Function at 0x4470e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4ba015
mov eax, dword fs:[0]
push eax
sub esp, 0x48
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4e02dc]
xor eax, esp
push eax
lea eax, [esp + 0x5c]
mov dword fs:[0], eax
mov edi, dword [esp + 0x6c]
xor ebp, ebp
cmp dword [edi + 0x138], ebp
je 0x44749a
mov eax, dword [esp + 0x74]
mov ecx, dword [eax]
mov esi, dword [ecx - 0xc]
cmp esi, 0xa
lea ebx, [edi + 0x17c]
mov dword [esp + 0x18], esi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x1c], ebx
jle 0x44715a
xor ecx, ecx
mov eax, esi
mov edx, 0x10
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004929e2
add esp, 4
mov dword [esp + 0x1c], eax
mov ebx, eax
cmp esi, ebp
mov dword [esp + 0x28], ebp
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ebp
jle 0x447321
mov eax, dword [esp + 0x74]
mov eax, dword [eax]
mov edx, dword [esp + 0x20]
mov edi, dword [esp + 0x70]
push 0x400
lea ecx, [esp + 0x3c]
push ecx
mov ecx, dword [edi]
push 1
lea eax, [eax + edx*2]
push eax
push ecx
call dword [sym.imp.USER32.dll_DrawTextW]
call fcn.004347b0
add eax, 0x90
mov eax, dword [eax]
mov ecx, 0x4ca864
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4471cc
test dx, dx
je 0x4471c8
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4471cc
add eax, 4
add ecx, 4
test dx, dx
jne 0x4471a6
xor eax, eax
jmp 0x4471d1
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
jne 0x447228
call fcn.004347b0
add eax, 0x90
mov eax, dword [eax]
mov ecx, str.Microsoft_YaHei
jmp 0x4471f0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x447216
test dx, dx
je 0x447212
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x447216
add eax, 4
add ecx, 4
test dx, dx
jne 0x4471f0
xor eax, eax
jmp 0x44721b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
je 0x4472d0
lea esi, [esp + 0x34]
mov eax, edi
call fcn.0045cd80
mov ebp, eax
mov dword [esp + 0x64], 0
call fcn.004347b0
mov eax, dword [eax + 4]
cdq
mov esi, eax
xor esi, edx
sub esi, edx
call fcn.00407ca0
mov edi, eax
cmp dword [edi + 0xc], 0xffffffff
jne 0x447291
call fcn.00408580
test eax, eax
je 0x447280
lea edx, [esp + 0x2c]
push edx
push edi
mov dword [esp + 0x34], 0
call fcn.004080e0
test eax, eax
je 0x447280
cmp dword [esp + 0x2c], 0
jne 0x447289
call fcn.00408e00
test eax, eax
je 0x44728e
mov eax, 1
mov dword [edi + 0xc], eax
cmp dword [edi + 0xc], 0
je 0x4472ab
mov eax, dword [esp + 0x6c]
cmp dword [eax + 0xb8], 0
je 0x4472ab
mov ecx, 1
jmp 0x4472ad
xor ecx, ecx
mov eax, dword [ebp]
push ecx
push eax
call fcn.00434600
mov ecx, dword [esp + 0x44]
add eax, esi
add esp, 8
add eax, ecx
mov dword [esp + 0x44], eax
mov dword [esp + 0x64], 0xffffffff
jmp 0x4472d8
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x3c]
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x38]
mov edx, esi
sub edx, edi
cmp edx, dword [esp + 0x28]
jle 0x4472ee
mov dword [esp + 0x28], edx
mov dword [ebx], edi
mov dword [ebx + 4], ecx
mov edx, eax
mov dword [ebx + 8], esi
mov dword [ebx + 0xc], eax
mov eax, dword [esp + 0x20]
sub edx, ecx
add dword [esp + 0x24], edx
add eax, 1
add ebx, 0x10
cmp eax, dword [esp + 0x18]
mov dword [esp + 0x20], eax
jl 0x44716e
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
lea ecx, [eax + esi - 1]
mov eax, dword [esp + 0x28]
cdq
sub eax, edx
mov esi, eax
mov eax, ecx
mov ecx, dword [esp + 0x78]
cdq
sub eax, edx
mov edx, dword [esp + 0x80]
mov edi, eax
lea eax, [edx + ecx]
cdq
sub eax, edx
mov edx, dword [esp + 0x7c]
mov ecx, eax
mov eax, dword [esp + 0x84]
add eax, edx
cdq
sub eax, edx
mov edx, dword [ebx + 0xc]
sub edx, dword [ebx + 4]
sar esi, 1
sar ecx, 1
sub ecx, esi
sar edi, 1
sar eax, 1
lea esi, [ebx + 4]
sub eax, edi
lea edi, [edx + eax + 1]
mov edx, dword [ebx + 8]
sub edx, dword [ebx]
xor ebp, ebp
add edx, ecx
cmp dword [esp + 0x18], ebp
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], edi
jle 0x447485
mov dword [esp + 0x2c], esi
lea esp, [esp]
mov esi, dword [esp + 0x6c]
mov ecx, dword [esi + 0x50]
call fcn.00435a50
cmp dword [eax + 0x4c], 0
je 0x447437
mov ecx, dword [esi + 0x50]
call fcn.00435a50
mov esi, eax
mov eax, dword [esp + 0x70]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.GDI32.dll_GetTextColor]
mov edx, dword [esp + 0x74]
mov ecx, dword [esi + 0x60]
mov ebx, eax
mov eax, dword [edx]
push 0x4cd6d0
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
xor edi, edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
test esi, esi
je 0x447437
push str.DrawShadowText
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x44742c
mov edx, dword [esp + 0x28]
push 2
push 2
push edx
mov edx, dword [esp + 0x30]
push ebx
push 0x25
lea ecx, [esp + 0x5c]
push ecx
lea ecx, [edx + ebp*2]
mov edx, dword [esp + 0x88]
push 1
push ecx
mov ecx, dword [edx]
push ecx
call eax
mov edi, eax
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test edi, edi
jne 0x447457
mov eax, dword [esp + 0x74]
mov ecx, dword [eax]
mov eax, dword [esp + 0x70]
push 0x25
lea edx, [esp + 0x4c]
push edx
push 1
lea edx, [ecx + ebp*2]
mov ecx, dword [eax]
push edx
push ecx
call dword [sym.imp.USER32.dll_DrawTextW]
mov esi, dword [esp + 0x2c]
mov edx, dword [esi + 8]
sub edx, dword [esi]
lea eax, [esp + 0x48]
add edx, 1
push edx
push 0
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
add ebp, 1
add esi, 0x10
cmp ebp, dword [esp + 0x18]
mov dword [esp + 0x2c], esi
jl 0x4473a0
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x30]
je 0x447509
push eax
call fcn.004935c5
add esp, 4
jmp 0x447509
mov ecx, dword [edi + 0x50]
call fcn.00435a50
cmp dword [eax + 0x4c], ebp
je 0x4474e7
mov ecx, dword [edi + 0x50]
call fcn.00435a50
mov esi, dword [esp + 0x70]
mov ecx, dword [esi]
push ecx
mov edi, eax
call dword [sym.imp.GDI32.dll_GetTextColor]
mov edi, dword [edi + 0x60]
mov edx, dword [esp + 0x74]
mov ecx, dword [edx]
mov edx, dword [ecx - 0xc]
push edi
push eax
push 0x88a5
lea eax, [esp + 0x84]
push eax
push edx
push ecx
push esi
call fcn.0045cde0
cmp eax, ebp
jne 0x447509
jmp 0x4474eb
mov esi, dword [esp + 0x70]
mov ecx, dword [esp + 0x74]
mov eax, dword [ecx]
mov ecx, dword [eax - 0xc]
push 0x88a5
lea edx, [esp + 0x7c]
push edx
mov edx, dword [esi]
push ecx
push eax
push edx
call dword [sym.imp.USER32.dll_DrawTextW]
mov ecx, dword [esp + 0x5c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x54
ret 0x1c