Function at 0x4751d0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x138
mov eax, dword [0x4b33f0]
mov dword [ebp - 4], eax
push esi
push edi
mov dword [ebp - 0x124], ecx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x64], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x5c], edx
call dword [sym.imp.PlatformData.dll_public:_static_class_CGlobalUserInfo____cdecl_CGlobalUserInfo::GetInstance_void_]
mov dword [ebp - 0x54], eax
call dword [sym.imp.PlatformData.dll_public:_static_class_CParameterGlobal____cdecl_CParameterGlobal::GetInstance_void_]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x54]
call dword [sym.imp.PlatformData.dll_public:_struct_tagGlobalUserData____thiscall_CGlobalUserInfo::GetGlobalUserData_void_]
mov dword [ebp - 0x50], eax
mov byte [ebp - 0x4a], 0
mov eax, dword [ebp + 0xc]
push eax
call fcn.004246e0
add esp, 4
mov byte [ebp - 0x49], al
mov cx, word [0x49f7d4]
mov word [ebp - 0x48], cx
mov ecx, 0xf
xor eax, eax
lea edi, [ebp - 0x46]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edx, dword [ebp - 0x124]
mov eax, dword [edx + 8]
push eax
push 0x49f7d8
push 0x20
lea ecx, [ebp - 0x48]
push ecx
call dword [sym.imp.MSVCR71.dll__snwprintf]
add esp, 0x10
movzx edx, byte [ebp - 0x49]
test edx, edx
je 0x475285
mov eax, dword [ebp - 0x124]
movzx ecx, word [eax + 0x18]
test ecx, ecx
jne 0x4752ed
mov edx, dword [ebp - 0x124]
movzx eax, byte [edx + 0xd]
cmp eax, 1
jne 0x4752ab
mov ecx, dword [ebp + 0x10]
movzx edx, word [ecx + 0x36]
cmp edx, 1
jle 0x4752ab
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x128], eax
jmp 0x4752b5
mov dword [ebp - 0x128], 0
mov ecx, dword [ebp - 0x128]
mov dword [ebp - 0x6c], ecx
push 0xcc0020
push 0
mov edx, dword [ebp - 0x6c]
push edx
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
push 0
push 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp + 0x10]
add ecx, 0x17f0
call dword [sym.imp.WHImage.dll_public:_int___thiscall_CBitImage::BitBlt_struct_HDC_____int__int__int__int__int__int__unsigned_long_int_]
jmp 0x475320
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x70], ecx
push 0xcc0020
push 0
mov edx, dword [ebp - 0x70]
push edx
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
push 0
push 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp + 0x10]
add ecx, 0x17f0
call dword [sym.imp.WHImage.dll_public:_int___thiscall_CBitImage::BitBlt_struct_HDC_____int__int__int__int__int__int__unsigned_long_int_]
mov ecx, dword [ebp + 0x10]
movzx edx, byte [ecx + 0x2d]
cmp edx, 1
jne 0x47541e
mov ecx, dword [ebp + 0x10]
add ecx, 0x13a8
call dword [sym.imp.WHImage.dll_public:_bool___thiscall_CPngImage::IsNull_void_]
movzx eax, al
test eax, eax
jne 0x47541e
mov dword [ebp - 0x74], 0
mov ecx, dword [ebp - 0x124]
movzx edx, byte [ecx + 0xd]
cmp edx, 1
jne 0x475367
mov dword [ebp - 0x74], 1
mov eax, dword [ebp - 0x124]
movzx ecx, word [eax + 6]
cmp ecx, 0x64
jne 0x47539a
mov edx, dword [ebp - 0x124]
movzx eax, byte [edx + 0xd]
test eax, eax
jne 0x47539a
mov ecx, dword [ebp - 0x124]
movzx edx, byte [ecx + 4]
cmp edx, 1
jne 0x47539a
mov dword [ebp - 0x74], 2
mov eax, dword [ebp - 0x124]
movzx ecx, word [eax + 6]
cmp ecx, 0x64
jne 0x4753cc
mov edx, dword [ebp - 0x124]
movzx eax, byte [edx + 0xd]
test eax, eax
jne 0x4753cc
mov ecx, dword [ebp - 0x124]
movzx edx, byte [ecx + 4]
test edx, edx
jne 0x4753cc
mov dword [ebp - 0x74], 3
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x78], edx
push 0
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x74]
push eax
mov ecx, dword [ebp - 0x78]
push ecx
mov edx, dword [ebp - 0x7c]
push edx
mov eax, dword [ebp - 0x5c]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp + 0x10]
add eax, dword [ecx + 0x58]
push eax
mov eax, dword [ebp - 0x60]
cdq
sub eax, edx
sar eax, 1
mov edx, dword [ebp + 0x10]
add eax, dword [edx + 0x54]
push eax
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp + 0x10]
add ecx, 0x13a8
call dword [sym.imp.WHImage.dll_public:_bool___thiscall_CPngImage::DrawImage_class_CDC___int__int__int__int__int__int_]
mov ecx, dword [ebp - 0x124]
movzx edx, word [ecx + 0x1a]
cmp edx, 0x64
jge 0x475b72
mov word [ebp - 0x80], 0
jmp 0x475445
mov ax, word [ebp - 0x80]
add ax, 1
mov word [ebp - 0x80], ax
movzx ecx, word [ebp - 0x80]
mov edx, dword [ebp - 0x124]
movzx eax, word [edx + 0x1a]
cmp ecx, eax
jge 0x475b72
movzx ecx, word [ebp - 0x80]
shl ecx, 4
mov edx, dword [ebp + 0x10]
lea eax, [edx + ecx + 0x9c4]
mov ecx, dword [eax]
mov dword [ebp - 0x90], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x8c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x88], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x84], edx
movzx eax, byte [ebp - 0x49]
cmp eax, 1
jne 0x4754ee
mov ecx, dword [ebp + 0x10]
movzx edx, byte [ecx + 0x2e]
cmp edx, 1
jne 0x4754ee
mov eax, dword [ebp - 0x124]
movzx ecx, word [eax + 0x18]
test ecx, ecx
jne 0x4754ee
push 0xcc0020
push 0
movzx edx, word [ebp - 0x80]
imul edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
push edx
mov eax, dword [ebp - 0x90]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
mov ecx, dword [ebp + 0x10]
add ecx, 0x15b8
call dword [sym.imp.WHImage.dll_public:_int___thiscall_CBitImage::BitBlt_struct_HDC_____int__int__int__int__int__int__unsigned_long_int_]
movzx eax, byte [ebp - 0x49]
test eax, eax
jne 0x47554f
mov ecx, dword [ebp + 0x10]
movzx edx, byte [ecx + 0x2e]
cmp edx, 1
jne 0x47554f
movzx eax, word [ebp - 0x80]
mov ecx, dword [ebp - 0x124]
cmp dword [ecx + eax*4 + 0x1c], 0
jne 0x47554f
push 0xcc0020
push 0
movzx edx, word [ebp - 0x80]
imul edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
push edx
mov eax, dword [ebp - 0x90]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
mov ecx, dword [ebp + 0x10]
add ecx, 0x15b8
call dword [sym.imp.WHImage.dll_public:_int___thiscall_CBitImage::BitBlt_struct_HDC_____int__int__int__int__int__int__unsigned_long_int_]
mov eax, dword [ebp + 0x10]
movzx ecx, byte [eax + 0x2c]
cmp ecx, 1
jne 0x475b6d
movzx edx, byte [ebp - 0x49]
test edx, edx
jne 0x475813
movzx eax, word [ebp - 0x80]
mov ecx, dword [ebp - 0x124]
cmp dword [ecx + eax*4 + 0x1c], 0
je 0x475813
movzx edx, word [ebp - 0x80]
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax + edx*4 + 0x1c]
mov dword [ebp - 0x9c], ecx
mov edx, dword [ebp - 0x9c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9c]
call dword [eax + 0x10]
mov dword [ebp - 0x94], eax
movzx ecx, word [ebp - 0x80]
mov edx, dword [ebp - 0x124]
mov eax, dword [edx + ecx*4 + 0x1c]
movzx ecx, word [ebp - 0x80]
mov edx, dword [ebp - 0x124]
mov ecx, dword [edx + ecx*4 + 0x1c]
mov eax, dword [eax]
call dword [eax + 0x24]
mov ecx, dword [ebp - 0x50]
cmp eax, dword [ecx]
jne 0x4755d7
mov byte [ebp - 0x4a], 1
mov edx, dword [ebp + 0x10]
movzx eax, byte [edx + 0x31]
test eax, eax
jne 0x47564d
lea ecx, [ebp - 0x90]
call fcn.00405870
sub eax, 0x30
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0xa8], eax
lea ecx, [ebp - 0x90]
call fcn.00405890
sub eax, 0x30
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0xac], eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp - 0x9c]
push edx
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0xac]
push eax
mov ecx, dword [ebp - 0x90]
add ecx, dword [ebp - 0xa8]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x124]
call fcn.00476010
jmp 0x4756fd
movzx esi, word [ebp - 0x80]
lea ecx, [ebp - 0x90]
call fcn.00405870
imul esi, eax
mov dword [ebp - 0xb4], esi
movzx eax, word [ebp - 0x80]
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + eax*4 + 0x1c]
movzx eax, word [ebp - 0x80]
mov ecx, dword [ebp - 0x124]
mov ecx, dword [ecx + eax*4 + 0x1c]
mov edx, dword [edx]
call dword [edx + 0x20]
movzx eax, al
test eax, eax
jne 0x4756a0
lea ecx, [ebp - 0x90]
call fcn.00405890
mov dword [ebp - 0x12c], eax
jmp 0x4756aa
mov dword [ebp - 0x12c], 0
mov ecx, dword [ebp - 0x12c]
mov dword [ebp - 0xb0], ecx
mov edx, dword [ebp - 0xb0]
push edx
mov eax, dword [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x90]
call fcn.00405890
push eax
lea ecx, [ebp - 0x90]
call fcn.00405870
push eax
mov ecx, dword [ebp - 0x8c]
push ecx
mov edx, dword [ebp - 0x90]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp + 0x10]
add ecx, 0x20a8
call dword [sym.imp.WHImage.dll_public:_bool___thiscall_CPngImage::DrawImage_class_CDC___int__int__int__int__int__int_]
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x9c]
call dword [edx + 0x50]
mov word [ebp - 0xa4], ax
mov eax, dword [ebp - 0x9c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x9c]
call dword [edx + 0x54]
mov word [ebp - 0x98], ax
movzx eax, word [ebp - 0xa4]
mov ecx, dword [ebp - 0x124]
movzx edx, word [ecx + 0x18]
cmp eax, edx
jne 0x47575d
movzx eax, word [ebp - 0x98]
movzx ecx, word [ebp - 0x80]
cmp eax, ecx
jne 0x47575d
mov dword [ebp - 0x130], 1
jmp 0x475767
mov dword [ebp - 0x130], 0
mov dl, byte [ebp - 0x130]
mov byte [ebp - 0x9d], dl
movzx eax, byte [ebp - 0x9d]
cmp eax, 1
jne 0x4757e9
mov ecx, dword [ebp - 0x124]
movzx edx, byte [ecx + 0xd]
test edx, edx
jne 0x4757e9
mov eax, dword [ebp - 0x9c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x9c]
call dword [edx + 0x58]
movzx eax, al
cmp eax, 3
jne 0x4757e9
movzx ecx, word [ebp - 0x80]
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + ecx*8 + 0x64]
mov dword [ebp - 0xbc], eax
movzx ecx, word [ebp - 0x80]
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + ecx*8 + 0x68]
mov dword [ebp - 0xb8], eax
mov ecx, dword [ebp - 0xb8]
push ecx
mov edx, dword [ebp - 0xbc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp + 0x10]
add ecx, 0x24c8
call dword [sym.imp.WHImage.dll_public:_bool___thiscall_CPngImage::DrawImage_class_CDC___int__int_]
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp - 0x9c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9c]
call dword [eax + 0x30]
push eax
mov cx, word [ebp - 0x80]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x124]
call fcn.00475e60
movzx eax, byte [ebp - 0x49]
cmp eax, 1
jne 0x4759fd
mov ecx, dword [ebp + 0x10]
movzx edx, byte [ecx + 0x2c]
cmp edx, 1
jne 0x4759fd
mov eax, dword [ebp - 0x124]
movzx ecx, word [eax + 0x18]
test ecx, ecx
jle 0x4759ac
lea ecx, [ebp - 0x90]
call fcn.00405870
sub eax, 0x30
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0xc4], eax
lea ecx, [ebp - 0x90]
call fcn.00405890
sub eax, 0x30
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0xc8], eax
mov edx, dword [ebp + 0x10]
movzx eax, byte [edx + 0x31]
test eax, eax
jne 0x4758f6
call dword [sym.imp.AvatarControl.dll_public:_static_class_CFaceItemControl____cdecl_CFaceItemControl::GetInstance_void_]
mov dword [ebp - 0xcc], eax
mov ecx, dword [ebp - 0x124]
movzx esi, word [ecx + 0x18]
mov edx, dword [ebp - 0x124]
movzx eax, word [edx + 0x1a]
imul esi, eax
movzx ecx, word [ebp - 0x80]
add esi, ecx
mov edx, dword [ebp - 0xcc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xcc]
call dword [eax + 8]
movzx ecx, ax
mov eax, esi
cdq
idiv ecx
push edx
mov edx, dword [ebp - 0x8c]
add edx, dword [ebp - 0xc8]
push edx
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0xc4]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0xcc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xcc]
call dword [eax + 0x24]
jmp 0x4759ac
movzx esi, word [ebp - 0x80]
lea ecx, [ebp - 0x90]
call fcn.00405870
imul esi, eax
mov dword [ebp - 0xd4], esi
mov ecx, dword [ebp - 0x124]
movzx edx, word [ecx + 0x18]
mov eax, dword [ebp - 0x124]
movzx ecx, word [eax + 0x1a]
imul edx, ecx
movzx eax, word [ebp - 0x80]
add edx, eax
and edx, 0x80000001
jns 0x475938
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
jne 0x47594f
lea ecx, [ebp - 0x90]
call fcn.00405890
mov dword [ebp - 0x134], eax
jmp 0x475959
mov dword [ebp - 0x134], 0
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0xd0], ecx
mov edx, dword [ebp - 0xd0]
push edx
mov eax, dword [ebp - 0xd4]
push eax
lea ecx, [ebp - 0x90]
call fcn.00405890
push eax
lea ecx, [ebp - 0x90]
call fcn.00405870
push eax
mov ecx, dword [ebp - 0x8c]
push ecx
mov edx, dword [ebp - 0x90]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp + 0x10]
add ecx, 0x20a8
call dword [sym.imp.WHImage.dll_public:_bool___thiscall_CPngImage::DrawImage_class_CDC___int__int__int__int__int__int_]
mov ecx, dword [ebp - 0x124]
mov dx, word [ecx + 0x18]
mov word [ebp - 0xc0], dx
movzx eax, word [ebp - 0xc0]
test eax, eax
jne 0x4759d4
mov dword [ebp - 0x138], 0x49f7e0
jmp 0x4759de
mov dword [ebp - 0x138], 0x49f7ec
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp - 0x138]
push edx
mov ax, word [ebp - 0x80]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x124]
call fcn.00475e60
movzx edx, byte [ebp - 0x49]
test edx, edx
je 0x475a17
mov eax, dword [ebp - 0x124]
movzx ecx, word [eax + 0x18]
test ecx, ecx
jne 0x475b6d
mov edx, dword [ebp + 0x10]
movzx eax, byte [edx + 0x31]
cmp eax, 1
jne 0x475a6d
mov ecx, dword [ebp - 0x124]
movzx edx, word [ecx + 6]
movzx eax, word [ebp - 0x80]
cmp edx, eax
jne 0x475a6d
push 0x7d7d7d
push 0x7d7d7d
lea ecx, [ebp - 0x90]
call fcn.00405890
push eax
lea ecx, [ebp - 0x90]
call fcn.00405870
push eax
mov ecx, dword [ebp - 0x8c]
push ecx
mov edx, dword [ebp - 0x90]
push edx
mov ecx, dword [ebp + 8]
call sub.MFC71U.DLL_COleControl::XViewObject::Draw
mov eax, dword [ebp + 0x10]
movzx ecx, byte [eax + 0x31]
test ecx, ecx
jne 0x475b6d
mov edx, dword [ebp - 0x124]
movzx eax, word [edx + 6]
movzx ecx, word [ebp - 0x80]
cmp eax, ecx
je 0x475aa3
movzx edx, word [ebp - 0x80]
mov eax, dword [ebp - 0x124]
cmp dword [eax + edx*4 + 0x1c], 0
je 0x475b6d
lea ecx, [ebp - 0x90]
call fcn.00405870
sub eax, 0x30
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0xdc], eax
lea ecx, [ebp - 0x90]
call fcn.00405890
sub eax, 0x30
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0xe4], eax
mov byte [ebp - 0xdd], 0
mov ecx, dword [ebp - 0x124]
movzx edx, word [ecx + 6]
movzx eax, word [ebp - 0x80]
cmp edx, eax
jne 0x475b03
mov ecx, dword [ebp - 0x124]
movzx edx, byte [ecx + 4]
test edx, edx
jne 0x475b03
mov byte [ebp - 0xdd], 1
mov eax, dword [ebp - 0x124]
movzx ecx, word [eax + 6]
movzx edx, word [ebp - 0x80]
cmp ecx, edx
jne 0x475b2b
mov eax, dword [ebp - 0x124]
movzx ecx, byte [eax + 4]
cmp ecx, 1
jne 0x475b2b
mov byte [ebp - 0xdd], 2
call dword [sym.imp.AvatarControl.dll_public:_static_class_CFaceItemControl____cdecl_CFaceItemControl::GetInstance_void_]
mov dword [ebp - 0xd8], eax
mov dl, byte [ebp - 0xdd]
push edx
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0xe4]
push eax
mov ecx, dword [ebp - 0x90]
add ecx, dword [ebp - 0xdc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0xd8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xd8]
call dword [edx + 0x14]
jmp 0x475439
mov eax, dword [ebp - 0x124]
movzx ecx, byte [eax + 0xc]
cmp ecx, 1
jne 0x475bba
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 0x4c]
mov dword [ebp - 0xec], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0x50]
mov dword [ebp - 0xe8], edx
mov eax, dword [ebp - 0xe8]
push eax
mov ecx, dword [ebp - 0xec]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp + 0x10]
add ecx, 0x26d8
call dword [sym.imp.WHImage.dll_public:_bool___thiscall_CPngImage::DrawImage_class_CDC___int__int_]
mov eax, dword [ebp + 0x10]
movzx ecx, byte [eax + 0x32]
cmp ecx, 1
jne 0x475d9c
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 0x1c]
mov ecx, dword [edx + 0x20]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 0x24]
mov ecx, dword [edx + 0x28]
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x100], ecx
mov word [ebp - 0xfc], 0
mov edx, dword [ebp - 0x124]
movzx eax, word [edx + 0x18]
add eax, 1
mov word [ebp - 0x118], ax
mov ecx, dword [ebp - 0x124]
movzx edx, word [ecx + 0x18]
add edx, 1
mov word [ebp - 0xf4], dx
mov ax, word [ebp - 0xfc]
add ax, 1
mov word [ebp - 0xfc], ax
movzx eax, word [ebp - 0x118]
cdq
mov ecx, 0xa
idiv ecx
mov word [ebp - 0x118], ax
movzx edx, word [ebp - 0x118]
test edx, edx
jg 0x475c25
mov eax, dword [ebp - 0x110]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0x5c]
sub edx, eax
mov dword [ebp - 0xf8], edx
mov eax, dword [ebp - 0x10c]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0x60]
sub edx, eax
mov dword [ebp - 0x114], edx
mov eax, dword [ebp - 0x114]
push eax
mov ecx, dword [ebp - 0xf8]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp + 0x10]
add ecx, 0x2af8
call dword [sym.imp.WHImage.dll_public:_bool___thiscall_CPngImage::DrawImage_class_CDC___int__int_]
mov eax, dword [ebp - 0x100]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0x60]
sub edx, eax
mov dword [ebp - 0xf0], edx
movzx eax, word [ebp - 0xfc]
imul eax, dword [ebp - 0x104]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0x5c]
add edx, eax
sub edx, dword [ebp - 0x104]
mov dword [ebp - 0x108], edx
mov dword [ebp - 0x11c], 0
jmp 0x475d06
mov eax, dword [ebp - 0x11c]
add eax, 1
mov dword [ebp - 0x11c], eax
movzx ecx, word [ebp - 0xfc]
cmp dword [ebp - 0x11c], ecx
jge 0x475d9c
movzx eax, word [ebp - 0xf4]
cdq
mov ecx, 0xa
idiv ecx
mov word [ebp - 0x120], dx
push 0
movzx edx, word [ebp - 0x120]
imul edx, dword [ebp - 0x104]
push edx
mov eax, dword [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x104]
push ecx
mov edx, dword [ebp - 0xf0]
push edx
mov eax, dword [ebp - 0x108]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp + 0x10]
add ecx, 0x28e8
call dword [sym.imp.WHImage.dll_public:_bool___thiscall_CPngImage::DrawImage_class_CDC___int__int__int__int__int__int_]
movzx eax, word [ebp - 0xf4]
cdq
mov ecx, 0xa
idiv ecx
mov word [ebp - 0xf4], ax
mov edx, dword [ebp - 0x108]
sub edx, dword [ebp - 0x104]
mov dword [ebp - 0x108], edx
jmp 0x475cf7
mov eax, dword [ebp + 0x10]
movzx ecx, byte [eax + 0x30]
cmp ecx, 1
jne 0x475ddb
mov edx, dword [ebp - 0x58]
movzx eax, byte [edx + 0x19]
cmp eax, 1
jne 0x475ddb
movzx ecx, byte [ebp - 0x4a]
cmp ecx, 1
jne 0x475ddb
push 0x7d7d7d
push 0x7d7d7d
mov edx, dword [ebp - 0x5c]
push edx
mov eax, dword [ebp - 0x60]
push eax
push 0
push 0
mov ecx, dword [ebp + 8]
call sub.MFC71U.DLL_COleControl::XViewObject::Draw
movzx ecx, byte [ebp - 0x49]
test ecx, ecx
je 0x475df1
mov edx, dword [ebp - 0x124]
movzx eax, word [edx + 0x18]
test eax, eax
jne 0x475e42
mov ecx, dword [ebp - 0x124]
cmp dword [ecx + 8], 0
jle 0x475e42
mov edx, dword [ebp + 0x10]
movzx eax, byte [edx + 0x34]
cmp eax, 1
jne 0x475e42
push 6
mov eax, dword [ebp - 0x5c]
cdq
sub eax, edx
sar eax, 1
push eax
mov eax, dword [ebp - 0x60]
cdq
sub eax, edx
sar eax, 1
sub eax, 5
push eax
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 0x10]
add eax, 0x22b8
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x124]
call fcn.00476240
mov ecx, dword [ebp - 4]
call fcn.0048124d
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0xc