Function at 0x431d80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4d21e6
push eax
mov eax, 0x221c
mov dword fs:[0], esp
call fcn.004b12d0
push ebx
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push esi
mov esi, dword [edi + 0x14]
push 0x4fec00
mov dword [esp + 0x64], esi
mov dword [esp + 0x80], 0x4fec00
call ebp
xor ebx, ebx
mov dword [esp + 0x2230], ebx
mov eax, dword [edi + 8]
push eax
lea ecx, [esp + 0x48]
mov eax, 0x4fec00
call fcn.00411670
mov byte [esp + 0x2230], 1
cmp dword [esp + 0x4c], ebx
je 0x43233c
mov ecx, dword [edi + 8]
lea edx, [esp + 0xe8]
push edx
push ebx
push 0x104b
mov dword [esp + 0xfc], ebx
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push esi
mov dword [esp + 0xf8], 0xa
mov dword [esp + 0xfc], ecx
call ebx
mov ecx, dword [0x4fefec]
lea eax, [esp + 0x124]
push eax
push ecx
push 0x103b
push esi
call ebx
test eax, eax
jne 0x431e52
mov ecx, dword [0x4fefec]
test ecx, ecx
jle 0x431e52
mov dword [esp + eax*4 + 0x124], eax
inc eax
cmp eax, ecx
jl 0x431e46
push 0x4fed28
call ebp
mov ebp, dword [0x4fed50]
sub ebp, dword [0x4fed4c]
push 0x4fed28
sar ebp, 5
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ebp, ebp
je 0x431e8f
lea edx, [esp + 0x44]
push edx
push 0x4fed28
call fcn.0040d7d0
mov byte [esp + 0x13], 1
test al, al
jne 0x431e94
mov byte [esp + 0x13], 0
test byte [edi + 0x10], 1
je 0x431ed7
call dword [sym.imp.USER32.dll_GetFocus]
mov ebp, dword [sym.imp.USER32.dll_GetSysColor]
cmp eax, esi
jne 0x431ec4
push 0xe
call ebp
push eax
mov eax, dword [edi + 0x18]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
push 0xd
call ebp
mov ecx, dword [edi + 0x18]
push eax
push ecx
jmp 0x431f19
push 0x12
call ebp
mov edx, dword [edi + 0x18]
push eax
push edx
call dword [sym.imp.GDI32.dll_SetTextColor]
push 0xf
jmp 0x431f12
cmp byte [esp + 0x13], 0
je 0x431efb
mov ecx, dword [0x4ff100]
mov edx, dword [edi + 0x18]
push ecx
push edx
call dword [sym.imp.GDI32.dll_SetTextColor]
mov eax, dword [0x4ff104]
mov ecx, dword [edi + 0x18]
push eax
push ecx
jmp 0x431f19
mov ebp, dword [sym.imp.USER32.dll_GetSysColor]
push 8
call ebp
mov edx, dword [edi + 0x18]
push eax
push edx
call dword [sym.imp.GDI32.dll_SetTextColor]
push 5
call ebp
push eax
mov eax, dword [edi + 0x18]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
xor ebp, ebp
cmp dword [0x4fefec], ebp
mov dword [esp + 0x40], ebp
mov dword [esp + 0x3c], ebp
jle 0x43229e
jmp 0x431f4a
mov esi, dword [esp + 0x60]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [edi + 0x24]
sub ecx, dword [edi + 0x1c]
cmp ebp, ecx
jge 0x43229e
mov eax, dword [esp + 0x3c]
lea eax, [esp + eax*4 + 0x124]
lea edx, [esp + 0x80]
push edx
mov dword [esp + 0x1c], eax
mov eax, dword [eax]
push eax
push 0x105f
push esi
mov dword [esp + 0x90], 3
call ebx
mov ecx, dword [esp + 0x88]
mov eax, dword [edi + 0x1c]
lea edx, [eax + ebp]
add eax, ecx
add eax, ebp
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x58], ecx
mov ecx, dword [eax]
mov dword [esp + 0x1c], edx
mov edx, dword [edi + 0x20]
lea eax, [esp + 0xac]
push eax
mov dword [esp + 0xb8], ecx
mov ecx, dword [edi + 8]
mov dword [esp + 0x24], edx
mov edx, dword [edi + 0x28]
push ecx
mov dword [esp + 0x30], edx
push 0x1073
lea edx, [esp + 0x230]
push esi
mov dword [esp + 0xd4], 0x1000
mov dword [esp + 0xd0], edx
call ebx
mov esi, dword [esp + 0x18]
mov edx, dword [esi]
mov eax, dword [edx*4 + 0x4feff0]
cmp eax, 0x9c75
je 0x432029
cmp eax, 0x9c77
je 0x432029
movzx eax, byte [esp + 0x84]
mov ebx, dword [edi + 0x18]
lea ecx, [esp + 0x224]
and eax, 1
push ecx
lea esi, [esp + 0x20]
call fcn.00431cf0
jmp 0x432281
mov ebp, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x31
call ebp
mov ebx, eax
push 0x32
mov dword [esp + 0x68], ebx
call ebp
mov edx, dword [esi]
cmp dword [edx*4 + 0x4feff0], 0x9c75
mov ebp, eax
mov dword [esp + 0x68], ebp
jne 0x43208f
cmp dword [esp + 0x54], 0
jne 0x432073
mov eax, dword [esp + 0x4c]
mov eax, dword [eax]
mov esi, dword [esp + 0x50]
push eax
add esi, 0x508
call fcn.00456db0
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x54]
mov esi, dword [esp + 0x50]
mov ecx, dword [ecx + 0x58]
add esi, 0x550
call fcn.0043cbb0
mov dword [esp + 0x14], eax
jmp case.default.0x43209c
mov edx, dword [esp + 0x4c]
mov eax, dword [edx + 8]
dec eax
cmp eax, 4
ja case.default.0x43209c
jmp dword [eax*4 + 0x432370]
mov eax, dword [0x4febf8]
mov dword [esp + 0x14], eax
jmp case.default.0x43209c
mov ecx, dword [0x4febf4]
jmp 0x4320d3
mov edx, dword [0x4febfc]
mov dword [esp + 0x14], edx
jmp case.default.0x43209c
mov eax, dword [0x4febec]
mov dword [esp + 0x14], eax
jmp case.default.0x43209c
mov ecx, dword [0x4febf0]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov dword [esp + 0x34], ecx
mov ecx, dword [edi + 0x18]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x28]
add eax, ebx
push ecx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x38], eax
call dword [sym.imp.GDI32.dll_GetBkColor]
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov esi, eax
mov eax, dword [edi + 0x18]
push esi
lea edx, [esp + 0x30]
push edx
push eax
call dword [sym.imp.USER32.dll_FillRect]
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x20]
mov ecx, eax
sub ecx, esi
cmp ecx, ebx
mov dword [esp + 0x18], ecx
jl 0x43213f
mov dword [esp + 0x18], ebx
cmp ecx, ebp
jge 0x432145
mov ebp, ecx
mov ecx, dword [esp + 0x1c]
sub eax, ebp
sub eax, esi
cdq
sub eax, edx
mov ebx, eax
sar ebx, 1
add ebx, esi
test byte [edi + 0x10], 1
mov dword [esp + 0x5c], ecx
je 0x4321c6
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x64]
push 1
push 1
push 0xfe
push ecx
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
push 5
mov esi, eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push esi
call dword [sym.imp.COMCTL32.dll_ImageList_SetBkColor]
mov eax, dword [esp + 0x14]
push eax
push 0xffffffffffffffff
push esi
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x5c]
push 4
push 0xff000000
push 0xff000000
push ebp
push ecx
mov ecx, dword [edi + 0x18]
push ebx
push edx
push ecx
push eax
push esi
call dword [sym.imp.COMCTL32.dll_ImageList_DrawEx]
push esi
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
jmp 0x4321e3
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
push 3
push 0
push 0
push ebp
push edx
push eax
push ebx
push ecx
mov ecx, dword [edi + 0x18]
push ecx
call dword [sym.imp.USER32.dll_DrawIconEx]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x28]
push 0x31
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], edx
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov esi, dword [edi + 0x18]
add dword [esp + 0x2c], eax
push esi
call dword [sym.imp.GDI32.dll_GetBkColor]
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ebx, eax
push ebx
lea eax, [esp + 0x30]
push eax
push esi
call dword [sym.imp.USER32.dll_FillRect]
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
push 2
push esi
call dword [sym.imp.GDI32.dll_SetBkMode]
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x2c]
push 0x40824
mov dword [esp + 0x74], edx
lea edx, [esp + 0x70]
push edx
mov dword [esp + 0x7c], eax
push 0xffffffffffffffff
lea eax, [esp + 0x230]
mov dword [esp + 0x78], ecx
mov ecx, dword [esp + 0x44]
push eax
push esi
mov dword [esp + 0x8c], ecx
call dword [sym.imp.USER32.dll_DrawTextW]
mov ebp, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
add ebp, dword [esp + 0x58]
inc eax
cmp eax, dword [0x4fefec]
mov dword [esp + 0x40], ebp
mov dword [esp + 0x3c], eax
jl 0x431f40
cmp byte [esp + 0x13], 0
je 0x432312
test byte [edi + 0x10], 1
je 0x432318
push 5
lea esi, [edi + 0x1c]
call dword [sym.imp.USER32.dll_GetSysColorBrush]
mov ecx, dword [edi + 0x18]
mov ebp, dword [sym.imp.USER32.dll_FrameRect]
push eax
push esi
push ecx
call ebp
mov edx, dword [0x4ff104]
push edx
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [esi + 4]
mov edx, dword [esi + 8]
mov ebx, eax
mov eax, dword [esi]
push 0xffffffffffffffff
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], eax
mov eax, dword [esi + 0xc]
push 0xffffffffffffffff
lea ecx, [esp + 0x24]
push ecx
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], eax
call dword [sym.imp.USER32.dll_InflateRect]
mov eax, dword [edi + 0x18]
push ebx
lea edx, [esp + 0x20]
push edx
push eax
call ebp
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x432318
test byte [edi + 0x10], 1
je 0x43233c
mov esi, dword [sym.imp.USER32.dll_GetSysColor]
push 8
call esi
mov ecx, dword [edi + 0x18]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SetTextColor]
push 5
call esi
mov edx, dword [edi + 0x18]
push eax
push edx
call dword [sym.imp.GDI32.dll_SetBkColor]
lea ecx, [esp + 0x44]
mov dword [esp + 0x44], vtable.CEventRef.0
call fcn.00405d80
push 0x4fec00
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [esp + 0x2228]
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x2228
ret