Function at 0x402cf0
Capabilities:
Capture webcam image
Get graphical window text

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x3a8
mov eax, dword [ecx]
mov ebx, dword [ecx + 4]
mov esi, dword [ecx + 8]
mov edi, dword [ecx + 0xc]
mov dword [ebp - 0x340], eax
cmp dword [0x410004], ebx
je 0x404750
cmp ebx, 0x4e
je 0x404c60
ja 0x402d50
lea eax, [ebx - 1]
cmp eax, 0xf
ja case.0x402d44.0
cmp ebx, 0x10
ja case.0x402d44.0
jmp dword [ebx*4 + 0x41329c]
cmp ebx, 0x117
je 0x404778
jbe 0x403198
cmp ebx, 0x233
je 0x403270
cmp ebx, 0x400
jne case.0x402d44.0
mov edi, dword [ebp - 0x340]
mov ebx, dword [sym.imp.user32.dll_GetDlgItem]
mov dword [esp + 4], 0x7d1
mov dword [esp], edi
call ebx
sub esp, 8
mov esi, eax
mov dword [esp], edi
mov dword [esp + 4], 0x7d4
call ebx
sub esp, 8
mov edi, eax
mov dword [esp + 4], 0x7d2
mov dword [esp], eax
call ebx
sub esp, 8
mov dword [ebp - 0x340], eax
mov dword [esp], edi
mov dword [esp + 4], 0x7d3
call ebx
lea edx, [ebp - 0x290]
mov ecx, 0x1c
mov dword [ebp - 0x2f0], 8
mov edi, edx
mov ebx, eax
xor eax, eax
sub esp, 8
rep stosd dword es:[edi], eax
lea edx, [ebp - 0x21c]
mov ecx, 0x2e
mov dword [ebp - 0x294], 0x74
mov dword [ebp - 0x2ec], 0x4b0
mov edi, edx
rep stosd dword es:[edi], eax
mov edi, dword [sym.imp.user32.dll_SendMessageW]
lea eax, [ebp - 0x2f0]
mov dword [esp], esi
mov dword [ebp - 0x220], 0xbc
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], 0x45f
mov dword [ebp - 0x33c], edi
call edi
sub esp, 0x10
test eax, eax
setne al
mov dword [esp + 8], 0x3f6
movzx eax, al
mov dword [esp + 4], 0x401
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x340]
mov dword [esp], eax
call edi
lea edx, [ebp - 0x294]
sub esp, 0x10
mov dword [esp + 0xc], edx
mov dword [esp + 8], 1
mov dword [esp + 4], 0x43a
mov dword [esp], esi
call edi
lea eax, [ebp - 0x300]
sub esp, 0x10
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x30c]
mov dword [esp + 8], eax
mov dword [esp + 4], 0xb0
mov dword [esp], esi
call edi
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xc6
mov dword [esp], esi
call edi
sub esp, 0x10
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x340]
mov dword [esp + 8], 0x51b
mov dword [esp + 4], 0x401
mov dword [esp], eax
call edi
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x455
mov dword [esp], esi
call edi
sub esp, 0x10
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x340]
mov dword [esp + 8], 0x51c
mov dword [esp + 4], 0x401
mov dword [esp], eax
call edi
mov edx, dword [ebp - 0x300]
xor eax, eax
sub esp, 0x10
cmp dword [ebp - 0x30c], edx
setne al
mov dword [esp + 8], 0x51f
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x340]
mov dword [esp + 4], 0x401
mov dword [esp], eax
call edi
mov edx, dword [ebp - 0x300]
xor eax, eax
sub esp, 0x10
cmp dword [ebp - 0x30c], edx
setne al
mov dword [esp + 8], 0x51e
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x340]
mov dword [esp + 4], 0x401
mov dword [esp], eax
call edi
xor eax, eax
sub esp, 0x10
test byte [ebp - 0x290], 1
je 0x402fb6
mov eax, dword [ebp - 0x28c]
and eax, 1
mov edi, dword [ebp - 0x33c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x578
mov dword [esp + 4], 0x402
mov dword [esp], ebx
call edi
mov eax, dword [ebp - 0x290]
sub esp, 0x10
not eax
mov dword [esp + 8], 0x578
and eax, 1
mov dword [esp + 4], 0x405
mov dword [esp + 0xc], eax
mov dword [esp], ebx
call edi
xor eax, eax
sub esp, 0x10
test byte [ebp - 0x290], 2
je 0x403015
mov eax, dword [ebp - 0x28c]
shr eax, 1
and eax, 1
mov edi, dword [ebp - 0x33c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x579
mov dword [esp + 4], 0x402
mov dword [esp], ebx
call edi
mov eax, dword [ebp - 0x290]
sub esp, 0x10
shr eax, 1
mov dword [esp + 8], 0x579
xor eax, 1
mov dword [esp + 4], 0x405
and eax, 1
mov dword [esp], ebx
mov dword [esp + 0xc], eax
call edi
xor eax, eax
sub esp, 0x10
test byte [ebp - 0x290], 4
je 0x403078
mov eax, dword [ebp - 0x28c]
shr eax, 2
and eax, 1
mov edi, dword [ebp - 0x33c]
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x57a
mov dword [esp + 4], 0x402
call edi
mov eax, dword [ebp - 0x290]
sub esp, 0x10
shr eax, 2
mov dword [esp], ebx
xor eax, 1
mov dword [esp + 8], 0x57a
and eax, 1
mov dword [esp + 4], 0x405
mov dword [esp + 0xc], eax
call edi
lea eax, [ebp - 0x220]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x43d
mov dword [esp], esi
call edi
xor eax, eax
sub esp, 0x10
cmp word [ebp - 0x208], 1
sete al
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x44c
mov dword [esp + 4], 0x402
call edi
xor eax, eax
sub esp, 0x10
cmp word [ebp - 0x208], 3
sete al
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x44d
mov dword [esp + 4], 0x402
call edi
xor eax, eax
sub esp, 0x10
cmp word [ebp - 0x208], 2
sete al
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x44e
mov dword [esp + 4], 0x402
call edi
xor eax, eax
sub esp, 0x10
cmp word [ebp - 0x218], 0
setne al
mov dword [esp], ebx
xor ebx, ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x522
mov dword [esp + 4], 0x402
call edi
sub esp, 0x10
jmp 0x40325c
cmp ebx, 0x7b
je 0x403238
cmp ebx, 0x111
jne case.0x402d44.0
call sym._preview_isactive
mov ebx, eax
test eax, eax
jne 0x405320
mov eax, dword [ebp - 0x340]
mov dword [esp + 4], 0x7d1
mov dword [esp], eax
mov eax, dword [sym.imp.user32.dll_GetDlgItem]
mov dword [ebp - 0x33c], eax
call eax
mov dword [ebp - 0x344], eax
sub esp, 8
cmp eax, edi
je 0x4032af
movzx edx, si
cmp si, 0x57b
ja 0x4062a0
cmp edx, 0x513
ja 0x4058a0
cmp edx, 0x44e
ja 0x405858
cmp edx, 0x3e7
jbe case.0x4058af.1321
lea eax, [edx - 0x3e8]
cmp eax, 0x66
ja case.0x4058af.1321
jmp dword [eax*4 + 0x4132e0]
mov dword [esp + 0xc], edi
mov dword [esp + 8], esi
mov dword [esp + 4], 0x7b
mov eax, dword [ebp - 0x340]
mov dword [esp], eax
call dword [sym.imp.user32.dll_DefWindowProcW]
sub esp, 0x10
mov ebx, eax
lea esp, [ebp - 0x10]
mov eax, ebx
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0x10
lea ebx, [ebp - 0x220]
mov dword [esp + 0xc], 0x104
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov dword [esp], esi
call dword [sym.imp.shell32.dll_DragQueryFileW]
sub esp, 0x10
mov dword [esp], esi
call dword [sym.imp.shell32.dll_DragFinish]
sub esp, 4
call sym._prompt_save_changes
test eax, eax
jne 0x405340
xor ebx, ebx
lea esp, [ebp - 0x10]
mov eax, ebx
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0x10
call sym._preview_isactive
test eax, eax
je 0x405378
lea esi, [esi]
mov dword [esp + 0xc], edi
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
jmp 0x403248
mov dword [esp], 0
xor ebx, ebx
call dword [sym.imp.user32.dll_PostQuitMessage]
sub esp, 4
jmp 0x40325c
mov eax, dword [ebp - 0x340]
mov ecx, edi
mov edx, esi
call sym._OnSize
mov ebx, eax
jmp 0x40325c
test si, si
je 0x4032af
mov eax, dword [ebp - 0x340]
mov dword [esp + 4], 0x7d1
xor ebx, ebx
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetDlgItem]
sub esp, 8
mov dword [esp], eax
call dword [sym.imp.user32.dll_SetFocus]
sub esp, 4
jmp 0x40325c
call sym._preview_isactive
mov ebx, eax
test eax, eax
jne 0x405260
call sym._prompt_save_changes
test eax, eax
je 0x4032af
mov eax, dword [0x410cb8]
mov dword [esp], eax
call sym._registry_set_options
mov dword [esp + 4], 0x411860
mov dword [esp], 0x41004c
call sym._registry_set_formatopts_all
mov dword [esp], 0
call dword [sym.imp.user32.dll_PostQuitMessage]
sub esp, 4
jmp 0x40325c
mov eax, dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov dword [esp], 0
mov dword [ebp - 0x35c], eax
call eax
mov edi, dword [ebp - 0x340]
sub esp, 4
mov esi, eax
mov dword [esp + 8], edi
mov dword [esp + 0xc], 0x7d0
mov dword [esp + 4], str.RichEdit_text
mov dword [esp], 0x50000040
call dword [sym.imp.comctl32.dll_CreateStatusWindowW]
mov eax, dword [sym.imp.user32.dll_CreateWindowExW]
mov dword [ebp - 0x340], edi
sub esp, 0x10
mov dword [esp + 0x20], edi
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], esi
mov dword [esp + 0x24], 0x7d4
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80000000
mov dword [esp + 0x10], 0x80000000
mov dword [esp + 0xc], 0x56000241
mov dword [esp + 8], 0
mov dword [esp + 4], 0x4131d4
mov dword [esp], pe_nt_image_headers32
mov dword [ebp - 0x350], eax
call eax
mov dword [ebp - 0x318], 0xc
mov dword [ebp - 0x314], 0
sub esp, 0x30
mov edi, eax
lea eax, [ebp - 0x318]
mov dword [esp + 0xc], eax
mov eax, dword [sym.imp.user32.dll_SendMessageW]
mov dword [ebp - 0x310], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x404
mov dword [esp], edi
mov dword [ebp - 0x33c], eax
call eax
sub esp, 0x10
test eax, eax
je 0x4068e4
mov dword [esp + 0x10], esi
mov dword [esp], edi
mov dword [esp + 0x30], 0x14
mov dword [esp + 0x2c], 0x10
mov dword [esp + 0x28], 0x10
mov dword [esp + 0x24], 0x18
mov dword [esp + 0x20], 0x18
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x64
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0x7d2
mov dword [esp + 4], 0x5000010a
mov dword [ebp - 0x348], esi
mov dword [ebp - 0x344], edi
call sym._CreateToolbarEx_52
mov ecx, dword [sym.imp.user32.dll_GetDC]
mov edx, dword [ebp - 0x340]
sub esp, 0x34
mov edi, eax
mov dword [ebp - 0x358], ecx
mov dword [esp], edx
call ecx
sub esp, 4
mov esi, eax
mov dword [esp + 4], 0x5a
mov dword [esp], eax
call dword [sym.imp.gdi32.dll_GetDeviceCaps]
mov edx, dword [ebp - 0x340]
sub esp, 8
mov dword [ebp - 0x34c], eax
mov dword [esp], edx
mov edx, dword [sym.imp.user32.dll_ReleaseDC]
mov dword [esp + 4], esi
mov dword [ebp - 0x364], edx
call edx
xor eax, eax
mov dword [ebp - 0x330], 0xffffffff
sub esp, 8
cmp dword [ebp - 0x34c], 0x77
setg al
mov dword [esp], edi
mov dword [ebp - 0x32c], eax
lea eax, [ebp - 0x330]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x33c]
mov dword [esp + 8], 0
mov dword [esp + 4], 0x413
call eax
lea edx, [ebp - 0x220]
mov dword [ebp - 0x218], 0
mov esi, eax
sub esp, 0x10
lea eax, [eax + 6]
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x33c]
mov dword [esp + 0xc], edx
mov dword [esp], edi
mov dword [ebp - 0x21c], 0x3eb
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea eax, [esi + 7]
lea edx, [ebp - 0x220]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x33c]
mov dword [esp + 0xc], edx
mov dword [esp], edi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x21c], 0x3e9
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea eax, [esi + 8]
lea edx, [ebp - 0x220]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x33c]
mov dword [esp + 0xc], edx
mov dword [esp], edi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x21c], 0x3ea
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x21c], 0
mov dword [esp + 0xc], edx
mov dword [esp], edi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x220], 0xffffffff
mov byte [ebp - 0x217], 1
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea eax, [esi + 0xe]
lea edx, [ebp - 0x220]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x33c]
mov dword [esp + 0xc], edx
mov dword [esp], edi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x21c], 0x3f5
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea eax, [esi + 9]
lea edx, [ebp - 0x220]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x33c]
mov dword [esp + 0xc], edx
mov dword [esp], edi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x21c], 0x3f3
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x21c], 0
mov dword [esp + 0xc], edx
mov dword [esp], edi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x220], 0xffffffff
mov byte [ebp - 0x217], 1
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea eax, [esi + 0xc]
lea edx, [ebp - 0x220]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x33c]
mov dword [esp + 0xc], edx
mov dword [esp], edi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x21c], 0x3f6
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x21c], 0
mov dword [esp + 0xc], edx
mov dword [esp], edi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x220], 0xffffffff
mov byte [ebp - 0x217], 1
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea edx, [ebp - 0x220]
mov dword [ebp - 0x220], esi
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [esp + 0xc], edx
mov dword [esp], edi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x21c], 0x51f
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea eax, [esi + 1]
lea edx, [ebp - 0x220]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x33c]
mov dword [esp + 0xc], edx
mov dword [esp], edi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x21c], 0x51e
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea eax, [esi + 2]
lea edx, [ebp - 0x220]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x33c]
mov dword [esp + 0xc], edx
mov dword [esp], edi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x21c], 0x520
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea eax, [esi + 3]
lea edx, [ebp - 0x220]
add esi, 4
sub esp, 0x10
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x218], 0
mov dword [esp + 0xc], edx
mov dword [esp], edi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x21c], 0x51b
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea edx, [ebp - 0x220]
mov dword [ebp - 0x220], esi
mov esi, dword [ebp - 0x33c]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [esp + 0xc], edx
mov dword [esp], edi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x21c], 0x51c
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call esi
lea edx, [ebp - 0x220]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x21c], 0
mov dword [esp + 0xc], edx
mov dword [esp], edi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x220], 0xffffffff
mov byte [ebp - 0x217], 1
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call esi
lea edx, [ebp - 0x220]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x214], 0
mov dword [esp + 0xc], edx
mov dword [esp], edi
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0x640
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call esi
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x421
call esi
mov dword [ebp - 0x33c], esi
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x43a
call esi
mov edx, dword [ebp - 0x348]
mov ecx, dword [ebp - 0x350]
shr eax, 0x10
sub esp, 0x10
mov esi, eax
mov eax, dword [ebp - 0x344]
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], 0
mov dword [esp + 0x24], 0x7dd
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x96
mov dword [esp + 0x18], 0xc8
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x50800102
mov dword [esp + 8], 0
mov dword [esp + 4], str.ComboBoxEx32
mov dword [esp], 0
call ecx
mov ecx, eax
sub esp, 0x30
lea eax, [ebp - 0x300]
mov dword [ebp - 0x34c], ecx
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.user32.dll_GetWindowRect]
mov eax, dword [ebp - 0x2f4]
mov edx, esi
sub eax, dword [ebp - 0x2fc]
sub esp, 8
cmp eax, esi
mov dword [ebp - 0x274], edi
lea edi, [ebp - 0x294]
cmovge edx, eax
mov eax, dword [ebp - 0x344]
mov esi, dword [ebp - 0x33c]
mov dword [ebp - 0x294], 0x50
mov dword [ebp - 0x290], 0x171
mov dword [ebp - 0x26c], edx
mov dword [ebp - 0x354], edx
mov dword [ebp - 0x25c], edx
mov dword [ebp - 0x28c], 0x105
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x260], 2
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x40a
mov dword [esp], eax
call esi
mov ecx, dword [ebp - 0x34c]
mov dword [ebp - 0x33c], esi
sub esp, 0x10
mov dword [esp], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x31
call esi
mov ecx, dword [ebp - 0x34c]
sub esp, 0x10
mov dword [ebp - 0x360], eax
mov dword [esp], ecx
mov ecx, dword [ebp - 0x358]
call ecx
mov edx, dword [sym.imp.gdi32.dll_SelectObject]
mov esi, eax
mov eax, dword [ebp - 0x360]
sub esp, 4
mov dword [ebp - 0x36c], edx
mov dword [esp], esi
mov dword [esp + 4], eax
call edx
mov ecx, dword [sym.imp.gdi32.dll_GetTextExtentPointW]
sub esp, 8
mov dword [ebp - 0x360], eax
lea eax, [ebp - 0x328]
mov dword [esp], esi
mov dword [ebp - 0x368], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0xf
mov dword [esp + 4], 0x41c240
call ecx
lea eax, [ebp - 0x320]
mov ecx, dword [ebp - 0x368]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov dword [esp + 8], 3
mov dword [esp + 4], 0x41c320
call ecx
mov eax, dword [ebp - 0x360]
mov edx, dword [ebp - 0x36c]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], eax
call edx
mov ecx, dword [ebp - 0x364]
sub esp, 8
mov dword [esp + 4], esi
mov esi, dword [ebp - 0x34c]
mov dword [esp], esi
call ecx
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x274], esi
sub esp, 8
mov esi, dword [sym.imp.kernel32.dll_MulDiv]
mov dword [esp + 8], 2
mov dword [esp + 4], 3
mov dword [esp], eax
call esi
mov edx, dword [ebp - 0x344]
add eax, dword [ebp - 0x354]
mov dword [ebp - 0x260], 4
sub esp, 0xc
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x33c]
mov dword [esp], edx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x40a
call eax
mov edx, dword [ebp - 0x344]
mov ecx, dword [ebp - 0x348]
sub esp, 0x10
mov dword [esp + 0x20], edx
mov dword [esp + 0x28], ecx
mov ecx, dword [ebp - 0x350]
mov dword [esp + 0x2c], 0
mov dword [esp + 0x24], 0x7de
mov dword [esp + 0x1c], 0x96
mov dword [esp + 0x18], 0x32
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x50800002
mov dword [esp + 8], 0
mov dword [esp + 4], str.ComboBoxEx32
mov dword [esp], 0
call ecx
mov dword [ebp - 0x360], eax
sub esp, 0x30
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x320]
mov dword [esp + 8], 2
mov dword [esp + 4], 3
mov dword [esp], eax
call esi
mov esi, dword [ebp - 0x344]
add eax, dword [ebp - 0x354]
mov dword [ebp - 0x260], 5
sub esp, 0xc
xor dword [ebp - 0x28c], 1
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x33c]
mov dword [esp], esi
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x40a
call eax
mov ecx, dword [ebp - 0x348]
mov dword [ebp - 0x344], esi
sub esp, 0x10
mov dword [esp + 0x10], ecx
mov dword [esp], esi
mov dword [esp + 0x30], 0x14
mov dword [esp + 0x2c], 0x10
mov dword [esp + 0x28], 0x10
mov dword [esp + 0x24], 0x10
mov dword [esp + 0x20], 0x10
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x65
mov dword [esp + 0xc], 8
mov dword [esp + 8], 0x7d3
mov dword [esp + 4], 0x1000010a
call sym._CreateToolbarEx_52
sub esp, 0x34
mov esi, eax
mov dword [esp], eax
mov eax, dword [ebp - 0x33c]
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0x454
call eax
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x214], 0
mov dword [esp + 0xc], edx
mov dword [esp], esi
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0x578
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x214], 0
mov dword [esp + 0xc], edx
mov dword [esp], esi
mov dword [ebp - 0x220], 1
mov dword [ebp - 0x21c], 0x579
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x214], 0
mov dword [esp + 0xc], edx
mov dword [esp], esi
mov dword [ebp - 0x220], 2
mov dword [ebp - 0x21c], 0x57a
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x214], 0
mov dword [esp + 0xc], edx
mov dword [esp], esi
mov dword [ebp - 0x220], 3
mov dword [ebp - 0x21c], 0x57b
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x21c], 0
mov dword [esp + 0xc], edx
mov dword [esp], esi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x220], 0xffffffff
mov byte [ebp - 0x217], 1
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x214], 0
mov dword [esp + 0xc], edx
mov dword [esp], esi
mov dword [ebp - 0x220], 4
mov dword [ebp - 0x21c], 0x44c
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x214], 0
mov dword [esp + 0xc], edx
mov dword [esp], esi
mov dword [ebp - 0x220], 5
mov dword [ebp - 0x21c], 0x44d
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x214], 0
mov dword [esp + 0xc], edx
mov dword [esp], esi
mov dword [ebp - 0x220], 6
mov dword [ebp - 0x21c], 0x44e
mov byte [ebp - 0x218], 4
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov dword [ebp - 0x21c], 0
mov dword [esp + 0xc], edx
mov dword [esp], esi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x220], 0xffffffff
mov byte [ebp - 0x217], 1
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
lea edx, [ebp - 0x220]
mov eax, 0x804
mov dword [ebp - 0x218], 0
sub esp, 0x10
mov word [ebp - 0x218], ax
mov eax, dword [ebp - 0x33c]
mov dword [esp + 0xc], edx
mov dword [esp], esi
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x220], 7
mov dword [ebp - 0x21c], 0x522
mov dword [ebp - 0x210], 0xffffffff
mov dword [esp + 8], 1
mov dword [esp + 4], 0x444
call eax
mov eax, dword [ebp - 0x33c]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x421
call eax
mov edx, dword [ebp - 0x344]
mov dword [ebp - 0x274], esi
sub esp, 0x10
mov esi, dword [ebp - 0x33c]
mov dword [ebp - 0x260], 3
mov dword [esp], edx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x40a
call esi
mov ecx, dword [ebp - 0x348]
mov edx, dword [ebp - 0x344]
sub esp, 0x10
mov dword [esp + 0x28], ecx
mov ecx, dword [ebp - 0x350]
mov dword [esp + 0x20], edx
mov dword [esp + 0x2c], 0
mov dword [esp + 0x24], 0x7df
mov dword [esp + 0x1c], 0xa
mov dword [esp + 0x18], 0xc8
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x50000000
mov dword [esp + 8], 0
mov dword [esp + 4], str.Static
mov dword [esp], 0
call ecx
mov edx, dword [ebp - 0x344]
or dword [ebp - 0x28c], 1
sub esp, 0x30
mov dword [ebp - 0x274], eax
mov dword [esp], edx
mov dword [ebp - 0x260], 0
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x40a
call esi
sub esp, 0x10
mov dword [esp], str.RICHED20.DLL
call dword [sym.imp.kernel32.dll_LoadLibraryW]
sub esp, 4
test eax, eax
je 0x4067c0
mov eax, dword [ebp - 0x348]
mov dword [esp + 0x2c], 0
mov dword [esp + 0x24], 0x7d1
mov dword [esp + 0x28], eax
mov eax, dword [ebp - 0x340]
mov dword [esp + 0x1c], 0x64
mov dword [esp + 0x20], eax
mov eax, dword [ebp - 0x350]
mov dword [esp + 0x18], 0x3e8
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x51301144
mov dword [esp + 8], 0
mov dword [esp + 4], str.RichEdit20W
mov dword [esp], 0x200
call eax
mov dword [0x410cb0], eax
sub esp, 0x30
test eax, eax
je 0x406a59
mov dword [esp], eax
call sym._setup_richedit_olecallback
mov eax, dword [0x410cb0]
mov dword [esp], eax
call dword [sym.imp.user32.dll_SetFocus]
mov eax, dword [0x410cb0]
mov edi, dword [ebp - 0x33c]
sub esp, 4
mov dword [esp + 0xc], 0x80000
mov dword [esp + 8], 0
mov dword [esp + 4], 0x445
mov dword [esp], eax
call edi
sub esp, 0x10
call sym._set_default_font
mov eax, dword [0x410cb8]
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x308], 0
mov dword [esp], eax
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x304], 0
call eax
mov esi, eax
mov eax, dword [ebp - 0x34c]
sub esp, 4
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x407
mov dword [esp], eax
call edi
mov byte [ebp - 0x2d9], 1
mov dword [ebp - 0x350], eax
xor eax, eax
sub esp, 0x10
mov word [ebp - 0x2d4], ax
lea eax, [ebp - 0x30c]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x2f0]
mov byte [ebp - 0x2d5], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], sym._enum_font_proc_16
mov dword [esp + 4], eax
mov dword [esp], esi
call dword [sym.imp.gdi32.dll_EnumFontFamiliesExW]
mov eax, dword [ebp - 0x308]
sub esp, 0x14
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x30c]
mov dword [esp + 0xc], sym._fonts_desc_compare
mov dword [esp + 8], 8
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_qsort]
cmp dword [ebp - 0x308], 1
jbe 0x4068a1
mov eax, dword [sym.imp.ucrtbase.dll_free]
xor edi, edi
mov dword [ebp - 0x348], eax
jmp 0x4046f0
inc edi
cmp ebx, edi
je 0x4046e3
mov eax, dword [ebp - 0x30c]
mov edx, dword [ebp - 0x344]
mov ecx, dword [eax + edx + 4]
mov edx, dword [eax + edx]
mov dword [eax + esi + 0xc], ecx
mov dword [eax + esi + 8], edx
mov edx, dword [ebp - 0x344]
mov eax, dword [ebp - 0x30c]
mov dword [eax + edx], 0
inc ebx
cmp ebx, dword [ebp - 0x308]
jae 0x404dc0
mov eax, dword [ebp - 0x30c]
lea edx, [edi*8]
mov esi, edx
lea edx, [ebx*8]
mov ecx, dword [eax + edi*8]
mov dword [ebp - 0x344], edx
mov dword [esp + 4], ecx
mov eax, dword [eax + ebx*8]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_lstrcmpiW]
sub esp, 8
test eax, eax
jne 0x4046b0
mov eax, dword [ebp - 0x30c]
mov eax, dword [eax + ebx*8]
mov dword [esp], eax
mov eax, dword [ebp - 0x348]
call eax
mov eax, dword [ebp - 0x30c]
mov dword [eax + ebx*8], 0
jmp 0x4046e3
mov eax, dword [edi + 0xc]
test al, 0x40
jne 0x405840
test al, 0x38
je 0x4032af
mov eax, edi
call sym._handle_findmsg.part.0
mov ebx, eax
jmp 0x40325c
mov eax, dword [ebp - 0x340]
mov ebx, dword [sym.imp.user32.dll_GetDlgItem]
mov dword [esp + 4], 0x7d1
mov dword [esp], eax
call ebx
mov edi, eax
mov eax, dword [ebp - 0x340]
sub esp, 8
mov dword [esp + 4], 0x7d0
mov dword [esp], eax
call ebx
mov ebx, dword [sym.imp.user32.dll_SendMessageW]
sub esp, 8
mov dword [ebp - 0x344], eax
lea eax, [ebp - 0x300]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x30c]
mov dword [esp + 8], eax
mov eax, dword [0x410cb0]
mov dword [esp + 4], 0xb0
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x300]
sub esp, 0x10
cmp dword [ebp - 0x30c], eax
sete al
mov dword [esp + 4], 0x51e
movzx eax, al
mov dword [esp], esi
mov dword [esp + 8], eax
mov eax, dword [sym.imp.user32.dll_EnableMenuItem]
mov dword [ebp - 0x340], eax
call eax
mov edx, dword [ebp - 0x300]
xor eax, eax
sub esp, 0xc
cmp dword [ebp - 0x30c], edx
sete al
mov dword [esp + 4], 0x51f
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x340]
mov dword [esp], esi
call eax
lea eax, [ebp - 0x220]
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 0x220], 0x9c
sub esp, 0xc
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x43d
mov dword [esp], edi
call ebx
sub esp, 0x10
mov dword [esp + 4], 0xfffffff0
mov dword [esp], edi
call dword [sym.imp.user32.dll_GetWindowLongW]
mov ebx, dword [sym.imp.user32.dll_CheckMenuItem]
shr eax, 8
sub esp, 8
and eax, 8
mov dword [esp + 4], 0x516
mov dword [esp + 8], eax
mov dword [esp], esi
call ebx
mov eax, dword [ebp - 0x33c]
sub esp, 0xc
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xb8
mov dword [esp], edi
call eax
sub esp, 0x10
test eax, eax
setne al
mov dword [esp + 4], 0x517
movzx eax, al
mov dword [esp], esi
shl eax, 3
mov dword [esp + 8], eax
call ebx
mov edx, dword [ebp - 0x21c]
sub esp, 0xc
and edx, 8
mov dword [ebp - 0x348], edx
jne 0x405200
mov dword [esp + 8], 0
mov dword [esp + 4], 0x44c
mov dword [esp], esi
call ebx
sub esp, 0xc
mov dword [esp + 8], 0
mov dword [esp + 4], 0x44d
mov dword [esp], esi
call ebx
mov edx, dword [ebp - 0x348]
sub esp, 0xc
mov dword [esp + 8], edx
mov dword [esp + 4], 0x44e
mov dword [esp], esi
call ebx
xor eax, eax
sub esp, 0xc
cmp word [ebp - 0x218], 1
sete al
mov dword [esp + 4], 0x523
shl eax, 3
mov dword [esp], esi
mov dword [esp + 8], eax
call ebx
xor eax, eax
sub esp, 0xc
cmp word [ebp - 0x218], 2
sete al
mov dword [esp + 4], 0x524
shl eax, 3
mov dword [esp], esi
mov dword [esp + 8], eax
call ebx
xor eax, eax
sub esp, 0xc
cmp word [ebp - 0x218], 3
sete al
mov dword [esp + 4], 0x525
shl eax, 3
mov dword [esp], esi
mov dword [esp + 8], eax
call ebx
xor eax, eax
sub esp, 0xc
cmp word [ebp - 0x218], 4
sete al
mov dword [esp + 4], 0x526
shl eax, 3
mov dword [esp], esi
mov dword [esp + 8], eax
call ebx
xor eax, eax
sub esp, 0xc
cmp word [ebp - 0x218], 5
sete al
mov dword [esp + 4], 0x527
shl eax, 3
mov dword [esp], esi
mov dword [esp + 8], eax
call ebx
xor eax, eax
sub esp, 0xc
cmp word [ebp - 0x218], 6
sete al
mov dword [esp + 4], 0x528
shl eax, 3
mov dword [esp], esi
mov dword [esp + 8], eax
call ebx
mov eax, dword [ebp - 0x33c]
sub esp, 0xc
mov dword [esp], edi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xc6
call eax
mov edx, dword [ebp - 0x340]
sub esp, 0x10
test eax, eax
sete al
mov dword [esp + 4], 0x51b
movzx eax, al
mov dword [esp], esi
mov dword [esp + 8], eax
call edx
mov eax, dword [ebp - 0x33c]
sub esp, 0xc
mov dword [esp], edi
mov edi, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x455
call eax
mov edx, dword [ebp - 0x340]
sub esp, 0x10
test eax, eax
sete al
mov dword [esp + 4], 0x51c
movzx eax, al
mov dword [esp], esi
mov dword [esp + 8], eax
call edx
mov eax, dword [0x410c40]
sub esp, 0xc
mov dword [esp], eax
call sym._reg_formatindex
mov dword [esp + 4], 0x5dc
mov eax, dword [eax*4 + 0x41004c]
mov dword [esp], esi
and eax, 4
cmovne eax, edi
mov dword [esp + 8], eax
call ebx
mov eax, dword [0x410c40]
sub esp, 0xc
mov dword [esp], eax
call sym._reg_formatindex
mov dword [esp + 4], 0x5dd
mov eax, dword [eax*4 + 0x41004c]
mov dword [esp], esi
and eax, 8
cmovne eax, edi
mov dword [esp + 8], eax
call ebx
mov ecx, dword [ebp - 0x344]
sub esp, 0xc
mov dword [esp], ecx
call dword [sym.imp.user32.dll_IsWindowVisible]
sub esp, 4
test eax, eax
setne al
mov dword [esp + 4], 0x5de
movzx eax, al
mov dword [esp], esi
shl eax, 3
mov dword [esp + 8], eax
call ebx
mov eax, dword [0x410c40]
sub esp, 0xc
mov dword [esp], eax
call sym._reg_formatindex
mov dword [esp + 4], 0x5df
mov eax, dword [eax*4 + 0x41004c]
mov dword [esp], esi
and eax, 1
cmovne eax, edi
mov dword [esp + 8], eax
call ebx
lea eax, [ebp - 0x2f0]
xor ebx, ebx
mov dword [ebp - 0x2f0], 8
mov dword [ebp - 0x2ec], 0x4b0
sub esp, 0xc
mov dword [esp + 8], eax
mov eax, dword [0x410cb0]
mov dword [esp + 0xc], 0
mov dword [esp], eax
mov eax, dword [ebp - 0x33c]
mov dword [esp + 4], 0x45f
call eax
mov edx, dword [ebp - 0x340]
sub esp, 0x10
test eax, eax
mov edi, eax
sete bl
mov dword [esp + 4], 0x3f6
mov dword [esp + 8], ebx
mov dword [esp], esi
call edx
lea eax, [ebp - 0x294]
mov dword [ebp - 0x294], 0x30
mov dword [ebp - 0x290], 0x20
sub esp, 0xc
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x3f7
mov dword [esp], esi
call dword [sym.imp.user32.dll_GetMenuItemInfoW]
mov eax, 1
sub esp, 0x10
test edi, edi
je 0x404c23
mov edx, dword [ebp - 0x274]
xor eax, eax
test edx, edx
sete al
mov edi, dword [ebp - 0x340]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x3f7
mov dword [esp], esi
mov eax, edi
call eax
mov eax, edi
sub esp, 0xc
mov dword [esp + 8], ebx
xor ebx, ebx
mov dword [esp + 4], 0x3f8
mov dword [esp], esi
call eax
sub esp, 0xc
jmp 0x40325c
mov esi, dword [ebp - 0x340]
mov ebx, dword [sym.imp.user32.dll_GetDlgItem]
mov dword [esp + 4], 0x7d1
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [ebp - 0x348], eax
mov dword [esp], esi
mov dword [esp + 4], 0x7d4
call ebx
sub esp, 8
mov esi, eax
mov dword [esp + 4], 0x7dd
mov dword [esp], eax
call ebx
sub esp, 8
mov dword [ebp - 0x33c], eax
mov dword [esp + 4], 0x7de
mov dword [esp], esi
call ebx
sub esp, 8
mov dword [ebp - 0x344], eax
mov dword [esp + 4], 0x7d3
mov dword [esp], esi
call ebx
mov edx, eax
sub esp, 8
mov eax, dword [edi]
cmp dword [ebp - 0x33c], eax
je 0x406770
cmp dword [ebp - 0x344], eax
je 0x405390
cmp edx, eax
je 0x406640
cmp dword [ebp - 0x348], eax
jne 0x4032af
cmp dword [edi + 8], 0x702
jne 0x4032af
call sym._update_font_list
mov eax, dword [ebp - 0x348]
mov esi, dword [sym.imp.user32.dll_SendMessageW]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xba
mov dword [esp], eax
call esi
sub esp, 0x10
mov dword [esp + 0x10], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0xc]
lea edi, [ebp - 0x220]
mov dword [esp + 4], str.selection___ld.._ld__line_count_Id
mov dword [esp + 8], eax
mov dword [esp], edi
call sym._sprintf
mov eax, dword [ebp - 0x340]
mov dword [esp + 4], 0x7d0
mov dword [esp], eax
call ebx
mov ebx, 1
sub esp, 8
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [sym.imp.user32.dll_SetWindowTextA]
mov eax, dword [ebp - 0x340]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x400
mov dword [esp], eax
call esi
sub esp, 0x10
jmp 0x40325c
lea edx, [edi + 1]
mov dword [ebp - 0x308], edx
test edx, edx
je 0x4068d9
xor ebx, ebx
lea esi, [ebp - 0x21c]
mov dword [ebp - 0x344], esi
mov esi, ebx
mov ebx, dword [ebp - 0x34c]
lea esi, [esi]
nop
mov edi, dword [ebp - 0x344]
xor eax, eax
mov ecx, 8
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x220], 0x21
lea eax, [eax + esi*8]
mov ecx, dword [eax]
mov dword [ebp - 0x21c], 0xffffffff
mov dword [ebp - 0x218], ecx
mov eax, dword [eax + 4]
mov dword [esp + 8], 0
mov dword [ebp - 0x200], eax
lea eax, [ebp - 0x220]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x33c]
mov dword [esp + 4], 0x40b
mov dword [esp], ebx
call eax
mov eax, dword [ebp - 0x30c]
sub esp, 0x10
mov eax, dword [eax + esi*8]
inc esi
mov dword [esp], eax
mov eax, dword [ebp - 0x348]
call eax
cmp esi, dword [ebp - 0x308]
jb 0x404df0
mov esi, dword [ebp - 0x344]
mov eax, dword [ebp - 0x30c]
mov edi, esi
mov dword [esp], eax
mov eax, dword [ebp - 0x348]
call eax
xor eax, eax
mov ecx, 0x1c
mov esi, dword [ebp - 0x33c]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x220]
mov dword [ebp - 0x220], 0x74
mov dword [esp + 0xc], eax
mov eax, dword [0x410cb0]
mov dword [esp + 8], 0
mov dword [esp + 4], 0x43a
mov dword [esp], eax
call esi
lea eax, [ebp - 0x206]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x350]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xc
mov dword [esp], eax
call esi
mov eax, dword [ebp - 0x360]
sub esp, 0x10
call sym._populate_size_list
mov dword [esp], 0
mov eax, dword [ebp - 0x35c]
call eax
mov esi, dword [sym.imp.user32.dll_LoadStringW]
sub esp, 4
mov ebx, eax
mov dword [esp + 0xc], 0xff
mov dword [esp + 8], 0x411ca0
mov dword [esp + 4], 0x57b
mov dword [esp], eax
call esi
mov edx, 0x2a
lea edi, [eax + eax + 2]
sub esp, 0x10
xor eax, eax
lea ecx, [edi + 0x411ca0]
jmp 0x404f57
movzx edx, word [eax + 0x41c1ec]
mov word [ecx + eax], dx
add eax, 2
test dx, dx
jne 0x404f50
cmp word [edi + 0x411ca0], 0
je 0x4068cf
mov eax, ecx
lea esi, [esi]
nop
add eax, 2
cmp word [eax], 0
jne 0x404f78
sub eax, ecx
add eax, 2
lea edi, [ecx + eax]
mov dword [esp + 0xc], 0xff
mov dword [esp + 8], edi
mov dword [esp + 4], 0x579
mov dword [esp], ebx
call esi
mov ecx, 0x2a
lea edx, [edi + eax*2 + 2]
sub esp, 0x10
xor eax, eax
jmp 0x404fbf
movzx ecx, word [eax + str..txt]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x404fb8
cmp word [edx], 0
je 0x4068c5
mov eax, edx
lea esi, [esi]
nop
add eax, 2
cmp word [eax], 0
jne 0x404fe0
sub eax, edx
add eax, 2
lea edi, [edx + eax]
mov dword [esp + 0xc], 0xff
mov dword [esp + 8], edi
mov dword [esp + 4], 0x57a
mov dword [esp], ebx
call esi
mov ecx, 0x2a
lea edx, [edi + eax*2 + 2]
sub esp, 0x10
xor eax, eax
jmp 0x405027
movzx ecx, word [eax + str..txt]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x405020
cmp word [edx], 0
je 0x4068bb
mov eax, edx
nop
add eax, 2
cmp word [eax], 0
jne 0x405040
sub eax, edx
add eax, 2
lea edi, [edx + eax]
mov dword [esp + 0xc], 0xff
mov dword [esp + 8], edi
mov dword [esp + 4], 0x578
mov dword [esp], ebx
call esi
mov ecx, 0x2a
lea edx, [edi + eax*2 + 2]
sub esp, 0x10
xor eax, eax
jmp 0x405087
movzx ecx, word [eax + 0x41c1e4]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x405080
cmp word [edx], 0
je 0x406897
mov eax, edx
nop
add eax, 2
cmp word [eax], 0
jne 0x4050a0
sub eax, edx
add eax, 2
xor edi, edi
mov word [edx + eax], di
mov dword [esp], ebx
mov dword [esp + 0xc], 0xff
mov dword [esp + 8], 0x411880
mov dword [esp + 4], 0x6a4
call esi
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 0xc], 0xff
mov dword [esp + 8], 0x412900
mov dword [esp + 4], 0x6a5
call esi
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 0xc], 0xff
mov dword [esp + 8], 0x411060
mov dword [esp + 4], 0x5b2
call esi
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 0xc], 0xff
mov dword [esp + 8], 0x411260
mov dword [esp + 4], 0x5b3
call esi
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 0xc], 0xff
mov dword [esp + 8], 0x411460
mov dword [esp + 4], 0x5b4
call esi
sub esp, 0x10
mov dword [esp], ebx
xor ebx, ebx
mov dword [esp + 0xc], 0xff
mov dword [esp + 8], 0x411660
mov dword [esp + 4], 0x5b5
call esi
mov eax, dword [0x410cb0]
sub esp, 0x10
mov dword [esp], eax
mov eax, dword [ebp - 0x33c]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xb9
call eax
sub esp, 0x10
mov dword [esp], str.commdlg_FindReplace
call dword [sym.imp.user32.dll_RegisterWindowMessageW]
mov esi, dword [ebp - 0x340]
sub esp, 4
mov dword [0x410004], eax
mov dword [esp], esi
call sym._registry_read_filelist
mov dword [esp + 4], 0x411860
mov dword [esp], 0x41004c
call sym._registry_read_formatopts_all
call sym._registry_read_options
mov dword [esp + 4], 1
mov dword [esp], esi
call dword [sym.imp.shell32.dll_DragAcceptFiles]
sub esp, 8
jmp 0x40325c
movzx edx, word [ebp - 0x208]
cmp edx, 1
mov dword [ebp - 0x348], edx
je 0x406860
mov dword [esp + 8], 0
mov dword [esp + 4], 0x44c
mov dword [esp], esi
call ebx
mov edx, dword [ebp - 0x348]
sub esp, 0xc
cmp edx, 3
jne 0x40678c
mov dword [esp + 8], 8
mov dword [esp + 4], 0x44d
mov dword [esp], esi
call ebx
sub esp, 0xc
xor edx, edx
jmp 0x404933
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
sub esp, 4
mov dword [esp + 4], 0x898
mov dword [esp], eax
call dword [sym.imp.user32.dll_LoadMenuW]
mov edi, dword [ebp - 0x340]
sub esp, 8
mov ebx, eax
mov dword [esp + 4], 0x7d1
mov dword [esp], edi
call dword [sym.imp.user32.dll_GetDlgItem]
sub esp, 8
mov esi, eax
call sym._set_bar_states
mov dword [esp + 4], 1
mov dword [esp], esi
call dword [sym.imp.user32.dll_ShowWindow]
sub esp, 8
mov dword [esp], edi
call sym._close_preview
mov dword [esp + 4], ebx
xor ebx, ebx
mov dword [esp], edi
call dword [sym.imp.user32.dll_SetMenu]
sub esp, 8
mov dword [esp], edi
call sym._registry_read_filelist
lea eax, [ebp - 0x220]
mov dword [esp + 4], eax
mov eax, dword [0x410cb8]
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetClientRect]
mov eax, dword [ebp - 0x214]
movzx ecx, word [ebp - 0x218]
xor edx, edx
sub esp, 8
shl eax, 0x10
or ecx, eax
mov eax, dword [0x410cb8]
call sym._OnSize
jmp 0x40325c
mov eax, dword [ebp - 0x340]
mov dword [esp + 4], esi
mov dword [esp], eax
call sym._preview_command
mov ebx, eax
jmp 0x40325c
mov eax, ebx
xor ebx, ebx
call sym._DoOpenFile
jmp 0x4032b1
mov eax, dword [ebp - 0x344]
mov dword [esp + 0xc], edi
mov dword [esp + 8], esi
mov dword [esp + 4], 0x111
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x40325c
mov dword [esp + 0xc], edi
mov dword [esp + 8], esi
mov dword [esp + 4], 0xf
jmp 0x403248
cmp dword [edi + 8], 0xfffffcda
jne 0x4032af
mov eax, dword [ebp - 0x344]
lea edx, [edi + 0x14]
xor ebx, ebx
call sym._on_sizelist_modified
jmp 0x40325c
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x33c], edx
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetMenu]
mov edx, dword [ebp - 0x33c]
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x220], 0x30
push edi
mov dword [ebp - 0x21c], 0x20
mov dword [esp + 0xc], ecx
mov dword [esp + 8], 0
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetMenuItemInfoW]
sub esp, 0x10
test eax, eax
je 0x40325c
mov eax, dword [ebp - 0x200]
call sym._DoOpenFile
jmp 0x40325c
mov dword [ebp - 0x220], 0xbc
mov dword [ebp - 0x21c], 8
cmp edx, 0x44d
je 0x406ac6
cmp edx, 0x44e
jne 0x406ab8
mov word [ebp - 0x208], 2
lea eax, [ebp - 0x220]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x344]
mov dword [esp + 4], 0x447
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x40325c
call sym._DialogSaveFile
jmp 0x40325c
mov eax, dword [0x410cb4]
test eax, eax
je 0x4069de
mov dword [esp], eax
call dword [sym.imp.user32.dll_SetActiveWindow]
push esi
jmp 0x40325c
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov edx, dword [ebp - 0x340]
push ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], sym._newfile_proc_16
mov dword [esp + 8], edx
mov dword [esp + 4], 0x835
mov dword [esp], eax
call dword [sym.imp.user32.dll_DialogBoxParamW]
sub esp, 0x14
mov esi, eax
cmp eax, 0x64
je 0x4032af
call sym._prompt_save_changes
test eax, eax
je 0x4032af
xor eax, eax
call sym._set_caption
mov eax, dword [0x410cb0]
lea edx, [ebp - 0x220]
mov edi, dword [sym.imp.user32.dll_SendMessageW]
mov dword [ebp - 0x220], 0xbc
mov dword [ebp - 0x21c], 8
mov word [ebp - 0x208], 1
mov dword [esp + 0xc], edx
mov word [0x411a80], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x447
mov dword [esp], eax
call edi
mov eax, dword [0x410cb0]
lea edx, [ebp - 0x220]
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0x4b0
sub esp, 0x10
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x461
mov dword [esp], eax
call edi
mov eax, dword [0x410cb0]
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xb9
mov dword [esp], eax
call edi
mov dword [0x410c40], esi
sub esp, 0x10
call sym._set_bar_states
call sym._set_default_font
mov eax, dword [0x410c40]
mov dword [esp], eax
call sym._reg_formatindex
mov eax, dword [eax*4 + 0x411860]
mov dword [esp + 4], eax
mov eax, dword [0x410cb8]
mov dword [esp], eax
call sym._target_device
call sym._update_font_list
jmp 0x40325c
mov eax, dword [0x410c6c]
test al, 0x40
jne 0x406a8b
test al, 0x38
je 0x4032af
mov eax, 0x410c60
call sym._handle_findmsg.part.0
jmp 0x40325c
mov eax, dword [0x410cb4]
test eax, eax
jne 0x405499
xor eax, eax
call sym._dialog_find.part.0.constprop.0
jmp 0x40325c
xor eax, eax
lea edi, [ebp - 0x220]
mov ecx, 0x82
rep stosd dword es:[edi], eax
lea edx, [ebp - 0x28c]
mov ecx, 0x14
mov edi, edx
rep stosd dword es:[edi], eax
mov eax, dword [0x410cb8]
mov dword [ebp - 0x294], 0x58
mov dword [ebp - 0x260], 0x801804
mov dword [ebp - 0x290], eax
lea eax, [ebp - 0x220]
mov dword [ebp - 0x278], eax
mov eax, dword [0x410c40]
mov dword [ebp - 0x288], 0x411ca0
mov dword [ebp - 0x274], 0x104
mov dword [ebp - 0x258], 0x41c474
cmp eax, 1
je 0x406a3b
cmp eax, 0x11
sete al
movzx eax, al
add eax, eax
inc eax
mov dword [ebp - 0x27c], eax
lea eax, [ebp - 0x294]
mov dword [esp], eax
call dword [sym.imp.comdlg32.dll_GetOpenFileNameW]
push edx
test eax, eax
je 0x40325c
call sym._prompt_save_changes
test eax, eax
je 0x40325c
mov eax, dword [ebp - 0x278]
call sym._DoOpenFile
jmp 0x40325c
mov eax, dword [ebp - 0x340]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x10
mov dword [esp], eax
call dword [sym.imp.user32.dll_PostMessageW]
sub esp, 0x10
jmp 0x40325c
cmp word [0x411a80], 0
je case.0x40322c.1004
mov edx, dword [0x410c40]
mov eax, 0x411a80
call sym._DoSaveFile
jmp 0x40325c
mov eax, dword [0x410c40]
mov dword [esp], eax
call sym._reg_formatindex
mov edi, dword [eax*4 + 0x41004c]
mov esi, eax
mov dword [eax*4 + 0x41004c], 2
call sym._set_bar_states
mov eax, dword [0x410cb0]
mov dword [esp + 4], 0
mov dword [esi*4 + 0x41004c], edi
mov dword [esp], eax
call dword [sym.imp.user32.dll_ShowWindow]
mov esi, dword [ebp - 0x340]
push ecx
push ecx
mov dword [esp], esi
mov dword [esp + 4], 0x411a80
call sym._init_preview
mov dword [esp], esi
mov dword [esp + 4], 0
call dword [sym.imp.user32.dll_SetMenu]
push esi
push esi
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.user32.dll_InvalidateRect]
sub esp, 0xc
jmp 0x40325c
mov eax, dword [ebp - 0x340]
mov dword [esp + 4], 0x411a80
mov dword [esp], eax
call sym._dialog_print
mov eax, dword [0x410c40]
mov dword [esp], eax
call sym._reg_formatindex
mov eax, dword [eax*4 + 0x411860]
mov dword [esp + 4], eax
mov eax, dword [0x410cb8]
mov dword [esp], eax
call sym._target_device
jmp 0x40325c
mov eax, dword [0x410cb8]
mov dword [esp + 4], 0x411a80
mov dword [esp], eax
call sym._print_quick
jmp 0x4057e9
mov eax, dword [ebp - 0x340]
mov dword [esp], eax
call sym._dialog_printsetup
jmp 0x4057e9
mov dword [0x410cb4], 0
xor ebx, ebx
mov dword [edi + 0xc], 8
jmp 0x40325c
cmp edx, 0x4b0
je 0x4069a3
cmp edx, 0x4b1
jne case.0x4058af.1321
mov dword [esp + 0xc], 0xc0ffff
mov dword [esp + 8], 0
mov eax, dword [ebp - 0x344]
mov dword [esp + 4], 0x443
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x40325c
sub edx, 0x514
cmp edx, 0x67
ja case.0x4058af.1321
jmp dword [edx*4 + 0x41347c]
mov eax, dword [ebp - 0x344]
lea edx, [ebp - 0x220]
mov dword [ebp - 0x220], 0xbc
lea edi, [esi - 0x522]
mov dword [esp + 0xc], edx
mov dword [esp], eax
mov eax, dword [sym.imp.user32.dll_SendMessageW]
mov dword [ebp - 0x21c], 0x20
mov dword [esp + 8], 0
mov dword [esp + 4], 0x43d
mov dword [ebp - 0x33c], eax
call eax
movzx eax, word [ebp - 0x218]
lea edx, [ebp - 0x220]
mov dword [ebp - 0x21c], 0x8000e024
sub esp, 0x10
test ax, ax
je 0x4069b8
cmp si, 0x522
je 0x406ad4
cmp di, ax
je 0x406ad4
mov dword [ebp - 0x214], 0
mov word [ebp - 0x218], di
movzx edi, di
mov dword [0x410cc0], edi
mov dword [ebp - 0x170], 0x2000001
mov word [ebp - 0x16c], 0x168
mov dword [ebp - 0x20c], 0x168
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0
mov dword [esp + 4], 0x447
mov eax, dword [ebp - 0x344]
mov dword [esp], eax
mov eax, dword [ebp - 0x33c]
call eax
sub esp, 0x10
jmp 0x40325c
lea edx, [ebp - 0x21c]
xor eax, eax
mov ecx, 0x1c
mov edi, edx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x220]
mov dword [ebp - 0x220], 0x74
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x344]
mov dword [esp + 8], 1
mov dword [esp], eax
mov eax, dword [sym.imp.user32.dll_SendMessageW]
mov dword [esp + 4], 0x43a
mov dword [ebp - 0x33c], eax
call eax
sub esp, 0x10
cmp si, 0x579
je 0x406a45
cmp si, 0x57a
je 0x406aa4
mov dword [ebp - 0x21c], 1
mov eax, 1
xor dword [ebp - 0x218], eax
lea eax, [ebp - 0x220]
mov dword [esp + 8], 1
mov dword [esp + 0xc], eax
mov dword [esp + 4], 0x444
jmp 0x405982
xor eax, eax
mov ecx, 0x1c
lea edi, [ebp - 0x21c]
rep stosd dword es:[edi], eax
xor eax, eax
cmp si, 0x518
lea edx, [ebp - 0x220]
sete al
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x220], 0x74
mov dword [esp + 4], 0x43a
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x40325c
mov eax, dword [0x410cb8]
lea esi, [ebp - 0x220]
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetDC]
lea edx, [ebp - 0x2e8]
mov edi, edx
mov edx, dword [0x410cb8]
push ecx
mov ecx, 0xd
mov dword [ebp - 0x340], eax
xor eax, eax
rep stosd dword es:[edi], eax
mov dword [ebp - 0x2ec], edx
lea edx, [ebp - 0x294]
mov ecx, 0x1c
mov dword [ebp - 0x2e4], edx
lea edx, [ebp - 0x21c]
mov dword [ebp - 0x2f0], 0x3c
mov edi, edx
rep stosd dword es:[edi], eax
mov eax, dword [0x410cb0]
mov dword [ebp - 0x2dc], 0x1800141
mov dword [ebp - 0x220], 0x74
mov dword [esp], eax
mov eax, dword [sym.imp.user32.dll_SendMessageW]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 1
mov dword [esp + 4], 0x43a
mov dword [ebp - 0x33c], eax
call eax
mov ecx, dword [ebp - 0x2e4]
xor eax, eax
sub esp, 0x10
movzx edx, word [ebp + eax - 0x206]
mov word [ecx + eax + 0x1c], dx
add eax, 2
test dx, dx
jne 0x405b28
mov eax, dword [ebp - 0x218]
mov edx, dword [ebp - 0x2e4]
mov ecx, eax
shr ecx, 1
and ecx, 1
mov byte [edx + 0x14], cl
mov ecx, eax
and ecx, 1
cmp ecx, 1
sbb ecx, ecx
and ecx, 0xfffffed4
add ecx, 0x2bc
mov dword [edx + 0x10], ecx
mov ecx, eax
shr eax, 3
and eax, 1
shr ecx, 2
mov byte [edx + 0x16], al
mov eax, dword [ebp - 0x340]
and ecx, 1
mov byte [edx + 0x15], cl
mov dword [esp + 4], 0x5a
mov dword [esp], eax
call dword [sym.imp.gdi32.dll_GetDeviceCaps]
mov ecx, 0x14
push edi
push edi
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x214]
mov dword [esp + 8], 0x48
cdq
idiv ecx
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_MulDiv]
mov edx, dword [ebp - 0x2e4]
neg eax
sub esp, 0xc
mov dword [edx], eax
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0x2f0]
mov dword [esp], eax
call dword [sym.imp.comdlg32.dll_ChooseFontW]
push edx
test eax, eax
je 0x40325c
lea edx, [ebp - 0x218]
xor eax, eax
mov ecx, 0x1b
mov edi, edx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x220], 0x74
mov dword [ebp - 0x21c], 0xc000000f
add eax, eax
mov dword [ebp - 0x214], eax
movzx eax, word [ebp - 0x2c0]
test ah, 1
je 0x405c36
mov dword [ebp - 0x218], 1
test ah, 2
je 0x405c42
or dword [ebp - 0x218], 2
mov eax, dword [ebp - 0x2e4]
cmp byte [eax + 0x15], 0
je 0x405c55
or dword [ebp - 0x218], 4
cmp byte [eax + 0x16], 0
je 0x405c62
or dword [ebp - 0x218], 8
mov eax, dword [ebp - 0x2d8]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 1
mov dword [ebp - 0x20c], eax
mov eax, dword [0x410cb0]
mov dword [esp + 4], 0x444
mov dword [esp], eax
mov eax, dword [ebp - 0x33c]
call eax
mov eax, dword [ebp - 0x2e4]
sub esp, 0x10
add eax, 0x1c
call sym._set_font
jmp 0x40325c
mov edi, dword [ebp - 0x344]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov esi, dword [sym.imp.user32.dll_SendMessageW]
mov dword [esp + 4], 0xb8
mov dword [esp], edi
call esi
sub esp, 0x10
mov dword [esp + 0xc], 0
test eax, eax
je 0x4069ed
mov dword [esp + 8], 0
mov dword [esp + 4], 0xb9
mov dword [esp], edi
call esi
sub esp, 0x10
jmp 0x40325c
mov eax, dword [ebp - 0x344]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x303
mov dword [esp], eax
call dword [sym.imp.user32.dll_PostMessageW]
sub esp, 0x10
jmp 0x40325c
mov eax, dword [ebp - 0x344]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x300
mov dword [esp], eax
call dword [sym.imp.user32.dll_PostMessageW]
sub esp, 0x10
jmp 0x40325c
mov eax, dword [ebp - 0x344]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x301
mov dword [esp], eax
call dword [sym.imp.user32.dll_PostMessageW]
sub esp, 0x10
jmp 0x40325c
mov eax, dword [ebp - 0x344]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x302
mov dword [esp], eax
call dword [sym.imp.user32.dll_PostMessageW]
sub esp, 0x10
jmp 0x40325c
lea eax, [ebp - 0x220]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xffffffff
mov dword [esp + 4], 0x437
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x40325c
mov eax, dword [ebp - 0x340]
mov esi, dword [ebp - 0x33c]
mov dword [esp + 4], 0x7d4
mov dword [esp], eax
call esi
push ecx
push ecx
mov dword [esp + 4], 0x7d3
mov dword [esp], eax
call esi
mov edi, dword [sym.imp.user32.dll_SendMessageW]
push esi
push esi
mov esi, eax
mov dword [ebp - 0x33c], edi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x57b
mov dword [esp + 4], 0x419
mov dword [esp], eax
call edi
lea edx, [ebp - 0x294]
sub esp, 0x10
mov dword [esp + 0xc], edx
mov dword [esp], esi
mov dword [esp + 8], eax
mov dword [esp + 4], 0x41d
call edi
mov eax, dword [ebp - 0x294]
sub esp, 0x10
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x288]
mov dword [esp], esi
mov dword [ebp - 0x2ec], eax
lea eax, [ebp - 0x2f0]
mov dword [esp + 4], eax
call dword [sym.imp.user32.dll_ClientToScreen]
mov eax, dword [0x410cac]
push edi
push edi
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetSubMenu]
push edx
push edx
mov edx, dword [ebp - 0x340]
mov dword [esp + 0x14], edx
mov edx, dword [ebp - 0x2ec]
mov dword [esp + 0x18], 0
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x2f0]
mov dword [esp + 0x10], 0
mov dword [esp + 8], edx
mov dword [esp + 4], 0x180
mov dword [esp], eax
call dword [sym.imp.user32.dll_TrackPopupMenu]
lea esi, [eax - 0x708]
mov dword [ebp - 0x340], eax
sub esp, 0x1c
cmp esi, 0x10
ja 0x40325c
lea edx, [ebp - 0x21c]
xor eax, eax
mov ecx, 0x1c
mov edi, edx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x220]
mov dword [ebp - 0x220], 0x74
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x344]
mov dword [esp + 8], 1
mov dword [esp], eax
mov eax, dword [ebp - 0x33c]
mov dword [esp + 4], 0x43a
call eax
mov dword [ebp - 0x21c], 0x40000000
sub esp, 0x10
cmp dword [ebp - 0x340], 0x718
je 0x406b09
mov eax, dword [esi*4 + 0x41c360]
and dword [ebp - 0x218], 0xbfffffff
mov dword [ebp - 0x20c], eax
jmp 0x405a14
mov eax, dword [ebp - 0x344]
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetWindowTextLengthW]
mov esi, dword [sym.imp.ucrtbase.dll_malloc]
push edx
lea edi, [eax + 1]
lea ecx, [edi + edi]
mov dword [ebp - 0x340], esi
mov dword [ebp - 0x34c], ecx
mov dword [esp], ecx
mov dword [ebp - 0x33c], eax
call esi
mov dword [esp + 8], edi
mov esi, eax
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x344]
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetWindowTextW]
mov edi, dword [sym.imp.user32.dll_MessageBoxW]
sub esp, 0xc
mov dword [esp + 4], esi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x41c450
mov dword [esp], 0
call edi
mov edx, dword [sym.imp.ucrtbase.dll_free]
sub esp, 0x10
mov dword [ebp - 0x348], edx
mov dword [esp], esi
call edx
mov ecx, dword [ebp - 0x34c]
mov esi, dword [ebp - 0x340]
mov dword [esp], ecx
call esi
mov edx, dword [ebp - 0x33c]
mov dword [ebp - 0x220], 0
mov esi, eax
mov dword [ebp - 0x218], eax
lea eax, [ebp - 0x220]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x21c], edx
mov dword [esp + 8], 0
mov dword [esp + 4], 0x44b
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
mov dword [esp + 4], esi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x41c450
mov dword [esp], 0
call edi
mov edx, dword [ebp - 0x348]
sub esp, 0x10
mov dword [esp], esi
call edx
jmp 0x40325c
mov esi, dword [ebp - 0x344]
mov dword [esp + 4], 0xfffffff0
mov dword [esp], esi
call dword [sym.imp.user32.dll_GetWindowLongW]
push edi
push edi
mov dword [esp + 0xc], 0
test ah, 8
je 0x406a12
mov dword [esp + 8], 0
mov dword [esp + 4], 0xcf
mov dword [esp], esi
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x40325c
lea eax, [ebp - 0x294]
mov edi, dword [sym.imp.user32.dll_SendMessageW]
mov dword [ebp - 0x294], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x290], 0xffffffff
mov dword [esp + 8], 0
mov dword [esp + 4], 0x434
mov dword [esp], eax
call edi
mov edx, dword [ebp - 0x290]
sub esp, 0x10
lea eax, [edx + 1]
sub eax, dword [ebp - 0x294]
add eax, eax
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_malloc]
mov dword [esp + 8], 0
mov esi, eax
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x344]
mov dword [esp + 4], 0x43e
mov dword [esp], eax
call edi
mov eax, dword [ebp - 0x290]
lea edi, [ebp - 0x220]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x294]
mov dword [esp], edi
mov dword [esp + 8], eax
mov dword [esp + 4], str.Start___ld__End___ld
call sym._sprintf
mov dword [esp + 4], edi
mov edi, dword [ebp - 0x340]
mov dword [esp + 0xc], 0
mov dword [esp], edi
mov dword [esp + 8], str.Editor
call dword [sym.imp.user32.dll_MessageBoxA]
sub esp, 0x10
mov dword [esp + 4], esi
mov dword [esp], edi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x41c450
call dword [sym.imp.user32.dll_MessageBoxW]
sub esp, 0x10
mov dword [esp], esi
call dword [sym.imp.ucrtbase.dll_free]
jmp 0x40325c
mov eax, dword [ebp - 0x344]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xc7
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x40325c
lea edx, [ebp - 0x21c]
xor eax, eax
mov ecx, 0x2e
mov edi, edx
lea esi, [ebp - 0x220]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x344]
mov dword [esp + 0xc], esi
mov dword [ebp - 0x220], 0xbc
mov dword [esp + 8], 0
mov dword [esp + 4], 0x43d
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x40325c
mov eax, dword [ebp - 0x344]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x454
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x40325c
cmp edx, 0x644
ja 0x406338
cmp edx, 0x63f
ja 0x406410
cmp edx, 0x5de
je 0x4068ee
jbe 0x406380
cmp edx, 0x5df
jne case.0x4058af.1321
mov eax, dword [0x410c40]
mov dword [esp], eax
call sym._reg_formatindex
mov edx, dword [eax*4 + 0x41004c]
xor eax, eax
not edx
and edx, 1
call sym._set_toolbar_state
lea eax, [ebp - 0x220]
mov dword [esp + 4], eax
mov eax, dword [0x410cb8]
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetClientRect]
mov eax, dword [ebp - 0x214]
movzx ecx, word [ebp - 0x218]
xor edx, edx
sub esp, 8
shl eax, 0x10
or ecx, eax
mov eax, dword [0x410cb8]
call sym._OnSize
jmp 0x40325c
cmp edx, 0x7dd
je 0x406975
cmp edx, 0x7de
jne case.0x4058af.1321
shr esi, 0x10
cmp esi, 9
jne 0x4032af
lea edx, [ebp - 0x220]
mov eax, edi
mov ecx, 0x100
call sym._get_comboexlist_selection.isra.0
lea edx, [ebp - 0x220]
mov eax, edi
call sym._on_sizelist_modified
jmp 0x40325c
cmp edx, 0x5dc
je 0x406914
cmp edx, 0x5dd
jne case.0x4058af.1321
mov eax, dword [0x410c40]
mov dword [esp], eax
call sym._reg_formatindex
mov edx, dword [eax*4 + 0x41004c]
mov eax, 4
shr edx, 3
xor edx, 1
and edx, 1
call sym._set_toolbar_state
mov eax, dword [0x410c40]
mov dword [esp], eax
call sym._reg_formatindex
mov edx, dword [eax*4 + 0x41004c]
mov eax, 5
shr edx, 3
xor edx, 1
and edx, 1
call sym._set_toolbar_state
mov eax, dword [0x410c40]
mov dword [esp], eax
call sym._reg_formatindex
mov edx, dword [eax*4 + 0x41004c]
mov eax, 3
shr edx, 3
xor edx, 1
and edx, 1
jmp 0x4062f1
sub edx, 0x641
mov dword [esp], 0
cmp edx, 3
ja case.default.0x406426
jmp dword [edx*4 + 0x41361c]
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
push edx
mov edx, dword [ebp - 0x340]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], sym._tabstops_proc_16
mov dword [esp + 8], edx
mov dword [esp + 4], 0x837
mov dword [esp], eax
call dword [sym.imp.user32.dll_DialogBoxParamW]
sub esp, 0x14
jmp 0x40325c
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov edx, dword [ebp - 0x340]
push ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], sym._paraformat_proc_16
mov dword [esp + 8], edx
mov dword [esp + 4], 0x836
mov dword [esp], eax
call dword [sym.imp.user32.dll_DialogBoxParamW]
sub esp, 0x14
jmp 0x40325c
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
push edi
mov dword [esp + 0x14], 0x8000
mov dword [esp + 0x10], 0x30
mov dword [esp + 0xc], 0x30
mov dword [esp + 8], 1
mov dword [esp + 4], 0x66
mov dword [esp], eax
call dword [sym.imp.user32.dll_LoadImageW]
sub esp, 0x18
mov dword [esp + 0xc], eax
mov eax, dword [0x410cb8]
mov dword [esp + 8], 0
mov dword [esp + 4], 0x41c450
mov dword [esp], eax
call dword [sym.imp.shell32.dll_ShellAboutW]
sub esp, 0x10
jmp 0x40325c
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov dword [ebp - 0x220], 0x38
push ecx
mov esi, eax
mov dword [ebp - 0x21c], 8
mov dword [ebp - 0x214], 0x838
mov dword [esp], 1
mov dword [ebp - 0x208], sym._formatopts_proc_16
mov dword [ebp - 0x218], eax
call sym._reg_formatindex
mov dword [esp], 2
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x20c], 0x599
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x1e0], eax
call sym._reg_formatindex
mov dword [ebp - 0x288], esi
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x1d4], 0x59a
mov dword [ebp - 0x1c8], eax
mov eax, dword [0x410cb8]
mov dword [ebp - 0x294], 0x34
mov dword [ebp - 0x28c], eax
lea eax, [ebp - 0x220]
mov dword [ebp - 0x274], eax
mov eax, dword [0x410c40]
mov dword [ebp - 0x290], 0x8c
mov dword [ebp - 0x280], 0x598
shr eax, 1
mov dword [ebp - 0x27c], 2
and eax, 1
mov dword [ebp - 0x278], eax
lea eax, [ebp - 0x294]
mov dword [ebp - 0x284], 0x66
mov dword [esp], eax
call dword [sym.imp.comctl32.dll_PropertySheetW]
push esi
call sym._set_bar_states
jmp 0x4057e9
cmp dword [edi + 8], 0xfffffd3a
jne 0x4032af
mov esi, dword [ebp - 0x340]
mov dword [esp], esi
call dword [sym.imp.user32.dll_GetMenu]
sub esp, 4
test eax, eax
je 0x4032af
lea edx, [ebp - 0x220]
mov dword [esp + 8], 0
mov dword [ebp - 0x220], 0x30
mov dword [ebp - 0x21c], 4
mov dword [esp + 0xc], edx
mov dword [esp + 4], 0x52d
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetMenuItemInfoW]
mov ebx, dword [ebp - 0x20c]
sub esp, 0x10
test ebx, ebx
je 0x4032af
lea ebx, [ebp - 0x2f0]
mov dword [esp + 0xc], ebx
mov eax, dword [edi + 0xc]
mov dword [esp + 4], 0x433
mov dword [esp + 8], eax
mov eax, dword [edi]
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
mov dword [esp + 8], ebx
xor ebx, ebx
mov dword [esp + 0xc], 2
mov dword [esp + 4], 0
mov eax, dword [edi]
mov dword [esp], eax
call dword [sym.imp.user32.dll_MapWindowPoints]
mov edx, dword [ebp - 0x2ec]
mov eax, dword [ebp - 0x2f0]
lea ecx, [ebp - 0x294]
mov dword [ebp - 0x294], 0x14
sub esp, 0x10
mov dword [ebp - 0x28c], edx
mov edx, dword [ebp - 0x2e8]
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x288], edx
mov edx, dword [ebp - 0x2e4]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x284], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], edx
mov dword [esp + 4], 0x40
mov dword [esp], eax
call dword [sym.imp.user32.dll_TrackPopupMenuEx]
sub esp, 0x18
jmp 0x40325c
cmp dword [edi + 8], 0xfffffcda
jne 0x4032af
lea eax, [edi + 0x14]
xor ebx, ebx
call sym._on_fontlist_modified
jmp 0x40325c
mov dword [esp + 8], 0
mov dword [esp + 4], 0x44d
mov dword [esp], esi
call ebx
mov edx, dword [ebp - 0x348]
sub esp, 0xc
cmp edx, 2
jne 0x405255
mov edx, 8
jmp 0x404933
mov eax, dword [ebp - 0x340]
mov dword [esp], 0
mov dword [ebp - 0x220], 0x28
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x35c]
call eax
mov dword [ebp - 0x214], 0x6a7
mov dword [ebp - 0x218], eax
sub esp, 4
lea eax, [ebp - 0x220]
mov dword [ebp - 0x210], 0x41c450
mov dword [ebp - 0x20c], 0x30
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x1fc], 0
mov dword [esp], eax
call dword [sym.imp.user32.dll_MessageBoxIndirectW]
sub esp, 4
mov dword [esp], 1
call dword [sym.imp.user32.dll_PostQuitMessage]
sub esp, 4
jmp 0x4044fc
mov dword [esp + 8], 8
mov dword [esp + 4], 0x44c
mov dword [esp], esi
call ebx
sub esp, 0xc
mov dword [esp + 8], 0
mov dword [esp + 4], 0x44d
mov dword [esp], esi
call ebx
xor edx, edx
sub esp, 0xc
jmp 0x404933
mov eax, 2
jmp 0x4050ae
mov dword [ebp - 0x308], 1
mov eax, dword [sym.imp.ucrtbase.dll_free]
mov dword [ebp - 0x348], eax
jmp 0x404dd1
mov eax, 2
jmp 0x40504e
mov eax, 2
jmp 0x404fee
mov eax, 2
jmp 0x404f86
lea esi, [ebp - 0x21c]
jmp 0x404e7c
mov ebx, 0xffffffff
jmp 0x40325c
mov eax, dword [0x410c40]
mov dword [esp], eax
call sym._reg_formatindex
mov eax, dword [eax*4 + 0x41004c]
shr eax, 1
xor eax, 1
and eax, 1
call sym._set_statusbar_state
jmp 0x4062f6
mov eax, dword [0x410c40]
mov dword [esp], eax
call sym._reg_formatindex
mov edx, dword [eax*4 + 0x41004c]
mov eax, 2
shr edx, 2
xor edx, 1
and edx, 1
jmp 0x4062f1
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov edx, dword [ebp - 0x340]
push esi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], sym._datetime_proc_16
mov dword [esp + 8], edx
mov dword [esp + 4], 0x834
mov dword [esp], eax
call dword [sym.imp.user32.dll_DialogBoxParamW]
sub esp, 0x14
jmp 0x40325c
shr esi, 0x10
cmp esi, 9
jne 0x4032af
mov eax, edi
mov ecx, 0x20
lea edx, [ebp - 0x220]
call sym._get_comboexlist_selection.isra.0
lea eax, [ebp - 0x220]
call sym._on_fontlist_modified
jmp 0x40325c
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
jmp 0x405880
mov dword [ebp - 0x214], 0x168
cmp si, 0x522
jne 0x405941
mov eax, dword [0x410cc0]
mov word [ebp - 0x218], ax
jmp 0x405951
mov eax, 1
call sym._dialog_find.part.0.constprop.0
jmp 0x40325c
mov eax, dword [ebp - 0x344]
mov dword [esp + 8], 1
xor ebx, ebx
mov dword [esp + 4], 0xb9
mov dword [esp], eax
call esi
sub esp, 0x10
jmp 0x40325c
mov eax, dword [ebp - 0x344]
mov dword [esp + 8], 1
xor ebx, ebx
mov dword [esp + 4], 0xcf
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
jmp 0x40325c
mov eax, 1
jmp 0x4056b2
mov dword [ebp - 0x21c], 2
mov eax, 2
jmp 0x405a0e
mov eax, dword fs:[0x18]
mov ebx, dword [eax + 0x34]
mov dword [esp], 2
call dword [sym.imp.ucrtbase.dll___acrt_iob_func]
mov dword [esp + 4], 0x4131c0
mov dword [esp + 8], ebx
or ebx, 0xffffffff
mov dword [esp], eax
call sym._fprintf.constprop.0
jmp 0x40325c
mov dword [0x410cb4], 0
mov dword [0x410c6c], 8
jmp 0x40325c
mov dword [ebp - 0x21c], 4
mov eax, 4
jmp 0x405a0e
mov word [ebp - 0x208], 1
jmp 0x405451
mov word [ebp - 0x208], 3
jmp 0x405451
mov word [ebp - 0x218], 0
mov dword [ebp - 0x170], 0
mov word [ebp - 0x16c], 0
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x214], 0xfffffe98
jmp 0x40596e
or dword [ebp - 0x218], 0x40000000
jmp 0x405a14