Function at 0x41db10
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x436c02
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5d8
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov edi, dword [ebp + 0x10]
mov ebx, ecx
cmp eax, 1
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x34], edi
jne 0x41db73
xor esi, esi
cmp edi, esi
jne 0x41db60
mov eax, dword [ebx + 8]
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
mov dword [ebp - 0x34], edi
mov edx, dword [ebx + 8]
lea ecx, [ebp - 0x90]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
jmp 0x41dbb8
xor esi, esi
cmp edi, esi
jne 0x41db88
mov eax, dword [ebx + 8]
push eax
call dword [sym.imp.USER32.dll_GetWindowDC]
mov edi, eax
mov dword [ebp - 0x34], edi
mov edx, dword [ebx + 8]
lea ecx, [ebp - 0x90]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
neg eax
neg ecx
push eax
lea edx, [ebp - 0x90]
push ecx
push edx
call dword [sym.imp.USER32.dll_OffsetRect]
push esi
push esi
push esi
push esi
call dword [sym.imp.GDI32.dll_CreateRectRgn]
mov dword [ebp - 0x3c], eax
push eax
mov eax, dword [ebx + 8]
push eax
call dword [sym.imp.USER32.dll_GetWindowRgn]
cmp eax, 3
je 0x41dbda
cmp eax, 2
jne 0x41dc3c
cmp dword [ebp + 0xc], 1
jne 0x41dc31
mov edx, dword [ebx + 8]
lea ecx, [ebp - 0x44]
push ecx
push edx
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x40], esi
call dword [sym.imp.USER32.dll_ClientToScreen]
mov ecx, dword [ebx + 8]
lea eax, [ebp - 0xa0]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xa0]
mov ebx, dword [ebp - 0x9c]
sub eax, ecx
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
sub ecx, ebx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], ecx
neg ecx
neg eax
push ecx
push eax
push edx
call dword [sym.imp.GDI32.dll_OffsetRgn]
mov eax, dword [ebp - 0x3c]
push eax
push edi
call dword [sym.imp.GDI32.dll_SelectClipRgn]
mov ecx, dword [ebp - 0x3c]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [ebp + 0xc], 1
jne 0x41dd9f
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
push eax
call dword [sym.imp.USER32.dll_GetTopWindow]
mov ebx, eax
cmp ebx, esi
je 0x41dd9f
lea ecx, [ebp - 0x48]
or eax, 0xffffffff
push ecx
push ebx
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x10]
push edx
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x48]
cmp ecx, eax
jne 0x41dcb9
cmp eax, 0xffffffff
je 0x41dcb9
cmp ecx, 0xffffffff
je 0x41dcb9
lea edx, [ebp - 0x1c]
push edx
push esi
call fcn.0041f7f0
push eax
push ebx
call dword [sym.imp.USER32.dll_SendMessageA]
push ebx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x41dd8c
cmp dword [ebp - 0x1c], esi
je 0x41dd8c
push esi
push esi
push esi
push esi
call dword [sym.imp.GDI32.dll_CreateRectRgn]
push eax
push ebx
mov dword [ebp - 0x3c], eax
call dword [sym.imp.USER32.dll_GetWindowRgn]
cmp eax, 2
je 0x41dd36
cmp eax, 3
je 0x41dd36
lea eax, [ebp - 0x78]
push eax
push ebx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [ebp - 0x14]
lea ecx, [ebp - 0x78]
push ecx
mov eax, dword [edx + 8]
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov edx, dword [ebp - 0x14]
lea ecx, [ebp - 0x70]
push ecx
mov eax, dword [edx + 8]
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x74]
push ecx
mov ecx, dword [ebp - 0x78]
push edx
push eax
push ecx
push edi
call dword [sym.imp.GDI32.dll_ExcludeClipRect]
jmp 0x41dd82
lea edx, [ebp - 0x58]
push edx
push ebx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x58]
push eax
mov edx, dword [ecx + 8]
push edx
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x50]
push eax
mov edx, dword [ecx + 8]
push edx
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x3c]
push eax
push ecx
push edx
call dword [sym.imp.GDI32.dll_OffsetRgn]
mov eax, dword [ebp - 0x3c]
push 4
push eax
push edi
call dword [sym.imp.GDI32.dll_ExtSelectClipRgn]
mov ecx, dword [ebp - 0x3c]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
push 2
push ebx
call dword [sym.imp.USER32.dll_GetWindow]
mov ebx, eax
cmp ebx, esi
jne 0x41dc67
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x90]
mov ebx, dword [ebp - 0x8c]
sub eax, ecx
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x84]
mov edx, dword [ecx + 8]
sub eax, ebx
mov dword [ebp - 0x80], eax
mov eax, dword [ecx + 4]
cmp eax, edx
mov dword [ebp - 0x3c], eax
je 0x41f4e4
mov edx, dword [ebp - 0x3c]
mov ebx, dword [edx]
cmp ebx, esi
je 0x41f4cd
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebx + 0xa0]
cmp ecx, eax
jne 0x41f4cd
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x7c]
push ecx
lea eax, [ebp - 0x2c]
push edx
push eax
mov ecx, ebx
call fcn.00427520
cmp dword [ebx + 0x70], esi
je 0x41edfd
cmp dword [ebx + 0x58], esi
jne 0x41edfd
mov eax, dword [ebx + 0x74]
cmp eax, esi
jne 0x41de30
cmp dword [ebx + 0x78], esi
jne 0x41de30
lea ecx, [ebp - 0x2c]
push ecx
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
jmp 0x41de4b
mov edx, dword [ebx + 0x78]
mov ecx, dword [ebp - 0x24]
push edx
mov edx, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x2c]
push ecx
push edx
push eax
call dword [sym.imp.GDI32.dll_CreateRoundRectRgn]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebx + 0x90]
cmp eax, 0xffffffff
je 0x41dead
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x74], edx
mov edx, dword [ebp - 0x24]
add ecx, eax
mov dword [ebp - 0x78], ecx
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x70], edx
mov edx, dword [ebp - 0x20]
add ecx, eax
sub edx, eax
mov dword [ebp - 0x74], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], edx
lea edx, [ebp - 0x78]
sub ecx, eax
push edx
mov dword [ebp - 0x70], ecx
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
push 4
mov dword [ebp - 0x18], eax
push eax
mov eax, dword [ebp - 0x1c]
push eax
push eax
call dword [sym.imp.GDI32.dll_CombineRgn]
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp + 8]
lea eax, [ecx + 4]
mov ecx, dword [edx + 8]
cmp eax, ecx
mov dword [ebp - 0x10], eax
je 0x41df31
mov ecx, dword [eax]
cmp ecx, esi
je 0x41df23
mov edx, dword [ecx + 0xa0]
cmp edx, dword [ebp + 0xc]
jne 0x41df23
cmp dword [ecx + 0x70], esi
je 0x41df23
cmp dword [ecx + 0x58], esi
jne 0x41df23
cmp dword [ecx + 0x90], 0xffffffff
jne 0x41df23
mov eax, dword [ebp - 0x80]
mov edx, dword [ebp - 0x7c]
push eax
lea eax, [ebp - 0x2a0]
push edx
push eax
call fcn.00427520
lea ecx, [ebp - 0x2a0]
push ecx
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
push 4
mov dword [ebp - 0x18], eax
push eax
mov eax, dword [ebp - 0x1c]
push eax
push eax
call dword [sym.imp.GDI32.dll_CombineRgn]
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
add eax, 4
mov dword [ebp - 0x10], eax
cmp eax, dword [ecx + 8]
jne 0x41dec0
push esi
push esi
push 5
call dword [sym.imp.GDI32.dll_CreatePen]
push eax
push edi
mov dword [ebp - 0x40], eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0xa4], eax
cmp dword [edx + 0xa0], esi
je 0x41dfb5
mov eax, edx
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x41dfb5
mov eax, dword [ebx + 0x7c]
mov ecx, dword [ebx + 0x94]
cmp ecx, eax
je 0x41dfb2
xor ecx, ecx
mov edx, eax
mov cl, ah
and eax, 0xff
shr edx, 0x10
and ecx, 0xff
and edx, 0xff
add ecx, edx
add ecx, eax
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
and edx, 0xff
mov eax, edx
shl eax, 8
or eax, edx
shl eax, 8
or eax, edx
push eax
jmp 0x41dfb9
mov ecx, dword [ebx + 0x7c]
push ecx
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov edx, eax
mov dword [ebp - 0x30], eax
push edx
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebx + 0x70]
dec eax
cmp eax, 5
ja case.default.0x41dfdf
jmp dword [eax*4 + 0x41f54c]
mov eax, dword [ebx + 0x7c]
mov ecx, dword [ebx + 0x90]
push eax
push ecx
push esi
call dword [sym.imp.GDI32.dll_CreatePen]
push eax
push edi
mov dword [ebp - 0x10], eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x2a8]
push edx
push eax
push ecx
push edi
call dword [sym.imp.GDI32.dll_MoveToEx]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
push edx
push eax
push edi
call dword [sym.imp.GDI32.dll_LineTo]
mov ecx, dword [ebp - 0x18]
push ecx
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp case.default.0x41dfdf
mov eax, dword [ebx + 0x7c]
mov ecx, dword [ebx + 0x94]
cmp eax, ecx
je case.default.0x41dfdf
cmp dword [ebx + 0x90], esi
jle 0x41e134
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 8]
push edx
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x41e0c9
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0xa0], esi
je 0x41e0c9
mov eax, dword [ebx + 0x7c]
xor edx, edx
mov ecx, eax
mov dl, ah
shr ecx, 0x10
and ecx, 0xff
and edx, 0xff
add ecx, edx
and eax, 0xff
add ecx, eax
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
and edx, 0xff
mov ecx, edx
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, edx
mov edx, dword [ebx + 0x90]
push ecx
push edx
jmp 0x41e0d4
mov eax, dword [ebx + 0x7c]
mov ecx, dword [ebx + 0x90]
push eax
push ecx
push esi
call dword [sym.imp.GDI32.dll_CreatePen]
mov edx, eax
mov dword [ebp - 0x10], eax
push edx
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
push 5
mov dword [ebp - 0x18], eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebx + 0x78]
mov ecx, dword [ebx + 0x74]
mov edx, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push ecx
mov ecx, dword [ebp - 0x28]
push edx
mov edx, dword [ebp - 0x2c]
push eax
push ecx
push edx
push edi
call dword [sym.imp.GDI32.dll_RoundRect]
mov eax, dword [ebp - 0x18]
push eax
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp case.default.0x41dfdf
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
push edx
push eax
push edi
call dword [sym.imp.GDI32.dll_FillRgn]
jmp case.default.0x41dfdf
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 8]
push edx
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x41e2c5
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0xa0], esi
je 0x41e2c5
mov eax, dword [ebx + 0x88]
xor ecx, ecx
mov edi, eax
mov cl, ah
shr edi, 0x10
and edi, 0xff
and ecx, 0xff
add edi, ecx
and eax, 0xff
add edi, eax
mov eax, 0x55555556
imul edi
mov eax, edx
xor ecx, ecx
shr eax, 0x1f
add edx, eax
mov eax, dword [ebx + 0x80]
mov edi, edx
mov edx, eax
mov cl, ah
and eax, 0xff
shr edx, 0x10
and ecx, 0xff
and edx, 0xff
add ecx, edx
mov word [ebp - 0xd2], si
add ecx, eax
mov eax, 0x55555556
imul ecx
mov eax, edx
mov ecx, edi
shr eax, 0x1f
and ecx, 0xff
add edx, eax
mov eax, ecx
and edx, 0xff
shl eax, 8
or eax, ecx
mov word [ebp - 0xc2], si
shl eax, 8
or eax, ecx
mov ecx, edx
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, edx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0xe0], edx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0xdc], edx
xor dx, dx
mov dl, cl
shl edx, 8
mov word [ebp - 0xd8], dx
xor edx, edx
mov dl, ch
movzx dx, dl
shr ecx, 0x10
movzx cx, cl
shl edx, 8
mov word [ebp - 0xd6], dx
mov edx, dword [ebp - 0x24]
shl ecx, 8
mov word [ebp - 0xd4], cx
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0xd0], edx
xor dx, dx
mov dword [ebp - 0xcc], ecx
mov dl, al
xor ecx, ecx
shl edx, 8
mov cl, ah
mov word [ebp - 0xc8], dx
shr eax, 0x10
xor dx, dx
movzx ax, al
mov dl, cl
shl edx, 8
shl eax, 8
mov word [ebp - 0xc6], dx
mov word [ebp - 0xc4], ax
mov eax, dword [ebp - 0x34]
push 1
lea ecx, [ebp - 0x248]
push 1
push ecx
lea edx, [ebp - 0xe0]
push 2
push edx
push eax
mov dword [ebp - 0x248], esi
mov dword [ebp - 0x244], 1
call dword [sym.imp.MSIMG32.dll_GradientFill]
mov edi, dword [ebp - 0x34]
jmp case.default.0x41dfdf
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebx + 0x80]
mov dword [ebp - 0x100], edx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0xfc], edx
xor dx, dx
mov dl, cl
mov eax, dword [ebx + 0x88]
shl edx, 8
mov word [ebp - 0xf8], dx
xor edx, edx
mov dl, ch
push 1
movzx dx, dl
shr ecx, 0x10
movzx cx, cl
shl edx, 8
mov word [ebp - 0xf6], dx
mov edx, dword [ebp - 0x24]
shl ecx, 8
mov word [ebp - 0xf4], cx
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0xf0], edx
xor dx, dx
mov dword [ebp - 0xec], ecx
mov dl, al
xor ecx, ecx
push 1
shl edx, 8
mov cl, ah
mov word [ebp - 0xe8], dx
shr eax, 0x10
xor dx, dx
mov word [ebp - 0xf2], si
movzx ax, al
mov dl, cl
lea ecx, [ebp - 0x260]
shl edx, 8
shl eax, 8
mov word [ebp - 0xe6], dx
push ecx
mov word [ebp - 0xe4], ax
mov word [ebp - 0xe2], si
mov dword [ebp - 0x260], esi
mov dword [ebp - 0x25c], 1
push 2
lea edx, [ebp - 0x100]
jmp 0x41edbb
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x41e500
mov edx, dword [ebp - 0x14]
cmp dword [edx + 0xa0], esi
je 0x41e500
mov eax, dword [ebx + 0x88]
xor ecx, ecx
mov edx, eax
mov cl, ah
shr edx, 0x10
and ecx, 0xff
and edx, 0xff
add ecx, edx
and eax, 0xff
add ecx, eax
mov eax, 0x55555556
imul ecx
mov eax, edx
xor ecx, ecx
shr eax, 0x1f
add edx, eax
mov eax, dword [ebx + 0x80]
mov dword [ebp - 0x18], edx
mov edx, eax
mov cl, ah
and eax, 0xff
shr edx, 0x10
and ecx, 0xff
and edx, 0xff
add ecx, edx
mov word [ebp - 0x132], si
add ecx, eax
mov eax, 0x55555556
imul ecx
mov ecx, dword [ebp - 0x18]
mov eax, edx
shr eax, 0x1f
and ecx, 0xff
add edx, eax
mov eax, ecx
and edx, 0xff
shl eax, 8
or eax, ecx
mov word [ebp - 0x122], si
shl eax, 8
or eax, ecx
mov ecx, edx
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, edx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x140], edx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x13c], edx
xor dx, dx
mov dl, cl
shl edx, 8
mov word [ebp - 0x138], dx
xor edx, edx
mov dl, ch
movzx dx, dl
shr ecx, 0x10
movzx cx, cl
shl edx, 8
mov word [ebp - 0x136], dx
mov edx, dword [ebp - 0x24]
shl ecx, 8
mov word [ebp - 0x134], cx
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x130], edx
xor dx, dx
mov dword [ebp - 0x12c], ecx
mov dl, al
xor ecx, ecx
shl edx, 8
mov cl, ah
mov word [ebp - 0x128], dx
shr eax, 0x10
xor dx, dx
movzx ax, al
mov dl, cl
shl edx, 8
shl eax, 8
mov word [ebp - 0x126], dx
mov word [ebp - 0x124], ax
push esi
lea ecx, [ebp - 0x258]
push 1
push ecx
mov dword [ebp - 0x258], esi
mov dword [ebp - 0x254], 1
push 2
lea edx, [ebp - 0x140]
jmp 0x41edbb
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebx + 0x80]
mov dword [ebp - 0x120], edx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x11c], edx
xor dx, dx
mov dl, cl
mov eax, dword [ebx + 0x88]
shl edx, 8
mov word [ebp - 0x118], dx
xor edx, edx
mov dl, ch
push esi
movzx dx, dl
shr ecx, 0x10
movzx cx, cl
shl edx, 8
mov word [ebp - 0x116], dx
mov edx, dword [ebp - 0x24]
shl ecx, 8
mov word [ebp - 0x114], cx
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x110], edx
xor dx, dx
mov dword [ebp - 0x10c], ecx
mov dl, al
xor ecx, ecx
push 1
shl edx, 8
mov cl, ah
mov word [ebp - 0x108], dx
shr eax, 0x10
xor dx, dx
mov word [ebp - 0x112], si
movzx ax, al
mov dl, cl
lea ecx, [ebp - 0x250]
shl edx, 8
shl eax, 8
mov word [ebp - 0x106], dx
push ecx
mov word [ebp - 0x104], ax
mov word [ebp - 0x102], si
mov dword [ebp - 0x250], esi
mov dword [ebp - 0x24c], 1
push 2
lea edx, [ebp - 0x120]
jmp 0x41edbb
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x41e846
mov edx, dword [ebp - 0x14]
cmp dword [edx + 0xa0], esi
je 0x41e846
mov eax, dword [ebx + 0x88]
xor ecx, ecx
mov edx, eax
mov cl, ah
shr edx, 0x10
and ecx, 0xff
and edx, 0xff
add ecx, edx
and eax, 0xff
add ecx, eax
mov eax, 0x55555556
imul ecx
fild dword [ebx + 0x8c]
fmul qword [0x439d80]
mov eax, edx
xor ecx, ecx
shr eax, 0x1f
add edx, eax
mov eax, dword [ebx + 0x84]
mov edi, edx
mov edx, eax
mov cl, ah
and eax, 0xff
shr edx, 0x10
and ecx, 0xff
and edx, 0xff
add ecx, edx
add ecx, eax
mov eax, 0x55555556
imul ecx
mov eax, edx
xor ecx, ecx
shr eax, 0x1f
add edx, eax
mov eax, dword [ebx + 0x80]
mov dword [ebp - 0x18], edx
mov edx, eax
mov cl, ah
and eax, 0xff
shr edx, 0x10
and ecx, 0xff
and edx, 0xff
add ecx, edx
add ecx, eax
mov eax, 0x55555556
imul ecx
mov eax, edx
mov ecx, edi
shr eax, 0x1f
and ecx, 0xff
add edx, eax
mov eax, ecx
shl eax, 8
or eax, ecx
shl eax, 8
or eax, ecx
mov ecx, dword [ebp - 0x18]
and ecx, 0xff
mov dword [ebp - 0x38], eax
mov eax, ecx
shl eax, 8
or eax, ecx
shl eax, 8
or eax, ecx
mov ecx, edx
and ecx, 0xff
mov dword [ebp - 0x18], eax
mov eax, ecx
mov edx, dword [ebp - 0x28]
shl eax, 8
or eax, ecx
mov dword [ebp - 0x1bc], edx
shl eax, 8
or eax, ecx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c0], ecx
xor cx, cx
mov cl, al
shl ecx, 8
mov word [ebp - 0x1b8], cx
xor edx, edx
fild dword [ebp - 0x20]
mov dl, ah
xor cx, cx
mov cl, dl
xor dx, dx
shr eax, 0x10
mov dl, al
mov eax, dword [ebp - 0x24]
fmul st(1)
shl ecx, 8
shl edx, 8
mov word [ebp - 0x1b6], cx
mov word [ebp - 0x1b4], dx
mov word [ebp - 0x1b2], si
mov dword [ebp - 0x1b0], eax
call sub.MSVCRT.dll__ftol
mov ecx, dword [ebp - 0x18]
xor edx, edx
movzx di, cl
fstp st(0)
mov dl, ch
mov dword [ebp - 0x10], eax
shr ecx, 0x10
movzx cx, cl
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x2c]
shl ecx, 8
movzx dx, dl
mov word [ebp - 0x1a4], cx
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x10]
mov word [ebp - 0x194], cx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x190], ecx
shl edx, 8
xor cx, cx
mov word [ebp - 0x1a6], dx
mov word [ebp - 0x196], dx
mov edx, dword [ebp - 0x20]
mov cl, al
mov dword [ebp - 0x18c], edx
shl ecx, 8
xor edx, edx
mov word [ebp - 0x188], cx
mov dl, ah
xor cx, cx
mov cl, dl
xor dx, dx
shr eax, 0x10
mov dl, al
push 1
shl edi, 8
shl ecx, 8
lea eax, [ebp - 0x290]
push 2
shl edx, 8
mov word [ebp - 0x186], cx
push eax
mov word [ebp - 0x1a8], di
mov word [ebp - 0x1a2], si
mov word [ebp - 0x198], di
mov word [ebp - 0x192], si
mov word [ebp - 0x184], dx
mov word [ebp - 0x182], si
mov dword [ebp - 0x290], esi
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0x288], 2
mov dword [ebp - 0x284], 3
push 4
lea ecx, [ebp - 0x1c0]
mov edx, dword [ebp - 0x34]
push ecx
push edx
call dword [sym.imp.MSIMG32.dll_GradientFill]
mov edi, dword [ebp - 0x34]
jmp case.default.0x41dfdf
mov ecx, dword [ebx + 0x84]
mov eax, dword [ebx + 0x88]
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x10], eax
fild dword [ebx + 0x8c]
mov eax, dword [ebx + 0x80]
mov dword [ebp - 0x240], edx
xor dx, dx
mov dword [ebp - 0x23c], ecx
fmul qword [0x439d80]
fild dword [ebp - 0x20]
mov dl, al
xor ecx, ecx
shl edx, 8
mov cl, ah
mov word [ebp - 0x238], dx
shr eax, 0x10
xor dx, dx
mov word [ebp - 0x232], si
movzx ax, al
fmul st(1)
mov dl, cl
mov ecx, dword [ebp - 0x24]
shl edx, 8
shl eax, 8
mov word [ebp - 0x236], dx
mov word [ebp - 0x234], ax
mov dword [ebp - 0x230], ecx
call sub.MSVCRT.dll__ftol
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x22c], eax
xor dx, dx
xor eax, eax
mov dl, cl
mov al, ch
mov word [ebp - 0x222], si
shr ecx, 0x10
movzx cx, cl
fstp st(0)
movzx ax, al
shl ecx, 8
mov dword [ebp - 0x38], ecx
mov word [ebp - 0x224], cx
mov ecx, dword [ebp - 0x2c]
mov word [ebp - 0x212], si
shl edx, 8
shl eax, 8
mov word [ebp - 0x228], dx
mov word [ebp - 0x226], ax
mov dword [ebp - 0x220], ecx
mov ecx, dword [ebp - 0x18]
mov word [ebp - 0x218], dx
mov dx, word [ebp - 0x38]
mov word [ebp - 0x216], ax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x21c], ecx
mov ecx, dword [ebp - 0x20]
mov word [ebp - 0x214], dx
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x10]
xor dx, dx
mov dword [ebp - 0x20c], ecx
mov dl, al
xor ecx, ecx
mov word [ebp - 0x202], si
shl edx, 8
mov cl, ah
mov word [ebp - 0x208], dx
shr eax, 0x10
xor dx, dx
mov dword [ebp - 0x280], esi
movzx ax, al
mov dl, cl
mov dword [ebp - 0x27c], 1
shl edx, 8
shl eax, 8
mov word [ebp - 0x206], dx
mov word [ebp - 0x204], ax
push 1
lea ecx, [ebp - 0x280]
push 2
push ecx
mov dword [ebp - 0x278], 2
mov dword [ebp - 0x274], 3
push 4
lea edx, [ebp - 0x240]
jmp 0x41edbb
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x41ec37
mov edx, dword [ebp - 0x14]
cmp dword [edx + 0xa0], esi
je 0x41ec37
mov eax, dword [ebx + 0x88]
xor ecx, ecx
mov edi, eax
mov cl, ah
shr edi, 0x10
and edi, 0xff
and ecx, 0xff
and eax, 0xff
add edi, ecx
add edi, eax
mov eax, 0x55555556
imul edi
fild dword [ebx + 0x8c]
fmul qword [0x439d80]
mov eax, edx
xor ecx, ecx
shr eax, 0x1f
add edx, eax
mov eax, dword [ebx + 0x84]
mov edi, edx
mov edx, eax
mov cl, ah
and eax, 0xff
shr edx, 0x10
and ecx, 0xff
and edx, 0xff
add ecx, edx
add ecx, eax
mov eax, 0x55555556
imul ecx
mov eax, edx
xor ecx, ecx
shr eax, 0x1f
add edx, eax
mov eax, dword [ebx + 0x80]
mov dword [ebp - 0x38], edx
mov edx, eax
mov cl, ah
and eax, 0xff
shr edx, 0x10
and ecx, 0xff
and edx, 0xff
add ecx, edx
add ecx, eax
mov eax, 0x55555556
imul ecx
mov eax, edx
mov ecx, edi
shr eax, 0x1f
and ecx, 0xff
add edx, eax
mov eax, ecx
shl eax, 8
or eax, ecx
shl eax, 8
or eax, ecx
mov ecx, dword [ebp - 0x38]
and ecx, 0xff
mov dword [ebp - 0x18], eax
mov eax, ecx
shl eax, 8
or eax, ecx
shl eax, 8
or eax, ecx
mov ecx, edx
and ecx, 0xff
mov dword [ebp - 0x38], eax
mov eax, ecx
mov edx, dword [ebp - 0x28]
shl eax, 8
or eax, ecx
mov dword [ebp - 0x1fc], edx
shl eax, 8
or eax, ecx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x200], ecx
xor cx, cx
mov cl, al
shl ecx, 8
mov word [ebp - 0x1f8], cx
xor edx, edx
fild dword [ebp - 0x24]
mov dl, ah
xor cx, cx
mov cl, dl
xor dx, dx
shr eax, 0x10
mov dl, al
mov word [ebp - 0x1f2], si
fmul st(1)
shl ecx, 8
shl edx, 8
mov word [ebp - 0x1f6], cx
mov word [ebp - 0x1f4], dx
call sub.MSVCRT.dll__ftol
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov dword [ebp - 0x1ec], ecx
mov ecx, dword [ebp - 0x38]
movzx di, cl
fstp st(0)
mov dl, ch
mov dword [ebp - 0x1f0], eax
shr ecx, 0x10
movzx cx, cl
shl ecx, 8
movzx dx, dl
mov word [ebp - 0x1e4], cx
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x28]
mov word [ebp - 0x1d4], cx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1d0], ecx
shl edx, 8
xor cx, cx
mov word [ebp - 0x1e6], dx
mov word [ebp - 0x1d6], dx
mov edx, dword [ebp - 0x20]
mov cl, al
mov dword [ebp - 0x1cc], edx
shl ecx, 8
xor edx, edx
mov word [ebp - 0x1c8], cx
mov dl, ah
xor cx, cx
mov cl, dl
xor dx, dx
shr eax, 0x10
mov dl, al
push esi
shl edi, 8
shl ecx, 8
lea eax, [ebp - 0x270]
push 2
shl edx, 8
mov word [ebp - 0x1c6], cx
push eax
mov word [ebp - 0x1e8], di
mov word [ebp - 0x1e2], si
mov word [ebp - 0x1d8], di
mov word [ebp - 0x1d2], si
mov word [ebp - 0x1c4], dx
mov word [ebp - 0x1c2], si
mov dword [ebp - 0x270], esi
mov dword [ebp - 0x26c], 1
mov dword [ebp - 0x268], 2
mov dword [ebp - 0x264], 3
push 4
lea ecx, [ebp - 0x200]
jmp 0x41e833
mov ecx, dword [ebx + 0x84]
mov eax, dword [ebx + 0x88]
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x10], eax
fild dword [ebx + 0x8c]
mov eax, dword [ebx + 0x80]
mov dword [ebp - 0x180], edx
xor dx, dx
mov dword [ebp - 0x17c], ecx
fmul qword [0x439d80]
fild dword [ebp - 0x24]
mov dl, al
xor ecx, ecx
shl edx, 8
mov cl, ah
mov word [ebp - 0x178], dx
shr eax, 0x10
xor dx, dx
mov word [ebp - 0x172], si
movzx ax, al
fmul st(1)
mov dl, cl
shl edx, 8
shl eax, 8
mov word [ebp - 0x176], dx
mov word [ebp - 0x174], ax
call sub.MSVCRT.dll__ftol
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], ecx
mov ecx, dword [ebp - 0x38]
xor dx, dx
xor eax, eax
mov dl, cl
mov al, ch
mov word [ebp - 0x162], si
shr ecx, 0x10
movzx cx, cl
fstp st(0)
movzx ax, al
shl ecx, 8
mov dword [ebp - 0x38], ecx
mov word [ebp - 0x164], cx
mov ecx, dword [ebp - 0x18]
mov word [ebp - 0x152], si
shl edx, 8
shl eax, 8
mov word [ebp - 0x168], dx
mov word [ebp - 0x166], ax
mov dword [ebp - 0x160], ecx
mov ecx, dword [ebp - 0x28]
mov word [ebp - 0x158], dx
mov dx, word [ebp - 0x38]
mov word [ebp - 0x156], ax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x15c], ecx
mov ecx, dword [ebp - 0x20]
mov word [ebp - 0x154], dx
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x10]
xor dx, dx
mov dword [ebp - 0x14c], ecx
mov dl, al
xor ecx, ecx
mov word [ebp - 0x142], si
shl edx, 8
mov cl, ah
mov word [ebp - 0x148], dx
shr eax, 0x10
xor dx, dx
mov dword [ebp - 0xa0], esi
movzx ax, al
mov dl, cl
mov dword [ebp - 0x9c], 1
shl edx, 8
shl eax, 8
mov word [ebp - 0x146], dx
mov word [ebp - 0x144], ax
push esi
lea ecx, [ebp - 0xa0]
push 2
push ecx
mov dword [ebp - 0x98], 2
mov dword [ebp - 0x94], 3
push 4
lea edx, [ebp - 0x180]
push edx
push edi
call dword [sym.imp.MSIMG32.dll_GradientFill]
mov eax, dword [ebp - 0xa8]
push eax
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebp - 0xa4]
push ecx
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [ebp - 0x40]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [ebx]
cmp ecx, esi
je 0x41ef82
cmp dword [ebx + 0xac], esi
jne 0x41ef61
push edi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebx]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x48], eax
cmp dword [edx + 0xa0], esi
je 0x41ee6b
mov eax, edx
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x41ee6b
cmp dword [ebx + 0x98], esi
je 0x41ee59
mov edx, dword [ebx + 0x94]
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x48]
push edx
push eax
push ecx
jmp 0x41ee63
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x48]
push 0xffffffffffffffff
push edx
push eax
call fcn.00418be0
add esp, 0xc
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x1c]
push ecx
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x40], eax
mov edx, dword [ebp - 0x30]
xor eax, eax
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xbc], eax
push ecx
mov dword [ebp - 0xb8], eax
push 0x18
mov dword [ebp - 0xb4], eax
push edx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0xac], eax
call dword [sym.imp.GDI32.dll_GetObjectA]
cmp dword [ebx + 0x9c], esi
jne 0x41eeff
cmp dword [ebx + 0x98], esi
je 0x41eeff
mov eax, dword [ebx + 0x94]
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ebp - 0xbc]
push eax
mov eax, dword [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0x20]
push edx
push esi
mov edx, dword [ebp - 0x24]
push esi
push eax
mov eax, dword [ebp - 0x28]
sub ecx, eax
push ecx
mov ecx, dword [ebp - 0x2c]
sub edx, ecx
push edx
push eax
push ecx
push edi
call fcn.0041dad0
add esp, 0x2c
jmp 0x41ef33
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ebp - 0x1c]
push 0xcc0020
push eax
mov eax, dword [ebp - 0x28]
push ecx
mov ecx, dword [ebp - 0x20]
push esi
push esi
sub ecx, eax
push edx
mov edx, dword [ebp - 0x24]
push ecx
mov ecx, dword [ebp - 0x2c]
sub edx, ecx
push edx
push eax
push ecx
push edi
call dword [sym.imp.GDI32.dll_StretchBlt]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x1c]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x30]
cmp eax, ecx
je 0x41ef82
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 0x48], esi
jmp 0x41ef82
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
push 3
push esi
sub edx, eax
push esi
push edx
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x2c]
push edx
push ecx
push eax
mov eax, dword [ebp - 0x2c]
push eax
push edi
call dword [sym.imp.USER32.dll_DrawIconEx]
cmp dword [ebx + 0x58], esi
je 0x41f4c6
push 1
push edi
call dword [sym.imp.GDI32.dll_SetBkMode]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x30], esi
mov eax, dword [ecx + 0xa4]
cmp eax, esi
mov dword [ebp - 0x1c], eax
jne 0x41efc1
mov edx, ecx
push esi
push esi
push 0x31
mov eax, dword [edx + 8]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp eax, esi
mov dword [ebp - 0x1c], eax
je 0x41f031
cmp dword [ebx + 0x60], esi
jne 0x41efd0
cmp dword [ebx + 0x64], esi
jne 0x41efd0
cmp dword [ebx + 0x6c], esi
je 0x41f026
lea ecx, [ebp - 0x2e4]
push ecx
push 0x3c
push eax
call dword [sym.imp.GDI32.dll_GetObjectA]
mov edx, dword [ebx + 0x60]
mov al, byte [ebx + 0x64]
neg edx
sbb edx, edx
mov byte [ebp - 0x2cf], al
mov eax, dword [ebx + 0x6c]
and edx, 0x12c
add edx, 0x190
cmp eax, esi
mov dword [ebp - 0x2d4], edx
je 0x41f00f
mov dword [ebp - 0x2e4], eax
lea ecx, [ebp - 0x2e4]
push ecx
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 1
push eax
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x30], eax
mov dl, byte [ebx + 0x48]
lea edi, [ebx + 0x48]
push esi
lea ecx, [ebp - 0x68]
mov byte [ebp - 0x68], dl
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::npos]
mov ecx, dword [eax]
push ecx
push esi
push edi
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_int__unsigned_int_]
lea edx, [ebp - 0x68]
push 0x446084
push edx
mov dword [ebp - 4], esi
call dword [sym.imp.MSVCP60.dll_bool___cdecl_std::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_short_int_const__]
add esp, 8
test al, al
je 0x41f0e1
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x5e2]
mov word [ebp - 0x5e4], si
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x14]
push 0x100
stosw word es:[edi], ax
mov edx, dword [ecx + 8]
lea eax, [ebp - 0x5e4]
push eax
push edx
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea eax, [ebp - 0x5e4]
push eax
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
mov edi, eax
lea ecx, [ebp - 0x68]
push 1
push edi
call dword [sym.imp.MSVCP60.dll_private:_bool___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Grow_unsigned_int__bool_]
test al, al
je 0x41f0e1
mov edx, dword [ebp - 0x64]
lea ecx, [ebp - 0x5e4]
push edi
push ecx
push edx
call fcn.00426110
add esp, 0xc
lea ecx, [ebp - 0x68]
push edi
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Eos_unsigned_int_]
mov al, byte [ebp + 0xf]
push esi
lea ecx, [ebp - 0x58]
mov byte [ebp - 0x58], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
lea ecx, [ebp - 0x68]
push 0x446084
push ecx
mov byte [ebp - 4], 1
call dword [sym.imp.MSVCP60.dll_bool___cdecl_std::operator_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_short_int_const__]
add esp, 8
test al, al
je 0x41f195
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x3e3]
mov byte [ebp - 0x3e4], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x3e4]
push 0x100
push edx
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea edi, [ebp - 0x3e4]
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [ebp - 0x40], ecx
push ecx
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVCP60.dll_private:_bool___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Grow_unsigned_int__bool_]
test al, al
je 0x41f268
mov eax, dword [ebp - 0x40]
mov edi, dword [ebp - 0x54]
mov ecx, eax
lea esi, [ebp - 0x3e4]
mov edx, ecx
push eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Eos_unsigned_int_]
xor esi, esi
jmp 0x41f268
mov eax, dword [ebp - 0x64]
cmp eax, esi
jne 0x41f1a6
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
mov dword [ebp - 0x10], eax
jmp 0x41f1a9
mov dword [ebp - 0x10], eax
cmp eax, esi
jne 0x41f1b2
mov dword [ebp - 0x10], esi
jmp 0x41f1e7
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax + eax + 2]
mov dword [ebp - 0x40], eax
add eax, 3
and al, 0xfc
call fcn.004327e0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x10]
mov edi, esp
push esi
push esi
push eax
push edi
push 0xffffffffffffffff
push ecx
push esi
push esi
mov byte [edi], 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x10]
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [ebp - 0x40], ecx
push ecx
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVCP60.dll_private:_bool___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Grow_unsigned_int__bool_]
test al, al
je 0x41f22c
mov eax, dword [ebp - 0x40]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x54]
mov ecx, eax
mov edx, ecx
push eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Eos_unsigned_int_]
xor esi, esi
push 0x446084
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
mov edi, eax
lea ecx, [ebp - 0x68]
push 1
push edi
call dword [sym.imp.MSVCP60.dll_private:_bool___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Grow_unsigned_int__bool_]
test al, al
je 0x41f268
mov eax, dword [ebp - 0x64]
push edi
push 0x446084
push eax
call fcn.00426110
add esp, 0xc
lea ecx, [ebp - 0x68]
push edi
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Eos_unsigned_int_]
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0xa0], esi
je 0x41f2d3
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x41f2d3
mov eax, dword [ebx + 0x7c]
mov ecx, dword [ebx + 0x94]
cmp ecx, eax
je 0x41f2cc
xor ecx, ecx
mov edx, eax
mov cl, ah
and eax, 0xff
shr edx, 0x10
and ecx, 0xff
and edx, 0xff
add ecx, edx
add ecx, eax
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
and edx, 0xff
mov eax, edx
shl eax, 8
or eax, edx
shl eax, 8
or eax, edx
mov ecx, dword [ebp - 0x34]
push eax
push ecx
jmp 0x41f2db
mov edx, dword [ebx + 0x7c]
mov eax, dword [ebp - 0x34]
push edx
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov eax, dword [ebx + 0xa4]
mov edi, 0x8004
cmp eax, 1
jne 0x41f2f8
mov edi, 0x8005
jmp 0x41f302
cmp eax, 2
jne 0x41f302
mov edi, 0x8006
cmp dword [ebx + 0x68], esi
jne 0x41f30c
or edi, 0x20
jmp 0x41f30f
or edi, 0x10
lea ecx, [ebp - 0x68]
push 0x446084
push ecx
call dword [sym.imp.MSVCP60.dll_bool___cdecl_std::operator__class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_short_int_const__]
add esp, 8
test al, al
je 0x41f383
cmp dword [ebx + 0x5c], esi
je 0x41f35e
cmp dword [ebx + 0x68], esi
jne 0x41f35e
mov eax, dword [ebp - 0x64]
cmp eax, esi
jne 0x41f33b
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xa4]
push esi
push edx
push esi
push ecx
mov ecx, dword [ebp - 0x34]
lea edx, [ebp - 0x2c]
push edx
push ecx
push eax
call fcn.00421010
add esp, 0x1c
jmp 0x41f43c
mov eax, dword [ebp - 0x64]
cmp eax, esi
jne 0x41f36a
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
mov ecx, dword [ebp - 0x60]
lea edx, [ebp - 0x2c]
push edi
push edx
mov edx, dword [ebp - 0x34]
push ecx
push eax
push edx
call dword [sym.imp.USER32.dll_DrawTextW]
jmp 0x41f43c
cmp dword [ebp - 0x50], esi
jbe 0x41f43c
lea eax, [ebp - 0x58]
push 0x445fdc
push eax
call dword [sym.imp.MSVCP60.dll_bool___cdecl_std::operator__class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___char_const__]
add esp, 8
test al, al
je 0x41f43c
cmp dword [ebx + 0x5c], esi
je 0x41f41c
cmp dword [ebx + 0x68], esi
jne 0x41f41c
mov eax, dword [ebp - 0x54]
cmp eax, esi
jne 0x41f3bc
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
cmp eax, esi
mov dword [ebp - 0x10], eax
jne 0x41f3c7
xor eax, eax
jmp 0x41f3fc
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, eax
inc edi
lea eax, [edi + edi]
add eax, 3
and al, 0xfc
call fcn.004327e0
mov edx, dword [ebp - 0x10]
mov eax, esp
push edi
push eax
push 0xffffffffffffffff
push edx
push esi
push esi
mov dword [ebp - 0x40], eax
mov word [eax], si
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebx + 0xa4]
push esi
push ecx
push esi
push edx
mov edx, dword [ebp - 0x34]
lea ecx, [ebp - 0x2c]
push ecx
push edx
push eax
call fcn.00421010
add esp, 0x1c
jmp 0x41f43c
mov eax, dword [ebp - 0x54]
cmp eax, esi
jne 0x41f428
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
mov edx, dword [ebp - 0x50]
lea ecx, [ebp - 0x2c]
push edi
push ecx
push edx
push eax
mov eax, dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_DrawTextA]
mov eax, dword [ebp - 0x30]
cmp eax, esi
je 0x41f44e
mov ecx, dword [ebp - 0x34]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp dword [ebp - 0x18], esi
je 0x41f45d
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0
cmp eax, esi
je 0x41f485
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x41f47c
cmp al, 0xff
je 0x41f47c
dec al
mov byte [ecx], al
jmp 0x41f485
push ecx
call sub.MFC42.DLL_operatordelete
add esp, 4
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x4c], esi
cmp ecx, esi
mov dword [ebp - 4], 0xffffffff
je 0x41f4ba
mov al, byte [ecx - 1]
test al, al
je 0x41f4ae
cmp al, 0xff
je 0x41f4ae
dec al
mov byte [ecx - 1], al
jmp 0x41f4ba
add ecx, 0xfffffffe
push ecx
call sub.MFC42.DLL_operatordelete
add esp, 4
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x30], 1
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x3c]
add eax, 4
mov edx, dword [ecx + 8]
mov dword [ebp - 0x3c], eax
cmp eax, edx
jne 0x41ddd5
mov edx, dword [ebp + 0xc]
push edx
push edi
call fcn.0041f730
mov ebx, dword [ebp - 0x14]
push eax
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 4]
push eax
push ecx
call dword [sym.imp.USER32.dll_CallWindowProcA]
test eax, eax
jne 0x41f519
mov edx, dword [ebp + 0xc]
push edx
push edi
call fcn.0041f730
push eax
mov eax, dword [ebx + 8]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp edi, esi
je 0x41f52d
cmp dword [ebp + 0x10], esi
jne 0x41f52d
mov ecx, dword [ebx + 8]
push edi
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x30]
lea esp, [ebp - 0x5f0]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc