Function at 0x4f6a70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52dcaa
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x68
mov eax, dword [0x575054]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x78], esi
mov eax, dword [ebx + 0x10]
xor cl, cl
mov edx, dword [ebx + 0x14]
mov edi, dword [ebx + 0xc]
mov dword [ebp - 0x70], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x74], edx
mov byte [ebp - 0x69], cl
mov byte [ebp - 0x6a], cl
cmp eax, 0x21
ja 0x4f6d14
je 0x4f6d07
dec eax
cmp eax, 0x14
ja case.0x4f6aed.3
movzx eax, byte [eax + 0x4f6f14]
jmp dword [eax*4 + 0x4f6ef8]
cmp dword [esi + 0x34], 0
je 0x4f6b0c
mov byte [ebp - 0x69], 1
mov al, byte [ebp - 0x69]
mov dword [edx], 1
jmp 0x4f6ed8
push 0x54
call fcn.0050f2a1
mov edi, eax
add esp, 4
mov dword [ebp - 0x70], edi
mov dword [ebp - 4], 0
push 0x54
push 0
push edi
call sub.VCRUNTIME140.dll_memset
mov dword [edi], vtable.RC::RCCoolMenuLayout.0
add esp, 0xc
mov dword [edi + 4], esi
mov dword [edi + 0x38], 0xffffffff
mov dword [edi + 0x3c], 0
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], 0
mov dword [edi + 0x4c], 0
mov dword [edi + 0x50], 0
mov byte [ebp - 4], 1
lea eax, [edi + 8]
mov esi, dword [sym.imp.USER32.dll_SetRectEmpty]
push eax
call esi
lea eax, [edi + 0x18]
push eax
call esi
lea eax, [edi + 0x28]
push eax
call esi
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x78]
mov edx, dword [ebp - 0x74]
mov dword [eax + 0x34], edi
mov al, 1
mov dword [edx], 1
jmp 0x4f6ed8
mov eax, dword [esi + 0x40]
test eax, eax
je 0x4f6bba
push eax
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [esi + 0x40], 0
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_IsWindow]
mov edi, dword [sym.imp.USER32.dll_DestroyWindow]
test eax, eax
je 0x4f6be7
push str.RC_MENU_TOOLTIP_HWND
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_RemovePropW]
push dword [esi + 0x1c]
call edi
mov dword [esi + 0x1c], 0
push dword [esi + 0x10]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4f6c00
push dword [esi + 0x10]
call edi
mov dword [esi + 0x10], 0
mov dword [esi + 0x4c], 0xffffffff
jmp case.0x4f6aed.3
mov eax, dword [ebp - 0x70]
mov edx, eax
movzx eax, ax
shr edx, 0x10
cmp eax, 1
jbe case.0x4f6aed.3
cmp edx, 1
jbe case.0x4f6aed.3
mov edi, dword [esi + 0x34]
test edi, edi
je case.0x4f6aed.3
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [edi + 8]
mov dword [ebp - 0x24], 0
push eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x18], edx
call dword [sym.imp.USER32.dll_CopyRect]
push 0
mov ecx, edi
call fcn.00501450
mov ecx, esi
call fcn.004f6890
test al, al
je case.0x4f6aed.3
push 0
push 0
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp case.0x4f6aed.3
mov al, 1
mov dword [edx], 1
jmp 0x4f6ed8
push 0
lea eax, [ebp - 0x24]
mov byte [ebp - 0x69], 1
push eax
push dword [esi + 0x14]
xorps xmm0, xmm0
movups xmmword [ebp - 0x24], xmm0
call dword [sym.imp.USER32.dll_GetUpdateRect]
push 0x40
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x68]
push eax
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_BeginPaint]
mov edi, eax
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x4f6cd9
lea eax, [ebp - 0x24]
jmp 0x4f6cea
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x4f6cf5
lea eax, [ebp - 0x60]
push eax
push 0
push edi
mov ecx, esi
call fcn.004f7190
lea eax, [ebp - 0x68]
push eax
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_EndPaint]
jmp case.0x4f6aed.3
mov al, 1
mov dword [edx], 3
jmp 0x4f6ed8
cmp eax, 0x2a3
ja 0x4f6e28
je 0x4f6dfa
sub eax, 0x84
je 0x4f6dd8
sub eax, 2
je 0x4f6d8a
sub eax, 0x8c
jne case.0x4f6aed.3
and edi, 0xfff0
cmp edi, 0xf030
ja 0x4f6d70
je 0x4f6d7d
sub edi, 0xf000
je 0x4f6d7d
sub edi, 0x10
je 0x4f6d7d
sub edi, 0x10
je 0x4f6d7d
mov al, byte [ebp - 0x69]
mov dword [edx], 0
jmp 0x4f6ed8
sub edi, 0xf090
je 0x4f6d7d
sub edi, 0x70
jne 0x4f6d62
mov al, 1
mov dword [edx], 0
jmp 0x4f6ed8
test edi, edi
je 0x4f6dcf
mov byte [ebp - 0x69], 1
cmp byte [esi + 0x78], cl
jne 0x4f6db1
push 0xffffffffffffffff
push 1
push 0x86
push dword [esi + 0x18]
mov byte [esi + 0x78], 1
call dword [sym.imp.USER32.dll_SendMessageW]
mov byte [esi + 0x78], 0
mov ecx, dword [ebp - 0x70]
push ecx
push 1
push 0x86
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_DefWindowProcW]
mov edx, dword [ebp - 0x74]
mov dword [edx], eax
jmp case.0x4f6aed.3
xor eax, eax
mov dword [edx], eax
jmp case.0x4f6aed.3
mov ecx, dword [ebp - 0x70]
lea eax, [ebp - 0x6a]
push eax
mov eax, ecx
shr eax, 0x10
push eax
push ecx
mov ecx, esi
call fcn.004f6f80
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
mov al, byte [ebp - 0x6a]
jmp 0x4f6ed8
push dword [esi + 0x1c]
mov byte [esi + 0x7c], cl
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je case.0x4f6aed.3
push 0x5752b4
push 0
push 0x411
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x4f6aed.3
sub eax, 0x317
je 0x4f6e7e
sub eax, 1
jne case.0x4f6aed.3
mov ecx, dword [ebp - 0x70]
mov byte [ebp - 0x69], 1
test cl, 1
je 0x4f6e51
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4f6e73
lea eax, [ebp - 0x24]
xorps xmm0, xmm0
push eax
push dword [esi + 0x14]
movups xmmword [ebp - 0x24], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [ebp - 0x24]
mov ecx, esi
push eax
push 1
push edi
call fcn.004f7190
mov ecx, dword [ebp - 0x74]
mov dword [ecx], 0
jmp case.0x4f6aed.3
mov eax, dword [ebp - 0x70]
mov byte [ebp - 0x69], 1
test al, 4
je 0x4f6e9b
push eax
push edi
push 0x318
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4f6ed0
test al, 1
je 0x4f6eac
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4f6ece
lea eax, [ebp - 0x24]
xorps xmm0, xmm0
push eax
push dword [esi + 0x14]
movups xmmword [ebp - 0x24], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [ebp - 0x24]
mov ecx, esi
push eax
push 1
push edi
call fcn.004f7190
xor eax, eax
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
mov al, byte [ebp - 0x69]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0050f27d
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10