Function at 0x4a0df0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4d5fbc
mov eax, dword fs:[0]
push eax
sub esp, 0x42c
mov eax, dword [0x4eb0b4]
xor eax, esp
mov dword [esp + 0x428], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4eb0b4]
xor eax, esp
push eax
lea eax, [esp + 0x440]
mov dword fs:[0], eax
mov eax, dword [esp + 0x46c]
mov esi, dword [esp + 0x464]
mov ecx, dword [0x532b4c]
mov dword [esp + 0x44], esi
test eax, eax
jne 0x4a0e4f
mov edi, ecx
mov dword [esp + 0x30], edi
jmp 0x4a0e55
mov edi, eax
mov dword [esp + 0x30], eax
test edi, edi
je 0x4a19c7
mov ebx, 1
cmp dword [esp + 0x460], ebx
jne 0x4a0ec5
cmp byte [0x56d1f7], 0
jne 0x4a0ec5
cmp byte [0x56d1f6], 0
mov eax, dword [0x570040]
jne 0x4a10b6
test ecx, ecx
je 0x4a10b6
cmp eax, ebx
je 0x4a0e9b
cmp eax, 2
jne 0x4a10b6
push ebx
push 0xa2
push edi
call fcn.0042d2a0
push ebx
push 0xa6
push edi
call fcn.0042d2a0
push ebx
push 0xa1
push edi
call fcn.0042d2a0
mov byte [0x56d1f7], bl
mov eax, dword [0x570040]
cmp eax, 7
je 0x4a19c7
cmp eax, 0xa
je 0x4a19c7
test byte [0x570068], bl
jne 0x4a0f13
or dword [0x570068], ebx
mov dword [esp + 0x448], 0
push 0x415860
push 2
push 4
push 0x570060
call fcn.00401260
mov dword [esp + 0x448], 0xffffffff
mov ebp, dword [esp + 0x45c]
mov ebx, dword [esp + 0x454]
mov edi, dword [esp + 0x450]
test esi, esi
mov esi, dword [esp + 0x458]
jne 0x4a0f81
cmp dword [esp + 0x460], 2
jae 0x4a0f81
mov eax, dword [esp + 0x460]
mov ecx, eax
neg ecx
sbb ecx, ecx
and ecx, 0x96
add ecx, 0x32
push ecx
lea ecx, [eax*4 + 0x570060]
call fcn.00453020
test al, al
jne 0x4a0f81
cmp dword [0x570040], 8
jne 0x4a19c7
cmp edi, esi
jne 0x4a19c7
cmp ebx, ebp
jne 0x4a19c7
mov edx, esi
or edx, ebp
jne 0x4a0f91
mov eax, edi
or eax, ebx
mov byte [esp + 0x17], dl
je 0x4a0f96
mov byte [esp + 0x17], 1
cmp byte [0x56cf33], 0
jne 0x4a0fb9
cmp byte [0x56cf32], 0
jne 0x4a0fb9
cmp byte [esp + 0x17], 0
jne 0x4a0fb9
call fcn.004c2d35
mov dword [0x56d1f8], eax
mov ecx, esi
or ecx, ebp
jne 0x4a0fd4
mov esi, 1
xor ebp, ebp
mov dword [esp + 0x458], esi
mov dword [esp + 0x45c], ebp
cmp dword [esp + 0x460], 1
jne 0x4a0fec
push ebp
push esi
push ebx
push edi
mov ebx, 2
call fcn.004a0d60
mov edx, dword [esp + 0x458]
mov ebx, dword [esp + 0x454]
mov esi, dword [esp + 0x450]
push ebp
push edx
push ebx
push esi
call fcn.0047eb30
cmp dword [0x570040], 0
mov edi, eax
mov dword [esp + 0x38], edi
je 0x4a10f6
cmp dword [0x570044], 0
je 0x4a10f6
mov eax, esi
or eax, ebx
jne 0x4a10f6
push 0x3b8
push eax
lea ecx, [esp + 0x80]
push ecx
call fcn.004c1d50
mov eax, dword [0x56cf64]
mov edx, dword [esp + 0x3c]
add esp, 0xc
push eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x7c], 0x3b8
mov dword [esp + 0x80], edx
mov dword [esp + 0x84], 0x7b
mov dword [esp + 0x88], 4
call fcn.004a0c10
mov ecx, 0x56d240
lea eax, [esp + 0x90]
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4a10c9
test dx, dx
je 0x4a10b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4a10c9
add eax, 4
add ecx, 4
test dx, dx
jne 0x4a1090
xor eax, eax
jmp 0x4a10ce
cmp byte [esp + 0x468], 0
je 0x4a19c7
jmp 0x4a0eca
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4a10f6
lea ecx, [esp + 0x78]
push ecx
push 1
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
push 0x200
lea edx, [esp + 0x94]
push edx
push 0x56d240
call fcn.0047f480
test byte [0x570068], 2
jne 0x4a1126
or dword [0x570068], 2
mov dword [esp + 0x448], 1
mov dword [0x57005c], 0
mov dword [esp + 0x448], 0xffffffff
cmp byte [0x56d1f7], 0
je 0x4a1436
cmp dword [0x570044], 0
je 0x4a1436
cmp dword [esp + 0x460], 1
jne 0x4a1436
mov ebx, dword [0x56cf64]
cmp ebx, edi
jne 0x4a1175
push 0xbb8
mov ecx, 0x57005c
call fcn.00453020
test al, al
je 0x4a13bf
mov ebx, dword [0x56cf64]
mov ecx, edi
shl ecx, 4
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov esi, edx
shl ebx, 4
shr esi, 0x1f
add esi, edx
mov eax, 0x51eb851f
imul ebx
sar edx, 5
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov dword [esp + 0x40], esi
mov dword [esp + 0x3c], ebx
cmp esi, ebx
je 0x4a133a
call fcn.0049eea0
mov ebp, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
cmp eax, 0x20
push 0
setl byte [esp + 0x33]
call ebp
push 0
mov ebx, eax
call ebp
mov ecx, dword [0x570044]
mov ebp, eax
lea eax, [esp + 0x18]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetIconInfo]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x20]
push ecx
lea eax, [edx + edx]
add edi, edi
push ebx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x58], edi
call dword [sym.imp.GDI32.dll_SelectObject]
lea edx, [esp + 0x60]
push edx
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x2c]
push 0x18
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
movzx ecx, word [esp + 0x72]
movzx edx, word [esp + 0x70]
mov eax, dword [esp + 0x34]
push 0
push ecx
push edx
push edi
push eax
call dword [sym.imp.GDI32.dll_CreateBitmap]
push eax
push ebp
mov dword [esp + 0x50], eax
call dword [sym.imp.GDI32.dll_SelectObject]
cmp byte [esp + 0x2f], 0
mov dword [esp + 0x54], eax
jne 0x4a1250
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x28], ecx
xor edx, edx
cmp dword [0x544030], 0xffffffff
setne dl
add edi, 0xffffffff
mov dword [esp + 0x58], edx
js 0x4a12ce
xor esi, esi
cmp dword [esp + 0x34], esi
jbe 0x4a12c5
mov eax, dword [esp + 0x34]
shr eax, 1
sub eax, dword [esp + 0x58]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x4c]
cmp esi, eax
jb 0x4a12ab
add eax, 2
cmp esi, eax
ja 0x4a12ab
mov eax, dword [esp + 0x50]
sub eax, dword [esp + 0x40]
cmp edi, eax
jb 0x4a12ab
cmp byte [esp + 0x2f], 0
mov eax, ebx
jne 0x4a12a1
mov eax, ebp
push 0xffff
push edi
push esi
push eax
jmp 0x4a12b8
push edi
push esi
push ebx
call dword [sym.imp.GDI32.dll_GetPixel]
push eax
push edi
push esi
push ebp
call dword [sym.imp.GDI32.dll_SetPixel]
inc esi
cmp esi, dword [esp + 0x34]
jb 0x4a127b
sub edi, 1
jns 0x4a1265
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x5c]
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
push ecx
push ebx
call edi
mov edx, dword [esp + 0x54]
push edx
push ebp
call edi
mov edi, dword [sym.imp.GDI32.dll_DeleteDC]
push ebx
call edi
push ebp
call edi
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.USER32.dll_CreateIconIndirect]
mov ecx, dword [0x570044]
push ecx
mov edi, eax
call dword [sym.imp.USER32.dll_DestroyIcon]
mov edx, dword [esp + 0x24]
mov dword [0x570044], edi
mov edi, dword [sym.imp.GDI32.dll_DeleteObject]
push edx
call edi
mov eax, dword [esp + 0x28]
push eax
call edi
mov ecx, dword [esp + 0x48]
push ecx
call edi
mov ebp, dword [esp + 0x45c]
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x38]
push 0x3b8
lea edx, [esp + 0x7c]
push 0
push edx
call fcn.004c1d50
mov eax, dword [esp + 0x3c]
add esp, 0xc
mov dword [esp + 0x78], 0x3b8
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], 0x7b
mov dword [esp + 0x84], 5
cmp esi, ebx
je 0x4a1383
mov dword [esp + 0x84], 7
mov ecx, dword [0x570044]
mov dword [esp + 0x8c], ecx
push edi
lea ecx, [esp + 0x7c]
mov dword [esp + 0x8c], 0x8007
call fcn.004a0c10
lea edx, [esp + 0x78]
push edx
push 1
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov esi, dword [esp + 0x450]
mov dword [0x56cf64], edi
mov eax, dword [esp + 0x454]
mov ecx, dword [esp + 0x458]
mov dword [0x56d170], esi
mov dword [0x56d174], eax
mov dword [0x56d168], ecx
mov dword [0x56d16c], ebp
push edi
lea edx, [esp + 0x434]
push 0x4dddc0
push edx
call fcn.004c430d
add esp, 0xc
cmp dword [esp + 0x460], 0
jne 0x4a14aa
mov eax, dword [esp + 0x30]
push 0x9e
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0x99
xor edi, edi
lea esi, [esp + 0x434]
mov ebx, eax
call fcn.004a03c0
mov ebp, dword [esp + 0x30]
jmp 0x4a1540
cmp dword [esp + 0x460], 0
jne 0x4a13bf
cmp dword [0x570040], 0
mov eax, dword [esp + 0x454]
mov ecx, dword [esp + 0x458]
mov dword [0x56d180], esi
mov dword [0x56d184], eax
mov dword [0x56d178], ecx
mov dword [0x56d17c], ebp
je 0x4a13e4
cmp byte [0x56cf33], 0
je 0x4a13e4
or esi, eax
jne 0x4a13e4
test ebp, ebp
jl 0x4a19c7
jg 0x4a13e4
cmp ecx, 0x10000
jb 0x4a19c7
jmp 0x4a13e4
mov ebp, dword [esp + 0x30]
push 0x9d
push ebp
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0x98
xor edi, edi
lea esi, [esp + 0x434]
mov ebx, eax
call fcn.004a03c0
mov ecx, dword [0x570040]
test ecx, ecx
jne 0x4a1546
cmp dword [esp + 0x460], 1
jne 0x4a1546
mov ecx, dword [esp + 0x454]
mov edx, dword [esp + 0x450]
mov eax, dword [0x56d18c]
push ecx
mov ecx, dword [0x56d188]
push edx
push eax
push ecx
call fcn.0047eb30
cmp eax, 0x63
jne 0x4a1517
cmp dword [0x54b18c], edi
jne 0x4a1517
mov eax, 0x64
push eax
lea edx, [esp + 0x434]
push 0x4dddc0
push edx
call fcn.004c430d
add esp, 0xc
push 0xa4
xor edi, edi
lea esi, [esp + 0x434]
call fcn.004a03c0
mov ecx, dword [0x570040]
mov esi, dword [esp + 0x45c]
mov edi, dword [esp + 0x454]
cmp edi, esi
jl 0x4a1581
jg 0x4a156a
mov eax, dword [esp + 0x450]
cmp eax, dword [esp + 0x458]
jbe 0x4a1581
mov edx, dword [esp + 0x458]
mov edi, esi
mov dword [esp + 0x450], edx
mov dword [esp + 0x454], edi
cmp byte [0x56d1f5], 0
je 0x4a15f7
cmp byte [0x56cf33], 0
jne 0x4a159d
cmp dword [esp + 0x460], 0
je 0x4a15b0
cmp byte [0x56cf32], 0
jne 0x4a15cc
cmp dword [esp + 0x460], 1
jne 0x4a15cc
test ecx, ecx
je 0x4a15c3
cmp ecx, 1
je 0x4a15c3
cmp ecx, 2
je 0x4a15c3
cmp ecx, 8
jne 0x4a15cc
push 9
push ebx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [esp + 0x458]
mov ecx, dword [esp + 0x450]
push 0
push esi
push eax
push edi
push ecx
call fcn.0047eb30
push eax
push 0x402
push ebx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4a19a6
test ebx, ebx
jne 0x4a160f
xor eax, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
jmp 0x4a1634
lea edx, [esp + 0x18]
push edx
push ebx
call dword [sym.imp.USER32.dll_GetClientRect]
push 2
lea eax, [esp + 0x1c]
push eax
push ebp
push ebx
call dword [sym.imp.USER32.dll_MapWindowPoints]
inc dword [esp + 0x24]
mov ecx, dword [0x570040]
mov esi, dword [esp + 0x44]
test esi, esi
jne 0x4a164b
push ebp
call dword [sym.imp.USER32.dll_GetDC]
mov ecx, dword [0x570040]
mov esi, eax
xor ebp, ebp
test ecx, ecx
jne 0x4a169b
cmp dword [esp + 0x460], 1
jne 0x4a169b
mov ecx, dword [esp + 0x45c]
mov edx, dword [esp + 0x458]
mov eax, dword [0x56d18c]
push ecx
mov ecx, dword [0x56d188]
push edx
push eax
push ecx
call fcn.0047eb30
mov edx, dword [esp + 0x20]
sub edx, dword [esp + 0x18]
mov ecx, eax
imul ecx, edx
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
mov eax, dword [esp + 0x45c]
mov ecx, dword [esp + 0x458]
mov edx, dword [esp + 0x454]
push eax
mov eax, dword [esp + 0x454]
push ecx
push edx
push eax
call fcn.0047eb30
mov edx, dword [esp + 0x20]
sub edx, dword [esp + 0x18]
mov ecx, eax
imul ecx, edx
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov edi, edx
shr edi, 0x1f
add edi, edx
cmp ebp, edi
jle 0x4a16e4
mov ebp, edi
mov eax, dword [0x56cf58]
mov ebx, dword [sym.imp.GDI32.dll_SelectObject]
push eax
push esi
call ebx
mov ecx, dword [0x56cf3c]
push ecx
push esi
mov dword [esp + 0x40], eax
call ebx
mov edx, dword [esp + 0x24]
dec edx
push edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x1c]
lea ecx, [edi + eax]
push ecx
inc edx
xor ecx, ecx
cmp ebp, 1
setle cl
push edx
dec ecx
and ecx, 2
sub eax, ecx
lea edx, [eax + ebp + 1]
push edx
push esi
call dword [sym.imp.GDI32.dll_Rectangle]
test ebp, ebp
jle 0x4a1767
mov eax, dword [0x56cf38]
push eax
push esi
call ebx
mov ecx, dword [0x56cf4c]
push ecx
push esi
call ebx
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
dec edx
push edx
mov edx, dword [esp + 0x20]
lea ecx, [eax + ebp]
push ecx
inc edx
push edx
inc eax
push eax
push esi
call dword [sym.imp.GDI32.dll_Rectangle]
mov eax, dword [0x56cf54]
push eax
push esi
call ebx
test edi, edi
jle 0x4a1779
lea eax, [edi - 1]
jmp 0x4a177b
xor eax, eax
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push 0
push ecx
add eax, edx
push eax
push esi
call dword [sym.imp.GDI32.dll_MoveToEx]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebx, dword [sym.imp.GDI32.dll_LineTo]
push eax
add ecx, ebp
push ecx
push esi
call ebx
test ebp, ebp
jle 0x4a17c4
mov edx, dword [0x56cf50]
push edx
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push eax
push ecx
push esi
call ebx
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
dec edx
push edx
push eax
push esi
call ebx
mov ecx, dword [0x56cf60]
push ecx
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
dec edx
push edx
push eax
push esi
call ebx
mov ecx, dword [0x56cf44]
push ecx
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
inc edx
push edx
push eax
push esi
call ebx
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x18]
push 0
push ecx
inc edx
push edx
push esi
call dword [sym.imp.GDI32.dll_MoveToEx]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
push eax
inc ecx
push ecx
push esi
call ebx
mov edx, dword [0x56cf5c]
push edx
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [0x56cf40]
push eax
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [esp + 0x45c]
cmp dword [esp + 0x454], ecx
jg 0x4a188d
jl 0x4a1869
mov edx, dword [esp + 0x458]
cmp dword [esp + 0x450], edx
jae 0x4a188d
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
add eax, 0xfffffffe
push eax
mov eax, dword [esp + 0x1c]
dec ecx
push ecx
inc edx
push edx
lea ecx, [edi + eax + 1]
push ecx
push esi
call dword [sym.imp.GDI32.dll_Rectangle]
test edi, edi
jle 0x4a1904
mov edx, dword [esp + 0x20]
sub edx, dword [esp + 0x18]
dec edx
cmp edi, edx
jge 0x4a1904
mov eax, dword [0x56cf60]
push eax
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push 0
push ecx
lea eax, [edi + edx]
push eax
push esi
call dword [sym.imp.GDI32.dll_MoveToEx]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x18]
push ecx
lea eax, [edi + edx]
push eax
push esi
call ebx
mov ecx, dword [0x56cf44]
push ecx
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
push 0
push edx
lea ecx, [edi + eax]
push ecx
push esi
call dword [sym.imp.GDI32.dll_MoveToEx]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
push edx
add eax, ebp
push eax
push esi
call ebx
mov ecx, dword [esp + 0x45c]
cmp dword [esp + 0x454], ecx
jg 0x4a197d
jl 0x4a1926
mov edx, dword [esp + 0x458]
cmp dword [esp + 0x450], edx
jae 0x4a197d
mov eax, dword [0x56cf48]
push eax
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push 0
push ecx
lea eax, [edi + edx + 1]
push eax
push esi
call dword [sym.imp.GDI32.dll_MoveToEx]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
push ecx
dec edx
push edx
push esi
call ebx
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
add eax, 0xfffffffe
push eax
dec ecx
push ecx
push esi
call ebx
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
add edx, 0xfffffffe
push edx
lea ecx, [edi + eax + 1]
push ecx
push esi
call ebx
mov edx, dword [esp + 0x38]
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
push edx
push esi
call edi
mov eax, dword [esp + 0x3c]
push eax
push esi
call edi
cmp dword [esp + 0x44], 0
jne 0x4a19a6
mov ecx, dword [esp + 0x30]
push esi
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp byte [esp + 0x17], 0
je 0x4a19c7
cmp dword [esp + 0x460], 0
jne 0x4a19c0
mov byte [0x56cf33], 1
jmp 0x4a19c7
mov byte [0x56cf32], 1
mov ecx, dword [esp + 0x440]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x428]
xor ecx, esp
call fcn.004c1302
add esp, 0x438
ret 0x20