Function at 0x486650
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x502a00
push eax
mov dword fs:[0], esp
sub esp, 0x54
push ebx
push ebp
push esi
mov esi, dword [esp + 0x70]
xor ebx, ebx
mov ebp, ecx
cmp esi, ebx
jne 0x48668d
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x54]
mov dword fs:[0], ecx
add esp, 0x60
ret 4
push edi
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
push ebx
push 1
push ebx
push eax
mov eax, dword [esi + 0x1c]
push 0x30
push eax
call fcn.004d9d06
mov ecx, dword [0x574900]
mov dword [esp + 0x74], ecx
lea edx, [esp + 0x74]
mov ecx, esi
push edx
mov dword [esp + 0x70], ebx
call fcn.004d8e5b
lea eax, [esp + 0x74]
mov ecx, ebp
push eax
call fcn.004868b0
mov ecx, dword [esp + 0x74]
push ecx
mov ecx, esi
call fcn.004db4a1
lea ecx, [esp + 0x14]
call fcn.00485ef0
push 5
lea ecx, [esp + 0x38]
mov dword [esp + 0x18], 0x50e6a4
call fcn.0047a720
mov dword [esp + 0x20], 0x5176b0
mov dword [esp + 0x24], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x28], ebx
push esi
lea ecx, [esp + 0x18]
mov byte [esp + 0x70], 2
call fcn.00485f40
lea ecx, [esp + 0x14]
call fcn.00485f20
test eax, eax
je 0x486802
lea ecx, [esp + 0x14]
call fcn.00485f30
mov esi, eax
mov ecx, esi
call fcn.004db4f7
test eax, eax
jle 0x4867b0
lea edx, [esp + 0x74]
mov ecx, esi
push edx
call fcn.004d8e5b
push 0x26
lea ecx, [esp + 0x78]
call fcn.004dc3d6
xor ecx, ecx
lea edx, [esp + 0x74]
test eax, eax
setge cl
mov edi, ecx
push edx
mov ecx, ebp
call fcn.004868b0
cmp edi, ebx
je 0x4867a4
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0x74]
push eax
push ecx
lea ecx, [esp + 0x3c]
call fcn.004d644c
mov eax, dword [esp + 0x28]
push 0xffffffffffffffff
mov edi, eax
inc eax
push eax
lea ecx, [esp + 0x28]
call fcn.00490de0
mov eax, dword [esp + 0x24]
mov edx, dword [esi + 0x1c]
mov dword [eax + edi*4], edx
jmp 0x4867b0
mov ecx, dword [esp + 0x74]
push ecx
mov ecx, esi
call fcn.004db4a1
cmp esi, ebx
je 0x4867e7
mov edx, dword [esi + 0x1c]
push 0xa
push 0x57ac88
push edx
call dword [sym.imp.USER32.dll_GetClassNameW]
test eax, eax
je 0x4867e7
push 0x540cd0
push 0x57ac88
call fcn.004bf957
add esp, 8
test eax, eax
jne 0x4867e7
push esi
mov ecx, ebp
call fcn.004864e0
push ebx
lea ecx, [esp + 0x18]
call fcn.00485f90
lea ecx, [esp + 0x14]
call fcn.00485f20
test eax, eax
jne 0x48672c
push 1
lea ecx, [esp + 0x38]
call fcn.0047a820
mov eax, dword [esp + 0x28]
xor esi, esi
cmp eax, ebx
jle 0x48684b
mov edi, dword [sym.imp.USER32.dll_SetWindowTextW]
lea eax, [esp + 0x10]
push esi
push eax
lea ecx, [esp + 0x3c]
call fcn.0040b6c0
mov ecx, dword [esp + 0x24]
mov eax, dword [eax]
push eax
mov edx, dword [ecx + esi*4]
push edx
call edi
lea ecx, [esp + 0x10]
call fcn.004dbec1
mov eax, dword [esp + 0x28]
inc esi
cmp esi, eax
jl 0x48681d
mov dword [esp + 0x20], 0x5176b0
mov eax, dword [esp + 0x24]
mov byte [esp + 0x6c], 3
cmp eax, ebx
pop edi
je 0x48686a
push eax
call fcn.004dbc23
add esp, 4
lea ecx, [esp + 0x30]
mov byte [esp + 0x68], bl
call fcn.0047a780
lea ecx, [esp + 0x70]
mov dword [esp + 0x68], 0xffffffff
call fcn.004dbec1
mov ecx, dword [esp + 0x60]
pop esi
pop ebp
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x60
ret 4