Function at 0x41e588
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, ecx
push edi
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x44], eax
mov eax, dword [esi + 0x84]
push ecx
push eax
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0x10]
push 7
push dword [ebp - 0x34]
xor ebx, ebx
mov dword [ebp - 0x20], eax
lea ecx, [esi + 0x14]
lea edi, [esi + 0xddc]
lea eax, [ebp - 0x28]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x38], ecx
call fcn.00408744
or dword [edi + 0x24], 0x280000
cmp dword [esi + 0xc3c], ebx
jne 0x41e60e
push 0xa
push ebx
lea eax, [esi + 0xc24]
mov ecx, dword [eax]
push esi
push eax
call dword [ecx + 0x10]
test eax, eax
jns 0x41e60e
xor eax, eax
jmp 0x41e8ed
lea eax, [ebp - 0x4c]
push eax
push dword [0x4507ec]
mov eax, SysReAllocStringLen
push 0xe900
push dword [ebp - 0x34]
mov dword [ebp - 0x4c], ebx
push eax
push eax
push ebx
push ebx
push 0x46000001
push ebx
push str.MDIClient
push 4
mov dword [ebp - 0x48], 0xff00
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0x2c], eax
cmp eax, ebx
je 0x41e607
lea edi, [esi + 0xdc8]
mov ebx, eax
mov dword [esi + 0x21c], eax
call fcn.00440a82
lea eax, [esi + 0x10]
push eax
push ebx
call dword [sym.imp.ole32.dll_RegisterDragDrop]
mov ecx, dword [esi + 0x210]
push dword [ebp - 0x34]
shr ecx, 0x17
xor ecx, dword [esi + 0xdc4]
lea eax, [esi + 0xd64]
and ecx, 3
xor dword [esi + 0xdc4], ecx
push eax
mov dword [ebp - 0x40], eax
call fcn.0042d96e
mov ecx, dword [ebp - 0x38]
mov dword [esi + 0xd4c], eax
lea ebx, [esi + 0xe44]
or dword [ebx + 0x24], 0x400f0000
mov eax, SysReAllocStringLen
push 8
push dword [esi + 0xd78]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x28]
mov edi, ebx
call fcn.00408744
mov ecx, dword [esi + 0xe64]
xor eax, eax
inc eax
mov word [esi + 0xdb8], ax
mov eax, dword [ebp - 0x40]
mov dword [eax + 0x1c], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [eax + 0x20], ecx
test byte [esi + 0x216], 1
jne 0x41e6f9
mov eax, dword [esi + 0xc3c]
mov dword [esi + 0xdb4], eax
xor edi, edi
cmp dword [esi + 0xd4c], edi
je 0x41e607
mov eax, dword [esi + 0x228]
and eax, 3
cmp al, 1
jne 0x41e77f
mov dword [ebp - 0x28], edi
xor eax, eax
lea edi, [ebp - 0x24]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x28]
push eax
push 1
push 0x40a
push dword [esi + 0xd48]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
push 0
push dword [0x4507ec]
sub eax, 0x10
push 4
push dword [esi + 0xd48]
cdq
push 0x10
sub eax, edx
push 0x50
sar eax, 1
add eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x20]
add eax, 0xffffffad
push eax
push 0x40000000
push 0
push str.msctls_progress32
push 4
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [esi + 0xd50], eax
jmp 0x41e7b0
lea eax, [esi + 0x1008]
push eax
push edi
push edi
push 0x411676
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 0x1004], eax
cmp eax, edi
je 0x41e607
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call dword [sym.imp.USER32.dll_AllowSetForegroundWindow]
lea edx, [ebp - 0x3c]
push edx
lea eax, [esi + 0x288]
mov ecx, dword [eax]
push 0xfffffffffffffffc
push eax
call dword [ecx + 0x44]
push dword [ebp - 0x3c]
call fcn.0043e2f6
pop ecx
test ax, ax
je 0x41e607
mov eax, dword [esi + 0x228]
and eax, 3
cmp al, 3
je 0x41e7fd
call fcn.00439974
test ax, ax
je 0x41e607
call fcn.0040add2
test ax, ax
je 0x41e607
call fcn.004402b1
test ax, ax
je 0x41e607
test byte [esi + 0x228], 8
je 0x41e81d
push dword [ebp - 0x3c]
call fcn.00439925
pop ecx
push dword [ebp - 0x38]
lea edi, [esi + 0xfb0]
call fcn.00409166
add esi, 0xeac
call fcn.004227bc
mov esi, dword [ebp - 0x30]
test byte [esi + 0x230], 1
je 0x41e8b2
movzx eax, word [esi + 0x22e]
xor ecx, ecx
inc ecx
cmp cx, ax
je 0x41e8bd
add esi, 0x1f0
lea edi, [ebp - 0x28]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
pop ecx
movsd dword es:[edi], dword [esi]
cmp cx, ax
jne 0x41e872
mov esi, 0x44ae4c
lea edi, [ebp - 0x28]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x28]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x8c]
mov ecx, dword [eax]
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [ecx + 0xc]
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x41e8a0
mov dword [ebx + 0x30], eax
jmp 0x41e8ad
push eax
push dword [ebp - 0x2c]
xor eax, eax
mov esi, ebx
call fcn.00408830
mov esi, dword [ebp - 0x30]
jmp 0x41e8bd
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x1c]
mov ecx, dword [esi + 0x260]
test ecx, ecx
je 0x41e8dc
mov eax, dword [esi + 0x228]
and eax, 3
cmp al, 3
je 0x41e8dc
mov edx, dword [ebp - 0x44]
call fcn.004232c2
mov ecx, dword [ebp - 0x44]
lea edi, [esi + 0x1ac]
call fcn.004151cb
xor eax, eax
inc eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0044552e
leave
ret 4