Function at 0x41ef10
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x562058
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x60
mov eax, dword [0x5d2d10]
push ebx
push esi
push edi
mov esi, ecx
mov dword [esp + 0xc], eax
xor ebx, ebx
lea ecx, [esp + 0x10]
push ebx
push esi
push ecx
push 0x50000000
push 0x5d7b88
lea ecx, [esi + 0x2ac]
mov dword [esp + 0x88], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.00544c29
push ebx
lea edx, [esp + 0x14]
push esi
push edx
push 0x50000000
push 0x5d7b88
lea ecx, [esi + 0x2e8]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.00544c29
push ebx
lea eax, [esp + 0x14]
push esi
push eax
push 0x50000000
push 0x5d7b88
lea ecx, [esi + 0x324]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.00544c29
push ebx
lea ecx, [esp + 0x14]
push esi
push ecx
push 0x50000000
push 0x5d7b88
lea ecx, [esi + 0x360]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.00544c29
push ebx
lea edx, [esp + 0x14]
push esi
push edx
push 0x50000000
push 0x5d7b88
lea ecx, [esi + 0x39c]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.00544c29
push ebx
lea eax, [esp + 0x14]
push esi
push eax
push 0x50000000
push 0x5d7b88
lea ecx, [esi + 0x3d8]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.00544c29
push ebx
lea ecx, [esp + 0x14]
push esi
push ecx
push 0x50000000
push 0x5d7b88
lea ecx, [esi + 0x414]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.00544c29
push ebx
lea edx, [esp + 0x14]
push esi
push edx
push 0x50000000
push 0x5d7b88
lea ecx, [esi + 0x450]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.00544c29
lea eax, [esp + 0x10]
push 0xe86b
push eax
call fcn.004ef2a0
add esp, 8
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x78], 1
call fcn.00530cc8
lea ecx, [esp + 0x10]
mov byte [esp + 0x74], bl
call fcn.00530b8f
mov ecx, dword [esp + 0xc]
mov edi, dword [sym.imp.USER32.dll_SetRect]
lea edx, [esp + 0x20]
mov eax, dword [ecx - 8]
mov ecx, dword [esi + 0x4b8]
inc eax
push ecx
imul eax, dword [esi + 0x4b4]
push eax
push ebx
push ebx
push edx
call edi
mov ecx, dword [esp + 0xc]
push 0x8176
lea eax, [esp + 0x24]
push esi
push eax
push 0x50000002
push ecx
lea ecx, [esi + 0xbc]
call fcn.00544c29
test eax, eax
jne 0x41f13d
lea ecx, [esp + 0xc]
mov dword [esp + 0x74], 0xffffffff
call fcn.00530b8f
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
add esp, 0x6c
ret
mov eax, dword [esi + 0x4b4]
push 0x8c
lea edx, [esp + 0x24]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
add eax, eax
push eax
push ebx
push ebx
push edx
call edi
push 0x8175
lea eax, [esp + 0x24]
push esi
push eax
push 0x50210242
lea ecx, [esi + 0xf8]
call fcn.00544e48
test eax, eax
je 0x41f3f4
lea ecx, [esp + 0x10]
push 0xe86c
push ecx
call fcn.004ef2a0
add esp, 8
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x78], 2
call fcn.00530cc8
lea ecx, [esp + 0x10]
mov byte [esp + 0x74], bl
call fcn.00530b8f
mov edx, dword [esp + 0xc]
mov ecx, dword [esi + 0x4b8]
push ecx
mov eax, dword [edx - 8]
add eax, 2
imul eax, dword [esi + 0x4b4]
push eax
push ebx
lea eax, [esp + 0x2c]
push ebx
push eax
call edi
mov edx, dword [esp + 0xc]
push ebx
lea ecx, [esp + 0x24]
push esi
push ecx
push 0x50000002
push edx
lea ecx, [esi + 0x138]
call fcn.00544c29
test eax, eax
je 0x41f3f4
mov eax, dword [esi + 0x4b8]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], eax
fild qword [esp + 0x10]
fmul qword [0x581368]
call fcn.0051559c
mov ecx, dword [esi + 0x4b4]
push eax
lea ecx, [ecx + ecx*4]
shl ecx, 2
push ecx
push ebx
lea ecx, [esp + 0x2c]
push ebx
push ecx
call edi
push ebx
push 0x8177
lea edx, [esp + 0x28]
push esi
push edx
push 0x50010080
push ebx
push str.EDIT
push 0x200
lea ecx, [esi + 0x174]
call fcn.0052df57
test eax, eax
je 0x41f3f4
lea eax, [esp + 0x10]
push 0xe86d
push eax
call fcn.004ef2a0
add esp, 8
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x78], 3
call fcn.00530cc8
lea ecx, [esp + 0x10]
mov byte [esp + 0x74], bl
call fcn.00530b8f
mov ecx, dword [esp + 0xc]
lea edx, [esp + 0x20]
mov eax, dword [ecx - 8]
mov ecx, dword [esi + 0x4b8]
inc eax
push ecx
imul eax, dword [esi + 0x4b4]
push eax
push ebx
push ebx
push edx
call edi
mov ecx, dword [esp + 0xc]
push ebx
lea eax, [esp + 0x24]
push esi
push eax
push 0x50000002
push ecx
lea ecx, [esi + 0x1b4]
call fcn.00544c29
test eax, eax
je 0x41f3f4
mov edx, dword [esi + 0x4b8]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], edx
fild qword [esp + 0x10]
fmul qword [0x581368]
call fcn.0051559c
mov ecx, dword [esi + 0x4b4]
push eax
lea eax, [esp + 0x24]
lea ecx, [ecx + ecx*4]
shl ecx, 2
push ecx
push ebx
push ebx
push eax
call edi
push ebx
push 0x8179
lea ecx, [esp + 0x28]
push esi
push ecx
push 0x500100a0
push ebx
push str.EDIT
push 0x200
lea ecx, [esi + 0x1f0]
call fcn.0052df57
test eax, eax
je 0x41f3f4
lea edx, [esp + 0x10]
push 0xe86e
push edx
call fcn.004ef2a0
add esp, 8
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x78], 4
call fcn.00530cc8
lea ecx, [esp + 0x10]
mov byte [esp + 0x74], bl
call fcn.00530b8f
mov eax, dword [esp + 0xc]
mov edx, dword [esi + 0x4b8]
push edx
mov ecx, dword [eax - 8]
mov eax, dword [esi + 0x4b4]
imul eax, ecx
push eax
push ebx
lea ecx, [esp + 0x2c]
push ebx
push ecx
call edi
mov eax, dword [esp + 0xc]
push ebx
lea edx, [esp + 0x24]
push esi
push edx
push 0x50000002
push eax
lea ecx, [esi + 0x230]
call fcn.00544c29
test eax, eax
je 0x41f3f4
mov ecx, dword [esi + 0x4b8]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], ecx
fild qword [esp + 0x10]
fmul qword [0x581368]
call fcn.0051559c
mov ecx, dword [esi + 0x4b4]
push eax
lea edx, [esp + 0x24]
lea ecx, [ecx + ecx*8]
push ecx
push ebx
push ebx
push edx
call edi
push ebx
push 0x817b
lea eax, [esp + 0x28]
push esi
push eax
push 0x50012080
push ebx
push str.EDIT
push 0x200
lea ecx, [esi + 0x26c]
call fcn.0052df57
test eax, eax
jne 0x41f419
lea ecx, [esp + 0xc]
mov dword [esp + 0x74], 0xffffffff
call fcn.00530b8f
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
add esp, 0x6c
ret
call fcn.004f14e0
test eax, eax
push 0x11
je 0x41f460
mov edi, dword [sym.imp.GDI32.dll_GetStockObject]
call edi
cmp eax, ebx
jne 0x41f434
push 0xd
call edi
lea ecx, [esp + 0x30]
push ecx
push 0x3c
push eax
call dword [sym.imp.GDI32.dll_GetObjectA]
xor eax, eax
mov cl, byte [eax + str.MS_Shell_Dlg_2]
mov byte [esp + eax + 0x4c], cl
inc eax
cmp cl, bl
jne 0x41f444
lea edx, [esp + 0x30]
push edx
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
jmp 0x41f466
call dword [sym.imp.GDI32.dll_GetStockObject]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
mov dword [esi + 0x4b0], eax
push eax
mov eax, dword [esi + 0xd8]
push 0x30
push eax
call edi
mov eax, dword [esi + 0x4b0]
mov ecx, dword [esi + 0x114]
push ebx
push eax
push 0x30
push ecx
call edi
mov eax, dword [esi + 0x4b0]
mov edx, dword [esi + 0x154]
push ebx
push eax
push 0x30
push edx
call edi
mov eax, dword [esi + 0x4b0]
push ebx
push eax
mov eax, dword [esi + 0x190]
push 0x30
push eax
call edi
mov eax, dword [esi + 0x4b0]
mov ecx, dword [esi + 0x1d0]
push ebx
push eax
push 0x30
push ecx
call edi
mov eax, dword [esi + 0x4b0]
mov edx, dword [esi + 0x20c]
push ebx
push eax
push 0x30
push edx
call edi
mov eax, dword [esi + 0x4b0]
push ebx
push eax
mov eax, dword [esi + 0x24c]
push 0x30
push eax
call edi
mov eax, dword [esi + 0x4b0]
mov ecx, dword [esi + 0x288]
push ebx
push eax
push 0x30
push ecx
call edi
mov ecx, 0x66d030
call fcn.004d2550
test eax, eax
mov ecx, esi
je 0x41f526
call fcn.00420fd0
test eax, eax
je 0x41f52b
mov ecx, esi
call fcn.0041fa00
jmp 0x41f52b
call fcn.004211f0
lea ecx, [esp + 0xc]
mov dword [esp + 0x74], 0xffffffff
call fcn.00530b8f
mov ecx, dword [esp + 0x6c]
pop edi
pop esi
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x6c
ret