Function at 0x475106
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x228
mov eax, dword [edx + 0x18]
mov dword [esp + 0x28], ecx
lea ecx, [edx + 0x20]
mov esi, edx
mov dword [esp + 0x18], eax
mov eax, dword [edx + 0x1c]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x198]
push 0x88
mov dword [esp + 0x14], ecx
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
movzx eax, word [esi + 0xd3]
mov ecx, dword [esi + 0xa8]
mov edx, dword [esi + 0xb0]
movsd xmm0, qword [esi + 0xb4]
lea edi, [esp + 0xa0]
movsd xmm1, qword [esi + 8]
xor ebx, ebx
mov dword [edi], 1
mov word [esp + 0x24], ax
mov eax, dword [esi + 0xdc]
movsd qword [esp + 0x78], xmm0
movsd xmm0, qword [esi + 0xbc]
mov dword [edi + 4], ecx
mov dword [esp + 0x58], ecx
mov dword [esp + 0x54], edx
movsd qword [esp + 0x40], xmm1
mov dword [esp + 0x33], eax
mov eax, dword [esi + 0xd9]
movsd qword [esp + 0x80], xmm0
movsd xmm0, qword [esi + 0xc4]
mov dword [esp + 0x30], eax
lea eax, [ecx + edx]
movsd qword [esp + 0x88], xmm0
movsd xmm0, qword [esi + 0xc9]
mov cl, byte [esi + 0xd6]
movzx edx, byte [esi + 0xd1]
mov dword [edi + 8], eax
mov al, byte [esi + 0xd2]
movsd qword [esp + 0x8d], xmm0
movsd xmm0, qword [esi + 0x10]
test cl, cl
mov dword [esp + 4], edx
mov byte [esp + 2], cl
lea ecx, [esp + 0x6c]
mov edx, edi
mov byte [esp + 8], al
mov al, byte [esi + 0xd5]
setne bl
and word [edi + 0xc], 0
movsd qword [esp + 0x48], xmm0
movsd xmm0, qword [esi]
mov byte [esp + 0x1c], al
mov al, byte [esi + 0xd7]
movsd qword [esp + 0x38], xmm0
mov byte [esp + 3], al
mov al, byte [esi + 0xd8]
mov byte [esp + 0xc], al
mov eax, dword [esi + 0xac]
mov dword [esp + 0x50], eax
call fcn.0062524d
lea esi, [esp + 0x5c]
mov edx, str.Window_Classinternal_error:_entered_unreachable_code:_Invalid_raw_window_handle__on_Windows
mov ecx, esi
push 0xc
call fcn.00625224
pop eax
mov eax, dword [esi]
mov dword [edi], 0x30
mov dword [edi + 4], 3
mov dword [edi + 8], 0x475733
and dword [edi + 0xc], 0
and dword [edi + 0x10], 0
mov dword [edi + 0x14], 0x400000
and dword [edi + 0x1c], 0
and dword [edi + 0x18], 0
and dword [edi + 0x24], 0
and dword [edi + 0x20], 0
mov dword [edi + 0x28], eax
and dword [edi + 0x2c], 0
mov dword [esp + 0x20], eax
push edi
call dword [sym.imp.user32.dll_RegisterClassExW]
shl ebx, 0x13
mov edx, dword [esp + 4]
cmp byte [esp + 0x4f], 0
movzx eax, byte [esp + 8]
lea ecx, [ebx + 0x100000]
cmove ecx, ebx
test edx, edx
je 0x4752d1
cmp edx, 2
jne 0x4752d7
or ecx, 0x40
jmp 0x4752d7
or ecx, 0x80
movzx edx, byte [esp + 0x4c]
and ecx, 0x1ffcf6
mov edi, dword [esp + 0x18]
shl edx, 8
or edx, ecx
xor ecx, ecx
cmp byte [esp + 0xc], 0
setne cl
xor ebx, ebx
shl ecx, 0x15
or ecx, edx
cmp byte [esp + 0x1c], 0
setne bl
shl ebx, 9
or ebx, eax
or ebx, ecx
mov ecx, dword [esp + 0x60]
cmp edi, 8
mov dword [esp + 0x2c], ecx
je 0x47533c
cmp edi, 0xd
jne 0x47564e
cmp dword [esp + 0x38], 0
je 0x475394
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x14]
or ebx, 0x1008
mov dword [esp + 0x10], eax
jmp 0x4753a3
cmp dword [esp + 0x40], 0
mov edi, dword [esp + 0x14]
je 0x475388
mov eax, dword [0xa7101c]
cmp eax, 2
jb 0x475388
lea ecx, [esp + 0xa0]
mov dword [ecx], str.Setting_a_menu_on_a_child_window_is_unsupported
mov dword [ecx + 4], 1
and dword [ecx + 0x10], 0
mov dword [ecx + 8], str.dest_is_out_of_bounds
and dword [ecx + 0xc], 0
push 2
pop edx
push 0x80bb54
call fcn.00565e75
mov edi, dword [esp + 0x18]
add esp, 4
or ebx, 0x408
mov dword [esp + 0x10], edi
jmp 0x4753a3
mov edi, dword [esp + 0x14]
or ebx, 0x28
mov dword [esp + 0x10], 0
lea edx, [esp + 0x38]
lea ecx, [esp + 0xa0]
call fcn.004756f0
mov eax, dword [ebp + 8]
lea esi, [esp + 0xc0]
mov dword [esi + 0xd0], eax
mov eax, dword [esp + 0x18]
mov dword [esi - 8], eax
mov dword [esi - 4], edi
push 0x88
lea eax, [esp + 0x19c]
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x58]
movsd xmm1, qword [esp + 0x80]
movsd xmm0, qword [esp + 0x78]
movsd xmm2, qword [esp + 0x88]
mov ecx, ebx
mov dword [esi + 0x88], eax
mov eax, dword [esp + 0x50]
mov dword [esi + 0x8c], eax
mov eax, dword [esp + 0x54]
mov dword [esi + 0x90], eax
movsd qword [esi + 0x9c], xmm1
movsd xmm1, qword [esp + 0x8d]
mov eax, dword [esp + 4]
movsd qword [esi + 0xa4], xmm2
movsd qword [esi + 0x94], xmm0
movsd qword [esi + 0xa9], xmm1
mov byte [esi + 0xb1], al
mov al, byte [esp + 8]
mov byte [esi + 0xb2], al
movzx eax, word [esp + 0x24]
mov word [esi + 0xb3], ax
mov al, byte [esp + 0x1c]
mov byte [esi + 0xb5], al
mov al, byte [esp + 2]
mov byte [esi + 0xb6], al
mov al, byte [esp + 3]
mov byte [esi + 0xb7], al
mov al, byte [esp + 0xc]
mov byte [esi + 0xb8], al
mov eax, dword [esp + 0x33]
mov dword [esi + 0xbc], eax
mov eax, dword [esp + 0x30]
mov dword [esi + 0xb9], eax
mov dword [esi + 0xd4], ebx
and dword [esi + 0xc0], 0
call fcn.006294ff
lea ecx, [esp + 0x38]
mov ebx, dword [esp + 0x6c]
mov ecx, dword [ecx + 8]
test ecx, ecx
je 0x4754c5
mov ecx, dword [esp + 0x44]
mov esi, 0x80000000
lea edi, [esp + 0xa0]
push edi
push 0x400000
push ecx
push dword [esp + 0x1c]
push esi
push esi
push esi
push esi
push eax
push ebx
push dword [esp + 0x48]
push edx
call dword [sym.imp.user32.dll_CreateWindowExW]
mov esi, eax
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 0x50]
mov edx, dword [eax + 0x54]
and dword [eax + 0x50], 0
test ecx, ecx
jne 0x475632
xor ecx, ecx
lea edi, [esp + 0xb8]
call fcn.0044fb1c
test esi, esi
mov dword [esp + 0x1c], esi
je 0x47557b
mov eax, dword [esp + 0x180]
test eax, eax
mov dword [esp + 0xc], eax
je 0x475639
mov ecx, edi
lea edi, [esp + 0xb0]
mov eax, dword [edi + 0xd8]
mov edx, dword [edi + 0xdc]
mov esi, dword [edi + 0xd4]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0045e46d
mov ecx, edi
call fcn.00627dfe
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x2c]
call fcn.005ae0c4
mov edx, dword [esp + 0x70]
mov ecx, ebx
call fcn.005ae0c4
push 4
pop edi
jmp 0x4755d4
lea esi, [esp + 0x180]
call dword [sym.imp.kernel32.dll_GetLastError]
mov ecx, edi
mov dword [esp + 0xc], eax
call fcn.0045e46d
lea ecx, [esp + 0xb0]
call fcn.00627dfe
mov ecx, esi
call fcn.00475729
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x2c]
call fcn.005ae0c4
mov edx, dword [esp + 0x70]
mov ecx, ebx
call fcn.005ae0c4
mov esi, 0xa3994c
push 0x64
pop eax
mov dword [esp + 4], eax
mov dword [esp + 8], 0x475
xor edi, edi
lea ecx, [esp + 0x48]
call fcn.00627dfe
cmp dword [esp + 0x1c], 0
je 0x47560c
mov ecx, esi
call fcn.0045d610
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov dword [eax + 4], ecx
mov dword [eax + 8], esi
mov esi, dword [esp + 4]
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], edx
mov byte [eax], 4
jmp 0x47562a
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov dword [eax], edi
mov dword [eax + 4], ecx
mov dword [eax + 8], esi
mov esi, dword [esp + 4]
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], edx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.005e92d0
ud2
push 0x2b
pop edx
mov ecx, 0xa3a547
push 0x80bb70
call fcn.0063cd70
pop eax
ud2
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x98]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x5c], edi
movsd xmm0, qword [ecx]
lea ecx, [esp + 0x5c]
mov dword [esp + 0x60], eax
mov dword [edx], ecx
lea ecx, [esp + 0xa0]
mov dword [edx + 4], fcn.0057631c
mov dword [ecx], 0x80bafc
mov dword [ecx + 4], 2
and dword [ecx + 0x10], 0
mov dword [ecx + 8], edx
mov edx, 0x80bb0c
mov dword [ecx + 0xc], 1
movsd qword [esp + 0x64], xmm0
call fcn.0063cbf0
ud2