Function at 0x406bb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
push ebx
push esi
mov esi, eax
push edi
mov ebx, esi
mov dword [esp + 0x10], 0
call fcn.00406f30
mov edi, dword [ebp + 8]
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [esi + 0xb8], eax
test eax, eax
je 0x406e95
mov ecx, dword [ebp + 0xc]
mov dword [esi + 0x74], ecx
mov dword [esi + 0xb4], eax
cmp byte [eax], 0x47
jne 0x406c02
cmp byte [eax + 1], 0x49
jne 0x406c02
cmp byte [eax + 2], 0x46
je 0x406c3e
mov dl, 0x38
cmp byte [eax + 3], dl
jne 0x406e46
cmp byte [eax + 4], 0x37
jne 0x406e46
mov cl, 0x61
cmp byte [eax + 5], cl
jne 0x406e46
cmp byte [eax + 3], dl
jne 0x406e46
cmp byte [eax + 4], 0x39
jne 0x406e46
cmp byte [eax + 5], cl
jne 0x406e46
lea ebx, [eax + 6]
mov dword [esi + 0x80], 1
mov dword [esi + 0xbc], ebx
movzx ecx, byte [ebx + 4]
mov edx, ecx
sar edx, 7
cmp edx, 1
jne 0x406c8f
and ecx, 7
inc ecx
shl edx, cl
lea edx, [edx + edx*2]
mov dword [esi + 0x7c], edx
movzx ecx, byte [ebx + 5]
lea eax, [eax + ecx*2]
movzx edx, byte [ecx + eax + 0xe]
lea eax, [ecx + eax + 0xd]
movzx ecx, byte [eax + 2]
movzx eax, byte [eax]
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, eax
mov dword [esi + 0x6c], ecx
movzx ecx, word [ebx]
mov eax, dword [esi + 0x7c]
mov dword [esi + 0x64], ecx
movzx edx, word [ebx + 2]
add eax, 0xd
mov dword [esi + 0x78], eax
mov eax, esi
mov dword [esi + 0x68], edx
xor ebx, ebx
call fcn.00407370
test eax, eax
je 0x406cc2
mov eax, esi
inc ebx
call fcn.00407370
test eax, eax
jne 0x406cb2
test ebx, ebx
jne 0x406cde
push edi
mov dword [esi + 0xb8], 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp ebx, 1
jne 0x406d3f
push edi
mov dword [esi + 0xb8], 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
lea ecx, [esp + 0x10]
push ecx
push 0
push edi
call dword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
test eax, eax
jne 0x406e95
mov ecx, dword [esp + 0x10]
lea edx, [esi + 0xb0]
push edx
push 0x442b44
push eax
mov eax, dword [ebp + 0xc]
push eax
push ecx
call dword [sym.imp.OLEAUT32.dll_OleCreatePictureIndirect]
test eax, eax
mov eax, dword [esp + 0x10]
push eax
jne 0x406e8e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
jmp 0x406f14
mov eax, dword [esi + 0x7c]
add eax, 0xd
lea ecx, [esp + 0x34]
push ecx
mov dword [esi + 0x78], eax
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x28]
push edx
mov eax, esi
call fcn.00408360
mov ebx, eax
test ebx, ebx
je 0x406e05
mov edi, dword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
lea eax, [esp + 0x14]
push eax
push 1
push ebx
mov dword [esp + 0x20], 0
call edi
test eax, eax
je 0x406d97
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x406dd8
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x1c]
push ecx
push 0x442b44
push 0
push edx
push eax
call dword [sym.imp.OLEAUT32.dll_OleCreatePictureIndirect]
test eax, eax
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
je 0x406dc5
call edx
jmp 0x406dd8
call edx
lea eax, [esp + 0x1c]
push eax
lea ecx, [esi + 0xc0]
push ecx
call fcn.00408850
lea edx, [esp + 0x34]
push edx
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x28]
push eax
mov eax, esi
call fcn.00408360
mov ebx, eax
test ebx, ebx
jne 0x406d78
mov edi, dword [ebp + 8]
push edi
mov dword [esi + 0xb8], 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov ecx, dword [esi + 0xd0]
sub ecx, dword [esi + 0xcc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
jne 0x406f14
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push edi
mov dword [esi + 0xb8], 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
lea edx, [esp + 0x10]
push edx
push 0
push edi
call dword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
test eax, eax
jne 0x406e95
mov ecx, dword [esp + 0x10]
lea ebx, [esi + 0xb0]
push ebx
push 0x442b44
push eax
mov eax, dword [ebp + 0xc]
push eax
push ecx
call dword [sym.imp.OLEAUT32.dll_OleCreatePictureIndirect]
test eax, eax
mov eax, dword [esp + 0x10]
push eax
je 0x406ea0
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
mov eax, dword [ebx]
mov ecx, dword [eax]
lea edx, [esp + 0x18]
push edx
push eax
mov eax, dword [ecx + 0x18]
call eax
mov eax, dword [ebx]
mov ecx, dword [eax]
lea edx, [esp + 0x14]
push edx
push eax
mov eax, dword [ecx + 0x1c]
call eax
mov ecx, dword [esi + 0x20]
push ecx
call dword [sym.imp.USER32.dll_GetDC]
mov ebx, dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x9ec
mov edi, eax
push 0x58
push edi
call ebx
mov edx, dword [esp + 0x1c]
push eax
push edx
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x9ec
push 0x5a
push edi
mov dword [esi + 0x64], eax
call ebx
push eax
mov eax, dword [esp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, dword [esi + 0x20]
push edi
push ecx
mov dword [esi + 0x68], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov edx, dword [esi + 0x64]
mov ebx, dword [esi + 0x68]
push edx
call fcn.00408610
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8