Function at 0x414520
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x41da29
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd8
push ebx
push esi
xor esi, esi
push edi
mov ebx, ecx
mov dword [esp + 0xa0], esi
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], esi
mov dword [esp + 0xb0], esi
push 0xff
push 1
push esi
lea ecx, [esp + 0x6c]
mov dword [esp + 0xf8], esi
call sub.MFC71.DLL_CPen::CPen
push 0xffffff
push 1
push esi
lea ecx, [esp + 0x64]
mov byte [esp + 0xf8], 1
call sub.MFC71.DLL_CPen::CPen
push 0xff00
push 1
push esi
lea ecx, [esp + 0x74]
mov byte [esp + 0xf8], 2
call sub.MFC71.DLL_CPen::CPen
fld dword [ebx + 0x1b8]
fsub dword [ebx + 0x1b4]
mov byte [esp + 0xec], 3
fmul dword [0x420d4c]
fstp dword [esp + 0x1c]
fld dword [ebx + 0x1c0]
fsub dword [ebx + 0x1bc]
fmul dword [0x420d4c]
fld dword [esp + 0x1c]
fcomp st(1)
fnstsw ax
test ah, 0x41
je 0x4145f1
fstp dword [esp + 0x1c]
jmp 0x4145f3
fstp st(0)
mov eax, dword [esp + 0x1c]
mov edi, dword [ebx + 0x140]
mov esi, dword [ebp + 8]
mov dword [esp + 0x88], eax
mov eax, dword [ebx + 0x13c]
lea ecx, [eax - 0xaa]
mov dword [esp + 0x18], ecx
fild dword [esp + 0x18]
lea edx, [esp + 0x60]
push edx
mov ecx, esi
fmul dword [esp + 0x20]
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], edi
fsubr dword [ebx + 0x1b4]
fstp dword [esp + 0x84]
fld dword [esp + 0x20]
fmul dword [0x4200fc]
fsubr dword [ebx + 0x1bc]
fstp dword [esp + 0x88]
call sub.MFC71.DLL_CDC::SelectObject_1
mov eax, dword [ebx + 0xe4]
test eax, eax
mov dword [esp + 0x18], 0
jle 0x414862
jmp 0x414680
mov eax, dword [ebx + 0xe0]
test eax, eax
mov dword [esp + 0x38], 0
jle 0x41484b
mov eax, dword [ebx + 0x11c]
lea esp, [esp]
mov ecx, dword [ebx + 0x118]
cmp ecx, eax
mov dword [esp + 0x44], ecx
je 0x414834
fld dword [0x41f86c]
fdiv dword [esp + 0x1c]
fstp dword [esp + 0xc]
jmp 0x4146c6
mov ecx, dword [esp + 0x44]
mov eax, dword [ecx]
mov edx, dword [esp + 0x38]
sub esp, 0xc
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [esp + 0x24]
dec eax
mov dword [ecx + 4], edx
mov dword [ecx + 8], eax
lea eax, [esp + 0xdc]
push eax
mov ecx, ebx
call fcn.00406d00
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x48], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x4c], edx
mov edx, dword [eax + 0xc]
mov eax, dword [esp + 0x48]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x70], ecx
fld dword [esp + 0x70]
fsub dword [esp + 0x80]
mov dword [esp + 0x54], edx
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x54]
fmul dword [esp + 0xc]
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x40]
fadd qword [0x41f848]
mov dword [esp + 0x34], eax
mov dword [esp + 0x74], edx
call fcn.0041c780
fld dword [esp + 0x74]
fsub dword [esp + 0x84]
mov dword [esp + 0x20], eax
fmul dword [esp + 0xc]
fadd qword [0x41f848]
call fcn.0041c780
mov ecx, dword [esp + 0x34]
sub edi, eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x10], eax
fld dword [esp + 0x10]
fsub dword [esp + 0x80]
mov dword [esp + 0x14], ecx
fmul dword [esp + 0xc]
fadd qword [0x41f848]
call fcn.0041c780
fld dword [esp + 0x14]
fsub dword [esp + 0x84]
mov dword [esp + 0x28], eax
fmul dword [esp + 0xc]
fadd qword [0x41f848]
call fcn.0041c780
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x20]
sub ecx, eax
push edi
push edx
lea eax, [esp + 0x80]
mov dword [esp + 0x34], ecx
push eax
mov ecx, esi
call sub.MFC71.DLL_CDC::MoveTo
mov ecx, dword [esp + 0x28]
push edi
push ecx
mov ecx, esi
call sub.MFC71.DLL_CDC::LineTo
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
push edx
push eax
mov ecx, esi
call sub.MFC71.DLL_CDC::LineTo
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push ecx
push edx
mov ecx, esi
call sub.MFC71.DLL_CDC::LineTo
mov eax, dword [esp + 0x20]
push edi
push eax
mov ecx, esi
call sub.MFC71.DLL_CDC::LineTo
mov ecx, dword [esp + 0x44]
mov eax, dword [ebx + 0x11c]
mov edi, dword [esp + 0x98]
add ecx, 0x14
cmp ecx, eax
mov dword [esp + 0x44], ecx
jne 0x4146c2
mov ecx, dword [esp + 0x38]
mov edx, dword [ebx + 0xe0]
inc ecx
cmp ecx, edx
mov dword [esp + 0x38], ecx
jl 0x4146a0
mov eax, dword [esp + 0x18]
mov ecx, dword [ebx + 0xe4]
inc eax
cmp eax, ecx
mov dword [esp + 0x18], eax
jl 0x414680
lea ecx, [esp + 0x58]
push ecx
mov ecx, esi
call sub.MFC71.DLL_CDC::SelectObject_1
sub esp, 0xc
lea edx, [ebx + 0x15c]
mov ecx, dword [edx]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
lea eax, [esp + 0xdc]
push eax
mov ecx, ebx
call fcn.00406d00
fld dword [0x41f86c]
fdiv dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x48], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x4c], edx
mov edx, dword [eax + 0xc]
mov eax, dword [esp + 0x48]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x54], edx
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x54]
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x40]
mov dword [esp + 0x34], eax
mov dword [esp + 0x14], edx
fstp dword [esp + 0xc]
fld dword [esp + 0x10]
fsub dword [esp + 0x80]
fmul dword [esp + 0xc]
fadd qword [0x41f848]
call fcn.0041c780
fld dword [esp + 0x14]
fsub dword [esp + 0x84]
mov dword [esp + 0x20], eax
fmul dword [esp + 0xc]
fadd qword [0x41f848]
call fcn.0041c780
mov ecx, edi
sub ecx, eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x10], eax
fld dword [esp + 0x10]
fsub dword [esp + 0x80]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x14], ecx
fmul dword [esp + 0xc]
fadd qword [0x41f848]
call fcn.0041c780
fld dword [esp + 0x14]
fsub dword [esp + 0x84]
mov dword [esp + 0x28], eax
fmul dword [esp + 0xc]
fadd qword [0x41f848]
call fcn.0041c780
mov edx, dword [esp + 0x24]
mov ecx, edi
sub ecx, eax
mov eax, dword [esp + 0x20]
push edx
mov dword [esp + 0x30], ecx
push eax
lea ecx, [esp + 0x80]
push ecx
mov ecx, esi
call sub.MFC71.DLL_CDC::MoveTo
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
push edx
push eax
mov ecx, esi
call sub.MFC71.DLL_CDC::LineTo
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
push ecx
push edx
mov ecx, esi
call sub.MFC71.DLL_CDC::LineTo
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x20]
push eax
push ecx
mov ecx, esi
call sub.MFC71.DLL_CDC::LineTo
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
push edx
push eax
mov ecx, esi
call sub.MFC71.DLL_CDC::LineTo
lea ecx, [esp + 0x68]
push ecx
mov ecx, esi
call sub.MFC71.DLL_CDC::SelectObject_1
mov edx, dword [ebx + 0x140]
xor ecx, ecx
mov dword [esp + 0x10], ecx
fild dword [esp + 0x10]
mov dword [esp + 0x38], eax
xor eax, eax
fmul dword [ebx + 0x130]
mov ecx, edx
sub ecx, eax
mov eax, dword [ebx + 0x13c]
fadd dword [ebx + 0x128]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], eax
mov eax, edx
fstp dword [esp + 0x3c]
mov ecx, dword [esp + 0x3c]
fild dword [esp + 0x18]
sub eax, edx
mov dword [esp + 0x18], eax
fmul dword [ebx + 0x130]
fadd dword [ebx + 0x12c]
fstp dword [esp + 0x40]
mov edx, dword [esp + 0x40]
fild dword [esp + 0x10]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
fmul dword [ebx + 0x130]
fadd dword [ebx + 0x128]
fstp dword [esp + 0x30]
fild dword [esp + 0x18]
fmul dword [ebx + 0x130]
fadd dword [ebx + 0x12c]
fstp dword [esp + 0x34]
fld dword [esp + 0x10]
fsub dword [esp + 0x80]
fmul dword [esp + 0xc]
fadd qword [0x41f848]
call fcn.0041c780
fld dword [esp + 0x14]
fsub dword [esp + 0x84]
mov dword [esp + 0x20], eax
fmul dword [esp + 0xc]
fadd qword [0x41f848]
call fcn.0041c780
mov ecx, dword [esp + 0x34]
mov ebx, edi
sub ebx, eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x10], eax
fld dword [esp + 0x10]
mov dword [esp + 0x14], ecx
fsub dword [esp + 0x80]
fmul dword [esp + 0xc]
fadd qword [0x41f848]
call fcn.0041c780
fld dword [esp + 0x14]
fsub dword [esp + 0x84]
mov dword [esp + 0x28], eax
fmul dword [esp + 0xc]
fadd qword [0x41f848]
call fcn.0041c780
mov edx, dword [esp + 0x20]
push ebx
sub edi, eax
push edx
lea eax, [esp + 0x80]
push eax
mov ecx, esi
call sub.MFC71.DLL_CDC::MoveTo
mov ecx, dword [esp + 0x28]
push ebx
push ecx
mov ecx, esi
call sub.MFC71.DLL_CDC::LineTo
mov edx, dword [esp + 0x28]
push edi
push edx
mov ecx, esi
call sub.MFC71.DLL_CDC::LineTo
push edi
mov edi, dword [esp + 0x24]
push edi
mov ecx, esi
call sub.MFC71.DLL_CDC::LineTo
push ebx
push edi
mov ecx, esi
call sub.MFC71.DLL_CDC::LineTo
mov eax, dword [esp + 0x38]
push eax
mov ecx, esi
call sub.MFC71.DLL_CDC::SelectObject_1
mov esi, 0x41f858
lea ecx, [esp + 0x68]
mov byte [esp + 0xec], 2
mov dword [esp + 0x68], esi
call sub.MFC71.DLL_CGdiObject::DeleteObject
lea ecx, [esp + 0x58]
mov byte [esp + 0xec], 1
mov dword [esp + 0x58], esi
call sub.MFC71.DLL_CGdiObject::DeleteObject
lea ecx, [esp + 0x60]
mov byte [esp + 0xec], 0
mov dword [esp + 0x60], esi
call sub.MFC71.DLL_CGdiObject::DeleteObject
mov ecx, dword [esp + 0xe4]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4