Function at 0x427520
Capabilities:
Create thread
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
nop
mov eax, dword [ebp + 0xc]
cmp eax, 0x110
je 0x427552
cmp eax, 0x111
je 0x427a29
cmp eax, 0x27a9
je 0x4279ee
jmp 0x4282f7
mov dword [0x46abf4], ebx
push ebx
call sub.USER32.DLL_GetParent
mov dword [ebp - 4], eax
push 0xffffffffffffffeb
push dword [ebp - 4]
call sub.USER32.DLL_GetWindowLongA
mov esi, eax
push esi
push 0xffffffffffffffeb
push ebx
call sub.USER32.DLL_SetWindowLongA
push 1
push 0
push 0
push dword [esi + 0xc]
push dword [esi + 8]
push 0
push ebx
call sub.USER32.DLL_SetWindowPos
mov eax, dword [esi + 0x28]
test eax, eax
jne 0x42779c
push 0x65
push ebx
call sub.USER32.DLL_GetDlgItem
mov dword [ebp - 0xc], eax
push dword [ebp - 0xc]
call fcn.00429076
pop ecx
push 0x491db0
push 0
push 0x2784
push dword [ebp - 0xc]
call sub.USER32.DLL_SendMessageA
mov al, byte [0x492084]
test al, al
je 0x4275d7
push 0x492084
push 0
push 0xc
push dword [ebp - 0xc]
call sub.USER32.DLL_SendMessageA
push 0x68
push ebx
call sub.USER32.DLL_GetDlgItem
mov dword [ebp - 0xc], eax
push dword [ebp - 0xc]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x42760b
push dword [ebp - 0xc]
call fcn.00429076
pop ecx
push 0x491e00
push 0
push 0x2784
push dword [ebp - 0xc]
call sub.USER32.DLL_SendMessageA
mov eax, dword [esi + 0x20]
and eax, 2
je 0x427618
mov eax, dword [esi + 0x1c]
jmp 0x42761b
mov eax, dword [esi + 0x18]
push eax
push 0
push 0x172
push 0x6a
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
mov eax, dword [esi + 0x20]
and eax, 4
je 0x427638
mov eax, dword [esi + 0x1c]
jmp 0x42763b
mov eax, dword [esi + 0x18]
push eax
push 0
push 0x172
push 0x6f
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str..c_.cpp_.h
push 0
push 0x143
push 0x66
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str..asm_.nas
push 0
push 0x143
push 0x66
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str..def_.rc
push 0
push 0x143
push 0x66
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str..txt
push 0
push 0x143
push 0x66
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push 0x472ef4
push 0
push 0x143
push 0x66
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push 0
push dword [0x46ac3c]
push 0x14e
push 0x66
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.Current_Document
push 0
push 0x143
push 0x67
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.Open_Documents
push 0
push 0x143
push 0x67
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.Current_Project
push 0
push 0x143
push 0x67
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.All_Projects
push 0
push 0x143
push 0x67
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.CC386_Include_Path
push 0
push 0x143
push 0x67
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.User_specified_Path
push 0
push 0x143
push 0x67
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push 0
push dword [0x46ac2c]
push 0x14e
push 0x67
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.Direct_Match
push 0
push 0x143
push 0x69
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.Regular_Expression
push 0
push 0x143
push 0x69
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.Wildcard
push 0
push 0x143
push 0x69
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
mov dword [0x491e5c], 1
jmp 0x4279ce
push 0xc9
push ebx
call sub.USER32.DLL_GetDlgItem
mov dword [ebp - 0xc], eax
push dword [ebp - 0xc]
call fcn.00429076
pop ecx
push 0x491db0
push 0
push 0x2784
push dword [ebp - 0xc]
call sub.USER32.DLL_SendMessageA
mov al, byte [0x492084]
test al, al
je 0x4277e1
push 0x492084
push 0
push 0xc
push dword [ebp - 0xc]
call sub.USER32.DLL_SendMessageA
push 0xca
push ebx
call sub.USER32.DLL_GetDlgItem
mov dword [ebp - 0xc], eax
push dword [ebp - 0xc]
call fcn.00429076
pop ecx
push 0x491dd8
push 0
push 0x2784
push dword [ebp - 0xc]
call sub.USER32.DLL_SendMessageA
mov al, byte [0x492184]
test al, al
je 0x427826
push 0x492184
push 0
push 0xc
push dword [ebp - 0xc]
call sub.USER32.DLL_SendMessageA
push 0xcd
push ebx
call sub.USER32.DLL_GetDlgItem
mov dword [ebp - 0xc], eax
push dword [ebp - 0xc]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x42785d
push dword [ebp - 0xc]
call fcn.00429076
pop ecx
push 0x491e28
push 0
push 0x2784
push dword [ebp - 0xc]
call sub.USER32.DLL_SendMessageA
mov eax, dword [esi + 0x24]
and eax, 2
je 0x42786a
mov eax, dword [esi + 0x1c]
jmp 0x42786d
mov eax, dword [esi + 0x18]
push eax
push 0
push 0x172
push 0xcf
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str..c_.cpp_.h
push 0
push 0x143
push 0xcb
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str..def_.rc
push 0
push 0x143
push 0xcb
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push 0x472ef4
push 0
push 0x143
push 0xcb
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push 0
push dword [0x46ac40]
push 0x14e
push 0xcb
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.Current_Document
push 0
push 0x143
push 0xcc
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.Open_Documents
push 0
push 0x143
push 0xcc
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.Current_Project
push 0
push 0x143
push 0xcc
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.All_Projects
push 0
push 0x143
push 0xcc
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.CC386_Include_Path
push 0
push 0x143
push 0xcc
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.User_specified_Path
push 0
push 0x143
push 0xcc
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push 0
push dword [0x46ac30]
push 0x14e
push 0xcc
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.Direct_Match
push 0
push 0x143
push 0xce
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.Regular_Expression
push 0
push 0x143
push 0xce
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
push str.Wildcard
push 0
push 0x143
push 0xce
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
mov dword [0x491e5c], 0
push dword [esi + 0x2c]
push ebx
call fcn.00426f16
add esp, 8
push esi
push ebx
call fcn.004271fa
add esp, 8
mov eax, 1
jmp 0x4282fc
push 0xffffffffffffffeb
push ebx
call sub.USER32.DLL_GetWindowLongA
mov esi, eax
mov eax, dword [ebp + 0x10]
mov dword [esi + 0x2c], eax
push dword [ebp + 0x10]
push ebx
call fcn.00426f16
add esp, 8
push 0
push 0
push 0x229
push dword [0x478668]
call sub.USER32.DLL_SendMessageA
push eax
call sub.USER32.DLL_SetFocus
jmp 0x4282f7
push 0xffffffffffffffeb
push ebx
call sub.USER32.DLL_GetWindowLongA
mov esi, eax
movzx eax, word [ebp + 0x10]
cmp eax, 1
jne 0x427a53
mov eax, dword [esi + 0x28]
test eax, eax
je 0x427a4c
mov dword [ebp + 0x10], 0xd5
jmp 0x427a53
mov dword [ebp + 0x10], 0x75
movzx eax, word [ebp + 0x10]
cmp ax, 0x72
je 0x427ffc
ja 0x427b1d
cmp ax, 0x6b
je 0x427e5f
ja 0x427ac8
cmp ax, 0x67
je 0x427cc9
ja 0x427aa9
cmp ax, 9
je 0x427bcf
ja 0x427a9a
cmp ax, 2
je 0x42803a
jmp 0x4282f5
cmp ax, 0x66
je 0x427c90
jmp 0x4282f5
cmp ax, 0x6a
je 0x427c51
ja 0x4282f5
cmp ax, 0x69
je 0x427d84
jmp 0x4282f5
cmp ax, 0x6f
je 0x427c66
ja 0x427afe
cmp ax, 0x6d
je 0x427eff
ja 0x427aef
cmp ax, 0x6c
je 0x427eaf
jmp 0x4282f5
cmp ax, 0x6e
je 0x427f55
jmp 0x4282f5
cmp ax, 0x71
je 0x427fbe
ja 0x4282f5
cmp ax, 0x70
je 0x427f7d
jmp 0x4282f5
cmp ax, 0xd0
je 0x427e87
ja 0x427b7e
cmp ax, 0xcc
je 0x427d25
ja 0x427b5f
cmp ax, 0x76
je 0x427bdc
ja 0x427b50
cmp ax, 0x75
je 0x4280fd
jmp 0x4282f5
cmp ax, 0xcb
je 0x427cab
jmp 0x4282f5
cmp ax, 0xcf
je 0x427c7b
ja 0x4282f5
cmp ax, 0xce
je 0x427df0
jmp 0x4282f5
cmp ax, 0xd5
je 0x4281b0
ja 0x427bb4
cmp ax, 0xd2
je 0x427f2a
ja 0x427ba5
cmp ax, 0xd1
je 0x427ed7
jmp 0x4282f5
cmp ax, 0xd4
je 0x4280fd
jmp 0x4282f5
cmp ax, 0xd7
je 0x427c15
ja 0x4282f5
cmp ax, 0xd6
je 0x428250
jmp 0x4282f5
push 0x64
call fcn.00428d14
pop ecx
jmp 0x4282f5
mov byte [0x491e74], 0
push 0x104
push 0x491e74
push 0x472e31
push dword [0x478664]
call fcn.00405711
add esp, 0x10
push 0x68
push ebx
call fcn.0042742d
add esp, 8
call fcn.00426197
jmp 0x4282f5
mov byte [0x491e74], 0
push 0x104
push 0x491e74
push 0x472e29
push dword [0x478664]
call fcn.00405711
add esp, 0x10
push 0xcd
push ebx
call fcn.0042742d
add esp, 8
call fcn.00426197
jmp 0x4282f5
xor dword [esi + 0x20], 2
push ebx
call sub.USER32.DLL_GetParent
push eax
call fcn.00428305
jmp 0x4282f5
xor dword [esi + 0x20], 4
push ebx
call sub.USER32.DLL_GetParent
push eax
call fcn.00428305
jmp 0x4282f5
xor dword [esi + 0x24], 2
push ebx
call sub.USER32.DLL_GetParent
push eax
call fcn.00428305
jmp 0x4282f5
push 0
push 0
push 0x147
push 0x66
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
mov dword [0x46ac3c], eax
jmp 0x4282f5
push 0
push 0
push 0x147
push 0xcb
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
mov dword [0x46ac40], eax
jmp 0x4282f5
push 0
push 0
push 0x147
push 0x67
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
mov dword [0x46ac2c], eax
cmp eax, 5
jne 0x427cfe
mov eax, dword [esi + 0x20]
and eax, 1
jne 0x427cfc
or dword [esi + 0x20], 1
push ebx
call sub.USER32.DLL_GetParent
push eax
call fcn.00428305
jmp 0x427d16
mov eax, dword [esi + 0x20]
and eax, 1
je 0x427d16
and dword [esi + 0x20], 0xfffffffe
push ebx
call sub.USER32.DLL_GetParent
push eax
call fcn.00428305
push esi
push ebx
call fcn.004271fa
add esp, 8
jmp 0x4282f5
push 0
push 0
push 0x147
push 0xcc
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
mov dword [0x46ac30], eax
cmp eax, 5
jne 0x427d5d
mov eax, dword [esi + 0x24]
and eax, 1
jne 0x427d5b
or dword [esi + 0x24], 1
push ebx
call sub.USER32.DLL_GetParent
push eax
call fcn.00428305
jmp 0x427d75
mov eax, dword [esi + 0x24]
and eax, 1
je 0x427d75
and dword [esi + 0x24], 0xfffffffe
push ebx
call sub.USER32.DLL_GetParent
push eax
call fcn.00428305
push esi
push ebx
call fcn.004271fa
add esp, 8
jmp 0x4282f5
push 0
push 0
push 0x147
push 0x69
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
mov dword [ebp - 0xc], eax
mov eax, dword [0x46ac2c]
lea eax, [eax*4]
and dword [eax + 0x46abfc], 0xffffffe7
mov eax, dword [ebp - 0xc]
cmp eax, 0
je 0x427dbf
cmp eax, 1
je 0x427dc1
cmp eax, 2
je 0x427dd6
jmp 0x427deb
jmp 0x427deb
mov eax, dword [0x46ac2c]
lea eax, [eax*4]
or dword [eax + 0x46abfc], 8
jmp 0x427deb
mov eax, dword [0x46ac2c]
lea eax, [eax*4]
or dword [eax + 0x46abfc], 0x10
jmp 0x427deb
jmp 0x4282f5
push 0
push 0
push 0x147
push 0xce
push ebx
call sub.USER32.DLL_SendDlgItemMessageA
mov dword [ebp - 0xc], eax
mov eax, dword [0x46ac30]
lea eax, [eax*4]
and dword [eax + 0x46ac14], 0xffffffe7
mov eax, dword [ebp - 0xc]
cmp eax, 0
je 0x427e2e
cmp eax, 1
je 0x427e30
cmp eax, 2
je 0x427e45
jmp 0x427e5a
jmp 0x427e5a
mov eax, dword [0x46ac30]
lea eax, [eax*4]
or dword [eax + 0x46ac14], 8
jmp 0x427e5a
mov eax, dword [0x46ac30]
lea eax, [eax*4]
or dword [eax + 0x46ac14], 0x10
jmp 0x427e5a
jmp 0x4282f5
mov eax, dword [ebp + 0x10]
shr eax, 0x10
movzx eax, ax
movzx eax, ax
test eax, eax
jne 0x427e82
mov eax, dword [0x46ac2c]
lea eax, [eax*4]
xor dword [eax + 0x46abfc], 2
jmp 0x4282f5
mov eax, dword [ebp + 0x10]
shr eax, 0x10
movzx eax, ax
movzx eax, ax
test eax, eax
jne 0x427eaa
mov eax, dword [0x46ac30]
lea eax, [eax*4]
xor dword [eax + 0x46ac14], 2
jmp 0x4282f5
mov eax, dword [ebp + 0x10]
shr eax, 0x10
movzx eax, ax
movzx eax, ax
test eax, eax
jne 0x427ed2
mov eax, dword [0x46ac2c]
lea eax, [eax*4]
xor dword [eax + 0x46abfc], 4
jmp 0x4282f5
mov eax, dword [ebp + 0x10]
shr eax, 0x10
movzx eax, ax
movzx eax, ax
test eax, eax
jne 0x427efa
mov eax, dword [0x46ac30]
lea eax, [eax*4]
xor dword [eax + 0x46ac14], 4
jmp 0x4282f5
mov eax, dword [ebp + 0x10]
shr eax, 0x10
movzx eax, ax
movzx eax, ax
test eax, eax
jne 0x427f25
mov eax, dword [0x46ac2c]
lea eax, [eax*4]
xor dword [eax + 0x46abfc], 0x200
jmp 0x4282f5
mov eax, dword [ebp + 0x10]
shr eax, 0x10
movzx eax, ax
movzx eax, ax
test eax, eax
jne 0x427f50
mov eax, dword [0x46ac30]
lea eax, [eax*4]
xor dword [eax + 0x46ac14], 0x200
jmp 0x4282f5
mov eax, dword [ebp + 0x10]
shr eax, 0x10
movzx eax, ax
movzx eax, ax
test eax, eax
jne 0x427f78
mov eax, dword [0x46ac2c]
lea eax, [eax*4]
xor dword [eax + 0x46abfc], 1
jmp 0x4282f5
mov eax, dword [ebp + 0x10]
shr eax, 0x10
movzx eax, ax
movzx eax, ax
test eax, eax
jne 0x427fb9
mov eax, dword [0x46ac2c]
lea eax, [eax*4]
and dword [eax + 0x46abfc], 0xffffff1f
mov eax, dword [0x46ac2c]
lea eax, [eax*4]
or dword [eax + 0x46abfc], 0x80
jmp 0x4282f5
mov eax, dword [ebp + 0x10]
shr eax, 0x10
movzx eax, ax
movzx eax, ax
test eax, eax
jne 0x427ff7
mov eax, dword [0x46ac2c]
lea eax, [eax*4]
and dword [eax + 0x46abfc], 0xffffff1f
mov eax, dword [0x46ac2c]
lea eax, [eax*4]
or dword [eax + 0x46abfc], 0x20
jmp 0x4282f5
mov eax, dword [ebp + 0x10]
shr eax, 0x10
movzx eax, ax
movzx eax, ax
test eax, eax
jne 0x428035
mov eax, dword [0x46ac2c]
lea eax, [eax*4]
and dword [eax + 0x46abfc], 0xffffff1f
mov eax, dword [0x46ac2c]
lea eax, [eax*4]
or dword [eax + 0x46abfc], 0x40
jmp 0x4282f5
mov eax, dword [esi + 0x28]
test eax, eax
jne 0x428073
push 0x65
push ebx
call sub.USER32.DLL_GetDlgItem
mov dword [ebp - 0x10], eax
push 0
push 0
push 0x2785
push dword [ebp - 0x10]
call sub.USER32.DLL_SendMessageA
push 0x492084
push pe_nt_image_headers32
push 0xd
push dword [ebp - 0x10]
call sub.USER32.DLL_SendMessageA
jmp 0x4280d9
push 0xc9
push ebx
call sub.USER32.DLL_GetDlgItem
mov dword [ebp - 0x10], eax
push 0
push 0
push 0x2785
push dword [ebp - 0x10]
call sub.USER32.DLL_SendMessageA
push 0x492084
push pe_nt_image_headers32
push 0xd
push dword [ebp - 0x10]
call sub.USER32.DLL_SendMessageA
push 0xca
push ebx
call sub.USER32.DLL_GetDlgItem
mov dword [ebp - 0x10], eax
push 0
push 0
push 0x2785
push dword [ebp - 0x10]
call sub.USER32.DLL_SendMessageA
push 0x492184
push pe_nt_image_headers32
push 0xd
push dword [ebp - 0x10]
call sub.USER32.DLL_SendMessageA
mov dword [0x46abf8], 1
push 0
push 2
push 0x111
push ebx
call sub.USER32.DLL_GetParent
push eax
call sub.USER32.DLL_SendMessageA
jmp 0x4282f5
movzx eax, word [ebp + 0x10]
cmp eax, 0x75
jne 0x428129
push 0x65
push ebx
call sub.USER32.DLL_GetDlgItem
mov dword [ebp - 0x14], eax
push 0x68
push ebx
call fcn.00427468
add esp, 8
push 0x66
push ebx
call fcn.004274ac
add esp, 8
jmp 0x428153
push 0xc9
push ebx
call sub.USER32.DLL_GetDlgItem
mov dword [ebp - 0x14], eax
push 0xcd
push ebx
call fcn.00427468
add esp, 8
push 0xcb
push ebx
call fcn.004274ac
add esp, 8
push 0x492084
push pe_nt_image_headers32
push 0xd
push dword [ebp - 0x14]
call sub.USER32.DLL_SendMessageA
push 0
push 0
push 0x2785
push dword [ebp - 0x14]
call sub.USER32.DLL_SendMessageA
mov eax, dword [0x491e58]
test eax, eax
je 0x428190
mov dword [0x491e58], 0
call fcn.00426197
lea eax, [ebp - 0x10]
push eax
push 0
push ebx
push 0x4270e4
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
push eax
call sub.KERNEL32.DLL_CloseHandle
jmp 0x4282f5
push 0xc9
push ebx
call sub.USER32.DLL_GetDlgItem
mov dword [ebp - 0x14], eax
push 0x492084
push pe_nt_image_headers32
push 0xd
push dword [ebp - 0x14]
call sub.USER32.DLL_SendMessageA
push 0xca
push ebx
call sub.USER32.DLL_GetDlgItem
mov dword [ebp - 0x14], eax
push 0x492184
push pe_nt_image_headers32
push 0xd
push dword [ebp - 0x14]
call sub.USER32.DLL_SendMessageA
mov dword [0x491e58], 0
mov eax, dword [0x46ac30]
lea eax, [eax*4]
and dword [eax + 0x46ac14], 0xfffffeff
push 0xcd
push ebx
call fcn.00427468
add esp, 8
push 0xcb
push ebx
call fcn.004274ac
add esp, 8
lea eax, [ebp - 0x10]
push eax
push 0
push ebx
push 0x427176
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
push eax
call sub.KERNEL32.DLL_CloseHandle
jmp 0x4282f5
push 0xc9
push ebx
call sub.USER32.DLL_GetDlgItem
mov edi, eax
push 0x492084
push pe_nt_image_headers32
push 0xd
push edi
call sub.USER32.DLL_SendMessageA
push 0xca
push ebx
call sub.USER32.DLL_GetDlgItem
mov edi, eax
push 0x492184
push pe_nt_image_headers32
push 0xd
push edi
call sub.USER32.DLL_SendMessageA
mov eax, dword [0x491e58]
test eax, eax
je 0x4282a6
mov dword [0x491e58], 0
call fcn.00426197
mov eax, dword [0x46ac30]
lea eax, [eax*4]
or dword [eax + 0x46ac14], 0x100
push 0xcd
push ebx
call fcn.00427468
add esp, 8
push 0xcb
push ebx
call fcn.004274ac
add esp, 8
lea eax, [ebp - 0x10]
push eax
push 0
push ebx
push 0x427176
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
push eax
call sub.KERNEL32.DLL_CloseHandle
jmp 0x4282f5
jmp 0x4282f7
mov eax, 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10