Function at 0x487bd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x44
push ebx
push ebp
mov ebp, dword [esp + 0x50]
cmp dword [ebp + 0xb8], 0
mov ecx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 4]
mov ebx, eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], ecx
je 0x487ccf
push 1
push 1
push 0x4e2908
call fcn.004747e0
push eax
call fcn.00474a90
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x58], eax
mov eax, dword [ebp + 0x94]
mov edx, dword [eax + 0x14]
sub edx, 8
push edx
push 5
push 4
push 0
sub ecx, esi
push ecx
push 5
push esi
push edi
mov dword [esp + 0x7c], ecx
call fcn.00473280
mov eax, dword [ebp + 0x94]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
sub ecx, 8
push ecx
mov ecx, dword [esp + 0x60]
push 5
push 4
sub edx, 5
push edx
mov edx, dword [esp + 0x58]
push ecx
push 5
push esi
add edx, 0xfffffffb
push edx
call fcn.00473280
mov eax, dword [ebp + 0x94]
mov ecx, dword [esp + 0x48]
mov edx, dword [eax + 0x10]
sub ecx, edi
lea ebp, [ecx - 0xa]
mov ecx, dword [eax + 0x14]
sub ecx, 8
push ecx
mov ecx, dword [esp + 0x60]
sub edx, 0xa
push edx
push 4
push 5
push ecx
push ebp
push esi
add edi, 5
push edi
call fcn.00473280
mov eax, dword [esp + 0x58]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
push edx
mov edx, dword [esp + 0x60]
push ecx
push 0
push 0
push edx
push ebp
push esi
push edi
call fcn.00473280
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret 8
mov eax, dword [esp + 0x5c]
and eax, 1
mov dword [esp + 0x10], eax
je 0x487d3a
mov eax, dword [ebp + 0x94]
push 0
push 0
push esi
push edi
call fcn.00473200
mov eax, dword [ebp + 0x94]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x48]
push 0
sub ecx, 5
push ecx
push esi
add edx, 0xfffffffb
push edx
call fcn.00473200
mov eax, dword [ebp + 0x94]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x48]
push 4
sub ecx, 0xa
push ecx
push 0
push 5
push 4
sub edx, edi
sub edx, 0xa
push edx
push esi
lea ecx, [edi + 5]
push ecx
call fcn.00473280
add esi, 4
mov dword [esp + 0x44], esi
mov eax, dword [esp + 0x5c]
and eax, 2
mov dword [esp + 0x18], eax
je 0x487dcc
mov eax, dword [ebp + 0x94]
mov edx, dword [eax + 0x14]
mov ecx, dword [esp + 0x4c]
sub edx, 4
push edx
add ecx, 0xfffffffc
push 0
push ecx
push edi
mov dword [esp + 0x68], ecx
call fcn.00473200
mov eax, dword [ebp + 0x94]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
sub ecx, 4
push ecx
mov ecx, dword [esp + 0x5c]
sub edx, 5
push edx
mov edx, dword [esp + 0x50]
push ecx
add edx, 0xfffffffb
push edx
call fcn.00473200
mov eax, dword [ebp + 0x94]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x14]
push 4
sub ecx, 0xa
push ecx
mov ecx, dword [esp + 0x50]
sub edx, 4
push edx
mov edx, dword [esp + 0x64]
push 5
sub ecx, edi
push 4
sub ecx, 0xa
push ecx
push edx
lea ecx, [edi + 5]
push ecx
call fcn.00473280
mov edx, dword [esp + 0x58]
mov dword [esp + 0x4c], edx
test byte [esp + 0x5c], 4
je 0x487e5c
mov eax, dword [ebp + 0x94]
mov edx, dword [eax + 0x14]
mov ecx, dword [esp + 0x4c]
sub edx, 8
push edx
push 5
push 4
push 0
sub ecx, esi
push ecx
push 5
push esi
push edi
mov dword [esp + 0x7c], ecx
call fcn.00473280
mov eax, dword [ebp + 0x94]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
sub ecx, 8
push ecx
mov ecx, dword [esp + 0x60]
push 5
push 4
sub edx, 5
push edx
mov edx, dword [esp + 0x58]
push ecx
push 5
push esi
add edx, 0xfffffffb
push edx
call fcn.00473280
mov eax, dword [ebp + 0x94]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
sub ecx, 8
push ecx
mov ecx, dword [esp + 0x60]
sub edx, 0xa
push edx
mov edx, dword [esp + 0x50]
push 4
push 5
sub edx, edi
push ecx
sub edx, 0xa
push edx
push esi
add edi, 5
push edi
call fcn.00473280
cmp dword [ebp + 0x9c], 0
jne 0x487e85
mov eax, dword [ebp + 0xa4]
test eax, eax
je 0x487ff3
mov eax, dword [eax + 4]
push eax
call dword [0x4cf560]
test eax, eax
je 0x487ff3
cmp dword [esp + 0x10], 0
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 4]
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x3c], ecx
je 0x487e9f
add esi, 4
cmp dword [esp + 0x18], 0
je 0x487eab
sub dword [esp + 0x3c], 4
push 0
push 0
add eax, 5
push esi
mov dword [esp + 0x3c], eax
push eax
mov eax, dword [ebp + 0x98]
sub edi, 5
call fcn.00473200
mov eax, dword [ebp + 0x98]
mov edx, dword [eax + 0x10]
push 0
sub edx, 5
push edx
lea ecx, [edi - 5]
push esi
push ecx
mov dword [esp + 0x6c], ecx
call fcn.00473200
mov eax, dword [ebp + 0x98]
mov edx, dword [eax + 0x10]
mov ecx, dword [esp + 0x30]
push 4
sub edx, 0xa
push edx
push 0
push 5
sub edi, ecx
push 4
add edi, 0xfffffff6
push edi
add ecx, 5
push esi
push ecx
mov dword [esp + 0x78], edi
mov dword [esp + 0x30], ecx
call fcn.00473280
mov eax, dword [ebp + 0x98]
mov ecx, dword [eax + 0x14]
mov edi, dword [esp + 0x3c]
mov edx, dword [esp + 0x30]
sub ecx, 4
push ecx
push 0
add edi, 0xfffffffc
push edi
push edx
add esi, 4
call fcn.00473200
mov eax, dword [ebp + 0x98]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
sub ecx, 4
push ecx
mov ecx, dword [esp + 0x60]
sub edx, 5
push edx
push edi
push ecx
call fcn.00473200
mov eax, dword [ebp + 0x98]
mov edx, dword [eax + 0x10]
mov ecx, dword [eax + 0x14]
push 4
sub edx, 0xa
push edx
mov edx, dword [esp + 0x60]
sub ecx, 4
push ecx
mov ecx, dword [esp + 0x1c]
push 5
push 4
push edx
push edi
push ecx
call fcn.00473280
mov eax, dword [ebp + 0x98]
mov edx, dword [eax + 0x14]
sub edi, esi
sub edx, 8
push edx
mov ecx, dword [esp + 0x34]
push 5
push 4
push 0
push edi
push 5
push esi
push ecx
call fcn.00473280
mov eax, dword [ebp + 0x98]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edx, 8
push edx
mov edx, dword [esp + 0x60]
push 5
push 4
sub ecx, 5
push ecx
push edi
push 5
push esi
push edx
call fcn.00473280
mov eax, dword [ebp + 0x98]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
sub ecx, 8
push ecx
mov ecx, dword [esp + 0x5c]
sub edx, 0xa
push edx
mov edx, dword [esp + 0x18]
push 4
push 5
push edi
push ecx
push esi
push edx
call fcn.00473280
lea eax, [esp + 0x5c]
push eax
push ebx
mov dword [esp + 0x64], 0
call fcn.004b3eba
mov edx, dword [ebp + 0x88]
mov ecx, dword [esp + 0x5c]
push edx
mov edi, ebx
lea esi, [esp + 0x2c]
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ecx
call fcn.00427010
lea eax, [esp + 0x18]
xor edi, edi
push eax
push edi
push edi
mov dword [esp + 0x24], edi
call fcn.004b3ef0
mov ecx, dword [esp + 0x18]
push edi
push ecx
mov dword [esp + 0x24], eax
call fcn.004b3f08
cmp eax, edi
je 0x48804d
mov dword [esp + 0x1c], eax
mov edx, dword [esp + 0x18]
push edi
push edx
call fcn.004b3f14
cmp eax, edi
je 0x488060
mov dword [esp + 0x1c], eax
mov esi, dword [esp + 0x5c]
push 4
push esi
call fcn.004b3e72
cmp eax, edi
je 0x488074
mov dword [esp + 0x14], eax
push 3
push esi
call fcn.004b3efc
cmp eax, edi
je 0x488084
mov dword [esp + 0x14], eax
push 2
push esi
call fcn.004b3f98
cmp eax, edi
je 0x488094
mov dword [esp + 0x14], eax
test byte [ebp + 0x18], 2
mov eax, 0xffffff
jne 0x4880a4
mov eax, 0x6e6e6e
movzx edx, al
lea ecx, [esp + 0x5c]
or edx, 0xfffffe00
push ecx
movzx ecx, ah
shl edx, 8
shr eax, 0x10
or edx, ecx
movzx eax, al
shl edx, 8
or edx, eax
push edx
mov dword [esp + 0x38], vtable.Gdiplus::SolidBrush.0
mov dword [esp + 0x64], edi
call fcn.004b3f50
cmp dword [ebp + 0x78], 8
mov ecx, dword [esp + 0x5c]
mov edx, dword [ebp + 0x7c]
mov esi, dword [esp + 0x44]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x34], ecx
lea ecx, [edx + eax + 0xa]
mov edx, dword [ebp + 0x80]
mov dword [esp + 0x58], ecx
lea eax, [edx + esi + 5]
fild dword [esp + 0x58]
mov dword [esp + 0x58], eax
mov eax, dword [ebp + 0x74]
fstp dword [esp + 0x20]
fild dword [esp + 0x58]
fstp dword [esp + 0x24]
jb 0x488122
mov ecx, dword [ebp + 0x64]
jmp 0x488125
lea ecx, [ebp + 0x64]
push eax
push ecx
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x3c]
lea edx, [esp + 0x24]
lea eax, [esp + 0x2c]
lea edi, [esp + 0x34]
call fcn.004822b0
mov edx, dword [esp + 0x5c]
push edx
call fcn.004b3ecc
mov eax, dword [esp + 0x18]
push eax
call fcn.004b3ef6
mov ecx, dword [esp + 0x28]
push ecx
call fcn.004b3f2c
mov edx, dword [esp + 0x10]
push edx
call fcn.004b3e5a
cmp dword [ebp + 0xa4], 0
je 0x4881c4
push 1
push 1
push str.imagemenu_arrows.png
call fcn.004747e0
push eax
call fcn.00474a90
mov edi, dword [esp + 0x4c]
mov ecx, eax
mov eax, dword [esp + 0x48]
mov edx, dword [ecx + 0x14]
add eax, 0xfffffff6
mov dword [esp + 0x38], eax
sub eax, dword [ecx + 0x10]
push ebx
mov dword [esp + 0x34], eax
mov eax, edi
sub eax, edx
sub eax, esi
shr eax, 1
add eax, esi
add edx, eax
mov dword [esp + 0x38], eax
lea eax, [esp + 0x34]
mov dword [esp + 0x40], edx
call fcn.00472e40
jmp 0x488252
cmp dword [ebp + 0x58], 0
je 0x48824e
cmp dword [ebp + 0x5c], 8
jb 0x4881d9
mov eax, dword [ebp + 0x48]
jmp 0x4881dc
lea eax, [ebp + 0x48]
push 1
push 1
push eax
call fcn.004747e0
push eax
call fcn.00474a90
mov edi, eax
mov eax, dword [edi + 0x14]
mov ecx, dword [edi + 0x10]
mov esi, ebp
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], ecx
call fcn.004876d0
mov ecx, dword [esp + 0x44]
mov edx, eax
sub edx, dword [esp + 0x5c]
mov eax, dword [esp + 0x48]
shr edx, 1
sub eax, edx
sub eax, 0xa
mov dword [esp + 0x38], eax
sub eax, dword [edi + 0x10]
push ebx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x50]
sub eax, dword [esp + 0x5c]
sub eax, ecx
shr eax, 1
add eax, ecx
mov ecx, dword [edi + 0x14]
add ecx, eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x40], ecx
lea eax, [esp + 0x34]
mov ecx, edi
call fcn.00472e40
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x4c]
cmp dword [ebp + 0x3c], 0
je 0x4882b4
cmp dword [ebp + 0xb4], 0
je 0x4882b4
cmp dword [ebp + 0x40], 8
jb 0x48826c
mov ebp, dword [ebp + 0x2c]
jmp 0x48826f
add ebp, 0x2c
push 1
push 1
push ebp
call fcn.004747e0
push eax
call fcn.00474a90
mov ecx, eax
mov eax, dword [esp + 0x40]
mov edx, dword [ecx + 0x10]
add eax, 0xa
add edx, eax
mov dword [esp + 0x40], eax
mov eax, dword [ecx + 0x14]
sub edi, eax
sub edi, esi
shr edi, 1
add edi, esi
add eax, edi
mov dword [esp + 0x4c], eax
push ebx
lea eax, [esp + 0x44]
mov dword [esp + 0x4c], edx
mov dword [esp + 0x48], edi
call fcn.00472e40
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x44
ret 8