Function at 0x4326e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4e6291
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa4
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0xc4]
xor ebp, ebp
mov ebx, ecx
cmp edi, ebp
mov dword [esp + 0x68], ebx
je 0x43280c
mov eax, dword [esp + 0xc8]
cmp eax, ebp
je 0x43280c
mov ecx, dword [eax]
mov dword [esp + 0x14], ebp
mov dword [esp + 0x30], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x34], edx
mov ecx, dword [eax + 8]
mov dword [esp + 0x38], ecx
lea ecx, [esp + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edi + 4]
push ecx
push eax
mov dword [esp + 0x44], edx
call sub.gdiplus.dll_GdipCreateFromHDC
mov edx, dword [esp + 0x14]
mov dword [esp + 0x84], eax
mov dword [esp + 0x80], edx
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x30]
fild dword [ebx + 0x54]
mov eax, dword [esp + 0x34]
sub ecx, edx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x24], ecx
fidiv dword [ebx + 0x58]
sub edx, eax
mov dword [esp + 0xbc], ebp
mov dword [esp + 0x2c], edx
fild dword [esp + 0x24]
fstp dword [esp + 0x5c]
fild dword [esp + 0x2c]
fstp dword [esp + 0x58]
fld dword [esp + 0x5c]
fdiv dword [esp + 0x58]
fld st(1)
fcomp st(1)
fnstsw ax
test ah, 0x41
fstp st(0)
jne 0x4327c9
fld dword [esp + 0x58]
fmul st(1)
mov dword [esp + 0x64], edx
call sub.MSVCRT.dll__ftol
fstp st(0)
mov dword [esp + 0x10], eax
jmp 0x4327de
fld dword [esp + 0x5c]
fdiv st(1)
mov dword [esp + 0x10], ecx
call sub.MSVCRT.dll__ftol
fstp st(0)
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x10]
push 0xffffff
push eax
push ecx
call fcn.0044a230
mov esi, eax
add esp, 0xc
cmp esi, ebp
mov dword [esp + 0x8c], esi
jne 0x432829
mov edx, dword [esp + 0x14]
push edx
call sub.gdiplus.dll_GdipDeleteGraphics
xor eax, eax
mov ecx, dword [esp + 0xb4]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xb0
ret 8
mov eax, dword [ebx + 0x44]
push 3
push esi
push eax
call fcn.00449670
add esp, 0xc
cmp ebx, ebp
jne 0x432840
xor eax, eax
jmp 0x432843
mov eax, dword [ebx + 0x20]
push eax
push esi
call fcn.0044c000
add esp, 8
lea ecx, [esp + 0x44]
mov dword [esp + 0x90], eax
mov dword [esp + 0xa4], 0x4ecbf8
push ecx
push ebp
push eax
mov dword [esp + 0x50], ebp
call sub.gdiplus.dll_GdipCreateBitmapFromHBITMAP
mov edx, dword [esp + 0x44]
mov dword [esp + 0xac], eax
mov dword [esp + 0xa8], edx
mov ecx, dword [ebx + 0x8c]
mov eax, dword [ebx + 0x88]
cmp ecx, ebp
mov byte [esp + 0xbc], 1
mov dword [esp + 0x88], eax
je 0x43295d
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
mov esi, dword [esp + 0x30]
mov ebp, dword [esp + 0x34]
mov dword [esp + 0x78], ecx
mov ecx, dword [ebx + 0x90]
push ecx
push eax
push 6
lea ecx, [esp + 0x5c]
mov dword [esp + 0x88], edx
call sub.MFC42.DLL_CPen::CPen
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0x4ec6c4
push 5
mov byte [esp + 0xc0], 3
call dword [sym.imp.GDI32.dll_GetStockObject]
lea edx, [esp + 0x1c]
mov ecx, edi
push edx
mov dword [esp + 0x24], eax
call sub.MFC42.DLL_CDC::SelectObject_2
lea eax, [esp + 0x50]
mov ecx, edi
push eax
call sub.MFC42.DLL_CDC::SelectObject
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x78]
mov eax, dword [edi + 4]
push ecx
push edx
push ebp
push esi
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
mov esi, 0x4ec688
mov dword [esp + 0x1c], esi
lea ecx, [esp + 0x1c]
mov byte [esp + 0xbc], 4
call sub.MFC42.DLL_CGdiObject::DeleteObject
mov dword [esp + 0x1c], 0x4ec1a0
mov dword [esp + 0x50], esi
lea ecx, [esp + 0x50]
mov byte [esp + 0xbc], 5
call sub.MFC42.DLL_CGdiObject::DeleteObject
xor ebp, ebp
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x38]
mov esi, dword [esp + 0x34]
mov eax, dword [esp + 0x3c]
sub ecx, edx
mov dword [esp + 0x60], edx
mov dword [esp + 0x9c], ecx
mov dword [esp + 0x94], edx
lea ecx, [esp + 0x18]
lea edx, [esp + 0x94]
sub eax, esi
push ecx
push edx
mov dword [esp + 0x50], esi
mov dword [esp + 0xa0], esi
mov dword [esp + 0xa8], eax
mov dword [esp + 0x20], ebp
call sub.gdiplus.dll_GdipCreateRegionRectI
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0xc8]
lea ebp, [ebx + 0x6c]
mov byte [esp + 0xbc], 6
mov esi, dword [ecx + 0x1c]
mov ecx, ebp
inc esi
call fcn.0040eaf0
cmp esi, eax
jg 0x432a2e
push esi
mov ecx, ebp
call fcn.0040ecb0
test eax, eax
je 0x432a1f
mov edx, dword [eax + 4]
mov ecx, dword [eax + 0xc]
mov ebp, dword [eax]
mov eax, dword [eax + 8]
sub eax, ebp
sub ecx, edx
mov dword [esp + 0x74], edx
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x70]
push 4
push edx
push eax
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x88], ecx
call sub.gdiplus.dll_GdipCombineRegionRectI
test eax, eax
je 0x432a1f
mov dword [esp + 0x54], eax
lea ebp, [ebx + 0x6c]
inc esi
mov ecx, ebp
call fcn.0040eaf0
cmp esi, eax
jle 0x4329d8
lea ecx, [esp + 0x4c]
xor esi, esi
push ecx
mov dword [esp + 0x50], esi
call sub.gdiplus.dll_GdipCreateMatrix
mov ebp, dword [esp + 0x4c]
mov dword [esp + 0x74], eax
mov dword [esp + 0x70], ebp
mov edx, dword [esp + 0x14]
push ebp
push edx
mov byte [esp + 0xc4], 7
mov dword [esp + 0x48], esi
call sub.gdiplus.dll_GdipGetWorldTransform
cmp eax, esi
je 0x432a6c
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x28]
push ebp
push eax
push ecx
mov dword [esp + 0x34], esi
call sub.gdiplus.dll_GdipGetRegionScansCount
cmp eax, esi
je 0x432a88
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x40], eax
shl eax, 4
push eax
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
lea edx, [esp + 0x40]
mov esi, eax
mov eax, dword [esp + 0x18]
push ebp
push edx
push esi
push eax
mov dword [esp + 0x2c], esi
call sub.gdiplus.dll_GdipGetRegionScansI
test eax, eax
je 0x432abc
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x6c], 0
test eax, eax
jle 0x432bdd
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x24]
sub eax, ecx
cdq
sub eax, edx
mov edx, dword [esp + 0x2c]
mov ebp, eax
mov eax, dword [esp + 0x64]
sub eax, edx
cdq
sub eax, edx
mov ecx, eax
sar ebp, 1
sar ecx, 1
mov dword [esp + 0x24], ebp
mov dword [esp + 0x2c], ecx
add esi, 4
jmp 0x432b07
mov ecx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x24]
mov edx, dword [esp + 0x60]
mov edi, dword [esi - 4]
mov eax, ebp
mov ebp, dword [esi]
sub eax, edx
mov edx, dword [esp + 0x48]
sub ecx, edx
mov edx, dword [esi + 8]
mov dword [esp + 0x28], edx
mov edx, dword [ebx + 0x8c]
add eax, edi
add ecx, ebp
mov ebp, dword [esi + 4]
test edx, edx
je 0x432b7d
mov edx, dword [esp + 0xc8]
cmp edi, dword [edx]
jne 0x432b7d
mov edx, dword [esp + 0x88]
mov ebp, dword [esp + 0x60]
add edi, edx
mov ecx, dword [esp + 0x2c]
mov dword [esi - 4], edi
mov eax, dword [esi]
add eax, edx
mov dword [esi], eax
mov ebx, eax
mov eax, dword [esp + 0x24]
mov edi, dword [esi - 4]
sub eax, ebp
mov ebp, dword [esp + 0x48]
sub ecx, ebp
mov ebp, dword [esi + 4]
add ecx, ebx
lea ebx, [edx + edx]
mov edx, dword [esi + 8]
add eax, edi
sub ebp, ebx
sub edx, ebx
mov dword [esp + 0x28], edx
mov ebx, dword [esp + 0x44]
lea edx, [esp + 0xa4]
neg edx
sbb edx, edx
push 2
and edx, ebx
mov ebx, dword [esp + 0x2c]
push ebx
push ebp
push ecx
push eax
mov eax, dword [esi]
push eax
mov eax, dword [esp + 0x2c]
push edi
push edx
push eax
call sub.gdiplus.dll_GdipDrawImagePointRectI
test eax, eax
je 0x432bb2
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x40]
mov ebx, dword [esp + 0x68]
inc eax
add esi, 0x10
cmp eax, ecx
mov dword [esp + 0x6c], eax
jl 0x432aff
mov edi, dword [esp + 0xc4]
mov esi, dword [esp + 0x1c]
mov ebp, dword [esp + 0x4c]
push esi
call dword [sym.imp.MSVCRT.dll_free]
mov eax, dword [ebx + 0x134]
add esp, 4
test eax, eax
je 0x432d0a
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString
mov ecx, dword [esp + 0xc8]
lea eax, [esp + 0x10]
mov byte [esp + 0xbc], 8
mov edx, dword [ecx + 0x1c]
push edx
push 0x522168
push eax
call sub.MFC42.DLL_CString::Format
mov edx, dword [edi]
add esp, 0xc
lea eax, [ebx + 0x118]
mov ecx, edi
push eax
call dword [edx + 0x30]
mov edx, dword [edi]
push 0xff
mov ecx, edi
call dword [edx + 0x38]
mov eax, dword [edi]
push 0xb4b4b4
mov ecx, edi
call dword [eax + 0x34]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x60]
mov ecx, dword [eax - 8]
lea esi, [edx + 2]
mov edx, dword [edi]
push ecx
push eax
mov eax, dword [esp + 0x50]
add eax, 2
mov ecx, edi
push eax
push esi
call dword [edx + 0x64]
mov edx, dword [ebx + 0x20]
lea ecx, [esp + 0x30]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
fild dword [ebx + 0x120]
mov eax, dword [esp + 0x38]
mov ebp, dword [esp + 0x30]
sub eax, ebp
fmul dword [esp + 0x5c]
mov dword [esp + 0x1c], eax
fidiv dword [esp + 0x1c]
fadd qword [0x4ec6e8]
call sub.MSVCRT.dll__ftol
fild dword [ebx + 0x124]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x34]
sub ecx, edx
mov ebp, eax
fmul dword [esp + 0x58]
mov dword [esp + 0x1c], ecx
fidiv dword [esp + 0x1c]
fadd qword [0x4ec6e8]
call sub.MSVCRT.dll__ftol
push eax
push ebp
lea edx, [esp + 0x18]
push str._dx_d_mm
push edx
call sub.MFC42.DLL_CString::Format
mov eax, dword [esp + 0x20]
add esp, 0x10
mov edx, dword [edi]
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x50]
mov ecx, edi
add eax, 0x14
push eax
push esi
call dword [edx + 0x64]
mov byte [esp + 0xbc], 7
lea ecx, [esp + 0x10]
call fcn.0047d354
mov ebp, dword [esp + 0x4c]
mov ecx, dword [esp + 0x8c]
push ecx
call fcn.00447eb0
mov edx, dword [esp + 0x94]
add esp, 4
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
push ebp
call sub.gdiplus.dll_GdipDeleteMatrix
mov eax, dword [esp + 0x18]
push eax
call sub.gdiplus.dll_GdipDeleteRegion
mov ecx, dword [esp + 0x44]
push ecx
call sub.gdiplus.dll_GdipDisposeImage
mov edx, dword [esp + 0x14]
push edx
call sub.gdiplus.dll_GdipDeleteGraphics
mov eax, 1
jmp 0x43280e