Function at 0x49f27f
Capabilities:
Capture screenshot

Disassembly:
push 0x7dc
mov eax, 0x5500c0
call fcn.00513ea1
mov eax, dword [ebp + 0xc]
mov ecx, dword [0x6780ec]
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp + 0x1c]
mov dword [ebp - 0x7c0], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x7b0], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x7a0], eax
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x7ac], edi
mov dword [ebp - 0x7a4], esi
mov dword [ebp - 0x79c], ebx
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x6786ac]
cmp eax, dword [ecx + 4]
jle 0x49f31b
push 0x6786ac
call fcn.004748e2
cmp dword [0x6786ac], 0xffffffff
pop ecx
jne 0x49f31b
push str.AlphaBlend
push str.msimg32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x6786ac
mov dword [0x6786a8], eax
call fcn.004748a3
pop ecx
mov eax, dword [0x6786a8]
mov ecx, 0x49abb3
test eax, eax
cmove eax, ecx
cmp dword [ebp - 0x7c0], 0
mov dword [0x6786a8], eax
je 0x4a10a2
push edi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push dword [ebp - 0x7c0]
mov dword [ebp - 0x7a8], eax
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
push 4
push edi
mov dword [ebp - 0x7e8], eax
call dword [sym.imp.GDI32.dll_SetStretchBltMode]
xorps xmm0, xmm0
movups xmmword [ebp - 0x720], xmm0
movups xmmword [ebp - 0x710], xmm0
call fcn.00402160
cmp dword [0x6786a8], 0
je 0x4a0031
cmp byte [ebp + 0x20], 0
mov al, byte [ebp + 0x24]
jne 0x49f399
cmp al, 0xff
jae 0x4a0031
cmp byte [ebp + 0x28], 0
mov word [ebp - 0x7c4], 0
mov byte [ebp - 0x7c2], al
mov byte [ebp - 0x7c1], 1
mov ebx, dword [ebp - 0x7c4]
jne 0x4a0026
mov edx, dword [ebp - 0x79c]
mov esi, dword [esi]
mov eax, dword [edx]
lea ecx, [eax + esi]
mov dword [ebp - 0x710], ecx
mov ecx, dword [ebp - 0x7a4]
mov edi, dword [ecx + 4]
mov ecx, dword [edx + 4]
lea edx, [ecx + edi]
mov dword [ebp - 0x70c], edx
mov edx, dword [ebp - 0x7a4]
mov edx, dword [edx + 8]
sub edx, eax
mov eax, dword [ebp - 0x79c]
sub edx, esi
mov esi, dword [ebp - 0x7a4]
sub edx, dword [eax + 8]
mov eax, dword [esi + 0xc]
add edx, dword [ebp - 0x710]
sub eax, ecx
sub eax, edi
mov dword [ebp - 0x708], edx
mov edi, dword [ebp - 0x79c]
sub eax, dword [edi + 0xc]
add eax, dword [ebp - 0x70c]
mov dword [ebp - 0x704], eax
lea eax, [ebp - 0x710]
push eax
push dword [ebp - 0x7b0]
lea eax, [ebp - 0x720]
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x49f56e
cmp byte [ebp + 0x2c], 0
jne 0x49fd7c
cmp byte [ebp + 0x30], 0
jne 0x49fc94
xor eax, eax
mov dword [ebp - 0x72c], eax
mov dword [ebp - 0x728], eax
mov dword [ebp - 0x724], eax
push 0x6c
pop ecx
mov esi, str.vPP3s5RqZ11YK7Zt3uKJ6tMREs831xERQlSUSNikO0zc67BIWt3kKnxv55LeH0V7Qsss4rr4XAc22ZAMK0Dt9ZSV4skv8Uh1FcIbS7QFQiI9Vz8CIWw7Xbykh4mnEqRTvN6kxh6OMxQM4iwvfyDtMX0ri8mxHvqsKRALgMtvV1cPFWeYV4AhOXcHjQ3FmbfDnDSEw6pn6xePhxS5a0osL6iTezcaDJvJAhnYhr91j0GtejKlgnVt2IPlixRBo8rHb67RT68x8eTx9hyptUznH2n4Ph3VOifbpzah2rEwXsRwMs7GMQ2J2vHVZqt1JOUASii7iKcxzFUDVfae14kB2ltk17cDJPJ3AIpC95TTuzDdSv72z3kcJBSqpooOGOT0hI686qJXJEKZvwlZK9kP9aaMdrShsAuzfglWlgJR9xyb5HIt
mov dword [ebp - 4], eax
lea edi, [ebp - 0x5d4]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x5d4]
push eax
lea ecx, [ebp - 0x798]
movsb byte es:[edi], byte [esi]
call fcn.004057d0
lea eax, [ebp - 0x798]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x72c]
call fcn.00408170
push 0
push 1
lea ecx, [ebp - 0x798]
mov byte [ebp - 4], 0
call fcn.004096c0
mov eax, dword [ebp - 0x710]
sub dword [ebp - 0x708], eax
mov eax, dword [ebp - 0x70c]
sub dword [ebp - 0x704], eax
mov edx, dword [ebp - 0x7a0]
mov eax, dword [ebp - 0x79c]
push ebx
mov ebx, dword [ebp - 0x79c]
mov esi, dword [edx + 4]
mov ecx, dword [eax + 4]
mov edi, dword [edx]
mov edx, dword [eax]
mov eax, dword [ebp - 0x7a0]
mov eax, dword [eax + 0xc]
sub eax, ecx
sub eax, esi
sub eax, dword [ebx + 0xc]
push eax
mov eax, dword [ebp - 0x7a0]
mov eax, dword [eax + 8]
sub eax, edx
sub eax, edi
sub eax, dword [ebx + 8]
push eax
lea eax, [ecx + esi]
push eax
lea eax, [edx + edi]
push eax
push dword [ebp - 0x7a8]
push dword [ebp - 0x704]
push dword [ebp - 0x708]
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [0x6786a8]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x72c]
call fcn.0047920e
mov ebx, dword [ebp - 0x7c4]
mov edi, dword [ebp - 0x79c]
mov esi, dword [ebp - 0x7a4]
cmp dword [edi], 0
jle 0x49f61f
cmp dword [edi + 4], 0
jle 0x49f717
call fcn.0047b183
mov edx, dword [esi]
mov eax, dword [edi]
mov esi, dword [esi + 4]
add eax, edx
mov ecx, dword [edi + 4]
mov dword [ebp - 0x708], eax
add ecx, esi
lea eax, [ebp - 0x710]
mov dword [ebp - 0x710], edx
push eax
push dword [ebp - 0x7b0]
lea eax, [ebp - 0x720]
mov dword [ebp - 0x70c], esi
push eax
mov dword [ebp - 0x704], ecx
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x49f61f
mov edx, dword [ebp - 0x7a0]
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x708]
sub eax, dword [ebp - 0x70c]
sub ecx, dword [ebp - 0x710]
push ebx
push dword [edi + 4]
mov dword [ebp - 0x708], ecx
push dword [edi]
mov dword [ebp - 0x704], eax
push dword [edx + 4]
push dword [edx]
push dword [ebp - 0x7a8]
push eax
push ecx
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [0x6786a8]
cmp dword [edi + 4], 0
jle 0x49f717
call fcn.00402160
mov ecx, dword [ebp - 0x7a4]
mov eax, dword [edi]
mov edx, dword [ecx]
mov esi, dword [ecx + 4]
mov ecx, dword [ecx + 8]
sub ecx, eax
mov dword [ebp - 0x70c], esi
lea edi, [eax + edx]
sub ecx, edx
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x710], edi
sub ecx, dword [eax + 8]
mov eax, dword [eax + 4]
add ecx, edi
add eax, esi
mov dword [ebp - 0x708], ecx
mov dword [ebp - 0x704], eax
lea eax, [ebp - 0x710]
push eax
push dword [ebp - 0x7b0]
lea eax, [ebp - 0x720]
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x49f711
mov eax, dword [ebp - 0x7a0]
push ebx
mov ebx, dword [ebp - 0x79c]
mov esi, dword [ebp - 0x704]
mov edx, dword [eax]
mov eax, dword [ebp - 0x79c]
mov edi, dword [ebp - 0x708]
sub esi, dword [ebp - 0x70c]
sub edi, dword [ebp - 0x710]
push dword [eax + 4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x708], edi
mov dword [ebp - 0x704], esi
mov eax, dword [eax + 8]
sub eax, ecx
sub eax, edx
sub eax, dword [ebx + 8]
push eax
mov eax, dword [ebp - 0x7a0]
push dword [eax + 4]
lea eax, [ecx + edx]
push eax
push dword [ebp - 0x7a8]
push esi
push edi
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [0x6786a8]
mov ebx, dword [ebp - 0x7c4]
mov edi, dword [ebp - 0x79c]
cmp dword [edi + 8], 0
jle 0x49f7d9
cmp dword [edi + 4], 0
jle 0x49f7d9
call fcn.0047e26b
mov eax, dword [ebp - 0x7a4]
mov esi, dword [edi + 8]
mov edx, dword [eax + 8]
mov ecx, dword [eax + 4]
sub edx, esi
mov eax, dword [edi + 4]
add esi, edx
add eax, ecx
mov dword [ebp - 0x710], edx
mov dword [ebp - 0x704], eax
lea eax, [ebp - 0x710]
push eax
push dword [ebp - 0x7b0]
lea eax, [ebp - 0x720]
mov dword [ebp - 0x70c], ecx
push eax
mov dword [ebp - 0x708], esi
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x49f7d9
mov eax, dword [ebp - 0x7a0]
mov ecx, dword [ebp - 0x704]
mov edx, dword [ebp - 0x708]
sub ecx, dword [ebp - 0x70c]
sub edx, dword [ebp - 0x710]
push ebx
push dword [edi + 4]
mov dword [ebp - 0x708], edx
push dword [edi + 8]
mov dword [ebp - 0x704], ecx
push dword [eax + 4]
mov eax, dword [eax + 8]
sub eax, dword [edi + 8]
push eax
push dword [ebp - 0x7a8]
push ecx
push edx
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [0x6786a8]
cmp dword [edi], 0
jle 0x49f8de
call fcn.004798b7
mov edx, dword [ebp - 0x7a4]
mov ecx, dword [ebp - 0x79c]
mov eax, dword [edx]
mov esi, dword [edx + 4]
mov edx, dword [edx + 0xc]
mov ecx, dword [ecx]
mov dword [ebp - 0x710], eax
mov eax, dword [edi + 4]
sub edx, eax
sub edx, esi
lea edi, [eax + esi]
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x70c], edi
sub edx, dword [eax + 0xc]
mov eax, dword [ebp - 0x7a4]
add edx, edi
mov dword [ebp - 0x704], edx
add ecx, dword [eax]
lea eax, [ebp - 0x710]
push eax
push dword [ebp - 0x7b0]
lea eax, [ebp - 0x720]
mov dword [ebp - 0x708], ecx
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x49f8d8
mov eax, dword [ebp - 0x7a0]
push ebx
mov ebx, dword [ebp - 0x79c]
mov esi, dword [ebp - 0x704]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x79c]
mov edi, dword [ebp - 0x708]
sub esi, dword [ebp - 0x70c]
sub edi, dword [ebp - 0x710]
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x708], edi
mov dword [ebp - 0x704], esi
mov eax, dword [eax + 0xc]
sub eax, ecx
sub eax, edx
sub eax, dword [ebx + 0xc]
push eax
mov eax, ebx
push dword [eax]
lea eax, [ecx + edx]
push eax
mov eax, dword [ebp - 0x7a0]
push dword [eax]
push dword [ebp - 0x7a8]
push esi
push edi
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [0x6786a8]
mov ebx, dword [ebp - 0x7c4]
mov edi, dword [ebp - 0x79c]
mov eax, dword [edi + 8]
mov dword [ebp - 0x7c8], eax
test eax, eax
jle 0x49f9ef
mov ecx, dword [ebp - 0x7a4]
mov edi, dword [ecx + 8]
mov edx, dword [ecx + 4]
sub edi, eax
mov eax, dword [ebp - 0x79c]
mov ecx, dword [ecx + 0xc]
mov dword [ebp - 0x710], edi
mov eax, dword [eax + 4]
sub ecx, eax
sub ecx, edx
lea esi, [eax + edx]
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x70c], esi
sub ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x7c8]
add ecx, esi
add eax, edi
mov dword [ebp - 0x704], ecx
mov dword [ebp - 0x708], eax
lea eax, [ebp - 0x710]
push eax
push dword [ebp - 0x7b0]
lea eax, [ebp - 0x720]
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x49f9e9
mov eax, dword [ebp - 0x7a0]
push ebx
mov ebx, dword [ebp - 0x79c]
mov esi, dword [ebp - 0x704]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x79c]
mov edi, dword [ebp - 0x708]
sub esi, dword [ebp - 0x70c]
sub edi, dword [ebp - 0x710]
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x708], edi
mov dword [ebp - 0x704], esi
mov eax, dword [eax + 0xc]
sub eax, ecx
sub eax, edx
sub eax, dword [ebx + 0xc]
push eax
mov eax, ebx
push dword [eax + 8]
lea eax, [ecx + edx]
mov ecx, ebx
push eax
mov eax, dword [ebp - 0x7a0]
mov eax, dword [eax + 8]
sub eax, dword [ecx + 8]
push eax
push dword [ebp - 0x7a8]
push esi
push edi
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [0x6786a8]
mov ebx, dword [ebp - 0x7c4]
mov edi, dword [ebp - 0x79c]
cmp dword [edi], 0
jle 0x49fab1
cmp dword [edi + 0xc], 0
jle 0x49fbc3
call fcn.00402160
mov eax, dword [ebp - 0x7a4]
mov esi, dword [edi + 0xc]
mov edx, dword [eax]
mov ecx, dword [eax + 0xc]
mov eax, dword [edi]
sub ecx, esi
add eax, edx
mov dword [ebp - 0x710], edx
mov dword [ebp - 0x708], eax
add esi, ecx
lea eax, [ebp - 0x710]
mov dword [ebp - 0x70c], ecx
push eax
push dword [ebp - 0x7b0]
lea eax, [ebp - 0x720]
mov dword [ebp - 0x704], esi
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x49fab1
call fcn.00402160
mov esi, dword [ebp - 0x7a0]
mov ecx, dword [ebp - 0x704]
mov edx, dword [ebp - 0x708]
sub ecx, dword [ebp - 0x70c]
mov eax, dword [esi + 0xc]
sub eax, dword [edi + 0xc]
sub edx, dword [ebp - 0x710]
push ebx
push dword [edi + 0xc]
mov dword [ebp - 0x708], edx
push dword [edi]
mov dword [ebp - 0x704], ecx
push eax
push dword [esi]
push dword [ebp - 0x7a8]
push ecx
push edx
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [0x6786a8]
cmp dword [edi + 0xc], 0
jle 0x49fbc3
call fcn.00402160
mov esi, dword [ebp - 0x7a4]
mov eax, dword [ebp - 0x79c]
mov ecx, dword [edi]
mov edx, dword [esi]
mov esi, dword [esi + 0xc]
sub esi, dword [eax + 0xc]
mov eax, dword [ebp - 0x7a4]
lea edi, [ecx + edx]
mov dword [ebp - 0x70c], esi
mov dword [ebp - 0x710], edi
mov eax, dword [eax + 8]
sub eax, ecx
mov ecx, dword [ebp - 0x79c]
sub eax, edx
sub eax, dword [ecx + 8]
add eax, edi
mov edi, ecx
mov dword [ebp - 0x708], eax
mov eax, dword [edi + 0xc]
add eax, esi
mov dword [ebp - 0x704], eax
lea eax, [ebp - 0x710]
push eax
push dword [ebp - 0x7b0]
lea eax, [ebp - 0x720]
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x49fbc3
call fcn.0047d19e
mov eax, dword [ebp - 0x7a0]
push ebx
mov ebx, dword [ebp - 0x79c]
mov esi, dword [ebp - 0x704]
mov edx, dword [eax]
mov eax, dword [ebp - 0x79c]
mov edi, dword [ebp - 0x708]
sub esi, dword [ebp - 0x70c]
sub edi, dword [ebp - 0x710]
push dword [eax + 0xc]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x708], edi
mov dword [ebp - 0x704], esi
mov eax, dword [eax + 8]
sub eax, ecx
sub eax, edx
sub eax, dword [ebx + 8]
push eax
mov eax, dword [ebp - 0x7a0]
mov eax, dword [eax + 0xc]
sub eax, dword [ebx + 0xc]
push eax
lea eax, [ecx + edx]
push eax
push dword [ebp - 0x7a8]
push esi
push edi
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [0x6786a8]
mov ebx, dword [ebp - 0x7c4]
mov edi, dword [ebp - 0x79c]
cmp dword [edi + 8], 0
jle 0x4a1084
cmp dword [edi + 0xc], 0
jle 0x4a1084
call fcn.00402160
mov eax, dword [ebp - 0x7a4]
mov ecx, dword [edi + 0xc]
mov esi, dword [edi + 8]
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
sub edx, esi
sub eax, ecx
mov dword [ebp - 0x710], edx
add ecx, eax
mov dword [ebp - 0x70c], eax
lea eax, [ebp - 0x710]
mov dword [ebp - 0x704], ecx
push eax
push dword [ebp - 0x7b0]
lea eax, [ebp - 0x720]
add esi, edx
push eax
mov dword [ebp - 0x708], esi
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x4a1084
mov ecx, dword [ebp - 0x704]
mov edx, dword [ebp - 0x708]
sub ecx, dword [ebp - 0x70c]
sub edx, dword [ebp - 0x710]
push ebx
push dword [edi + 0xc]
mov ebx, dword [ebp - 0x7a0]
push dword [edi + 8]
mov dword [ebp - 0x708], edx
mov dword [ebp - 0x704], ecx
mov eax, dword [ebx + 0xc]
sub eax, dword [edi + 0xc]
push eax
mov eax, dword [ebx + 8]
sub eax, dword [edi + 8]
push eax
push dword [ebp - 0x7a8]
push ecx
push edx
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [0x6786a8]
jmp 0x4a1084
call fcn.00402160
mov esi, dword [ebp - 0x7a0]
mov edx, dword [ebp - 0x704]
dec edx
mov ecx, dword [esi + 0xc]
sub ecx, dword [esi + 4]
sub ecx, dword [edi + 4]
sub ecx, dword [edi + 0xc]
mov eax, ecx
mov dword [ebp - 0x7b8], ecx
sub eax, dword [ebp - 0x70c]
add eax, edx
cdq
idiv ecx
mov dword [ebp - 0x7dc], eax
test eax, eax
jle 0x49f568
xor eax, eax
mov edx, dword [ebp - 0x70c]
lea ebx, [edx + eax]
add eax, ecx
add edx, eax
mov dword [ebp - 0x7bc], ebx
mov ebx, dword [ebp - 0x7c4]
mov dword [ebp - 0x7b4], eax
mov eax, ecx
mov dword [ebp - 0x7c0], edx
cmp edx, dword [ebp - 0x704]
jle 0x49fd14
mov ecx, dword [ebp - 0x704]
sub eax, edx
add eax, ecx
mov dword [ebp - 0x7c0], ecx
mov ecx, dword [edi]
mov edx, dword [esi]
push ebx
push eax
mov eax, dword [esi + 8]
sub eax, ecx
sub eax, edx
sub eax, dword [edi + 8]
push eax
mov eax, dword [esi + 4]
add eax, dword [edi + 4]
push eax
lea eax, [ecx + edx]
mov ecx, dword [ebp - 0x7bc]
push eax
push dword [ebp - 0x7a8]
mov eax, dword [ebp - 0x7c0]
sub eax, ecx
push eax
push dword [ebp - 0x708]
push ecx
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [0x6786a8]
sub dword [ebp - 0x7dc], 1
je 0x49f568
mov ecx, dword [ebp - 0x7b8]
mov eax, dword [ebp - 0x7b4]
jmp 0x49fcd5
cmp byte [ebp + 0x30], 0
je 0x49ff34
call fcn.0047c542
mov esi, dword [ebp - 0x7a0]
mov edx, dword [ebp - 0x708]
dec edx
mov eax, dword [esi + 8]
sub eax, dword [esi]
sub eax, dword [edi]
sub eax, dword [edi + 8]
mov dword [ebp - 0x7e4], eax
sub eax, dword [ebp - 0x710]
add eax, edx
mov ecx, dword [esi + 0xc]
cdq
idiv dword [ebp - 0x7e4]
sub ecx, dword [esi + 4]
sub ecx, dword [edi + 4]
sub ecx, dword [edi + 0xc]
mov dword [ebp - 0x7dc], eax
mov eax, dword [ebp - 0x704]
dec eax
mov dword [ebp - 0x7b4], ecx
sub ecx, dword [ebp - 0x70c]
add eax, ecx
mov ecx, dword [ebp - 0x7b4]
cdq
idiv ecx
mov dword [ebp - 0x7bc], eax
test eax, eax
jle 0x49f568
xor edx, edx
mov dword [ebp - 0x7b8], edx
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x7d0], ecx
lea esi, [edx + eax]
add edx, ecx
add eax, edx
mov dword [ebp - 0x7d4], esi
mov esi, dword [ebp - 0x7a0]
mov dword [ebp - 0x7c8], edx
mov edx, ecx
cmp eax, dword [ebp - 0x704]
jle 0x49fe3c
sub edx, eax
mov eax, dword [ebp - 0x704]
add edx, eax
mov dword [ebp - 0x7d0], edx
cmp dword [ebp - 0x7dc], 0
jle 0x49ff16
sub eax, dword [ebp - 0x7d4]
xor ebx, ebx
mov dword [ebp - 0x7e0], eax
mov eax, dword [ebp - 0x7dc]
mov dword [ebp - 0x7d4], eax
mov ecx, dword [ebp - 0x710]
lea eax, [ebx + ecx]
mov dword [ebp - 0x7d8], eax
mov eax, dword [ebp - 0x7e4]
add ebx, eax
add ecx, ebx
mov dword [ebp - 0x7cc], ebx
mov ebx, dword [ebp - 0x708]
mov dword [ebp - 0x7c0], ecx
mov ecx, eax
cmp dword [ebp - 0x7c0], ebx
mov ebx, dword [ebp - 0x7c4]
jle 0x49feb2
sub ecx, dword [ebp - 0x7c0]
mov eax, dword [ebp - 0x708]
add ecx, eax
mov dword [ebp - 0x7c0], eax
mov eax, dword [esi + 4]
add eax, dword [edi + 4]
push ebx
push edx
push ecx
mov ecx, dword [ebp - 0x7d8]
push eax
mov eax, dword [esi]
add eax, dword [edi]
push eax
push dword [ebp - 0x7a8]
mov eax, dword [ebp - 0x7c0]
push dword [ebp - 0x7e0]
sub eax, ecx
push eax
mov eax, dword [ebp - 0x7b8]
add eax, dword [ebp - 0x70c]
push eax
push ecx
push dword [ebp - 0x7ac]
call dword [0x6786a8]
sub dword [ebp - 0x7d4], 1
je 0x49ff10
mov edx, dword [ebp - 0x7d0]
mov ebx, dword [ebp - 0x7cc]
jmp 0x49fe63
mov ecx, dword [ebp - 0x7b4]
sub dword [ebp - 0x7bc], 1
mov edx, dword [ebp - 0x7c8]
mov dword [ebp - 0x7b8], edx
jne 0x49fdfd
jmp 0x49f568
mov esi, dword [ebp - 0x7a0]
mov edx, dword [ebp - 0x708]
dec edx
mov ecx, dword [esi + 8]
sub ecx, dword [esi]
sub ecx, dword [edi]
sub ecx, dword [edi + 8]
mov eax, ecx
mov dword [ebp - 0x7cc], ecx
sub eax, dword [ebp - 0x710]
add eax, edx
cdq
idiv ecx
mov dword [ebp - 0x7b4], eax
test eax, eax
jle 0x49f568
xor eax, eax
mov edx, dword [ebp - 0x710]
mov dword [ebp - 0x7bc], ecx
lea ebx, [eax + edx]
add eax, ecx
add edx, eax
mov dword [ebp - 0x7c8], ebx
mov ebx, dword [ebp - 0x7c4]
mov dword [ebp - 0x7d8], eax
mov dword [ebp - 0x7b8], edx
cmp edx, dword [ebp - 0x708]
jle 0x49ffb9
mov eax, ecx
mov ecx, dword [ebp - 0x708]
sub eax, edx
mov dword [ebp - 0x7b8], ecx
add eax, ecx
mov dword [ebp - 0x7bc], eax
mov ecx, dword [edi + 4]
mov eax, dword [esi + 0xc]
mov edx, dword [esi + 4]
sub eax, ecx
push ebx
sub eax, edx
sub eax, dword [edi + 0xc]
push eax
push dword [ebp - 0x7bc]
lea eax, [ecx + edx]
mov ecx, dword [ebp - 0x7c8]
push eax
mov eax, dword [esi]
add eax, dword [edi]
push eax
push dword [ebp - 0x7a8]
mov eax, dword [ebp - 0x7b8]
push dword [ebp - 0x704]
sub eax, ecx
push eax
push dword [ebp - 0x70c]
push ecx
push dword [ebp - 0x7ac]
call dword [0x6786a8]
sub dword [ebp - 0x7b4], 1
je 0x49f568
mov ecx, dword [ebp - 0x7cc]
mov eax, dword [ebp - 0x7d8]
jmp 0x49ff6e
mov edi, dword [ebp - 0x79c]
jmp 0x49f56e
xor eax, eax
mov dword [ebp - 0x78c], eax
mov dword [ebp - 0x788], eax
mov dword [ebp - 0x784], eax
push 0x4a
pop ecx
mov esi, str.6RGsDuJrOZ0ODJk1zWIBTrn6m4aF4hyI0fgtRzM7pii4msjFL6KN6ZdNfVNu3PaHwERw59YEjfAV5jCSf3Tahf4LKwhcdsPdkVFe1fLizFfSnnBkI0PfDfgzCl9mWreQm0OEKWREhd6dngAycI4eesZMX9eUuBVALZiWdnNzJyZT3jSEuB9iFX5DB1APSgWBhYgHRwyRLbshStbroQaAuIJhLiLwfVk3Cb2XmngcHvJjRMdgosRXKdTpB81wErBGawrcYmxrinGg4No6r3MqMmdCV2LUhxJswnL2dNnTw
mov dword [ebp - 4], 2
lea edi, [ebp - 0x700]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x700]
push eax
lea ecx, [ebp - 0x780]
movsw word es:[edi], word [esi]
call fcn.004057d0
lea eax, [ebp - 0x780]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x78c]
call fcn.00408170
push 0
push 1
lea ecx, [ebp - 0x780]
call fcn.004096c0
mov esi, dword [ebp - 0x7a4]
mov edx, dword [ebp - 0x7a0]
mov ecx, dword [esi + 8]
mov eax, dword [edx + 8]
sub ecx, dword [esi]
sub eax, dword [edx]
cmp ecx, eax
jne 0x4a01ce
mov ecx, dword [edx + 0xc]
mov eax, dword [esi + 0xc]
sub ecx, dword [edx + 4]
sub eax, dword [esi + 4]
cmp eax, ecx
jne 0x4a01ce
xor eax, eax
cmp dword [ebx], eax
jne 0x4a01d0
cmp dword [ebx + 8], eax
jne 0x4a01d0
cmp dword [ebx + 4], eax
jne 0x4a01d0
cmp dword [ebx + 0xc], eax
jne 0x4a01d0
mov dword [ebp - 0x72c], eax
mov dword [ebp - 0x728], eax
mov dword [ebp - 0x724], eax
push 0x52
pop ecx
mov esi, str.rHLZlifIVKLammkcfwHcC8vAXUVMT4L4NuntIbXfm9maPGX2ftbJUMB43ZgkFzlEKqTLdqZ4ynl4S2VpyALQclORpCxCt1uq4f414ZqksweqdvV3SQ3ymTxGOzVnZKkG44rjHVObIGt25pg6o90Tl2qgsgvEklkcbhs9RjPXKBbebsIQf9bq88okCg3BNef0jAB0ilkxlknhlEszgWS982qKFl6PvaEJV4kK2InXcJnbcKdhYJKrM5h6sOBrflBvQya53FGFnzUqdOcf7MUt8gR8ebGgyxxCjfy6Nkbv5I1rrIeEunyTvdxQdFGkMCJZU2O71925
mov byte [ebp - 4], 4
lea edi, [ebp - 0x15c]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x780]
movsb byte es:[edi], byte [esi]
call fcn.004057d0
lea eax, [ebp - 0x780]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x72c]
call fcn.00408170
push 0
push 1
lea ecx, [ebp - 0x780]
call fcn.004096c0
mov ebx, dword [ebp - 0x7a4]
lea eax, [ebp - 0x720]
push ebx
push dword [ebp - 0x7b0]
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x4a01c3
mov ecx, dword [ebp - 0x7a0]
push 0xcc0020
mov eax, dword [ecx + 4]
sub eax, dword [ebx + 4]
add eax, dword [ebp - 0x71c]
push eax
mov eax, dword [ecx]
sub eax, dword [ebx]
add eax, dword [ebp - 0x720]
push eax
push dword [ebp - 0x7a8]
mov eax, dword [ebp - 0x714]
sub eax, dword [ebp - 0x71c]
push eax
mov eax, dword [ebp - 0x718]
sub eax, dword [ebp - 0x720]
push eax
push dword [ebp - 0x71c]
push dword [ebp - 0x720]
push dword [ebp - 0x7ac]
call dword [sym.imp.GDI32.dll_BitBlt]
lea ecx, [ebp - 0x72c]
jmp 0x4a1074
xor eax, eax
mov dword [ebp - 0x774], eax
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x76c], eax
push 0x6b
pop ecx
mov esi, str.ZJ4d9gueeJTFKovXIVpmLObpv6bOX7kyCbYFTnUl74ZrQJblDyXQso8WQ1H9TZO7y3gFXmtjd8heuhpCgfyxOPyAoSGCsQXF6FUow2J3AjtToVVPDUp0VoZzDJAzRD3tHOYk6wriF6IchnhnzXJ2eJGWcegETX2zNLeGWHy3hk60nwY2QUOI8loF98ySM87qgitdrGRLi0tzkTODJMsVqjnGOSWrsNkrksE643UIoxWay2nsHMZDc5zex9ZYYpBqfYLA19971jLxc4yjn8ZpVIxKxU9XYEUYljgpCf3buZKA9WDij7POOb6ue9EYzyxCLwusVZbf8OFqoGHi5c5omrJ7cbnDwvrv77f4zaIqXU8kbNjAtp1e63GgtnzV8L4E0pl3hbg0BQIS0If7FLdfiTUL16OB5hnVIdtzTw6EptfZ
mov byte [ebp - 4], 6
lea edi, [ebp - 0x5d0]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x5d0]
push eax
lea ecx, [ebp - 0x750]
movsb byte es:[edi], byte [esi]
call fcn.004057d0
lea eax, [ebp - 0x750]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x774]
call fcn.00408170
push 0
push 1
lea ecx, [ebp - 0x750]
mov byte [ebp - 4], 6
call fcn.004096c0
cmp byte [ebp + 0x28], 0
jne 0x4a0839
xor eax, eax
mov dword [ebp - 0x744], eax
mov dword [ebp - 0x740], eax
mov dword [ebp - 0x73c], eax
push 0x39
pop ecx
mov esi, str.cks4R1CCuafjNIzQA8RHc2QOBiMGIKCwlQet6lnYNAgCV8KMVyOLlt2Oh9ezZHUGnJzzgH62rHG9XTxyBykFGZdFjUqualq7C969zpv7QPF6HtMKVWSHdYdrKFVO45CcbPWUVx3pQZzFKYc31eFLnGDsBJjW5DMox9uSsl7WOraoFMDrsdUELYwaYerdiTSxC5bJymj5pXZ6ex06tTPu8ETHmeCfWwseViOn
mov byte [ebp - 4], 8
lea edi, [ebp - 0xf8]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x738]
movsb byte es:[edi], byte [esi]
call fcn.004057d0
lea eax, [ebp - 0x738]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x744]
call fcn.00408170
push 0
push 1
lea ecx, [ebp - 0x738]
mov byte [ebp - 4], 8
call fcn.004096c0
mov edx, dword [ebp - 0x7a4]
mov eax, dword [ebx]
mov esi, dword [edx]
mov edi, dword [edx + 4]
mov edx, dword [edx + 8]
sub edx, eax
lea ecx, [eax + esi]
sub edx, esi
mov eax, dword [ebp - 0x7a4]
mov esi, dword [ebp - 0x79c]
mov dword [ebp - 0x710], ecx
mov ecx, dword [ebx + 4]
mov eax, dword [eax + 0xc]
sub edx, dword [esi + 8]
sub eax, ecx
add edx, dword [ebp - 0x710]
sub eax, edi
sub eax, dword [esi + 0xc]
lea ebx, [ecx + edi]
add eax, ebx
mov dword [ebp - 0x70c], ebx
mov dword [ebp - 0x704], eax
lea eax, [ebp - 0x710]
push eax
push dword [ebp - 0x7b0]
lea eax, [ebp - 0x720]
mov dword [ebp - 0x708], edx
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x4a0828
cmp byte [ebp + 0x2c], 0
jne 0x4a0548
cmp byte [ebp + 0x30], 0
jne 0x4a03c4
call fcn.0047b66d
mov ebx, dword [ebp - 0x704]
sub ebx, dword [ebp - 0x70c]
mov eax, dword [ebp - 0x710]
sub dword [ebp - 0x708], eax
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x704], ebx
mov ebx, dword [ebp - 0x7a0]
push 0xcc0020
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov esi, dword [ebx + 4]
mov edi, dword [ebx]
mov eax, dword [ebx + 0xc]
mov ebx, dword [ebp - 0x79c]
sub eax, ecx
sub eax, esi
sub eax, dword [ebx + 0xc]
push eax
mov eax, dword [ebp - 0x7a0]
mov eax, dword [eax + 8]
sub eax, edx
sub eax, edi
sub eax, dword [ebx + 8]
mov ebx, dword [ebp - 0x704]
push eax
lea eax, [ecx + esi]
push eax
lea eax, [edx + edi]
push eax
push dword [ebp - 0x7a8]
push ebx
push dword [ebp - 0x708]
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [sym.imp.GDI32.dll_StretchBlt]
jmp 0x4a06c5
mov esi, dword [ebp - 0x7a0]
mov ebx, dword [ebp - 0x79c]
mov eax, dword [ebp - 0x704]
sub eax, dword [ebp - 0x70c]
mov edi, dword [esi + 0xc]
dec eax
sub edi, dword [esi + 4]
sub edi, dword [ebx + 4]
sub edi, dword [ebx + 0xc]
add eax, edi
mov dword [ebp - 0x7d8], edi
cdq
idiv edi
mov dword [ebp - 0x7d0], eax
test eax, eax
jle 0x4a082a
xor esi, esi
mov dword [ebp - 0x7b4], esi
call fcn.0047aa9b
mov eax, dword [ebp - 0x70c]
mov edx, dword [ebp - 0x704]
mov dword [ebp - 0x7bc], edi
lea ecx, [eax + esi]
mov dword [ebp - 0x7c8], ecx
lea ecx, [esi + edi]
mov dword [ebp - 0x7cc], ecx
add ecx, eax
mov dword [ebp - 0x7b8], ecx
cmp ecx, edx
jle 0x4a0451
mov eax, edx
mov dword [ebp - 0x7b8], edx
sub eax, ecx
add eax, edi
mov dword [ebp - 0x7bc], eax
xor eax, eax
mov dword [ebp - 0x72c], eax
mov dword [ebp - 0x728], eax
mov dword [ebp - 0x724], eax
push 0x35
pop ecx
mov esi, str.kw6nBA2wTtazPoNmSeg3R36JxxSHx4vRsp4yRTWyhuu4HHsZ4w2WznzYl7MptUVyr1EFquRsvgbySP6Lk4ufYmxCTEI1apNQxq4eouuf7yR0srZydP7fVy9uhrPzZo3tkHY7eqMsbyptSyRUW6Hw4ggHjfH7lu9PjQs6m7ybdRZ34EGvNvmSLYBFR1Gt4IqzLba9Ioy7wPfZzyw7jJfMw
mov byte [ebp - 4], 0xc
lea edi, [ebp - 0x420]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x768]
movsw word es:[edi], word [esi]
call fcn.004057d0
lea eax, [ebp - 0x768]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x72c]
call fcn.00408170
push 0
push 1
lea ecx, [ebp - 0x768]
call fcn.004096c0
mov esi, dword [ebp - 0x7a0]
mov ecx, dword [ebx]
push 0xcc0020
push dword [ebp - 0x7bc]
mov eax, dword [esi + 8]
mov edx, dword [esi]
sub eax, ecx
sub eax, edx
sub eax, dword [ebx + 8]
push eax
mov eax, dword [esi + 4]
add eax, dword [ebx + 4]
push eax
lea eax, [ecx + edx]
push eax
push dword [ebp - 0x7a8]
mov eax, dword [ebp - 0x7b8]
sub eax, dword [ebp - 0x7c8]
push eax
push dword [ebp - 0x708]
mov eax, dword [ebp - 0x70c]
add eax, dword [ebp - 0x7b4]
push eax
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [sym.imp.GDI32.dll_StretchBlt]
lea ecx, [ebp - 0x72c]
mov byte [ebp - 4], 8
call fcn.0047920e
sub dword [ebp - 0x7d0], 1
mov esi, dword [ebp - 0x7cc]
mov edi, dword [ebp - 0x7d8]
mov dword [ebp - 0x7b4], esi
jne 0x4a040a
jmp 0x4a082a
cmp byte [ebp + 0x30], 0
je 0x4a06d0
call fcn.00479ab0
mov esi, dword [ebp - 0x7a0]
mov ebx, dword [ebp - 0x79c]
mov edx, dword [ebp - 0x708]
dec edx
mov ecx, dword [esi + 8]
sub ecx, dword [esi]
sub ecx, dword [ebx]
sub ecx, dword [ebx + 8]
mov eax, ecx
mov edi, dword [esi + 0xc]
sub eax, dword [ebp - 0x710]
add eax, edx
sub edi, dword [esi + 4]
cdq
idiv ecx
sub edi, dword [ebx + 4]
sub edi, dword [ebx + 0xc]
mov esi, dword [ebp - 0x70c]
mov dword [ebp - 0x7b4], eax
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x7c8], ecx
dec eax
mov ecx, edi
mov dword [ebp - 0x7d8], edi
sub ecx, esi
add eax, ecx
cdq
idiv edi
mov dword [ebp - 0x7d4], eax
test eax, eax
jle 0x4a082a
mov ecx, dword [ebp - 0x704]
xor eax, eax
mov ebx, dword [ebp - 0x7b4]
mov dword [ebp - 0x7d0], eax
lea edx, [esi + eax]
add eax, edi
mov dword [ebp - 0x7e0], eax
add eax, esi
cmp eax, ecx
cmovg eax, ecx
test ebx, ebx
jle 0x4a06ac
sub eax, edx
mov dword [ebp - 0x7b8], ebx
xor edx, edx
mov dword [ebp - 0x7cc], eax
mov dword [ebp - 0x7bc], edx
mov ecx, dword [ebp - 0x710]
mov ebx, dword [ebp - 0x7c8]
add ebx, edx
lea edi, [ecx + edx]
lea esi, [ecx + ebx]
cmp esi, dword [ebp - 0x708]
cmovg esi, dword [ebp - 0x708]
call fcn.00402160
mov edx, dword [ebp - 0x7a0]
sub esi, edi
mov ecx, dword [ebp - 0x79c]
push 0xcc0020
mov eax, dword [edx + 4]
add eax, dword [ecx + 4]
push eax
mov eax, dword [edx]
add eax, dword [ecx]
push eax
push dword [ebp - 0x7a8]
mov eax, dword [ebp - 0x70c]
push dword [ebp - 0x7cc]
add eax, dword [ebp - 0x7d0]
push esi
push eax
mov eax, dword [ebp - 0x710]
add eax, dword [ebp - 0x7bc]
push eax
push dword [ebp - 0x7ac]
call dword [sym.imp.GDI32.dll_BitBlt]
sub dword [ebp - 0x7b8], 1
mov edx, ebx
mov dword [ebp - 0x7bc], edx
jne 0x4a0607
mov esi, dword [ebp - 0x70c]
mov edi, dword [ebp - 0x7d8]
mov ecx, dword [ebp - 0x704]
mov ebx, dword [ebp - 0x7b4]
sub dword [ebp - 0x7d4], 1
mov eax, dword [ebp - 0x7e0]
mov dword [ebp - 0x7d0], eax
jne 0x4a05d7
mov ebx, dword [ebp - 0x79c]
jmp 0x4a082a
mov eax, dword [ebp - 0x7a0]
mov ebx, dword [ebp - 0x79c]
mov esi, dword [eax + 8]
sub esi, dword [eax]
sub esi, dword [ebx]
sub esi, dword [ebx + 8]
mov eax, dword [ebp - 0x708]
mov ecx, esi
sub ecx, dword [ebp - 0x710]
dec eax
add eax, ecx
mov dword [ebp - 0x7c8], esi
cdq
idiv esi
mov dword [ebp - 0x7b4], eax
test eax, eax
jle 0x4a082a
and dword [ebp - 0x7bc], 0
and dword [ebp - 0x72c], 0
and dword [ebp - 0x728], 0
and dword [ebp - 0x724], 0
push 0x72
pop ecx
mov esi, str.ctxVkaWOXjaBKzFAjTGT8F1hVZB5eb3AFxr7tKP4scrBb4H85x7bUiCW7fIHBUFX20xtlZmTEi6VjxK48aI04H8dB67M0HahVE3DXzwHFBMo7Kw59a6K0y0gGE39G1SO5bWfvPEuxlvSQcFTKZ2Xe5CZIILiTmedrTk6yeuTD4yBcCReOliWmSTzOVeymKSHvk52FXZuBDWlZFo0Mld967K0rNrytOLRWDdBMtSpXahT8vSKVxOEnFdBftwyEOmLnkunxwGzdpjpT7mknFeTdChGREAxXKlC3zAkGSqxf72ZC8HqNKo2O8VFUaoX0GXABlw8s6K7YwB7luBqo0mEjgjokE63OXP0UDfzYi3WIsBRumHOT5FDc6KJSNDubN18Mc7dLwKYfZHGSykh7HCktArAxGkLr2SOL8diygHC6T1E5yxHaUH5Wo1CG7S05ejCGaAtto7OHr
mov byte [ebp - 4], 0xa
lea edi, [ebp - 0x328]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x768]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.004057d0
lea eax, [ebp - 0x768]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x72c]
call fcn.00408170
push 0
push 1
lea ecx, [ebp - 0x768]
call fcn.004096c0
mov ecx, dword [ebp - 0x710]
mov esi, dword [ebp - 0x7bc]
mov edx, dword [ebp - 0x7c8]
mov edi, edx
lea eax, [ecx + esi]
mov dword [ebp - 0x7cc], eax
lea eax, [edx + esi]
mov dword [ebp - 0x7bc], eax
add eax, ecx
mov ecx, dword [ebp - 0x708]
mov dword [ebp - 0x7b8], eax
cmp eax, ecx
jle 0x4a07ba
sub edi, eax
mov dword [ebp - 0x7b8], ecx
add edi, ecx
mov esi, dword [ebp - 0x7a0]
mov ecx, dword [ebx + 4]
push 0xcc0020
mov eax, dword [esi + 0xc]
mov edx, dword [esi + 4]
sub eax, ecx
sub eax, edx
sub eax, dword [ebx + 0xc]
push eax
push edi
lea eax, [ecx + edx]
mov ecx, dword [ebp - 0x7cc]
push eax
mov eax, dword [esi]
add eax, dword [ebx]
push eax
push dword [ebp - 0x7a8]
mov eax, dword [ebp - 0x7b8]
push dword [ebp - 0x704]
sub eax, ecx
push eax
push dword [ebp - 0x70c]
push ecx
push dword [ebp - 0x7ac]
call dword [sym.imp.GDI32.dll_StretchBlt]
lea ecx, [ebp - 0x72c]
call fcn.0047920e
sub dword [ebp - 0x7b4], 1
jne 0x4a0715
jmp 0x4a082a
mov ebx, esi
lea ecx, [ebp - 0x744]
mov byte [ebp - 4], 6
call fcn.0047920e
cmp dword [ebx], 0
jle 0x4a0967
cmp dword [ebx + 4], 0
jle 0x4a0a40
and dword [ebp - 0x744], 0
and dword [ebp - 0x740], 0
and dword [ebp - 0x73c], 0
push 0x7b
pop ecx
mov esi, str.qRCf0kCtCXsgfdacekYxawk4c7RoKVmNMsGx16KYtWRn6pZAbIgBy6R0yhG7OpCIj7UFG0UTiKAbMrcqIeVbnjsz7Rv9XvedWkbfxjOk777RQr8nyb18xaFpqRkeRIj3i4dilV3QKzWlt930JI0fNCFmOr3g8ljXftAcuLRkVO0q08KRKCBwF9M9SW9RqwNOAzyd0W0nAk78R5SR8tGznw4xGzUXZ0zpuaeZBX2gc8BP7uu9Pint3BNTXHmyqG3AenLWprLyDdSLmqZvXo4Na8LN4waBWewqMcd9ngGRzk04MiliPV9u41nzq7ezzznw3YGKrZZ5R5zWeJIRqEDaJQxUfkBBmaeSkngxrHAEDU8uIxQLrqCrBpun9D8kvgDn7oXbAg3LhHkvELgbWIORr8gBMAeYrSGmL9LOGv1aooHR6eWyz7YSTtGaQ7I2nr4ltMN2TV8xPX9LOBLWFHqfbZTrwPpgxP2xpnZRXyeTS1l
mov byte [ebp - 4], 0xe
lea edi, [ebp - 0x348]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x348]
push eax
lea ecx, [ebp - 0x768]
call fcn.004057d0
lea eax, [ebp - 0x768]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x744]
call fcn.00408170
push 0
push 1
lea ecx, [ebp - 0x768]
mov byte [ebp - 4], 0xe
call fcn.004096c0
mov eax, dword [ebp - 0x7a4]
mov ecx, dword [ebx + 4]
mov esi, dword [eax + 4]
add ecx, esi
mov edx, dword [eax]
mov eax, dword [ebx]
add eax, edx
mov dword [ebp - 0x710], edx
mov dword [ebp - 0x708], eax
lea eax, [ebp - 0x710]
push eax
push dword [ebp - 0x7b0]
lea eax, [ebp - 0x720]
mov dword [ebp - 0x70c], esi
push eax
mov dword [ebp - 0x704], ecx
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x4a0958
call fcn.00402160
mov edx, dword [ebp - 0x7a0]
mov eax, dword [ebp - 0x704]
mov ecx, dword [ebp - 0x708]
sub eax, dword [ebp - 0x70c]
sub ecx, dword [ebp - 0x710]
push 0xcc0020
push dword [ebx + 4]
mov dword [ebp - 0x708], ecx
push dword [ebx]
mov dword [ebp - 0x704], eax
push dword [edx + 4]
push dword [edx]
push dword [ebp - 0x7a8]
push eax
push ecx
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [sym.imp.GDI32.dll_StretchBlt]
lea ecx, [ebp - 0x744]
mov byte [ebp - 4], 6
call fcn.0047920e
cmp dword [ebx + 4], 0
jle 0x4a0a40
call fcn.00402160
mov ecx, dword [ebp - 0x7a4]
mov eax, dword [ebx]
mov edx, dword [ecx]
mov esi, dword [ecx + 4]
mov ecx, dword [ecx + 8]
sub ecx, eax
mov dword [ebp - 0x70c], esi
lea edi, [eax + edx]
sub ecx, edx
mov eax, dword [ebx + 4]
sub ecx, dword [ebx + 8]
add eax, esi
mov dword [ebp - 0x704], eax
add ecx, edi
lea eax, [ebp - 0x710]
mov dword [ebp - 0x710], edi
push eax
push dword [ebp - 0x7b0]
lea eax, [ebp - 0x720]
mov dword [ebp - 0x708], ecx
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x4a0a40
call fcn.00402160
mov eax, dword [ebp - 0x7a0]
mov ecx, dword [ebx]
mov esi, dword [ebp - 0x704]
mov edi, dword [ebp - 0x708]
mov edx, dword [eax]
mov eax, dword [eax + 8]
sub esi, dword [ebp - 0x70c]
sub eax, ecx
sub edi, dword [ebp - 0x710]
sub eax, edx
sub eax, dword [ebx + 8]
push 0xcc0020
push dword [ebx + 4]
mov dword [ebp - 0x708], edi
push eax
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x704], esi
push dword [eax + 4]
lea eax, [ecx + edx]
push eax
push dword [ebp - 0x7a8]
push esi
push edi
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [sym.imp.GDI32.dll_StretchBlt]
cmp dword [ebx + 8], 0
jle 0x4a0b0d
cmp dword [ebx + 4], 0
jle 0x4a0b0d
call fcn.00402160
mov edi, dword [ebp - 0x7a4]
mov eax, dword [ebx + 4]
mov esi, dword [ebx + 8]
mov ecx, dword [edi + 4]
add eax, ecx
mov edx, dword [edi + 8]
mov dword [ebp - 0x704], eax
sub edx, esi
lea eax, [ebp - 0x710]
mov dword [ebp - 0x710], edx
push eax
push dword [ebp - 0x7b0]
lea eax, [ebp - 0x720]
mov dword [ebp - 0x70c], ecx
add esi, edx
push eax
mov dword [ebp - 0x708], esi
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x4a0b13
call fcn.00402160
mov eax, dword [ebp - 0x7a0]
mov ecx, dword [ebp - 0x704]
mov edx, dword [ebp - 0x708]
sub ecx, dword [ebp - 0x70c]
sub edx, dword [ebp - 0x710]
push 0xcc0020
push dword [ebx + 4]
mov dword [ebp - 0x708], edx
push dword [ebx + 8]
mov dword [ebp - 0x704], ecx
push dword [eax + 4]
mov eax, dword [eax + 8]
sub eax, dword [ebx + 8]
push eax
push dword [ebp - 0x7a8]
push ecx
push edx
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [sym.imp.GDI32.dll_StretchBlt]
jmp 0x4a0b13
mov edi, dword [ebp - 0x7a4]
cmp dword [ebx], 0
jle 0x4a0c74
call fcn.0047e26b
mov ecx, dword [ebp - 0x79c]
mov esi, dword [edi + 4]
mov edx, dword [ebp - 0x7a4]
mov ebx, dword [edi]
mov eax, dword [ecx + 4]
mov ecx, dword [ecx]
mov edx, dword [edx + 0xc]
add ecx, ebx
sub edx, eax
mov dword [ebp - 0x710], ebx
lea edi, [eax + esi]
mov dword [ebp - 0x708], ecx
mov eax, dword [ebp - 0x79c]
sub edx, esi
mov dword [ebp - 0x70c], edi
sub edx, dword [eax + 0xc]
lea eax, [ebp - 0x710]
push eax
push dword [ebp - 0x7b0]
lea eax, [ebp - 0x720]
add edx, edi
push eax
mov dword [ebp - 0x704], edx
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x4a0c6e
xor ebx, ebx
mov dword [ebp - 0x744], ebx
mov dword [ebp - 0x740], ebx
mov dword [ebp - 0x73c], ebx
push 0x76
pop ecx
mov esi, str.XYSNCsKlkcUb3iPGIpyFdB2Higd6i3AtwsLy3y3NSYgCBWYzyE05QMj76HenQPgw8GHD5h7TkOXYOcM3jsl4JwjxH26bwFPNan903flz55fDxUyRnliBDSXjcI8HRrvuFZLCwSoh0bzezRwWkZj8bbI8KLfdCSJAUgEtSzfQk4PrZJAh0Cb7OdbbKVFmGga1zSPLkNYjBSE6esLs1IDfp450XRAE1PHFD50sDy3TbXBH4dQ1iSKEECa8bwQtxS0kQkEvy9jYxAReFCSd9W1uFslUlWCzZvChzPixxk60DlVuqJ0UYM0ridNl8RfPN6eUlC1pMeT3uiwlqggYFIgp6XocYh7C9n5DksEXBrwkCExFHb9HW9wNFOvTcdTrIKYWeHnEb6yXBNNeA4YR67Rd4h5LpgG6LDVDX9tY4vfOEVwpk8T47au3kKhycjFAg3rfiMflxKR4YtBCmjpZQ9xgrZencT
mov byte [ebp - 4], 0x10
lea edi, [ebp - 0x338]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x338]
push eax
lea ecx, [ebp - 0x768]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.004057d0
lea eax, [ebp - 0x768]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x744]
call fcn.00408170
push ebx
push 1
lea ecx, [ebp - 0x768]
call fcn.004096c0
mov eax, dword [ebp - 0x7a0]
mov ebx, dword [ebp - 0x79c]
mov esi, dword [ebp - 0x704]
mov edi, dword [ebp - 0x708]
mov edx, dword [eax + 4]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebx + 4]
sub eax, ecx
sub esi, dword [ebp - 0x70c]
sub eax, edx
sub eax, dword [ebx + 0xc]
sub edi, dword [ebp - 0x710]
push 0xcc0020
push eax
push dword [ebx]
lea eax, [ecx + edx]
mov dword [ebp - 0x708], edi
push eax
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x704], esi
push dword [eax]
push dword [ebp - 0x7a8]
push esi
push edi
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [sym.imp.GDI32.dll_StretchBlt]
lea ecx, [ebp - 0x744]
mov byte [ebp - 4], 6
call fcn.0047920e
jmp 0x4a0c74
mov ebx, dword [ebp - 0x79c]
cmp dword [ebx + 8], 0
jle 0x4a0d76
call fcn.004803f7
mov ecx, dword [ebp - 0x7a4]
mov eax, dword [ebp - 0x79c]
mov ebx, dword [ebx + 8]
mov edx, dword [ecx + 4]
mov eax, dword [eax + 4]
mov edi, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
sub edi, ebx
sub ecx, eax
mov dword [ebp - 0x710], edi
lea esi, [eax + edx]
sub ecx, edx
mov eax, dword [ebp - 0x79c]
add ebx, edi
mov dword [ebp - 0x70c], esi
mov dword [ebp - 0x708], ebx
sub ecx, dword [eax + 0xc]
lea eax, [ebp - 0x710]
push eax
push dword [ebp - 0x7b0]
lea eax, [ebp - 0x720]
add ecx, esi
push eax
mov dword [ebp - 0x704], ecx
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x4a0d70
call fcn.0047ff8b
mov eax, dword [ebp - 0x7a0]
mov ebx, dword [ebp - 0x79c]
mov esi, dword [ebp - 0x704]
mov edi, dword [ebp - 0x708]
mov edx, dword [eax + 4]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebx + 4]
sub eax, ecx
sub esi, dword [ebp - 0x70c]
sub eax, edx
sub eax, dword [ebx + 0xc]
sub edi, dword [ebp - 0x710]
push 0xcc0020
push eax
push dword [ebx + 8]
lea eax, [ecx + edx]
mov dword [ebp - 0x708], edi
push eax
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x704], esi
mov eax, dword [eax + 8]
sub eax, dword [ebx + 8]
push eax
push dword [ebp - 0x7a8]
push esi
push edi
push dword [ebp - 0x70c]
mov edi, dword [ebp - 0x7ac]
push dword [ebp - 0x710]
push edi
call dword [sym.imp.GDI32.dll_StretchBlt]
jmp 0x4a0d7c
mov ebx, dword [ebp - 0x79c]
mov edi, dword [ebp - 0x7ac]
mov eax, dword [ebx]
mov esi, dword [ebp - 0x7a4]
mov dword [ebp - 0x7c0], eax
test eax, eax
jle 0x4a0e4b
mov edx, dword [ebx + 0xc]
test edx, edx
jle 0x4a0e4b
mov eax, dword [esi]
add dword [ebp - 0x7c0], eax
mov ecx, dword [esi + 0xc]
mov dword [ebp - 0x710], eax
sub ecx, edx
mov eax, dword [ebp - 0x7c0]
add edx, ecx
mov dword [ebp - 0x708], eax
lea eax, [ebp - 0x710]
push eax
push dword [ebp - 0x7b0]
lea eax, [ebp - 0x720]
mov dword [ebp - 0x70c], ecx
push eax
mov dword [ebp - 0x704], edx
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x4a0e4b
call fcn.0047bcdd
mov esi, dword [ebp - 0x7a0]
mov ecx, dword [ebp - 0x704]
mov edx, dword [ebp - 0x708]
sub ecx, dword [ebp - 0x70c]
mov eax, dword [esi + 0xc]
sub eax, dword [ebx + 0xc]
sub edx, dword [ebp - 0x710]
push 0xcc0020
push dword [ebx + 0xc]
mov dword [ebp - 0x708], edx
push dword [ebx]
mov dword [ebp - 0x704], ecx
push eax
push dword [esi]
push dword [ebp - 0x7a8]
push ecx
push edx
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
push edi
call dword [sym.imp.GDI32.dll_StretchBlt]
mov esi, dword [ebp - 0x7a4]
cmp dword [ebx + 0xc], 0
jle 0x4a0f32
call fcn.00402160
mov ecx, dword [ebx]
mov edx, dword [esi]
mov eax, dword [ebp - 0x7a4]
mov ebx, dword [ebx + 0xc]
mov esi, dword [esi + 0xc]
lea edi, [ecx + edx]
sub esi, ebx
mov eax, dword [eax + 8]
add ebx, esi
sub eax, ecx
mov dword [ebp - 0x710], edi
mov ecx, dword [ebp - 0x79c]
sub eax, edx
mov dword [ebp - 0x70c], esi
mov dword [ebp - 0x704], ebx
sub eax, dword [ecx + 8]
add eax, edi
mov edi, dword [ebp - 0x7b0]
mov dword [ebp - 0x708], eax
lea eax, [ebp - 0x710]
push eax
push edi
lea eax, [ebp - 0x720]
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
mov ebx, dword [ebp - 0x79c]
test eax, eax
je 0x4a0f38
mov eax, dword [ebp - 0x7a0]
mov ecx, dword [ebx]
mov esi, dword [ebp - 0x704]
mov edi, dword [ebp - 0x708]
mov edx, dword [eax]
mov eax, dword [eax + 8]
sub esi, dword [ebp - 0x70c]
sub eax, ecx
sub edi, dword [ebp - 0x710]
sub eax, edx
sub eax, dword [ebx + 8]
push 0xcc0020
push dword [ebx + 0xc]
mov dword [ebp - 0x708], edi
push eax
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x704], esi
mov eax, dword [eax + 0xc]
sub eax, dword [ebx + 0xc]
push eax
lea eax, [ecx + edx]
push eax
push dword [ebp - 0x7a8]
push esi
push edi
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [sym.imp.GDI32.dll_StretchBlt]
mov edi, dword [ebp - 0x7b0]
cmp dword [ebx + 8], 0
jle 0x4a106e
cmp dword [ebx + 0xc], 0
jle 0x4a106e
call fcn.0047b2fd
mov eax, dword [ebp - 0x7a4]
mov ecx, dword [ebx + 0xc]
mov esi, dword [ebx + 8]
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
sub edx, esi
sub eax, ecx
mov dword [ebp - 0x710], edx
add ecx, eax
mov dword [ebp - 0x70c], eax
lea eax, [ebp - 0x710]
mov dword [ebp - 0x704], ecx
push eax
push edi
lea eax, [ebp - 0x720]
add esi, edx
push eax
mov dword [ebp - 0x708], esi
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x4a106e
xor eax, eax
mov dword [ebp - 0x744], eax
mov dword [ebp - 0x740], eax
mov dword [ebp - 0x73c], eax
push 0x49
pop ecx
mov esi, str.6yjXw4T5jQZpBQWvz633dVT9Di4V9W3O97h1OWx11IAlw5Csj09q0gFM2i61MrNNnW9FhgciY00BoquFi9kdnNeetA6Rz1xMVpgDfxpliehIrRVhkuFyYtnwC1c87boe9moO6i9Ql2W2m0rPfqiXHiHV2XepjAGcFRQdAGuqygrkyWd3xyH9D3WJeDC2ujpZ7WOPQVPEb84PUjam8qQGadG2tqzgeCbMfZtQGudOFSG2Uy7BLEeVecnaWxxG8ASputdd4CiXyTRF9bsDeOXAH1Mh0KruMGDye62p
mov byte [ebp - 4], 0x12
lea edi, [ebp - 0x138]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x768]
movsb byte es:[edi], byte [esi]
call fcn.004057d0
lea eax, [ebp - 0x768]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x744]
call fcn.00408170
push 0
push 1
lea ecx, [ebp - 0x768]
call fcn.004096c0
mov esi, dword [ebp - 0x7a0]
mov ecx, dword [ebp - 0x704]
mov edx, dword [ebp - 0x708]
sub ecx, dword [ebp - 0x70c]
mov eax, dword [esi + 0xc]
sub eax, dword [ebx + 0xc]
sub edx, dword [ebp - 0x710]
push 0xcc0020
push dword [ebx + 0xc]
mov dword [ebp - 0x708], edx
push dword [ebx + 8]
mov dword [ebp - 0x704], ecx
push eax
mov eax, dword [esi + 8]
sub eax, dword [ebx + 8]
push eax
push dword [ebp - 0x7a8]
push ecx
push edx
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
push dword [ebp - 0x7ac]
call dword [sym.imp.GDI32.dll_StretchBlt]
lea ecx, [ebp - 0x744]
call fcn.0047920e
lea ecx, [ebp - 0x774]
call fcn.0047920e
lea ecx, [ebp - 0x78c]
call fcn.0047920e
push dword [ebp - 0x7e8]
push dword [ebp - 0x7a8]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp - 0x7a8]
call dword [sym.imp.GDI32.dll_DeleteDC]
call fcn.00513e4b
ret