Function at 0x609510
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff74
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 4], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x60a065
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [ebx + 0x28c], 1
je 0x60968a
cmp byte [ebx + 0x265], 0
jne 0x60968a
mov eax, dword [ebx + 0x270]
mov esi, dword [eax + 0x38]
test esi, esi
je 0x60968a
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x2c]
cmp eax, dword [ebx + 0x48]
jne 0x60968a
mov eax, dword [ebx + 0x270]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
call dword [edx + 0x20]
cmp eax, dword [ebx + 0x4c]
jne 0x60968a
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.006091c4
cmp byte [ebx + 0x264], 0
jne 0x6095c4
lea edx, [ebp - 0x58]
mov eax, ebx
call fcn.0060907c
lea eax, [ebp - 0x58]
xor edx, edx
call fcn.005ca27c
sub eax, 2
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x20]
add eax, 2
push eax
mov eax, dword [ebp - 0x10]
pop edx
mov ecx, edx
cdq
idiv ecx
mov esi, eax
jmp 0x6095f0
lea edx, [ebp - 0x58]
mov eax, ebx
call fcn.0060907c
lea eax, [ebp - 0x58]
xor edx, edx
call fcn.005ca290
sub eax, 2
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x1c]
add eax, 2
push eax
mov eax, dword [ebp - 0x14]
pop edx
mov ecx, edx
cdq
idiv ecx
mov esi, eax
cmp esi, 1
jle 0x609659
mov eax, ebx
call fcn.004c9838
mov edi, eax
mov eax, ebx
call fcn.004c9870
imul edi, eax
test edi, edi
je 0x609659
mov eax, ebx
call fcn.004c9838
mov edi, eax
mov eax, ebx
call fcn.004c9800
sub edi, eax
mov dword [ebp - 0x5c], edi
fild dword [ebp - 0x5c]
mov dword [ebp - 0x60], esi
fild dword [ebp - 0x60]
call fcn.00403b64
fstp xword [ebp - 0x6c]
wait
mov eax, ebx
call fcn.004c9870
mov esi, eax
mov eax, ebx
call fcn.004c9800
sub esi, eax
mov dword [ebp - 0x70], esi
fild dword [ebp - 0x70]
fld xword [ebp - 0x6c]
fmulp st(1)
call fcn.004035a8
mov esi, eax
jmp 0x60965b
xor esi, esi
cmp esi, dword [ebx + 0x268]
jne 0x609684
mov eax, ebx
call fcn.004c9870
mov edi, eax
mov eax, ebx
call fcn.004c9800
sub edi, eax
mov eax, ebx
call fcn.004c9838
cmp edi, eax
jne 0x60a04f
mov dword [ebx + 0x268], esi
mov eax, dword [ebx + 0x270]
call fcn.005c7a5c
push 0
mov eax, dword [ebx + 0x4c]
push eax
lea eax, [ebp - 0x58]
push eax
mov ecx, dword [ebx + 0x48]
xor edx, edx
xor eax, eax
call fcn.0041d9f4
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
mov edx, dword [ebx + 0x44]
mov eax, dword [ebx + 0x40]
call fcn.0041d9cc
lea eax, [ebp - 0x78]
push eax
mov eax, dword [ebx + 0x270]
mov eax, dword [eax + 0x38]
push eax
push 0
push 0
push 0
lea edx, [ebp - 0x8c]
mov esi, dword [ebx + 0x270]
mov eax, esi
call fcn.005c6fdc
lea edx, [ebp - 0x8c]
mov cl, 1
mov eax, esi
call fcn.005b1ec0
mov eax, ebx
call fcn.004c9838
mov esi, eax
mov eax, ebx
call fcn.004c9800
cmp esi, eax
jle 0x60a04f
cmp dword [ebx + 0x274], 0
je 0x609724
lea eax, [ebp - 4]
mov edx, dword [ebx + 0x274]
call fcn.00405694
jmp 0x609749
cmp byte [ebx + 0x264], 1
jne 0x60973c
lea eax, [ebp - 4]
mov edx, 0x60a07c
call fcn.00405694
jmp 0x609749
lea eax, [ebp - 4]
mov edx, 0x60a090
call fcn.00405694
mov eax, dword [ebx + 0x270]
call fcn.005c79d0
mov edx, dword [ebp - 4]
call fcn.005d6500
mov dword [ebp - 8], eax
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebx + 0x270]
mov eax, dword [eax + 0x38]
xor ecx, ecx
xor edx, edx
call fcn.005ca63c
lea edx, [ebp - 0x48]
mov eax, ebx
call fcn.0060a09c
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x48]
jle 0x60a04f
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x44]
jle 0x60a04f
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.006091c4
mov edi, dword [ebp - 0x20]
cmp edi, 2
jl 0x60a04f
cmp dword [ebp - 0x1c], 2
jl 0x60a04f
mov edx, dword [ebp - 0x1c]
mov eax, edi
call fcn.005b9b00
mov dword [ebp - 0x18], eax
cmp byte [ebx + 0x28c], 1
jne 0x609979
mov dword [ebp - 0xc], 1
cmp byte [ebx + 0x264], 0
jne 0x6098ad
xor edi, edi
mov esi, dword [ebp - 0x20]
add esi, dword [ebp - 0xc]
imul esi, edi
add esi, dword [ebp - 0x48]
mov eax, dword [ebx + 0x48]
cmp esi, eax
jle 0x6097fc
sub esi, eax
push 1
push 0
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041d9f4
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
mov edx, dword [ebp - 0x44]
mov eax, esi
call fcn.0041d9cc
lea eax, [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebx + 0x270]
call fcn.005c79d0
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [ebp - 0x38]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
call fcn.005b19c0
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.0043a318
call fcn.00435470
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov eax, dword [ebp - 0x44]
push eax
push esi
mov eax, dword [ebx + 0x270]
mov eax, dword [eax + 0x38]
call fcn.0043a318
call fcn.00435470
push eax
call sub.gdi32.dll_BitBlt
inc edi
cmp edi, 5
jne 0x6097e7
jmp 0x60a047
xor edi, edi
mov eax, dword [ebp - 0x1c]
mov edx, eax
add edx, dword [ebp - 0xc]
imul edx, edi
mov esi, dword [ebp - 0x3c]
sub esi, edx
sub esi, eax
test esi, esi
jge 0x6098c8
add esi, dword [ebx + 0x4c]
push 1
push 0
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041d9f4
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
mov edx, esi
mov eax, dword [ebp - 0x48]
call fcn.0041d9cc
lea eax, [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebx + 0x270]
call fcn.005c79d0
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [ebp - 0x38]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
call fcn.005b19c0
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.0043a318
call fcn.00435470
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
push esi
mov eax, dword [ebp - 0x48]
push eax
mov eax, dword [ebx + 0x270]
mov eax, dword [eax + 0x38]
call fcn.0043a318
call fcn.00435470
push eax
call sub.gdi32.dll_BitBlt
inc edi
cmp edi, 5
jne 0x6098af
jmp 0x60a047
cmp byte [ebx + 0x264], 0
jne 0x609ce4
cmp byte [ebx + 0x265], 0
je 0x609a50
lea eax, [ebp - 0x48]
xor edx, edx
call fcn.005ca27c
mov edx, eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x40]
push 1
push 0
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041d9f4
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
mov edi, dword [ebp - 0x44]
mov edx, edi
mov esi, dword [ebp - 0x48]
mov eax, esi
call fcn.0041d9cc
lea eax, [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebx + 0x270]
call fcn.005c79d0
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [ebp - 0x38]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
call fcn.005b19c0
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.0043a318
call fcn.00435470
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
push edi
push esi
mov eax, dword [ebx + 0x270]
mov eax, dword [eax + 0x38]
call fcn.0043a318
call fcn.00435470
push eax
call sub.gdi32.dll_BitBlt
jmp 0x60a047
mov eax, ebx
call fcn.004c9838
mov esi, eax
mov eax, ebx
call fcn.004c9870
imul esi, eax
test esi, esi
je 0x60a047
lea edx, [ebp - 0x58]
mov eax, ebx
call fcn.0060907c
lea eax, [ebp - 0x58]
xor edx, edx
call fcn.005ca27c
sub eax, 2
mov dword [ebp - 0x10], eax
mov eax, edi
add eax, 2
push eax
mov eax, dword [ebp - 0x10]
pop edx
mov ecx, edx
cdq
idiv ecx
mov esi, eax
cmp esi, 1
jle 0x60a047
mov eax, esi
imul edi
push eax
mov eax, dword [ebp - 0x10]
pop edx
sub eax, edx
mov edx, esi
dec edx
mov ecx, edx
cdq
idiv ecx
mov dword [ebp - 0xc], eax
mov eax, ebx
call fcn.004c9838
mov edi, eax
mov eax, ebx
call fcn.004c9800
sub edi, eax
mov dword [ebp - 0x5c], edi
fild dword [ebp - 0x5c]
mov dword [ebp - 0x60], esi
fild dword [ebp - 0x60]
call fcn.00403b64
fstp xword [ebp - 0x6c]
wait
mov eax, ebx
call fcn.004c9870
mov esi, eax
mov eax, ebx
call fcn.004c9800
sub esi, eax
mov dword [ebp - 0x70], esi
fild dword [ebp - 0x70]
fld xword [ebp - 0x6c]
fmulp st(1)
call fcn.004035a8
mov esi, eax
mov eax, esi
dec eax
test eax, eax
jl 0x609bd1
inc eax
mov dword [ebp - 0x24], eax
xor edi, edi
push 1
push 0
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041d9f4
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xc]
imul edi
add eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
call fcn.0041d9cc
lea eax, [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebx + 0x270]
call fcn.005c79d0
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [ebp - 0x38]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
call fcn.005b19c0
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.0043a318
call fcn.00435470
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov eax, dword [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xc]
imul edi
add eax, dword [ebp - 0x48]
push eax
mov eax, dword [ebx + 0x270]
mov eax, dword [eax + 0x38]
call fcn.0043a318
call fcn.00435470
push eax
call sub.gdi32.dll_BitBlt
inc edi
dec dword [ebp - 0x24]
jne 0x609b11
test esi, esi
jle 0x60a047
mov eax, ebx
call fcn.004c9870
push eax
mov eax, ebx
call fcn.004c9838
pop edx
cmp edx, eax
jne 0x60a047
mov eax, esi
dec eax
mov edi, dword [ebp - 0x20]
mov edx, edi
add edx, dword [ebp - 0xc]
imul edx
mov edx, dword [ebp - 0x10]
sub edx, eax
sub edx, edi
cmp edx, 3
jle 0x60a047
mov edx, esi
dec edx
mov eax, dword [ebp - 0x20]
mov edi, eax
add edi, dword [ebp - 0xc]
imul edx, edi
push edx
mov edx, dword [ebp - 0x10]
pop ecx
sub edx, ecx
sub edx, eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x40]
push 1
push 0
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041d9f4
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
mov eax, edi
imul esi
add eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
call fcn.0041d9cc
lea eax, [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebx + 0x270]
call fcn.005c79d0
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [ebp - 0x38]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
call fcn.005b19c0
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.0043a318
call fcn.00435470
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov eax, dword [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xc]
imul esi
add eax, dword [ebp - 0x48]
push eax
mov eax, dword [ebx + 0x270]
mov eax, dword [eax + 0x38]
call fcn.0043a318
call fcn.00435470
push eax
call sub.gdi32.dll_BitBlt
jmp 0x60a047
cmp byte [ebx + 0x265], 0
je 0x609dae
lea eax, [ebp - 0x48]
xor edx, edx
call fcn.005ca290
mov edx, eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 1
push 0
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041d9f4
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
mov edi, dword [ebp - 0x44]
mov edx, edi
mov esi, dword [ebp - 0x48]
mov eax, esi
call fcn.0041d9cc
lea eax, [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebx + 0x270]
call fcn.005c79d0
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [ebp - 0x38]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
call fcn.005b19c0
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.0043a318
call fcn.00435470
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
push edi
push esi
mov eax, dword [ebx + 0x270]
mov eax, dword [eax + 0x38]
call fcn.0043a318
call fcn.00435470
push eax
call sub.gdi32.dll_BitBlt
jmp 0x60a047
mov eax, ebx
call fcn.004c9838
mov esi, eax
mov eax, ebx
call fcn.004c9870
imul esi, eax
test esi, esi
je 0x60a047
lea edx, [ebp - 0x58]
mov eax, ebx
call fcn.0060907c
lea eax, [ebp - 0x58]
xor edx, edx
call fcn.005ca290
sub eax, 2
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x1c]
add eax, 2
push eax
mov eax, dword [ebp - 0x14]
pop edx
mov ecx, edx
cdq
idiv ecx
mov esi, eax
cmp esi, 1
jle 0x60a047
mov eax, esi
imul dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x14]
pop edx
sub eax, edx
mov edx, esi
dec edx
mov ecx, edx
cdq
idiv ecx
mov dword [ebp - 0xc], eax
mov eax, ebx
call fcn.004c9838
mov edi, eax
mov eax, ebx
call fcn.004c9800
sub edi, eax
mov dword [ebp - 0x5c], edi
fild dword [ebp - 0x5c]
mov dword [ebp - 0x60], esi
fild dword [ebp - 0x60]
call fcn.00403b64
fstp xword [ebp - 0x6c]
wait
mov eax, ebx
call fcn.004c9870
mov esi, eax
mov eax, ebx
call fcn.004c9800
sub esi, eax
mov dword [ebp - 0x70], esi
fild dword [ebp - 0x70]
fld xword [ebp - 0x6c]
fmulp st(1)
call fcn.004035a8
mov esi, eax
mov eax, esi
dec eax
test eax, eax
jl 0x609f3b
inc eax
mov dword [ebp - 0x24], eax
xor edi, edi
push 1
push 0
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041d9f4
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xc]
imul edi
mov edx, dword [ebp - 0x3c]
sub edx, eax
sub edx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x78]
mov eax, dword [ebp - 0x48]
call fcn.0041d9cc
lea eax, [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebx + 0x270]
call fcn.005c79d0
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [ebp - 0x38]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
call fcn.005b19c0
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.0043a318
call fcn.00435470
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xc]
imul edi
mov edx, dword [ebp - 0x3c]
sub edx, eax
sub edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x48]
push eax
mov eax, dword [ebx + 0x270]
mov eax, dword [eax + 0x38]
call fcn.0043a318
call fcn.00435470
push eax
call sub.gdi32.dll_BitBlt
inc edi
dec dword [ebp - 0x24]
jne 0x609e71
test esi, esi
jle 0x60a047
mov eax, ebx
call fcn.004c9870
push eax
mov eax, ebx
call fcn.004c9838
pop edx
cmp edx, eax
jne 0x60a047
mov eax, esi
dec eax
mov edi, dword [ebp - 0x1c]
mov edx, edi
add edx, dword [ebp - 0xc]
imul edx
mov edx, dword [ebp - 0x14]
sub edx, eax
sub edx, edi
cmp edx, 3
jle 0x60a047
lea edx, [ebp - 0x58]
mov eax, ebx
call fcn.0060907c
lea eax, [ebp - 0x58]
xor edx, edx
call fcn.005ca290
mov edx, eax
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xc]
imul eax, esi
sub edx, eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 1
push 0
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041d9f4
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
call fcn.0041d9cc
lea eax, [ebp - 0x78]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebx + 0x270]
call fcn.005c79d0
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [ebp - 0x38]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
call fcn.005b19c0
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.0043a318
call fcn.00435470
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov eax, dword [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x48]
push eax
mov eax, dword [ebx + 0x270]
mov eax, dword [eax + 0x38]
call fcn.0043a318
call fcn.00435470
push eax
call sub.gdi32.dll_BitBlt
lea eax, [ebp - 0x18]
call fcn.0041069c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x60a06c
lea eax, [ebp - 4]
call fcn.004055fc
ret