Function at 0x475300
Capabilities:
Check for peb beingdebugged flag
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x4d37d2
mov eax, dword fs:[0]
push eax
sub esp, 0x1a8
mov eax, dword [0x4fa36c]
xor eax, esp
mov dword [esp + 0x170], eax
push ebx
push esi
push edi
mov eax, dword [0x4fa36c]
xor eax, esp
push eax
lea eax, [esp + 0x1b8]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
xor edi, edi
mov dword [esp + 0x30], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x20], eax
mov dword [esp + 0x64], edx
mov dword [esp + 0x6c], edi
mov dword [esp + 0x70], edi
mov dword [esp + 0x17c], 7
mov dword [esp + 0x178], edi
mov word [esp + 0x168], di
lea ecx, [eax + 2]
mov dx, word [eax]
add eax, 2
cmp dx, di
jne 0x475384
sub eax, ecx
sar eax, 1
push eax
mov eax, dword [esp + 0x24]
push eax
lea esi, [esp + 0x16c]
call fcn.004018b0
mov dword [esp + 0x1c0], edi
mov ecx, 7
mov dword [esp + 0x144], ecx
mov dword [esp + 0x140], edi
mov word [esp + 0x130], di
fldz
mov eax, dword [ebx + 4]
fstp qword [esp + 0xac]
mov edx, dword [ebx]
mov dword [esp + 0x38], eax
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x34], edx
mov edx, dword [ebx + 8]
mov dword [esp + 0x40], eax
xor eax, eax
mov dword [esp + 0x3c], edx
mov dword [esp + 0x80], edi
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x54], edi
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x9c], edi
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0x2c], edi
mov byte [esp + 0x44], 0xff
mov byte [esp + 0x4c], al
mov byte [esp + 0x2b], al
mov byte [esp + 0x48], al
mov byte [esp + 0x28], al
mov dword [esp + 0x74], edi
mov byte [esp + 0x27], al
mov byte [esp + 0x2a], al
mov dword [esp + 0x128], ecx
mov dword [esp + 0x124], edi
mov word [esp + 0x114], di
mov dword [esp + 0x160], ecx
mov dword [esp + 0x15c], edi
mov word [esp + 0x14c], di
mov edx, ecx
xor ebx, ebx
mov dword [esp + 0x78], edi
mov byte [esp + 0x29], al
mov dword [esp + 0x10c], edx
mov dword [esp + 0x108], ebx
mov word [esp + 0xf8], di
mov dword [esp + 0xf0], ecx
mov dword [esp + 0xec], edi
mov word [esp + 0xdc], di
mov byte [esp + 0x1c0], 5
mov dword [esp + 0x1c], edi
mov dword [esp + 0x68], edi
mov edi, edi
cmp dword [esp + 0x68], 1
jne 0x4754df
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x20], ecx
cmp dword [esp + 0x20], 0
je 0x47610f
mov eax, dword [esp + 0x20]
cmp word [eax], 0
je 0x47610f
jmp 0x47550e
mov edx, dword [esp + 0x10c]
mov ebx, dword [esp + 0x108]
cmp edx, 8
mov ecx, dword [esp + 0xf8]
mov eax, ecx
jae 0x475523
lea eax, [esp + 0xf8]
lea edi, [eax + ebx*2]
test edi, edi
je 0x475551
cmp edx, 8
mov eax, ecx
jae 0x475538
lea eax, [esp + 0xf8]
cmp eax, edi
ja 0x475551
cmp edx, 8
mov eax, ecx
jae 0x47554a
lea eax, [esp + 0xf8]
lea eax, [eax + ebx*2]
cmp edi, eax
jbe 0x47556b
call fcn.004ab591
mov edx, dword [esp + 0x10c]
mov ebx, dword [esp + 0x108]
mov ecx, dword [esp + 0xf8]
cmp edx, 8
jb 0x47587d
test ecx, ecx
mov esi, ecx
je 0x4755a1
cmp edx, 8
mov eax, ecx
jae 0x475588
lea eax, [esp + 0xf8]
cmp eax, esi
ja 0x4755a1
cmp edx, 8
mov eax, ecx
jae 0x47559a
lea eax, [esp + 0xf8]
lea ecx, [eax + ebx*2]
cmp esi, ecx
jbe 0x4755a6
call fcn.004ab591
push edi
lea eax, [esp + 0xf8]
push eax
push esi
push eax
lea edx, [esp + 0xe0]
push edx
call fcn.00417090
mov ecx, dword [esp + 0xf0]
cmp ecx, 8
mov edx, dword [esp + 0xdc]
mov eax, edx
jae 0x4755da
lea eax, [esp + 0xdc]
mov ebx, dword [esp + 0xec]
lea edi, [eax + ebx*2]
test edi, edi
je 0x47560f
cmp ecx, 8
mov eax, edx
jae 0x4755f6
lea eax, [esp + 0xdc]
cmp eax, edi
ja 0x47560f
cmp ecx, 8
mov eax, edx
jae 0x475608
lea eax, [esp + 0xdc]
lea eax, [eax + ebx*2]
cmp edi, eax
jbe 0x475629
call fcn.004ab591
mov ecx, dword [esp + 0xf0]
mov ebx, dword [esp + 0xec]
mov edx, dword [esp + 0xdc]
cmp ecx, 8
jb 0x475889
test edx, edx
mov esi, edx
je 0x47565f
cmp ecx, 8
mov eax, edx
jae 0x475646
lea eax, [esp + 0xdc]
cmp eax, esi
ja 0x47565f
cmp ecx, 8
mov eax, edx
jae 0x475658
lea eax, [esp + 0xdc]
lea ecx, [eax + ebx*2]
cmp esi, ecx
jbe 0x475664
call fcn.004ab591
push edi
lea eax, [esp + 0xdc]
push eax
push esi
push eax
lea edx, [esp + 0xd8]
push edx
call fcn.00417090
mov eax, dword [esp + 0x20]
movzx eax, word [eax]
test ax, ax
mov ebx, dword [sym.imp.USER32.dll_CharNextW]
je 0x4756d0
cmp ax, 0x3d
je 0x4756d0
mov edi, dword [esp + 0x20]
push edi
call ebx
mov esi, eax
cmp edi, esi
jae 0x4756c4
mov ecx, dword [esp + 0x20]
movzx eax, word [ecx]
push eax
lea edi, [esp + 0xf8]
call fcn.004145f0
mov eax, dword [esp + 0x20]
add eax, 2
cmp eax, esi
mov dword [esp + 0x20], eax
jb 0x4756a1
mov edx, dword [esp + 0x20]
movzx eax, word [edx]
test ax, ax
jne 0x47568e
mov eax, dword [esp + 0x20]
mov cx, word [eax]
add eax, 2
cmp cx, 0x3d
mov dword [esp + 0x20], eax
jne 0x476101
mov dx, word [eax]
add eax, 2
cmp dx, 0x27
mov dword [esp + 0x20], eax
jne 0x476101
movzx eax, word [eax]
test ax, ax
je 0x475746
cmp ax, 0x27
je 0x475746
mov edi, dword [esp + 0x20]
push edi
call ebx
mov esi, eax
cmp edi, esi
jae 0x47573a
mov eax, dword [esp + 0x20]
movzx eax, word [eax]
push eax
lea edi, [esp + 0xdc]
call fcn.004145f0
mov eax, dword [esp + 0x20]
add eax, 2
cmp eax, esi
mov dword [esp + 0x20], eax
jb 0x475717
mov ecx, dword [esp + 0x20]
movzx eax, word [ecx]
test ax, ax
jne 0x475704
mov eax, dword [esp + 0x20]
mov dx, word [eax]
add eax, 2
cmp dx, 0x27
mov dword [esp + 0x20], eax
jne 0x476101
cmp dword [esp + 0xec], 0
je 0x4760e3
mov edi, dword [esp + 0x108]
cmp edi, 4
mov esi, edi
jb 0x47577f
mov esi, 4
mov ecx, dword [esp + 0x10c]
mov edx, dword [esp + 0xf8]
mov ebx, 8
cmp ecx, ebx
jae 0x47579d
lea edx, [esp + 0xf8]
test esi, esi
mov eax, str.file
jbe 0x4757cc
jmp 0x4757b0
mov bx, word [edx]
cmp bx, word [eax]
jne 0x475895
add edx, 2
add eax, 2
sub esi, 1
jne 0x4757b0
mov ebx, 8
cmp edi, 4
jb 0x4757e1
xor eax, eax
cmp edi, 4
setne al
test eax, eax
je 0x4760cb
cmp edi, 3
mov esi, edi
jb 0x4757ed
mov esi, 3
cmp ecx, ebx
mov edx, dword [esp + 0xf8]
jae 0x4757ff
lea edx, [esp + 0xf8]
test esi, esi
mov eax, 0x4df348
jbe 0x47582c
jmp 0x475810
mov bx, word [edx]
cmp bx, word [eax]
jne 0x4758b3
add edx, 2
add eax, 2
sub esi, 1
jne 0x475810
mov ebx, 8
cmp edi, 3
jb 0x475841
xor eax, eax
cmp edi, 3
setne al
test eax, eax
je 0x4760cb
cmp edi, 7
mov edx, edi
jb 0x47584d
mov edx, 7
cmp ecx, ebx
mov ecx, dword [esp + 0xf8]
jae 0x47585f
lea ecx, [esp + 0xf8]
test edx, edx
mov eax, str.restype
jbe 0x4758e1
mov si, word [ecx]
cmp si, word [eax]
jne 0x4758d1
add ecx, 2
add eax, 2
sub edx, 1
jne 0x475868
jmp 0x4758e1
lea esi, [esp + 0xf8]
jmp 0x47557a
lea esi, [esp + 0xdc]
jmp 0x475638
mov dx, bx
cmp dx, word [eax]
sbb eax, eax
and eax, 0xfffffffe
add eax, 1
je 0x4757c7
mov ebx, 8
jmp 0x4757d9
mov dx, bx
cmp dx, word [eax]
sbb eax, eax
and eax, 0xfffffffe
add eax, 1
je 0x475827
mov ebx, 8
jmp 0x475839
mov cx, word [ecx]
cmp cx, word [eax]
sbb eax, eax
and eax, 0xfffffffe
add eax, 1
jne 0x4758ee
cmp edi, 7
jb 0x475909
xor eax, eax
cmp edi, 7
setne al
test eax, eax
jne 0x475909
push 0xffffffffffffffff
push eax
lea edx, [esp + 0xe0]
push edx
lea eax, [esp + 0x138]
jmp 0x4760de
lea eax, [esp + 0xf4]
push eax
mov ecx, str.round
call fcn.0041d850
test eax, eax
jne 0x47597a
cmp dword [esp + 0xf0], ebx
mov eax, dword [esp + 0xdc]
jae 0x475936
lea eax, [esp + 0xdc]
push 0xa
lea ecx, [esp + 0x20]
push ecx
push eax
call fcn.004ae087
add esp, 0xc
cmp dword [esp + 0xf0], ebx
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0xdc]
jae 0x475961
lea eax, [esp + 0xdc]
push 0xa
lea edx, [esp + 0x20]
push edx
push eax
call fcn.004ae087
add esp, 0xc
mov dword [esp + 0x70], eax
jmp 0x4760e3
lea eax, [esp + 0xf4]
push eax
mov ecx, str.iconsize
call fcn.0041d850
test eax, eax
jne 0x4759c0
cmp dword [esp + 0xf0], ebx
mov eax, dword [esp + 0xdc]
jae 0x4759a7
lea eax, [esp + 0xdc]
push 0xa
lea ecx, [esp + 0x20]
push ecx
push eax
call fcn.004ae087
add esp, 0xc
mov dword [esp + 0x74], eax
jmp 0x4760e3
lea edx, [esp + 0xf4]
push edx
mov ecx, str.dest
call fcn.0041d850
test eax, eax
jne 0x475a67
cmp dword [esp + 0xf0], ebx
mov eax, dword [esp + 0xdc]
jae 0x4759f1
lea eax, [esp + 0xdc]
push 0xa
lea ecx, [esp + 0x20]
push ecx
push eax
call fcn.004ae087
add esp, 0xc
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x1c]
push 0xa
lea edx, [esp + 0x20]
push edx
add eax, 2
push eax
call fcn.004ae087
mov edx, dword [esp + 0x28]
add esp, 0xc
push 0xa
lea ecx, [esp + 0x20]
push ecx
add edx, 2
push edx
mov dword [esp + 0x90], eax
call fcn.004ae087
mov ecx, dword [esp + 0x28]
add esp, 0xc
mov dword [esp + 0x88], eax
push 0xa
lea eax, [esp + 0x20]
push eax
add ecx, 2
push ecx
call fcn.004ae087
add esp, 0xc
mov dword [esp + 0x8c], eax
jmp 0x4760e3
lea edx, [esp + 0xf4]
push edx
mov ecx, 0x4deb14
call fcn.0041d850
test eax, eax
jne 0x475b02
cmp dword [esp + 0xf0], ebx
mov eax, dword [esp + 0xdc]
jae 0x475a98
lea eax, [esp + 0xdc]
push 0xa
lea ecx, [esp + 0x20]
push ecx
push eax
call fcn.004ae087
add esp, 0xc
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x1c]
push 0xa
lea edx, [esp + 0x20]
push edx
add eax, 2
push eax
call fcn.004ae087
mov edx, dword [esp + 0x28]
add esp, 0xc
push 0xa
lea ecx, [esp + 0x20]
push ecx
add edx, 2
push edx
mov dword [esp + 0x64], eax
call fcn.004ae087
mov ecx, dword [esp + 0x28]
add esp, 0xc
mov dword [esp + 0x5c], eax
push 0xa
lea eax, [esp + 0x20]
push eax
add ecx, 2
push ecx
call fcn.004ae087
add esp, 0xc
mov dword [esp + 0x60], eax
jmp 0x4760e3
lea edx, [esp + 0xf4]
push edx
mov ecx, str.corner
call fcn.0041d850
test eax, eax
jne 0x475ba9
cmp dword [esp + 0xf0], ebx
mov eax, dword [esp + 0xdc]
jae 0x475b33
lea eax, [esp + 0xdc]
push 0xa
lea ecx, [esp + 0x20]
push ecx
push eax
call fcn.004ae087
add esp, 0xc
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x1c]
push 0xa
lea edx, [esp + 0x20]
push edx
add eax, 2
push eax
call fcn.004ae087
mov edx, dword [esp + 0x28]
add esp, 0xc
push 0xa
lea ecx, [esp + 0x20]
push ecx
add edx, 2
push edx
mov dword [esp + 0xac], eax
call fcn.004ae087
mov ecx, dword [esp + 0x28]
add esp, 0xc
mov dword [esp + 0xa4], eax
push 0xa
lea eax, [esp + 0x20]
push eax
add ecx, 2
push ecx
call fcn.004ae087
add esp, 0xc
mov dword [esp + 0xa8], eax
jmp 0x4760e3
lea edx, [esp + 0xf4]
push edx
mov ecx, 0x4dd164
call fcn.0041d850
test eax, eax
jne 0x475c21
cmp dword [esp + 0xf0], ebx
mov eax, dword [esp + 0xdc]
jae 0x475bd6
lea eax, [esp + 0xdc]
mov ecx, str.true
jmp 0x475be0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x475c10
test dx, dx
je 0x475c02
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x475c10
add eax, 4
add ecx, 4
test dx, dx
jne 0x475be0
xor eax, eax
test eax, eax
sete byte [esp + 0x2a]
jmp 0x4760e3
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete byte [esp + 0x2a]
jmp 0x4760e3
lea eax, [esp + 0xf4]
push eax
mov ecx, str.mask
call fcn.0041d850
test eax, eax
jne 0x475ca7
xor edi, edi
lea eax, [esp + 0xd8]
call fcn.0042bba0
cmp word [eax], 0x23
mov eax, dword [esp + 0xdc]
jne 0x475c7e
cmp dword [esp + 0xf0], ebx
jae 0x475c62
lea eax, [esp + 0xdc]
push 0x10
lea ecx, [esp + 0x20]
push ecx
add eax, 2
push eax
call fcn.004ae0b0
add esp, 0xc
mov dword [esp + 0x2c], eax
jmp 0x4760e3
cmp dword [esp + 0xf0], ebx
jae 0x475c8e
lea eax, [esp + 0xdc]
push 0x10
lea edx, [esp + 0x20]
push edx
push eax
call fcn.004ae0b0
add esp, 0xc
mov dword [esp + 0x2c], eax
jmp 0x4760e3
lea eax, [esp + 0xf4]
push eax
mov ecx, str.fade
call fcn.0041d850
test eax, eax
jne 0x475ced
cmp dword [esp + 0xf0], ebx
mov eax, dword [esp + 0xdc]
jae 0x475cd4
lea eax, [esp + 0xdc]
push 0xa
lea ecx, [esp + 0x20]
push ecx
push eax
call fcn.004ae0b0
add esp, 0xc
mov byte [esp + 0x44], al
jmp 0x4760e3
lea edx, [esp + 0xf4]
push edx
mov ecx, str.hole
call fcn.0041d850
test eax, eax
jne 0x475d65
cmp dword [esp + 0xf0], ebx
mov eax, dword [esp + 0xdc]
jae 0x475d1a
lea eax, [esp + 0xdc]
mov ecx, str.true
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x475d52
test dx, dx
je 0x475d42
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x475d52
add eax, 4
add ecx, 4
test dx, dx
jne 0x475d20
xor eax, eax
test eax, eax
sete al
mov byte [esp + 0x4c], al
jmp 0x4760e3
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
mov byte [esp + 0x4c], al
jmp 0x4760e3
lea ecx, [esp + 0xf4]
push ecx
mov ecx, str.alphaClose
call fcn.0041d850
test eax, eax
jne 0x475dd8
cmp dword [esp + 0xf0], ebx
mov eax, dword [esp + 0xdc]
jae 0x475d92
lea eax, [esp + 0xdc]
mov ecx, str.true
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x475dc7
test dx, dx
je 0x475db9
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x475dc7
add eax, 4
add ecx, 4
test dx, dx
jne 0x475d97
xor eax, eax
test eax, eax
sete byte [esp + 0x2b]
jmp 0x4760e3
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete byte [esp + 0x2b]
jmp 0x4760e3
lea edx, [esp + 0xf4]
push edx
mov ecx, str.encrypt
call fcn.0041d850
test eax, eax
jne 0x475e55
cmp dword [esp + 0xf0], ebx
mov eax, dword [esp + 0xdc]
jae 0x475e05
lea eax, [esp + 0xdc]
mov ecx, str.true
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x475e42
test dx, dx
je 0x475e32
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x475e42
add eax, 4
add ecx, 4
test dx, dx
jne 0x475e10
xor eax, eax
test eax, eax
sete al
mov byte [esp + 0x48], al
jmp 0x4760e3
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
mov byte [esp + 0x48], al
jmp 0x4760e3
lea ecx, [esp + 0xf4]
push ecx
mov ecx, str.icon
call fcn.0041d850
test eax, eax
jne 0x475ec8
cmp dword [esp + 0xf0], ebx
mov eax, dword [esp + 0xdc]
jae 0x475e82
lea eax, [esp + 0xdc]
mov ecx, str.true
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x475eb7
test dx, dx
je 0x475ea9
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x475eb7
add eax, 4
add ecx, 4
test dx, dx
jne 0x475e87
xor eax, eax
test eax, eax
sete byte [esp + 0x28]
jmp 0x4760e3
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete byte [esp + 0x28]
jmp 0x4760e3
lea edx, [esp + 0xf4]
push edx
mov ecx, str.reverse
call fcn.0041d850
test eax, eax
jne 0x475f41
cmp dword [esp + 0xf0], ebx
mov eax, dword [esp + 0xdc]
jae 0x475ef5
lea eax, [esp + 0xdc]
mov ecx, str.true
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x475f30
test dx, dx
je 0x475f22
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x475f30
add eax, 4
add ecx, 4
test dx, dx
jne 0x475f00
xor eax, eax
test eax, eax
sete byte [esp + 0x27]
jmp 0x4760e3
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete byte [esp + 0x27]
jmp 0x4760e3
lea eax, [esp + 0xf4]
push eax
mov ecx, str.rotate
call fcn.0041d850
test eax, eax
jne 0x475f85
cmp dword [esp + 0xf0], ebx
mov eax, dword [esp + 0xdc]
jae 0x475f6e
lea eax, [esp + 0xdc]
push 0
push eax
call fcn.004ae278
fstp qword [esp + 0xb4]
add esp, 8
jmp 0x4760e3
lea ecx, [esp + 0xf4]
push ecx
mov ecx, str.rgnimage
call fcn.0041d850
test eax, eax
jne 0x475fb2
push 0xffffffffffffffff
push eax
lea edx, [esp + 0xe0]
push edx
lea eax, [esp + 0x11c]
jmp 0x4760de
lea eax, [esp + 0xf4]
push eax
mov ecx, str.rgnrestype
call fcn.0041d850
test eax, eax
jne 0x475fd4
lea eax, [esp + 0x148]
jmp 0x4760d2
lea edx, [esp + 0xf4]
push edx
mov ecx, str.rgnmask
call fcn.0041d850
test eax, eax
jne 0x47605a
xor edi, edi
lea eax, [esp + 0xd8]
call fcn.0042bba0
cmp word [eax], 0x23
mov eax, dword [esp + 0xdc]
jne 0x476031
cmp dword [esp + 0xf0], ebx
jae 0x476015
lea eax, [esp + 0xdc]
push 0x10
lea ecx, [esp + 0x20]
push ecx
add eax, 2
push eax
call fcn.004ae0b0
add esp, 0xc
mov dword [esp + 0x78], eax
jmp 0x4760e3
cmp dword [esp + 0xf0], ebx
jae 0x476041
lea eax, [esp + 0xdc]
push 0x10
lea edx, [esp + 0x20]
push edx
push eax
call fcn.004ae0b0
add esp, 0xc
mov dword [esp + 0x78], eax
jmp 0x4760e3
lea eax, [esp + 0xf4]
push eax
mov ecx, str.gray
call fcn.0041d850
test eax, eax
jne 0x4760e3
cmp dword [esp + 0xf0], ebx
mov eax, dword [esp + 0xdc]
jae 0x476087
lea eax, [esp + 0xdc]
mov ecx, str.true
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4760bd
test dx, dx
je 0x4760b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4760bd
add eax, 4
add ecx, 4
test dx, dx
jne 0x476090
xor eax, eax
test eax, eax
sete byte [esp + 0x29]
jmp 0x4760e3
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete byte [esp + 0x29]
jmp 0x4760e3
lea eax, [esp + 0x164]
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0xe0]
push ecx
call fcn.004017c0
mov eax, dword [esp + 0x20]
mov dx, word [eax]
add eax, 2
cmp dx, 0x20
mov dword [esp + 0x20], eax
jne 0x476101
cmp word [eax], 0
jne 0x475500
mov edx, dword [esp + 0x10c]
mov ebx, dword [esp + 0x108]
mov eax, dword [esp + 0x68]
add eax, 1
cmp eax, 2
mov dword [esp + 0x68], eax
jl 0x4754d0
cmp byte [esp + 0x2a], 0
mov ecx, dword [esp + 0x7c]
je 0x47615d
mov eax, dword [ecx + 8]
mov edx, dword [esp + 0x88]
mov ecx, dword [ecx + 4]
mov esi, dword [esp + 0x84]
sub eax, edx
mov dword [esp + 0x34], eax
add esi, ecx
add eax, edx
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x38], esi
jmp 0x476198
mov eax, dword [ecx]
mov edx, dword [esp + 0x80]
mov ecx, dword [ecx + 4]
add edx, eax
mov dword [esp + 0x34], edx
mov edx, dword [esp + 0x84]
add edx, ecx
mov dword [esp + 0x38], edx
mov edx, dword [esp + 0x88]
test edx, edx
je 0x47618d
add eax, edx
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x8c]
test eax, eax
je 0x47619e
add ecx, eax
mov dword [esp + 0x40], ecx
xor eax, eax
cmp dword [esp + 0x140], eax
jne 0x4761d7
cmp dword [esp + 0x17c], 8
mov edx, dword [esp + 0x168]
jae 0x4761c1
lea edx, [esp + 0x168]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x2c]
push eax
call fcn.0046f110
add esp, 4
jmp 0x476256
mov edx, dword [esp + 0x130]
mov ebx, 8
cmp dword [esp + 0x144], ebx
jae 0x4761f3
lea edx, [esp + 0x130]
sub esp, 0x1c
mov esi, esp
mov dword [esi + 0x14], eax
mov dword [esi + 0x18], 7
mov word [esi + 4], ax
mov eax, edx
mov dword [esp + 0x80], esp
lea edi, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x476212
sub eax, edi
sar eax, 1
push eax
push edx
call fcn.004018b0
cmp dword [esp + 0x198], ebx
mov eax, dword [esp + 0x184]
jae 0x47623f
lea eax, [esp + 0x184]
mov ecx, dword [esp + 0x48]
push ecx
push eax
call fcn.004ab5b2
add esp, 4
push eax
call fcn.0046f1b0
add esp, 0x24
mov ebx, eax
test ebx, ebx
jne 0x4765de
cmp byte [esp + 0x28], al
je 0x4764db
cmp dword [esp + 0x140], ebx
jne 0x4762a1
cmp dword [esp + 0x17c], 8
mov esi, dword [esp + 0x168]
jae 0x47628b
lea esi, [esp + 0x168]
call fcn.0046f940
mov edi, dword [esp + 0x74]
mov eax, dword [eax + 0x38]
push 0x10
push edi
push edi
push 1
push esi
push eax
jmp 0x4762e6
cmp dword [esp + 0x17c], 8
jb 0x4762b8
mov edx, dword [esp + 0x168]
mov dword [esp + 0x48], edx
jmp 0x4762c3
lea eax, [esp + 0x168]
mov dword [esp + 0x48], eax
call fcn.0046f940
mov edi, dword [esp + 0x74]
mov ecx, dword [esp + 0x48]
mov esi, dword [eax + 0x38]
push ebx
push edi
push edi
push 1
push ecx
call fcn.004ab5b2
movzx edx, ax
add esp, 4
push edx
push esi
call dword [sym.imp.USER32.dll_LoadImageW]
mov esi, eax
cmp esi, ebx
jne 0x47640b
mov esi, 8
cmp dword [esp + 0xf0], esi
jb 0x476314
mov eax, dword [esp + 0xdc]
push eax
call fcn.004a93cc
add esp, 4
cmp dword [esp + 0x10c], esi
mov edi, 7
mov dword [esp + 0xf0], edi
mov dword [esp + 0xec], ebx
mov word [esp + 0xdc], bx
jb 0x476348
mov ecx, dword [esp + 0xf8]
push ecx
call fcn.004a93cc
add esp, 4
cmp dword [esp + 0x160], esi
mov dword [esp + 0x10c], edi
mov dword [esp + 0x108], ebx
mov word [esp + 0xf8], bx
jb 0x476377
mov edx, dword [esp + 0x14c]
push edx
call fcn.004a93cc
add esp, 4
cmp dword [esp + 0x128], esi
mov dword [esp + 0x160], edi
mov dword [esp + 0x15c], ebx
mov word [esp + 0x14c], bx
jb 0x4763a6
mov eax, dword [esp + 0x114]
push eax
call fcn.004a93cc
add esp, 4
cmp dword [esp + 0x144], esi
mov dword [esp + 0x128], edi
mov dword [esp + 0x124], ebx
mov word [esp + 0x114], bx
jb 0x4763d5
mov ecx, dword [esp + 0x130]
push ecx
call fcn.004a93cc
add esp, 4
cmp dword [esp + 0x17c], esi
mov dword [esp + 0x144], edi
mov dword [esp + 0x140], ebx
mov word [esp + 0x130], bx
jb 0x476404
mov edx, dword [esp + 0x168]
push edx
call fcn.004a93cc
add esp, 4
xor al, al
jmp 0x476ad1
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
push esi
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x54]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov eax, dword [esp + 0x44]
push eax
call fcn.004742e0
add esp, 0x18
push esi
mov ebx, eax
call dword [sym.imp.USER32.dll_DestroyIcon]
cmp dword [esp + 0x140], 0
jne 0x4764a4
push ebx
sub esp, 0x1c
mov eax, esp
xor ecx, ecx
mov dword [esp + 0x84], esp
push 0xffffffffffffffff
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], 7
push ecx
mov word [eax + 4], cx
lea ecx, [esp + 0x18c]
push ecx
call fcn.004017c0
lea esi, [esp + 0xa0]
call fcn.0046f070
add esp, 0x20
cmp dword [esp + 0x98], 8
jb 0x4764d3
mov edx, dword [esp + 0x84]
push edx
call fcn.004a93cc
add esp, 4
jmp 0x4764d3
cmp dword [esp + 0x17c], 8
mov eax, dword [esp + 0x168]
jae 0x4764bc
lea eax, [esp + 0x168]
push eax
call fcn.004ab5b2
add esp, 4
mov esi, eax
call fcn.0046f940
push ebx
push esi
call fcn.0046eaa0
test ebx, ebx
jne 0x4765de
mov edi, 8
cmp dword [esp + 0xf0], edi
jb 0x4764f9
mov eax, dword [esp + 0xdc]
push eax
call fcn.004a93cc
add esp, 4
xor esi, esi
cmp dword [esp + 0x10c], edi
mov ebx, 7
mov word [esp + 0xdc], si
mov dword [esp + 0xec], esi
mov dword [esp + 0xf0], ebx
jb 0x47652f
mov ecx, dword [esp + 0xf8]
push ecx
call fcn.004a93cc
add esp, 4
cmp dword [esp + 0x160], edi
mov word [esp + 0xf8], si
mov dword [esp + 0x108], esi
mov dword [esp + 0x10c], ebx
jb 0x47655e
mov edx, dword [esp + 0x14c]
push edx
call fcn.004a93cc
add esp, 4
cmp dword [esp + 0x128], edi
mov word [esp + 0x14c], si
mov dword [esp + 0x15c], esi
mov dword [esp + 0x160], ebx
jb 0x47658d
mov eax, dword [esp + 0x114]
push eax
call fcn.004a93cc
add esp, 4
cmp dword [esp + 0x144], edi
mov dword [esp + 0x128], ebx
mov dword [esp + 0x124], esi
mov word [esp + 0x114], si
jb 0x4765bc
mov ecx, dword [esp + 0x130]
push ecx
call fcn.004a93cc
add esp, 4
cmp dword [esp + 0x17c], edi
mov dword [esp + 0x144], ebx
mov dword [esp + 0x140], esi
mov word [esp + 0x130], si
jmp 0x4763f2
xor edi, edi
cmp dword [esp + 0x30], edi
jne 0x476701
mov esi, 8
cmp dword [esp + 0xf0], esi
jb 0x476608
mov eax, dword [esp + 0xdc]
push eax
call fcn.004a93cc
add esp, 4
cmp dword [esp + 0x10c], esi
mov ebx, 7
mov word [esp + 0xdc], di
mov dword [esp + 0xec], edi
mov dword [esp + 0xf0], ebx
jb 0x47663c
mov ecx, dword [esp + 0xf8]
push ecx
call fcn.004a93cc
add esp, 4
cmp dword [esp + 0x160], esi
mov word [esp + 0xf8], di
mov dword [esp + 0x108], edi
mov dword [esp + 0x10c], ebx
jb 0x47666b
mov edx, dword [esp + 0x14c]
push edx
call fcn.004a93cc
add esp, 4
cmp dword [esp + 0x128], esi
mov word [esp + 0x14c], di
mov dword [esp + 0x15c], edi
mov dword [esp + 0x160], ebx
jb 0x47669a
mov eax, dword [esp + 0x114]
push eax
call fcn.004a93cc
add esp, 4
cmp dword [esp + 0x144], esi
mov word [esp + 0x114], di
mov dword [esp + 0x124], edi
mov dword [esp + 0x128], ebx
jb 0x4766c9
mov ecx, dword [esp + 0x130]
push ecx
call fcn.004a93cc
add esp, 4
cmp dword [esp + 0x17c], esi
mov dword [esp + 0x144], ebx
mov dword [esp + 0x140], edi
mov word [esp + 0x130], di
jb 0x476acf
mov edx, dword [esp + 0x168]
push edx
call fcn.004a93cc
add esp, 4
jmp 0x476acf
mov dword [esp + 0x2c], edi
cmp byte [esp + 0x29], 0
mov byte [esp + 0x1c0], 6
je 0x476750
mov edi, ebx
call fcn.0047a1c0
xor esi, esi
cmp eax, esi
jne 0x476748
mov edi, 8
cmp dword [esp + 0xf0], edi
jb 0x4764fb
mov eax, dword [esp + 0xdc]
push eax
call fcn.004a93cc
add esp, 4
jmp 0x4764fb
mov ebx, eax
mov dword [esp + 0x2c], eax
xor edi, edi
cmp dword [esp + 0x54], edi
jne 0x476776
cmp dword [esp + 0x5c], edi
jne 0x476776
cmp dword [esp + 0x58], edi
jne 0x476776
cmp dword [esp + 0x60], edi
jne 0x476776
mov eax, dword [ebx + 4]
mov ecx, dword [ebx + 8]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ecx
cmp byte [esp + 0x2b], 0
je 0x476786
mov byte [ebx + 0xc], 0
mov byte [esp + 0x44], 0xff
mov edx, dword [esp + 0x7c]
mov esi, dword [sym.imp.USER32.dll_IntersectRect]
push edx
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0xc0]
push ecx
call esi
test eax, eax
jne 0x4767cb
mov esi, dword [esp + 0x2c]
cmp esi, edi
je 0x4765ea
cmp dword [esi], edi
je 0x4767bd
mov edx, dword [esi]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
push esi
call fcn.004a93cc
add esp, 4
jmp 0x4765ea
mov eax, dword [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0xc0]
push edx
call esi
test eax, eax
je 0x476a7e
xor eax, eax
mov dword [esp + 0x90], edi
mov dword [esp + 0x94], edi
mov dword [esp + 0x98], edi
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov byte [esp + 0x1c0], 7
cmp dword [esp + 0x6c], edi
jne 0x47682e
cmp dword [esp + 0x70], edi
je 0x47687a
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0xb8]
push eax
push ecx
mov ecx, dword [esp + 0xc4]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0xd8]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0xdc]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x48]
push edx
lea edi, [esp + 0x9c]
mov dword [eax + 0xc], ecx
call fcn.004701f0
add esp, 0x1c
xor edi, edi
cmp dword [esp + 0x124], edi
je 0x476952
cmp dword [esp + 0x15c], edi
jne 0x4768b5
cmp dword [esp + 0x128], 8
mov edx, dword [esp + 0x114]
jae 0x4768a8
lea edx, [esp + 0x114]
push edi
xor ecx, ecx
call fcn.0046f110
add esp, 4
jmp 0x47690c
mov edx, dword [esp + 0x14c]
mov esi, 8
cmp dword [esp + 0x160], esi
jae 0x4768d1
lea edx, [esp + 0x14c]
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x80], esp
call fcn.00401740
cmp dword [esp + 0x144], esi
mov eax, dword [esp + 0x130]
jae 0x4768f9
lea eax, [esp + 0x130]
push edi
push eax
call fcn.004ab5b2
add esp, 4
push eax
call fcn.0046f1b0
add esp, 0x24
cmp eax, edi
je 0x476a72
mov ecx, dword [esp + 0x78]
push ecx
push eax
push ebx
lea eax, [esp + 0x40]
call fcn.004784f0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x476a72
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x50]
push edx
push eax
mov eax, dword [esp + 0x38]
push 1
push ecx
lea edx, [esp + 0x44]
push edx
push esi
push eax
jmp 0x476a20
cmp byte [esp + 0x27], 0
je 0x4769ae
push ebx
lea edx, [esp + 0x38]
call fcn.004781d0
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
add esp, 4
push ecx
mov ecx, dword [esp + 0x54]
mov esi, eax
movzx eax, byte [ebx + 0xc]
push edx
push eax
mov eax, dword [esp + 0x3c]
push ecx
lea edx, [esp + 0x44]
push edx
push esi
push eax
lea eax, [esp + 0xb8]
lea edi, [esp + 0x70]
call fcn.00476b00
add esp, 0x1c
test esi, esi
je 0x476a72
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x476a72
fldz
fld qword [esp + 0xac]
fucom st(1)
fnstsw ax
fstp st(1)
test ah, 0x44
jnp 0x476a3c
sub esp, 8
fstp qword [esp]
push ebx
lea eax, [esp + 0x40]
call fcn.004778e0
mov esi, eax
add esp, 0xc
cmp esi, edi
je 0x476a72
mov ecx, dword [esp + 0x3c]
sub ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x40]
xor eax, eax
sub edx, dword [esp + 0x38]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x4c]
push eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x48]
push ecx
mov dword [esp + 0x68], edx
movzx edx, byte [ebx + 0xc]
push edx
mov edx, dword [esp + 0x3c]
push eax
lea ecx, [esp + 0x44]
push ecx
push esi
push edx
lea eax, [esp + 0xb8]
lea edi, [esp + 0x70]
call fcn.00476b00
add esp, 0x1c
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x476a72
mov eax, dword [esp + 0x4c]
fstp st(0)
movzx edx, byte [ebx + 0xc]
mov ecx, dword [esp + 0x44]
push eax
mov eax, dword [esp + 0x54]
push ecx
push edx
mov edx, dword [ebx]
push eax
mov eax, dword [esp + 0x40]
lea ecx, [esp + 0x44]
push ecx
push edx
push eax
lea eax, [esp + 0xb8]
lea edi, [esp + 0x70]
call fcn.00476b00
add esp, 0x1c
lea eax, [esp + 0x80]
call fcn.00470140
lea esi, [esp + 0x2c]
call fcn.004742b0
lea esi, [esp + 0xd8]
call fcn.0046b6e0
lea esi, [esp + 0xf4]
call fcn.0046b6e0
lea esi, [esp + 0x148]
call fcn.0046b6e0
lea esi, [esp + 0x110]
call fcn.0046b6e0
lea esi, [esp + 0x12c]
call fcn.0046b6e0
lea esi, [esp + 0x164]
call fcn.0046b6e0
mov al, 1
mov ecx, dword [esp + 0x1b8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x170]
xor ecx, esp
call fcn.004a9ce9
mov esp, ebp
pop ebp
ret