Function at 0x439780
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x8c
push ebx
mov ebx, dword [esp + 0xa4]
push ebp
mov ebp, dword [esp + 0x98]
mov eax, dword [ebp + 0x1620]
test eax, eax
push esi
push edi
mov edi, dword [esp + 0xa4]
je 0x4397bf
mov esi, dword [esp + 0xb4]
imul eax, esi
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0x1624]
jmp 0x439803
mov esi, dword [esp + 0xb4]
lea ecx, [esp + 0x50]
push ecx
push esi
push ebx
push edi
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov eax, dword [0xd09e44]
test eax, eax
je 0x439807
mov eax, dword [ebp + 0x5dc]
test eax, eax
je 0x43a482
mov eax, dword [esp + 0x50]
mov ecx, dword [0x4c2224]
cdq
idiv ecx
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x54]
cdq
idiv ecx
mov dword [esp + 0x54], eax
mov eax, dword [ebp + 0x5dc]
test eax, eax
je 0x43a482
mov eax, dword [ebp + 0x15f8]
cmp eax, 0xffffffff
je 0x4398c2
mov edx, dword [ebp + 0x1608]
mov esi, dword [esp + 0xa8]
mov ecx, dword [ebp + 0x160c]
mov edi, dword [ebp + 0x15fc]
add esi, edx
mov edx, dword [esp + 0xac]
add edx, ecx
mov ecx, dword [ebp + 0x1610]
test ecx, ecx
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], edx
mov dword [esp + 0x20], edi
je 0x439895
push edi
push eax
call fcn.00419250
mov edi, eax
fld dword [edi + 0x24]
add esp, 8
mov dword [esp + 0x18], edi
call fcn.00408160
fld dword [edi + 0x28]
mov esi, eax
mov dword [esp + 0x1c], esi
call fcn.00408160
mov dword [esp + 0x28], eax
mov ebx, 2
jmp 0x4398d8
mov ebx, dword [eax*4 + 0x8efea0]
push edi
push ebx
mov dword [esp + 0x34], ebx
call fcn.00411360
mov esi, eax
push edi
push ebx
mov dword [esp + 0x2c], esi
call fcn.00411360
add esp, 0x10
mov dword [esp + 0x28], eax
mov ebx, 1
jmp 0x4398d8
mov esi, dword [ebp + 0x630]
mov eax, dword [ebp + 0x634]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x28], eax
xor ebx, ebx
cmp dword [ebp + 0x13c], 2
jne 0x439c21
mov edx, dword [esp + 0xa8]
mov edi, dword [esp + 0x50]
mov ecx, dword [esp + 0xac]
push eax
push esi
add edi, edx
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0x5c]
push 0
lea eax, [esp + 0x4c]
add edx, ecx
push 0
push eax
mov dword [esp + 0x58], ecx
mov dword [esp + 0x5c], edi
mov dword [esp + 0x60], edx
call fcn.0041c3a0
add esp, 0x14
test eax, eax
je 0x43a49b
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
mov edi, dword [ebp + 0x144]
sub ecx, esi
mov esi, dword [esp + 0x4c]
sub esi, edx
test ecx, ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x10], esi
jne 0x439958
test esi, esi
je 0x439c21
test edi, edi
je 0x439c21
sub ebx, 0
je 0x439bd5
dec ebx
je 0x439aad
dec ebx
jne 0x439c21
mov eax, dword [ebp + 0x63c]
mov edx, dword [ebp + 0x640]
mov ecx, dword [ebp + 0x644]
mov ebx, eax
or eax, 0xffffff00
shl edx, 8
shl eax, 8
mov dword [esp + 0x30], edx
or eax, dword [ebp + 0x640]
shl eax, 8
or eax, ecx
shl ebx, 0x10
or ebx, ecx
mov ecx, dword [esp + 0x18]
push 0
mov dword [esp + 0x3c], eax
mov eax, dword [ecx]
mov edx, dword [eax]
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x94]
push ecx
push 0
shl edi, 8
push eax
mov dword [esp + 0x50], ebx
mov dword [esp + 0x34], edi
call dword [edx + 0x4c]
xor ecx, ecx
test esi, esi
mov dword [esp + 0x14], ecx
jbe 0x439a9a
mov esi, dword [esp + 0x8c]
mov eax, dword [esp + 0x90]
imul esi, ecx
add esi, eax
mov eax, dword [esp + 0x24]
test eax, eax
jbe 0x439a89
mov dword [esp + 0x34], eax
cmp edi, 0xff00
mov ecx, dword [esi]
jne 0x439a19
mov edx, dword [esp + 0x38]
mov dword [esi], edx
jmp 0x439a77
xor edx, edx
mov eax, ecx
and eax, 0xff
or eax, edi
mov dl, byte [eax + 0x904f60]
mov edi, edx
mov edx, ecx
and edx, 0xff00ff
sub ebx, edx
imul ebx, edi
shr ebx, 8
add ebx, edx
mov edx, dword [esp + 0x30]
and ecx, 0xff00
sub edx, ecx
imul edx, edi
mov edi, dword [esp + 0x20]
shr edx, 8
add edx, ecx
xor ecx, ecx
mov cl, byte [eax + 0x8f0ea0]
and ebx, 0xff00ff
and edx, 0xff00
add ebx, edx
shl ecx, 0x18
add ebx, ecx
mov dword [esi], ebx
mov ebx, dword [esp + 0x3c]
mov eax, dword [esp + 0x34]
add esi, 4
dec eax
mov dword [esp + 0x34], eax
jne 0x439a07
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
inc ecx
cmp ecx, eax
mov dword [esp + 0x14], ecx
jb 0x4399e4
mov edx, dword [esp + 0x18]
mov eax, dword [edx]
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x50]
jmp 0x439c21
mov edx, dword [ebp + 0x640]
mov eax, dword [ebp + 0x63c]
mov ecx, dword [ebp + 0x644]
mov ebx, eax
shl edx, 0x10
shl eax, 8
mov dword [esp + 0x30], edx
or eax, dword [ebp + 0x640]
shl eax, 8
or eax, ecx
shl ebx, 0x10
shl eax, 8
or ebx, ecx
or eax, 0xff
shl edi, 8
test esi, esi
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], eax
mov dword [esp + 0x14], 0
jbe 0x439c21
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x20]
push 4
add eax, edx
mov edx, dword [esp + 0x30]
push eax
mov eax, dword [esp + 0x48]
push eax
push ecx
push edx
call fcn.004113e0
mov ecx, dword [esp + 0x38]
add esp, 0x14
test ecx, ecx
mov dword [esp + 0x34], eax
jbe 0x439bbe
mov dword [esp + 0x18], ecx
cmp edi, 0xff00
mov esi, dword [eax]
jne 0x439b48
mov ecx, dword [esp + 0x38]
mov dword [eax], ecx
jmp 0x439ba8
xor eax, eax
mov ecx, esi
and ecx, 0xff
or ecx, edi
mov al, byte [ecx + 0x904f60]
mov edx, esi
shr edx, 8
and edx, 0xff00ff
sub ebx, edx
and esi, 0xff0000
imul ebx, eax
shr ebx, 8
add ebx, edx
mov edx, dword [esp + 0x30]
sub edx, esi
imul edx, eax
xor eax, eax
mov al, byte [ecx + 0x8f0ea0]
shr edx, 8
and ebx, 0xff00ff
add edx, esi
shl ebx, 8
and edx, 0xff0000
add ebx, edx
add ebx, eax
mov eax, dword [esp + 0x34]
mov dword [eax], ebx
mov ebx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
add eax, 4
dec ecx
mov dword [esp + 0x34], eax
mov dword [esp + 0x18], ecx
jne 0x439b36
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jb 0x439b02
jmp 0x439c21
mov edx, dword [0xd0ad84]
mov eax, dword [ebp + 0x638]
push edx
xor edx, edx
mov dh, byte [ebp + 0x155]
xor ebx, ebx
mov bl, byte [ebp + 0x157]
push edi
mov dl, byte [ebp + 0x156]
shl edx, 8
or edx, ebx
push edx
push eax
imul eax, dword [esp + 0x54]
push esi
mov esi, dword [ebp + 0x62c]
push ecx
mov ecx, dword [esp + 0x58]
add eax, esi
lea ecx, [ecx + ecx*2]
add eax, ecx
push eax
call fcn.00442d60
add esp, 0x1c
mov eax, dword [esp + 0xb4]
and eax, 0x7fffffff
cmp eax, 1
jne 0x439c3f
mov edx, dword [esp + 0xb0]
movsx cx, byte [edx]
jmp 0x439c4d
mov eax, dword [esp + 0xb0]
xor ecx, ecx
mov cl, byte [eax + 1]
mov ch, byte [eax]
mov ebx, dword [ebp]
lea ebx, [ebx + ebx*8]
xor eax, eax
shl ebx, 0xc
mov dword [esp + 0x24], ecx
mov dword [esp + 0x10], eax
add ebx, 0x539d48
mov dword [esp + 0x14], eax
cmp word [ebx], cx
je 0x439c80
add ebx, 0x24
inc eax
cmp eax, 0x400
jb 0x439c6a
mov dword [esp + 0x14], eax
jmp 0x439ca0
mov ecx, dword [ebx + 0xc]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], eax
mov eax, dword [ebx + 8]
lea esi, [ebx + 0x10]
mov ecx, 5
lea edi, [esp + 0x58]
mov dword [esp + 0x10], eax
rep movsd dword es:[edi], dword [esi]
test byte [ebx + 4], 2
je 0x439ce6
mov eax, dword [ebp + 0x1610]
xor ecx, ecx
cmp eax, ecx
je 0x439d25
mov edx, dword [ebx + 0xc]
mov eax, dword [ebx + 8]
push ecx
push ecx
mov ecx, dword [esp + 0xb4]
push edx
mov edx, dword [esp + 0xb4]
push eax
mov eax, dword [ebp + 0x15fc]
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
mov ecx, dword [ebp + 0x15f8]
push edx
push eax
push ecx
call fcn.00419b80
add esp, 0x28
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x439f6f
mov eax, dword [0xd09e44]
xor edi, edi
cmp eax, edi
je 0x439dfe
mov ecx, dword [esp + 0x24]
push ecx
lea edx, [esp + 0x5c]
push edx
push ebp
call fcn.004394a0
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x64]
add esp, 0xc
mov dword [esp + 0x18], eax
jmp 0x439edd
mov eax, dword [ebx + 0xc]
mov edx, dword [ebx + 8]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x80], eax
mov eax, dword [ebp + 0x1600]
cmp eax, ecx
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 0x78], ecx
mov dword [esp + 0x7c], edx
mov dword [esp + 0x84], ecx
je 0x439d74
mov ecx, dword [ebp + 0x1604]
mov dword [esp + 0x74], eax
mov dword [esp + 0x88], ecx
jmp 0x439d85
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x74], edx
mov dword [esp + 0x88], eax
mov eax, dword [ebp + 0x15f8]
cmp eax, 0xffffffff
je 0x439db7
mov edx, dword [ebp + 0x15fc]
lea ecx, [esp + 0x6c]
push ecx
push edx
lea eax, [eax*4 + 0x8efea0]
push eax
call fcn.00411fd0
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8c
ret
mov ecx, dword [0xd0ad84]
mov edx, dword [ebp + 0x638]
mov eax, dword [ebp + 0x634]
push ecx
mov ecx, dword [ebp + 0x630]
push 0
push edx
mov edx, dword [ebp + 0x62c]
push eax
push ecx
push edx
push 0x8efea0
lea eax, [esp + 0x88]
push 1
push eax
call fcn.004444d0
add esp, 0x24
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8c
ret
lea ecx, [esp + 0x6c]
push ecx
push edi
push edi
mov eax, 1
mov word [esp + 0x7a], ax
mov word [esp + 0x86], ax
mov eax, dword [esp + 0x30]
lea edx, [esp + 0x64]
push edx
and eax, 0xffff
push 6
push eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xbc]
push eax
mov word [esp + 0x88], di
mov word [esp + 0x8c], di
mov word [esp + 0x8e], di
mov word [esp + 0x90], di
mov word [esp + 0x92], di
mov word [esp + 0x94], di
call dword [sym.imp.GDI32.dll_GetGlyphOutlineA]
mov ecx, dword [esp + 0x58]
mov esi, eax
lea eax, [ecx + 3]
and eax, 0xfffffffc
cmp esi, edi
mov dword [esp + 0x18], eax
jne 0x439e85
mov esi, dword [esp + 0x5c]
imul esi, eax
push 4
push 0x103000
push esi
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov edx, eax
cmp edx, edi
mov dword [esp + 0x10], edx
je 0x43a49b
mov edi, edx
mov ecx, esi
mov edx, ecx
shr ecx, 2
xor eax, eax
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x6c]
push eax
mov eax, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0xac]
push esi
lea edx, [esp + 0x64]
push edx
push 6
push eax
push ecx
call dword [sym.imp.GDI32.dll_GetGlyphOutlineA]
xor edi, edi
cmp dword [esp + 0x14], 0x400
jae 0x439f05
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
lea edi, [ebx + 0x10]
mov ecx, 5
lea esi, [esp + 0x58]
mov dword [ebx + 8], edx
mov dword [ebx + 0xc], eax
rep movsd dword es:[edi], dword [esi]
jmp 0x439f6f
mov eax, dword [ebp]
mov ebx, dword [eax*4 + 0x6cccc8]
shl eax, 0xa
add eax, ebx
lea ecx, [eax + eax*8]
mov eax, dword [ecx*4 + 0x53e550]
cmp eax, edi
lea esi, [ecx*4 + 0x53e548]
je 0x439f36
push 0x8000
push edi
push eax
call dword [sym.imp.KERNEL32.dll_VirtualFree]
mov ecx, dword [esp + 0x18]
mov dx, word [esp + 0x24]
mov eax, dword [esp + 0x10]
mov dword [esi + 0xc], ecx
mov word [esi], dx
mov dword [esi + 8], eax
lea edi, [esi + 0x10]
inc ebx
cmp ebx, 0x200
mov ecx, 5
lea esi, [esp + 0x58]
rep movsd dword es:[edi], dword [esi]
jbe 0x439f65
xor ebx, ebx
mov edx, dword [ebp]
mov dword [edx*4 + 0x6cccc8], ebx
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0xa8]
mov eax, dword [ebp + 0x140]
lea edi, [ecx + edx]
mov ecx, dword [esp + 0x64]
cmp ecx, 0x270f
mov dword [esp + 0x34], eax
mov dword [esp + 0x40], edi
jne 0x439fa0
mov eax, dword [esp + 0xac]
jmp 0x439faf
mov eax, dword [ebp + 0x1640]
sub eax, ecx
add eax, dword [esp + 0xac]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x5c]
lea esi, [ecx + edi]
lea ecx, [edx + eax]
mov dword [esp + 0x44], eax
mov ebx, eax
mov eax, dword [esp + 0x28]
push eax
mov dword [esp + 0x50], ecx
mov dword [esp + 0x9c], ecx
mov ecx, dword [esp + 0x20]
push ecx
push 0
lea edx, [esp + 0x4c]
push 0
push edx
mov dword [esp + 0x5c], esi
call fcn.0041c3a0
add esp, 0x14
test eax, eax
je 0x43a49b
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x98]
mov ecx, eax
sub ecx, edi
mov edi, dword [esp + 0x44]
sub edi, ebx
mov ebx, dword [esp + 0x58]
sub ebx, esi
add ebx, dword [esp + 0x48]
mov esi, dword [esp + 0x5c]
sub esi, edx
add esi, dword [esp + 0x4c]
mov edx, dword [ebp + 0x15f8]
cmp edx, 0xffffffff
mov dword [esp + 0x14], ecx
mov dword [esp + 0x24], ebx
mov dword [esp + 0xa8], eax
mov dword [esp + 0x1c], 0
je 0x43a375
mov eax, dword [ebp + 0x1610]
mov ecx, dword [ebp + 0x644]
test eax, eax
mov eax, dword [ebp + 0x63c]
mov ebx, eax
jne 0x43a1de
mov edx, dword [ebp + 0x640]
shl edx, 0x10
shl eax, 8
mov dword [esp + 0x30], edx
or eax, dword [ebp + 0x640]
shl eax, 8
or eax, ecx
shl ebx, 0x10
shl eax, 8
or ebx, ecx
or eax, 0xff
cmp edi, esi
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], eax
jae 0x43a49b
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x28], eax
mov eax, edi
imul eax, dword [esp + 0x18]
add eax, edx
add eax, ecx
sub esi, edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], esi
mov edi, eax
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0xa8]
mov eax, dword [ebp + 0x15fc]
push 4
push ecx
mov ecx, dword [ebp + 0x15f8]
push edx
mov edx, dword [ecx*4 + 0x8efea0]
push eax
push edx
call fcn.004113e0
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x38]
add esp, 0x14
cmp ecx, edx
jae 0x43a1b1
sub edx, ecx
mov dword [esp + 0x2c], edx
xor ecx, ecx
mov cl, byte [edi]
inc edi
mov dword [esp + 0x10], edi
test ecx, ecx
je 0x43a19b
mov esi, dword [eax]
mov edx, ecx
shl edx, 8
sub edx, ecx
shr edx, 6
imul edx, dword [esp + 0x34]
and edx, 0xff00
cmp edx, 0xff00
jne 0x43a139
mov ecx, dword [esp + 0x38]
mov dword [eax], ecx
jmp 0x43a19b
mov ecx, esi
and ecx, 0xff
or ecx, edx
xor edx, edx
mov dl, byte [ecx + 0x904f60]
mov edi, edx
mov edx, esi
shr edx, 8
and edx, 0xff00ff
sub ebx, edx
imul ebx, edi
shr ebx, 8
add ebx, edx
mov edx, dword [esp + 0x30]
and esi, 0xff0000
sub edx, esi
imul edx, edi
mov edi, dword [esp + 0x10]
shr edx, 8
and ebx, 0xff00ff
add edx, esi
and edx, 0xff0000
shl ebx, 8
add ebx, edx
xor edx, edx
mov dl, byte [ecx + 0x8f0ea0]
add ebx, edx
mov dword [eax], ebx
mov ebx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x2c]
add eax, 4
dec ecx
mov dword [esp + 0x2c], ecx
jne 0x43a101
mov edi, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x20]
add edi, edx
inc ecx
dec eax
mov dword [esp + 0x1c], edi
mov dword [esp + 0x28], ecx
mov dword [esp + 0x20], eax
jne 0x43a0bf
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8c
ret
shl ebx, 0x10
or ebx, ecx
mov ecx, dword [ebp + 0x640]
or eax, 0xffffff00
shl ecx, 8
shl eax, 8
mov dword [esp + 0x30], ecx
or eax, dword [ebp + 0x640]
mov ecx, dword [ebp + 0x644]
shl eax, 8
or eax, ecx
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0x15fc]
push eax
push edx
call fcn.00419250
add esp, 8
push 0
lea edx, [esp + 0x44]
push edx
lea edx, [esp + 0x94]
push edx
mov dword [esp + 0x48], eax
mov eax, dword [eax]
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x4c]
cmp edi, esi
jae 0x43a35c
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebp, edi
imul ebp, dword [esp + 0x18]
add ebp, eax
add ebp, edx
sub esi, edi
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x28], esi
jmp 0x43a265
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x8c]
imul esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x90]
mov ecx, dword [esp + 0x24]
add esi, edx
cmp eax, ecx
mov edi, ebp
jae 0x43a33a
sub ecx, eax
mov dword [esp + 0x20], ecx
xor eax, eax
mov al, byte [edi]
inc edi
mov dword [esp + 0x10], edi
test eax, eax
je 0x43a328
mov ecx, eax
shl ecx, 8
sub ecx, eax
mov edx, ecx
mov ecx, dword [esi]
shr edx, 6
imul edx, dword [esp + 0x34]
and edx, 0xff00
cmp edx, 0xff00
jne 0x43a2c8
mov edx, dword [esp + 0x38]
mov dword [esi], edx
jmp 0x43a328
mov eax, ecx
and eax, 0xff
or eax, edx
xor edx, edx
mov dl, byte [eax + 0x904f60]
mov ebp, ebx
mov edi, edx
mov edx, ecx
and edx, 0xff00ff
sub ebp, edx
imul ebp, edi
shr ebp, 8
add ebp, edx
mov edx, dword [esp + 0x30]
and ecx, 0xff00
sub edx, ecx
imul edx, edi
mov edi, dword [esp + 0x10]
shr edx, 8
add edx, ecx
xor ecx, ecx
mov cl, byte [eax + 0x8f0ea0]
and ebp, 0xff00ff
and edx, 0xff00
add ebp, edx
shl ecx, 0x18
add ebp, ecx
mov dword [esi], ebp
mov ebp, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
add esi, 4
dec eax
mov dword [esp + 0x20], eax
jne 0x43a28e
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x28]
add ebp, edx
inc ecx
dec eax
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x28], eax
jne 0x43a261
mov edx, dword [esp + 0x3c]
mov eax, dword [edx]
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x50]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8c
ret
cmp edi, esi
mov edx, dword [ebp + 0x63c]
mov dword [esp + 0x3c], edx
mov edx, dword [ebp + 0x640]
mov dword [esp + 0x30], edx
mov edx, dword [ebp + 0x644]
mov dword [esp + 0x38], edx
jae 0x43a49b
mov edx, dword [esp + 0x44]
mov dword [esp + 0x1c], edx
mov edx, edi
imul edx, dword [esp + 0x18]
lea eax, [eax + eax*2]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x10]
add edx, ecx
add edx, eax
sub esi, edi
mov dword [esp + 0x2c], esi
mov esi, dword [esp + 0x1c]
imul esi, dword [ebp + 0x638]
mov eax, dword [ebp + 0x62c]
mov edi, dword [esp + 0x28]
add esi, eax
add esi, edi
cmp ecx, ebx
mov edi, edx
jae 0x43a459
mov eax, ebx
sub eax, ecx
mov dword [esp + 0x20], eax
xor eax, eax
mov al, byte [edi]
inc edi
test eax, eax
je 0x43a44b
mov ebx, dword [esp + 0x38]
mov ecx, eax
shl ecx, 8
sub ecx, eax
mov eax, ecx
xor ecx, ecx
mov cl, byte [esi]
shr eax, 6
imul eax, dword [esp + 0x34]
sub ebx, ecx
shr eax, 8
imul ebx, eax
shr ebx, 8
add bl, cl
xor ecx, ecx
mov cl, byte [esi + 1]
mov byte [esi], bl
mov ebx, dword [esp + 0x30]
sub ebx, ecx
imul ebx, eax
shr ebx, 8
add bl, cl
xor ecx, ecx
mov cl, byte [esi + 2]
mov byte [esi + 1], bl
mov ebx, dword [esp + 0x3c]
sub ebx, ecx
imul ebx, eax
shr ebx, 8
add bl, cl
mov ecx, dword [esp + 0x14]
mov byte [esi + 2], bl
mov ebx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
add esi, 3
dec eax
mov dword [esp + 0x20], eax
jne 0x43a3e6
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x2c]
add edx, edi
inc esi
dec eax
mov dword [esp + 0x1c], esi
mov dword [esp + 0x2c], eax
jne 0x43a3bf
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8c
ret
mov edx, dword [esp + 0xac]
mov eax, dword [esp + 0xa8]
push esi
push ebx
push edx
push eax
push edi
call dword [sym.imp.GDI32.dll_TextOutA]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8c
ret