Function at 0x4069c0
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push 0xffffffffffffffff
push 0x4470f8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
mov eax, dword [esp + 0x3c]
push ebx
mov ebx, ecx
push esi
cmp eax, 3
push edi
mov dword [esp + 0xc], ebx
ja case.default.0x4069ee
jmp dword [eax*4 + 0x406eac]
mov edi, dword [0x45c204]
mov ecx, dword [0x45c1d4]
mov eax, edi
mov edx, dword [0x45c1d8]
imul eax, dword [esp + 0x40]
imul edi, dword [esp + 0x3c]
lea esi, [eax + ecx + 7]
lea edi, [edi + edx + 7]
jmp 0x406aa0
mov edi, dword [0x45c204]
mov ecx, dword [0x45c1dc]
mov eax, edi
mov edx, dword [0x45c1e0]
imul eax, dword [esp + 0x40]
imul edi, dword [esp + 0x3c]
lea esi, [eax + ecx + 7]
lea edi, [edi + edx + 7]
jmp 0x406aa0
mov edi, dword [0x45c204]
mov ecx, dword [0x45c1e4]
mov eax, edi
mov edx, dword [0x45c1e8]
imul eax, dword [esp + 0x40]
imul edi, dword [esp + 0x3c]
lea esi, [eax + ecx + 7]
lea edi, [edi + edx + 7]
jmp 0x406aa0
mov edi, dword [0x45c204]
mov ecx, dword [0x45c1ec]
mov eax, edi
mov edx, dword [0x45c1f0]
imul eax, dword [esp + 0x40]
imul edi, dword [esp + 0x3c]
lea esi, [eax + ecx + 7]
lea edi, [edi + edx + 7]
jmp 0x406aa0
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x40]
push ebx
lea ecx, [esp + 0x1c]
call fcn.00433539
mov eax, dword [esp + 0x44]
mov dword [esp + 0x34], 0
test eax, eax
jne 0x406b08
mov ebx, dword [ebx + 0x6c8]
mov eax, dword [0x45c204]
test ebx, ebx
je 0x406acc
mov ebx, dword [ebx + 4]
push 0xcc0020
push edi
push esi
push ebx
push eax
push eax
mov eax, dword [esp + 0x34]
push edi
push esi
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
lea ecx, [esp + 0x18]
mov dword [esp + 0x34], 0xffffffff
call fcn.004335ab
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
add esp, 0x2c
ret 0x10
lea ecx, [ebx + 0x7b0]
push ebp
push ecx
lea ecx, [esp + 0x20]
call fcn.00432ee7
mov eax, dword [0x45c204]
mov edx, dword [esp + 0x20]
mov ebp, dword [sym.imp.GDI32.dll_Rectangle]
lea ecx, [eax + edi]
add eax, esi
push ecx
push eax
push edi
push esi
push edx
call ebp
mov eax, dword [esp + 0x48]
dec eax
cmp eax, 0xc
mov dword [esp + 0x44], eax
ja case.default.0x406b46
jmp dword [eax*4 + 0x406ebc]
lea ecx, [ebx + 0x7e0]
push ecx
lea ecx, [esp + 0x20]
call fcn.00432ee7
add ebx, 0x6d8
jmp 0x406c98
lea edx, [ebx + 0x7e8]
lea ecx, [esp + 0x1c]
push edx
call fcn.00432ee7
add ebx, 0x6e0
jmp 0x406c98
lea eax, [ebx + 0x7f0]
lea ecx, [esp + 0x1c]
push eax
call fcn.00432ee7
add ebx, 0x6e8
jmp 0x406c98
lea ecx, [ebx + 0x7f8]
push ecx
lea ecx, [esp + 0x20]
call fcn.00432ee7
add ebx, 0x6f0
jmp 0x406c98
lea edx, [ebx + 0x800]
lea ecx, [esp + 0x1c]
push edx
call fcn.00432ee7
add ebx, 0x6f8
jmp 0x406c98
lea eax, [ebx + 0x808]
lea ecx, [esp + 0x1c]
push eax
call fcn.00432ee7
add ebx, 0x700
jmp 0x406c98
lea ecx, [ebx + 0x810]
push ecx
lea ecx, [esp + 0x20]
call fcn.00432ee7
add ebx, 0x708
jmp 0x406c98
lea edx, [ebx + 0x818]
lea ecx, [esp + 0x1c]
push edx
call fcn.00432ee7
add ebx, 0x710
jmp 0x406c98
lea eax, [ebx + 0x820]
lea ecx, [esp + 0x1c]
push eax
call fcn.00432ee7
add ebx, 0x718
jmp 0x406c98
lea ecx, [ebx + 0x828]
push ecx
lea ecx, [esp + 0x20]
call fcn.00432ee7
add ebx, 0x720
jmp 0x406c98
lea edx, [ebx + 0x830]
lea ecx, [esp + 0x1c]
push edx
call fcn.00432ee7
add ebx, 0x740
jmp 0x406c98
lea eax, [ebx + 0x838]
lea ecx, [esp + 0x1c]
push eax
call fcn.00432ee7
add ebx, 0x730
jmp 0x406c98
lea ecx, [ebx + 0x840]
push ecx
lea ecx, [esp + 0x20]
call fcn.00432ee7
add ebx, 0x738
push ebx
lea ecx, [esp + 0x20]
call fcn.00432ee7
mov eax, dword [0x45c204]
lea edx, [edi + 1]
lea ecx, [eax + edi - 1]
lea eax, [eax + esi - 1]
push ecx
mov ecx, dword [esp + 0x24]
push eax
lea eax, [esi + 1]
push edx
push eax
push ecx
call ebp
lea ebx, [edi + 2]
lea ebp, [esi + 2]
push ebx
lea edx, [esp + 0x18]
push ebp
push edx
lea ecx, [esp + 0x28]
call fcn.004332bd
mov eax, dword [0x45c204]
lea ecx, [eax + edi - 3]
push ecx
push ebp
lea ecx, [esp + 0x24]
call fcn.00433309
push ebx
lea edx, [esp + 0x18]
push ebp
push edx
lea ecx, [esp + 0x28]
call fcn.004332bd
mov eax, dword [0x45c204]
push ebx
lea ecx, [eax + esi - 3]
push ecx
lea ecx, [esp + 0x24]
call fcn.00433309
mov eax, dword [esp + 0x44]
cmp eax, 0xc
ja case.default.0x406d1b
jmp dword [eax*4 + 0x406ef0]
mov edx, dword [esp + 0x10]
add edx, 0x728
jmp 0x406dc6
mov eax, dword [esp + 0x10]
add eax, 0x748
push eax
jmp 0x406dc7
mov ecx, dword [esp + 0x10]
add ecx, 0x750
push ecx
jmp 0x406dc7
mov edx, dword [esp + 0x10]
add edx, 0x758
jmp 0x406dc6
mov eax, dword [esp + 0x10]
add eax, 0x760
push eax
jmp 0x406dc7
mov ecx, dword [esp + 0x10]
add ecx, 0x768
push ecx
jmp 0x406dc7
mov edx, dword [esp + 0x10]
add edx, 0x770
jmp 0x406dc6
mov eax, dword [esp + 0x10]
add eax, 0x778
push eax
jmp 0x406dc7
mov ecx, dword [esp + 0x10]
add ecx, 0x780
push ecx
jmp 0x406dc7
mov edx, dword [esp + 0x10]
add edx, 0x788
jmp 0x406dc6
mov eax, dword [esp + 0x10]
add eax, 0x790
push eax
jmp 0x406dc7
mov ecx, dword [esp + 0x10]
add ecx, 0x798
push ecx
jmp 0x406dc7
mov edx, dword [esp + 0x10]
add edx, 0x7a0
push edx
lea ecx, [esp + 0x20]
call fcn.00432ee7
mov eax, dword [0x45c204]
lea ecx, [esp + 0x1c]
lea edi, [edi + eax - 1]
lea esi, [esi + eax - 1]
lea eax, [esp + 0x14]
lea ebx, [edi - 1]
lea ebp, [esi - 1]
push ebx
push ebp
push eax
call fcn.004332bd
mov eax, dword [0x45c204]
mov ecx, esi
sub ecx, eax
push ebx
add ecx, 2
push ecx
lea ecx, [esp + 0x24]
call fcn.00433309
push ebx
lea edx, [esp + 0x18]
push ebp
push edx
lea ecx, [esp + 0x28]
call fcn.004332bd
mov ebx, dword [0x45c204]
mov eax, edi
sub eax, ebx
lea ecx, [esp + 0x1c]
add eax, 2
push eax
push ebp
call fcn.00433309
lea ebx, [edi - 2]
lea ebp, [esi - 2]
push ebx
lea ecx, [esp + 0x18]
push ebp
push ecx
lea ecx, [esp + 0x28]
call fcn.004332bd
mov ecx, dword [0x45c204]
push ebx
sub esi, ecx
lea ecx, [esp + 0x20]
add esi, 3
push esi
call fcn.00433309
push ebx
lea edx, [esp + 0x18]
push ebp
push edx
lea ecx, [esp + 0x28]
call fcn.004332bd
mov esi, dword [0x45c204]
lea ecx, [esp + 0x1c]
sub edi, esi
add edi, 3
push edi
push ebp
call fcn.00433309
lea ecx, [esp + 0x1c]
mov dword [esp + 0x38], 0xffffffff
call fcn.004335ab
mov ecx, dword [esp + 0x30]
pop ebp
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x2c
ret 0x10