Function at 0x4f1620
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5689e2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
mov eax, dword [0x68c9b4]
push ebx
mov ebx, dword [eax + 0xc]
push ebp
mov ebp, dword [ebx + 8]
push esi
push edi
mov edi, ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], ebx
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_9]
push ebp
lea esi, [esp + 0x20]
mov ecx, ebx
mov dword [esp + 0x30], 0
call fcn.00487990
mov byte [esp + 0x2c], 1
mov ecx, dword [eax]
push ecx
lea edx, [esp + 0x18]
push str.__0.03lf__s
push edx
call dword [sym.imp.MFC71.DLL_ATL::CStringT::Format_1]
add esp, 0xc
mov ecx, esi
mov byte [esp + 0x2c], 0
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_1]
push edi
lea esi, [edi + 0x88]
push 0x65
mov ecx, esi
call sub.MFC71.DLL_CWnd::SubclassDlgItem
push edi
lea ebx, [edi + 0x4b0]
push 0x66
mov ecx, ebx
call sub.MFC71.DLL_CWnd::SubclassDlgItem
test esi, esi
mov dword [edi + 0xf4], ebx
je 0x4f16c6
mov esi, dword [esi + 0x20]
mov eax, dword [edi + 0x4d0]
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push esi
push 0x469
push eax
call ebx
push eax
call sub.MFC71.DLL_CWnd::FromHandle
test ebp, ebp
mov dword [esp + 0x1c], ebp
je 0x4f1701
mov ecx, dword [esp + 0x18]
add ecx, 0xc
lea eax, [esp + 0x1c]
call fcn.0040a6c0
mov ecx, dword [eax]
fld qword [ecx]
jmp 0x4f1707
fld qword [0x594cd8]
fld qword [0x594cd8]
lea edx, [esp + 0x14]
fdiv st(1)
push edx
lea ecx, [edi + 0xec]
fstp qword [edi + 0x110]
fstp st(0)
call dword [sym.imp.MFC71.DLL_ATL::CStringT::operator_5]
push edi
lea esi, [edi + 0x120]
push 0x68
mov ecx, esi
call sub.MFC71.DLL_CWnd::SubclassDlgItem
push edi
lea ecx, [edi + 0x508]
push 0x69
call sub.MFC71.DLL_CWnd::SubclassDlgItem
test esi, esi
lea eax, [edi + 0x508]
mov dword [edi + 0x18c], eax
je 0x4f1759
mov esi, dword [esi + 0x20]
mov eax, dword [edi + 0x528]
push 0
push esi
push 0x469
push eax
call ebx
push eax
call sub.MFC71.DLL_CWnd::FromHandle
test ebp, ebp
mov dword [esp + 0x1c], ebp
je 0x4f178e
mov ecx, dword [esp + 0x18]
add ecx, 0xc
lea eax, [esp + 0x1c]
call fcn.0040a6c0
mov ecx, dword [eax]
fld qword [ecx]
jmp 0x4f1794
fld qword [0x594cd8]
fld qword [0x594cd8]
lea edx, [esp + 0x14]
fdiv st(1)
push edx
lea ecx, [edi + 0x184]
fstp qword [edi + 0x1a8]
fstp st(0)
call dword [sym.imp.MFC71.DLL_ATL::CStringT::operator_5]
push edi
lea esi, [edi + 0x1b8]
push 0x6b
mov ecx, esi
call sub.MFC71.DLL_CWnd::SubclassDlgItem
push edi
lea ecx, [edi + 0x560]
push 0x6c
call sub.MFC71.DLL_CWnd::SubclassDlgItem
test esi, esi
lea eax, [edi + 0x560]
mov dword [edi + 0x224], eax
je 0x4f17e6
mov esi, dword [esi + 0x20]
mov eax, dword [edi + 0x580]
push 0
push esi
push 0x469
push eax
call ebx
push eax
call sub.MFC71.DLL_CWnd::FromHandle
test ebp, ebp
mov dword [esp + 0x1c], ebp
je 0x4f181b
mov ecx, dword [esp + 0x18]
add ecx, 0xc
lea eax, [esp + 0x1c]
call fcn.0040a6c0
mov ecx, dword [eax]
fld qword [ecx]
jmp 0x4f1821
fld qword [0x594cd8]
fld qword [0x594cd8]
lea edx, [esp + 0x14]
fdiv st(1)
push edx
lea ecx, [edi + 0x21c]
fstp qword [edi + 0x240]
fstp st(0)
call dword [sym.imp.MFC71.DLL_ATL::CStringT::operator_5]
push edi
lea esi, [edi + 0x250]
push 0x6e
mov ecx, esi
call sub.MFC71.DLL_CWnd::SubclassDlgItem
push edi
lea ecx, [edi + 0x5b8]
push 0x6f
call sub.MFC71.DLL_CWnd::SubclassDlgItem
test esi, esi
lea eax, [edi + 0x5b8]
mov dword [edi + 0x2bc], eax
je fcn.004f1873
mov esi, dword [esi + 0x20]