ecx + 0x4b4]
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 8]
mov edx, dword [edx + 0x430]
sub edx, dword [ecx + 0x420]
add eax, edx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 0x434]
sub edx, dword [ecx + 0x42c]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x4c0]
mov edx, dword [ebp + 8]
add ecx, dword [edx + 0x42c]
mov eax, dword [ebp + 8]
sub ecx, dword [eax + 0x41c]
mov dword [ebp - 0xe8], ecx
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x14]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x18]
add edx, 1
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3a0]
push ecx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebp - 0x5c], eax
mov edx, dword [ebp - 0x5c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xb3f8]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0xbc], eax
push 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x41c]
push eax
push 0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
push 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x41c]
push ecx
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xb3f8]
push ecx
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
mov edx, dword [ebp + 8]
cmp dword [edx + 0x4b08], 0xffffff
jne 0x50db4f
push 0
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 0x60], eax
jmp 0x50db62
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x4b08]
push ecx
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [ebp - 0x60], eax
mov edx, dword [ebp - 0x60]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xb3f8]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x78], eax
push 8
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0xb8], eax
mov ecx, dword [ebp - 0xc]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x10]
add edx, 2
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x4b38], 0
je 0x50dbdb
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x4b38]
mov dword [ebp - 0x108], eax
jmp 0x50dbe9
push 1
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x4b08], 0xffffff
je 0x50dc19
mov edx, dword [ebp - 0x60]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x4f4]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0xe0], eax
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x8c], ecx
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x88], edx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x88]
add edx, dword [ebp - 0xe0]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x80]
add eax, 1
push eax
mov ecx, dword [ebp - 0x84]
add ecx, 2
push ecx
mov edx, dword [ebp - 0x88]
push edx
mov eax, dword [ebp - 0x8c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
call dword [sym.imp.GDI32.dll_Rectangle]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x88], ecx
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x84], edx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x80]
sub ecx, dword [ebp - 0xe0]
mov dword [ebp - 0x88], ecx
mov edx, dword [ebp - 0x80]
add edx, 1
push edx
mov eax, dword [ebp - 0x84]
add eax, 2
push eax
mov ecx, dword [ebp - 0x88]
push ecx
mov edx, dword [ebp - 0x8c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xb3f8]
push ecx
call dword [sym.imp.GDI32.dll_Rectangle]
push 2
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x8c], ecx
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x88], edx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x88]
add edx, dword [ebp - 0xe0]
mov dword [ebp - 0x88], edx
mov eax, dword [ebp - 0x80]
sub eax, dword [ebp - 0xe0]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x84], ecx
mov edx, dword [ebp - 0x80]
add edx, 1
push edx
mov eax, dword [ebp - 0x84]
add eax, 2
push eax
mov ecx, dword [ebp - 0x88]
push ecx
mov edx, dword [ebp - 0x8c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xb3f8]
push ecx
call dword [sym.imp.GDI32.dll_Rectangle]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x84], edx
push 0xffffffffffffffff
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x5d8]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004f8120
add esp, 0xc
add eax, dword [ebp - 0x90]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x80]
add eax, 1
push eax
mov ecx, dword [ebp - 0x84]
add ecx, 2
push ecx
mov edx, dword [ebp - 0x88]
push edx
mov eax, dword [ebp - 0x8c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
call dword [sym.imp.GDI32.dll_Rectangle]
mov eax, dword [ebp - 0xb8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x78]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
push 0
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00505930
add esp, 0x20
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x5d8]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x138]
mov eax, dword [edx + eax*4]
mov ecx, dword [eax + 0x3c]
and ecx, 0x100
mov edx, dword [ebp + 8]
mov dword [edx + 0x6a8], ecx
mov eax, dword [ebp + 8]
mov dword [eax + 0x6f4], 0
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x14]
add edx, dword [ecx + 0x4f4]
mov dword [ebp - 0x6c], edx
mov eax, dword [ebp + 8]
cmp dword [eax + 0x9500], 0
je 0x50dec3
mov ecx, dword [ebp + 8]
push ecx
call fcn.00521a40
add esp, 4
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x50dec3
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0xc0], edx
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov dword [eax + edx], 1
fild dword [ebp - 0x90]
fsub qword [0x5ea080]
fstp dword [ebp - 0x1c]
fild dword [ebp - 0xd8]
fstp dword [ebp - 0x64]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xa15c]
and ecx, 2
je 0x50defb
fld dword [ebp - 0x64]
fmul qword [0x5ea068]
fdiv qword [0x5ea060]
fstp dword [ebp - 0x64]
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0xe0]
mov dword [ebp - 0x20], edx
mov dword [ebp - 8], 0
fild dword [ebp - 0x7c]
fld dword [ebp - 0x1c]
fcompp
fnstsw ax
test ah, 0x41
jp 0x50dfe4
push 0xa
fld dword [ebp - 0x1c]
fmul qword [0x5ea068]
call fcn.005ac350
push eax
call fcn.004e08e0
add esp, 8
cdq
mov ecx, 0xa
idiv ecx
mov dword [ebp - 0x68], eax
mov edx, dword [ebp - 8]
push edx
push 0x5e90cc
lea eax, [ebp - 0xd4]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x74], ecx
mov edx, dword [ebp + 8]
cmp dword [edx + 0x6a8], 0
je 0x50df8e
push 0
mov eax, dword [ebp - 0x70]
push eax
push 0
mov ecx, dword [ebp - 0x74]
sub ecx, 5
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004fcd30
add esp, 0x14
mov dword [ebp - 0x74], eax
fild dword [ebp - 0x90]
fld dword [ebp - 0x1c]
fcompp
fnstsw ax
test ah, 0x41
jne 0x50dfcd
lea eax, [ebp - 0xd4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea ecx, [ebp - 0xd4]
push ecx
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x74]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
call dword [sym.imp.GDI32.dll_TextOutA]
fld dword [ebp - 0x1c]
fadd dword [ebp - 0x64]
fstp dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
jmp 0x50df0e
fild dword [ebp - 0xd8]
fdiv qword [0x5e3050]
fstp dword [ebp - 0x64]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xa15c]
and edx, 2
je 0x50e013
fld dword [ebp - 0x64]
fmul qword [0x5ea068]
fdiv qword [0x5ea060]
fstp dword [ebp - 0x64]
fild dword [ebp - 0x90]
fadd dword [ebp - 0x64]
fstp dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x4f4]
cdq
mov ecx, 3
idiv ecx
mov edx, dword [ebp - 0x6c]
sub edx, eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 8], 0
fild dword [ebp - 0x7c]
fld dword [ebp - 0x1c]
fcompp
fnstsw ax
test ah, 5
jp 0x50e0d5
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
and ecx, 0x80000001
jns 0x50e06b
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x50e0c7
push 0xa
fld dword [ebp - 0x1c]
fmul qword [0x5ea068]
call fcn.005ac350
push eax
call fcn.004e08e0
add esp, 8
cdq
mov ecx, 0xa
idiv ecx
mov dword [ebp - 0x68], eax
mov edx, dword [ebp - 0x58]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x20]
add ecx, 6
push ecx
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x20]
add eax, 2
push eax
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00505930
add esp, 0x20
fld dword [ebp - 0x1c]
fadd dword [ebp - 0x64]
fstp dword [ebp - 0x1c]
jmp 0x50e03f
fild dword [ebp - 0xd8]
fdiv qword [0x5e8b00]
fstp dword [ebp - 0x64]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xa15c]
and eax, 2
je 0x50e104
fld dword [ebp - 0x64]
fmul qword [0x5e8d68]
fdiv qword [0x5ea060]
fstp dword [ebp - 0x64]
fild dword [ebp - 0x90]
fadd dword [ebp - 0x64]
fstp dword [ebp - 0x1c]
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x4f4]
cdq
mov ecx, 3
idiv ecx
mov edx, dword [ebp - 0x6c]
sub edx, eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 8], 0
fild dword [ebp - 0x7c]
fld dword [ebp - 0x1c]
fcompp
fnstsw ax
test ah, 5
jp 0x50e1c6
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
and ecx, 0x80000003
jns 0x50e15c
dec ecx
or ecx, 0xfffffffc
inc ecx
test ecx, ecx
je 0x50e1b8
push 0xa
fld dword [ebp - 0x1c]
fmul qword [0x5ea068]
call fcn.005ac350
push eax
call fcn.004e08e0
add esp, 8
cdq
mov ecx, 0xa
idiv ecx
mov dword [ebp - 0x68], eax
mov edx, dword [ebp - 0x58]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x20]
add ecx, 5
push ecx
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x20]
add eax, 3
push eax
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00505930
add esp, 0x20
fld dword [ebp - 0x1c]
fadd dword [ebp - 0x64]
fstp dword [ebp - 0x1c]
jmp 0x50e130
mov edx, dword [ebp + 8]
cmp dword [edx + 0x39b0], 0
je 0x50e1f9
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x39a4]
imul ecx, ecx, 0x10c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3894]
mov ecx, dword [eax + ecx + 0x98]
mov dword [ebp - 0x94], ecx
jmp 0x50e218
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2b44]
imul eax, eax, 0x58
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2b38]
mov eax, dword [edx + eax + 0x1c]
mov dword [ebp - 0x94], eax
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 0xb8
mov edx, dword [ebp + 8]
add ecx, dword [edx + 0x387c]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x28], 0
jmp 0x50e245
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp - 0x28]
cmp edx, dword [ecx]
jge 0x50e6b8
mov eax, dword [ebp - 0xe0]
sub eax, 2
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0xc4]
mov eax, dword [edx + ecx*4 + 4]
mov dword [ebp - 0xec], eax
push 0x5a0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x500]
push edx
mov eax, dword [ebp - 0xec]
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp - 0xec], eax
mov ecx, dword [ebp - 0xec]
add ecx, dword [ebp - 0x90]
mov dword [ebp - 0xec], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0xe0]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp - 0xec]
push eax
mov ecx, dword [ebp - 0x6c]
add ecx, 1
push ecx
mov edx, dword [ebp - 0xec]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xb3f8]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00505930
add esp, 0x20
mov eax, dword [ebp + 8]
cmp dword [eax + 0x39a4], 0
jl 0x50e30b
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x39b0], 0
je 0x50e54d
mov edx, dword [ebp + 8]
push edx
call fcn.00521a40
add esp, 4
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x50e54d
mov eax, dword [ebp + 8]
cmp dword [eax + 0x6a8], 0
je 0x50e359
push 0
mov ecx, dword [ebp - 0x70]
push ecx
push 0
mov edx, dword [ebp - 0xec]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004fcd30
add esp, 0x14
mov dword [ebp - 0x10c], eax
jmp 0x50e365
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x10c], ecx
mov edx, dword [ebp - 0x10c]
mov dword [ebp - 0xf4], edx
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov dword [eax + edx], 1
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov dword [edx + eax + 8], 8
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov ecx, dword [ebp - 0x28]
mov dword [edx + eax + 0xc], ecx
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov dword [ecx + edx + 0xdc], 1
push 0x5a0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x500]
push eax
push 0x3c
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, dword [ebp - 0xf4]
sub ecx, eax
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x585c]
mov dword [eax + edx + 0x5c], ecx
mov ecx, dword [ebp - 0xe8]
add ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x585c]
mov dword [eax + edx + 0x60], ecx
push 0x5a0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x500]
push edx
push 0x3c
call dword [sym.imp.KERNEL32.dll_MulDiv]
add eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x585c]
mov dword [edx + ecx + 0x64], eax
mov eax, dword [ebp - 0xe8]
add eax, dword [ebp - 0x6c]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x4f4]
lea eax, [eax + edx + 1]
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x585c]
mov dword [edx + ecx + 0x68], eax
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov dword [edx + eax + 0x48], 2
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov ecx, dword [ebp - 0xf4]
mov dword [edx + eax + 0x18], ecx
mov edx, dword [ebp - 0xe8]
add edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x585c]
mov dword [ecx + eax + 0x1c], edx
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov eax, dword [ebp - 0xf4]
mov dword [ecx + edx + 0x20], eax
mov ecx, dword [ebp - 0xe8]
add ecx, dword [ebp - 0x6c]
mov edx, dword [ebp + 8]
add ecx, dword [edx + 0x4f4]
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x585c]
mov dword [edx + eax + 0x24], ecx
mov eax, dword [ebp - 0xec]
add eax, 1
mov dword [ebp - 0xec], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0xc4]
cmp dword [edx + ecx*4 + 0x54], 0
jne 0x50e5b2
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xec]
lea edx, [ecx + eax + 1]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0xec]
sub ecx, 1
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00505930
add esp, 0x20
jmp 0x50e644
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xc4]
cmp dword [eax + edx*4 + 0x54], 1
jne 0x50e601
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0xec]
sub ecx, dword [ebp - 0xf0]
sub ecx, 1
push ecx
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp - 0xec]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00505930
add esp, 0x20
jmp 0x50e644
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0xec]
add ecx, dword [ebp - 0xf0]
push ecx
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp - 0xec]
sub eax, dword [ebp - 0xf0]
add eax, 1
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00505930
add esp, 0x20
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0xc4]
cmp dword [edx + ecx*4 + 0x54], 3
jne 0x50e6b3
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x20]
cdq
sub eax, edx
sar eax, 1
add eax, 1
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp - 0xf0]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp - 0xec]
lea edx, [ecx + eax + 2]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0xf0]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp - 0xec]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00505930
add esp, 0x20
jmp 0x50e23c
mov ecx, dword [ebp - 0xc4]
cmp dword [ecx], 0
jne 0x50e6cf
mov dword [ebp - 0xec], 0
jmp 0x50e6e6
mov edx, dword [ebp - 0xc4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + eax*4]
mov dword [ebp - 0xec], edx
mov eax, dword [ebp - 0xec]
add eax, 0x3c
mov ecx, dword [ebp + 8]
cdq
idiv dword [ecx + 0x388c]
add eax, 1
mov edx, dword [ebp + 8]
imul eax, dword [edx + 0x388c]
mov dword [ebp - 0xec], eax
mov eax, 1
test eax, eax
je 0x50e7c1
push 0x5a0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x500]
push edx
mov eax, dword [ebp - 0xec]
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp - 0xdc], eax
mov ecx, dword [ebp - 0xdc]
add ecx, dword [ebp - 0x90]
mov dword [ebp - 0xdc], ecx
mov edx, dword [ebp - 0xdc]
cmp edx, dword [ebp - 0x7c]
jl 0x50e75a
jmp 0x50e7c1
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0xe0]
mov dword [ebp - 0x20], eax
push 0
push 6
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
mov ecx, dword [ebp - 0x20]
add ecx, 5
push ecx
mov edx, dword [ebp - 0xdc]
push edx
mov eax, dword [ebp - 0x20]
add eax, 2
push eax
mov ecx, dword [ebp - 0xdc]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00505930
add esp, 0x20
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0xec]
add eax, dword [edx + 0x388c]
mov dword [ebp - 0xec], eax
jns 0x50e7bc
jmp 0x50e7c1
jmp 0x50e70c
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x40], 0
jne 0x50f117
mov edx, dword [ebp + 8]
cmp dword [edx + 0x999c], 0
je 0x50e7e7
mov eax, dword [ebp + 8]
cmp dword [eax + 0x20], 0
je 0x50f117
push 1
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp + 8]
cmp dword [eax + 0x39b0], 0
je 0x50e846
push 0x5a0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x500]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x39a4]
imul ecx, ecx, 0x10c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3894]
mov ecx, dword [eax + ecx + 0x78]
push ecx
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp - 0x54], eax
jmp 0x50e861
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2b44]
imul eax, eax, 0x58
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2b38]
mov eax, dword [eax + edx]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x54]
add ecx, dword [ebp - 0x90]
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x6c]
add edx, dword [ecx + 0x4f4]
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0xe0]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x6c]
add ecx, dword [ebp - 0xe0]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp + 8]
cmp dword [edx + 0x6a8], 0
je 0x50e8e9
mov dword [ebp - 0x28], 0
jmp 0x50e8be
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x50e8e9
push 0
mov ecx, dword [ebp - 0x70]
push ecx
push 0
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp + edx*8 - 0x54]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004fcd30
add esp, 0x14
mov edx, dword [ebp - 0x28]
mov dword [ebp + edx*8 - 0x54], eax
jmp 0x50e8b5
push 3
lea eax, [ebp - 0x54]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
call dword [sym.imp.GDI32.dll_Polygon]
mov eax, dword [ebp + 8]
cmp dword [eax + 0x39a4], 0
jl 0x50e91b
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x39b0], 0
je 0x50eadd
mov edx, dword [ebp + 8]
push edx
call fcn.00521a40
add esp, 4
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x50eadd
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov dword [eax + edx], 1
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov dword [edx + eax + 8], 5
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x2b44]
mov dword [edx + eax + 0xc], ecx
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov dword [ecx + edx + 0xdc], 1
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov eax, dword [ebp - 0x54]
mov dword [ecx + edx + 0x5c], eax
mov ecx, dword [ebp - 0xe8]
add ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x585c]
mov dword [eax + edx + 0x60], ecx
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x585c]
mov edx, dword [ebp - 0x44]
mov dword [eax + ecx + 0x64], edx
mov eax, dword [ebp + 8]
cmp dword [eax + 0x6a8], 0
je 0x50ea57
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x585c]
lea ecx, [eax + ecx + 0x64]
push ecx
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
lea edx, [ecx + edx + 0x5c]
push edx
call fcn.004e0910
add esp, 8
mov eax, dword [ebp - 0xe8]
add eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x585c]
mov dword [edx + ecx + 0x68], eax
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov dword [edx + eax + 0x48], 3
mov dword [ebp - 0x28], 0
jmp 0x50eaa8
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x50eadd
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp + ecx*8 - 0x54]
mov eax, dword [ebp + ecx*8 - 0x50]
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x585c]
add esi, ecx
mov ecx, dword [ebp - 0x28]
mov dword [esi + ecx*8 + 0x18], edx
mov dword [esi + ecx*8 + 0x1c], eax
jmp 0x50ea9f
mov edx, dword [ebp + 8]
cmp dword [edx + 0x39b0], 0
je 0x50eb3f
push 0x5a0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x500]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x39a4]
imul eax, eax, 0x10c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3894]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x39a4]
imul ecx, ecx, 0x10c
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x3894]
mov edx, dword [edx + eax + 0x78]
add edx, dword [esi + ecx + 0x80]
push edx
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp - 0x54], eax
jmp 0x50eb73
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2b44]
imul ecx, ecx, 0x58
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2b38]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x2b44]
imul edx, edx, 0x58
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x2b38]
mov eax, dword [eax + ecx]
add eax, dword [esi + edx + 8]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x54]
add ecx, dword [ebp - 0x90]
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x6c]
sub eax, dword [edx + 0x4f4]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0xe0]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x6c]
sub ecx, dword [ebp - 0xe0]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp + 8]
cmp dword [edx + 0x6a8], 0
je 0x50ebfb
mov dword [ebp - 0x28], 0
jmp 0x50ebd0
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x50ebfb
push 0
mov ecx, dword [ebp - 0x70]
push ecx
push 0
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp + edx*8 - 0x54]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004fcd30
add esp, 0x14
mov edx, dword [ebp - 0x28]
mov dword [ebp + edx*8 - 0x54], eax
jmp 0x50ebc7
push 3
lea eax, [ebp - 0x54]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
call dword [sym.imp.GDI32.dll_Polygon]
mov eax, dword [ebp + 8]
cmp dword [eax + 0x39a4], 0
jl 0x50ec2d
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x39b0], 0
je 0x50edef
mov edx, dword [ebp + 8]
push edx
call fcn.00521a40
add esp, 4
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x50edef
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov dword [eax + edx], 1
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov dword [edx + eax + 8], 7
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x2b44]
mov dword [edx + eax + 0xc], ecx
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov dword [ecx + edx + 0xdc], 1
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov eax, dword [ebp - 0x54]
mov dword [ecx + edx + 0x5c], eax
mov ecx, dword [ebp - 0xe8]
add ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x585c]
mov dword [eax + edx + 0x60], ecx
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x585c]
mov edx, dword [ebp - 0x44]
mov dword [eax + ecx + 0x64], edx
mov eax, dword [ebp + 8]
cmp dword [eax + 0x6a8], 0
je 0x50ed69
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x585c]
lea ecx, [eax + ecx + 0x64]
push ecx
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
lea edx, [ecx + edx + 0x5c]
push edx
call fcn.004e0910
add esp, 8
mov eax, dword [ebp - 0xe8]
add eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x585c]
mov dword [edx + ecx + 0x68], eax
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov dword [edx + eax + 0x48], 3
mov dword [ebp - 0x28], 0
jmp 0x50edba
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x50edef
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp + ecx*8 - 0x54]
mov eax, dword [ebp + ecx*8 - 0x50]
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x585c]
add esi, ecx
mov ecx, dword [ebp - 0x28]
mov dword [esi + ecx*8 + 0x18], edx
mov dword [esi + ecx*8 + 0x1c], eax
jmp 0x50edb1
mov edx, dword [ebp + 8]
cmp dword [edx + 0x39b0], 0
je 0x50ee4e
push 0xffffffffffffffff
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x5d8]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004f8120
add esp, 0xc
mov esi, eax
push 0x5a0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x500]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x39a4]
imul eax, eax, 0x10c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3894]
mov eax, dword [edx + eax + 0x7c]
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
sub esi, eax
mov dword [ebp - 0x54], esi
jmp 0x50ee82
push 0xffffffffffffffff
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x5d8]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004f8120
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2b44]
imul edx, edx, 0x58
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x2b38]
sub eax, dword [ecx + edx + 4]
mov dword [ebp - 0x54], eax
mov edx, dword [ebp - 0x54]
add edx, dword [ebp - 0x90]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x6c]
add eax, dword [edx + 0x4f4]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x54]
sub ecx, dword [ebp - 0xe0]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x6c]
add edx, dword [ebp - 0xe0]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp + 8]
cmp dword [eax + 0x6a8], 0
je 0x50ef0a
mov dword [ebp - 0x28], 0
jmp 0x50eedf
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 3
jge 0x50ef0a
push 0
mov edx, dword [ebp - 0x70]
push edx
push 0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + eax*8 - 0x54]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004fcd30
add esp, 0x14
mov ecx, dword [ebp - 0x28]
mov dword [ebp + ecx*8 - 0x54], eax
jmp 0x50eed6
push 3
lea edx, [ebp - 0x54]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xb3f8]
push ecx
call dword [sym.imp.GDI32.dll_Polygon]
mov edx, dword [ebp + 8]
cmp dword [edx + 0x39a4], 0
jl 0x50ef3c
mov eax, dword [ebp + 8]
cmp dword [eax + 0x39b0], 0
je 0x50f0fe
mov ecx, dword [ebp + 8]
push ecx
call fcn.00521a40
add esp, 4
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x50f0fe
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov dword [edx + ecx], 1
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov dword [ecx + edx + 8], 6
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x2b44]
mov dword [ecx + edx + 0xc], eax
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x585c]
mov dword [eax + ecx + 0xdc], 1
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x585c]
mov edx, dword [ebp - 0x44]
mov dword [eax + ecx + 0x5c], edx
mov eax, dword [ebp - 0xe8]
add eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x585c]
mov dword [edx + ecx + 0x60], eax
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov ecx, dword [ebp - 0x54]
mov dword [edx + eax + 0x64], ecx
mov edx, dword [ebp + 8]
cmp dword [edx + 0x6a8], 0
je 0x50f078
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
lea eax, [edx + eax + 0x64]
push eax
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x585c]
lea ecx, [eax + ecx + 0x5c]
push ecx
call fcn.004e0910
add esp, 8
mov edx, dword [ebp - 0xe8]
add edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x585c]
mov dword [ecx + eax + 0x68], edx
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov dword [ecx + edx + 0x48], 3
mov dword [ebp - 0x28], 0
jmp 0x50f0c9
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 3
jge 0x50f0fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + eax*8 - 0x54]
mov edx, dword [ebp + eax*8 - 0x50]
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x585c]
add esi, eax
mov eax, dword [ebp - 0x28]
mov dword [esi + eax*8 + 0x18], ecx
mov dword [esi + eax*8 + 0x1c], edx
jmp 0x50f0c0
mov ecx, dword [ebp - 0x78]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
jmp 0x50f9f3
mov eax, dword [ebp - 0xe0]
cdq
sub eax, edx
sar eax, 1
add eax, 1
mov dword [ebp - 0xf8], eax
push 1
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp + 8]
cmp dword [eax + 0x39b0], 0
je 0x50f18a
push 0x5a0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x500]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x39a4]
imul ecx, ecx, 0x10c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3894]
mov ecx, dword [eax + ecx + 0x78]
push ecx
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp - 0x54], eax
jmp 0x50f1a5
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2b44]
imul eax, eax, 0x58
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2b38]
mov eax, dword [eax + edx]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x54]
add ecx, dword [ebp - 0x90]
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0xf8]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x50]
add ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0xe0]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x54]
add ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp + 8]
cmp dword [edx + 0x6a8], 0
je 0x50f248
mov dword [ebp - 0x28], 0
jmp 0x50f21d
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 5
jge 0x50f248
push 0
mov ecx, dword [ebp - 0x70]
push ecx
push 0
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp + edx*8 - 0x54]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004fcd30
add esp, 0x14
mov edx, dword [ebp - 0x28]
mov dword [ebp + edx*8 - 0x54], eax
jmp 0x50f214
push 5
lea eax, [ebp - 0x54]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
call dword [sym.imp.GDI32.dll_Polygon]
mov eax, dword [ebp + 8]
cmp dword [eax + 0x39a4], 0
jl 0x50f27a
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x39b0], 0
je 0x50f400
mov edx, dword [ebp + 8]
push edx
call fcn.00521a40
add esp, 4
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x50f400
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov dword [eax + edx], 1
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov dword [edx + eax + 8], 5
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x2b44]
mov dword [edx + eax + 0xc], ecx
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov dword [ecx + edx + 0xdc], 1
mov edx, dword [ebp - 0x54]
sub edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x585c]
mov dword [ecx + eax + 0x5c], edx
mov edx, dword [ebp - 0xe8]
add edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x585c]
mov dword [ecx + eax + 0x60], edx
mov edx, dword [ebp - 0x54]
add edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x585c]
mov dword [ecx + eax + 0x64], edx
mov edx, dword [ebp - 0xe8]
add edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x585c]
mov dword [ecx + eax + 0x68], edx
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov dword [ecx + edx + 0x48], 5
mov dword [ebp - 0x28], 0
jmp 0x50f3cb
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 5
jge 0x50f400
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + eax*8 - 0x54]
mov edx, dword [ebp + eax*8 - 0x50]
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x585c]
add esi, eax
mov eax, dword [ebp - 0x28]
mov dword [esi + eax*8 + 0x18], ecx
mov dword [esi + eax*8 + 0x1c], edx
jmp 0x50f3c2
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x39b0], 0
je 0x50f462
push 0x5a0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x500]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x39a4]
imul edx, edx, 0x10c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3894]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x39a4]
imul eax, eax, 0x10c
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x3894]
mov ecx, dword [ecx + edx + 0x78]
add ecx, dword [esi + eax + 0x80]
push ecx
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp - 0x54], eax
jmp 0x50f496
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x2b44]
imul eax, eax, 0x58
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2b38]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x2b44]
imul ecx, ecx, 0x58
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x2b38]
mov edx, dword [edx + eax]
add edx, dword [esi + ecx + 8]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x90]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x54]
sub edx, dword [ebp - 0xf8]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0xf8]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0xe0]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0xf8]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x6a8], 0
je 0x50f539
mov dword [ebp - 0x28], 0
jmp 0x50f50e
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 5
jge 0x50f539
push 0
mov eax, dword [ebp - 0x70]
push eax
push 0
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp + ecx*8 - 0x54]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004fcd30
add esp, 0x14
mov ecx, dword [ebp - 0x28]
mov dword [ebp + ecx*8 - 0x54], eax
jmp 0x50f505
push 5
lea edx, [ebp - 0x54]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xb3f8]
push ecx
call dword [sym.imp.GDI32.dll_Polygon]
mov edx, dword [ebp + 8]
cmp dword [edx + 0x39a4], 0
jl 0x50f56b
mov eax, dword [ebp + 8]
cmp dword [eax + 0x39b0], 0
je 0x50f6f1
mov ecx, dword [ebp + 8]
push ecx
call fcn.00521a40
add esp, 4
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x50f6f1
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov dword [edx + ecx], 1
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov dword [ecx + edx + 8], 7
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x2b44]
mov dword [ecx + edx + 0xc], eax
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x585c]
mov dword [eax + ecx + 0xdc], 1
mov ecx, dword [ebp - 0x54]
sub ecx, dword [ebp - 0xf8]
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x585c]
mov dword [eax + edx + 0x5c], ecx
mov ecx, dword [ebp - 0xe8]
add ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x585c]
mov dword [eax + edx + 0x60], ecx
mov ecx, dword [ebp - 0x54]
add ecx, dword [ebp - 0xf8]
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x585c]
mov dword [eax + edx + 0x64], ecx
mov ecx, dword [ebp - 0xe8]
add ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x585c]
mov dword [eax + edx + 0x68], ecx
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x585c]
mov dword [eax + ecx + 0x48], 5
mov dword [ebp - 0x28], 0
jmp 0x50f6bc
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 5
jge 0x50f6f1
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp + edx*8 - 0x54]
mov ecx, dword [ebp + edx*8 - 0x50]
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x585c]
add esi, edx
mov edx, dword [ebp - 0x28]
mov dword [esi + edx*8 + 0x18], eax
mov dword [esi + edx*8 + 0x1c], ecx
jmp 0x50f6b3
mov eax, dword [ebp + 8]
cmp dword [eax + 0x39b0], 0
je 0x50f750
push 0xffffffffffffffff
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x5d8]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004f8120
add esp, 0xc
mov esi, eax
push 0x5a0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x500]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x39a4]
imul ecx, ecx, 0x10c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3894]
mov ecx, dword [eax + ecx + 0x7c]
push ecx
call dword [sym.imp.KERNEL32.dll_MulDiv]
sub esi, eax
mov dword [ebp - 0x54], esi
jmp 0x50f784
push 0xffffffffffffffff
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x5d8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004f8120
add esp, 0xc
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x2b44]
imul ecx, ecx, 0x58
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x2b38]
sub eax, dword [edx + ecx + 4]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x90]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x54]
sub edx, dword [ebp - 0xf8]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0xf8]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0xe0]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0xf8]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x6a8], 0
je 0x50f827
mov dword [ebp - 0x28], 0
jmp 0x50f7fc
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 5
jge 0x50f827
push 0
mov eax, dword [ebp - 0x70]
push eax
push 0
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp + ecx*8 - 0x54]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004fcd30
add esp, 0x14
mov ecx, dword [ebp - 0x28]
mov dword [ebp + ecx*8 - 0x54], eax
jmp 0x50f7f3
push 5
lea edx, [ebp - 0x54]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xb3f8]
push ecx
call dword [sym.imp.GDI32.dll_Polygon]
mov edx, dword [ebp + 8]
cmp dword [edx + 0x39a4], 0
jl 0x50f859
mov eax, dword [ebp + 8]
cmp dword [eax + 0x39b0], 0
je 0x50f9df
mov ecx, dword [ebp + 8]
push ecx
call fcn.00521a40
add esp, 4
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x50f9df
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov dword [edx + ecx], 1
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov dword [ecx + edx + 8], 6
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x585c]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x2b44]
mov dword [ecx + edx + 0xc], eax
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x585c]
mov dword [eax + ecx + 0xdc], 1
mov ecx, dword [ebp - 0x54]
sub ecx, dword [ebp - 0xf8]
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x585c]
mov dword [eax + edx + 0x5c], ecx
mov ecx, dword [ebp - 0xe8]
add ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x585c]
mov dword [eax + edx + 0x60], ecx
mov ecx, dword [ebp - 0x54]
add ecx, dword [ebp - 0xf8]
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x585c]
mov dword [eax + edx + 0x64], ecx
mov ecx, dword [ebp - 0xe8]
add ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x585c]
mov dword [eax + edx + 0x68], ecx
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x585c]
mov dword [eax + ecx + 0x48], 5
mov dword [ebp - 0x28], 0
jmp 0x50f9aa
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 5
jge 0x50f9df
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp + edx*8 - 0x54]
mov ecx, dword [ebp + edx*8 - 0x50]
mov edx, dword [ebp - 0xe4]
imul edx, edx, 0xf0
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x585c]
add esi, edx
mov edx, dword [ebp - 0x28]
mov dword [esi + edx*8 + 0x18], eax
mov dword [esi + edx*8 + 0x1c], ecx
jmp 0x50f9a1
mov eax, dword [ebp - 0x78]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp + 8]
cmp dword [eax + 0x9500], 0
je 0x510056
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x4b38], 0
je 0x50fa20
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x4b38]
mov dword [ebp - 0x110], eax
jmp 0x50fa2e
push 1
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 0x110], eax
mov ecx, dword [ebp - 0x110]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
push 8
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x88], ecx
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x84], edx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x88]
add ecx, 1
mov dword [ebp - 0x88], ecx
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov ecx, dword [edx + 0x418]
sub ecx, dword [eax + 0x438]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x4bc]
sub eax, ecx
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov eax, dword [ecx + 0x440]
sub eax, dword [edx + 0x438]
add eax, dword [ebp - 0x8c]
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x80]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x84]
add edx, 2
push edx
mov eax, dword [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x8c]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
mov ecx, dword [ebp - 0xb8]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [ebp - 0xe0]
mov dword [ebp - 0x8c], ecx
mov edx, dword [ebp - 0x84]
sub edx, dword [ebp - 0xe0]
mov dword [ebp - 0x84], edx
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0xe0]
mov dword [ebp - 0x88], eax
mov ecx, dword [ebp - 0x80]
sub ecx, dword [ebp - 0xe0]
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x58]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x88]
push ecx
mov edx, dword [ebp - 0x84]
push edx
mov eax, dword [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x8c]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00505930
add esp, 0x20
mov edx, dword [ebp - 0x58]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x80]
push ecx
mov edx, dword [ebp - 0x84]
push edx
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x8c]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00505930
add esp, 0x20
mov edx, dword [ebp - 0x58]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x80]
push ecx
mov edx, dword [ebp - 0x8c]
push edx
mov eax, dword [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x8c]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00505930
add esp, 0x20
mov edx, dword [ebp - 0x58]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x80]
push ecx
mov edx, dword [ebp - 0x84]
push edx
mov eax, dword [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x84]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00505930
add esp, 0x20
push 0
push 2
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
mov dword [ebp - 0x104], eax
mov edx, dword [ebp + 8]
cmp dword [edx + 0x3890], 0
jne 0x50fcf4
mov eax, dword [ebp - 0x8c]
add eax, 5
mov dword [ebp - 0x100], eax
mov ecx, dword [ebp - 0x88]
add ecx, 0xa
mov dword [ebp - 0xfc], ecx
push 0
mov edx, dword [ebp - 0x104]
push edx
mov eax, dword [ebp - 0xfc]
push eax
mov ecx, dword [ebp - 0x100]
add ecx, 5
push ecx
mov edx, dword [ebp - 0xfc]
push edx
mov eax, dword [ebp - 0x100]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00505930
add esp, 0x20
push 0
mov ecx, dword [ebp - 0x104]
push ecx
mov edx, dword [ebp - 0xfc]
sub edx, 5
push edx
mov eax, dword [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0xfc]
push ecx
mov edx, dword [ebp - 0x100]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xb3f8]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00505930
add esp, 0x20
jmp 0x50ff49
mov eax, dword [ebp + 8]
cmp dword [eax + 0x3890], 1
jne 0x50fda3
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa
mov dword [ebp - 0x100], ecx
mov edx, dword [ebp - 0x88]
add edx, 0xa
mov dword [ebp - 0xfc], edx
push 0
mov eax, dword [ebp - 0x104]
push eax
mov ecx, dword [ebp - 0xfc]
push ecx
mov edx, dword [ebp - 0x100]
sub edx, 5
push edx
mov eax, dword [ebp - 0xfc]
push eax
mov ecx, dword [ebp - 0x100]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00505930
add esp, 0x20
push 0
mov edx, dword [ebp - 0x104]
push edx
mov eax, dword [ebp - 0xfc]
sub eax, 5
push eax
mov ecx, dword [ebp - 0x100]
push ecx
mov edx, dword [ebp - 0xfc]
push edx
mov eax, dword [ebp - 0x100]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00505930
add esp, 0x20
jmp 0x50ff49
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x3890], 2
jne 0x50fe55
mov edx, dword [ebp - 0x8c]
add edx, 8
mov dword [ebp - 0x100], edx
mov eax, dword [ebp - 0x88]
add eax, 0xa
mov dword [ebp - 0xfc], eax
push 0
mov ecx, dword [ebp - 0x104]
push ecx
mov edx, dword [ebp - 0xfc]
push edx
mov eax, dword [ebp - 0x100]
add eax, 3
push eax
mov ecx, dword [ebp - 0xfc]
push ecx
mov edx, dword [ebp - 0x100]
sub edx, 4
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xb3f8]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00505930
add esp, 0x20
push 0
mov eax, dword [ebp - 0x104]
push eax
mov ecx, dword [ebp - 0xfc]
sub ecx, 5
push ecx
mov edx, dword [ebp - 0x100]
push edx
mov eax, dword [ebp - 0xfc]
push eax
mov ecx, dword [ebp - 0x100]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00505930
add esp, 0x20
jmp 0x50ff49
mov edx, dword [ebp + 8]
cmp dword [edx + 0x3890], 3
jne 0x50ff49
mov eax, dword [ebp - 0x8c]
add eax, 8
mov dword [ebp - 0x100], eax
mov ecx, dword [ebp - 0x88]
add ecx, 0xa
mov dword [ebp - 0xfc], ecx
push 0
mov edx, dword [ebp - 0x104]
push edx
mov eax, dword [ebp - 0xfc]
push eax
mov ecx, dword [ebp - 0x100]
add ecx, 3
push ecx
mov edx, dword [ebp - 0xfc]
push edx
mov eax, dword [ebp - 0x100]
sub eax, 4
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00505930
add esp, 0x20
push 0
mov ecx, dword [ebp - 0x104]
push ecx
mov edx, dword [ebp - 0xfc]
sub edx, 5
push edx
mov eax, dword [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0xfc]
push ecx
mov edx, dword [ebp - 0x100]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xb3f8]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00505930
add esp, 0x20
push 0
mov eax, dword [ebp - 0x104]
push eax
mov ecx, dword [ebp - 0xfc]
sub ecx, 4
push ecx
mov edx, dword [ebp - 0x100]
add edx, 3
push edx
mov eax, dword [ebp - 0xfc]
sub eax, 3
push eax
mov ecx, dword [ebp - 0x100]
add ecx, 2
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00505930
add esp, 0x20
cmp dword [ebp - 0x104], 0
je 0x50ff5f
mov edx, dword [ebp - 0x104]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x510056
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x585c]
mov dword [ecx + eax], 1
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x585c]
mov dword [eax + ecx + 8], 9
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x585c]
mov dword [eax + ecx + 0xdc], 1
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x585c]
mov edx, dword [ebp - 0x8c]
mov dword [eax + ecx + 0x5c], edx
mov eax, dword [ebp - 0xe8]
add eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0xe4]
imul ecx, ecx, 0xf0
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x585c]
mov dword [edx + ecx + 0x60], eax
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x585c]
mov ecx, dword [ebp - 0x84]
mov dword [edx + eax + 0x64], ecx
mov edx, dword [ebp - 0xe8]
add edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0xe4]
imul eax, eax, 0xf0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x585c]
mov dword [ecx + eax + 0x68], edx
push 2
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
call dword [sym.imp.GDI32.dll_SetBkMode]
mov ecx, dword [ebp - 0xb4]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebp - 0xb8]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebp - 0x78]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
push 0xcc0020
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xb3f8]
push ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x14]
add edx, 1
push edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x18]
add eax, 1
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x4c0]
add edx, dword [ebp - 0x14]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 0x41c]
sub eax, dword [ecx + 0x42c]
sub edx, eax
push edx
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3a0]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [ebp - 0xbc]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebp - 0x5c]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
push 0
push 0
push 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xb3f8]
push eax
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
push 0
push 0
push 0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xb3f8]
push edx
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
mov eax, dword [ebp + 8]
push eax
call fcn.004b1ba0
add esp, 4
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x6a8], 0
pop esi
mov ecx, dword [ebp - 0xc8]
xor ecx, ebp
call fcn.005aac48
mov esp, ebp
pop ebp
ret