Function at 0x4ef420
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x544aa3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x90
push ebx
push ebp
mov ebp, ecx
push esi
push edi
xor esi, esi
mov eax, dword [ebp + 0x4c]
mov ecx, dword [ebp + 0x5c]
push eax
add ecx, 0x244
mov dword [esp + 0x30], esi
call fcn.004d0370
cmp eax, esi
mov dword [esp + 0x28], eax
je 0x4ef8f0
lea ecx, [esp + 0x64]
call fcn.00470b30
lea ecx, [esp + 0x50]
mov dword [esp + 0xa8], esi
call fcn.00470b30
lea ecx, [esp + 0x78]
mov byte [esp + 0xa8], 1
call fcn.00470b30
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa8], 2
call fcn.00470b30
mov ecx, dword [ebp + 0x4c]
mov byte [esp + 0xa8], 3
mov ebx, dword [ecx + 0x18]
cmp ebx, esi
mov dword [esp + 0x24], ebx
mov dword [esp + 0x18], ebx
jle 0x4ef75c
mov esi, dword [esp + 0x24]
mov edi, ebx
mov ecx, dword [ebp + 0x4c]
sub edi, esi
neg edi
sbb edi, edi
push 0
and edi, ebx
add ecx, 0x14
push edi
call fcn.004cfc50
mov esi, eax
test esi, esi
mov dword [esp + 0x34], esi
je 0x4ef819
mov ecx, dword [ebp + 0x4c]
push edi
add ecx, 0x14
call fcn.004d0680
cmp eax, 1
jne 0x4ef503
dec ebx
mov dword [esp + 0x18], ebx
jmp 0x4ef754
mov edx, dword [esi]
mov ecx, dword [ebp + 0x5c]
push 0
push edx
call fcn.0044e840
test eax, eax
mov dword [esp + 0x14], eax
je 0x4ef894
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x4ef894
push 1
call eax
test eax, eax
mov dword [esp + 0x30], eax
je 0x4ef894
add esi, 0x18
push esi
call fcn.00471ab0
add esi, eax
push esi
call fcn.00471ab0
add esi, eax
mov eax, dword [esp + 0xb8]
add esp, 8
cmp eax, 1
mov dword [esp + 0x10], esi
jne 0x4ef563
mov dword [esi], 0
mov ecx, dword [esp + 0x34]
lea eax, [esp + 0x38]
push eax
push ecx
mov ecx, dword [ebp + 0x4c]
add esi, 4
add ecx, 0x14
call fcn.004d06a0
mov ecx, dword [ebp + 0x4c]
push edi
add ecx, 0x14
mov ebx, eax
call fcn.004cfca0
mov edx, dword [esp + 0x14]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0xffffffff
mov eax, dword [edx + 0x14]
test ah, 1
je 0x4ef5e9
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
test eax, eax
jne 0x4ef5b1
mov dword [esp + 0x1c], eax
jmp 0x4ef5e9
mov ecx, dword [eax + 0x1c]
push 0
push 0
push 0x130b
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
jge 0x4ef5cc
xor eax, eax
jmp 0x4ef5e5
mov edx, dword [esp + 0x10]
push 0
push 0
push 0x130b
mov eax, dword [edx]
mov eax, dword [eax + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x10]
cmp dword [ecx], 0
jne 0x4ef6db
test edi, edi
jne 0x4ef62f
mov eax, dword [ebp + 0x1c]
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
add esi, 8
push 1
push eax
push edx
mov edx, dword [esi + 4]
push ecx
mov ecx, dword [esi]
push edx
mov edx, dword [esp + 0x4c]
push ecx
mov ecx, dword [0x591de8]
push ecx
push ecx
push edi
push 0x75
push eax
push edi
push edx
push ebx
call dword [esp + 0x68]
mov esi, eax
jmp 0x4ef693
mov eax, dword [ebp + 0x90]
test eax, eax
je 0x4ef63c
mov eax, dword [eax + 0x1c]
mov ecx, dword [ebp + 0x1c]
mov edx, dword [esp + 0x20]
push 1
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esi + 0xc]
push ecx
mov ecx, dword [esi + 8]
push edx
mov edx, dword [esi + 0x14]
push ecx
mov ecx, dword [esp + 0x44]
neg edx
sbb edx, edx
not edx
and edx, ecx
mov ecx, dword [esi + 4]
add edx, ecx
mov ecx, dword [esi]
push edx
mov edx, dword [ebp + 0x98]
push ecx
push 0
push edx
push eax
mov eax, dword [esp + 0x64]
push 0
push eax
push ebx
call dword [esp + 0x68]
mov esi, eax
mov eax, dword [ebp + 0x98]
add eax, 0x32
mov dword [ebp + 0x98], eax
test esi, esi
je 0x4ef823
mov eax, dword [esp + 0x1c]
cmp eax, 0xffffffff
je 0x4ef6cb
mov ecx, dword [esi + 0x1c]
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push eax
push 0x130c
push ecx
call ebx
mov edx, dword [esi + 0x1c]
push 0
push 0
push 0x130b
push edx
call ebx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x10]
push esi
lea ecx, [esp + 0x68]
mov dword [eax], esi
call fcn.00470df0
mov ecx, dword [esp + 0x1c]
push ecx
lea ecx, [esp + 0x40]
call fcn.00470df0
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x50]
push edx
call fcn.00470df0
mov esi, dword [esp + 0x10]
lea ecx, [esp + 0x78]
mov eax, dword [esi]
push eax
call fcn.00470df0
test edi, edi
jne 0x4ef749
mov ecx, dword [esi]
push edi
mov dword [ebp + 0x94], ecx
mov eax, dword [esi]
mov dword [ebp + 0x90], eax
push 1
mov edx, dword [eax + 0x1c]
push 0x86
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [esp + 0xb4], 1
jne 0x4ef73e
mov ecx, ebp
call fcn.004f6750
mov ecx, ebp
call fcn.004f66f0
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x18]
dec eax
mov dword [esp + 0x18], eax
mov ebx, eax
test ebx, ebx
jg 0x4ef4be
mov ecx, dword [esp + 0x60]
mov esi, dword [esp + 0x58]
mov eax, dword [esp + 0x88]
mov ebx, ecx
mov edi, dword [esp + 0x80]
mov edx, dword [esp + 0x44]
neg ebx
sbb ebx, ebx
and ebx, esi
neg eax
sbb eax, eax
and eax, edi
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x4c]
neg eax
sbb eax, eax
shr ecx, 2
and eax, edx
mov esi, ecx
lea ecx, [esp + 0x8c]
mov dword [esp + 0x24], eax
mov dword [esp + 0x10], esi
call fcn.00470b30
push esi
lea ecx, [esp + 0x90]
mov byte [esp + 0xac], 5
call fcn.00470b50
mov ecx, dword [esp + 0x9c]
mov edi, eax
mov edx, ecx
mov eax, 0x1010101
shr ecx, 2
mov dword [esp + 0x28], edi
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov edi, 1
mov dword [esp + 0x18], edi
mov ecx, dword [ebp + 0x4c]
push 0
push edi
add ecx, 0x14
call fcn.004cfc50
mov esi, eax
test esi, esi
je 0x4efa48
mov ecx, dword [ebp + 0x4c]
push edi
add ecx, 0x14
call fcn.004d0680
cmp eax, 1
jne 0x4ef8f7
inc edi
jmp 0x4ef7e5
test edi, edi
jg 0x4ef75c
jmp 0x4ef894
mov ebp, dword [ebp + 0x4c]
mov edx, dword [esp + 0x34]
push edx
mov eax, dword [ebp + 0x14]
lea ecx, [ebp + 0x14]
call dword [eax + 0x14]
push eax
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x28]
mov ecx, dword [eax]
push ecx
push 0x58ef98
push edx
call fcn.004dd760
add esp, 0x10
push eax
mov ecx, 0x592818
mov byte [esp + 0xac], 4
call fcn.00514423
lea ecx, [esp + 0x24]
mov byte [esp + 0xa8], 3
call fcn.00514336
mov eax, dword [0x591f2c]
mov dword [0x59281c], 0x10
push 0
push 0x73
mov ecx, dword [eax + 0x1c]
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov esi, 0x5477b0
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa8], 2
mov dword [esp + 0x3c], esi
call fcn.00470d30
lea ecx, [esp + 0x78]
mov byte [esp + 0xa8], 1
mov dword [esp + 0x78], esi
call fcn.00470d30
lea ecx, [esp + 0x50]
mov byte [esp + 0xa8], 0
mov dword [esp + 0x50], esi
call fcn.00470d30
lea ecx, [esp + 0x64]
mov dword [esp + 0xa8], 0xffffffff
mov dword [esp + 0x64], esi
call fcn.00470d30
xor eax, eax
jmp 0x4efca5
mov eax, dword [esp + 0x18]
mov ecx, dword [ebp + 0x4c]
push eax
add ecx, 0x14
call fcn.004cfca0
mov ecx, dword [esp + 0x10]
push eax
push ecx
push ebx
call fcn.00471b40
mov edx, dword [esp + 0x2c]
add esi, 0x18
push esi
mov ecx, dword [edx + eax*4]
mov edx, dword [esp + 0x34]
mov dword [esp + 0x24], ecx
mov eax, dword [edx + eax*4]
mov dword [esp + 0x2c], eax
call fcn.00471ab0
add esi, eax
push esi
call fcn.00471ab0
mov edi, dword [ebp + 0x90]
lea esi, [eax + esi + 0x18]
add esp, 0x14
mov eax, dword [esi]
test eax, eax
je 0x4ef968
mov ecx, dword [esp + 0x10]
push eax
push ecx
push ebx
call fcn.00471b40
add esp, 0xc
cmp eax, 0xffffffff
je 0x4ef968
mov edx, dword [esp + 0x20]
mov edi, dword [edx + eax*4]
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_GetParent]
push eax
call fcn.00515cbf
cmp eax, edi
je 0x4ef99c
test edi, edi
je 0x4ef987
mov edi, dword [edi + 0x1c]
mov edx, dword [esp + 0x14]
push edi
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SetParent]
push eax
call fcn.00515cbf
mov eax, dword [esp + 0x1c]
cmp eax, 0xffffffff
je 0x4efa38
mov edi, dword [esi + 4]
add esi, 4
add esi, 4
test eax, eax
jle 0x4ef9f0
mov dword [esp + 0x14], eax
mov eax, dword [esi]
test eax, eax
je 0x4ef9e1
mov ecx, dword [esp + 0x10]
push eax
push ecx
push ebx
call fcn.00471b40
mov edx, dword [esp + 0x34]
add esi, 4
add esp, 0xc
dec edi
mov byte [eax + edx], 0
mov eax, dword [esi]
test eax, eax
jne 0x4ef9c0
mov eax, dword [esp + 0x14]
add esi, 4
dec edi
dec eax
mov dword [esp + 0x14], eax
jne 0x4ef9ba
test edi, edi
jle 0x4efa38
cmp dword [esi], 0
je 0x4efa11
dec edi
add esi, 4
test edi, edi
jg 0x4ef9f4
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
mov edi, eax
jmp 0x4ef7e9
test edi, edi
jle 0x4efa38
mov eax, dword [esi]
test eax, eax
je 0x4efa32
push eax
mov eax, dword [esp + 0x14]
push eax
push ebx
call fcn.00471b40
mov ecx, dword [esp + 0x34]
add esp, 0xc
mov byte [eax + ecx], 0
add esi, 4
dec edi
jne 0x4efa15
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
mov edi, eax
jmp 0x4ef7e9
mov esi, 1
mov ecx, dword [ebp + 0x4c]
push 0
push esi
add ecx, 0x14
call fcn.004cfc50
mov edi, eax
test edi, edi
je 0x4efb5f
mov ecx, dword [ebp + 0x4c]
push esi
add ecx, 0x14
call fcn.004d0680
cmp eax, 1
jne 0x4efa79
inc esi
jmp 0x4efa4d
add edi, 0x18
push edi
call fcn.00471ab0
add edi, eax
push edi
call fcn.00471ab0
mov edx, dword [eax + edi]
add eax, edi
add esp, 8
cmp esi, 2
mov eax, dword [eax + 0x18]
mov dword [esp + 0x14], edx
mov dword [esp + 0x24], eax
lea edi, [esi - 1]
jl 0x4efaea
mov ecx, dword [ebp + 0x4c]
push 0
push edi
add ecx, 0x14
call fcn.004cfc50
mov ecx, dword [ebp + 0x4c]
push edi
add ecx, 0x14
mov ebx, eax
call fcn.004d0680
test eax, eax
jne 0x4efae4
add ebx, 0x18
push ebx
call fcn.00471ab0
add ebx, eax
push ebx
call fcn.00471ab0
mov ecx, dword [esp + 0x2c]
add ebx, eax
add esp, 8
cmp dword [ebx + 0x18], ecx
je 0x4efb0a
dec edi
cmp edi, 1
jge 0x4efaa5
mov edx, dword [esp + 0x14]
push 0x13
push 0
push 0
mov eax, dword [edx + 0x1c]
push 0
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
inc esi
jmp 0x4efa4d
cmp edi, 1
jl 0x4efaea
mov ecx, dword [ebp + 0x4c]
push 0
push edi
add ecx, 0x14
call fcn.004cfc50
test eax, eax
je 0x4efb04
lea edi, [eax + 0x18]
push edi
call fcn.00471ab0
add edi, eax
push edi
call fcn.00471ab0
add edi, eax
add esp, 8
mov edi, dword [edi]
test edi, edi
je 0x4efb04
mov eax, dword [esp + 0x14]
mov edx, dword [edi + 0x1c]
push 0x13
push 0
mov ecx, dword [eax + 0x1c]
push 0
push 0
push 0
push edx
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
inc esi
jmp 0x4efa4d
mov eax, dword [esp + 0x74]
mov esi, dword [esp + 0x6c]
mov ecx, eax
shr ecx, 2
neg eax
sbb eax, eax
and eax, esi
test ecx, ecx
jle 0x4efb99
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
mov esi, eax
mov ebx, ecx
mov eax, dword [esi]
push 0
push 0
push 0x806f
mov ecx, dword [eax + 0x1c]
push ecx
call edi
add esi, 4
dec ebx
jne 0x4efb80
jmp 0x4efb9f
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebp + 0x90]
push 0
push 0
push 0x8004
mov edx, dword [eax + 0x1c]
push edx
call edi
mov eax, dword [esp + 0x10]
xor edi, edi
test eax, eax
jle 0x4efc01
mov ebx, dword [esp + 0x20]
mov esi, dword [ebx]
mov eax, dword [esi + 0x1c]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov ecx, dword [esp + 0x28]
xor edx, edx
mov cl, byte [edi + ecx]
cmp cl, 1
sete dl
cmp eax, edx
je 0x4efbf5
dec cl
neg cl
sbb ecx, ecx
and ecx, 0xfffffff8
add ecx, 8
push ecx
mov ecx, esi
call fcn.005156aa
mov eax, dword [esp + 0x10]
inc edi
add ebx, 4
cmp edi, eax
jl 0x4efbc2
mov eax, dword [ebp + 0x90]
mov eax, dword [eax + 0x1c]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x4efc22
mov ecx, dword [ebp + 0x90]
push 8
call fcn.005156aa
mov ecx, ebp
call fcn.004f6730
mov esi, 0x5477b0
lea ecx, [esp + 0x8c]
mov byte [esp + 0xa8], 3
mov dword [esp + 0x8c], esi
call fcn.00470d30
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa8], 2
mov dword [esp + 0x3c], esi
call fcn.00470d30
lea ecx, [esp + 0x78]
mov byte [esp + 0xa8], 1
mov dword [esp + 0x78], esi
call fcn.00470d30
lea ecx, [esp + 0x50]
mov byte [esp + 0xa8], 0
mov dword [esp + 0x50], esi
call fcn.00470d30
lea ecx, [esp + 0x64]
mov dword [esp + 0xa8], 0xffffffff
mov dword [esp + 0x64], esi
call fcn.00470d30
mov eax, 1
mov ecx, dword [esp + 0xa0]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x9c
ret 8