Function at 0x4061d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x45a6b8
mov eax, dword fs:[0]
push eax
sub esp, 0x78
push ebx
push ebp
push esi
push edi
mov eax, dword [0x47613c]
xor eax, esp
push eax
lea eax, [esp + 0x8c]
mov dword fs:[0], eax
mov dword [esp + 0x18], ecx
mov ecx, dword [0x477df0]
sub ecx, dword [0x477dec]
mov eax, 0x78787879
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
lea eax, [edx + eax - 1]
cmp eax, 3
jle 0x406227
mov eax, 3
mov ecx, dword [0x478674]
mov esi, dword [eax*4 + 0x473204]
lea ebx, [eax*4 + 0x473204]
push ecx
lea ecx, [esp + 0x7c]
call fcn.0041b3d7
xor edi, edi
cmp byte [esp + 0x9c], 0
mov dword [esp + 0x94], edi
mov dword [esp + 0x24], edi
jne 0x406558
mov ecx, dword [0x477df0]
sub ecx, dword [0x477dec]
mov eax, 0x78787879
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x14], edi
je 0x40646c
xor ebp, ebp
mov dword [esp + 0x20], ebx
lea ecx, [ecx]
cmp edi, dword [0x477dcc]
jl 0x40643a
mov ebx, dword [esp + 0x18]
cmp dword [0x4775b4], edi
jne 0x4062b0
add ebx, 0x1054
jmp 0x4062b6
add ebx, 0x104c
lea ecx, [esp + 0x58]
call fcn.0041aeec
mov ecx, dword [esp + 0x7c]
push ecx
mov byte [esp + 0x98], 1
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
lea ecx, [esp + 0x5c]
call fcn.0041b355
test eax, eax
je 0x406331
test ebx, ebx
jne 0x4062e8
xor eax, eax
jmp 0x4062eb
mov eax, dword [ebx + 4]
mov edx, dword [esp + 0x5c]
push eax
push edx
call fcn.0041b6ca
mov ecx, dword [esp + 0x7c]
push 0xcc0020
push 0
push 0
mov edi, eax
mov eax, dword [esp + 0x68]
push eax
push 0x11
push 0x2c
push 0x13c
push esi
push ecx
call dword [sym.imp.GDI32.dll_BitBlt]
test edi, edi
je 0x406322
mov edi, dword [edi + 4]
mov edx, dword [esp + 0x5c]
push edi
push edx
call fcn.0041b6ca
mov edi, dword [esp + 0x14]
lea ecx, [esp + 0x58]
mov byte [esp + 0x94], 0
call fcn.0041b3be
mov eax, dword [0x4775b8]
test eax, eax
je 0x40635e
push eax
mov eax, dword [esp + 0x80]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ebx, eax
jmp 0x406360
xor ebx, ebx
mov dword [esp + 0x38], esi
add esi, 0x2c
push 0xffffff
lea ecx, [esp + 0x7c]
mov dword [esp + 0x44], esi
mov dword [esp + 0x40], 0x13f
mov dword [esp + 0x48], 0x150
call fcn.0041ad81
push 1
lea ecx, [esp + 0x7c]
call fcn.0041ad4f
mov ecx, dword [0x477dec]
lea eax, [ecx + ebp]
push eax
lea ecx, [esp + 0x20]
call fcn.00406110
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax - 0xc]
push 1
lea edx, [esp + 0x3c]
push edx
push ecx
push eax
mov eax, dword [esp + 0x88]
mov edx, dword [eax + 0x68]
lea ecx, [esp + 0x88]
mov byte [esp + 0xa4], 2
call edx
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x94], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4063fa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test ebx, ebx
je 0x40640a
mov ecx, dword [esp + 0x7c]
push ebx
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [esp + 0x20]
mov esi, dword [eax - 4]
sub eax, 4
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x24]
inc eax
cmp byte [0x477dc9], 0
mov dword [esp + 0x24], eax
je 0x406431
cmp eax, 3
jge 0x40646a
jmp 0x40643a
cmp eax, 4
jge 0x406556
mov ecx, dword [0x477df0]
sub ecx, dword [0x477dec]
mov eax, 0x78787879
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
add ebp, 0x110
mov dword [esp + 0x14], edi
cmp edi, eax
jb 0x406290
xor edi, edi
cmp byte [0x477dc9], 0
je 0x406558
lea ecx, [esp + 0x58]
call fcn.0041aeec
mov ecx, dword [esp + 0x7c]
push ecx
mov byte [esp + 0x98], 3
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
lea ecx, [esp + 0x5c]
call fcn.0041b355
test eax, eax
je 0x406543
mov ebp, dword [esp + 0x18]
lea eax, [ebp + 0x10b4]
cmp eax, edi
jne 0x4064b9
xor eax, eax
jmp 0x4064bc
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x5c]
push eax
push edx
call fcn.0041b6ca
mov ecx, dword [esp + 0x7c]
mov ebx, dword [sym.imp.GDI32.dll_BitBlt]
push 0xcc0020
push edi
push edi
mov esi, eax
mov eax, dword [esp + 0x68]
push eax
push 0x11
push 0x10
push 0x13c
push 0x123
push ecx
call ebx
lea eax, [ebp + 0x10bc]
cmp eax, edi
jne 0x4064fe
xor eax, eax
jmp 0x406501
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x5c]
push eax
push edx
call fcn.0041b6ca
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x7c]
push 0xcc0020
push edi
push edi
push eax
push 0x11
push 0x10
push 0x13c
push 0x137
push ecx
call ebx
cmp esi, edi
jne 0x406535
xor esi, esi
jmp 0x406538
mov esi, dword [esi + 4]
mov edx, dword [esp + 0x5c]
push esi
push edx
call fcn.0041b6ca
lea ecx, [esp + 0x58]
mov byte [esp + 0x94], 0
call fcn.0041b3be
jmp 0x406558
xor edi, edi
lea ecx, [esp + 0x68]
call fcn.0041aeec
lea ecx, [esp + 0x48]
mov byte [esp + 0x94], 4
call fcn.0041aeec
mov eax, dword [esp + 0x7c]
mov esi, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
mov byte [esp + 0x98], 5
call esi
push eax
lea ecx, [esp + 0x4c]
call fcn.0041b355
mov ecx, dword [esp + 0x7c]
push ecx
call esi
push eax
lea ecx, [esp + 0x6c]
call fcn.0041b355
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], vtable.CBitmap.0
mov edx, dword [esp + 0x7c]
push 0x72
push 0x121
push edx
mov byte [esp + 0xa0], 6
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
lea ecx, [esp + 0x34]
call fcn.0041b611
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x4c]
push eax
push ecx
call fcn.0041b6ca
mov esi, eax
mov dword [esp + 0x1c], esi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], vtable.CBrush.0
push edi
mov byte [esp + 0x98], 7
mov dword [esp + 0x3c], edi
mov dword [esp + 0x44], 0x121
mov dword [esp + 0x40], edi
mov dword [esp + 0x48], 0x72
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push eax
lea ecx, [esp + 0x2c]
call fcn.0041b611
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x4c]
push edx
lea eax, [esp + 0x3c]
push eax
push ecx
call dword [sym.imp.USER32.dll_FillRect]
lea ecx, [esp + 0x28]
call fcn.0041b669
mov eax, dword [0x4775b8]
cmp eax, edi
je 0x40665d
mov edx, dword [esp + 0x4c]
push eax
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x20], eax
jmp 0x406661
mov dword [esp + 0x20], edi
mov ecx, dword [0x477df0]
mov ebp, dword [0x477dec]
mov ebx, dword [0x4775b4]
sub ecx, ebp
mov eax, 0x78787879
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ebx
jbe 0x40680f
mov ecx, ebx
imul ecx, ecx, 0x110
lea eax, [ecx + ebp + 0x100]
mov ecx, dword [eax + 8]
sub ecx, dword [eax + 4]
mov eax, 0x71625345
imul ecx
sar edx, 0xa
mov eax, edx
xor edi, edi
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x14], edi
je 0x40680f
lea esi, [edi + 0xb]
jmp 0x4066d0
mov eax, dword [esp + 0x14]
cmp eax, dword [0x4775ac]
jl 0x4067d0
cmp eax, dword [0x4775b0]
jne 0x4066f2
or al, 0xff
or cl, 0xff
or dl, 0xff
jmp 0x406708
cmp eax, dword [0x47321c]
jne 0x406702
mov al, 0xaa
mov cl, al
mov dl, al
jmp 0x406708
mov al, 0x82
mov cl, 0x80
mov dl, 0x78
movzx edx, dl
movzx ecx, cl
shl edx, 8
or edx, ecx
movzx eax, al
shl edx, 8
mov dword [esp + 0x3c], esi
or edx, eax
add esi, 0x10
push edx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x3c], 0x15
mov dword [esp + 0x44], 0x115
mov dword [esp + 0x48], esi
call fcn.0041ad81
push 1
lea ecx, [esp + 0x4c]
call fcn.0041ad4f
mov eax, dword [0x4775b4]
imul eax, eax, 0x110
add eax, dword [0x477dec]
lea ecx, [esp + 0x24]
mov eax, dword [eax + 0x104]
add eax, edi
push eax
call fcn.00406110
mov eax, dword [esp + 0x24]
mov ecx, dword [eax - 0xc]
push 0
lea edx, [esp + 0x3c]
push edx
push ecx
push eax
mov eax, dword [esp + 0x58]
mov edx, dword [eax + 0x68]
lea ecx, [esp + 0x58]
mov byte [esp + 0xa4], 8
call edx
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov byte [esp + 0x94], 7
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4067bb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp esi, 0x6b
jge 0x40680b
mov ebp, dword [0x477dec]
mov ebx, dword [0x4775b4]
mov eax, dword [esp + 0x14]
mov ecx, ebx
imul ecx, ecx, 0x110
inc eax
mov dword [esp + 0x14], eax
lea eax, [ecx + ebp + 0x100]
mov ecx, dword [eax + 8]
sub ecx, dword [eax + 4]
mov eax, 0x71625345
imul ecx
sar edx, 0xa
mov eax, edx
shr eax, 0x1f
add eax, edx
add edi, 0x908
cmp dword [esp + 0x14], eax
jb 0x4066d0
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x7c]
push 0xcc0020
push 0
push 0
push ecx
push 0x72
push 0x121
push 0x151
push 0x18
push edx
call dword [sym.imp.GDI32.dll_BitBlt]
test esi, esi
jne 0x40683e
xor eax, eax
jmp 0x406841
mov eax, dword [esi + 4]
push eax
mov eax, dword [esp + 0x50]
push eax
call fcn.0041b6ca
mov eax, dword [esp + 0x20]
test eax, eax
je 0x406860
mov ecx, dword [esp + 0x4c]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
lea ecx, [esp + 0x28]
mov byte [esp + 0x94], 6
mov dword [esp + 0x28], vtable.CBrush.0
call fcn.004017f0
lea ecx, [esp + 0x30]
mov byte [esp + 0x94], 5
mov dword [esp + 0x30], vtable.CBitmap.0
call fcn.004017f0
lea ecx, [esp + 0x48]
mov byte [esp + 0x94], 4
call fcn.0041b3be
lea ecx, [esp + 0x68]
mov byte [esp + 0x94], 0
call fcn.0041b3be
lea ecx, [esp + 0x78]
mov dword [esp + 0x94], 0xffffffff
call fcn.0041b42b
mov ecx, dword [esp + 0x8c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x84
ret 4