Function at 0x41a440
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x480470
mov eax, dword fs:[0]
push eax
sub esp, 0x68
mov eax, dword [0x49e128]
xor eax, esp
mov dword [esp + 0x64], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x49e128]
xor eax, esp
push eax
lea eax, [esp + 0x7c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x8c]
mov edi, dword [esp + 0x90]
xor ebx, ebx
mov esi, ecx
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x200
push 0x56001409
push ebx
push ecx
mov dword [esi + 0x5c], 0xffffffff
mov dword [esi + 0x3c], ebx
mov byte [esi + 0x38], bl
mov byte [esi + 0x61], bl
mov dword [esi + 0x74], ebx
mov dword [esi + 0x78], ebx
mov dword [esi + 0x7c], ebx
mov dword [ecx], ebx
mov ecx, esp
mov dword [esp + 0x2c], esp
mov dword [ecx], section..data
push eax
mov ecx, esi
call fcn.004183e0
mov eax, dword [esi + 4]
push 1
push edi
push 0x30
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x58
lea ecx, [esp + 0x24]
push ebx
push ecx
mov dword [esp + 0x28], ebx
call fcn.004611e0
add esp, 0xc
mov dword [esp + 0x18], edi
mov dword [esp + 0x84], ebx
lea edx, [esp + 0x1c]
push edx
push 0x5c
push edi
call dword [sym.imp.GDI32.dll_GetObjectW]
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0x35], 1
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov edi, eax
mov eax, dword [esi + 0x34]
cmp eax, ebx
je 0x41a527
cmp eax, edi
je 0x41a527
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push 0x2000
push ebx
push 0xff00ff
push ebx
push 0x18
mov dword [esi + 0x34], edi
mov ecx, dword [0x49fb20]
push 0xcf
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_LoadImageW]
push ebx
push ebx
push 0xff
push 0x18
push 0x18
mov ebp, eax
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
push 0xffffff
mov edx, eax
push edx
mov dword [esi + 0x2c], eax
call dword [sym.imp.COMCTL32.dll_ImageList_SetBkColor]
mov ebx, dword [sym.imp.COMCTL32.dll_ImageList_GetImageCount]
push ebp
xor edi, edi
call ebx
test eax, eax
jle 0x41a5a1
lea ecx, [ecx]
push 0
push edi
push ebp
call dword [sym.imp.COMCTL32.dll_ImageList_GetIcon]
push eax
mov eax, dword [esi + 0x2c]
push 0xffffffffffffffff
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push ebp
add edi, 1
call ebx
cmp edi, eax
jl 0x41a580
test ebp, ebp
je 0x41a5ac
push ebp
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
mov ecx, dword [0x49c024]
mov ebp, dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edx, str..exe
shr edx, 0x10
mov dword [esp + 0x14], ecx
jne 0x41a5da
mov eax, str..exe
movzx eax, ax
push eax
lea ecx, [esp + 0x18]
call fcn.0040d1b0
jmp 0x41a615
push str..exe
call ebp
mov edi, eax
test edi, edi
je 0x41a615
push edi
lea ecx, [esp + 0x18]
call fcn.00401570
test eax, eax
je 0x41a615
mov ecx, dword [esp + 0x14]
lea eax, [edi + edi]
push eax
push str..exe
add eax, 2
push eax
push ecx
call fcn.004606b1
push eax
call fcn.00401030
add esp, 0x14
mov byte [esp + 0x84], 1
lea edx, [esp + 0x14]
lea ebx, [esi + 0x40]
push edx
mov ecx, ebx
call fcn.00419ce0
mov dword [eax], 5
mov byte [esp + 0x84], 0
mov edi, dword [esp + 0x14]
lea eax, [edi - 0xc]
cmp eax, dword [0x49c020]
je 0x41a660
add edi, 0xfffffff4
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x41a660
push edi
call fcn.00460edd
add esp, 4
mov ecx, dword [0x49c024]
mov edx, str..cmd
shr edx, 0x10
mov dword [esp + 0x14], ecx
jne 0x41a688
mov eax, str..cmd
movzx eax, ax
push eax
lea ecx, [esp + 0x18]
call fcn.0040d1b0
jmp 0x41a6c3
push str..cmd
call ebp
mov edi, eax
test edi, edi
je 0x41a6c3
push edi
lea ecx, [esp + 0x18]
call fcn.00401570
test eax, eax
je 0x41a6c3
mov ecx, dword [esp + 0x14]
lea eax, [edi + edi]
push eax
push str..cmd
add eax, 2
push eax
push ecx
call fcn.004606b1
push eax
call fcn.00401030
add esp, 0x14
mov byte [esp + 0x84], 2
lea edx, [esp + 0x14]
push edx
mov ecx, ebx
call fcn.00419ce0
mov dword [eax], 5
mov byte [esp + 0x84], 0
mov edi, dword [esp + 0x14]
lea eax, [edi - 0xc]
cmp eax, dword [0x49c020]
je 0x41a70b
add edi, 0xfffffff4
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x41a70b
push edi
call fcn.00460edd
add esp, 4
mov ecx, dword [0x49c024]
mov edx, str..bat
shr edx, 0x10
mov dword [esp + 0x14], ecx
jne 0x41a733
mov eax, str..bat
movzx eax, ax
push eax
lea ecx, [esp + 0x18]
call fcn.0040d1b0
jmp 0x41a76e
push str..bat
call ebp
mov edi, eax
test edi, edi
je 0x41a76e
push edi
lea ecx, [esp + 0x18]
call fcn.00401570
test eax, eax
je 0x41a76e
mov ecx, dword [esp + 0x14]
lea eax, [edi + edi]
push eax
push str..bat
add eax, 2
push eax
push ecx
call fcn.004606b1
push eax
call fcn.00401030
add esp, 0x14
mov byte [esp + 0x84], 3
lea edx, [esp + 0x14]
push edx
mov ecx, ebx
call fcn.00419ce0
mov dword [eax], 5
mov byte [esp + 0x84], 0
mov edi, dword [esp + 0x14]
lea eax, [edi - 0xc]
cmp eax, dword [0x49c020]
je 0x41a7b6
add edi, 0xfffffff4
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x41a7b6
push edi
call fcn.00460edd
add esp, 4
mov ecx, dword [0x49c024]
mov edx, str..pif
shr edx, 0x10
mov dword [esp + 0x14], ecx
jne 0x41a7de
mov eax, str..pif
movzx eax, ax
push eax
lea ecx, [esp + 0x18]
call fcn.0040d1b0
jmp 0x41a819
push str..pif
call ebp
mov edi, eax
test edi, edi
je 0x41a819
push edi
lea ecx, [esp + 0x18]
call fcn.00401570
test eax, eax
je 0x41a819
mov ecx, dword [esp + 0x14]
lea eax, [edi + edi]
push eax
push str..pif
add eax, 2
push eax
push ecx
call fcn.004606b1
push eax
call fcn.00401030
add esp, 0x14
mov byte [esp + 0x84], 4
lea edx, [esp + 0x14]
push edx
mov ecx, ebx
call fcn.00419ce0
mov dword [eax], 5
mov byte [esp + 0x84], 0
mov edi, dword [esp + 0x14]
lea eax, [edi - 0xc]
cmp eax, dword [0x49c020]
je 0x41a861
add edi, 0xfffffff4
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x41a861
push edi
call fcn.00460edd
add esp, 4
mov ecx, dword [0x49c024]
mov edx, str..scf
shr edx, 0x10
mov dword [esp + 0x14], ecx
jne 0x41a889
mov eax, str..scf
movzx eax, ax
push eax
lea ecx, [esp + 0x18]
call fcn.0040d1b0
jmp 0x41a8c4
push str..scf
call ebp
mov edi, eax
test edi, edi
je 0x41a8c4
push edi
lea ecx, [esp + 0x18]
call fcn.00401570
test eax, eax
je 0x41a8c4
mov ecx, dword [esp + 0x14]
lea eax, [edi + edi]
push eax
push str..scf
add eax, 2
push eax
push ecx
call fcn.004606b1
push eax
call fcn.00401030
add esp, 0x14
mov byte [esp + 0x84], 5
lea edx, [esp + 0x14]
push edx
mov ecx, ebx
call fcn.00419ce0
mov dword [eax], 5
mov byte [esp + 0x84], 0
mov edi, dword [esp + 0x14]
lea eax, [edi - 0xc]
cmp eax, dword [0x49c020]
je 0x41a90c
add edi, 0xfffffff4
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x41a90c
push edi
call fcn.00460edd
add esp, 4
mov ecx, dword [0x49c024]
mov edx, str..com
shr edx, 0x10
mov dword [esp + 0x14], ecx
jne 0x41a934
mov eax, str..com
movzx eax, ax
push eax
lea ecx, [esp + 0x18]
call fcn.0040d1b0
jmp 0x41a96f
push str..com
call ebp
mov edi, eax
test edi, edi
je 0x41a96f
push edi
lea ecx, [esp + 0x18]
call fcn.00401570
test eax, eax
je 0x41a96f
mov ecx, dword [esp + 0x14]
lea eax, [edi + edi]
push eax
push str..com
add eax, 2
push eax
push ecx
call fcn.004606b1
push eax
call fcn.00401030
add esp, 0x14
mov byte [esp + 0x84], 6
lea edx, [esp + 0x14]
push edx
mov ecx, ebx
call fcn.00419ce0
mov dword [eax], 5
mov byte [esp + 0x84], 0
mov edi, dword [esp + 0x14]
lea eax, [edi - 0xc]
cmp eax, dword [0x49c020]
je 0x41a9b7
add edi, 0xfffffff4
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x41a9b7
push edi
call fcn.00460edd
add esp, 4
mov ecx, dword [0x49c024]
mov edx, str..scr
shr edx, 0x10
mov dword [esp + 0x14], ecx
jne 0x41a9df
mov eax, str..scr
movzx eax, ax
push eax
lea ecx, [esp + 0x18]
call fcn.0040d1b0
jmp 0x41aa1a
push str..scr
call ebp
mov edi, eax
test edi, edi
je 0x41aa1a
push edi
lea ecx, [esp + 0x18]
call fcn.00401570
test eax, eax
je 0x41aa1a
mov ecx, dword [esp + 0x14]
lea eax, [edi + edi]
push eax
push str..scr
add eax, 2
push eax
push ecx
call fcn.004606b1
push eax
call fcn.00401030
add esp, 0x14
mov byte [esp + 0x84], 7
lea edx, [esp + 0x14]
push edx
mov ecx, ebx
call fcn.00419ce0
mov dword [eax], 5
mov byte [esp + 0x84], 0
mov edi, dword [esp + 0x14]
lea eax, [edi - 0xc]
cmp eax, dword [0x49c020]
je 0x41aa62
add edi, 0xfffffff4
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x41aa62
push edi
call fcn.00460edd
add esp, 4
mov eax, dword [esi + 4]
mov dword [esp + 0x84], 0xffffffff
mov ecx, dword [esp + 0x7c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.00460e4b
add esp, 0x74
ret 8