Function at 0x446870
Capabilities:
Capture screenshot
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x134
mov eax, dword [0x4f90f0]
mov dl, 1
cmp dl, byte [ecx + 1]
push ebx
sbb ebx, ebx
mov dword [esp + 0x88], ecx
and ebx, dword [0x4f90f4]
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], ebx
push esi
push edi
test eax, eax
je 0x4468b9
push 1
push 0
push 0xffffffffffffffff
push 0
mov ecx, eax
call fcn.00495fe0
test ebx, ebx
je 0x4468cc
push 1
push 0
push 0xffffffffffffffff
push 0
mov ecx, ebx
call fcn.00495fe0
xorps xmm0, xmm0
lea edx, [esp + 0x80]
push 0
lea ecx, [esp + 0x80]
movlpd qword [esp + 0x80], xmm0
call fcn.004931d0
mov ecx, dword [esp + 0x80]
add esp, 4
mov eax, dword [esp + 0x80]
xor ebx, ebx
mov edi, dword [ebp + 0x18]
add dword [ebp + 8], ecx
add dword [ebp + 0xc], eax
add dword [ebp + 0x10], ecx
add dword [ebp + 0x14], eax
push 0x2e
push edi
mov dword [esp + 0x20], 0
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0x40], 0
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x24], ebx
call fcn.004ad15a
mov esi, eax
add esp, 8
test esi, esi
je 0x446991
add esi, 2
push 0x4e988c
push esi
call fcn.004af78f
add esp, 8
test eax, eax
je 0x446979
push 0x4e9894
push esi
call fcn.004af78f
add esp, 8
test eax, eax
je 0x446979
push 0x4e989c
push esi
call fcn.004af78f
add esp, 8
test eax, eax
jne 0x446991
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x31
call esi
mov ebx, eax
push 0x32
mov dword [esp + 0x18], ebx
call esi
mov dword [esp + 0x1c], eax
mov esi, edi
movzx eax, word [esi]
cmp eax, 0x20
je 0x4469a0
cmp eax, 9
jne 0x4469a5
add esi, 2
jmp 0x446993
cmp eax, 0x2a
jne 0x446c4f
nop
movzx eax, word [esi + 2]
add esi, 2
push eax
call fcn.004b7561
movzx eax, ax
add esp, 4
cmp eax, 0x48
je 0x446bf9
cmp eax, 0x57
je 0x446bbf
push 4
push str.Icon
push esi
call fcn.004af905
add esp, 0xc
test eax, eax
jne 0x446a1f
add esi, 8
mov ecx, esi
call fcn.00410ac0
test al, al
je 0x446a0d
push 0x10
push 0
push esi
call fcn.004b2a5a
add esp, 0xc
mov dword [esp + 0x38], eax
jmp 0x446adf
push esi
call fcn.004b2533
add esp, 4
mov dword [esp + 0x38], eax
jmp 0x446adf
push 5
push str.Trans
push esi
call fcn.004af905
add esp, 0xc
test eax, eax
jne 0x446b78
push 0x1f
add esi, 0xa
lea eax, [esp + 0x104]
push esi
push eax
call fcn.004b3100
xor eax, eax
lea ebx, [esp + 0x10c]
mov word [esp + 0x14a], ax
add esp, 0xc
mov ax, word [esp + 0x100]
test ax, ax
je 0x446aac
movzx edi, ax
nop
mov ecx, 0x4e2ac4
mov edx, 0x20
nop word [eax + eax]
cmp di, dx
je 0x446aa3
movzx eax, word [ecx + 2]
add ecx, 2
mov edx, eax
test ax, ax
jne 0x446a80
movzx eax, word [ebx + 2]
add ebx, 2
mov edi, eax
test ax, ax
jne 0x446a70
jmp 0x446aac
test ebx, ebx
je 0x446aac
xor eax, eax
mov word [ebx], ax
lea ecx, [esp + 0x100]
call fcn.00492fb0
mov ecx, eax
cmp ecx, 0xffffffff
jne 0x446b56
push 0x10
lea eax, [esp + 0x104]
push 0
push eax
call fcn.004b2a5a
add esp, 0xc
mov dword [esp + 0x20], eax
mov ebx, dword [esp + 0x14]
test esi, esi
je 0x446b25
movzx eax, word [esi]
test ax, ax
je 0x446b25
mov edi, eax
nop dword [eax]
mov eax, 0x4e2ac4
mov edx, 0x20
nop word [eax + eax]
cmp di, dx
je 0x446c2f
movzx ecx, word [eax + 2]
add eax, 2
mov edx, ecx
test cx, cx
jne 0x446b00
movzx eax, word [esi + 2]
add esi, 2
mov edi, eax
test ax, ax
jne 0x446af0
mov eax, dword [0x4f48cc]
test byte [eax + 0x100], 1
jne 0x4475d8
mov ecx, dword [0x4f78d0]
push 1
push 0
push 0xffffffffffffffff
push 0x4e2b24
call fcn.00495fe0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
movzx ebx, cl
movzx eax, cx
shl ebx, 8
shr eax, 8
or ebx, eax
shr ecx, 0x10
shl ebx, 8
movzx eax, cl
or ebx, eax
mov dword [esp + 0x20], ebx
jmp 0x446adb
mov ecx, esi
call fcn.00410ac0
test al, al
je 0x446b92
push 0x10
push 0
push esi
call fcn.004b2a5a
add esp, 0xc
jmp 0x446b9b
push esi
call fcn.004b2533
add esp, 4
xor ebx, ebx
test eax, eax
cmovns ebx, eax
mov dword [esp + 0x18], ebx
cmp ebx, 0xff
jle 0x446adb
mov dword [esp + 0x18], 0xff
jmp 0x446adb
lea edi, [esi + 2]
mov ecx, edi
call fcn.00410ac0
test al, al
je 0x446be5
push 0x10
push 0
push edi
call fcn.004b2a5a
mov ebx, eax
add esp, 0xc
mov dword [esp + 0x14], ebx
jmp 0x446adf
push edi
call fcn.004b2533
mov ebx, eax
add esp, 4
mov dword [esp + 0x14], ebx
jmp 0x446adf
lea edi, [esi + 2]
mov ecx, edi
call fcn.00410ac0
test al, al
je 0x446c1d
push 0x10
push 0
push edi
call fcn.004b2a5a
add esp, 0xc
mov dword [esp + 0x1c], eax
jmp 0x446adf
push edi
call fcn.004b2533
add esp, 4
mov dword [esp + 0x1c], eax
jmp 0x446adf
lea edi, [esi + 2]
mov esi, edi
movzx eax, word [esi]
cmp eax, 0x20
je 0x446c41
cmp eax, 9
jne 0x446c46
add esi, 2
jmp 0x446c34
cmp eax, 0x2a
je 0x4469b0
push 0
lea eax, [esp + 0x2b]
mov edx, ebx
push eax
push 0
push dword [esp + 0x44]
lea eax, [esp + 0x3c]
mov ecx, edi
push eax
push dword [esp + 0x30]
call fcn.004933c0
mov ebx, eax
add esp, 0x18
mov dword [esp + 0x50], ebx
test ebx, ebx
je 0x446b25
mov esi, dword [sym.imp.USER32.dll_GetDC]
push 0
call esi
mov dword [esp + 0x4c], eax
test eax, eax
jne 0x446cb9
cmp byte [esp + 0x27], al
jne 0x446b25
cmp dword [esp + 0x2c], 1
push ebx
jne 0x446cae
call dword [sym.imp.USER32.dll_DestroyIcon]
jmp 0x446b25
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x446b25
mov edi, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
xor ecx, ecx
cmp dword [esp + 0x2c], 1
mov dword [esp + 0x88], 0
mov dword [esp + 0x74], ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x8c], ecx
mov byte [esp + 0x13], cl
jne 0x446e97
lea eax, [esp + 0xd8]
push eax
push ebx
call dword [sym.imp.USER32.dll_GetIconInfo]
test eax, eax
je 0x446d41
mov edx, dword [esp + 0x4c]
lea eax, [esp + 0x26]
mov ecx, dword [esp + 0xe4]
push 1
push eax
lea eax, [esp + 0x6c]
push eax
lea eax, [esp + 0x54]
push eax
call fcn.00445d50
mov ebx, dword [sym.imp.GDI32.dll_DeleteObject]
add esp, 0x10
mov dword [esp + 0x34], eax
push dword [esp + 0xe8]
call ebx
push dword [esp + 0xe4]
call ebx
xor ebx, ebx
push ebx
call esi
mov esi, eax
push esi
mov dword [esp + 0x6c], esi
call edi
mov edi, eax
test edi, edi
je 0x446e6e
lea eax, [esp + 0xec]
push eax
push dword [esp + 0x54]
call dword [sym.imp.USER32.dll_GetIconInfo]
test eax, eax
je 0x446e67
lea eax, [esp + 0xc0]
push eax
push 0x18
push dword [esp + 0x104]
call dword [sym.imp.GDI32.dll_GetObjectW]
test eax, eax
je 0x446e4d
push dword [esp + 0xc8]
push dword [esp + 0xc8]
push esi
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov ebx, eax
test ebx, ebx
je 0x446e4d
push ebx
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x54], eax
test eax, eax
je 0x446e4d
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0xb8], ecx
mov ecx, dword [esp + 0xc8]
push 0xff000000
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xc0], ecx
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov esi, eax
lea eax, [esp + 0xb0]
push esi
push eax
push edi
call dword [sym.imp.USER32.dll_FillRect]
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
push 3
push 0
push 0
push dword [esp + 0xd4]
push dword [esp + 0xd4]
push dword [esp + 0x64]
push 0
push 0
push edi
call dword [sym.imp.USER32.dll_DrawIconEx]
push dword [esp + 0x54]
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov esi, dword [esp + 0x68]
push dword [esp + 0xfc]
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [esp + 0xf8]
call dword [sym.imp.GDI32.dll_DeleteObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
push esi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
push dword [esp + 0x50]
call dword [sym.imp.USER32.dll_DestroyIcon]
mov dword [esp + 0x50], ebx
test ebx, ebx
je 0x446b25
mov edi, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov eax, dword [esp + 0x4c]
push 8
lea ecx, [esp + 0x2a]
mov edx, eax
push ecx
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [esp + 0x54]
push ecx
mov ecx, ebx
call fcn.00445d50
add esp, 0x10
mov dword [esp + 0x30], eax
test eax, eax
je 0x44755f
mov ebx, dword [ebp + 0x10]
mov esi, dword [ebp + 0x14]
sub ebx, dword [ebp + 8]
sub esi, dword [ebp + 0xc]
inc ebx
push dword [esp + 0x4c]
inc esi
call edi
mov edi, eax
mov dword [esp + 0x88], edi
test edi, edi
je 0x44755f
push esi
push ebx
push dword [esp + 0x54]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [esp + 0x74], eax
test eax, eax
je 0x44755f
push eax
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x8c], eax
test eax, eax
je 0x44755f
push 0xcc0020
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [esp + 0x58]
push esi
push ebx
push 0
push 0
push edi
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x44755f
mov ecx, dword [esp + 0x74]
lea eax, [esp + 0x3f]
push 8
push eax
lea eax, [esp + 0x74]
mov edx, edi
push eax
lea eax, [esp + 0x50]
push eax
call fcn.00445d50
mov edx, eax
add esp, 0x10
mov dword [esp + 0x14], edx
test edx, edx
je 0x44755f
mov ebx, dword [esp + 0x44]
mov eax, ebx
mov edi, dword [esp + 0x48]
imul edi, dword [esp + 0x64]
imul eax, dword [esp + 0x6c]
cmp byte [esp + 0x26], 0
mov dword [esp + 0x38], edi
mov dword [esp + 0x40], eax
jne 0x446f93
cmp byte [esp + 0x3f], 0
je 0x4470d6
mov eax, dword [esp + 0x20]
mov esi, eax
and esi, 0xf8f8f8
cmp eax, 0xffffffff
cmove esi, eax
mov eax, dword [esp + 0x40]
xor ecx, ecx
test eax, eax
jle 0x44703c
cmp eax, 0x10
jb 0x44702b
and eax, reloc.OLEAUT32.dll_SafeArrayDestroy
jns 0x446fc4
dec eax
or eax, 0xfffffff0
inc eax
mov edx, dword [esp + 0x40]
movaps xmm2, xmmword [0x4ee9f0]
sub edx, eax
mov eax, dword [esp + 0x14]
add eax, 0x20
nop dword [eax + eax]
movups xmm0, xmmword [eax - 0x20]
lea eax, [eax + 0x40]
add ecx, 0x10
movaps xmm1, xmm2
pand xmm1, xmm0
movups xmmword [eax - 0x60], xmm1
movaps xmm1, xmm2
movups xmm0, xmmword [eax - 0x50]
pand xmm0, xmm2
movups xmmword [eax - 0x50], xmm0
movups xmm0, xmmword [eax - 0x40]
pand xmm1, xmm0
movups xmmword [eax - 0x40], xmm1
movaps xmm1, xmm2
movups xmm0, xmmword [eax - 0x30]
pand xmm1, xmm0
movups xmmword [eax - 0x30], xmm1
cmp ecx, edx
jl 0x446fe0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x40]
cmp ecx, eax
jge 0x44703c
nop
and dword [edx + ecx*4], 0xf8f8f8
inc ecx
cmp ecx, eax
jl 0x447030
xor ecx, ecx
mov edx, esi
mov dword [esp + 0x20], edx
test edi, edi
jle 0x4470f2
cmp edi, 0x10
jb 0x4470b4
mov eax, edi
and eax, reloc.OLEAUT32.dll_SafeArrayDestroy
jns 0x44705f
dec eax
or eax, 0xfffffff0
inc eax
movaps xmm2, xmmword [0x4ee9f0]
mov edx, edi
sub edx, eax
mov eax, dword [esp + 0x30]
add eax, 0x20
movups xmm0, xmmword [eax - 0x20]
lea eax, [eax + 0x40]
add ecx, 0x10
movaps xmm1, xmm2
pand xmm1, xmm0
movups xmmword [eax - 0x60], xmm1
movaps xmm1, xmm2
movups xmm0, xmmword [eax - 0x50]
pand xmm0, xmm2
movups xmmword [eax - 0x50], xmm0
movups xmm0, xmmword [eax - 0x40]
pand xmm1, xmm0
movups xmmword [eax - 0x40], xmm1
movaps xmm1, xmm2
movups xmm0, xmmword [eax - 0x30]
pand xmm1, xmm0
movups xmmword [eax - 0x30], xmm1
cmp ecx, edx
jl 0x447071
mov eax, dword [esp + 0x30]
mov edx, esi
mov dword [esp + 0x20], edx
cmp ecx, edi
jge 0x4470de
and dword [eax + ecx*4], 0xf8f8f8
inc ecx
cmp ecx, edi
jl 0x4470c2
mov edx, esi
mov dword [esp + 0x20], edx
jmp 0x4470de
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x30]
test edi, edi
jle 0x4470f2
add eax, 3
mov ecx, edi
mov byte [eax], 0
lea eax, [eax + 4]
sub ecx, 1
jne 0x4470e7
cmp dword [esp + 0x18], 1
jge 0x44725b
mov esi, dword [esp + 0x40]
test esi, esi
jle 0x44711b
mov eax, dword [esp + 0x14]
mov ecx, esi
add eax, 3
nop
mov byte [eax], 0
lea eax, [eax + 4]
sub ecx, 1
jne 0x447110
xor edi, edi
mov dword [esp + 0x28], edi
test esi, esi
jle 0x44753f
mov eax, dword [esp + 0x30]
xor esi, esi
mov dword [esp + 0x18], esi
mov eax, dword [eax]
mov dword [esp + 0x1c], eax
nop dword [eax]
mov ecx, dword [esp + 0x14]
cmp dword [esi + ecx], eax
je 0x44715e
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x447156
cmp dword [ecx], 0
jne 0x44715e
cmp eax, edx
jne 0x447240
mov eax, edi
mov ecx, dword [esp + 0x6c]
cdq
idiv ebx
sub ecx, eax
cmp dword [esp + 0x64], ecx
jg 0x447238
mov eax, ebx
sub eax, edx
cmp dword [esp + 0x48], eax
jg 0x447238
xor edx, edx
mov byte [esp + 0x13], 1
xor ebx, ebx
mov dword [esp + 0x58], ebx
cmp dword [esp + 0x38], edx
jle 0x44747e
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x5c], eax
mov eax, esi
mov esi, dword [esp + 0x18]
mov dword [esp + 0x2c], esi
mov esi, dword [esp + 0x30]
sub esi, ecx
mov byte [esp + 0x13], 1
mov dword [esp + 0x54], esi
nop dword [eax]
mov ebx, dword [esp + 0x14]
mov esi, dword [esi + ecx]
cmp dword [eax + ebx], esi
mov ebx, dword [esp + 0x58]
je 0x4471e2
cmp dword [esp + 0x34], 0
je 0x4471dc
cmp dword [ecx], 0
jne 0x4471e2
cmp esi, dword [esp + 0x20]
jne 0x44722c
inc edx
cmp edx, dword [esp + 0x48]
jge 0x4471ef
inc edi
add eax, 4
jmp 0x447214
mov edi, dword [esp + 0x44]
xor edx, edx
mov esi, dword [esp + 0x2c]
lea eax, [edi*4]
add esi, eax
mov eax, dword [esp + 0x5c]
add eax, edi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x5c], eax
mov edi, eax
mov eax, esi
inc ebx
add ecx, 4
mov dword [esp + 0x58], ebx
cmp ebx, dword [esp + 0x38]
jge 0x44747e
mov esi, dword [esp + 0x54]
jmp 0x4471c0
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x28]
mov ebx, dword [esp + 0x44]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
inc edi
add esi, 4
mov dword [esp + 0x28], edi
mov dword [esp + 0x18], esi
cmp edi, dword [esp + 0x40]
jl 0x447140
jmp 0x44753f
xor edi, edi
mov dword [esp + 0x28], edi
cmp dword [esp + 0x40], edi
jle 0x44753f
xor esi, esi
mov dword [esp + 0x2c], esi
mov eax, edi
mov ecx, dword [esp + 0x6c]
cdq
idiv ebx
sub ecx, eax
cmp dword [esp + 0x64], ecx
jg 0x447529
mov eax, ebx
sub eax, edx
cmp dword [esp + 0x48], eax
jg 0x447529
xor eax, eax
mov byte [esp + 0x13], 1
mov dword [esp + 0x78], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], edi
cmp dword [esp + 0x38], eax
jle 0x44747e
mov edx, dword [esp + 0x30]
lea eax, [ebx*4]
mov ecx, dword [esp + 0x2c]
mov esi, edx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x34]
sub eax, edx
mov byte [esp + 0x13], 1
mov dword [esp + 0x68], edi
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x84], ecx
mov dword [esp + 0xac], eax
nop word [eax + eax]
movzx eax, word [esi]
mov dh, byte [esi + 2]
mov ebx, eax
mov dword [esp + 0x1c], eax
mov al, dh
sub al, byte [esp + 0x18]
shr ebx, 8
movzx eax, al
mov dword [esp + 0x60], ebx
xor ebx, ebx
movzx ecx, dh
cmp dword [esp + 0x18], ecx
mov dword [esp + 0x70], 0
cmovle ebx, eax
mov dword [esp + 0x9c], ebx
mov ebx, dword [esp + 0x60]
mov al, bl
sub al, byte [esp + 0x18]
movzx edi, bl
cmp dword [esp + 0x18], edi
mov dword [esp + 0x94], edi
mov edi, dword [esp + 0x70]
movzx eax, al
cmovle edi, eax
mov dword [esp + 0x60], 0
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x70], edi
movzx edi, al
sub al, byte [esp + 0x18]
cmp dword [esp + 0x18], edi
mov dword [esp + 0x98], edi
mov edi, dword [esp + 0x60]
movzx eax, al
cmovle edi, eax
mov eax, 0xff
sub eax, ecx
mov dword [esp + 0x60], edi
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x94]
cmp ecx, eax
jle 0x447394
or dh, 0xff
jmp 0x447396
add dh, cl
mov eax, 0xff
sub eax, edi
cmp ecx, eax
jle 0x4473a6
or bl, 0xff
jmp 0x4473a8
add bl, cl
mov eax, 0xff
sub eax, dword [esp + 0x98]
cmp ecx, eax
jle 0x4473bf
mov byte [esp + 0x1c], 0xff
jmp 0x4473c3
add byte [esp + 0x1c], cl
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x5c]
mov dl, byte [edi + eax + 2]
movzx ecx, word [edi + eax]
mov eax, ecx
shr eax, 8
cmp dl, byte [esp + 0x9c]
jb 0x4473fd
cmp dl, dh
ja 0x4473fd
cmp al, byte [esp + 0x70]
jb 0x4473fd
cmp al, bl
ja 0x4473fd
cmp cl, byte [esp + 0x60]
jb 0x4473fd
mov eax, dword [esp + 0x1c]
cmp cl, al
jbe 0x44741d
cmp dword [esp + 0x34], 0
je 0x447411
mov eax, dword [esp + 0xac]
cmp dword [eax + esi], 0
jne 0x44741d
mov eax, dword [esp + 0x20]
cmp dword [esi], eax
jne 0x44751d
mov eax, dword [esp + 0x78]
inc eax
mov dword [esp + 0x78], eax
cmp eax, dword [esp + 0x48]
jge 0x447439
inc dword [esp + 0x58]
add edi, 4
mov dword [esp + 0x5c], edi
jmp 0x447468
mov ecx, dword [esp + 0x84]
xor eax, eax
add ecx, dword [esp + 0xa0]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x68]
add eax, dword [esp + 0x44]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x68], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], ecx
mov eax, dword [esp + 0x54]
add esi, 4
inc eax
mov dword [esp + 0x54], eax
cmp eax, dword [esp + 0x38]
jl 0x4472f0
mov ebx, dword [esp + 0x28]
push dword [esp + 0x4c]
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp byte [esp + 0x27], 0
mov edi, dword [sym.imp.GDI32.dll_DeleteObject]
jne 0x4474a1
push dword [esp + 0x50]
call edi
mov esi, dword [esp + 0x88]
test esi, esi
je 0x4474c6
mov eax, dword [esp + 0x8c]
test eax, eax
je 0x4474bf
push eax
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [esp + 0x74]
test eax, eax
je 0x4474d1
push eax
call edi
mov eax, dword [esp + 0x30]
test eax, eax
je 0x4474e2
push eax
call fcn.004b113e
add esp, 4
mov eax, dword [esp + 0x34]
test eax, eax
je 0x4474f3
push eax
call fcn.004b113e
add esp, 4
mov eax, dword [esp + 0x14]
test eax, eax
je 0x446b25
push eax
call fcn.004b113e
add esp, 4
cmp byte [esp + 0x13], 0
jne 0x44756b
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
mov edi, dword [esp + 0x28]
mov ebx, dword [esp + 0x44]
mov esi, dword [esp + 0x2c]
inc edi
add esi, 4
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], esi
cmp edi, dword [esp + 0x40]
jl 0x447271
mov ecx, dword [0x4f78d0]
push 1
push 0
push 0xffffffffffffffff
push 0x4e25ec
call fcn.00495fe0
mov byte [esp + 0x13], 0
jmp 0x44747e
mov ebx, dword [esp + 0x90]
jmp 0x447482
mov ecx, dword [esp + 0xa4]
mov esi, dword [esp + 0x44]
test ecx, ecx
je 0x447595
mov eax, ebx
cdq
idiv esi
push 0x18
sub edx, dword [esp + 0x80]
add edx, dword [ebp + 8]
mov eax, edx
cdq
push edx
push eax
call fcn.004013d0
mov ecx, dword [esp + 0xa8]
test ecx, ecx
je 0x4475b9
mov eax, ebx
cdq
idiv esi
push 0x18
sub eax, dword [esp + 0x84]
add eax, dword [ebp + 0xc]
cdq
push edx
push eax
call fcn.004013d0
mov ecx, dword [0x4f78d0]
push 1
push 0
push 0xffffffffffffffff
push 0x4cd350
call fcn.00495fe0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
mov ecx, dword [esp + 0x90]
push 0x4cd2cc
push 0
push 0x4e2b24
call fcn.0043b880
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14