Function at 0x4df500
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5651eb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x274
mov dword [esp + 0x18], ecx
call fcn.004f07d0
test al, al
jne 0x4df541
xor eax, eax
mov ecx, dword [esp + 0x274]
mov dword fs:[0], ecx
add esp, 0x280
ret 0x14
push ebx
push ebp
push esi
mov esi, dword [esp + 0x290]
push edi
xor edi, edi
xor bl, bl
cmp esi, edi
jne 0x4df55f
push edi
call dword [sym.imp.user32.dll_GetDC]
mov esi, eax
mov bl, 1
push esi
call dword [sym.imp.gdi32.dll_CreateCompatibleDC]
mov ebp, eax
test bl, bl
mov dword [esp + 0x24], ebp
je 0x4df578
push esi
push edi
call dword [sym.imp.user32.dll_ReleaseDC]
mov esi, dword [esp + 0x2a0]
lea eax, [esi + 0x1000]
push eax
call dword [sym.imp.gdi32.dll_CreateFontIndirectA]
mov ecx, dword [esi + 0x103c]
mov ebx, eax
push ecx
mov dword [esp + 0x6c], ebx
call fcn.004e7400
mov edx, dword [esi + 0x1048]
mov dword [esp + 0x70], eax
push edx
call fcn.004e7400
mov dword [esp + 0x44], eax
mov eax, dword [esi + 0x1040]
add esp, 8
cmp eax, 1
je 0x4df5d3
cmp eax, edi
je 0x4df5d3
cmp eax, 2
je 0x4df5d3
mov dword [esi + 0x1040], 1
cmp byte [esi + 0x1051], 0x32
jbe 0x4df5e3
mov byte [esi + 0x1051], 0xa
fld dword [esi + 0x104c]
fcomp qword [0xad5408]
fnstsw ax
test ah, 0x41
je 0x4df609
fld dword [esi + 0x104c]
fcomp qword [0xad5400]
fnstsw ax
test ah, 1
je 0x4df60f
mov dword [esi + 0x104c], edi
cmp ebx, edi
je 0x4df616
push ebx
jmp 0x4df61f
push 0x11
call dword [sym.imp.gdi32.dll_GetStockObject]
push eax
push ebp
call dword [sym.imp.gdi32.dll_SelectObject]
push 0xffffff
push ebp
mov dword [esp + 0x4c], eax
call dword [sym.imp.gdi32.dll_SetTextColor]
push edi
push ebp
call dword [sym.imp.gdi32.dll_SetBkColor]
push 2
push ebp
call dword [sym.imp.gdi32.dll_SetBkMode]
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], edi
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
xor edx, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, 1
test ecx, ecx
mov dword [esp + 0x2c], ecx
jle 0x4df68f
mov al, byte [edx + esi]
movsx edi, al
cmp edi, 0x80
jle 0x4df685
add edx, 2
jmp 0x4df68b
inc edx
cmp al, 0xd
jne 0x4df68b
inc ebx
cmp edx, ecx
jl 0x4df672
lea eax, [esp + 0x48]
push 0xc00
push eax
push ecx
push esi
push ebp
call dword [sym.imp.user32.dll_DrawTextA]
mov al, byte [esi + 0x1014]
mov ebp, dword [esp + 0x54]
test al, al
je 0x4df6c4
mov eax, ebp
mov ecx, dword [esp + 0x50]
cdq
sub eax, edx
sar eax, 1
cdq
idiv ebx
add ecx, eax
mov dword [esp + 0x50], ecx
mov cl, byte [esi + 0x1044]
xor eax, eax
test cl, cl
mov dword [esp + 0x30], eax
mov dword [esp + 0x18], eax
je 0x4df72e
mov eax, ebp
xor ecx, ecx
cdq
idiv ebx
mov cl, byte [esi + 0x1051]
mov edi, eax
mov eax, 0x51eb851f
imul ecx, edi
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov dword [esp + 0x18], edx
fild dword [esp + 0x18]
fmul qword [0xad53f8]
call sub.msvcrt.dll__ftol
mov dword [esp + 0x30], eax
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, dword [esp + 0x50]
add eax, edx
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x50]
lea edx, [ebp + eax*2]
lea edi, [esp + 0x74]
mov dword [esp + 0x1c], edx
lea ebx, [ecx + eax*2]
mov ecx, 0xa
xor eax, eax
mov dword [esp + 0x38], ebx
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x7c], edx
push eax
lea edx, [esp + 0x5c]
push eax
push edx
push eax
lea eax, [esp + 0x84]
push eax
push ecx
mov dword [esp + 0x8c], 0x28
mov dword [esp + 0x90], ebx
mov word [esp + 0x98], 1
mov word [esp + 0x9a], 0x18
call dword [sym.imp.gdi32.dll_CreateDIBSection]
mov edx, dword [esp + 0x24]
mov ebp, eax
push ebp
push edx
call dword [sym.imp.gdi32.dll_SelectObject]
mov dword [esp + 0x64], eax
lea eax, [ebx + ebx*2]
mov edi, dword [esp + 0x58]
lea eax, [eax*8 + 0x1f]
cdq
and edx, 0x1f
add eax, edx
mov ecx, eax
xor eax, eax
sar ecx, 5
imul ecx, dword [esp + 0x1c]
shl ecx, 2
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
mov edx, dword [esp + 0x2c]
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [esi + 0x1040]
lea ecx, [esp + 0x48]
or ah, 8
push eax
mov eax, dword [esp + 0x28]
push ecx
push edx
push esi
push eax
call dword [sym.imp.user32.dll_DrawTextA]
push 0
lea ecx, [esp + 0xa4]
call fcn.004d77e0
push 0
push ebp
lea ecx, [esp + 0xa8]
mov dword [esp + 0x294], 0
call fcn.004ddf10
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x1c]
mov ebp, dword [esp + 0x29c]
mov edi, dword [ecx + 0x10]
sub edi, eax
mov eax, dword [esi + 0x1040]
sub edi, ebp
dec edi
cmp eax, 1
mov dword [esp + 0x29c], edi
jne 0x4df862
mov eax, ebx
mov ecx, dword [esp + 0x298]
cdq
sub eax, edx
sar eax, 1
neg eax
add ecx, eax
mov dword [esp + 0x298], ecx
jmp 0x4df86e
cmp eax, 2
jne 0x4df86e
sub dword [esp + 0x298], ebx
mov eax, dword [esp + 0x298]
xor ebp, ebp
cmp eax, ebp
jge 0x4df882
mov dword [esp + 0x298], ebp
mov al, byte [esi + 0x1044]
test al, al
je 0x4dfae6
test ebx, ebx
mov dword [esp + 0x20], ebp
jle 0x4dfae6
mov dword [esp + 0x2c], ebx
mov eax, dword [esp + 0x18]
cmp ebp, eax
jg 0x4df8d9
mov ecx, ebp
sub ecx, eax
mov edx, ecx
imul edx, ecx
fild dword [esp + 0x18]
fadd qword [0xad53e0]
mov ecx, eax
imul ecx, eax
sub ecx, edx
mov dword [esp + 0x14], ecx
fild dword [esp + 0x14]
fsqrt
fsubp st(1)
call sub.msvcrt.dll__ftol
mov dword [esp + 0x14], eax
jmp 0x4df922
sub ebx, eax
dec ebx
cmp ebp, ebx
jl 0x4df916
mov edx, dword [esp + 0x2c]
sub edx, eax
fild dword [esp + 0x18]
lea ecx, [edx - 1]
mov edx, ecx
imul edx, ecx
fadd qword [0xad53e0]
mov ecx, eax
imul ecx, eax
sub ecx, edx
mov dword [esp + 0x14], ecx
fild dword [esp + 0x14]
fsqrt
fsubp st(1)
call sub.msvcrt.dll__ftol
mov dword [esp + 0x14], eax
jmp 0x4df91e
mov dword [esp + 0x14], 0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
xor ebx, ebx
test ecx, ecx
jle 0x4dfaca
cmp ebp, dword [esp + 0x18]
jg 0x4df94b
mov edx, ecx
sub edx, eax
dec edx
cmp ebx, edx
jg 0x4dfac1
cmp ebx, eax
jl 0x4dfac1
mov edx, dword [esp + 0x38]
sub edx, dword [esp + 0x18]
dec edx
cmp ebp, edx
jl 0x4df96d
mov edx, ecx
sub edx, eax
dec edx
cmp ebx, edx
jg 0x4dfac1
cmp ebx, eax
jl 0x4dfac1
fld dword [esi + 0x104c]
fcomp qword [0xad5400]
fnstsw ax
test ah, 0x41
jne 0x4dfa94
fld dword [esi + 0x104c]
fcomp qword [0xad5408]
fnstsw ax
test ah, 1
je 0x4dfa94
mov eax, dword [esp + 0x298]
add edi, ebx
add ebp, eax
push 1
push edi
lea ecx, [esp + 0x78]
push ebp
push ecx
mov ecx, dword [esp + 0x38]
call fcn.004e6d50
mov eax, dword [eax]
mov edx, dword [esp + 0x3c]
fld dword [esi + 0x104c]
fsubr qword [0xad5408]
mov dword [esp + 0x5c], eax
and eax, 0xff
mov dword [esp + 0x10], eax
and edx, 0xff
fild dword [esp + 0x10]
mov dword [esp + 0x10], edx
fmul dword [esi + 0x104c]
fild dword [esp + 0x10]
fmul st(2)
faddp st(1)
call sub.msvcrt.dll__ftol
mov ecx, dword [esp + 0x3e]
mov byte [esp + 0x34], al
mov eax, dword [esp + 0x5e]
and ecx, 0xff
and eax, 0xff
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
mov dword [esp + 0x10], ecx
fmul dword [esi + 0x104c]
fild dword [esp + 0x10]
fmul st(2)
faddp st(1)
call sub.msvcrt.dll__ftol
mov edx, dword [esp + 0x5d]
mov byte [esp + 0x36], al
mov eax, dword [esp + 0x3d]
and edx, 0xff
mov dword [esp + 0x10], edx
and eax, 0xff
fild dword [esp + 0x10]
mov dword [esp + 0x10], eax
fmul dword [esi + 0x104c]
fild dword [esp + 0x10]
fmul st(2)
faddp st(1)
call sub.msvcrt.dll__ftol
mov ecx, dword [esp + 0x2a4]
mov byte [esp + 0x35], al
mov byte [esp + 0x37], 0
mov edx, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
push edi
push ebp
fstp st(0)
call fcn.004e70a0
mov edi, dword [esp + 0x29c]
mov ebp, dword [esp + 0x20]
jmp 0x4dfab9
mov eax, dword [esp + 0x2a4]
mov ecx, dword [esp + 0x3c]
push eax
mov eax, dword [esp + 0x29c]
push ecx
lea edx, [ebx + edi]
lea ecx, [eax + ebp]
push edx
push ecx
mov ecx, dword [esp + 0x38]
call fcn.004e70a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
inc ebx
cmp ebx, ecx
jl 0x4df930
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x38]
inc ebp
dec ecx
cmp ebp, eax
mov dword [esp + 0x20], ebp
mov dword [esp + 0x2c], ecx
mov ebx, eax
jl 0x4df8a0
test ebx, ebx
mov dword [esp + 0x20], 0
jle 0x4dfb61
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x298]
lea ebp, [edx + eax]
mov eax, dword [esp + 0x1c]
xor esi, esi
test eax, eax
jle 0x4dfb53
mov ecx, dword [esp + 0x20]
push 1
push esi
lea edx, [esp + 0x78]
push ecx
push edx
lea ecx, [esp + 0xb0]
call fcn.004e6d50
cmp byte [eax], 0
je 0x4dfb4a
mov eax, dword [esp + 0x2a4]
mov ecx, dword [esp + 0x6c]
push eax
push ecx
mov ecx, dword [esp + 0x38]
mov edx, esi
sub edx, ecx
mov ecx, dword [esp + 0x30]
add edx, edi
push edx
push ebp
call fcn.004e70a0
mov eax, dword [esp + 0x1c]
inc esi
cmp esi, eax
jl 0x4dfb0a
mov eax, dword [esp + 0x20]
inc eax
inc ebp
cmp eax, ebx
mov dword [esp + 0x20], eax
jl 0x4dfb00
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4dfb77
mov edi, dword [esp + 0x24]
push eax
push edi
call dword [sym.imp.gdi32.dll_SelectObject]
jmp 0x4dfb7b
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x68]
mov esi, dword [sym.imp.gdi32.dll_DeleteObject]
push eax
call esi
mov ecx, dword [esp + 0x64]
push ecx
push edi
call dword [sym.imp.gdi32.dll_SelectObject]
push eax
call esi
push edi
call dword [sym.imp.gdi32.dll_DeleteDC]
lea ecx, [esp + 0xa0]
mov dword [esp + 0x28c], 0xffffffff
mov dword [esp + 0xa0], 0xad52b8
call fcn.004d7800
mov ecx, dword [esp + 0x284]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x280
ret 0x14