Function at 0x40cf8e
Capabilities:
Link many functions at runtime

Disassembly:
push ebx
push ebp
push esi
push edi
push dword [0x1704cb4]
call fcn.00419a5a
mov ebx, eax
call fcn.00411835
call fcn.0040e167
xor ebp, ebp
cmp dword [0x17040b0], ebp
jne 0x40d11a
mov esi, 0xa4
push esi
push ebp
push 0x17040c0
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [0x17040c4], esi
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x17040c0], 0x16
mov dword [0x17040c8], 0x40cc6c
push str.MSFTEDIT.DLL
mov dword [0x17040e0], 0x40cb81
mov dword [0x17040d8], 0x40cf5d
mov dword [0x17040dc], 0x40d4ad
mov dword [0x17040f4], 0x40ccb3
mov dword [0x17040ec], 0x40cc99
mov dword [0x17040e8], 0x40d27d
mov dword [0x1704100], 0x40ceee
mov dword [0x1704104], 0x40d42d
mov dword [0x1704128], 0x40ce71
mov dword [0x170412c], 0x40d30b
mov dword [0x170413c], 0x40cebe
mov dword [0x1704138], 0x40d36e
mov dword [0x1704158], 0x40cee4
mov dword [0x170415c], 0x40d408
call esi
push str.RICHED20.DLL
mov dword [0x17040b4], eax
call esi
mov dword [0x17040b8], eax
test eax, eax
jne 0x40d09a
push str.RICHED32.DLL
call esi
mov eax, dword [0x1703f48]
test eax, eax
je 0x40d110
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.OpenThemeData
push eax
call esi
push str.CloseThemeData
push dword [0x1703f48]
mov dword [0x1704164], eax
call esi
push str.GetThemeBackgroundContentRect
push dword [0x1703f48]
mov dword [0x1704168], eax
call esi
push str.IsThemeBackgroundPartiallyTransparent
push dword [0x1703f48]
mov dword [0x170416c], eax
call esi
push str.DrawThemeParentBackground
push dword [0x1703f48]
mov dword [0x1704170], eax
call esi
push str.DrawThemeBackground
push dword [0x1703f48]
mov dword [0x1704174], eax
call esi
mov dword [0x1704178], eax
mov dword [0x17040b0], 1
mov esi, dword [0x1703f44]
neg esi
sbb esi, esi
and esi, 0xfffffe00
add esi, 0x200
cmp dword [0x17040b4], ebp
je 0x40d13f
mov edi, str.RICHEDIT50W
jmp 0x40d151
mov edi, str.RichEdit20W
cmp dword [0x17040b8], ebp
jne 0x40d151
mov edi, str.RichEdit
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.0040fccd
mov eax, dword [esp + 0x28]
push ebp
push dword [0x1703b50]
or eax, 0x503111c4
push 0xffffffffffffffff
push dword [ebx]
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x34]
push eax
push ebp
push edi
push esi
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov esi, eax
test esi, esi
je 0x40d26f
push dword [esp + 0x14]
push dword [0x1704cd0]
call fcn.00419c0a
mov edi, eax
push 0x10
push 8
or dword [edi + 0x18], 0xffffffff
or dword [edi + 0x14], 0xffffffff
mov ecx, dword [ebx + 8]
mov dword [edi + 0x1c], ecx
push dword [0x1703b4c]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
push eax
push str.PB_ClientRect
push esi
call dword [sym.imp.USER32.dll_SetPropW]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push ebp
push 0xffffffffffffffff
push 0xc5
push esi
call ebx
push 0x40ccde
push 0xfffffffffffffffc
push esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 0x37
push ebp
push ebp
push ebp
push ebp
push ebp
push esi
mov dword [0x17040bc], eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0x541
push ebp
push ebp
push esi
call dword [sym.imp.USER32.dll_RedrawWindow]
push ebp
push ebp
push 0x43b
push esi
call ebx
or eax, 1
push eax
push ebp
push 0x445
push esi
call ebx
cmp dword [0x17040b4], ebp
je 0x40d249
push 4
push 4
push 0x513
push esi
call ebx
push 0x17040c0
push esi
push edi
push dword [esp + 0x20]
call fcn.0040e35d
mov esi, eax
mov eax, 0x10000000
test dword [esp + 0x28], eax
je 0x40d26f
push 1
push eax
push edi
call fcn.0040d30b
call fcn.00411844
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
ret 0x18