Function at 0x41d0e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47d6c5
mov eax, dword fs:[0]
push eax
sub esp, 0x44
mov eax, dword [0x4b4200]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x40], eax
mov dword [edi + 0x2e8], ecx
test ecx, ecx
je 0x41d143
mov eax, dword [ecx + 0x230]
lea edx, [edi + 0x78]
mov ecx, dword [ecx + 0x1c0]
test ecx, ecx
je 0x41d13b
mov dword [edx + 0x1c0], ecx
jmp 0x41d145
mov dword [edx + 0x1c0], edx
jmp 0x41d145
xor eax, eax
lea ecx, [edi + 0x78]
mov dword [edi + 0x14], 0x46
push ecx
push eax
push 0xffffffffffffffff
push SysReAllocString
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x5a
push 0x1c2
push 0x49eb08
push 0x49f404
call fcn.0040ecf0
movsd xmm0, qword [0x4aa3f8]
xor eax, eax
movsd qword [edi + 0x1e8], xmm0
mov dword [edi + 0x1f0], 0x190
mov byte [edi + 0x1f4], 1
mov byte [edi + 0x236], 0
nop dword [eax]
inc eax
cmp word [eax*2 + str.Arial], 0
jne 0x41d1a0
inc eax
push eax
push str.Arial
lea eax, [edi + 0x1f6]
push 0x20
push eax
call fcn.0046d1e3
mov eax, dword [edi + 0x28]
lea ecx, [edi + 0x78]
add esp, 0xc
mov dword [edi + 0x29c], eax
mov eax, dword [edi + 0x2a8]
mov dword [ebp - 0x34], eax
mov eax, dword [edi + 0x20]
push dword [edi + 0x30]
push eax
push eax
push dword [edi + 0x1c]
push 0x5a
push 0x1c2
call fcn.0041a4f0
mov ecx, dword [edi + 0x2e8]
mov dword [ebp - 0x3c], ecx
test ecx, ecx
je 0x41d231
xor esi, esi
lea ebx, [ecx + 0x50]
mov eax, dword [ebx]
test eax, eax
je 0x41d21e
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x41d21e
inc esi
add ebx, 4
cmp esi, 0x30
jl 0x41d202
jmp 0x41d231
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
mov dword [ecx + esi*4 + 0x50], eax
inc esi
cmp esi, dword [ecx + 0x4c]
jle 0x41d231
mov dword [ecx + 0x4c], esi
push ecx
push 0xffffffffffffffff
mov dword [edi + 0x268], 0x1c00
lea ecx, [edi + 0x78]
mov eax, dword [edi + 0x14]
push eax
push eax
push 0xa
push 0xa
push 0
call fcn.00415c30
mov ecx, dword [edi + 0x28]
mov ebx, eax
mov eax, dword [edi + 0x20]
mov dword [ebp - 0x48], eax
mov eax, ecx
shr eax, 0x10
movzx edx, al
mov eax, ecx
or eax, 0xffffff00
mov dword [ebp - 0x44], ebx
shl eax, 0x10
and ecx, 0xff00
or edx, eax
mov dword [edi], ebx
mov eax, dword [edi + 0x2c]
or edx, ecx
mov dword [ebp - 0x50], eax
lea eax, [edi + 0x78]
test eax, eax
mov dword [ebp - 0x4c], edx
mov eax, dword [sym.imp.USER32.dll_GetClientRect]
mov dword [ebp - 0x3c], eax
je 0x41d3f0
cmp ebx, 1
jl 0x41d3f0
mov eax, dword [edi + 0x50]
test eax, eax
je 0x41d2de
cmp dword [edi + 0x34], 1
jl 0x41d2de
mov ecx, dword [edi + 0x70]
mov dword [edi + 0x68], 1
mov dword [edi + 0x3c], 0
mov dword [edi + 0x38], 0
test ecx, ecx
je 0x41d2de
mov edx, dword [eax + 0x230]
test edx, edx
je 0x41d2de
mov eax, dword [ecx]
push 0
push edx
push ecx
call dword [eax + 0x28]
mov ecx, dword [edi + 0xb4]
mov eax, ebx
test ecx, ecx
je 0x41d302
cmp eax, dword [edi + 0xb8]
jg 0x41d302
lea eax, [eax + eax*8]
cmp dword [ecx + eax*8 + 0xc], 0
je 0x41d302
mov eax, dword [ecx + eax*8 + 4]
jmp 0x41d304
xor eax, eax
lea ecx, [ebp - 0x30]
push ecx
push eax
call dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
lea ebx, [edi + 0x70]
sub eax, dword [ebp - 0x30]
cmp dword [ebx], 0
mov dword [edi + 0x40], eax
jne 0x41d3c8
mov dword [ebp - 0x38], 0
lea eax, [ebp - 0x38]
mov dword [ebp - 4], 0
push eax
push 0x47f6b0
push 1
push 0
push 0x47f6f0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x41d354
mov dword [ebp - 4], 1
jmp 0x41d3b4
mov dword [ebp - 0x34], 0
mov byte [ebp - 4], 2
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 0x38]
push edx
push 0x47f6c0
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
jns 0x41d38e
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x41d385
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 4
jmp 0x41d3b4
mov eax, dword [ebp - 0x34]
push ebx
push 0x47f6d0
push eax
mov ecx, dword [eax]
call dword [ecx]
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x41d3ad
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 6
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x41d3c1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xffffffff
lea eax, [edi + 0x78]
mov dword [edi + 0x50], eax
lea ecx, [edi + 0x34]
mov eax, dword [ebp - 0x44]
mov dword [edi + 0x34], eax
mov eax, dword [ebp - 0x48]
mov dword [edi + 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [edi + 0x48], eax
mov eax, dword [ebp - 0x50]
push 0
mov dword [edi + 0x44], eax
call fcn.0041cbe0
lea ecx, [edi + 0x78]
call fcn.0041aa50
test al, al
jne 0x41d403
xor edx, edx
jmp 0x41d484
mov eax, dword [edi + 0xb8]
push 0
push dword [edi + 0x194]
inc eax
push eax
push dword [edi + 0x2ac]
movzx eax, byte [edi + 0x2c0]
push 0x14
push 0x1c2
push 0
and eax, 1
push 0
shl eax, 0x11
add eax, 0x50000100
push eax
push 0
push str.Static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
jne 0x41d44e
xor edx, edx
jmp 0x41d484
push eax
push 0xd
lea ecx, [edi + 0x78]
call fcn.0041a7c0
mov edx, eax
mov eax, dword [edi + 0xb4]
lea ecx, [edx + edx*8]
mov dword [eax + ecx*8 + 0x24], 0
mov dword [eax + ecx*8 + 0x28], 0
mov dword [eax + ecx*8 + 0x2c], 0x1c2
mov dword [eax + ecx*8 + 0x30], 0x14
push 0xfffffffffffffffe
lea ecx, [edi + 0x78]
mov dword [edi + 0x10], edx
push 0xffffffffffffffff
call fcn.00416f10
sub esp, 8
mov dword [edi + 0x268], 0xc00
mov edx, dword [edi + 0x14]
lea ecx, [edi + 0x78]
mov eax, 0x1a4
sub eax, edx
push edx
push eax
push ecx
lea eax, [edx + 0x14]
push eax
push ecx
call fcn.00415470
mov ecx, dword [edi + 0x20]
mov dword [edi + 4], eax
mov eax, ecx
shr eax, 0x10
movzx edx, al
movzx eax, cl
and ecx, 0xff00
shl eax, 0x10
or edx, eax
or edx, ecx
lea ecx, [edi + 0x78]
push edx
push 0xffffffffffffffff
call fcn.00416f10
mov ebx, dword [edi + 0x2a8]
test ebx, ebx
je 0x41d601
mov eax, dword [edi + 4]
test eax, eax
je 0x41d52c
cmp eax, 0xffffffff
jne 0x41d503
mov eax, dword [edi + 0xb8]
mov ebx, dword [edi + 0xb4]
test ebx, ebx
je 0x41d52a
cmp eax, 1
jl 0x41d52a
cmp eax, dword [edi + 0xb8]
jg 0x41d52a
lea eax, [eax + eax*8]
cmp dword [ebx + eax*8 + 0xc], 0
je 0x41d52a
mov ebx, dword [ebx + eax*8 + 4]
jmp 0x41d52c
xor ebx, ebx
test ebx, ebx
je 0x41d601
lea eax, [ebp - 0x20]
push eax
push ebx
call dword [ebp - 0x3c]
test eax, eax
je 0x41d601
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0xb
push ebx
call esi
lea eax, [ebp - 0x20]
push eax
push 0
push 0xb3
push ebx
call esi
push dword [ebp - 0x40]
push 0
push 0xc
push ebx
call esi
push 0
push 0
push 0xba
push ebx
call esi
mov ecx, eax
mov dword [ebp - 0x40], ecx
cmp ecx, 1
jle 0x41d5bb
push 0
push 0
push 0xd6
push ebx
call esi
push 0
push 1
push 0xbb
push ebx
mov esi, eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push eax
push 0xd6
push ebx
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x40]
shr eax, 0x10
shr esi, 0x10
sub eax, esi
jmp 0x41d5c0
mov eax, 0xe
imul ecx, eax
mov eax, dword [ebp - 0x14]
sub eax, ecx
cdq
sub eax, edx
mov esi, eax
lea eax, [ebp - 0x20]
push eax
push 0
push 0xb2
push ebx
sar esi, 1
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x20]
mov dword [ebp - 0x1c], esi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 0
push 0xb3
push ebx
call esi
push 0
push 1
push 0xb
push ebx
call esi
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00469dc5
mov esp, ebp
pop ebp
ret 0x18