Function at 0x42fe00
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4482fe
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x48
mov eax, dword [0x461e50]
push ebp
push esi
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x30]
push edi
push eax
mov ebp, ecx
call dword [sym.imp.dmcommon.dll_public:_static_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____cdecl_CUtil::getExePath_void_]
add esp, 4
xor edi, edi
mov dword [esp + 0x5c], edi
lea ecx, [esp + 0x1c]
call sub.MFC71.DLL_CFileFind::CFileFind
mov byte [esp + 0x5c], 1
lea ecx, [esp + 0xc]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_2]
mov byte [esp + 0x5c], 2
cmp dword [esp + 0x64], edi
lea ecx, [esp + 0x34]
jle 0x42fefc
push str.Theme_
call dword [0x44e6d8]
push str.Picture
lea ecx, [esp + 0x38]
call dword [0x44e6d8]
push str._sum
lea ecx, [esp + 0x38]
call dword [0x44e6d8]
cmp dword [esp + 0x4c], 0x10
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], 0xf
jae 0x42fea5
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_1]
mov byte [esp + 0x5c], 3
push 0x45076c
push eax
lea ecx, [esp + 0x18]
push ecx
call fcn.00409090
add esp, 0xc
mov byte [esp + 0x5c], 4
push edi
mov ecx, eax
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
push eax
lea ecx, [esp + 0x24]
call sub.MFC71.DLL_CFileFind::FindFile
mov esi, eax
mov byte [esp + 0x5c], 3
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
mov byte [esp + 0x5c], 2
lea ecx, [esp + 0x14]
jmp 0x42ff73
push str.Theme
call dword [0x44e6d8]
cmp dword [esp + 0x4c], 0x10
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], 0x3c
jae 0x42ff1e
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_1]
mov byte [esp + 0x5c], 5
push 0x45075c
push eax
lea edx, [esp + 0x1c]
push edx
call fcn.00409090
add esp, 0xc
mov byte [esp + 0x5c], 6
push edi
mov ecx, eax
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
push eax
lea ecx, [esp + 0x24]
call sub.MFC71.DLL_CFileFind::FindFile
mov esi, eax
mov byte [esp + 0x5c], 5
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
mov byte [esp + 0x5c], 2
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
test esi, esi
je 0x42ffa1
lea ecx, [ecx]
lea ecx, [esp + 0x1c]
call sub.MFC71.DLL_CFileFind::FindNextFileA
mov esi, eax
mov eax, dword [esp + 0x1c]
push 0x10
lea ecx, [esp + 0x20]
call dword [eax + 0x40]
test eax, eax
jne 0x42ff9d
inc edi
test esi, esi
jne 0x42ff80
cmp edi, dword [esp + 0x18]
jl 0x43004d
mov eax, dword [esp + 0x64]
test eax, eax
lea ecx, [esp + 0xc]
jle 0x42ffbe
push 0x450728
jmp 0x42ffc3
push 0x4506f8
call dword [sym.imp.MFC71.DLL_ATL::CStringT::operator_2]
mov eax, dword [ebp + 0x20]
test eax, eax
lea ecx, [esp + 0xc]
jne 0x42ffe4
push eax
push eax
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
push eax
call sub.MFC71.DLL_AfxMessageBox
jmp 0x43001a
mov esi, dword [0x44e988]
push ecx
push eax
call esi
push eax
call sub.MFC71.DLL_CWnd::FromHandle
mov ecx, eax
call fcn.00408c20
mov edx, dword [ebp + 0x20]
push 0
push 0
push 0x1965
push edx
call esi
push eax
call sub.MFC71.DLL_CWnd::FromHandle
mov eax, dword [eax + 0x20]
push eax
call dword [0x44e8f4]
mov byte [esp + 0x5c], 1
lea ecx, [esp + 0xc]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
mov byte [esp + 0x5c], 0
lea ecx, [esp + 0x1c]
call fcn.00443b60
mov dword [esp + 0x5c], 0xffffffff
lea ecx, [esp + 0x34]
call dword [0x44e720]
xor al, al
jmp 0x43007e
mov byte [esp + 0x5c], 1
lea ecx, [esp + 0xc]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
mov byte [esp + 0x5c], 0
lea ecx, [esp + 0x1c]
call fcn.00443b60
mov dword [esp + 0x5c], 0xffffffff
lea ecx, [esp + 0x34]
call dword [0x44e720]
mov al, 1
mov ecx, dword [esp + 0x54]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x48]
pop ebp
call fcn.00443e74
add esp, 0x54
ret 4