Function at 0x4f1c70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52d03a
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x68
mov eax, dword [0x573054]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x78], esi
mov eax, dword [ebx + 0x10]
xor cl, cl
mov edx, dword [ebx + 0x14]
mov edi, dword [ebx + 0xc]
mov dword [ebp - 0x70], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x74], edx
mov byte [ebp - 0x69], cl
mov byte [ebp - 0x6a], cl
cmp eax, 0x21
ja 0x4f1f14
je 0x4f1f07
dec eax
cmp eax, 0x14
ja case.0x4f1ced.3
movzx eax, byte [eax + 0x4f2114]
jmp dword [eax*4 + 0x4f20f8]
cmp dword [esi + 0x34], 0
je 0x4f1d0c
mov byte [ebp - 0x69], 1
mov al, byte [ebp - 0x69]
mov dword [edx], 1
jmp 0x4f20d8
push 0x54
call fcn.0050f4b1
mov edi, eax
add esp, 4
mov dword [ebp - 0x70], edi
mov dword [ebp - 4], 0
push 0x54
push 0
push edi
call sub.VCRUNTIME140.dll_memset
mov dword [edi], vtable.RC::RCCoolMenuLayout.0
add esp, 0xc
mov dword [edi + 4], esi
mov dword [edi + 0x38], 0xffffffff
mov dword [edi + 0x3c], 0
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], 0
mov dword [edi + 0x4c], 0
mov dword [edi + 0x50], 0
mov byte [ebp - 4], 1
lea eax, [edi + 8]
mov esi, dword [sym.imp.USER32.dll_SetRectEmpty]
push eax
call esi
lea eax, [edi + 0x18]
push eax
call esi
lea eax, [edi + 0x28]
push eax
call esi
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x78]
mov edx, dword [ebp - 0x74]
mov dword [eax + 0x34], edi
mov al, 1
mov dword [edx], 1
jmp 0x4f20d8
mov eax, dword [esi + 0x40]
test eax, eax
je 0x4f1dba
push eax
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [esi + 0x40], 0
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_IsWindow]
mov edi, dword [sym.imp.USER32.dll_DestroyWindow]
test eax, eax
je 0x4f1de7
push str.RC_MENU_TOOLTIP_HWND
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_RemovePropW]
push dword [esi + 0x1c]
call edi
mov dword [esi + 0x1c], 0
push dword [esi + 0x10]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4f1e00
push dword [esi + 0x10]
call edi
mov dword [esi + 0x10], 0
mov dword [esi + 0x4c], 0xffffffff
jmp case.0x4f1ced.3
mov eax, dword [ebp - 0x70]
mov edx, eax
movzx eax, ax
shr edx, 0x10
cmp eax, 1
jbe case.0x4f1ced.3
cmp edx, 1
jbe case.0x4f1ced.3
mov edi, dword [esi + 0x34]
test edi, edi
je case.0x4f1ced.3
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [edi + 8]
mov dword [ebp - 0x24], 0
push eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x18], edx
call dword [sym.imp.USER32.dll_CopyRect]
push 0
mov ecx, edi
call fcn.004fc650
mov ecx, esi
call fcn.004f1a70
test al, al
je case.0x4f1ced.3
push 0
push 0
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp case.0x4f1ced.3
mov al, 1
mov dword [edx], 1
jmp 0x4f20d8
push 0
lea eax, [ebp - 0x24]
mov byte [ebp - 0x69], 1
push eax
push dword [esi + 0x14]
xorps xmm0, xmm0
movups xmmword [ebp - 0x24], xmm0
call dword [sym.imp.USER32.dll_GetUpdateRect]
push 0x40
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_BeginPaint]
mov edi, eax
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x4f1ed9
lea eax, [ebp - 0x24]
jmp 0x4f1eea
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x4f1ef5
lea eax, [ebp - 0x60]
push eax
push 0
push edi
mov ecx, esi
call fcn.004f2390
lea eax, [ebp - 0x68]
push eax
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_EndPaint]
jmp case.0x4f1ced.3
mov al, 1
mov dword [edx], 3
jmp 0x4f20d8
cmp eax, 0x2a3
ja 0x4f2028
je 0x4f1ffa
sub eax, 0x84
je 0x4f1fd8
sub eax, 2
je 0x4f1f8a
sub eax, 0x8c
jne case.0x4f1ced.3
and edi, 0xfff0
cmp edi, 0xf030
ja 0x4f1f70
je 0x4f1f7d
sub edi, 0xf000
je 0x4f1f7d
sub edi, 0x10
je 0x4f1f7d
sub edi, 0x10
je 0x4f1f7d
mov al, byte [ebp - 0x69]
mov dword [edx], 0
jmp 0x4f20d8
sub edi, 0xf090
je 0x4f1f7d
sub edi, 0x70
jne 0x4f1f62
mov al, 1
mov dword [edx], 0
jmp 0x4f20d8
test edi, edi
je 0x4f1fcf
mov byte [ebp - 0x69], 1
cmp byte [esi + 0x78], cl
jne 0x4f1fb1
push 0xffffffffffffffff
push 1
push 0x86
push dword [esi + 0x18]
mov byte [esi + 0x78], 1
call dword [sym.imp.USER32.dll_SendMessageW]
mov byte [esi + 0x78], 0
mov ecx, dword [ebp - 0x70]
push ecx
push 1
push 0x86
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_DefWindowProcW]
mov edx, dword [ebp - 0x74]
mov dword [edx], eax
jmp case.0x4f1ced.3
xor eax, eax
mov dword [edx], eax
jmp case.0x4f1ced.3
mov ecx, dword [ebp - 0x70]
lea eax, [ebp - 0x6a]
push eax
mov eax, ecx
shr eax, 0x10
push eax
push ecx
mov ecx, esi
call fcn.004f2180
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
mov al, byte [ebp - 0x6a]
jmp 0x4f20d8
push dword [esi + 0x1c]
mov byte [esi + 0x7c], cl
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je case.0x4f1ced.3
push 0x5732b4
push 0
push 0x411
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x4f1ced.3
sub eax, 0x317
je 0x4f207e
sub eax, 1
jne case.0x4f1ced.3
mov ecx, dword [ebp - 0x70]
mov byte [ebp - 0x69], 1
test cl, 1
je 0x4f2051
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4f2073
lea eax, [ebp - 0x24]
xorps xmm0, xmm0
push eax
push dword [esi + 0x14]
movups xmmword [ebp - 0x24], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [ebp - 0x24]
mov ecx, esi
push eax
push 1
push edi
call fcn.004f2390
mov ecx, dword [ebp - 0x74]
mov dword [ecx], 0
jmp case.0x4f1ced.3
mov eax, dword [ebp - 0x70]
mov byte [ebp - 0x69], 1
test al, 4
je 0x4f209b
push eax
push edi
push 0x318
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4f20d0
test al, 1
je 0x4f20ac
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4f20ce
lea eax, [ebp - 0x24]
xorps xmm0, xmm0
push eax
push dword [esi + 0x14]
movups xmmword [ebp - 0x24], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [ebp - 0x24]
mov ecx, esi
push eax
push 1
push edi
call fcn.004f2390
xor eax, eax
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
mov al, byte [ebp - 0x69]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0050f48d
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10