Function at 0x40991d
Capabilities:
Link many functions at runtime

Disassembly:
push ebx
push ebp
push esi
push edi
push dword [0x75bdfc]
call fcn.00413039
mov ebx, eax
call fcn.0041243e
call fcn.0040acab
xor ebp, ebp
cmp dword [0x75b7a0], ebp
jne 0x409aa9
mov esi, 0xa4
push esi
push ebp
push 0x75b7b0
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [0x75b7b4], esi
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x75b7b0], 0x16
mov dword [0x75b7b8], 0x4095fb
push str.MSFTEDIT.DLL
mov dword [0x75b7d0], 0x409510
mov dword [0x75b7c8], 0x4098ec
mov dword [0x75b7cc], 0x409e47
mov dword [0x75b7e4], 0x409642
mov dword [0x75b7dc], 0x409628
mov dword [0x75b7d8], 0x409c17
mov dword [0x75b7f0], 0x40987d
mov dword [0x75b7f4], 0x409dc7
mov dword [0x75b818], 0x409800
mov dword [0x75b81c], 0x409ca5
mov dword [0x75b82c], 0x40984d
mov dword [0x75b828], 0x409d08
mov dword [0x75b848], 0x409873
mov dword [0x75b84c], 0x409da2
call esi
push str.RICHED20.DLL
mov dword [0x75b7a4], eax
call esi
mov dword [0x75b7a8], eax
test eax, eax
jne 0x409a29
push str.RICHED32.DLL
call esi
mov eax, dword [0x75b37c]
test eax, eax
je 0x409a9f
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.OpenThemeData
push eax
call esi
push str.CloseThemeData
push dword [0x75b37c]
mov dword [0x75b854], eax
call esi
push str.GetThemeBackgroundContentRect
push dword [0x75b37c]
mov dword [0x75b858], eax
call esi
push str.IsThemeBackgroundPartiallyTransparent
push dword [0x75b37c]
mov dword [0x75b85c], eax
call esi
push str.DrawThemeParentBackground
push dword [0x75b37c]
mov dword [0x75b860], eax
call esi
push str.DrawThemeBackground
push dword [0x75b37c]
mov dword [0x75b864], eax
call esi
mov dword [0x75b868], eax
mov dword [0x75b7a0], 1
mov esi, dword [0x75b378]
neg esi
sbb esi, esi
and esi, 0xfffffe00
add esi, 0x200
cmp dword [0x75b7a4], ebp
je 0x409ace
mov edi, str.RICHEDIT50W
jmp 0x409ae0
mov edi, str.RichEdit20W
cmp dword [0x75b7a8], ebp
jne 0x409ae0
mov edi, str.RichEdit
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.0040c82d
mov eax, dword [esp + 0x28]
push ebp
push dword [0x75b1c4]
or eax, 0x503111c4
push 0xffffffffffffffff
push dword [ebx]
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x34]
push dword [esp + 0x34]
push eax
push ebp
push edi
push esi
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov esi, eax
test esi, esi
je 0x409c09
push dword [esp + 0x14]
push dword [0x75be18]
call fcn.004131e9
mov edi, eax
push 0x10
push 8
or dword [edi + 0x18], 0xffffffff
or dword [edi + 0x14], 0xffffffff
mov ecx, dword [ebx + 8]
mov dword [edi + 0x1c], ecx
push dword [0x75b1c0]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
push eax
push str.PB_ClientRect
push esi
call dword [sym.imp.USER32.dll_SetPropW]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push ebp
push 0xffffffffffffffff
push 0xc5
push esi
call ebx
push ebp
push 1
push 0x459
push esi
call ebx
push 0x40966d
push 0xfffffffffffffffc
push esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 0x37
push ebp
push ebp
push ebp
push ebp
push ebp
push esi
mov dword [0x75b7ac], eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0x541
push ebp
push ebp
push esi
call dword [sym.imp.USER32.dll_RedrawWindow]
push ebp
push ebp
push 0x43b
push esi
call ebx
or eax, 1
push eax
push ebp
push 0x445
push esi
call ebx
cmp dword [0x75b7a4], ebp
je 0x409be3
push 4
push 4
push 0x513
push esi
call ebx
push 0x75b7b0
push esi
push edi
push dword [esp + 0x20]
call fcn.0040ae79
mov esi, eax
mov eax, 0x10000000
test dword [esp + 0x28], eax
je 0x409c09
push 1
push eax
push edi
call fcn.00409ca5
call fcn.0041244d
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
ret 0x18