Function at 0x435b80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x477b69
mov eax, dword fs:[0]
push eax
sub esp, 0x114
push ebx
push ebp
push esi
push edi
mov eax, dword [0x496028]
xor eax, esp
push eax
lea eax, [esp + 0x128]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x138]
lea eax, [esp + 0x50]
xor edi, edi
push eax
push edi
push edi
mov dword [esp + 0x5c], edi
call sub.gdiplus.dll_GdipCreateStringFormat
mov dword [esp + 0x54], eax
mov dword [esp + 0x130], edi
fldz
fst dword [esp + 0xb0]
lea ecx, [esp + 0x30]
fst dword [esp + 0xac]
push ecx
fst dword [esp + 0xac]
mov esi, vtable.Gdiplus::SolidBrush.0
fst dword [esp + 0xa8]
push 0xff000000
fst dword [esp + 0xcc]
mov dword [esp + 0xe4], esi
fst dword [esp + 0xc8]
mov dword [esp + 0x38], edi
fst dword [esp + 0xc4]
fstp dword [esp + 0xc0]
call sub.gdiplus.dll_GdipCreateSolidFill
mov edx, dword [esp + 0x30]
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe0], edx
fld dword [0x488674]
lea eax, [esp + 0x64]
push eax
push edi
push ecx
fstp dword [esp]
push 0xff000000
mov dword [esp + 0x74], edi
call sub.gdiplus.dll_GdipCreatePen1
mov dword [esp + 0x68], eax
mov eax, dword [ebp + 0x9c]
lea ecx, [esp + 0x48]
push ecx
push eax
mov dword [esp + 0x104], esi
mov dword [esp + 0x50], edi
call sub.gdiplus.dll_GdipCreateSolidFill
mov edx, dword [esp + 0x48]
mov dword [esp + 0x104], eax
mov dword [esp + 0x100], edx
mov eax, dword [ebp + 0xa0]
lea ecx, [esp + 0x5c]
push ecx
push eax
mov dword [esp + 0xd8], esi
mov dword [esp + 0x64], edi
call sub.gdiplus.dll_GdipCreateSolidFill
mov edx, dword [esp + 0x5c]
mov dword [esp + 0xd8], eax
mov dword [esp + 0xd4], edx
mov edx, dword [ebp + 0x100]
mov eax, dword [ebp + 0x108]
mov esi, dword [ebp + 0x104]
mov ecx, dword [ebp + 0x10c]
sub eax, edx
sub ecx, esi
dec eax
dec ecx
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x34]
mov dword [esp + 0x40], ecx
mov edx, 1
push eax
lea ecx, [esp + 0x90]
push ecx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x40], edx
call dword [sym.imp.USER32.dll_CopyRect]
mov ecx, dword [ebp + 0x100]
fld dword [0x4886a0]
mov eax, dword [ebp + 0x108]
mov edx, dword [ebp + 0x104]
sub eax, ecx
push ecx
mov dword [esp + 0x88], eax
fstp dword [esp]
mov eax, dword [ebp + 0xa0]
mov dword [esp + 0x84], edx
mov edx, dword [ebp + 0x10c]
push eax
lea esi, [esp + 0x20]
mov dword [esp + 0x90], edx
call fcn.00435800
fld1
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x9c]
push ecx
push edi
push ecx
fstp dword [esp]
push edx
mov dword [esp + 0xac], edi
call sub.gdiplus.dll_GdipCreatePen1
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x50]
push 0x2000
push eax
call sub.gdiplus.dll_GdipSetStringFormatFlags
cmp eax, edi
je 0x435d87
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x98]
sub ecx, dword [esp + 0x90]
mov eax, 0x51eb851f
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 0xb
mov dword [esp + 0x2c], eax
jl 0x435db7
mov dword [esp + 0x2c], 0xb
mov ecx, dword [ebp + 0x88]
fild dword [esp + 0x2c]
mov ebx, dword [ebp + 0x8c]
push ecx
lea esi, [esp + 0x78]
fstp dword [esp]
call fcn.004347e0
mov byte [esp + 0x130], 6
mov esi, dword [esp + 0x90]
mov ecx, dword [esp + 0x98]
mov ebx, dword [ebp + 0xf4]
lea eax, [ecx + esi]
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [ebp + 0x84]
add eax, dword [ebp + 0x78]
sar ecx, 1
imul eax, ebx
cdq
sub eax, edx
sar eax, 1
mov edx, ecx
sub edx, eax
cmp edx, esi
jle 0x435e1b
sub ecx, eax
mov dword [esp + 0x1c], ecx
jmp 0x435e1f
mov dword [esp + 0x1c], esi
mov eax, dword [esp + 0x94]
lea ecx, [eax + eax*2]
add ecx, ecx
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
mov ebx, dword [esp + 0x13c]
shr eax, 0x1f
add eax, edx
add eax, dword [ebp + 0x74]
push edi
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 0xa4]
fild dword [esp + 0x1c]
push edi
lea edx, [esp + 0xac]
push edx
fstp dword [esp + 0x38]
push edi
fld dword [esp + 0x3c]
lea edx, [esp + 0x44]
fstp dword [esp + 0x44]
push edx
fldz
mov edx, dword [esp + 0x88]
fst dword [esp + 0x4c]
push edx
fst dword [esp + 0x54]
fstp dword [esp + 0x58]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov eax, dword [ebx]
push eax
call sub.gdiplus.dll_GdipMeasureString
cmp eax, edi
je 0x435e99
mov dword [ebx + 4], eax
fld dword [esp + 0xac]
mov eax, dword [ebp + 0x80]
fld dword [esp + 0xa4]
mov esi, dword [esp + 0x84]
fld st(0)
mov ecx, esi
faddp st(2)
sub ecx, eax
fxch st(1)
mov dword [esp + 0x24], eax
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
mov dword [esp + 0x18], ecx
fild dword [esp + 0x18]
fcompp
fnstsw ax
test ah, 5
jp 0x435ef3
fild dword [esp + 0x84]
fild dword [esp + 0x24]
faddp st(2)
fsubrp st(1)
fstp dword [esp + 0xac]
jmp 0x435ef5
fstp st(0)
mov ecx, dword [esp + 0x94]
fld dword [esp + 0x2c]
fadd dword [esp + 0xac]
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x74]
fiadd dword [esp + 0x18]
push edi
push edi
lea ecx, [esp + 0xc0]
push ecx
mov ecx, dword [ebx]
push edi
lea edx, [esp + 0x44]
fstp dword [esp + 0x54]
push edx
fild dword [ebp + 0x78]
push eax
push 7
push 0x484830
fstp dword [esp + 0x38]
push ecx
fld dword [esp + 0x68]
fstp dword [esp + 0x58]
fldz
fst dword [esp + 0x5c]
fstp dword [esp + 0x60]
fld dword [esp + 0x3c]
fstp dword [esp + 0x64]
call sub.gdiplus.dll_GdipMeasureString
cmp eax, edi
je 0x435f72
mov dword [ebx + 4], eax
fld dword [esp + 0xc0]
mov eax, dword [ebp + 0x80]
fst dword [esp + 0x4c]
sub esi, eax
fld dword [esp + 0x44]
mov dword [esp + 0x18], esi
fld st(0)
mov dword [esp + 0x24], eax
faddp st(2)
fild dword [esp + 0x18]
fcomp st(2)
fnstsw ax
fstp st(1)
test ah, 5
jp 0x435fb9
fild dword [esp + 0x84]
fild dword [esp + 0x24]
faddp st(2)
fsubrp st(1)
fstp dword [esp + 0x4c]
jmp 0x435fbb
fstp st(0)
lea edx, [ebp + 0x94]
push edx
lea eax, [esp + 0x38]
lea edi, [ebp + 0xd8]
push eax
call fcn.00438c70
mov ecx, dword [eax + 4]
mov edi, dword [eax]
mov eax, dword [ebp + 0x90]
mov dword [esp + 0x70], ecx
mov ecx, dword [ebp + 0x98]
cmp eax, ecx
mov dword [esp + 0x6c], edi
mov dword [esp + 0x24], eax
jl 0x435ff7
mov dword [esp + 0x24], ecx
fld dword [esp + 0x44]
lea edx, [esp + 0xd0]
fstp dword [esp + 0x34]
push edx
fild dword [esp + 0x20]
lea eax, [esp + 0x38]
mov esi, ebx
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [esp + 0x3c]
fld dword [esp + 0x50]
fstp dword [esp + 0x40]
fild dword [esp + 0x28]
fstp dword [esp + 0x44]
call fcn.004346c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [ebp + 0x78]
add ecx, eax
cmp ecx, dword [esp + 0x98]
mov dword [esp + 0x24], eax
jg 0x436421
jmp 0x436054
mov edi, dword [esp + 0x6c]
mov esi, dword [ebp + 0xf0]
mov eax, dword [ebp + 0xd8]
test edi, edi
je 0x436068
cmp edi, eax
je 0x43606e
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
cmp dword [esp + 0x70], esi
je 0x436421
test edi, edi
jne 0x4362cb
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov edx, dword [esp + 0x70]
cmp edx, dword [edi + 0x18]
jne 0x436095
call dword [sym.imp.MSVCR90.dll__invalid_parameter_noinfo]
mov eax, dword [esp + 0x70]
mov edi, dword [eax + 0x10]
test edi, edi
je 0x43640d
mov eax, dword [edi + 0x20]
mov ecx, dword [esp + 0x30]
push eax
push ecx
call sub.gdiplus.dll_GdipSetSolidFillColor
test eax, eax
je 0x4360bd
mov dword [esp + 0xe4], eax
fld dword [0x4886a0]
mov edx, dword [edi + 0x20]
push ecx
fstp dword [esp]
push edx
lea esi, [esp + 0x100]
call fcn.00435800
mov eax, dword [eax]
push eax
mov eax, dword [esp + 0x68]
push eax
call sub.gdiplus.dll_GdipSetPenColor
test eax, eax
je 0x4360ec
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x94]
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, ecx
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [ebx]
fild dword [esp + 0x1c]
sub esp, 0x10
fstp dword [esp + 0x30]
fild dword [ebp + 0x74]
fstp dword [esp + 0x68]
fild dword [ebp + 0x78]
fstp dword [esp + 0x70]
fild dword [esp + 0x34]
fstp dword [esp + 0x2c]
fld dword [esp + 0x2c]
fstp dword [esp + 0x11c]
fld dword [esp + 0x70]
fstp dword [esp + 0xc]
fld dword [esp + 0x68]
fstp dword [esp + 8]
fld dword [esp + 0x11c]
fstp dword [esp + 4]
fld dword [esp + 0x30]
fstp dword [esp]
push ecx
push edx
call sub.gdiplus.dll_GdipFillRectangle
test eax, eax
je 0x43616c
mov dword [ebx + 4], eax
mov ecx, dword [esp + 0x94]
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, ecx
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x20], eax
mov edx, dword [ebx]
sub esp, 0x10
fild dword [esp + 0x30]
fstp dword [esp + 0x70]
fild dword [ebp + 0x74]
fstp dword [esp + 0x68]
fild dword [ebp + 0x78]
fstp dword [esp + 0x30]
fld dword [esp + 0x2c]
fstp dword [esp + 0x12c]
fld dword [esp + 0x30]
fstp dword [esp + 0xc]
fld dword [esp + 0x68]
fstp dword [esp + 8]
fld dword [esp + 0x12c]
fstp dword [esp + 4]
fld dword [esp + 0x70]
fstp dword [esp]
push ecx
push edx
call sub.gdiplus.dll_GdipDrawRectangle
test eax, eax
je 0x4361e4
mov dword [ebx + 4], eax
fild dword [ebp + 0x78]
mov edx, dword [esp + 0x48]
mov eax, dword [edi + 0x24]
push edx
mov edx, dword [esp + 0x54]
fstp dword [esp + 0x24]
fld dword [esp + 0x30]
push edx
fstp dword [esp + 0xf0]
lea edx, [esp + 0xf0]
fld dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x80]
fstp dword [esp + 0xf8]
fld dword [esp + 0xb8]
push edx
fstp dword [esp + 0x100]
fld dword [esp + 0x30]
fstp dword [esp + 0x104]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov eax, dword [ebx]
push eax
call sub.gdiplus.dll_GdipDrawString
test eax, eax
je 0x43624b
mov dword [ebx + 4], eax
mov eax, dword [ebp + 0x84]
fild dword [ebp + 0x78]
cdq
sub eax, edx
fadd dword [esp + 0x1c]
sar eax, 1
mov dword [esp + 0x20], eax
fiadd dword [esp + 0x20]
fstp dword [esp + 0x20]
fld dword [esp + 0x44]
fst dword [esp + 0x34]
fld dword [esp + 0x20]
fst dword [esp + 0x38]
fld dword [esp + 0x4c]
fld st(0)
faddp st(3)
fxch st(2)
fstp dword [esp + 0xc8]
fst dword [esp + 0xcc]
fsub dword [esp + 0x18]
fild dword [ebp + 0x98]
fcompp
fnstsw ax
test ah, 0x41
jne 0x4362d2
fldz
fcompp
fnstsw ax
test ah, 5
jp 0x4362d4
lea ecx, [esp + 0x9c]
push ecx
lea eax, [esp + 0xcc]
lea ecx, [esp + 0x38]
mov esi, ebx
call fcn.004345d0
jmp 0x4362d4
mov edi, dword [edi]
jmp 0x436086
fstp st(0)
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_class]
mov byte [esp + 0x130], 7
fld dword [edi + 8]
fmul qword [0x488628]
sub esp, 8
lea edx, [esp + 0x30]
fstp qword [esp]
push str._.2f
push edx
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::Format]
add esp, 0x10
push 0x48484c
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc90u.dll_ATL::CSimpleStringT_wchar_t_1_::Append]
fld dword [edi + 8]
fmul qword [0x488628]
fcomp qword [0x488698]
fnstsw ax
test ah, 5
jp 0x43636d
lea eax, [esp + 0xb4]
push eax
lea ecx, [esp + 0x2c]
mov ebx, 0x47efbc
call fcn.004115f0
add esp, 4
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x134], 8
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator]
lea ecx, [esp + 0xb4]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov ebx, dword [esp + 0x13c]
fldz
fld dword [esp + 0x4c]
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 0x41
jne 0x4363e3
fld dword [esp + 0x44]
mov edx, dword [esp + 0x48]
fadd qword [0x4885f8]
mov eax, dword [esp + 0x28]
push edx
mov edx, dword [esp + 0x54]
fstp dword [esp + 0x80]
push edx
fld dword [esp + 0x24]
lea edx, [esp + 0x84]
fstp dword [esp + 0x88]
push edx
mov edx, dword [esp + 0x80]
fstp dword [esp + 0x90]
push edx
fld dword [esp + 0xd4]
fstp dword [esp + 0x98]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov eax, dword [ebx]
push eax
call sub.gdiplus.dll_GdipDrawString
test eax, eax
je 0x4363e5
mov dword [ebx + 4], eax
jmp 0x4363e5
fstp st(0)
mov ecx, dword [ebp + 0x84]
add ecx, dword [ebp + 0x78]
lea esi, [esp + 0x6c]
add dword [esp + 0x24], ecx
call fcn.00403780
lea ecx, [esp + 0x28]
mov byte [esp + 0x130], 6
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov edx, dword [ebp + 0x78]
add edx, dword [esp + 0x24]
cmp edx, dword [esp + 0x98]
jle 0x436050
mov eax, dword [esp + 0x74]
push eax
call sub.gdiplus.dll_GdipDeleteFont
mov ecx, dword [esp + 0x9c]
push ecx
call sub.gdiplus.dll_GdipDeletePen
mov edx, dword [esp + 0x5c]
push edx
call sub.gdiplus.dll_GdipDeleteBrush
mov eax, dword [esp + 0x48]
push eax
call sub.gdiplus.dll_GdipDeleteBrush
mov ecx, dword [esp + 0x64]
push ecx
call sub.gdiplus.dll_GdipDeletePen
mov edx, dword [esp + 0x30]
push edx
call sub.gdiplus.dll_GdipDeleteBrush
mov eax, dword [esp + 0x50]
push eax
call sub.gdiplus.dll_GdipDeleteStringFormat
mov ecx, dword [esp + 0x128]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x120
ret 8