Function at 0x4d0084
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffeb0
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 4], ebx
mov esi, dword [ebp + 0x10]
lea edi, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, ecx
lea edi, [ebp - 0x70]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xc], edx
mov dword [ebp - 8], eax
lea edi, [ebp - 0x104]
xor eax, eax
push ebp
push 0x4d134c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
test byte [eax + 0x27f], 0x20
jne 0x4d1330
mov ecx, 0x4d135c
mov edx, 0x4d1364
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x278]
xor eax, eax
push ebp
push 0x4d1329
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x164]
mov dl, 1
mov eax, dword [0x435b9c]
call fcn.0043ca10
mov dword [ebp - 0x3c], eax
cmp byte [0x5f65a4], 0
je 0x4d014c
mov eax, dword [ebp - 8]
cmp byte [eax + 0x3c5], 1
je 0x4d0140
mov eax, dword [ebp - 8]
test byte [eax + 0x281], 0x10
jne 0x4d0140
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 0xa], 1
je 0x4d014c
mov dl, 7
mov eax, dword [ebp - 0x3c]
call fcn.0043e128
jmp 0x4d0158
movzx edx, byte [ebp + 8]
mov eax, dword [ebp - 0x3c]
call fcn.0043e128
mov eax, edi
xor ecx, ecx
mov edx, 0x94
call fcn.00403b28
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
mov dword [edi], eax
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
call fcn.00437f60
xor eax, eax
push ebp
push 0x4d12f1
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x134]
mov eax, dword [ebp - 8]
add eax, 0x2b4
call fcn.004ae940
mov eax, dword [ebp - 8]
call fcn.004cf824
test al, al
je 0x4d01ba
lea eax, [ebp - 0x134]
push eax
call sub.user32.dll_IsRectEmpty
test eax, eax
je 0x4d01be
xor eax, eax
jmp 0x4d01c0
mov al, 1
mov byte [ebp - 0x15], al
mov eax, dword [ebp - 8]
call fcn.0046a794
cdq
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x418]
xor edx, edx
cmp edx, dword [ebp - 0x54]
jne 0x4d01e9
cmp eax, dword [ebp - 0x58]
jbe 0x4d01fe
jmp 0x4d01eb
jle 0x4d01fe
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x418]
xor edx, edx
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], edx
jmp 0x4d020a
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x5c], eax
push 0
lea eax, [ebp - 0x114]
push eax
mov eax, dword [ebp - 0x60]
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.00423e54
mov edx, dword [ebp - 0x68]
sub edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [ebp - 0xc]
call fcn.0043849c
push eax
call sub.gdi32.dll_GetMapMode
push eax
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
call fcn.0043849c
push eax
call sub.gdi32.dll_SetMapMode
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 8], 0x10
je 0x4d0281
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x330]
mov eax, dword [eax + 0xc]
mov edx, dword [0x435b9c]
call fcn.004045c8
test al, al
je 0x4d0281
test byte [ebp + 0xc], 1
jne 0x4d0285
xor eax, eax
jmp 0x4d0287
mov al, 1
mov byte [ebp - 0x16], al
mov eax, dword [ebp - 8]
cmp dword [eax + 0x384], 0
setne byte [ebp - 0x17]
mov eax, dword [ebp - 8]
cmp dword [eax + 0x388], 0
setne byte [ebp - 0x18]
mov eax, dword [ebp - 8]
cmp dword [eax + 0x394], 0
je 0x4d02c1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 0x11], 2
jne 0x4d02c5
xor eax, eax
jmp 0x4d02c7
mov al, 1
mov byte [ebp - 0x19], al
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x25c]
call fcn.004b77b0
mov byte [ebp - 0x1a], al
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 9], 0x80
jne 0x4d0309
mov eax, dword [ebp - 8]
mov si, 0xffb3
call fcn.00404638
test al, al
jne 0x4d030d
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 8], 2
je 0x4d030d
and byte [ebp + 0xc], 0xf7
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 8], 1
je 0x4d0320
and byte [ebp + 0xc], 0xfb
xor eax, eax
mov dword [ebp - 0x38], eax
push 0
lea eax, [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0x6c]
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.004cec38
mov ebx, eax
mov dword [edi + 8], ebx
test ebx, ebx
jne 0x4d0347
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x38], eax
cmp byte [ebp - 0x15], 0
je 0x4d0361
mov eax, dword [ebp - 0x38]
neg eax
push eax
push 0
lea eax, [ebp - 0x134]
push eax
call sub.user32.dll_OffsetRect
mov eax, dword [ebp - 0x68]
sub eax, dword [ebp - 0x70]
mov ebx, dword [ebp - 0x14]
add eax, ebx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x64]
mov esi, dword [ebp - 0x6c]
sub eax, esi
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x44], eax
push 0
lea eax, [ebp - 0x124]
push eax
sub esi, dword [ebp - 0x38]
mov edx, dword [ebp - 0x10]
sub edx, esi
mov ecx, dword [ebp - 0x40]
mov eax, ebx
call fcn.00423e54
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x4c], 0xfffffffe
cmp dword [edi + 8], 0
je 0x4d0daa
lea ecx, [ebp - 4]
mov edx, dword [edi + 8]
mov eax, dword [ebp - 8]
call fcn.004bbba8
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 4]
call fcn.00406c8c
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 4]
call fcn.00406c8c
mov ebx, eax
mov eax, dword [ebp - 8]
imul ebx, dword [eax + 0x268]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x268]
sub edx, eax
mov dword [ebp - 0x138], edx
fild dword [ebp - 0x138]
fdiv dword [0x4d136c]
call fcn.004035b4
add ebx, eax
mov eax, dword [ebp - 8]
sub ebx, dword [eax + 0x268]
mov dword [ebp - 0x28], ebx
jmp 0x4d0da0
mov eax, dword [edi + 8]
test byte [eax + 0xa], 1
jne 0x4d043f
mov edx, dword [edi + 8]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x304]
mov eax, dword [edi + 8]
test byte [eax + 0xb], 1
je 0x4d044b
inc dword [ebp - 0x48]
mov ecx, dword [edi + 8]
mov edx, dword [edi]
mov eax, dword [ebp - 8]
call fcn.004cfacc
lea ecx, [ebp - 0x140]
mov edx, dword [ebp - 0x38]
and edx, 1
mov eax, dword [ebp - 0x70]
and eax, 1
call fcn.00423e2c
mov eax, dword [ebp - 0x140]
mov dword [edi + 0x3a], eax
mov eax, dword [ebp - 0x13c]
mov dword [edi + 0x3e], eax
mov eax, dword [edi + 8]
movzx eax, word [eax + 8]
add dword [ebp - 0x38], eax
mov eax, dword [edi + 8]
movzx eax, word [eax + 8]
add eax, dword [ebp - 0x120]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x48], 0
jg 0x4d04ae
test byte [ebp + 0xc], 0x80
jne 0x4d0c5a
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
call dword [edx + 0x20]
mov edx, dword [edi + 8]
movzx edx, word [edx + 8]
cmp eax, edx
je 0x4d0502
xor edx, edx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [edi + 8]
movzx edx, word [eax + 8]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 0
push 0
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
call fcn.0043849c
push eax
call sub.gdi32.dll_SetWindowOrgEx
mov eax, dword [edi + 8]
movzx eax, word [eax + 8]
mov dword [ebp - 0x108], eax
push 0
mov eax, dword [edi + 0x3e]
push eax
mov eax, dword [edi + 0x3a]
push eax
mov eax, dword [edi]
call fcn.0043849c
push eax
call sub.gdi32.dll_SetBrushOrgEx
mov eax, dword [edi + 8]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2c]
push eax
movzx ecx, byte [ebp - 0x18]
movzx edx, byte [ebp - 0x17]
mov eax, dword [ebp - 8]
call fcn.004ba24c
lea eax, [ebp - 0x114]
push eax
mov ecx, dword [edi + 8]
mov edx, dword [edi]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x160]
test al, al
jne 0x4d0bcc
movzx eax, byte [ebp + 0xc]
mov byte [edi + 4], al
push 1
mov eax, dword [ebp - 0x118]
push eax
lea eax, [ebp - 0x150]
push eax
mov ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x120]
mov eax, dword [ebp - 0x70]
call fcn.00423e54
lea eax, [ebp - 0x150]
push eax
mov edx, edi
movzx ecx, byte [ebp - 0x16]
mov eax, dword [ebp - 8]
call fcn.004bae54
push edi
lea esi, [ebp - 0x114]
add edi, 0x14
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
cmp byte [ebp - 0x1a], 0
je 0x4d05b0
mov edx, edi
mov eax, dword [ebp - 8]
call fcn.004bbb4c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x25c]
mov ebx, dword [eax + 8]
jmp 0x4d0b63
cmp byte [ebp - 0x1a], 0
je 0x4d0603
mov eax, dword [ebx + 0x30]
mov edx, dword [edi + 0x10]
mov eax, dword [eax + edx*4]
mov dword [edi + 0xc], eax
cmp dword [ebp - 0x4c], 0xfffffffe
jne 0x4d05df
mov eax, dword [edi + 0xc]
mov dword [ebp - 0x4c], eax
mov edx, dword [edi + 0xc]
mov eax, ebx
call fcn.004b5498
movzx eax, byte [eax + 0x30]
mov byte [edi + 0x39], al
mov edx, dword [edi + 0xc]
mov eax, ebx
call fcn.004b5498
movzx eax, byte [eax + 0x44]
mov byte [edi + 0x38], al
jmp 0x4d0621
mov dword [edi + 0xc], 0xffffffff
mov eax, dword [ebp - 8]
movzx eax, byte [eax + 0x5f]
mov byte [edi + 0x39], al
mov eax, dword [ebp - 8]
movzx eax, byte [eax + 0x3c6]
mov byte [edi + 0x38], al
movzx eax, byte [ebp + 0xc]
mov byte [edi + 4], al
mov eax, dword [ebp - 8]
test byte [eax + 0x27d], 8
je 0x4d065a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x288]
cmp eax, dword [edi + 8]
jne 0x4d065a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28c]
cmp eax, dword [edi + 0xc]
je 0x4d0656
cmp byte [ebp - 0x1a], 0
jne 0x4d065a
and byte [edi + 4], 0xf7
cmp byte [ebp - 0x1a], 0
je 0x4d068e
mov eax, dword [edi + 8]
test byte [eax + 0xb], 1
je 0x4d067e
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 0xf], 4
je 0x4d067e
test byte [edi + 4], 8
jne 0x4d068e
mov edx, dword [edi + 0xc]
mov eax, ebx
call fcn.004b5498
test byte [eax + 0x3c], 0x10
je 0x4d0692
and byte [edi + 4], 0xfd
mov eax, dword [ebx + 0x18]
call fcn.004b7790
cmp eax, dword [edi + 0xc]
sete byte [ebp - 0x1b]
cmp byte [edi + 0x39], 0
je 0x4d06af
lea eax, [edi + 0x38]
call fcn.00467720
cmp byte [ebp - 0x1a], 0
je 0x4d06c9
mov edx, dword [edi + 0xc]
mov eax, ebx
call fcn.004b5498
test byte [eax + 0x3c], 0x80
je 0x4d0af0
test byte [ebp + 0xc], 0x40
setne al
xor al, 1
or al, byte [ebp - 0x1b]
je 0x4d0af0
lea ecx, [ebp - 0x34]
mov edx, edi
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0xe4]
mov eax, dword [edi + 0x1c]
cmp eax, dword [ebp - 0x70]
jle 0x4d0ae4
mov eax, dword [edi]
push eax
mov ecx, dword [edi + 0xc]
mov edx, dword [edi + 8]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x1f0]
mov dword [edi + 0x34], eax
push edi
lea esi, [edi + 0x14]
add edi, 0x24
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
cmp byte [edi + 0x39], 0
je 0x4d072e
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x334]
sub dword [edi + 0x2c], eax
jmp 0x4d073a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x334]
add dword [edi + 0x24], eax
movzx eax, byte [ebp - 0x19]
and al, byte [ebp - 0x1b]
je 0x4d0781
mov edx, dword [edi + 8]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x2bc]
mov dword [edi + 0x6c], eax
cmp dword [edi + 0x6c], 0xffffffff
jle 0x4d0788
mov eax, dword [ebp - 0x20]
push eax
lea eax, [edi + 0x24]
push eax
lea eax, [edi + 0x6c]
push eax
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x394]
movzx ecx, byte [edi + 0x39]
mov eax, dword [ebp - 8]
call fcn.004ba150
mov byte [edi + 0x78], 0
jmp 0x4d0788
mov dword [edi + 0x6c], 0xffffffff
cmp byte [ebp - 0x18], 0
je 0x4d07d2
push 1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x388]
push eax
mov edx, edi
mov cl, 2
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x2d0]
cmp dword [edi + 0x58], 0xffffffff
jle 0x4d07d9
mov eax, dword [ebp - 0x20]
push eax
lea eax, [edi + 0x24]
push eax
lea eax, [edi + 0x58]
push eax
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x388]
movzx ecx, byte [edi + 0x39]
mov eax, dword [ebp - 8]
call fcn.004ba150
jmp 0x4d07d9
mov dword [edi + 0x58], 0xffffffff
cmp byte [ebp - 0x17], 0
je 0x4d0835
push 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x384]
push eax
mov eax, dword [edi + 8]
test byte [eax + 0xb], 1
setne al
and eax, 0x7f
movzx ecx, byte [eax + 0x5e5904]
mov edx, edi
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x2d0]
cmp dword [edi + 0x44], 0xffffffff
jle 0x4d083c
mov eax, dword [ebp - 0x20]
push eax
lea eax, [edi + 0x24]
push eax
lea eax, [edi + 0x44]
push eax
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x384]
movzx ecx, byte [edi + 0x39]
mov eax, dword [ebp - 8]
call fcn.004ba150
jmp 0x4d083c
mov dword [edi + 0x44], 0xffffffff
cmp byte [ebp - 0x1b], 0
je 0x4d084f
mov edx, edi
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 8]
call fcn.004ba124
cmp byte [ebp - 0x1a], 0
je 0x4d0864
push 0
lea ecx, [edi + 0x14]
mov edx, dword [edi]
mov eax, dword [ebp - 8]
call fcn.004bbee4
test byte [edi + 4], 0x20
je 0x4d092a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 8], 0x80
je 0x4d092a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3b4]
mov edx, 4
call fcn.004b9b78
mov edx, eax
mov eax, dword [edi]
mov eax, dword [eax + 0xc]
call fcn.00436c9c
cmp byte [ebp - 0x1b], 0
je 0x4d090b
mov eax, dword [ebp - 8]
cmp byte [eax + 0x3bb], 1
jne 0x4d090b
cmp byte [edi + 0x39], 0
jne 0x4d08e1
mov eax, dword [edi + 0x1c]
dec eax
push eax
mov eax, dword [edi + 0x20]
dec eax
push eax
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x268]
imul ecx, dword [ebp - 0x24]
add ecx, dword [edi + 0x14]
mov edx, edi
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x2a4]
jmp 0x4d0924
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x268]
imul dword [ebp - 0x24]
mov edx, dword [edi + 0x1c]
sub edx, eax
dec edx
push edx
mov eax, dword [edi + 0x20]
dec eax
push eax
mov edx, edi
mov ecx, dword [edi + 0x14]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x2a4]
jmp 0x4d0924
mov eax, dword [edi + 0x1c]
push eax
mov eax, dword [edi + 0x20]
dec eax
push eax
mov edx, edi
mov ecx, dword [edi + 0x14]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x2a4]
dec dword [edi + 0x20]
dec dword [edi + 0x30]
cmp byte [ebp - 0x1a], 0
je 0x4d09b8
test byte [edi + 4], 0x20
je 0x4d09b8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 9], 4
je 0x4d09b8
mov eax, dword [ebx + 0x18]
test byte [eax + 0x15], 1
je 0x4d095f
mov eax, ebx
call fcn.00426d04
dec eax
cmp eax, dword [edi + 0x10]
jbe 0x4d09b8
cmp byte [edi + 0x39], 0
je 0x4d097a
mov ecx, dword [edi + 0xc]
mov edx, dword [edi + 8]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x114]
test al, al
jne 0x4d09b2
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3b4]
mov edx, 4
call fcn.004b9b78
mov edx, eax
mov eax, dword [edi]
mov eax, dword [eax + 0xc]
call fcn.00436c9c
mov eax, dword [edi + 0x20]
push eax
mov eax, dword [edi + 0x1c]
dec eax
push eax
mov edx, edi
mov ecx, dword [edi + 0x18]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x2a8]
dec dword [edi + 0x1c]
dec dword [edi + 0x2c]
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov edx, edi
mov ecx, dword [ebp - 0x70]
mov eax, dword [ebp - 8]
call fcn.004bc5cc
cmp byte [ebp - 0x1b], 0
je 0x4d0a63
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 9], 2
je 0x4d09ff
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 4]
push eax
mov edx, edi
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x338]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 8], 0x20
je 0x4d0a50
mov eax, dword [edi + 8]
test byte [eax + 0xa], 0x40
je 0x4d0a50
mov eax, dword [edi + 8]
test byte [eax + 0xb], 4
je 0x4d0a2f
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 0xd], 0x80
jne 0x4d0a50
lea eax, [edi + 0x14]
push eax
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x2c]
push eax
movzx eax, byte [edi + 0x39]
push eax
mov ecx, dword [edi + 8]
mov edx, dword [edi]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x334]
cmp dword [edi + 0x6c], 0xffffffff
jle 0x4d0a63
mov edx, edi
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x32c]
cmp dword [edi + 0x58], 0xffffffff
jle 0x4d0a7a
push 0
mov edx, edi
mov cl, 1
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x330]
cmp dword [edi + 0x44], 0xffffffff
jle 0x4d0a91
push 1
mov edx, edi
xor ecx, ecx
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x330]
mov eax, dword [ebp - 8]
test byte [eax + 0x27d], 8
je 0x4d0abf
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x288]
cmp eax, dword [edi + 8]
jne 0x4d0abf
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28c]
cmp eax, dword [edi + 0xc]
je 0x4d0acc
cmp byte [ebp - 0x1a], 0
je 0x4d0acc
mov edx, edi
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x258]
mov eax, dword [edi + 0xc]
push eax
lea eax, [edi + 0x14]
push eax
mov ecx, dword [edi + 8]
mov edx, dword [edi]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x140]
cmp byte [ebp - 0x1a], 0
je 0x4d0b7b
jmp 0x4d0afd
mov edx, dword [edi + 0xc]
mov eax, ebx
call fcn.004b6920
mov dword [ebp - 0x34], eax
push 0
mov eax, dword [edi]
call fcn.0043849c
push eax
call sub.gdi32.dll_SelectClipRgn
mov eax, dword [edi + 0x14]
cmp eax, dword [ebp - 0x68]
jge 0x4d0b7b
cmp dword [ebp - 0x34], 0xfffffffe
je 0x4d0b7b
mov edx, dword [ebp - 0x34]
mov eax, ebx
call fcn.004b5498
mov eax, dword [eax + 0x1c]
mov dword [edi + 0x10], eax
mov edx, dword [ebp - 0x34]
mov eax, ebx
call fcn.004b5498
test byte [eax + 0x3c], 0x80
je 0x4d0b63
mov edx, dword [ebp - 0x34]
mov eax, ebx
call fcn.004b5498
lea ecx, [edi + 0x1c]
lea edx, [edi + 0x14]
call fcn.004b4be0
mov eax, dword [edi + 8]
movzx eax, word [eax + 8]
mov dword [edi + 0x20], eax
mov eax, dword [edi + 8]
movzx eax, word [eax + 8]
mov dword [edi + 0x30], eax
cmp dword [edi + 0xc], 0xfffffffe
jg 0x4d0b6f
cmp byte [ebp - 0x1a], 0
jne 0x4d0b7b
mov eax, dword [edi + 0x14]
cmp eax, dword [ebp - 0x68]
jl 0x4d05c1
lea eax, [ebp - 0x114]
push eax
mov ecx, dword [edi + 8]
mov edx, dword [edi]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x148]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3d4]
cmp eax, dword [edi + 8]
jne 0x4d0bcc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 8], 0x40
je 0x4d0bcc
test byte [edi + 4], 0x10
je 0x4d0bcc
lea eax, [ebp - 0x114]
push eax
mov ecx, dword [edi + 8]
mov edx, dword [edi]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x254]
cmp byte [ebp - 0x15], 0
je 0x4d0c13
lea eax, [ebp - 0x134]
push eax
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
lea eax, [ebp - 0x150]
push eax
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.00423e54
lea eax, [ebp - 0x150]
push eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [edi]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x33c]
push 0xcc0020
push 0
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
call fcn.0043849c
push eax
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov eax, dword [ebp - 0x120]
push eax
mov eax, dword [ebp - 0x124]
push eax
mov eax, dword [ebp - 0xc]
call fcn.0043849c
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [edi + 8]
movzx eax, word [eax + 8]
add dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x44]
jge 0x4d0daa
cmp byte [ebp - 0x15], 0
je 0x4d0c94
mov eax, dword [edi + 8]
movzx eax, word [eax + 8]
neg eax
push eax
push 0
lea eax, [ebp - 0x134]
push eax
call sub.user32.dll_OffsetRect
mov edx, dword [edi + 8]
mov eax, dword [ebp - 8]
call fcn.004ce95c
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x4d0d9a
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x18]
cmp eax, dword [edi + 8]
jne 0x4d0d1f
cmp dword [ebp - 0x24], 0
jle 0x4d0ce4
mov edx, dword [edi + 8]
mov eax, dword [ebp - 8]
call fcn.004bbb18
test al, al
je 0x4d0cd9
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x24]
mov byte [eax + edx - 1], 2
jmp 0x4d0ce4
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x24]
mov byte [eax + edx - 1], 0
inc dword [ebp - 0x24]
mov eax, dword [ebp - 4]
call fcn.00406c8c
cmp eax, dword [ebp - 0x24]
jg 0x4d0d11
mov eax, dword [ebp - 0x24]
add eax, 8
push eax
lea eax, [ebp - 4]
mov ecx, 1
mov edx, dword [0x4a7fb8]
call fcn.00406e48
add esp, 4
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x268]
add dword [ebp - 0x28], eax
jmp 0x4d0d6d
mov eax, dword [edi + 8]
test byte [eax + 0xb], 1
je 0x4d0d2b
dec dword [ebp - 0x48]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x18]
mov edx, dword [edi + 8]
cmp eax, dword [edx + 0x18]
je 0x4d0d6d
jmp 0x4d0d5f
dec dword [ebp - 0x24]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x268]
sub dword [ebp - 0x28], eax
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x18]
mov dword [edi + 8], eax
mov eax, dword [edi + 8]
test byte [eax + 0xb], 1
je 0x4d0d5f
dec dword [ebp - 0x48]
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 0x30]
cmp eax, dword [edx + 0x18]
jne 0x4d0d3b
cmp dword [ebp - 0x24], 0
jle 0x4d0d9a
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 8]
call fcn.004bbb18
test al, al
je 0x4d0d8f
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x24]
mov byte [eax + edx - 1], 3
jmp 0x4d0d9a
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x24]
mov byte [eax + edx - 1], 5
mov eax, dword [ebp - 0x30]
mov dword [edi + 8], eax
cmp dword [edi + 8], 0
jne 0x4d0428
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x44]
jge 0x4d12ce
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x10]
push eax
lea eax, [ebp - 0x114]
push eax
mov ecx, dword [ebp - 0x124]
xor edx, edx
mov eax, dword [ebp - 0x124]
call fcn.00423e54
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x10]
push eax
lea eax, [ebp - 0x124]
push eax
mov ecx, dword [ebp - 0x40]
sub ecx, dword [ebp - 0x14]
xor edx, edx
xor eax, eax
call fcn.00423e54
xor edx, edx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov dl, 7
mov eax, dword [ebp - 0x3c]
call fcn.0043e128
mov edx, dword [ebp - 0x11c]
sub edx, dword [ebp - 0x124]
inc edx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov edx, dword [ebp - 0x118]
sub edx, dword [ebp - 0x120]
inc edx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 0
push 0
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
call fcn.0043849c
push eax
call sub.gdi32.dll_SetWindowOrgEx
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
mov edx, eax
lea ecx, [ebp - 0x124]
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x250]
test al, al
jne 0x4d11f3
cmp byte [ebp - 0x16], 0
je 0x4d0f21
push 0
push 0
push 0
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
call fcn.0043849c
push eax
call sub.gdi32.dll_SetWindowOrgEx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 0xa], 2
je 0x4d0eef
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x124]
push eax
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x330]
call fcn.0043a50c
mov edx, eax
mov eax, dword [ebp - 8]
pop ecx
call fcn.004bdbc0
jmp 0x4d11f3
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x124]
push eax
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x330]
call fcn.0043a50c
mov edx, eax
mov eax, dword [ebp - 8]
pop ecx
call fcn.004bdd70
jmp 0x4d11f3
cmp byte [ebp - 0x1a], 0
je 0x4d11b1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x25c]
mov ebx, dword [eax + 8]
cmp dword [ebp - 0x4c], 0xfffffffe
jne 0x4d0f9e
mov eax, ebx
call fcn.004b6850
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xfffffffe
je 0x4d0f96
mov edx, dword [ebp - 0x4c]
mov eax, ebx
call fcn.004b5498
call fcn.004b4128
mov dword [ebp - 0x114], eax
mov edx, dword [ebp - 0x4c]
mov eax, ebx
call fcn.004b5498
mov eax, dword [eax + 0x18]
add eax, dword [ebp - 0x114]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x124]
jg 0x4d0fcc
mov edx, dword [ebp - 0x4c]
mov eax, ebx
call fcn.004b6920
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xfffffffe
jne 0x4d0f47
jmp 0x4d0fcc
mov edx, dword [ebp - 0x4c]
mov eax, ebx
call fcn.004b5498
call fcn.004b4128
mov dword [ebp - 0x114], eax
mov edx, dword [ebp - 0x4c]
mov eax, ebx
call fcn.004b5498
mov eax, dword [eax + 0x18]
add eax, dword [ebp - 0x114]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3b4]
mov edx, 4
call fcn.004b9b78
push eax
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
mov eax, dword [eax + 0xc]
pop edx
call fcn.00436c9c
jmp 0x4d10f3
test byte [ebp + 0xc], 0x20
je 0x4d1058
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 9], 0x40
je 0x4d1058
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 9], 4
je 0x4d1058
mov eax, dword [ebx + 0x18]
test byte [eax + 0x15], 1
je 0x4d1030
mov eax, ebx
call fcn.00426d04
dec eax
cmp eax, dword [ebp - 0x4c]
jbe 0x4d1058
mov eax, dword [ebp - 0x108]
push eax
mov eax, dword [ebp - 0x10c]
dec eax
push eax
mov edx, edi
mov ecx, dword [ebp - 0x110]
mov eax, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0x2a8]
dec dword [ebp - 0x10c]
mov edx, dword [ebp - 0x4c]
mov eax, ebx
call fcn.004b5498
test byte [eax + 0x3c], 0x10
jne 0x4d1089
mov edx, dword [ebp - 0x4c]
mov eax, ebx
call fcn.004b5498
mov eax, dword [eax + 0x4c]
push eax
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
mov eax, dword [eax + 0x14]
pop edx
call fcn.00437760
jmp 0x4d109f
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x70]
call fcn.00437760
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
lea edx, [ebp - 0x114]
call fcn.00437ea8
mov edx, dword [ebp - 0x4c]
mov eax, ebx
call fcn.004b6920
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xfffffffe
je 0x4d10f3
mov edx, dword [ebp - 0x4c]
mov eax, ebx
call fcn.004b5498
call fcn.004b4128
mov dword [ebp - 0x114], eax
mov edx, dword [ebp - 0x4c]
mov eax, ebx
call fcn.004b5498
mov eax, dword [eax + 0x18]
add eax, dword [ebp - 0x114]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x4c], 0xfffffffe
je 0x4d110e
mov eax, dword [ebp - 0x11c]
add eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x114]
jg 0x4d0ff6
mov eax, dword [ebp - 0x11c]
add eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x10c]
jle 0x4d1196
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x11c]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x10c], eax
test byte [ebp + 0xc], 0x20
je 0x4d116d
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 9], 0x40
je 0x4d116d
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x26c]
test byte [eax + 9], 4
je 0x4d116d
mov eax, dword [ebx + 0x18]
test byte [eax + 0x15], 1
jne 0x4d116d
inc dword [ebp - 0x114]
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x70]
call fcn.00437760
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
lea edx, [ebp - 0x114]
call fcn.00437ea8
push 0
push 0
push 0
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
call fcn.0043849c
push eax
call sub.gdi32.dll_SetWindowOrgEx
jmp 0x4d11f3
push 0
push 0
push 0
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
call fcn.0043849c
push eax
call sub.gdi32.dll_SetWindowOrgEx
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x70]
call fcn.00437760
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
lea edx, [ebp - 0x124]
call fcn.00437ea8
push 0
push 0
push 0
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
call fcn.0043849c
push eax
call sub.gdi32.dll_SetWindowOrgEx
cmp byte [ebp - 0x15], 0
je 0x4d128f
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 8]
add eax, 0x2b4
call fcn.004ae940
mov eax, dword [ebp - 0x10]
neg eax
mov edx, dword [ebp - 8]
add eax, dword [edx + 0x410]
push eax
mov eax, dword [ebp - 0x14]
neg eax
add eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x70]
push eax
lea eax, [ebp - 0x114]
push eax
call sub.user32.dll_OffsetRect
push 0
mov eax, dword [ebp - 0x14]
and eax, 1
push eax
push 0
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
call fcn.0043849c
push eax
call sub.gdi32.dll_SetBrushOrgEx
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x124]
push eax
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
mov edx, eax
xor ecx, ecx
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
call dword [ebx + 0x33c]
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
call fcn.0043849c
push eax
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0xc]
call fcn.0043849c
push eax
call sub.gdi32.dll_BitBlt
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d12f8
mov eax, dword [ebp - 0x3c]
call fcn.0043cfe4
call fcn.00438368
mov eax, dword [ebp - 0x3c]
call fcn.0040443c
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d1353
lea eax, [ebp - 4]
mov edx, dword [0x4a7fb8]
call fcn.00406f68
ret