Function at 0x4031a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x41cc28
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x80
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [esp + 0x38], esi
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], vtable.CBrush.0
lea ecx, [esp + 0x5c]
mov dword [esp + 0x98], ebx
call fcn.004198dc
lea ecx, [esp + 0x6c]
mov byte [esp + 0x98], 1
call fcn.004039b0
mov dword [esp + 0x6c], 0x41e9c8
mov edi, dword [esp + 0xa0]
xor ecx, ecx
mov byte [esp + 0x98], 2
mov dword [esp + 0x5c], 0x41e954
mov eax, dword [edi + 0xc]
mov dword [esp + 0x78], edi
cmp eax, ebx
mov dword [esp + 0x74], ebx
sete cl
cmp ecx, ebx
mov dword [esp + 0x8c], ecx
je 0x4032b7
mov eax, dword [edi]
lea ecx, [esp + 0x7c]
push ecx
mov ecx, edi
call dword [eax + 0x50]
cmp edi, ebx
jne 0x403248
xor eax, eax
jmp 0x40324b
mov eax, dword [edi + 4]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
lea ecx, [esp + 0x60]
call fcn.00419993
mov edx, dword [esp + 0x88]
mov ebp, dword [esp + 0x80]
mov eax, dword [esp + 0x84]
sub edx, ebp
push edx
mov edx, dword [esp + 0x80]
sub eax, edx
lea ecx, [esp + 0x70]
push eax
push edi
call fcn.00403a80
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [esp + 0x60]
call fcn.00403ab0
mov edx, dword [esp + 0x80]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x7c]
push edx
lea ecx, [esp + 0x48]
push eax
push ecx
lea ecx, [esp + 0x68]
call fcn.00419d4d
jmp 0x4032c9
mov edx, dword [edi + 4]
mov dword [esp + 0x68], eax
mov eax, dword [edi + 8]
mov dword [esp + 0x60], edx
mov dword [esp + 0x64], eax
xor ecx, ecx
xor edx, edx
mov cl, byte [esi + 0x50]
mov dl, byte [esi + 0x4d]
xor eax, eax
mov edi, ecx
mov al, byte [esi + 0x4c]
mov ebp, edx
mov edx, dword [esi + 0x4c]
mov dword [esp + 0x10], eax
sub edi, eax
mov eax, dword [esi + 0x50]
xor ebx, ebx
mov ecx, edx
mov bl, byte [esi + 0x51]
and ebp, 0xff
shr ecx, 0x10
shr eax, 0x10
and ebx, 0xff
and ecx, 0xff
and eax, 0xff
sub ebx, ebp
sub eax, ecx
mov byte [esp + 0x98], 3
test edi, edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], eax
jne 0x403352
test ebx, ebx
jne 0x403352
test eax, eax
jne 0x403352
mov edi, dword [esp + 0x10]
mov ebx, ebp
mov eax, ecx
mov dword [esp + 0x24], edi
test edx, edx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], eax
jne 0x403352
mov dword [esp + 0x14], 0xff
jmp 0x40338f
cdq
mov esi, eax
mov eax, ebx
xor esi, edx
sub esi, edx
cdq
mov ebx, eax
xor ebx, edx
sub ebx, edx
cmp ebx, esi
mov dword [esp + 0x28], ebx
jg 0x40336e
mov dword [esp + 0x28], esi
mov eax, edi
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x28]
cmp eax, edx
jle 0x403383
mov dword [esp + 0x14], eax
jmp 0x40338f
cmp ebx, esi
mov dword [esp + 0x14], ebx
jg 0x40338f
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0xac]
mov esi, dword [esp + 0xa4]
fild dword [esp + 0x14]
cmp dword [eax], 0
je 0x4033ab
fild dword [esi + 0xc]
jmp 0x4033ae
fild dword [esi + 8]
fdiv st(1)
mov edx, dword [esp + 0x10]
xor eax, eax
mov dword [esp + 0x10], eax
fstp dword [esp + 0x18]
fild dword [esp + 0x24]
mov dword [esp + 0x24], edx
fdiv st(1)
fstp dword [esp + 0x34]
fild dword [esp + 0x20]
mov dword [esp + 0x20], ebp
fdiv st(1)
fstp dword [esp + 0x30]
fild dword [esp + 0x1c]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x14]
test ecx, ecx
fdiv st(1)
fstp dword [esp + 0x2c]
fstp st(0)
jle 0x4035b1
mov edi, dword [sym.imp.USER32.dll_SetRect]
mov ebp, dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [esp + 0xac]
cmp dword [ecx], 0
je 0x4034db
fild dword [esp + 0x10]
inc eax
mov dword [esp + 0x28], eax
fstp dword [esp + 0x10]
fild dword [esp + 0x28]
fmul dword [esp + 0x18]
call fcn.00406b6c
fld dword [esp + 0x10]
mov edx, dword [esi + 8]
push eax
fmul dword [esp + 0x1c]
inc edx
push edx
call fcn.00406b6c
push eax
lea eax, [esp + 0x58]
push 0
push eax
call edi
fld dword [esp + 0x10]
fmul dword [esp + 0x2c]
fiadd dword [esp + 0x1c]
call fcn.00406b6c
fld dword [esp + 0x10]
fmul dword [esp + 0x30]
xor ebx, ebx
mov bh, al
fiadd dword [esp + 0x20]
call fcn.00406b6c
fld dword [esp + 0x10]
fmul dword [esp + 0x34]
mov bl, al
shl ebx, 8
fiadd dword [esp + 0x24]
call fcn.00406b6c
and eax, 0xff
or ebx, eax
push ebx
call ebp
push eax
lea ecx, [esp + 0x40]
call fcn.00419f8d
mov edx, dword [esp + 0x40]
lea eax, [esp + 0x3c]
neg eax
mov ebx, dword [sym.imp.USER32.dll_FillRect]
lea ecx, [esp + 0x4c]
sbb eax, eax
and eax, edx
mov edx, dword [esp + 0x60]
push eax
push ecx
push edx
call ebx
lea ecx, [esp + 0x3c]
call fcn.00419fe4
mov ecx, dword [esp + 0xa8]
mov eax, dword [esp + 0x58]
cmp eax, dword [ecx]
jg 0x40362d
jmp 0x40359d
fild dword [esp + 0x10]
mov edx, dword [esi + 0xc]
inc eax
mov dword [esp + 0x28], eax
inc edx
fstp dword [esp + 0x10]
fild dword [esp + 0x28]
push edx
fmul dword [esp + 0x1c]
call fcn.00406b6c
fld dword [esp + 0x14]
fmul dword [esp + 0x1c]
push eax
push 0
call fcn.00406b6c
push eax
lea eax, [esp + 0x5c]
push eax
call edi
fld dword [esp + 0x10]
fmul dword [esp + 0x2c]
fiadd dword [esp + 0x1c]
call fcn.00406b6c
fld dword [esp + 0x10]
fmul dword [esp + 0x30]
xor ebx, ebx
mov bh, al
fiadd dword [esp + 0x20]
call fcn.00406b6c
fld dword [esp + 0x10]
fmul dword [esp + 0x34]
mov bl, al
shl ebx, 8
fiadd dword [esp + 0x24]
call fcn.00406b6c
and eax, 0xff
or ebx, eax
push ebx
call ebp
push eax
lea ecx, [esp + 0x40]
call fcn.00419f8d
mov edx, dword [esp + 0x40]
lea eax, [esp + 0x3c]
neg eax
sbb eax, eax
lea ecx, [esp + 0x4c]
and eax, edx
mov edx, dword [esp + 0x60]
push eax
push ecx
push edx
call dword [sym.imp.USER32.dll_FillRect]
lea ecx, [esp + 0x3c]
call fcn.00419fe4
mov ecx, dword [esp + 0xa8]
mov eax, dword [esp + 0x54]
cmp eax, dword [ecx]
jg 0x40372d
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x14]
cmp eax, ecx
mov dword [esp + 0x10], eax
jl 0x403402
mov dword [esp + 0x5c], method.CDC.virtual_0
mov ecx, dword [esp + 0x8c]
xor eax, eax
cmp ecx, eax
mov byte [esp + 0x98], 0xb
je 0x40384c
mov ecx, dword [esp + 0x88]
mov esi, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0x7c]
mov ebp, dword [esp + 0x60]
lea eax, [esp + 0x5c]
sub ecx, esi
sub edx, edi
neg eax
sbb eax, eax
push 0xcc0020
and eax, ebp
push esi
push edi
push eax
push ecx
mov ecx, dword [esp + 0x8c]
push edx
push esi
mov edx, dword [ecx + 4]
push edi
push edx
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [esp + 0x74]
lea ecx, [esp + 0x5c]
push eax
call fcn.00403ab0
jmp 0x403854
mov edx, dword [esi + 0xc]
mov ecx, dword [esi + 8]
push edx
push ecx
xor esi, esi
push eax
lea edx, [esp + 0x58]
push esi
push edx
call edi
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x54]
push eax
call ebp
push eax
lea ecx, [esp + 0x40]
call fcn.00419f8d
mov ebp, dword [esp + 0x40]
lea eax, [esp + 0x3c]
mov edx, dword [esp + 0x60]
lea ecx, [esp + 0x4c]
neg eax
sbb eax, eax
and eax, ebp
push eax
push ecx
push edx
call ebx
lea ecx, [esp + 0x3c]
call fcn.00419fe4
mov dword [esp + 0x5c], 0x41e954
mov eax, dword [esp + 0x8c]
mov byte [esp + 0x98], 5
cmp eax, esi
je 0x4036eb
mov ecx, dword [esp + 0x88]
mov esi, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0x7c]
mov ebx, dword [esp + 0x60]
lea eax, [esp + 0x5c]
sub ecx, esi
sub edx, edi
neg eax
sbb eax, eax
push 0xcc0020
and eax, ebx
push esi
push edi
push eax
mov eax, dword [esp + 0x88]
push ecx
push edx
push esi
mov ecx, dword [eax + 4]
push edi
push ecx
call dword [sym.imp.GDI32.dll_BitBlt]
mov edx, dword [esp + 0x74]
lea ecx, [esp + 0x5c]
push edx
call fcn.00403ab0
jmp 0x4036f3
mov dword [esp + 0x64], esi
mov dword [esp + 0x60], esi
lea ecx, [esp + 0x6c]
mov byte [esp + 0x98], 4
call fcn.00403a40
lea ecx, [esp + 0x5c]
mov byte [esp + 0x98], 0
call fcn.004199fb
mov dword [esp + 0x3c], vtable.CGdiObject.0
mov dword [esp + 0x98], 6
jmp 0x403889
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 8]
push ecx
xor ebx, ebx
push edx
push ebx
push eax
lea eax, [esp + 0x5c]
push eax
call edi
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx + 0x54]
push eax
call ebp
push eax
lea ecx, [esp + 0x40]
call fcn.00419f8d
mov ebp, dword [esp + 0x40]
lea eax, [esp + 0x3c]
neg eax
sbb eax, eax
lea edx, [esp + 0x4c]
and eax, ebp
push eax
mov eax, dword [esp + 0x64]
push edx
push eax
call dword [sym.imp.USER32.dll_FillRect]
lea ecx, [esp + 0x3c]
call fcn.00419fe4
mov dword [esp + 0x5c], 0x41e954
mov eax, dword [esp + 0x8c]
mov byte [esp + 0x98], 8
cmp eax, ebx
je 0x403806
mov ecx, dword [esp + 0x88]
mov esi, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0x7c]
mov ebp, dword [esp + 0x60]
lea eax, [esp + 0x5c]
sub ecx, esi
sub edx, edi
neg eax
sbb eax, eax
push 0xcc0020
and eax, ebp
push esi
push edi
push eax
push ecx
mov ecx, dword [esp + 0x8c]
push edx
push esi
mov edx, dword [ecx + 4]
push edi
push edx
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [esp + 0x74]
cmp eax, ebx
jne 0x4037f6
xor eax, eax
push eax
mov eax, dword [esp + 0x64]
push eax
call fcn.00419abe
jmp 0x40380e
mov eax, dword [eax + 4]
push eax
mov eax, dword [esp + 0x64]
push eax
call fcn.00419abe
jmp 0x40380e
mov dword [esp + 0x64], ebx
mov dword [esp + 0x60], ebx
lea ecx, [esp + 0x6c]
mov byte [esp + 0x98], 7
mov dword [esp + 0x6c], 0x41e9c8
call fcn.00401190
lea ecx, [esp + 0x5c]
mov byte [esp + 0x98], bl
call fcn.004199fb
mov dword [esp + 0x3c], vtable.CGdiObject.0
mov dword [esp + 0x98], 9
jmp 0x403889
mov dword [esp + 0x64], eax
mov dword [esp + 0x60], eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x98], 0xa
call fcn.00403a40
lea ecx, [esp + 0x5c]
mov byte [esp + 0x98], 0
call fcn.004199fb
mov dword [esp + 0x3c], vtable.CGdiObject.0
mov dword [esp + 0x98], 0xc
lea ecx, [esp + 0x3c]
call fcn.00419fe4
mov ecx, dword [esp + 0x90]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x8c
ret 0x10