Function at 0x474580
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x57acb8
mov eax, dword fs:[0]
push eax
sub esp, 0x3c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5d7050]
xor eax, esp
push eax
lea eax, [esp + 0x50]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
lea eax, [esp + 0x60]
push eax
xor edi, edi
push ecx
mov dword [esp + 0x68], edi
call sub.gdiplus.dll_GdipCreateFromHDC
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x28], eax
mov dword [esp + 0x24], ebx
mov dword [esp + 0x58], edi
call fcn.00456410
mov ecx, eax
add ecx, 0x60
mov esi, 0x100
xor edx, edx
mov eax, esi
div dword [ecx + 8]
mov ecx, dword [ecx]
cmp ecx, edi
je 0x47460a
mov eax, dword [ecx + edx*4]
cmp eax, edi
je 0x47460a
cmp dword [eax + 0xc], esi
jne 0x4745fd
cmp word [eax], si
je 0x474606
mov eax, dword [eax + 8]
cmp eax, edi
jne 0x4745f3
jmp 0x47460a
cmp eax, edi
jne 0x474639
push edi
push edi
push edi
call fcn.00456410
mov dl, 1
mov ecx, eax
call fcn.00456330
mov esi, eax
cmp esi, edi
je 0x47463c
call fcn.00456410
mov ecx, eax
add ecx, 0x60
mov eax, 0x100
call fcn.004563b0
mov dword [eax], esi
jmp 0x47463c
mov esi, dword [eax + 4]
mov edi, dword [esp + 0x64]
push esi
lea esi, [esp + 0x30]
call fcn.0045b8d0
lea edx, [esp + 0x1c]
xor edi, edi
push edx
push edi
push edi
mov dword [esp + 0x28], edi
call sub.gdiplus.dll_GdipCreateStringFormat
mov dword [esp + 0x20], eax
lea eax, [esp + 0x14]
push eax
push 0xfe414141
mov dword [esp + 0x4c], vtable.Gdiplus::SolidBrush.0
mov dword [esp + 0x1c], edi
call sub.gdiplus.dll_GdipCreateSolidFill
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x48], ecx
mov byte [esp + 0x58], 3
mov edx, dword [esp + 0x1c]
push edi
push edx
call sub.gdiplus.dll_GdipSetStringFormatLineAlign
cmp eax, edi
je 0x47469f
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c]
push 5
push eax
call sub.gdiplus.dll_GdipSetStringFormatTrimming
cmp eax, edi
je 0x4746b3
mov dword [esp + 0x20], eax
call fcn.00456410
add eax, 0x90
push eax
mov ecx, 0x591ae8
call fcn.004133e0
add esp, 4
test al, al
jne 0x4746ef
call fcn.00456410
add eax, 0x90
push eax
mov ecx, str.Microsoft_YaHei
call fcn.004133e0
add esp, 4
test al, al
jne 0x4746ef
xor eax, eax
jmp 0x4746f4
mov eax, 1
fld1
lea ecx, [esp + 0x34]
neg eax
push ecx
sbb eax, eax
push edi
push ecx
and eax, 5
fstp dword [esp]
add eax, 0x6e
push 0xffdbdbe0
mov dword [ebp + 0x450], eax
mov dword [esp + 0x44], edi
call sub.gdiplus.dll_GdipCreatePen1
mov dword [esp + 0x38], eax
mov byte [esp + 0x58], 4
mov eax, dword [esp + 0x74]
sub eax, dword [ebp + 0x450]
mov edx, dword [esp + 0x70]
mov esi, dword [esp + 0x68]
push eax
add edx, 0xffffffec
push edx
mov edx, dword [esp + 0x3c]
push eax
lea ecx, [esi + 0x14]
push ecx
push edx
push ebx
call sub.gdiplus.dll_GdipDrawLineI
cmp eax, edi
je 0x474756
mov dword [esp + 0x28], eax
mov eax, dword [0x5e736c]
mov edx, dword [eax + 0xc]
mov ecx, 0x5e736c
call edx
add eax, 0x10
mov dword [esp + 0x64], eax
mov byte [esp + 0x58], 5
movzx eax, word [ebp + 0x3c6]
movzx ecx, word [ebp + 0x3c2]
movzx edx, word [ebp + 0x3c0]
push eax
push ecx
push edx
push str._d__d__d
lea edi, [esp + 0x74]
call fcn.00410c00
lea eax, [esp + 0x28]
push 0x5976c0
push eax
mov ecx, edi
call fcn.00481610
mov edx, dword [esp + 0x2c]
mov eax, dword [eax]
add esi, 0x1e
mov dword [esp + 0x78], esi
fild dword [esp + 0x78]
mov esi, dword [esp + 0x84]
add esp, 0x18
fstp dword [esp + 0x60]
push edx
fld dword [esp + 0x64]
mov edx, dword [esp + 0x30]
fstp dword [esp + 0x40]
lea ecx, [esi + 0x1a]
mov dword [esp + 0x6c], ecx
fild dword [esp + 0x6c]
push 0
lea ecx, [esp + 0x70]
fstp dword [esp + 0x48]
push ecx
fld dword [esp + 0x48]
push edx
fstp dword [esp + 0x78]
push 0xffffffffffffffff
fld dword [esp + 0x54]
push eax
fstp dword [esp + 0x84]
push ebx
fldz
fst dword [esp + 0x8c]
fstp dword [esp + 0x90]
call sub.gdiplus.dll_GdipDrawString
test eax, eax
je 0x47481f
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x47483f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp + 0x3ac]
push ecx
push 0x58cbe8
lea edi, [esp + 0x6c]
call fcn.00410c00
lea edx, [esp + 0x20]
push 0x5976cc
push edx
mov ecx, edi
call fcn.00481610
fld dword [esp + 0x70]
mov eax, dword [eax]
fstp dword [esp + 0x4c]
add esp, 0x10
lea ecx, [esi + 0x35]
mov dword [esp + 0x68], ecx
fild dword [esp + 0x68]
push eax
lea edx, [esp + 0x28]
push edx
fstp dword [esp + 0x48]
lea ecx, [esp + 0x4c]
lea edx, [esp + 0x24]
lea eax, [esp + 0x44]
lea edi, [esp + 0x34]
call fcn.0048b3c0
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4748bc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp byte [ebp + 0x3a2], 0
jne 0x474962
cmp dword [ebp + 0x3e4], 3
je 0x474962
cmp byte [ebp + 0x3a0], 0
je 0x474948
mov ecx, dword [ebp + 0x3b0]
mov edx, dword [ebp + 0x3b4]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebp + 0x3b8]
mov dword [eax + 4], edx
mov edx, dword [ebp + 0x3bc]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [esp + 0x78]
push eax
call fcn.004706b0
add esp, 0x14
mov byte [esp + 0x58], 7
mov ecx, dword [eax]
push ecx
push 0x5976e8
lea edi, [esp + 0x6c]
call fcn.00410c00
mov byte [esp + 0x60], 5
mov eax, dword [esp + 0x70]
add eax, 0xfffffff0
add esp, 8
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jmp 0x4749a7
lea ecx, [esp + 0x68]
push ecx
mov ecx, dword [ebp + 0x3e0]
call fcn.004708b0
add esp, 4
mov byte [esp + 0x58], 8
jmp 0x47497a
lea ecx, [esp + 0x68]
push ecx
mov ecx, dword [ebp + 0x3e0]
call fcn.004708b0
add esp, 4
mov byte [esp + 0x58], 6
mov edx, dword [eax]
push edx
push 0x5976d8
lea edi, [esp + 0x6c]
call fcn.00410c00
mov byte [esp + 0x60], 5
mov eax, dword [esp + 0x70]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
add esp, 8
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4749b3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
fld dword [esp + 0x60]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x64]
fstp dword [esp + 0x3c]
push edx
mov edx, dword [esp + 0x28]
lea ecx, [esi + 0x50]
mov dword [esp + 0x6c], ecx
fild dword [esp + 0x6c]
mov ecx, dword [esp + 0x30]
push 0
fstp dword [esp + 0x48]
lea eax, [esp + 0x70]
fld dword [esp + 0x44]
push eax
fstp dword [esp + 0x74]
push ecx
fld dword [esp + 0x50]
push 0xffffffffffffffff
fstp dword [esp + 0x80]
push ebx
fldz
push edx
fst dword [esp + 0x8c]
fstp dword [esp + 0x90]
call sub.gdiplus.dll_GdipDrawString
test eax, eax
je 0x474a17
mov dword [esp + 0x28], eax
lea eax, [ebp + 0x390]
test eax, eax
je 0x474a29
lea ecx, [ebp + 0x394]
jmp 0x474a2b
xor ecx, ecx
lea edx, [esp + 0x18]
push 0x5976f8
push edx
call fcn.00481610
fld dword [esp + 0x68]
mov eax, dword [eax]
fstp dword [esp + 0x44]
add esp, 8
lea ecx, [esi + 0x7c]
mov dword [esp + 0x68], ecx
fild dword [esp + 0x68]
push eax
lea edx, [esp + 0x28]
push edx
fstp dword [esp + 0x48]
lea ecx, [esp + 0x4c]
lea edx, [esp + 0x24]
lea eax, [esp + 0x44]
lea edi, [esp + 0x34]
call fcn.0048b3c0
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x474a91
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp + 0x388]
test ecx, ecx
je 0x474aa3
lea ecx, [ebp + 0x38c]
jmp 0x474aa5
xor ecx, ecx
lea edx, [esp + 0x18]
push 0x597704
push edx
call fcn.00481610
fld dword [esp + 0x68]
mov eax, dword [eax]
fstp dword [esp + 0x44]
add esp, 8
lea ecx, [esi + 0x97]
mov dword [esp + 0x68], ecx
fild dword [esp + 0x68]
push eax
lea edx, [esp + 0x28]
push edx
fstp dword [esp + 0x48]
lea ecx, [esp + 0x4c]
lea edx, [esp + 0x24]
lea eax, [esp + 0x44]
lea edi, [esp + 0x34]
call fcn.0048b3c0
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x474b0e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp + 0x398]
test ecx, ecx
je 0x474b20
lea ecx, [ebp + 0x39c]
jmp 0x474b22
xor ecx, ecx
lea edx, [esp + 0x68]
push 0x597710
push edx
call fcn.00481610
fld dword [esp + 0x68]
mov eax, dword [eax]
fstp dword [esp + 0x44]
add esp, 8
push eax
add esi, 0xb3
mov dword [esp + 0x64], esi
fild dword [esp + 0x64]
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x4c]
fstp dword [esp + 0x48]
lea edx, [esp + 0x24]
lea eax, [esp + 0x44]
lea edi, [esp + 0x34]
call fcn.0048b3c0
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x474b8b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [ebx - 0x10]
mov byte [esp + 0x58], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x474bac
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x34]
push ecx
call sub.gdiplus.dll_GdipDeletePen
mov edx, dword [esp + 0x14]
push edx
call sub.gdiplus.dll_GdipDeleteBrush
mov eax, dword [esp + 0x1c]
push eax
call sub.gdiplus.dll_GdipDeleteStringFormat
mov ecx, dword [esp + 0x2c]
push ecx
call sub.gdiplus.dll_GdipDeleteFont
mov edx, dword [esp + 0x24]
push edx
call sub.gdiplus.dll_GdipDeleteGraphics
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x48
ret 0x18