Function at 0x4688bc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xac
mov dword [esp + 0x18], edx
mov edx, ecx
mov edi, dword [esp + 0xcc]
mov eax, dword [0x4c1074]
xor eax, esp
xor ebx, ebx
mov ecx, edi
and ecx, 3
setne bl
inc ebx
imul ebx, dword [0x4c2d3c]
mov ecx, dword [esp + 0xc8]
mov dword [esp], ecx
shr ecx, 0x16
and cl, 1
mov dword [esp + 0xa8], eax
mov esi, ebx
shl ebx, cl
mov dword [esp + 0x1c], ebx
and edi, 3
je 0x468925
lea eax, [edx + edx]
mov ecx, dword [0x4c2d68]
cmp eax, dword [ecx + 0x12c]
jge 0x469741
lea ebx, [esp + 0xd0]
mov eax, dword [0x4c2d40]
xor ebp, ebp
bt dword [esp + 0xc8], 0x1e
jb 0x468948
mov dword [esp + 4], 0
jmp 0x468987
cmp dword [0x4c2dec], 0
je 0x468960
mov ecx, dword [0x4c2d68]
cmp byte [ecx + 0x143], 0
je 0x46893e
mov ecx, dword [0x49f838]
mov dword [ebx + 4], ecx
mov dword [ebx], ecx
mov ecx, dword [esp + 0xc8]
and ecx, 0xfecc0000
or ecx, 0x20b04
mov dword [esp], ecx
mov cl, 1
mov dword [esp + 4], ecx
imul esi, edx
mov edx, esi
mov ecx, dword [esp + 0x18]
imul ecx, eax
mov dword [esp + 0x18], ecx
xor ecx, ecx
inc ecx
mov dword [esp + 8], ecx
test edi, edi
je 0x4689ab
cmp dword [0x4c2df0], 3
je 0x4689c8
test edi, edi
je 0x4689bb
cmp edi, 1
jne 0x4689bf
mov ebp, 4
jmp 0x4689c8
mov ebp, edi
jmp 0x4689c4
mov ebp, 0xc
mov dword [esp + 8], edi
add edx, dword [0x4c2d74]
mov dword [esp + 0x20], edx
mov ecx, dword [esp + 0x18]
add ecx, dword [0x4c2d70]
mov dword [esp + 0x18], ecx
mov ebx, dword [esp]
shr ebx, 0x13
mov edi, ebx
and edi, 0x10
mov ecx, dword [esp + 0xc0]
movzx ecx, word [ecx]
mov edx, ecx
add edx, 0xffffdc46
mov dword [esp + 0xc], 0
cmp dx, 3
ja 0x468a23
add cl, 0x46
cmp cl, 3
ja case.default.0x468a16
movzx ecx, cl
jmp dword [ecx*4 + 0x4a1938]
add eax, eax
neg eax
jmp case.0x468a16.68
mov dword [esp + 0x2c], 0
jmp 0x468a75
xor edx, edx
jmp 0x468a4a
mov ecx, 0x99999999
jmp 0x468a3f
add eax, eax
mov ecx, 0x66666667
imul ecx
mov eax, edx
shr eax, 0x1f
sar edx, 1
add edx, eax
mov ecx, dword [esp + 8]
shr ecx, 1
shl edx, cl
mov dword [esp + 0x2c], edx
movzx ecx, word [0x4c291e]
mov eax, dword [esp + 0xc0]
mov word [eax], cx
and dword [esp], 0xfff7ffff
and bl, 1
mov dword [esp + 0xc], ebx
mov edx, dword [esp + 0xc4]
or ebp, edi
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x468c07
cmp edx, 2
jl 0x468ab1
mov eax, dword [esp + 0xc0]
movzx eax, word [eax + 2]
and eax, 0xfc00
cmp eax, 0xdc00
jne 0x468aba
jmp 0x468c07
cmp edx, 1
jne 0x468c07
lea eax, [edx + 7]
and eax, 0xfffffff8
lea ecx, [edx - 1]
movd xmm0, ecx
pshufd xmm0, xmm0, 0
movdqa xmm1, xmmword [0x4a15c0]
movdqa xmm2, xmmword [0x4a15d0]
xor ecx, ecx
movdqa xmm3, xmmword [0x49e860]
pxor xmm0, xmm3
pcmpeqd xmm4, xmm4
movdqa xmm5, xmmword [str._b_b_b_b]
movdqa xmm6, xmm2
pxor xmm6, xmm3
pcmpgtd xmm6, xmm0
movd edx, xmm6
not edx
test dl, 1
je 0x468b1a
mov edx, dword [esp + 0xc0]
mov word [edx + ecx*2], 0xfffd
pxor xmm6, xmm4
movdqa xmm7, xmm6
psrlq xmm7, 0x10
movd edx, xmm7
shr edx, 0x10
test dl, 1
je 0x468b41
mov edx, dword [esp + 0xc0]
mov word [edx + ecx*2 + 2], 0xfffd
pextrw edx, xmm6, 4
test dl, 1
je 0x468b59
mov edx, dword [esp + 0xc0]
mov word [edx + ecx*2 + 4], 0xfffd
pextrw edx, xmm6, 6
test dl, 1
je 0x468b71
mov edx, dword [esp + 0xc0]
mov word [edx + ecx*2 + 6], 0xfffd
movdqa xmm6, xmm1
pxor xmm6, xmm3
pcmpgtd xmm6, xmm0
pshufd xmm7, xmm6, 0x44
pxor xmm7, xmm4
pextrw edx, xmm7, 4
test dl, 1
je 0x468b9e
mov edx, dword [esp + 0xc0]
mov word [edx + ecx*2 + 8], 0xfffd
pxor xmm6, xmm4
pextrw edx, xmm6, 2
test dl, 1
je 0x468bba
mov edx, dword [esp + 0xc0]
mov word [edx + ecx*2 + 0xa], 0xfffd
pextrw edx, xmm6, 4
test dl, 1
je 0x468bd2
mov edx, dword [esp + 0xc0]
mov word [edx + ecx*2 + 0xc], 0xfffd
pextrw edx, xmm6, 7
test dl, 1
je 0x468bea
mov edx, dword [esp + 0xc0]
mov word [edx + ecx*2 + 0xe], 0xfffd
add ecx, 8
paddd xmm2, xmm5
paddd xmm1, xmm5
cmp eax, ecx
jne 0x468af6
mov eax, dword [esp + 0xc0]
movzx ecx, word [eax]
and ecx, 0xff00
mov eax, ebp
or eax, 0x20
cmp ecx, 0xdc00
cmovne eax, ebp
mov ecx, 0x1ff
mov edi, dword [esp]
mov ebp, edi
and ebp, ecx
mov esi, edi
shr esi, 9
and esi, ecx
cmp dword [0x4c2df4], 2
sete cl
mov edx, edi
shr edx, 0x12
and dl, cl
movzx ecx, dl
or ecx, eax
mov ebx, ecx
or ebx, 2
cmp byte [0x4c2df8], 0
cmove ebx, ecx
bt edi, 0x13
cmovae ebx, ecx
mov ecx, ebx
call fcn.0046975a
xor ecx, ecx
inc ecx
test bl, 2
movzx eax, byte [esp + 0xc]
cmove ecx, eax
mov edx, ebx
and edx, 0xfffffffc
cmp dword [ebx*4 + 0x4c2dfc], 0
cmovne edx, ebx
mov ebx, edx
cmovne ecx, eax
mov dword [esp + 0x50], ecx
mov ecx, edx
call fcn.0046975a
mov eax, dword [ebx*4 + 0x4c2dfc]
test eax, eax
cmove ebx, eax
bt edi, 0x14
jb 0x468cae
mov eax, ebp
mov ebp, esi
lea edi, [esp + 0xd0]
jmp 0x468cc1
lea edi, [esp + 0xd0]
mov eax, dword [edi]
mov ecx, dword [edi + 4]
mov dword [edi], ecx
mov dword [edi + 4], eax
mov eax, esi
bt dword [esp], 0x12
setae dl
mov cl, byte [0x4c2efc]
test cl, cl
sete ch
or ch, dl
mov edx, dword [esp + 4]
or dl, ch
jne 0x468cf4
cmp eax, 0xf
ja 0x468ce8
or eax, 8
jmp 0x468cf4
xor edx, edx
cmp eax, 0xff
seta dl
or eax, edx
bt dword [esp], 0x15
jae 0x468d16
test cl, cl
je 0x468d16
cmp ebp, 0xf
ja 0x468d09
or ebp, 8
jmp 0x468d16
xor ecx, ecx
cmp ebp, 0xff
seta cl
or ebp, ecx
mov ecx, dword [0x4c2da4]
test ecx, ecx
je 0x468d30
mov edx, dword [eax*4 + 0x4c2f00]
mov esi, dword [ebp*4 + 0x4c2f00]
jmp 0x468d5e
cmp byte [edi], 0
je 0x468d44
movzx eax, word [edi + 1]
movzx edx, byte [edi + 3]
shl edx, 0x10
or edx, eax
jmp 0x468d4b
mov edx, dword [eax*4 + 0x4c2f00]
cmp byte [edi + 4], 0
je 0x468d27
movzx eax, word [edi + 5]
movzx esi, byte [edi + 7]
shl esi, 0x10
or esi, eax
bt dword [esp], 0x18
jae 0x468dad
test ecx, ecx
jne 0x468dad
movzx eax, dl
add eax, eax
imul eax, eax, 0xaaab
shr eax, 0x11
mov ecx, edx
shr ecx, 7
mov edi, edx
mov edx, 0x1fe
and ecx, edx
imul ecx, ecx, 0xaaab
shr ecx, 9
and ecx, 0xff00
or ecx, eax
shr edi, 0xf
and edi, edx
imul edi, edi, 0xaaab
shr edi, 1
and edi, 0xff0000
or edi, ecx
jmp 0x468daf
mov edi, edx
push dword [ebx*4 + 0x4c2dfc]
push dword [0x4c2de0]
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x40], edi
push edi
push dword [0x4c2de0]
call dword [sym.imp.GDI32.dll_SetTextColor]
push esi
push dword [0x4c2de0]
call dword [sym.imp.GDI32.dll_SetBkColor]
mov eax, dword [esp]
sar eax, 0x1f
add eax, 2
push eax
push dword [0x4c2de0]
call dword [sym.imp.GDI32.dll_SetBkMode]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x78], ecx
mov eax, dword [0x4c2d40]
add eax, ecx
mov dword [esp + 0x80], eax
mov esi, dword [esp + 0xc4]
test esi, esi
jle 0x468ec3
xor ecx, ecx
xor eax, eax
xor edx, edx
mov ebp, dword [esp + 0xc0]
mov ebx, esi
lea esi, [edx + 1]
movzx edi, word [ebp + edx*2]
cmp esi, ebx
jge 0x468e8a
movzx ebx, di
cmp ebx, 0xdb40
jne 0x468e61
movzx ebx, word [ebp + edx*2 + 2]
add ebx, 0x2300
movzx ebx, bx
cmp ebx, 0xf0
jae 0x468e71
jmp 0x468ead
mov ebx, edi
and ebx, 0xfc00
cmp ebx, 0xd800
jne 0x468e8a
movzx ebx, word [ebp + edx*2 + 2]
and ebx, 0xfc00
cmp ebx, 0xdc00
jne 0x468e8a
add eax, dword [esp + 0x1c]
jmp 0x468ead
lea esi, [edi - 0x180b]
cmp si, 3
jb 0x468eab
and edi, 0xfff0
cmp edi, 0xfe00
mov esi, dword [esp + 0x1c]
cmove esi, ecx
add eax, esi
mov esi, edx
inc esi
mov edx, esi
mov edi, dword [esp + 0xc4]
cmp esi, edi
mov esi, edi
jl 0x468e30
jmp 0x468ecc
xor eax, eax
mov ebp, dword [esp + 0xc0]
add eax, dword [esp + 0x20]
mov dword [esp + 0x7c], eax
mov ecx, dword [0x4c2d68]
mov ecx, dword [ecx + 0x12c]
imul ecx, dword [0x4c2d3c]
add ecx, dword [0x4c2d74]
cmp eax, ecx
jle 0x468ef5
mov dword [esp + 0x7c], ecx
cmp byte [0x4c3318], 1
jne 0x468f2e
mov eax, dword [esp + 0x1c]
mov ecx, eax
shr ecx, 0x1f
add ecx, eax
sar ecx, 1
mov dword [esp + 0x28], ecx
push 6
push dword [0x4c2de0]
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov dword [esp + 0x10], 0
xor eax, eax
inc eax
mov dword [esp + 0x44], eax
jmp 0x468f51
push 0
push dword [0x4c2de0]
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov dword [esp + 0x28], 0
mov eax, dword [0x4c2de4]
mov dword [esp + 0x10], eax
mov dword [esp + 0x44], esi
test esi, esi
jle 0x4696c4
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x2c]
add eax, ecx
mov dword [esp + 0x24], eax
mov al, 1
mov dword [esp + 4], eax
mov eax, dword [esp + 0x44]
cmp eax, esi
mov ecx, esi
cmovl ecx, eax
mov ebx, ecx
cmp eax, 1
jne 0x468ffb
movzx eax, word [ebp]
and eax, 0xfc00
mov ebx, ecx
cmp eax, 0xd800
jne 0x468fa6
movzx eax, word [ebp + 2]
and eax, 0xfc00
xor ebx, ebx
cmp eax, 0xdc00
sete bl
add ebx, ecx
mov eax, esi
sub eax, ebx
jle 0x468ffb
mov edi, ecx
movzx ecx, word [ebp + ebx*2]
lea edx, [ecx - 0x180b]
cmp dx, 3
jb 0x468ff8
mov edx, ecx
and edx, 0xfffffff0
movzx edx, dx
cmp edx, 0xfe00
je 0x468ff8
cmp eax, 2
jl 0x468ff9
movzx eax, cx
cmp eax, 0xdb40
jne 0x468ff9
movzx eax, word [ebp + ebx*2 + 2]
add eax, 0x2300
movzx eax, ax
lea ecx, [ebx + 2]
cmp eax, 0xf0
cmovb ebx, ecx
jmp 0x468ff9
inc ebx
mov ecx, edi
cmp ebx, dword [0x4c2de8]
mov dword [esp + 0x5c], esi
mov dword [esp + 0x58], ecx
jbe 0x469037
push 0
push 1
push ebx
push 4
push 0x4c2de8
push dword [0x4c2de4]
call fcn.00411651
add esp, 0x18
mov dword [0x4c2de4], eax
mov ecx, dword [esp + 0x10]
test ecx, ecx
cmovne ecx, eax
mov dword [esp + 0x10], ecx
test ebx, ebx
mov dword [esp + 0x14], ebp
mov dword [esp + 0xc], ebx
jle 0x469116
xor ecx, ecx
mov eax, dword [0x4c2de4]
lea edx, [eax + ecx*4]
mov esi, dword [esp + 0x1c]
mov dword [edx], esi
lea esi, [ecx + 1]
movzx edi, word [ebp + ecx*2]
cmp esi, ebx
jge 0x4690da
movzx ebp, di
cmp ebp, 0xdb40
jne 0x46909c
mov ebx, dword [esp + 0x14]
movzx ebp, word [ebx + ecx*2 + 2]
add ebp, 0x2300
movzx ebp, bp
cmp ebp, 0xef
mov ebp, ebx
mov ebx, dword [esp + 0xc]
ja 0x4690b0
test ecx, ecx
jle 0x4690cf
mov dword [eax + ecx*4 - 4], 0
jmp 0x4690cf
mov ebp, edi
and ebp, 0xfc00
cmp ebp, 0xd800
mov ebp, dword [esp + 0x14]
jne 0x4690da
mov ebx, dword [esp + 0x14]
movzx ebp, word [ebx + ecx*2 + 2]
mov ebx, dword [esp + 0xc]
and ebp, 0xfc00
cmp ebp, 0xdc00
mov ebp, dword [esp + 0x14]
jne 0x4690da
mov dword [edx], 0
lea edx, [eax + esi*4]
jmp 0x469105
lea esi, [edi - 0x180b]
cmp si, 3
jb 0x4690f7
and edi, 0xfff0
movzx esi, di
cmp esi, 0xfe00
jne 0x46910d
test ecx, ecx
jle 0x469103
mov dword [eax + ecx*4 - 4], 0
mov esi, ecx
mov ecx, dword [esp + 0x1c]
mov dword [edx], ecx
mov ecx, esi
inc ecx
cmp ecx, ebx
jl 0x46904e
movzx eax, word [ebp]
cmp byte [0x4c2230], 0
je 0x46922d
mov ecx, eax
and ecx, 0xff00
movzx ecx, cx
cmp ecx, 0xdd00
jne 0x46922d
cmp ebx, dword [0x4c3320]
jle 0x46916c
push dword [0x4c331c]
call fcn.00411645
add esp, 4
mov dword [0x4c3320], ebx
push 0
push 2
push ebx
call fcn.004115d0
add esp, 0xc
mov dword [0x4c331c], eax
test ebx, ebx
jle 0x469741
xor edi, edi
xor ebp, ebp
xor esi, esi
mov eax, dword [0x4c331c]
mov word [eax + esi*2], 0xfffd
mov ebx, dword [esp + 0x14]
movzx eax, byte [ebx + ebp*2]
push eax
push dword [0x4c2234]
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
test eax, eax
je 0x4691ce
mov al, byte [ebx + ebp*2]
mov byte [esp + 0x84], al
mov al, byte [ebx + ebp*2 + 2]
mov byte [esp + 0x85], al
mov eax, dword [0x4c2de4]
mov ecx, dword [esp + 0x1c]
add dword [eax + esi*4], ecx
inc ebp
mov eax, dword [0x4c331c]
add eax, edi
push 1
push eax
push 2
jmp 0x4691e5
mov al, byte [ebx + ebp*2]
mov byte [esp + 0x84], al
mov eax, dword [0x4c331c]
add eax, edi
xor ecx, ecx
inc ecx
push ecx
push eax
push ecx
lea eax, [esp + 0x90]
push eax
push 4
push dword [0x4c2234]
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
inc esi
inc ebp
add edi, 2
cmp ebp, dword [esp + 0xc]
jl 0x46917a
movzx ecx, byte [esp + 4]
and ecx, 1
mov eax, dword [0x4c331c]
cmp dword [esp + 8], 3
jne 0x4695fa
mov edx, dword [0x4c2d40]
jmp 0x4695fc
and eax, 0xfe00
cmp eax, 0xdc00
jne 0x46931b
push 0
xor eax, eax
inc eax
push eax
push ebx
push eax
push 0x4c3328
push dword [0x4c3324]
call fcn.00411651
add esp, 0x18
mov dword [0x4c3324], eax
test ebx, ebx
je 0x46926f
xor ecx, ecx
mov dl, byte [ebp + ecx*2]
mov byte [eax + ecx], dl
inc ecx
cmp ebx, ecx
jne 0x469263
movzx ecx, byte [esp + 4]
and ecx, 1
xor edx, edx
cmp dword [esp + 8], 3
jne 0x469286
mov edx, dword [0x4c2d40]
add ecx, ecx
add ecx, 4
mov edi, dword [esp + 0x24]
sub edi, edx
mov edx, dword [esp + 0x20]
mov esi, dword [esp + 0x28]
add esi, edx
push dword [esp + 0x10]
push ebx
push eax
lea eax, [esp + 0x80]
push eax
push ecx
push edi
push esi
push dword [0x4c2de0]
call dword [sym.imp.GDI32.dll_ExtTextOutA]
bt dword [esp], 0x12
jae 0x469697
cmp dword [0x4c2df4], 1
jne 0x469697
push 1
push dword [0x4c2de0]
call dword [sym.imp.GDI32.dll_SetBkMode]
xor eax, eax
cmp dword [esp + 8], 3
jne 0x4692ec
mov eax, dword [0x4c2d40]
mov ecx, dword [esp + 0x24]
sub ecx, eax
dec esi
push dword [esp + 0x10]
push ebx
push dword [0x4c3324]
lea eax, [esp + 0x80]
push eax
push 4
push ecx
push esi
push dword [0x4c2de0]
call dword [sym.imp.GDI32.dll_ExtTextOutA]
jmp 0x469697
cmp dword [0x4c3330], ebx
jge 0x469349
push dword [0x4c332c]
call fcn.00411645
add esp, 4
mov dword [0x4c3330], ebx
push 0
push 2
push ebx
call fcn.004115d0
add esp, 0xc
mov dword [0x4c332c], eax
mov edi, dword [0x4c332c]
test ebx, ebx
jle 0x469363
xor eax, eax
movzx ecx, word [ebp + eax*2]
mov word [edi + eax*2], cx
inc eax
cmp ebx, eax
jne 0x469355
xor eax, eax
cmp dword [esp + 8], 3
jne 0x469371
mov eax, dword [0x4c2d40]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
lea esi, [ecx + edx]
test ebx, ebx
jle 0x469597
mov dword [esp + 0x34], edi
mov ecx, dword [esp + 0x18]
sub ecx, eax
add ecx, dword [esp + 0x2c]
mov dword [esp + 0x48], ecx
mov eax, dword [0x4c2de4]
mov dword [esp + 0x3c], eax
mov eax, dword [0x4c2de0]
mov dword [esp + 0x30], eax
cmp dword [esp], 0
setns al
and al, byte [esp + 4]
xor ecx, ecx
mov dword [esp + 0x54], esi
mov ebp, esi
mov edi, ebx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x38], ebp
mov eax, dword [esp + 0x34]
movzx eax, word [eax + ecx*2]
push eax
mov ebx, ecx
call fcn.0041176c
mov ecx, dword [esp + 0x3c]
add esp, 4
mov byte [esp + 4], al
mov eax, dword [esp + 0x3c]
mov ebp, dword [eax + ebx*4]
add ebp, ecx
mov esi, ebx
inc ebx
cmp ebx, edi
jge 0x46941d
mov edi, dword [esp + 0x34]
movzx eax, word [edi + ebx*2]
push eax
call fcn.0041176c
add esp, 4
cmp byte [esp + 4], al
jne 0x469419
mov eax, dword [esp + 0x3c]
add ebp, dword [eax + ebx*4]
inc ebx
cmp dword [esp + 0xc], ebx
jne 0x4693f4
mov ebx, dword [esp + 0xc]
xor eax, eax
jmp 0x469423
xor eax, eax
mov edi, dword [esp + 0x34]
mov ecx, dword [esp + 0x3c]
mov edx, esi
lea ecx, [ecx + esi*4]
cmp byte [0x4c3318], 0
cmovne ecx, eax
mov esi, ebx
sub esi, edx
lea edi, [edi + edx*2]
cmp byte [esp + 4], 0
je 0x469534
lea edx, [esi + esi]
add edx, 2
mov dword [esp + 0x68], edx
push eax
xor eax, eax
inc eax
push eax
push edx
mov dword [esp + 0x7c], ecx
call fcn.004115d0
add esp, 0xc
mov dword [esp + 4], eax
xor eax, eax
push eax
xor eax, eax
inc eax
push eax
push esi
mov dword [esp + 0x6c], esi
call fcn.004115d0
add esp, 0xc
mov dword [esp + 0x6c], edi
mov dword [esp + 0x64], eax
lea eax, [esp + 0x88]
pxor xmm0, xmm0
movdqu xmmword [eax], xmm0
movdqu xmmword [eax + 0x10], xmm0
push dword [esp + 0x68]
xor eax, eax
push eax
mov edi, dword [esp + 0xc]
push edi
call fcn.00478b20
add esp, 0xc
push esi
push 3
mov esi, dword [esp + 0x6c]
push esi
call fcn.00478b20
add esp, 0xc
mov dword [esp + 0x84], 0x24
mov dword [esp + 0x9c], edi
mov dword [esp + 0x98], esi
mov ecx, dword [esp + 0x60]
mov dword [esp + 0xa0], ecx
push 0x8113b
lea eax, [esp + 0x88]
push eax
xor eax, eax
push eax
push ecx
mov esi, ecx
push dword [esp + 0x7c]
mov edi, dword [esp + 0x44]
push edi
call dword [sym.imp.GDI32.dll_GetCharacterPlacementW]
movzx eax, byte [esp + 0x4c]
xor ecx, ecx
inc ecx
and eax, ecx
add eax, eax
add eax, 0x14
push dword [esp + 0x70]
push esi
push dword [esp + 0xc]
lea ecx, [esp + 0x80]
push ecx
push eax
push dword [esp + 0x5c]
push dword [esp + 0x50]
push edi
call dword [sym.imp.GDI32.dll_ExtTextOutA]
jmp 0x469560
movzx eax, byte [esp + 0x4c]
and eax, 1
add eax, eax
add eax, 4
push ecx
push esi
push edi
lea ecx, [esp + 0x80]
push ecx
push eax
push dword [esp + 0x5c]
push dword [esp + 0x50]
mov edi, dword [esp + 0x4c]
push edi
call dword [sym.imp.GDI32.dll_ExtTextOutW]
push edi
call dword [sym.imp.GDI32.dll_GetBkMode]
mov esi, eax
push 1
push edi
call dword [sym.imp.GDI32.dll_SetBkMode]
xor eax, eax
mov ecx, ebx
mov edi, dword [esp + 0xc]
cmp ebx, edi
jl 0x4693bd
push esi
push dword [esp + 0x34]
call dword [sym.imp.GDI32.dll_SetBkMode]
mov ebp, dword [esp + 0x14]
mov ebx, edi
mov esi, dword [esp + 0x54]
bt dword [esp], 0x12
jae 0x469697
cmp dword [0x4c2df4], 1
jne 0x469697
push 1
push dword [0x4c2de0]
call dword [sym.imp.GDI32.dll_SetBkMode]
xor eax, eax
cmp dword [esp + 8], 3
jne 0x4695cb
mov eax, dword [0x4c2d40]
mov ecx, dword [esp + 0x24]
sub ecx, eax
dec esi
push dword [esp + 0x10]
push ebx
push dword [0x4c332c]
lea eax, [esp + 0x80]
push eax
push 4
push ecx
push esi
push dword [0x4c2de0]
call dword [sym.imp.GDI32.dll_ExtTextOutW]
jmp 0x469697
xor edx, edx
mov ebp, dword [esp + 0x14]
add ecx, ecx
add ecx, 4
mov ebx, dword [esp + 0x24]
sub ebx, edx
mov edx, dword [esp + 0x20]
mov edi, dword [esp + 0x28]
add edi, edx
push dword [esp + 0x10]
push esi
push eax
lea eax, [esp + 0x80]
push eax
push ecx
push ebx
push edi
push dword [0x4c2de0]
call dword [sym.imp.GDI32.dll_ExtTextOutW]
bt dword [esp], 0x12
mov ebx, dword [esp + 0xc]
jae 0x46968c
cmp dword [0x4c2df4], 1
jne 0x46968c
push 1
push dword [0x4c2de0]
call dword [sym.imp.GDI32.dll_SetBkMode]
xor eax, eax
cmp dword [esp + 8], 3
jne 0x469662
mov eax, dword [0x4c2d40]
mov ecx, dword [esp + 0x24]
sub ecx, eax
dec edi
push dword [esp + 0x10]
push esi
push dword [0x4c331c]
lea eax, [esp + 0x80]
push eax
push 4
push ecx
push edi
push dword [0x4c2de0]
call dword [sym.imp.GDI32.dll_ExtTextOutW]
mov eax, dword [0x4c2de4]
mov dword [eax], 0xffffffff
push 1
push dword [0x4c2de0]
call dword [sym.imp.GDI32.dll_SetBkMode]
lea ebp, [ebp + ebx*2]
mov eax, dword [esp + 0x58]
imul eax, dword [esp + 0x1c]
add dword [esp + 0x20], eax
xor eax, eax
mov esi, dword [esp + 0x5c]
sub esi, ebx
jg 0x468f69
cmp dword [esp + 8], 2
je 0x46970f
bt dword [esp], 0x13
setae al
cmp byte [esp + 0x50], 0
jne 0x4696e4
or al, byte [0x4c2df8]
test al, 1
jne 0x46970f
mov ecx, dword [0x4c3334]
mov edx, dword [esp + 8]
push dword [esp + 0x40]
push dword [esp + 0x80]
push dword [esp + 0x80]
push dword [esp + 0x80]
call fcn.00469869
add esp, 0x10
bt dword [esp], 0x19
jae 0x469741
mov ecx, dword [0x4c3338]
mov edx, dword [esp + 8]
push dword [esp + 0x40]
push dword [esp + 0x80]
push dword [esp + 0x80]
push dword [esp + 0x80]
call fcn.00469869
add esp, 0x10
mov ecx, dword [esp + 0xa8]
xor ecx, esp
call fcn.00475526
add esp, 0xac
pop esi
pop edi
pop ebx
pop ebp
ret