Function at 0x4f0c90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x549e1b
push eax
mov dword fs:[0], esp
sub esp, 0xb8
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov eax, dword [esi + 0x118]
test eax, eax
jl 0x4f0cd2
cmp eax, dword [esi + 0xf8]
jge 0x4f0cd2
mov ecx, dword [esi + 0xf4]
mov edx, dword [ecx + eax*4]
mov dword [esp + 0x28], edx
jmp 0x4f0cda
mov dword [esp + 0x28], 0xffffffff
mov ecx, esi
call fcn.004f0430
mov ebp, dword [esi + 0xd0]
test ebp, ebp
mov dword [esp + 0x3c], ebp
je 0x4f1552
mov ecx, dword [esi + 0x1c]
lea eax, [esp + 0x60]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
mov edi, dword [esp + 0x68]
mov eax, dword [esp + 0x60]
mov ebx, dword [esp + 0x64]
sub edi, eax
mov eax, dword [esp + 0x6c]
push 0
sub eax, ebx
lea ecx, [esp + 0x84]
mov dword [esp + 0x44], edi
mov dword [esp + 0x4c], eax
call fcn.0052229d
push 0x11
lea ecx, [esp + 0x84]
mov dword [esp + 0xd4], 0
call fcn.00521bfe
push 0x595bac
lea ecx, [esp + 0x20]
mov ebx, eax
call fcn.00519684
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x34]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x94]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
lea ecx, [esp + 0x1c]
call fcn.00519616
push ebx
lea ecx, [esp + 0x84]
call fcn.00521c3a
mov ecx, dword [esp + 0x38]
lea eax, [edi - 5]
add ecx, 8
mov dword [esp + 0x18], ecx
mov ecx, dword [esi + 0x98]
cdq
inc ecx
idiv ecx
mov ebx, eax
cmp ebx, 1
mov dword [esp + 0x44], ebx
jge 0x4f0db3
mov ebx, 1
mov dword [esp + 0x44], ebx
lea ecx, [esp + 0x4c]
call fcn.00473110
push 0x20
push 0
lea ecx, [esp + 0x54]
mov byte [esp + 0xd8], 1
call fcn.004739d0
mov edx, dword [esp + 0x5c]
mov ecx, dword [esp + 0x54]
neg edx
sbb edx, edx
and edx, ecx
xor ecx, ecx
test ebp, ebp
mov dword [esp + 0x30], edx
jle 0x4f0dff
mov eax, dword [esi + 0xbc]
mov eax, dword [eax + ecx*4]
cmp eax, 0xffffffff
je 0x4f0dfa
inc dword [edx + eax*4]
inc ecx
cmp ecx, ebp
jl 0x4f0de9
xor ecx, ecx
mov eax, 8
mov dword [esp + 0x10], ecx
cmp dword [edx], 0
jle 0x4f0e10
inc ecx
add edx, 4
dec eax
jne 0x4f0e0a
xor ebp, ebp
mov dword [esp + 0x10], ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x24], ebp
mov edx, dword [esp + 0x18]
lea eax, [edx + 1]
mov ecx, eax
mov eax, dword [esp + 0x48]
imul ecx, dword [esp + 0x10]
sub eax, ecx
mov ecx, dword [esi + 0x9c]
sub eax, 0x12
inc ecx
cdq
idiv ecx
mov edi, eax
imul edi, ebx
dec edi
cmp ebp, 0xa
mov dword [esp + 0x2c], edi
je 0x4f0f54
jg 0x4f0e67
mov eax, dword [0x599a40]
test eax, eax
jne 0x4f0f54
cmp ebp, 0xa
jge 0x4f0e77
lea edx, [ebx + ebx]
cmp edi, edx
jl 0x4f0f54
mov ecx, esi
call fcn.004f0430
mov eax, dword [esp + 0x30]
mov dword [esp + 0x14], 0
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x20]
mov ebx, dword [ecx]
test ebx, ebx
jle 0x4f0f12
cmp ebp, 0xa
jle 0x4f0ea4
mov ecx, 1
jmp 0x4f0eb9
mov eax, ebx
cdq
idiv edi
mov ecx, eax
mov eax, ebx
cdq
idiv edi
test edx, edx
je 0x4f0eb5
inc ecx
test ecx, ecx
jle 0x4f0f12
lea ebp, [esi + 0xdc]
lea ebx, [esi + 0xf0]
xor edi, edi
mov dword [esp + 0x1c], ecx
mov eax, dword [ebp + 8]
push 0
push eax
mov ecx, ebp
call fcn.005188d5
mov edx, dword [esp + 0x14]
mov eax, dword [ebx + 8]
push edx
push eax
mov ecx, ebx
call fcn.005188d5
mov eax, dword [esi + 0x10c]
lea ecx, [esi + 0x104]
push edi
push eax
call fcn.005188d5
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x1c]
add edi, ecx
dec eax
mov dword [esp + 0x1c], eax
jne 0x4f0ecb
mov ebp, dword [esp + 0x24]
mov edi, ecx
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x20]
inc eax
add edx, 4
cmp eax, 8
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], edx
jb 0x4f0e8e
cmp ebp, 0xa
jg 0x4f0f6f
mov eax, dword [esi + 0xe4]
mov ecx, dword [esp + 0x10]
cmp ecx, eax
jge 0x4f0f6f
mov ebx, dword [esp + 0x44]
inc ebp
mov dword [esp + 0x10], eax
mov dword [esp + 0x24], ebp
jmp 0x4f0e24
mov eax, dword [esp + 0x34]
mov ebx, dword [esp + 0x44]
mov ebp, 0xa
mov dword [esp + 0x10], eax
inc ebp
mov dword [esp + 0x24], ebp
jmp 0x4f0e24
mov eax, dword [esi + 0xe4]
xor ebp, ebp
cmp eax, ebp
mov dword [esp + 0x10], eax
jne 0x4f0f8a
mov dword [esi + 0x118], ebp
jmp 0x4f1522
xor ebx, ebx
cmp eax, ebp
mov dword [esp + 0x24], 0x2f01
mov dword [esp + 0x14], 1
jle 0x4f1101
push 0x70
call fcn.0051a4c6
mov edi, eax
add esp, 4
mov dword [esp + 0x30], edi
cmp edi, ebp
mov byte [esp + 0xd0], 2
je 0x4f101a
mov ecx, edi
call fcn.0051ab7f
lea ebp, [edi + 0x3c]
mov dword [edi], vtable.CButton.0
mov ecx, ebp
call fcn.0042e170
lea ecx, [edi + 0x44]
mov dword [ebp], vtable.CBitmap.0
call fcn.00495c60
lea ecx, [edi + 0x4c]
call fcn.00495c60
lea ecx, [edi + 0x54]
call fcn.00495c60
mov eax, 1
mov dword [edi], 0x54da00
mov dword [edi + 0x5c], eax
mov dword [edi + 0x60], eax
xor eax, eax
mov dword [edi + 0x64], 0xffffffff
mov dword [edi + 0x68], eax
mov dword [edi + 0x6c], eax
xor ebp, ebp
jmp 0x4f101c
xor edi, edi
mov ecx, dword [esp + 0x24]
push ebp
mov eax, ecx
inc ecx
mov dword [esp + 0x28], ecx
push eax
lea ecx, [esp + 0x78]
push esi
push ecx
mov ecx, edi
mov byte [esp + 0xe0], 1
mov dword [esp + 0x80], ebp
mov dword [esp + 0x84], ebp
mov dword [esp + 0x88], ebp
mov dword [esp + 0x8c], ebp
call fcn.0040c910
mov eax, dword [esi + 0xf4]
cmp ebx, ebp
mov ecx, dword [eax + ebx*4]
mov edx, dword [ecx*8 + 0x595c24]
jle 0x4f107e
mov ebp, dword [eax + ebx*4 - 4]
mov dword [esp + 0x2c], 1
cmp ebp, ecx
je 0x4f1086
mov dword [esp + 0x2c], 0
mov ebp, dword [esp + 0x10]
dec ebp
cmp ebx, ebp
jge 0x4f109e
cmp dword [eax + ebx*4 + 4], ecx
jne 0x4f109e
mov eax, 1
xor ebp, ebp
jmp 0x4f10a2
xor ebp, ebp
xor eax, eax
cmp dword [esp + 0x2c], ebp
je 0x4f113f
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x34]
push eax
push edx
push str._s_d
push ecx
call fcn.004dfd70
add esp, 0x10
mov eax, dword [eax]
mov ecx, edi
push eax
mov byte [esp + 0xd4], 3
call fcn.0051a861
lea ecx, [esp + 0x34]
mov byte [esp + 0xd0], 1
call fcn.00519616
mov edx, dword [esi + 0xe0]
mov eax, dword [esp + 0x10]
mov dword [edx + ebx*4], edi
inc ebx
cmp ebx, eax
jl 0x4f0fa4
mov ecx, dword [esi + 0xf8]
mov eax, dword [esi + 0x118]
cmp eax, ecx
jge 0x4f1161
mov edx, dword [esp + 0x28]
cmp edx, 0xffffffff
je 0x4f1168
cmp eax, ebp
jle 0x4f1168
mov ecx, dword [esi + 0xf4]
cmp dword [ecx + eax*4], edx
je 0x4f1168
dec eax
cmp eax, ebp
jl 0x4f1168
lea ecx, [ecx + eax*4]
cmp dword [ecx], edx
je 0x4f1159
dec eax
sub ecx, 4
cmp eax, ebp
jge 0x4f1131
jmp 0x4f1168
cmp eax, ebp
mov dword [esp + 0x14], 1
jne 0x4f10b0
push edx
mov ecx, edi
call fcn.0051a861
jmp 0x4f10eb
mov dword [esi + 0x118], eax
jmp 0x4f1168
dec ecx
mov dword [esi + 0x118], ecx
mov eax, dword [esi + 0x118]
xor ebx, ebx
test eax, eax
mov ebp, 5
jl 0x4f11cc
mov eax, dword [esi + 0xe0]
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x18]
push 0x40
mov edi, dword [eax + ebx*4]
lea eax, [edx - 0xa]
push ecx
push eax
push ebp
push 5
push 0x5a8328
mov ecx, edi
call fcn.0051a93c
mov eax, dword [edi + 0x1c]
push 1
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov ecx, dword [edi + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_UpdateWindow]
mov edx, dword [esp + 0x18]
lea eax, [edx + 1]
add ebp, eax
mov eax, dword [esi + 0x118]
inc ebx
cmp ebx, eax
jle 0x4f1179
mov eax, dword [esp + 0x6c]
mov ebx, dword [esi + 0xe4]
add eax, 0xfffffffb
add ebp, 8
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x118]
dec ebx
cmp ebx, eax
jle 0x4f1244
mov ecx, dword [esi + 0xe0]
mov eax, dword [esp + 0x10]
or edx, 0xffffffff
push 0x40
mov edi, dword [ecx + ebx*4]
mov ecx, dword [esp + 0x1c]
sub edx, ecx
push ecx
mov ecx, dword [esp + 0x48]
add eax, edx
add ecx, 0xfffffff6
mov dword [esp + 0x18], eax
push ecx
push eax
push 5
push 0x5a8328
mov ecx, edi
call fcn.0051a93c
mov edx, dword [edi + 0x1c]
push 1
push 0
push edx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [edi + 0x1c]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [esi + 0x118]
dec ebx
cmp ebx, eax
jg 0x4f11eb
mov eax, dword [esi + 0x118]
mov edx, dword [esi + 0x108]
mov ecx, dword [esi + 0xf4]
mov ebx, dword [edx + eax*4]
mov edi, dword [ecx + eax*4]
mov dword [esp + 0x34], ebx
mov ebx, dword [esi + 0x10c]
mov dword [esp + 0x1c], edi
dec ebx
cmp eax, ebx
je 0x4f127f
cmp dword [ecx + eax*4 + 4], edi
jne 0x4f127f
mov ecx, dword [edx + eax*4 + 4]
mov dword [esp + 0x28], ecx
jmp 0x4f1287
mov dword [esp + 0x28], 0x7fffffff
mov ecx, dword [esp + 0x3c]
xor eax, eax
cmp ecx, eax
mov edi, 5
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
jle 0x4f139b
mov edx, dword [esi + 0xcc]
mov eax, dword [esp + 0x14]
mov ecx, dword [esi + 0xbc]
mov ebx, dword [edx + eax*4]
mov eax, dword [ecx + eax*4]
mov ecx, dword [0x599a40]
test ecx, ecx
mov dword [esp + 0x30], eax
jne 0x4f136d
cmp eax, 0xffffffff
je 0x4f12f3
cmp eax, dword [esp + 0x1c]
jne 0x4f136d
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x34]
cmp eax, ecx
jl 0x4f136d
cmp eax, dword [esp + 0x28]
jge 0x4f136d
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x18]
cmp eax, edx
jl 0x4f1316
mov eax, dword [esi + 0x9c]
mov dword [esp + 0x18], 0
mov edi, 5
lea ebp, [eax + ebp + 1]
mov eax, dword [esi + 0x9c]
mov edx, dword [esp + 0x10]
lea ecx, [eax + ebp]
cmp ecx, edx
jl 0x4f1332
push 0
mov ecx, ebx
call fcn.0051a98b
jmp 0x4f134a
mov edx, dword [esi + 0x98]
push 0x40
push eax
push edx
push ebp
push edi
push 0x5a82e8
mov ecx, ebx
call fcn.0051a93c
mov eax, dword [ebx + 0x1c]
push 1
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [esp + 0x18]
mov ecx, dword [esi + 0x98]
inc eax
lea edi, [edi + ecx + 1]
mov dword [esp + 0x18], eax
jmp 0x4f1376
push 0
mov ecx, ebx
call fcn.0051a98b
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x30]
cmp eax, edx
jne 0x4f1386
inc dword [esp + 0x20]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x3c]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jl 0x4f12a6
lea edi, [esi + 0x5c]
push 0
mov ecx, edi
mov dword [esp + 0x38], edi
call fcn.0051a98b
mov eax, dword [0x599a40]
test eax, eax
je 0x4f1522
mov eax, dword [esp + 0x10]
sub ebp, 5
sub eax, ebp
push 1
sub eax, 5
mov ecx, edi
push eax
mov eax, dword [esp + 0x48]
add eax, 0xfffffff6
push eax
push ebp
push 5
call fcn.0051a8fb
mov eax, dword [esp + 0xd8]
test eax, eax
je 0x4f1519
mov ecx, dword [esi + 0x78]
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
push 0xffff0000
push 0
push 0x1101
push ecx
call ebp
lea eax, [esi + 0x11c]
test eax, eax
je 0x4f140d
mov eax, dword [eax + 4]
mov edx, dword [esi + 0x78]
push eax
push 0
push 0x1109
push edx
call ebp
push eax
call fcn.005176ce
mov ebx, dword [esp + 0x3c]
mov edi, 1
cmp ebx, edi
mov dword [esp + 0x9c], 0x27
mov dword [esp + 0x98], 0xffff0002
mov dword [esp + 0x94], 0
jle 0x4f14c3
mov eax, dword [esi + 0xbc]
mov ecx, dword [eax + edi*4]
mov eax, dword [esp + 0x1c]
cmp ecx, eax
jne 0x4f14be
mov edx, dword [esi + 0xa8]
mov dword [esp + 0xb8], edi
mov dword [esp + 0xb4], edi
mov ecx, dword [edx + edi*4]
mov edx, dword [0x599e54]
mov eax, ecx
and eax, 0xffff
mov edx, dword [edx + eax*4]
mov eax, ecx
shr eax, 0x10
mov dword [esp + 0xc0], ecx
mov edx, dword [edx + 0x58]
lea ecx, [eax*8]
sub ecx, eax
mov eax, dword [edx + ecx*8]
mov edx, dword [esi + 0x78]
lea ecx, [esp + 0x94]
mov dword [esp + 0xac], eax
push ecx
push 0
push 0x1100
push edx
call ebp
inc edi
cmp edi, ebx
jl 0x4f144f
mov eax, dword [esi + 0x78]
xor edi, edi
push edi
push edi
push 0x1113
push eax
call ebp
mov edx, dword [esi + 0x78]
lea ecx, [esp + 0x94]
push ecx
push edi
push 0x1100
push edx
mov dword [esp + 0xc8], edi
mov dword [esp + 0xc4], edi
mov dword [esp + 0xd0], 0xffffffff
mov dword [esp + 0xbc], 0x595ce8
mov dword [esp + 0xa8], 0xffff0001
call ebp
mov edi, dword [esp + 0x34]
push 8
mov ecx, edi
call fcn.0051a98b
lea ecx, [esp + 0x4c]
mov byte [esp + 0xd0], 0
mov dword [esp + 0x4c], 0x54d7d0
call fcn.00473310
lea ecx, [esp + 0x80]
mov dword [esp + 0xd0], 0xffffffff
call fcn.0052230f
mov ecx, dword [esp + 0xc8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xc4
ret 4