Function at 0x1000c2a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x1001b402
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
push ebx
push ebp
push esi
push edi
mov eax, dword [0x10021024]
xor eax, esp
push eax
lea eax, [esp + 0xc4]
mov dword fs:[0], eax
mov ebp, dword [esp + 0xd4]
mov eax, dword [ebp + 0x944]
lea edi, [ebp + 0x944]
xor ebx, ebx
push eax
mov dword [esp + 0x9c], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x44], edi
call sub.gdiplus.dll_GdipResetPath
cmp eax, ebx
je 0x1000c30f
mov dword [edi + 4], eax
mov ecx, dword [edi]
push 1
push ecx
call sub.gdiplus.dll_GdipSetPathFillMode
cmp eax, ebx
je 0x1000c320
mov dword [edi + 4], eax
lea edx, [esp + 0x84]
push edx
push ebx
lea eax, [ebp + 0x804]
push eax
mov dword [esp + 0x90], ebx
call sub.gdiplus.dll_GdipCreateFontFamilyFromName
mov dword [esp + 0x88], eax
mov dword [esp + 0xcc], ebx
fild dword [ebp + 0x908]
mov eax, dword [ebp + 0x90c]
push ebx
fstp dword [esp + 0x1c]
lea edx, [esp + 0x50]
fldz
push edx
fst dword [esp + 0x54]
lea ecx, [ebp + 4]
fst dword [esp + 0x58]
push ecx
fst dword [esp + 0x60]
fstp dword [esp + 0x64]
fld dword [esp + 0x24]
fstp dword [esp]
push eax
mov eax, dword [esp + 0x94]
push eax
push 0xffffffffffffffff
push ecx
mov ecx, dword [edi]
push ecx
call sub.gdiplus.dll_GdipAddPathString
cmp eax, ebx
je 0x1000c398
mov dword [edi + 4], eax
mov eax, dword [edi]
push ebx
push ebx
lea edx, [esp + 0x94]
push edx
push eax
call sub.gdiplus.dll_GdipGetPathWorldBoundsI
cmp eax, ebx
je 0x1000c3b1
mov dword [edi + 4], eax
lea ecx, [esp + 0x18]
push ecx
mov dword [esp + 0x1c], ebx
call sub.gdiplus.dll_GdipCreateMatrix
mov esi, dword [esp + 0x18]
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], esi
mov edx, dword [esp + 0x8c]
mov eax, dword [esp + 0x90]
neg edx
mov dword [esp + 0x18], edx
fild dword [esp + 0x18]
neg eax
mov dword [esp + 0x18], eax
fstp dword [esp + 0x1c]
push ebx
fild dword [esp + 0x1c]
sub esp, 8
fstp dword [esp + 0x24]
fld dword [esp + 0x24]
fstp dword [esp + 4]
fld dword [esp + 0x28]
fstp dword [esp]
push esi
call sub.gdiplus.dll_GdipTranslateMatrix
cmp eax, ebx
je 0x1000c416
mov dword [esp + 0x48], eax
mov ecx, dword [edi]
push esi
push ecx
call sub.gdiplus.dll_GdipTransformPath
cmp eax, ebx
je 0x1000c426
mov dword [edi + 4], eax
fldz
mov edx, dword [esp + 0x94]
mov eax, dword [esp + 0x98]
sub esp, 0x18
fst dword [esp + 0x14]
add edx, 8
fst dword [esp + 0x10]
add eax, 8
fld1
mov dword [esp + 0x40], edx
fst dword [esp + 0xc]
mov dword [esp + 0x4c], eax
fxch st(1)
fst dword [esp + 8]
fstp dword [esp + 4]
fstp dword [esp]
push esi
call sub.gdiplus.dll_GdipSetMatrixElements
cmp eax, ebx
je 0x1000c470
mov dword [esp + 0x48], eax
fld dword [0x1001e008]
push ebx
sub esp, 8
fst dword [esp + 4]
fstp dword [esp]
push esi
call sub.gdiplus.dll_GdipTranslateMatrix
cmp eax, ebx
je 0x1000c48f
mov dword [esp + 0x48], eax
mov ecx, dword [edi]
push esi
push ecx
call sub.gdiplus.dll_GdipTransformPath
cmp eax, ebx
je 0x1000c49f
mov dword [edi + 4], eax
lea edx, [esp + 0x2c]
push edx
push 1
mov dword [esp + 0x34], ebx
call sub.gdiplus.dll_GdipCreatePath
mov dword [esp + 0x30], eax
mov byte [esp + 0xcc], 2
cmp dword [ebp + 0x910], ebx
je 0x1000c7a2
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1c], ebx
call sub.gdiplus.dll_GdipCreateMatrix
mov eax, dword [ebp + 0x918]
cmp eax, ebx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x5c], edx
mov dword [esp + 0x1c], eax
jge 0x1000c515
mov ecx, dword [ebp + 0x91c]
cmp ecx, ebx
mov dword [esp + 0x14], ecx
jl 0x1000c511
fild dword [esp + 0x14]
push ebx
sub esp, 8
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fstp dword [esp + 4]
fldz
jmp 0x1000c56f
cmp eax, ebx
jl 0x1000c539
cmp dword [ebp + 0x91c], ebx
jge 0x1000c535
fild dword [esp + 0x1c]
push ebx
sub esp, 8
fstp dword [esp + 0x28]
fldz
fstp dword [esp + 4]
fld dword [esp + 0x28]
jmp 0x1000c56f
cmp eax, ebx
jge 0x1000c54d
cmp dword [ebp + 0x91c], ebx
jge 0x1000c54d
fldz
push ebx
sub esp, 8
fst dword [esp + 4]
jmp 0x1000c56f
fild dword [esp + 0x1c]
push ebx
sub esp, 8
fstp dword [esp + 0x20]
fild dword [ebp + 0x91c]
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fstp dword [esp + 4]
fld dword [esp + 0x20]
fstp dword [esp]
push edx
call sub.gdiplus.dll_GdipTranslateMatrix
fild dword [ebp + 0x908]
mov eax, dword [ebp + 0x90c]
mov edx, dword [esp + 0x84]
fstp dword [esp + 0x1c]
push ebx
fldz
lea ecx, [esp + 0x50]
fst dword [esp + 0x50]
push ecx
fst dword [esp + 0x58]
push ecx
fst dword [esp + 0x60]
fstp dword [esp + 0x64]
fld dword [esp + 0x28]
fstp dword [esp]
push eax
push edx
push 0xffffffffffffffff
lea eax, [ebp + 4]
push eax
mov eax, dword [esp + 0x48]
push eax
call sub.gdiplus.dll_GdipAddPathString
cmp eax, ebx
je 0x1000c5c9
mov dword [esp + 0x30], eax
mov edx, dword [esp + 0x2c]
push ebx
push ebx
lea ecx, [esp + 0x94]
push ecx
push edx
call sub.gdiplus.dll_GdipGetPathWorldBoundsI
cmp eax, ebx
je 0x1000c5e5
mov dword [esp + 0x30], eax
fldz
sub esp, 0x18
fst dword [esp + 0x14]
fst dword [esp + 0x10]
fld1
fst dword [esp + 0xc]
fxch st(1)
fst dword [esp + 8]
fstp dword [esp + 4]
fstp dword [esp]
push esi
call sub.gdiplus.dll_GdipSetMatrixElements
cmp eax, ebx
je 0x1000c613
mov dword [esp + 0x48], eax
mov eax, 4
sub eax, dword [esp + 0x8c]
mov ecx, 4
sub ecx, dword [esp + 0x90]
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
mov dword [esp + 0x1c], ecx
push ebx
fstp dword [esp + 0x18]
sub esp, 8
fild dword [esp + 0x28]
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fstp dword [esp + 4]
fld dword [esp + 0x20]
fstp dword [esp]
push esi
call sub.gdiplus.dll_GdipTranslateMatrix
cmp eax, ebx
je 0x1000c664
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0x2c]
push esi
push edx
call sub.gdiplus.dll_GdipTransformPath
cmp eax, ebx
je 0x1000c677
mov dword [esp + 0x30], eax
mov eax, dword [ebp + 0x918]
fldz
cdq
sub esp, 0x18
xor eax, edx
fst dword [esp + 0x14]
sub eax, edx
add dword [esp + 0x40], eax
fst dword [esp + 0x10]
fld1
mov eax, dword [ebp + 0x91c]
fst dword [esp + 0xc]
cdq
fxch st(1)
xor eax, edx
fst dword [esp + 8]
sub eax, edx
add dword [esp + 0x4c], eax
fstp dword [esp + 4]
fstp dword [esp]
push esi
call sub.gdiplus.dll_GdipSetMatrixElements
cmp eax, ebx
je 0x1000c6c3
mov dword [esp + 0x48], eax
mov eax, dword [ebp + 0x918]
cmp eax, ebx
jge 0x1000c6f7
cmp dword [ebp + 0x91c], ebx
jl 0x1000c6f3
neg eax
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
push ebx
sub esp, 8
fstp dword [esp + 0x28]
fldz
fstp dword [esp + 4]
fld dword [esp + 0x28]
jmp 0x1000c760
cmp eax, ebx
jl 0x1000c723
mov ecx, dword [ebp + 0x91c]
cmp ecx, ebx
jge 0x1000c71f
neg ecx
mov dword [esp + 0x1c], ecx
fild dword [esp + 0x1c]
push ebx
sub esp, 8
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fstp dword [esp + 4]
fldz
jmp 0x1000c760
cmp eax, ebx
jge 0x1000c756
mov ecx, dword [ebp + 0x91c]
cmp ecx, ebx
jge 0x1000c756
neg ecx
mov dword [esp + 0x1c], ecx
fild dword [esp + 0x1c]
sub esp, 8
neg eax
fstp dword [esp + 4]
mov dword [esp + 0x24], eax
fild dword [esp + 0x24]
lea esi, [esp + 0x4c]
fstp dword [esp]
call fcn.10001030
jmp 0x1000c771
fldz
push ebx
sub esp, 8
fst dword [esp + 4]
fstp dword [esp]
push esi
call sub.gdiplus.dll_GdipTranslateMatrix
cmp eax, ebx
je 0x1000c771
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x44]
mov ecx, dword [edi]
push eax
push ecx
call sub.gdiplus.dll_GdipTransformPath
cmp eax, ebx
je 0x1000c785
mov dword [edi + 4], eax
mov esi, dword [esp + 0x5c]
mov edx, dword [esp + 0x2c]
push esi
push edx
call sub.gdiplus.dll_GdipTransformPath
cmp eax, ebx
je 0x1000c79c
mov dword [esp + 0x30], eax
push esi
call sub.gdiplus.dll_GdipDeleteMatrix
cmp dword [0x10023208], ebx
je 0x1000cb8d
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
mov byte [esp + 0xcc], 3
cmp dword [ebp + 0x910], ebx
je 0x1000c96a
lea eax, [esp + 0x2c]
push eax
lea esi, [esp + 0x50]
call fcn.10001110
mov edx, dword [esp + 0x2c]
lea ecx, [esp + 0x24]
push ecx
push edx
mov dword [esp + 0x2c], ebx
call sub.gdiplus.dll_GdipGetPointCount
cmp eax, ebx
je 0x1000c7f7
mov dword [esp + 0x30], eax
mov esi, dword [esp + 0x24]
xor ecx, ecx
mov eax, esi
mov edx, 8
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1000f546
add esp, 4
cmp eax, ebx
je 0x1000c83b
lea edx, [esi - 1]
cmp edx, ebx
mov ecx, eax
jl 0x1000c835
fldz
fst dword [ecx + 4]
add ecx, 8
sub edx, 1
fst dword [ecx - 8]
jns 0x1000c825
fstp st(0)
mov dword [esp + 0x14], eax
jmp 0x1000c83f
mov dword [esp + 0x14], ebx
mov esi, dword [esp + 0x24]
push esi
call fcn.1000f546
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x2c]
add esp, 4
xor edi, edi
cmp esi, ebx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], ebx
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ecx
jle 0x1000c8eb
mov esi, dword [0x10023208]
mov eax, dword [esp + 0x50]
fld dword [eax + edi*8 + 4]
sub esp, 0x10
fstp qword [esp + 8]
lea edx, [esp + 0x6c]
fld dword [eax + edi*8]
lea eax, [esp + 0xac]
fstp qword [esp]
push edx
push eax
lea eax, [esi + 8]
push eax
lea eax, [esi + 0x10]
push eax
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0xa0]
push edx
lea ecx, [esp + 0xd8]
call fcn.1000f190
fld qword [esp + 0xc4]
mov eax, dword [esp + 0x3c]
fstp dword [eax + edi*8]
inc edi
fld qword [esp + 0x84]
add esp, 0x28
cmp edi, dword [esp + 0x24]
fstp dword [eax + edi*8 - 4]
jl 0x1000c885
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x54]
mov esi, dword [esp + 0x18]
push edi
push eax
push esi
call fcn.10011640
add esp, 0xc
lea ecx, [esp + 0x68]
push ecx
push ebx
push edi
mov edi, dword [esp + 0x20]
push esi
push edi
mov dword [esp + 0x7c], ebx
call sub.gdiplus.dll_GdipCreatePath2
mov dword [esp + 0x6c], eax
mov byte [esp + 0xcc], 4
mov edx, dword [esp + 0x2c]
push edx
call sub.gdiplus.dll_GdipResetPath
cmp eax, ebx
je 0x1000c936
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x2c]
push ebx
push eax
push ecx
call sub.gdiplus.dll_GdipAddPathPath
cmp eax, ebx
je 0x1000c94e
mov dword [esp + 0x30], eax
push edi
call fcn.1000f4cf
add esp, 4
push esi
call fcn.1000f4cf
mov edx, dword [esp + 0x6c]
add esp, 4
push edx
call sub.gdiplus.dll_GdipDeletePath
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov edi, dword [esp + 0x40]
push edi
lea esi, [esp + 0x74]
mov byte [esp + 0xd0], 5
call fcn.10001110
mov ecx, dword [edi]
lea eax, [esp + 0x24]
push eax
push ecx
mov dword [esp + 0x2c], ebx
call sub.gdiplus.dll_GdipGetPointCount
cmp eax, ebx
je 0x1000c9a4
mov dword [edi + 4], eax
mov esi, dword [esp + 0x24]
xor ecx, ecx
mov eax, esi
mov edx, 8
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1000f546
add esp, 4
cmp eax, ebx
je 0x1000c9e8
lea edx, [esi - 1]
cmp edx, ebx
mov ecx, eax
jl 0x1000c9e2
fldz
fst dword [ecx + 4]
add ecx, 8
sub edx, 1
fst dword [ecx - 8]
jns 0x1000c9d2
fstp st(0)
mov dword [esp + 0x14], eax
jmp 0x1000c9ec
mov dword [esp + 0x14], ebx
push esi
call fcn.1000f546
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x2c]
add esp, 4
xor edi, edi
cmp esi, ebx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], ebx
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ecx
jle 0x1000ca96
mov esi, dword [0x10023208]
mov edi, edi
mov eax, dword [esp + 0x74]
fld dword [eax + edi*8 + 4]
sub esp, 0x10
fstp qword [esp + 8]
lea edx, [esp + 0x6c]
fld dword [eax + edi*8]
lea eax, [esp + 0xac]
fstp qword [esp]
push edx
push eax
lea eax, [esi + 8]
push eax
lea eax, [esi + 0x10]
push eax
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0xa0]
push edx
lea ecx, [esp + 0xd8]
call fcn.1000f190
fld qword [esp + 0xc4]
mov eax, dword [esp + 0x3c]
fstp dword [eax + edi*8]
inc edi
fld qword [esp + 0x84]
add esp, 0x28
cmp edi, dword [esp + 0x24]
fstp dword [eax + edi*8 - 4]
jl 0x1000ca30
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x78]
mov esi, dword [esp + 0x18]
push edi
push eax
push esi
call fcn.10011640
mov edx, dword [esp + 0x20]
add esp, 0xc
lea ecx, [esp + 0x38]
push ecx
push ebx
push edi
push esi
push edx
mov dword [esp + 0x4c], ebx
call sub.gdiplus.dll_GdipCreatePath2
mov dword [esp + 0x3c], eax
mov edi, dword [esp + 0x40]
mov byte [esp + 0xcc], 6
mov eax, dword [edi]
push eax
call sub.gdiplus.dll_GdipResetPath
cmp eax, ebx
je 0x1000cae2
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x38]
mov edx, dword [edi]
push ebx
push ecx
push edx
call sub.gdiplus.dll_GdipAddPathPath
cmp eax, ebx
je 0x1000caf7
mov dword [edi + 4], eax
mov eax, dword [esp + 0x14]
push eax
call fcn.1000f4cf
add esp, 4
push esi
call fcn.1000f4cf
mov eax, dword [0x10023208]
add esp, 4
lea edi, [esp + 0x1c]
lea ecx, [esp + 0x18]
call fcn.1000f290
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
push eax
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x38], edx
call sub.gdiplus.dll_GdipDeletePath
mov byte [esp + 0xcc], 3
mov eax, dword [esp + 0x74]
cmp eax, ebx
je 0x1000cb52
push eax
call fcn.1000f4cf
add esp, 4
mov eax, dword [esp + 0x78]
cmp eax, ebx
je 0x1000cb63
push eax
call fcn.1000f4cf
add esp, 4
mov byte [esp + 0xcc], 2
mov eax, dword [esp + 0x50]
cmp eax, ebx
je 0x1000cb7c
push eax
call fcn.1000f4cf
add esp, 4
mov eax, dword [esp + 0x54]
cmp eax, ebx
je 0x1000cb8d
push eax
call fcn.1000f4cf
add esp, 4
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x28]
mov eax, dword [ebp]
push 0x20
push ecx
push edx
push eax
call sub.WS_ImageProc.dll_Ordinal_8
mov ecx, dword [ebp]
push 0xffffff
push ecx
call sub.WS_ImageProc.dll_Ordinal_23
mov edx, dword [ebp]
push edx
call sub.WS_ImageProc.dll_Ordinal_10
mov esi, eax
mov eax, dword [ebp]
push eax
call sub.WS_ImageProc.dll_Ordinal_9
lea ecx, [esp + 0x18]
push ecx
push esi
push eax
mov dword [esp + 0xbc], vtable.Gdiplus::Bitmap.0
mov dword [esp + 0x24], ebx
call sub.gdiplus.dll_GdipCreateBitmapFromGdiDib
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0xb4], eax
lea edx, [esp + 0x1c]
push edx
push eax
mov dword [esp + 0x24], ebx
call sub.gdiplus.dll_GdipGetImageGraphicsContext
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x60], eax
mov dword [esp + 0x5c], edi
fnstcw word [esp + 0x24]
mov eax, 0x64
sub eax, dword [ebp + 0x920]
mov dword [esp + 0x4c], vtable.Gdiplus::SolidBrush.0
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
movzx eax, word [esp + 0x24]
or eax, 0xc00
fdiv qword [0x1001e000]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x914]
mov edx, eax
mov esi, eax
movzx eax, al
and esi, 0xff00
add eax, esi
and edx, 0xff0000
add eax, edx
fmul qword [0x1001dff8]
fldcw word [esp + 0x14]
fistp qword [esp + 0x9c]
mov ecx, dword [esp + 0x9c]
shl ecx, 0x18
add eax, ecx
lea ecx, [esp + 0x24]
fldcw word [esp + 0x24]
push ecx
push eax
mov dword [esp + 0x2c], ebx
call sub.gdiplus.dll_GdipCreateSolidFill
mov edx, dword [esp + 0x24]
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], edx
mov byte [esp + 0xcc], 9
cmp dword [ebp + 0x910], ebx
je 0x1000cce2
push 2
push edi
call sub.gdiplus.dll_GdipSetSmoothingMode
cmp eax, ebx
je 0x1000ccb8
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push eax
push ecx
push edi
call sub.gdiplus.dll_GdipFillPath
cmp eax, ebx
je 0x1000ccd0
mov dword [esp + 0x60], eax
mov edx, dword [ebp]
mov eax, dword [ebp + 0x924]
push edx
call fcn.1000bce0
add esp, 4
cmp dword [ebp + 0x928], ebx
jle 0x1000ce70
call sub.WS_ImageProc.dll_Ordinal_1
mov ecx, dword [esp + 0x28]
mov esi, eax
mov eax, dword [esp + 0x34]
push 0x20
push eax
push ecx
push esi
call sub.WS_ImageProc.dll_Ordinal_8
push 0xffffff
push esi
call sub.WS_ImageProc.dll_Ordinal_23
push esi
call sub.WS_ImageProc.dll_Ordinal_10
push esi
mov edi, eax
call sub.WS_ImageProc.dll_Ordinal_9
lea edx, [esp + 0x28]
push edx
push edi
push eax
mov dword [esp + 0xa8], vtable.Gdiplus::Bitmap.0
mov dword [esp + 0x34], ebx
call sub.gdiplus.dll_GdipCreateBitmapFromGdiDib
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xa0], eax
lea ecx, [esp + 0x14]
push ecx
push eax
mov dword [esp + 0x1c], ebx
call sub.gdiplus.dll_GdipGetImageGraphicsContext
mov edi, dword [esp + 0x14]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], edi
mov eax, dword [ebp + 0x92c]
mov ecx, eax
mov edx, eax
movzx eax, al
and edx, 0xff00
add edx, eax
and ecx, 0xff0000
lea ecx, [edx + ecx - 0x1000000]
lea edx, [esp + 0x14]
push edx
push ecx
mov dword [esp + 0x78], vtable.Gdiplus::SolidBrush.0
mov dword [esp + 0x1c], ebx
call sub.gdiplus.dll_GdipCreateSolidFill
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x74], eax
fild dword [ebp + 0x928]
lea ecx, [esp + 0x68]
push ecx
push ebx
fstp dword [esp + 0x3c]
push ecx
fld dword [esp + 0x40]
mov dword [esp + 0x74], ebx
fstp dword [esp]
push eax
call sub.gdiplus.dll_GdipCreatePen2
mov dword [esp + 0x6c], eax
push 2
push edi
mov byte [esp + 0xd4], 0xd
call sub.gdiplus.dll_GdipSetSmoothingMode
cmp eax, ebx
je 0x1000cdeb
mov dword [esp + 0x3c], eax
mov edx, dword [esp + 0x40]
mov eax, dword [edx]
mov ecx, dword [esp + 0x14]
push eax
push ecx
push edi
call sub.gdiplus.dll_GdipFillPath
cmp eax, ebx
je 0x1000ce05
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x40]
cmp eax, ebx
je 0x1000ce11
mov eax, dword [eax]
jmp 0x1000ce13
xor eax, eax
mov edx, dword [esp + 0x68]
push eax
push edx
push edi
call sub.gdiplus.dll_GdipDrawPath
cmp eax, ebx
je 0x1000ce27
mov dword [esp + 0x3c], eax
push esi
mov eax, 6
call fcn.1000bce0
mov eax, dword [ebp]
add esp, 4
push esi
push eax
call fcn.1000c120
add esp, 8
push esi
call sub.WS_ImageProc.dll_Ordinal_2
mov ecx, dword [esp + 0x68]
push ecx
call sub.gdiplus.dll_GdipDeletePen
mov edx, dword [esp + 0x14]
push edx
call sub.gdiplus.dll_GdipDeleteBrush
push edi
call sub.gdiplus.dll_GdipDeleteGraphics
mov eax, dword [esp + 0x28]
push eax
call sub.gdiplus.dll_GdipDisposeImage
mov edi, dword [esp + 0x1c]
push 2
push edi
call sub.gdiplus.dll_GdipSetSmoothingMode
mov eax, dword [ebp + 0x94c]
cmp eax, ebx
je 0x1000cf47
push eax
call sub.WS_ImageProc.dll_Ordinal_10
mov ecx, dword [ebp + 0x94c]
push ecx
mov esi, eax
call sub.WS_ImageProc.dll_Ordinal_9
lea edx, [esp + 0x1c]
push edx
push esi
push eax
mov dword [esp + 0x28], ebx
call sub.gdiplus.dll_GdipCreateBitmapFromGdiDib
mov ecx, dword [ebp + 0x94c]
mov eax, dword [esp + 0x1c]
push ecx
mov dword [esp + 0x54], eax
call sub.WS_ImageProc.dll_Ordinal_14
mov edx, dword [ebp + 0x94c]
mov esi, eax
push edx
dec esi
call sub.WS_ImageProc.dll_Ordinal_13
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x14]
push ecx
push esi
dec eax
push eax
push ebx
push ebx
push 3
push edx
mov dword [esp + 0x30], ebx
call sub.gdiplus.dll_GdipCreateTexture2I
mov esi, dword [esp + 0x40]
mov ecx, dword [esi]
mov eax, dword [esp + 0x14]
push ecx
push eax
push edi
mov ebp, eax
call sub.gdiplus.dll_GdipFillPath
fld1
lea edx, [esp + 0x38]
push edx
push ebx
push ecx
fstp dword [esp]
push 0xff000000
mov dword [esp + 0x48], ebx
call sub.gdiplus.dll_GdipCreatePen1
mov dword [esp + 0x3c], eax
cmp esi, ebx
je 0x1000cf1f
mov ebx, dword [esi]
mov eax, dword [esp + 0x38]
push ebx
push eax
push edi
call sub.gdiplus.dll_GdipDrawPath
mov ecx, dword [esp + 0x38]
push ecx
call sub.gdiplus.dll_GdipDeletePen
push ebp
call sub.gdiplus.dll_GdipDeleteBrush
mov edx, dword [esp + 0x50]
push edx
call sub.gdiplus.dll_GdipDisposeImage
jmp 0x1000cf7f
mov eax, dword [ebp + 0x904]
mov esi, dword [esp + 0x24]
movzx ecx, al
mov edx, eax
and edx, 0xff0000
add ecx, edx
and eax, 0xff00
lea eax, [ecx + eax - 0x1000000]
push eax
push esi
call sub.gdiplus.dll_GdipSetSolidFillColor
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
push ecx
push esi
push edi
call sub.gdiplus.dll_GdipFillPath
mov edx, dword [esp + 0x24]
push edx
call sub.gdiplus.dll_GdipDeleteBrush
push edi
call sub.gdiplus.dll_GdipDeleteGraphics
mov eax, dword [esp + 0x18]
push eax
call sub.gdiplus.dll_GdipDisposeImage
mov ecx, dword [esp + 0x2c]
push ecx
call sub.gdiplus.dll_GdipDeletePath
mov edx, dword [esp + 0x44]
push edx
call sub.gdiplus.dll_GdipDeleteMatrix
mov eax, dword [esp + 0x84]
push eax
call sub.gdiplus.dll_GdipDeleteFontFamily
mov ecx, dword [esp + 0xc4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbc
ret 4