Function at 0x1ffc29e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x4cc
xor eax, eax
mov ax, word [0x1ffe7a88]
push ebx
push esi
push edi
push ebp
mov esi, dword [sym.imp.USER32.dll_GetPropA]
mov ebp, dword [esp + 0x4e0]
push eax
push ebp
call esi
test eax, eax
je 0x1ffc2a4b
xor eax, eax
mov ax, word [0x1ffe7a88]
push eax
push ebp
call esi
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc2a4b
xor eax, eax
mov ax, word [0x1ffe7a88]
push eax
push ebp
call esi
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov ebx, eax
xor eax, eax
mov ax, word [0x1ffe7a88]
push eax
push ebp
call esi
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc2a4d
xor ebx, ebx
cmp dword [ebx + 0x2f4], 0
je 0x1ffc483c
test ebx, ebx
je 0x1ffc2a6d
push ebx
mov edi, dword [sym.imp.KERNEL32.dll_GlobalHandle]
call edi
mov dword [esp + 0x10], eax
jmp 0x1ffc2a7b
mov dword [esp + 0x10], 0
mov edi, dword [sym.imp.KERNEL32.dll_GlobalHandle]
mov esi, dword [esp + 0x4e4]
lea eax, [esi - 0x64]
cmp eax, 0x24
ja case.default.0x1ffc2a8a
jmp dword [eax*4 + 0x1ffc4884]
cmp esi, 0x100
jl 0x1ffc4876
cmp esi, 0x1ff
jg 0x1ffc4876
cmp dword [ebx + 0x348], 0
je 0x1ffc2b77
test byte [ebx + 0x2e4], 0x20
je 0x1ffc2b77
lea eax, [esp + 0xa0]
mov ecx, dword [ebx + 0x2e0]
push eax
push ecx
call sym.LTANN13N.dll_L_AnnCopy
cmp eax, 1
jne 0x1ffc2b77
mov eax, dword [ebx + 0x34c]
mov ecx, dword [ebx + 0x348]
mov edi, dword [ecx + eax*4 - 4]
test edi, edi
je 0x1ffc2b47
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
jne 0x1ffc2b47
test edi, edi
je 0x1ffc2b25
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc2b25
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [esp + 0x2c], eax
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc2b2d
mov dword [esp + 0x2c], 0
cmp dword [esp + 0x2c], 0
je 0x1ffc2b47
mov eax, dword [esp + 0x2c]
push 4
push 0
push 0x8010
push eax
call fcn.1ff9adb0
mov eax, dword [ebx + 0x348]
mov ecx, dword [ebx + 0x34c]
lea edx, [ecx*4 - 4]
push edx
push eax
add eax, 4
push eax
call fcn.1ffd7ea0
mov ecx, dword [ebx + 0x348]
mov edx, dword [esp + 0xac]
add esp, 0xc
mov dword [ecx], edx
mov eax, dword [ebx + 0x2e8]
push eax
push esi
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push 0
push ebx
push ebp
call fcn.1ffc6920
add esp, 0xc
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
mov esi, 0
test ebx, ebx
je 0x1ffc2bbb
push ebx
call edi
mov esi, eax
mov edi, dword [ebx + 0x2e8]
mov eax, esi
sub eax, edi
cmp eax, 1
sbb ebp, ebp
neg ebp
cmp esi, edi
jne 0x1ffc2bd6
mov edi, dword [ebx + 0x2e0]
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
jne 0x1ffc2bf0
push 2
push 1
push 1
push ebp
push 4
push edi
call fcn.1ffba950
mov edi, dword [ebx + 0x2e8]
mov eax, esi
sub eax, edi
cmp eax, 1
sbb ebp, ebp
neg ebp
cmp esi, edi
jne 0x1ffc2c0b
mov edi, dword [ebx + 0x2e0]
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
jne 0x1ffc4876
push 2
push 1
push 0
push ebp
push 1
push edi
call fcn.1ffba950
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push ebx
push ebp
call fcn.1ffc6c70
add esp, 8
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push 0
push ebx
push ebp
call fcn.1ffc7200
add esp, 0xc
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
cmp dword [ebx + 0x348], 0
je 0x1ffc2dac
test byte [ebx + 0x2e4], 0x20
je 0x1ffc2dac
mov esi, dword [ebx + 0x2e0]
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
je 0x1ffc2c95
mov eax, 0xffffff71
jmp 0x1ffc2d1b
test esi, esi
je 0x1ffc2cbb
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc2cbb
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [esp + 0x2c], eax
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc2cc3
mov dword [esp + 0x2c], 0
cmp dword [esp + 0x2c], 0
jne 0x1ffc2cd1
mov eax, 0xfffffff3
jmp 0x1ffc2d1b
lea eax, [esp + 0xa0]
push 0
mov ecx, dword [esp + 0x30]
push eax
push ecx
call fcn.1ffcd4c0
cmp eax, 1
jne 0x1ffc2dac
cmp dword [esp + 0xa0], 0
je 0x1ffc2d0b
mov eax, dword [esp + 0xa0]
push eax
call edi
mov dword [esp + 0xa0], eax
jmp 0x1ffc2d16
mov dword [esp + 0xa0], 0
mov eax, 1
cmp eax, 1
jne 0x1ffc2dac
mov eax, dword [ebx + 0x34c]
mov ecx, dword [ebx + 0x348]
mov esi, dword [ecx + eax*4 - 4]
test esi, esi
je 0x1ffc2d7c
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
jne 0x1ffc2d7c
test esi, esi
je 0x1ffc2d67
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc2d67
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov edi, eax
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc2d69
xor edi, edi
test edi, edi
je 0x1ffc2d7c
push 4
push 0
push 0x8010
push edi
call fcn.1ff9adb0
mov eax, dword [ebx + 0x348]
mov ecx, dword [ebx + 0x34c]
lea edx, [ecx*4 - 4]
push edx
push eax
add eax, 4
push eax
call fcn.1ffd7ea0
mov ecx, dword [ebx + 0x348]
mov edx, dword [esp + 0xac]
add esp, 0xc
mov dword [ecx], edx
mov edi, dword [ebx + 0x2e8]
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
jne 0x1ffc2e5e
test edi, edi
je 0x1ffc2de5
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc2de5
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, eax
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc2de7
xor esi, esi
test esi, esi
je 0x1ffc2e5e
cmp dword [esi + 4], 0
je 0x1ffc2e5e
test esi, esi
je 0x1ffc2e5e
mov ecx, esi
test esi, esi
je 0x1ffc2e0b
cmp dword [esi + 0x10], 0
je 0x1ffc2e0b
xor eax, eax
mov ecx, dword [ecx + 0x10]
cmp dword [ecx + 0x10], eax
jne 0x1ffc2e03
cmp ecx, esi
je 0x1ffc2e57
mov eax, dword [esi + 0xc]
test eax, eax
je 0x1ffc2e1c
mov edx, dword [esi + 0x10]
mov dword [eax + 0x10], edx
mov eax, dword [esi + 0x10]
test eax, eax
je 0x1ffc2e29
mov edx, dword [esi + 0xc]
mov dword [eax + 0xc], edx
mov eax, dword [esi + 4]
test eax, eax
je 0x1ffc2e3b
cmp dword [eax + 8], esi
jne 0x1ffc2e3b
mov edx, dword [esi + 0x10]
mov dword [eax + 8], edx
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
push 1
mov dword [ecx + 0x10], esi
push esi
mov dword [esi + 0xc], ecx
call fcn.1ff9b150
mov esi, dword [esi + 4]
test esi, esi
jne 0x1ffc2df5
push 0
mov eax, dword [ebx + 0x2e0]
push 8
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
cmp dword [ebx + 0x348], 0
je 0x1ffc2f4d
test byte [ebx + 0x2e4], 0x20
je 0x1ffc2f4d
lea eax, [esp + 0xa0]
mov ecx, dword [ebx + 0x2e0]
push eax
push ecx
call sym.LTANN13N.dll_L_AnnCopy
cmp eax, 1
jne 0x1ffc2f4d
mov eax, dword [ebx + 0x34c]
mov ecx, dword [ebx + 0x348]
mov esi, dword [ecx + eax*4 - 4]
test esi, esi
je 0x1ffc2f1d
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
jne 0x1ffc2f1d
test esi, esi
je 0x1ffc2f08
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc2f08
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov edi, eax
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc2f0a
xor edi, edi
test edi, edi
je 0x1ffc2f1d
push 4
push 0
push 0x8010
push edi
call fcn.1ff9adb0
mov eax, dword [ebx + 0x348]
mov ecx, dword [ebx + 0x34c]
lea edx, [ecx*4 - 4]
push edx
push eax
add eax, 4
push eax
call fcn.1ffd7ea0
mov ecx, dword [ebx + 0x348]
mov edx, dword [esp + 0xac]
add esp, 0xc
mov dword [ecx], edx
mov edi, dword [ebx + 0x2e8]
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
jne 0x1ffc3009
test edi, edi
je 0x1ffc2f86
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc2f86
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, eax
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc2f88
xor esi, esi
test esi, esi
je 0x1ffc3009
cmp dword [esi + 4], 0
je 0x1ffc3009
test esi, esi
je 0x1ffc3009
mov ecx, esi
test esi, esi
je 0x1ffc2fac
cmp dword [esi + 0xc], 0
je 0x1ffc2fac
xor eax, eax
mov ecx, dword [ecx + 0xc]
cmp dword [ecx + 0xc], eax
jne 0x1ffc2fa4
cmp ecx, esi
je 0x1ffc3002
mov eax, dword [esi + 0xc]
test eax, eax
je 0x1ffc2fbd
mov edx, dword [esi + 0x10]
mov dword [eax + 0x10], edx
mov eax, dword [esi + 0x10]
test eax, eax
je 0x1ffc2fca
mov edx, dword [esi + 0xc]
mov dword [eax + 0xc], edx
mov eax, dword [esi + 4]
test eax, eax
je 0x1ffc2fdc
cmp dword [eax + 8], esi
jne 0x1ffc2fdc
mov edx, dword [esi + 0x10]
mov dword [eax + 8], edx
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [ecx + 0xc], esi
mov dword [esi + 0x10], ecx
mov eax, dword [esi + 4]
test eax, eax
je 0x1ffc2ffa
mov dword [eax + 8], esi
push 1
push esi
call fcn.1ff9b150
mov esi, dword [esi + 4]
test esi, esi
jne 0x1ffc2f96
push 0
mov eax, dword [ebx + 0x2e0]
push 8
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
test byte [ebx + 0x2e4], 2
je 0x1ffc30e8
cmp dword [ebx + 0xf38], 0
je 0x1ffc4876
cmp dword [ebx + 0xf3c], 0
je 0x1ffc4876
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
lea eax, [esp + 0xa0]
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], esi
push eax
push 0x1ffc12c0
mov ecx, dword [0x1ffe8564]
push ebp
push 0x661d
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, 0
test ebx, ebx
je 0x1ffc30a9
push ebx
call edi
mov ecx, dword [ebx + 0x2e8]
push 0
cmp ecx, eax
jne 0x1ffc30c0
push 9
mov eax, dword [ebx + 0x2e0]
push eax
jmp 0x1ffc30c3
push 0
push ecx
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push ebx
mov eax, dword [0x1ffe8564]
push sym.LTANN13N.dll_L_AnnLineDlgProc
push ebp
push 0x6612
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, dword [ebx + 0x2e8]
push 0
cmp dword [esp + 0x14], eax
jne 0x1ffc3121
push 9
mov eax, dword [ebx + 0x2e0]
jmp 0x1ffc3123
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
test byte [ebx + 0x2e4], 2
je 0x1ffc31f8
cmp dword [ebx + 0xf38], 0
je 0x1ffc4876
cmp dword [ebx + 0xf3c], 0
je 0x1ffc4876
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
lea eax, [esp + 0xa0]
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], esi
push eax
push 0x1ffc12c0
mov ecx, dword [0x1ffe8564]
push ebp
push 0x661d
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, 0
test ebx, ebx
je 0x1ffc31b9
push ebx
call edi
mov ecx, dword [ebx + 0x2e8]
push 0
cmp ecx, eax
jne 0x1ffc31d0
push 9
mov eax, dword [ebx + 0x2e0]
push eax
jmp 0x1ffc31d3
push 0
push ecx
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push ebx
mov eax, dword [0x1ffe8564]
push sym.LTANN13N.dll_L_AnnFillDlgProc
push ebp
push 0x6613
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, dword [ebx + 0x2e8]
push 0
cmp dword [esp + 0x14], eax
jne 0x1ffc3231
push 9
mov eax, dword [ebx + 0x2e0]
jmp 0x1ffc3233
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push 1
push ebx
push ebp
call fcn.1ffc5c70
add esp, 0xc
test eax, eax
je 0x1ffc4876
mov eax, dword [ebx + 0x2e8]
push 0
cmp dword [esp + 0x14], eax
jne 0x1ffc3285
push 9
mov eax, dword [ebx + 0x2e0]
jmp 0x1ffc3287
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push 0
push ebx
push ebp
call fcn.1ffc5c70
add esp, 0xc
test eax, eax
je 0x1ffc4876
mov eax, dword [ebx + 0x2e8]
push 0
cmp dword [esp + 0x14], eax
jne 0x1ffc32d9
push 9
mov eax, dword [ebx + 0x2e0]
jmp 0x1ffc32db
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push 0
push ebx
push ebp
call fcn.1ffc60d0
add esp, 0xc
test eax, eax
je 0x1ffc4876
mov eax, dword [ebx + 0x2e8]
push 0
cmp dword [esp + 0x14], eax
jne 0x1ffc332d
push 9
mov eax, dword [ebx + 0x2e0]
jmp 0x1ffc332f
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
mov eax, dword [ebx + 0x2f4]
mov ebp, dword [sym.imp.USER32.dll_DestroyMenu]
push eax
call ebp
mov dword [ebx + 0x2f4], 0
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push esi
push ebx
push ebp
call fcn.1ffc4ef0
add esp, 0xc
test eax, eax
je 0x1ffc4876
mov eax, dword [ebx + 0x2e8]
push 0
cmp dword [esp + 0x14], eax
jne 0x1ffc33a4
push 9
mov eax, dword [ebx + 0x2e0]
jmp 0x1ffc33a6
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
test byte [ebx + 0x2e4], 2
je 0x1ffc347b
cmp dword [ebx + 0xf38], 0
je 0x1ffc4876
cmp dword [ebx + 0xf3c], 0
je 0x1ffc4876
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
lea eax, [esp + 0xa0]
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], esi
push eax
push 0x1ffc12c0
mov ecx, dword [0x1ffe8564]
push ebp
push 0x661d
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, 0
test ebx, ebx
je 0x1ffc343c
push ebx
call edi
mov ecx, dword [ebx + 0x2e8]
push 0
cmp ecx, eax
jne 0x1ffc3453
push 9
mov eax, dword [ebx + 0x2e0]
push eax
jmp 0x1ffc3456
push 0
push ecx
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push ebx
mov eax, dword [0x1ffe8564]
push sym.LTANN13N.dll_L_AnnTextDlgProc
push ebp
push 0x6614
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, dword [ebx + 0x2e8]
push 0
cmp dword [esp + 0x14], eax
jne 0x1ffc34b4
push 9
mov eax, dword [ebx + 0x2e0]
jmp 0x1ffc34b6
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
cmp dword [ebx + 0x348], 0
je 0x1ffc3628
test byte [ebx + 0x2e4], 0x20
je 0x1ffc3628
mov esi, dword [ebx + 0x2e0]
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
je 0x1ffc3511
mov eax, 0xffffff71
jmp 0x1ffc3597
test esi, esi
je 0x1ffc3537
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc3537
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [esp + 0x2c], eax
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc353f
mov dword [esp + 0x2c], 0
cmp dword [esp + 0x2c], 0
jne 0x1ffc354d
mov eax, 0xfffffff3
jmp 0x1ffc3597
lea eax, [esp + 0xa0]
push 0
mov ecx, dword [esp + 0x30]
push eax
push ecx
call fcn.1ffcd4c0
cmp eax, 1
jne 0x1ffc3628
cmp dword [esp + 0xa0], 0
je 0x1ffc3587
mov eax, dword [esp + 0xa0]
push eax
call edi
mov dword [esp + 0xa0], eax
jmp 0x1ffc3592
mov dword [esp + 0xa0], 0
mov eax, 1
cmp eax, 1
jne 0x1ffc3628
mov ecx, dword [ebx + 0x34c]
mov eax, dword [ebx + 0x348]
mov esi, dword [eax + ecx*4 - 4]
test esi, esi
je 0x1ffc35f8
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
jne 0x1ffc35f8
test esi, esi
je 0x1ffc35e3
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc35e3
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov edi, eax
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc35e5
xor edi, edi
test edi, edi
je 0x1ffc35f8
push 4
push 0
push 0x8010
push edi
call fcn.1ff9adb0
mov eax, dword [ebx + 0x348]
mov ecx, dword [ebx + 0x34c]
lea edx, [ecx*4 - 4]
push edx
push eax
add eax, 4
push eax
call fcn.1ffd7ea0
mov ecx, dword [ebx + 0x348]
mov edx, dword [esp + 0xac]
add esp, 0xc
mov dword [ecx], edx
mov edi, dword [ebx + 0x2e0]
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
jne 0x1ffc3678
test edi, edi
je 0x1ffc365d
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc365d
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, eax
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc365f
xor esi, esi
push 0
push 0xffffffffffffffff
push 0
push 0x2a
push 0
push 1
push 0x28
push 0x1ffe4978
push esi
call fcn.1ff9d380
mov eax, dword [ebx + 0x2e0]
push eax
push 0xc
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push ebx
call fcn.1ffc4a80
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
test byte [ebx + 0x2e4], 2
je 0x1ffc3758
cmp dword [ebx + 0xf38], 0
je 0x1ffc4876
cmp dword [ebx + 0xf3c], 0
je 0x1ffc4876
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
lea eax, [esp + 0xa0]
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], esi
push eax
push 0x1ffc12c0
mov ecx, dword [0x1ffe8564]
push ebp
push 0x661d
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, 0
test ebx, ebx
je 0x1ffc3719
push ebx
call edi
mov ecx, dword [ebx + 0x2e8]
push 0
cmp ecx, eax
jne 0x1ffc3730
push 9
mov eax, dword [ebx + 0x2e0]
push eax
jmp 0x1ffc3733
push 0
push ecx
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push ebx
mov eax, dword [0x1ffe8564]
push sym.LTANN13N.dll_L_AnnROP2DlgProc
push ebp
push 0x6615
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, dword [ebx + 0x2e8]
push 0
cmp dword [esp + 0x14], eax
jne 0x1ffc3791
push 9
mov eax, dword [ebx + 0x2e0]
jmp 0x1ffc3793
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push 0
mov eax, dword [ebx + 0x2f4]
push 0x75
push eax
call dword [sym.imp.USER32.dll_GetMenuState]
and eax, 8
mov edi, dword [ebx + 0x2e8]
push 0
cmp eax, 1
sbb esi, esi
call sub.LTKRN13N.dll_Ordinal_196
neg esi
test eax, eax
jne 0x1ffc383b
test edi, edi
je 0x1ffc380e
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc380e
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [esp + 0xa0], eax
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc3819
mov dword [esp + 0xa0], 0
push 0
push 0x2b
mov eax, dword [esp + 0xa8]
push 0
push 0x20
push 0
push esi
push 0xf84
push 0x1ffe4c88
push eax
call fcn.1ff9d380
mov eax, dword [esp + 0x10]
cmp dword [ebx + 0x2e8], eax
jne 0x1ffc38ba
mov edi, dword [ebx + 0x2e0]
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
jne 0x1ffc38ae
test edi, edi
je 0x1ffc3881
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc3881
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [esp + 0xa0], eax
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc388c
mov dword [esp + 0xa0], 0
push 0
push 0x2b
mov eax, dword [esp + 0xa8]
push 0
push 0x29
push 0
push esi
push 0xf84
push 0x1ffe4c88
push eax
call fcn.1ff9d380
push 0
mov eax, dword [ebx + 0x2e0]
push 9
jmp 0x1ffc391d
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
jne 0x1ffc3915
cmp dword [esp + 0x10], 0
je 0x1ffc38f8
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc38f8
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov edi, eax
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc38fa
xor edi, edi
push 0
push 0x2b
push 0
push 0
push 0
push esi
push 0xf84
push 0x1ffe4c88
push edi
call fcn.1ff9d380
mov eax, dword [esp + 0x10]
push 0
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
mov dword [esp + 0x20], 1
lea eax, [esp + 0x20]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebp
push eax
push sym.LTANN13N.dll_L_AnnPasswordDlgProc
mov ecx, dword [0x1ffe8564]
push ebp
push 0x6616
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
mov dword [esp + 0x20], 0
lea eax, [esp + 0x20]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebp
push eax
push sym.LTANN13N.dll_L_AnnPasswordDlgProc
mov ecx, dword [0x1ffe8564]
push ebp
push 0x6616
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
mov eax, dword [ebx + 0x2e8]
push eax
push 0x10
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
lea edi, [esp + 0xa0]
xor eax, eax
mov ecx, 9
rep stosd dword es:[edi], eax
mov dword [esp + 0xa0], 0x24
lea ecx, [ebx + 0x308]
mov dword [esp + 0xa4], ebp
mov eax, dword [0x1ffe8564]
mov dword [esp + 0xa8], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0xb0], ecx
push eax
mov dword [esp + 0xb8], 1
mov edx, dword [ebx + 0x7fc]
mov dword [esp + 0xb0], edx
call sub.comdlg32.dll_ChooseColorA
test eax, eax
je 0x1ffc4876
mov eax, dword [esp + 0xac]
push 0
mov dword [ebx + 0x7fc], eax
mov eax, dword [ebx + 0x2e8]
cmp dword [esp + 0x14], eax
jne 0x1ffc3a9c
push 9
mov eax, dword [ebx + 0x2e0]
jmp 0x1ffc3a9e
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
lea edi, [esp + 0xa0]
xor eax, eax
mov ecx, 9
rep stosd dword es:[edi], eax
mov dword [esp + 0xa0], 0x24
lea ecx, [ebx + 0x308]
mov dword [esp + 0xa4], ebp
mov eax, dword [0x1ffe8564]
mov dword [esp + 0xa8], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0xb0], ecx
push eax
mov dword [esp + 0xb8], 1
mov edx, dword [ebx + 0x800]
mov dword [esp + 0xb0], edx
call sub.comdlg32.dll_ChooseColorA
test eax, eax
je 0x1ffc4876
mov eax, dword [esp + 0xac]
push 0
mov dword [ebx + 0x800], eax
mov eax, dword [ebx + 0x2e8]
cmp dword [esp + 0x14], eax
jne 0x1ffc3b51
push 9
mov eax, dword [ebx + 0x2e0]
jmp 0x1ffc3b53
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
lea edi, [esp + 0xa0]
xor eax, eax
mov ecx, 9
rep stosd dword es:[edi], eax
mov dword [esp + 0xa0], 0x24
lea ecx, [ebx + 0x308]
mov dword [esp + 0xa4], ebp
mov eax, dword [0x1ffe8564]
mov dword [esp + 0xa8], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0xb0], ecx
push eax
mov dword [esp + 0xb8], 1
mov edx, dword [ebx + 0x804]
mov dword [esp + 0xb0], edx
call sub.comdlg32.dll_ChooseColorA
test eax, eax
je 0x1ffc4876
mov eax, dword [esp + 0xac]
push 0
mov dword [ebx + 0x804], eax
mov eax, dword [ebx + 0x2e8]
cmp dword [esp + 0x14], eax
jne 0x1ffc3c06
push 9
mov eax, dword [ebx + 0x2e0]
jmp 0x1ffc3c08
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
test byte [ebx + 0x2e4], 2
je 0x1ffc3cdd
cmp dword [ebx + 0xf38], 0
je 0x1ffc4876
cmp dword [ebx + 0xf3c], 0
je 0x1ffc4876
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
lea eax, [esp + 0xa0]
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], esi
push eax
push 0x1ffc12c0
mov ecx, dword [0x1ffe8564]
push ebp
push 0x661d
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, 0
test ebx, ebx
je 0x1ffc3c9e
push ebx
call edi
mov ecx, dword [ebx + 0x2e8]
push 0
cmp ecx, eax
jne 0x1ffc3cb5
push 9
mov eax, dword [ebx + 0x2e0]
push eax
jmp 0x1ffc3cb8
push 0
push ecx
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push ebx
mov eax, dword [0x1ffe8564]
push 0x1ffbc530
push ebp
push 0x6617
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, dword [ebx + 0x2e8]
push 0
cmp dword [esp + 0x14], eax
jne 0x1ffc3d16
push 9
mov eax, dword [ebx + 0x2e0]
jmp 0x1ffc3d18
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
lea eax, [ebx + 0x808]
push eax
push ebx
push ebp
call fcn.1ffc60d0
add esp, 0xc
test eax, eax
je 0x1ffc4876
mov eax, dword [ebx + 0x2e8]
push 0
cmp dword [esp + 0x14], eax
jne 0x1ffc3d6f
push 9
mov eax, dword [ebx + 0x2e0]
jmp 0x1ffc3d71
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
mov edi, dword [ebx + 0x2e8]
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
jne 0x1ffc3dee
test edi, edi
je 0x1ffc3dce
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc3dce
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [esp + 0x1c], eax
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc3dd6
mov dword [esp + 0x1c], 0
lea eax, [esp + 0x14]
push 1
mov ecx, dword [esp + 0x20]
push eax
push 0
push 0x1ffe4978
push ecx
call fcn.1ff9de90
lea edi, [esp + 0x2c]
xor eax, eax
mov ecx, 0x13
rep stosd dword es:[edi], eax
mov dword [esp + 0x2c], 0x4c
mov dword [esp + 0x30], ebp
cmp esi, 0x7e
mov eax, dword [0x1ffe8564]
mov dword [esp + 0x34], eax
je 0x1ffc3e1d
cmp esi, 0x84
jne 0x1ffc3e7b
test ebx, ebx
je 0x1ffc3e2b
mov eax, dword [ebx + 0x6c4]
test eax, eax
jne 0x1ffc3e3e
cmp dword [str.All_metafiles__.wmf_.emf_.wmf_.emfWMF_files__.wmf_.wmfEMF_files__.emf_.emfAll_Files__._.], 0
mov eax, 0x1ffe3624
je 0x1ffc3e3e
mov eax, dword [str.All_metafiles__.wmf_.emf_.wmf_.emfWMF_files__.wmf_.wmfEMF_files__.emf_.emfAll_Files__._.]
push eax
call fcn.1ffc4e60
mov dword [esp + 0x3c], eax
add esp, 4
test ebx, ebx
je 0x1ffc3e5f
mov eax, dword [ebx + 0x6c0]
test eax, eax
je 0x1ffc3e5f
mov dword [esp + 0x5c], eax
jmp 0x1ffc3e7b
cmp dword [str.Hotspot_Metafile], 0
je 0x1ffc3e73
mov eax, dword [str.Hotspot_Metafile]
mov dword [esp + 0x5c], eax
jmp 0x1ffc3e7b
mov dword [esp + 0x5c], 0x1ffe3624
lea eax, [esp + 0xa0]
lea ecx, [esp + 0x2c]
mov dword [esp + 0x4c], 0x104
mov dword [esp + 0x48], eax
push ecx
mov byte [esp + 0xa4], 0
mov dword [esp + 0x64], 0x1804
call sub.comdlg32.dll_GetOpenFileNameA
test eax, eax
jne 0x1ffc3ec4
cmp dword [esp + 0x38], 0
je 0x1ffc3ebd
mov eax, dword [esp + 0x38]
push eax
call sub.LTKRN13N.dll_Ordinal_283
xor eax, eax
jmp 0x1ffc3f51
cmp dword [esp + 0x38], 0
je 0x1ffc3ed5
mov eax, dword [esp + 0x38]
push eax
call sub.LTKRN13N.dll_Ordinal_283
cmp esi, 0x7e
je 0x1ffc3ee9
cmp esi, 0x84
je 0x1ffc3ee9
mov eax, 1
jmp 0x1ffc3f51
lea eax, [esp + 0x78]
lea ecx, [esp + 0xa0]
push eax
push ecx
call sub.LTDIS13N.dll_Ordinal_170
mov dword [esp + 0x1c], eax
cmp eax, 1
jne 0x1ffc3f4d
mov eax, dword [ebx + 0x2e8]
test eax, eax
je 0x1ffc3f3a
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc3f3a
mov eax, dword [ebx + 0x2e8]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov edi, eax
mov eax, dword [ebx + 0x2e8]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc3f3c
xor edi, edi
lea esi, [esp + 0x78]
add edi, 0xf58
mov ecx, 0xa
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x1ffc4876
mov eax, dword [ebx + 0x2e8]
push 0
cmp dword [esp + 0x14], eax
jne 0x1ffc3f71
push 9
mov eax, dword [ebx + 0x2e0]
jmp 0x1ffc3f73
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push 0
mov eax, dword [ebx + 0x2e0]
push 0x29
push eax
call sym.LTANN13N.dll_L_AnnGroup
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push 0
mov eax, dword [ebx + 0x2e0]
push 0x29
push eax
call sym.LTANN13N.dll_L_AnnUngroup
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
test byte [ebx + 0x2e4], 2
je 0x1ffc40a8
cmp dword [ebx + 0xf38], 0
je 0x1ffc4876
cmp dword [ebx + 0xf3c], 0
je 0x1ffc4876
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
lea eax, [esp + 0xa0]
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], esi
push eax
push 0x1ffc12c0
mov ecx, dword [0x1ffe8564]
push ebp
push 0x661d
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, 0
test ebx, ebx
je 0x1ffc4069
push ebx
call edi
mov ecx, dword [ebx + 0x2e8]
push 0
cmp ecx, eax
jne 0x1ffc4080
push 9
mov eax, dword [ebx + 0x2e0]
push eax
jmp 0x1ffc4083
push 0
push ecx
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push ebx
mov eax, dword [0x1ffe8564]
push 0x1ffc0a80
push ebp
push 0x6618
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, dword [ebx + 0x2e8]
push 0
cmp dword [esp + 0x14], eax
jne 0x1ffc40e1
push 9
mov eax, dword [ebx + 0x2e0]
jmp 0x1ffc40e3
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
test byte [ebx + 0x2e4], 2
je 0x1ffc41b8
cmp dword [ebx + 0xf38], 0
je 0x1ffc4876
cmp dword [ebx + 0xf3c], 0
je 0x1ffc4876
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
lea eax, [esp + 0xa0]
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], esi
push eax
push 0x1ffc12c0
mov ecx, dword [0x1ffe8564]
push ebp
push 0x661d
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, 0
test ebx, ebx
je 0x1ffc4179
push ebx
call edi
mov ecx, dword [ebx + 0x2e8]
push 0
cmp ecx, eax
jne 0x1ffc4190
push 9
mov eax, dword [ebx + 0x2e0]
push eax
jmp 0x1ffc4193
push 0
push ecx
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push ebx
mov eax, dword [0x1ffe8564]
push 0x1ffbd6e0
push ebp
push 0x6619
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, dword [ebx + 0x2e8]
push 0
cmp dword [esp + 0x14], eax
jne 0x1ffc41f1
push 9
mov eax, dword [ebx + 0x2e0]
jmp 0x1ffc41f3
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
test byte [ebx + 0x2e4], 2
je 0x1ffc42c8
cmp dword [ebx + 0xf38], 0
je 0x1ffc4876
cmp dword [ebx + 0xf3c], 0
je 0x1ffc4876
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
lea eax, [esp + 0xa0]
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], esi
push eax
push 0x1ffc12c0
mov ecx, dword [0x1ffe8564]
push ebp
push 0x661d
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, 0
test ebx, ebx
je 0x1ffc4289
push ebx
call edi
mov ecx, dword [ebx + 0x2e8]
push 0
cmp ecx, eax
jne 0x1ffc42a0
push 9
mov eax, dword [ebx + 0x2e0]
push eax
jmp 0x1ffc42a3
push 0
push ecx
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
push ebx
mov eax, dword [0x1ffe8564]
push 0x1ffbfb30
push ebp
push 0x661a
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
jne 0x1ffc4876
mov eax, dword [ebx + 0x2e8]
push 0
cmp dword [esp + 0x14], eax
jne 0x1ffc4301
push 9
mov eax, dword [ebx + 0x2e0]
jmp 0x1ffc4303
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
mov eax, dword [ebx + 0x2e8]
test eax, eax
je 0x1ffc435f
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc435f
mov eax, dword [ebx + 0x2e8]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, eax
mov eax, dword [ebx + 0x2e8]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc4361
xor esi, esi
test esi, esi
je 0x1ffc43d2
mov edi, dword [ebx + 0x2e8]
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
jne 0x1ffc43d2
test edi, edi
je 0x1ffc439f
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc439f
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [esp + 0xa0], eax
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc43aa
mov dword [esp + 0xa0], 0
lea eax, [esp + 0x18]
push 2
mov ecx, dword [esp + 0xa4]
push eax
push 0x109c
push 0x1ffe4c88
push ecx
call fcn.1ff9de90
cmp eax, 1
jne 0x1ffc43d2
add esi, 0x6c
jmp 0x1ffc43de
xor esi, esi
mov eax, dword [ebx + 0x109c]
mov dword [esp + 0x18], eax
test esi, esi
je 0x1ffc44b8
test byte [esi + 0x20], 1
je 0x1ffc44b8
mov ecx, dword [esi + 0x28]
test ecx, ecx
je 0x1ffc44b8
lea eax, [esp + 0xa4]
mov edx, dword [esi + 0x24]
push eax
push edx
push 0
push ecx
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
mov dword [esp + 0xa0], eax
test eax, eax
jg 0x1ffc4422
xor eax, eax
jmp 0x1ffc452f
test byte [esp + 0x1b], 0xff
mov eax, dword [esp + 0x18]
je 0x1ffc4434
and eax, 0xffffff
jmp 0x1ffc443f
push eax
mov ecx, dword [esi + 0x28]
push ecx
call dword [sym.imp.GDI32.dll_GetNearestPaletteIndex]
mov dword [esp + 0x4a4], eax
mov eax, dword [esp + 0xa0]
dec eax
mov ecx, dword [esp + 0x4a4]
cmp eax, ecx
jl 0x1ffc445b
mov eax, ecx
test eax, eax
jg 0x1ffc4461
xor eax, eax
lea ecx, [esp + 0xa0]
mov dword [esp + 0x4a4], eax
mov eax, dword [esi + 0x28]
push ecx
mov dword [esp + 0x4ac], eax
push 0x1ffd1770
mov dword [esp + 0x4b4], ebx
push ebp
push 0x661c
mov edx, dword [0x1ffe8564]
push edx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 1
je 0x1ffc44a5
xor eax, eax
jmp 0x1ffc452f
mov eax, dword [esp + 0x4a4]
and eax, 0xffff
or eax, 0x1000000
jmp 0x1ffc4526
lea edi, [esp + 0xa0]
xor eax, eax
mov ecx, 9
rep stosd dword es:[edi], eax
mov dword [esp + 0xa0], 0x24
lea ecx, [ebx + 0x308]
mov dword [esp + 0xa4], ebp
mov eax, dword [0x1ffe8564]
mov dword [esp + 0xa8], eax
lea eax, [esp + 0xa0]
mov dword [esp + 0xb0], ecx
push eax
mov dword [esp + 0xb8], 1
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xb0], edx
call sub.comdlg32.dll_ChooseColorA
test eax, eax
mov eax, 0
je 0x1ffc452f
mov eax, dword [esp + 0xac]
mov dword [esp + 0x18], eax
mov eax, 1
cmp eax, 1
jne 0x1ffc4876
mov esi, dword [esp + 0x18]
mov edi, dword [ebx + 0x2e8]
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
jne 0x1ffc45a3
test edi, edi
je 0x1ffc4576
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc4576
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [esp + 0xa0], eax
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc4581
mov dword [esp + 0xa0], 0
push 0
push 0x3e
mov eax, dword [esp + 0xa8]
push 0
push 0x20
push 2
push esi
push 0x109c
push 0x1ffe4c88
push eax
call fcn.1ff9d380
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x18]
cmp dword [ebx + 0x2e8], eax
jne 0x1ffc4626
mov edi, dword [ebx + 0x2e0]
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
jne 0x1ffc461a
test edi, edi
je 0x1ffc45ed
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc45ed
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [esp + 0xa0], eax
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc45f8
mov dword [esp + 0xa0], 0
push 0
push 0x3e
mov eax, dword [esp + 0xa8]
push 0
push 0x29
push 2
push esi
push 0x109c
push 0x1ffe4c88
push eax
call fcn.1ff9d380
push 0
mov eax, dword [ebx + 0x2e0]
push 9
jmp 0x1ffc4689
push 0
call sub.LTKRN13N.dll_Ordinal_196
test eax, eax
jne 0x1ffc4681
cmp dword [esp + 0x10], 0
je 0x1ffc4664
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc4664
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov edi, eax
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc4666
xor edi, edi
push 0
push 0x3e
push 0
push 0
push 2
push esi
push 0x109c
push 0x1ffe4c88
push edi
call fcn.1ff9d380
mov eax, dword [esp + 0x10]
push 0
push 0
push eax
call fcn.1ffc21d0
mov eax, dword [ebx + 0x2e0]
push eax
push 0xa
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
lea esi, [ebx + 0x2e8]
mov eax, dword [esp + 0x10]
cmp dword [esi], eax
jne 0x1ffc46d9
lea eax, [esp + 0xa0]
push esi
push eax
lea ecx, [ebx + 0xf30]
push ecx
mov edx, dword [ebx + 0x2e0]
push edx
call sym.LTANN13N.dll_L_AnnHitTest
mov eax, dword [esi]
push eax
push ebx
push ebp
call fcn.1ffc7500
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
lea esi, [ebx + 0x2e8]
mov eax, dword [esp + 0x10]
cmp dword [esi], eax
jne 0x1ffc4718
lea eax, [esp + 0xa0]
push esi
push eax
lea ecx, [ebx + 0xf30]
push ecx
mov edx, dword [ebx + 0x2e0]
push edx
call sym.LTANN13N.dll_L_AnnHitTest
mov eax, dword [esi]
mov dword [esp + 0x78], eax
test eax, eax
je 0x1ffc474c
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp eax, 0x8000
je 0x1ffc474c
mov eax, dword [esp + 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1ffc4754
mov dword [esp + 0x14], 0
mov eax, dword [esp + 0x14]
xor edi, edi
mov ecx, dword [eax + 0x1cc]
mov dword [esp + 0x2c], ecx
cmp ecx, edi
mov esi, dword [eax + 0x1c8]
je 0x1ffc47c0
add esi, 4
mov eax, dword [esi]
mov ecx, dword [esi - 4]
lea edx, [eax + 4]
sub eax, 3
sub ecx, 3
push edx
lea edx, [ecx + 7]
push edx
push eax
lea edx, [esp + 0xac]
push ecx
push edx
call dword [sym.imp.USER32.dll_SetRect]
mov edx, dword [ebx + 0xf34]
lea eax, [ebx + 0xf30]
push edx
mov ecx, dword [eax]
lea eax, [esp + 0xa4]
push ecx
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x1ffc47c0
add esi, 8
inc edi
cmp dword [esp + 0x2c], edi
ja 0x1ffc4771
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x1cc], edi
jbe 0x1ffc4876
push ebx
call fcn.1ffc4920
mov eax, dword [esp + 0x14]
mov edx, dword [eax + 0xfd8]
mov ecx, dword [eax + 0x1c0]
inc edx
lea ebx, [ecx - 1]
imul edx, edi
cmp ebx, edx
jbe 0x1ffc480c
mov edi, dword [eax + 0x1c4]
mov esi, edx
shl esi, 4
sub ecx, edx
add edi, esi
dec ecx
shl ecx, 4
lea esi, [edi + 0x10]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x14]
push 1
push eax
dec dword [eax + 0x1c0]
call fcn.1ff9b150
mov ecx, dword [esp + 0x78]
push ecx
push 0xb
push 0x600
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret
mov eax, dword [esp + 0x4e8]
mov ecx, dword [esp + 0x4ec]
push eax
and ecx, 0xffff
shl ecx, 0x10
mov eax, dword [esp + 0x4e8]
and eax, 0xffff
mov edx, dword [ebx + 0x2f0]
or ecx, eax
push ecx
push 0x111
push ebp
push edx
call dword [sym.imp.USER32.dll_CallWindowProcA]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x4cc
ret