Function at 0x47ade8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4e41b5
mov eax, dword fs:[0]
push eax
sub esp, 0x180
mov eax, dword [0x515854]
xor eax, esp
mov dword [esp + 0x178], eax
push ebx
push esi
push edi
mov eax, dword [0x515854]
xor eax, esp
push eax
lea eax, [esp + 0x190]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
and dword [esp + 0x68], 0
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x4c], eax
xor eax, eax
lea edi, [esp + 0x6c]
mov esi, ecx
stosd dword es:[edi], eax
lea eax, [esp + 0xf0]
mov dword [esp + 0x70], esi
mov dword [esp + 0x14], edx
call fcn.004074b0
and dword [esp + 0x198], 0
push 7
pop ebx
xor ecx, ecx
lea eax, [esp + 0x150]
mov dword [esp + 0x168], ebx
call fcn.00401870
fldz
lea edi, [esp + 0x2c]
fstp qword [esp + 0x84]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor eax, eax
xor esi, esi
mov dword [esp + 0x10c], esi
lea edi, [esp + 0x110]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [esp + 0x54], esi
lea edi, [esp + 0x58]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [esp + 0x74], esi
lea edi, [esp + 0x78]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor ecx, ecx
lea eax, [esp + 0x134]
mov dword [esp + 0x48], esi
mov byte [esp + 0x28], 0xff
mov byte [esp + 0x40], 0
mov byte [esp + 0x1f], 0
mov byte [esp + 0x44], 0
mov byte [esp + 0x20], 0
mov dword [esp + 0x18], esi
mov byte [esp + 0x22], 0
mov byte [esp + 0x23], 0
mov dword [esp + 0x14c], ebx
call fcn.00401870
xor ecx, ecx
lea eax, [esp + 0x16c]
mov dword [esp + 0x184], ebx
call fcn.00401870
xor ecx, ecx
lea eax, [esp + 0xd4]
mov dword [esp + 0x64], esi
mov byte [esp + 0x21], 0
mov dword [esp + 0xec], ebx
call fcn.00401870
xor ecx, ecx
lea eax, [esp + 0xb8]
mov dword [esp + 0xd0], ebx
call fcn.00401870
mov byte [esp + 0x198], 5
mov dword [esp + 0x10], esi
mov dword [esp + 0x50], esi
cmp dword [esp + 0x50], 1
jne 0x47af68
mov esi, dword [esp + 0x4c]
mov dword [esp + 0x14], esi
jmp 0x47af6c
mov esi, dword [esp + 0x14]
test esi, esi
je 0x47b73f
cmp word [esi], 0
je 0x47b73f
jmp 0x47af84
mov esi, dword [esp + 0x14]
lea eax, [esp + 0xd4]
call fcn.00420680
lea eax, [esp + 0xb8]
call fcn.00420680
jmp 0x47afce
cmp ax, 0x3d
je 0x47afd6
push esi
call dword [sym.imp.USER32.dll_CharNextW]
cmp esi, eax
mov dword [esp + 0x14], eax
jae 0x47afce
movzx eax, word [esi]
push eax
xor eax, eax
inc eax
lea edi, [esp + 0xd8]
call fcn.004205d0
inc esi
inc esi
cmp esi, dword [esp + 0x14]
jb 0x47afb3
movzx eax, word [esi]
test ax, ax
jne 0x47af9e
mov ax, word [esi]
inc esi
inc esi
cmp ax, 0x3d
mov dword [esp + 0x14], esi
jne 0x47b73f
mov ax, word [esi]
inc esi
inc esi
cmp ax, 0x27
mov dword [esp + 0x14], esi
jne 0x47b73f
jmp 0x47b02e
cmp ax, 0x27
je 0x47b036
push esi
call dword [sym.imp.USER32.dll_CharNextW]
cmp esi, eax
mov dword [esp + 0x14], eax
jae 0x47b02e
movzx eax, word [esi]
push eax
xor eax, eax
inc eax
lea edi, [esp + 0xbc]
call fcn.004205d0
inc esi
inc esi
cmp esi, dword [esp + 0x14]
jb 0x47b013
movzx eax, word [esi]
test ax, ax
jne 0x47affe
mov ax, word [esi]
inc esi
inc esi
cmp ax, 0x27
mov dword [esp + 0x14], esi
jne 0x47b73f
cmp dword [esp + 0xcc], 0
je 0x47b71f
mov esi, 0x4f7b24
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
jne 0x47b707
mov esi, 0x4f7b30
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
jne 0x47b707
mov esi, str.restype
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b0b6
push 0xffffffffffffffff
lea eax, [esp + 0xbc]
push 0
push eax
lea eax, [esp + 0x15c]
jmp 0x47b71a
mov esi, str.round
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b128
cmp dword [esp + 0xd0], 8
mov eax, dword [esp + 0xbc]
jae 0x47b0e3
lea eax, [esp + 0xbc]
push 0xa
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.004be0a8
add esp, 0xc
cmp dword [esp + 0xd0], 8
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0xbc]
jae 0x47b10f
lea eax, [esp + 0xbc]
push 0xa
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.004be0a8
add esp, 0xc
mov dword [esp + 0x6c], eax
jmp 0x47b71f
mov esi, str.iconsize
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b16e
cmp dword [esp + 0xd0], 8
mov eax, dword [esp + 0xbc]
jae 0x47b155
lea eax, [esp + 0xbc]
push 0xa
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.004be0a8
add esp, 0xc
mov dword [esp + 0x18], eax
jmp 0x47b71f
mov esi, str.dest
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b214
cmp dword [esp + 0xd0], 8
mov eax, dword [esp + 0xbc]
jae 0x47b19f
lea eax, [esp + 0xbc]
push 0xa
pop esi
push esi
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.004be0a8
add esp, 0xc
mov dword [esp + 0x10c], eax
push esi
lea eax, [esp + 0x14]
push eax
mov eax, dword [esp + 0x18]
add eax, 2
push eax
call fcn.004be0a8
add esp, 0xc
mov dword [esp + 0x110], eax
push esi
lea eax, [esp + 0x14]
push eax
mov eax, dword [esp + 0x18]
add eax, 2
push eax
call fcn.004be0a8
add esp, 0xc
mov dword [esp + 0x114], eax
push esi
lea eax, [esp + 0x14]
push eax
mov eax, dword [esp + 0x18]
add eax, 2
push eax
call fcn.004be0a8
add esp, 0xc
mov dword [esp + 0x118], eax
jmp 0x47b71f
mov esi, 0x4f6fcc
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b2ae
cmp dword [esp + 0xd0], 8
mov eax, dword [esp + 0xbc]
jae 0x47b245
lea eax, [esp + 0xbc]
push 0xa
pop esi
push esi
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.004be0a8
add esp, 0xc
mov dword [esp + 0x54], eax
push esi
lea eax, [esp + 0x14]
push eax
mov eax, dword [esp + 0x18]
add eax, 2
push eax
call fcn.004be0a8
add esp, 0xc
mov dword [esp + 0x58], eax
push esi
lea eax, [esp + 0x14]
push eax
mov eax, dword [esp + 0x18]
add eax, 2
push eax
call fcn.004be0a8
add esp, 0xc
mov dword [esp + 0x5c], eax
push esi
lea eax, [esp + 0x14]
push eax
mov eax, dword [esp + 0x18]
add eax, 2
push eax
call fcn.004be0a8
add esp, 0xc
mov dword [esp + 0x60], eax
jmp 0x47b71f
mov esi, str.corner
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b34b
cmp dword [esp + 0xd0], 8
mov eax, dword [esp + 0xbc]
jae 0x47b2df
lea eax, [esp + 0xbc]
push 0xa
pop esi
push esi
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.004be0a8
add esp, 0xc
mov dword [esp + 0x74], eax
push esi
lea eax, [esp + 0x14]
push eax
mov eax, dword [esp + 0x18]
add eax, 2
push eax
call fcn.004be0a8
add esp, 0xc
mov dword [esp + 0x78], eax
push esi
lea eax, [esp + 0x14]
push eax
mov eax, dword [esp + 0x18]
add eax, 2
push eax
call fcn.004be0a8
add esp, 0xc
mov dword [esp + 0x7c], eax
push esi
lea eax, [esp + 0x14]
push eax
mov eax, dword [esp + 0x18]
add eax, 2
push eax
call fcn.004be0a8
add esp, 0xc
mov dword [esp + 0x80], eax
jmp 0x47b71f
mov esi, 0x4f5cd0
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b394
cmp dword [esp + 0xd0], 8
mov eax, dword [esp + 0xbc]
jae 0x47b378
lea eax, [esp + 0xbc]
push str.true
push eax
call fcn.004b9e85
neg eax
sbb al, al
pop ecx
inc al
pop ecx
mov byte [esp + 0x23], al
jmp 0x47b71f
mov esi, str.mask
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b404
xor edi, edi
lea eax, [esp + 0xb8]
call fcn.004075a0
cmp word [eax], 0x23
mov eax, dword [esp + 0xbc]
jne 0x47b3da
cmp dword [esp + 0xd0], 8
jae 0x47b3d5
lea eax, [esp + 0xbc]
add eax, 2
jmp 0x47b3eb
cmp dword [esp + 0xd0], 8
jae 0x47b3eb
lea eax, [esp + 0xbc]
push 0x10
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.004be0d1
add esp, 0xc
mov dword [esp + 0x48], eax
jmp 0x47b71f
mov esi, str.fade
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b44a
cmp dword [esp + 0xd0], 8
mov eax, dword [esp + 0xbc]
jae 0x47b431
lea eax, [esp + 0xbc]
push 0xa
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.004be0d1
add esp, 0xc
mov byte [esp + 0x28], al
jmp 0x47b71f
mov esi, str.hole
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b493
cmp dword [esp + 0xd0], 8
mov eax, dword [esp + 0xbc]
jae 0x47b477
lea eax, [esp + 0xbc]
push str.true
push eax
call fcn.004b9e85
neg eax
sbb al, al
pop ecx
inc al
pop ecx
mov byte [esp + 0x40], al
jmp 0x47b71f
mov esi, str.alphaClose
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b4dc
cmp dword [esp + 0xd0], 8
mov eax, dword [esp + 0xbc]
jae 0x47b4c0
lea eax, [esp + 0xbc]
push str.true
push eax
call fcn.004b9e85
neg eax
sbb al, al
pop ecx
inc al
pop ecx
mov byte [esp + 0x1f], al
jmp 0x47b71f
mov esi, str.encrypt
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b525
cmp dword [esp + 0xd0], 8
mov eax, dword [esp + 0xbc]
jae 0x47b509
lea eax, [esp + 0xbc]
push str.true
push eax
call fcn.004b9e85
neg eax
sbb al, al
pop ecx
inc al
pop ecx
mov byte [esp + 0x44], al
jmp 0x47b71f
mov esi, str.icon
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b56e
cmp dword [esp + 0xd0], 8
mov eax, dword [esp + 0xbc]
jae 0x47b552
lea eax, [esp + 0xbc]
push str.true
push eax
call fcn.004b9e85
neg eax
sbb al, al
pop ecx
inc al
pop ecx
mov byte [esp + 0x20], al
jmp 0x47b71f
mov esi, str.reverse
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b5b7
cmp dword [esp + 0xd0], 8
mov eax, dword [esp + 0xbc]
jae 0x47b59b
lea eax, [esp + 0xbc]
push str.true
push eax
call fcn.004b9e85
neg eax
sbb al, al
pop ecx
inc al
pop ecx
mov byte [esp + 0x22], al
jmp 0x47b71f
mov esi, str.rotate
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b5fa
cmp dword [esp + 0xd0], 8
mov eax, dword [esp + 0xbc]
jae 0x47b5e4
lea eax, [esp + 0xbc]
push 0
push eax
call fcn.004be25c
fstp qword [esp + 0x8c]
pop ecx
pop ecx
jmp 0x47b71f
mov esi, str.rgnimage
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b627
push 0xffffffffffffffff
lea eax, [esp + 0xbc]
push 0
push eax
lea eax, [esp + 0x140]
jmp 0x47b71a
mov esi, str.rgnrestype
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b654
push 0xffffffffffffffff
lea eax, [esp + 0xbc]
push 0
push eax
lea eax, [esp + 0x178]
jmp 0x47b71a
mov esi, str.rgnmask
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b6c1
xor edi, edi
lea eax, [esp + 0xb8]
call fcn.004075a0
cmp word [eax], 0x23
mov eax, dword [esp + 0xbc]
jne 0x47b69a
cmp dword [esp + 0xd0], 8
jae 0x47b695
lea eax, [esp + 0xbc]
add eax, 2
jmp 0x47b6ab
cmp dword [esp + 0xd0], 8
jae 0x47b6ab
lea eax, [esp + 0xbc]
push 0x10
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.004be0d1
add esp, 0xc
mov dword [esp + 0x64], eax
jmp 0x47b71f
mov esi, str.gray
lea ecx, [esp + 0xd4]
call fcn.00408e20
test al, al
je 0x47b71f
cmp dword [esp + 0xd0], 8
mov eax, dword [esp + 0xbc]
jae 0x47b6ee
lea eax, [esp + 0xbc]
push str.true
push eax
call fcn.004b9e85
neg eax
sbb al, al
pop ecx
inc al
pop ecx
mov byte [esp + 0x21], al
jmp 0x47b71f
push 0xffffffffffffffff
lea eax, [esp + 0xbc]
push 0
push eax
lea eax, [esp + 0xfc]
call fcn.00401690
mov eax, dword [esp + 0x14]
mov ax, word [eax]
add dword [esp + 0x14], 2
cmp ax, 0x20
jne 0x47b73f
mov eax, dword [esp + 0x14]
cmp word [eax], 0
jne 0x47af80
inc dword [esp + 0x50]
cmp dword [esp + 0x50], 2
jl 0x47af57
cmp byte [esp + 0x23], 0
mov ecx, dword [esp + 0x70]
je 0x47b788
mov eax, dword [ecx + 8]
mov edx, dword [esp + 0x114]
mov ecx, dword [ecx + 4]
mov esi, dword [esp + 0x110]
sub eax, edx
mov dword [esp + 0x2c], eax
add esi, ecx
add eax, edx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x118]
mov dword [esp + 0x30], esi
jmp 0x47b7c3
mov eax, dword [ecx]
mov edx, dword [esp + 0x10c]
mov ecx, dword [ecx + 4]
add edx, eax
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x110]
add edx, ecx
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x114]
test edx, edx
je 0x47b7b8
add eax, edx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x118]
test eax, eax
je 0x47b7c9
add ecx, eax
mov dword [esp + 0x38], ecx
cmp dword [esp + 0x164], 0
jne 0x47b7fc
cmp dword [esp + 0x108], 8
mov edx, dword [esp + 0xf4]
jae 0x47b7eb
lea edx, [esp + 0xf4]
push dword [esp + 0x44]
push dword [esp + 0x4c]
call fcn.0046d987
pop ecx
pop ecx
jmp 0x47b84e
cmp dword [esp + 0x168], 8
mov edx, dword [esp + 0x154]
jae 0x47b814
lea edx, [esp + 0x154]
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x68], esp
call fcn.004074b0
cmp dword [esp + 0x124], 8
mov eax, dword [esp + 0x110]
jae 0x47b83a
lea eax, [esp + 0x110]
push dword [esp + 0x64]
push eax
call fcn.004bdeac
pop ecx
push eax
call fcn.0046d9c2
add esp, 0x24
test eax, eax
mov dword [esp + 0x14], eax
jne 0x47bad4
cmp byte [esp + 0x20], al
je 0x47ba83
cmp dword [esp + 0x164], eax
jne 0x47b938
lea eax, [esp + 0xf0]
push eax
lea esi, [esp + 0x114]
mov dword [esp + 0x110], vtable.GameMgr::GMIconFile.0
call fcn.00401620
mov byte [esp + 0x198], 6
and dword [esp + 0x12c], 0
lea edi, [esp + 0x10c]
mov byte [esp + 0x130], 0
call fcn.0049dd13
mov byte [esp + 0x198], bl
cmp byte [esp + 0x130], 0
je 0x47b8ed
push dword [esp + 0x18]
mov eax, edi
push dword [esp + 0x1c]
call fcn.0049dc51
test al, al
jne 0x47b8ed
lea eax, [esp + 0x18]
push eax
push eax
push dword [esp + 0x20]
mov eax, edi
push dword [esp + 0x24]
call fcn.0049dc97
cmp dword [esp + 0x108], 8
mov eax, dword [esp + 0xf4]
jae 0x47b905
lea eax, [esp + 0xf4]
push 0x10
push dword [esp + 0x1c]
push dword [esp + 0x20]
push 1
push eax
push ecx
call fcn.0046da32
pop ecx
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
lea ecx, [esp + 0x10c]
mov ebx, eax
mov byte [esp + 0x198], 5
call fcn.0049dc39
jmp 0x47b977
cmp dword [esp + 0x108], 8
mov eax, dword [esp + 0xf4]
jae 0x47b950
lea eax, [esp + 0xf4]
push 0
push dword [esp + 0x1c]
push dword [esp + 0x20]
push 1
push eax
call fcn.004bdeac
movzx eax, ax
pop ecx
push eax
push ecx
call fcn.0046da32
pop ecx
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov ebx, eax
test ebx, ebx
jne 0x47b9e9
lea esi, [esp + 0xb8]
call fcn.00401650
lea esi, [esp + 0xd4]
call fcn.00401650
lea esi, [esp + 0x16c]
call fcn.00401650
lea esi, [esp + 0x134]
call fcn.00401650
lea esi, [esp + 0x150]
call fcn.00401650
lea esi, [esp + 0xf0]
call fcn.00401650
xor al, al
mov ecx, dword [esp + 0x190]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x178]
xor ecx, esp
call fcn.004b6e9f
mov esp, ebp
pop ebp
ret
push ebx
sub esp, 0x10
mov edi, esp
push dword [esp + 0x38]
lea esi, [esp + 0x44]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x30]
call fcn.0047a24e
add esp, 0x18
push ebx
mov dword [esp + 0x18], eax
call dword [sym.imp.USER32.dll_DestroyIcon]
cmp dword [esp + 0x164], 0
jne 0x47ba4e
push dword [esp + 0x14]
lea eax, [esp + 0xf4]
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x6c], esp
push eax
call fcn.00401620
lea edi, [esp + 0x12c]
call fcn.0046d938
add esp, 0x20
mov esi, edi
call fcn.00401650
jmp 0x47ba7c
cmp dword [esp + 0x108], 8
mov eax, dword [esp + 0xf4]
jae 0x47ba66
lea eax, [esp + 0xf4]
push eax
call fcn.004bdeac
pop ecx
push dword [esp + 0x14]
push eax
call fcn.0046da3d
call fcn.0046d57c
cmp dword [esp + 0x14], 0
jne 0x47bad4
xor bl, bl
lea esi, [esp + 0xb8]
call fcn.00401650
lea esi, [esp + 0xd4]
call fcn.00401650
lea esi, [esp + 0x16c]
call fcn.00401650
lea esi, [esp + 0x134]
call fcn.00401650
lea esi, [esp + 0x150]
call fcn.00401650
lea esi, [esp + 0xf0]
call fcn.00401650
mov al, bl
jmp 0x47b9c5
xor edi, edi
cmp dword [esp + 0x24], edi
jne 0x47bae0
mov bl, 1
jmp 0x47ba85
xor esi, esi
mov dword [esp + 0x44], esi
cmp byte [esp + 0x21], 0
mov byte [esp + 0x198], 8
je 0x47bb0d
push dword [esp + 0x14]
call fcn.0047ed7a
cmp eax, edi
pop ecx
je 0x47ba83
mov esi, eax
mov ebx, eax
mov dword [esp + 0x44], esi
jmp 0x47bb11
mov ebx, dword [esp + 0x14]
cmp dword [esp + 0x54], edi
jne 0x47bb37
cmp dword [esp + 0x5c], edi
jne 0x47bb37
cmp dword [esp + 0x58], edi
jne 0x47bb37
cmp dword [esp + 0x60], edi
jne 0x47bb37
mov eax, dword [ebx + 4]
mov dword [esp + 0x5c], eax
mov eax, dword [ebx + 8]
mov dword [esp + 0x60], eax
cmp byte [esp + 0x1f], 0
je 0x47bb47
mov byte [ebx + 0xc], 0
mov byte [esp + 0x28], 0xff
push dword [esp + 0x70]
mov edi, dword [sym.imp.USER32.dll_IntersectRect]
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x94]
push eax
call edi
test eax, eax
jne 0x47bb85
test esi, esi
je 0x47badc
cmp dword [esi], 0
je 0x47bb79
push dword [esi]
call dword [sym.imp.GDI32.dll_DeleteObject]
push esi
call fcn.004b6eae
pop ecx
jmp 0x47badc
push dword [esp + 0x3c]
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x94]
push eax
call edi
test eax, eax
je 0x47bb64
lea esi, [esp + 0x9c]
call fcn.004995d2
xor edi, edi
mov byte [esp + 0x198], 9
cmp dword [esp + 0x68], edi
jne 0x47bbbe
cmp dword [esp + 0x6c], edi
je 0x47bbec
push dword [esp + 0x6c]
lea esi, [esp + 0x90]
push dword [esp + 0x6c]
lea eax, [esp + 0xa4]
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
push dword [esp + 0x40]
movsd dword es:[edi], dword [esi]
call fcn.00499676
add esp, 0x20
xor edi, edi
cmp dword [esp + 0x148], edi
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
je 0x47bd0b
cmp dword [esp + 0x180], edi
jne 0x47bc2b
cmp dword [esp + 0x14c], 8
mov edx, dword [esp + 0x138]
jae 0x47bc20
lea edx, [esp + 0x138]
push edi
push edi
call fcn.0046d987
pop ecx
pop ecx
jmp 0x47bc7a
cmp dword [esp + 0x184], 8
mov edx, dword [esp + 0x170]
jae 0x47bc43
lea edx, [esp + 0x170]
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x68], esp
call fcn.004074b0
cmp dword [esp + 0x168], 8
mov eax, dword [esp + 0x154]
jae 0x47bc69
lea eax, [esp + 0x154]
push edi
push eax
call fcn.004bdeac
pop ecx
push eax
call fcn.0046d9c2
add esp, 0x24
cmp eax, edi
je 0x47be12
push dword [esp + 0x64]
push eax
push ebx
push dword [esp + 0x30]
lea eax, [esp + 0x3c]
call fcn.0047d359
mov ebx, eax
add esp, 0x10
test ebx, ebx
je 0x47be12
and dword [esp + 0x10c], 0
push dword [esp + 0x40]
xor eax, eax
push dword [esp + 0x2c]
lea edi, [esp + 0x118]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [esp + 0x3c]
sub eax, dword [esp + 0x34]
push 1
mov dword [esp + 0x120], eax
mov eax, dword [esp + 0x44]
sub eax, dword [esp + 0x3c]
mov dword [esp + 0x124], eax
lea eax, [esp + 0x118]
push eax
push dword [esp + 0x4c]
lea eax, [esp + 0x40]
push eax
push ebx
push dword [esp + 0x40]
lea eax, [esp + 0x94]
call fcn.0047be39
add esp, 0x20
push ebx
call esi
jmp 0x47be12
cmp byte [esp + 0x22], 0
je 0x47bd59
lea ecx, [esp + 0x2c]
mov eax, ebx
call fcn.0047d0b9
push dword [esp + 0x40]
mov edi, eax
push dword [esp + 0x2c]
movzx eax, byte [ebx + 0xc]
push eax
lea eax, [esp + 0x60]
push eax
push dword [esp + 0x4c]
lea eax, [esp + 0x40]
push eax
push edi
push dword [esp + 0x40]
lea eax, [esp + 0x94]
call fcn.0047be39
add esp, 0x20
test edi, edi
je 0x47be12
push edi
jmp 0x47bd04
fldz
fcomp qword [esp + 0x84]
fnstsw ax
test ah, 0x44
jnp 0x47bde2
fld qword [esp + 0x84]
push ecx
push ecx
lea eax, [esp + 0x34]
fstp qword [esp]
mov ecx, ebx
call fcn.0047c9ca
mov edi, eax
test edi, edi
pop ecx
pop ecx
je 0x47be12
mov eax, dword [esp + 0x34]
sub eax, dword [esp + 0x2c]
push dword [esp + 0x40]
and dword [esp + 0x58], 0
push dword [esp + 0x2c]
and dword [esp + 0x60], 0
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x40]
sub eax, dword [esp + 0x38]
mov dword [esp + 0x68], eax
movzx eax, byte [ebx + 0xc]
push eax
lea eax, [esp + 0x60]
push eax
push dword [esp + 0x4c]
lea eax, [esp + 0x40]
push eax
push edi
push dword [esp + 0x40]
lea eax, [esp + 0x94]
call fcn.0047be39
add esp, 0x20
jmp 0x47bd56
push dword [esp + 0x40]
movzx eax, byte [ebx + 0xc]
push dword [esp + 0x2c]
push eax
lea eax, [esp + 0x60]
push eax
push dword [esp + 0x4c]
lea eax, [esp + 0x40]
push eax
push dword [ebx]
lea eax, [esp + 0x90]
push dword [esp + 0x40]
call fcn.0047be39
add esp, 0x20
lea eax, [esp + 0x9c]
call fcn.004995ec
mov edi, dword [esp + 0x44]
test edi, edi
je 0x47badc
cmp dword [edi], 0
je 0x47be33
push dword [edi]
call esi
push edi
jmp 0x47bb7a