Function at 0x45e3f0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4b7e03
mov eax, dword fs:[0]
push eax
sub esp, 0x170
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4e02dc]
xor eax, esp
push eax
lea eax, [esp + 0x184]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x18c], 2
mov eax, dword [edi + 0x4b0]
mov ecx, dword [edi + 0x4ac]
mov edx, dword [edi + 0x4a8]
mov esi, dword [edi + 0x4a4]
push eax
push ecx
push edx
push esi
mov esi, dword [sym.imp.GDI32.dll_CreateRectRgn]
call esi
mov ecx, dword [edi + 0x4bc]
mov edx, dword [edi + 0x4b8]
mov ebx, dword [edi + 0x4b4]
mov ebp, eax
mov eax, dword [edi + 0x4c0]
push eax
push ecx
push edx
push ebx
mov dword [esp + 0x60], ebp
call esi
mov ebx, 3
push ebx
push eax
push ebp
push ebp
mov dword [esp + 0x40], eax
call dword [sym.imp.GDI32.dll_CombineRgn]
mov esi, dword [esp + 0x194]
push ebp
push esi
call dword [sym.imp.GDI32.dll_SelectClipRgn]
lea eax, [esp + 0x18]
push eax
push esi
mov dword [esp + 0x20], 0
call sub.gdiplus.dll_GdipCreateFromHDC
mov esi, dword [esp + 0x18]
lea ecx, [esp + 0x1c]
push ecx
push 0x7f000000
mov dword [esp + 0x5c], esi
mov dword [esp + 0x24], 0
call sub.gdiplus.dll_GdipCreateSolidFill
mov eax, dword [edi + 0x4b0]
sub eax, dword [edi + 0x4a8]
mov ecx, dword [edi + 0x4ac]
sub ecx, dword [edi + 0x4a4]
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [edi + 0x4a8]
push ecx
push eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x30], edx
mov edx, dword [edi + 0x4a4]
push edx
push eax
push esi
call sub.gdiplus.dll_GdipFillRectangleI
mov ecx, dword [esp + 0x24]
push ecx
call sub.gdiplus.dll_GdipDeleteBrush
mov edx, esi
push edx
call sub.gdiplus.dll_GdipDeleteGraphics
xor eax, eax
lea esi, [esp + 0x5c]
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
call fcn.0044a0f0
mov byte [esp + 0x18c], bl
mov ecx, dword [edi + 0x4b8]
mov eax, dword [edi + 0x4b4]
mov edx, dword [edi + 0x4bc]
push 0x1c
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], eax
mov eax, dword [edi + 0x4c0]
push 0x1c
lea ecx, [esp + 0x28]
push ecx
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], eax
call dword [sym.imp.USER32.dll_InflateRect]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
sub edx, eax
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x2c]
push 1
push ecx
sub eax, ecx
mov dword [esp + 0x48], ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ecx
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], eax
call fcn.0045f170
push ecx
mov byte [esp + 0x198], 4
mov edx, esp
mov dword [esp + 0x28], esp
push edx
mov ecx, 0x4c21f4
call fcn.00407450
mov ecx, esi
mov byte [esp + 0x198], bl
call fcn.0044a9e0
mov edx, dword [esp + 0x5c]
lea eax, [esp + 0x18]
push eax
mov eax, dword [edx + 0x4c]
xor esi, esi
lea ecx, [esp + 0x38]
push ecx
push esi
push 0x47
push esi
lea ecx, [esp + 0x70]
mov dword [esp + 0x2c], esi
mov dword [esp + 0x16c], esi
call eax
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ecx
mov ecx, 0x4cb954
call fcn.00407450
push ecx
mov byte [esp + 0x198], 5
mov edx, esp
mov dword [esp + 0x28], esp
push edx
mov ecx, str.margin_left
call fcn.00407450
lea ecx, [esp + 0x68]
mov byte [esp + 0x198], bl
call fcn.0044a9e0
push 1
push ecx
mov eax, esp
mov dword [esp + 0x20], esp
push eax
mov ecx, 0x4cb954
call fcn.00407450
push ecx
mov ecx, esp
mov byte [esp + 0x198], 6
mov dword [esp + 0x28], esp
push ecx
mov ecx, str.margin_right
call fcn.00407450
lea ecx, [esp + 0x68]
mov byte [esp + 0x198], bl
call fcn.0044a9e0
push 1
push ecx
mov edx, esp
mov dword [esp + 0x20], esp
push edx
mov ecx, 0x4cb954
call fcn.00407450
push ecx
mov byte [esp + 0x198], 7
mov eax, esp
mov dword [esp + 0x28], esp
push eax
mov ecx, str.margin_top
call fcn.00407450
lea ecx, [esp + 0x68]
mov byte [esp + 0x198], bl
call fcn.0044a9e0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ecx
mov ecx, 0x4cb954
call fcn.00407450
push ecx
mov byte [esp + 0x198], 8
mov edx, esp
mov dword [esp + 0x28], esp
push edx
mov ecx, str.margin_bottom
call fcn.00407450
lea ecx, [esp + 0x68]
mov byte [esp + 0x198], bl
call fcn.0044a9e0
push 1
push ecx
mov eax, esp
mov dword [esp + 0x20], esp
push eax
mov ecx, str.dlg_shadow_ex
call fcn.00407450
push ecx
mov ecx, esp
mov byte [esp + 0x198], 9
mov dword [esp + 0x28], esp
push ecx
mov ecx, str.skin
call fcn.00407450
lea ecx, [esp + 0x68]
mov byte [esp + 0x198], bl
call fcn.0044a9e0
mov edi, dword [esp + 0x194]
mov eax, dword [esp + 0x5c]
lea edx, [esp + 0x18]
push edx
mov edx, dword [eax + 0x4c]
push esi
push edi
push 0xf
push esi
lea ecx, [esp + 0x70]
mov dword [esp + 0x2c], esi
mov dword [esp + 0x16c], esi
call edx
mov byte [esp + 0x18c], 0xa
mov eax, dword [esp + 0x178]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x45e785
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x18c], 2
call fcn.00436cb0
push esi
push edi
call dword [sym.imp.GDI32.dll_SelectClipRgn]
mov eax, dword [esp + 0x30]
cmp eax, esi
mov edi, dword [sym.imp.GDI32.dll_DeleteObject]
je 0x45e7af
push eax
call edi
cmp ebp, esi
je 0x45e7b6
push ebp
call edi
mov ecx, dword [esp + 0x184]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x17c
ret 4