Function at 0x41bfe0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x9c
push ebx
xor ebx, ebx
cmp dword [0x4324d0], ebx
push esi
jne 0x41c02f
push ebx
push 0x80000
push ebx
call dword [sym.imp.KERNEL32.dll_HeapCreate]
mov esi, eax
cmp esi, ebx
je 0x41c020
push 0x24
push 8
push esi
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
cmp eax, ebx
mov dword [0x4324d0], eax
jne 0x41c02d
push esi
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
pop esi
mov eax, ebx
pop ebx
add esp, 0x9c
ret 0xc
mov dword [eax], esi
mov eax, dword [esp + 0xa8]
mov esi, dword [0x4324d0]
push edi
push 0xfffffffffffffffa
push eax
mov dword [esp + 0x34], esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
cmp word [esi + 8], bx
mov edi, eax
mov dword [esp + 0xc], edi
jne 0x41c0be
push 0x7f00
push ebx
mov dword [esp + 0x60], 0x30
mov dword [esp + 0x64], ebx
mov dword [esp + 0x88], str.WndCtrlBarClass
mov dword [esp + 0x68], 0x41b760
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], edi
mov dword [esp + 0x78], ebx
call dword [sym.imp.USER32.dll_LoadCursorA]
push 4
mov dword [esp + 0x78], eax
call dword [sym.imp.GDI32.dll_GetStockObject]
lea ecx, [esp + 0x58]
push ecx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ebx
mov dword [esp + 0x88], ebx
call dword [sym.imp.USER32.dll_RegisterClassExA]
mov word [esi + 8], ax
cmp dword [esi + 0xc], ebx
push ebp
mov ebp, dword [sym.imp.GDI32.dll_CreateFontA]
jne 0x41c0e7
push str.Times_New_Roman
push ebx
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
push ebx
push 0x320
push ebx
push ebx
push ebx
push 0xf
call ebp
mov dword [esi + 0xc], eax
cmp dword [esi + 0x10], ebx
jne 0x41c109
push str.Times_New_Roman
push ebx
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
push ebx
push 0x320
push ebx
push ebx
push ebx
push 0x11
call ebp
mov dword [esi + 0x10], eax
cmp dword [esi + 0x18], ebx
jne 0x41c11d
push 0xd3
push edi
call dword [sym.imp.USER32.dll_LoadCursorA]
mov dword [esi + 0x18], eax
cmp dword [esi + 0x1c], ebx
jne 0x41c131
push 0xd4
push edi
call dword [sym.imp.USER32.dll_LoadCursorA]
mov dword [esi + 0x1c], eax
cmp dword [esi + 0x14], ebx
jne 0x41c154
lea edx, [esp + 0x34]
push edx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], 0xfaffff
mov dword [esp + 0x40], ebx
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
mov dword [esi + 0x14], eax
mov eax, dword [0x4324d0]
mov ecx, dword [eax]
mov edi, dword [sym.imp.KERNEL32.dll_HeapAlloc]
push 0x134
push 8
push ecx
call edi
mov ebp, eax
cmp ebp, ebx
je 0x41c4f3
add dword [esi + 4], 1
mov eax, dword [esi + 4]
lea edx, [eax*4]
mov eax, dword [0x4324d0]
mov ecx, dword [eax]
push edx
push 8
push ecx
call edi
mov edi, eax
cmp edi, ebx
jne 0x41c1b6
mov edx, dword [0x4324d0]
mov eax, dword [edx]
push ebp
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
pop ebp
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x9c
ret 0xc
mov ecx, dword [esi + 4]
sub ecx, 1
xor eax, eax
test ecx, ecx
jle 0x41c1d8
mov edx, dword [esi + 0x20]
mov ecx, dword [edx + eax*4]
mov dword [edi + eax*4], ecx
mov edx, dword [esi + 4]
add eax, 1
sub edx, 1
cmp eax, edx
jl 0x41c1c2
cmp eax, ebx
mov dword [edi + eax*4], ebp
je 0x41c1f3
mov eax, dword [esi + 0x20]
mov ecx, dword [0x4324d0]
mov edx, dword [ecx]
push eax
push ebx
push edx
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0xb0]
mov dword [esi + 0x20], edi
mov dword [ebp + 0xc], eax
mov eax, dword [esp + 0xb4]
mov dword [ebp], 1
mov ecx, dword [esi + 4]
mov dword [ebp + 4], ecx
push eax
lea ecx, [ebp + 0x10]
push ecx
mov dword [ebp + 8], edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov esi, dword [esp + 0xb8]
cmp esi, 1
mov dword [ebp + 0x114], ebx
mov dword [ebp + 0x120], ebx
mov dword [ebp + 0x118], 0xe740
jge 0x41c24d
mov esi, 1
push ebx
lea edx, [esp + 0x58]
push edx
or edi, 0xffffffff
lea eax, [esp + 0x4c]
push eax
push 1
push edi
push edi
push 1
push 1
push ebp
mov dword [ebp + 0x124], esi
mov dword [ebp + 0x128], 1
mov dword [ebp + 0x11c], 0xe6dc
mov dword [ebp + 0x12c], ebx
mov dword [ebp + 0x130], ebx
mov dword [esp + 0x74], edi
mov dword [esp + 0x70], edi
mov dword [esp + 0x6c], edi
mov dword [esp + 0x68], edi
call fcn.0041bbd0
push ebx
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x4c]
push edx
push 1
push edi
push edi
push 2
push 1
push ebp
call fcn.0041bbd0
push ebx
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x4c]
push ecx
push 1
push edi
push edi
push 1
push 1
push ebp
call fcn.0041bbd0
push ebx
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x4c]
push eax
push 1
push edi
push edi
push 2
push 1
push ebp
call fcn.0041bbd0
push 1
push ebp
call fcn.0041a930
mov eax, dword [esp + 0x10]
add eax, 1
add esi, eax
cmp eax, esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x2c], esi
jge 0x41c4e5
mov ecx, 1
sub ecx, eax
mov dword [esp + 0x20], ecx
jmp 0x41c320
mov esi, dword [ebp + 0x11c]
mov ecx, dword [esp + 0xb0]
push ebx
push ebx
add esi, 1
push esi
push ecx
push 1
push 1
push ebx
push ebx
push 0x50010f00
push 0x42646b
push str.BUTTON
push ebx
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov edi, eax
cmp edi, ebx
mov dword [esp + 0x18], edi
je 0x41c4d0
mov edx, dword [esp + 0x30]
mov eax, dword [edx + 0xc]
push 1
push eax
push 0x30
push edi
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x20]
add ecx, edx
push ecx
lea eax, [esp + 0x90]
push 0x42cc8c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x8c]
push ecx
push ebx
push 0xc
push edi
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [ebp + 0x12c]
add edx, 1
imul edx, edx, 0xbc
mov dword [ebp + 0x11c], esi
mov eax, dword [0x4324d0]
mov ecx, dword [eax]
push edx
push 8
push ecx
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
cmp eax, ebx
je 0x41c4d0
mov edx, dword [ebp + 0x130]
add dword [ebp + 0x12c], 1
cmp edx, ebx
mov ecx, dword [ebp + 0x12c]
mov dword [esp + 0x58], edx
mov dword [ebp + 0x130], eax
je 0x41c434
add ecx, 0xffffffff
imul ecx, ecx, 0xbc
mov dword [esp + 0x40], ecx
mov dword [esp + 0x28], eax
cld
mov esi, dword [esp + 0x58]
mov edi, dword [esp + 0x28]
mov ecx, dword [esp + 0x40]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x40]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push edx
mov edx, dword [0x4324d0]
mov eax, dword [edx]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov edi, dword [esp + 0x18]
mov ecx, dword [ebp + 0x12c]
mov edx, dword [ebp + 0x130]
imul ecx, ecx, 0xbc
lea esi, [ecx + edx - 0xbc]
push edi
mov dword [esi], edi
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
mov dword [esi + 4], eax
xor eax, eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], eax
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0x54]
mov dword [esi + 0x20], eax
mov eax, dword [esp + 0x1c]
mov dword [esi + 0x24], eax
mov eax, dword [esp + 0x24]
mov dword [esi + 0x28], eax
mov eax, dword [esp + 0x10]
mov dword [esi + 0x2c], eax
xor eax, eax
mov dword [esi + 0x30], eax
xor ecx, ecx
mov dword [esi + 0x50], eax
mov dword [esi + 0x40], eax
xor edx, edx
mov dword [esi + 0x34], ecx
mov dword [esi + 0x54], ecx
mov dword [esi + 0x44], ecx
xor edi, edi
mov dword [esi + 0x38], edx
mov dword [esi + 0x58], edx
mov dword [esi + 0x48], edx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov dword [esi + 0x3c], edi
mov dword [esi + 0x5c], edi
mov dword [esi + 0x4c], edi
mov dword [esi + 0x60], ebx
mov dword [esi + 0x68], ebx
mov dword [esi + 0x64], ebx
mov dword [esi + 0x70], ebx
mov byte [esi + 0x78], bl
mov dword [esi + 0x6c], ebx
mov dword [esi + 0x74], ebx
mov dword [esi + 0xb8], ebx
mov eax, dword [esp + 0x14]
add eax, 1
cmp eax, dword [esp + 0x2c]
mov dword [esp + 0x14], eax
jl 0x41c320
push ebx
push ebp
call fcn.0041a810
push ebx
push ebp
call fcn.0041bb30
mov eax, ebp
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x9c
ret 0xc