Function at 0x491f20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xe8
push ebx
push ebp
push esi
mov esi, edi
call fcn.004064c0
mov ecx, dword [edi + 4]
lea eax, [esp + 0x90]
push eax
push ecx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], 5
mov dword [esp + 0x20], 0x11
mov dword [esp + 0x24], 0x16
call dword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [0x4c9830]
mov eax, dword [edi + 4]
mov ecx, dword [esp + 0x1c]
push 0
push edx
mov edx, dword [esp + 0x20]
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
push 0
push eax
mov eax, dword [esp + 0x24]
sub ecx, eax
push ecx
add edx, 0xffffffd8
push edx
push eax
push 0x28
push 0x50000000
push 0x4b679c
push str.STATIC
push 0x20
mov dword [esp + 0x40], 0x28
call esi
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [edi + 0x38], eax
mov eax, dword [edi + 0x2c]
push 1
push eax
mov eax, dword [edi + 0x38]
push 0x30
push eax
call ebp
mov ebx, dword [0x4c9830]
mov eax, dword [esp + 0x18]
mov edx, dword [edi + 4]
push 0
push ebx
mov ebx, dword [esp + 0x24]
push 0
push edx
mov edx, dword [esp + 0x24]
add eax, 2
lea ecx, [eax + 0x50]
sub ebx, edx
push ebx
mov dword [esp + 0x2c], ecx
sub ecx, eax
push ecx
push edx
push eax
push 0x50000000
push 0x4b67a0
push str.STATIC
push 0x20
mov dword [esp + 0x40], eax
call esi
mov dword [edi + 0x3c], eax
mov eax, dword [edi + 0x24]
mov ecx, dword [edi + 0x3c]
push 1
push eax
push 0x30
push ecx
call ebp
push ecx
mov eax, esp
mov dword [eax], 0
mov eax, 0x5000000b
mov ecx, 0x4b67a4
push ecx
mov edx, esp
lea esi, [esp + 0x18]
mov dword [edx], esi
mov edx, dword [edi + 4]
push edx
lea edx, [edi + 0x44]
push edx
call fcn.004061e0
mov eax, dword [edi + 0x28]
push 1
push eax
mov eax, dword [edi + 0x48]
push 0x30
push eax
call ebp
mov eax, dword [esp + 0x1c]
lea ecx, [eax + 2]
add eax, 0x11
mov dword [esp + 0x3c], eax
push ecx
mov eax, esp
push ecx
mov dword [esp + 0x38], 0x28
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], 0x3c
mov dword [eax], 0
mov eax, esp
lea edx, [esp + 0x38]
mov dword [eax], edx
mov eax, dword [edi + 4]
push eax
lea esi, [edi + 0x40]
push esi
call fcn.00490760
mov eax, dword [edi + 0x24]
mov ecx, dword [esi]
push 1
push eax
push 0x30
push ecx
call ebp
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x1c]
lea edx, [eax + 0xa]
mov dword [esp + 0x40], edx
lea edx, [ecx + 2]
add ecx, 0x11
push ecx
add eax, 0x28
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
mov eax, esp
mov dword [esp + 0x48], edx
mov ecx, 0x4b67ac
push ecx
mov edx, esp
mov dword [eax], 0
lea esi, [esp + 0x48]
mov dword [edx], esi
mov edx, dword [edi + 4]
push edx
lea edx, [edi + 0x1068]
mov eax, 0x4000000b
push edx
call fcn.004061e0
mov eax, dword [edi + 0x28]
push 1
push eax
mov eax, dword [edi + 0x106c]
push 0x30
push eax
call ebp
mov ecx, dword [edi + 0x27ac]
mov edx, dword [ecx]
mov eax, dword [edx + 0x2c]
call eax
push eax
push 0x800
lea ecx, [edi + 0x108c]
push ecx
call fcn.00476081
mov eax, dword [esp + 0xa4]
lea edx, [eax - 0x64]
mov dword [esp + 0x64], eax
mov eax, dword [edi + 4]
add esp, 0xc
cmp dword [0x4c8678], 0
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], 5
mov dword [esp + 0x5c], 0x16
mov dword [esp + 0xc], eax
lea esi, [edi + 0x25c4]
jne 0x49215e
mov dword [0x4c8678], 0x4b7804
lea ecx, [esi + 0x20]
push ecx
push 0x4c982c
mov ebx, 0x4c8648
call fcn.00405430
add esp, 8
movzx ebx, ax
xor eax, eax
push eax
mov eax, dword [esp + 0x10]
push 0x20
push 0x5800000b
push 0x4b67b4
lea edx, [esp + 0x60]
push edx
push eax
mov eax, esi
call fcn.00406ad0
mov ecx, dword [edi + 0x27b0]
push ecx
mov ebx, esi
call fcn.00492ff0
mov eax, dword [edi + 0x24]
mov edx, dword [edi + 0x25c8]
push 1
push eax
push 0x30
push edx
call ebp
mov ebx, dword [0x4c9830]
mov esi, dword [esp + 0x44]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x98]
push 0
push ebx
mov ebx, dword [edi + 4]
push 0
push ebx
add edx, 0xffffffe2
mov dword [esp + 0xec], ecx
sub ecx, esi
push ecx
mov dword [esp + 0xec], eax
sub eax, edx
push eax
push esi
push edx
push 0x58000000
push 0x4b67b8
push str.STATIC
push 0x20
mov dword [esp + 0x100], edx
mov dword [esp + 0x104], esi
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [edi + 0x208c], eax
mov eax, dword [edi + 0x24]
push 1
push eax
mov eax, dword [edi + 0x208c]
push 0x30
push eax
call ebp
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x98]
add ecx, 2
mov dword [esp + 0x24], ecx
add eax, 0xffffff97
add ecx, 0x14
mov dword [esp + 0x20], eax
mov dword [esp + 0x2c], ecx
add eax, 0x41
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x2c], eax
lea esi, [edi + 0x265c]
push edi
mov eax, 0x4b67bc
call fcn.00491760
mov ecx, dword [esp + 0x2c]
mov eax, ecx
mov esi, dword [esp + 0x24]
sub eax, esi
sub eax, 5
cdq
sub eax, edx
mov edx, dword [esp + 0x20]
sar eax, 1
add esi, eax
sub ecx, eax
mov eax, dword [edi + 4]
add edx, 0xfffffff6
cmp dword [0x4c8558], 0
mov dword [esp + 0xb4], esi
mov dword [esp + 0xb0], 0x28
mov dword [esp + 0xb8], edx
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc], eax
lea esi, [edi + 0x2634]
jne 0x4922c9
mov dword [0x4c8558], 0x4b7804
lea ecx, [esi + 0x20]
push ecx
push 0x4c982c
mov ebx, 0x4c8528
call fcn.00405430
add esp, 8
movzx ebx, ax
xor eax, eax
push eax
mov eax, dword [esp + 0x10]
push 0x20
push 0x4000000b
push 0x4b67c4
lea edx, [esp + 0xc0]
push edx
push eax
mov eax, esi
call fcn.00406ad0
mov ecx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x24]
mov eax, ecx
sub eax, ebx
sub eax, 0xe
cdq
sub eax, edx
mov edx, dword [esp + 0x20]
push 0
sar eax, 1
add ebx, eax
sub ecx, eax
mov eax, dword [0x4c9830]
push eax
mov eax, dword [edi + 4]
push 0
push eax
lea esi, [edx - 0x2d]
add edx, 0xfffffff6
mov dword [esp + 0xfc], ecx
sub ecx, ebx
push ecx
mov dword [esp + 0xfc], edx
sub edx, esi
push edx
push ebx
push esi
push 0x40000002
push 0x4b67c8
push str.STATIC
push 0
mov dword [esp + 0x110], esi
mov dword [esp + 0x114], ebx
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [edi + 0x2630], eax
mov eax, dword [edi + 0x24]
mov ecx, dword [edi + 0x2630]
push 1
push eax
push 0x30
push ecx
call ebp
mov ebx, dword [esp + 0x3c]
lea edx, [esp + 0x60]
add ebx, 2
push edx
lea ebp, [ebx + 0x14]
lea esi, [edi + 0x2094]
push edi
mov eax, 0x4b67cc
mov dword [esp + 0x68], 0x28
mov dword [esp + 0x70], 0x69
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x74], ebp
call fcn.00491760
mov eax, dword [esp + 0x98]
add eax, 0xffffff97
mov dword [esp + 0xc0], eax
add eax, 0x41
mov dword [esp + 0xc8], eax
mov dword [esp + 0xc4], ebx
mov dword [esp + 0xcc], ebp
lea eax, [esp + 0xc0]
push eax
lea esi, [edi + 0x2478]
push edi
mov eax, 0x4b67d4
call fcn.00491760
lea ecx, [esp + 0x70]
push ecx
lea esi, [edi + 0x21e0]
push edi
mov eax, 0x4b67dc
mov dword [esp + 0x78], 0x28
mov dword [esp + 0x80], 0x69
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x84], ebp
call fcn.00491760
lea edx, [esp + 0x80]
push edx
lea esi, [edi + 0x232c]
push edi
mov eax, 0x4b67e4
mov dword [esp + 0x88], 0x28
mov dword [esp + 0x90], 0x69
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x94], ebp
call fcn.00491760
and dword [edi + 0x27a8], 0xfffffffe
push edi
call fcn.00491850
mov esi, edi
call fcn.004905d0
call fcn.004904e0
call fcn.00490430
mov ecx, dword [edi + 0x27ac]
mov eax, dword [ecx]
mov edx, dword [eax + 0x7c]
call edx
test eax, eax
je 0x49250b
cmp word [eax], 0
je 0x49250b
push eax
lea eax, [edi + 0x27dc]
push 0x400
push eax
call fcn.00476081
add esp, 8
mov eax, esp
push ecx
mov dword [esp + 0xa8], 4
mov dword [esp + 0xac], 8
mov dword [esp + 0xb0], 0x24
mov dword [esp + 0xb4], 0x28
mov dword [eax], 0
mov eax, esp
lea ecx, [esp + 0xa8]
mov dword [eax], ecx
mov edx, dword [edi + 4]
push edx
lea esi, [edi + 0x27b8]
call fcn.00406250
cmp byte [edi + 0x2ff9], 0
je 0x492527
mov eax, dword [edi + 4]
push 0
push 0
push 0x50d
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xe8
ret