Function at 0x440225
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff58
push ebx
push esi
push edi
push 0x69
push dword [ebp + 8]
call sub.USER32.dll_GetDlgItem
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x440efd
push dword [ebp - 0x34]
call sub.USER32.dll_GetDC
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x440efd
lea eax, [ebp - 0x50]
push eax
push 0x69
push dword [ebp + 8]
call sub.USER32.dll_GetDlgItem
push eax
call sub.USER32.dll_GetClientRect
push dword [ebp - 0x2c]
call sub.GDI32.dll_CreateCompatibleDC
mov ebx, eax
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push dword [ebp - 0x2c]
call sub.GDI32.dll_CreateCompatibleBitmap
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x1c]
push ebx
call sub.GDI32.dll_SelectObject
mov dword [ebp - 0x20], eax
push 0x561c3d
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0x48
push 0x5a
push dword [ebp - 0x2c]
call sub.GDI32.dll_GetDeviceCaps
push eax
push 8
call sub.KERNEL32.dll_MulDiv
neg eax
push eax
call sub.GDI32.dll_CreateFontA
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push ebx
call sub.GDI32.dll_SelectObject
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0xa8]
push eax
push ebx
call sub.GDI32.dll_GetTextMetricsA
mov eax, dword [ebp - 0xa8]
mov edx, eax
add edx, 2
mov dword [ebp - 0xc], edx
mov edi, eax
add edi, 5
xor eax, eax
mov dword [ebp - 0x18], eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
lea edx, [ebp - 0x70]
push edx
call sub.USER32.dll_SetRect
mov ecx, dword [0x57f0e0]
push dword [ecx*4 + 0x57f878]
call sub.GDI32.dll_CreateSolidBrush
mov dword [ebp - 0x38], eax
push dword [ebp - 0x38]
lea eax, [ebp - 0x50]
push eax
push ebx
call sub.USER32.dll_FillRect
push dword [ebp - 0x38]
call sub.GDI32.dll_DeleteObject
inc dword [ebp - 0x50]
inc dword [ebp - 0x4c]
dec dword [ebp - 0x48]
dec dword [ebp - 0x44]
mov edx, dword [0x57f0e0]
push dword [edx*4 + 0x57f878]
push ebx
call sub.GDI32.dll_SetBkColor
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x50]
add ecx, 5
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 0x4c]
add eax, 3
mov dword [ebp - 8], eax
mov esi, 1
mov dword [ebp - 0x40], 0x57f0e8
jmp 0x440487
mov eax, dword [ebp - 0x40]
mov edx, dword [eax + 0x38]
push dword [edx*4 + 0x57f878]
push ebx
call sub.GDI32.dll_SetTextColor
mov dword [ebp - 0x10], eax
push 0
mov ecx, esi
shl ecx, 6
add ecx, 0x57f0a8
push ecx
call fcn.0054e28c
pop ecx
push eax
mov eax, esi
shl eax, 6
add eax, 0x57f0a8
push eax
lea edx, [ebp - 0x50]
push edx
push 4
push dword [ebp - 8]
push dword [ebp - 4]
push ebx
call sub.GDI32.dll_ExtTextOutA
push dword [ebp - 0x10]
push ebx
call sub.GDI32.dll_SetTextColor
mov ecx, dword [ebp - 0x40]
cmp dword [ecx + 0x3c], 0
je 0x440439
mov eax, esi
shl eax, 6
add eax, 0x57f0a8
push eax
call fcn.0054e28c
pop ecx
push eax
mov edx, esi
shl edx, 6
add edx, 0x57f0a8
push edx
push ebx
call fcn.004ef215
mov ecx, dword [ebp - 8]
dec ecx
mov dword [ebp - 0x6c], ecx
mov edx, dword [ebp - 4]
dec edx
mov dword [ebp - 0x70], edx
add eax, dword [ebp - 4]
add eax, 2
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0x64], eax
mov ecx, dword [0x57f0e0]
mov eax, dword [ecx*4 + 0x57f878]
mov dword [ebp - 0x18], eax
inc esi
add dword [ebp - 0x40], 0x40
mov edx, dword [ebp - 0xc]
add dword [ebp - 8], edx
mov ecx, dword [ebp - 0xc]
add ecx, edi
mov eax, dword [ebp - 0x44]
sub eax, ecx
cmp eax, dword [ebp - 8]
jg 0x440465
mov edx, dword [ebp - 0x50]
add edx, 0x67
mov dword [ebp - 4], edx
mov ecx, dword [ebp - 0x4c]
add ecx, 3
mov dword [ebp - 8], ecx
cmp esi, 0x1e
jge 0x440493
push 0x561c4b
mov eax, esi
shl eax, 6
add eax, 0x57f0a8
push eax
call fcn.0054e450
add esp, 8
test eax, eax
je 0x440493
mov edx, dword [ebp - 0x40]
cmp byte [edx], 0
jne 0x440388
push dword [ebp - 0x14]
push ebx
call sub.GDI32.dll_SetBkColor
push 0x561c54
call fcn.0043f880
mov esi, eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x60], eax
mov edx, dword [ebp - 0x44]
sub edx, edi
add edx, 2
mov dword [ebp - 0x5c], edx
mov ecx, dword [ebp - 0x48]
sar ecx, 1
jns 0x4404c3
adc ecx, 0
mov dword [ebp - 0x58], ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x54], eax
mov edx, esi
shl edx, 6
mov ecx, dword [edx + 0x57f0e0]
push dword [ecx*4 + 0x57f878]
call sub.GDI32.dll_CreateSolidBrush
mov dword [ebp - 0x38], eax
push dword [ebp - 0x38]
lea eax, [ebp - 0x60]
push eax
push ebx
call sub.USER32.dll_FillRect
push dword [ebp - 0x38]
call sub.GDI32.dll_DeleteObject
mov edx, esi
shl edx, 6
cmp dword [edx + 0x57f0e4], 0
je 0x440539
mov ecx, dword [ebp - 0x5c]
inc ecx
mov dword [ebp - 0x6c], ecx
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x70], eax
mov edx, dword [ebp - 0x58]
dec edx
mov dword [ebp - 0x68], edx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x64], ecx
mov eax, esi
shl eax, 6
mov edx, dword [eax + 0x57f0e0]
mov ecx, dword [edx*4 + 0x57f878]
mov dword [ebp - 0x18], ecx
shl esi, 6
mov eax, dword [esi + 0x57f0e0]
push dword [eax*4 + 0x57f878]
push ebx
call sub.GDI32.dll_SetBkColor
mov dword [ebp - 0x14], eax
push 0x561c5d
call fcn.0043f880
mov esi, eax
mov eax, esi
shl eax, 6
mov edx, dword [eax + 0x57f0e0]
push dword [edx*4 + 0x57f878]
push ebx
call sub.GDI32.dll_SetTextColor
mov dword [ebp - 0x10], eax
push 0
mov ecx, esi
shl ecx, 6
add ecx, 0x57f0a8
push ecx
call fcn.0054e28c
pop ecx
push eax
mov eax, esi
shl eax, 6
add eax, 0x57f0a8
push eax
lea edx, [ebp - 0x60]
push edx
push 4
mov ecx, dword [ebp - 0x5c]
add ecx, 2
push ecx
mov eax, dword [ebp - 0x50]
add eax, 5
push eax
push ebx
call sub.GDI32.dll_ExtTextOutA
push dword [ebp - 0x10]
push ebx
call sub.GDI32.dll_SetTextColor
push dword [ebp - 0x14]
push ebx
call sub.GDI32.dll_SetBkColor
mov edx, esi
shl edx, 6
cmp dword [edx + 0x57f0e4], 0
je 0x440636
mov ecx, esi
shl ecx, 6
add ecx, 0x57f0a8
push ecx
call fcn.0054e28c
pop ecx
push eax
shl esi, 6
add esi, 0x57f0a8
push esi
push ebx
call fcn.004ef215
mov edx, dword [ebp - 0x5c]
inc edx
mov dword [ebp - 0x6c], edx
mov ecx, dword [ebp - 0x50]
add ecx, 4
mov dword [ebp - 0x70], ecx
add eax, dword [ebp - 0x50]
add eax, 7
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
push 0x561c6b
call fcn.0043f880
shl eax, 6
mov eax, dword [eax + 0x57f0e0]
mov edx, dword [eax*4 + 0x57f878]
mov dword [ebp - 0x18], edx
mov ecx, dword [ebp - 0x48]
add ecx, 0xffffffa6
mov dword [ebp - 0x60], ecx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x5c], eax
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x58], edx
mov ecx, dword [ebp - 0x44]
sub ecx, edi
mov dword [ebp - 0x54], ecx
cmp dword [0x57f0e4], 0
je 0x44068c
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x6c], eax
mov edx, dword [ebp - 0x50]
inc edx
mov dword [ebp - 0x70], edx
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffffd
mov dword [ebp - 0x68], ecx
mov eax, dword [ebp - 0x54]
add eax, 0xfffffffd
mov dword [ebp - 0x64], eax
mov edx, dword [0x57f0e0]
mov ecx, dword [edx*4 + 0x57f878]
mov dword [ebp - 0x18], ecx
inc dword [ebp - 0x60]
push 0x561c74
call fcn.0043f880
mov esi, eax
mov eax, esi
shl eax, 6
mov edx, dword [eax + 0x57f0e0]
push dword [edx*4 + 0x57f878]
call sub.GDI32.dll_CreateSolidBrush
mov dword [ebp - 0x38], eax
push dword [ebp - 0x38]
lea ecx, [ebp - 0x60]
push ecx
push ebx
call sub.USER32.dll_FillRect
push dword [ebp - 0x38]
call sub.GDI32.dll_DeleteObject
mov eax, esi
shl eax, 6
cmp dword [eax + 0x57f0e4], 0
je 0x440715
mov edx, dword [ebp - 0x5c]
inc edx
mov dword [ebp - 0x6c], edx
mov ecx, dword [ebp - 0x60]
add ecx, 2
mov dword [ebp - 0x70], ecx
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x68], eax
mov edx, dword [ebp - 0x54]
add edx, 0xfffffffd
mov dword [ebp - 0x64], edx
push 0x561c7d
call fcn.0043f880
shl eax, 6
mov ecx, dword [eax + 0x57f0e0]
mov eax, dword [ecx*4 + 0x57f878]
mov dword [ebp - 0x18], eax
shl esi, 6
mov edx, dword [esi + 0x57f0e0]
push dword [edx*4 + 0x57f878]
push ebx
call sub.GDI32.dll_SetBkColor
mov dword [ebp - 0x14], eax
push 0x561c86
call fcn.0043f880
mov esi, eax
mov eax, dword [ebp - 0x4c]
add eax, 3
mov dword [ebp - 8], eax
mov edx, esi
shl edx, 6
mov ecx, dword [edx + 0x57f0e0]
push dword [ecx*4 + 0x57f878]
push ebx
call sub.GDI32.dll_SetTextColor
mov dword [ebp - 0x10], eax
push 0
mov eax, esi
shl eax, 6
add eax, 0x57f0a8
push eax
call fcn.0054e28c
pop ecx
push eax
mov edx, esi
shl edx, 6
add edx, 0x57f0a8
push edx
lea ecx, [ebp - 0x50]
push ecx
push 4
push dword [ebp - 8]
mov eax, dword [ebp - 0x60]
add eax, 4
push eax
push ebx
call sub.GDI32.dll_ExtTextOutA
push dword [ebp - 0x10]
push ebx
call sub.GDI32.dll_SetTextColor
mov edx, esi
shl edx, 6
cmp dword [edx + 0x57f0e4], 0
je 0x44080d
mov ecx, esi
shl ecx, 6
add ecx, 0x57f0a8
push ecx
call fcn.0054e28c
pop ecx
push eax
shl esi, 6
add esi, 0x57f0a8
push esi
push ebx
call fcn.004ef215
mov edx, dword [ebp - 8]
mov dword [ebp - 0x6c], edx
mov ecx, dword [ebp - 0x60]
add ecx, 3
mov dword [ebp - 0x70], ecx
add eax, dword [ebp - 0x60]
add eax, 6
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
push 0x561c94
call fcn.0043f880
shl eax, 6
mov eax, dword [eax + 0x57f0e0]
mov edx, dword [eax*4 + 0x57f878]
mov dword [ebp - 0x18], edx
push 0x561c9d
call fcn.0043f880
mov esi, eax
mov eax, dword [ebp - 0xc]
add dword [ebp - 8], eax
mov edx, esi
shl edx, 6
mov ecx, dword [edx + 0x57f0e0]
push dword [ecx*4 + 0x57f878]
push ebx
call sub.GDI32.dll_SetTextColor
mov dword [ebp - 0x10], eax
push 0
mov eax, esi
shl eax, 6
add eax, 0x57f0a8
push eax
call fcn.0054e28c
pop ecx
push eax
mov edx, esi
shl edx, 6
add edx, 0x57f0a8
push edx
lea ecx, [ebp - 0x50]
push ecx
push 4
push dword [ebp - 8]
mov eax, dword [ebp - 0x60]
add eax, 4
push eax
push ebx
call sub.GDI32.dll_ExtTextOutA
push dword [ebp - 0x10]
push ebx
call sub.GDI32.dll_SetTextColor
mov edx, esi
shl edx, 6
cmp dword [edx + 0x57f0e4], 0
je 0x4408e9
mov ecx, esi
shl ecx, 6
add ecx, 0x57f0a8
push ecx
call fcn.0054e28c
pop ecx
push eax
shl esi, 6
add esi, 0x57f0a8
push esi
push ebx
call fcn.004ef215
mov edx, dword [ebp - 8]
mov dword [ebp - 0x6c], edx
mov ecx, dword [ebp - 0x60]
add ecx, 3
mov dword [ebp - 0x70], ecx
add eax, dword [ebp - 0x60]
add eax, 6
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
push 0x561caa
call fcn.0043f880
shl eax, 6
mov eax, dword [eax + 0x57f0e0]
mov edx, dword [eax*4 + 0x57f878]
mov dword [ebp - 0x18], edx
push 0x561cb3
call fcn.0043f880
mov esi, eax
mov eax, dword [ebp - 0xc]
add dword [ebp - 8], eax
mov edx, esi
shl edx, 6
mov ecx, dword [edx + 0x57f0e0]
push dword [ecx*4 + 0x57f878]
push ebx
call sub.GDI32.dll_SetTextColor
mov dword [ebp - 0x10], eax
push 0
mov eax, esi
shl eax, 6
add eax, 0x57f0a8
push eax
call fcn.0054e28c
pop ecx
push eax
mov edx, esi
shl edx, 6
add edx, 0x57f0a8
push edx
lea ecx, [ebp - 0x50]
push ecx
push 4
push dword [ebp - 8]
mov eax, dword [ebp - 0x60]
add eax, 4
push eax
push ebx
call sub.GDI32.dll_ExtTextOutA
push dword [ebp - 0x10]
push ebx
call sub.GDI32.dll_SetTextColor
push dword [ebp - 0x14]
push ebx
call sub.GDI32.dll_SetBkColor
mov edx, esi
shl edx, 6
cmp dword [edx + 0x57f0e4], 0
je 0x4409ce
mov ecx, esi
shl ecx, 6
add ecx, 0x57f0a8
push ecx
call fcn.0054e28c
pop ecx
push eax
shl esi, 6
add esi, 0x57f0a8
push esi
push ebx
call fcn.004ef215
mov edx, dword [ebp - 8]
mov dword [ebp - 0x6c], edx
mov ecx, dword [ebp - 0x60]
add ecx, 3
mov dword [ebp - 0x70], ecx
add eax, dword [ebp - 0x60]
add eax, 6
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
push 0x561cbf
call fcn.0043f880
shl eax, 6
mov eax, dword [eax + 0x57f0e0]
mov edx, dword [eax*4 + 0x57f878]
mov dword [ebp - 0x18], edx
push 0x561cc8
call fcn.0043f880
mov esi, eax
mov eax, dword [ebp - 0x48]
sar eax, 1
jns 0x4409e4
adc eax, 0
add eax, 3
mov dword [ebp - 0x60], eax
mov edx, dword [ebp - 0x44]
sub edx, edi
add edx, 2
mov dword [ebp - 0x5c], edx
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x58], ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x54], eax
mov edx, esi
shl edx, 6
mov ecx, dword [edx + 0x57f0e0]
push dword [ecx*4 + 0x57f878]
call sub.GDI32.dll_CreateSolidBrush
mov dword [ebp - 0x38], eax
push dword [ebp - 0x38]
lea eax, [ebp - 0x60]
push eax
push ebx
call sub.USER32.dll_FillRect
push dword [ebp - 0x38]
call sub.GDI32.dll_DeleteObject
mov edx, esi
shl edx, 6
mov ecx, dword [edx + 0x57f0e0]
push dword [ecx*4 + 0x57f878]
push ebx
call sub.GDI32.dll_SetBkColor
mov dword [ebp - 0x14], eax
push 0x561cd2
call fcn.0043f880
shl eax, 6
mov eax, dword [eax + 0x57f0e0]
push dword [eax*4 + 0x57f878]
push ebx
call sub.GDI32.dll_SetTextColor
mov dword [ebp - 0x10], eax
push 0
mov edx, esi
shl edx, 6
add edx, 0x57f0a8
push edx
call fcn.0054e28c
pop ecx
push eax
mov ecx, esi
shl ecx, 6
add ecx, 0x57f0a8
push ecx
lea eax, [ebp - 0x60]
push eax
push 4
mov edx, dword [ebp - 0x5c]
add edx, 2
push edx
mov ecx, dword [ebp - 0x60]
add ecx, 5
push ecx
push ebx
call sub.GDI32.dll_ExtTextOutA
push dword [ebp - 0x10]
push ebx
call sub.GDI32.dll_SetTextColor
push dword [ebp - 0x14]
push ebx
call sub.GDI32.dll_SetBkColor
mov eax, esi
shl eax, 6
cmp dword [eax + 0x57f0e4], 0
je 0x440af7
mov edx, dword [ebp - 0x5c]
inc edx
mov dword [ebp - 0x6c], edx
mov ecx, dword [ebp - 0x60]
inc ecx
mov dword [ebp - 0x70], ecx
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x68], eax
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x64], edx
shl esi, 6
mov ecx, dword [esi + 0x57f0e0]
mov eax, dword [ecx*4 + 0x57f878]
mov dword [ebp - 0x18], eax
push dword [ebp - 0x28]
push ebx
call sub.GDI32.dll_SelectObject
push dword [ebp - 0x24]
call sub.GDI32.dll_DeleteObject
cmp dword [ebp - 0x70], 0xffffffff
je 0x440b6e
push 0x92
push dword [ebp + 8]
call sub.USER32.dll_GetDlgItem
mov esi, eax
call sub.USER32.dll_GetFocus
cmp esi, eax
jne 0x440b6e
mov al, 0xff
sub al, byte [ebp - 0x18]
xor edx, edx
mov dl, al
movzx ecx, word [ebp - 0x18]
sar ecx, 8
mov al, 0xff
sub al, cl
xor ecx, ecx
mov cl, al
movzx eax, cx
shl eax, 8
or edx, eax
mov ecx, dword [ebp - 0x18]
shr ecx, 0x10
mov al, 0xff
sub al, cl
xor ecx, ecx
mov cl, al
shl ecx, 0x10
or edx, ecx
mov dword [ebp - 0x3c], edx
push 1
lea edx, [ebp - 0x70]
push edx
push dword [ebp - 0x18]
push dword [ebp - 0x3c]
push ebx
call fcn.004401c4
dec dword [ebp - 0x50]
dec dword [ebp - 0x4c]
inc dword [ebp - 0x48]
inc dword [ebp - 0x44]
push dword [0x561928]
push 1
push 0
call sub.GDI32.dll_CreatePen
mov esi, eax
push esi
push ebx
call sub.GDI32.dll_SelectObject
mov dword [ebp - 0x30], eax
push 0
mov eax, dword [ebp - 0x44]
sub eax, edi
add eax, 0xfffffffd
push eax
push dword [ebp - 0x50]
push ebx
call sub.GDI32.dll_MoveToEx
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push ebx
call sub.GDI32.dll_LineTo
push dword [ebp - 0x4c]
mov edx, dword [ebp - 0x48]
add edx, 0xffffffa3
push edx
push ebx
call sub.GDI32.dll_LineTo
push 0
push dword [ebp - 0x44]
push dword [ebp - 0x50]
push ebx
call sub.GDI32.dll_MoveToEx
mov ecx, dword [ebp - 0x44]
sub ecx, edi
push ecx
push dword [ebp - 0x50]
push ebx
call sub.GDI32.dll_LineTo
mov eax, dword [ebp - 0x44]
sub eax, edi
push eax
mov edx, dword [ebp - 0x48]
sar edx, 1
jns 0x440bf2
adc edx, 0
push edx
push ebx
call sub.GDI32.dll_LineTo
push 0
push dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
sar ecx, 1
jns 0x440c08
adc ecx, 0
add ecx, 2
push ecx
push ebx
call sub.GDI32.dll_MoveToEx
mov eax, dword [ebp - 0x44]
sub eax, edi
push eax
mov edx, dword [ebp - 0x48]
sar edx, 1
jns 0x440c22
adc edx, 0
add edx, 2
push edx
push ebx
call sub.GDI32.dll_LineTo
mov ecx, dword [ebp - 0x44]
sub ecx, edi
push ecx
push dword [ebp - 0x48]
push ebx
call sub.GDI32.dll_LineTo
push 0
mov eax, dword [ebp - 0x44]
sub eax, edi
add eax, 0xfffffffd
push eax
mov edx, dword [ebp - 0x48]
add edx, 0xffffffa6
push edx
push ebx
call sub.GDI32.dll_MoveToEx
push dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x48]
add ecx, 0xffffffa6
push ecx
push ebx
call sub.GDI32.dll_LineTo
push dword [ebp - 0x4c]
push dword [ebp - 0x48]
push ebx
call sub.GDI32.dll_LineTo
push dword [ebp - 0x30]
push ebx
call sub.GDI32.dll_SelectObject
push esi
call sub.GDI32.dll_DeleteObject
push dword [0x56192c]
push 1
push 0
call sub.GDI32.dll_CreatePen
mov esi, eax
push esi
push ebx
call sub.GDI32.dll_SelectObject
mov dword [ebp - 0x30], eax
push 0
mov eax, dword [ebp - 0x44]
sub eax, edi
add eax, 0xfffffffd
push eax
push dword [ebp - 0x50]
push ebx
call sub.GDI32.dll_MoveToEx
mov edx, dword [ebp - 0x44]
sub edx, edi
add edx, 0xfffffffd
push edx
mov ecx, dword [ebp - 0x48]
add ecx, 0xffffffa3
push ecx
push ebx
call sub.GDI32.dll_LineTo
push dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
add eax, 0xffffffa3
push eax
push ebx
call sub.GDI32.dll_LineTo
push 0
mov edx, dword [ebp - 0x44]
dec edx
push edx
push dword [ebp - 0x50]
push ebx
call sub.GDI32.dll_MoveToEx
mov ecx, dword [ebp - 0x44]
dec ecx
push ecx
mov eax, dword [ebp - 0x48]
sar eax, 1
jns 0x440cf2
adc eax, 0
dec eax
push eax
push ebx
call sub.GDI32.dll_LineTo
mov edx, dword [ebp - 0x44]
sub edx, edi
add edx, 0xfffffffd
push edx
mov ecx, dword [ebp - 0x48]
sar ecx, 1
jns 0x440d0d
adc ecx, 0
dec ecx
push ecx
push ebx
call sub.GDI32.dll_LineTo
push 0
mov eax, dword [ebp - 0x44]
dec eax
push eax
mov edx, dword [ebp - 0x48]
sar edx, 1
jns 0x440d26
adc edx, 0
add edx, 2
push edx
push ebx
call sub.GDI32.dll_MoveToEx
mov ecx, dword [ebp - 0x44]
dec ecx
push ecx
mov eax, dword [ebp - 0x48]
dec eax
push eax
push ebx
call sub.GDI32.dll_LineTo
mov edx, dword [ebp - 0x44]
sub edx, edi
add edx, 0xfffffffd
push edx
mov ecx, dword [ebp - 0x48]
dec ecx
push ecx
push ebx
call sub.GDI32.dll_LineTo
push 0
mov eax, dword [ebp - 0x44]
sub eax, edi
add eax, 0xfffffffd
push eax
mov edx, dword [ebp - 0x48]
add edx, 0xffffffa7
push edx
push ebx
call sub.GDI32.dll_MoveToEx
mov ecx, dword [ebp - 0x44]
sub ecx, edi
add ecx, 0xfffffffd
push ecx
mov eax, dword [ebp - 0x48]
dec eax
push eax
push ebx
call sub.GDI32.dll_LineTo
push dword [ebp - 0x4c]
mov edx, dword [ebp - 0x48]
dec edx
push edx
push ebx
call sub.GDI32.dll_LineTo
push dword [ebp - 0x30]
push ebx
call sub.GDI32.dll_SelectObject
push esi
call sub.GDI32.dll_DeleteObject
push dword [0x561924]
push 1
push 0
call sub.GDI32.dll_CreatePen
mov esi, eax
push esi
push ebx
call sub.GDI32.dll_SelectObject
mov dword [ebp - 0x30], eax
push 0
mov eax, dword [ebp - 0x44]
sub eax, edi
add eax, 0xfffffffe
push eax
push dword [ebp - 0x50]
push ebx
call sub.GDI32.dll_MoveToEx
mov edx, dword [ebp - 0x44]
sub edx, edi
add edx, 0xfffffffe
push edx
push dword [ebp - 0x48]
push ebx
call sub.GDI32.dll_LineTo
push 0
mov ecx, dword [ebp - 0x44]
sub ecx, edi
dec ecx
push ecx
push dword [ebp - 0x50]
push ebx
call sub.GDI32.dll_MoveToEx
mov eax, dword [ebp - 0x44]
sub eax, edi
dec eax
push eax
push dword [ebp - 0x48]
push ebx
call sub.GDI32.dll_LineTo
push 0
mov edx, dword [ebp - 0x44]
sub edx, edi
add edx, 0xfffffffe
push edx
mov ecx, dword [ebp - 0x48]
sar ecx, 1
jns 0x440e15
adc ecx, 0
push ecx
push ebx
call sub.GDI32.dll_MoveToEx
push dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
sar eax, 1
jns 0x440e29
adc eax, 0
push eax
push ebx
call sub.GDI32.dll_LineTo
push 0
mov edx, dword [ebp - 0x44]
sub edx, edi
dec edx
push edx
mov ecx, dword [ebp - 0x48]
sar ecx, 1
jns 0x440e43
adc ecx, 0
inc ecx
push ecx
push ebx
call sub.GDI32.dll_MoveToEx
push dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
sar eax, 1
jns 0x440e58
adc eax, 0
inc eax
push eax
push ebx
call sub.GDI32.dll_LineTo
push 0
push dword [ebp - 0x4c]
mov edx, dword [ebp - 0x48]
add edx, 0xffffffa4
push edx
push ebx
call sub.GDI32.dll_MoveToEx
mov ecx, dword [ebp - 0x44]
sub ecx, edi
add ecx, 0xfffffffe
push ecx
mov eax, dword [ebp - 0x48]
add eax, 0xffffffa4
push eax
push ebx
call sub.GDI32.dll_LineTo
push 0
push dword [ebp - 0x4c]
mov edx, dword [ebp - 0x48]
add edx, 0xffffffa5
push edx
push ebx
call sub.GDI32.dll_MoveToEx
mov ecx, dword [ebp - 0x44]
sub ecx, edi
add ecx, 0xfffffffe
push ecx
mov eax, dword [ebp - 0x48]
add eax, 0xffffffa5
push eax
push ebx
call sub.GDI32.dll_LineTo
push dword [ebp - 0x30]
push ebx
call sub.GDI32.dll_SelectObject
push esi
call sub.GDI32.dll_DeleteObject
push 0xcc0020
push 0
push 0
push ebx
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push 0
push 0
push dword [ebp - 0x2c]
call sub.GDI32.dll_BitBlt
push dword [ebp - 0x20]
push ebx
call sub.GDI32.dll_SelectObject
push dword [ebp - 0x1c]
call sub.GDI32.dll_DeleteObject
push ebx
call sub.GDI32.dll_DeleteDC
push dword [ebp - 0x2c]
push dword [ebp - 0x34]
call sub.USER32.dll_ReleaseDC
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4