Function at 0x40f020
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x42d0
call fcn.00411350
push esi
push edi
push dword [ebx + 0x10]
mov dword [esp + 0x44], 0x320
mov dword [esp + 0x14], 0x60
call dword [sym.imp.USER32.dll_GetDC]
mov esi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edi, eax
test edi, edi
je 0x40f06f
push 0x58
push edi
call esi
push 0x5a
push edi
call esi
push edi
push dword [ebx + 0x10]
mov dword [esp + 0x18], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
push 2
push dword [ebx + 0x10]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call dword [sym.imp.USER32.dll_MonitorFromWindow]
push 9
mov edx, eax
pop ecx
xor eax, eax
lea edi, [esp + 0x9c]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x98]
push eax
push edx
mov dword [esp + 0xa0], 0x28
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
test eax, eax
je 0x40f0d2
mov eax, dword [esp + 0x10]
imul eax, eax, 0x46
cdq
push 0x60
pop ecx
idiv ecx
mov ecx, eax
mov eax, dword [esp + 0xa8]
sub eax, ecx
sub eax, dword [esp + 0xa0]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x10]
shl eax, 2
push 0x60
cdq
pop ecx
idiv ecx
push 0x3e9
push dword [ebx + 0x10]
mov dword [ebx + 0x98], eax
mov eax, dword [ebx + 0x44]
mov eax, dword [eax + 0x2e0]
mov dword [esp + 0x28], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0x3e8
push dword [ebx + 0x10]
mov edi, eax
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp dword [ebx + 0x8c], 0
mov dword [esp + 0xc], eax
jne 0x40f158
push 0
call dword [sym.imp.USER32.dll_GetDC]
push 0x5a
push eax
mov dword [esp + 0x2c], eax
call esi
imul eax, eax, 0xfffffff7
push 0x48
pop ecx
cdq
idiv ecx
push dword [esp + 0x24]
push 0
mov esi, eax
call dword [sym.imp.USER32.dll_ReleaseDC]
push 1
push esi
push str.Arial
lea esi, [ebx + 0x8c]
call fcn.00410d71
mov esi, dword [sym.imp.USER32.dll_GetWindowLongW]
push 0xfffffffffffffff0
push edi
call esi
push 0xfffffffffffffff0
push dword [esp + 0x10]
mov dword [esp + 0x34], eax
call esi
push 0xffffffffffffffec
push edi
mov dword [esp + 0x3c], eax
call esi
push 0xffffffffffffffec
push dword [esp + 0x10]
mov dword [esp + 0x7c], eax
call esi
mov esi, dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x64]
push eax
push edi
call esi
lea eax, [esp + 0x44]
push eax
push dword [esp + 0x10]
call esi
mov edi, dword [sym.imp.USER32.dll_MapWindowPoints]
push 2
lea eax, [esp + 0x68]
push eax
push dword [ebx + 0x10]
xor esi, esi
push esi
call edi
push 2
lea eax, [esp + 0x48]
push eax
push dword [ebx + 0x10]
push esi
call edi
mov eax, dword [esp + 0x6c]
sub eax, dword [esp + 0x64]
mov edi, dword [esp + 0x50]
sub edi, dword [esp + 0x48]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x4c]
sub eax, dword [esp + 0x44]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x70]
sub eax, dword [esp + 0x68]
mov dword [esp + 0xc], esi
lea esi, [ebx + 0x48]
mov dword [esp + 0x60], eax
mov dword [esp + 0x24], edi
call fcn.00407d1e
xor esi, esi
push esi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
cmp eax, esi
mov dword [esp + 0x18], eax
je 0x40f2db
push dword [ebx + 0x8c]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
and dword [esp + 0x14], esi
mov dword [esp + 0x38], eax
mov eax, dword [ebx + 0x44]
cmp dword [eax + 0x2dc], esi
jle 0x40f2b3
mov eax, dword [esp + 0x20]
add eax, 0x10
mov dword [esp + 8], eax
lea eax, [esp + 0x54]
push eax
mov eax, dword [esp + 0xc]
push dword [eax]
call sub.msvcrt.dll_wcslen
pop ecx
push eax
mov eax, dword [esp + 0x10]
push dword [eax]
push dword [esp + 0x24]
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
test eax, eax
je 0x40f29b
mov eax, dword [esp + 0x10]
imul eax, eax, 6
cdq
push 0x60
pop ecx
idiv ecx
add eax, dword [esp + 0x58]
cmp eax, edi
jle 0x40f284
mov dword [esp + 0x24], eax
mov edi, eax
mov eax, dword [esp + 0x10]
imul eax, eax, 0xa
cdq
push 0x60
pop ecx
idiv ecx
add eax, dword [esp + 0x54]
cmp eax, esi
jle 0x40f29b
mov esi, eax
inc dword [esp + 0x14]
mov eax, dword [ebx + 0x44]
mov ecx, dword [esp + 0x14]
add dword [esp + 8], 0x14
cmp ecx, dword [eax + 0x2dc]
jl 0x40f243
push dword [esp + 0x38]
sub esi, dword [esp + 0x2c]
push dword [esp + 0x1c]
sub dword [esp + 0x38], esi
add dword [esp + 0x4c], esi
add dword [esp + 0x30], esi
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [esp + 0x18]
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [ebx + 0x44]
and dword [esp + 8], 0
cmp dword [eax + 0x2dc], 0
jle 0x40f4af
mov ecx, dword [esp + 0x2c]
mov eax, 0x10000000
or ecx, eax
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x34]
or ecx, eax
mov eax, dword [esp + 0x10]
imul eax, eax, 0x64
mov dword [esp + 0x34], ecx
cdq
push 0x60
pop ecx
idiv ecx
mov ecx, dword [esp + 0x40]
sub ecx, eax
mov eax, dword [esp + 0x20]
add eax, 0x10
mov dword [esp + 0x38], ecx
mov dword [esp + 0x20], eax
push dword [esp + 8]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x20]
push dword [esp + 0x60]
mov eax, dword [esp + 0x6c]
push dword [esp + 0x2c]
mov esi, dword [esp + 0x24]
add eax, esi
push eax
push dword [esp + 0x70]
push dword [esp + 0x3c]
push str.STATIC
push dword [esp + 0x8c]
push ebx
call fcn.004015ac
mov dword [esp + 0x14], eax
mov eax, dword [ebx + 0x94]
imul eax, edi
push eax
push dword [esp + 0x34]
mov eax, dword [esp + 0x50]
add esi, eax
push esi
push dword [esp + 0x50]
push dword [esp + 0x44]
push 0x412bd0
push dword [esp + 0x54]
push ebx
call fcn.004015ac
push 0
lea esi, [ebx + 0x8c]
push dword [esi]
mov dword [esp + 0x20], eax
push 0x30
push dword [esp + 0x20]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push dword [esi]
push 0x30
push dword [esp + 0x24]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [esp + 0x20]
push dword [eax]
lea eax, [esp + 0xd4]
push 0x413b4c
push 0xff
push eax
call sub.msvcrt.dll__snwprintf
mov esi, dword [sym.imp.USER32.dll_SetWindowTextW]
add esp, 0x10
lea eax, [esp + 0xd0]
push eax
push dword [esp + 0x18]
call esi
mov ecx, dword [ebx + 0x40]
mov eax, dword [ecx]
lea edx, [esp + 0x2d0]
push edx
push dword [esp + 0xc]
call dword [eax]
push eax
push dword [esp + 0x1c]
call esi
mov eax, dword [ebx + 0x94]
imul eax, edi
add eax, dword [ebx + 0x98]
lea ecx, [ebx + 0x48]
add dword [esp + 0x1c], eax
mov eax, dword [esp + 0x18]
mov esi, dword [ecx + 0xc]
test esi, esi
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0xc]
mov dword [esp + 0x5c], eax
jl 0x40f480
cmp esi, 0xffffffff
mov eax, dword [ecx + 8]
jne 0x40f451
push dword [ecx]
call sub.msvcrt.dll_free
jmp 0x40f461
push eax
push 0xc
lea eax, [ecx + 4]
mov edx, esi
mov edi, ecx
call fcn.00406613
pop ecx
lea eax, [esi + 1]
cmp dword [ebx + 0x54], eax
pop ecx
jge 0x40f46d
mov dword [ebx + 0x54], eax
mov edi, esi
imul edi, edi, 0xc
add edi, dword [ebx + 0x48]
lea esi, [esp + 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x38]
jl 0x40f493
and dword [esp + 0x1c], 0
inc dword [esp + 0xc]
inc dword [esp + 8]
mov eax, dword [ebx + 0x44]
mov ecx, dword [esp + 8]
add dword [esp + 0x20], 0x14
cmp ecx, dword [eax + 0x2dc]
jl 0x40f32b
mov eax, dword [esp + 0xc]
and dword [ebx + 0x9c], 0
mov esi, ebx
mov dword [ebx + 0xa0], eax
call fcn.0040ef91
push 1
push dword [ebx + 0x10]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [esp + 0x78]
push ecx
push eax
mov dword [esp + 0x44], eax
call edi
push 2
lea eax, [esp + 0x7c]
push eax
push dword [ebx + 0x10]
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov esi, dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [esp + 0xc0]
push eax
push dword [ebx + 0x10]
call esi
lea eax, [esp + 0x88]
push eax
push dword [ebx + 0x10]
call edi
mov ecx, dword [ebx + 0xa0]
test ecx, ecx
mov eax, dword [esp + 0x40]
jne 0x40f535
mov eax, dword [esp + 0x10]
imul eax, eax, 0x50
cdq
push 0x60
pop edi
idiv edi
add eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x90]
sub edx, dword [esp + 0x88]
mov edi, 0x204
inc edx
test ecx, ecx
jne 0x40f570
push 0x206
push eax
push edx
xor eax, eax
push eax
push eax
push eax
push dword [ebx + 0x10]
call dword [sym.imp.USER32.dll_SetWindowPos]
push 4
push dword [ebx + 0x10]
call fcn.00406b8c
pop ecx
pop ecx
jmp 0x40f5bc
xor ecx, ecx
cmp dword [esp + 0xa8], ecx
je 0x40f5a9
push edi
push eax
mov eax, dword [esp + 0xa8]
add eax, 0xa
push edx
push eax
mov eax, dword [esp + 0xb4]
sub eax, dword [esp + 0xac]
sub eax, edx
cdq
sub eax, edx
sar eax, 1
add eax, dword [esp + 0xac]
push eax
push ecx
jmp 0x40f5b3
push 0x206
push eax
push edx
push ecx
push ecx
push ecx
push dword [ebx + 0x10]
call dword [sym.imp.USER32.dll_SetWindowPos]
lea eax, [esp + 0x88]
push eax
push dword [ebx + 0x10]
call esi
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x84]
sub eax, ecx
inc eax
push edi
push eax
mov eax, dword [esp + 0x88]
sub eax, dword [esp + 0x80]
inc eax
push eax
mov eax, dword [esp + 0x1c]
imul eax, eax, 5
push 0x60
pop esi
cdq
idiv esi
sub ecx, eax
sub ecx, dword [esp + 0x90]
mov eax, dword [esp + 0xa0]
sub ecx, dword [esp + 0x98]
lea eax, [ecx + eax - 1]
push eax
push dword [esp + 0x88]
push 0
push dword [esp + 0x54]
call dword [sym.imp.USER32.dll_SetWindowPos]
pop edi
pop esi
mov esp, ebp
pop ebp
ret