Function at 0x498e30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x645f60
mov eax, dword fs:[0]
push eax
sub esp, 0x58
push ebx
push esi
push edi
mov eax, dword [0x74f8a0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x18], edi
mov dword [ebp - 4], 0
wait
mov esi, dword [ebp + 8]
push esi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov ebx, eax
mov dword [ebp - 0x20], ebx
cmp byte [edi + 0xc], 0
jne 0x498eb4
mov eax, dword [edi + 0x238]
push eax
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x1c], eax
mov eax, dword [edi + 0x2c]
push 0xcc0020
push eax
push 1
push 0
push 0
push ebx
push eax
mov ecx, dword [edi + 0x28]
push ecx
push 0
push 1
push esi
call dword [sym.imp.GDI32.dll_StretchBlt]
mov edx, dword [ebp - 0x1c]
push edx
jmp 0x498ee9
mov eax, dword [edi + 0x248]
push eax
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x1c], eax
push 0xcc0020
push 0
push 0
push ebx
mov ecx, dword [edi + 0x2c]
push ecx
mov edx, dword [edi + 0x28]
add edx, 2
push edx
push 0
push 0
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [ebp - 0x1c]
push eax
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [edi + 0x244]
push ecx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x14], eax
push 0xcc0020
push 0
push 0
push ebx
mov edx, dword [edi + 0x2c]
push edx
push 1
push 0
push 0
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
push 0xcc0020
push 0
push 0
push ebx
mov eax, dword [edi + 0x2c]
push eax
push 1
push 0
mov ecx, dword [edi + 0x28]
inc ecx
push ecx
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
mov edx, dword [ebp - 0x14]
push edx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [edi + 0x24c]
mov eax, dword [eax + 0x940]
test eax, eax
je 0x49935a
mov ecx, dword [edi + 0x230]
or ecx, dword [edi + 0x234]
je 0x49935a
mov esi, dword [eax + 0xb0]
fld qword [0x67e780]
test esi, esi
je 0x499335
mov edx, dword [edi + 0x24c]
mov eax, dword [edx + 0x44]
cmp eax, 4
je 0x49927c
cmp eax, 5
je 0x49927c
cmp dword [edx + 0x340], 0
je 0x4991da
cmp dword [edx + 0x114], 0
jl 0x499018
jg 0x498fbb
cmp dword [edx + 0x110], 0
jbe 0x499018
fstp st(0)
mov ebx, dword [esi + 0x38]
mov edi, dword [esi + 0x3c]
mov eax, ebx
mov dword [ebp - 0x3c], eax
mov ecx, edi
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ecx
cmp dword [esi + 0x14], 0
je 0x499004
cmp dword [esi + 0x58], 0
je 0x498ff6
mov eax, dword [esi + 0x58]
mov ebx, dword [eax + 0x38]
mov dword [ebp - 0x2c], ebx
mov edi, dword [eax + 0x3c]
mov dword [ebp - 0x28], edi
jmp 0x499047
mov ebx, dword [esi + 0x40]
mov dword [ebp - 0x2c], ebx
mov edi, dword [esi + 0x44]
mov dword [ebp - 0x28], edi
jmp 0x499047
mov eax, dword [esi]
mov edx, dword [eax + 0x78]
add ebx, edx
mov dword [ebp - 0x2c], ebx
mov eax, dword [eax + 0x7c]
adc edi, eax
mov dword [ebp - 0x28], edi
jmp 0x499047
mov ebx, dword [esi + 0x1c]
xor edi, edi
mov eax, ebx
mov dword [ebp - 0x3c], eax
mov ecx, edi
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ecx
cmp dword [esi + 0x14], edi
je 0x49918b
mov ebx, dword [esi + 0x20]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], edi
fstp st(0)
mov eax, dword [ebp - 0x38]
cmp eax, edi
jl 0x499060
jg 0x499055
cmp dword [ebp - 0x3c], ebx
jbe 0x499060
mov ebx, dword [ebp - 0x3c]
mov dword [ebp - 0x2c], ebx
mov edi, eax
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x28]
cdq
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
mov ecx, dword [ebp - 0x18]
fild qword [ecx + 0x230]
fstp dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x38]
push ecx
mov ecx, dword [ebp - 0x3c]
push ecx
push edx
push eax
call fcn.0061cd30
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], edx
fild qword [ebp - 0x54]
fld dword [ebp - 0x1c]
fld st(0)
fdivp st(2)
fxch st(1)
call fcn.0061a2e0
mov dword [ebp - 0x1c], eax
push edi
push ebx
mov edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x44]
push eax
call fcn.0061cd30
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], edx
fild qword [ebp - 0x5c]
fdivrp st(1)
call fcn.0061a2e0
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0x240]
push ecx
mov edi, dword [ebp - 0x20]
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x2c]
push 0xcc0020
push eax
push 1
push 0
push 0
push edi
push eax
mov edx, dword [ebp - 0x24]
push edx
push 0
mov eax, dword [ebp - 0x1c]
inc eax
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.GDI32.dll_StretchBlt]
mov edx, dword [ebp - 0x14]
push edx
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
cmp dword [esi + 0x14], 0
jne 0x49917e
mov eax, dword [ebx + 0x28]
cdq
mov ecx, dword [ebp - 0x30]
push ecx
mov ecx, dword [ebp - 0x34]
push ecx
push edx
push eax
call fcn.0061cd30
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], edx
fild qword [ebp - 0x64]
fild qword [ebx + 0x230]
fdivp st(1)
call fcn.0061a2e0
mov dword [ebp - 0x1c], eax
mov edx, dword [ebx + 0x23c]
push edx
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x14], eax
push 0xcc0020
push 0
push 0
push edi
mov eax, dword [ebx + 0x2c]
push eax
push 1
push 0
mov ecx, dword [ebp - 0x1c]
inc ecx
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [ebp - 0x14]
push eax
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov esi, dword [esi + 0x58]
mov edi, ebx
mov ebx, dword [ebp - 0x20]
jmp 0x498f71
cmp dword [esi], 0
je 0x499045
mov ecx, dword [esi]
mov eax, dword [ecx + 0x70]
mov ecx, dword [ecx + 0x74]
mov edx, eax
or edx, ecx
je 0x499045
mov edx, dword [esi]
fild qword [edx + 0x78]
fld qword [edx + 0xf0]
fmulp st(2)
fmulp st(1)
add eax, 1
adc ecx, 0
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], ecx
fild qword [ebp - 0x4c]
fdivp st(1)
call fcn.0061a316
add ebx, eax
mov dword [ebp - 0x2c], ebx
adc edi, edx
mov dword [ebp - 0x28], edi
jmp 0x499047
fstp st(0)
mov ebx, dword [esi + 8]
mov edi, dword [esi + 0xc]
mov eax, ebx
mov dword [ebp - 0x3c], eax
mov ecx, edi
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], edi
cmp dword [esi + 0x14], 0
je 0x499250
cmp dword [esi + 0x58], 0
je 0x499218
mov eax, dword [esi + 0x58]
mov ebx, dword [eax + 8]
mov dword [ebp - 0x2c], ebx
mov edi, dword [eax + 0xc]
mov dword [ebp - 0x28], edi
jmp 0x499047
mov ebx, dword [edx + 0x4f0]
mov edi, dword [edx + 0x4f4]
test edi, edi
jl 0x499239
jg 0x49922e
test ebx, ebx
jbe 0x499239
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], edi
jmp 0x499047
mov ebx, dword [edx + 0x110]
mov dword [ebp - 0x2c], ebx
mov edi, dword [edx + 0x114]
mov dword [ebp - 0x28], edi
jmp 0x499047
cmp dword [esi], 0
je 0x499047
mov eax, dword [esi]
mov ecx, dword [eax + 0x60]
mov edx, dword [eax + 0x64]
mov ebx, dword [eax + 0x78]
add ebx, ecx
mov dword [ebp - 0x2c], ebx
mov edi, dword [eax + 0x7c]
adc edi, edx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], edx
jmp 0x499047
mov ebx, dword [esi + 0x1c]
xor edi, edi
mov eax, ebx
mov dword [ebp - 0x3c], eax
mov ecx, edi
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ecx
cmp dword [esi + 0x14], edi
je 0x4992bc
cmp dword [esi + 0x58], edi
je 0x4992ab
fstp st(0)
mov eax, dword [esi + 0x58]
mov ebx, dword [eax + 0x1c]
jmp 0x4992fd
fmul qword [edx + 0x3c8]
call fcn.0061a316
mov ebx, eax
mov edi, edx
jmp 0x4992ff
fstp st(0)
cmp dword [esi], 0
je 0x499305
mov eax, dword [esi]
mov ecx, dword [eax + 0xe8]
mov edx, dword [eax + 0xe0]
lea ebx, [ecx + edx]
xor edi, edi
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], edi
cmp byte [eax + 0xdd], 0
jne 0x4992ff
cmp dword [eax + 0x64], edi
jl 0x4992ff
jg 0x4992f1
cmp dword [eax + 0x60], edi
jb 0x4992ff
mov eax, dword [eax + 0xe4]
cmp eax, ebx
jbe 0x4992fd
mov ebx, eax
xor edi, edi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x230]
mov eax, dword [eax + 0x234]
cmp edi, eax
jl 0x499047
jg 0x499326
cmp ebx, ecx
jbe 0x499047
mov ebx, ecx
mov dword [ebp - 0x2c], ebx
mov edi, eax
mov dword [ebp - 0x28], edi
jmp 0x499047
fstp st(0)
push ebx
call dword [sym.imp.GDI32.dll_DeleteDC]
wait
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push ebx
call dword [sym.imp.GDI32.dll_DeleteDC]
wait
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4