Function at 0x4ab65b
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5856d4
mov eax, dword fs:[0]
push eax
sub esp, 0x3b8
mov eax, dword [0x67d978]
xor eax, esp
mov dword [esp + 0x3b0], eax
push ebx
push esi
push edi
mov eax, dword [0x67d978]
xor eax, esp
push eax
lea eax, [esp + 0x3c8]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edi, ecx
push dword [edi + 8]
add edi, 4
xor ebx, ebx
lea esi, [esp + 0x74]
mov dword [esp + 0x70], eax
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], ebx
call fcn.0046d3df
mov edi, dword [esp + 0x18]
push dword [edi + 8]
lea esi, [esp + 0x50]
call fcn.0046d3df
mov eax, dword [esp + 0x70]
cmp eax, ebx
je 0x4ab6db
cmp eax, dword [esp + 0x4c]
je 0x4ab6e0
call fcn.00536646
mov eax, dword [esp + 0x74]
cmp eax, dword [esp + 0x50]
je 0x4ab762
lea esi, [esp + 0x70]
call fcn.0045ce35
mov esi, dword [eax]
mov eax, dword [esi + 4]
dec eax
dec eax
jne 0x4ab74d
push esi
lea ecx, [esp + 0xc4]
call fcn.004b5a1c
mov dword [esp + 0x3d0], ebx
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov eax, dword [esp + 0x74]
mov dword [esp + 0x24], esp
push dword [ebp + 0xc]
add eax, 0x10
push eax
lea ecx, [esp + 0xd0]
mov dword [esp + 0x34], esi
call fcn.004b57b9
or dword [esp + 0x3d0], 0xffffffff
lea eax, [esp + 0xc0]
push eax
call fcn.004b5dbc
lea edi, [esp + 0x80]
lea esi, [esp + 0x70]
call fcn.004890e8
jmp 0x4ab6bd
push dword [edi + 4]
lea esi, [esp + 0x20]
mov byte [esp + 0x1b], 0
call fcn.0046d3df
mov edi, dword [esp + 0x18]
push dword [edi + 8]
lea esi, [esp + 0x50]
call fcn.0046d3df
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x4ab791
cmp eax, dword [esp + 0x4c]
je 0x4ab796
call fcn.00536646
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x50]
je 0x4ab7ed
lea esi, [esp + 0x1c]
call fcn.0045ce35
mov eax, dword [eax]
mov ecx, dword [eax + 4]
dec ecx
jne 0x4ab7db
mov ecx, dword [ebp + 0xc]
mov dword [esp + 0x44], eax
lea eax, [esp + 0x3c]
push eax
push dword [esp + 0x70]
mov dword [esp + 0x44], 4
mov dword [esp + 0x48], ecx
mov dword [esp + 0x50], ebx
call fcn.004ab5a4
mov byte [esp + 0x17], 1
lea edi, [esp + 0x80]
lea esi, [esp + 0x1c]
call fcn.004890e8
jmp 0x4ab773
cmp byte [esp + 0x17], 0
jne 0x4abdcc
cmp dword [esp + 0x24], ebx
je 0x4abdcc
push ebx
call dword [sym.imp.USER32.dll_GetDC]
push 0x78
pop ecx
mov dword [esp + 0x70], eax
push ecx
mov eax, ecx
push eax
push dword [esp + 0x78]
lea eax, [esp + 0x64]
push eax
call fcn.00496f11
xor edi, edi
inc edi
mov dword [esp + 0x3d0], edi
mov dword [esp + 0x34], ebx
mov byte [esp + 0x3d0], 2
mov dword [esp + 0x30], ebx
mov byte [esp + 0x3d0], 3
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x3d0], 4
mov dword [esp + 0x38], ebx
mov byte [esp + 0x3d0], 5
mov dword [esp + 0x28], ebx
mov byte [esp + 0x3d0], 6
mov esi, dword [sym.imp.GDI32.dll_CreateSolidBrush]
push 0xead999
call esi
push 0x800000
mov dword [esp + 0x34], eax
call esi
push 0xffffff
push edi
mov edi, dword [sym.imp.GDI32.dll_CreatePen]
push ebx
mov dword [esp + 0x40], eax
call edi
push 0xc8c8c8
mov dword [esp + 0x2c], eax
call esi
push 0xe8a200
push 2
push ebx
mov dword [esp + 0x38], eax
call edi
push 5
mov dword [esp + 0x3c], eax
pop eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
push 0x6e
pop eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
lea esi, [esp + 0x80]
lea edi, [esp + 0xb0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 3
movsd dword es:[edi], dword [esi]
push 3
lea eax, [esp + 0xb8]
push eax
movsd dword es:[edi], dword [esi]
call dword [sym.imp.USER32.dll_OffsetRect]
push dword [esp + 0x30]
mov ebx, dword [sym.imp.GDI32.dll_SelectObject]
push dword [esp + 0x5c]
call ebx
push dword [esp + 0x38]
push dword [esp + 0x5c]
call ebx
push dword [esp + 0x2c]
lea eax, [esp + 0xb4]
push eax
push dword [esp + 0x60]
call dword [sym.imp.USER32.dll_FillRect]
push 0x6e
push 0x6e
push 5
push 5
push dword [esp + 0x68]
call dword [sym.imp.GDI32.dll_Rectangle]
mov esi, dword [esp + 0x24]
lea eax, [esp + 0x3c]
push eax
call fcn.004b5099
mov byte [esp + 0x3d0], 7
fld dword [0x634230]
xor ecx, ecx
fstp dword [esp + 0x18]
cmp dword [esp + 0x40], ecx
push 7
pop eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x1c], eax
jne 0x4ab971
mov dword [esp + 0x54], ecx
jmp 0x4ab988
mov ecx, dword [esp + 0x44]
sub ecx, dword [esp + 0x40]
sar ecx, 2
cmp ecx, eax
mov dword [esp + 0x54], ecx
lea eax, [esp + 0x1c]
jg 0x4ab98c
lea eax, [esp + 0x54]
fild dword [eax]
push dword [esp + 0x40]
lea edi, [esp + 0x40]
lea esi, [esp + 0x50]
fdivr qword [0x634228]
fstp dword [esp + 0x58]
call fcn.0046d3df
mov eax, dword [esp + 0x50]
mov dword [esp + 0x94], eax
push dword [esp + 0x44]
lea edi, [esp + 0x40]
lea esi, [esp + 0x84]
call fcn.0046d3df
mov edi, dword [esp + 0x4c]
test edi, edi
je 0x4ab9d9
cmp edi, dword [esp + 0x80]
je 0x4ab9de
call fcn.00536646
mov esi, dword [esp + 0x94]
cmp esi, dword [esp + 0x84]
je 0x4abb3f
cmp dword [esp + 0x24], 7
jge 0x4abb3f
test edi, edi
jne 0x4aba06
call fcn.00536646
cmp esi, dword [edi + 8]
jb 0x4aba10
call fcn.00536646
fld dword [esp + 0x18]
mov esi, dword [esi]
call fcn.0055a060
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fmul qword [0x634220]
fadd qword [0x634218]
call fcn.00559b10
fld dword [esp + 0x18]
mov dword [esp + 0x98], eax
call fcn.0055a190
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fmul qword [0x634220]
fadd qword [0x634218]
call fcn.00559b10
mov edi, 0x2b4
push edi
mov dword [esp + 0xa0], eax
lea eax, [esp + 0xf8]
push 0
push eax
call fcn.005389c0
add esp, 0xc
lea eax, [esp + 0xc0]
push eax
push esi
call fcn.004b4da1
mov byte [esp + 0x3d0], 8
cmp dword [eax + 0x18], 8
mov cl, byte [esi]
mov byte [esp + 0x17], cl
jb 0x4abaa3
mov esi, dword [eax + 4]
jmp 0x4abaa6
lea esi, [eax + 4]
push 0x4010
push edi
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0x23]
call fcn.004ab423
push eax
push esi
call dword [0x6894f0]
mov esi, eax
mov byte [esp + 0x3d0], 7
push 0
push 1
lea ecx, [esp + 0xc8]
call fcn.0041382c
test esi, esi
je 0x4abb0d
mov eax, dword [esp + 0x9c]
push 1
add eax, 0xfffffff0
push eax
mov eax, dword [esp + 0xa0]
add eax, 0xfffffff0
push eax
push dword [esp + 0x64]
push dword [esp + 0x108]
push esi
call dword [sym.imp.COMCTL32.dll_ImageList_Draw]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x94]
cmp ecx, dword [eax + 8]
jb 0x4abb22
call fcn.00536646
fld dword [esp + 0x54]
add dword [esp + 0x94], 4
fadd dword [esp + 0x18]
inc dword [esp + 0x24]
fstp dword [esp + 0x18]
jmp 0x4ab9b4
push 0xe
pop edi
lea esi, [esp + 0x1c]
call fcn.004979af
mov byte [esp + 0x3d0], 9
push dword [eax]
push dword [esp + 0x5c]
call ebx
mov byte [esp + 0x3d0], 7
xor esi, esi
cmp dword [esp + 0x40], esi
jne 0x4abb6f
xor eax, eax
jmp 0x4abb7a
mov eax, dword [esp + 0x44]
sub eax, dword [esp + 0x40]
sar eax, 2
push eax
push 0x62b558
lea eax, [esp + 0x3b4]
push 0xa
push eax
call fcn.005368c2
lea eax, [esp + 0x3bc]
add esp, 0x10
mov dword [esp + 0x78], esi
mov dword [esp + 0x7c], esi
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
cmp dx, si
jne 0x4abba4
sub eax, ecx
lea ecx, [esp + 0x78]
push ecx
sar eax, 1
push eax
lea eax, [esp + 0x3b4]
push eax
push dword [esp + 0x64]
call dword [0x689408]
push 0x800000
push dword [esp + 0x5c]
call dword [sym.imp.GDI32.dll_SetBkColor]
push dword [esp + 0x34]
push dword [esp + 0x5c]
call ebx
push dword [esp + 0x28]
push dword [esp + 0x5c]
call ebx
mov ecx, dword [esp + 0x7c]
mov edi, dword [esp + 0x78]
push 0x73
pop eax
sub eax, ecx
cdq
sub eax, edx
push 0x73
mov ebx, eax
pop eax
sub eax, edi
cdq
push 4
sub eax, edx
push 4
mov esi, eax
sar ebx, 1
lea eax, [ebx + ecx + 4]
push eax
sar esi, 1
lea ecx, [esi + edi + 4]
push ecx
lea edx, [ebx - 4]
push edx
lea edi, [esi - 4]
push edi
push dword [esp + 0x70]
call dword [sym.imp.GDI32.dll_RoundRect]
lea eax, [esp + 0x1c]
push eax
lea edi, [esp + 0x3b0]
call fcn.00484996
mov byte [esp + 0x3d0], 0xa
mov edi, dword [eax]
push edi
call dword [0x6894ec]
push eax
push edi
push ebx
push esi
push dword [esp + 0x68]
call dword [0x689410]
mov byte [esp + 0x3d0], 7
lea eax, [esp + 0x1c]
push eax
call fcn.00484959
mov esi, dword [esp + 0x68]
xor edi, edi
cmp dword [esp + 0x58], edi
je 0x4abc9b
push dword [esp + 0x58]
mov ebx, dword [sym.imp.GDI32.dll_DeleteDC]
call ebx
cmp eax, edi
je 0x4abc8f
mov dword [esp + 0x58], edi
cmp dword [esp + 0x58], edi
je 0x4abc9b
push dword [esp + 0x58]
call ebx
push esi
lea eax, [esp + 0x20]
push eax
mov dword [esp + 0x60], edi
call fcn.004b5254
mov byte [esp + 0x3d0], 0xb
mov eax, dword [ebp + 0xc]
mov esi, dword [esp + 0x1c]
mov dword [esp + 0xa4], eax
lea eax, [esp + 0xa0]
push eax
push dword [esp + 0x70]
mov dword [esp + 0xa8], 4
mov dword [esp + 0xb0], esi
mov dword [esp + 0xb4], edi
call fcn.004ab5a4
push dword [esp + 0x70]
push edi
call dword [sym.imp.USER32.dll_ReleaseDC]
mov byte [esp + 0x3d0], 7
push esi
call fcn.00536656
pop ecx
mov byte [esp + 0x3d0], 6
cmp dword [esp + 0x40], edi
je 0x4abd1c
push dword [esp + 0x40]
call fcn.00535941
pop ecx
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], edi
mov byte [esp + 0x3d0], 5
cmp dword [esp + 0x28], edi
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
je 0x4abd4a
push dword [esp + 0x28]
call esi
cmp eax, edi
je 0x4abd4a
mov dword [esp + 0x28], edi
mov byte [esp + 0x3d0], 4
cmp dword [esp + 0x38], edi
je 0x4abd66
push dword [esp + 0x38]
call esi
cmp eax, edi
je 0x4abd66
mov dword [esp + 0x38], edi
mov byte [esp + 0x3d0], 3
cmp dword [esp + 0x2c], edi
je 0x4abd82
push dword [esp + 0x2c]
call esi
cmp eax, edi
je 0x4abd82
mov dword [esp + 0x2c], edi
mov byte [esp + 0x3d0], 2
cmp dword [esp + 0x30], edi
je 0x4abd9e
push dword [esp + 0x30]
call esi
cmp eax, edi
je 0x4abd9e
mov dword [esp + 0x30], edi
mov byte [esp + 0x3d0], 1
cmp dword [esp + 0x34], edi
je 0x4abdba
push dword [esp + 0x34]
call esi
cmp eax, edi
je 0x4abdba
mov dword [esp + 0x34], edi
or dword [esp + 0x3d0], 0xffffffff
lea eax, [esp + 0x58]
push eax
call fcn.00496f54
mov ecx, dword [esp + 0x3c8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3b0]
xor ecx, esp
call fcn.00536476
mov esp, ebp
pop ebp
ret 8