Function at 0x4daad0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xffffff78
mov esi, ecx
mov ebx, edx
mov edi, eax
xor eax, eax
mov dword [esp], eax
test edi, edi
je 0x4daf81
push 0
call sub.gdi32.dll_CreateCompatibleDC
mov dword [esp + 4], eax
cmp dword [esp + 4], 0
je 0x4daf77
mov dword [esp + 0x44], 0x28
mov eax, edi
mov edx, dword [eax]
call dword [edx + 0x2c]
mov dword [esp + 0x48], eax
mov eax, edi
mov edx, dword [eax]
call dword [edx + 0x20]
mov dword [esp + 0x4c], eax
mov word [esp + 0x50], 1
mov word [esp + 0x52], 0x20
xor eax, eax
mov dword [esp + 0x54], eax
xor eax, eax
mov dword [esp + 0x58], eax
xor eax, eax
mov dword [esp + 0x5c], eax
xor eax, eax
mov dword [esp + 0x60], eax
xor eax, eax
mov dword [esp + 0x64], eax
xor eax, eax
mov dword [esp + 0x68], eax
push 0
push 0
lea eax, [esp + 0x1c]
push eax
push 0
lea eax, [esp + 0x54]
push eax
mov eax, dword [esp + 0x18]
push eax
call sub.gdi32.dll_CreateDIBSection
mov ebp, eax
test ebp, ebp
je 0x4daf77
push ebp
mov eax, dword [esp + 8]
push eax
call sub.gdi32.dll_SelectObject
mov dword [esp + 0x10], eax
lea eax, [esp + 0x70]
push eax
push 0x18
push ebp
call sub.gdi32.dll_GetObjectA
jmp 0x4dab99
inc dword [esp + 0x7c]
mov eax, dword [esp + 0x7c]
and eax, 0x80000003
jns 0x4daba9
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jg 0x4dab95
mov eax, dword [esp + 4]
push eax
call sub.gdi32.dll_CreateCompatibleDC
mov dword [esp + 8], eax
mov eax, edi
mov edx, dword [eax]
call dword [edx + 0x64]
push eax
mov eax, dword [esp + 0xc]
push eax
call sub.gdi32.dll_SelectObject
mov dword [esp + 0xc], eax
push 0xcc0020
push 0
push 0
mov eax, dword [esp + 0x14]
push eax
mov eax, edi
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, edi
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
push 0
push 0
mov eax, dword [esp + 0x24]
push eax
call sub.gdi32.dll_BitBlt
mov dword [esp + 0x18], 0x64
mov eax, dword [esp + 0x18]
shl eax, 4
add eax, 0x20
push eax
push 2
call sub.kernel32.dll_GlobalAlloc
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
push eax
call sub.kernel32.dll_GlobalLock
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
mov dword [eax], 0x20
mov eax, dword [esp + 0x20]
mov dword [eax + 4], 1
mov eax, dword [esp + 0x20]
xor edx, edx
mov dword [eax + 8], edx
mov eax, dword [esp + 0x20]
xor edx, edx
mov dword [eax + 0xc], edx
push 0
push 0
push 0x7fffffff
push 0x7fffffff
mov eax, dword [esp + 0x30]
add eax, 0x10
push eax
call sub.user32.dll_SetRect
mov eax, ebx
call fcn.0042d318
call fcn.00408ce4
mov byte [esp + 0x24], al
mov eax, ebx
call fcn.0042d318
call fcn.00408ce8
mov byte [esp + 0x25], al
mov eax, ebx
call fcn.0042d318
call fcn.00408cec
mov byte [esp + 0x26], al
mov ebx, esi
mov edx, ebx
add dl, byte [esp + 0x24]
mov al, 0xff
call fcn.004daac8
mov byte [esp + 0x27], al
mov edx, ebx
add dl, byte [esp + 0x25]
mov al, 0xff
call fcn.004daac8
mov byte [esp + 0x28], al
mov edx, ebx
add dl, byte [esp + 0x26]
mov al, 0xff
call fcn.004daac8
mov byte [esp + 0x29], al
mov eax, dword [esp + 0x84]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x78]
dec eax
imul dword [esp + 0x7c]
add dword [esp + 0x2c], eax
mov eax, edi
mov edx, dword [eax]
call dword [edx + 0x20]
dec eax
test eax, eax
jl 0x4daef5
inc eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x30], 0
or esi, 0xffffffff
jmp 0x4daecd
inc esi
mov ebp, esi
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x34], eax
mov eax, esi
shl eax, 2
add dword [esp + 0x34], eax
jmp 0x4dad74
mov eax, dword [esp + 0x34]
mov eax, dword [eax]
call fcn.00408cec
mov ebx, eax
cmp bl, byte [esp + 0x24]
jb 0x4dad6e
cmp bl, byte [esp + 0x27]
ja 0x4dad6e
mov eax, dword [esp + 0x34]
mov eax, dword [eax]
call fcn.00408ce8
mov ebx, eax
cmp bl, byte [esp + 0x25]
jb 0x4dad6e
cmp bl, byte [esp + 0x28]
ja 0x4dad6e
mov eax, dword [esp + 0x34]
mov eax, dword [eax]
call fcn.00408ce4
mov ebx, eax
cmp bl, byte [esp + 0x26]
jb 0x4dad6e
cmp bl, byte [esp + 0x29]
jbe 0x4dad7f
add dword [esp + 0x34], 4
inc esi
mov eax, edi
mov edx, dword [eax]
call dword [edx + 0x2c]
cmp esi, eax
jl 0x4dad23
cmp ebp, esi
jge 0x4daecd
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 8]
cmp eax, dword [esp + 0x18]
jb 0x4dadcc
mov eax, dword [esp + 0x1c]
push eax
call sub.kernel32.dll_GlobalUnlock
add dword [esp + 0x18], 0x64
push 2
mov eax, dword [esp + 0x1c]
shl eax, 4
add eax, 0x20
push eax
mov eax, dword [esp + 0x24]
push eax
call sub.kernel32.dll_GlobalReAlloc
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
push eax
call sub.kernel32.dll_GlobalLock
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 8]
shl eax, 4
mov edx, dword [esp + 0x20]
lea eax, [edx + eax + 0x20]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x30]
inc eax
push eax
push esi
mov eax, dword [esp + 0x38]
push eax
push ebp
mov eax, dword [esp + 0x48]
push eax
call sub.user32.dll_SetRect
mov eax, dword [esp + 0x20]
cmp ebp, dword [eax + 0x10]
jge 0x4dae09
mov eax, dword [esp + 0x20]
mov dword [eax + 0x10], ebp
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 0x14]
cmp eax, dword [esp + 0x30]
jle 0x4dae21
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x30]
mov dword [eax + 0x14], edx
mov eax, dword [esp + 0x20]
cmp esi, dword [eax + 0x18]
jle 0x4dae31
mov eax, dword [esp + 0x20]
mov dword [eax + 0x10], esi
mov eax, dword [esp + 0x30]
inc eax
mov edx, dword [esp + 0x20]
cmp eax, dword [edx + 0x1c]
jle 0x4dae4b
mov eax, dword [esp + 0x30]
inc eax
mov edx, dword [esp + 0x20]
mov dword [edx + 0x1c], eax
mov eax, dword [esp + 0x20]
inc dword [eax + 8]
mov eax, dword [esp + 0x20]
cmp dword [eax + 8], 0x7d0
jne 0x4daecd
mov eax, dword [esp + 0x20]
push eax
mov eax, dword [esp + 0x1c]
shl eax, 4
add eax, 0x20
push eax
push 0
call sub.gdi32.dll_ExtCreateRegion
mov dword [esp + 0x3c], eax
cmp dword [esp], 0
je 0x4daea2
push 2
mov eax, dword [esp + 0x40]
push eax
mov eax, dword [esp + 8]
push eax
mov eax, dword [esp + 0xc]
push eax
call sub.gdi32.dll_CombineRgn
mov eax, dword [esp + 0x3c]
push eax
call sub.gdi32.dll_DeleteObject
jmp 0x4daea9
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
mov eax, dword [esp + 0x20]
xor edx, edx
mov dword [eax + 8], edx
push 0
push 0
push 0x7fffffff
push 0x7fffffff
mov eax, dword [esp + 0x30]
add eax, 0x10
push eax
call sub.user32.dll_SetRect
mov eax, edi
mov edx, dword [eax]
call dword [edx + 0x2c]
lea edx, [esi + 1]
cmp eax, edx
jg 0x4dad0d
mov eax, dword [esp + 0x7c]
sub dword [esp + 0x2c], eax
inc dword [esp + 0x30]
dec dword [esp + 0x40]
jne 0x4dad05
mov eax, dword [esp + 0x20]
push eax
mov eax, dword [esp + 0x1c]
shl eax, 4
add eax, 0x20
push eax
push 0
call sub.gdi32.dll_ExtCreateRegion
mov dword [esp + 0x3c], eax
cmp dword [esp], 0
je 0x4daf38
push 2
mov eax, dword [esp + 0x40]
push eax
mov eax, dword [esp + 8]
push eax
mov eax, dword [esp + 0xc]
push eax
call sub.gdi32.dll_CombineRgn
mov eax, dword [esp + 0x3c]
push eax
call sub.gdi32.dll_DeleteObject
jmp 0x4daf3f
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
mov eax, dword [esp + 0x1c]
push eax
call sub.kernel32.dll_GlobalFree
mov eax, dword [esp + 0xc]
push eax
mov eax, dword [esp + 0xc]
push eax
call sub.gdi32.dll_SelectObject
mov eax, dword [esp + 8]
push eax
call sub.gdi32.dll_DeleteDC
mov eax, dword [esp + 0x10]
push eax
mov eax, dword [esp + 8]
push eax
call sub.gdi32.dll_SelectObject
push eax
call sub.gdi32.dll_DeleteObject
mov eax, dword [esp + 4]
push eax
call sub.gdi32.dll_DeleteDC
mov eax, dword [esp]
add esp, 0x88
pop ebp
pop edi
pop esi
pop ebx
ret