Function at 0x4db178
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffeb8
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 4], ebx
mov esi, dword [ebp + 0x10]
lea edi, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, ecx
lea edi, [ebp - 0x68]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xc], edx
mov dword [ebp - 8], eax
lea edi, [ebp - 0xfc]
xor eax, eax
push ebp
push 0x4dc409
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
test byte [eax + 0x27f], 0x80
jne 0x4dc3ed
mov ecx, 0x4dc41c
mov edx, 0x4dc424
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x27c]
xor eax, eax
push ebp
push 0x4dc3e6
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x160]
mov dl, 1
mov eax, dword [0x42aabc]
call fcn.0043145c
mov dword [ebp - 0x38], eax
cmp byte [0x506d5c], 0
je 0x4db240
mov eax, dword [ebp - 8]
cmp byte [eax + 0x3e5], 1
je 0x4db234
mov eax, dword [ebp - 8]
test byte [eax + 0x281], 0x80
jne 0x4db234
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 0xa], 1
je 0x4db240
mov dl, 7
mov eax, dword [ebp - 0x38]
call fcn.00432a90
jmp 0x4db24c
movzx edx, byte [ebp + 8]
mov eax, dword [ebp - 0x38]
call fcn.00432a90
mov eax, edi
xor ecx, ecx
mov edx, 0x94
call fcn.00403bd0
mov eax, dword [ebp - 0x38]
call fcn.00431a30
mov dword [edi], eax
mov eax, dword [ebp - 0x38]
call fcn.00431a30
call fcn.0042c8e4
xor eax, eax
push ebp
push 0x4dc3ae
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x12c]
mov eax, dword [ebp - 8]
add eax, 0x2c9
call fcn.004b58d8
mov eax, dword [ebp - 8]
call fcn.004da908
test al, al
je 0x4db2ae
lea eax, [ebp - 0x12c]
push eax
call sub.user32.dll_IsRectEmpty
test eax, eax
je 0x4db2b2
xor eax, eax
jmp 0x4db2b4
mov al, 1
mov byte [ebp - 0x15], al
mov eax, dword [ebp - 8]
call fcn.00445e9c
cdq
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x438]
xor edx, edx
cmp edx, dword [ebp - 0x4c]
jne 0x4db2dd
cmp eax, dword [ebp - 0x50]
jbe 0x4db2f2
jmp 0x4db2df
jle 0x4db2f2
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x438]
xor edx, edx
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], edx
jmp 0x4db2fe
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x54], eax
push 0
lea eax, [ebp - 0x10c]
push eax
mov eax, dword [ebp - 0x58]
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041abf0
mov edx, dword [ebp - 0x60]
sub edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [ebp - 0xc]
call fcn.0042cc48
push eax
call sub.gdi32.dll_GetMapMode
push eax
mov eax, dword [ebp - 0x38]
call fcn.00431a30
call fcn.0042cc48
push eax
call sub.gdi32.dll_SetMapMode
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 8], 0x10
je 0x4db375
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x34c]
mov eax, dword [eax + 0xc]
mov edx, dword [0x42aabc]
call fcn.00404a30
test al, al
je 0x4db375
test byte [ebp + 0xc], 1
jne 0x4db379
xor eax, eax
jmp 0x4db37b
mov al, 1
mov byte [ebp - 0x16], al
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3a8], 0
setne byte [ebp - 0x17]
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3ac], 0
setne byte [ebp - 0x18]
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3b8], 0
je 0x4db3b5
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 0x11], 2
jne 0x4db3b9
xor eax, eax
jmp 0x4db3bb
mov al, 1
mov byte [ebp - 0x19], al
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x25c]
call fcn.004bf7a0
mov byte [ebp - 0x1a], al
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 9], 0x80
jne 0x4db3fd
mov eax, dword [ebp - 8]
mov si, 0xffb3
call fcn.00404aa0
test al, al
jne 0x4db401
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 8], 2
je 0x4db401
and byte [ebp + 0xc], 0xf7
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 8], 1
je 0x4db414
and byte [ebp + 0xc], 0xfb
xor eax, eax
mov dword [ebp - 0x34], eax
push 0
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x64]
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.004d9b60
mov ebx, eax
mov dword [edi + 8], ebx
test ebx, ebx
jne 0x4db43b
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x34], eax
cmp byte [ebp - 0x15], 0
je 0x4db455
mov eax, dword [ebp - 0x34]
neg eax
push eax
push 0
lea eax, [ebp - 0x12c]
push eax
call sub.user32.dll_OffsetRect
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x14]
add eax, ebx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x5c]
mov esi, dword [ebp - 0x64]
sub eax, esi
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x40], eax
push 0
lea eax, [ebp - 0x11c]
push eax
sub esi, dword [ebp - 0x34]
mov edx, dword [ebp - 0x10]
sub edx, esi
mov ecx, dword [ebp - 0x3c]
mov eax, ebx
call fcn.0041abf0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x48], 0xfffffffe
cmp dword [edi + 8], 0
je 0x4dbe63
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x398]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x268]
sub edx, eax
mov dword [ebp - 0x130], edx
fild dword [ebp - 0x130]
fdiv dword [0x4dc42c]
call fcn.0040349c
mov dword [ebp - 0x28], eax
jmp 0x4dbe59
lea ecx, [ebp - 4]
mov edx, dword [edi + 8]
mov eax, dword [ebp - 8]
call fcn.004c4760
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 4]
call fcn.00406d28
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 0xa], 8
jne 0x4db54f
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x398]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x268]
sub edx, eax
mov dword [ebp - 0x130], edx
fild dword [ebp - 0x130]
fdiv dword [0x4dc42c]
call fcn.0040349c
mov edx, dword [ebp - 0x24]
dec edx
mov ecx, dword [ebp - 8]
imul edx, dword [ecx + 0x268]
add eax, edx
mov dword [ebp - 0x28], eax
mov eax, dword [edi + 8]
test byte [eax + 0xa], 1
jne 0x4db566
mov edx, dword [edi + 8]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x308]
mov eax, dword [edi + 8]
test byte [eax + 0xb], 1
je 0x4db581
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 0xa], 4
jne 0x4db581
inc dword [ebp - 0x44]
mov ecx, dword [edi + 8]
mov edx, dword [edi]
mov eax, dword [ebp - 8]
call fcn.004dabb4
lea ecx, [ebp - 0x138]
mov edx, dword [ebp - 0x34]
and edx, 1
mov eax, dword [ebp - 0x68]
and eax, 1
call fcn.0041abc8
mov eax, dword [ebp - 0x138]
mov dword [edi + 0x3b], eax
mov eax, dword [ebp - 0x134]
mov dword [edi + 0x3f], eax
mov eax, dword [edi + 8]
movzx eax, word [eax + 8]
add dword [ebp - 0x34], eax
mov eax, dword [edi + 8]
movzx eax, word [eax + 8]
add eax, dword [ebp - 0x118]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x44], 0
jg 0x4db5e4
test byte [ebp + 0xc], 0x80
jne 0x4dbe13
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
call dword [edx + 0x20]
mov edx, dword [edi + 8]
movzx edx, word [edx + 8]
cmp eax, edx
je 0x4db638
xor edx, edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [edi + 8]
movzx edx, word [eax + 8]
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x38]
call fcn.00431a30
call fcn.0042cc48
push eax
call sub.gdi32.dll_SetWindowOrgEx
mov eax, dword [edi + 8]
movzx eax, word [eax + 8]
mov dword [ebp - 0x100], eax
push 0
mov eax, dword [edi + 0x3f]
push eax
mov eax, dword [edi + 0x3b]
push eax
mov eax, dword [edi]
call fcn.0042cc48
push eax
call sub.gdi32.dll_SetBrushOrgEx
mov eax, dword [edi + 8]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2c]
push eax
movzx ecx, byte [ebp - 0x18]
movzx edx, byte [ebp - 0x17]
mov eax, dword [ebp - 8]
call fcn.004c37d4
lea eax, [ebp - 0x10c]
push eax
mov ecx, dword [edi + 8]
mov edx, dword [edi]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x15c]
test al, al
jne 0x4dbd85
movzx eax, byte [ebp + 0xc]
mov byte [edi + 4], al
push 1
mov eax, dword [ebp - 0x110]
push eax
lea eax, [ebp - 0x148]
push eax
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x118]
mov eax, dword [ebp - 0x68]
call fcn.0041abf0
lea eax, [ebp - 0x148]
push eax
mov edx, edi
movzx ecx, byte [ebp - 0x16]
mov eax, dword [ebp - 8]
call fcn.004c43b4
push edi
lea esi, [ebp - 0x10c]
add edi, 0x14
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
cmp byte [ebp - 0x1a], 0
je 0x4db6e6
mov edx, edi
mov eax, dword [ebp - 8]
call fcn.004c52e0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x25c]
mov ebx, dword [eax + 8]
jmp 0x4dbd1c
cmp byte [ebp - 0x1a], 0
je 0x4db739
mov eax, dword [ebx + 0x30]
mov edx, dword [edi + 0x10]
mov eax, dword [eax + edx*4]
mov dword [edi + 0xc], eax
cmp dword [ebp - 0x48], 0xfffffffe
jne 0x4db715
mov eax, dword [edi + 0xc]
mov dword [ebp - 0x48], eax
mov edx, dword [edi + 0xc]
mov eax, ebx
call fcn.004bcf78
movzx eax, byte [eax + 0x30]
mov byte [edi + 0x3a], al
mov edx, dword [edi + 0xc]
mov eax, ebx
call fcn.004bcf78
movzx eax, byte [eax + 0x44]
mov byte [edi + 0x38], al
jmp 0x4db757
mov dword [edi + 0xc], 0xffffffff
mov eax, dword [ebp - 8]
movzx eax, byte [eax + 0x5f]
mov byte [edi + 0x3a], al
mov eax, dword [ebp - 8]
movzx eax, byte [eax + 0x3e6]
mov byte [edi + 0x38], al
movzx eax, byte [ebp + 0xc]
mov byte [edi + 4], al
mov eax, dword [ebp - 8]
test byte [eax + 0x27d], 8
je 0x4db790
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x288]
cmp eax, dword [edi + 8]
jne 0x4db790
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28c]
cmp eax, dword [edi + 0xc]
je 0x4db78c
cmp byte [ebp - 0x1a], 0
jne 0x4db790
and byte [edi + 4], 0xf7
cmp byte [ebp - 0x1a], 0
je 0x4db7c4
mov eax, dword [edi + 8]
test byte [eax + 0xb], 1
je 0x4db7b4
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 0xf], 4
je 0x4db7b4
test byte [edi + 4], 8
jne 0x4db7c4
mov edx, dword [edi + 0xc]
mov eax, ebx
call fcn.004bcf78
test byte [eax + 0x3c], 0x10
je 0x4db7c8
and byte [edi + 4], 0xfd
mov eax, dword [ebx + 0x18]
call fcn.004bf784
cmp eax, dword [edi + 0xc]
sete byte [ebp - 0x1b]
cmp byte [edi + 0x3a], 0
je 0x4db7e5
lea eax, [edi + 0x38]
call fcn.00442e28
cmp byte [ebp - 0x1a], 0
je 0x4db7ff
mov edx, dword [edi + 0xc]
mov eax, ebx
call fcn.004bcf78
test byte [eax + 0x3c], 0x80
je 0x4dbca7
test byte [ebp + 0xc], 0x40
setne al
xor al, 1
or al, byte [ebp - 0x1b]
je 0x4dbca7
lea ecx, [ebp - 0x30]
mov edx, edi
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0xe4]
mov eax, dword [edi + 0x1c]
cmp eax, dword [ebp - 0x68]
jle 0x4dbc9b
mov eax, dword [edi]
push eax
mov ecx, dword [edi + 0xc]
mov edx, dword [edi + 8]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x1f4]
mov dword [edi + 0x34], eax
push edi
lea esi, [edi + 0x14]
add edi, 0x24
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
cmp byte [edi + 0x3a], 0
je 0x4db864
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x350]
sub dword [edi + 0x2c], eax
jmp 0x4db870
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x350]
add dword [edi + 0x24], eax
movzx eax, byte [ebp - 0x19]
and al, byte [ebp - 0x1b]
je 0x4db8bd
push 0
push 0
xor ecx, ecx
mov edx, dword [edi + 8]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x2c0]
mov dword [edi + 0x6c], eax
cmp dword [edi + 0x6c], 0xffffffff
jle 0x4db8c4
mov eax, dword [ebp - 0x20]
push eax
lea eax, [edi + 0x24]
push eax
lea eax, [edi + 0x6c]
push eax
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x3b8]
movzx ecx, byte [edi + 0x3a]
mov eax, dword [ebp - 8]
call fcn.004c36dc
mov byte [edi + 0x78], 0
jmp 0x4db8c4
mov dword [edi + 0x6c], 0xffffffff
cmp byte [ebp - 0x18], 0
je 0x4db90e
push 1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ac]
push eax
mov edx, edi
mov cl, 2
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x2d4]
cmp dword [edi + 0x58], 0xffffffff
jle 0x4db915
mov eax, dword [ebp - 0x20]
push eax
lea eax, [edi + 0x24]
push eax
lea eax, [edi + 0x58]
push eax
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x3ac]
movzx ecx, byte [edi + 0x3a]
mov eax, dword [ebp - 8]
call fcn.004c36dc
jmp 0x4db915
mov dword [edi + 0x58], 0xffffffff
cmp byte [ebp - 0x17], 0
je 0x4db971
push 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3a8]
push eax
mov eax, dword [edi + 8]
test byte [eax + 0xb], 1
setne al
and eax, 0x7f
movzx ecx, byte [eax + 0x4ff010]
mov edx, edi
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x2d4]
cmp dword [edi + 0x44], 0xffffffff
jle 0x4db978
mov eax, dword [ebp - 0x20]
push eax
lea eax, [edi + 0x24]
push eax
lea eax, [edi + 0x44]
push eax
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x3a8]
movzx ecx, byte [edi + 0x3a]
mov eax, dword [ebp - 8]
call fcn.004c36dc
jmp 0x4db978
mov dword [edi + 0x44], 0xffffffff
cmp byte [ebp - 0x1b], 0
je 0x4db9a7
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 0xa], 8
setne al
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004272b0
mov ecx, eax
mov edx, edi
mov eax, dword [ebp - 8]
call fcn.004c36b0
cmp byte [ebp - 0x1a], 0
je 0x4db9bc
push 0
lea ecx, [edi + 0x14]
mov edx, dword [edi]
mov eax, dword [ebp - 8]
call fcn.004c5488
test byte [edi + 4], 0x20
je 0x4dbac0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 8], 0x80
je 0x4dbac0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3d4]
mov edx, 4
call fcn.004c30e8
mov edx, eax
mov eax, dword [edi]
mov eax, dword [eax + 0xc]
call fcn.0042bb1c
cmp byte [ebp - 0x1b], 0
je 0x4dbaa1
mov eax, dword [ebp - 8]
cmp byte [eax + 0x3db], 1
jne 0x4dbaa1
cmp byte [edi + 0x3a], 0
jne 0x4dba5d
mov eax, dword [edi + 0x1c]
dec eax
push eax
mov eax, dword [edi + 0x20]
dec eax
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 0xa], 8
setne al
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004272b0
mov ecx, eax
mov eax, dword [ebp - 8]
imul ecx, dword [eax + 0x268]
add ecx, dword [edi + 0x14]
mov edx, edi
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x2a8]
jmp 0x4dbaba
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 0xa], 8
setne al
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004272b0
mov edx, dword [ebp - 8]
imul dword [edx + 0x268]
mov edx, dword [edi + 0x1c]
sub edx, eax
dec edx
push edx
mov eax, dword [edi + 0x20]
dec eax
push eax
mov edx, edi
mov ecx, dword [edi + 0x14]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x2a8]
jmp 0x4dbaba
mov eax, dword [edi + 0x1c]
push eax
mov eax, dword [edi + 0x20]
dec eax
push eax
mov edx, edi
mov ecx, dword [edi + 0x14]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x2a8]
dec dword [edi + 0x20]
dec dword [edi + 0x30]
cmp byte [ebp - 0x1a], 0
je 0x4dbb4e
test byte [edi + 4], 0x20
je 0x4dbb4e
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 9], 4
je 0x4dbb4e
mov eax, dword [ebx + 0x18]
test byte [eax + 0x15], 1
je 0x4dbaf5
mov eax, ebx
call fcn.004bcf70
dec eax
cmp eax, dword [edi + 0x10]
jbe 0x4dbb4e
cmp byte [edi + 0x3a], 0
je 0x4dbb10
mov ecx, dword [edi + 0xc]
mov edx, dword [edi + 8]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x110]
test al, al
jne 0x4dbb48
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3d4]
mov edx, 4
call fcn.004c30e8
mov edx, eax
mov eax, dword [edi]
mov eax, dword [eax + 0xc]
call fcn.0042bb1c
mov eax, dword [edi + 0x20]
push eax
mov eax, dword [edi + 0x1c]
dec eax
push eax
mov edx, edi
mov ecx, dword [edi + 0x18]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x2ac]
dec dword [edi + 0x1c]
dec dword [edi + 0x2c]
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov edx, edi
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x348]
cmp byte [ebp - 0x1b], 0
je 0x4dbc1a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 9], 2
je 0x4dbbb2
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 0xa], 8
setne al
mov ecx, dword [ebp - 0x24]
mov edx, 1
call fcn.004272b0
push eax
mov eax, dword [ebp - 4]
push eax
mov edx, edi
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x33c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 8], 0x20
je 0x4dbc07
mov eax, dword [edi + 8]
test byte [eax + 0xa], 0x40
je 0x4dbc07
mov eax, dword [edi + 8]
test byte [eax + 0xb], 4
je 0x4dbbe2
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 0xd], 0x80
jne 0x4dbc07
mov eax, dword [edi + 0xc]
push eax
lea eax, [edi + 0x14]
push eax
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x2c]
push eax
movzx eax, byte [edi + 0x3a]
push eax
mov ecx, dword [edi + 8]
mov edx, dword [edi]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x338]
cmp dword [edi + 0x6c], 0xffffffff
jle 0x4dbc1a
mov edx, edi
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x330]
cmp dword [edi + 0x58], 0xffffffff
jle 0x4dbc31
push 0
mov edx, edi
mov cl, 1
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x334]
cmp dword [edi + 0x44], 0xffffffff
jle 0x4dbc48
push 1
mov edx, edi
xor ecx, ecx
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x334]
mov eax, dword [ebp - 8]
test byte [eax + 0x27d], 8
je 0x4dbc76
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x288]
cmp eax, dword [edi + 8]
jne 0x4dbc76
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28c]
cmp eax, dword [edi + 0xc]
je 0x4dbc83
cmp byte [ebp - 0x1a], 0
je 0x4dbc83
mov edx, edi
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x25c]
mov eax, dword [edi + 0xc]
push eax
lea eax, [edi + 0x14]
push eax
mov ecx, dword [edi + 8]
mov edx, dword [edi]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x13c]
cmp byte [ebp - 0x1a], 0
je 0x4dbd34
jmp 0x4dbcb6
xor ecx, ecx
mov edx, dword [edi + 0xc]
mov eax, ebx
call fcn.004be604
mov dword [ebp - 0x30], eax
push 0
mov eax, dword [edi]
call fcn.0042cc48
push eax
call sub.gdi32.dll_SelectClipRgn
mov eax, dword [edi + 0x14]
cmp eax, dword [ebp - 0x60]
jge 0x4dbd34
cmp dword [ebp - 0x30], 0xfffffffe
je 0x4dbd34
mov edx, dword [ebp - 0x30]
mov eax, ebx
call fcn.004bcf78
mov eax, dword [eax + 0x1c]
mov dword [edi + 0x10], eax
mov edx, dword [ebp - 0x30]
mov eax, ebx
call fcn.004bcf78
test byte [eax + 0x3c], 0x80
je 0x4dbd1c
mov edx, dword [ebp - 0x30]
mov eax, ebx
call fcn.004bcf78
lea ecx, [edi + 0x1c]
lea edx, [edi + 0x14]
call fcn.004bc65c
mov eax, dword [edi + 8]
movzx eax, word [eax + 8]
mov dword [edi + 0x20], eax
mov eax, dword [edi + 8]
movzx eax, word [eax + 8]
mov dword [edi + 0x30], eax
cmp dword [edi + 0xc], 0xfffffffe
jg 0x4dbd28
cmp byte [ebp - 0x1a], 0
jne 0x4dbd34
mov eax, dword [edi + 0x14]
cmp eax, dword [ebp - 0x60]
jl 0x4db6f7
lea eax, [ebp - 0x10c]
push eax
mov ecx, dword [edi + 8]
mov edx, dword [edi]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x144]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3f4]
cmp eax, dword [edi + 8]
jne 0x4dbd85
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 8], 0x40
je 0x4dbd85
test byte [edi + 4], 0x10
je 0x4dbd85
lea eax, [ebp - 0x10c]
push eax
mov ecx, dword [edi + 8]
mov edx, dword [edi]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x258]
cmp byte [ebp - 0x15], 0
je 0x4dbdcc
lea eax, [ebp - 0x12c]
push eax
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
lea eax, [ebp - 0x148]
push eax
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.0041abf0
lea eax, [ebp - 0x148]
push eax
mov ecx, dword [ebp - 0x68]
mov edx, dword [edi]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x340]
push 0xcc0020
push 0
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x38]
call fcn.00431a30
call fcn.0042cc48
push eax
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov eax, dword [ebp - 0x118]
push eax
mov eax, dword [ebp - 0x11c]
push eax
mov eax, dword [ebp - 0xc]
call fcn.0042cc48
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [edi + 8]
movzx eax, word [eax + 8]
add dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x40]
jge 0x4dbe63
cmp byte [ebp - 0x15], 0
je 0x4dbe49
mov eax, dword [edi + 8]
movzx eax, word [eax + 8]
neg eax
push eax
push 0
lea eax, [ebp - 0x12c]
push eax
call sub.user32.dll_OffsetRect
mov cl, 1
mov edx, dword [edi + 8]
mov eax, dword [ebp - 8]
call fcn.004d9750
mov dword [edi + 8], eax
cmp dword [edi + 8], 0
jne 0x4db4e1
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x40]
jge 0x4dc38b
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x10]
push eax
lea eax, [ebp - 0x10c]
push eax
mov ecx, dword [ebp - 0x11c]
xor edx, edx
mov eax, dword [ebp - 0x11c]
call fcn.0041abf0
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x10]
push eax
lea eax, [ebp - 0x11c]
push eax
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x14]
xor edx, edx
xor eax, eax
call fcn.0041abf0
xor edx, edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov dl, 7
mov eax, dword [ebp - 0x38]
call fcn.00432a90
mov edx, dword [ebp - 0x114]
sub edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov edx, dword [ebp - 0x110]
sub edx, dword [ebp - 0x118]
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 0
push 0
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x38]
call fcn.00431a30
call fcn.0042cc48
push eax
call sub.gdi32.dll_SetWindowOrgEx
mov eax, dword [ebp - 0x38]
call fcn.00431a30
mov edx, eax
lea ecx, [ebp - 0x11c]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x254]
test al, al
jne 0x4dc2b0
cmp byte [ebp - 0x16], 0
je 0x4dbfd8
push 0
push 0
push 0
mov eax, dword [ebp - 0x38]
call fcn.00431a30
call fcn.0042cc48
push eax
call sub.gdi32.dll_SetWindowOrgEx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 0xa], 2
je 0x4dbfa6
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x11c]
push eax
mov eax, dword [ebp - 0x38]
call fcn.00431a30
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x34c]
call fcn.0042eb8c
mov edx, eax
mov eax, dword [ebp - 8]
pop ecx
call fcn.004c6fbc
jmp 0x4dc2b0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x11c]
push eax
mov eax, dword [ebp - 0x38]
call fcn.00431a30
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x34c]
call fcn.0042eb8c
mov edx, eax
mov eax, dword [ebp - 8]
pop ecx
call fcn.004c7168
jmp 0x4dc2b0
cmp byte [ebp - 0x1a], 0
je 0x4dc26e
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x25c]
mov ebx, dword [eax + 8]
cmp dword [ebp - 0x48], 0xfffffffe
jne 0x4dc059
xor edx, edx
mov eax, ebx
call fcn.004be508
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xfffffffe
je 0x4dc051
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.004bcf78
call fcn.004bb7f4
mov dword [ebp - 0x10c], eax
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.004bcf78
mov eax, dword [eax + 0x18]
add eax, dword [ebp - 0x10c]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x11c]
jg 0x4dc087
xor ecx, ecx
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.004be604
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xfffffffe
jne 0x4dc000
jmp 0x4dc087
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.004bcf78
call fcn.004bb7f4
mov dword [ebp - 0x10c], eax
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.004bcf78
mov eax, dword [eax + 0x18]
add eax, dword [ebp - 0x10c]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3d4]
mov edx, 4
call fcn.004c30e8
push eax
mov eax, dword [ebp - 0x38]
call fcn.00431a30
mov eax, dword [eax + 0xc]
pop edx
call fcn.0042bb1c
jmp 0x4dc1b0
test byte [ebp + 0xc], 0x20
je 0x4dc113
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 9], 0x40
je 0x4dc113
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 9], 4
je 0x4dc113
mov eax, dword [ebx + 0x18]
test byte [eax + 0x15], 1
je 0x4dc0eb
mov eax, ebx
call fcn.004bcf70
dec eax
cmp eax, dword [ebp - 0x48]
jbe 0x4dc113
mov eax, dword [ebp - 0x100]
push eax
mov eax, dword [ebp - 0x104]
dec eax
push eax
mov edx, edi
mov ecx, dword [ebp - 0x108]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x2ac]
dec dword [ebp - 0x104]
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.004bcf78
test byte [eax + 0x3c], 0x10
jne 0x4dc144
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.004bcf78
mov eax, dword [eax + 0x4c]
push eax
mov eax, dword [ebp - 0x38]
call fcn.00431a30
mov eax, dword [eax + 0x14]
pop edx
call fcn.0042c41c
jmp 0x4dc15a
mov eax, dword [ebp - 0x38]
call fcn.00431a30
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x70]
call fcn.0042c41c
mov eax, dword [ebp - 0x38]
call fcn.00431a30
lea edx, [ebp - 0x10c]
call fcn.0042c834
xor ecx, ecx
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.004be604
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xfffffffe
je 0x4dc1b0
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.004bcf78
call fcn.004bb7f4
mov dword [ebp - 0x10c], eax
mov edx, dword [ebp - 0x48]
mov eax, ebx
call fcn.004bcf78
mov eax, dword [eax + 0x18]
add eax, dword [ebp - 0x10c]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x48], 0xfffffffe
je 0x4dc1cb
mov eax, dword [ebp - 0x114]
add eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x10c]
jg 0x4dc0b1
mov eax, dword [ebp - 0x114]
add eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x104]
jle 0x4dc253
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x114]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x104], eax
test byte [ebp + 0xc], 0x20
je 0x4dc22a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 9], 0x40
je 0x4dc22a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 9], 4
je 0x4dc22a
mov eax, dword [ebx + 0x18]
test byte [eax + 0x15], 1
jne 0x4dc22a
inc dword [ebp - 0x10c]
mov eax, dword [ebp - 0x38]
call fcn.00431a30
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x70]
call fcn.0042c41c
mov eax, dword [ebp - 0x38]
call fcn.00431a30
lea edx, [ebp - 0x10c]
call fcn.0042c834
push 0
push 0
push 0
mov eax, dword [ebp - 0x38]
call fcn.00431a30
call fcn.0042cc48
push eax
call sub.gdi32.dll_SetWindowOrgEx
jmp 0x4dc2b0
push 0
push 0
push 0
mov eax, dword [ebp - 0x38]
call fcn.00431a30
call fcn.0042cc48
push eax
call sub.gdi32.dll_SetWindowOrgEx
mov eax, dword [ebp - 0x38]
call fcn.00431a30
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x70]
call fcn.0042c41c
mov eax, dword [ebp - 0x38]
call fcn.00431a30
lea edx, [ebp - 0x11c]
call fcn.0042c834
push 0
push 0
push 0
mov eax, dword [ebp - 0x38]
call fcn.00431a30
call fcn.0042cc48
push eax
call sub.gdi32.dll_SetWindowOrgEx
cmp byte [ebp - 0x15], 0
je 0x4dc34c
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 8]
add eax, 0x2c9
call fcn.004b58d8
mov eax, dword [ebp - 0x10]
neg eax
mov edx, dword [ebp - 8]
add eax, dword [edx + 0x430]
push eax
mov eax, dword [ebp - 0x14]
neg eax
add eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x68]
push eax
lea eax, [ebp - 0x10c]
push eax
call sub.user32.dll_OffsetRect
push 0
mov eax, dword [ebp - 0x14]
and eax, 1
push eax
push 0
mov eax, dword [ebp - 0x38]
call fcn.00431a30
call fcn.0042cc48
push eax
call sub.gdi32.dll_SetBrushOrgEx
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x11c]
push eax
mov eax, dword [ebp - 0x38]
call fcn.00431a30
mov edx, eax
xor ecx, ecx
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x340]
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x38]
call fcn.00431a30
call fcn.0042cc48
push eax
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0xc]
call fcn.0042cc48
push eax
call sub.gdi32.dll_BitBlt
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4dc3b5
mov eax, dword [ebp - 0x38]
call fcn.00431a30
call fcn.0042cb3c
mov eax, dword [ebp - 0x38]
call fcn.004048a4
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4dc410
lea eax, [ebp - 4]
mov edx, dword [0x4adc64]
call fcn.00406fe4
ret