Function at 0x54f478
Capabilities:
Check for time delay via gettickcount
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe80
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0xc], ecx
mov word [ebp - 0x5e], dx
mov dword [ebp - 0x5c], eax
xor eax, eax
push ebp
push 0x550e02
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x5c]
call fcn.0044b9d0
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x550de3
mov eax, dword [ebp - 0x5c]
call fcn.0044b9d0
call fcn.00517d2c
push eax
call sub.user32.dll_IsIconic
test eax, eax
jne 0x550de3
mov eax, dword [0x586818]
mov byte [eax], 1
mov eax, dword [ebp - 0x5c]
mov edx, dword [0x45aab4]
call fcn.00403efc
test al, al
je 0x54f50d
push 0
mov eax, dword [ebp - 0x5c]
call fcn.0044b9d0
mov ecx, 0x40000
mov edx, 0xa100
call fcn.0051cc60
mov dword [ebp - 0x80], eax
jmp 0x54f512
xor eax, eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je 0x54f52d
mov eax, dword [ebp - 0x80]
cmp dword [eax + 0x2e0], 0
je 0x54f52d
call fcn.0051f31c
test al, al
jne 0x54f531
xor eax, eax
jmp 0x54f533
mov al, 1
mov byte [ebp - 0x91], al
call fcn.0051f31c
test al, al
je 0x54fef5
mov eax, dword [ebp - 0x5c]
mov edx, dword [0x45aab4]
call fcn.00403efc
test al, al
je 0x54fef5
cmp dword [ebp - 0x80], 0
je 0x54fef5
mov eax, dword [ebp - 0x80]
cmp dword [eax + 0x2e0], 0
je 0x54f5c0
mov eax, dword [ebp - 0x80]
cmp dword [eax + 0x144], 0
je 0x54f59a
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x144]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x80]
xor edx, edx
mov dword [eax + 0x144], edx
jmp 0x54f5c0
xor edx, edx
xor eax, eax
call fcn.0052ac00
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x270]
mov edx, dword [eax + 0x5c]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x80]
call fcn.004b1698
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x270]
cmp dword [eax + 0x5c], 0
jne 0x54f5e4
mov eax, dword [0x586818]
mov byte [eax], 0
jmp 0x550de3
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x270]
mov eax, dword [eax + 0x5c]
call fcn.0052acdc
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
call fcn.00428ccc
call fcn.00424318
push 0
mov eax, dword [ebp - 0x80]
push eax
push 1
xor ecx, ecx
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x1c]
call fcn.00518808
cmp dword [ebp - 0x1c], 0
je 0x550de3
mov eax, dword [ebp - 0x80]
cmp dword [eax + 0x2e0], 0
jne 0x54f685
mov eax, dword [ebp - 0x80]
cmp byte [eax + 0x3c], 0
je 0x54f660
push 0x1fffffff
push 0
lea edx, [ebp - 0x164]
mov eax, dword [ebp - 0x80]
call fcn.004b59e4
lea edx, [ebp - 0x164]
mov cl, 0xff
mov eax, dword [ebp - 0x1c]
call fcn.00506f78
jmp 0x54f685
push 0x1fffffff
push 0
lea edx, [ebp - 0x164]
mov eax, dword [ebp - 0x1c]
call fcn.00533e9c
lea edx, [ebp - 0x164]
mov cl, 0xff
mov eax, dword [ebp - 0x1c]
call fcn.00506f78
mov eax, dword [ebp - 0x1c]
call fcn.00428ccc
call fcn.004246f8
movzx eax, word [ebp - 0x5e]
mov ecx, 0xc
xor edx, edx
div ecx
mov dword [ebp - 0x10], eax
mov esi, 0x11b
lea edx, [ebp - 0x6c]
mov eax, dword [ebp - 0x1c]
call fcn.00533f5c
cmp dword [ebp - 0x10], 0
jle 0x54f6c4
lea eax, [ebp - 0x54]
xor edx, edx
call fcn.005347cc
jmp 0x54f6dc
mov edx, dword [ebp - 0xc]
cmp edx, 0xff
jbe 0x54f6d4
call fcn.00403c98
lea eax, [ebp - 0x54]
call fcn.005347cc
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
test eax, eax
je 0x54fc11
cmp dword [eax + 0x2c], 0
jne 0x54f6f8
call fcn.004c9448
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
mov edx, dword [eax + 0x2c]
mov ecx, dword [eax + 0x30]
mov dword [edx + 0x38], ecx
mov ecx, dword [eax + 0x34]
mov dword [edx + 0x3c], ecx
cmp dword [eax + 0x38], 0
je 0x54f73c
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
mov eax, dword [eax + 0x38]
push eax
push 0xfffffffffffffff8
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
mov eax, dword [eax + 0x2c]
call fcn.0044b9d0
push eax
call sub.user32.dll_SetWindowLongA
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
call fcn.004c9448
mov eax, dword [ebp - 0x80]
cmp byte [eax + 0xe4], 0
je 0x54f787
lea edx, [ebp - 0x164]
mov eax, dword [ebp - 0x80]
call fcn.004b73c4
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x9c], eax
jmp 0x54f86c
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x270]
call fcn.0055782c
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2cc]
cmp byte [eax + 0x229], 0
jne 0x54f7cc
lea edx, [ebp - 0x164]
mov eax, dword [ebp - 0x80]
call fcn.004b73c4
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x9c], eax
jmp 0x54f86c
lea edx, [ebp - 0x164]
mov eax, dword [ebp - 0x80]
call fcn.004b73c4
mov ebx, dword [ebp - 0x160]
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
call fcn.004a8a94
add ebx, eax
xor edx, edx
mov eax, dword [ebp - 0x80]
call fcn.004a89e0
sub ebx, eax
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2cc]
call fcn.0044b9d0
mov edx, dword [ebp - 0x80]
mov edx, dword [edx + 0x2e0]
xor ecx, ecx
call fcn.004a88c0
sub ebx, eax
mov dword [ebp - 0x9c], ebx
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2cc]
call fcn.0044b9d0
push eax
call sub.user32.dll_IsZoomed
test eax, eax
je 0x54f86c
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0xe8]
cmp eax, dword [edx + 0x44]
je 0x54f86c
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax + 0x44]
add eax, dword [ebp - 0x9c]
mov edx, dword [ebp - 0xe8]
sub eax, dword [edx + 0x48]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2cc]
call fcn.0044b9d0
mov edx, dword [ebp - 0x80]
mov edx, dword [edx + 0x2e0]
xor ecx, ecx
call fcn.004a88c0
push eax
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
call fcn.004a8ad4
mov ebx, eax
pop eax
sub ebx, eax
lea edx, [ebp - 0x164]
mov eax, dword [ebp - 0x80]
call fcn.004b73c4
add ebx, dword [ebp - 0x164]
mov dword [ebp - 0xa0], ebx
lea eax, [ebp - 0xfc]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0044b9d0
push eax
call sub.user32.dll_GetWindowRect
mov edx, dword [ebp - 0xfc]
sub edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
mov eax, dword [eax + 0x2c]
call fcn.00444940
mov edx, dword [ebp - 0xf8]
sub edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
mov eax, dword [eax + 0x2c]
call fcn.00444964
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
mov eax, dword [eax + 0x2c]
mov edx, dword [ebp - 0x6c]
call fcn.0044498c
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
mov eax, dword [eax + 0x2c]
mov edx, dword [ebp - 0x68]
call fcn.004449b0
push 3
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2cc]
call fcn.0044b9d0
push eax
call sub.user32.dll_GetWindow
mov ebx, eax
push esi
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0xf8]
sub eax, dword [ebp - 0x9c]
push eax
mov eax, dword [ebp - 0xfc]
sub eax, dword [ebp - 0xa0]
push eax
push ebx
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
mov eax, dword [eax + 0x2c]
call fcn.0044b9d0
push eax
call sub.user32.dll_SetWindowPos
lea eax, [ebp - 0x54]
push eax
push 0
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
mov eax, dword [eax + 0x2c]
call fcn.0044b9d0
lea ecx, [ebp - 0x6c]
mov edx, dword [ebp - 0x1c]
call fcn.0051f414
push 4
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
mov eax, dword [eax + 0x2c]
call fcn.0044b9d0
push eax
call sub.user32.dll_ShowWindow
push esi
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0xf8]
sub eax, dword [ebp - 0x9c]
push eax
mov eax, dword [ebp - 0xfc]
sub eax, dword [ebp - 0xa0]
push eax
push ebx
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
mov eax, dword [eax + 0x2c]
call fcn.0044b9d0
push eax
call sub.user32.dll_SetWindowPos
lea eax, [ebp - 0x6c]
call fcn.0052acd0
mov dword [ebp - 0x58], eax
push 0
lea edx, [ebp - 0x164]
mov eax, dword [ebp - 0x58]
call fcn.00533e9c
lea eax, [ebp - 0x164]
push eax
mov eax, dword [ebp - 0x58]
call fcn.00428ccc
call fcn.00424800
xor ecx, ecx
pop edx
call fcn.00524110
cmp dword [ebp - 0x10], 0
jle 0x54faf2
push ebp
call fcn.0054f0e8
pop ecx
xor edi, edi
cmp edi, dword [ebp - 0x10]
jg 0x54fae0
call sub.kernel32.dll_GetTickCount
mov dword [ebp - 0x64], eax
push ebp
call fcn.0054f204
pop ecx
lea eax, [ebp - 0x54]
push eax
push 0
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
mov eax, dword [eax + 0x2c]
call fcn.0044b9d0
lea ecx, [ebp - 0x6c]
mov edx, dword [ebp - 0x58]
call fcn.0051f414
xor eax, eax
mov al, byte [ebp - 0x52]
mov edx, dword [ebp - 0xc]
sub edx, eax
xor eax, eax
call fcn.0042af60
mov edx, eax
mov eax, 0xff
call fcn.0042ae9c
mov ebx, eax
push 0
mov eax, dword [ebp - 0x90]
call fcn.0044b9d0
mov ecx, ebx
mov edx, dword [ebp - 0xe4]
call fcn.0051d91c
push ebp
call fcn.0054f408
pop ecx
inc edi
cmp dword [ebp - 0x10], 0
jle 0x54fad7
push 0
call sub.kernel32.dll_Sleep_1
mov edx, 0xc
mov eax, dword [ebp - 0x64]
call fcn.00534780
cmp edi, dword [ebp - 0x10]
jle 0x54fa4b
mov eax, dword [ebp - 0xc]
cmp eax, 0xff
jbe 0x54faef
call fcn.00403c98
mov byte [ebp - 0x52], al
mov eax, dword [0x586818]
mov byte [eax], 0
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2cc]
cmp byte [eax + 0x2e0], 0
je 0x54fb2a
mov edx, dword [ebp - 0xc]
cmp edx, 0xff
jbe 0x54fb1c
call fcn.00403c98
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2cc]
call fcn.004624cc
push 0
mov ecx, 1
mov edx, 0xb
mov eax, dword [ebp - 0x5c]
call fcn.0044639c
push 0x585
push 0
push 0
mov eax, dword [ebp - 0x5c]
call fcn.0044b9d0
push eax
call sub.user32.dll_RedrawWindow
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x94]
cmp byte [eax + 8], 0
je 0x54fb79
mov ecx, 0x519224
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2cc]
xor edx, edx
call fcn.005182c4
push 0
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
xor ecx, ecx
xor edx, edx
call fcn.004c9210
push eax
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
mov eax, dword [eax + 0x2c]
call fcn.0044b9d0
push eax
call sub.user32.dll_SetWindowRgn
or esi, 4
push esi
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0xf8]
sub eax, dword [ebp - 0x9c]
push eax
mov eax, dword [ebp - 0xfc]
sub eax, dword [ebp - 0xa0]
push eax
push 0
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
mov eax, dword [eax + 0x2c]
call fcn.0044b9d0
push eax
call sub.user32.dll_SetWindowPos
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2e0]
mov cl, 0xff
xor edx, edx
call fcn.004c7e38
lea eax, [ebp - 0xe4]
call fcn.0040f0a8
lea eax, [ebp - 0x90]
call fcn.0040f0a8
jmp 0x54fee0
lea eax, [ebp - 0xfc]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0044b9d0
push eax
call sub.user32.dll_GetWindowRect
push 0
xor ecx, ecx
mov dl, 1
mov eax, dword [0x552fa0]
call fcn.0045da40
mov edx, dword [0x586c08]
mov dword [edx], eax
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0x40]
mov eax, dword [0x586c08]
mov eax, dword [eax]
call fcn.00444940
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0x44]
mov eax, dword [0x586c08]
mov eax, dword [eax]
call fcn.00444964
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0x48]
mov eax, dword [0x586c08]
mov eax, dword [eax]
call fcn.0044498c
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0x4c]
mov eax, dword [0x586c08]
mov eax, dword [eax]
call fcn.004449b0
push 0xffffffffffffffec
mov eax, dword [ebp - 0x5c]
call fcn.0044b9d0
push eax
call sub.user32.dll_GetWindowLongA
test al, 8
je 0x54fcad
mov eax, dword [0x586c08]
mov eax, dword [eax]
mov dl, 3
call fcn.0045f34c
or ebx, 0xffffffff
jmp 0x54fce3
mov eax, dword [ebp - 0x80]
cmp dword [eax + 0x2e0], 0
je 0x54fccb
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2cc]
call fcn.0044b9d0
mov ebx, eax
jmp 0x54fce3
push 3
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2cc]
call fcn.0044b9d0
push eax
call sub.user32.dll_GetWindow
mov ebx, eax
and esi, 0xfffffffd
push esi
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x44]
push eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x40]
push eax
push ebx
mov eax, dword [0x586c08]
mov eax, dword [eax]
call fcn.0044b9d0
push eax
call sub.user32.dll_SetWindowPos
push 0xffffffffffffffec
mov eax, dword [0x586c08]
mov eax, dword [eax]
call fcn.0044b9d0
push eax
call sub.user32.dll_GetWindowLongA
or eax, 0x80000
or eax, 0x8000000
push eax
push 0xffffffffffffffec
mov eax, dword [0x586c08]
mov eax, dword [eax]
call fcn.0044b9d0
push eax
call sub.user32.dll_SetWindowLongA
lea eax, [ebp - 0x54]
push eax
push 0
mov eax, dword [0x586c08]
mov eax, dword [eax]
call fcn.0044b9d0
lea ecx, [ebp - 0x6c]
mov edx, dword [ebp - 0x1c]
call fcn.0051f414
mov eax, dword [ebp - 0x80]
call fcn.004a9a10
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 0x80]
call fcn.004aa0d0
mov ebx, eax
push 0
push ebx
mov eax, dword [0x586c08]
mov eax, dword [eax]
call fcn.0044b9d0
push eax
call sub.user32.dll_SetWindowRgn
push 4
mov eax, dword [0x586c08]
mov eax, dword [eax]
call fcn.0044b9d0
push eax
call sub.user32.dll_ShowWindow
lea eax, [ebp - 0x6c]
call fcn.0052acd0
mov dword [ebp - 0x58], eax
push 0
lea edx, [ebp - 0x164]
mov eax, dword [ebp - 0x58]
call fcn.00533e9c
lea eax, [ebp - 0x164]
push eax
mov eax, dword [ebp - 0x58]
call fcn.00428ccc
call fcn.00424800
xor ecx, ecx
pop edx
call fcn.00524110
cmp dword [ebp - 0x10], 0
jle 0x54fe4f
push ebp
call fcn.0054f0e8
pop ecx
xor edi, edi
cmp edi, dword [ebp - 0x10]
jg 0x54fe3d
call sub.kernel32.dll_GetTickCount
mov dword [ebp - 0x64], eax
push ebp
call fcn.0054f204
pop ecx
lea eax, [ebp - 0x54]
push eax
push 0
mov eax, dword [0x586c08]
mov eax, dword [eax]
call fcn.0044b9d0
lea ecx, [ebp - 0x6c]
mov edx, dword [ebp - 0x58]
call fcn.0051f414
push ebp
call fcn.0054f408
pop ecx
inc edi
cmp dword [ebp - 0x10], 0
jle 0x54fe38
push 0
call sub.kernel32.dll_Sleep_1
mov edx, 0xc
mov eax, dword [ebp - 0x64]
call fcn.00534780
cmp edi, dword [ebp - 0x10]
jle 0x54fdea
mov eax, dword [ebp - 0xc]
cmp eax, 0xff
jbe 0x54fe4c
call fcn.00403c98
mov byte [ebp - 0x52], al
mov eax, dword [0x586818]
mov byte [eax], 0
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2cc]
cmp byte [eax + 0x2e0], 0
je 0x54fe87
mov edx, dword [ebp - 0xc]
cmp edx, 0xff
jbe 0x54fe79
call fcn.00403c98
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2cc]
call fcn.004624cc
push 0
mov ecx, 1
mov edx, 0xb
mov eax, dword [ebp - 0x5c]
call fcn.0044639c
push 0x585
push 0
push 0
mov eax, dword [ebp - 0x5c]
call fcn.0044b9d0
push eax
call sub.user32.dll_RedrawWindow
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x94]
cmp byte [eax + 8], 0
je 0x54fed6
mov ecx, 0x519224
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x2cc]
xor edx, edx
call fcn.005182c4
mov eax, dword [0x586c08]
call fcn.0040f0a8
lea eax, [ebp - 0x58]
call fcn.0040f0a8
lea eax, [ebp - 0x1c]
call fcn.0040f0a8
jmp 0x550de3
mov eax, dword [0x586c08]
cmp dword [eax], 0
jne 0x54ff09
xor edx, edx
mov eax, dword [ebp - 0x5c]
call fcn.0054ebd4
mov eax, dword [0x586c08]
cmp dword [eax], 0
je 0x550de3
mov eax, dword [0x586c08]
mov eax, dword [eax]
mov edx, dword [ebp - 0x5c]
call fcn.0054f0a4
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x48]
call fcn.0052ac00
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
call fcn.00428ccc
call fcn.00424318
mov eax, dword [ebp - 0x1c]
call fcn.00428ccc
call fcn.00424800
push eax
call sub.gdi32.dll_SaveDC
test eax, eax
jns 0x54ff63
call fcn.00403c98
mov dword [ebp - 0x70], eax
xor eax, eax
push ebp
push 0x54ffd2
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
push 1
xor ecx, ecx
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x1c]
call fcn.00518808
cmp dword [ebp - 0x1c], 0
jne 0x54ff97
call fcn.004045b0
jmp 0x550de3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x54ffd9
mov eax, dword [ebp - 0x70]
test eax, eax
jns 0x54ffb0
call fcn.00403c98
push eax
mov eax, dword [ebp - 0x1c]
call fcn.00428ccc
call fcn.00424800
push eax
call sub.gdi32.dll_RestoreDC
mov eax, dword [ebp - 0x1c]
call fcn.00428ccc
call fcn.004246f8
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x550e09
lea eax, [ebp - 0x8c]
mov edx, dword [0x552f78]
call fcn.00406384
ret