Function at 0x48cc8c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff94
push ebx
push esi
push edi
mov ebx, edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov esi, dword [eax + 0x5c]
test esi, esi
je 0x48ccb1
mov eax, esi
xor edx, edx
call fcn.004de8b0
test al, al
jne 0x48ccc0
mov edx, ebx
mov eax, dword [ebp - 4]
call fcn.00492eb0
jmp 0x48da87
mov esi, dword [ebx]
cmp esi, dword [0x522a40]
jne 0x48cf21
movzx eax, word [ebx + 6]
cmp eax, 0x1a
jg 0x48ccf8
je 0x48cdc9
sub eax, 3
je 0x48cddc
sub eax, 3
je 0x48cd36
dec eax
je 0x48cd1b
sub eax, 0x10
je 0x48cd71
jmp case.0x48cf3a.9
sub eax, 0x22
je 0x48cea4
sub eax, 0x11
je 0x48ce14
dec eax
je 0x48ce54
sub eax, 8
je 0x48cd27
jmp case.0x48cf3a.9
mov dword [ebx + 0xc], 1
jmp 0x48da87
mov eax, dword [0x51f7f4]
mov eax, dword [eax]
mov dword [ebx + 0xc], eax
jmp 0x48da87
mov eax, dword [ebp - 4]
mov esi, dword [eax + 0x5c]
cmp byte [esi + 0x1c], 0
je case.0x48cf3a.9
mov eax, esi
mov dl, 1
call fcn.004dc714
test al, al
jne case.0x48cf3a.9
push 0x585
push 0
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_RedrawWindow
jmp case.0x48cf3a.9
mov eax, dword [ebp - 4]
add eax, 0x2c
push eax
mov eax, dword [ebp - 4]
add eax, 0x1c
push eax
mov eax, dword [ebp - 4]
add eax, 0x24
push eax
mov eax, dword [ebp - 4]
lea ecx, [eax + 0xc]
mov eax, dword [ebp - 4]
lea edx, [eax + 0x3c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
call fcn.00486ad8
mov eax, dword [ebp - 4]
mov cl, byte [eax + 4]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x54]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
call fcn.00487860
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov ecx, dword [ebp - 4]
xor edx, edx
call fcn.004871c4
jmp 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x28]
mov edx, dword [ebx + 8]
mov dword [edx], eax
jmp 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
call fcn.004de330
cmp eax, dword [ebx + 8]
jne case.0x48cf3a.9
mov edx, ebx
mov eax, dword [ebp - 4]
call fcn.00492eb0
mov eax, dword [ebp - 4]
cmp dword [eax + 0x5c], 0
je 0x48da87
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0xc]
jmp 0x48da87
push 0xffffffffffffffec
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_GetWindowLongA
and eax, 0x4000
cmp eax, 0x4000
jne 0x48ce45
push 0
push 0
push 0xb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_SendMessageA
jmp 0x48da87
mov edx, ebx
mov eax, dword [ebp - 4]
call fcn.00492eb0
jmp 0x48da87
push 0xffffffffffffffec
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_GetWindowLongA
and eax, 0x4000
cmp eax, 0x4000
jne 0x48ce95
push 0
push 1
push 0xb
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_SendMessageA
push 0xffffffffffffffff
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_InvalidateRect
jmp 0x48da87
mov edx, ebx
mov eax, dword [ebp - 4]
call fcn.00492eb0
jmp 0x48da87
mov eax, dword [ebp - 4]
cmp dword [eax + 0x5c], 0
je case.0x48cf3a.9
mov eax, dword [ebx + 4]
push eax
lea eax, [ebx + 8]
push eax
mov ecx, esi
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x54]
mov eax, dword [ebp - 4]
call fcn.00495598
mov dword [ebx + 0xc], eax
mov eax, dword [ebx + 8]
cmp byte [eax + 0x30], 0
jne 0x48da87
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x5c]
cmp byte [edx + 9], 0
je 0x48cf12
mov byte [eax + 0x30], 1
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x5c]
mov edx, dword [edx + 0x3c]
test edx, edx
je 0x48cf01
mov edx, dword [edx + 0x70]
mov dword [eax + 4], edx
jmp 0x48da87
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0xb4]
mov dword [eax + 4], edx
jmp 0x48da87
push 0
xor ecx, ecx
xchg edx, eax
call fcn.004dcaa8
jmp 0x48da87
mov eax, esi
cmp eax, 0x14
jg 0x48cf65
je 0x48d2cc
add eax, 0xfffffff9
cmp eax, 8
ja case.0x48cf3a.9
jmp dword [eax*4 + 0x48cf41]
sub eax, 0x85
je 0x48d576
sub eax, 0x292
je 0x48cf90
sub eax, 0xacf5
je case.0x48cf3a.12
sub eax, 2
je case.0x48cf3a.12
jmp case.0x48cf3a.9
mov eax, dword [ebx + 4]
push eax
lea eax, [ebx + 8]
push eax
mov ecx, esi
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x54]
mov eax, dword [ebp - 4]
call fcn.00495598
mov edi, eax
mov dword [ebx + 0xc], edi
cmp edi, 2
je 0x48da87
mov eax, dword [ebp - 4]
add eax, 0x2c
push eax
mov eax, dword [ebp - 4]
add eax, 0x1c
push eax
mov eax, dword [ebp - 4]
add eax, 0x24
push eax
mov eax, dword [ebp - 4]
lea ecx, [eax + 0xc]
mov eax, dword [ebp - 4]
lea edx, [eax + 0x3c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
call fcn.00486ad8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov byte [eax + 0x1c], 0
mov byte [eax + 0x39], 1
mov eax, dword [ebx + 4]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x61], 0
jne 0x48d007
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
test eax, eax
je 0x48da87
mov edx, dword [ebp - 4]
mov cl, byte [edx + 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x54]
call fcn.00487860
mov eax, dword [ebp - 4]
cmp byte [eax + 4], 0
jne 0x48d03f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov ecx, dword [ebp - 4]
xor edx, edx
call fcn.004871c4
mov eax, dword [ebx + 8]
and eax, 4
cmp eax, 4
jne 0x48d0ab
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
neg eax
mov ecx, eax
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x88]
neg edx
mov edx, eax
mov eax, dword [ebp - 8]
call fcn.0043f07c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x20]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x88]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x88]
push eax
push 0
push 0
mov eax, dword [ebp - 8]
push eax
call sub.gdi32.dll_IntersectClipRect
jmp 0x48d11a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x44]
call fcn.00428a7c
call fcn.004245b0
push eax
push 0
push 0
lea edx, [ebp - 0x6c]
mov eax, dword [ebp - 4]
call fcn.0048da90
mov eax, dword [ebp - 0x68]
push eax
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.004c783c
mov eax, dword [ebx + 8]
push eax
push 0xffffffffffffffff
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebx + 4]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x54]
mov eax, dword [ebp - 4]
call fcn.004886f0
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 8]
push eax
call sub.gdi32.dll_SaveDC
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x88]
mov ecx, eax
mov edx, eax
mov eax, dword [ebp - 8]
call fcn.0043f07c
mov eax, dword [ebp - 4]
cmp dword [eax + 0x80], 0
je 0x48d1de
mov eax, dword [ebp - 4]
cmp dword [eax + 0x7c], 0
je 0x48d1de
mov eax, dword [ebp - 4]
mov edi, dword [eax + 0x7c]
mov eax, edi
xor ecx, ecx
mov edx, 1
call fcn.004883b4
xor edx, edx
mov dl, byte [edi + 6]
imul edx
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x20]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x88]
add edx, edx
sub eax, edx
pop edx
sub eax, edx
push eax
mov eax, dword [ebp - 4]
mov esi, dword [eax + 0x80]
mov eax, esi
xor ecx, ecx
mov edx, 1
call fcn.004883b4
xor edx, edx
mov dl, byte [esi + 6]
imul edx
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x88]
add edx, edx
sub eax, edx
pop edx
sub eax, edx
push eax
push 0
push 0
mov eax, dword [ebp - 8]
push eax
call sub.gdi32.dll_IntersectClipRect
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x20]
push eax
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
xor edx, edx
xor eax, eax
call fcn.00406bf0
lea edx, [ebp - 0x6c]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xb4]
mov eax, dword [ebx + 4]
call fcn.004c7668
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov esi, dword [eax + 0x3c]
test esi, esi
je 0x48d24f
mov eax, esi
mov edx, dword [0x5120a0]
call fcn.00403aa4
test al, al
je 0x48d24f
mov eax, dword [esi + 0x218]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
je 0x48d263
push 0
mov eax, dword [ebp - 8]
push eax
push 0xf
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_SendMessageA
jmp 0x48d263
push 0
mov eax, dword [ebp - 8]
push eax
push 0xf
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_SendMessageA
push 0x24
mov eax, dword [ebp - 8]
push eax
push 0x318
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push eax
call sub.gdi32.dll_RestoreDC
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x4c]
sub eax, 0xa
jne 0x48da87
jmp case.0x48cf3a.9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov byte [eax + 0x39], 1
cmp byte [eax + 0x1c], 0
jne case.0x48cf3a.9
push 0x405
push 0
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_RedrawWindow
jmp case.0x48cf3a.9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je case.0x48cf3a.9
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
jne case.0x48cf3a.9
mov esi, dword [ebx + 4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
cmp esi, dword [eax + 0x58]
je 0x48d317
lea eax, [ebp - 0x5c]
push eax
push esi
call sub.gdi32.dll_GetClipBox
dec eax
jne 0x48d317
mov dword [ebx + 0xc], 1
jmp 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
xor edx, edx
call fcn.004dc714
test al, al
jne 0x48da87
mov eax, dword [ebp - 4]
cmp byte [eax + 0x61], 0
jne 0x48d33d
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0xc]
mov eax, dword [ebp - 4]
cmp byte [eax + 0xb0], 0
je 0x48d365
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_IsWindowEnabled
test eax, eax
jne 0x48d365
mov dword [ebx + 0xc], 1
jmp 0x48da87
mov eax, dword [0x51f58c]
cmp dword [eax], 6
jl case.0x48cf3a.9
cmp byte [0x516668], 0
je case.0x48cf3a.9
mov eax, dword [ebx + 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x5c]
cmp eax, dword [edx + 0x58]
je case.0x48cf3a.9
mov dword [ebx + 0xc], 1
jmp 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je case.0x48cf3a.9
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
jne case.0x48cf3a.9
mov esi, dword [ebx + 4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
cmp esi, dword [eax + 0x58]
je 0x48d3e1
lea eax, [ebp - 0x5c]
push eax
push esi
call sub.gdi32.dll_GetClipBox
dec eax
je 0x48da87
mov eax, dword [ebp - 4]
cmp byte [eax + 0xb0], 0
je 0x48d4bd
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_IsWindowEnabled
test eax, eax
jne 0x48d4bd
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_BeginPaint
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_GetWindowDC
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
push eax
call sub.gdi32.dll_SaveDC
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x48d4a1
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x44]
call fcn.00428a7c
call fcn.004245b0
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x20]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
push 0
push 0
mov eax, dword [ebp - 8]
push eax
call sub.gdi32.dll_BitBlt
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48d4a8
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push eax
call sub.gdi32.dll_RestoreDC
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_ReleaseDC
ret
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
xor edx, edx
call fcn.004dc714
test al, al
jne 0x48d4e3
cmp byte [0x516668], 0
je 0x48d508
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
cmp dword [eax + 0x58], 0
jne 0x48d508
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_BeginPaint
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_EndPaint
jmp 0x48da87
mov eax, dword [ebx + 8]
push eax
push 0xffffffffffffffff
mov esi, dword [ebx + 4]
push esi
mov ecx, esi
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x54]
mov eax, dword [ebp - 4]
call fcn.004886f0
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x61], 0
jne case.0x48cf3a.9
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0xc]
jmp case.0x48cf3a.9
cmp dword [ebx + 4], 1
jne case.0x48cf3a.9
mov eax, dword [ebp - 4]
cmp byte [eax + 0xc4], 0
je case.0x48cf3a.9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x3c]
call fcn.004bea28
mov eax, dword [ebp - 4]
mov byte [eax + 0xc4], 0
jmp case.0x48cf3a.9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je case.0x48cf3a.9
mov eax, dword [ebp - 4]
cmp byte [eax + 0x98], 0
jne case.0x48cf3a.9
cmp byte [0x516668], 0
jne 0x48da87
mov eax, dword [ebp - 4]
add eax, 0x2c
push eax
mov eax, dword [ebp - 4]
add eax, 0x1c
push eax
mov eax, dword [ebp - 4]
add eax, 0x24
push eax
mov eax, dword [ebp - 4]
lea ecx, [eax + 0xc]
mov eax, dword [ebp - 4]
lea edx, [eax + 0x3c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
call fcn.00486ad8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
xor edx, edx
call fcn.004dc714
test al, al
jne 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_GetWindowDC
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x58]
cmp eax, dword [ebp - 8]
je 0x48d62a
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [ebp - 8]
push eax
call sub.gdi32.dll_GetClipBox
dec eax
jne 0x48d62a
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_ReleaseDC
jmp 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
cmp byte [eax + 0x39], 0
je 0x48d65e
mov eax, dword [ebp - 4]
cmp byte [eax + 0x61], 0
jne 0x48d647
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0xc]
mov eax, dword [ebp - 4]
mov cl, byte [eax + 4]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x54]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
call fcn.00487860
mov eax, dword [ebp - 8]
push eax
call sub.gdi32.dll_SaveDC
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x48d721
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebx + 8]
push eax
push 0xffffffffffffffff
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebx + 4]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x54]
mov eax, dword [ebp - 4]
call fcn.004886f0
mov dword [ebx + 0xc], eax
cmp dword [ebp - 8], 0
je 0x48d6f6
mov eax, dword [ebp - 4]
cmp dword [eax + 0x5c], 0
je 0x48d6f6
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x44]
call fcn.00428a7c
call fcn.004245b0
push eax
push 0
push 0
lea edx, [ebp - 0x6c]
mov eax, dword [ebp - 4]
call fcn.0048da90
mov eax, dword [ebp - 0x68]
push eax
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.004c783c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48da87
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push eax
call sub.gdi32.dll_RestoreDC
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_ReleaseDC
ret
mov edx, ebx
mov eax, dword [ebp - 4]
call fcn.00492eb0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
call fcn.004869f4
test al, al
je 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
cmp dword [eax + 0x3c], 0
je 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x3c]
mov edx, dword [0x43c6a0]
call fcn.00403aa4
test al, al
je 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x3c]
mov si, 0xffb8
call fcn.00403b14
test al, al
je 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x3c]
cmp byte [eax + 0x1a4], 0
je 0x48da87
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x5c]
mov byte [ebx + 0x39], 1
mov byte [ebx + 0x50], 1
push 0
push 0
push 0x85
mov eax, dword [ebx + 0x3c]
call fcn.00446f60
push eax
call sub.user32.dll_SendMessageA
jmp 0x48da87
mov edx, ebx
mov eax, dword [ebp - 4]
call fcn.00492eb0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
call fcn.004869f4
test al, al
je 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
cmp dword [eax + 0x3c], 0
je 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x3c]
mov edx, dword [0x43c6a0]
call fcn.00403aa4
test al, al
je 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x3c]
mov si, 0xffb8
call fcn.00403b14
test al, al
je 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x3c]
cmp byte [eax + 0x1a4], 0
je 0x48da87
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x5c]
mov byte [ebx + 0x39], 1
mov byte [ebx + 0x50], 0
push 0
push 0
push 0x85
mov eax, dword [ebx + 0x3c]
call fcn.00446f60
push eax
call sub.user32.dll_SendMessageA
jmp 0x48da87
mov edx, ebx
mov eax, dword [ebp - 4]
call fcn.00492eb0
mov eax, dword [ebx]
cmp eax, 0x18e
jg 0x48d8d8
je 0x48d96b
cmp eax, 0x100
jge 0x48d8b0
sub eax, 5
je 0x48d9fd
sub eax, 0x2b
je 0x48d9e1
sub eax, 0x92
je 0x48d9d2
jmp 0x48da87
add eax, 0xffffff00
sub eax, 2
jb 0x48d9e1
add eax, 0xffffff82
sub eax, 2
jb 0x48d9d2
sub eax, 4
je 0x48d9c3
jmp 0x48da87
cmp eax, 0x210
jg 0x48d901
je 0x48d92a
sub eax, 0x197
je 0x48d9d2
sub eax, 0x69
je 0x48da24
dec eax
je 0x48d9e1
jmp 0x48da87
sub eax, 0xb02c
je 0x48d91b
add eax, 0xfffff32c
sub eax, 2
jb 0x48d9e1
jmp 0x48da87
mov eax, dword [ebp - 4]
mov byte [eax + 0xc4], 1
jmp 0x48da87
mov eax, dword [ebx + 4]
and eax, 0xffff
dec eax
sub eax, 2
jae 0x48da87
cmp word [ebx + 4], 1
jne 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
call fcn.004de330
test byte [eax + 0x7d], 4
je 0x48da87
mov eax, dword [ebp - 4]
mov byte [eax + 0xc4], 1
jmp 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov esi, dword [eax + 0x3c]
test esi, esi
je 0x48da87
mov eax, esi
mov edx, dword [0x5120a0]
call fcn.00403aa4
test al, al
je 0x48da87
cmp dword [ebx + 0xc], 0
jne 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 0x3c]
mov eax, dword [eax + 0x218]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jne 0x48da87
mov dword [ebx + 0xc], 0xffffffff
jmp 0x48da87
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.00487790
jmp 0x48da87
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.00487790
jmp 0x48da87
mov eax, dword [ebp - 4]
cmp byte [eax + 0x60], 0
jne 0x48da87
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.00487790
jmp 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x48da87
push 0
push 0
push 0x85
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_SendMessageA
jmp 0x48da87
cmp dword [0x5228d4], 0
je 0x48da87
mov eax, dword [0x5228d4]
test byte [eax + 0x1c], 0x10
jne 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
push eax
call sub.user32.dll_IsWindowEnabled
test eax, eax
je 0x48da87
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
mov edx, dword [0x5228d4]
cmp eax, dword [edx + 0x78]
je 0x48da65
mov edx, eax
mov eax, dword [0x5228d4]
call fcn.004dad78
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
call fcn.004de340
test al, al
jne 0x48da87
call sub.user32.dll_GetCapture
test eax, eax
je 0x48da87
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.00487790
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret