Function at 0x4284ac
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4d2c44
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x58
push ebx
push ebp
push esi
mov ebp, ecx
push edi
push ebp
lea ecx, [esp + 0x58]
call fcn.004cd10e
lea eax, [ebp + 0x5c]
lea ecx, [esp + 0x54]
push eax
mov dword [esp + 0x74], 0
call fcn.004cca0a
push 0x3e9
mov ecx, ebp
call fcn.004c8ef5
mov edx, dword [eax + 0x1c]
mov ebx, dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [esp + 0x44]
push ecx
push edx
call ebx
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x44]
mov edi, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
sub eax, ecx
push 0x3f4
mov ecx, ebp
sub edi, edx
mov dword [esp + 0x1c], eax
call fcn.004c8ef5
mov edx, dword [eax + 0x1c]
lea ecx, [esp + 0x44]
push ecx
push edx
call ebx
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x44]
mov esi, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
sub eax, ecx
push 0x3f5
mov ecx, ebp
sub esi, edx
mov dword [esp + 0x2c], eax
call fcn.004c8ef5
mov edx, dword [eax + 0x1c]
lea ecx, [esp + 0x44]
push ecx
push edx
call ebx
mov eax, dword [esp + 0x50]
mov ebx, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x44]
sub eax, ebx
sub ecx, edx
mov dword [esp + 0x24], ecx
cmp esi, eax
mov ecx, esi
jg 0x428584
mov ecx, eax
cmp edi, ecx
jle 0x42858c
mov eax, edi
jmp 0x428592
cmp esi, eax
jle 0x428592
mov eax, esi
mov dword [ebp + 0x118], eax
mov eax, dword [ebp + 0x120]
test eax, eax
mov dword [esp + 0x14], 0
jle 0x42868e
mov eax, dword [esp + 0x78]
lea esi, [eax + 0x14]
mov ecx, dword [ebp + 0x11c]
mov edx, dword [esp + 0x14]
mov eax, dword [ecx + edx*4]
lea ecx, [esp + 0x20]
push eax
call fcn.004c99c4
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x3c]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x68]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x40]
lea ecx, [esp + 0x20]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], edi
call fcn.004c9956
mov dword [esi - 0xc], ebx
mov ebx, dword [esp + 0x14]
mov dword [esi - 8], edi
mov dword [esi], 1
mov ecx, dword [ebp + 0x11c]
mov eax, dword [ecx + ebx*4]
mov ecx, dword [eax + 0x14]
dec ecx
cmp ecx, 0xb
ja case.default.0x428620
jmp dword [ecx*4 + 0x428aa0]
mov dword [esp + 0x10], 3
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x1c]
push edx
push 0x57
call fcn.004c3693
mov eax, dword [eax]
lea edx, [esp + 0x2c]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x68]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x38], ecx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], edi
call fcn.004c9956
mov edx, dword [esp + 0x18]
add edi, edx
mov dword [esi - 4], edi
mov eax, dword [ebp + 0x120]
inc ebx
add esi, 0x18
cmp ebx, eax
mov dword [esp + 0x14], ebx
jl 0x4285b5
mov eax, dword [ebp + 0x118]
mov ecx, dword [esp + 0x38]
cmp ecx, eax
jle 0x42869e
mov eax, ecx
push 8
push 0x57
lea ecx, [esp + 0x34]
mov dword [ebp + 0x118], eax
call fcn.004c3693
mov eax, dword [eax]
lea edx, [esp + 0x3c]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x68]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov dword [esp + 0x34], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x38], edx
call fcn.004c9956
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 1
call esi
lea eax, [eax + eax*2]
push 0
cdq
and edx, 3
add eax, edx
sar eax, 2
sub eax, 0x1a
mov dword [esp + 0x2c], eax
call esi
lea eax, [eax + eax*2]
mov ecx, dword [ebp + 0x120]
cdq
and edx, 3
mov ebx, SysReAllocString
add eax, edx
mov edi, eax
sar edi, 2
sub edi, 0x1a
test ecx, ecx
mov dword [esp + 0x20], edi
jle 0x428748
mov eax, dword [esp + 0x78]
mov esi, ecx
add eax, 8
mov edx, dword [eax + 8]
mov edi, dword [eax]
lea edx, [edx + edi + 6]
cmp edx, ebx
jle 0x42873e
mov ebx, edx
add eax, 0x18
dec esi
jne 0x42872f
mov edi, dword [esp + 0x20]
mov eax, 0x2aaaaaab
imul edi
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, ebx
mov esi, edx
cdq
idiv esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], eax
mov eax, ebx
cdq
idiv esi
test edx, edx
je 0x428772
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov edx, 6
cmp eax, edx
jle 0x428783
mov dword [esp + 0x10], edx
mov eax, dword [ebp + 0x118]
add eax, 5
imul eax, ecx
add eax, 0x15
cmp eax, 0xb4
jge 0x4287a1
mov dword [esp + 0x10], 1
mov eax, dword [esp + 0x10]
mov dword [esp + 0x24], 0
cmp eax, edx
jg 0x4288c4
mov edx, eax
imul edx, esi
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x24]
test edx, edx
jne 0x4288c4
xor edx, edx
xor ebx, ebx
test ecx, ecx
mov dword [esp + 0x14], edx
jle 0x428895
mov esi, dword [esp + 0x78]
lea ecx, [ebx + ebx*2]
lea eax, [esi + ecx*8]
mov dword [eax], 0
mov dword [eax + 4], edx
mov ecx, dword [eax + 8]
cmp ecx, dword [esp + 0x3c]
jg 0x4287fa
mov ecx, dword [esp + 0x3c]
mov eax, dword [eax + 0x10]
inc ebx
lea ecx, [eax + ecx + 6]
mov eax, dword [ebp + 0x120]
cmp ebx, eax
jge 0x428871
lea edx, [ebx + ebx*2]
lea esi, [esi + edx*8 + 8]
add ecx, 0xc
mov eax, ecx
cdq
idiv dword [esp + 0x18]
mov edi, eax
mov eax, ecx
mov ecx, dword [esp + 0x18]
cdq
idiv ecx
test edx, edx
je 0x42882d
inc edi
imul edi, ecx
mov ecx, dword [esi]
mov edx, dword [esp + 0x3c]
cmp ecx, edx
mov eax, edi
jg 0x42883e
mov ecx, edx
mov edx, dword [esi + 8]
lea ecx, [edx + ecx + 6]
mov edx, dword [esp + 0x1c]
sub edx, eax
cmp ecx, edx
jg 0x428869
mov edx, dword [esp + 0x14]
mov dword [esi - 8], eax
mov dword [esi - 4], edx
add ecx, eax
mov eax, dword [ebp + 0x120]
inc ebx
add esi, 0x18
cmp ebx, eax
jl 0x428813
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0x20]
mov eax, dword [ebp + 0x118]
lea ecx, [edx + eax + 5]
mov dword [esp + 0x14], ecx
mov ecx, dword [ebp + 0x120]
mov edx, dword [esp + 0x14]
cmp ebx, ecx
jl 0x4287da
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x28]
sub edx, 5
cmp edx, eax
jg 0x4288a8
mov dword [esp + 0x24], 1
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x1c]
inc eax
add ebx, esi
cmp eax, 6
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ebx
jle 0x4287be
lea ecx, [eax - 1]
mov dword [esp + 0x14], 0
test ecx, ecx
mov dword [esp + 0x24], ecx
jle 0x428956
mov eax, dword [ebp + 0x120]
mov esi, SysReAllocString
test eax, eax
jle 0x428949
mov edx, dword [esp + 0x78]
mov ecx, eax
lea edi, [edx + 8]
mov ebx, edi
mov eax, dword [ebx - 8]
cdq
idiv dword [esp + 0x18]
cmp eax, dword [esp + 0x14]
jne 0x428907
mov eax, dword [ebx]
cmp eax, esi
jle 0x428907
mov esi, eax
add ebx, 0x18
dec ecx
jne 0x4288f1
test esi, esi
jle 0x428941
mov eax, dword [esp + 0x3c]
cmp esi, eax
jle 0x42891b
mov esi, eax
xor ebx, ebx
mov ecx, edi
mov eax, dword [ecx - 8]
cdq
idiv dword [esp + 0x18]
cmp eax, dword [esp + 0x14]
jne 0x428933
cmp dword [ecx], esi
jge 0x428933
mov dword [ecx], esi
mov eax, dword [ebp + 0x120]
inc ebx
add ecx, 0x18
cmp ebx, eax
jl 0x42891f
mov ecx, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jl 0x4288d7
mov ecx, dword [ebp + 0x120]
xor eax, eax
cmp ecx, eax
mov dword [esp + 0x34], SysReAllocString
mov dword [esp + 0x38], eax
mov dword [esp + 0x14], eax
jle 0x4289e9
mov eax, dword [esp + 0x78]
lea ecx, [eax + 8]
mov edx, dword [ecx - 8]
mov eax, dword [ecx + 8]
mov esi, dword [ecx]
add eax, edx
lea ebx, [eax + esi + 6]
cmp ebx, edi
jle 0x4289b3
cmp dword [ecx + 0xc], 1
jne 0x4289b3
mov eax, edi
sub eax, edx
sub eax, esi
mov esi, dword [esp + 0x3c]
sub eax, 6
add esi, 0x1e
cmp eax, esi
jle 0x4289b3
mov dword [ecx + 8], eax
mov edx, dword [ecx - 8]
mov esi, dword [ecx]
add esi, edx
lea ebx, [esi + eax + 6]
cmp ebx, dword [esp + 0x34]
jle 0x4289bd
mov dword [esp + 0x34], ebx
test edx, edx
jne 0x4289d3
mov edx, dword [ebp + 0x118]
mov eax, dword [esp + 0x38]
lea edx, [eax + edx + 5]
mov dword [esp + 0x38], edx
mov eax, dword [esp + 0x14]
mov edx, dword [ebp + 0x120]
inc eax
add ecx, 0x18
cmp eax, edx
mov dword [esp + 0x14], eax
jl 0x428979
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x34]
push 0x11
mov dword [eax], edi
mov dword [eax + 4], ecx
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x3c]
mov dword [eax], edx
mov dword [eax + 4], ecx
lea ecx, [esp + 0x58]
call fcn.004cc9ce
lea ecx, [esp + 0x54]
mov dword [esp + 0x70], 0xffffffff
call fcn.004cd180
mov ecx, dword [esp + 0x68]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x64
ret 0xc
mov dword [esp + 0x10], 6
jmp case.default.0x428620
mov dword [esp + 0x10], 0xb
jmp case.default.0x428620
mov dword [esp + 0x10], 0x15
jmp case.default.0x428620
mov edx, dword [esp + 0x28]
mov dword [esi], 2
mov dword [esi - 4], edx
jmp 0x428678
mov dword [esp + 0x10], 0x1a
jmp case.default.0x428620
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x10], eax
jmp case.default.0x428620
mov ecx, dword [esp + 0x24]
mov dword [esi], 3
mov dword [esi - 4], ecx
jmp 0x428678