Function at 0x4830e0
Capabilities:
Access peb ldr_data
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov ebx, 0x4bd3c0
sub esp, 0x468
mov dword [esp], 0
call dword [sym.imp.user32.dll_GetDC]
mov dword [ebp - 0x438], 0
mov dword [ebp - 0x440], eax
sub esp, 4
jmp 0x483378
movzx edx, word [ebx - 0x14]
movzx eax, word [ebx - 0x20]
mov esi, 1
mov dword [ebp - 0x434], 0x28
mov dword [ebp - 0x430], 4
mov dword [ebp - 0x424], edx
mov edx, dword [ebx - 8]
mov dword [ebp - 0x42c], 4
mov word [ebp - 0x426], ax
mov word [ebp - 0x428], si
mov dword [ebp - 0x414], edx
jne 0x48317e
lea eax, [eax*4 + 0x1f]
shr eax, 1
and eax, 0x3fff0
mov dword [ebp - 0x420], eax
mov eax, dword [ebx - 4]
mov dword [esp + 4], ebx
shl eax, 2
mov dword [esp + 8], eax
lea eax, [ebp - 0x40c]
mov dword [esp], eax
call sub.msvcrt.dll_memcpy
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x440]
mov esi, dword fs:[0x18]
mov dword [esp], eax
call dword [sym.imp.gdi32.dll_CreateEnhMetaFileW]
sub esp, 0x10
mov edi, eax
call fcn.00492bc0
mov dword [eax], 0x4b8dcc
mov dword [eax + 4], 0x19d2
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.CreateEnhMetaFileW_failed__error__ld_n
mov dword [esp + 8], eax
xor eax, eax
test edi, edi
setne al
mov dword [esp], eax
call fcn.00472ba0
lea eax, [ebp - 0x434]
mov dword [esp + 0x30], 0xcc0020
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], eax
mov dword [esp + 0x24], 0x4bd360
mov eax, dword [ebx - 0x18]
mov dword [esp + 0x20], eax
mov eax, dword [ebx - 0x1c]
mov dword [esp], edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 4
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0
mov dword [esp + 4], 0
call dword [sym.imp.gdi32.dll_StretchDIBits]
sub esp, 0x34
mov dword [ebp - 0x43c], eax
call fcn.00492bc0
mov dword [eax], 0x4b8dcc
mov dword [eax + 4], 0x19d7
mov eax, dword [esi + 0x34]
mov dword [esp + 0x10], eax
mov ecx, dword [ebp - 0x43c]
xor eax, eax
mov dword [esp + 8], 4
cmp ecx, 4
mov dword [esp + 0xc], ecx
sete al
mov dword [esp + 4], str.expected_StretchDIBits_to_return__d__got__d__lasterr__lu__n
mov dword [esp], eax
call fcn.00472ba0
mov dword [esp], edi
call dword [sym.imp.gdi32.dll_CloseEnhMetaFile]
sub esp, 4
mov edi, eax
call fcn.00492bc0
mov dword [eax], 0x4b8dcc
mov dword [eax + 4], 0x19da
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.CloseEnhMetaFile_failed__error__ld_n
mov dword [esp + 8], eax
xor eax, eax
test edi, edi
setne al
mov dword [esp], eax
call fcn.00472ba0
mov ecx, dword [ebx - 0xc]
mov edx, dword [ebx - 0x10]
mov eax, edi
mov dword [esp + 4], 0
mov dword [esp], str.test_emf_StretchDIBits
call fcn.0047e2e0
test eax, eax
je 0x48333b
mov edx, dword [0x4975a8]
test edx, edx
je 0x48333b
mov eax, edi
mov edx, str.test_emf_StretchDIBits
call fcn.004769e0
mov eax, dword [0x4975a8]
test eax, eax
je 0x48333b
mov edx, str.test_emf_StretchDIBits
mov eax, edi
call fcn.00476910
mov dword [esp], edi
call dword [sym.imp.gdi32.dll_DeleteEnhMetaFile]
sub esp, 4
call fcn.00492bc0
mov edx, dword [eax + 0xbec]
test edx, edx
je 0x48335f
sub edx, 1
mov dword [eax + 0xbec], edx
add dword [ebp - 0x438], 1
mov eax, dword [ebp - 0x438]
add ebx, 0x2c
cmp eax, 0x22
je 0x483410
mov eax, dword [ebp - 0x438]
mov dword [esp], str.Test__d
lea edi, [ebp - 0x434]
mov dword [esp + 4], eax
call fcn.00472200
xor eax, eax
mov ecx, 0x10a
cmp byte [ebx - 0x12], 1
rep stosd dword es:[edi], eax
jbe 0x483120
movzx eax, word [ebx - 0x20]
mov edx, dword [ebx - 4]
mov ecx, 1
mov dword [ebp - 0x434], 0xc
mov dword [ebp - 0x430], 0x40004
mov word [ebp - 0x42c], cx
mov word [ebp - 0x42a], ax
test edx, edx
je 0x48319a
lea edi, [edx + edx*2]
lea eax, [ebp - 0x434]
mov edx, ebx
add edi, eax
movzx ecx, word [edx]
add eax, 3
add edx, 4
mov word [eax + 9], cx
movzx ecx, byte [edx - 2]
mov byte [eax + 0xb], cl
cmp edi, eax
jne 0x4833ea
jmp 0x48319a
mov eax, dword [ebp - 0x440]
mov dword [esp], 0
mov dword [esp + 4], eax
call dword [sym.imp.user32.dll_ReleaseDC]
sub esp, 8
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret