Function at 0x40a9b0
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x41eaf6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2c
mov eax, dword [esp + 0x40]
push ebx
push ebp
mov ebp, ecx
mov ecx, dword [eax]
mov edx, dword [eax + 8]
mov dword [esp + 0x24], ecx
mov ecx, dword [eax + 4]
mov dword [esp + 0x2c], edx
mov edx, dword [eax + 0xc]
mov eax, dword [ebp + 0x164]
push esi
cmp eax, 1
push edi
mov dword [esp + 0x30], ecx
mov dword [esp + 0x38], edx
jne 0x40aabe
mov edi, dword [ebp + 0x254]
mov esi, dword [ebp + 0x250]
cmp edi, edi
mov ebx, edi
je 0x40aa20
push ebx
mov ecx, esi
call fcn.00418580
add ebx, 0x1c
add esi, 0x1c
cmp ebx, edi
jne 0x40aa0e
mov ebx, dword [ebp + 0x254]
mov edi, esi
cmp esi, ebx
je 0x40aa3b
lea ecx, [edi + 0x18]
call sub.MFC42.DLL_CString::CString
add edi, 0x1c
cmp edi, ebx
jne 0x40aa2c
mov dword [ebp + 0x254], esi
mov edx, dword [ebp + 0x234]
mov ebx, dword [ebp + 0x230]
cmp edx, edx
mov eax, edx
je 0x40aa68
mov esi, eax
mov edi, ebx
add eax, 0x1c
mov ecx, 7
add ebx, 0x1c
cmp eax, edx
rep movsd dword es:[edi], dword [esi]
jne 0x40aa53
mov eax, dword [ebp + 0x234]
mov dword [ebp + 0x234], ebx
mov edx, dword [ebp + 0x260]
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x264]
cmp eax, eax
mov ecx, eax
je 0x40aaae
mov esi, ecx
mov edi, edx
add ecx, 0x10
add edx, 0x10
mov ebx, dword [esi]
cmp ecx, eax
mov dword [edi], ebx
mov ebx, dword [esi + 4]
mov dword [edi + 4], ebx
mov ebx, dword [esi + 8]
mov dword [edi + 8], ebx
mov esi, dword [esi + 0xc]
mov dword [edi + 0xc], esi
jne 0x40aa8a
mov ecx, dword [ebp + 0x264]
mov dword [ebp + 0x264], edx
mov dword [esp + 0x18], ecx
xor ebx, ebx
or eax, 0xffffffff
mov dword [ebp + 0x170], ebx
mov dword [ebp + 0x14], eax
mov dword [ebp + 0x174], eax
mov dword [ebp + 0x17c], eax
mov dword [ebp + 0x180], eax
mov edi, dword [ebp + 0x244]
mov esi, dword [ebp + 0x240]
cmp edi, edi
mov dword [esp + 0x14], edi
je 0x40ab10
mov edx, dword [esp + 0x14]
mov ecx, esi
push edx
call fcn.0040f070
mov eax, dword [esp + 0x14]
add esi, 0x78
add eax, 0x78
cmp eax, edi
mov dword [esp + 0x14], eax
jne 0x40aaf2
mov eax, dword [ebp + 0x244]
mov edi, esi
cmp esi, eax
mov dword [esp + 0x14], eax
je 0x40ab32
mov ecx, edi
call fcn.004086c0
mov eax, dword [esp + 0x14]
add edi, 0x78
cmp edi, eax
jne 0x40ab20
lea ecx, [esp + 0x10]
mov dword [ebp + 0x244], esi
mov dword [esp + 0x50], ebx
call fcn.0041dd5c
lea esi, [ebp + 0x3c]
mov ecx, ebp
push esi
mov dword [esp + 0x48], ebx
call fcn.00411270
push esi
push str.body
mov ecx, ebp
call fcn.0040f210
mov eax, dword [ebp + 0x40]
mov ecx, dword [ebp + 0x44]
lea edx, [ebp + 0x1e0]
mov edi, dword [ebp + 0x58]
mov dword [ebp + 0x1f0], ecx
mov cl, byte [ebp + 0x50]
mov dword [edx], eax
mov al, byte [ebp + 0x48]
mov byte [ebp + 0x1f4], al
mov al, byte [ebp + 0x4c]
mov byte [ebp + 0x1f6], cl
mov byte [ebp + 0x1f5], al
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp + 0x1e4], ebx
mov dword [ebp + 0x1ec], ebx
mov dword [ebp + 0x1e8], ebx
mov byte [ebp + 0x1f7], 1
mov byte [ebp + 0x1f8], 0
mov byte [ebp + 0x1f9], 0
mov byte [ebp + 0x1fa], 0
mov byte [ebp + 0x1fb], 0
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea ebx, [ebp + 0x1fc]
mov eax, ecx
mov esi, edi
mov edi, ebx
push edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
mov ecx, dword [ebp + 0x15c]
push eax
push ecx
mov dword [ebp + 0x21c], eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [ebp + 0x74]
mov dword [ebp + 0x134], eax
mov eax, dword [ebp + 0x15c]
push edx
push eax
call dword [sym.imp.GDI32.dll_SetBkMode]
mov ecx, dword [ebp + 0x5c]
mov edx, dword [ebp + 0x15c]
push ecx
push edx
mov dword [ebp + 0x138], eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov ecx, dword [ebp + 0x15c]
mov dword [ebp + 0x13c], eax
mov eax, dword [ebp + 0x60]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp + 0x140], eax
mov eax, dword [ebp + 0x15c]
lea edx, [ebp + 0x1a8]
push edx
push eax
call dword [sym.imp.GDI32.dll_GetTextMetricsA]
mov ecx, dword [ebp + 0x160]
lea esi, [ebp + 0x160]
mov eax, dword [ecx - 8]
mov edi, dword [esp + 0x50]
cmp edi, eax
jge 0x40adc4
mov ebx, dword [esp + 0x4c]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.table
call sub.MFC42.DLL_CString::CString_1
lea edx, [esp + 0x54]
mov ecx, ebp
push edx
push esi
call fcn.004117f0
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x50]
sub eax, edi
lea ecx, [esp + 0x4c]
push eax
push edi
push ecx
mov ecx, esi
call sub.MFC42.DLL_CString::Mid
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], 1
call fcn.0041de40
lea ecx, [esp + 0x4c]
mov byte [esp + 0x44], 0
call sub.MFC42.DLL_CString::CString
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x40ad1f
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x10]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
mov ecx, ebp
call fcn.0040c9e0
mov ecx, eax
mov eax, dword [ecx]
mov edx, dword [ecx + 4]
mov ecx, dword [ebx]
cmp ecx, eax
jle 0x40ad07
mov eax, ecx
mov ecx, dword [ebx + 4]
mov dword [ebx], eax
add ecx, edx
mov dword [ebx + 4], ecx
mov eax, dword [ebp + 0x164]
test eax, eax
jne 0x40ad1f
add dword [esp + 0x30], edx
mov eax, dword [esp + 0x14]
test eax, eax
je 0x40adb3
mov eax, dword [esp + 0x50]
lea edx, [esp + 0x50]
mov edi, eax
add eax, 6
push edx
push esi
mov ecx, ebp
mov dword [esp + 0x58], eax
call fcn.00411e90
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0x18]
sub eax, edi
push eax
push edi
push ecx
mov ecx, esi
call sub.MFC42.DLL_CString::Mid
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], 2
call fcn.0041de40
lea ecx, [esp + 0x18]
mov byte [esp + 0x44], 0
call sub.MFC42.DLL_CString::CString
lea edx, [esp + 0x2c]
lea eax, [esp + 0x10]
push edx
lea ecx, [esp + 0x28]
push eax
push ecx
mov ecx, ebp
call fcn.0040aec0
mov ecx, dword [ebx]
mov edx, eax
mov eax, dword [edx]
cmp ecx, eax
mov edx, dword [edx + 4]
jle 0x40ad9b
mov eax, ecx
mov ecx, dword [ebx + 4]
mov dword [ebx], eax
add ecx, edx
mov dword [ebx + 4], ecx
mov eax, dword [ebp + 0x164]
test eax, eax
jne 0x40adb3
add dword [esp + 0x30], edx
mov eax, dword [esi]
mov edi, dword [esp + 0x50]
mov eax, dword [eax - 8]
cmp edi, eax
jl 0x40ac84
mov ecx, dword [ebp + 0x138]
mov edx, dword [ebp + 0x15c]
push ecx
push edx
call dword [sym.imp.GDI32.dll_SetBkMode]
mov eax, dword [ebp + 0x140]
mov ecx, dword [ebp + 0x15c]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov edx, dword [ebp + 0x13c]
mov eax, dword [ebp + 0x15c]
push edx
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov ecx, dword [ebp + 0x134]
mov edx, dword [ebp + 0x15c]
push ecx
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov esi, dword [ebp + 0x244]
mov ebx, dword [ebp + 0x240]
cmp esi, esi
mov edi, esi
je 0x40ae38
push edi
mov ecx, ebx
call fcn.0040f070
add edi, 0x78
add ebx, 0x78
cmp edi, esi
jne 0x40ae26
mov edi, dword [ebp + 0x244]
mov esi, ebx
cmp ebx, edi
mov dword [esp + 0x4c], esi
je 0x40ae86
lea ecx, [esi + 0x74]
mov byte [esp + 0x44], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x40]
mov byte [esp + 0x44], 4
call sub.MFC42.DLL_CString::CString
lea ecx, [esi + 0x1c]
mov byte [esp + 0x44], 3
call sub.MFC42.DLL_CString::CString
mov ecx, esi
mov byte [esp + 0x44], 0
call sub.MFC42.DLL_CString::CString
add esi, 0x78
cmp esi, edi
mov dword [esp + 0x4c], esi
jne 0x40ae48
mov dword [ebp + 0x244], ebx
mov eax, dword [ebp + 0x21c]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
lea ecx, [esp + 0x10]
mov dword [esp + 0x44], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov ecx, dword [esp + 0x3c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x38
ret 8