Function at 0x4e67b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x5c
push ebx
push ebp
push esi
mov esi, dword [esp + 0x70]
push edi
push 0x11
mov ebx, eax
call dword [sym.imp.GDI32.dll_GetStockObject]
lea ecx, [ebx + 0x120]
test ecx, ecx
je 0x4e67dc
cmp dword [ecx + 4], 0
je 0x4e67dc
test ecx, ecx
je 0x4e67f5
mov eax, dword [ecx + 4]
test eax, eax
je 0x4e67f5
push eax
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x28], eax
jmp 0x4e67fd
mov dword [esp + 0x28], 0
mov eax, dword [esp + 0x70]
mov ecx, dword [eax + 8]
lea edx, [esp + 0x30]
push edx
push 1
push 0x5d5fc0
push ecx
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
mov eax, dword [esp + 0x34]
mov dword [ebx + 0x12c], eax
lea eax, [eax + eax*2]
cdq
sub eax, edx
sar eax, 1
lea edx, [ebx + 0x58]
mov dword [ebx + 0x128], eax
call fcn.0045c210
mov edi, eax
test edi, edi
mov dword [esp + 0x14], edi
jne 0x4e6845
xor ecx, ecx
jmp 0x4e6852
jl 0x4e6876
cmp edi, dword [ebx + 0x7c]
jge 0x4e6876
mov edx, dword [ebx + 0x78]
mov ecx, dword [edx + edi*4]
mov eax, dword [ebx + 0x7c]
sub eax, 1
cmp edi, eax
mov dword [esp + 0x1c], ecx
jge 0x4e687b
lea eax, [edi + 1]
test eax, eax
jl 0x4e6876
cmp eax, dword [ebx + 0x7c]
jge 0x4e6876
mov edx, dword [ebx + 0x78]
mov eax, dword [edx + eax*4]
sub eax, ecx
jmp 0x4e688d
call fcn.00555520
test edi, edi
jl 0x4e6876
cmp edi, dword [ebx + 0x7c]
jge 0x4e6876
mov edx, dword [ebx + 0x78]
mov eax, dword [ebx + 0x70]
sub eax, dword [edx + edi*4]
sub esi, ecx
test esi, esi
mov dword [esp + 0x2c], esi
fild dword [esp + 0x2c]
jge 0x4e68a1
fadd qword [0x606848]
test eax, eax
mov dword [esp + 0x2c], eax
fild dword [esp + 0x2c]
jge 0x4e68b3
fadd qword [0x606848]
mov eax, dword [ebx + 0x128]
fdivp st(1)
test eax, eax
fild dword [ebx + 0x128]
jge 0x4e68cb
fadd qword [0x606848]
fmulp st(1)
call fcn.0057e5f0
cmp dword [ebx + 0x17c], edi
mov esi, 1
mov ecx, eax
mov dword [esp + 0x24], esi
jne 0x4e68f5
cmp dword [ebx + 0x180], ecx
jne 0x4e68f5
xor esi, esi
mov dword [esp + 0x24], esi
jmp 0x4e6901
mov dword [ebx + 0x17c], edi
mov dword [ebx + 0x180], ecx
mov eax, dword [ebx + 0x150]
sub eax, dword [ebx + 0x148]
lea ebp, [ebx + 0x144]
cdq
sub eax, edx
sar eax, 1
sub eax, ecx
cmp dword [esp + 0x78], 0
mov dword [esp + 0x18], ebp
mov dword [esp + 0x2c], eax
jne 0x4e693a
test esi, esi
jne 0x4e693a
lea ecx, [esp + 0x48]
push ecx
call dword [sym.imp.USER32.dll_SetRectEmpty]
jmp 0x4e6967
mov edx, dword [0x63c5b4]
mov ecx, dword [esp + 0x70]
push edx
push ebp
call fcn.0055ba58
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov edx, dword [ebp + 8]
mov dword [esp + 0x48], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x70]
push 1
call fcn.0055aeb6
xor esi, esi
cmp dword [ebx + 0x90], esi
jle 0x4e6ac1
mov ecx, dword [ebx + 0x128]
mov eax, esi
sub eax, edi
imul eax, ecx
add eax, dword [esp + 0x2c]
add ecx, eax
js 0x4e6c9d
cmp eax, dword [ebx + 0x150]
jg 0x4e6ac1
test esi, esi
mov edi, dword [ebp + 4]
mov edx, dword [ebp]
mov dword [esp + 0x3c], edi
mov edi, dword [ebp + 8]
mov ebp, dword [ebp + 0xc]
mov dword [esp + 0x44], ebp
mov dword [esp + 0x38], edx
mov dword [esp + 0x40], edi
mov dword [esp + 0x3c], eax
mov dword [esp + 0x44], ecx
mov dword [esp + 0x58], edx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], edi
mov dword [esp + 0x64], ecx
jl 0x4e6876
cmp esi, dword [ebx + 0x90]
jge 0x4e6876
mov ecx, dword [ebx + 0x8c]
mov edi, dword [esp + 0x70]
mov edx, dword [edi]
mov edx, dword [edx + 0x68]
push 0x420
lea eax, [esp + 0x5c]
push eax
mov eax, dword [ecx + esi*4]
mov ecx, dword [eax - 0xc]
mov eax, dword [ebx + 0x8c]
push ecx
mov ecx, dword [eax + esi*4]
push ecx
mov ecx, edi
call edx
mov edx, dword [esp + 0x60]
mov ebp, dword [esp + 0x40]
mov eax, dword [esp + 0x58]
sub ebp, dword [esp + 0x38]
mov ecx, edx
sub ecx, eax
cmp ecx, ebp
jge 0x4e6a4c
sub eax, edx
sub eax, dword [esp + 0x38]
add eax, dword [esp + 0x40]
cdq
sub eax, edx
sar eax, 1
add ecx, eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x40], ecx
cmp dword [0x63c4d8], 0
je 0x4e6b40
cmp dword [esp + 0x24], 0
jne 0x4e6b22
cmp dword [esp + 0x78], 0
jne 0x4e6b22
cmp esi, dword [esp + 0x14]
jne 0x4e6c95
mov ecx, dword [0x63c5b4]
push ecx
lea edx, [esp + 0x3c]
push edx
mov ecx, edi
call fcn.0055ba58
mov ecx, dword [esp + 0x74]
push 1
push esi
push ebx
lea edx, [esp + 0x44]
call fcn.004e6df0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov ebp, dword [esp + 0x18]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], eax
cmp dword [ebx + 0x1a4], 0
je 0x4e6ade
cmp dword [esp + 0x78], 0
je 0x4e6ade
mov ecx, dword [esp + 0x70]
push ecx
push ebx
mov ebx, ebp
call fcn.004e7530
mov eax, dword [esp + 0x28]
test eax, eax
je 0x4e6af5
mov edx, dword [esp + 0x70]
push eax
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x4e6b18
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov dword [eax], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x54]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5c
ret 0x10
mov ecx, dword [esp + 0x74]
xor eax, eax
cmp esi, dword [esp + 0x14]
lea edx, [esp + 0x38]
sete al
push eax
push esi
push ebx
call fcn.004e6df0
jmp 0x4e6c95
test esi, esi
mov eax, dword [esp + 0x14]
jne 0x4e6b60
test eax, eax
jne 0x4e6b60
cmp dword [ebx + 0x7c], esi
jle 0x4e6876
mov ecx, dword [ebx + 0x78]
mov ecx, dword [ecx]
mov dword [esp + 0x1c], ecx
jmp 0x4e6b64
mov ecx, dword [esp + 0x1c]
lea ebp, [eax - 1]
cmp esi, ebp
jne 0x4e6bbb
mov eax, dword [ebx + 0x178]
sub eax, ecx
cmp eax, 0x7d0
jae 0x4e6c1d
test eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
jge 0x4e6b90
fadd qword [0x606848]
fdiv qword [0x606910]
mov ecx, dword [0x63c5b0]
sub esp, 8
lea edx, [esp + 0x28]
fstp qword [esp]
push edx
mov edx, dword [0x63c5ac]
call fcn.004e61a0
mov ecx, dword [esp + 0x2c]
add esp, 0xc
jmp 0x4e6c23
cmp esi, eax
jne 0x4e6c1d
mov eax, dword [ebx + 0x178]
cmp eax, ecx
jl 0x4e6c1d
sub eax, ecx
cmp eax, 0x7d0
jae 0x4e6c15
test eax, eax
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
jge 0x4e6be4
fadd qword [0x606848]
fdiv qword [0x606910]
mov ecx, dword [0x63c5ac]
mov edx, dword [0x63c5b0]
sub esp, 8
lea eax, [esp + 0x28]
fstp qword [esp]
push eax
call fcn.004e61a0
mov edx, dword [edi]
mov eax, dword [esp + 0x2c]
mov edx, dword [edx + 0x30]
add esp, 0xc
push eax
jmp 0x4e6c29
mov ecx, dword [0x63c5b0]
jmp 0x4e6c23
mov ecx, dword [0x63c5ac]
mov eax, dword [edi]
mov edx, dword [eax + 0x30]
push ecx
mov ecx, edi
call edx
cmp dword [esp + 0x24], 0
jne 0x4e6c45
cmp dword [esp + 0x78], 0
jne 0x4e6c45
cmp esi, ebp
je 0x4e6c45
cmp esi, dword [esp + 0x14]
jne 0x4e6c95
cmp esi, dword [ebx + 0x90]
jge 0x4e6876
mov edx, dword [ebx + 0x8c]
mov eax, dword [edi]
mov eax, dword [eax + 0x68]
push 0x21
lea ecx, [esp + 0x3c]
push ecx
mov ecx, dword [edx + esi*4]
mov edx, dword [ecx - 0xc]
mov ecx, dword [ebx + 0x8c]
push edx
mov edx, dword [ecx + esi*4]
push edx
mov ecx, edi
call eax
cmp esi, ebp
je 0x4e6c82
cmp esi, dword [esp + 0x14]
jne 0x4e6c95
lea ecx, [esp + 0x48]
push ecx
lea edx, [esp + 0x3c]
push edx
mov eax, ecx
push eax
call dword [sym.imp.USER32.dll_UnionRect]
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
add esi, 1
cmp esi, dword [ebx + 0x90]
jl 0x4e6980
jmp 0x4e6ac1