Function at 0x47f710
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4b4d85
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4dbe18]
xor eax, esp
push eax
lea eax, [esp + 0xc4]
mov dword fs:[0], eax
mov eax, dword [esp + 0xd4]
xor ebp, ebp
mov dword [esp + 0x70], 9
cmp dword [esp + 0xe0], ebp
je 0x47fcf2
mov ecx, dword [eax + 4]
mov edi, dword [eax]
mov esi, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov edx, eax
sub edx, ecx
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], eax
test dl, 1
je 0x47f784
inc eax
mov dword [esp + 0x40], eax
mov edx, esi
sub edx, edi
test dl, 1
je 0x47f792
inc esi
mov dword [esp + 0x3c], esi
mov edx, esi
mov ebx, eax
sub edx, edi
sub ebx, ecx
cmp edx, ebx
jge 0x47f7aa
mov eax, ecx
sub eax, edi
add eax, esi
mov dword [esp + 0x40], eax
jmp 0x47f7b4
mov esi, edi
sub esi, ecx
add esi, eax
mov dword [esp + 0x3c], esi
sub eax, ecx
neg ecx
sub esi, edi
push ecx
mov dword [esp + 0x7c], eax
neg edi
push edi
lea eax, [esp + 0x3c]
push eax
mov dword [esp + 0x80], esi
call dword [sym.imp.USER32.dll_OffsetRect]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
mov esi, dword [esp + 0x40]
inc eax
dec edx
mov dword [esp + 0x34], eax
add eax, edx
mov dword [esp + 0x18], eax
fild dword [esp + 0x18]
inc ecx
fld qword [0x4c54b0]
mov dword [esp + 0x38], ecx
dec esi
fmul st(1), st(0)
add ecx, esi
fxch st(1)
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0x44]
fstp dword [esp + 0x2c]
push ecx
push ebp
fimul dword [esp + 0x20]
mov dword [esp + 0x44], edx
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], ebp
fstp dword [esp + 0x20]
fld dword [esp + 0x34]
fstp dword [esp + 0x5c]
fld dword [esp + 0x20]
fstp dword [esp + 0x60]
call sub.gdiplus.dll_GdipCreatePath
mov dword [esp + 0x48], eax
lea edx, [esp + 0x7c]
push edx
mov dword [esp + 0xd0], ebp
push ebp
mov dword [esp + 0x84], ebp
call sub.gdiplus.dll_GdipCreatePath
mov dword [esp + 0x80], eax
lea eax, [esp + 0x8c]
push eax
push ebp
mov dword [esp + 0x94], ebp
call sub.gdiplus.dll_GdipCreatePath
mov dword [esp + 0x90], eax
mov ebx, dword [esp + 0xe4]
cmp ebx, ebp
je 0x47fbb9
mov edx, dword [esp + 0x34]
mov esi, dword [esp + 0x38]
lea ecx, [edx + ebx]
mov dword [esp + 0x18], ecx
fild dword [esp + 0x18]
lea eax, [esi + ebx]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x3c]
fstp dword [esp + 0x28]
mov ecx, eax
fild dword [esp + 0x18]
lea edi, [ebx + ebx]
sub ecx, edi
sub ecx, edx
fstp dword [esp + 0x1c]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x40]
fild dword [esp + 0x18]
mov ebp, ecx
sub ebp, edi
fstp dword [esp + 0x2c]
sub ebp, esi
mov dword [esp + 0x18], ebp
fild dword [esp + 0x18]
sub eax, edx
sub ecx, esi
sub esp, 8
fstp dword [esp + 0x20]
lea esi, [esp + 0x4c]
fld dword [esp + 0x30]
fstp dword [esp + 0xa8]
fld dword [esp + 0x24]
mov dword [esp + 0x24], eax
fstp dword [esp + 0xac]
lea eax, [esp + 0x64]
fld dword [esp + 0x34]
fstp dword [esp + 0xb0]
fld dword [esp + 0x20]
fstp dword [esp + 0xb4]
fild dword [esp + 0x3c]
fstp dword [esp + 0x20]
fild dword [esp + 0x40]
fstp dword [esp + 0x28]
fild dword [esp + 0x24]
mov dword [esp + 0x24], ecx
fstp dword [esp + 0x30]
fild dword [esp + 0x24]
fstp dword [esp + 0x24]
fld dword [esp + 0x20]
fstp dword [esp + 0x64]
fld dword [esp + 0x28]
fstp dword [esp + 0x68]
fld dword [esp + 0x30]
fstp dword [esp + 0x6c]
fld dword [esp + 0x24]
fstp dword [esp + 0x70]
fld dword [esp + 0xe4]
fstp dword [esp + 4]
fld dword [esp + 0xe0]
fstp dword [esp]
call fcn.00480340
fld dword [esp + 0xdc]
sub esp, 8
fstp dword [esp + 4]
lea eax, [esp + 0x64]
fld dword [esp + 0xe0]
lea esi, [esp + 0x84]
fstp dword [esp]
call fcn.00480340
fld dword [esp + 0x28]
fmul qword [0x4c54b0]
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fstp dword [esp + 0x28]
fld dword [esp + 0xd8]
fadd dword [esp + 0xdc]
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fmul qword [0x4c5468]
fdiv qword [0x4c5460]
fst qword [esp + 0x94]
fst qword [esp + 0x4c]
call fcn.004ac0f0
fmul dword [esp + 0x28]
fadd dword [esp + 0x54]
fstp dword [esp + 0x20]
fld qword [esp + 0x4c]
call fcn.004abfc0
fmul dword [esp + 0x28]
fadd dword [esp + 0x58]
fstp dword [esp + 0x1c]
fld dword [esp + 0x20]
fstp dword [esp + 0x4c]
fld dword [esp + 0x1c]
fstp dword [esp + 0x50]
fld dword [esp + 0x2c]
fmul qword [0x4c54b0]
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fstp dword [esp + 0x2c]
fld qword [esp + 0x94]
fst qword [esp + 0x94]
call fcn.004ac0f0
fmul dword [esp + 0x2c]
fadd dword [esp + 0x54]
fstp dword [esp + 0x20]
fld qword [esp + 0x94]
call fcn.004abfc0
fmul dword [esp + 0x2c]
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x4c]
fadd dword [esp + 0x58]
lea esi, [esp + 0x44]
fstp dword [esp + 0x1c]
fld dword [esp + 0x20]
fstp dword [esp + 0x2c]
fld dword [esp + 0x1c]
fstp dword [esp + 0x30]
call fcn.004802e0
fld dword [esp + 0xdc]
sub esp, 8
fstp dword [esp + 4]
lea eax, [esp + 0xa8]
fld dword [esp + 0xe0]
fstp dword [esp]
call fcn.00480340
fld dword [esp + 0xdc]
sub esp, 8
fstp dword [esp + 4]
lea eax, [esp + 0xa8]
fld dword [esp + 0xe0]
lea esi, [esp + 0x94]
fstp dword [esp]
call fcn.00480340
fld dword [esp + 0x18]
fstp dword [esp + 0x18]
fld dword [esp + 0xd8]
fmul qword [0x4c5468]
fdiv qword [0x4c5460]
fst qword [esp + 0x5c]
fst qword [esp + 0x94]
call fcn.004ac0f0
fmul dword [esp + 0x18]
fadd dword [esp + 0x54]
fstp dword [esp + 0x20]
fld qword [esp + 0x94]
call fcn.004abfc0
fmul dword [esp + 0x18]
fadd dword [esp + 0x58]
fstp dword [esp + 0x1c]
fld dword [esp + 0x20]
fstp dword [esp + 0x20]
mov edx, dword [esp + 0x20]
fld dword [esp + 0x1c]
mov dword [esp + 0x4c], edx
fstp dword [esp + 0x24]
mov eax, dword [esp + 0x24]
fld dword [esp + 0x28]
mov dword [esp + 0x50], eax
fstp dword [esp + 0x18]
fld qword [esp + 0x5c]
fst qword [esp + 0x5c]
call fcn.004ac0f0
fmul dword [esp + 0x18]
fadd dword [esp + 0x54]
fstp dword [esp + 0x20]
fld qword [esp + 0x5c]
call fcn.004abfc0
fmul dword [esp + 0x18]
lea eax, [esp + 0x4c]
lea esi, [esp + 0x44]
fadd dword [esp + 0x58]
fstp dword [esp + 0x1c]
fld dword [esp + 0x20]
fstp dword [esp + 0x20]
mov ecx, dword [esp + 0x20]
fld dword [esp + 0x1c]
mov dword [esp + 0x2c], ecx
fstp dword [esp + 0x24]
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x2c]
mov dword [esp + 0x30], edx
call fcn.004802e0
xor ebp, ebp
jmp 0x47fc45
fild dword [esp + 0x34]
mov eax, dword [esp + 0x3c]
sub eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x40]
sub ecx, dword [esp + 0x38]
fstp dword [esp + 0x1c]
fild dword [esp + 0x38]
mov dword [esp + 0x20], eax
sub esp, 8
lea eax, [esp + 0xa8]
fstp dword [esp + 0x20]
lea esi, [esp + 0x4c]
fild dword [esp + 0x28]
mov dword [esp + 0x28], ecx
fstp dword [esp + 0x34]
fild dword [esp + 0x28]
fstp dword [esp + 0x28]
fld dword [esp + 0x24]
fstp dword [esp + 0xa8]
fld dword [esp + 0x20]
fstp dword [esp + 0xac]
fld dword [esp + 0x34]
fstp dword [esp + 0xb0]
fld dword [esp + 0x28]
fstp dword [esp + 0xb4]
fld dword [esp + 0xe4]
fstp dword [esp + 4]
fld dword [esp + 0xe0]
fstp dword [esp]
call fcn.00480270
mov eax, dword [esp + 0x44]
push ebp
push ebp
lea edx, [esp + 0xb8]
push edx
push eax
mov dword [esp + 0xcc], ebp
mov dword [esp + 0xc8], ebp
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xc0], ebp
call sub.gdiplus.dll_GdipGetPathWorldBoundsI
cmp eax, ebp
je 0x47fc7d
mov dword [esp + 0x48], eax
xor ecx, ecx
mov eax, 9
mov edx, 8
mul edx
seto cl
push 0x4e2d14
neg ecx
or ecx, eax
push ecx
call fcn.0048bb06
mov ebp, eax
add esp, 8
mov dword [esp + 0x4c], ebp
mov byte [esp + 0xcc], 3
test ebp, ebp
je 0x47fcc3
push 0x480260
push 9
push 8
push ebp
call fcn.00433930
jmp 0x47fcc5
xor ebp, ebp
mov byte [esp + 0xcc], 2
test ebp, ebp
jne 0x47fd0e
mov eax, dword [esp + 0x8c]
push eax
call sub.gdiplus.dll_GdipDeletePath
mov ecx, dword [esp + 0x7c]
push ecx
call sub.gdiplus.dll_GdipDeletePath
mov edx, dword [esp + 0x44]
push edx
call sub.gdiplus.dll_GdipDeletePath
xor eax, eax
mov ecx, dword [esp + 0xc4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbc
ret
fldz
sub esp, 8
fstp dword [esp + 0x30]
fild dword [esp + 0xc0]
fld qword [0x4c54b0]
fmul st(1), st(0)
fxch st(1)
fstp dword [esp + 0x20]
fimul dword [esp + 0xc4]
fstp dword [esp + 0x34]
fld qword [0x4c5520]
fstp qword [esp]
call fcn.004ac1e0
add esp, 8
call fcn.00490cd0
mov dword [esp + 0x20], eax
fild dword [esp + 0x20]
fmul qword [0x4c5468]
fdiv qword [0x4c5460]
call fcn.004abfc0
fld1
fdivrp st(1)
mov esi, ebp
fld dword [esp + 0x18]
fmul st(1)
fstp dword [esp + 0x1c]
fmul dword [esp + 0x2c]
fstp dword [esp + 0x4c]
fld dword [esp + 0x28]
call fcn.004ac0f0
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fmul dword [esp + 0x1c]
fadd dword [esp + 0x18]
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fiadd dword [esp + 0xb0]
fstp dword [esi]
fld dword [esp + 0x28]
call fcn.004abfc0
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
add esi, 8
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fmul dword [esp + 0x4c]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fiadd dword [esp + 0xb4]
fstp dword [esi - 4]
fld dword [esp + 0x28]
fadd qword [0x4c5518]
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fcom qword [0x4c5510]
fnstsw ax
test ah, 0x41
jnp 0x47fd82
mov eax, dword [ebp]
fstp st(0)
mov dword [ebp + 0x40], eax
mov ecx, dword [ebp + 4]
lea edx, [esp + 0x84]
push edx
mov dword [ebp + 0x44], ecx
push 0
mov dword [esp + 0x8c], 0
call sub.gdiplus.dll_GdipCreatePath
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x84]
push 9
push ebp
push eax
call sub.gdiplus.dll_GdipAddPathLine2
test eax, eax
je 0x47fe53
mov dword [esp + 0x88], eax
lea ecx, [esp + 0x84]
lea esi, [esp + 0x5c]
call fcn.0042dd70
lea ecx, [esp + 0x54]
mov byte [esp + 0xcc], 5
mov esi, dword [esp + 0x60]
push ecx
push esi
call sub.gdiplus.dll_GdipSetPathGradientCenterPoint
test eax, eax
je 0x47fe82
mov dword [esp + 0x64], eax
push 1
push esi
call sub.gdiplus.dll_GdipSetPathGradientGammaCorrection
test eax, eax
je 0x47fe92
mov dword [esp + 0x64], eax
test ebx, ebx
je 0x47fea9
push 0xffffff
push esi
call sub.gdiplus.dll_GdipSetPathGradientCenterColor
test eax, eax
je 0x47fea9
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0xe0]
lea edx, [esp + 0x70]
push edx
lea edi, [esp + 0x60]
call fcn.0042dc60
push ebp
call fcn.00480ff0
add esp, 4
push 0x10
call sub.gdiplus.dll_GdipAlloc
test eax, eax
je 0x47ff99
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x78]
push ecx
mov ecx, 0x26200a
mov esi, eax
call fcn.0042e1e0
mov dword [esp + 0x18], eax
test eax, eax
je 0x480060
mov edi, eax
call fcn.0042e1a0
mov ebx, eax
test ebx, ebx
je 0x480060
mov edx, dword [ebx]
push 2
push edx
call sub.gdiplus.dll_GdipSetPixelOffsetMode
test eax, eax
je 0x47ff19
mov dword [ebx + 4], eax
mov eax, dword [ebx]
push 4
push eax
call sub.gdiplus.dll_GdipSetSmoothingMode
test eax, eax
je 0x47ff2a
mov dword [ebx + 4], eax
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x60]
mov eax, dword [ebx]
push ecx
push edx
push eax
call sub.gdiplus.dll_GdipFillPath
test eax, eax
je 0x47ff43
mov dword [ebx + 4], eax
cmp dword [esp + 0xe4], 0
je 0x480052
mov edi, dword [esp + 0x70]
xor ecx, ecx
mov eax, edi
mov edx, 4
mul edx
seto cl
push 0x4e2d14
neg ecx
or ecx, eax
push ecx
call fcn.0048bb06
mov esi, eax
add esp, 8
mov dword [esp + 0x4c], esi
mov byte [esp + 0xcc], 6
test esi, esi
je 0x47ffa6
push 0x433920
push edi
push 4
push esi
call fcn.00433930
mov ebp, esi
jmp 0x47ffa8
mov dword [esp + 0x18], 0
jmp 0x480060
xor ebp, ebp
mov byte [esp + 0xcc], 5
test ebp, ebp
je 0x480052
cmp edi, 1
mov dword [ebp], 0
jle 0x480001
mov ecx, dword [esp + 0xe0]
mov esi, ebp
sub esi, ecx
lea eax, [ecx + 4]
dec edi
mov ecx, dword [eax]
mov edx, ecx
shr edx, 0x10
movzx edx, dl
or edx, 0x5000
shr ecx, 8
shl edx, 8
movzx ecx, cl
or edx, ecx
movzx ecx, byte [eax]
shl edx, 8
or edx, ecx
mov dword [esi + eax], edx
add eax, 4
sub edi, 1
jne 0x47ffd3
lea edx, [esp + 0x70]
push edx
mov eax, ebp
lea edi, [esp + 0x60]
call fcn.0042dc60
fld1
push ecx
fstp dword [esp]
mov eax, edi
lea esi, [esp + 0x78]
call fcn.0042e0b0
mov edx, esi
lea eax, [esp + 0x7c]
mov esi, ebx
call fcn.00423960
lea eax, [esp + 0x8c]
lea edx, [esp + 0x74]
call fcn.00423960
push ebp
call fcn.00480ff0
mov eax, dword [esp + 0x78]
add esp, 4
push eax
call sub.gdiplus.dll_GdipDeletePen
mov ecx, dword [ebx]
push ecx
call sub.gdiplus.dll_GdipDeleteGraphics
push ebx
call sub.gdiplus.dll_GdipFree
mov edx, dword [esp + 0x60]
push edx
call sub.gdiplus.dll_GdipDeleteBrush
mov eax, dword [esp + 0x84]
push eax
call sub.gdiplus.dll_GdipDeletePath
mov ecx, dword [esp + 0x8c]
push ecx
call sub.gdiplus.dll_GdipDeletePath
mov edx, dword [esp + 0x7c]
push edx
call sub.gdiplus.dll_GdipDeletePath
mov eax, dword [esp + 0x44]
push eax
call sub.gdiplus.dll_GdipDeletePath
mov eax, dword [esp + 0x18]
jmp 0x47fcf4