Function at 0x474ea0
Capabilities:
Capture screenshot
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xa8
xor eax, eax
push ebx
mov dword [esp + 0x7c], eax
push ebp
xor ebp, ebp
mov dword [esp + 0x84], eax
push esi
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
push edi
mov edi, ecx
xor bl, bl
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x98], eax
mov eax, dword [edi + 4]
cmp eax, ebp
mov dword [esp + 0x70], edx
mov esi, 1
mov byte [esp + 0x39], 0
mov dword [esp + 0x5c], ebp
mov byte [esp + 0x3b], 0
mov byte [esp + 0x18], 0
mov dword [esp + 0x3c], ebp
mov byte [esp + 0x1b], bl
mov byte [esp + 0x1a], bl
mov byte [esp + 0x19], 1
mov byte [esp + 0x3a], bl
mov dword [esp + 0x58], 0xcc0020
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x14], ebp
mov dword [esp + 0x74], ebp
mov dword [esp + 0x10], ebp
mov dword [esp + 0x68], ebp
mov dword [esp + 0x54], ebp
mov dword [esp + 0x64], ebp
mov dword [esp + 0x20], ebp
mov dword [esp + 0x34], ebp
je 0x475022
cmp byte [eax], 0x2d
jne 0x475022
push 0x68
push eax
call fcn.00570260
add esp, 8
test eax, eax
je 0x474f5b
mov byte [esp + 0x39], 1
mov ecx, dword [edi + 4]
push 0x69
push ecx
call fcn.00570260
add esp, 8
test eax, eax
je 0x474f75
mov dword [esp + 0x58], 0xbb0226
mov edx, dword [edi + 4]
push 0x6e
push edx
call fcn.00570260
add esp, 8
test eax, eax
je 0x474f8c
mov byte [esp + 0x19], 0
mov eax, dword [edi + 4]
push 0x63
push eax
call fcn.00570260
add esp, 8
test eax, eax
je 0x474fa4
mov bl, 1
mov byte [esp + 0x1b], bl
mov ecx, dword [edi + 4]
push 0x73
push ecx
call fcn.00570260
add esp, 8
test eax, eax
je 0x474fbb
mov byte [esp + 0x3b], 1
mov edx, dword [edi + 4]
push 0x74
push edx
call fcn.00570260
add esp, 8
test eax, eax
je 0x474fd2
mov byte [esp + 0x1a], 1
mov eax, dword [edi + 4]
push 0x6c
push eax
call fcn.00570260
add esp, 8
test eax, eax
je 0x474fe9
mov byte [esp + 0x18], 1
mov ecx, dword [edi + 4]
push 0x6d
push ecx
call fcn.00570260
add esp, 8
test eax, eax
je 0x475003
mov dword [esp + 0x5c], 1
mov edx, dword [edi + 4]
push 0x6f
push edx
call fcn.00570260
add esp, 8
test eax, eax
je 0x47501d
mov dword [esp + 0x20], 1
mov esi, 2
mov ecx, dword [edi + esi*4]
cmp ecx, ebp
jne 0x475046
test bl, bl
je 0x475a5c
call fcn.00474e60
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0xa8
ret
xor edx, edx
call fcn.004e2e60
mov ebx, eax
cmp ebx, ebp
mov dword [esp + 0x50], ebx
je 0x475a5f
cmp dword [ebx + 0x864], ebp
je 0x475a5f
cmp dword [ebx + 0x744], ebp
je 0x475a5f
cmp dword [ebx + 0x948], ebp
je 0x475a5f
cmp dword [ebx + 0x708], 9
jne 0x475a5f
mov al, byte [esp + 0x39]
test al, al
je 0x47509b
mov ecx, dword [ebx]
call fcn.00496a30
mov eax, dword [edi + esi*4 + 4]
inc esi
cmp eax, ebp
jne 0x4750c7
mov al, byte [esp + 0x19]
test al, al
je 0x475a5c
mov ecx, ebx
call fcn.00471dd0
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0xa8
ret
mov cl, byte [esp + 0x1a]
test cl, cl
je 0x4750dd
push eax
call fcn.00570543
add esp, 4
mov dword [esp + 0x3c], eax
inc esi
mov eax, dword [edi + esi*4]
cmp eax, ebp
je 0x475a5c
cmp dword [edi + esi*4 + 4], ebp
je 0x475a5c
push eax
call fcn.005705cb
mov dword [esp + 0x28], eax
mov eax, dword [edi + esi*4 + 4]
push eax
call fcn.005705cb
mov dword [esp + 0x30], eax
or eax, 0xffffffff
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov al, byte [esp + 0x43]
add esp, 8
add esi, 2
test al, al
je 0x47515a
mov ecx, dword [edi + esi*4]
cmp ecx, ebp
je 0x47515a
call fcn.004f4570
test eax, eax
je 0x47515a
cmp dword [edi + esi*4 + 4], ebp
je 0x47515a
mov ecx, dword [edi + esi*4]
push ecx
call fcn.005705cb
mov edx, dword [edi + esi*4 + 4]
push edx
mov dword [esp + 0x34], eax
call fcn.005705cb
add esp, 8
mov dword [esp + 0x30], eax
add esi, 2
mov ecx, dword [edi + esi*4]
cmp ecx, ebp
je 0x4751bb
call fcn.004f4570
test eax, eax
je 0x4751bb
cmp dword [edi + esi*4 + 4], ebp
je 0x4751bb
cmp dword [edi + esi*4 + 8], ebp
je 0x4751bb
cmp dword [edi + esi*4 + 0xc], ebp
je 0x4751bb
mov eax, dword [edi + esi*4]
push eax
call fcn.005705cb
mov ecx, dword [edi + esi*4 + 4]
push ecx
mov dword [esp + 0x48], eax
call fcn.005705cb
mov edx, dword [edi + esi*4 + 8]
push edx
mov dword [esp + 0x50], eax
call fcn.005705cb
mov ebp, eax
mov eax, dword [edi + esi*4 + 0xc]
push eax
mov dword [esp + 0x58], ebp
call fcn.005705cb
add esp, 0x10
mov ebx, eax
add esi, 4
jmp 0x4751cf
xor eax, eax
or ebp, 0xffffffff
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ebp
or ebx, 0xffffffff
mov ecx, dword [edi + esi*4]
test ecx, ecx
mov dword [esp + 0x4c], ebx
je 0x475210
mov eax, dword [esp + 0x20]
test eax, eax
je 0x475228
call fcn.004f4600
test eax, eax
je 0x475228
mov ecx, dword [edi + esi*4]
push ecx
call fcn.005705cb
add esp, 4
test eax, eax
mov dword [esp + 0x20], eax
jge 0x475207
mov dword [esp + 0x20], 0
mov eax, dword [edi + esi*4 + 4]
inc esi
test eax, eax
jne 0x475228
mov edx, dword [edi]
push 0
push 0
xor ecx, ecx
call fcn.00479790
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xa8
ret
mov edx, dword [esp + 0x70]
push 0
push 0x104
push edx
mov edx, esi
mov ecx, edi
call fcn.004f51f0
test eax, eax
jl 0x475252
mov esi, dword [esp + 0x70]
mov edx, esi
mov ecx, esi
call fcn.0041da40
test eax, eax
jne 0x47526a
mov edx, dword [edi]
push 3
push 0
xor ecx, ecx
call fcn.00479790
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xa8
ret
mov ecx, esi
call fcn.00421290
test eax, eax
jne 0x4752bc
mov eax, dword [esp + 0x20]
mov ecx, dword [0x5b4310]
push eax
push esi
push ecx
call dword [sym.imp.SHELL32.dll_ExtractIconA]
cmp eax, 1
mov dword [esp + 0x34], eax
je 0x4752b3
test eax, eax
je 0x4752b3
lea edx, [esp + 0x88]
push edx
push eax
call dword [sym.imp.USER32.dll_GetIconInfo]
test eax, eax
jne 0x4752da
mov ecx, dword [esp + 0x34]
push ecx
call dword [sym.imp.USER32.dll_DestroyIcon]
mov edx, dword [edi]
push esi
push edx
jmp 0x4753a0
mov al, byte [esp + 0x1b]
test al, al
mov ecx, esi
je 0x475337
xor edx, edx
call fcn.00474e00
test eax, eax
mov dword [esp + 0x1c], eax
je 0x475341
mov byte [esp + 0x3a], 1
mov edx, dword [esp + 0x50]
mov eax, dword [edx + 0x864]
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
test edi, edi
mov dword [esp + 0x60], edi
jne 0x4753c8
mov eax, dword [esp + 0x34]
test eax, eax
je 0x475308
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
mov eax, dword [esp + 0x94]
test eax, eax
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
je 0x47531c
push eax
call esi
mov eax, dword [esp + 0x98]
test eax, eax
je 0x47532a
push eax
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xa8
ret
mov edx, 1
call fcn.00474e00
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x1c], 0
mov edx, dword [ecx]
lea eax, [esp + 0x1c]
push eax
mov ecx, esi
call fcn.004212e0
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x4752da
mov eax, dword [0x5a7194]
test eax, eax
je 0x47539c
call fcn.00474cc0
mov eax, dword [esp + 0x50]
lea edx, [esp + 0x1c]
mov dword [esp + 0x1c], 0
push edx
mov edx, dword [eax]
mov ecx, esi
call fcn.004212e0
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x475367
jmp 0x4752da
mov ecx, dword [edi]
push esi
push ecx
xor edx, edx
mov ecx, 0x835
call fcn.0041d620
push eax
push 0x5a7240
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xa8
ret
mov eax, dword [esp + 0x34]
test eax, eax
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
je 0x4753f0
mov edx, dword [esp + 0x98]
lea ecx, [esp + 0xa0]
push ecx
push 0x18
push edx
call dword [sym.imp.GDI32.dll_GetObjectA]
jmp 0x47542c
push edi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
test eax, eax
mov dword [esp + 0x14], eax
je 0x475987
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call esi
lea edx, [esp + 0xa0]
push edx
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x20]
push 0x18
push eax
call dword [sym.imp.GDI32.dll_GetObjectA]
mov edi, dword [esp + 0x60]
push edi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
test eax, eax
mov dword [esp + 0x10], eax
je 0x475978
mov ecx, dword [esp + 0x50]
mov edx, dword [ecx + 0x948]
push edx
push eax
call esi
mov edi, dword [esp + 0x2c]
cmp edi, 0xffffffff
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0xa8]
jne 0x47548e
cmp dword [esp + 0x30], 0xffffffff
jne 0x47548e
cmp ebp, 0xffffffff
jne 0x475484
cmp ebx, ebp
jne 0x475484
mov edi, ecx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], eax
jmp 0x475497
mov edi, ebp
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], ebx
cmp ebp, 0xffffffff
jne 0x4754a3
cmp ebx, ebp
jne 0x4754a3
mov ebp, ecx
mov ebx, eax
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], ebx
mov al, byte [esp + 0x1a]
test al, al
mov eax, dword [esp + 0x34]
je 0x475754
test eax, eax
jne 0x475754
mov ecx, dword [esp + 0x60]
push ecx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
test eax, eax
mov dword [esp + 0x54], eax
je 0x475987
mov edx, dword [esp + 0x60]
push ebx
push ebp
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
test eax, eax
mov dword [esp + 0x64], eax
je 0x475987
mov edi, dword [esp + 0x54]
push eax
push edi
call esi
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push 0xcc0020
push ecx
push edx
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x20]
push eax
push ebx
push ebp
push 0
push 0
push edi
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [esp + 0x68]
push ecx
push edi
call esi
mov edx, dword [esp + 0x6c]
mov eax, dword [esp + 0x14]
push edx
push eax
call esi
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x14]
push ecx
push edx
call esi
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x3c]
push eax
push ebx
push ebp
mov edx, edi
call fcn.004769e0
test eax, eax
mov dword [esp + 0x68], eax
je 0x475987
mov esi, dword [esp + 0x10]
push 0
push esi
call dword [sym.imp.GDI32.dll_SetTextColor]
push 0xffffff
push esi
mov dword [esp + 0x60], eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [esp + 0x9c], eax
mov al, byte [esp + 0x18]
test al, al
je 0x4756b0
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x2c]
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x78], edx
mov dword [esp + 0x84], eax
add eax, ebx
cmp ebx, eax
mov dword [esp + 0x78], esi
mov esi, dword [esp + 0x44]
mov dword [esp + 0x80], ecx
mov dword [esp + 0x7c], esi
mov dword [esp + 0x80], ebp
mov dword [esp + 0x3c], eax
jg 0x475730
add ecx, edx
mov dword [esp + 0x20], ecx
jmp 0x4755e0
mov eax, dword [esp + 0x3c]
lea ecx, [edi + ebx]
cmp ecx, eax
jle 0x4755f7
mov edi, dword [esp + 0x30]
mov eax, dword [esp + 0x28]
sub edi, ebx
add edi, eax
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
cmp ecx, eax
mov esi, dword [esp + 0x48]
mov ebp, ecx
jg 0x475695
jmp 0x475613
mov ecx, dword [esp + 0x24]
lea edx, [esi + ebp]
cmp edx, eax
jle 0x475622
mov esi, dword [esp + 0x2c]
sub esi, ebp
add esi, ecx
cmp dword [esp + 0x5c], 1
jne 0x475634
mov ecx, dword [esp + 0x10]
push edi
push esi
push edi
mov edx, esi
jmp 0x475640
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
xor edx, edx
call fcn.0041a800
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x10]
push 0x8800c6
push edi
push esi
push 0
push 0
push eax
push edi
push esi
push ebx
push ebp
push ecx
call dword [sym.imp.GDI32.dll_StretchBlt]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0xee0086
push edi
push esi
push 0
push 0
push edx
push edi
push esi
push ebx
push ebp
push eax
call dword [sym.imp.GDI32.dll_StretchBlt]
test esi, esi
jle 0x475695
mov eax, dword [esp + 0x20]
add ebp, esi
cmp ebp, eax
jle 0x47560f
test edi, edi
jle 0x475730
mov eax, dword [esp + 0x3c]
add ebx, edi
cmp ebx, eax
jle 0x4755e0
jmp 0x475730
cmp dword [esp + 0x5c], 1
jne 0x4756cd
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x2c]
push ebx
push ebp
push ecx
mov edx, edi
mov ecx, esi
call fcn.0041a800
jmp 0x4756e2
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
xor edx, edx
call fcn.0041a800
mov edi, dword [esp + 0x2c]
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
push 0x8800c6
push ebx
push ebp
push 0
push 0
push edx
mov edx, dword [esp + 0x3c]
push eax
push edi
push ecx
push edx
push esi
call dword [sym.imp.GDI32.dll_StretchBlt]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x28]
push 0xee0086
push ebx
push ebp
push 0
push 0
push eax
mov eax, dword [esp + 0x3c]
push ecx
push edi
push edx
push eax
push esi
call dword [sym.imp.GDI32.dll_StretchBlt]
mov ecx, dword [esp + 0x58]
mov esi, dword [esp + 0x10]
push ecx
push esi
call dword [sym.imp.GDI32.dll_SetTextColor]
mov edx, dword [esp + 0x9c]
push edx
push esi
call dword [sym.imp.GDI32.dll_SetBkColor]
jmp 0x475908
mov cl, byte [esp + 0x18]
test cl, cl
je 0x475888
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x2c]
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x78], edx
mov dword [esp + 0x84], eax
add eax, ebx
cmp ebx, eax
mov dword [esp + 0x78], esi
mov esi, dword [esp + 0x44]
mov dword [esp + 0x80], ecx
mov dword [esp + 0x7c], esi
mov dword [esp + 0x80], ebp
mov dword [esp + 0x3c], eax
jg 0x475908
add ecx, edx
mov dword [esp + 0x20], ecx
lea ecx, [edi + ebx]
cmp ecx, eax
jle 0x4757c4
mov edi, dword [esp + 0x30]
mov eax, dword [esp + 0x28]
sub edi, ebx
add edi, eax
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x20]
mov esi, dword [esp + 0x48]
mov ebp, eax
jg 0x47586d
jmp 0x4757e0
mov eax, dword [esp + 0x24]
mov edi, edi
mov ecx, dword [esp + 0x20]
lea edx, [esi + ebp]
cmp edx, ecx
jle 0x4757f3
mov esi, dword [esp + 0x2c]
sub esi, ebp
add esi, eax
mov eax, dword [esp + 0x34]
test eax, eax
je 0x475813
mov ecx, dword [esp + 0x10]
push 3
push 0
push 0
push edi
push esi
push eax
push ebx
push ebp
push ecx
call dword [sym.imp.USER32.dll_DrawIconEx]
jmp 0x47585b
cmp dword [esp + 0x5c], 1
jne 0x475825
mov ecx, dword [esp + 0x10]
push edi
push esi
push edi
mov edx, esi
jmp 0x475831
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
xor edx, edx
call fcn.0041a800
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x18]
push edi
push esi
push eax
mov eax, dword [esp + 0x20]
push ecx
push edx
push edi
push esi
push ebx
push ebp
push eax
call dword [sym.imp.GDI32.dll_StretchBlt]
test esi, esi
jle 0x47586d
mov eax, dword [esp + 0x20]
add ebp, esi
cmp ebp, eax
jle 0x4757da
test edi, edi
jle 0x475908
mov eax, dword [esp + 0x3c]
add ebx, edi
cmp ebx, eax
jle 0x4757b1
jmp 0x475908
test eax, eax
je 0x4758b0
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x28]
push 3
push 0
push 0
push ecx
mov ecx, dword [esp + 0x20]
push edi
push eax
mov eax, dword [esp + 0x3c]
push edx
push eax
push ecx
call dword [sym.imp.USER32.dll_DrawIconEx]
jmp 0x475908
cmp dword [esp + 0x5c], 1
jne 0x4758c6
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x10]
push ebx
push ebp
push edx
mov edx, edi
jmp 0x4758d2
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
xor edx, edx
call fcn.0041a800
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push eax
mov eax, dword [esp + 0x18]
push ebx
push ebp
push ecx
mov ecx, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x3c]
push eax
mov eax, dword [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x2c]
push edi
push edx
push eax
push ecx
call dword [sym.imp.GDI32.dll_StretchBlt]
mov al, byte [esp + 0x19]
test al, al
je 0x47593e
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x10]
push 0xcc0020
push ecx
push eax
push edx
mov edx, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x40]
push edx
push ecx
push eax
mov eax, dword [esp + 0x80]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x50]
add ecx, edx
cmp ecx, dword [eax + 0x954]
jle 0x47595a
mov dword [eax + 0x954], ecx
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x4c]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
add ecx, edx
cmp ecx, dword [eax + 0x958]
jle 0x475978
mov dword [eax + 0x958], ecx
mov eax, dword [esp + 0x34]
test eax, eax
je 0x475987
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
mov eax, dword [esp + 0x94]
test eax, eax
mov ebx, dword [sym.imp.GDI32.dll_DeleteObject]
je 0x47599b
push eax
call ebx
mov eax, dword [esp + 0x98]
test eax, eax
je 0x4759a9
push eax
call ebx
mov edi, dword [esp + 0x54]
test edi, edi
mov ebp, dword [sym.imp.GDI32.dll_DeleteDC]
je 0x4759c9
mov eax, dword [esp + 0x68]
test eax, eax
je 0x4759c6
push eax
push edi
call esi
push eax
call ebx
push edi
call ebp
mov edi, dword [esp + 0x10]
test edi, edi
je 0x4759e0
mov eax, dword [esp + 0x74]
test eax, eax
je 0x4759dd
push eax
push edi
call esi
push edi
call ebp
mov edi, dword [esp + 0x14]
test edi, edi
je 0x475a02
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x4759ff
push eax
push edi
call esi
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4759ff
push eax
call ebx
push edi
call ebp
mov al, byte [esp + 0x3a]
test al, al
jne 0x475a36
mov al, byte [esp + 0x1b]
test al, al
je 0x475a23
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x70]
call fcn.00474d40
test eax, eax
jne 0x475a36
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x475a2e
push eax
call ebx
mov dword [esp + 0x1c], 0
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x50]
mov edx, dword [ecx + 0x864]
push eax
push edx
call dword [sym.imp.USER32.dll_ReleaseDC]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0xa8
ret
push ebp
jmp 0x475a61
push 7
mov edx, dword [edi]
push ebp
xor ecx, ecx
call fcn.00479790
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xa8
ret