Function at 0x4120a0
Capabilities:
Capture screenshot

Disassembly:
push 0xffffffffffffffff
push 0x4c35c4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe0
push ebx
push ebp
push esi
mov esi, ecx
lea eax, [esp + 0xc]
push edi
mov ecx, dword [esi + 0x20]
push eax
push ecx
mov dword [esp + 0xb4], esi
call dword [sym.imp.user32.dll_GetClientRect]
mov edx, dword [esi + 0x20]
push edx
call dword [sym.imp.user32.dll_GetDC]
push eax
call sub.mfc42.dll_CDC::FromHandle
mov ebx, eax
push 0xefd3c6
lea eax, [esp + 0x14]
push 0xefd3c6
push eax
mov ecx, ebx
call sub.mfc42.dll_CDC::Draw3dRect
mov edi, dword [sym.imp.user32.dll_InflateRect]
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
push 0xffffffffffffffff
push ecx
call edi
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x100]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc0], edx
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0xc0]
push 0xffffff
mov dword [esp + 0xcc], ecx
push 0xffffff
mov ecx, ebx
push eax
mov dword [esp + 0xd8], edx
call sub.mfc42.dll_CDC::Draw3dRect
lea ecx, [esp + 0xc0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
call edi
cmp ebp, 1
mov ecx, ebx
lea edx, [esp + 0xc0]
jne 0x412184
push 0xffffff
push 0xffffff
jmp 0x41218e
push 0x6a1e0a
push 0x6a1e0a
push edx
call sub.mfc42.dll_CDC::Draw3dRect
push 0xffffffffffffffff
lea eax, [esp + 0x14]
push 0xffffffffffffffff
push eax
call edi
mov ecx, esi
call fcn.00412c80
mov ecx, dword [esp + 0x18]
sub ecx, eax
cmp ebp, 1
mov dword [esp + 0x10], ecx
mov ecx, ebx
jne 0x4121c8
push 0xd8e9ec
lea edx, [esp + 0x14]
push 0xd8e9ec
push edx
jmp 0x4121d7
push 0x6a1e0a
lea eax, [esp + 0x14]
push 0x6a1e0a
push eax
call sub.mfc42.dll_CDC::Draw3dRect
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
push 0xffffffffffffffff
push ecx
call edi
push 0xd8e9ec
lea edx, [esp + 0x14]
push 0xd8e9ec
push edx
mov ecx, ebx
call sub.mfc42.dll_CDC::Draw3dRect
mov ecx, esi
call sub.mfc42.dll_CWnd::IsWindowEnabled
test eax, eax
je 0x412c5d
cmp ebp, 1
jne 0x41252c
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
lea ecx, [esp + 0x20]
mov dword [esp + 0xdc], eax
call fcn.0045c6fe
lea ecx, [esp + 0x30]
mov dword [esp + 0xf8], 0
call fcn.00412cc0
mov eax, dword [ebx + 0xc]
xor ecx, ecx
test eax, eax
sete cl
test ecx, ecx
mov byte [esp + 0xf8], 1
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x20], 0x4ccd10
mov dword [esp + 0x50], ecx
je 0x41230c
mov eax, dword [ebx + 4]
push eax
call dword [sym.imp.gdi32.dll_CreateCompatibleDC]
push eax
lea ecx, [esp + 0x24]
call sub.mfc42.dll_CDC::Attach
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0x40], esi
mov dword [esp + 0x4c], ecx
lea ecx, [esp + 0x30]
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], ebp
call sub.mfc42.dll_CGdiObject::DeleteObject
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x48]
mov ebp, dword [esp + 0x40]
sub edx, ecx
sub eax, ebp
push edx
push eax
push ebx
lea ecx, [esp + 0x3c]
call fcn.0040c590
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x24]
push ecx
push edx
call sub.mfc42.dll_CDC::SelectGdiObject
mov dword [esp + 0x38], eax
lea eax, [esp + 0x40]
push 0
push eax
lea ecx, [esp + 0x28]
call sub.mfc42.dll_CDC::FillSolidRect
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push ecx
lea eax, [esp + 0x74]
push edx
push eax
lea ecx, [esp + 0x2c]
call sub.mfc42.dll_CDC::SetWindowOrg
jmp 0x41231e
mov ecx, dword [ebx + 4]
mov edx, dword [ebx + 8]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], edx
push 0xd8e9ec
lea ecx, [esp + 0x5c]
mov dword [esp + 0xfc], 2
call sub.mfc42.dll_CBrush::CBrush
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x10]
push eax
push ecx
push edx
mov byte [esp + 0x104], 3
call dword [sym.imp.user32.dll_FillRect]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
sub eax, ecx
push 0
cdq
sub eax, edx
push 1
sar eax, 1
add eax, ecx
mov ecx, dword [esp + 0x1c]
push 0
lea edi, [eax - 3]
lea esi, [ecx + 7]
lea eax, [edi + 6]
lea ecx, [esi + 6]
sub eax, edi
cdq
sub eax, edx
mov ebp, eax
mov eax, ecx
sub eax, esi
lea ecx, [esp + 0x6c]
cdq
sub eax, edx
sar eax, 1
sar ebp, 1
add eax, esi
add ebp, edi
mov dword [esp + 0xf0], eax
call sub.mfc42.dll_CPen::CPen
lea edx, [esp + 0x60]
lea ecx, [esp + 0x20]
push edx
mov byte [esp + 0xfc], 4
call sub.mfc42.dll_CDC::SelectObject_1
mov dword [esp + 0x54], eax
push esi
lea eax, [esp + 0x74]
push edi
push eax
lea ecx, [esp + 0x2c]
call sub.mfc42.dll_CDC::MoveTo
lea eax, [edi + 6]
push esi
push eax
lea ecx, [esp + 0x28]
call sub.mfc42.dll_CDC::LineTo
mov ecx, dword [esp + 0xe4]
push ecx
push ebp
lea ecx, [esp + 0x28]
call sub.mfc42.dll_CDC::LineTo
push esi
push edi
lea ecx, [esp + 0x28]
call sub.mfc42.dll_CDC::LineTo
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x20]
push edx
call sub.mfc42.dll_CDC::SelectObject_1
push 0
lea ecx, [esp + 0x6c]
call sub.mfc42.dll_CBrush::CBrush
mov byte [esp + 0xf8], 5
lea eax, [esp + 0x68]
push eax
lea ecx, [esp + 0x24]
call sub.mfc42.dll_CDC::SelectObject_2
mov ecx, dword [esp + 0x24]
inc esi
push 0
add edi, 2
push esi
push edi
push ecx
mov ebp, eax
call dword [sym.imp.gdi32.dll_FloodFill]
push ebp
lea ecx, [esp + 0x24]
call sub.mfc42.dll_CDC::SelectObject_2
mov edi, 0x4cbe50
mov dword [esp + 0x68], edi
lea ecx, [esp + 0x68]
mov byte [esp + 0xf8], 6
call sub.mfc42.dll_CGdiObject::DeleteObject
mov esi, 0x4cbe3c
mov dword [esp + 0x60], edi
mov dword [esp + 0x68], esi
lea ecx, [esp + 0x60]
mov byte [esp + 0xf8], 7
call sub.mfc42.dll_CGdiObject::DeleteObject
mov dword [esp + 0x60], esi
mov dword [esp + 0x58], edi
lea ecx, [esp + 0x58]
mov byte [esp + 0xf8], 8
call sub.mfc42.dll_CGdiObject::DeleteObject
mov dword [esp + 0x58], esi
mov dword [esp + 0x20], 0x4ccd10
mov eax, dword [esp + 0x50]
xor esi, esi
cmp eax, esi
mov dword [esp + 0xf8], 0xa
je 0x41250a
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x40]
push 0xcc0020
push eax
lea edx, [esp + 0x28]
push ecx
push edx
mov edx, dword [esp + 0x5c]
sub edx, eax
push edx
mov edx, dword [esp + 0x5c]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, dword [esp + 0x5c]
call fcn.00412cd0
mov eax, dword [esp + 0x38]
cmp eax, esi
jne 0x4124fa
xor eax, eax
push eax
mov eax, dword [esp + 0x28]
push eax
call sub.mfc42.dll_CDC::SelectGdiObject
jmp 0x412512
mov eax, dword [eax + 4]
push eax
mov eax, dword [esp + 0x28]
push eax
call sub.mfc42.dll_CDC::SelectGdiObject
jmp 0x412512
mov dword [esp + 0x28], esi
mov dword [esp + 0x24], esi
lea ecx, [esp + 0x30]
mov byte [esp + 0xf8], 9
call fcn.00408240
lea ecx, [esp + 0x20]
jmp 0x412c38
cmp ebp, 2
jne 0x412855
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov dword [esp + 0xdc], ecx
lea ecx, [esp + 0x20]
call fcn.0045c6fe
lea ecx, [esp + 0x30]
mov dword [esp + 0xf8], 0xb
call fcn.00412cc0
mov eax, dword [ebx + 0xc]
xor ecx, ecx
test eax, eax
sete cl
test ecx, ecx
mov byte [esp + 0xf8], 0xc
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x20], 0x4ccd10
mov dword [esp + 0x50], ecx
je 0x412635
mov eax, dword [ebx + 4]
push eax
call dword [sym.imp.gdi32.dll_CreateCompatibleDC]
push eax
lea ecx, [esp + 0x24]
call sub.mfc42.dll_CDC::Attach
mov edx, dword [esp + 0xdc]
lea ecx, [esp + 0x30]
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], edx
call sub.mfc42.dll_CGdiObject::DeleteObject
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x44]
mov ebp, dword [esp + 0x40]
sub eax, ecx
mov ecx, dword [esp + 0x48]
push eax
mov eax, dword [ebx + 4]
sub ecx, ebp
push ecx
push eax
call dword [sym.imp.gdi32.dll_CreateCompatibleBitmap]
push eax
lea ecx, [esp + 0x34]
call sub.mfc42.dll_CGdiObject::Attach
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x24]
call fcn.0040cf20
lea edx, [esp + 0x40]
push 0
push edx
lea ecx, [esp + 0x28]
mov dword [esp + 0x40], eax
call sub.mfc42.dll_CDC::FillSolidRect
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x40]
push eax
lea edx, [esp + 0x74]
push ecx
push edx
lea ecx, [esp + 0x2c]
call sub.mfc42.dll_CDC::SetWindowOrg
jmp 0x412647
mov ecx, dword [ebx + 8]
mov dword [esp + 0x2c], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], eax
push 0xefd3c6
lea ecx, [esp + 0x6c]
mov dword [esp + 0xfc], 0xd
call sub.mfc42.dll_CBrush::CBrush
mov edx, dword [esp + 0x6c]
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x10]
push edx
push eax
push ecx
mov byte [esp + 0x104], 0xe
call dword [sym.imp.user32.dll_FillRect]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
sub eax, ecx
push 0
cdq
sub eax, edx
mov edx, dword [esp + 0x18]
sar eax, 1
add eax, ecx
lea esi, [edx + 7]
push 1
push 0
lea edi, [eax - 3]
lea ecx, [esi + 6]
lea eax, [edi + 6]
sub eax, edi
cdq
sub eax, edx
mov ebp, eax
mov eax, ecx
sub eax, esi
lea ecx, [esp + 0x6c]
cdq
sub eax, edx
sar eax, 1
sar ebp, 1
add eax, esi
add ebp, edi
mov dword [esp + 0xf0], eax
call sub.mfc42.dll_CPen::CPen
lea eax, [esp + 0x60]
lea ecx, [esp + 0x20]
push eax
mov byte [esp + 0xfc], 0xf
call sub.mfc42.dll_CDC::SelectObject_1
push esi
lea ecx, [esp + 0x74]
push edi
push ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x60], eax
call sub.mfc42.dll_CDC::MoveTo
lea eax, [edi + 6]
push esi
push eax
lea ecx, [esp + 0x28]
call sub.mfc42.dll_CDC::LineTo
mov edx, dword [esp + 0xe4]
lea ecx, [esp + 0x20]
push edx
push ebp
call sub.mfc42.dll_CDC::LineTo
push esi
push edi
lea ecx, [esp + 0x28]
call sub.mfc42.dll_CDC::LineTo
mov eax, dword [esp + 0x54]
lea ecx, [esp + 0x20]
push eax
call sub.mfc42.dll_CDC::SelectObject_1
push 0
lea ecx, [esp + 0x5c]
call sub.mfc42.dll_CBrush::CBrush
mov byte [esp + 0xf8], 0x10
lea ecx, [esp + 0x58]
push ecx
lea ecx, [esp + 0x24]
call sub.mfc42.dll_CDC::SelectObject_2
mov edx, dword [esp + 0x24]
inc esi
push 0
add edi, 2
push esi
push edi
push edx
mov ebp, eax
call dword [sym.imp.gdi32.dll_FloodFill]
push ebp
lea ecx, [esp + 0x24]
call sub.mfc42.dll_CDC::SelectObject_2
mov edi, 0x4cbe50
mov dword [esp + 0x58], edi
lea ecx, [esp + 0x58]
mov byte [esp + 0xf8], 0x11
call sub.mfc42.dll_CGdiObject::DeleteObject
mov esi, 0x4cbe3c
mov dword [esp + 0x60], edi
mov dword [esp + 0x58], esi
lea ecx, [esp + 0x60]
mov byte [esp + 0xf8], 0x12
call sub.mfc42.dll_CGdiObject::DeleteObject
mov dword [esp + 0x60], esi
mov dword [esp + 0x68], edi
lea ecx, [esp + 0x68]
mov byte [esp + 0xf8], 0x13
call sub.mfc42.dll_CGdiObject::DeleteObject
mov dword [esp + 0x68], esi
mov dword [esp + 0x20], 0x4ccd10
mov eax, dword [esp + 0x50]
xor esi, esi
cmp eax, esi
mov dword [esp + 0xf8], 0x15
je 0x412833
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x40]
push 0xcc0020
push eax
lea edx, [esp + 0x28]
push ecx
push edx
mov edx, dword [esp + 0x5c]
sub edx, eax
push edx
mov edx, dword [esp + 0x5c]
sub edx, ecx
push edx
push eax
push ecx
mov ecx, dword [esp + 0x5c]
call fcn.00412cd0
mov eax, dword [esp + 0x38]
cmp eax, esi
jne 0x412823
xor eax, eax
push eax
mov eax, dword [esp + 0x28]
push eax
call sub.mfc42.dll_CDC::SelectGdiObject
jmp 0x41283b
mov eax, dword [eax + 4]
push eax
mov eax, dword [esp + 0x28]
push eax
call sub.mfc42.dll_CDC::SelectGdiObject
jmp 0x41283b
mov dword [esp + 0x28], esi
mov dword [esp + 0x24], esi
lea ecx, [esp + 0x30]
mov byte [esp + 0xf8], 0x14
call fcn.00408240
lea ecx, [esp + 0x20]
jmp 0x412c38
cmp ebp, 4
jne 0x412c4f
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov dword [esp + 0xdc], ecx
lea ecx, [esp + 0x78]
call fcn.0045c6fe
lea ecx, [esp + 0x88]
mov dword [esp + 0xf8], 0x16
call fcn.00412cc0
mov eax, dword [ebx + 0xc]
xor ecx, ecx
test eax, eax
sete cl
test ecx, ecx
mov byte [esp + 0xf8], 0x17
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], ebx
mov dword [esp + 0x78], 0x4ccd10
mov dword [esp + 0xa8], ecx
je 0x41299d
mov eax, dword [ebx + 4]
push eax
call dword [sym.imp.gdi32.dll_CreateCompatibleDC]
push eax
lea ecx, [esp + 0x7c]
call sub.mfc42.dll_CDC::Attach
mov edx, dword [esp + 0xdc]
lea ecx, [esp + 0x88]
mov dword [esp + 0x98], esi
mov dword [esp + 0x9c], edi
mov dword [esp + 0xa0], ebp
mov dword [esp + 0xa4], edx
call sub.mfc42.dll_CGdiObject::DeleteObject
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x98]
sub eax, ecx
mov ecx, dword [esp + 0xa0]
push eax
mov eax, dword [ebx + 4]
sub ecx, ebp
push ecx
push eax
call dword [sym.imp.gdi32.dll_CreateCompatibleBitmap]
push eax
lea ecx, [esp + 0x8c]
call sub.mfc42.dll_CGdiObject::Attach
lea ecx, [esp + 0x88]
push ecx
lea ecx, [esp + 0x7c]
call fcn.0040cf20
lea edx, [esp + 0x98]
push 0
push edx
lea ecx, [esp + 0x80]
mov dword [esp + 0x98], eax
call sub.mfc42.dll_CDC::FillSolidRect
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x98]
push eax
lea edx, [esp + 0x5c]
push ecx
push edx
lea ecx, [esp + 0x84]
call sub.mfc42.dll_CDC::SetWindowOrg
jmp 0x4129b5
mov ecx, dword [ebx + 8]
mov dword [esp + 0x84], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x80], ecx
mov dword [esp + 0x7c], eax
push 0xefd3c6
lea ecx, [esp + 0x74]
mov dword [esp + 0xfc], 0x18
call sub.mfc42.dll_CBrush::CBrush
mov edx, dword [esp + 0x74]
mov ecx, dword [esp + 0x7c]
lea eax, [esp + 0x10]
push edx
push eax
push ecx
mov byte [esp + 0x104], 0x19
call dword [sym.imp.user32.dll_FillRect]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
sub eax, ecx
push 0xffffff
cdq
sub eax, edx
mov edx, dword [esp + 0x18]
sar eax, 1
add eax, ecx
lea esi, [edx + 7]
push 1
push 0
lea edi, [eax - 3]
lea ecx, [esi + 6]
lea eax, [edi + 6]
sub eax, edi
cdq
sub eax, edx
mov ebp, eax
mov eax, ecx
sub eax, esi
lea ecx, [esp + 0xbc]
cdq
sub eax, edx
sar eax, 1
sar ebp, 1
add eax, esi
add ebp, edi
mov dword [esp + 0xf0], eax
call sub.mfc42.dll_CPen::CPen
lea eax, [esp + 0xb0]
lea ecx, [esp + 0x78]
push eax
mov byte [esp + 0xfc], 0x1a
call sub.mfc42.dll_CDC::SelectObject_1
push esi
lea ecx, [esp + 0xec]
push edi
push ecx
lea ecx, [esp + 0x84]
mov dword [esp + 0x60], eax
call sub.mfc42.dll_CDC::MoveTo
lea eax, [edi + 6]
push esi
push eax
lea ecx, [esp + 0x80]
call sub.mfc42.dll_CDC::LineTo
mov edx, dword [esp + 0xe4]
lea ecx, [esp + 0x78]
push edx
push ebp
call sub.mfc42.dll_CDC::LineTo
push esi
push edi
lea ecx, [esp + 0x80]
call sub.mfc42.dll_CDC::LineTo
mov eax, dword [esp + 0x54]
lea ecx, [esp + 0x78]
push eax
call sub.mfc42.dll_CDC::SelectObject_1
push 0xffffff
lea ecx, [esp + 0xbc]
call sub.mfc42.dll_CBrush::CBrush
mov byte [esp + 0xf8], 0x1b
lea ecx, [esp + 0xb8]
push ecx
lea ecx, [esp + 0x7c]
call sub.mfc42.dll_CDC::SelectObject_2
mov edx, dword [esp + 0x7c]
inc esi
push 0xffffff
add edi, 2
push esi
push edi
push edx
mov ebp, eax
call dword [sym.imp.gdi32.dll_FloodFill]
push ebp
lea ecx, [esp + 0x7c]
call sub.mfc42.dll_CDC::SelectObject_2
mov edi, 0x4cbe50
mov dword [esp + 0xb8], edi
lea ecx, [esp + 0xb8]
mov byte [esp + 0xf8], 0x1c
call sub.mfc42.dll_CGdiObject::DeleteObject
mov esi, 0x4cbe3c
mov dword [esp + 0xb0], edi
mov dword [esp + 0xb8], esi
lea ecx, [esp + 0xb0]
mov byte [esp + 0xf8], 0x1d
call sub.mfc42.dll_CGdiObject::DeleteObject
mov dword [esp + 0xb0], esi
mov dword [esp + 0x70], edi
lea ecx, [esp + 0x70]
mov byte [esp + 0xf8], 0x1e
call sub.mfc42.dll_CGdiObject::DeleteObject
mov dword [esp + 0x70], esi
mov dword [esp + 0x78], 0x4ccd10
mov ecx, dword [esp + 0xa8]
xor eax, eax
cmp ecx, eax
mov dword [esp + 0xf8], 0x20
je 0x412bfc
mov edx, dword [esp + 0x9c]
mov ecx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x98]
mov eax, dword [esp + 0xa4]
push 0xcc0020
push edx
sub ecx, ebp
push ebp
mov ebp, dword [esp + 0x88]
sub eax, edx
push ebp
push eax
mov eax, dword [esp + 0xac]
push ecx
mov ecx, dword [esp + 0xac]
push edx
push eax
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.gdi32.dll_BitBlt]
mov eax, dword [esp + 0x90]
test eax, eax
jne 0x412be9
push eax
mov eax, dword [esp + 0x80]
push eax
call sub.mfc42.dll_CDC::SelectGdiObject
jmp 0x412c07
mov eax, dword [eax + 4]
push eax
mov eax, dword [esp + 0x80]
push eax
call sub.mfc42.dll_CDC::SelectGdiObject
jmp 0x412c07
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], eax
lea ecx, [esp + 0x88]
mov dword [esp + 0x88], edi
mov dword [esp + 0x54], ecx
lea ecx, [esp + 0x88]
mov byte [esp + 0xf8], 0x21
call sub.mfc42.dll_CGdiObject::DeleteObject
mov dword [esp + 0x88], esi
lea ecx, [esp + 0x78]
mov dword [esp + 0xf8], 0xffffffff
call sub.mfc42.dll_CDC::CDC
mov esi, dword [esp + 0xac]
mov edx, dword [ebx + 4]
mov eax, dword [esi + 0x20]
push edx
push eax
call dword [sym.imp.user32.dll_ReleaseDC]
mov ecx, dword [esp + 0xf0]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xec
ret 4