Function at 0x47ecf9
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4a58a1
mov eax, dword fs:[0]
push eax
sub esp, 0x110
push ebx
push esi
push edi
mov eax, dword [0x4dc0a8]
xor eax, esp
push eax
lea eax, [esp + 0x120]
mov dword fs:[0], eax
mov dword [esp + 0x1c], ecx
push 6
xor ebx, ebx
pop ecx
xor eax, eax
mov dword [esp + 0x20], ebx
lea edi, [esp + 0x24]
rep stosd dword es:[edi], eax
lea edi, [esp + 0x3c]
call fcn.00418ba7
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x128], ebx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov esi, dword [eax + 8]
mov eax, dword [eax + 0xc]
xor edi, edi
inc edi
push edi
push ecx
sub eax, edx
mov dword [esp + 0x3c], eax
sub esi, ecx
mov eax, esp
mov dword [esp + 0x30], ecx
mov dword [esp + 0x20], esp
push eax
mov ecx, str.0_0__0__0
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], esi
call fcn.00404569
push ecx
mov byte [esp + 0x134], 1
mov eax, esp
mov dword [esp + 0x20], esp
push eax
mov ecx, 0x4aecd4
call fcn.00404569
lea ecx, [esp + 0x48]
mov byte [esp + 0x134], bl
call fcn.00418c4c
lea eax, [esp + 0x20]
push eax
push ebx
push 0x47
lea ecx, [esp + 0x48]
call fcn.0040453e
push edi
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
mov esi, 0x4af684
push eax
mov ecx, esi
call fcn.00404569
push ecx
mov byte [esp + 0x134], 2
mov eax, esp
mov dword [esp + 0x24], esp
push eax
mov ecx, str.margin_left
call fcn.00404569
lea ecx, [esp + 0x48]
mov byte [esp + 0x134], bl
call fcn.00418c4c
push edi
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push eax
mov ecx, esi
call fcn.00404569
push ecx
mov byte [esp + 0x134], 3
mov eax, esp
mov dword [esp + 0x24], esp
push eax
mov ecx, str.margin_right
call fcn.00404569
lea ecx, [esp + 0x48]
mov byte [esp + 0x134], bl
call fcn.00418c4c
push edi
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push eax
mov ecx, esi
call fcn.00404569
push ecx
mov byte [esp + 0x134], 4
mov eax, esp
mov dword [esp + 0x24], esp
push eax
mov ecx, str.margin_top
call fcn.00404569
lea ecx, [esp + 0x48]
mov byte [esp + 0x134], bl
call fcn.00418c4c
push edi
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push eax
mov ecx, esi
call fcn.00404569
push ecx
mov byte [esp + 0x134], 5
mov eax, esp
mov dword [esp + 0x24], esp
push eax
mov ecx, str.margin_bottom
call fcn.00404569
lea ecx, [esp + 0x48]
mov byte [esp + 0x134], bl
call fcn.00418c4c
mov eax, dword [esp + 0x1c]
cmp dword [eax + 0x2dc], ebx
push edi
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
push eax
je 0x47eed9
mov ecx, str.arrow_left_shadow
call fcn.00404569
mov byte [esp + 0x130], 6
jmp 0x47eeeb
mov ecx, str.arrow_right_shadow
call fcn.00404569
mov byte [esp + 0x130], 7
push ecx
mov eax, esp
mov dword [esp + 0x24], esp
push eax
mov ecx, str.skin
call fcn.00404569
lea ecx, [esp + 0x48]
mov byte [esp + 0x134], bl
call fcn.00418c4c
push ebx
push dword [ebp + 8]
lea ecx, [esp + 0x44]
push 0xf
call fcn.0040453e
or dword [esp + 0x128], 0xffffffff
mov eax, dword [esp + 0x118]
add eax, 0xfffffff0
call fcn.004012f9
lea ecx, [esp + 0x3c]
call fcn.00404d99
xor eax, eax
mov ecx, dword [esp + 0x120]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8