Function at 0x4fe850
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5b9360
mov eax, dword fs:[0]
push eax
sub esp, 0x64
push ebx
push ebp
push esi
push edi
mov eax, dword [0x62ece4]
xor eax, esp
push eax
lea eax, [esp + 0x78]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x14], esi
call fcn.004fda40
mov eax, dword [esi + 0x74]
xor ebx, ebx
cmp dword [eax + 0xc8], ebx
je 0x4ff19f
mov edi, dword [esp + 0x88]
cmp edi, ebx
je 0x4ff19f
cmp dword [edi + 0x20], ebx
je 0x4ff19f
mov ecx, esi
call fcn.004c5240
mov ecx, eax
call fcn.005048b0
mov ecx, dword [edi + 0x20]
push ecx
call dword [sym.imp.USER32.dll_UpdateWindow]
mov edx, dword [esp + 0x8c]
mov dword [esi + 0x44], edx
mov dword [esi + 0x40], edi
mov dword [esi + 0x48], ebx
mov eax, dword [edi]
mov edx, dword [eax + 0x1bc]
mov ecx, edi
call edx
cmp dword [esi + 0x34], ebx
jne 0x4fe8ec
mov dword [esi + 0x40], ebx
jmp 0x4ff19f
mov ecx, esi
call fcn.004fd390
mov ebp, eax
push edi
lea ecx, [esp + 0x68]
mov dword [esp + 0x28], ebp
call fcn.004861d5
add ebp, 0xb8
push ebp
lea eax, [esp + 0x68]
push eax
lea ecx, [esp + 0x5c]
mov dword [esp + 0x88], ebx
call fcn.004dc120
mov esi, dword [esi + 0x34]
lea ebp, [esi - 1]
cmp ebp, ebx
mov byte [esp + 0x80], 1
jl 0x4fe9f0
test ebp, ebp
jl 0x4feb8a
mov eax, dword [esp + 0x14]
add eax, 0x2c
cmp ebp, dword [eax + 8]
jge 0x4feb8a
mov ecx, dword [eax + 4]
mov esi, dword [ecx + ebp*4]
mov edx, dword [esi + 0x54]
lea eax, [ecx + ebp*4]
mov eax, dword [edx - 0xc]
lea ebx, [esi + 0x54]
xor ecx, ecx
test eax, eax
setne cl
mov eax, ecx
mov dword [esi + 0x7c], eax
test eax, eax
jne 0x4fe9e7
mov edx, dword [esi + 0x58]
lea edi, [esi + 0x58]
cmp dword [edx - 0xc], ecx
jne 0x4fe99f
mov eax, dword [esi]
mov edx, dword [eax + 0x60]
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 4]
push 1
mov ecx, esi
call edx
mov ecx, dword [esp + 0x14]
push 1
push ebp
add ecx, 0x2c
call fcn.00547da0
jmp 0x4fe9e7
mov ecx, edi
call fcn.004fe060
mov eax, dword [edi]
push eax
call fcn.0055b510
mov edx, dword [esi + 0x5c]
lea ecx, [esi + 0x5c]
add esp, 4
cmp dword [edx - 0xc], 0
jne 0x4fe9df
inc eax
push eax
mov ecx, edi
call fcn.00421816
movzx eax, ax
push eax
mov ecx, ebx
call fcn.004fe340
call fcn.004ecf30
mov ecx, eax
call fcn.00552340
jmp 0x4fe9e7
push ecx
mov ecx, ebx
call fcn.00408700
sub ebp, 1
jns 0x4fe935
mov ebp, dword [esp + 0x14]
mov ebx, dword [ebp + 0x34]
xor edi, edi
mov dword [esp + 0x18], ebx
test ebx, ebx
jle 0x4fef27
test edi, edi
jl 0x4feb8a
cmp edi, dword [ebp + 0x34]
jge 0x4feb8a
mov ecx, dword [ebp + 0x30]
mov esi, dword [ecx + edi*4]
lea eax, [ecx + edi*4]
mov eax, dword [esi + 0x54]
sub eax, 0x10
push eax
call fcn.004087a0
add eax, 0x10
add esp, 4
mov dword [esp + 0x20], eax
lea ecx, [esp + 0x40]
call fcn.004fd4b0
mov edx, dword [esp + 0x48]
push esi
push edx
lea ecx, [esp + 0x48]
mov byte [esp + 0x88], 3
call fcn.0057d6e0
push 0x5e2190
lea ecx, [esp + 0x90]
call fcn.00408c50
inc edi
cmp edi, dword [esp + 0x18]
mov byte [esp + 0x80], 4
mov dword [esp + 0x3c], edi
mov ebx, edi
jge 0x4feb5d
nop
test ebx, ebx
jl 0x4feb8a
cmp ebx, dword [ebp + 0x34]
jge 0x4feb8a
mov eax, dword [ebp + 0x30]
mov esi, dword [eax + ebx*4]
lea eax, [eax + ebx*4]
mov eax, dword [esi + 0x54]
cmp dword [eax - 0xc], 0
jl 0x4feffe
mov ecx, dword [esp + 0x20]
cmp dword [ecx - 0xc], 0
movzx eax, word [eax]
jl 0x4feffe
movzx ecx, word [ecx]
cmp ax, cx
jne 0x4feb4e
mov ecx, dword [esp + 0x48]
push esi
push ecx
lea ecx, [esp + 0x48]
call fcn.0057d6e0
mov edx, dword [esi + 0x54]
cmp dword [edx - 0xc], 2
jne 0x4feb4e
mov esi, edx
cmp dword [esi - 0xc], 1
jl 0x4feffe
mov edx, dword [esp + 0x8c]
mov edi, dword [edx - 0xc]
movzx ebp, word [esi + 2]
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
lea esi, [edi + 1]
sub eax, esi
or eax, ecx
jge 0x4feb1e
push esi
lea ecx, [esp + 0x90]
call fcn.00407220
mov edx, dword [esp + 0x8c]
mov word [edx + edi*2], bp
test esi, esi
jl 0x4feffe
mov eax, dword [esp + 0x8c]
cmp esi, dword [eax - 8]
jg 0x4feffe
mov ebp, dword [esp + 0x14]
mov dword [eax - 0xc], esi
mov ecx, dword [esp + 0x8c]
xor eax, eax
mov word [ecx + esi*2], ax
inc ebx
cmp ebx, dword [esp + 0x18]
jl 0x4fea80
mov edi, dword [esp + 0x3c]
mov edx, dword [esp + 0x48]
cmp edx, 2
jge 0x4feb8f
mov eax, dword [esp + 0x8c]
add eax, 0xfffffff0
mov byte [esp + 0x80], 3
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jmp 0x4feed6
call fcn.0047b415
xor eax, eax
mov dword [esp + 0x1c], 1
mov dword [esp + 0x34], eax
test edx, edx
jle 0x4feeb7
test eax, eax
jl 0x4feb8a
cmp eax, edx
jge 0x4feb8a
mov ecx, dword [esp + 0x44]
mov ebx, dword [ecx + eax*4]
lea ecx, [ebx + 0x54]
mov dword [esp + 0x2c], ecx
mov ecx, dword [ecx]
cmp dword [ecx - 0xc], 1
jg 0x4feea6
mov eax, dword [ebx + 0x58]
mov edx, dword [eax - 0xc]
lea ecx, [edx - 1]
xor esi, esi
test ecx, ecx
jle 0x4fecc5
mov ecx, dword [esp + 0x8c]
test esi, esi
jl 0x4feffe
cmp esi, edx
jg 0x4feffe
movzx edi, word [eax + esi*2]
cmp di, 0x20
jne 0x4fec37
lea edi, [esi + 1]
test edi, edi
jl 0x4feffe
cmp edi, edx
jg 0x4feffe
cmp dword [ecx - 0xc], 0
movzx eax, word [eax + esi*2 + 2]
jle 0x4fec4a
push eax
push ecx
call fcn.0049b590
mov ecx, dword [esp + 0x94]
add esp, 8
test eax, eax
je 0x4fec4a
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x4fec4a
mov eax, dword [ebx + 0x58]
mov edx, dword [eax - 0xc]
inc esi
lea edi, [edx - 1]
cmp esi, edi
jl 0x4febe1
jmp 0x4feccc
lea eax, [esi + 1]
test eax, eax
jl 0x4feffe
mov edx, dword [ebx + 0x58]
cmp eax, dword [edx - 0xc]
jg 0x4feffe
movzx esi, word [edx + eax*2]
mov ebp, dword [ecx - 0xc]
mov eax, dword [ecx - 8]
mov edx, 1
sub edx, dword [ecx - 4]
lea edi, [ebp + 1]
sub eax, edi
or eax, edx
jge 0x4fec90
push edi
lea ecx, [esp + 0x90]
call fcn.00407220
mov ecx, dword [esp + 0x8c]
mov word [ecx + ebp*2], si
test edi, edi
jl 0x4feffe
mov eax, dword [esp + 0x8c]
cmp edi, dword [eax - 8]
jg 0x4feffe
mov dword [eax - 0xc], edi
mov eax, dword [esp + 0x8c]
xor edx, edx
mov word [eax + edi*2], dx
test si, si
jne 0x4fee51
mov ecx, dword [esp + 0x8c]
mov eax, dword [ebx + 0x58]
mov edi, dword [eax - 0xc]
test edi, edi
jl 0x4feffe
movzx esi, word [eax]
xor edx, edx
cmp si, 0x26
sete dl
mov esi, edx
test esi, esi
jl 0x4feffe
cmp esi, edi
jg 0x4feffe
mov edx, dword [esp + 0x2c]
mov edx, dword [edx]
cmp dword [edx - 0xc], 0
movzx ebp, word [eax + esi*2]
jl 0x4feffe
movzx edx, word [edx]
cmp bp, dx
jne 0x4fed15
inc esi
cmp esi, edi
jge 0x4fedd5
lea ecx, [ecx]
test esi, esi
jl 0x4feffe
cmp esi, edi
jg 0x4feffe
cmp dword [ecx - 0xc], 0
movzx eax, word [eax + esi*2]
jle 0x4fed65
push eax
push ecx
call fcn.0049b590
mov ecx, dword [esp + 0x94]
add esp, 8
test eax, eax
je 0x4fed65
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x4fed65
mov eax, dword [ebx + 0x58]
mov edi, dword [eax - 0xc]
inc esi
cmp esi, edi
jl 0x4fed20
jmp 0x4fedd5
mov eax, dword [ebx + 0x58]
cmp esi, dword [eax - 0xc]
jg 0x4feffe
movzx esi, word [eax + esi*2]
mov ebp, dword [ecx - 0xc]
mov eax, dword [ecx - 8]
mov edx, 1
sub edx, dword [ecx - 4]
lea edi, [ebp + 1]
sub eax, edi
or eax, edx
jge 0x4feda0
push edi
lea ecx, [esp + 0x90]
call fcn.00407220
mov ecx, dword [esp + 0x8c]
mov word [ecx + ebp*2], si
test edi, edi
jl 0x4feffe
mov eax, dword [esp + 0x8c]
cmp edi, dword [eax - 8]
jg 0x4feffe
mov dword [eax - 0xc], edi
mov ecx, dword [esp + 0x8c]
xor eax, eax
mov word [ecx + edi*2], ax
test si, si
jne 0x4fee51
call fcn.0047b8ad
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x4ff008
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x1c]
push ecx
lea edx, [esp + 0x2c]
push 0x5e1b80
push edx
mov byte [esp + 0x8c], 5
call fcn.00407370
mov eax, dword [esp + 0x34]
add esp, 0xc
cmp dword [eax - 0xc], 0
jl 0x4feffe
movzx esi, word [eax]
inc dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x80], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4fee51
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ebx, dword [esp + 0x2c]
mov eax, dword [ebx]
mov ebp, dword [eax - 0xc]
mov ecx, 1
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
lea edi, [ebp + 1]
sub eax, edi
or eax, ecx
jge 0x4fee76
push edi
mov ecx, ebx
call fcn.00407220
mov eax, dword [ebx]
mov word [eax + ebp*2], si
test edi, edi
jl 0x4feffe
mov eax, dword [ebx]
cmp edi, dword [eax - 8]
jg 0x4feffe
mov ebp, dword [esp + 0x14]
mov dword [eax - 0xc], edi
mov ecx, dword [ebx]
mov eax, dword [esp + 0x34]
xor edx, edx
mov word [ecx + edi*2], dx
mov edx, dword [esp + 0x48]
inc eax
cmp eax, edx
mov dword [esp + 0x34], eax
jl 0x4feba5
mov edi, dword [esp + 0x3c]
mov eax, dword [esp + 0x8c]
add eax, 0xfffffff0
mov byte [esp + 0x80], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4feee2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x80], 2
call fcn.004fd4d0
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x80], 1
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4fef1b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ebx, dword [esp + 0x18]
cmp edi, ebx
jl 0x4fea05
mov ecx, ebp
call fcn.004fd2e0
mov dword [esp + 0x3c], eax
mov dword [esp + 0x8c], 0
test ebx, ebx
jle 0x4ff13b
mov eax, dword [esp + 0x8c]
lea esp, [esp]
test eax, eax
jl 0x4feb8a
cmp eax, dword [ebp + 0x34]
jge 0x4feb8a
mov ecx, dword [ebp + 0x30]
mov esi, dword [ecx + eax*4]
cmp dword [esi + 0x70], 0
lea eax, [ecx + eax*4]
je 0x4ff11a
mov eax, dword [esi + 0x54]
mov ecx, dword [eax - 0xc]
lea edx, [esp + 0x2c]
push edx
push ecx
push eax
mov eax, dword [esp + 0x78]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
mov eax, dword [esp + 0x30]
add eax, 2
cmp eax, 0xf
mov ebx, eax
jg 0x4fef9f
mov ebx, 0xf
mov eax, dword [esp + 0x2c]
add eax, 6
cmp eax, 0x10
mov ebp, eax
jg 0x4fefb2
mov ebp, 0x10
mov ecx, dword [esi + 0x64]
mov dword [esp + 0x34], ecx
mov edx, dword [esi + 0x68]
mov dword [esp + 0x38], edx
mov eax, dword [esi + 0x60]
push eax
push 0x5d410c
call fcn.004900e7
add esp, 8
test eax, eax
jne 0x4fefeb
mov edx, dword [esp + 0x88]
mov eax, dword [edx + 0x20]
lea ecx, [esp + 0x34]
push ecx
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
mov ecx, dword [esi + 0x78]
test cl, 4
je 0x4ff012
mov eax, ebx
cdq
sub eax, edx
mov edi, eax
sar edi, 1
jmp 0x4ff020
push 0x80070057
call fcn.004072a0
push 0x80004005
call fcn.004072a0
mov edx, ecx
and dl, 8
movzx edi, dl
neg edi
sbb edi, edi
and edi, ebx
test cl, 1
je 0x4ff02e
mov eax, ebp
cdq
sub eax, edx
sar eax, 1
jmp 0x4ff040
cmp dword [esp + 0x3c], 0
jne 0x4ff03e
test cl, 2
jne 0x4ff03e
xor eax, eax
jmp 0x4ff040
mov eax, ebp
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x34]
sub edx, eax
mov eax, dword [esp + 0x24]
sub ecx, edi
mov dword [esp + 0x40], edx
add edx, ebp
mov dword [esp + 0x44], ecx
add ecx, ebx
cmp dword [eax + 0xe8], 0
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], ecx
je 0x4ff07a
cmp dword [esi + 0x6c], 0
jne 0x4ff07a
mov ebp, 1
jmp 0x4ff07c
xor ebp, ebp
mov ecx, dword [esp + 0x88]
mov edi, dword [esi]
push 0
push 0
push ecx
lea edx, [esp + 0x4c]
push edx
push SysReAllocString
push 0
push 0
push 0
push 0
push 0x800
add edi, 0x58
call fcn.00481e75
mov edx, dword [edi]
push eax
mov eax, ebp
neg eax
sbb eax, eax
and eax, 0x80000
or eax, 0x80
push eax
mov ecx, esi
call edx
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
push 0x210
sub ecx, eax
push ecx
mov ecx, dword [esp + 0x48]
sub edx, ecx
push edx
push eax
push ecx
push 0x641488
mov ecx, esi
call fcn.00482fea
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx]
mov edx, dword [eax + 0x120]
push 1
push esi
push 0
call edx
test ebp, ebp
je 0x4ff11a
mov eax, dword [esi + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx + 0xe8]
push 2
push 0x96
push 0
push eax
call edx
mov eax, dword [esp + 0x8c]
mov ebp, dword [esp + 0x14]
inc eax
cmp eax, dword [esp + 0x18]
mov dword [esp + 0x8c], eax
jl 0x4fef50
mov ebx, dword [esp + 0x18]
xor esi, esi
test ebx, ebx
jle 0x4ff17a
test esi, esi
jl 0x4feb8a
cmp esi, dword [ebp + 0x34]
jge 0x4feb8a
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + esi*4]
cmp dword [ecx + 0x70], 0
lea eax, [eax + esi*4]
je 0x4ff175
push 0x257
push 0
push 0
push 0
push 0
push 0
call fcn.00482fea
inc esi
cmp esi, ebx
jl 0x4ff141
lea ecx, [esp + 0x54]
mov byte [esp + 0x80], 0
call fcn.004dc1a0
lea ecx, [esp + 0x64]
mov dword [esp + 0x80], 0xffffffff
call fcn.00486229
mov ecx, dword [esp + 0x78]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x70
ret 8