Function at 0x428560
Capabilities:
Extract resource via kernel32 functions
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x55c
push esi
push 0xa
movzx eax, word [ebp + 0xc]
push eax
mov ecx, dword [0x521dfc]
push ecx
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x550], 0
je 0x429e2d
mov edx, dword [ebp - 0x550]
push edx
mov eax, dword [0x521dfc]
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x54]
push ecx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x38], eax
push 0x401
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x54c], eax
mov dword [ebp - 0x4cc], 0
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
test eax, eax
je 0x429e20
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
jne 0x4285f5
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x4285df
mov ecx, dword [ebp - 0x38]
push ecx
push str._Ranges_
call fcn.004365b0
add esp, 8
test eax, eax
jne 0x428619
mov dword [ebp - 0x4cc], 1
jmp case.default.0x428877
mov edx, dword [ebp - 0x38]
push edx
push str._Menus_
call fcn.004365b0
add esp, 8
test eax, eax
jne 0x42863d
mov dword [ebp - 0x4cc], 2
jmp case.default.0x428877
mov eax, dword [ebp - 0x38]
push eax
push str._Checks_
call fcn.004365b0
add esp, 8
test eax, eax
jne 0x428661
mov dword [ebp - 0x4cc], 3
jmp case.default.0x428877
mov ecx, dword [ebp - 0x38]
push ecx
push str._Tabs_
call fcn.004365b0
add esp, 8
test eax, eax
jne 0x428685
mov dword [ebp - 0x4cc], 4
jmp case.default.0x428877
mov edx, dword [ebp - 0x38]
push edx
push str._Grids_
call fcn.004365b0
add esp, 8
test eax, eax
jne 0x4286a9
mov dword [ebp - 0x4cc], 5
jmp case.default.0x428877
mov eax, dword [ebp - 0x38]
push eax
push str._Colours_
call fcn.004365b0
add esp, 8
test eax, eax
jne 0x4286cd
mov dword [ebp - 0x4cc], 6
jmp case.default.0x428877
mov ecx, dword [ebp - 0x38]
push ecx
push str._Trackbars_
call fcn.004365b0
add esp, 8
test eax, eax
jne 0x4286f1
mov dword [ebp - 0x4cc], 7
jmp case.default.0x428877
mov edx, dword [ebp - 0x38]
push edx
push str._Lengths_
call fcn.004365b0
add esp, 8
test eax, eax
jne 0x428715
mov dword [ebp - 0x4cc], 8
jmp case.default.0x428877
mov eax, dword [ebp - 0x38]
push eax
push str._Dialog_
call fcn.004365b0
add esp, 8
test eax, eax
jne 0x428739
mov dword [ebp - 0x4cc], 9
jmp case.default.0x428877
mov ecx, dword [ebp - 0x38]
push ecx
push str._Formats_
call fcn.004365b0
add esp, 8
test eax, eax
jne 0x42875d
mov dword [ebp - 0x4cc], 0xa
jmp case.default.0x428877
mov edx, dword [ebp - 0x38]
push edx
push str._Treeviews_
call fcn.004365b0
add esp, 8
test eax, eax
jne 0x428781
mov dword [ebp - 0x4cc], 0xb
jmp case.default.0x428877
mov eax, dword [ebp - 0x38]
push eax
push str._Fonts_
call fcn.004365b0
add esp, 8
test eax, eax
jne 0x4287a5
mov dword [ebp - 0x4cc], 0xc
jmp case.default.0x428877
mov ecx, dword [ebp - 0x38]
push ecx
push str._Flags_
call fcn.004365b0
add esp, 8
test eax, eax
jne 0x4287c9
mov dword [ebp - 0x4cc], 0xd
jmp case.default.0x428877
mov edx, dword [ebp - 0x38]
push edx
push str._Encoding_
call fcn.004365b0
add esp, 8
test eax, eax
jne 0x4287ed
mov dword [ebp - 0x4cc], 0xe
jmp case.default.0x428877
mov eax, dword [ebp - 0x38]
push eax
call fcn.00436520
add esp, 4
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0x60], eax
push 0xffffffffffffffe0
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_GetClassWord]
mov word [ebp - 0x5c], ax
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
je 0x428833
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x42881d
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
jne 0x428849
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x428833
mov ecx, dword [ebp - 0x4cc]
mov dword [ebp - 0x554], ecx
mov edx, dword [ebp - 0x554]
sub edx, 1
mov dword [ebp - 0x554], edx
cmp dword [ebp - 0x554], 0xc
ja case.default.0x428877
mov eax, dword [ebp - 0x554]
jmp dword [eax*4 + 0x429e32]
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.00436470
add esp, 4
push eax
mov edx, dword [ebp - 0x38]
push edx
lea eax, [ebp - 0x4b8]
push eax
call fcn.00436fa0
add esp, 0xc
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
je 0x4288b4
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x42889e
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
jne 0x4288ca
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x4288b4
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.00436470
add esp, 4
push eax
mov edx, dword [ebp - 0x38]
push edx
lea eax, [ebp - 0x4d8]
push eax
call fcn.00436fa0
add esp, 0xc
movzx ecx, word [ebp - 0x5c]
movzx edx, word [0x52209c]
cmp ecx, edx
jne 0x42896f
fld qword [ebp - 0x4b8]
call fcn.004d0fe6
and eax, 0xffff
movzx esi, ax
fld qword [ebp - 0x4d8]
call fcn.004d0fe6
and eax, 0xffff
movzx eax, ax
shl eax, 0x10
or esi, eax
push esi
push 0
push 0x401
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x12
mov edx, dword [ebp - 0x54c]
push edx
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 0
mov ecx, dword [ebp - 0x54c]
push ecx
call fcn.00436520
add esp, 4
push eax
push 0x402
mov edx, dword [ebp - 0x60]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x428a16
movzx eax, word [ebp - 0x5c]
movzx ecx, word [0x52203e]
cmp eax, ecx
jne 0x4289ee
fld qword [ebp - 0x4b8]
call fcn.004d0fe6
push eax
push 0
push 0x407
mov edx, dword [ebp - 0x60]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
fld qword [ebp - 0x4d8]
call fcn.004d0fe6
push eax
push 0
push 0x408
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x12
mov ecx, dword [ebp - 0x54c]
push ecx
mov edx, dword [ebp - 0x60]
push edx
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov eax, dword [ebp - 0x54c]
push eax
call fcn.00436520
add esp, 4
push eax
push 1
push 0x405
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x428a16
mov edx, dword [ebp + 8]
push edx
fld qword [ebp - 0x4d8]
sub esp, 8
fstp qword [esp]
fld qword [ebp - 0x4b8]
sub esp, 8
fstp qword [esp]
mov eax, dword [ebp - 0x34]
push eax
call fcn.00424f30
add esp, 0x18
jmp case.default.0x428877
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.00436520
add esp, 4
mov dword [ebp - 0x4c8], eax
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
cmp eax, 0x20
je 0x428a43
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
jmp 0x428a2d
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
cmp eax, 0x20
jne 0x428a59
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
jmp 0x428a43
cmp dword [ebp + 0x10], 0xffffffff
jne 0x428a6b
mov dword [ebp - 0x538], 0
jmp 0x428a80
mov edx, dword [ebp - 0x38]
push edx
call fcn.00436520
add esp, 4
sub eax, 1
mov dword [ebp - 0x538], eax
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
cmp ecx, 0xa
je 0x428aa0
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
test eax, eax
je 0x428aa0
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
jmp 0x428a80
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
test eax, eax
je 0x428ab3
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
movzx edx, word [ebp - 0x5c]
movzx eax, word [0x5228c0]
sub edx, eax
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x7c], edx
push 0
push 0
mov ecx, dword [ebp - 0x7c]
neg ecx
sbb ecx, ecx
and ecx, 0x39
add ecx, 0x14b
push ecx
mov edx, dword [ebp - 0x60]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x4c4], 1
jmp 0x428b02
mov eax, dword [ebp - 0x4c4]
add eax, 1
mov dword [ebp - 0x4c4], eax
mov ecx, dword [ebp - 0x4c4]
cmp ecx, dword [ebp - 0x4c8]
jg 0x428bea
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
test eax, eax
jne 0x428b23
jmp 0x428bea
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x4c0], 0
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0xa
je 0x428b9f
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
test ecx, ecx
je 0x428b9f
cmp dword [ebp - 0x68], 0x400
jge 0x428b94
mov edx, dword [ebp - 0x54c]
add edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x38]
mov cl, byte [eax]
mov byte [edx], cl
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
cmp ecx, 0x20
je 0x428b94
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
cmp eax, 0xa
je 0x428b94
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
test edx, edx
je 0x428b94
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x4c0], eax
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
jmp 0x428b34
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
test eax, eax
je 0x428bb2
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x54c]
add edx, dword [ebp - 0x4c0]
mov byte [edx], 0
mov eax, dword [ebp - 0x54c]
push eax
push 0
mov ecx, dword [ebp - 0x7c]
neg ecx
sbb ecx, ecx
and ecx, 0x3d
add ecx, 0x143
push ecx
mov edx, dword [ebp - 0x60]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x428af3
mov eax, dword [ebp - 0x38]
sub eax, 1
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x538], 0xffffffff
je 0x428c20
push 0
mov ecx, dword [ebp - 0x538]
push ecx
mov edx, dword [ebp - 0x7c]
neg edx
sbb edx, edx
and edx, 0x38
add edx, 0x14e
push edx
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x428877
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.00436520
add esp, 4
mov dword [ebp - 0xc4], eax
mov edx, dword [ebp - 0xc4]
push edx
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_CheckDlgButton]
jmp case.default.0x428877
mov edx, dword [ebp - 0x38]
push edx
call fcn.00436520
add esp, 4
mov dword [ebp - 0x4c8], eax
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
cmp ecx, 0x20
je 0x428c79
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp 0x428c63
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
cmp ecx, 0x20
jne 0x428c8f
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp 0x428c79
mov eax, dword [ebp - 0x38]
push eax
call fcn.00436520
add esp, 4
neg eax
mov dword [ebp - 0x538], eax
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0xa
je 0x428cc3
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
test ecx, ecx
je 0x428cc3
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp 0x428ca3
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
test ecx, ecx
je 0x428cd6
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
mov eax, dword [0x513fa0]
mov dword [ebp - 4], eax
mov dword [ebp - 0x4c4], 1
jmp 0x428cf9
mov ecx, dword [ebp - 0x4c4]
add ecx, 1
mov dword [ebp - 0x4c4], ecx
mov edx, dword [ebp - 0x4c4]
cmp edx, dword [ebp - 0x4c8]
jg 0x428e86
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
test ecx, ecx
jne 0x428d1a
jmp 0x428e86
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
cmp eax, 0x20
jne 0x428d30
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
jmp 0x428d1a
mov dword [ebp - 0x68], 0
mov edx, dword [ebp - 0x38]
push edx
call fcn.00436520
add esp, 4
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
cmp ecx, 0x20
je 0x428d5f
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp 0x428d49
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
cmp ecx, 0x20
jne 0x428d75
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp 0x428d5f
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
cmp ecx, 0xa
je 0x428db7
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
test eax, eax
je 0x428db7
cmp dword [ebp - 0x68], 0x400
jge 0x428dac
mov ecx, dword [ebp - 0x54c]
add ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x38]
mov al, byte [edx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x68]
add ecx, 1
mov dword [ebp - 0x68], ecx
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp 0x428d75
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
test ecx, ecx
je 0x428dca
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x68], 0
jle 0x428dd9
mov eax, dword [ebp - 0x68]
sub eax, 1
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0x54c]
add ecx, dword [ebp - 0x68]
mov byte [ecx], 0
mov dword [ebp - 0x524], 9
mov edx, dword [ebp - 0x54c]
mov dword [ebp - 0x518], edx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x514], eax
mov dword [ebp - 0x510], 0xffffffff
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x50c], ecx
mov dword [ebp - 0x508], 0
lea edx, [ebp - 0x524]
push edx
mov eax, dword [ebp - 0x4c4]
sub eax, 1
push eax
push 0x1307
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [ebp - 0x538]
neg edx
cmp dword [ebp - 0xc4], edx
jne 0x428e63
mov eax, dword [ebp - 0x4c4]
sub eax, 1
mov dword [ebp - 0x538], eax
lea ecx, [ebp - 0x74]
push ecx
push 0
push 0
mov edx, dword [ebp - 0xc4]
push edx
mov eax, dword [ebp - 0xc4]
push eax
call fcn.004211f0
add esp, 0x14
jmp 0x428cea
lea ecx, [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x60]
push edx
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.USER32.dll_GetParent]
push eax
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
lea edx, [ebp - 0x1c]
push edx
push 0
push 0x1328
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x524], 8
mov dword [ebp - 0x4c4], 0
jmp 0x428ee7
mov ecx, dword [ebp - 0x4c4]
add ecx, 1
mov dword [ebp - 0x4c4], ecx
mov edx, dword [ebp - 0x4c4]
cmp edx, dword [ebp - 0x4c8]
jge 0x428f4e
lea eax, [ebp - 0x524]
push eax
mov ecx, dword [ebp - 0x4c4]
push ecx
push 0x1305
mov edx, dword [ebp - 0x60]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x214
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x1c]
push eax
push 0
mov ecx, dword [ebp - 0x50c]
push ecx
call fcn.00420730
add esp, 4
mov edx, dword [eax*4 + 0x513fb0]
push edx
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x428ed8
mov eax, dword [ebp - 4]
mov dword [0x513fa0], eax
mov ecx, dword [ebp - 0x38]
sub ecx, 1
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x538], 0
jl 0x428f82
push 0
mov edx, dword [ebp - 0x538]
push edx
push 0x130c
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x428f95
push 0
push 0
push 0x130c
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x428877
lea edx, [ebp - 0x534]
push edx
mov eax, dword [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.00402610
add esp, 0xc
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x534]
mov dword [ebp - 0x38], edx
jmp case.default.0x428877
mov eax, dword [ebp - 0x38]
push eax
call fcn.00436520
add esp, 4
mov dword [ebp - 0x4bc], eax
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
je 0x428fea
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x428fd4
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
jne 0x429000
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x428fea
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.00436520
add esp, 4
mov dword [ebp - 0x4e8], eax
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
cmp eax, 0x20
je 0x429028
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
jmp 0x429012
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
cmp eax, 0x20
jne 0x42903e
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
jmp 0x429028
mov edx, dword [ebp - 0x38]
push edx
call fcn.00436520
add esp, 4
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
cmp ecx, 0x20
je 0x429063
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp 0x42904d
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
cmp ecx, 0x20
jne 0x429079
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp 0x429063
cmp dword [ebp - 0x4bc], 0x100
jne 0x429091
mov dword [ebp - 0x558], 0xffffffff
jmp 0x4290ae
mov eax, dword [ebp - 0x4e8]
shl eax, 8
or eax, dword [ebp - 0x4bc]
mov ecx, dword [ebp - 0x50]
shl ecx, 0x10
or eax, ecx
mov dword [ebp - 0x558], eax
mov edx, dword [ebp - 0x558]
mov dword [ebp - 0x84], edx
mov eax, dword [ebp - 0x38]
push eax
call fcn.00436520
add esp, 4
mov dword [ebp - 0x4bc], eax
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
je 0x4290e2
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x4290cc
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
jne 0x4290f8
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x4290e2
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.00436520
add esp, 4
mov dword [ebp - 0x4e8], eax
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
cmp eax, 0x20
je 0x429120
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
jmp 0x42910a
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
cmp eax, 0x20
jne 0x429136
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
jmp 0x429120
mov edx, dword [ebp - 0x38]
push edx
call fcn.00436520
add esp, 4
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x4bc], 0x100
jne 0x42915d
mov dword [ebp - 0x55c], 0xffffffff
jmp 0x42917a
mov eax, dword [ebp - 0x4e8]
shl eax, 8
or eax, dword [ebp - 0x4bc]
mov ecx, dword [ebp - 0x50]
shl ecx, 0x10
or eax, ecx
mov dword [ebp - 0x55c], eax
mov edx, dword [ebp - 0x55c]
mov dword [ebp - 0x530], edx
mov eax, dword [ebp - 0x530]
push eax
mov ecx, dword [ebp - 0x84]
push ecx
mov edx, dword [ebp - 0x60]
push edx
call fcn.0041fcb0
add esp, 0xc
jmp case.default.0x428877
mov eax, dword [ebp - 0x38]
push eax
call fcn.00436520
add esp, 4
mov dword [ebp - 0xa4], eax
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
je 0x4291cd
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x4291b7
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
jne 0x4291e3
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x4291cd
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.00436520
add esp, 4
mov dword [ebp - 0x4dc], eax
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
cmp eax, 0x20
je 0x42920b
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
jmp 0x4291f5
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
cmp eax, 0x20
jne 0x429221
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
jmp 0x42920b
mov edx, dword [ebp - 0x38]
push edx
call fcn.00436520
add esp, 4
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
cmp ecx, 0x20
je 0x429246
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp 0x429230
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
cmp ecx, 0x20
jne 0x42925c
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp 0x429246
mov eax, dword [ebp - 0x38]
push eax
call fcn.00436520
add esp, 4
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
je 0x429284
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x42926e
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
jne 0x42929a
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x429284
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.00436520
add esp, 4
mov dword [ebp - 0xb0], eax
movzx edx, word [ebp - 0x5c]
movzx eax, word [0x52203e]
cmp edx, eax
jne 0x429368
push 0
mov ecx, dword [ebp - 0xa4]
push ecx
push 0x414
mov edx, dword [ebp - 0x60]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebp - 0x4dc]
push eax
push 0
push 0x417
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [ebp - 0x4c]
push edx
push 0
push 0x415
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0xfffffffffffffff0
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.USER32.dll_GetWindowLongA]
and eax, 0x20
je 0x429368
mov edx, dword [ebp - 0x4e4]
cmp edx, dword [ebp - 0xb0]
jne 0x429338
push 0
push 1
push 0x413
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x429368
mov ecx, dword [ebp - 0x4e4]
push ecx
push 0
push 0x40b
mov edx, dword [ebp - 0x60]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebp - 0xb0]
push eax
push 0
push 0x40c
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x428877
mov edx, dword [ebp - 0x38]
push edx
call fcn.00436520
add esp, 4
mov dword [ebp - 0xb0], eax
movzx eax, word [ebp - 0x5c]
movzx ecx, word [0x52202a]
cmp eax, ecx
je 0x4293e8
movzx edx, word [ebp - 0x5c]
movzx eax, word [0x522934]
cmp edx, eax
je 0x4293e8
movzx ecx, word [ebp - 0x5c]
movzx edx, word [0x52208c]
cmp ecx, edx
je 0x4293e8
movzx eax, word [ebp - 0x5c]
movzx ecx, word [0x522198]
cmp eax, ecx
je 0x4293e8
movzx edx, word [ebp - 0x5c]
movzx eax, word [0x522180]
cmp edx, eax
je 0x4293e8
movzx ecx, word [ebp - 0x5c]
movzx edx, word [0x5222ba]
cmp ecx, edx
je 0x4293e8
movzx eax, word [ebp - 0x5c]
movzx ecx, word [0x522086]
cmp eax, ecx
jne 0x429402
push 0
mov edx, dword [ebp - 0xb0]
push edx
push 0xc5
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x429429
movzx ecx, word [ebp - 0x5c]
movzx edx, word [0x521534]
cmp ecx, edx
jne 0x429429
push 0
mov eax, dword [ebp - 0xb0]
push eax
push 0x141
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0xffffffffffffffeb
mov edx, dword [ebp - 0x60]
push edx
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0
je 0x429453
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [ebp - 0xb0]
mov dword [eax + 0x48], ecx
jmp case.default.0x428877
push 0xffffffffffffffeb
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x429a90
xor eax, eax
cmp dword [ebp - 0x34], 0
setne al
mov ecx, dword [ebp - 0x6c]
mov dword [ecx + 0x38], eax
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
cmp eax, 0xa
je 0x429a90
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
test edx, edx
je 0x429a90
mov eax, dword [ebp - 0x38]
push eax
call fcn.00436520
add esp, 4
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
je 0x4294c2
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x4294ac
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
jne 0x4294d8
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x4294c2
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.00436520
add esp, 4
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0x34], 0
je 0x429a64
mov edx, dword [ebp - 0x34]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [ebp - 0x6c]
mov dword [ecx + 0x44], eax
mov edx, dword [ebp - 0x6c]
cmp dword [edx + 0x44], 0
je 0x429a64
lea eax, [ebp - 0x4f8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
lea edx, [ebp - 0x548]
push edx
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax + 0x44]
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea edx, [ebp - 0x548]
push edx
mov eax, dword [ebp + 8]
push eax
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
push 0xffffffffffffffeb
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ecx + 0x44]
push edx
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0
je 0x4295b1
mov eax, dword [ebp - 0x4d0]
cmp dword [eax + 0x30], 0
je 0x4295b1
lea ecx, [ebp - 0x94]
push ecx
mov edx, dword [ebp - 0x4d0]
mov eax, dword [edx + 0x30]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea ecx, [ebp - 0x94]
push ecx
mov edx, dword [ebp + 8]
push edx
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x540], eax
push 5
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
je 0x429a58
push 0xffffffffffffffe0
mov edx, dword [ebp - 0x60]
push edx
call dword [sym.imp.USER32.dll_GetClassWord]
mov word [ebp - 0x5c], ax
movzx eax, word [ebp - 0x5c]
movzx ecx, word [0x52160c]
cmp eax, ecx
je 0x429a44
movzx edx, word [ebp - 0x5c]
movzx eax, word [0x5228b8]
cmp edx, eax
je 0x429a44
movzx ecx, word [ebp - 0x5c]
movzx edx, word [0x522936]
cmp ecx, edx
je 0x429a44
lea eax, [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea edx, [ebp - 0x2c]
push edx
mov eax, dword [ebp + 8]
push eax
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
push 0xffffffffffffffeb
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0
je 0x429a44
mov edx, dword [ebp - 0x4d0]
cmp dword [edx + 0x30], 0
je 0x429693
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [ebp - 0x4d0]
mov edx, dword [ecx + 0x30]
push edx
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [ebp + 8]
push ecx
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x4f0]
sub eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x4d0]
mov dword [ecx + 0x64], eax
mov edx, dword [ebp - 0x4ec]
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4d0]
mov dword [eax + 0x68], edx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x3c], ecx
push 5
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x4e0], eax
cmp dword [ebp - 0x4e0], 0
je 0x429867
mov eax, dword [ebp - 0x4e0]
cmp eax, dword [ebp - 0x60]
je 0x42984d
push 0xffffffffffffffe0
mov ecx, dword [ebp - 0x4e0]
push ecx
call dword [sym.imp.USER32.dll_GetClassWord]
mov word [ebp - 0xc], ax
movzx edx, word [ebp - 0xc]
movzx eax, word [0x52160c]
cmp edx, eax
je 0x42984d
movzx ecx, word [ebp - 0xc]
movzx edx, word [0x5228b8]
cmp ecx, edx
je 0x42984d
movzx eax, word [ebp - 0xc]
movzx ecx, word [0x522936]
cmp eax, ecx
je 0x42984d
lea edx, [ebp - 0xc0]
push edx
mov eax, dword [ebp - 0x4e0]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea ecx, [ebp - 0xc0]
push ecx
mov edx, dword [ebp + 8]
push edx
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [ebp - 0xc0]
cmp eax, dword [ebp - 0x2c]
jg 0x42984d
mov ecx, dword [ebp - 0xbc]
cmp ecx, dword [ebp - 0x28]
jg 0x42984d
mov edx, dword [ebp - 0xb8]
cmp edx, dword [ebp - 0x24]
jl 0x42984d
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x20]
jl 0x42984d
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x60]
cmp edx, dword [ecx + 0x44]
jne 0x4297f1
push 0xffffffffffffffeb
mov eax, dword [ebp - 0x4e0]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x4297ef
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx + 0x6c]
or edx, 2
mov eax, dword [ebp - 0x30]
mov dword [eax + 0x6c], edx
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx + 0x6c]
or edx, 8
mov eax, dword [ebp - 0x30]
mov dword [eax + 0x6c], edx
jmp 0x42984d
mov ecx, dword [ebp - 0xc0]
cmp ecx, dword [ebp - 0x548]
jg 0x429829
mov edx, dword [ebp - 0xbc]
cmp edx, dword [ebp - 0x544]
jg 0x429829
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x540]
jl 0x429829
mov ecx, dword [ebp - 0xb4]
cmp ecx, dword [ebp - 0x53c]
jge 0x42984d
mov edx, dword [ebp - 0xc0]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0xb4]
mov dword [ebp - 0x20], edx
push 2
mov eax, dword [ebp - 0x4e0]
push eax
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x4e0], eax
jmp 0x4296e1
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x60]
cmp edx, dword [ecx + 0x44]
jne 0x4298a1
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [eax + 0x6c]
or ecx, 2
mov edx, dword [ebp - 0x4d0]
mov dword [edx + 0x6c], ecx
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [eax + 0x6c]
or ecx, 8
mov edx, dword [ebp - 0x4d0]
mov dword [edx + 0x6c], ecx
jmp 0x4299cd
cmp dword [ebp - 0xac], 0
je 0x429902
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x540]
jne 0x429902
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [ebp - 0x548]
jne 0x4298cb
mov edx, dword [ebp - 0x48]
cmp edx, dword [ebp - 0x548]
jne 0x429900
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [eax + 0x6c]
or ecx, 2
mov edx, dword [ebp - 0x4d0]
mov dword [edx + 0x6c], ecx
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x548]
je 0x429900
mov ecx, dword [ebp - 0x4d0]
mov edx, dword [ecx + 0x6c]
or edx, 1
mov eax, dword [ebp - 0x4d0]
mov dword [eax + 0x6c], edx
jmp 0x429937
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [ebp - 0x540]
jl 0x429937
mov edx, dword [ebp - 0x4d0]
mov eax, dword [edx + 0x6c]
or eax, 2
mov ecx, dword [ebp - 0x4d0]
mov dword [ecx + 0x6c], eax
mov edx, dword [ebp - 0x4d0]
mov eax, dword [edx + 0x6c]
or eax, 1
mov ecx, dword [ebp - 0x4d0]
mov dword [ecx + 0x6c], eax
cmp dword [ebp - 0xac], 0
je 0x429998
mov edx, dword [ebp - 0x20]
cmp edx, dword [ebp - 0x53c]
jne 0x429998
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x544]
jne 0x429961
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [ebp - 0x544]
jne 0x429996
mov edx, dword [ebp - 0x4d0]
mov eax, dword [edx + 0x6c]
or eax, 8
mov ecx, dword [ebp - 0x4d0]
mov dword [ecx + 0x6c], eax
mov edx, dword [ebp - 0x44]
cmp edx, dword [ebp - 0x544]
je 0x429996
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [eax + 0x6c]
or ecx, 4
mov edx, dword [ebp - 0x4d0]
mov dword [edx + 0x6c], ecx
jmp 0x4299cd
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x53c]
jl 0x4299cd
mov ecx, dword [ebp - 0x4d0]
mov edx, dword [ecx + 0x6c]
or edx, 8
mov eax, dword [ebp - 0x4d0]
mov dword [eax + 0x6c], edx
mov ecx, dword [ebp - 0x4d0]
mov edx, dword [ecx + 0x6c]
or edx, 4
mov eax, dword [ebp - 0x4d0]
mov dword [eax + 0x6c], edx
movzx ecx, word [ebp - 0x5c]
movzx edx, word [0x522030]
cmp ecx, edx
jne 0x429a44
push 0xfffffffffffffff0
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
and eax, 0xff
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x10
jne 0x429a1b
mov ecx, dword [ebp - 0x4d0]
mov edx, dword [ecx + 0x6c]
and edx, 4
jne 0x429a19
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [eax + 0x6c]
and ecx, 0xfffffff7
mov edx, dword [ebp - 0x4d0]
mov dword [edx + 0x6c], ecx
jmp 0x429a44
cmp dword [ebp - 0x58], 0x11
jne 0x429a44
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [eax + 0x6c]
and ecx, 1
jne 0x429a44
mov edx, dword [ebp - 0x4d0]
mov eax, dword [edx + 0x6c]
and eax, 0xfffffffd
mov ecx, dword [ebp - 0x4d0]
mov dword [ecx + 0x6c], eax
push 2
mov edx, dword [ebp - 0x60]
push edx
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x60], eax
jmp 0x4295c0
mov eax, dword [ebp + 8]
push eax
call fcn.0041fcf0
add esp, 4
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
je 0x429a7a
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x429a64
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
jne 0x429a90
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x429a7a
jmp case.default.0x428877
mov dword [ebp - 0xa0], 0
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0xa0]
movsx edx, byte [ecx]
cmp edx, 0xa
je 0x429ad1
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0xa0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x429ad1
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
jmp 0x429a9f
cmp dword [ebp - 0xa0], 0
je 0x429b67
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0xa0]
movsx ecx, byte [eax - 1]
cmp ecx, 0x20
jne 0x429b01
mov edx, dword [ebp - 0xa0]
sub edx, 1
mov dword [ebp - 0xa0], edx
jmp 0x429ade
cmp dword [ebp - 0xa0], 0
jle 0x429b67
mov eax, dword [ebp - 0xa0]
add eax, 1
mov dword [ebp - 0xa0], eax
push 0xffffffffffffffeb
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0
je 0x429b67
mov edx, dword [ebp - 0xa0]
push edx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ecx, dword [ebp - 0x4d0]
mov dword [ecx + 0x58], eax
mov edx, dword [ebp - 0xa0]
push edx
mov eax, dword [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0x4d0]
mov edx, dword [ecx + 0x58]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
jmp case.default.0x428877
mov eax, dword [ebp - 0x38]
push eax
call fcn.00436520
add esp, 4
mov dword [ebp - 0x52c], eax
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
je 0x429b94
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x429b7e
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0x20
jne 0x429baa
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x429b94
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.00436520
add esp, 4
mov dword [ebp - 0x538], eax
mov edx, dword [ebp - 0x538]
push edx
mov eax, dword [ebp - 0x52c]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.00427dc0
add esp, 0xc
jmp case.default.0x428877
mov edx, dword [ebp - 0x38]
push edx
call fcn.00436520
add esp, 4
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
cmp ecx, 0x20
je 0x429c03
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp 0x429bed
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
cmp ecx, 0x20
jne 0x429c19
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp 0x429c03
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebp - 0x98], eax
push 0x48
push 0x5a
mov eax, dword [ebp - 0x98]
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push eax
mov ecx, dword [ebp - 0x528]
push ecx
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [ebp - 0x78], eax
mov edx, dword [ebp - 0x98]
push edx
call dword [sym.imp.GDI32.dll_DeleteDC]
lea eax, [ebp - 0x4b0]
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x70], ecx
mov edx, dword [ebp - 0x70]
movsx eax, byte [edx]
cmp eax, 0x2c
je 0x429c9c
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ebp - 0x70]
mov al, byte [edx]
mov byte [ecx], al
mov ecx, dword [ebp - 0xa8]
add ecx, 1
mov dword [ebp - 0xa8], ecx
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
jmp 0x429c6a
mov eax, dword [ebp - 0xa8]
mov byte [eax], 0
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x38]
movsx eax, byte [edx]
cmp eax, 0x20
jne 0x429cc4
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
jmp 0x429cae
mov edx, dword [ebp - 0x38]
push edx
call fcn.00436520
add esp, 4
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
cmp ecx, 0x20
je 0x429cec
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp 0x429cd6
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
cmp ecx, 0x20
jne 0x429d02
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp 0x429cec
mov eax, dword [ebp - 0x38]
push eax
call fcn.00436520
add esp, 4
mov dword [ebp - 0x64], eax
lea ecx, [ebp - 0x4b0]
push ecx
push 0x32
push 0
push 0
push 4
push 1
push 0
push 0
xor edx, edx
cmp dword [ebp - 0x64], 1
sete dl
push edx
mov eax, dword [ebp - 0x9c]
push eax
push 0
push 0
push 0
mov ecx, dword [ebp - 0x78]
push ecx
call dword [sym.imp.GDI32.dll_CreateFontA]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je 0x429d62
push 0
mov edx, dword [ebp - 0x80]
push edx
push 0x30
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.default.0x428877
push 0xffffffffffffffeb
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0
je case.default.0x428877
mov edx, dword [ebp - 0x38]
push edx
call fcn.00436520
add esp, 4
mov ecx, dword [ebp - 0x4d0]
mov dword [ecx + 0x70], eax
mov edx, dword [ebp - 0x4d0]
mov eax, dword [edx + 0x70]
and eax, 2
je case.default.0x428877
push 0xffffffffffffffe0
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.USER32.dll_GetClassWord]
mov word [ebp - 0x5c], ax
movzx edx, word [ebp - 0x5c]
movzx eax, word [0x522084]
cmp edx, eax
jne case.default.0x428877
push 0xfffffffffffffff0
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.USER32.dll_GetWindowLongA]
or eax, 0x400
mov dword [ebp - 8], eax
mov edx, dword [ebp - 8]
push edx
push 0xfffffffffffffff0
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
cmp edx, 0xa
je 0x429e08
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
test ecx, ecx
je 0x429e08
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp case.default.0x428877
mov eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
test ecx, ecx
je 0x429e1b
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp 0x4285d1
mov eax, dword [ebp - 0x54c]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
pop esi
mov esp, ebp
pop ebp
ret