Function at 0x43c640
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x461186
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3c
push ebx
push ebp
push esi
mov ebp, ecx
push edi
lea ecx, [esp + 0x20]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_2]
mov esi, dword [esp + 0x64]
mov ecx, dword [ebp + 0x54]
xor edi, edi
cmp esi, edi
mov dword [esp + 0x54], edi
mov dword [esp + 0x24], ecx
mov byte [esp + 0x14], 0xeb
mov byte [esp + 0x15], 0xeb
mov byte [esp + 0x16], 0xeb
jl 0x43c6f0
push esi
call fcn.004203d0
mov cl, byte [eax + 0xd9]
test cl, cl
mov dword [esp + 0x10], eax
jne 0x43c6c8
mov cl, byte [eax + 0xd8]
test cl, cl
je 0x43c6b9
mov ebx, 0xa2502a
mov dword [esp + 0x18], 0xffc88c
jmp 0x43c6d5
mov ebx, 0xc0c0c0
mov dword [esp + 0x18], 0xdcdcdc
jmp 0x43c6d5
mov ebx, 0x60a4a4
mov dword [esp + 0x18], 0x80dcdc
mov eax, dword [eax + 0x78]
push eax
inc esi
push esi
lea ecx, [esp + 0x28]
push str._d____s
push ecx
call dword [sym.imp.MFC71.DLL_ATL::CStringT::Format]
add esp, 0x10
jmp 0x43c72f
push 0x96
lea ecx, [esp + 0x20]
mov dword [esp + 0x14], edi
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_3]
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x58], 1
call dword [sym.imp.MFC71.DLL_ATL::CStringT::operator_2]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x54], 0
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
mov ebx, 0x78
mov dword [esp + 0x18], 0x7f7fbb
mov ecx, dword [ebp + 0x54]
lea edx, [esp + 0x38]
push edx
call fcn.0041fa70
push 2
call dword [sym.imp.USER32.dll_GetSysColor]
push 0x38
call sub.MFC71.DLL_operator_new
add esp, 4
mov dword [esp + 0x1c], eax
cmp eax, edi
mov esi, dword [esp + 0x5c]
mov byte [esp + 0x54], 2
je 0x43c781
mov edi, dword [esp + 0x60]
lea eax, [edi + 0xf]
push eax
mov ecx, esi
call fcn.0040a060
mov ecx, dword [esp + 0x20]
push eax
push edi
push 0
call fcn.00434850
mov dword [esp + 0x1c], eax
jmp 0x43c789
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0x60]
lea ecx, [esp + 0x20]
mov byte [esp + 0x54], 0
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
mov ecx, dword [esp + 0x1c]
push eax
call fcn.00434a40
push ecx
mov byte [esp + 0x60], bl
mov byte [esp + 0x61], bh
mov dx, word [esp + 0x60]
mov ecx, esp
mov word [ecx], dx
shr ebx, 0x10
mov byte [ecx + 2], bl
mov ebx, dword [esp + 0x20]
mov ecx, ebx
call fcn.00434aa0
mov eax, dword [esp + 0x18]
push ecx
mov byte [esp + 0x60], al
mov byte [esp + 0x61], ah
mov dx, word [esp + 0x60]
mov ecx, esp
mov word [ecx], dx
shr eax, 0x10
mov byte [ecx + 2], al
mov ecx, ebx
call fcn.00434ac0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x43ca7b
push 0x34
call sub.MFC71.DLL_operator_new
mov ebx, eax
add esp, 4
mov dword [esp + 0x5c], ebx
test ebx, ebx
mov byte [esp + 0x54], 3
je 0x43c83a
lea eax, [edi + 0xc]
push eax
mov ecx, esi
call fcn.0040a060
sub eax, 0x1b
push eax
lea ecx, [edi + 3]
push ecx
mov ecx, esi
call fcn.0040a060
sub eax, 0x24
push eax
mov ecx, ebx
call fcn.00406e30
mov dword [esp + 0x5c], eax
jmp 0x43c842
mov dword [esp + 0x5c], 0
mov ecx, dword [esp + 0x5c]
push 0x126
push 0x12a
mov byte [esp + 0x5c], 0
call fcn.00406e80
mov ebx, dword [esp + 0x64]
mov ecx, dword [esp + 0x5c]
shl ebx, 4
lea edx, [ebx + 3]
lea eax, [ebp + 0x58]
push edx
push eax
call fcn.00406d70
mov eax, dword [esp + 0x5c]
push eax
mov ecx, esi
call fcn.0040a070
push 0x34
call sub.MFC71.DLL_operator_new
add esp, 4
mov dword [esp + 0x5c], eax
test eax, eax
mov byte [esp + 0x54], 4
je 0x43c8c2
lea ecx, [edi + 0xc]
push ecx
mov ecx, esi
call fcn.0040a060
sub eax, 0xf
push eax
lea edx, [edi + 3]
push edx
mov ecx, esi
call fcn.0040a060
mov ecx, dword [esp + 0x68]
sub eax, 0x18
push eax
call fcn.00406e30
mov dword [esp + 0x5c], eax
jmp 0x43c8ca
mov dword [esp + 0x5c], 0
mov ecx, dword [esp + 0x5c]
push 0x127
push 0x128
mov byte [esp + 0x5c], 0
call fcn.00406e80
mov ecx, dword [esp + 0x5c]
lea eax, [ebx + 2]
push eax
lea eax, [ebp + 0x58]
push eax
call fcn.00406d70
mov ecx, dword [esp + 0x5c]
push ecx
mov ecx, esi
call fcn.0040a070
push 0x34
call sub.MFC71.DLL_operator_new
add esp, 4
mov dword [esp + 0x5c], eax
test eax, eax
mov byte [esp + 0x54], 5
je 0x43c943
lea edx, [edi + 0xc]
push edx
mov ecx, esi
call fcn.0040a060
sub eax, 3
push eax
lea eax, [edi + 3]
push eax
mov ecx, esi
call fcn.0040a060
mov ecx, dword [esp + 0x68]
sub eax, 0xc
push eax
call fcn.00406e30
mov dword [esp + 0x5c], eax
jmp 0x43c94b
mov dword [esp + 0x5c], 0
mov ecx, dword [esp + 0x5c]
push 0x106
push 0x105
mov byte [esp + 0x5c], 0
call fcn.00406e80
lea ecx, [ebx + 4]
push ecx
mov ecx, dword [esp + 0x60]
lea eax, [ebp + 0x58]
push eax
call fcn.00406d70
mov edx, dword [esp + 0x5c]
push edx
mov ecx, esi
call fcn.0040a070
mov eax, dword [esp + 0x10]
mov cl, byte [eax + 0xd9]
test cl, cl
jne 0x43ca7b
cmp dword [esp + 0x68], 0x3c
jle 0x43ca7b
push 0x54
call sub.MFC71.DLL_operator_new
add esp, 4
mov dword [esp + 0x5c], eax
test eax, eax
mov byte [esp + 0x54], 6
je 0x43c9db
mov ecx, dword [esp + 0x68]
lea edx, [edi + ecx - 6]
push edx
mov ecx, esi
call fcn.0040a060
mov ecx, dword [esp + 0x60]
sub eax, 0x4e
push eax
add edi, 0x14
push edi
push 5
call fcn.0042f810
mov edi, eax
jmp 0x43c9dd
xor edi, edi
movzx eax, word [esp + 0x3a]
push eax
mov ecx, edi
mov byte [esp + 0x58], 0
call fcn.0042f860
add ebx, 8
push ebx
lea eax, [ebp + 0x58]
push eax
mov ecx, edi
call fcn.00406d70
push edi
mov ecx, esi
call fcn.0040a070
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0xc]
mov edx, dword [edi + 8]
mov ebx, dword [edi + 4]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x30], ecx
lea ecx, [eax + eax*4]
mov dword [esp + 0x2c], edx
lea edx, [ecx + ecx + 0x65]
push edx
lea eax, [esp + 0x2c]
push eax
push 0xd8
push ebp
lea ecx, [ebp + 0x80]
mov dword [esp + 0x38], ebx
call sub.MFC71.DLL_CToolTipCtrl::AddTool_1
mov ebx, dword [esp + 0x10]
mov eax, dword [ebx + 0xd4]
test eax, eax
mov dword [ebx + 0xe8], edi
jl 0x43ca66
push eax
push 0
push 0
mov ecx, edi
call fcn.00430180
jmp 0x43ca77
mov ecx, dword [esp + 0x24]
call fcn.00420170
push eax
mov ecx, ebx
call fcn.004388c0
mov edi, dword [esp + 0x60]
mov ecx, dword [esp + 0x1c]
push ecx
mov ecx, esi
call fcn.0040a070
mov ebx, dword [esp + 0x68]
cmp ebx, 0x32
jle 0x43cba4
mov eax, dword [esp + 0x10]
test eax, eax
push 0x44
jne 0x43cadd
call sub.MFC71.DLL_operator_new
add esp, 4
mov dword [esp + 0x5c], eax
test eax, eax
mov byte [esp + 0x54], 7
je 0x43cb1c
lea edx, [edi + ebx - 4]
push edx
mov ecx, esi
call fcn.0040a060
sub eax, 0x1a
push eax
lea eax, [edi + 0x14]
push eax
mov ecx, esi
call fcn.0040a060
mov ecx, dword [esp + 0x68]
sub eax, 0x40
push eax
call fcn.00434b60
jmp 0x43cb1e
call sub.MFC71.DLL_operator_new
add esp, 4
mov dword [esp + 0x5c], eax
test eax, eax
mov byte [esp + 0x54], 8
je 0x43cb1c
lea ecx, [edi + ebx - 4]
push ecx
mov ecx, esi
call fcn.0040a060
sub eax, 0x2c
push eax
lea edx, [edi + 0x14]
push edx
mov ecx, esi
call fcn.0040a060
mov ecx, dword [esp + 0x68]
sub eax, 0x4e
push eax
call fcn.00434b60
jmp 0x43cb1e
xor eax, eax
mov ebx, eax
mov eax, dword [ebx + 0x10]
mov ecx, dword [ebx + 0xc]
mov edx, dword [ebx + 4]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x64]
lea eax, [eax + eax*4 + 0x32]
mov dword [esp + 0x30], ecx
shl eax, 1
push eax
lea ecx, [esp + 0x2c]
push ecx
mov dword [esp + 0x30], edx
mov edx, dword [ebx + 8]
push 0xd7
push ebp
lea ecx, [ebp + 0x80]
mov byte [esp + 0x64], 0
mov dword [esp + 0x3c], edx
call sub.MFC71.DLL_CToolTipCtrl::AddTool_1
mov edx, dword [esp + 0x64]
push ebx
push edx
mov ecx, ebp
call fcn.0043bf70
push ebx
mov ecx, esi
call fcn.0040a070
mov al, byte [esp + 0x6c]
test al, al
jne 0x43cb87
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x43cba0
mov dl, byte [esp + 0x16]
push ecx
mov cx, word [esp + 0x18]
mov eax, esp
mov word [eax], cx
mov ecx, ebx
mov byte [eax + 2], dl
call fcn.00406d40
mov ebx, dword [esp + 0x68]
cmp ebx, 0x28
jle 0x43cf42
mov eax, dword [esp + 0x10]
test eax, eax
je 0x43cd74
push 0x3c
call sub.MFC71.DLL_operator_new
add esp, 4
mov dword [esp + 0x5c], eax
test eax, eax
mov byte [esp + 0x54], 9
je 0x43cbfc
lea eax, [edi + ebx - 0x14]
push eax
mov ecx, esi
call fcn.0040a060
sub eax, 0x20
push eax
add edi, 0x14
push edi
mov ecx, esi
call fcn.0040a060
mov ecx, dword [esp + 0x68]
sub eax, 0x2c
push eax
call fcn.0041bff0
mov edi, eax
jmp 0x43cbfe
xor edi, edi
push 1
mov ecx, edi
mov byte [esp + 0x58], 0
call fcn.0041c0e0
push edi
mov ecx, esi
call fcn.0040a070
mov ebx, dword [edi + 4]
mov edx, dword [edi + 8]
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0xc]
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x64]
lea ebx, [ebx + ebx*4]
mov dword [esp + 0x2c], edx
shl ebx, 1
lea edx, [ebx + 0x66]
push edx
mov dword [esp + 0x38], eax
lea eax, [esp + 0x2c]
push eax
push 0xd9
mov dword [esp + 0x3c], ecx
lea ecx, [ebp + 0x80]
push ebp
call sub.MFC71.DLL_CToolTipCtrl::AddTool_1
mov eax, dword [esp + 0x10]
mov cl, byte [eax + 0xd9]
test cl, cl
mov dword [eax + 0xe4], edi
jne 0x43cef4
cmp dword [esp + 0x68], 0x2d
jle 0x43cd5e
push 0x34
call sub.MFC71.DLL_operator_new
mov edi, eax
add esp, 4
mov dword [esp + 0x5c], edi
test edi, edi
mov byte [esp + 0x54], 0xa
je 0x43ccc0
mov ecx, dword [esp + 0x60]
add ecx, 0x2a
push ecx
mov ecx, esi
call fcn.0040a060
mov edx, dword [esp + 0x64]
sub eax, 5
push eax
add edx, 0x14
push edx
mov ecx, esi
call fcn.0040a060
sub eax, 0x19
push eax
mov ecx, edi
call fcn.00406e30
mov edi, eax
jmp 0x43ccc2
xor edi, edi
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0xdc]
test ecx, ecx
mov byte [esp + 0x54], 0
mov ecx, edi
je 0x43cce3
push 0xda
push 0xd9
jmp 0x43cced
push 0xdc
push 0xdb
call fcn.00406e80
mov ecx, dword [esp + 0x64]
shl ecx, 4
push ecx
lea edx, [ebp + 0x58]
push edx
mov ecx, edi
call fcn.00406d70
mov eax, dword [esp + 0x10]
mov cl, byte [eax + 0xd8]
test cl, cl
jne 0x43cd1c
push 1
mov ecx, edi
call fcn.00406d60
push edi
mov ecx, esi
call fcn.0040a070
mov ecx, dword [edi + 0xc]
mov eax, dword [edi + 0x10]
mov edx, dword [edi + 8]
mov edi, dword [edi + 4]
mov dword [esp + 0x30], ecx
add ebx, 0x67
push ebx
lea ecx, [esp + 0x2c]
push ecx
push 0xda
push ebp
lea ecx, [ebp + 0x80]
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], edx
mov dword [esp + 0x44], eax
call sub.MFC71.DLL_CToolTipCtrl::AddTool_1
mov eax, dword [esp + 0x10]
mov cl, byte [eax + 0xd9]
test cl, cl
jne 0x43cef4
mov edi, dword [esp + 0x60]
mov ebx, dword [esp + 0x68]
cmp ebx, 0x46
jle 0x43ce39
push 0x34
call sub.MFC71.DLL_operator_new
mov ebx, eax
add esp, 4
mov dword [esp + 0x5c], ebx
test ebx, ebx
mov byte [esp + 0x54], 0xb
je 0x43cdbf
lea edx, [edi + 0x43]
push edx
mov ecx, esi
call fcn.0040a060
sub eax, 5
push eax
add edi, 0x2d
push edi
mov ecx, esi
call fcn.0040a060
sub eax, 0x19
push eax
mov ecx, ebx
call fcn.00406e30
mov edi, eax
jmp 0x43cdc1
xor edi, edi
push 0x143
push 0x142
mov ecx, edi
mov byte [esp + 0x5c], 0
call fcn.00406e80
mov ebx, dword [esp + 0x64]
mov eax, ebx
shl eax, 4
add eax, 5
push eax
lea ecx, [ebp + 0x58]
push ecx
mov ecx, edi
call fcn.00406d70
push edi
mov ecx, esi
call fcn.0040a070
mov edx, dword [edi + 8]
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0xc]
mov edi, dword [edi + 4]
mov dword [esp + 0x2c], edx
lea edx, [ebx + ebx*4]
mov dword [esp + 0x34], eax
mov dword [esp + 0x30], ecx
lea eax, [edx + edx + 0x68]
push eax
lea ecx, [esp + 0x2c]
push ecx
push 0xea
push ebp
lea ecx, [ebp + 0x80]
mov dword [esp + 0x38], edi
call sub.MFC71.DLL_CToolTipCtrl::AddTool_1
mov edi, dword [esp + 0x60]
mov ebx, dword [esp + 0x68]
cmp ebx, 0x5f
jle 0x43cefc
push 0x34
call sub.MFC71.DLL_operator_new
mov ebx, eax
add esp, 4
mov dword [esp + 0x5c], ebx
test ebx, ebx
mov byte [esp + 0x54], 0xc
je 0x43ce84
lea edx, [edi + 0x5c]
push edx
mov ecx, esi
call fcn.0040a060
sub eax, 5
push eax
add edi, 0x46
push edi
mov ecx, esi
call fcn.0040a060
sub eax, 0x19
push eax
mov ecx, ebx
call fcn.00406e30
mov edi, eax
jmp 0x43ce86
xor edi, edi
push 0x141
push 0x144
mov ecx, edi
mov byte [esp + 0x5c], 0
call fcn.00406e80
mov ebx, dword [esp + 0x64]
mov eax, ebx
shl eax, 4
inc eax
push eax
lea ecx, [ebp + 0x58]
push ecx
mov ecx, edi
call fcn.00406d70
push edi
mov ecx, esi
call fcn.0040a070
mov edx, dword [edi + 8]
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0xc]
mov edi, dword [edi + 4]
mov dword [esp + 0x2c], edx
lea edx, [ebx + ebx*4]
mov dword [esp + 0x34], eax
mov dword [esp + 0x30], ecx
lea eax, [edx + edx + 0x69]
push eax
lea ecx, [esp + 0x2c]
push ecx
push 0xeb
push ebp
lea ecx, [ebp + 0x80]
mov dword [esp + 0x38], edi
call sub.MFC71.DLL_CToolTipCtrl::AddTool_1
mov edi, dword [esp + 0x60]
mov ebx, dword [esp + 0x68]
mov al, byte [esp + 0x6c]
test al, al
jne 0x43cf0c
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x43cf71
push 0x2c
call sub.MFC71.DLL_operator_new
mov ebp, eax
add esp, 4
mov dword [esp + 0x6c], ebp
test ebp, ebp
mov byte [esp + 0x54], 0xd
je 0x43cf56
lea edx, [edi + ebx]
push edx
mov ecx, esi
call fcn.0040a060
push eax
add edi, 0xf
push edi
push 0
mov ecx, ebp
call fcn.004351f0
mov edi, eax
jmp 0x43cf58
mov eax, dword [esp + 0x10]
test eax, eax
je 0x43cefc
mov dword [eax + 0xe4], 0
jmp 0x43cefc
xor edi, edi
lea eax, [esp + 0x14]
push eax
mov ecx, edi
mov byte [esp + 0x58], 0
call fcn.00435240
push edi
mov ecx, esi
call fcn.0040a070
lea ecx, [esp + 0x20]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
mov ecx, dword [esp + 0x4c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x48
ret 0x14