Function at 0x41ae70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x50cd96
mov eax, dword fs:[0]
push eax
sub esp, 0x118
mov eax, dword [0x5416a0]
xor eax, esp
mov dword [esp + 0x114], eax
push ebx
push ebp
push esi
mov eax, dword [0x5416a0]
xor eax, esp
push eax
lea eax, [esp + 0x128]
mov dword fs:[0], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x50]
mov esi, ecx
lea ecx, [esp + 0x78]
push ecx
mov ecx, edi
call edx
test eax, eax
je 0x41b233
mov ecx, dword [esi + 0x20]
lea eax, [esp + 0x88]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [esi + 0x9c]
push edx
lea eax, [esp + 0x7c]
push eax
mov ecx, edi
call fcn.0047fc13
mov ecx, dword [esi + 0x20]
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x1200
push ecx
call ebx
mov edx, dword [esi + 0x94]
push edx
push 1
mov ebp, eax
push 0
lea ecx, [esp + 0x44]
mov dword [esp + 0x38], ebp
call fcn.0047f639
mov dword [esp + 0x130], 0
mov eax, dword [esi + 0x98]
push eax
push 1
push 0
lea ecx, [esp + 0x3c]
call fcn.0047f639
mov byte [esp + 0x130], 1
mov ecx, dword [edi + 8]
push 1
push ecx
call dword [sym.imp.GDI32.dll_GetCurrentObject]
push eax
call fcn.0047f4b9
mov edx, dword [esi + 0x20]
push 0
push 0
push 0x31
push edx
mov dword [esp + 0x50], eax
call ebx
push eax
call fcn.0047f4b9
mov edx, dword [edi]
push eax
mov eax, dword [edx + 0x28]
mov ecx, edi
call eax
mov edx, dword [edi]
mov edx, dword [edx + 0x2c]
mov dword [esp + 0x44], eax
mov eax, dword [esi + 0x9c]
push eax
mov ecx, edi
call edx
mov ecx, dword [esi + 0xa0]
mov eax, dword [edi]
mov edx, dword [eax + 0x30]
push ecx
mov ecx, edi
call edx
xor eax, eax
cmp ebp, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x24], eax
jle 0x41b1d5
mov eax, dword [esp + 0x24]
mov ecx, dword [esi + 0x20]
push 0
push eax
push 0x120f
push ecx
call ebx
mov ecx, dword [esi + 0x20]
mov ebp, eax
lea eax, [esp + 0x98]
push eax
push ebp
push 0x1203
lea edx, [esp + 0xe0]
push ecx
mov dword [esp + 0xa8], 0x37
mov dword [esp + 0xb0], edx
mov dword [esp + 0xb8], 0x50
call ebx
mov eax, dword [esi + 0x20]
lea edx, [esp + 0x14]
push edx
push ebp
push 0x1207
push eax
call ebx
mov ecx, dword [esp + 0x1c]
cmp ecx, dword [esp + 0x78]
jge 0x41b01d
mov edx, dword [esp + 0x14]
cmp edx, dword [esp + 0x80]
jg 0x41b180
test dword [esp + 0xac], 0x8000
je 0x41b094
mov ecx, esi
mov dword [esp + 0x48], 4
call fcn.0048563a
mov ecx, dword [esi + 0x20]
mov edx, dword [edi + 4]
mov dword [esp + 0x5c], ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x4c], eax
xor eax, eax
mov dword [esp + 0x68], edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x58], eax
mov dword [esp + 0x74], eax
mov eax, dword [esi]
lea ecx, [esp + 0x48]
mov dword [esp + 0x70], edx
mov edx, dword [eax + 0x13c]
push ecx
mov ecx, esi
mov dword [esp + 0x54], ebp
mov dword [esp + 0x58], 1
call edx
jmp 0x41b0eb
mov eax, dword [esi + 0x70]
mov ebp, dword [sym.imp.USER32.dll_InflateRect]
push 0
neg eax
push eax
lea eax, [esp + 0x1c]
push eax
call ebp
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
mov edx, dword [edx + 0x140]
lea eax, [esp + 0x98]
push eax
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x34]
mov dword [eax + 0xc], ecx
push edi
mov ecx, esi
call edx
mov eax, dword [esi + 0x70]
push 0
push eax
lea eax, [esp + 0x1c]
push eax
call ebp
mov ecx, dword [esp + 0x2c]
add ecx, 0xffffffff
cmp dword [esp + 0x24], ecx
jge 0x41b180
cmp dword [esi + 0x60], 0
je 0x41b180
lea edx, [esp + 0x30]
push edx
mov ecx, edi
call fcn.0047f59f
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
add eax, 2
push eax
add ecx, 0xffffffff
push ecx
lea edx, [esp + 0xcc]
push edx
mov ecx, edi
call fcn.0047ef09
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
add eax, 0xfffffffe
add ecx, 0xffffffff
push eax
push ecx
mov ecx, edi
call fcn.0047ec39
lea edx, [esp + 0x38]
push edx
mov ecx, edi
call fcn.0047f59f
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
add eax, 2
push eax
push ecx
lea edx, [esp + 0xd4]
push edx
mov ecx, edi
call fcn.0047ef09
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
add eax, 0xfffffffe
push eax
push ecx
mov ecx, edi
call fcn.0047ec39
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x9c]
add dword [esp + 0x28], edx
add eax, 1
cmp eax, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
jl 0x41afa5
mov eax, dword [esp + 0x28]
test eax, eax
jle 0x41b1d5
mov ecx, dword [esp + 0x88]
mov edx, dword [esi + 0x98]
add ecx, eax
mov eax, dword [esi + 0x94]
push edx
mov dword [esp + 0x94], ecx
push eax
lea ecx, [esp + 0x90]
push ecx
mov ecx, edi
call fcn.0047fed9
mov edx, dword [edi]
mov eax, dword [esp + 0x44]
mov edx, dword [edx + 0x28]
push eax
mov ecx, edi
call edx
mov eax, dword [esp + 0x40]
push eax
mov ecx, edi
call fcn.0047f59f
lea ecx, [esp + 0x38]
call fcn.0047f51a
lea ecx, [esp + 0x30]
call fcn.0047f51a
mov byte [esp + 0x130], 0
mov esi, vtable.CGdiObject.0
lea ecx, [esp + 0x30]
mov dword [esp + 0x30], esi
call fcn.0047f51a
mov dword [esp + 0x130], 0xffffffff
lea ecx, [esp + 0x38]
mov dword [esp + 0x38], esi
call fcn.0047f51a
mov ecx, dword [esp + 0x128]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x114]
xor ecx, esp
call fcn.00495e54
add esp, 0x124
ret