Function at 0x4a1ea0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x596c35
mov eax, dword fs:[0]
push eax
sub esp, 0x48
push ebx
push esi
push edi
mov eax, dword [0x5eb3c0]
xor eax, esp
push eax
lea eax, [esp + 0x58]
mov dword fs:[0], eax
mov esi, ecx
cmp dword [esi + 0x68], 4
jne 0x4a2014
cmp dword [esi + 0x6c], 0
je 0x4a1efc
mov edi, dword [ebp + 0xc]
mov eax, dword [edi]
xor ebx, ebx
cmp dword [esi + 0x70], ebx
cdq
sete bl
sub eax, edx
sar eax, 1
lea ebx, [ebx + ebx - 1]
imul ebx, dword [esi + 0x74]
add ebx, eax
jmp 0x4a1f14
cmp dword [esi + 0x70], 0
je 0x4a1f0e
mov eax, dword [ebp + 0xc]
mov ebx, dword [eax]
sub ebx, dword [esi + 0x74]
mov edi, eax
jmp 0x4a1f14
mov ebx, dword [esi + 0x74]
mov edi, dword [ebp + 0xc]
cmp dword [esi + 0x84], 0
mov dword [esp + 0x44], ebx
je 0x4a1f42
mov eax, dword [edi]
xor ecx, ecx
cmp dword [esi + 0x88], ecx
cdq
sete cl
sub eax, edx
sar eax, 1
lea ecx, [ecx + ecx - 1]
imul ecx, dword [esi + 0x8c]
add ecx, eax
jmp 0x4a1f5b
cmp dword [esi + 0x88], 0
je 0x4a1f55
mov ecx, dword [edi]
sub ecx, dword [esi + 0x8c]
jmp 0x4a1f5b
mov ecx, dword [esi + 0x8c]
cmp dword [esi + 0x78], 0
je 0x4a1f86
mov eax, dword [edi + 4]
xor ebx, ebx
cmp dword [esi + 0x7c], ebx
cdq
sete bl
sub eax, edx
sar eax, 1
lea ebx, [ebx + ebx - 1]
imul ebx, dword [esi + 0x80]
add ebx, eax
mov edx, ebx
mov ebx, dword [esp + 0x44]
jmp 0x4a1f9d
cmp dword [esi + 0x7c], 0
je 0x4a1f97
mov edx, dword [edi + 4]
sub edx, dword [esi + 0x80]
jmp 0x4a1f9d
mov edx, dword [esi + 0x80]
cmp dword [esi + 0x90], 0
mov dword [esp + 0x48], edx
je 0x4a1fe0
mov eax, dword [edi + 4]
xor ebx, ebx
cmp dword [esi + 0x94], ebx
cdq
sete bl
sub eax, edx
mov edx, dword [esp + 0x48]
sar eax, 1
lea ebx, [ebx + ebx - 1]
imul ebx, dword [esi + 0x98]
add eax, ebx
mov ebx, dword [esp + 0x44]
sub ecx, ebx
sub eax, edx
mov dword [edi], ecx
mov dword [edi + 4], eax
jmp 0x4a23fb
cmp dword [esi + 0x94], 0
je 0x4a2000
mov eax, dword [edi + 4]
sub eax, dword [esi + 0x98]
sub ecx, ebx
sub eax, edx
mov dword [edi], ecx
mov dword [edi + 4], eax
jmp 0x4a23fb
mov eax, dword [esi + 0x98]
sub ecx, ebx
sub eax, edx
mov dword [edi], ecx
mov dword [edi + 4], eax
jmp 0x4a23fb
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
mov dword [esp + 0x28], edi
xor ebx, ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x10], ebx
mov byte [esp + 0x60], 1
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0x18]
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x44], ecx
mov ecx, dword [esi + 0x20]
mov dword [esp + 0x50], ecx
mov ecx, dword [esi + 0x4c]
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], eax
call fcn.004a0d40
push edi
mov dword [esp + 0x18], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
cmp dword [ebp + 8], ebx
mov dword [esp + 0x10], eax
je 0x4a2086
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
add edx, dword [esp + 0x44]
mov eax, dword [eax + 4]
add eax, dword [esp + 0x48]
mov dword [esp + 0x4c], edx
mov dword [esp + 0x50], eax
mov eax, dword [esi + 0x58]
test eax, eax
je 0x4a2091
mov ebx, eax
jmp 0x4a20d3
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x20]
test eax, eax
je 0x4a20a0
mov ebx, eax
jmp 0x4a20d3
mov edi, esi
mov edi, dword [edi + 8]
test edi, edi
je 0x4a20d3
call fcn.004799d0
mov edi, eax
test edi, edi
je 0x4a20d3
cmp dword [edi + 0x58], 0
jne 0x4a20ed
mov ecx, dword [edi + 0x4c]
call fcn.004a0d40
cmp dword [eax + 0x20], 0
je 0x4a20a2
mov ecx, dword [edi + 0x4c]
call fcn.004a0d40
mov ebx, dword [eax + 0x20]
mov edx, dword [esi + 0x34]
and edx, 1
cmp dl, 1
jne 0x4a211f
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x24]
test eax, eax
je 0x4a20f2
mov ebx, eax
jmp 0x4a211f
mov ebx, dword [edi + 0x58]
jmp 0x4a20d3
mov edi, esi
mov edi, dword [edi + 8]
test edi, edi
je 0x4a211f
call fcn.004799d0
mov edi, eax
test edi, edi
je 0x4a211f
mov ecx, dword [edi + 0x4c]
call fcn.004a0d40
cmp dword [eax + 0x24], 0
je 0x4a20f4
mov ecx, dword [edi + 0x4c]
call fcn.004a0d40
mov ebx, dword [eax + 0x24]
test ebx, ebx
jne 0x4a218e
call fcn.004438a0
mov ecx, eax
add ecx, 0x60
xor eax, eax
xor edx, edx
div dword [ecx + 8]
mov ecx, dword [ecx]
test ecx, ecx
je 0x4a215a
mov eax, dword [ecx + edx*4]
test eax, eax
je 0x4a215a
cmp dword [eax + 0xc], 0
jne 0x4a214d
cmp word [eax], 0
je 0x4a2156
mov eax, dword [eax + 8]
test eax, eax
jne 0x4a2141
jmp 0x4a215a
test eax, eax
jne 0x4a2189
push 0
push 0
push 0
call fcn.004438a0
xor dl, dl
mov ecx, eax
call fcn.0044d800
mov edi, eax
test edi, edi
je 0x4a218c
call fcn.004438a0
mov ecx, eax
add ecx, 0x60
xor eax, eax
call fcn.004441f0
mov dword [eax], edi
jmp 0x4a218c
mov edi, dword [eax + 4]
mov ebx, edi
mov ecx, dword [esp + 0x10]
push ebx
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov edi, dword [esp + 0x14]
mov ecx, dword [edi + 0x28]
mov dword [esp + 0x24], eax
mov eax, dword [edi + 0x2c]
neg eax
push eax
neg ecx
push ecx
lea edx, [esp + 0x4c]
push edx
call dword [sym.imp.USER32.dll_InflateRect]
mov eax, dword [edi + 0x1c]
and eax, 0xfffffff0
test al, 0x10
je 0x4a21cb
mov dword [esp + 0x50], 0x7fff
mov ecx, dword [esi + 0x28]
cmp dword [ecx - 0xc], 0
je 0x4a2398
cmp dword [edi + 0x48], 0
je 0x4a2379
lea edx, [esp + 0x2c]
push edx
push 0
push 0
mov dword [esp + 0x38], 0
call sub.gdiplus.dll_GdipCreateStringFormat
mov dword [esp + 0x30], eax
mov edi, dword [esp + 0x10]
lea eax, [esp + 0x18]
push eax
push edi
mov dword [esp + 0x20], 0
call sub.gdiplus.dll_GdipCreateFromHDC
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x40], eax
mov dword [esp + 0x3c], ecx
mov ecx, ebx
push edi
lea ebx, [esp + 0x24]
mov byte [esp + 0x64], 3
call fcn.004a1ac0
mov byte [esp + 0x60], 4
mov edx, dword [esp + 0x4c]
sub edx, dword [esp + 0x44]
mov eax, dword [esp + 0x50]
sub eax, dword [esp + 0x48]
mov edi, dword [esi + 8]
mov dword [esp + 0x18], edx
fild dword [esp + 0x18]
mov dword [esp + 0x18], eax
fstp dword [esp + 0x34]
fild dword [esp + 0x18]
fstp dword [esp + 0x38]
call fcn.004799d0
test eax, eax
je 0x4a2291
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x1c]
mov edi, dword [eax + 0x18]
mov eax, dword [eax + 0x20]
sub ecx, edx
mov dword [esp + 0x18], ecx
fild dword [esp + 0x18]
sub eax, edi
mov dword [esp + 0x18], eax
fstp dword [esp + 0x34]
fild dword [esp + 0x18]
fstp dword [esp + 0x38]
mov ecx, dword [esp + 0x2c]
push 0
push ecx
call sub.gdiplus.dll_GdipSetStringFormatAlign
test eax, eax
je 0x4a22a5
mov dword [esp + 0x30], eax
mov esi, dword [esi + 0x28]
fldz
mov edx, dword [esi - 0xc]
fst dword [esp + 0x1c]
push edx
fstp dword [esp + 0x1c]
push esi
mov esi, dword [esp + 0x28]
lea eax, [esp + 0x44]
push eax
lea edi, [esp + 0x24]
lea ecx, [esp + 0x38]
lea eax, [esp + 0x40]
mov edx, esi
call fcn.004a2420
fld dword [esp + 0x18]
fld st(0)
fld st(1)
call fcn.0056e250
mov dword [esp + 0x20], eax
fisub dword [esp + 0x20]
fldz
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 5
fld1
jp 0x4a2305
fadd st(2), st(0)
fxch st(2)
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fxch st(2)
fld dword [esp + 0x1c]
fld st(0)
fld st(1)
call fcn.0056e250
mov dword [esp + 0x20], eax
fisub dword [esp + 0x20]
fcomp st(3)
fnstsw ax
fstp st(2)
test ah, 0x41
jne 0x4a2331
faddp st(1)
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
jmp 0x4a2333
fstp st(0)
fild dword [esp + 0x44]
faddp st(2)
fxch st(1)
call fcn.0056e250
fiadd dword [esp + 0x48]
mov dword [esp + 0x4c], eax
call fcn.0056e250
test esi, esi
mov dword [esp + 0x50], eax
je 0x4a2363
mov ecx, dword [esi]
push ecx
call sub.gdiplus.dll_GdipDeleteFont
push esi
call sub.gdiplus.dll_GdipFree
mov edx, dword [esp + 0x3c]
push edx
call sub.gdiplus.dll_GdipDeleteGraphics
mov eax, dword [esp + 0x2c]
push eax
call sub.gdiplus.dll_GdipDeleteStringFormat
jmp 0x4a23a8
mov esi, ecx
mov edx, dword [esi - 0xc]
or eax, 0x400
push eax
lea ecx, [esp + 0x48]
push ecx
push edx
push esi
mov esi, dword [esp + 0x20]
push esi
call dword [sym.imp.USER32.dll_DrawTextW]
jmp 0x4a23ac
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x28]
mov eax, dword [ebp + 0xc]
add edx, edx
sub edx, dword [esp + 0x44]
add edx, dword [esp + 0x4c]
mov dword [eax], edx
mov ecx, dword [ecx + 0x2c]
mov edx, dword [esp + 0x24]
add ecx, ecx
sub ecx, dword [esp + 0x48]
push edx
add ecx, dword [esp + 0x54]
push esi
mov dword [eax + 4], ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [esp + 0x28]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
test esi, esi
je 0x4a23fb
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
xor eax, eax
mov ecx, dword [esp + 0x58]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8