Function at 0x422fd5
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4cd76d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x58
push ebx
push ebp
push esi
mov ebp, ecx
push edi
push ebp
lea ecx, [esp + 0x58]
call fcn.004c7c37
lea eax, [ebp + 0x5c]
lea ecx, [esp + 0x54]
push eax
mov dword [esp + 0x74], 0
call fcn.004c7533
push 0x3e9
mov ecx, ebp
call fcn.004c3a1e
mov edx, dword [eax + 0x1c]
mov ebx, dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [esp + 0x44]
push ecx
push edx
call ebx
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x44]
mov edi, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
sub eax, ecx
push 0x3f4
mov ecx, ebp
sub edi, edx
mov dword [esp + 0x1c], eax
call fcn.004c3a1e
mov edx, dword [eax + 0x1c]
lea ecx, [esp + 0x44]
push ecx
push edx
call ebx
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x44]
mov esi, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
sub eax, ecx
push 0x3f5
mov ecx, ebp
sub esi, edx
mov dword [esp + 0x2c], eax
call fcn.004c3a1e
mov edx, dword [eax + 0x1c]
lea ecx, [esp + 0x44]
push ecx
push edx
call ebx
mov eax, dword [esp + 0x50]
mov ebx, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x44]
sub eax, ebx
sub ecx, edx
mov dword [esp + 0x24], ecx
cmp esi, eax
mov ecx, esi
jg 0x4230ad
mov ecx, eax
cmp edi, ecx
jle 0x4230b5
mov eax, edi
jmp 0x4230bb
cmp esi, eax
jle 0x4230bb
mov eax, esi
mov dword [ebp + 0x118], eax
mov eax, dword [ebp + 0x120]
test eax, eax
mov dword [esp + 0x14], 0
jle 0x4231b7
mov eax, dword [esp + 0x78]
lea esi, [eax + 0x14]
mov ecx, dword [ebp + 0x11c]
mov edx, dword [esp + 0x14]
mov eax, dword [ecx + edx*4]
lea ecx, [esp + 0x20]
push eax
call fcn.004c44ed
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x3c]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x68]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x40]
lea ecx, [esp + 0x20]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], edi
call fcn.004c447f
mov dword [esi - 0xc], ebx
mov ebx, dword [esp + 0x14]
mov dword [esi - 8], edi
mov dword [esi], 1
mov ecx, dword [ebp + 0x11c]
mov eax, dword [ecx + ebx*4]
mov ecx, dword [eax + 0x14]
dec ecx
cmp ecx, 0xb
ja case.default.0x423149
jmp dword [ecx*4 + 0x4235c9]
mov dword [esp + 0x10], 3
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x1c]
push edx
push 0x57
call fcn.004be1bc
mov eax, dword [eax]
lea edx, [esp + 0x2c]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x68]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x38], ecx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], edi
call fcn.004c447f
mov edx, dword [esp + 0x18]
add edi, edx
mov dword [esi - 4], edi
mov eax, dword [ebp + 0x120]
inc ebx
add esi, 0x18
cmp ebx, eax
mov dword [esp + 0x14], ebx
jl 0x4230de
mov eax, dword [ebp + 0x118]
mov ecx, dword [esp + 0x38]
cmp ecx, eax
jle 0x4231c7
mov eax, ecx
push 8
push 0x57
lea ecx, [esp + 0x34]
mov dword [ebp + 0x118], eax
call fcn.004be1bc
mov eax, dword [eax]
lea edx, [esp + 0x3c]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x68]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov dword [esp + 0x34], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x38], edx
call fcn.004c447f
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 1
call esi
lea eax, [eax + eax*2]
push 0
cdq
and edx, 3
add eax, edx
sar eax, 2
sub eax, 0x1a
mov dword [esp + 0x2c], eax
call esi
lea eax, [eax + eax*2]
mov ecx, dword [ebp + 0x120]
cdq
and edx, 3
mov ebx, SysReAllocString
add eax, edx
mov edi, eax
sar edi, 2
sub edi, 0x1a
test ecx, ecx
mov dword [esp + 0x20], edi
jle 0x423271
mov eax, dword [esp + 0x78]
mov esi, ecx
add eax, 8
mov edx, dword [eax + 8]
mov edi, dword [eax]
lea edx, [edx + edi + 6]
cmp edx, ebx
jle 0x423267
mov ebx, edx
add eax, 0x18
dec esi
jne 0x423258
mov edi, dword [esp + 0x20]
mov eax, 0x2aaaaaab
imul edi
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, ebx
mov esi, edx
cdq
idiv esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], eax
mov eax, ebx
cdq
idiv esi
test edx, edx
je 0x42329b
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov edx, 6
cmp eax, edx
jle 0x4232ac
mov dword [esp + 0x10], edx
mov eax, dword [ebp + 0x118]
add eax, 5
imul eax, ecx
add eax, 0x15
cmp eax, 0xb4
jge 0x4232ca
mov dword [esp + 0x10], 1
mov eax, dword [esp + 0x10]
mov dword [esp + 0x24], 0
cmp eax, edx
jg 0x4233ed
mov edx, eax
imul edx, esi
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x24]
test edx, edx
jne 0x4233ed
xor edx, edx
xor ebx, ebx
test ecx, ecx
mov dword [esp + 0x14], edx
jle 0x4233be
mov esi, dword [esp + 0x78]
lea ecx, [ebx + ebx*2]
lea eax, [esi + ecx*8]
mov dword [eax], 0
mov dword [eax + 4], edx
mov ecx, dword [eax + 8]
cmp ecx, dword [esp + 0x3c]
jg 0x423323
mov ecx, dword [esp + 0x3c]
mov eax, dword [eax + 0x10]
inc ebx
lea ecx, [eax + ecx + 6]
mov eax, dword [ebp + 0x120]
cmp ebx, eax
jge 0x42339a
lea edx, [ebx + ebx*2]
lea esi, [esi + edx*8 + 8]
add ecx, 0xc
mov eax, ecx
cdq
idiv dword [esp + 0x18]
mov edi, eax
mov eax, ecx
mov ecx, dword [esp + 0x18]
cdq
idiv ecx
test edx, edx
je 0x423356
inc edi
imul edi, ecx
mov ecx, dword [esi]
mov edx, dword [esp + 0x3c]
cmp ecx, edx
mov eax, edi
jg 0x423367
mov ecx, edx
mov edx, dword [esi + 8]
lea ecx, [edx + ecx + 6]
mov edx, dword [esp + 0x1c]
sub edx, eax
cmp ecx, edx
jg 0x423392
mov edx, dword [esp + 0x14]
mov dword [esi - 8], eax
mov dword [esi - 4], edx
add ecx, eax
mov eax, dword [ebp + 0x120]
inc ebx
add esi, 0x18
cmp ebx, eax
jl 0x42333c
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0x20]
mov eax, dword [ebp + 0x118]
lea ecx, [edx + eax + 5]
mov dword [esp + 0x14], ecx
mov ecx, dword [ebp + 0x120]
mov edx, dword [esp + 0x14]
cmp ebx, ecx
jl 0x423303
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x28]
sub edx, 5
cmp edx, eax
jg 0x4233d1
mov dword [esp + 0x24], 1
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x1c]
inc eax
add ebx, esi
cmp eax, 6
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ebx
jle 0x4232e7
lea ecx, [eax - 1]
mov dword [esp + 0x14], 0
test ecx, ecx
mov dword [esp + 0x24], ecx
jle 0x42347f
mov eax, dword [ebp + 0x120]
mov esi, SysReAllocString
test eax, eax
jle 0x423472
mov edx, dword [esp + 0x78]
mov ecx, eax
lea edi, [edx + 8]
mov ebx, edi
mov eax, dword [ebx - 8]
cdq
idiv dword [esp + 0x18]
cmp eax, dword [esp + 0x14]
jne 0x423430
mov eax, dword [ebx]
cmp eax, esi
jle 0x423430
mov esi, eax
add ebx, 0x18
dec ecx
jne 0x42341a
test esi, esi
jle 0x42346a
mov eax, dword [esp + 0x3c]
cmp esi, eax
jle 0x423444
mov esi, eax
xor ebx, ebx
mov ecx, edi
mov eax, dword [ecx - 8]
cdq
idiv dword [esp + 0x18]
cmp eax, dword [esp + 0x14]
jne 0x42345c
cmp dword [ecx], esi
jge 0x42345c
mov dword [ecx], esi
mov eax, dword [ebp + 0x120]
inc ebx
add ecx, 0x18
cmp ebx, eax
jl 0x423448
mov ecx, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jl 0x423400
mov ecx, dword [ebp + 0x120]
xor eax, eax
cmp ecx, eax
mov dword [esp + 0x34], SysReAllocString
mov dword [esp + 0x38], eax
mov dword [esp + 0x14], eax
jle 0x423512
mov eax, dword [esp + 0x78]
lea ecx, [eax + 8]
mov edx, dword [ecx - 8]
mov eax, dword [ecx + 8]
mov esi, dword [ecx]
add eax, edx
lea ebx, [eax + esi + 6]
cmp ebx, edi
jle 0x4234dc
cmp dword [ecx + 0xc], 1
jne 0x4234dc
mov eax, edi
sub eax, edx
sub eax, esi
mov esi, dword [esp + 0x3c]
sub eax, 6
add esi, 0x1e
cmp eax, esi
jle 0x4234dc
mov dword [ecx + 8], eax
mov edx, dword [ecx - 8]
mov esi, dword [ecx]
add esi, edx
lea ebx, [esi + eax + 6]
cmp ebx, dword [esp + 0x34]
jle 0x4234e6
mov dword [esp + 0x34], ebx
test edx, edx
jne 0x4234fc
mov edx, dword [ebp + 0x118]
mov eax, dword [esp + 0x38]
lea edx, [eax + edx + 5]
mov dword [esp + 0x38], edx
mov eax, dword [esp + 0x14]
mov edx, dword [ebp + 0x120]
inc eax
add ecx, 0x18
cmp eax, edx
mov dword [esp + 0x14], eax
jl 0x4234a2
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x34]
push 0x11
mov dword [eax], edi
mov dword [eax + 4], ecx
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x3c]
mov dword [eax], edx
mov dword [eax + 4], ecx
lea ecx, [esp + 0x58]
call fcn.004c74f7
lea ecx, [esp + 0x54]
mov dword [esp + 0x70], 0xffffffff
call fcn.004c7ca9
mov ecx, dword [esp + 0x68]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x64
ret 0xc
mov dword [esp + 0x10], 6
jmp case.default.0x423149
mov dword [esp + 0x10], 0xb
jmp case.default.0x423149
mov dword [esp + 0x10], 0x15
jmp case.default.0x423149
mov edx, dword [esp + 0x28]
mov dword [esi], 2
mov dword [esi - 4], edx
jmp 0x4231a1
mov dword [esp + 0x10], 0x1a
jmp case.default.0x423149
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x10], eax
jmp case.default.0x423149
mov ecx, dword [esp + 0x24]
mov dword [esi], 3
mov dword [esi - 4], ecx
jmp 0x4231a1