Function at 0x4d2990
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x53afe0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x68
push ebx
push ebp
mov dword [esp + 8], ecx
push esi
push edi
lea ecx, [esp + 0x34]
call fcn.004d4390
mov dword [esp + 0x34], 0x557aac
mov ebp, dword [esp + 0x88]
xor edi, edi
mov dword [esp + 0x80], edi
cmp dword [ebp + 8], edi
jle 0x4d2ab3
mov eax, dword [ebp + 4]
mov ecx, dword [esp + 0x98]
push 0
mov esi, dword [eax + edi*4]
push esi
push ecx
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esi]
call fcn.004d2950
mov edx, dword [esp + 0x98]
push eax
lea eax, [esp + 0x2c]
push edx
push eax
mov ecx, esi
call dword [ebx + 0x168]
mov eax, dword [esp + 0x98]
test eax, eax
je 0x4d2a35
mov ecx, dword [esi + 0x16c]
mov edx, dword [esp + 0x90]
mov dword [esp + 0x18], edx
mov eax, dword [ecx + 0x18]
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], eax
jmp 0x4d2a51
mov eax, dword [esi + 0x16c]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x1c]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x20], eax
mov eax, dword [ecx]
mov edx, dword [esp + 0x24]
mov ecx, dword [ecx + 4]
mov ebx, dword [esp + 0x28]
add edx, eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x5c], eax
xor eax, eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
add ebx, ecx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0x48]
mov dword [esp + 0x48], esi
push eax
push ecx
lea ecx, [esp + 0x3c]
mov dword [esp + 0x5c], edx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x6c], edx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], edi
call fcn.004d46f0
mov eax, dword [ebp + 8]
inc edi
cmp edi, eax
jl 0x4d29da
mov eax, dword [esp + 0x98]
test eax, eax
jne 0x4d2af5
mov eax, dword [esp + 0x3c]
xor ecx, ecx
test eax, eax
jle 0x4d2af5
xor edx, edx
mov eax, dword [esp + 0x38]
inc ecx
mov edi, dword [edx + eax + 4]
mov esi, dword [edx + eax + 8]
lea eax, [edx + eax + 4]
add edx, 0x30
mov dword [eax + 4], edi
mov dword [eax], esi
mov edi, dword [eax + 8]
mov esi, dword [eax + 0xc]
mov dword [eax + 0xc], edi
mov dword [eax + 8], esi
cmp ecx, dword [esp + 0x3c]
jl 0x4d2aca
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
push 0x4d3140
push 0x30
push ecx
push edx
call fcn.00507400
mov ebx, dword [esp + 0x4c]
xor ecx, ecx
add esp, 0x10
or ebp, 0xffffffff
cmp ebx, ecx
mov dword [esp + 0x8c], 1
mov dword [esp + 0x88], ecx
jle 0x4d2b9b
mov eax, dword [esp + 0x38]
xor edi, edi
mov edx, dword [edi + eax + 4]
lea esi, [edi + eax + 4]
cmp edx, ecx
jge 0x4d2b8e
cmp ebp, dword [edi + eax + 0x24]
jl 0x4d2b50
mov ebp, dword [esp + 0x8c]
test ebp, ebp
je 0x4d2b8e
sub ecx, edx
push 0
push ecx
push esi
mov dword [esp + 0x98], 1
call dword [sym.imp.USER32.dll_OffsetRect]
mov ebx, dword [esp + 0x3c]
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x88]
mov ebp, dword [edi + eax + 0x24]
mov ecx, dword [esi + 8]
inc edx
add edi, 0x30
cmp edx, ebx
mov dword [esp + 0x88], edx
jl 0x4d2b33
jmp 0x4d2b9f
mov dword [esp + 0x8c], 0
jmp 0x4d2b6f
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x94]
lea edx, [ebx - 1]
test edx, edx
mov dword [esp + 0x88], 0xffffffff
mov dword [esp + 0x8c], 1
jl 0x4d2c38
lea edi, [edx + edx*2]
shl edi, 4
inc edx
mov dword [esp + 0x14], edx
mov edx, dword [edi + eax + 0xc]
lea esi, [edi + eax + 4]
mov ebp, edx
sub ebp, ecx
test ebp, ebp
jle 0x4d2cb9
mov ebp, dword [esp + 0x88]
cmp ebp, dword [edi + eax + 0x24]
jl 0x4d2bfe
mov ebp, dword [esp + 0x8c]
test ebp, ebp
je 0x4d2cb9
sub ecx, edx
push 0
push ecx
push esi
mov dword [esp + 0x98], 1
call dword [sym.imp.USER32.dll_OffsetRect]
mov ebx, dword [esp + 0x3c]
mov eax, dword [esp + 0x38]
mov edx, dword [edi + eax + 0x24]
mov ecx, dword [esi]
mov dword [esp + 0x88], edx
mov edx, dword [esp + 0x14]
sub edi, 0x30
dec edx
mov dword [esp + 0x14], edx
jne 0x4d2bce
xor ecx, ecx
xor ebp, ebp
test ebx, ebx
jle 0x4d2c6d
xor edi, edi
mov edx, dword [edi + eax + 4]
lea esi, [edi + eax + 4]
cmp edx, ecx
jge 0x4d2c62
sub ecx, edx
push 0
push ecx
push esi
call dword [sym.imp.USER32.dll_OffsetRect]
mov ebx, dword [esp + 0x3c]
mov eax, dword [esp + 0x38]
mov ecx, dword [esi + 8]
inc ebp
add edi, 0x30
cmp ebp, ebx
jl 0x4d2c42
cmp ecx, dword [esp + 0x94]
jle 0x4d2e0a
xor ebp, ebp
cmp ebx, ebp
mov dword [esp + 0x88], ebp
jle 0x4d2d46
xor edi, edi
mov esi, dword [edi + eax]
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x98]
push esi
push eax
mov ecx, ebx
call fcn.004d2950
test al, 0x80
jne 0x4d2cc9
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x94]
mov dword [edi + ecx + 0x28], edx
jmp 0x4d2d16
mov dword [esp + 0x8c], 0
jmp 0x4d2c1d
mov eax, dword [esp + 0x98]
mov edx, dword [esi]
push 0
push esi
push eax
mov ecx, ebx
mov dword [esp + 0x98], edx
call fcn.004d2950
mov edx, dword [esp + 0x90]
push eax
lea ecx, [esp + 0x2c]
push 1
push ecx
mov ecx, esi
call dword [edx + 0x168]
mov eax, dword [esp + 0x98]
test eax, eax
mov eax, dword [esp + 0x24]
jne 0x4d2d0e
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x38]
mov dword [edi + ecx + 0x28], eax
mov edx, dword [esp + 0x38]
add edi, 0x30
mov dword [edi + edx - 4], ebp
mov eax, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov ecx, dword [edi + eax - 8]
add ebp, ecx
mov ecx, dword [esp + 0x88]
inc ecx
cmp ecx, ebx
mov dword [esp + 0x88], ecx
jl 0x4d2c8d
mov esi, dword [esp + 0x94]
lea ecx, [ebx - 1]
test ecx, ecx
mov dword [esp + 0x88], ecx
jl 0x4d2e0a
lea edx, [ecx + ecx*2]
shl edx, 4
mov dword [esp + 0x8c], edx
mov ecx, dword [esp + 0x98]
add edx, eax
test ecx, ecx
je 0x4d2d7e
mov ecx, dword [edx + 0x14]
jmp 0x4d2d81
mov ecx, dword [edx + 0x18]
mov edi, dword [edx + 4]
cmp ecx, edi
jle 0x4d2d8a
mov ecx, edi
mov edi, dword [edx + 4]
mov ebp, dword [edx + 0xc]
sub edi, ebp
add edi, esi
cmp ecx, edi
jge 0x4d2d9a
mov ecx, edi
mov edi, dword [edx + 0x2c]
cmp ecx, edi
jge 0x4d2da3
mov ecx, edi
mov edi, dword [edx + 0x28]
mov ebp, esi
sub ebp, ecx
cmp ebp, edi
jge 0x4d2db2
mov ecx, esi
sub ecx, edi
mov ebp, esi
sub ebp, ecx
cmp ebp, edi
jl 0x4d2dbf
cmp ecx, dword [edx + 0x2c]
jge 0x4d2dc8
cmp ebx, 1
jne 0x4d2e7c
xor eax, eax
mov dword [edx + 0xc], esi
test ecx, ecx
setl al
dec eax
and eax, ecx
mov dword [edx + 4], eax
mov edx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x3c]
mov esi, eax
mov eax, dword [esp + 0x88]
sub edx, 0x30
dec eax
mov dword [esp + 0x8c], edx
mov dword [esp + 0x88], eax
test eax, eax
mov eax, dword [esp + 0x38]
jge 0x4d2d6c
mov ecx, dword [esp + 0x98]
test ecx, ecx
jne 0x4d2e4a
xor ecx, ecx
test ebx, ebx
jle 0x4d2e4a
xor edx, edx
mov edi, dword [edx + eax + 4]
mov esi, dword [edx + eax + 8]
lea eax, [edx + eax + 4]
inc ecx
add edx, 0x30
mov dword [eax + 4], edi
mov dword [eax], esi
mov edi, dword [eax + 8]
mov esi, dword [eax + 0xc]
mov dword [eax + 0xc], edi
mov dword [eax + 8], esi
mov ebx, dword [esp + 0x3c]
mov eax, dword [esp + 0x38]
cmp ecx, ebx
jl 0x4d2e1d
xor ecx, ecx
cmp ebx, ecx
mov dword [esp + 0xa0], ecx
mov dword [esp + 0x88], ecx
jle 0x4d2f3c
xor ebp, ebp
mov ecx, dword [esp + 0x98]
mov edi, dword [eax + ebp]
test ecx, ecx
je 0x4d2eb7
mov esi, dword [eax + ebp + 0xc]
mov edx, dword [eax + ebp + 4]
jmp 0x4d2ebf
lea ecx, [ebx + ebx*2]
shl ecx, 4
mov edx, dword [ecx + eax - 0xc]
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x34], 0x557aa0
mov dword [ecx], edx
test eax, eax
mov dword [esp + 0x80], 1
je 0x4d2eaf
push eax
call fcn.00511c55
add esp, 4
or eax, 0xffffffff
jmp 0x4d3129
mov esi, dword [eax + ebp + 0x10]
mov edx, dword [eax + ebp + 8]
mov ebx, dword [edi]
push 0
push edi
push ecx
mov ecx, dword [esp + 0x1c]
sub esi, edx
call fcn.004d2950
push eax
lea edx, [esp + 0x94]
push esi
push edx
mov ecx, edi
call dword [ebx + 0x168]
mov eax, dword [esp + 0x98]
mov esi, dword [esp + 0x90]
mov edx, dword [esp + 0x8c]
mov ecx, esi
test eax, eax
jne 0x4d2eff
mov ecx, edx
cmp dword [esp + 0xa0], ecx
jg 0x4d2f1a
test eax, eax
mov dword [esp + 0xa0], esi
jne 0x4d2f1a
mov dword [esp + 0xa0], edx
mov eax, dword [esp + 0x88]
mov ebx, dword [esp + 0x3c]
inc eax
add ebp, 0x30
mov dword [esp + 0x88], eax
cmp eax, ebx
mov eax, dword [esp + 0x38]
jl 0x4d2e64
mov ecx, dword [esp + 0x9c]
cmp dword [ecx], 0
jne 0x4d2f68
mov dword [esp + 0x34], 0x557aa0
test eax, eax
mov dword [esp + 0x80], 2
je 0x4d3122
jmp 0x4d3119
xor ebp, ebp
test ebx, ebx
mov dword [esp + 0x88], ebp
jle 0x4d3102
mov edx, dword [esp + 0x98]
lea ebx, [ebp + ebp*2]
mov ecx, dword [esp + 0x10]
shl ebx, 4
mov edi, dword [ebx + eax]
lea esi, [ebx + eax + 4]
push edi
push edx
call fcn.004d2950
mov ecx, dword [edi + 0xd0]
or al, 0x40
test ecx, 0x100000
je 0x4d302e
mov ecx, dword [esp + 0x98]
test ecx, ecx
je 0x4d2ff3
mov ecx, dword [esp + 0x3c]
dec ecx
cmp ebp, ecx
jne 0x4d2fca
mov ecx, dword [esp + 0x94]
jmp 0x4d2fd2
mov edx, dword [esp + 0x38]
mov ecx, dword [ebx + edx + 0x34]
test ebp, ebp
mov dword [esi + 8], ecx
jne 0x4d2fdf
xor ecx, ecx
mov dword [esi], ecx
jmp 0x4d302c
mov ecx, dword [esp + 0x38]
mov ebx, dword [ebx + ecx - 0x24]
mov ecx, dword [esi]
cmp ebx, ecx
jge 0x4d2fef
mov ecx, ebx
mov dword [esi], ecx
jmp 0x4d302c
mov edx, dword [esp + 0x3c]
dec edx
cmp ebp, edx
jne 0x4d3005
mov ecx, dword [esp + 0x94]
jmp 0x4d300d
mov ecx, dword [esp + 0x38]
mov ecx, dword [ebx + ecx + 0x38]
test ebp, ebp
mov dword [esi + 0xc], ecx
jne 0x4d3018
xor ecx, ecx
jmp 0x4d3029
mov edx, dword [esp + 0x38]
mov ecx, dword [esi + 4]
mov ebx, dword [ebx + edx - 0x20]
cmp ebx, ecx
jge 0x4d3029
mov ecx, ebx
mov dword [esi + 4], ecx
or al, 1
mov ecx, dword [esp + 0x98]
test ecx, ecx
je 0x4d3040
mov ecx, dword [esi + 8]
mov edx, dword [esi]
jmp 0x4d3046
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 4]
mov ebx, dword [esp + 0xa0]
sub ecx, edx
mov edx, dword [edi]
push ebx
push eax
lea eax, [esp + 0x94]
push ecx
push eax
mov ecx, edi
call dword [edx + 0x168]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x90]
mov ebp, esi
add edx, eax
add ebx, ecx
mov dword [ebp], eax
mov dword [ebp + 4], ecx
mov dword [ebp + 8], edx
mov dword [ebp + 0xc], ebx
mov ebx, dword [esp + 0x10]
mov ecx, ebx
call fcn.004d4140
mov ecx, dword [edi + 0x16c]
push edi
mov dword [ecx + 0x14], eax
lea ecx, [esp + 0x28]
call fcn.004be660
lea edx, [esp + 0x24]
mov ecx, ebx
push edx
call fcn.0051593d
lea eax, [esp + 0x24]
push esi
push eax
call dword [sym.imp.USER32.dll_EqualRect]
test eax, eax
jne 0x4d30e3
mov ecx, dword [edi + 0x1c]
mov edx, dword [esp + 0x9c]
push esi
push ecx
push edx
call fcn.0050ffef
mov eax, dword [edi]
push 1
push 0
mov ecx, edi
call dword [eax + 0x118]
mov ebp, dword [esp + 0x88]
mov eax, dword [esp + 0x3c]
inc ebp
cmp ebp, eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x88], ebp
jl 0x4d2f79
mov dword [esp + 0x34], 0x557aa0
test eax, eax
mov dword [esp + 0x80], 3
je 0x4d3122
push eax
call fcn.00511c55
add esp, 4
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x78]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x74
ret 0x1c