Function at 0x4868a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xe8
push ebx
push ebp
push esi
mov esi, edi
call fcn.00406500
mov ecx, dword [edi + 4]
lea eax, [esp + 0x90]
push eax
push ecx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], 5
mov dword [esp + 0x20], 0x11
mov dword [esp + 0x24], 0x16
call dword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [0x4bc610]
mov eax, dword [edi + 4]
mov ecx, dword [esp + 0x1c]
push 0
push edx
mov edx, dword [esp + 0x20]
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
push 0
push eax
mov eax, dword [esp + 0x24]
sub ecx, eax
push ecx
add edx, 0xffffffd8
push edx
push eax
push 0x28
push 0x50000000
push 0x4ab4c4
push str.STATIC
push 0x20
mov dword [esp + 0x40], 0x28
call esi
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [edi + 0x38], eax
mov eax, dword [edi + 0x2c]
push 1
push eax
mov eax, dword [edi + 0x38]
push 0x30
push eax
call ebp
mov ebx, dword [0x4bc610]
mov eax, dword [esp + 0x18]
mov edx, dword [edi + 4]
push 0
push ebx
mov ebx, dword [esp + 0x24]
push 0
push edx
mov edx, dword [esp + 0x24]
add eax, 2
lea ecx, [eax + 0x50]
sub ebx, edx
push ebx
mov dword [esp + 0x2c], ecx
sub ecx, eax
push ecx
push edx
push eax
push 0x50000000
push 0x4ab4c8
push str.STATIC
push 0x20
mov dword [esp + 0x40], eax
call esi
mov dword [edi + 0x3c], eax
mov eax, dword [edi + 0x24]
mov ecx, dword [edi + 0x3c]
push 1
push eax
push 0x30
push ecx
call ebp
push ecx
mov eax, esp
mov dword [eax], 0
mov eax, 0x5000000b
mov ecx, 0x4ab4cc
push ecx
mov edx, esp
lea ebx, [esp + 0x18]
mov dword [edx], ebx
mov edx, dword [edi + 4]
push edx
lea edx, [edi + 0x44]
push edx
call fcn.00406220
mov eax, dword [edi + 0x28]
push 1
push eax
mov eax, dword [edi + 0x48]
push 0x30
push eax
call ebp
mov eax, dword [esp + 0x1c]
mov ebx, dword [0x4bc610]
mov edx, dword [edi + 4]
push 0
push ebx
push 0
lea ecx, [eax + 2]
push edx
add eax, 0x11
mov dword [esp + 0x5c], eax
sub eax, ecx
push eax
push 0x14
push ecx
push 0x28
push 0x50000100
push 0x4ab4d0
push str.STATIC
push 0x20
mov dword [esp + 0x70], 0x28
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], 0x3c
call esi
mov dword [edi + 0x40], eax
mov eax, dword [edi + 0x24]
mov ecx, dword [edi + 0x40]
push 1
push eax
push 0x30
push ecx
call ebp
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x1c]
lea edx, [eax + 0xa]
mov dword [esp + 0x30], edx
lea edx, [ecx + 2]
add ecx, 0x11
push ecx
add eax, 0x28
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ecx
mov eax, esp
mov dword [esp + 0x38], edx
mov ecx, 0x4ab4d4
push ecx
mov edx, esp
mov dword [eax], 0
lea ebx, [esp + 0x38]
mov dword [edx], ebx
mov edx, dword [edi + 4]
push edx
lea edx, [edi + 0x1068]
mov eax, 0x4000000b
push edx
call fcn.00406220
mov eax, dword [edi + 0x28]
push 1
push eax
mov eax, dword [edi + 0x106c]
push 0x30
push eax
call ebp
mov ecx, dword [edi + 0x2608]
mov edx, dword [ecx]
mov eax, dword [edx + 0x24]
call eax
push eax
lea ecx, [edi + 0x108c]
push 0x800
push ecx
call fcn.0046c680
mov eax, dword [esp + 0xa4]
lea edx, [eax - 0x64]
mov dword [esp + 0x64], eax
mov eax, dword [edi + 4]
add esp, 0xc
cmp dword [0x4bb540], 0
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], 5
mov dword [esp + 0x5c], 0x16
mov dword [esp + 0xc], eax
jne 0x486ae7
mov dword [0x4bb540], 0x4ac414
lea ecx, [edi + 0x24a4]
push ecx
push 0x4bc60c
mov ebx, 0x4bb510
call fcn.00405370
add esp, 8
movzx ebx, ax
xor eax, eax
push eax
mov eax, dword [esp + 0x10]
push 0x20
push 0x5000000b
push 0x4ab4dc
lea edx, [esp + 0x60]
push edx
push eax
lea eax, [edi + 0x2484]
call fcn.00406b80
mov ecx, dword [edi + 0x260c]
push ecx
lea ebx, [edi + 0x2484]
call fcn.00487750
mov eax, dword [edi + 0x24]
mov edx, dword [edi + 0x2488]
push 1
push eax
push 0x30
push edx
call ebp
mov ebx, dword [0x4bc610]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x50]
push 0
push ebx
mov ebx, dword [edi + 4]
push 0
push ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0xa8]
add edx, 0xffffffe2
mov dword [esp + 0xec], ecx
sub ecx, ebx
push ecx
mov dword [esp + 0xec], eax
sub eax, edx
push eax
push ebx
push edx
push 0x50000000
push 0x4ab4e0
push str.STATIC
push 0x20
mov dword [esp + 0x100], edx
call esi
mov dword [edi + 0x208c], eax
mov eax, dword [edi + 0x24]
mov ecx, dword [edi + 0x208c]
push 1
push eax
push 0x30
push ecx
call ebp
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x4c]
add eax, 0xffffff97
add ecx, 2
mov dword [esp + 0x20], eax
add eax, 0x41
lea edx, [esp + 0x20]
mov dword [esp + 0x24], ecx
push edx
mov dword [esp + 0x2c], eax
add ecx, 0x14
lea esi, [edi + 0x2508]
push edi
mov eax, 0x4ab4e4
mov dword [esp + 0x34], ecx
call fcn.00486100
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0x24]
mov eax, ecx
sub eax, esi
sub eax, 5
cdq
sub eax, edx
mov edx, dword [esp + 0x20]
sar eax, 1
add esi, eax
sub ecx, eax
mov eax, dword [edi + 4]
add edx, 0xfffffff6
cmp dword [0x4bb420], 0
mov dword [esp + 0xb4], esi
mov dword [esp + 0xb0], 0x28
mov dword [esp + 0xb8], edx
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc], eax
lea esi, [edi + 0x24e0]
jne 0x486c5d
mov dword [0x4bb420], 0x4ac414
lea ecx, [esi + 0x20]
push ecx
push 0x4bc60c
mov ebx, 0x4bb3f0
call fcn.00405370
add esp, 8
movzx ebx, ax
xor eax, eax
push eax
mov eax, dword [esp + 0x10]
push 0x20
push 0x4000000b
push 0x4ab4ec
lea edx, [esp + 0xc0]
push edx
push eax
mov eax, esi
call fcn.00406b80
mov ecx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x24]
mov eax, ecx
sub eax, ebx
sub eax, 0xe
cdq
sub eax, edx
mov edx, dword [esp + 0x20]
push 0
sar eax, 1
add ebx, eax
sub ecx, eax
mov eax, dword [0x4bc610]
push eax
mov eax, dword [edi + 4]
push 0
push eax
lea esi, [edx - 0x2d]
add edx, 0xfffffff6
mov dword [esp + 0xfc], ecx
sub ecx, ebx
push ecx
mov dword [esp + 0xfc], edx
sub edx, esi
push edx
push ebx
push esi
push 0x40000002
push 0x4ab4f0
push str.STATIC
push 0
mov dword [esp + 0x110], esi
mov dword [esp + 0x114], ebx
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [edi + 0x24dc], eax
mov eax, dword [edi + 0x24]
mov ecx, dword [edi + 0x24dc]
push 1
push eax
push 0x30
push ecx
call ebp
mov ebx, dword [esp + 0x4c]
lea edx, [esp + 0x60]
add ebx, 2
push edx
lea ebp, [ebx + 0x14]
lea esi, [edi + 0x2094]
push edi
mov eax, 0x4ab4f4
mov dword [esp + 0x68], 0x28
mov dword [esp + 0x70], 0x69
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x74], ebp
call fcn.00486100
mov eax, dword [esp + 0x98]
add eax, 0xffffff97
mov dword [esp + 0xc0], eax
add eax, 0x41
mov dword [esp + 0xc8], eax
mov dword [esp + 0xc4], ebx
mov dword [esp + 0xcc], ebp
lea eax, [esp + 0xc0]
push eax
lea esi, [edi + 0x2388]
push edi
mov eax, 0x4ab4fc
call fcn.00486100
lea ecx, [esp + 0x70]
push ecx
lea esi, [edi + 0x2190]
push edi
mov eax, 0x4ab504
mov dword [esp + 0x78], 0x28
mov dword [esp + 0x80], 0x69
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x84], ebp
call fcn.00486100
lea edx, [esp + 0x80]
push edx
lea esi, [edi + 0x228c]
push edi
mov eax, 0x4ab50c
mov dword [esp + 0x88], 0x28
mov dword [esp + 0x90], 0x69
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x94], ebp
call fcn.00486100
and dword [edi + 0x2604], 0xfffffffe
push edi
call fcn.004861b0
mov esi, edi
call fcn.00484ee0
call fcn.00484e10
call fcn.00484d60
mov ecx, dword [edi + 0x2608]
mov eax, dword [ecx]
mov edx, dword [eax + 0x74]
call edx
test eax, eax
je 0x486e9f
cmp word [eax], 0
je 0x486e9f
push eax
lea eax, [edi + 0x2638]
push 0x400
push eax
call fcn.0046c680
add esp, 8
mov eax, esp
push ecx
mov dword [esp + 0xa8], 4
mov dword [esp + 0xac], 8
mov dword [esp + 0xb0], 0x24
mov dword [esp + 0xb4], 0x28
mov dword [eax], 0
mov eax, esp
lea ecx, [esp + 0xa8]
mov dword [eax], ecx
mov edx, dword [edi + 4]
push edx
lea esi, [edi + 0x2614]
call fcn.00406290
cmp byte [edi + 0x2e51], 0
je 0x486ebb
mov eax, dword [edi + 4]
push 0
push 0
push 0x50d
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xe8
ret