Function at 0x42dbf0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x440
mov eax, dword [0x4b1120]
xor eax, ebp
mov dword [ebp - 8], eax
push 8
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x440], ecx
cmp dword [ebp - 0x440], 0x459
jg 0x42dc60
cmp dword [ebp - 0x440], 0x459
je 0x42e384
mov edx, dword [ebp - 0x440]
sub edx, 1
mov dword [ebp - 0x440], edx
cmp dword [ebp - 0x440], 7
ja case.0x42dc59.4
mov eax, dword [ebp - 0x440]
jmp dword [eax*4 + 0x42e844]
jmp case.0x42dc59.4
cmp dword [ebp - 4], 0
je 0x42e09d
push 0x51
mov ecx, dword [ebp - 4]
add ecx, 0x434
push ecx
push 0x462
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
push 0x51
mov eax, dword [ebp - 4]
add eax, 0x4d6
push eax
push 0x464
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
mov byte [ebp - 0x1ac], 0
xor edx, edx
mov dword [ebp - 0x1ab], edx
mov dword [ebp - 0x1a7], edx
mov dword [ebp - 0x1a3], edx
mov dword [ebp - 0x19f], edx
mov dword [ebp - 0x19b], edx
mov dword [ebp - 0x197], edx
mov dword [ebp - 0x193], edx
mov dword [ebp - 0x18f], edx
mov word [ebp - 0x18b], dx
mov byte [ebp - 0x189], dl
mov dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x18]
cmp ecx, 1
jne 0x42ddc4
push 0x24
lea edx, [ebp - 0x1ac]
push edx
push 0x459
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x20]
cmp edx, 2
je 0x42dd34
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
cmp ecx, 3
jne 0x42dd5f
push 1
push 0x1d
push 0
push 0x104
mov edx, dword [ebp - 4]
add edx, 0x24
push edx
push 0
lea eax, [ebp - 0x1ac]
push eax
call fcn.0042c200
add esp, 0x1c
mov dword [ebp - 0x1b0], eax
jmp 0x42ddbf
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x20]
cmp edx, 1
jne 0x42dd96
push 1
push 0x18
push 0
push 0x104
mov eax, dword [ebp - 4]
add eax, 0x24
push eax
push 0
lea ecx, [ebp - 0x1ac]
push ecx
call fcn.0042c200
add esp, 0x1c
mov dword [ebp - 0x1b0], eax
jmp 0x42ddbf
push 1
push 0
push 0
push 0x104
mov edx, dword [ebp - 4]
add edx, 0x24
push edx
push 0
lea eax, [ebp - 0x1ac]
push eax
call fcn.0042c200
add esp, 0x1c
mov dword [ebp - 0x1b0], eax
jmp 0x42df1b
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x18]
cmp edx, 2
jne 0x42df1b
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
cmp ecx, 2
je 0x42ddf0
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x20]
cmp eax, 3
jne 0x42de97
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1bc], 0
jmp 0x42de15
mov ecx, dword [ebp - 0x1bc]
add ecx, 1
mov dword [ebp - 0x1bc], ecx
cmp dword [ebp - 0x1bc], 7
jge 0x42de69
mov edx, 0x24
sub edx, dword [ebp - 0x1b8]
push edx
mov eax, dword [ebp - 0x1b8]
lea ecx, [ebp + eax - 0x1ac]
push ecx
mov edx, dword [ebp - 0x1bc]
add edx, 0x45a
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov dword [ebp - 0x1b4], eax
mov ecx, dword [ebp - 0x1b8]
add ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1b8], ecx
jmp 0x42de06
push 1
push 0x1d
push 0
push 0x104
mov edx, dword [ebp - 4]
add edx, 0x24
push edx
push 0
lea eax, [ebp - 0x1ac]
push eax
call fcn.0042c200
add esp, 0x1c
mov dword [ebp - 0x1b0], eax
jmp 0x42df1b
mov dword [ebp - 0x1c0], 0
jmp 0x42deb2
mov ecx, dword [ebp - 0x1c0]
add ecx, 1
mov dword [ebp - 0x1c0], ecx
cmp dword [ebp - 0x1c0], 6
jae 0x42def2
mov edx, dword [ebp - 0x1c0]
shl edx, 2
mov eax, 0x1e
sub eax, edx
push eax
mov ecx, dword [ebp - 0x1c0]
lea edx, [ebp + ecx*4 - 0x1ac]
push edx
mov eax, dword [ebp - 0x1c0]
add eax, 0x45a
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
jmp 0x42dea3
push 1
push 0x18
push 0
push 0x104
mov edx, dword [ebp - 4]
add edx, 0x24
push edx
push 0
lea eax, [ebp - 0x1ac]
push eax
call fcn.0042c200
add esp, 0x1c
mov dword [ebp - 0x1b0], eax
push 0x40
lea ecx, [ebp - 0x88]
push ecx
push 0x258
mov edx, dword [ebp - 4]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x80
lea ecx, [ebp - 0x188]
push ecx
push 0x2bf
mov edx, dword [ebp - 4]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
cmp dword [ebp - 0x1b0], 0
jne 0x42e083
lea ecx, [ebp - 0x1e8]
push ecx
lea edx, [ebp - 0x1ac]
push edx
mov eax, dword [ebp - 4]
add eax, 8
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
call fcn.00467780
mov dword [ebp - 0x1b0], eax
mov ecx, dword [ebp - 0x1b0]
push ecx
lea edx, [ebp - 0x1ac]
push edx
push 0x4960e0
call fcn.00437da0
add esp, 0xc
cmp dword [ebp - 0x1b0], 0
jne 0x42e067
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x1e]
push ecx
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x1f]
push eax
movzx ecx, byte [ebp - 0x1e6]
push ecx
push str.SNV3GetDlg_OnCommand____ProductCode_d_ProductLanguage_d_ProductVersion_d
call fcn.00437da0
add esp, 0x10
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x1d]
test eax, eax
je 0x42e003
movzx ecx, byte [ebp - 0x1e6]
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x1d]
cmp ecx, eax
jne 0x42e03d
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x1f]
test edx, edx
je 0x42e020
movzx eax, byte [ebp - 0x1e5]
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x1f]
cmp eax, edx
jne 0x42e03d
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x1e]
test ecx, ecx
je 0x42e059
movzx edx, byte [ebp - 0x1e8]
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x1e]
cmp edx, ecx
je 0x42e059
push 0
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x188]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x42e065
push 1
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x42e081
push 0
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x188]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x42e09d
push 0
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x188]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, 1
jmp 0x42e834
cmp dword [ebp - 4], 0
je 0x42e2da
push 0x51
mov eax, dword [ebp - 4]
add eax, 0x434
push eax
push 0x462
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
push 0x51
mov edx, dword [ebp - 4]
add edx, 0x4d6
push edx
push 0x464
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
mov byte [ebp - 0x390], 0
xor ecx, ecx
mov dword [ebp - 0x38f], ecx
mov dword [ebp - 0x38b], ecx
mov dword [ebp - 0x387], ecx
mov dword [ebp - 0x383], ecx
mov dword [ebp - 0x37f], ecx
mov dword [ebp - 0x37b], ecx
mov dword [ebp - 0x377], ecx
mov dword [ebp - 0x373], ecx
mov word [ebp - 0x36f], cx
mov byte [ebp - 0x36d], cl
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x20]
xor ecx, ecx
cmp eax, 2
sete cl
push ecx
push 0
push 0
push 0x24
lea edx, [ebp - 0x390]
push edx
push 0
mov eax, dword [ebp - 4]
add eax, 0x128
push eax
call fcn.0042c200
add esp, 0x1c
mov dword [ebp - 0x36c], eax
push 0x40
lea ecx, [ebp - 0x268]
push ecx
push 0x258
mov edx, dword [ebp - 4]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x80
lea ecx, [ebp - 0x368]
push ecx
push 0x2bf
mov edx, dword [ebp - 4]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
cmp dword [ebp - 0x36c], 0
jne 0x42e2c0
lea ecx, [ebp - 0x3b8]
push ecx
lea edx, [ebp - 0x390]
push edx
mov eax, dword [ebp - 4]
add eax, 8
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
call fcn.00467780
mov dword [ebp - 0x36c], eax
mov ecx, dword [ebp - 0x36c]
push ecx
lea edx, [ebp - 0x390]
push edx
push str.SNV3GetDlg_OnCommand____SerialNumber_Validate__s____d
call fcn.00437da0
add esp, 0xc
cmp dword [ebp - 0x36c], 0
jne 0x42e2a4
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x1d]
test ecx, ecx
je 0x42e225
movzx edx, byte [ebp - 0x3b6]
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x1d]
cmp edx, ecx
jne 0x42e25f
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x1f]
test eax, eax
je 0x42e242
movzx ecx, byte [ebp - 0x3b5]
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x1f]
cmp ecx, eax
jne 0x42e25f
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x1e]
test edx, edx
je 0x42e27b
movzx eax, byte [ebp - 0x3b8]
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x1e]
cmp eax, edx
je 0x42e27b
push 0
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x368]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x42e2a2
lea eax, [ebp - 0x390]
push eax
push 0x104
mov ecx, dword [ebp - 4]
add ecx, 0x24
push ecx
call fcn.00449d9d
add esp, 0xc
push 1
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x42e2be
push 0
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x368]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x42e2da
push 0
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x368]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, 1
jmp 0x42e834
push 3
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
mov eax, 1
jmp 0x42e834
push 2
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_EndDialog]
mov eax, 1
jmp 0x42e834
push str.SNV3GetDlg_OnCommand___IDPASTE
call fcn.00437970
add esp, 4
cmp dword [ebp - 4], 0
je 0x42e353
push 0
push 0
push 0x302
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x18]
sub eax, 1
neg eax
sbb eax, eax
neg eax
add eax, 0x459
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, 1
jmp 0x42e834
mov edx, dword [ebp - 4]
add edx, 0x22c
je 0x42e384
push 5
push 0
push 0
mov eax, dword [ebp - 4]
add eax, 0x22c
push eax
push 0x4961dc
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [ebp + 0x14], 0x300
jne 0x42e4fb
mov byte [ebp - 0x3e0], 0
xor ecx, ecx
mov dword [ebp - 0x3df], ecx
mov dword [ebp - 0x3db], ecx
mov dword [ebp - 0x3d7], ecx
mov dword [ebp - 0x3d3], ecx
mov dword [ebp - 0x3cf], ecx
mov dword [ebp - 0x3cb], ecx
mov dword [ebp - 0x3c7], ecx
mov dword [ebp - 0x3c3], ecx
mov word [ebp - 0x3bf], cx
mov byte [ebp - 0x3bd], cl
push 0x24
lea edx, [ebp - 0x3e0]
push edx
push 0x459
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov dword [ebp - 0x3e8], eax
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x20]
cmp edx, 2
je 0x42e40d
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
cmp ecx, 3
jne 0x42e419
mov dword [ebp - 0x3e4], 0x1d
jmp 0x42e43b
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x20]
cmp eax, 1
jne 0x42e431
mov dword [ebp - 0x3e4], 0x18
jmp 0x42e43b
mov dword [ebp - 0x3e4], 0
mov dword [ebp - 0x3bc], 0
cmp dword [ebp - 4], 0
je 0x42e4a1
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x19]
and edx, 2
je 0x42e4a1
cmp dword [ebp - 0x3e8], 0x18
jb 0x42e49f
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
xor edx, edx
cmp ecx, 2
sete dl
push edx
mov eax, dword [ebp - 0x3e4]
push eax
push 0
push 0x24
lea ecx, [ebp - 0x3e0]
push ecx
push 0
lea edx, [ebp - 0x3e0]
push edx
call fcn.0042c200
add esp, 0x1c
neg eax
sbb eax, eax
add eax, 1
mov dword [ebp - 0x3bc], eax
jmp 0x42e4e1
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
xor edx, edx
cmp ecx, 2
sete dl
push edx
mov eax, dword [ebp - 0x3e4]
push eax
push 0
push 0x24
lea ecx, [ebp - 0x3e0]
push ecx
push 0
lea edx, [ebp - 0x3e0]
push edx
call fcn.0042c200
add esp, 0x1c
neg eax
sbb eax, eax
add eax, 1
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3bc]
push eax
push 1
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov eax, 1
jmp 0x42e834
cmp dword [ebp + 0xc], 0x45a
jl 0x42e832
cmp dword [ebp + 0xc], 0x461
jge 0x42e832
cmp dword [ebp + 0x14], 0x300
jne 0x42e82b
mov edx, dword [ebp - 4]
movzx eax, byte [edx + 0x20]
cmp eax, 2
je 0x42e548
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x20]
cmp edx, 3
jne 0x42e6c8
mov byte [ebp - 0x40c], 0
xor eax, eax
mov dword [ebp - 0x40b], eax
mov dword [ebp - 0x407], eax
mov dword [ebp - 0x403], eax
mov dword [ebp - 0x3ff], eax
mov dword [ebp - 0x3fb], eax
mov dword [ebp - 0x3f7], eax
mov dword [ebp - 0x3f3], eax
mov byte [ebp - 0x3ef], al
mov dword [ebp - 0x410], 0
mov dword [ebp - 0x414], 0
jmp 0x42e5a6
mov ecx, dword [ebp - 0x414]
add ecx, 1
mov dword [ebp - 0x414], ecx
cmp dword [ebp - 0x414], 7
jge 0x42e647
mov edx, 0x1e
sub edx, dword [ebp - 0x410]
push edx
mov eax, dword [ebp - 0x410]
lea ecx, [ebp + eax - 0x40c]
push ecx
mov edx, dword [ebp - 0x414]
add edx, 0x45a
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 4], 0
je 0x42e630
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x23]
test edx, edx
jne 0x42e630
mov eax, dword [ebp - 0x414]
add eax, 0x45a
cmp dword [ebp + 0xc], eax
jne 0x42e630
mov ecx, dword [ebp - 0x414]
mov edx, dword [ebp - 0x3ec]
cmp edx, dword [ecx*4 + 0x4b10a8]
jne 0x42e630
push 0
push 0
push 0x28
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [ebp - 0x410]
add ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x410], ecx
jmp 0x42e597
cmp dword [ebp - 4], 0
je 0x42e67a
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x19]
and eax, 2
je 0x42e67a
xor ecx, ecx
cmp dword [ebp - 0x410], 0x1d
sete cl
push ecx
push 1
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x42e6c3
mov eax, dword [ebp - 4]
movzx ecx, byte [eax + 0x20]
xor edx, edx
cmp ecx, 2
sete dl
push edx
push 0x1d
push 0
push 0x1e
lea eax, [ebp - 0x40c]
push eax
push 0
lea ecx, [ebp - 0x40c]
push ecx
call fcn.0042c200
add esp, 0x1c
neg eax
sbb eax, eax
add eax, 1
push eax
push 1
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x42e82b
mov byte [ebp - 0x434], 0
xor eax, eax
mov dword [ebp - 0x433], eax
mov dword [ebp - 0x42f], eax
mov dword [ebp - 0x42b], eax
mov dword [ebp - 0x427], eax
mov dword [ebp - 0x423], eax
mov dword [ebp - 0x41f], eax
mov dword [ebp - 0x438], 0
mov dword [ebp - 0x43c], 0
jmp 0x42e71a
mov ecx, dword [ebp - 0x43c]
add ecx, 1
mov dword [ebp - 0x43c], ecx
cmp dword [ebp - 0x43c], 6
jge 0x42e7af
mov edx, 0x19
sub edx, dword [ebp - 0x438]
push edx
mov eax, dword [ebp - 0x438]
lea ecx, [ebp + eax - 0x434]
push ecx
mov edx, dword [ebp - 0x43c]
add edx, 0x45a
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov dword [ebp - 0x418], eax
cmp dword [ebp - 4], 0
je 0x42e798
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x23]
test edx, edx
jne 0x42e798
mov eax, dword [ebp - 0x43c]
add eax, 0x45a
cmp dword [ebp + 0xc], eax
jne 0x42e798
cmp dword [ebp - 0x418], 4
jne 0x42e798
push 0
push 0
push 0x28
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov edx, dword [ebp - 0x438]
add edx, dword [ebp - 0x418]
mov dword [ebp - 0x438], edx
jmp 0x42e70b
cmp dword [ebp - 4], 0
je 0x42e7e2
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x19]
and ecx, 2
je 0x42e7e2
xor edx, edx
cmp dword [ebp - 0x438], 0x18
sete dl
push edx
push 1
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x42e82b
mov ecx, dword [ebp - 4]
movzx edx, byte [ecx + 0x20]
xor eax, eax
cmp edx, 2
sete al
push eax
push 0x18
push 0
push 0x19
lea ecx, [ebp - 0x434]
push ecx
push 0
lea edx, [ebp - 0x434]
push edx
call fcn.0042c200
add esp, 0x1c
neg eax
sbb eax, eax
add eax, 1
push eax
push 1
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov eax, 1
jmp 0x42e834
xor eax, eax
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00447645
mov esp, ebp
pop ebp
ret