Function at 0x412e90
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4f3b29
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push edi
mov eax, dword [0x52e028]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
push 0x500820
push 0x500820
push 0x500820
push 0x502a08
call fcn.004ef0c6
push eax
push 0x3f3
mov ecx, esi
call fcn.004ef6a8
push 0x500820
push 0x500820
push 0x500820
push str.10824
call fcn.004ef0c6
push eax
push 0x3f4
mov ecx, esi
call fcn.004ef6a8
push 0x500820
push 0x500820
push 0x500820
push 0x500820
push str.10062
call fcn.004ef0cc
push eax
push 0x3f5
mov ecx, esi
call fcn.004ef6a8
push 0x500820
push 0x500820
push 0x500820
push 0x500820
push str.3704013
call fcn.004ef0cc
push eax
push 0x3f6
mov ecx, esi
call fcn.004ef6a8
push 0x500820
push 0x500820
push 0x500820
push 0x500820
push str.3402015
call fcn.004ef0cc
push eax
push 0x420
mov ecx, esi
call fcn.004ef6a8
push 0x500820
push 0x500820
push 0x500820
push 0x500820
push str.3702022
call fcn.004ef0cc
push eax
push 0x421
mov ecx, esi
call fcn.004ef6a8
push 0x500820
push 0x500820
push 0x500820
push 0x500820
push str.3701066
call fcn.004ef0cc
push eax
push 0x3f7
mov ecx, esi
call fcn.004ef6a8
push 0x500820
push 0x500820
push 0x500820
push 0x500820
push str.3701067
call fcn.004ef0cc
push eax
push 0x422
mov ecx, esi
call fcn.004ef6a8
push 0x500820
push 0x500820
push 0x500820
push 0x500820
push str.3703012
call fcn.004ef0cc
push eax
push 0x437
mov ecx, esi
call fcn.004ef6a8
lea ecx, [esp + 0xc]
call dword [0x4fff58]
mov dword [esp + 0x30], 0
lea eax, [esp + 0xc]
lea ebx, [esi + 0x194]
push eax
mov ecx, ebx
call fcn.004ef120
mov ecx, dword [esi + 0x1b4]
push ecx
call dword [sym.imp.USER32.dll_GetDC]
push eax
call fcn.004ef4f2
mov edi, eax
test edi, edi
je 0x413157
mov edx, dword [esi + 0x1b4]
push 0
push 0
push 0x31
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
call fcn.004ef4b6
mov edx, dword [edi]
push eax
mov eax, dword [edx + 0x30]
mov ecx, edi
call eax
mov eax, dword [esp + 0xc]
mov ecx, dword [eax - 0xc]
lea edx, [esp + 0x10]
push edx
push ecx
push eax
mov eax, dword [edi + 8]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
mov ecx, dword [edi + 4]
mov edx, dword [esi + 0x1b4]
push ecx
push edx
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 6
add eax, 5
push eax
add ecx, 5
push ecx
push 0
push 0
push 0
mov ecx, ebx
call fcn.004ef34e
mov eax, dword [esi + 0x1b4]
mov edi, dword [sym.imp.USER32.dll_GetWindowRect]
lea edx, [esp + 0x18]
push edx
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.004ef636
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
push 5
push 0
push 0
add edx, 0xfffffff8
push edx
add eax, 3
push eax
push 0
lea ecx, [esi + 0xec]
call fcn.004ef34e
mov edx, dword [esi + 0x10c]
lea ecx, [esp + 0x18]
push ecx
push edx
call edi
lea eax, [esp + 0x18]
push eax
mov ecx, esi
call fcn.004ef636
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
push 5
push 0
push 0
push ecx
add edx, 8
push edx
push 0
lea ecx, [esi + 0x140]
call fcn.004ef34e
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0xc]
call dword [0x4fff34]
xor eax, eax
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebx
add esp, 0x28
ret