Function at 0x6b1b78
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff2c
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 4], edx
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x6b23bc
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x48]
mov eax, dword [eax + 0x1a0]
call fcn.004a48c4
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
call sub.gdi32.dll_SaveDC
mov dword [ebp - 0x10], eax
mov dl, 1
mov eax, dword [0x4a17f8]
call fcn.004a3f38
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
call fcn.004a494c
mov dl, 1
mov eax, dword [0x4a1ebc]
call fcn.004a8fcc
mov dword [ebp - 0x18], eax
mov dl, 1
mov eax, dword [0x590654]
call fcn.005971d0
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x8c]
call fcn.0048f408
dec eax
test eax, eax
jl 0x6b2377
inc eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x8c]
mov edx, dword [ebp - 0x44]
call fcn.006b0458
mov ebx, eax
test ebx, ebx
je 0x6b236b
cmp byte [ebx + 0x8c], 0
je 0x6b236b
mov eax, dword [ebx + 0xd0]
mov esi, dword [eax + 0xc]
test esi, esi
je 0x6b20b7
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x20]
test al, al
jne 0x6b20b7
mov eax, dword [ebx + 0xd0]
mov esi, dword [eax + 0xc]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 8]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 8]
cmp byte [ebx + 0x8c], 0
je 0x6b236b
cmp byte [ebx + 0x90], 0
je 0x6b1c9f
lea edx, [ebp - 0x58]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x44]
jmp 0x6b1cbc
mov eax, dword [ebx + 0x2c]
add eax, dword [ebx + 0x3c]
push eax
lea eax, [ebp - 0x58]
push eax
mov edi, dword [ebx + 0x24]
mov ecx, edi
add ecx, dword [ebx + 0x34]
mov edx, dword [ebx + 0x2c]
mov eax, edi
call fcn.0048c1d0
lea eax, [ebp - 0x58]
push eax
call sub.user32.dll_IsRectEmpty
test eax, eax
jne 0x6b236b
lea edx, [ebp - 0xb0]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x48]
mov ecx, dword [eax]
call dword [ecx + 0x44]
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x68]
push eax
call sub.user32.dll_IntersectRect
lea eax, [ebp - 0x68]
push eax
call sub.user32.dll_IsRectEmpty
test eax, eax
jne 0x6b236b
cmp byte [ebx + 0x90], 0
jne 0x6b1d23
cmp byte [ebx + 0x8e], 0
je 0x6b1d23
cmp word [ebx + 0x92], 0
jne 0x6b1d23
xor eax, eax
jmp 0x6b1d25
mov al, 1
mov byte [ebp - 0x3d], al
movzx eax, word [ebx + 0x92]
test ax, ax
je 0x6b1d46
movsx edx, word [ebx + 0x92]
push edx
push edx
lea eax, [ebp - 0x58]
push eax
call sub.user32.dll_InflateRect
cmp byte [ebx + 0x98], 0
jbe 0x6b1d84
mov eax, dword [ebx + 0xe8]
mov edx, dword [eax]
call dword [edx + 0x20]
test al, al
je 0x6b1d72
movzx edx, byte [ebx + 0x98]
lea eax, [ebx + 0xe4]
call fcn.0061ce60
jmp 0x6b1d84
movzx edx, byte [ebx + 0x98]
lea eax, [ebx + 0xe8]
call fcn.0061cef8
fld dword [ebx + 0x9c]
fcomp dword [0x6b23cc]
wait
fnstsw ax
sahf
je 0x6b2083
mov eax, dword [ebx + 0xe8]
mov edx, dword [eax]
call dword [edx + 0x20]
test al, al
je 0x6b1dbc
mov edx, dword [ebx + 0xe4]
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 8]
mov esi, dword [ebp - 0x18]
jmp 0x6b1dcd
mov edx, dword [ebx + 0xe8]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 8]
mov esi, dword [ebp - 0x1c]
mov dl, 1
mov eax, dword [0x4a1ebc]
call fcn.004a8fcc
mov dword [ebp - 0x20], eax
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x24]
push eax
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x30]
mov edx, eax
mov eax, dword [ebp - 0x20]
pop ecx
mov edi, dword [eax]
call dword [edi + 0x6c]
mov edx, esi
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
call dword [ecx + 8]
mov dl, 1
mov eax, dword [0x4a1ebc]
call fcn.004a8fcc
mov dword [ebp - 0x24], eax
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x24]
push eax
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x30]
mov edx, eax
mov eax, dword [ebp - 0x24]
pop ecx
mov edi, dword [eax]
call dword [edi + 0x6c]
fld xword [0x6b23d0]
fmul dword [ebx + 0x9c]
fdiv dword [0x6b23dc]
fstp dword [ebp - 0x28]
wait
fld dword [ebp - 0x28]
add esp, 0xfffffff4
fstp xword [esp]
wait
call fcn.00403790
fstp dword [ebp - 0x2c]
wait
fld dword [ebp - 0x28]
add esp, 0xfffffff4
fstp xword [esp]
wait
call fcn.00403780
fstp dword [ebp - 0x30]
wait
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x30]
mov dword [ebp - 0xb4], eax
fild dword [ebp - 0xb4]
fstp xword [ebp - 0xc0]
wait
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x30]
mov dword [ebp - 0xc4], eax
fild dword [ebp - 0xc4]
fmul dword [ebp - 0x30]
fld xword [ebp - 0xc0]
fsubrp st(1)
fstp xword [ebp - 0xd0]
wait
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x24]
mov dword [ebp - 0xd4], eax
fild dword [ebp - 0xd4]
fmul dword [ebp - 0x2c]
fld xword [ebp - 0xd0]
faddp st(1)
fdiv dword [0x6b23e0]
fstp dword [ebp - 0x34]
wait
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x24]
mov dword [ebp - 0xb4], eax
fild dword [ebp - 0xb4]
fstp xword [ebp - 0xc0]
wait
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x30]
mov dword [ebp - 0xc4], eax
fild dword [ebp - 0xc4]
fmul dword [ebp - 0x2c]
fld xword [ebp - 0xc0]
fsubrp st(1)
fstp xword [ebp - 0xd0]
wait
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x24]
mov dword [ebp - 0xd4], eax
fild dword [ebp - 0xd4]
fmul dword [ebp - 0x30]
fld xword [ebp - 0xd0]
fsubrp st(1)
fdiv dword [0x6b23e0]
fstp dword [ebp - 0x38]
wait
fld dword [ebp - 0x34]
call fcn.004037c4
mov dword [ebp - 0x80], eax
fld dword [ebp - 0x38]
call fcn.004037c4
mov dword [ebp - 0x7c], eax
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x30]
mov dword [ebp - 0xb4], eax
fild dword [ebp - 0xb4]
fmul dword [ebp - 0x30]
fadd dword [ebp - 0x34]
call fcn.004037c4
mov dword [ebp - 0x78], eax
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x30]
mov dword [ebp - 0xb4], eax
fild dword [ebp - 0xb4]
fmul dword [ebp - 0x2c]
fadd dword [ebp - 0x38]
call fcn.004037c4
mov dword [ebp - 0x74], eax
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x24]
mov dword [ebp - 0xb4], eax
fild dword [ebp - 0xb4]
fmul dword [ebp - 0x2c]
fsubr dword [ebp - 0x34]
call fcn.004037c4
mov dword [ebp - 0x70], eax
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x24]
mov dword [ebp - 0xb4], eax
fild dword [ebp - 0xb4]
fmul dword [ebp - 0x30]
fadd dword [ebp - 0x38]
call fcn.004037c4
mov dword [ebp - 0x6c], eax
push 0
push 0
push 0
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x24]
push eax
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x30]
push eax
push 0
push 0
mov eax, dword [ebp - 0x20]
call fcn.004a98e4
call fcn.004a48c4
push eax
lea eax, [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x24]
call fcn.004a98e4
call fcn.004a48c4
push eax
call sub.gdi32.dll_PlgBlt
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
call dword [edx + 0x20]
test al, al
jne 0x6b2052
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x128]
xor ecx, ecx
xor edx, edx
call fcn.005971b4
jmp 0x6b2073
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x20]
test al, al
jne 0x6b2073
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x18]
call fcn.004a98e4
xor ecx, ecx
xor edx, edx
call fcn.004a40e0
mov eax, dword [ebp - 0x20]
call fcn.00404700
mov eax, dword [ebp - 0x24]
call fcn.00404700
cmp byte [ebp - 0x3d], 0
je 0x6b20a0
movzx eax, byte [ebx + 0x96]
push eax
lea edx, [ebp - 0x58]
mov ecx, esi
mov eax, dword [ebp - 0x14]
call fcn.006b292c
jmp 0x6b20b7
push esi
movzx eax, byte [ebx + 0x96]
push eax
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x14]
call fcn.004a418c
cmp dword [ebx + 0x44], 0
je 0x6b236b
cmp dword [ebx + 0x70], 0
je 0x6b236b
cmp dword [ebx + 0x78], 0
je 0x6b236b
lea eax, [ebp - 4]
mov edx, dword [ebx + 0x44]
call fcn.00406e30
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [ebx + 0x84]
mov ecx, dword [eax]
call dword [ecx + 8]
mov esi, dword [0x6b23e4]
movzx eax, byte [ebx + 0x4c]
sub al, 1
jb 0x6b2107
je 0x6b2112
dec al
je 0x6b211d
jmp 0x6b2126
mov eax, dword [0x6b23e8]
or eax, esi
mov esi, eax
jmp 0x6b2126
mov eax, dword [0x6b23ec]
or eax, esi
mov esi, eax
jmp 0x6b2126
mov eax, dword [0x6b23f0]
or eax, esi
mov esi, eax
movzx eax, byte [ebx + 0x4e]
sub al, 1
jb 0x6b2136
je 0x6b2141
dec al
je 0x6b214c
jmp 0x6b2155
mov eax, dword [0x6b23f4]
or eax, esi
mov esi, eax
jmp 0x6b2155
mov eax, dword [0x6b23f8]
or eax, esi
mov esi, eax
jmp 0x6b2155
mov eax, dword [0x6b23fc]
or eax, esi
mov esi, eax
movzx eax, byte [ebx + 0x80]
sub al, 1
jb 0x6b2177
jne 0x6b2188
mov eax, dword [0x6b2400]
or eax, esi
mov edx, dword [0x6b2404]
not edx
and edx, eax
mov esi, edx
jmp 0x6b2188
mov eax, dword [0x6b2400]
not eax
and eax, esi
or eax, dword [0x6b2404]
mov esi, eax
movzx eax, byte [ebx + 0x82]
sub al, 1
jb 0x6b219f
je 0x6b21ac
dec al
je 0x6b21c2
dec al
je 0x6b21b7
jmp 0x6b21cb
mov eax, dword [0x6b2408]
not eax
and eax, esi
mov esi, eax
jmp 0x6b21cb
mov eax, dword [0x6b240c]
or eax, esi
mov esi, eax
jmp 0x6b21cb
mov eax, dword [0x6b2410]
or eax, esi
mov esi, eax
jmp 0x6b21cb
mov eax, dword [0x6b2410]
or eax, esi
mov esi, eax
mov edi, dword [ebx + 0x70]
mov eax, dword [ebx + 0x78]
mov dword [ebp - 0x3c], eax
test edi, edi
jge 0x6b21e4
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x48]
mov edi, dword [eax + 0x48]
sub edi, dword [ebx + 0x60]
cmp dword [ebp - 0x3c], 0
jge 0x6b21f9
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x48]
mov eax, dword [eax + 0x4c]
sub eax, dword [ebx + 0x68]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
lea eax, [ebp - 0x90]
push eax
mov ecx, edi
mov edx, dword [ebx + 0x68]
mov eax, dword [ebx + 0x60]
call fcn.0048c1f8
mov eax, dword [ebx + 0x58]
push eax
mov eax, dword [ebx + 0x50]
push eax
lea eax, [ebp - 0x90]
push eax
call sub.user32.dll_OffsetRect
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
mov dl, 1
call fcn.004a3ee4
push esi
lea ecx, [ebp - 4]
lea edx, [ebp - 0x90]
mov eax, dword [ebp - 0x14]
call fcn.004a45a8
push esi
lea esi, [ebp - 0x90]
lea edi, [ebp - 0xa0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop esi
mov eax, dword [0x6b2414]
or eax, esi
push eax
lea ecx, [ebp - 4]
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 0x14]
call fcn.004a45a8
mov eax, dword [ebp - 0x8c]
neg eax
push eax
mov eax, dword [ebp - 0x90]
neg eax
push eax
lea eax, [ebp - 0x90]
push eax
call sub.user32.dll_OffsetRect
mov eax, dword [ebp - 0x9c]
neg eax
push eax
mov eax, dword [ebp - 0xa0]
neg eax
push eax
lea eax, [ebp - 0xa0]
push eax
call sub.user32.dll_OffsetRect
movzx eax, byte [ebx + 0x4c]
cmp al, 2
jne 0x6b22d7
push 0
mov eax, dword [ebp - 0x88]
sub eax, dword [ebp - 0x98]
sar eax, 1
jns 0x6b22c8
adc eax, 0
push eax
lea eax, [ebp - 0xa0]
push eax
call sub.user32.dll_OffsetRect
jmp 0x6b22f6
cmp al, 1
jne 0x6b22f6
push 0
mov eax, dword [ebp - 0x88]
sub eax, dword [ebp - 0x98]
push eax
lea eax, [ebp - 0xa0]
push eax
call sub.user32.dll_OffsetRect
movzx eax, byte [ebx + 0x4e]
cmp al, 2
jne 0x6b2322
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x94]
sar eax, 1
jns 0x6b2311
adc eax, 0
push eax
push 0
lea eax, [ebp - 0xa0]
push eax
call sub.user32.dll_OffsetRect
jmp 0x6b2341
cmp al, 1
jne 0x6b2341
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x94]
push eax
push 0
lea eax, [ebp - 0xa0]
push eax
call sub.user32.dll_OffsetRect
mov eax, dword [ebx + 0x68]
add eax, dword [ebx + 0x58]
push eax
mov eax, dword [ebx + 0x60]
add eax, dword [ebx + 0x50]
push eax
lea eax, [ebp - 0xa0]
push eax
call sub.user32.dll_OffsetRect
lea esi, [ebp - 0xa0]
lea edi, [ebx + 0xf0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
inc dword [ebp - 0x44]
dec dword [ebp - 0x48]
jne 0x6b1c14
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.gdi32.dll_RestoreDC
xor edx, edx
mov eax, dword [ebp - 0x14]
call fcn.004a494c
mov eax, dword [ebp - 0x14]
call fcn.00404700
mov eax, dword [ebp - 0x18]
call fcn.00404700
mov eax, dword [ebp - 0x1c]
call fcn.00404700
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6b23c3
lea eax, [ebp - 4]
call fcn.00406dcc
ret