Function at 0x473d28
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffdf8
xor eax, eax
xor edx, edx
cmp dword [0x7efb34], 0
push ebx
push esi
push edi
mov edi, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x20], edx
je 0x473d59
mov ecx, dword [0x662bcc]
mov dword [ebp - 0x24], ecx
cmp ebx, 0xffffffff
jne 0x473d64
mov ebx, dword [0x7ccc88]
cmp esi, 0xffffffff
jne 0x473d6f
mov esi, dword [0x7ccc8c]
cmp edi, 0xffffffff
jne 0x473d7a
mov edi, dword [0x7ccc90]
cmp dword [ebp + 0x18], 0xffffffff
jne 0x473d88
mov eax, dword [0x7ccc94]
mov dword [ebp + 0x18], eax
cmp ebx, dword [0x7ccc88]
jne 0x473db8
cmp esi, dword [0x7ccc8c]
jne 0x473db8
cmp edi, dword [0x7ccc90]
jne 0x473db8
cmp dword [ebp + 0x14], 0
jne 0x473db8
mov edx, dword [ebp + 0x18]
cmp edx, dword [0x7ccc94]
jne 0x473db8
xor eax, eax
jmp 0x474afc
push 0x5f3277
call fcn.0045df78
pop ecx
call fcn.0045e204
call fcn.0058ed00
push eax
call fcn.0058ed5c
pop ecx
test eax, eax
je 0x473dfc
call fcn.0058ed00
push eax
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0xbc]
push eax
call fcn.0058ec70
add esp, 0x10
mov dword [ebp - 0x20], 1
mov edx, dword [0x7ccc88]
mov ecx, dword [0x7ccc8c]
mov dword [ebp - 4], edx
mov edx, dword [0x7ccc94]
mov dword [ebp - 8], ecx
mov eax, dword [0x7ccc90]
mov dword [ebp - 0xc], eax
mov dword [0x7ccc88], ebx
mov dword [0x7ccc8c], esi
mov dword [ebp - 0x10], edx
mov ecx, dword [ebp + 0x18]
mov dword [0x7ccc90], edi
mov dword [0x7ccc94], ecx
cmp dword [0x610fb4], 0
jne 0x473e4c
cmp dword [0x610fb0], 0
je 0x473e5e
cmp dword [0x7efb1c], 0
jne 0x473e65
cmp dword [0x7c9d98], 0
jne 0x473e65
xor eax, eax
jmp 0x474afc
mov dword [0x7efb24], 0xffffffff
cmp dword [0x8efc64], 0
je 0x473ead
push 0
call fcn.00460538
pop ecx
sub eax, dword [0x8efc64]
cmp eax, 0x7d0
jge 0x473ead
push 0
call fcn.00460538
sub eax, dword [0x8efc64]
mov edx, 0x7d0
sub edx, eax
pop ecx
add edx, 0x3c
push edx
call sub.KERNEL32.DLL_Sleep
jmp 0x473eb4
push 0x3c
call sub.KERNEL32.DLL_Sleep
push 0
call fcn.00460538
pop ecx
mov dword [0x8efc64], eax
push 0
call fcn.005839ac
pop ecx
call fcn.00583748
call fcn.00569458
call fcn.0047217c
call fcn.004759c4
cmp dword [0x7efb34], 0
je 0x474389
mov ecx, dword [0x662bcc]
mov dword [ebp - 0x24], ecx
call fcn.00476830
cmp dword [0x7efb1c], 0
jne 0x474171
push 0x5f3297
call fcn.0045df78
mov eax, 8
pop ecx
mov dword [0x7ccca0], eax
mov edx, dword [0x7ccca0]
mov eax, dword [0x7c9d98]
push edx
mov ecx, dword [0x652af8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x50]
cmp dword [0x7c9d98], 0
je 0x473f48
mov ecx, dword [0x7c9d98]
push ecx
mov eax, dword [ecx]
call dword [eax + 8]
xor edx, edx
push 0x5f32c5
mov dword [0x7c9d98], edx
call fcn.0045df78
pop ecx
push 0x7c9d98
call fcn.00471d5c
pop ecx
call fcn.0045f38c
dec eax
jne 0x473fba
cmp dword [0x7efb30], 0
je 0x473f7e
mov ecx, 0x400
jmp 0x473f80
xor ecx, ecx
or ecx, 8
mov dword [0x7ccca0], ecx
mov eax, dword [0x7ccca0]
mov edx, dword [0x652af8]
push eax
mov eax, dword [0x7c9d98]
push edx
push eax
mov edx, dword [eax]
call dword [edx + 0x50]
test eax, eax
je 0x47401b
call fcn.0045e210
push 0x5f32f5
call fcn.0045e224
pop ecx
jmp 0x474afc
cmp dword [0x7efb30], 0
je 0x473fca
mov ecx, 0x400
jmp 0x473fcc
xor ecx, ecx
or ecx, 0x11
mov dword [0x7ccca0], ecx
mov eax, dword [0x7ccca0]
mov edx, dword [0x652af8]
push eax
mov eax, dword [0x7c9d98]
push edx
push eax
mov edx, dword [eax]
call dword [edx + 0x50]
test eax, eax
je 0x47401b
cmp eax, 0x88760245
je 0x47401b
cmp eax, 0x8876023b
je 0x47401b
cmp eax, 0x8876023a
je 0x47401b
call fcn.0045e210
push 0x5f3334
call fcn.0045e224
pop ecx
jmp 0x474afc
push 0
call fcn.00475e50
pop ecx
call fcn.0045f38c
test eax, eax
jne 0x47437f
call fcn.00475e48
test eax, eax
jne 0x47437f
push 0x5f3373
call fcn.0045df78
pop ecx
push 0
mov ecx, dword [0x7ccc94]
mov eax, dword [0x7ccc90]
push ecx
push eax
mov edx, dword [0x7ccc8c]
mov eax, dword [0x7c9d98]
push edx
mov ecx, dword [0x7ccc88]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
je 0x474159
xor ecx, ecx
push 0
mov dword [0x7ccc94], ecx
push 0
mov eax, dword [0x7ccc90]
mov edx, dword [0x7ccc8c]
push eax
mov eax, dword [0x7c9d98]
push edx
mov ecx, dword [0x7ccc88]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
je 0x474159
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov dword [0x7ccc88], ecx
mov edx, dword [ebp - 0xc]
mov dword [0x7ccc8c], eax
mov ecx, dword [ebp - 0x10]
mov dword [0x7ccc90], edx
mov dword [0x7ccc94], ecx
push 0
mov eax, dword [0x7ccc90]
push 0
push eax
mov edx, dword [0x7ccc8c]
mov eax, dword [0x7c9d98]
push edx
mov ecx, dword [0x7ccc88]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
je 0x474159
mov dword [ebp - 0x14], 0xfffffffe
mov dword [0x7ccc88], 0x280
mov dword [0x7ccc8c], 0x1e0
mov dword [0x7ccc90], 0x10
xor ecx, ecx
mov dword [0x7ccc94], ecx
push 0
push 0
mov eax, dword [0x7ccc90]
push eax
mov edx, dword [0x7ccc8c]
push edx
mov ecx, dword [0x7ccc88]
push ecx
mov eax, dword [0x7c9d98]
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
je 0x474159
push 0x5f338e
call fcn.0045e224
pop ecx
jmp 0x474afc
push 1
call fcn.00475e50
pop ecx
push 0x5f33bb
call fcn.0045df78
pop ecx
jmp 0x47437f
push 0
call fcn.00475e50
pop ecx
call fcn.0045f38c
test eax, eax
jne 0x47437f
call fcn.00475e48
test eax, eax
jne 0x47437f
push 0x9c
push 0
lea ecx, [ebp - 0x158]
push ecx
call fcn.0045ea68
mov word [ebp - 0x134], 0x9c
mov eax, dword [0x7ccc88]
mov edx, dword [0x7ccc8c]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe8], edx
mov ecx, dword [0x7ccc90]
add esp, 0xc
mov dword [ebp - 0xf0], ecx
cmp dword [0x7ccc94], 0
mov dword [ebp - 0x130], 0x1c0000
je 0x4741fd
mov eax, dword [0x7ccc94]
mov dword [ebp - 0xe0], eax
or dword [ebp - 0x130], 0x400000
push 0x5f33c9
call fcn.0045df78
pop ecx
push 4
lea edx, [ebp - 0x158]
push edx
call sub.USER32.DLL_ChangeDisplaySettingsA
test eax, eax
je 0x47436c
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0xe0], eax
lea edx, [ebp - 0x158]
and dword [ebp - 0x130], 0xffbfffff
push 0
push edx
mov dword [0x7ccc94], ecx
call sub.USER32.DLL_ChangeDisplaySettingsA
test eax, eax
je 0x47436c
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov dword [0x7ccc88], ecx
mov edx, dword [ebp - 0xc]
mov dword [0x7ccc8c], eax
mov ecx, dword [ebp - 0x10]
mov dword [0x7ccc90], edx
mov dword [0x7ccc94], ecx
mov eax, dword [0x7ccc88]
mov edx, dword [0x7ccc8c]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe8], edx
mov ecx, dword [0x7ccc90]
cmp dword [0x7ccc94], 0
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0x130], 0x1c0000
je 0x4742bc
mov eax, dword [0x7ccc94]
mov dword [ebp - 0xe0], eax
or dword [ebp - 0x130], 0x400000
push 0
lea edx, [ebp - 0x158]
push edx
call sub.USER32.DLL_ChangeDisplaySettingsA
test eax, eax
je 0x47436c
mov dword [ebp - 0x14], 0xfffffffe
mov dword [0x7ccc88], 0x280
mov dword [0x7ccc8c], 0x1e0
mov dword [0x7ccc90], 0x10
xor ecx, ecx
mov dword [0x7ccc94], ecx
mov eax, dword [0x7ccc88]
mov dword [ebp - 0xec], eax
mov edx, dword [0x7ccc8c]
mov dword [ebp - 0xe8], edx
mov ecx, dword [0x7ccc90]
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0x130], 0x1c0000
cmp dword [0x7ccc94], 0
je 0x47434a
mov eax, dword [0x7ccc94]
mov dword [ebp - 0xe0], eax
or dword [ebp - 0x130], 0x400000
push 0
lea edx, [ebp - 0x158]
push edx
call sub.USER32.DLL_ChangeDisplaySettingsA
test eax, eax
je 0x47436c
push 0x5f33e4
call fcn.0045e224
pop ecx
jmp 0x474afc
push 1
call fcn.00475e50
pop ecx
push 0x5f3411
call fcn.0045df78
pop ecx
call fcn.0045e210
jmp 0x47455e
call fcn.0045f38c
test eax, eax
jne 0x474397
call fcn.0045f4b4
lea ecx, [ebp - 0x30]
push ecx
lea eax, [ebp - 0x2c]
push eax
lea edx, [ebp - 0x28]
push edx
call fcn.0045f394
add esp, 0xc
cmp dword [0x7ccc88], 0
jne 0x4743be
mov dword [0x7ccc88], 0x280
cmp dword [0x7ccc8c], 0
jne 0x4743d1
mov dword [0x7ccc8c], 0x1e0
cmp dword [0x7ccc90], 0
jne 0x4743e4
mov dword [0x7ccc90], 0x10
mov ecx, dword [0x652af8]
push ecx
push 0x7efb00
call fcn.0045f38c
push eax
push 0x7ccca0
push 0x7ccc90
mov eax, dword [0x7ccc90]
push eax
mov edx, dword [0x7ccc8c]
push edx
mov ecx, dword [0x7ccc88]
push ecx
mov eax, dword [ebp - 0x2c]
push eax
mov edx, dword [ebp - 0x28]
push edx
mov ecx, dword [0x7c9d98]
push ecx
call fcn.00474ccc
add esp, 0x2c
inc eax
jne 0x47455e
mov dword [ebp - 0x14], 0xffffffff
mov eax, dword [ebp - 4]
mov dword [0x7ccc88], eax
mov edx, dword [ebp - 8]
mov dword [0x7ccc8c], edx
mov ecx, dword [ebp - 0xc]
mov dword [0x7ccc90], ecx
mov eax, dword [ebp - 0x10]
mov dword [0x7ccc94], eax
call fcn.0045f38c
test eax, eax
jne 0x474469
call fcn.0045f4b4
cmp ebx, dword [ebp - 4]
jne 0x47447e
cmp esi, dword [ebp - 8]
jne 0x47447e
cmp edi, dword [ebp - 0xc]
jne 0x47447e
cmp dword [ebp - 0x10], 0
je 0x4744cc
mov edx, dword [0x652af8]
push edx
push 0x7efb00
call fcn.0045f38c
push eax
push 0x7ccca0
push 0x7ccc90
mov ecx, dword [0x7ccc90]
push ecx
mov eax, dword [0x7ccc8c]
push eax
mov edx, dword [0x7ccc88]
push edx
mov ecx, dword [ebp - 0x2c]
push ecx
mov eax, dword [ebp - 0x28]
push eax
mov edx, dword [0x7c9d98]
push edx
call fcn.00474ccc
add esp, 0x2c
inc eax
jne 0x47455e
mov dword [ebp - 0x14], 0xfffffffe
mov dword [0x7ccc88], 0x280
mov dword [0x7ccc8c], 0x1e0
mov dword [0x7ccc90], 0x10
xor ecx, ecx
mov dword [0x7ccc94], ecx
call fcn.0045f38c
dec eax
jne 0x474506
call fcn.0045f4b4
mov eax, dword [0x652af8]
push eax
push 0x7efb00
call fcn.0045f38c
push eax
push 0x7ccca0
push 0x7ccc90
mov edx, dword [0x7ccc90]
push edx
mov ecx, dword [0x7ccc8c]
push ecx
mov eax, dword [0x7ccc88]
push eax
mov edx, dword [ebp - 0x2c]
push edx
mov ecx, dword [ebp - 0x28]
push ecx
mov eax, dword [0x7c9d98]
push eax
call fcn.00474ccc
add esp, 0x2c
inc eax
jne 0x47455e
push 0x5f341f
call fcn.0045e224
pop ecx
jmp 0x474afc
call fcn.00474b04
call fcn.0045f38c
dec eax
je 0x474574
cmp dword [0x7efb1c], 1
jne 0x474579
call fcn.0045f4b4
call fcn.00475040
test eax, eax
jge 0x47459a
call fcn.0045e210
push 0x5f344b
call fcn.0045df78
pop ecx
or eax, 0xffffffff
jmp 0x474afc
cmp dword [0x7efb1c], 0
jne 0x4745ba
cmp dword [0x7efb0c], 0
jne 0x4745ba
cmp dword [0x7efb18], 0
jne 0x4745ba
call fcn.00568e00
call fcn.00583554
cmp dword [ebp - 0x20], 1
jne 0x4745dc
mov edx, dword [ebp - 0x1c]
push edx
mov ecx, dword [ebp - 0x18]
push ecx
lea eax, [ebp - 0xbc]
push eax
call fcn.00588b84
add esp, 0xc
call fcn.0045e538
call fcn.004720a4
xor edx, edx
mov dword [0x7efb04], edx
cmp dword [0x7efb18], 1
jne 0x474600
cmp dword [0x7ccc90], 8
jne 0x474604
xor ecx, ecx
jmp 0x474609
mov ecx, 1
test ecx, ecx
jne 0x47475f
call fcn.00475dd0
mov esi, eax
mov eax, dword [0x7ccc8c]
push eax
mov edx, dword [0x7ccc88]
push edx
push 0
push 0
lea ecx, [ebp - 0x168]
push ecx
call sub.USER32.DLL_SetRect
push 0
call fcn.00460598
pop ecx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
xor ebx, ebx
lea eax, [ebp - 0x168]
push 0
push eax
push esi
mov edx, dword [0x7cf6ac]
push 0
push 0
push edx
mov ecx, dword [edx]
call dword [ecx + 0x1c]
inc ebx
cmp ebx, 8
jl 0x474645
push 0
call fcn.00460598
pop ecx
sub eax, dword [ebp - 0x48]
sbb edx, dword [ebp - 0x44]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], edx
push 0
call fcn.00460598
pop ecx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
lea eax, [ebp - 0x50]
push eax
mov edx, dword [0x7cf6ac]
push edx
mov ecx, dword [edx]
call dword [ecx + 0x44]
lea eax, [ebp - 0x4c]
push eax
push esi
mov edx, dword [esi]
call dword [edx + 0x44]
xor ebx, ebx
push 0xcc0020
push 0
push 0
mov edx, dword [0x7ccc8c]
mov eax, dword [ebp - 0x4c]
mov ecx, dword [0x7ccc88]
push eax
push edx
push ecx
push 0
push 0
mov eax, dword [ebp - 0x50]
push eax
call sub.GDI32.DLL_BitBlt
inc ebx
cmp ebx, 8
jl 0x4746a3
mov edx, dword [ebp - 0x4c]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0x68]
mov edx, dword [0x7cf6ac]
mov eax, dword [ebp - 0x50]
push eax
push edx
mov ecx, dword [edx]
call dword [ecx + 0x68]
push 0
call fcn.00460598
pop ecx
sub eax, dword [ebp - 0x48]
sbb edx, dword [ebp - 0x44]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
cmp edx, dword [ebp - 0x34]
jne 0x474712
cmp eax, dword [ebp - 0x38]
setbe al
jmp 0x474715
setle al
and eax, 1
mov dword [0x7efb2c], eax
cmp dword [0x7efb2c], 1
jne 0x47472d
mov edx, str.BitBlt
jmp 0x474732
mov edx, str.BltFast
push edx
push 0x5f3475
call fcn.0045e1bc
add esp, 8
fild qword [ebp - 0x38]
add esp, 0xfffffff8
fstp qword [esp]
fild qword [ebp - 0x40]
add esp, 0xfffffff8
fstp qword [esp]
push str.BitBlt:_.0lf
call fcn.0045e1bc
add esp, 0x14
mov dword [0x8efc50], 0xffffffff
cmp dword [0x61af24], 0x104
jl 0x4747bb
call fcn.0045f384
push eax
call sub.USER32.DLL_GetDC
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x4747bb
push 0x74
mov eax, dword [ebp - 0x54]
push eax
call sub.GDI32.DLL_GetDeviceCaps
mov dword [0x8efc50], eax
mov ecx, dword [ebp - 0x54]
push ecx
call fcn.0045f384
push eax
call sub.USER32.DLL_ReleaseDC
cmp dword [0x8efc50], 0x3c
jge 0x4747bb
mov dword [0x8efc50], 0xffffffff
mov dword [0x8efc4c], 0xffffffff
cmp dword [0x7efb1c], 0
jne 0x474a98
cmp dword [0x8efc50], 0xffffffff
jne 0x4747e2
mov eax, 0x14
jmp 0x4747e7
mov eax, 4
mov dword [ebp - 0x64], eax
push 1
call sub.USER32.DLL_GetSystemMetrics
mov dword [0x8efc54], eax
mov edx, dword [0x8efc54]
push edx
push 0x5f34cc
call fcn.0045e1bc
add esp, 8
xor esi, esi
mov edx, dword [0x7c9d98]
lea eax, [ebp - 0x5c]
push eax
push edx
mov ecx, dword [edx]
call dword [ecx + 0x40]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x60], eax
mov ecx, dword [0x7c9d98]
lea edx, [ebp - 0x58]
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
mov ecx, dword [0x7c9d98]
lea edx, [ebp - 0x60]
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x40]
mov edx, dword [ebp - 0x60]
cmp edx, dword [ebp - 0x5c]
jb 0x474850
cmp dword [ebp - 0x58], 0
je 0x474822
mov eax, dword [0x7c9d98]
lea ecx, [ebp - 0x58]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x44]
cmp dword [ebp - 0x58], 1
je 0x474850
inc esi
cmp esi, 3
jl 0x47480c
mov eax, dword [0x7c9d98]
lea ecx, [ebp - 0x5c]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x40]
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x60], ecx
mov edx, dword [0x7c9d98]
lea eax, [ebp - 0x58]
push eax
push edx
mov ecx, dword [edx]
call dword [ecx + 0x44]
mov edx, dword [0x7c9d98]
lea eax, [ebp - 0x60]
push eax
push edx
mov ecx, dword [edx]
call dword [ecx + 0x40]
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x5c]
jb 0x4748ae
cmp dword [ebp - 0x58], 0
je 0x474880
xor edx, edx
xor ecx, ecx
mov dword [ebp - 0x6c], edx
mov dword [0x8efc4c], 0xffffffff
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x68], ecx
jmp 0x474a39
xor esi, esi
lea ebx, [ebp - 0x208]
cmp esi, dword [ebp - 0x64]
jge 0x474988
push 0
call fcn.00460538
pop ecx
mov dword [ebx], eax
push 0
call fcn.00460598
pop ecx
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], edx
mov edx, dword [0x7c9d98]
lea eax, [ebp - 0x58]
push eax
push edx
mov ecx, dword [edx]
call dword [ecx + 0x44]
cmp dword [ebp - 0x58], 1
je 0x4748fe
mov edx, dword [0x7c9d98]
lea eax, [ebp - 0x5c]
push eax
push edx
mov ecx, dword [edx]
call dword [ecx + 0x40]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x60], eax
mov ecx, dword [0x7c9d98]
lea edx, [ebp - 0x58]
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
mov ecx, dword [0x7c9d98]
lea edx, [ebp - 0x60]
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x40]
mov edx, dword [ebp - 0x60]
cmp edx, dword [ebp - 0x5c]
jb 0x474958
cmp dword [ebp - 0x58], 0
je 0x47492a
push 0
call fcn.00460538
pop ecx
sub eax, dword [ebx]
mov dword [ebx], eax
push 0
call fcn.00460598
pop ecx
sub eax, dword [ebp - 0x74]
sbb edx, dword [ebp - 0x70]
add dword [ebp - 0x7c], eax
adc dword [ebp - 0x78], edx
inc dword [ebp - 0x6c]
inc esi
add ebx, 4
cmp esi, dword [ebp - 0x64]
jl 0x4748e6
inc dword [ebp - 0x68]
cmp dword [ebp - 0x68], 5
je 0x474a46
xor esi, esi
lea ebx, [ebp - 0x208]
jmp 0x4749c3
lea eax, [esi + 1]
lea edx, [ebp + eax*4 - 0x208]
mov ecx, ebx
cmp eax, dword [ebp - 0x64]
jge 0x4749bf
mov edi, dword [ecx]
cmp edi, dword [edx]
je 0x4749cb
inc eax
add edx, 4
cmp eax, dword [ebp - 0x64]
jl 0x4749b0
inc esi
add ebx, 4
mov eax, dword [ebp - 0x64]
dec eax
cmp esi, eax
jl 0x47499f
mov edx, dword [ebp - 0x64]
dec edx
cmp esi, edx
je 0x4749e0
mov ecx, dword [ebp + esi*4 - 0x208]
mov dword [0x8efc4c], ecx
cmp dword [0x8efc50], 0xffffffff
jne 0x474a39
mov eax, dword [ebp - 0x6c]
cdq
push edx
push eax
mov eax, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x78]
call fcn.0041decf
push edx
push eax
mov eax, 0x989680
xor edx, edx
call fcn.0041decf
mov ebx, eax
mov ecx, 0xa
mov eax, ebx
mov dword [0x8efc50], ebx
cdq
idiv ecx
mov eax, dword [0x8efc50]
mov esi, edx
cdq
mov ecx, 0xa
idiv ecx
mov dword [0x8efc50], eax
cmp esi, 5
jle 0x474a39
inc dword [0x8efc50]
cmp dword [0x8efc4c], 0xffffffff
je 0x4748d5
cmp dword [0x8efc4c], 0xffffffff
jne 0x474a5c
push 0x5f34e3
call fcn.0045df78
pop ecx
jmp 0x474a6f
mov eax, dword [0x8efc4c]
push eax
push 0x5f3511
call fcn.0045e1bc
add esp, 8
xor esi, esi
lea ebx, [ebp - 0x208]
cmp esi, dword [ebp - 0x64]
jge 0x474aa2
mov eax, dword [ebx]
push eax
push esi
push str._tTri_02d:_d_msec
call fcn.0045e1bc
add esp, 0xc
inc esi
add ebx, 4
cmp esi, dword [ebp - 0x64]
jl 0x474a7c
jmp 0x474aa2
mov dword [0x8efc50], 0x3c
cmp dword [0x8efc4c], 0xffffffff
jne 0x474ab7
mov dword [0x8efc60], 0xffffffff
jmp 0x474ace
mov eax, dword [0x8efc4c]
add eax, eax
add eax, 0xfffffffc
mov ecx, 3
cdq
idiv ecx
mov dword [0x8efc60], eax
cmp dword [0x7efb34], 0
je 0x474adf
mov eax, dword [ebp - 0x24]
mov dword [0x662bcc], eax
call fcn.0045e210
push 0x5f3547
call fcn.0045df78
pop ecx
call fcn.0045ef68
call fcn.0047b174
mov eax, dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret