Function at 0x4bf290
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x90
push ebx
push ebp
push esi
mov esi, dword [esp + 0xa0]
push edi
mov edi, dword [esp + 0xa8]
push esi
call fcn.004beb80
mov ebp, dword [esp + 0xac]
mov ebx, eax
mov eax, dword [ebx + ebp*4 + 4]
xor edi, edi
cmp eax, edi
mov dword [esp + 0x74], ebx
je 0x4bf2fc
mov ecx, dword [eax]
cmp ecx, dword [esp + 0xb0]
jne 0x4bf2f8
mov edx, dword [eax + 4]
cmp edx, dword [esp + 0xb4]
jne 0x4bf2f8
mov ecx, dword [eax + 0xc]
cmp ecx, dword [esp + 0xb8]
jne 0x4bf2f8
mov edx, dword [eax + 0x10]
cmp edx, dword [esp + 0xbc]
je 0x4bfa8f
cmp eax, edi
jne 0x4bf30a
push 0x14
call fcn.004a47f0
mov dword [ebx + ebp*4 + 4], eax
mov dword [eax + 8], edi
mov eax, dword [ebx + ebp*4 + 4]
mov eax, dword [eax + 8]
cmp eax, edi
je 0x4bf322
push eax
call fcn.004a4850
mov ecx, dword [ebx + ebp*4 + 4]
mov dword [ecx + 8], edi
cmp dword [esi + 0x20], edi
jne 0x4bf32c
call fcn.004bf240
cmp dword [esi + 0x18], edi
jne 0x4bf33a
cmp dword [esi + 0x1c], edi
je 0x4bfa58
push edi
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
cmp esi, edi
mov dword [esp + 0x9c], esi
je 0x4bfa58
push esi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edi, eax
test edi, edi
mov dword [esp + 0x8c], edi
je 0x4bfa4f
cmp byte [ebx + 0x11], 0
mov esi, dword [esp + 0xa4]
jne 0x4bf38f
mov eax, dword [esp + 0xa8]
mov edx, dword [esi + 0x18]
mov ecx, edi
call fcn.004bec10
mov byte [ebx + 0x10], al
mov byte [ebx + 0x11], 1
cmp byte [ebx + 0x10], 0
je 0x4bf39a
mov esi, dword [esi + 0x18]
jmp 0x4bf39d
mov esi, dword [esi + 0x1c]
mov edx, dword [esi]
mov edx, dword [edx + 0x40]
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x20]
push ecx
push esi
call edx
test eax, eax
jl 0x4bfa41
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x6c]
push eax
mov eax, dword [esp + 0xac]
push 0
push ecx
push edx
push esi
call fcn.004bea40
test eax, eax
mov dword [esp + 0x94], eax
je 0x4bfa41
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0xa8]
lea ecx, [esp + 0x68]
push ecx
mov ecx, dword [esp + 0x24]
push 0xffffff
push ecx
push edx
push esi
call fcn.004bea40
test eax, eax
mov dword [esp + 0x84], eax
je 0x4bfa33
mov esi, dword [esp + 0xb0]
mov ebp, dword [esp + 0xb4]
mov edx, esi
imul edx, ebp
add edx, edx
add edx, edx
push edx
call fcn.004a47f0
mov ecx, dword [esp + 0xac]
mov edx, dword [ebx + ecx*4 + 4]
mov dword [edx + 8], eax
mov eax, dword [esp + 0xb8]
movzx ecx, al
movzx edx, ah
shr eax, 0x10
movzx eax, al
mov dword [esp + 0x54], eax
xor eax, eax
cmp byte [0x58b619], al
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x58], edx
mov dword [esp + 0x44], eax
mov dword [esp + 0x50], eax
je 0x4bf4c7
mov edx, dword [esp + 0xa8]
shr edx, 0x18
and edx, 0xf
je 0x4bf4c7
mov ebx, dword [esp + 0xa4]
lea ecx, [esp + 0x88]
mov eax, ebx
call fcn.004bed20
test eax, eax
je 0x4bf4c7
mov eax, dword [esp + 0x88]
lea ecx, [esp + 0x64]
push ecx
lea edx, [esp + 0x64]
push edx
push ebp
push esi
push edi
push eax
push ebx
call fcn.004befd0
test eax, eax
je 0x4bf4c7
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x64]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x50], edx
cmp byte [0x598e6e], 0
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x48], esi
mov dword [esp + 0x40], ebp
jne 0x4bf4f4
cmp esi, ebx
jl 0x4bf4f4
mov eax, dword [esp + 0x20]
cmp ebp, eax
jl 0x4bf4f4
mov dword [esp + 0x48], ebx
mov dword [esp + 0x40], eax
mov ebp, eax
mov esi, ebx
mov edi, dword [esp + 0xac]
mov eax, esi
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [esp + 0xb0]
cdq
sub eax, edx
mov edx, dword [esp + 0xb4]
sar ecx, 1
sar eax, 1
sub eax, ecx
mov ecx, dword [esp + 0x74]
mov ecx, dword [ecx + edi*4 + 4]
mov ecx, dword [ecx + 8]
mov dword [esp + 0x7c], ecx
mov ecx, dword [esp + 0xb4]
sub edx, ebp
test ecx, ecx
mov dword [esp + 0x90], eax
jle 0x4bf9f8
neg edx
mov edi, edx
mov dword [esp + 0x4c], edi
mov dword [esp + 0x70], ecx
lea esp, [esp]
cmp dword [esp + 0xb0], 0
jle 0x4bf9e6
mov edx, dword [esp + 0xb0]
mov ecx, eax
neg ecx
mov dword [esp + 0x78], edx
lea ecx, [ecx]
mov eax, ecx
imul eax, ebx
cdq
idiv esi
add ecx, 1
mov dword [esp + 0x98], ecx
mov dword [esp + 0x3c], eax
mov eax, ecx
imul eax, ebx
cdq
idiv esi
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], eax
mov eax, edi
imul eax, ecx
cdq
idiv ebp
mov esi, eax
lea eax, [edi + 1]
imul eax, ecx
cdq
idiv ebp
xor ebp, ebp
xor edi, edi
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x18], edi
mov dword [esp + 0x30], esi
mov ecx, eax
cmp esi, ecx
mov dword [esp + 0x28], ecx
jge 0x4bf6cf
mov eax, dword [esp + 0x3c]
mov ecx, esi
imul ecx, ebx
mov ebx, dword [esp + 0x68]
add ecx, eax
lea edx, [ebx + ecx*4]
mov ecx, dword [esp + 0x6c]
sub ecx, ebx
mov dword [esp + 0x34], edx
mov dword [esp + 0x80], ecx
jmp 0x4bf607
mov ecx, dword [esp + 0x80]
add ecx, edx
cmp eax, dword [esp + 0x24]
mov dword [esp + 0x38], eax
jge 0x4bf6a7
test eax, eax
jl 0x4bf678
cmp dword [esp + 0x30], 0
jl 0x4bf678
cmp eax, dword [esp + 0x1c]
jge 0x4bf678
mov eax, dword [esp + 0x20]
cmp dword [esp + 0x30], eax
jge 0x4bf674
movzx eax, byte [ecx]
add dword [esp + 0x2c], eax
movzx eax, byte [ecx + 1]
add dword [esp + 0x14], eax
add ecx, 1
movzx eax, byte [ecx + 1]
add dword [esp + 0x10], eax
movzx eax, byte [edx]
add ecx, 1
add edi, eax
movzx eax, byte [edx + 1]
add dword [esp + 0x18], eax
add edx, 1
movzx eax, byte [edx + 1]
add edx, 1
add ebp, eax
mov eax, dword [esp + 0x38]
add ecx, 2
add edx, 2
jmp 0x4bf692
mov eax, dword [esp + 0x38]
add dword [esp + 0x18], 0xff
add ecx, 4
add edi, 0xff
add ebp, 0xff
add edx, 4
add eax, 1
cmp eax, dword [esp + 0x24]
mov dword [esp + 0x38], eax
jl 0x4bf617
mov eax, dword [esp + 0x3c]
mov ebx, dword [esp + 0x1c]
mov edx, dword [esp + 0x34]
add dword [esp + 0x30], 1
lea ecx, [ebx*4]
add edx, ecx
mov ecx, dword [esp + 0x28]
cmp dword [esp + 0x30], ecx
mov dword [esp + 0x34], edx
jl 0x4bf600
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x3c]
je 0x4bf718
sub ecx, esi
je 0x4bf718
imul ecx, eax
mov eax, dword [esp + 0x10]
cdq
idiv ecx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
cdq
idiv ecx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x2c]
cdq
idiv ecx
mov ebx, eax
mov eax, ebp
cdq
idiv ecx
mov ebp, eax
mov eax, dword [esp + 0x18]
cdq
idiv ecx
mov esi, eax
mov eax, edi
cdq
idiv ecx
mov ecx, eax
jmp 0x4bf780
mov eax, dword [esp + 0x3c]
xor ecx, ecx
cmp eax, ecx
jl 0x4bf76d
cmp esi, ecx
jl 0x4bf76d
cmp eax, ebx
jge 0x4bf76d
cmp esi, dword [esp + 0x20]
jge 0x4bf76d
mov ecx, dword [esp + 0x6c]
imul esi, ebx
mov edx, dword [esp + 0x68]
add esi, eax
add esi, esi
add esi, esi
movzx ebx, byte [esi + ecx]
lea eax, [esi + ecx]
movzx ecx, byte [eax + 1]
add eax, 1
movzx eax, byte [eax + 1]
add edx, esi
movzx esi, byte [edx + 1]
movzx ebp, byte [edx + 2]
mov dword [esp + 0x14], ecx
movzx ecx, byte [edx]
add edx, 1
mov dword [esp + 0x10], eax
jmp 0x4bf780
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], ecx
mov ecx, 0xff
xor ebx, ebx
mov esi, ecx
mov ebp, ecx
lea edx, [ecx + esi]
add edx, ebp
mov eax, 0x55555556
imul edx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x14]
add edx, ebx
add edx, dword [esp + 0x10]
mov dword [esp + 0x28], eax
mov eax, 0x55555556
imul edx
mov eax, edx
sub ecx, ebx
imul ecx, dword [esp + 0x54]
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, dword [esp + 0x28]
sub edi, eax
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
add ecx, ebx
mov ebx, dword [esp + 0x14]
sub esi, ebx
imul esi, dword [esp + 0x58]
mov eax, 0x80808081
imul esi
add edx, esi
sar edx, 7
mov esi, edx
shr esi, 0x1f
add esi, edx
add esi, ebx
mov ebx, dword [esp + 0x10]
sub ebp, ebx
imul ebp, dword [esp + 0x5c]
mov eax, 0x80808081
imul ebp
mov eax, dword [esp + 0x44]
add edx, ebp
sar edx, 7
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
add edi, 0xff
add ebp, ebx
test eax, eax
je 0x4bf92a
movzx ebx, byte [eax]
movzx edx, byte [eax + 1]
add eax, 1
add eax, 1
add eax, 1
mov dword [esp + 0x14], edx
movzx edx, byte [eax - 1]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x50]
add eax, 1
mov dword [esp + 0x10], edx
movzx edx, byte [eax - 1]
mov dword [esp + 0x34], edx
movzx edx, byte [eax]
add eax, 1
add eax, 1
mov dword [esp + 0x18], edx
movzx edx, byte [eax - 1]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x18]
add edx, eax
add edx, dword [esp + 0x24]
mov eax, 0x55555556
imul edx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x28], eax
add edx, ebx
add edx, dword [esp + 0x10]
mov eax, 0x55555556
imul edx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x28]
sub eax, edx
add eax, 0xff
cmp eax, edi
mov dword [esp + 0x2c], ebx
jle 0x4bf8ba
mov edi, eax
mov ebx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
sub eax, ebx
imul eax, ecx
mov ecx, eax
mov eax, 0x80808081
imul ecx
mov eax, dword [esp + 0x18]
add edx, ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
add ecx, ebx
mov ebx, dword [esp + 0x14]
sub eax, ebx
imul eax, esi
mov esi, eax
mov eax, 0x80808081
imul esi
add edx, esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, ebx
mov ebx, dword [esp + 0x10]
mov esi, eax
mov eax, dword [esp + 0x24]
sub eax, ebx
imul eax, ebp
mov ebp, eax
mov eax, 0x80808081
imul ebp
add edx, ebp
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, ebx
mov ebp, eax
sub ecx, dword [esp + 0x54]
mov ebx, dword [esp + 0xbc]
sub esi, dword [esp + 0x58]
imul ecx, ebx
imul edi, ebx
mov eax, 0x80808081
imul esi, ebx
imul ecx
add edx, ecx
sar edx, 7
mov ecx, edx
sub ebp, dword [esp + 0x5c]
shr ecx, 0x1f
add edx, ecx
imul ebp, ebx
add dl, byte [esp + 0x54]
mov ecx, dword [esp + 0x7c]
mov byte [ecx], dl
mov eax, 0x80808081
imul esi
add edx, esi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
add al, byte [esp + 0x58]
add ecx, 1
mov byte [ecx], al
mov eax, 0x80808081
imul ebp
add edx, ebp
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
add al, byte [esp + 0x5c]
add ecx, 1
mov byte [ecx], al
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x48]
mov eax, 0x80808081
imul edi
add edx, edi
mov edi, dword [esp + 0x4c]
sar edx, 7
mov eax, edx
add ecx, 1
shr eax, 0x1f
add eax, edx
mov byte [ecx], al
mov ebx, dword [esp + 0x1c]
add ecx, 1
sub dword [esp + 0x78], 1
mov dword [esp + 0x7c], ecx
mov ecx, dword [esp + 0x98]
jne 0x4bf570
mov eax, dword [esp + 0x90]
add edi, 1
sub dword [esp + 0x70], 1
mov dword [esp + 0x4c], edi
jne 0x4bf550
cmp dword [esp + 0x44], 0
je 0x4bfa13
mov ecx, dword [esp + 0x64]
push ecx
call fcn.004a4850
mov edx, dword [esp + 0x60]
push edx
call fcn.004a4850
mov eax, dword [esp + 0x84]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ebp, dword [esp + 0xac]
mov ebx, dword [esp + 0x74]
mov edi, dword [esp + 0x8c]
mov ecx, dword [esp + 0x94]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov esi, dword [esp + 0x9c]
push esi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov edx, dword [ebx + ebp*4 + 4]
mov eax, dword [esp + 0xb8]
mov dword [edx + 0xc], eax
mov ecx, dword [ebx + ebp*4 + 4]
mov edx, dword [esp + 0xbc]
mov dword [ecx + 0x10], edx
mov eax, dword [ebx + ebp*4 + 4]
mov ecx, dword [esp + 0xb0]
mov dword [eax], ecx
mov edx, dword [ebx + ebp*4 + 4]
mov eax, dword [esp + 0xb4]
mov dword [edx + 4], eax
pop edi
pop esi
pop ebp
mov eax, ebx
pop ebx
add esp, 0x90
ret 0x1c