Function at 0x486e2d
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov edx, dword [ebp + 0xc]
mov eax, 0x201
cmp edx, eax
push ebx
push esi
ja 0x486ff3
je 0x486fd5
cmp edx, 0x2c
ja 0x486f32
je 0x486f1f
mov eax, edx
sub eax, 5
je 0x486f03
sub eax, 0xa
je 0x486ee2
dec eax
je 0x486ed5
sub eax, 4
je 0x486ec5
sub eax, 0xc
je 0x486e93
sub eax, 0xb
jne 0x48715c
push dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
push dword [ebp + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x6c]
jmp 0x4872a3
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x38]
test eax, eax
je 0x486eac
push eax
call dword [sym.imp.USER32.DLL_SetCursor]
xor eax, eax
inc eax
jmp 0x4872a5
mov edx, dword [ebp + 0x14]
mov eax, dword [ecx]
shr edx, 0x10
push edx
movzx edx, word [ebp + 0x14]
push edx
push dword [ebp + 0x10]
call dword [eax + pe_nt_image_headers32]
jmp 0x4872a5
mov ecx, dword [ebp + 8]
push dword [ebp + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x20]
jmp 0x4872a5
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
call dword [eax + 0x1c]
jmp 0x4872a3
mov ecx, dword [ebp + 8]
test byte [ecx + 0x44], 2
je 0x486ef9
push dword [ecx + 0x18]
call fcn.00486e0b
pop ecx
jmp 0x4872a3
mov eax, dword [ecx]
call dword [eax + 0x14]
jmp 0x4872a3
mov edx, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
shr edx, 0x10
push edx
movzx edx, word [ebp + 0x14]
push edx
push dword [ebp + 0x10]
call dword [eax + 0x3c]
jmp 0x4872a3
push dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
push dword [ebp + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x60]
jmp 0x4872a3
mov eax, edx
sub eax, 0x83
je 0x486fc2
dec eax
je 0x486fa7
dec eax
je 0x486f85
sub eax, 0x8e
je 0x486f75
sub eax, 0xed
jne 0x48715c
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov esi, dword [ecx]
movsx edx, ax
shr eax, 0x10
movsx eax, ax
push eax
push edx
push dword [ebp + 0x10]
call dword [esi + 0x24]
jmp 0x4872a3
mov ecx, dword [ebp + 8]
push dword [ebp + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x44]
jmp 0x4872a3
mov esi, dword [ebp + 8]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x54]
push dword [ebp + 0x14]
mov eax, dword [esi]
push dword [ebp + 0x10]
push 0x85
push dword [esi + 0x18]
call dword [eax + 4]
jmp 0x4872a3
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov esi, dword [ecx]
movsx edx, ax
shr eax, 0x10
movsx eax, ax
push eax
push edx
call dword [esi + 0x38]
jmp 0x4872a5
push dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
push dword [ebp + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x64]
jmp 0x4872a3
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov esi, dword [ecx]
movsx edx, ax
shr eax, 0x10
movsx eax, ax
push eax
push edx
push dword [ebp + 0x10]
call dword [esi + 0x28]
jmp 0x4872a3
mov eax, 0x459
cmp edx, eax
ja 0x48713b
je 0x487122
mov eax, edx
sub eax, 0x202
je 0x487104
dec eax
dec eax
je 0x4870e6
dec eax
je 0x4870c8
sub eax, 0x243
je 0x4870b8
dec eax
je 0x487059
sub eax, 3
jne 0x48715c
mov eax, dword [ebp + 8]
xor ebx, ebx
push ebx
push ebx
push 0x2a3
mov dword [0x4c1cc8], ebx
push dword [eax + 0x18]
call dword [sym.imp.USER32.DLL_SendMessageW]
jmp 0x4872a3
mov esi, dword [ebp + 8]
push dword [esi + 0x18]
lea ecx, [ebp - 8]
call fcn.00401022
lea eax, [ebp - 0x18]
xor ebx, ebx
push eax
push dword [esi + 0x18]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
call dword [sym.imp.USER32.DLL_GetClientRect]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
add eax, ecx
mov ecx, dword [ebp - 0x10]
cdq
sub eax, edx
sar eax, 1
push eax
mov eax, dword [ebp - 0x18]
add eax, ecx
cdq
sub eax, edx
sar eax, 1
push eax
push dword [ebp - 8]
call dword [sym.imp.GDI32.DLL_GetPixel]
lea ecx, [ebp - 8]
mov esi, eax
call fcn.0040103b
mov eax, esi
jmp 0x4872a5
mov ecx, dword [ebp + 8]
push dword [ebp + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x70]
jmp 0x4872a5
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov esi, dword [ecx]
movsx edx, ax
shr eax, 0x10
movsx eax, ax
push eax
push edx
push dword [ebp + 0x10]
call dword [esi + 0x34]
jmp 0x4872a3
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov esi, dword [ecx]
movsx edx, ax
shr eax, 0x10
movsx eax, ax
push eax
push edx
push dword [ebp + 0x10]
call dword [esi + 0x30]
jmp 0x4872a3
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov esi, dword [ecx]
movsx edx, ax
shr eax, 0x10
movsx eax, ax
push eax
push edx
push dword [ebp + 0x10]
call dword [esi + 0x2c]
jmp 0x4872a3
mov ecx, dword [ebp + 8]
cmp dword [ebp + 0x10], ecx
jne 0x486ea4
push dword [ebp + 0x14]
call fcn.00486ddc
jmp 0x4872a5
mov eax, edx
sub eax, 0x45b
je 0x4871e9
sub eax, 0xb7be
je 0x4871b9
sub eax, 0x12
je 0x4871a9
dec eax
je 0x487199
sub eax, 0x22
je 0x487173
push dword [ebp + 0x14]
mov eax, dword [ebp + 8]
push dword [ebp + 0x10]
mov ecx, dword [eax]
push edx
push dword [eax + 0x18]
call dword [ecx + 4]
jmp 0x4872a5
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
and dword [ebp + 0xc], 0
lea eax, [ebp + 0xc]
push eax
mov eax, dword [ebp + 0x14]
push eax
push dword [ebp + 0x10]
push dword [eax + 8]
call dword [edx + 0x78]
neg eax
sbb eax, eax
and eax, dword [ebp + 0xc]
jmp 0x4872a5
mov ecx, dword [ebp + 8]
push dword [ebp + 0x14]
mov eax, dword [ecx]
call dword [eax + 0x5c]
jmp 0x4872a3
mov ecx, dword [ebp + 8]
push dword [ebp + 0x14]
mov eax, dword [ecx]
call dword [eax + 0x68]
jmp 0x4872a3
push dword [ebp + 0x14]
mov esi, dword [ebp + 8]
push dword [ebp + 0x10]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x4c]
test eax, eax
jne 0x4872a5
push dword [ebp + 0x14]
mov eax, dword [esi]
push dword [ebp + 0x10]
push 0xbc19
push dword [esi + 0x18]
call dword [eax + 4]
jmp 0x4872a5
mov esi, dword [ebp + 8]
cmp dword [ebp + 0x10], esi
je 0x4871fe
cmp dword [ebp + 0x10], 0x4c0fb8
jne 0x4872a3
xor ebx, ebx
cmp byte [esi + 0x35], 2
jne 0x487218
cmp dword [esi + 0x78], ebx
jne 0x487218
push 0x10000000
push esi
call fcn.0048ba51
pop ecx
pop ecx
cmp byte [esi + 0x35], 2
push edi
jne 0x487226
mov edi, dword [esi + 0x78]
cmp edi, ebx
jne 0x487228
mov edi, esi
mov esi, dword [ebp + 0x14]
mov eax, dword [esi]
cmp eax, 0xfbd3e280
mov dword [ebp + 8], eax
jl 0x48723d
fild dword [ebp + 8]
fstp dword [edi + 0x24]
mov ecx, dword [esi + 4]
mov eax, 0x80000000
cmp ecx, eax
je 0x48724c
mov dword [edi + 0x28], ecx
mov ecx, dword [esi + 8]
cmp ecx, eax
je 0x487256
mov dword [edi + 0x2c], ecx
mov ecx, dword [esi + 0xc]
cmp ecx, eax
je 0x487260
mov dword [edi + 0x30], ecx
mov eax, dword [esi + 0x10]
cmp eax, ebx
je 0x487271
push eax
push dword [edi + 0x18]
call dword [sym.imp.USER32.DLL_SetWindowTextW]
test byte [esi + 0x15], 0x80
je 0x487285
mov al, byte [esi + 0x14]
xor al, byte [edi + 0x34]
and al, 0x7f
xor al, byte [esi + 0x14]
mov byte [edi + 0x34], al
test byte [esi + 0x15], 0x7f
je 0x487296
mov al, byte [esi + 0x14]
xor al, byte [edi + 0x34]
and al, 0x7f
xor byte [edi + 0x34], al
push 1
push ebx
push dword [edi + 0x18]
call dword [sym.imp.USER32.DLL_InvalidateRect]
pop edi
xor eax, eax
pop esi
pop ebx
leave
ret 0x10