Function at 0x41edb0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47d5c8
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x4be5b4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x18], edi
mov esi, dword [0x4c2650]
mov ebx, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0
push 0xc
call ebx
push eax
push 0xb
call ebx
mov ebx, dword [sym.imp.USER32.dll_LoadImageW]
push eax
push 1
push 0x80
push esi
call ebx
push eax
push 1
push 0x80
push dword [edi + 4]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
call edi
mov esi, dword [0x4c2650]
push 0
push 0x32
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push 0x31
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push 1
push 0x80
push esi
call ebx
mov ebx, dword [ebp - 0x18]
push eax
push 0
push 0x80
push dword [ebx + 4]
call edi
push 0x486cf4
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetWindowTextW]
call fcn.0045f500
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov ecx, ebx
call fcn.0041e270
push 0x486c74
push 0x400000
push 0x501
call fcn.00455f90
add esp, 0xc
push 1
push eax
push 0
push dword [ebx + 4]
lea eax, [ebx + 0x404]
push eax
call fcn.00456d90
push dword [ebp - 0x18]
lea edi, [ebx + 0x484]
lea eax, [edi + 0x20]
push eax
push 0x4be518
push 0x4be028
push 0x4c2648
call fcn.00403910
movzx esi, ax
add esp, 0x14
mov eax, dword [edi + 0x14]
mov dword [ebp - 0x18], esi
test eax, eax
jne 0x41ef4f
call fcn.004292aa
mov dword [edi + 0x14], eax
test eax, eax
jne 0x41ef4f
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [ebx + 0x28]
lea ecx, [ebx + 0x28]
push 0x101
call dword [eax + 0x1c]
mov dword [ebp - 0x14], 0
lea eax, [ebp - 0x14]
mov dword [ebp - 4], 0
push eax
push 1
push 0
call dword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
mov eax, dword [ebp - 0x14]
lea edi, [ebx + 0x478]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x41f03b
mov ecx, dword [0x4c24c8]
mov dword [ebp - 0x10], 0
test ecx, ecx
jne 0x41efe5
lea eax, [ebp - 0x10]
push eax
push 0x483e44
push 1
push ecx
push 0x492ba0
call dword [sym.imp.ole32.dll_CoCreateInstance]
jmp 0x41efee
push 0
push 0
push eax
call fcn.004293ac
test si, si
je 0x41eee0
lea esi, [edi + 8]
test esi, esi
je 0x41f093
test edi, edi
je 0x41f093
mov dword [esi], edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x4be02c
mov dword [esi + 4], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x4be044]
mov dword [esi + 8], eax
push 0x4be02c
mov dword [0x4be044], esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x4be058]
mov eax, dword [0x4be060]
mov edx, dword [0x4be054]
sub eax, ecx
push 0
push dword [0x4c264c]
push 0
push 0
push eax
mov eax, dword [0x4be05c]
sub eax, edx
push eax
mov eax, dword [ebp - 0x18]
push ecx
push edx
push SysReAllocString
push 0
movzx eax, ax
push eax
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
jmp 0x41eee0
mov eax, dword [ecx]
lea edx, [ebp - 0x10]
push edx
call dword [eax + 0x10]
mov esi, eax
test esi, esi
jns 0x41f003
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x41f044
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41f044
mov edx, dword [edi]
test edx, edx
je 0x41f015
mov eax, dword [ebp - 0x10]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
mov esi, eax
mov eax, dword [ebp - 0x10]
test esi, esi
jns 0x41f028
test eax, eax
je 0x41f044
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x41f044
mov ecx, dword [eax]
push edi
push 0x486e88
push dword [ebp - 0x18]
push eax
call dword [ecx + 0xc]
mov esi, eax
jmp 0x41eff4
mov ecx, edi
call fcn.00420190
mov esi, eax
test esi, esi
js 0x41f09f
push 0
push 0
push ebx
push 0x41dca0
push 0
push 0
call fcn.00440a9e
add esp, 0x18
test eax, eax
je 0x41f069
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x41f07d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 1
push 0xc0000005
call fcn.00403540
push esi
call fcn.004068b0
int3