Function at 0x499ff0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3e8
push ebx
push ebp
push esi
push edi
mov ebp, ecx
mov eax, dword [ebp + 0x80]
xor ebx, ebx
cmp eax, ebx
jne 0x49a018
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [ebp + 0x84], ebx
je 0x49a00e
mov ecx, dword [ebp + 0x1958]
cmp ecx, ebx
je 0x49a00e
mov eax, dword [eax + 0x19fc]
mov dword [ebp + 0x214], eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x50]
call eax
test eax, eax
je 0x49a057
mov ecx, dword [ebp + 0x84]
test byte [ecx + 0xf4], 0x80
jne 0x49a057
mov eax, 1
jmp 0x49a059
xor eax, eax
mov ecx, dword [ebp + 0x1958]
mov dword [ebp + 0x218], eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x54]
call eax
test eax, eax
je 0x49a089
mov ecx, dword [ebp + 0x84]
test dword [ecx + 0xf4], 0x200
jne 0x49a089
mov eax, 1
jmp 0x49a08b
xor eax, eax
mov ecx, dword [ebp + 0x1958]
mov dword [ebp + 0x21c], eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x58]
call eax
test eax, eax
je 0x49a0bb
mov ecx, dword [ebp + 0x84]
test dword [ecx + 0xf4], 0x100
jne 0x49a0bb
mov eax, 1
jmp 0x49a0bd
xor eax, eax
mov edx, dword [ebp + 0x80]
mov dword [ebp + 0x220], eax
mov eax, dword [edx + 0xa8]
shr eax, 0x15
and eax, 1
mov dword [ebp + 0x254], eax
mov eax, dword [ebp + 0x1958]
mov eax, dword [eax + 0x18]
call fcn.00497020
mov ecx, dword [ebp + 0x1958]
mov dword [ebp + 0x25c], eax
mov edx, dword [ecx + 0x3c]
mov dword [ebp + 0x228], edx
mov eax, dword [ecx]
mov edx, dword [eax + 0x64]
call edx
mov edx, dword [ebp + 0x1958]
mov edi, dword [ebp + 0x84]
mov dword [ebp + 0x224], eax
mov eax, dword [edx + 0x2c]
mov dword [ebp + 0x22c], eax
mov eax, edi
call fcn.00497220
test eax, eax
je 0x49a13d
mov ecx, dword [ebp + 0x80]
cmp dword [ecx + 0x2c], ebx
jne 0x49a13d
mov eax, 1
jmp 0x49a13f
xor eax, eax
cmp edi, ebx
mov dword [ebp + 0x290], eax
je 0x49a176
mov eax, dword [edi + 0xf4]
and eax, 0x20000000
xor ecx, ecx
cmp eax, 0x20000000
sete cl
mov eax, ecx
cmp eax, ebx
je 0x49a176
mov eax, dword [ebp + 0x80]
cmp dword [eax + 0x2c], ebx
jne 0x49a176
mov eax, 1
jmp 0x49a178
xor eax, eax
mov esi, dword [ebp + 0x80]
mov dword [ebp + 0x628], eax
mov ecx, dword [edx + 0x34]
mov dword [ebp + 0x230], ecx
mov eax, dword [edx + 0x38]
mov dword [ebp + 0x234], eax
mov ecx, dword [esi + 0x28]
shr ecx, 1
and ecx, 1
mov dword [ebp + 0x260], ecx
mov eax, dword [edx + 0x160]
mov dword [ebp + 0x264], eax
test byte [esi + 0xb4], 1
jne 0x49a1c8
cmp dword [ebp + 0x25c], ebx
jne 0x49a1c8
mov eax, 1
jmp 0x49a1ca
xor eax, eax
mov dword [ebp + 0x268], eax
mov ecx, dword [edx + 0x5c]
mov dword [ebp + 0x270], ecx
mov eax, dword [edx + 0x68]
mov dword [ebp + 0x274], eax
cmp dword [edx + 0x58], ebx
je 0x49a1ed
mov dword [ebp + 0x268], ebx
cmp dword [ebp + 0x270], ebx
jne 0x49a201
cmp dword [ebp + 0x274], ebx
jne 0x49a201
xor eax, eax
jmp 0x49a206
mov eax, 1
mov dword [ebp + 0x278], eax
xor eax, eax
cmp esi, ebx
je 0x49a227
mov ecx, dword [esi + 0xf4]
and ecx, 0x40000
cmp ecx, 0x40000
sete al
mov dword [ebp + 0xa30], eax
mov eax, esi
call fcn.004976b0
mov dword [ebp + 0xa34], eax
mov edx, dword [esi + 0xf4]
shr edx, 0xd
and edx, 1
mov dword [ebp + 0x280], edx
test dword [esi + 0x54], 0x40000000
jne 0x49a27d
test byte [esi + 0x1d4], 2
jne 0x49a27d
test dword [esi + 0x134], 0x400000
jne 0x49a27d
cmp dword [ebp + 0x1960], ebx
jne 0x49a27d
mov eax, edi
call fcn.00497190
test eax, eax
je 0x49a282
mov eax, 1
cmp esi, ebx
mov dword [ebp + 0x1964], eax
jne 0x49a290
xor esi, esi
jmp 0x49a29c
mov esi, dword [esi + 0x168]
shr esi, 0xa
and esi, 1
cmp dword [ebp + 0x1960], ebx
mov dword [ebp + 0x284], esi
je 0x49a2c2
mov dword [ebp + 0x22c], ebx
mov dword [ebp + 0x230], ebx
mov dword [ebp + 0x234], ebx
mov dword [ebp + 0x19cc], ebp
call fcn.00503137
mov eax, dword [eax + 8]
push 1
push 0xd6
lea ecx, [ebp + 0x16b4]
push ecx
call fcn.0046c310
call fcn.00503137
mov eax, dword [eax + 8]
push 1
push 0xdc
lea edx, [ebp + 0x16e8]
push edx
call fcn.0046c310
call fcn.00503137
mov eax, dword [eax + 8]
push 1
push 0xdb
lea ecx, [ebp + 0x171c]
push ecx
call fcn.0046c310
call fcn.00503137
mov eax, dword [eax + 8]
push 1
push 0xd3
lea edx, [ebp + 0x1784]
push edx
call fcn.0046c310
call fcn.00503137
mov eax, dword [eax + 8]
push 1
push 0xd4
lea ecx, [ebp + 0x17b8]
push ecx
call fcn.0046c310
call fcn.00503137
mov eax, dword [eax + 8]
push 1
push 0xd7
lea edx, [ebp + 0x17ec]
push edx
call fcn.0046c310
call fcn.00503137
mov eax, dword [eax + 8]
push 1
push 0xd5
lea ecx, [ebp + 0x1820]
push ecx
call fcn.0046c310
call fcn.00503137
mov eax, dword [eax + 8]
push 1
push 0xd5
lea edx, [ebp + 0x1854]
push edx
call fcn.0046c310
call fcn.00503137
mov eax, dword [eax + 8]
push 1
push 0xda
lea ecx, [ebp + 0x1888]
push ecx
call fcn.0046c310
call fcn.00503137
mov eax, dword [eax + 8]
push 1
push 0x311
lea edx, [ebp + 0x18bc]
push edx
call fcn.0046c310
call fcn.00503137
mov eax, dword [eax + 8]
push 1
push 0x30f
lea ecx, [ebp + 0x18f0]
push ecx
call fcn.0046c310
call fcn.00503137
mov eax, dword [eax + 8]
push 1
push 0x310
lea edx, [ebp + 0x1924]
push edx
call fcn.0046c310
mov eax, dword [ebp + 0x214]
cmp eax, ebx
jne 0x49a425
call fcn.00503137
push 1
push 0xd9
lea ecx, [ebp + 0x1750]
push ecx
jmp 0x49a43d
cmp eax, 1
jne 0x49a445
call fcn.00503137
push 1
push 0xd8
lea edx, [ebp + 0x1750]
push edx
mov eax, dword [eax + 8]
call fcn.0046c310
mov eax, dword [ebp + 0x80]
test dword [eax + 0x34], 0x2000000
jne 0x49a472
test dword [eax + 0xa8], 0x200000
jne 0x49a468
cmp dword [ebp + 0x25c], ebx
je 0x49a472
mov dword [ebp + 0x1968], 1
cmp dword [ebp + 0x1968], ebx
lea esi, [ebp + 0xaf4]
push 0x1f4
je 0x49a489
push 0xe
jmp 0x49a48b
push 0x11
call fcn.00424c40
add esp, 8
cmp esi, ebx
jne 0x49a49b
xor eax, eax
jmp 0x49a49e
mov eax, dword [esi + 4]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push ebx
push eax
mov eax, dword [ebp + 0xb1c]
push 0x30
push eax
call edi
lea eax, [ebp + 0x88]
push eax
lea esi, [ebp + 0xafc]
push 0xdd
call fcn.004abce0
lea eax, [ebp + 0xaf4]
cmp eax, ebx
jne 0x49a4d6
xor eax, eax
jmp 0x49a4dc
mov eax, dword [ebp + 0xaf8]
mov ecx, dword [ebp + 0xbd4]
push ebx
push eax
push 0x30
push ecx
call edi
lea eax, [ebp + 0x88]
push eax
lea esi, [ebp + 0xbb4]
push 0xdd
call fcn.004abce0
lea eax, [ebp + 0xaf4]
cmp eax, ebx
jne 0x49a50e
xor eax, eax
jmp 0x49a514
mov eax, dword [ebp + 0xaf8]
mov edx, dword [ebp + 0xc8c]
push ebx
push eax
push 0x30
push edx
call edi
lea eax, [ebp + 0x88]
push eax
lea esi, [ebp + 0xc6c]
push 0xdd
call fcn.004abce0
lea eax, [ebp + 0xaf4]
cmp eax, ebx
jne 0x49a546
xor eax, eax
jmp 0x49a54c
mov eax, dword [ebp + 0xaf8]
push ebx
push eax
mov eax, dword [ebp + 0xd44]
push 0x30
push eax
call edi
lea eax, [ebp + 0x88]
push eax
lea esi, [ebp + 0xd24]
push 0xdd
call fcn.004abce0
cmp dword [ebp + 0x224], ebx
je 0x49a5d4
mov eax, 3
mov dword [ebp + 0xe7c], eax
mov ecx, 2
mov dword [ebp + 0xe80], ecx
mov edx, 1
mov dword [ebp + 0xe84], edx
lea esi, [ebp + 0xddc]
xor ecx, ecx
lea eax, [ebp + 0xaf4]
mov edx, esi
mov dword [ebp + 0xe88], ebx
call fcn.00402ac0
cmp dword [ebp + 0x228], ebx
lea eax, [ebp + 0x88]
push eax
je 0x49a5ca
push 0xce
jmp 0x49a5cf
push 0xdd
call fcn.004abce0
cmp dword [ebp + 0x22c], ebx
je 0x49a630
xor eax, eax
cmp dword [ebp + 0x1968], ebx
lea edx, [eax + 1]
mov dword [ebp + 0xf34], eax
je 0x49a5f3
xor ecx, ecx
jmp 0x49a5f8
mov ecx, 2
mov dword [ebp + 0xf38], ecx
mov dword [ebp + 0xf3c], edx
lea esi, [ebp + 0xe94]
xor ecx, ecx
lea eax, [ebp + 0xaf4]
mov edx, esi
mov dword [ebp + 0xf40], ebx
call fcn.00402ac0
lea eax, [ebp + 0x88]
push eax
push 0xdd
call fcn.004abce0
cmp dword [ebp + 0x230], ebx
je 0x49a68c
xor eax, eax
cmp dword [ebp + 0x1968], ebx
lea edx, [eax + 1]
mov dword [ebp + 0xfec], eax
je 0x49a64f
xor ecx, ecx
jmp 0x49a654
mov ecx, 2
mov dword [ebp + 0xff0], ecx
mov dword [ebp + 0xff4], edx
lea esi, [ebp + 0xf4c]
xor ecx, ecx
lea eax, [ebp + 0xaf4]
mov edx, esi
mov dword [ebp + 0xff8], ebx
call fcn.00402ac0
lea eax, [ebp + 0x88]
push eax
push 0xdd
call fcn.004abce0
cmp dword [ebp + 0x234], ebx
je 0x49a6e8
xor eax, eax
cmp dword [ebp + 0x1968], ebx
lea edx, [eax + 1]
mov dword [ebp + 0x10a4], eax
je 0x49a6ab
xor ecx, ecx
jmp 0x49a6b0
mov ecx, 2
mov dword [ebp + 0x10a8], ecx
mov dword [ebp + 0x10ac], edx
lea esi, [ebp + 0x1004]
xor ecx, ecx
lea eax, [ebp + 0xaf4]
mov edx, esi
mov dword [ebp + 0x10b0], ebx
call fcn.00402ac0
lea eax, [ebp + 0x88]
push eax
push 0xdd
call fcn.004abce0
cmp dword [ebp + 0x278], ebx
je 0x49a744
xor eax, eax
cmp dword [ebp + 0x1968], ebx
lea edx, [eax + 1]
mov dword [ebp + 0x115c], eax
je 0x49a707
xor ecx, ecx
jmp 0x49a70c
mov ecx, 2
mov dword [ebp + 0x1160], ecx
mov dword [ebp + 0x1164], edx
lea esi, [ebp + 0x10bc]
xor ecx, ecx
lea eax, [ebp + 0xaf4]
mov edx, esi
mov dword [ebp + 0x1168], ebx
call fcn.00402ac0
lea eax, [ebp + 0x88]
push eax
push 0xdd
call fcn.004abce0
mov edx, dword [ebp + 0x124]
mov eax, dword [edx + 0x134]
lea ecx, [ebp + 0x124]
push ebx
push ebp
call eax
mov ecx, dword [ebp + 0x264]
neg ecx
sbb ecx, ecx
and ecx, 0x71a
add ecx, 0x921
push ecx
lea edi, [ebp + 0xafc]
mov eax, ebp
call fcn.004bf310
mov edx, dword [ebp + 0x264]
neg edx
sbb edx, edx
and edx, 0x713
add edx, 0x920
push edx
lea edi, [ebp + 0xbb4]
mov eax, ebp
call fcn.004bf310
mov ecx, dword [ebp + 0x1958]
mov eax, dword [ecx]
mov edx, dword [eax + 0x5c]
call edx
test eax, eax
je 0x49a7ff
mov ecx, dword [ebp + 0x1958]
mov eax, dword [ecx]
mov edx, dword [eax + 0x60]
call edx
test eax, eax
je 0x49a7ff
mov eax, dword [ebp + 0x264]
neg eax
sbb eax, eax
and eax, 0x651
add eax, 0x9e4
push eax
lea edi, [ebp + 0xc6c]
mov eax, ebp
call fcn.004bf310
mov ecx, dword [ebp + 0x264]
neg ecx
sbb ecx, ecx
and ecx, 0x652
add ecx, 0x9e3
push ecx
jmp 0x49a816
mov edx, dword [ebp + 0x264]
neg edx
sbb edx, edx
and edx, 0x710
add edx, 0x925
push edx
lea edi, [ebp + 0xd24]
mov eax, ebp
call fcn.004bf310
cmp dword [ebp + 0x224], ebx
je 0x49a83d
push 0xce8
lea edi, [ebp + 0xddc]
mov eax, ebp
call fcn.004bf310
cmp dword [ebp + 0x22c], ebx
je 0x49a857
push 0x1036
lea edi, [ebp + 0xe94]
mov eax, ebp
call fcn.004bf310
lea edi, [ebp + 0x15b8]
push 0x924
mov eax, ebp
call fcn.004bf310
cmp dword [ebp + 0xa34], ebx
je 0x49a89f
lea eax, [ebp + 0x1004]
push eax
lea edi, [ebp + 0xafc]
mov esi, ebp
call fcn.00423b40
lea eax, [ebp + 0x1004]
add esp, 4
push eax
lea edi, [ebp + 0xbb4]
call fcn.00423b40
add esp, 4
jmp 0x49a8e9
cmp dword [ebp + 0x268], ebx
jne 0x49a8e9
lea esi, [esp + 0x58]
lea eax, [ebp + 0xafc]
mov edi, ebp
call fcn.00423b20
lea esi, [esp + 0x40]
lea eax, [ebp + 0xbb4]
call fcn.00423b20
mov eax, dword [esp + 0x64]
sub eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x48]
sub ecx, dword [esp + 0x40]
push 0x16
push eax
push ecx
push ebx
push ebx
push ebx
lea ecx, [ebp + 0xbb4]
call fcn.00501b56
cmp dword [ebp + 0x230], ebx
je 0x49a903
push 0x1039
lea edi, [ebp + 0xf4c]
mov eax, ebp
call fcn.004bf310
cmp dword [ebp + 0x234], ebx
je 0x49a92c
cmp dword [ebp + 0x280], ebx
lea edi, [ebp + 0x1004]
mov eax, ebp
je 0x49a922
push 0x1084
jmp 0x49a927
push 0x103c
call fcn.004bf310
cmp dword [ebp + 0xa34], ebx
je 0x49a998
xor eax, eax
cmp dword [ebp + 0x1968], ebx
lea edx, [eax + 1]
mov dword [ebp + 0xad8], eax
je 0x49a94b
xor ecx, ecx
jmp 0x49a950
mov ecx, 2
mov dword [ebp + 0xadc], ecx
mov dword [ebp + 0xae0], edx
xor esi, esi
mov dword [ebp + 0xae4], esi
lea esi, [ebp + 0xa38]
xor ecx, ecx
lea eax, [ebp + 0xaf4]
mov edx, esi
call fcn.00402ac0
lea eax, [ebp + 0x88]
push eax
push 0xdd
call fcn.004abce0
push 0xe0f
mov edi, esi
mov eax, ebp
call fcn.004bf310
lea eax, [ebp + 0xaf4]
cmp eax, ebx
jne 0x49a9a6
xor eax, eax
jmp 0x49a9a9
mov eax, dword [eax + 4]
mov edx, dword [ebp + 0x198c]
mov esi, 1
push esi
push eax
push 0x30
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp + 0xafc]
cmp eax, ebx
mov dword [esp + 0x54], ebx
je 0x49a9e8
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x40]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [esp + 0x40]
push eax
mov ecx, ebp
call fcn.005039ae
mov ecx, dword [ebp + 0x220]
cmp ecx, ebx
je 0x49a9fe
cmp dword [ebp + 0x1964], ebx
jne 0x49a9fe
mov eax, esi
jmp 0x49aa00
xor eax, eax
mov edx, dword [ebp + 0x218]
mov dword [ebp + 0x624], eax
lea eax, [ebp + 0xafc]
mov dword [esp + 0x7c], eax
mov eax, dword [ebp + 0x278]
mov dword [esp + 0x98], eax
lea eax, [ebp + 0x10bc]
mov dword [esp + 0x9c], eax
lea eax, [ebp + 0xbb4]
mov dword [esp + 0xbc], eax
mov dword [esp + 0x78], edx
mov edx, dword [ebp + 0x21c]
mov dword [esp + 0xd8], ecx
mov ecx, dword [ebp + 0x1958]
lea eax, [ebp + 0xd24]
mov dword [esp + 0xdc], eax
mov eax, dword [ecx]
mov dword [esp + 0xb8], edx
mov edx, dword [eax + 0x60]
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], esi
mov dword [esp + 0x94], ebx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], esi
mov dword [esp + 0xb4], esi
mov dword [esp + 0xc0], ebx
mov dword [esp + 0xc4], ebx
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], ebx
mov dword [esp + 0xd0], esi
mov dword [esp + 0xd4], 2
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe8], ebx
mov dword [esp + 0xec], ebx
call edx
fld qword [0x5ae4c0]
mov edi, dword [ebp + 0x220]
fld st(0)
neg eax
fadd st(1)
sbb eax, eax
add eax, 1
mov dword [esp + 0xf0], eax
lea eax, [ebp + 0xc6c]
mov dword [esp + 0xfc], eax
mov eax, dword [ebp + 0x624]
xor ecx, ecx
cmp eax, ebx
sete cl
mov dword [esp + 0x118], eax
lea eax, [ebp + 0x15b8]
mov dword [esp + 0xf4], 3
mov dword [esp + 0xf8], edi
mov dword [esp + 0x100], ebx
mov dword [esp + 0x104], ebx
mov dword [esp + 0x108], ebx
mov dword [esp + 0x10c], ebx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], 4
mov dword [esp + 0x11c], eax
mov dword [esp + 0x120], ebx
mov dword [esp + 0x124], ebx
call fcn.005261c0
mov dword [esp + 0x50], eax
mov dword [esp + 0x128], eax
mov eax, dword [ebp + 0x224]
mov dword [esp + 0x138], eax
lea eax, [ebp + 0xddc]
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x130], esi
mov dword [esp + 0x134], 5
mov dword [esp + 0x13c], eax
mov dword [esp + 0x140], ebx
mov eax, dword [ebp + 0x22c]
fld qword [0x5ae4b8]
mov dword [esp + 0x158], eax
fmul qword [0x584ea0]
lea eax, [ebp + 0xe94]
mov dword [esp + 0x15c], eax
mov eax, dword [ebp + 0x230]
mov dword [esp + 0x178], eax
lea eax, [ebp + 0xf4c]
mov dword [esp + 0x17c], eax
mov eax, dword [ebp + 0x234]
mov dword [esp + 0x198], eax
lea eax, [ebp + 0x1004]
mov dword [esp + 0x19c], eax
mov eax, dword [ebp + 0x290]
mov dword [esp + 0x1b8], eax
lea eax, [ebp + 0x294]
mov dword [esp + 0x1bc], eax
mov eax, dword [ebp + 0x628]
mov dword [esp + 0x1d8], eax
lea eax, [ebp + 0x630]
mov dword [esp + 0x1dc], eax
mov eax, dword [ebp + 0xa34]
mov dword [esp + 0x1f8], eax
lea eax, [ebp + 0xa38]
mov dword [esp + 0x1fc], eax
mov eax, dword [ebp + 0x260]
mov dword [esp + 0x218], eax
lea eax, [ebp + 0x196c]
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], ebx
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x150], esi
mov dword [esp + 0x154], 6
mov dword [esp + 0x160], ebx
mov dword [esp + 0x164], ebx
mov dword [esp + 0x168], ebx
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x170], esi
mov dword [esp + 0x174], 7
mov dword [esp + 0x180], ebx
mov dword [esp + 0x184], ebx
mov dword [esp + 0x188], ebx
mov dword [esp + 0x18c], ebx
mov dword [esp + 0x190], esi
mov dword [esp + 0x194], 8
mov dword [esp + 0x1a0], ebx
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1a8], ebx
mov dword [esp + 0x1ac], ebx
mov dword [esp + 0x1b0], esi
mov dword [esp + 0x1b4], 9
mov dword [esp + 0x1c0], esi
mov dword [esp + 0x1c4], ebx
mov dword [esp + 0x1c8], ebx
mov dword [esp + 0x1cc], ebx
mov dword [esp + 0x1d0], esi
mov dword [esp + 0x1d4], 0xa
mov dword [esp + 0x1e0], esi
mov dword [esp + 0x1e4], ebx
mov dword [esp + 0x1e8], ebx
mov dword [esp + 0x1ec], ebx
mov dword [esp + 0x1f0], esi
mov dword [esp + 0x1f4], 0xb
mov dword [esp + 0x200], ebx
mov dword [esp + 0x204], ebx
mov dword [esp + 0x208], ebx
mov dword [esp + 0x20c], ebx
mov dword [esp + 0x210], esi
mov dword [esp + 0x214], 0xc
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], ebx
call fcn.005261c0
fld qword [0x584e18]
fmul st(1)
mov dword [esp + 0x2c], eax
mov dword [esp + 0x224], eax
call fcn.005261c0
mov dword [esp + 0x228], eax
mov dword [esp + 0x22c], ebx
mov dword [esp + 0x230], esi
mov edx, dword [ebp + 0x21c]
mov dword [esp + 0x258], edx
mov ecx, dword [ebp + 0x234]
lea edx, [ebp + 0xbb4]
mov dword [esp + 0x25c], edx
mov edx, dword [ebp + 0x230]
mov dword [esp + 0x278], edx
lea edx, [ebp + 0xf4c]
mov dword [esp + 0x27c], edx
mov edx, dword [ebp + 0x218]
mov dword [esp + 0x298], edx
lea edx, [ebp + 0xafc]
mov dword [esp + 0x29c], edx
mov edx, dword [ebp + 0x22c]
mov dword [esp + 0x2b8], edx
lea edx, [ebp + 0xe94]
mov dword [esp + 0x2bc], edx
mov edx, dword [ebp + 0x278]
mov dword [esp + 0x2d8], edx
lea edx, [ebp + 0x10bc]
mov dword [esp + 0x238], ecx
mov dword [esp + 0x2dc], edx
lea ecx, [ebp + 0x1004]
lea edx, [ebp + 0xd24]
mov dword [esp + 0x23c], ecx
mov ecx, 9
mov dword [esp + 0x2f8], edi
mov dword [esp + 0x2fc], edx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x318], edi
lea edi, [ebp + 0xc6c]
mov dword [esp + 0x234], 0xd
mov dword [esp + 0x240], ebx
mov dword [esp + 0x244], ebx
mov dword [esp + 0x248], ebx
mov dword [esp + 0x24c], ebx
mov dword [esp + 0x250], ebx
mov dword [esp + 0x254], ecx
mov dword [esp + 0x260], ebx
mov dword [esp + 0x264], ecx
mov dword [esp + 0x268], ebx
mov dword [esp + 0x26c], ebx
mov dword [esp + 0x270], ebx
mov dword [esp + 0x274], 2
mov dword [esp + 0x280], ebx
mov dword [esp + 0x284], ecx
mov dword [esp + 0x288], ebx
mov dword [esp + 0x28c], ebx
mov dword [esp + 0x290], ebx
mov dword [esp + 0x294], 8
mov dword [esp + 0x2a0], ebx
mov dword [esp + 0x2a4], ecx
mov dword [esp + 0x2a8], ebx
mov dword [esp + 0x2ac], ebx
mov dword [esp + 0x2b0], ebx
mov dword [esp + 0x2b4], ebx
mov dword [esp + 0x2c0], ebx
mov dword [esp + 0x2c4], ecx
mov dword [esp + 0x2c8], ebx
mov dword [esp + 0x2cc], ebx
mov dword [esp + 0x2d0], ebx
mov dword [esp + 0x2d4], 7
mov dword [esp + 0x2e0], ebx
mov dword [esp + 0x2e4], ebx
mov dword [esp + 0x2e8], ebx
mov dword [esp + 0x2ec], ebx
mov dword [esp + 0x2f0], ebx
mov dword [esp + 0x2f4], esi
mov dword [esp + 0x300], ebx
mov dword [esp + 0x304], ebx
mov dword [esp + 0x308], ebx
mov dword [esp + 0x30c], ebx
mov dword [esp + 0x310], edx
mov dword [esp + 0x314], 3
mov dword [esp + 0x31c], edi
mov dword [esp + 0x320], ebx
mov dword [esp + 0x324], ebx
mov dword [esp + 0x328], ebx
mov dword [esp + 0x32c], ebx
mov dword [esp + 0x330], edx
mov dword [esp + 0x334], 4
cmp dword [ebp + 0x280], ebx
mov edx, dword [ebp + 0x624]
mov dword [esp + 0x338], edx
lea edx, [ebp + 0x15b8]
mov dword [esp + 0x33c], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x348], edx
mov edx, dword [ebp + 0x224]
mov dword [esp + 0x358], edx
lea edx, [ebp + 0xddc]
mov dword [esp + 0x35c], edx
mov edx, dword [ebp + 0x290]
mov dword [esp + 0x378], edx
lea edx, [ebp + 0x294]
mov dword [esp + 0x37c], edx
mov edx, dword [ebp + 0x628]
mov dword [esp + 0x398], edx
mov dword [esp + 0x3c4], ecx
mov ecx, dword [ebp + 0x260]
lea edx, [ebp + 0x630]
mov dword [esp + 0x39c], edx
mov edx, dword [ebp + 0xa34]
mov dword [esp + 0x3d8], ecx
lea ecx, [ebp + 0x196c]
mov dword [esp + 0x3b8], edx
mov dword [esp + 0x3dc], ecx
mov ecx, dword [esp + 0x2c]
lea edx, [ebp + 0xa38]
mov dword [esp + 0x340], ebx
mov dword [esp + 0x344], ebx
mov dword [esp + 0x34c], ebx
mov dword [esp + 0x350], ebx
mov dword [esp + 0x354], 5
mov dword [esp + 0x360], ebx
mov dword [esp + 0x364], ebx
mov dword [esp + 0x368], ebx
mov dword [esp + 0x36c], ebx
mov dword [esp + 0x370], ebx
mov dword [esp + 0x374], 6
mov dword [esp + 0x380], esi
mov dword [esp + 0x384], ebx
mov dword [esp + 0x388], ebx
mov dword [esp + 0x38c], ebx
mov dword [esp + 0x390], ebx
mov dword [esp + 0x394], 0xa
mov dword [esp + 0x3a0], esi
mov dword [esp + 0x3a4], ebx
mov dword [esp + 0x3a8], ebx
mov dword [esp + 0x3ac], ebx
mov dword [esp + 0x3b0], ebx
mov dword [esp + 0x3b4], 0xb
mov dword [esp + 0x3bc], edx
mov dword [esp + 0x3c0], ebx
mov dword [esp + 0x3c8], ebx
mov dword [esp + 0x3cc], ebx
mov dword [esp + 0x3d0], esi
mov dword [esp + 0x3d4], 0xc
mov dword [esp + 0x3e0], ebx
mov dword [esp + 0x3e4], ecx
mov dword [esp + 0x3e8], eax
mov dword [esp + 0x3ec], ebx
mov dword [esp + 0x3f0], ebx
mov dword [esp + 0x3f4], 0xd
je 0x49b23b
mov ecx, 0x70
lea esi, [esp + 0x238]
lea edi, [esp + 0x78]
rep movsd dword es:[edi], dword [esi]
jmp 0x49b25d
cmp dword [ebp + 0x278], ebx
je 0x49b25d
cmp dword [ebp + 0x218], ebx
je 0x49b25d
mov dword [esp + 0x90], ebx
mov dword [esp + 0xac], 0xa
mov edx, dword [esp + 0x44]
fmul qword [0x584de0]
mov dword [esp + 0x28], edx
call fcn.005261c0
push eax
mov eax, dword [esp + 0x4c]
sub eax, dword [esp + 0x44]
lea ecx, [esp + 0x34]
push eax
push ebx
push ebx
push ecx
call dword [sym.imp.USER32.dll_SetRect]
lea edx, [esp + 0x94]
lea eax, [ebp + 0x1120]
mov dword [esp + 0x18], edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x1c], 0xe
mov ecx, dword [ebp + 0x1958]
mov edx, dword [ecx]
mov eax, dword [edx + 0x60]
call eax
test eax, eax
mov eax, dword [esp + 0x18]
jne 0x49b2cb
cmp dword [eax], 4
jne 0x49b2cb
push 0
lea ecx, [ebp + 0xc6c]
jmp 0x49b587
mov ecx, dword [eax - 0x14]
test ecx, ecx
je 0x49b357
mov ecx, dword [eax - 0x18]
test ecx, ecx
je 0x49b2e3
cmp dword [ecx + 0x20], 0
jne 0x49b357
fld qword [0x5ae4b8]
fmul qword [0x584e18]
call fcn.005261c0
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx - 0x18]
mov dword [esp + 0x58], eax
xor eax, eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
lea ebx, [esp + 0x58]
mov eax, ebp
call fcn.00421940
test eax, eax
je 0x49b58c
mov eax, dword [esp + 0x18]
mov ecx, dword [eax - 0x18]
mov edx, dword [ebp + 0x84]
mov dword [ecx + 0x84], edx
mov edx, dword [ecx]
mov eax, dword [ebp + 0x1958]
mov edx, dword [edx + 0x160]
push eax
call edx
lea esi, [esp + 0x40]
lea eax, [ebp + 0xafc]
mov edi, ebp
call fcn.00423b20
jmp 0x49b37f
cmp dword [eax - 0x18], 0
je 0x49b37f
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x40]
push eax
mov eax, dword [ecx - 0x18]
mov edx, dword [eax + 0x20]
push edx
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [esp + 0x40]
push eax
mov ecx, ebp
call fcn.005039ae
mov edi, dword [esp + 0x18]
mov ebx, dword [edi - 0x1c]
test ebx, ebx
je 0x49b57c
cmp dword [ebp + 0xa34], 0
je 0x49b45e
cmp dword [edi - 0x24], 0
je 0x49b520
cmp dword [edi], 0xc
mov esi, dword [esp + 0x28]
jne 0x49b524
fld qword [0x5ae4c0]
push 0xffff
fmul qword [0x585308]
push ebp
fnstcw word [esp + 0x1e]
movzx eax, word [esp + 0x1e]
or eax, 0xc00
mov dword [esp + 0x28], eax
mov eax, esi
fldcw word [esp + 0x28]
fistp qword [esp + 0x28]
mov ecx, dword [esp + 0x28]
sub eax, ecx
mov ecx, dword [esp + 0x48]
fldcw word [esp + 0x1e]
mov edx, ecx
sub edx, dword [esp + 0x38]
mov dword [esp + 0x38], ecx
add dword [esp + 0x40], edx
mov ecx, eax
sub ecx, dword [esp + 0x3c]
mov dword [esp + 0x3c], eax
add dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx]
mov edx, dword [edx + 0x134]
lea eax, [esp + 0x38]
push eax
push 0x50000010
push 0
call edx
fld qword [0x5ae4c0]
fmul qword [0x584fc8]
mov ecx, dword [edi - 0xc]
fnstcw word [esp + 0x16]
movzx eax, word [esp + 0x16]
or eax, 0xc00
mov dword [esp + 0x20], eax
fldcw word [esp + 0x20]
fistp qword [esp + 0x20]
mov eax, dword [esp + 0x20]
sub ecx, eax
add esi, ecx
fldcw word [esp + 0x16]
jmp 0x49b524
cmp dword [edi - 0x24], 0
je 0x49b520
cmp dword [esp + 0x54], 0
mov esi, dword [esp + 0x28]
jbe 0x49b524
fld qword [0x5ae4c0]
mov ecx, dword [esp + 0x40]
fmul qword [0x585308]
push 0xffff
fnstcw word [esp + 0x1a]
push ebp
movzx eax, word [esp + 0x1e]
or eax, 0xc00
mov dword [esp + 0x28], eax
mov eax, esi
fldcw word [esp + 0x28]
fistp qword [esp + 0x28]
mov edx, dword [esp + 0x28]
sub eax, edx
mov edx, ecx
sub edx, dword [esp + 0x38]
fldcw word [esp + 0x1e]
mov dword [esp + 0x38], ecx
add dword [esp + 0x40], edx
mov ecx, eax
sub ecx, dword [esp + 0x3c]
mov dword [esp + 0x3c], eax
add dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx]
mov edx, dword [edx + 0x134]
lea eax, [esp + 0x38]
push eax
push 0x50000010
push 0
call edx
fld qword [0x5ae4c0]
fmul qword [0x584fc8]
mov ecx, dword [edi - 0xc]
fnstcw word [esp + 0x16]
movzx eax, word [esp + 0x16]
or eax, 0xc00
mov dword [esp + 0x20], eax
fldcw word [esp + 0x20]
fistp qword [esp + 0x20]
mov eax, dword [esp + 0x20]
sub ecx, eax
add esi, ecx
fldcw word [esp + 0x16]
jmp 0x49b524
mov esi, dword [esp + 0x28]
mov edx, dword [edi - 0x10]
add edx, dword [esp + 0x40]
mov ecx, dword [edi - 0x18]
push 5
push 0
push 0
push esi
push edx
push 0
call fcn.00501b56
cmp dword [edi - 0x14], 0
je 0x49b561
lea eax, [esp + 0x68]
push eax
mov eax, dword [edi - 0x18]
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [esp + 0x74]
sub edx, dword [esp + 0x6c]
add esi, edx
jmp 0x49b56b
mov eax, dword [esp + 0x4c]
sub eax, dword [esp + 0x44]
add esi, eax
add esi, dword [edi - 8]
add dword [esp + 0x54], 1
add dword [esp + 0x2c], 0x54
mov dword [esp + 0x28], esi
mov ecx, dword [edi - 0x18]
neg ebx
sbb ebx, ebx
and ebx, 5
push ebx
call fcn.00501947
add dword [esp + 0x18], 0x20
sub dword [esp + 0x1c], 1
jne 0x49b2a4
lea eax, [ebp + 0xaf4]
test eax, eax
je 0x49b5a9
mov eax, dword [eax + 4]
mov ecx, dword [ebp + 0x15d8]
push 0
push eax
push 0x30
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [ebp + 0x15d8]
mov ebx, dword [sym.imp.USER32.dll_RedrawWindow]
push 0x105
push 0
push 0
lea edi, [ebp + 0x88]
push edx
mov dword [ebp + 0x160c], edi
call ebx
mov eax, dword [ebp + 0x80]
test dword [eax + 0x34], 0x2000000
jne 0x49b6ec
test dword [eax + 0xa8], 0x200000
jne 0x49b60b
cmp dword [ebp + 0x25c], 0
je 0x49b6ec
push edi
lea esi, [ebp + 0x1618]
push 0x18a
call fcn.004abce0
push 5
mov ecx, esi
call fcn.00501947
push 0
push 0
push 0x400000
mov ecx, esi
call fcn.00501883
mov ecx, dword [ebp + 0x20]
lea eax, [esp + 0x58]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
mov edi, dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp + 0x1c0]
test eax, eax
je 0x49b66b
mov eax, dword [eax + 0x20]
lea edx, [esp + 0x68]
push edx
push eax
call edi
lea ecx, [esp + 0x68]
push ecx
mov ecx, ebp
call fcn.005039ae
test esi, esi
je 0x49b686
mov eax, dword [esi + 0x20]
lea edx, [esp + 0x30]
push edx
push eax
call edi
lea ecx, [esp + 0x30]
push ecx
mov ecx, ebp
call fcn.005039ae
cmp dword [ebp + 0x234], 0
lea eax, [ebp + 0x1004]
jne 0x49b69b
lea eax, [ebp + 0xafc]
test eax, eax
je 0x49b6b6
mov eax, dword [eax + 0x20]
lea edx, [esp + 0x40]
push edx
push eax
call edi
lea ecx, [esp + 0x40]
push ecx
mov ecx, ebp
call fcn.005039ae
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x64]
sub edx, dword [esp + 0x3c]
sub eax, ecx
sub eax, dword [esp + 0x38]
add edx, dword [esp + 0x34]
add eax, dword [esp + 0x30]
push 5
push 0
push 0
push edx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
push eax
push 0
mov ecx, esi
call fcn.00501b56
mov ecx, dword [ebp + 0x78]
mov edx, dword [ecx]
lea eax, [ebp + 0x78]
push 0
push eax
call edx
mov eax, dword [ebp + 0x84]
mov dword [ebp + 0xc0], ebp
mov esi, dword [eax + 0x14]
test esi, esi
je 0x49b72d
mov eax, esi
lea ecx, [ebp + 0xc4]
lea edi, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x49b717
sub eax, edi
sar eax, 1
push eax
push esi
call fcn.00404a30
lea esi, [ebp + 0xdc]
push 0x562dd8
mov ecx, esi
call fcn.00503381
cmp dword [ebp + 0x1960], 0
je 0x49b776
push 0x5644d0
mov ecx, esi
call fcn.00503381
push 0x5644e4
mov ecx, esi
call fcn.00503381
push 0x5644bc
mov ecx, esi
call fcn.00503381
push 0x5644f8
jmp 0x49b819
mov ecx, dword [ebp + 0x1958]
cmp dword [ecx + 0x48], 0
mov ecx, esi
je 0x49b78b
push 0x5644bc
jmp 0x49b79c
push 0x56351c
call fcn.00503381
push 0x5645ac
mov ecx, esi
call fcn.00503381
mov edx, dword [ebp + 0x1958]
cmp dword [edx + 0x4c], 0
mov ecx, esi
je 0x49b7d3
push 0x5644d0
call fcn.00503381
mov ecx, dword [ebp + 0x1958]
mov eax, dword [ecx]
mov edx, dword [eax + 0x60]
call edx
test eax, eax
je 0x49b7dd
push 0x5644e4
mov ecx, esi
jmp 0x49b7d8
push 0x563544
call fcn.00503381
mov eax, dword [ebp + 0x1958]
cmp dword [eax + 0x50], 0
mov ecx, esi
je 0x49b7f2
push 0x5644f8
jmp 0x49b803
push 0x563530
call fcn.00503381
push 0x5645d4
mov ecx, esi
call fcn.00503381
push 0x563dc8
mov ecx, esi
call fcn.00503381
push 0x563ddc
mov ecx, esi
call fcn.00503381
push ebp
mov ecx, 0x563ddc
call fcn.004bf660
cmp dword [ebp + 0x228], 0
je 0x49b840
push 0x563e04
mov ecx, esi
call fcn.00503381
cmp dword [ebp + 0x230], 0
je 0x49b855
push 0x564458
mov ecx, esi
call fcn.00503381
cmp dword [ebp + 0x234], 0
je 0x49b86a
push 0x56446c
mov ecx, esi
call fcn.00503381
cmp dword [ebp + 0x270], 0
je 0x49b87f
push 0x5645c0
mov ecx, esi
call fcn.00503381
cmp dword [ebp + 0x274], 0
je 0x49b894
push 0x564778
mov ecx, esi
call fcn.00503381
cmp dword [ebp + 0x284], 0
je 0x49b8b4
push 0x564444
mov ecx, esi
call fcn.00503381
push ebp
mov ecx, 0x564444
call fcn.004bf660
cmp dword [ebp + 0xa30], 0
je 0x49b8c9
push 0x5645e8
mov ecx, esi
call fcn.00503381
mov eax, dword [ebp + 0x80]
test eax, eax
je 0x49b9ac
test dword [eax + 0x180], 0x200000
je 0x49b9ac
lea ecx, [esp + 0x1c]
push ecx
push eax
mov dword [esp + 0x24], 0
call fcn.004296b0
test eax, eax
je 0x49b9ac
cmp dword [esp + 0x1c], 1
jne 0x49b954
push 0
lea ecx, [ebp + 0xd24]
call fcn.00501947
mov edx, dword [ebp + 0xd44]
push 0x105
push 0
push 0
push edx
call ebx
push 0
lea ecx, [ebp + 0xc6c]
call fcn.00501947
mov eax, dword [ebp + 0xc8c]
push 0x105
push 0
push 0
push eax
call ebx
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [ebp + 0x220], 0
je 0x49b9ac
push 5
lea ecx, [ebp + 0xd24]
call fcn.00501947
mov ecx, dword [ebp + 0xd44]
push 0x105
push 0
push 0
push ecx
call ebx
mov ecx, dword [ebp + 0x1958]
mov edx, dword [ecx]
mov eax, dword [edx + 0x60]
call eax
test eax, eax
je 0x49b9ac
push 5
lea ecx, [ebp + 0xc6c]
call fcn.00501947
mov ecx, dword [ebp + 0xc8c]
push 0x105
push 0
push 0
push ecx
call ebx
pop edi
mov eax, 1
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret