Function at 0x46d740
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
mov eax, dword [0x4d9754]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x34], ecx
cmp dword [ebx + 0x1c], 0
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x2c], 0
je 0x46de21
cmp dword [ebx], 0
lea eax, [ebx + 4]
mov dword [ebp - 0x18], eax
jne 0x46d79e
cmp dword [eax], 0
jne 0x46d7a1
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0045978b
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x18], eax
push edi
lea eax, [ebp - 0x14]
push eax
push ebx
push ecx
call fcn.0046d470
add esp, 0xc
push esi
call dword [sym.imp.GDI32.dll_SaveDC]
push esi
mov dword [ebp - 0x50], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edi, eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x44], edi
cmp dword [eax + 8], 0
je 0x46d82c
cmp dword [eax + 0xc], 0
je 0x46d82c
mov eax, dword [eax + 0x24]
test eax, eax
je 0x46d82c
push eax
call dword [sym.imp.GDI32.dll_UnrealizeObject]
mov eax, dword [ebp - 0x34]
push 0
push dword [eax + 0x24]
push esi
call dword [sym.imp.GDI32.dll_SelectPalette]
mov eax, dword [ebp - 0x34]
push esi
mov dword [eax + 0x20], 1
call dword [sym.imp.GDI32.dll_RealizePalette]
mov eax, dword [ebp - 0x34]
push dword [eax + 0x24]
mov dword [eax + 0x20], 0
call dword [sym.imp.GDI32.dll_UnrealizeObject]
mov eax, dword [ebp - 0x34]
push 0
push dword [eax + 0x24]
push edi
call dword [sym.imp.GDI32.dll_SelectPalette]
push edi
call dword [sym.imp.GDI32.dll_RealizePalette]
mov eax, dword [ebp - 0x18]
cmp dword [eax], 0
je 0x46d8a6
push 8
push esi
mov dword [ebp - 0x30], 0
call dword [sym.imp.GDI32.dll_SetMapMode]
push 0
push dword [ebx + 0xc]
push dword [ebx + 8]
push esi
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
mov eax, dword [ebx + 0x14]
cdq
mov ecx, eax
mov eax, dword [ebx + 0xc]
xor ecx, edx
sub ecx, edx
cdq
xor eax, edx
sub eax, edx
add ecx, eax
mov eax, dword [ebx + 0x10]
cdq
push 0
push ecx
mov ecx, eax
mov eax, dword [ebx + 8]
xor ecx, edx
sub ecx, edx
cdq
xor eax, edx
sub eax, edx
add ecx, eax
push ecx
push esi
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
push 0
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push esi
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
push 0
push dword [ebx + 0x28]
push dword [ebx + 0x24]
push esi
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
jmp 0x46d8af
push dword [ebx]
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
lea eax, [ebp - 0x2c]
push eax
push ebx
call fcn.0046ea80
add esp, 8
test eax, eax
jne 0x46d8cf
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x34]
call fcn.0046ea00
add esp, 8
cmp dword [ebp - 0x2c], 3
jne 0x46d9c3
cmp dword [ebp - 0x30], 0
je 0x46d9c3
cmp dword [ebx + 0x18], 0
jne 0x46d9c3
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x34]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_GetClientRect]
push esi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov ecx, dword [ebp - 8]
mov edi, eax
sub ecx, dword [ebp - 0x10]
push ecx
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x14]
push ecx
push esi
mov dword [ebp - 0x24], edi
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov ebx, eax
push ebx
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x34]
push dword [eax + 0x2c]
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov edi, eax
lea eax, [ebp - 0x14]
push edi
push eax
push dword [ebp - 0x24]
call dword [sym.imp.USER32.dll_FillRect]
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0x20]
push 0xcc0020
push 0
push 0
mov edi, dword [eax + 0x24]
mov ecx, dword [eax + 0x28]
push dword [ebp - 0x44]
mov eax, dword [ebp - 8]
sub eax, ecx
cdq
sub eax, edx
push ecx
sar eax, 1
push edi
push eax
mov eax, dword [ebp - 0xc]
sub eax, edi
mov edi, dword [ebp - 0x24]
cdq
sub eax, edx
sar eax, 1
push eax
push edi
call dword [sym.imp.GDI32.dll_BitBlt]
push ebx
push dword [ebp - 0x44]
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x20]
push dword [eax]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
push dword [ebp - 0x44]
mov dword [ecx + 0x24], eax
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x10]
mov dword [ecx], ebx
mov ebx, ecx
mov dword [ecx + 0x28], eax
mov dword [ebx + 0x18], 1
call dword [sym.imp.GDI32.dll_DeleteDC]
mov dword [ebp - 0x44], edi
mov eax, dword [ebx + 0x34]
test eax, 0x100000
je 0x46d9fc
push 0x186a0
push dword [ebx + 0x40]
push dword [ebx + 0x24]
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x186a0
push dword [ebx + 0x44]
mov dword [ebp - 0x38], eax
push dword [ebx + 0x28]
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x38]
jmp 0x46da0f
test eax, 0x200000
je 0x46da3b
mov eax, dword [ebx + 0x40]
mov ecx, dword [ebx + 0x44]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x48], ecx
mov ecx, dword [ebx + 0x24]
mov edx, ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x3c], ecx
cmp eax, ecx
jne 0x46da35
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x3c], edx
cmp eax, dword [ebx + 0x28]
je 0x46da50
mov byte [ebp - 0x3d], 0
jmp 0x46da54
mov eax, dword [ebx + 0x24]
mov ecx, dword [ebx + 0x24]
mov dword [ebp - 0x38], eax
mov eax, dword [ebx + 0x28]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x3c], ecx
mov byte [ebp - 0x3d], 1
mov eax, dword [ebp - 0x2c]
dec eax
cmp eax, 0xa
ja case.0x46da61.10
jmp dword [eax*4 + 0x46e6f0]
push esi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 1
push 1
push dword [ebp - 0x28]
mov dword [ebp - 0x18], eax
push dword [ebp - 0x38]
call dword [sym.imp.GDI32.dll_CreateBitmap]
push eax
push dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
call dword [sym.imp.GDI32.dll_SelectObject]
push esi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
push dword [ebp - 0x38]
push esi
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
push dword [ebp - 0x20]
mov dword [ebp - 0x48], eax
call dword [sym.imp.GDI32.dll_SelectObject]
cmp byte [ebp - 0x3d], 0
mov ecx, dword [ebx + 0x28]
mov edx, dword [ebx + 0x24]
push 0xcc0020
je 0x46dadc
push 0
push 0
push edi
push ecx
push edx
push 0
push 0
push dword [ebp - 0x20]
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x46daf6
push ecx
push edx
push 0
push 0
push edi
push dword [ebp - 0x28]
push dword [ebp - 0x38]
push 0
push 0
push dword [ebp - 0x20]
call dword [sym.imp.GDI32.dll_StretchBlt]
mov eax, dword [ebp - 0x34]
cmp dword [eax + 8], 0
je 0x46db16
cmp dword [eax + 0xc], 0
je 0x46db16
cmp dword [eax + 0x24], 0
je 0x46db16
mov eax, dword [ebx + 0x30]
or eax, 0x2000000
push eax
jmp 0x46db19
push dword [ebx + 0x30]
push dword [ebp - 0x20]
call dword [sym.imp.GDI32.dll_SetBkColor]
cmp byte [ebp - 0x3d], 0
push 0xcc0020
je 0x46dbdb
push 0
push 0
push dword [ebp - 0x20]
push dword [ebx + 0x28]
push dword [ebx + 0x24]
push 0
push 0
push dword [ebp - 0x18]
call dword [sym.imp.GDI32.dll_BitBlt]
push 0
push dword [ebp - 0x20]
call dword [sym.imp.GDI32.dll_SetBkColor]
push 0xffffff
push dword [ebp - 0x20]
call dword [sym.imp.GDI32.dll_SetTextColor]
push 0x8800c6
push 0
push 0
push dword [ebp - 0x18]
push dword [ebx + 0x28]
push dword [ebx + 0x24]
push 0
push 0
push dword [ebp - 0x20]
call dword [sym.imp.GDI32.dll_BitBlt]
push 0xffffff
push esi
call dword [sym.imp.GDI32.dll_SetBkColor]
push 0
push esi
call dword [sym.imp.GDI32.dll_SetTextColor]
push 0x8800c6
push 0
push 0
push dword [ebp - 0x18]
push dword [ebx + 0x28]
push dword [ebx + 0x24]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
push 0xee0086
push 0
push 0
push dword [ebp - 0x20]
push dword [ebx + 0x28]
push dword [ebx + 0x24]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x46dc87
mov eax, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x38]
push eax
push ebx
push 0
push 0
push dword [ebp - 0x20]
push eax
push ebx
push 0
push 0
push dword [ebp - 0x18]
call dword [sym.imp.GDI32.dll_StretchBlt]
push 0
push dword [ebp - 0x20]
call dword [sym.imp.GDI32.dll_SetBkColor]
push 0xffffff
push dword [ebp - 0x20]
call dword [sym.imp.GDI32.dll_SetTextColor]
mov eax, dword [ebp - 0x28]
push 0x8800c6
push eax
push ebx
push 0
push 0
push dword [ebp - 0x18]
push eax
push ebx
push 0
push 0
push dword [ebp - 0x20]
call dword [sym.imp.GDI32.dll_StretchBlt]
push 0xffffff
push esi
call dword [sym.imp.GDI32.dll_SetBkColor]
push 0
push esi
call dword [sym.imp.GDI32.dll_SetTextColor]
mov eax, dword [ebp - 0x28]
push 0x8800c6
push eax
push ebx
push 0
push 0
push dword [ebp - 0x18]
push eax
push ebx
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push esi
call dword [sym.imp.GDI32.dll_StretchBlt]
mov eax, dword [ebp - 0x28]
push 0xee0086
push eax
push ebx
push 0
push 0
push dword [ebp - 0x20]
push eax
push ebx
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push esi
call dword [sym.imp.GDI32.dll_StretchBlt]
push dword [ebp - 0x18]
call dword [sym.imp.GDI32.dll_DeleteDC]
push dword [ebp - 0x20]
call dword [sym.imp.GDI32.dll_DeleteDC]
push dword [ebp - 0x48]
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [ebp - 0x24]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0x34]
mov dword [eax + 0x10], 0xff00ff
jmp 0x46de0f
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x34]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebx + 0x24]
mov dword [ebp - 0x2c], 0
inc eax
test eax, eax
jle case.0x46da61.10
mov eax, dword [ebp - 8]
mov ecx, dword [ebx + 0x28]
cdq
idiv ecx
mov dword [ebp - 0x1c], 0
inc eax
test eax, eax
jle 0x46dd58
mov edx, dword [ebp - 0x1c]
lea esp, [esp]
mov eax, dword [ebx + 0x24]
imul ecx, edx
cmp dword [ebp - 0x30], 0
je 0x46dd29
push 0xcc0020
push 0
push 0
push edi
push dword [ebx + 0x28]
push eax
imul eax, dword [ebp - 0x2c]
push ecx
push eax
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x46dd44
imul eax, dword [ebp - 0x2c]
push 0
push ecx
push eax
push esi
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
mov eax, dword [ebp - 0x18]
push dword [eax]
push esi
call dword [sym.imp.GDI32.dll_PlayMetaFile]
mov eax, dword [ebp - 8]
mov ecx, dword [ebx + 0x28]
cdq
idiv ecx
inc dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
inc eax
cmp edx, eax
jl 0x46dd00
mov eax, dword [ebp - 0xc]
cdq
idiv dword [ebx + 0x24]
mov ecx, dword [ebp - 0x2c]
inc ecx
inc eax
mov dword [ebp - 0x2c], ecx
cmp ecx, eax
jl 0x46dce1
cmp dword [ebp - 0x30], 0
je 0x46de03
mov eax, dword [ebp - 0x28]
mov edx, dword [ebx + 0x24]
cmp dword [ebp - 0x38], edx
jne 0x46e6be
mov ecx, dword [ebx + 0x28]
cmp eax, ecx
jne 0x46e6be
push 0xcc0020
push 0
push 0
push edi
push ecx
push edx
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x46de0f
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x34]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_GetClientRect]
cmp dword [ebp - 0x30], 0
je 0x46dde7
push 0xcc0020
push dword [ebx + 0x28]
push dword [ebx + 0x24]
push 0
push 0
push edi
push dword [ebp - 8]
push dword [ebp - 0xc]
push 0
push 0
push esi
call dword [sym.imp.GDI32.dll_StretchBlt]
jmp 0x46de0f
push 0
push 0
push 0
push esi
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
push 0
push dword [ebp - 8]
push dword [ebp - 0xc]
push esi
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
mov eax, dword [ebp - 0x18]
push dword [eax]
push esi
call dword [sym.imp.GDI32.dll_PlayMetaFile]
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
push dword [ebp - 0x50]
push esi
call dword [sym.imp.GDI32.dll_RestoreDC]
pop edi
mov ecx, dword [ebp - 4]
mov eax, 1
pop esi
xor ecx, ebp
pop ebx
call fcn.0045978b
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x34]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_GetClientRect]
cmp dword [ebp - 0x30], 0
je 0x46dde7
push 0xcc0020
push 0
push 0
push edi
push dword [ebx + 0x28]
push dword [ebx + 0x24]
push 0
push 0
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x46de0f
cmp dword [ebx + 0x18], 0
jne case.0x46da61.10
cmp dword [ebp - 0x30], 0
je 0x46de03
push esi
mov dword [ebx + 0x18], 1
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 8
push 8
mov ebx, eax
push esi
mov dword [ebp - 0x3c], ebx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
push ebx
mov dword [ebp - 0x1c], eax
call dword [sym.imp.GDI32.dll_SelectObject]
push 0x42
push 8
push 8
push 0
push 0
push ebx
call dword [sym.imp.GDI32.dll_PatBlt]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0047f895
mov ecx, 1
add esp, 4
mov dword [ebp - 0x24], ecx
lea ebx, [ebx]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edi, [edx + 3]
test edi, edi
jle 0x46df10
mov esi, 8
call fcn.0047f874
and eax, 0x8000003f
jns 0x46def7
dec eax
or eax, 0xffffffc0
inc eax
cdq
idiv esi
push 0xffffff
push edx
push eax
push ebx
call dword [sym.imp.GDI32.dll_SetPixel]
sub edi, 1
jne 0x46dee6
mov esi, dword [ebp - 0x4c]
push dword [ebp - 0x1c]
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
mov ebx, eax
push ebx
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
push 0xca0749
push 0
push 0
push dword [ebp - 0x44]
mov edi, eax
mov eax, dword [ebp - 0x20]
push dword [eax + 0x28]
push dword [eax + 0x24]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
push edi
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [ebp - 0x24]
mov ebx, dword [ebp - 0x3c]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x14
jl 0x46ded0
push ebx
call dword [sym.imp.GDI32.dll_DeleteDC]
push dword [ebp - 0x1c]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0x20]
mov edi, dword [ebp - 0x44]
push 0xcc0020
push 0
push 0
push edi
push dword [eax + 0x28]
push dword [eax + 0x24]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x46de0f
cmp dword [ebx + 0x18], 0
jne case.0x46da61.10
mov edi, 1
mov dword [ebx + 0x18], 1
mov dword [ebp - 0x1c], edi
jmp 0x46dfc3
mov edi, dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2c], eax
mov eax, 0x66666667
imul dword [ebx + 0x28]
mov ecx, dword [ebx + 0x24]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, edi
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0x28]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x3c], eax
mov eax, 0x66666667
imul ecx
sar edx, 4
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
imul ebx, edi
mov edi, ecx
test edi, edi
jns 0x46e00f
add edi, 1
sar edi, 1
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
add eax, edx
sub edx, dword [ebp - 0x24]
add eax, dword [ebp - 0x3c]
add edx, dword [ebp - 0x3c]
push eax
lea eax, [edi + ebx]
sub edi, ebx
add eax, dword [ebp - 0x14]
add edi, dword [ebp - 0x14]
push eax
push edx
push edi
call dword [sym.imp.GDI32.dll_CreateRectRgn]
push eax
push esi
mov dword [ebp - 0x48], eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
cmp dword [ebp - 0x30], 0
mov dword [ebp - 0x4c], eax
je 0x46e070
mov ebx, dword [ebp - 0x20]
mov edi, dword [ebp - 0x44]
push 0xcc0020
push 0
push 0
push edi
push dword [ebx + 0x28]
push dword [ebx + 0x24]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x46e07f
mov eax, dword [ebp - 0x18]
push dword [eax]
push esi
call dword [sym.imp.GDI32.dll_PlayMetaFile]
mov edi, dword [ebp - 0x44]
push dword [ebp - 0x4c]
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x46e097
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ebx, dword [ebp - 0x2c]
lea ebx, [ebx]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, ebx
cmp eax, 0x19
jb 0x46e0a0
mov eax, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x14
jl 0x46dfc0
push 0
push esi
call dword [sym.imp.GDI32.dll_SelectClipRgn]
cmp dword [ebp - 0x30], 0
je 0x46e0f1
push 0xcc0020
push 0
push 0
push edi
push dword [ebx + 0x28]
push dword [ebx + 0x24]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x46dd79
mov eax, dword [ebp - 0x18]
push dword [eax]
push esi
call dword [sym.imp.GDI32.dll_PlayMetaFile]
jmp 0x46de03
cmp dword [ebx + 0x18], 0
jne case.0x46da61.10
mov edi, 1
mov dword [ebx + 0x18], 1
mov dword [ebp - 0x1c], edi
jmp 0x46e123
mov edi, dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x24]
mov dword [ebp - 0x24], eax
mov eax, 0x66666667
imul ecx
sar edx, 4
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
imul ebx, edi
mov edi, ecx
test edi, edi
jns 0x46e14c
add edi, 1
sar edi, 1
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x10]
mov eax, dword [eax + 0x28]
add eax, edx
push eax
lea eax, [edi + ebx]
sub edi, ebx
add eax, dword [ebp - 0x14]
add edi, dword [ebp - 0x14]
push eax
push edx
push edi
call dword [sym.imp.GDI32.dll_CreateRectRgn]
push eax
push esi
mov dword [ebp - 0x48], eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
cmp dword [ebp - 0x30], 0
mov dword [ebp - 0x4c], eax
je 0x46e1a7
mov ebx, dword [ebp - 0x20]
mov edi, dword [ebp - 0x44]
push 0xcc0020
push 0
push 0
push edi
push dword [ebx + 0x28]
push dword [ebx + 0x24]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x46e1b6
mov eax, dword [ebp - 0x18]
push dword [eax]
push esi
call dword [sym.imp.GDI32.dll_PlayMetaFile]
mov edi, dword [ebp - 0x44]
push dword [ebp - 0x4c]
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x46e1ce
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ebx, dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, ebx
cmp eax, 0x19
jb 0x46e1d1
mov eax, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x14
jl 0x46e120
push 0
push esi
call dword [sym.imp.GDI32.dll_SelectClipRgn]
cmp dword [ebp - 0x30], 0
je 0x46de03
push 0xcc0020
push 0
push 0
push edi
push dword [ebx + 0x28]
push dword [ebx + 0x24]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x46de0f
cmp dword [ebx + 0x18], 0
jne case.0x46da61.10
cmp dword [ebp - 0x30], 0
je 0x46de03
mov eax, ecx
mov dword [ebx + 0x18], 1
cdq
and edx, 3
add eax, edx
sar eax, 2
mov edx, eax
and edx, 1
and ecx, 0x80000003
jns 0x46e260
dec ecx
or ecx, 0xfffffffc
add ecx, 1
je 0x46e276
lea ecx, [eax*4]
test edx, edx
lea eax, [ecx - 4]
cmove ecx, eax
mov dword [ebp - 0x18], ecx
jmp 0x46e288
mov eax, dword [ebp - 0x1c]
test edx, edx
je 0x46e282
add eax, 0xfffffff8
jmp 0x46e285
add eax, 0xfffffffc
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
add eax, 0xf
mov dword [ebp - 0x24], eax
jmp 0x46e2a0
cmp dword [ebp - 0x18], 0
mov ecx, dword [ebp - 0x2c]
jg 0x46e2b2
cmp ecx, dword [ebp - 0x1c]
jge 0x46de0f
mov eax, dword [ebp - 0x14]
push 0xcc0020
push 0
push ecx
push edi
push dword [ebx + 0x28]
add eax, ecx
push 4
push dword [ebp - 0x10]
push eax
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x46de0f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
push 0xcc0020
push 0
push ecx
push edi
push dword [ebx + 0x28]
add eax, ecx
push 4
push dword [ebp - 0x10]
push eax
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x46de0f
add dword [ebp - 0x2c], 8
sub dword [ebp - 0x18], 8
mov edi, dword [ebp - 0x24]
lea esp, [esp]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp eax, edi
jb 0x46e310
add edi, 0xf
mov dword [ebp - 0x24], edi
mov edi, dword [ebp - 0x44]
jmp 0x46e2a0
cmp dword [ebx + 0x18], 0
jne case.0x46da61.10
cmp dword [ebp - 0x30], 0
je 0x46de03
mov ecx, dword [ebx + 0x28]
mov eax, ecx
cdq
sub eax, edx
mov dword [ebx + 0x18], 1
sar eax, 1
mov edx, eax
mov dword [ebp - 0x4c], ecx
and edx, 1
test cl, 1
je 0x46e36a
lea ecx, [eax + eax]
test edx, edx
lea eax, [ecx - 2]
cmove ecx, eax
mov dword [ebp - 0x18], ecx
jmp 0x46e377
lea eax, [ecx - 4]
test edx, edx
jne 0x46e374
lea eax, [ecx - 2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
add eax, 0xf
mov dword [ebp - 0x24], eax
lea ebx, [ebx]
cmp dword [ebp - 0x18], 0
mov ecx, dword [ebp - 0x1c]
jg 0x46e3a2
cmp ecx, dword [ebp - 0x4c]
jge 0x46de0f
mov eax, dword [ebp - 0x10]
push 0xcc0020
push ecx
push 0
push edi
push 2
push dword [ebx + 0x24]
add eax, ecx
push eax
push dword [ebp - 0x14]
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x46de0f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
push 0xcc0020
push ecx
push 0
push edi
push 2
push dword [ebx + 0x24]
add eax, ecx
push eax
push dword [ebp - 0x14]
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x46de0f
add dword [ebp - 0x1c], 4
sub dword [ebp - 0x18], 4
mov edi, dword [ebp - 0x24]
lea esp, [esp]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp eax, edi
jb 0x46e400
add edi, 0xf
mov dword [ebp - 0x24], edi
mov edi, dword [ebp - 0x44]
jmp 0x46e390
cmp dword [ebx + 0x18], 0
jne case.0x46da61.10
cmp dword [ebp - 0x30], 0
je 0x46de03
mov eax, dword [ebx + 0x28]
xor edx, edx
cmp ecx, eax
mov dword [ebx + 0x18], 1
mov dword [ebp - 0x2c], edx
cmovle eax, dword [ebp - 0x3c]
mov ecx, eax
sar ecx, 1
test al, 1
lea eax, [ecx + 1]
cmove ecx, eax
lea eax, [ecx + 2]
mov dword [ebp - 0x24], eax
test ecx, ecx
js 0x46e45e
mov edx, eax
and edx, 0xfffffffe
jmp 0x46e461
mov dword [ebp - 0x24], eax
cmp edx, dword [ebp - 0x24]
lea eax, [ecx + 1]
cmovne eax, ecx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x4c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [ebp - 0x18]
add eax, 0xf
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x1c], edx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
cmp ecx, dword [ebp - 0x4c]
jg 0x46dd7c
mov edx, dword [ebx + 0x24]
lea eax, [ecx + ecx]
push 0xcc0020
push ecx
sub edx, eax
push ecx
push edi
mov dword [ebp - 0x3c], edx
mov edx, dword [ebx + 0x28]
sub edx, eax
mov eax, dword [ebp - 0x10]
push 1
push dword [ebp - 0x3c]
add eax, ecx
mov dword [ebp - 0x24], edx
push eax
mov eax, dword [ebp - 0x14]
add eax, ecx
push eax
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x46dd79
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x10]
push 0xcc0020
push ecx
push ecx
push edi
push dword [ebp - 0x24]
add eax, ecx
push 1
push eax
mov eax, dword [ebp - 0x14]
add eax, ecx
push eax
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x46dd79
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
add ecx, edx
push 0xcc0020
push ecx
push edx
push edi
inc eax
push 1
push eax
mov eax, dword [ebp - 0x10]
add eax, ecx
push eax
mov eax, dword [ebp - 0x14]
add eax, edx
push eax
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x46dd79
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x24]
add ecx, edx
push 0xcc0020
push edx
push ecx
push edi
inc eax
push eax
mov eax, dword [ebp - 0x10]
push 1
add eax, edx
push eax
mov eax, dword [ebp - 0x14]
add eax, ecx
push eax
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x46dd79
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
test edx, edx
js 0x46e697
mov ecx, dword [ebp - 0x18]
test ecx, ecx
js 0x46e697
mov edi, dword [ebx + 0x24]
lea eax, [edx + edx]
sub edi, eax
lea eax, [ecx + ecx]
push 0xcc0020
push ecx
mov dword [ebp - 0x24], edi
mov edi, dword [ebx + 0x28]
sub edi, eax
mov eax, dword [ebp - 0x34]
push edx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3c], edi
mov edi, dword [ebp - 0x44]
push edi
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
push 1
push dword [ebp - 0x24]
add eax, ecx
push eax
mov eax, dword [ebp - 0x14]
add eax, edx
push eax
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x46dd79
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
push 0xcc0020
push ecx
push edx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x30]
push edi
push dword [ebp - 0x3c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
push 1
add eax, ecx
push eax
mov eax, dword [ebp - 0x14]
add eax, edx
push eax
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x46dd79
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x1c]
push 0xcc0020
push ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x30]
push edx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x24]
push edi
inc eax
push 1
push eax
mov eax, dword [ebp - 0x10]
add eax, ecx
push eax
mov eax, dword [ebp - 0x14]
add eax, edx
push eax
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x46dd79
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x1c]
push 0xcc0020
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x30]
push edx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x3c]
push ecx
push edi
inc eax
push eax
mov eax, dword [ebp - 0x10]
push 1
add eax, edx
push eax
mov eax, dword [ebp - 0x14]
add eax, ecx
push eax
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x46dd79
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
add dword [ebp - 0x2c], 2
sub dword [ebp - 0x1c], 2
sub dword [ebp - 0x18], 2
mov ebx, dword [ebp - 0x48]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp eax, ebx
jb 0x46e6a6
add ebx, 0xf
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x20]
jmp 0x46e482
push 4
push esi
call dword [sym.imp.GDI32.dll_SetStretchBltMode]
push 0xcc0020
push dword [ebx + 0x28]
push dword [ebx + 0x24]
push 0
push 0
push edi
push dword [ebp - 0x28]
push dword [ebp - 0x38]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push esi
call dword [sym.imp.GDI32.dll_StretchBlt]
jmp 0x46de0f