Function at 0x4a98cc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x543e56
push eax
mov dword fs:[0], esp
sub esp, 0xe0
push ebx
push esi
mov esi, ecx
call fcn.004a39b0
mov ebx, eax
mov eax, dword [esp + 0xf8]
cmp eax, 1
je 0x4a9966
add eax, 0xfffffffd
cmp eax, 3
ja case.default.0x4a98ee
jmp dword [eax*4 + 0x4a9ff4]
push 1
mov ecx, esi
call fcn.004a3d60
push 1
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.004a5e60
mov eax, dword [esi + 0x1c]
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
xor eax, eax
jmp 0x4a99bd
push 1
mov ecx, esi
call fcn.004a3960
xor eax, eax
jmp 0x4a99bd
mov eax, dword [esi + 0x4c]
mov ecx, dword [esi + 0x54]
cmp eax, ecx
jl 0x4a9940
mov eax, ecx
mov ecx, dword [esp + 0xfc]
push eax
push ecx
mov ecx, esi
call fcn.004a5d10
xor eax, eax
jmp 0x4a99bd
mov edx, dword [esi + 0x1c]
push 0
push 0
push edx
call dword [sym.imp.USER32.dll_InvalidateRect]
xor eax, eax
jmp 0x4a99bd
mov eax, dword [esp + 0xfc]
push ebp
cmp eax, 0xc
push edi
ja case.default.0x4a9974
jmp dword [eax*4 + 0x4aa004]
push 0
mov ecx, esi
call fcn.004a3d60
mov eax, dword [esi + 0x4c]
mov ecx, dword [esi + 0x54]
cmp eax, ecx
jl 0x4a9990
mov eax, ecx
mov edx, dword [esi + 0x48]
mov edi, dword [esi + 0x50]
cmp edx, edi
jl 0x4a999c
mov edx, edi
push 1
push 0
push 0
push eax
push edx
mov ecx, esi
call fcn.004a5e60
mov eax, dword [esi + 0x1c]
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
pop edi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0xe8]
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0xec
ret 0xc
push 0
mov ecx, esi
call fcn.004a3d60
mov ecx, ebx
call fcn.0049da20
mov ebp, eax
test ebp, ebp
je 0x4a9c94
mov ecx, ebx
call fcn.0049da60
test eax, eax
je 0x4a9c94
mov eax, dword [esp + 0x108]
mov edx, dword [esp + 0x104]
mov ecx, 3
mov edi, dword [eax]
cmp edx, ecx
jne 0x4a9a3b
cmp ebp, dword [eax + 4]
jg 0x4a9a3b
push 1
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.004a5e60
mov ecx, dword [esi + 0x1c]
push 0
push 0
push ecx
jmp 0x4a99b3
mov edx, dword [esp + 0x104]
mov ebp, dword [esi + 0x48]
cmp edx, ecx
jne 0x4a9a56
cmp edi, ebp
jg 0x4a9b0a
add ebp, dword [eax + 4]
jmp 0x4a9a63
cmp edi, ebp
jge 0x4a9a63
sub ebp, dword [eax + 4]
cmp edi, ebp
jle 0x4a9a63
mov ebp, edi
cmp ebp, 0xffffffff
je 0x4a9b0a
mov ecx, ebx
call fcn.0049dae0
cmp eax, ebp
jle 0x4a9a84
mov ecx, ebx
call fcn.0049dae0
mov dword [esp + 0x10], eax
jmp 0x4a9a88
mov dword [esp + 0x10], ebp
mov ecx, ebx
call fcn.0049da20
mov ecx, dword [esp + 0x10]
dec eax
cmp eax, ecx
mov ecx, ebx
jge 0x4a9aa2
call fcn.0049da20
dec eax
jmp 0x4a9ab6
call fcn.0049dae0
cmp eax, ebp
jle 0x4a9ab4
mov ecx, ebx
call fcn.0049dae0
jmp 0x4a9ab6
mov eax, ebp
mov edx, dword [esi + 0x4c]
mov ecx, esi
push edx
push eax
lea eax, [esp + 0xe8]
push eax
call fcn.004a7660
lea ecx, [esp + 0x2c]
push eax
push ecx
call dword [sym.imp.USER32.dll_CopyRect]
mov eax, dword [esp + 0x2c]
cmp eax, 0xffffffff
je 0x4a9af9
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov dword [esi + 0x4c], eax
mov eax, dword [esp + 0x38]
mov dword [esi + 0x48], edx
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], ecx
jmp 0x4a9b0a
push 1
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.004a5e60
mov ecx, ebx
call fcn.0049da20
dec eax
cmp eax, edi
jge 0x4a9b20
mov ecx, ebx
call fcn.0049da20
dec eax
jmp 0x4a9b22
mov eax, edi
test eax, eax
jge 0x4a9b2a
xor edi, edi
jmp 0x4a9b40
mov ecx, ebx
call fcn.0049da20
dec eax
cmp eax, edi
jge 0x4a9b40
mov ecx, ebx
call fcn.0049da20
mov edi, eax
dec edi
mov ecx, ebx
call fcn.0049da60
xor ebp, ebp
mov dword [esp + 0x10], eax
test eax, eax
jle 0x4a9b6d
push ebp
push edi
mov ecx, ebx
call fcn.0049db40
test eax, 0x80000
je 0x4a9b66
dec edi
xor ebp, ebp
jmp 0x4a9b67
inc ebp
cmp ebp, dword [esp + 0x10]
jl 0x4a9b51
mov ecx, ebx
mov dword [esp + 0x14], 0
call fcn.0049dae0
cmp edi, eax
jge 0x4a9bb9
lea edx, [esp + 0x70]
mov ecx, esi
push edx
call fcn.004a3350
mov eax, dword [eax + 4]
xor ebx, ebx
test edi, edi
mov dword [esp + 0x18], eax
jle 0x4a9c08
push ebx
mov ecx, esi
call fcn.004a3190
mov ecx, dword [esp + 0x18]
push eax
push ecx
mov ecx, esi
call fcn.004a3560
inc ebx
mov dword [esp + 0x18], eax
cmp ebx, edi
jl 0x4a9b99
jmp 0x4a9c08
push 1
push 1
push 0
lea edx, [esp + 0x8c]
push edi
push edx
mov ecx, esi
call fcn.004a65d0
mov ecx, dword [eax + 4]
test ecx, ecx
jge 0x4a9bda
xor edi, edi
jmp 0x4a9bf3
push 1
push 1
push 0
lea eax, [esp + 0xdc]
push edi
push eax
mov ecx, esi
call fcn.004a65d0
mov edi, dword [eax + 4]
lea ecx, [esp + 0x60]
push ecx
mov ecx, esi
call fcn.004a5590
mov edx, dword [eax + 4]
add edx, edi
mov dword [esp + 0x18], edx
push 0
lea ecx, [esp + 0x50]
call fcn.00538dd5
mov eax, dword [esi + 0x5c]
mov ecx, dword [esi + 0x58]
push eax
lea edx, [esp + 0x50]
push ecx
push edx
mov dword [esp + 0x104], 0
call fcn.004b8110
mov ecx, dword [esp + 0x60]
add esp, 0xc
lea eax, [esp + 0x14]
push 1
push eax
push ecx
call dword [sym.imp.GDI32.dll_LPtoDP]
mov eax, dword [esi + 0x1c]
lea edx, [esp + 0x3c]
push edx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x44], ecx
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x4a9c7b
mov ecx, dword [esi + 0x1c]
push eax
lea eax, [esp + 0x40]
push eax
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
lea ecx, [esp + 0x4c]
mov dword [esp + 0xf8], 0xffffffff
call fcn.00538e47
jmp case.default.0x4a9974
push 1
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.004a5e60
mov edx, dword [esi + 0x1c]
push 0
push 0
push edx
jmp 0x4a99b3
push 0
mov ecx, esi
call fcn.004a3d60
mov ecx, ebx
call fcn.0049da60
mov ecx, ebx
mov ebp, eax
call fcn.0049da20
test eax, eax
je 0x4a9a1d
test ebp, ebp
je 0x4a9a1d
mov eax, dword [esp + 0x108]
mov edx, dword [esp + 0x104]
mov ecx, 4
mov edi, dword [eax]
cmp edx, ecx
jne 0x4a9d08
cmp ebp, dword [eax + 4]
jg 0x4a9d08
push 1
push 0
push 0
push 0
push 0
jmp 0x4a99a4
mov edx, dword [esp + 0x104]
mov ebp, dword [esi + 0x4c]
cmp edx, ecx
jne 0x4a9d23
cmp edi, ebp
jg 0x4a9dd7
add ebp, dword [eax + 4]
jmp 0x4a9d30
cmp edi, ebp
jge 0x4a9d30
sub ebp, dword [eax + 4]
cmp edi, ebp
jle 0x4a9d30
mov ebp, edi
cmp ebp, 0xffffffff
je 0x4a9dd7
mov ecx, ebx
call fcn.0049daf0
cmp eax, ebp
jle 0x4a9d51
mov ecx, ebx
call fcn.0049daf0
mov dword [esp + 0x10], eax
jmp 0x4a9d55
mov dword [esp + 0x10], ebp
mov ecx, ebx
call fcn.0049da60
mov ecx, dword [esp + 0x10]
dec eax
cmp eax, ecx
mov ecx, ebx
jge 0x4a9d6f
call fcn.0049da60
dec eax
jmp 0x4a9d83
call fcn.0049daf0
cmp eax, ebp
jle 0x4a9d81
mov ecx, ebx
call fcn.0049daf0
jmp 0x4a9d83
mov eax, ebp
mov ecx, dword [esi + 0x48]
push eax
lea edx, [esp + 0xb4]
push ecx
push edx
mov ecx, esi
call fcn.004a7660
push eax
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.USER32.dll_CopyRect]
mov eax, dword [esp + 0x2c]
cmp eax, 0xffffffff
je 0x4a9dc6
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x38]
mov dword [esi + 0x4c], eax
mov eax, dword [esp + 0x34]
mov dword [esi + 0x48], ecx
mov dword [esi + 0x50], edx
mov dword [esi + 0x54], eax
jmp 0x4a9dd7
push 1
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.004a5e60
mov ecx, ebx
call fcn.0049da60
dec eax
cmp eax, edi
jge 0x4a9ded
mov ecx, ebx
call fcn.0049da60
dec eax
jmp 0x4a9def
mov eax, edi
test eax, eax
jge 0x4a9df7
xor edi, edi
jmp 0x4a9e0d
mov ecx, ebx
call fcn.0049da60
dec eax
cmp eax, edi
jge 0x4a9e0d
mov ecx, ebx
call fcn.0049da60
mov edi, eax
dec edi
mov ecx, ebx
call fcn.0049da20
xor ebp, ebp
mov dword [esp + 0x10], eax
test eax, eax
jle 0x4a9e3a
push edi
push ebp
mov ecx, ebx
call fcn.0049db40
test eax, 0x40000
je 0x4a9e33
dec edi
xor ebp, ebp
jmp 0x4a9e34
inc ebp
cmp ebp, dword [esp + 0x10]
jl 0x4a9e1e
mov ecx, ebx
mov dword [esp + 0x18], 0
call fcn.0049daf0
cmp edi, eax
jge 0x4a9e85
lea ecx, [esp + 0x68]
push ecx
mov ecx, esi
call fcn.004a3350
mov edx, dword [eax]
xor ebx, ebx
test edi, edi
mov dword [esp + 0x14], edx
jle 0x4a9ed0
push ebx
mov ecx, esi
call fcn.004a3270
push eax
mov eax, dword [esp + 0x18]
push eax
mov ecx, esi
call fcn.004a3430
inc ebx
mov dword [esp + 0x14], eax
cmp ebx, edi
jl 0x4a9e65
jmp 0x4a9ed0
push 1
push 1
push edi
lea ecx, [esp + 0x9c]
push 0
push ecx
mov ecx, esi
call fcn.004a65d0
cmp dword [eax], 0
jge 0x4a9ea4
xor edi, edi
jmp 0x4a9ebc
push 1
push 1
push edi
lea edx, [esp + 0xac]
push 0
push edx
mov ecx, esi
call fcn.004a65d0
mov edi, dword [eax]
lea eax, [esp + 0x78]
mov ecx, esi
push eax
call fcn.004a5590
mov ecx, dword [eax]
add ecx, edi
mov dword [esp + 0x14], ecx
push 0
lea ecx, [esp + 0x50]
call fcn.00538dd5
mov edx, dword [esi + 0x5c]
mov eax, dword [esi + 0x58]
push edx
lea ecx, [esp + 0x50]
push eax
push ecx
mov dword [esp + 0x104], 1
call fcn.004b8110
mov eax, dword [esp + 0x60]
add esp, 0xc
lea edx, [esp + 0x14]
push 1
push edx
push eax
call dword [sym.imp.GDI32.dll_LPtoDP]
mov edx, dword [esi + 0x1c]
lea ecx, [esp + 0x3c]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x3c]
push ecx
mov dword [esp + 0x40], eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x4a9f43
push eax
mov eax, dword [esi + 0x1c]
lea edx, [esp + 0x40]
push edx
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
lea ecx, [esp + 0x4c]
mov dword [esp + 0xf8], 0xffffffff
call fcn.00538e47
jmp case.default.0x4a9974
mov eax, dword [esp + 0x108]
mov ecx, dword [eax + 4]
mov edi, dword [eax + 0xc]
mov edx, dword [eax]
mov eax, dword [eax + 8]
mov dword [esp + 0x1c], ecx
lea ecx, [edi + ecx - 1]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], edx
lea ecx, [eax + edx - 1]
lea edx, [esp + 0x1c]
mov dword [esp + 0x28], ecx
push edx
mov ecx, ebx
call fcn.0049e900
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x28]
sub ecx, eax
inc ecx
push ecx
mov ecx, dword [esp + 0x24]
sub edx, ecx
inc edx
push edx
push eax
lea eax, [esp + 0xcc]
push ecx
push eax
mov ecx, esi
call fcn.004a5900
lea ecx, [esp + 0x1c]
push eax
push ecx
call dword [sym.imp.USER32.dll_CopyRect]
push 1
lea edx, [esp + 0x20]
push 1
push edx
call dword [sym.imp.USER32.dll_InflateRect]
mov ecx, dword [esi + 0x1c]
lea eax, [esp + 0x1c]
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov ecx, esi
call fcn.004a5d30
jmp case.default.0x4a9974