Function at 0x41f0db
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
push esi
push edi
push dword [0x500ba0]
call fcn.0042f2d1
mov ebp, eax
call fcn.00426c87
call fcn.00423147
xor edi, edi
cmp dword [0x4ffbd8], edi
jne 0x41f25a
mov esi, 0xa4
push esi
push edi
push 0x4ffbe0
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [0x4ffbe4], esi
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x4ffbe0], 0x16
mov dword [0x4ffbe8], 0x41ee0c
push str.RICHED20.DLL
mov dword [0x4ffc00], 0x41ed2c
mov dword [0x4ffbf8], 0x41f0aa
mov dword [0x4ffbfc], 0x41f5a9
mov dword [0x4ffc14], 0x41ee53
mov dword [0x4ffc0c], 0x41ee39
mov dword [0x4ffc08], 0x41f384
mov dword [0x4ffc20], 0x41f03b
mov dword [0x4ffc24], 0x41f529
mov dword [0x4ffc48], 0x41efbe
mov dword [0x4ffc4c], 0x41f407
mov dword [0x4ffc5c], 0x41f00b
mov dword [0x4ffc58], 0x41f46a
mov dword [0x4ffc78], 0x41f031
mov dword [0x4ffc7c], 0x41f504
call esi
mov dword [0x4ffbdc], eax
test eax, eax
jne 0x41f1da
push str.RICHED32.DLL
call esi
mov eax, dword [0x4ffbd0]
test eax, eax
je 0x41f250
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.OpenThemeData
push eax
call esi
push str.CloseThemeData
push dword [0x4ffbd0]
mov dword [0x4ffc88], eax
call esi
push str.GetThemeBackgroundContentRect
push dword [0x4ffbd0]
mov dword [0x4ffc8c], eax
call esi
push str.IsThemeBackgroundPartiallyTransparent
push dword [0x4ffbd0]
mov dword [0x4ffc90], eax
call esi
push str.DrawThemeParentBackground
push dword [0x4ffbd0]
mov dword [0x4ffc94], eax
call esi
push str.DrawThemeBackground
push dword [0x4ffbd0]
mov dword [0x4ffc98], eax
call esi
mov dword [0x4ffc9c], eax
mov dword [0x4ffbd8], 1
mov ecx, dword [0x4ffbcc]
mov edx, str.RichEdit20W
neg ecx
sbb ecx, ecx
and ecx, 0xfffffe00
add ecx, 0x200
cmp dword [0x4ffbdc], edi
jne 0x41f282
mov edx, str.RichEdit
mov eax, dword [esp + 0x24]
or esi, 0xffffffff
push edi
push dword [0x4fedf8]
or eax, 0x503111c4
push esi
push dword [ebp]
push dword [esp + 0x30]
push dword [esp + 0x30]
push dword [esp + 0x30]
push dword [esp + 0x30]
push eax
push edi
push edx
push ecx
call dword [sym.imp.USER32.DLL_CreateWindowExW]
mov edi, eax
test edi, edi
je 0x41f377
push ebx
push dword [esp + 0x14]
push dword [0x500bbc]
call fcn.0042f481
mov ebx, eax
push 0x10
push 8
mov dword [ebx + 0x18], esi
mov dword [ebx + 0x14], esi
mov ecx, dword [ebp + 8]
mov dword [ebx + 0x1c], ecx
push dword [0x4fedf4]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
push eax
push str.PB_ClientRect
push edi
call dword [sym.imp.USER32.DLL_SetPropW]
xor ebp, ebp
push ebp
push esi
mov esi, dword [sym.imp.USER32.DLL_SendMessageW]
push 0xc5
push edi
call esi
push 0x41ee7e
push 0xfffffffffffffffc
push edi
call dword [sym.imp.USER32.DLL_SetWindowLongW]
push 0x37
push ebp
push ebp
push ebp
push ebp
push ebp
push edi
mov dword [0x4ffc84], eax
call dword [sym.imp.USER32.DLL_SetWindowPos]
push 0x541
push ebp
push ebp
push edi
call dword [sym.imp.USER32.DLL_RedrawWindow]
push ebp
push ebp
push 0x43b
push edi
call esi
or eax, 1
push eax
push ebp
push 0x445
push edi
call esi
push 0x4ffbe0
push edi
push ebx
push dword [esp + 0x20]
call fcn.0042330e
mov edi, eax
mov eax, 0x10000000
test dword [esp + 0x28], eax
je 0x41f376
push 1
push eax
push ebx
call fcn.0041f407
pop ebx
call fcn.00426c96
mov eax, edi
pop edi
pop esi
pop ebp
ret 0x18