Function at 0x433e85
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x457e29
mov eax, dword fs:[0]
push eax
sub esp, 0x168
mov eax, dword [0x47c084]
xor eax, esp
mov dword [esp + 0x160], eax
push ebx
push esi
push edi
mov eax, dword [0x47c084]
xor eax, esp
push eax
lea eax, [esp + 0x178]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov ebx, ecx
mov edi, edx
lea esi, [ebx + 0x30]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x28], eax
cmp dword [esi], edi
je 0x433ee0
call fcn.00404a2f
mov dword [esp + 0x10], 8
add dword [esp + 0x10], 0x1a
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
lea eax, [ecx + eax - 0x61]
add eax, dword [esp + 0x10]
push 0xffffffffffffffe1
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
imul eax, ecx
pop ecx
sub ecx, eax
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
imul eax, edx
mov edx, dword [esp + 0x10]
imul eax, edx
sub ecx, eax
mov eax, dword [esp + 0x10]
sub ecx, eax
mov eax, dword [esp + 0x10]
sub ecx, eax
mov eax, dword [esp + 0x10]
sub ecx, eax
add ecx, dword [esp + 0x10]
mov edi, dword [esp + 0x28]
add ecx, dword [esp + 0x10]
push 0x5b
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
imul eax, ecx
pop ecx
sub ecx, eax
add ecx, dword [esp + 0x10]
lea esi, [ebx + 0x34]
add ecx, dword [esp + 0x10]
add ecx, dword [esp + 0x10]
mov dword [esp + 0x10], ecx
add dword [esp + 0x10], 0x3d
cmp dword [esi], edi
je 0x433f78
call fcn.00404a2f
push 0x45c7d4
push dword [0x47d854]
mov esi, edi
lea ebx, [esp + 0x6c]
call fcn.0044c23d
xor ebx, ebx
push SysReAllocString
mov dword [esp + 0x18c], ebx
push dword [0x47d944]
push dword [esp + 0x38]
call fcn.0044c0c6
add esp, 0x14
push 0x80088
push dword [0x47d948]
mov dword [esp + 0x34], eax
push dword [esp + 0x30]
call fcn.0044c0c6
add esp, 0xc
cmp dword [esp + 0x78], 8
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x64]
jae 0x433fdc
lea eax, [esp + 0x64]
cmp eax, ebx
je 0x433ff3
cmp dword [esp + 0x78], 8
jb 0x433fed
mov eax, dword [esp + 0x64]
jmp 0x433ff8
lea eax, [esp + 0x64]
jmp 0x433ff8
mov eax, dword [0x47d8a0]
push eax
lea eax, [esp + 0xb0]
call fcn.00405b7c
push 0xfde9
lea ecx, [esp + 0xb0]
lea edx, [esp + 0x104]
mov byte [esp + 0x184], 1
call fcn.0044c516
pop ecx
mov byte [esp + 0x180], 2
cmp dword [eax + 0x14], 0x10
jb 0x434036
mov eax, dword [eax]
push eax
push dword [0x47d614]
push dword [0x47d610]
push ebx
call fcn.0043ec4f
add esp, 0x10
push 1
xor edi, edi
lea esi, [esp + 0x104]
call fcn.00405711
push 1
lea esi, [esp + 0xb0]
mov byte [esp + 0x184], bl
call fcn.00405a55
cmp dword [esp + 0x74], ebx
jne 0x43407e
push 1
jmp 0x434925
cmp dword [esp + 0x78], 8
mov eax, dword [esp + 0x64]
jae 0x43408d
lea eax, [esp + 0x64]
push 0x2010
push ebx
push ebx
push ebx
push eax
push ebx
call fcn.0043efa9
mov esi, dword [esp + 0x14]
mov edi, eax
mov eax, dword [esi + 0x38]
cmp eax, ebx
je 0x4340b4
cmp eax, edi
je 0x4340b4
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, edi
mov dword [esi + 0x38], edi
cmp ecx, ebx
jne 0x43415e
cmp dword [esp + 0x78], 8
mov eax, dword [esp + 0x64]
jae 0x4340d0
lea eax, [esp + 0x64]
cmp eax, ebx
je 0x4340e7
cmp dword [esp + 0x78], 8
jb 0x4340e1
mov eax, dword [esp + 0x64]
jmp 0x4340ec
lea eax, [esp + 0x64]
jmp 0x4340ec
mov eax, dword [0x47d8a0]
push eax
lea eax, [esp + 0xcc]
call fcn.00405b7c
push 0xfde9
lea ecx, [esp + 0xcc]
lea edx, [esp + 0x13c]
mov byte [esp + 0x184], 3
call fcn.0044c516
pop ecx
mov byte [esp + 0x180], 4
cmp dword [eax + 0x14], 0x10
jb 0x43412a
mov eax, dword [eax]
push eax
call fcn.004408a1
push eax
push dword [0x47d618]
xor ebx, ebx
inc ebx
push ebx
call fcn.0043ec4f
add esp, 0x10
push ebx
xor edi, edi
lea esi, [esp + 0x13c]
call fcn.00405711
lea esi, [esp + 0xc8]
jmp 0x43491c
xor eax, eax
mov dword [esp + 0x4c], ebx
lea edi, [esp + 0x50]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov edi, dword [sym.imp.GDI32.dll_GetObjectW]
lea eax, [esp + 0x4c]
push eax
push 0x18
push ecx
call edi
test eax, eax
je 0x43487e
mov eax, dword [esp + 0x50]
mov dword [esi + 0x44], eax
mov eax, dword [esp + 0x54]
mov dword [esi + 0x48], eax
cmp dword [esi + 0x44], ebx
je 0x43487e
cmp eax, ebx
je 0x43487e
push ebx
push dword [0x47d93c]
push dword [esp + 0x30]
call fcn.0044c125
add esp, 0xc
cmp eax, ebx
jg 0x4341be
mov eax, dword [esi + 0x48]
mov ecx, dword [esi + 0x44]
cmp eax, ecx
jle 0x4341c7
mov eax, ecx
mov ecx, dword [esi + 0x48]
mov dword [esi + 0x3c], eax
mov dword [esi + 0x40], ecx
mov dword [esp + 0x14], 0x5a
mov dword [esp + 0x10], 0x40
mov dword [esp + 0x20], 0x51
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
shl eax, 4
sub ecx, eax
mov eax, dword [esp + 0x20]
sub ecx, eax
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x10]
push 0x53
pop ecx
sub ecx, eax
add ecx, dword [esp + 0x20]
push 0x14
add ecx, dword [esp + 0x18]
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x24]
imul eax, eax, 7
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
imul eax, ecx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x24]
pop ecx
sub ecx, eax
add ecx, dword [esp + 0x10]
push ebx
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x14]
add eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x14]
imul eax, eax, 0x59
imul ecx, edx
add eax, ecx
add eax, dword [esp + 0x24]
mov dword [esi + 0x4c], ebx
push dword [0x47d94c]
mov dword [esp + 0x18], eax
push dword [esp + 0x30]
call fcn.0044c0c6
mov ecx, eax
add esp, 0xc
cmp ecx, ebx
jne 0x43427e
push 2
pop ecx
xor edx, edx
fld qword [0x476908]
mov eax, 0x3e8
div ecx
push 0x18
push ebx
mov dword [esi + 0x50], eax
fstp qword [esp + 0x1c]
fld qword [esp + 0x1c]
lea eax, [esp + 0x3c]
fsub qword [0x476900]
push eax
fstp qword [esp + 0x20]
fld qword [esp + 0x20]
fsub qword [0x4768f8]
fadd qword [esp + 0x20]
fadd qword [esp + 0x20]
fstp qword [esp + 0x20]
fld qword [esp + 0x20]
fld qword [esp + 0x20]
fdiv qword [0x4768f0]
fsubp st(1)
fld qword [esp + 0x20]
fdiv qword [0x4768e8]
fsubp st(1)
fsub qword [esp + 0x20]
fadd qword [esp + 0x20]
fstp qword [esp + 0x20]
fld qword [esp + 0x20]
fadd qword [0x4768e0]
fadd qword [esp + 0x20]
fadd qword [esp + 0x20]
fsub qword [esp + 0x20]
fld qword [esp + 0x20]
fmul qword [0x4768d8]
fsubp st(1)
fadd qword [0x4768d0]
fsub qword [esp + 0x20]
fsub qword [0x4768c8]
fstp qword [esp + 0x20]
fld qword [esp + 0x20]
fadd qword [esp + 0x20]
fstp qword [esp + 0x20]
fld qword [esp + 0x20]
fsub qword [0x4768c0]
fsub qword [esp + 0x20]
fld qword [esp + 0x20]
fmul qword [0x4768b8]
fmul qword [0x4768b0]
fdiv qword [0x4768a8]
faddp st(1)
fadd qword [esp + 0x20]
fadd qword [esp + 0x20]
fld qword [esp + 0x20]
fmul qword [0x4768a0]
fmul qword [esp + 0x20]
faddp st(1)
fstp qword [esp + 0x20]
fld qword [esp + 0x20]
fmul qword [0x476898]
fld qword [esp + 0x20]
fsub qword [0x476890]
faddp st(1)
fadd qword [esp + 0x20]
fld qword [esp + 0x20]
fmul qword [esp + 0x20]
faddp st(1)
fadd qword [0x476888]
fstp qword [esp + 0x20]
call fcn.00413ad0
add esp, 0xc
lea eax, [esp + 0x34]
push eax
push 0x18
push dword [esi + 0x38]
call edi
cmp word [esp + 0x44], 1
jne 0x4347d5
cmp word [esp + 0x46], 0x20
jne 0x4347d5
mov edi, dword [esp + 0x48]
mov dword [esp + 0x14], 0x5a
mov dword [esp + 0x10], 0x40
mov dword [esp + 0x20], 0x51
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
shl eax, 4
sub ecx, eax
mov eax, dword [esp + 0x20]
sub ecx, eax
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x10]
push 0x53
pop ecx
sub ecx, eax
add ecx, dword [esp + 0x20]
push 0x14
add ecx, dword [esp + 0x18]
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x24]
imul eax, eax, 7
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
imul eax, ecx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x24]
pop ecx
sub ecx, eax
add ecx, dword [esp + 0x10]
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x10]
add eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
imul eax, eax, 0x59
imul ecx, edx
add eax, ecx
add eax, dword [esp + 0x20]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
dec eax
mov dword [esp + 0x24], eax
cmp eax, ebx
jl 0x4345fc
fld qword [0x4769a0]
mov dword [esp + 0x20], ebx
cmp dword [esp + 0x38], ebx
jle 0x4345f0
movzx eax, byte [edi + 3]
movzx ecx, byte [edi + 2]
imul ecx, eax
mov dword [esp + 0x14], ecx
fild dword [esp + 0x14]
fdiv st(1)
call fcn.004527f6
movzx ecx, byte [edi + 1]
mov byte [edi + 2], al
movzx eax, byte [edi + 3]
imul ecx, eax
mov dword [esp + 0x14], ecx
fild dword [esp + 0x14]
fdiv st(1)
call fcn.004527f6
movzx ecx, byte [edi]
mov byte [edi + 1], al
movzx eax, byte [edi + 3]
imul ecx, eax
mov dword [esp + 0x14], ecx
fild dword [esp + 0x14]
fdiv st(1)
call fcn.004527f6
fld qword [0x476908]
mov byte [edi], al
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fsub qword [0x476900]
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fsub qword [0x4768f8]
fadd qword [esp + 0x14]
fadd qword [esp + 0x14]
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fld qword [esp + 0x14]
fdiv qword [0x4768f0]
fsubp st(1)
fld qword [esp + 0x14]
fdiv qword [0x4768e8]
fsubp st(1)
fsub qword [esp + 0x14]
fadd qword [esp + 0x14]
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fadd qword [0x4768e0]
fadd qword [esp + 0x14]
fadd qword [esp + 0x14]
fsub qword [esp + 0x14]
fld qword [esp + 0x14]
fmul qword [0x4768d8]
fsubp st(1)
fadd qword [0x4768d0]
fsub qword [esp + 0x14]
fsub qword [0x4768c8]
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fadd qword [esp + 0x14]
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fsub qword [0x4768c0]
fsub qword [esp + 0x14]
fld qword [esp + 0x14]
fmul qword [0x4768b8]
fmul qword [0x4768b0]
fdiv qword [0x4768a8]
faddp st(1)
fadd qword [esp + 0x14]
fadd qword [esp + 0x14]
fld qword [esp + 0x14]
fmul qword [0x4768a0]
fmul qword [esp + 0x14]
faddp st(1)
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fmul qword [0x476898]
fld qword [esp + 0x14]
fsub qword [0x476890]
faddp st(1)
fadd qword [esp + 0x14]
fld qword [esp + 0x14]
fmul qword [esp + 0x14]
inc dword [esp + 0x20]
mov eax, dword [esp + 0x20]
add edi, 4
faddp st(1)
fadd qword [0x476888]
fstp qword [esp + 0x14]
cmp eax, dword [esp + 0x38]
jl 0x43447e
dec dword [esp + 0x24]
jns 0x434470
fstp st(0)
push ebx
push dword [0x47d934]
mov dword [esp + 0x88], ebx
push dword [esp + 0x30]
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
call fcn.0044c125
add esp, 0xc
push ebx
push dword [0x47d938]
mov dword [esp + 0x88], eax
push dword [esp + 0x30]
call fcn.0044c125
fld qword [0x476940]
mov dword [esp + 0x90], eax
fstp qword [esp + 0x20]
fld qword [esp + 0x20]
push 0xffffffffffffffe1
fadd qword [esp + 0x24]
fstp qword [esp + 0x24]
fld qword [esp + 0x24]
fmul qword [0x476938]
fstp qword [esp + 0x24]
fld qword [esp + 0x24]
fadd qword [0x4768a0]
fstp qword [esp + 0x24]
fld qword [esp + 0x24]
fmul qword [0x476930]
fmul qword [esp + 0x24]
fld qword [esp + 0x24]
fadd qword [0x476928]
faddp st(1)
fadd qword [0x4768e0]
fsub qword [esp + 0x24]
fadd qword [esp + 0x24]
fstp qword [esp + 0x24]
fld qword [esp + 0x24]
fmul qword [esp + 0x24]
fld qword [esp + 0x24]
fsub qword [0x476920]
faddp st(1)
fadd qword [0x476918]
fadd qword [esp + 0x24]
fsub qword [0x476910]
fstp qword [esp + 0x24]
fld qword [esp + 0x24]
fmul qword [esp + 0x24]
fmul qword [esp + 0x24]
fadd qword [esp + 0x24]
fsub qword [esp + 0x24]
fsub qword [esp + 0x24]
mov eax, dword [esi + 0x3c]
add eax, dword [esp + 0x90]
fstp qword [esp + 0x24]
mov dword [esp + 0x98], eax
mov dword [esp + 0x20], 8
add dword [esp + 0x20], 0x1a
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x20]
lea eax, [ecx + eax - 0x61]
add eax, dword [esp + 0x20]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x20]
imul eax, ecx
pop ecx
sub ecx, eax
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x1c]
imul eax, edx
mov edx, dword [esp + 0x1c]
imul eax, edx
sub ecx, eax
mov eax, dword [esp + 0x1c]
sub ecx, eax
mov eax, dword [esp + 0x1c]
sub ecx, eax
mov eax, dword [esp + 0x1c]
sub ecx, eax
add ecx, dword [esp + 0x1c]
add ecx, dword [esp + 0x1c]
push 0x5b
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x20]
imul eax, ecx
pop ecx
sub ecx, eax
add ecx, dword [esp + 0x1c]
add esp, 8
add ecx, dword [esp + 0x14]
mov dword [esp + 0x18], esp
add ecx, dword [esp + 0x14]
mov dword [esp + 0x14], ecx
add dword [esp + 0x14], 0x3d
mov eax, dword [esi + 0x40]
add eax, dword [esp + 0x88]
mov dword [esp + 0x90], eax
mov eax, esp
push dword [esp + 0x34]
mov dword [eax], ebx
push dword [esp + 0x34]
push ecx
mov eax, esp
lea ecx, [esp + 0x90]
mov dword [eax], ecx
mov eax, esi
mov dword [esp + 0x3c], esp
call fcn.0040b542
push 1
xor edi, edi
lea esi, [esp + 0x68]
mov ebx, eax
call fcn.00405a55
mov eax, ebx
jmp 0x434932
cmp dword [esp + 0x78], 8
mov eax, dword [esp + 0x64]
jae 0x4347e4
lea eax, [esp + 0x64]
cmp eax, ebx
je 0x4347fb
cmp dword [esp + 0x78], 8
jb 0x4347f5
mov eax, dword [esp + 0x64]
jmp 0x434800
lea eax, [esp + 0x64]
jmp 0x434800
mov eax, dword [0x47d8a0]
push eax
lea eax, [esp + 0x94]
call fcn.00405b7c
push 0xfde9
lea ecx, [esp + 0x94]
lea edx, [esp + 0x120]
mov byte [esp + 0x184], 7
call fcn.0044c516
pop ecx
mov byte [esp + 0x180], 8
cmp dword [eax + 0x14], 0x10
jb 0x43483e
mov eax, dword [eax]
push eax
movzx eax, word [esp + 0x4a]
push eax
movzx eax, word [esp + 0x4c]
push eax
push dword [0x47d620]
push 1
call fcn.0043ec4f
add esp, 0x14
push 1
xor edi, edi
lea esi, [esp + 0x120]
call fcn.00405711
push 1
lea esi, [esp + 0x94]
call fcn.00405a55
jmp 0x434077
cmp dword [esp + 0x78], 8
mov eax, dword [esp + 0x64]
jae 0x43488d
lea eax, [esp + 0x64]
cmp eax, ebx
je 0x4348a4
cmp dword [esp + 0x78], 8
jb 0x43489e
mov eax, dword [esp + 0x64]
jmp 0x4348a9
lea eax, [esp + 0x64]
jmp 0x4348a9
mov eax, dword [0x47d8a0]
push eax
lea eax, [esp + 0xe8]
call fcn.00405b7c
push 0xfde9
lea ecx, [esp + 0xe8]
lea edx, [esp + 0x158]
mov byte [esp + 0x184], 5
call fcn.0044c516
pop ecx
mov byte [esp + 0x180], 6
cmp dword [eax + 0x14], 0x10
jb 0x4348e7
mov eax, dword [eax]
push eax
call fcn.004408a1
push eax
push dword [esi + 0x48]
xor ebx, ebx
push dword [esi + 0x44]
inc ebx
push dword [0x47d61c]
push ebx
call fcn.0043ec4f
add esp, 0x18
push ebx
xor edi, edi
lea esi, [esp + 0x158]
call fcn.00405711
lea esi, [esp + 0xe4]
push ebx
xor edi, edi
call fcn.00405a55
push ebx
xor edi, edi
lea esi, [esp + 0x68]
call fcn.00405a55
xor eax, eax
mov ecx, dword [esp + 0x178]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x160]
xor ecx, esp
call fcn.00411a01
mov esp, ebp
pop ebp
ret 4