Function at 0x4bc9d9
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
mov edx, 0x19
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x4bc9e1
mov dword [section..data], 0x4006cb
mov dword [section..data], 0x4006d2
push dword [esp + 0x74]
call fcn.004b26cf
and eax, eax
je 0x4bcb35
mov dword [section..data], 0x4006d3
lea eax, [esp + 0x44]
push eax
push dword [esp + 0x78]
call fcn.004abf27
mov dword [section..data], 0x4006d4
push dword [esp + 0x74]
call fcn.004fee9e
mov ebx, eax
lea ebp, [esp + 0x44]
sub ebx, dword [ebp]
sub ebx, dword [ebp + 8]
mov dword [esp + 0x3c], ebx
mov dword [section..data], 0x4006d5
push dword [esp + 0x74]
call fcn.00500741
mov ebx, eax
sub ebx, dword [ebp + 4]
sub ebx, dword [ebp + 0xc]
mov dword [esp + 0x40], ebx
mov dword [section..data], 0x4006d6
mov ebx, dword [esp + 0x3c]
cmp ebx, 1
jge 0x4bca92
mov dword [section..data], 0x4006d6
mov dword [esp + 0x3c], 1
mov dword [section..data], 0x4006d6
mov dword [section..data], 0x4006d7
mov ebx, dword [esp + 0x40]
cmp ebx, 1
jge 0x4bcac1
mov dword [section..data], 0x4006d7
mov dword [esp + 0x40], 1
mov dword [section..data], 0x4006d7
mov dword [section..data], 0x4006d8
push dword [esp + 0x40]
push dword [esp + 0x40]
push 0xffffffff
call fcn.0052389a
mov dword [esp + 0x38], eax
mov dword [section..data], 0x4006d9
push dword [esp + 0x38]
call fcn.005238b0
push eax
call fcn.0051a4cc
and eax, eax
je 0x4bcb2b
mov dword [section..data], 0x4006da
push 0
call fcn.004b27e8
mov dword [section..data], 0x4006db
call fcn.0051a69e
mov dword [section..data], 0x4006dc
mov dword [section..data], 0x4006dd
mov dword [section..data], 0x4006df
push dword [esp + 0x74]
call fcn.004fee9e
mov dword [esp + 0x3c], eax
mov dword [section..data], 0x4006df
push dword [esp + 0x74]
call fcn.00500741
mov dword [esp + 0x40], eax
mov dword [section..data], 0x4006e0
mov ebx, dword [esp + 0x3c]
cmp ebx, 1
jge 0x4bcb92
mov dword [section..data], 0x4006e0
mov dword [esp + 0x3c], 1
mov dword [section..data], 0x4006e0
mov dword [section..data], 0x4006e0
mov ebx, dword [esp + 0x40]
cmp ebx, 1
jge 0x4bcbc1
mov dword [section..data], 0x4006e0
mov dword [esp + 0x40], 1
mov dword [section..data], 0x4006e0
mov dword [section..data], 0x4006e1
push dword [esp + 0x74]
call fcn.004ff0d8
mov ebx, eax
cmp ebx, 7
jne 0x4bcc1a
mov dword [section..data], 0x4006e2
push 0xffffffff
push 0x20
push dword [esp + 0x48]
push dword [esp + 0x48]
push 0xffffffff
call fcn.005236f2
mov dword [esp], eax
mov dword [section..data], 0x4006e3
jmp 0x4bcc43
mov dword [section..data], 0x4006e3
mov dword [section..data], 0x4006e4
push dword [esp + 0x40]
push dword [esp + 0x40]
push 0xffffffff
call fcn.0052389a
mov dword [esp], eax
mov dword [section..data], 0x4006e5
mov dword [section..data], 0x4006e7
push dword [esp + 0x74]
call fcn.004fef4a
and eax, eax
je 0x4bd878
mov dword [section..data], 0x4006e8
push dword [esp]
call fcn.005238b0
push eax
call fcn.0051a4cc
mov dword [esp + 4], eax
mov dword [section..data], 0x4006e9
cmp dword [esp + 4], 0
je 0x4bd802
mov dword [section..data], 0x4006eb
push 2
push dword [esp + 0x78]
call fcn.00513957
mov dword [esp + 0x2c], eax
mov dword [section..data], 0x4006ec
mov ebx, dword [esp + 0x2c]
cmp ebx, 0xffffffff
jne 0x4bccda
mov dword [section..data], 0x4006ec
mov dword [esp + 0x2c], 0xffffff
mov dword [section..data], 0x4006ec
mov dword [section..data], 0x4006ed
push 0
call fcn.0051a61f
mov dword [section..data], 0x4006ee
push dword [esp + 0x2c]
call fcn.0051a56e
push eax
call fcn.0051a57a
push eax
push 0
push 0
call fcn.0051a6de
mov dword [section..data], 0x4006f0
push dword [esp + 0x74]
call fcn.004ff0d8
mov ebx, eax
cmp ebx, 0x1a
jne 0x4bce0d
mov dword [section..data], 0x4006f1
push 0
push 0
push dword [esp + 0x7c]
call fcn.004fef2e
push eax
push dword [esp + 0x80]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetParent
push eax
call sub.USER32.dll_FindWindowExW
mov dword [esp + 8], eax
mov dword [section..data], 0x4006f2
cmp dword [esp + 8], 0
je 0x4bce03
mov dword [section..data], 0x4006f3
lea eax, [esp + 0xc]
push eax
push dword [esp + 0xc]
call sub.USER32.dll_GetClientRect
mov dword [section..data], 0x4006f4
push 0x1e
push dword [esp + 8]
push 0x317
push dword [esp + 0x14]
call sub.USER32.dll_SendMessageW
mov dword [section..data], 0x4006f5
push dword [esp + 0x74]
call fcn.00500741
mov ebx, eax
add ebx, 0x19
push ebx
push dword [esp + 0x78]
call fcn.004fee9e
mov ebx, eax
add ebx, 0x12
push ebx
push 0
push 0
push 0xffffffff
call fcn.0051aed0
mov dword [esp + 0x1c], eax
mov dword [section..data], 0x4006f6
mov dword [section..data], 0x4006f7
mov dword [section..data], 0x4006f9
push 0x3e
push dword [esp + 8]
push 0x317
push dword [esp + 0x80]
call fcn.004fef2e
push eax
call sub.USER32.dll_SendMessageW
mov dword [section..data], 0x4006fb
push dword [esp + 0x74]
call fcn.004b26cf
and eax, eax
je 0x4bce7b
mov dword [section..data], 0x4006fc
lea ebp, [esp + 0x44]
push dword [ebp + 4]
push dword [ebp]
push dword [esp + 0x40]
call fcn.005233c7
push eax
call fcn.0051ae04
mov dword [section..data], 0x4006fd
mov dword [section..data], 0x4006ff
push dword [esp + 0x74]
call fcn.004ff0d8
push eax
mov dword [section..data], 0x40070b
mov ebx, 8
cmp ebx, dword [esp]
jne 0x4bcf68
mov dword [section..data], 0x40070c
push dword [esp + 0x78]
call fcn.0050b4d0
push eax
call fcn.0051a779
mov dword [section..data], 0x40070d
push 1
call fcn.0051a61f
mov dword [section..data], 0x40070e
mov eax, 0x5f8750
push eax
call fcn.0051a789
mov dword [esp + 0x28], eax
mov dword [section..data], 0x40070f
push dword [0x6c8ed0]
push 0
mov edx, dword [0x6c8ed0]
push edx
push edx
push dword [esp + 0x88]
call fcn.0050045b
add dword [0x6c8ed0], 2
call fcn.0051a56e
mov ebx, eax
sub ebx, dword [esp + 0x34]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
push 4
mov edx, dword [0x6be9ac]
add dword [esp + 8], edx
call fcn.0051ae78
pop dword [0x6c8ed0]
mov dword [section..data], 0x400711
jmp 0x4bd7e8
mov dword [section..data], 0x400711
mov ebx, 0x16
cmp ebx, dword [esp]
jne 0x4bd16b
mov dword [section..data], 0x400712
push 0
call fcn.0051a61f
mov dword [section..data], 0x400713
push dword [esp + 0x30]
call fcn.0051a56e
mov ebx, eax
add ebx, 0xfffffffe
push ebx
call fcn.0051a57a
mov ebx, eax
add ebx, 0xfffffffe
push ebx
push 1
push 1
call fcn.0051a6de
mov dword [section..data], 0x400714
mov edx, dword [0x6c8ed0]
push edx
push edx
push dword [esp + 0x80]
call fcn.0050045b
lea eax, [esp + 0x30]
push eax
call fcn.0052ec20
mov dword [section..data], 0x400715
push dword [esp + 0x2c]
mov edx, 0x5f820c
pop ecx
call fcn.004d5330
jne 0x4bd152
mov dword [section..data], 0x400716
push dword [esp + 0x78]
call fcn.0050b4d0
push eax
call fcn.0051a779
mov dword [section..data], 0x400717
push 1
push dword [esp + 0x7c]
call fcn.00513957
mov dword [esp + 0x30], eax
mov dword [section..data], 0x400718
mov ebx, dword [esp + 0x30]
cmp ebx, 0xffffffff
jne 0x4bd068
mov dword [section..data], 0x400718
mov dword [esp + 0x30], 0
mov dword [section..data], 0x400718
mov dword [section..data], 0x400719
push 1
call fcn.0051a61f
mov dword [section..data], 0x40071a
mov eax, 0x5f8750
push eax
call fcn.0051a789
mov dword [esp + 0x28], eax
mov dword [section..data], 0x40071b
mov eax, 0x6045fe
push eax
push dword [esp + 0x30]
call fcn.0052c4a0
mov ebx, eax
inc ebx
mov dword [esp + 0x34], ebx
mov dword [section..data], 0x40071c
mov dword [esp + 0x38], 1
jmp 0x4bd0dd
mov dword [section..data], 0x40071c
mov eax, dword [esp + 0x34]
cmp eax, dword [esp + 0x38]
jl 0x4bd152
mov dword [section..data], 0x40071d
push dword [0x6c8ed0]
push dword [esp + 0x34]
mov edx, dword [0x6c8ed0]
push edx
push edx
mov eax, 0x5f8486
push eax
push dword [esp + 0x4c]
push dword [esp + 0x44]
call fcn.0052c530
add dword [0x6c8ed0], 2
mov ebx, dword [esp + 0x44]
dec ebx
imul ebx, dword [esp + 0x34]
push ebx
push 2
mov edx, dword [0x6be9ac]
add dword [esp + 8], edx
call fcn.0051ae78
pop dword [0x6c8ed0]
mov dword [section..data], 0x40071e
inc dword [esp + 0x38]
jno 0x4bd0d3
mov dword [section..data], 0x40071f
mov dword [section..data], 0x400721
jmp 0x4bd7e8
mov dword [section..data], 0x400721
mov ebx, 0x19
cmp ebx, dword [esp]
jne 0x4bd324
mov dword [section..data], 0x400722
push dword [esp + 0x78]
call fcn.0050b4d0
push eax
call fcn.0051a779
mov dword [section..data], 0x400723
push 1
call fcn.0051a61f
mov dword [section..data], 0x400724
call fcn.0051a56e
mov ebx, eax
push 0x19
call fcn.0052338b
sub ebx, eax
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
push 4
push 0x19
call fcn.005233c7
push eax
call fcn.0051a62f
mov dword [section..data], 0x400725
mov eax, 0x5f8750
push eax
call fcn.0051a789
mov dword [esp + 0x28], eax
mov dword [section..data], 0x400726
mov edx, dword [0x6c8ed0]
push edx
push edx
push dword [esp + 0x80]
call fcn.0050045b
add dword [0x6c8ed0], 2
mov edx, 0x5f820c
pop ecx
mov dword [0x6c8ed0], ecx
add ecx, dword [0x6be9ac]
call fcn.004d5330
je 0x4bd294
mov dword [section..data], 0x400728
push 0
mov eax, str.This_PC
push eax
call fcn.0051a56e
mov ebx, eax
sub ebx, dword [esp + 0x30]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
push 0x19
call fcn.005233a9
mov ebx, eax
add ebx, 8
push ebx
call fcn.0051ae78
mov dword [section..data], 0x400729
jmp 0x4bd30b
mov dword [section..data], 0x400729
mov dword [section..data], 0x40072a
push dword [0x6c8ed0]
push 0
mov edx, dword [0x6c8ed0]
push edx
push edx
push dword [esp + 0x88]
call fcn.0050045b
add dword [0x6c8ed0], 2
call fcn.0051a56e
mov ebx, eax
sub ebx, dword [esp + 0x34]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
push ebx
push 0x19
call fcn.005233a9
mov ebx, eax
add ebx, 8
push ebx
mov edx, dword [0x6be9ac]
add dword [esp + 8], edx
call fcn.0051ae78
pop dword [0x6c8ed0]
mov dword [section..data], 0x40072b
mov dword [section..data], 0x40072d
jmp 0x4bd7e8
mov dword [section..data], 0x40072d
mov ebx, 9
cmp ebx, dword [esp]
jne 0x4bd417
mov dword [section..data], 0x40072e
push dword [esp + 0x78]
call fcn.004ff124
push eax
call fcn.004b4bde
mov dword [esp + 0x24], eax
mov dword [section..data], 0x40072f
push dword [esp + 0x24]
call fcn.00523481
and eax, eax
je 0x4bd3fe
mov dword [section..data], 0x400730
push dword [esp + 0x24]
call fcn.005233a9
mov ebx, eax
push dword [esp + 0x78]
call fcn.004fee9e
cmp ebx, eax
jg 0x4bd3b0
push dword [esp + 0x24]
call fcn.0052338b
mov ebx, eax
push dword [esp + 0x78]
call fcn.00500741
cmp ebx, eax
jg 0x4bd3b0
jmp 0x4bd3b7
mov eax, 1
jmp 0x4bd3b9
xor eax, eax
and eax, eax
je 0x4bd3f4
mov dword [section..data], 0x400731
push dword [esp + 0x78]
call fcn.00500741
push eax
push dword [esp + 0x7c]
call fcn.004fee9e
push eax
push 0
push 0
push dword [esp + 0x34]
call fcn.005233c7
push eax
call fcn.0051aefe
mov dword [section..data], 0x400732
mov dword [section..data], 0x400733
mov dword [section..data], 0x400735
jmp 0x4bd7e8
mov dword [section..data], 0x400735
mov ebx, 0xe
cmp ebx, dword [esp]
jne 0x4bd5f0
mov dword [section..data], 0x400736
push 0
call fcn.0051a61f
mov dword [section..data], 0x400737
push 1
push dword [esp + 0x7c]
call fcn.00513957
mov dword [esp + 0x60], eax
mov dword [section..data], 0x400738
mov ebx, dword [esp + 0x60]
cmp ebx, 0xffffffff
jne 0x4bd484
mov dword [section..data], 0x400738
mov dword [esp + 0x60], 0x25b006
mov dword [section..data], 0x400738
mov dword [section..data], 0x400739
push 2
push dword [esp + 0x7c]
call fcn.00513957
mov dword [esp + 0x64], eax
mov dword [section..data], 0x40073a
mov ebx, dword [esp + 0x64]
cmp ebx, 0xffffffff
jne 0x4bd4cf
mov dword [section..data], 0x40073a
mov dword [esp + 0x64], 0xffffff
mov dword [section..data], 0x40073a
mov dword [section..data], 0x40073b
push dword [esp + 0x64]
call fcn.0051a56e
mov ebx, eax
add ebx, 0xfffffffc
push ebx
call fcn.0051a57a
mov ebx, eax
add ebx, 0xfffffffc
push ebx
push 2
push 2
call fcn.0051a6de
mov dword [section..data], 0x40073c
push 0xfffffff0
push dword [esp + 0x7c]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
mov ebx, eax
and ebx, 4
and ebx, ebx
je 0x4bd58f
mov dword [section..data], 0x40073d
push dword [esp + 0x60]
call fcn.0051a56e
mov ebx, eax
add ebx, ebx
mov eax, ebx
mov ecx, 3
cdq
idiv ecx
mov ebx, eax
add ebx, 0xfffffffe
push ebx
call fcn.0051a57a
mov ebx, eax
add ebx, 0xfffffffc
push ebx
call fcn.0051a56e
mov ebx, eax
mov eax, ebx
mov ecx, 3
cdq
idiv ecx
mov ebx, eax
push ebx
push 2
call fcn.0051a6de
mov dword [section..data], 0x40073e
jmp 0x4bd5d7
mov dword [section..data], 0x40073e
mov dword [section..data], 0x40073f
push dword [esp + 0x60]
call fcn.0051a56e
mov ebx, eax
add ebx, 0xfffffffc
push ebx
call fcn.0051a57a
mov ebx, eax
add ebx, ebx
mov eax, ebx
mov ecx, 3
cdq
idiv ecx
mov ebx, eax
push ebx
push 2
push 2
call fcn.0051a6de
mov dword [section..data], 0x400740
mov dword [section..data], 0x400742
jmp 0x4bd7e8
mov dword [section..data], 0x400742
mov ebx, 0x1a
cmp ebx, dword [esp]
jne 0x4bd67d
mov dword [section..data], 0x400743
push dword [esp + 0x20]
call fcn.00523481
and eax, eax
je 0x4bd664
mov dword [section..data], 0x400744
push 0
push dword [esp + 0x24]
call fcn.005233a9
mov ebx, eax
lea ebp, [esp + 0x14]
mov edi, dword [ebp + 8]
add edi, 0x12
sub ebx, edi
push ebx
push dword [esp + 0x28]
call fcn.005233c7
push eax
call fcn.0051ae04
mov dword [section..data], 0x400745
push dword [esp + 0x20]
call fcn.005232bf
mov dword [section..data], 0x400746
mov dword [section..data], 0x400748
jmp 0x4bd7e8
mov dword [section..data], 0x400748
mov ebx, 0x1f
cmp ebx, dword [esp]
jne 0x4bd6e3
mov dword [section..data], 0x400749
push 0xffffffff
call fcn.0050b4d0
push eax
call fcn.0051a779
mov dword [section..data], 0x40074a
push 0xffffff
push 0xff0000
mov eax, 0x605148
push eax
push 5
push 0x18
call fcn.0051a7ee
mov dword [section..data], 0x40074c
jmp 0x4bd7e8
mov dword [section..data], 0x40074c
mov ebx, 0x21
cmp ebx, dword [esp]
jne 0x4bd7e8
mov dword [section..data], 0x40074d
push 0xfffffff0
push dword [esp + 0x7c]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
mov ebx, eax
and ebx, 0x2000000
and ebx, ebx
je 0x4bd791
mov dword [section..data], 0x40074e
mov ebx, dword [esp + 0x78]
cmp ebx, 2
je 0x4bd77b
mov dword [section..data], 0x40074f
push 0xffffffff
call fcn.0050b4d0
push eax
call fcn.0051a779
mov dword [section..data], 0x400750
push 0xffffff
push 0xff0000
mov eax, str.Canvas_Container
push eax
push 5
push 5
call fcn.0051a7ee
mov dword [section..data], 0x400751
mov dword [section..data], 0x400752
jmp 0x4bd7de
mov dword [section..data], 0x400752
mov dword [section..data], 0x400753
push 0xffffffff
call fcn.0050b4d0
push eax
call fcn.0051a779
mov dword [section..data], 0x400754
push 0xffffff
push 0xff0000
mov eax, 0x601e2e
push eax
push 5
push 5
call fcn.0051a7ee
mov dword [section..data], 0x400755
mov dword [section..data], 0x400756
pop eax
mov dword [section..data], 0x400758
call fcn.0051a69e
mov dword [section..data], 0x400759
mov dword [section..data], 0x40075a
push dword [esp + 0x74]
call fcn.004ff0d8
mov ebx, eax
cmp ebx, 0x21
jne 0x4bd84d
push 0xfffffff0
push dword [esp + 0x78]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
mov ebx, eax
and ebx, 0x2000000
and ebx, ebx
je 0x4bd84d
mov eax, 1
jmp 0x4bd84f
xor eax, eax
and eax, eax
je 0x4bd86e
mov dword [section..data], 0x40075b
push dword [esp]
push 1
push dword [esp + 0x7c]
call fcn.004feeac
mov dword [section..data], 0x40075c
mov dword [section..data], 0x40075d
mov dword [section..data], 0x40075e
mov eax, dword [esp]
jmp 0x4bd89d
push dword [esp + 0x28]
call fcn.0052ed00
add esp, 0x64
pop edi
pop ebx
pop ebp
ret 4