Function at 0x482b70
Capabilities:
Capture screenshot
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x98
push ebx
mov ebx, dword [esp + 0xa0]
mov eax, dword [ebx + 4]
push ebp
xor ebp, ebp
cmp eax, ebp
push esi
mov esi, 1
mov dword [esp + 0x6c], esi
mov byte [esp + 0x3b], 0
mov byte [esp + 0x23], 0
mov byte [esp + 0x1b], 0
mov byte [esp + 0x39], 0
mov byte [esp + 0x3a], 0
mov byte [esp + 0xf], 1
mov dword [esp + 0x5c], 0xd
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x60], ebp
mov dword [esp + 0x14], ebp
mov dword [esp + 0x10], ebp
je 0x482ca7
cmp byte [eax], 0x2d
jne 0x482ca7
push 0x69
push eax
call fcn.005d9b20
add esp, 8
test eax, eax
je 0x482bec
mov dword [esp + 0x5c], 0xa
mov eax, dword [ebx + 4]
push 0x68
push eax
call fcn.005d9b20
add esp, 8
test eax, eax
je 0x482c03
mov byte [esp + 0x3b], 1
mov ecx, dword [ebx + 4]
push 0x6e
push ecx
call fcn.005d9b20
add esp, 8
test eax, eax
je 0x482c1a
mov byte [esp + 0xf], 0
mov edx, dword [ebx + 4]
push 0x72
push edx
call fcn.005d9b20
add esp, 8
test eax, eax
je 0x482c31
mov byte [esp + 0x23], 1
mov eax, dword [ebx + 4]
push 0x66
push eax
call fcn.005d9b20
add esp, 8
test eax, eax
je 0x482c48
mov byte [esp + 0x1b], 1
mov ecx, dword [ebx + 4]
push 0x65
push ecx
call fcn.005d9b20
add esp, 8
test eax, eax
je 0x482c5f
mov byte [esp + 0x39], 1
mov edx, dword [ebx + 4]
push 0x63
push edx
call fcn.005d9b20
add esp, 8
test eax, eax
je 0x482c76
mov byte [esp + 0x3a], 1
mov eax, dword [ebx + 4]
push 0x73
push eax
call fcn.005d9b20
add esp, 8
test eax, eax
je 0x482c8c
mov dword [esp + 0x2c], esi
mov ecx, dword [ebx + 4]
push 0x64
push ecx
call fcn.005d9b20
add esp, 8
test eax, eax
je 0x482ca2
mov dword [esp + 0x60], esi
mov esi, 2
mov eax, dword [ebx + esi*4]
cmp eax, ebp
jne 0x482cc6
mov edx, dword [ebx]
push ebp
push ebp
push edx
push ebp
call fcn.0048bd90
add esp, 0x10
pop esi
pop ebp
pop ebx
add esp, 0x98
ret
push edi
push ebp
push eax
call fcn.005091b0
mov edi, eax
add esp, 8
cmp edi, ebp
mov dword [esp + 0x34], edi
je 0x483b43
cmp dword [edi + 0x1478], ebp
je 0x483b43
cmp dword [edi + 0x134c], ebp
je 0x483b43
cmp dword [edi + 0x1728], ebp
je 0x483b43
cmp dword [edi + 0x1314], 9
jne 0x483b43
mov al, byte [esp + 0x3f]
test al, al
je 0x482d23
mov eax, dword [edi]
push eax
call fcn.00597d30
add esp, 4
mov eax, dword [ebx + esi*4 + 4]
inc esi
cmp eax, ebp
jne 0x482d51
mov al, byte [esp + 0x13]
test al, al
je 0x482dea
push edi
call fcn.00482720
add esp, 4
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x98
ret
mov cl, byte [esp + 0x27]
test cl, cl
push eax
je 0x482d68
call fcn.005d99cd
add esp, 4
mov dword [esp + 0x2c], eax
jmp 0x482d85
call fcn.005d9a55
push eax
call fcn.0043c610
mov edx, dword [eax*4 + 0x638070]
add esp, 8
mov dword [esp + 0x18], eax
mov dword [esp + 0x2c], edx
mov eax, dword [ebx + esi*4 + 4]
inc esi
cmp eax, ebp
mov dword [esp + 0x20], esi
je 0x482e89
mov ecx, dword [esp + 0xb4]
dec ecx
cmp ecx, 4
mov dword [esp + 0x38], ecx
ja case.default.0x482dab
jmp dword [ecx*4 + 0x483b60]
push eax
call fcn.005d9a55
mov ecx, 1
add esp, 4
cmp eax, ecx
mov dword [esp + 0x18], eax
jl 0x482dcf
cmp eax, 0x1000
jle 0x482dd3
mov dword [esp + 0x18], ecx
mov eax, dword [ebx + esi*4 + 4]
inc esi
cmp eax, ebp
mov dword [esp + 0x20], esi
je 0x482dea
cmp dword [ebx + esi*4 + 4], ebp
jne case.default.0x482dab
push ebp
jmp 0x483b45
push eax
call fcn.005d9a55
mov ecx, 1
add esp, 4
cmp eax, ecx
mov dword [esp + 0x18], eax
jl 0x482e0d
cmp eax, 0x1000
jle 0x482e11
mov dword [esp + 0x18], ecx
mov eax, dword [ebx + esi*4 + 4]
inc esi
cmp eax, ebp
mov dword [esp + 0x20], esi
je 0x482ee9
cmp dword [ebx + esi*4 + 4], ebp
jne case.default.0x482dab
mov edx, dword [ebx]
push ebp
push ebp
push edx
push ebp
call fcn.0048bd90
add esp, 0x10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x98
ret
push eax
call fcn.005d9a55
mov ecx, 1
add esp, 4
cmp eax, ecx
mov dword [esp + 0x18], eax
jl 0x482e62
cmp eax, 0x1000
jle 0x482e66
mov dword [esp + 0x18], ecx
mov eax, dword [ebx + esi*4 + 4]
inc esi
cmp eax, ebp
mov dword [esp + 0x20], esi
je 0x482e89
cmp dword [ebx + esi*4 + 4], ebp
je 0x482e89
cmp dword [ebx + esi*4 + 8], ebp
je 0x482e89
cmp dword [ebx + esi*4 + 0xc], ebp
jne case.default.0x482dab
mov eax, dword [ebx]
push ebp
push ebp
push eax
push ebp
call fcn.0048bd90
add esp, 0x10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x98
ret
mov cl, byte [esp + 0x27]
test cl, cl
push eax
je 0x482eb9
call fcn.005d99cd
add esp, 4
mov dword [esp + 0x14], eax
jmp 0x482ed6
call fcn.005d9a55
push eax
call fcn.0043c610
mov ecx, dword [eax*4 + 0x638070]
add esp, 8
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ecx
mov eax, dword [ebx + esi*4 + 4]
inc esi
cmp eax, ebp
mov dword [esp + 0x20], esi
je 0x482ee9
cmp dword [ebx + esi*4 + 4], ebp
jne case.default.0x482dab
mov edx, dword [ebx]
push ebp
push ebp
push edx
push ebp
call fcn.0048bd90
add esp, 0x10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x98
ret
mov cl, byte [esp + 0x27]
test cl, cl
push eax
je 0x482f15
call fcn.005d99cd
add esp, 4
jmp 0x482f2e
call fcn.005d9a55
push eax
call fcn.0043c610
mov dword [esp + 0x20], eax
mov eax, dword [eax*4 + 0x638070]
add esp, 8
inc esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], esi
mov ecx, dword [edi + 0x1478]
push ecx
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
cmp edi, ebp
mov dword [esp + 0x28], edi
je 0x482f6d
push edi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov ebp, eax
test ebp, ebp
jne 0x482f7a
mov edx, dword [esp + 0x34]
mov eax, dword [edx + 0x1478]
push edi
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x98
ret
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx + 0x1728]
push edx
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov edi, dword [sym.imp.GDI32.dll_SetROP2]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x60]
push eax
push ebp
call edi
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x28]
push ecx
push edx
call edi
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x38]
xor edi, edi
cmp eax, 4
mov dword [esp + 0x50], edi
mov dword [esp + 0x68], edi
ja case.default.0x482fc1
jmp dword [eax*4 + 0x483b74]
mov edi, dword [esp + 0x2c]
push edi
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push edi
push 1
mov dword [esp + 0x58], eax
push 5
jmp 0x48301f
mov edi, dword [esp + 0x2c]
push edi
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [esp + 0x18]
push edi
mov dword [esp + 0x54], eax
push ecx
jmp 0x48301d
mov al, byte [esp + 0x1f]
test al, al
je 0x48300a
mov edx, dword [esp + 0x2c]
push edx
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
jmp 0x483012
push 5
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x2c]
push eax
push 1
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
mov edi, eax
mov dword [esp + 0x68], edi
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x28]
push ecx
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x50]
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [esp + 0x28]
push edi
push ecx
mov dword [esp + 0x64], eax
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebp
mov dword [esp + 0x80], eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x38]
cmp eax, 4
ja case.default.0x48307d
mov edx, eax
jmp dword [edx*4 + 0x483b88]
lea edi, [ebx + esi*4]
mov dword [esp + 0x30], edi
jmp 0x483090
mov eax, dword [edi]
push eax
call fcn.005d9a55
mov ecx, dword [edi + 4]
push ecx
mov esi, eax
call fcn.005d9a55
mov edi, eax
mov eax, dword [esp + 0x20]
add esp, 8
cmp eax, 1
jne 0x483101
mov edx, dword [esp + 0x2c]
mov ebx, dword [sym.imp.GDI32.dll_SetPixelV]
push edx
push edi
push esi
push ebp
call ebx
mov al, byte [esp + 0x13]
test al, al
je 0x4830d7
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
push eax
push edi
push esi
push ecx
call ebx
mov eax, dword [esp + 0x34]
cmp esi, dword [eax + 0x1734]
jle 0x4830e9
mov dword [eax + 0x1734], esi
cmp edi, dword [eax + 0x1738]
jle 0x483179
mov edx, dword [esp + 0x34]
mov dword [edx + 0x1738], edi
jmp 0x483179
mov eax, dword [esp + 0x18]
or edx, 0xffffffff
sub edx, eax
lea ebx, [eax + esi - 1]
add esi, edx
lea ecx, [eax + edi - 1]
push ecx
or edx, 0xffffffff
sub edx, eax
push ebx
add edi, edx
push edi
push esi
push ebp
mov dword [esp + 0x60], ecx
call dword [sym.imp.GDI32.dll_Ellipse]
mov al, byte [esp + 0x13]
test al, al
je 0x483155
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x28]
push 0xcc0020
push edi
push esi
push ebp
sub eax, edi
inc eax
push eax
mov ecx, ebx
sub ecx, esi
inc ecx
push ecx
push edi
push esi
push edx
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [esp + 0x34]
cmp ebx, dword [eax + 0x1734]
jle 0x483167
mov dword [eax + 0x1734], ebx
mov ecx, dword [esp + 0x4c]
cmp ecx, dword [eax + 0x1738]
jle 0x483179
mov dword [eax + 0x1738], ecx
mov edi, dword [esp + 0x30]
mov eax, dword [edi + 8]
add edi, 8
test eax, eax
mov dword [esp + 0x30], edi
je case.default.0x48307d
mov eax, dword [edi + 4]
test eax, eax
jne 0x483090
jmp case.default.0x48307d
mov edi, dword [esp + 0x28]
lea ebx, [ebx + esi*4]
mov byte [esp + 0x1f], 1
mov dword [esp + 0x30], ebx
nop
mov eax, dword [ebx]
push eax
call fcn.005d9a55
mov ecx, dword [ebx + 4]
push ecx
mov esi, eax
call fcn.005d9a55
mov ebx, eax
mov al, byte [esp + 0x27]
add esp, 8
test al, al
je 0x4831f5
push 0
push ebx
push esi
push ebp
call dword [sym.imp.GDI32.dll_MoveToEx]
mov al, byte [esp + 0x13]
test al, al
je 0x4831ee
push 0
push ebx
push esi
push edi
call dword [sym.imp.GDI32.dll_MoveToEx]
mov byte [esp + 0x1f], 0
jmp 0x48322f
push ebx
push esi
push ebp
call dword [sym.imp.GDI32.dll_LineTo]
mov al, byte [esp + 0x13]
test al, al
je 0x48320f
push ebx
push esi
push edi
call dword [sym.imp.GDI32.dll_LineTo]
mov eax, dword [esp + 0x34]
cmp esi, dword [eax + 0x1734]
jle 0x483221
mov dword [eax + 0x1734], esi
cmp ebx, dword [eax + 0x1738]
jle 0x48322f
mov dword [eax + 0x1738], ebx
mov ebx, dword [esp + 0x30]
mov eax, dword [ebx + 8]
add ebx, 8
test eax, eax
mov dword [esp + 0x30], ebx
je case.default.0x48307d
mov eax, dword [ebx + 4]
test eax, eax
jne 0x4831b0
jmp case.default.0x48307d
mov eax, dword [esp + 0x18]
test eax, eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x54], 0
jle 0x4835c1
mov edx, dword [esp + 0xac]
mov eax, dword [esp + 0x20]
lea ecx, [edx + eax*4 + 4]
mov dword [esp + 0x6c], ecx
mov edx, dword [esp + 0xac]
mov eax, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
mov ecx, dword [edx + eax*4]
dec ebx
push ecx
mov dword [esp + 0x1c], ebx
call fcn.005d9a55
mov edx, dword [esp + 0x70]
mov esi, eax
mov eax, dword [edx]
push eax
add esi, ebx
call fcn.005d9a55
mov edx, dword [esp + 0xb4]
mov edi, eax
mov eax, dword [esp + 0x28]
lea ecx, [ebx + ebx]
mov dword [esp + 0x40], ecx
mov ecx, dword [edx + eax*4 + 8]
push ecx
add edi, ebx
call fcn.005d9a55
mov ecx, dword [esp + 0x2c]
mov ebx, eax
mov eax, dword [esp + 0x44]
mov edx, esi
sub edx, eax
mov eax, dword [esp + 0xb8]
add ebx, edx
mov edx, dword [eax + ecx*4 + 0xc]
push edx
call fcn.005d9a55
mov edx, dword [esp + 0x48]
mov ecx, edi
sub ecx, edx
add eax, ecx
add esp, 0x10
cmp esi, ebx
mov dword [esp + 0x4c], eax
jle 0x483309
mov eax, esi
mov esi, ebx
mov ebx, eax
mov eax, dword [esp + 0x4c]
cmp edi, eax
jle 0x48331b
mov ecx, edi
mov edi, eax
mov eax, ecx
mov dword [esp + 0x4c], eax
mov cl, byte [esp + 0x3e]
test cl, cl
je 0x48345e
dec ebx
dec eax
cmp esi, ebx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x14], esi
jg 0x483356
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x14]
push edx
push edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SetPixelV]
mov eax, dword [esp + 0x14]
add eax, 2
cmp eax, ebx
mov dword [esp + 0x14], eax
jle 0x483335
mov eax, dword [esp + 0x14]
lea ecx, [ebx + 2]
cmp eax, ecx
lea eax, [edi + 2]
je 0x483367
lea eax, [edi + 1]
cmp eax, dword [esp + 0x4c]
mov dword [esp + 0x14], eax
jg 0x483396
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x14]
push edx
push eax
push ebx
push ebp
call dword [sym.imp.GDI32.dll_SetPixelV]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x4c]
add eax, 2
cmp eax, ecx
mov dword [esp + 0x14], eax
jle 0x483371
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x14]
add ecx, 2
cmp eax, ecx
lea eax, [ebx - 2]
je 0x4833ab
lea eax, [ebx - 1]
cmp eax, esi
mov dword [esp + 0x14], eax
jl 0x4833d8
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x14]
push edx
push eax
push ecx
push ebp
call dword [sym.imp.GDI32.dll_SetPixelV]
mov eax, dword [esp + 0x14]
sub eax, 2
cmp eax, esi
mov dword [esp + 0x14], eax
jge 0x4833b3
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x4c]
lea edx, [esi - 2]
cmp eax, edx
jne 0x4833ec
add ecx, 0xfffffffe
jmp 0x4833ed
dec ecx
lea eax, [edi + 2]
cmp ecx, eax
mov dword [esp + 0x14], ecx
jl 0x483424
jmp 0x483400
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
push eax
push ecx
push esi
push ebp
call dword [sym.imp.GDI32.dll_SetPixelV]
mov eax, dword [esp + 0x14]
sub eax, 2
lea ecx, [edi + 2]
cmp eax, ecx
mov dword [esp + 0x14], eax
jge 0x483400
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x483591
mov al, byte [esp + 0x13]
test al, al
je 0x483591
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x28]
push 0xcc0020
push edi
push esi
push ebp
sub edx, edi
mov eax, ebx
inc edx
push edx
sub eax, esi
inc eax
push eax
push edi
push esi
push ecx
jmp 0x48358b
mov cl, byte [esp + 0x3d]
test cl, cl
je 0x48349c
mov edx, dword [esp + 0x4c]
push edx
push ebx
push edi
push esi
push ebp
call dword [sym.imp.GDI32.dll_Ellipse]
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x483591
mov al, byte [esp + 0x13]
test al, al
je 0x483591
mov eax, dword [esp + 0x4c]
mov ecx, ebx
sub eax, edi
sub ecx, esi
jmp 0x48357a
cmp ebx, esi
jne 0x4834e1
cmp eax, edi
jne 0x4834e1
mov eax, dword [esp + 0x2c]
push eax
push edi
push esi
push ebp
call dword [sym.imp.GDI32.dll_SetPixelV]
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x483591
mov al, byte [esp + 0x13]
test al, al
je 0x48355e
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
push ecx
push edi
push esi
push edx
call dword [sym.imp.GDI32.dll_SetPixelV]
jmp 0x48355e
mov eax, dword [esp + 0x64]
test eax, eax
je 0x48354f
mov edx, dword [esp + 0xac]
mov ecx, dword [esp + 0x20]
mov eax, dword [edx + ecx*4 + 0x10]
test eax, eax
je 0x48352f
cmp dword [edx + ecx*4 + 0x14], 0
je 0x48352f
push eax
call fcn.005d9a55
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xb0]
mov edx, dword [eax + ecx*4 + 0x14]
push edx
call fcn.005d9a55
add esp, 8
mov dword [esp + 0x54], 1
jmp 0x483538
mov eax, 0xf
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x4c]
push eax
mov eax, dword [esp + 0x3c]
push eax
push ecx
push ebx
push edi
push esi
push ebp
call dword [sym.imp.GDI32.dll_RoundRect]
jmp 0x48355e
mov edx, dword [esp + 0x4c]
push edx
push ebx
push edi
push esi
push ebp
call dword [sym.imp.GDI32.dll_Rectangle]
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x483591
mov al, byte [esp + 0x13]
test al, al
je 0x483591
mov eax, dword [esp + 0x4c]
sub eax, edi
mov ecx, ebx
sub ecx, esi
inc eax
inc ecx
mov edx, dword [esp + 0x28]
push 0xcc0020
push edi
push esi
push ebp
push eax
push ecx
push edi
push esi
push edx
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [esp + 0x34]
cmp ebx, dword [eax + 0x1734]
jle 0x4835a3
mov dword [eax + 0x1734], ebx
mov ecx, dword [esp + 0x4c]
cmp ecx, dword [eax + 0x1738]
jle 0x4835b5
mov dword [eax + 0x1738], ecx
mov eax, dword [esp + 0x18]
test eax, eax
jg 0x483280
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x54]
test eax, eax
je 0x4835d6
add dword [esp + 0x20], 2
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0xac]
mov edx, dword [ecx + eax*4 + 0x10]
add eax, 4
test edx, edx
mov dword [esp + 0x20], eax
je case.default.0x48307d
mov edx, ecx
mov ecx, dword [edx + eax*4 + 4]
test ecx, ecx
je case.default.0x48307d
mov ecx, edx
mov edx, eax
mov eax, dword [ecx + edx*4 + 8]
test eax, eax
je case.default.0x48307d
mov eax, ecx
mov ecx, edx
mov edx, dword [eax + ecx*4 + 0xc]
test edx, edx
jne case.0x48307d.2
jmp case.default.0x48307d
mov edx, dword [ebx + esi*4]
push edx
call fcn.005d9a55
mov dword [esp + 0x48], eax
mov eax, dword [ebx + esi*4 + 4]
push eax
call fcn.005d9a55
add esi, 2
mov dword [esp + 0x48], eax
mov eax, dword [ebx + esi*4]
add esp, 8
xor edi, edi
test eax, eax
je 0x4836ea
push eax
call fcn.0051c3e0
add esp, 4
test eax, eax
jne 0x4836ea
mov edi, dword [esp + 0xb0]
push eax
push 0x400
push edi
push esi
push ebx
call fcn.0051d080
mov esi, eax
add esp, 0x14
test esi, esi
jl 0x483740
push edi
push edi
call fcn.004222f0
add esp, 8
test eax, eax
je 0x483753
mov ecx, dword [esp + 0x2c]
push 1
push 0
push ecx
lea edx, [esp + 0x60]
push edx
push edi
call fcn.00429340
mov eax, dword [esp + 0x68]
add esp, 0x14
test eax, eax
je 0x483766
push eax
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
mov edi, eax
mov eax, dword [esp + 0x54]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [esp + 0x5c]
push ecx
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x5c], eax
inc esi
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x48]
push eax
push ecx
push edx
push ebp
call dword [sym.imp.GDI32.dll_ExtFloodFill]
test edi, edi
je 0x48372c
mov eax, dword [esp + 0x5c]
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [esp + 0x50]
push ecx
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x5c], eax
cmp dword [ebx + esi*4], 0
je 0x48379f
mov eax, dword [ebx + esi*4 + 4]
test eax, eax
jne case.0x48307d.3
jmp 0x48379f
mov edx, dword [ebx]
push 3
push 0
push edx
push 0
call fcn.0048bd90
add esp, 0x10
jmp 0x48379f
mov eax, dword [ebx]
push 3
push 0
push eax
push 0
call fcn.0048bd90
add esp, 0x10
jmp 0x48379f
mov ecx, dword [ebx]
push edi
push ecx
push 0
push 0x835
call fcn.00424130
add esp, 8
push eax
push 0x643160
call fcn.005d9929
push 6
push 0
push 0x643160
push 0
call fcn.0048bd90
add esp, 0x20
mov dword [esp + 0x70], 0
mov esi, dword [esp + 0x34]
mov eax, dword [esi + 0x1728]
lea edx, [esp + 0x80]
push edx
push 0x18
push eax
call dword [sym.imp.GDI32.dll_GetObjectA]
mov al, byte [esp + 0x13]
test al, al
je 0x4837eb
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x84]
mov eax, dword [esp + 0x28]
push 0xcc0020
push 0
push 0
push ebp
push ecx
push edx
push 0
push 0
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [esp + 0x84]
mov dword [esi + 0x1734], ecx
mov edx, dword [esp + 0x88]
mov dword [esi + 0x1738], edx
jmp case.default.0x48307d
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx + 0x1728]
lea eax, [esp + 0x80]
push eax
push 0x18
push edx
call dword [sym.imp.GDI32.dll_GetObjectA]
mov ecx, dword [esp + 0x58]
mov edi, dword [esp + 0x84]
mov eax, dword [esp + 0x88]
push ecx
xor ebx, ebx
push ebp
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x28]
push edx
push edi
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
test eax, eax
mov dword [esp + 0x54], eax
je 0x483ab3
mov ecx, eax
push ecx
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [esp + 0x28]
push edx
mov dword [esp + 0x5c], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edi, eax
test edi, edi
je 0x483a9c
mov eax, dword [esp + 0x34]
mov ecx, dword [eax + 0x1728]
push ecx
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [esp + 0x4c]
push 0xcc0020
push ebx
push ebx
push edi
push edx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x5c]
push eax
push ebx
push ebx
push ebp
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [esp + 0x28]
push ecx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
test eax, eax
mov dword [esp + 0x30], eax
je 0x483a85
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [esp + 0x34]
push eax
push ecx
push edx
push ebp
call fcn.00488940
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xc0]
mov eax, dword [eax + esi*4]
add esp, 0x14
test eax, eax
je 0x48396d
mov ecx, dword [esp + 0xac]
mov edx, dword [ecx + esi*4 + 4]
test edx, edx
je 0x48396d
mov edx, dword [ecx + esi*4 + 8]
test edx, edx
je 0x48396d
mov edx, dword [ecx + esi*4 + 0xc]
test edx, edx
je 0x48396d
push eax
call fcn.005d9a55
mov ecx, dword [esp + 0xb0]
mov edx, dword [ecx + esi*4 + 4]
push edx
mov ebx, eax
call fcn.005d9a55
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax + esi*4 + 8]
push ecx
call fcn.005d9a55
mov edx, dword [esp + 0xb8]
mov dword [esp + 0x54], eax
mov eax, dword [edx + esi*4 + 0xc]
push eax
call fcn.005d9a55
add esp, 0x10
mov dword [esp + 0x4c], eax
mov esi, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
add ecx, ebx
add edx, esi
push 0
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], esi
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], edx
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
lea eax, [esp + 0x9c]
push eax
push edi
call dword [sym.imp.USER32.dll_FillRect]
push 0
push edi
call dword [sym.imp.GDI32.dll_SetTextColor]
mov ecx, dword [esp + 0x14]
push ecx
push edi
mov dword [esp + 0x74], eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x48]
push 0x8800c6
push esi
push ebx
push edx
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x5c]
push eax
push ecx
push esi
push ebx
push edi
call dword [sym.imp.GDI32.dll_BitBlt]
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
push 0xee0086
push esi
push ebx
push ebp
push edx
push eax
push esi
push ebx
push edi
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [esp + 0x6c]
push ecx
push edi
call dword [sym.imp.GDI32.dll_SetTextColor]
mov edx, dword [esp + 0x64]
push edx
push edi
call dword [sym.imp.GDI32.dll_SetBkColor]
mov al, byte [esp + 0x13]
test al, al
je 0x483a47
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x28]
push 0xcc0020
push esi
push ebx
push edi
push eax
push ecx
push esi
push ebx
push edx
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov dword [eax + 0x1734], ecx
mov dword [eax + 0x1738], edx
mov eax, dword [esp + 0x38]
test eax, eax
je 0x483a7a
push eax
mov eax, dword [esp + 0x34]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [esp + 0x30]
push ecx
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [esp + 0x20]
test eax, eax
je 0x483a95
push eax
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov edx, dword [esp + 0x58]
push edx
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [esp + 0x54]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx + 0x1728]
push edx
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x74]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push eax
push ebp
call esi
mov ecx, dword [esp + 0x78]
mov edi, dword [esp + 0x28]
push ecx
push edi
call esi
mov edx, dword [esp + 0x68]
mov ebx, dword [sym.imp.GDI32.dll_DeleteObject]
push edx
call ebx
mov eax, dword [esp + 0x5c]
push eax
push ebp
call esi
mov ecx, dword [esp + 0x7c]
push ecx
push edi
call esi
mov edx, dword [esp + 0x50]
push edx
call ebx
mov eax, dword [esp + 0x58]
push eax
push ebp
call esi
push ebp
call dword [sym.imp.GDI32.dll_DeleteDC]
mov ecx, dword [esp + 0x60]
push ecx
push edi
call dword [sym.imp.GDI32.dll_SetROP2]
mov edx, dword [esp + 0x34]
mov eax, dword [edx + 0x1478]
push edi
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [esp + 0x70]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x98
ret
push 7
mov ecx, dword [ebx]
push ebp
push ecx
push ebp
call fcn.0048bd90
add esp, 0x10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x98
ret