Function at 0x4227fb
Capabilities:
Hide graphical window
Inspect section memory permissions

Disassembly:
push 0x1d8
mov eax, 0x48eca0
call fcn.00474ec1
mov eax, dword [ebp + 8]
xor esi, esi
mov dword [ebp - 0x1b0], esi
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1b4], esi
cmp eax, esi
je 0x4246b8
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push esi
push dword [ebx + 0x234]
call edi
push esi
push dword [ebx + 0x524]
call edi
push esi
push dword [ebx + 0x404]
call edi
push esi
push dword [ebx + 0x528]
call edi
push esi
push dword [ebx + 0x48c]
call edi
mov edi, dword [sym.imp.USER32.dll_EnableWindow]
push 1
push dword [ebx + 0x520]
call edi
push 1
push dword [ebx + 0x518]
call edi
push 0x49f060
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x5c]
mov dword [ebp - 4], esi
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x4228dc
push 0x49f060
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 1
push eax
lea edi, [ebp - 0x40]
lea esi, [ebx + 0x1074]
mov dword [ebp - 0x1b0], 1
call fcn.00438262
mov dword [ebp - 4], 2
mov dword [ebp - 0x1b0], 3
xor esi, esi
jmp 0x4228fd
push str.Back
lea ecx, [ebp - 0x94]
call fcn.0040a4c4
mov dword [ebp - 4], 3
mov dword [ebp - 0x1b0], 4
push eax
lea ecx, [ebp - 0x158]
call fcn.0040a4f5
mov dword [ebp - 4], 4
test byte [ebp - 0x1b0], 4
je 0x42292e
and dword [ebp - 0x1b0], 0xfffffffb
push esi
push 1
lea ecx, [ebp - 0x94]
call fcn.0040bba0
test byte [ebp - 0x1b0], 2
je 0x422949
and dword [ebp - 0x1b0], 0xfffffffd
push esi
push 1
lea ecx, [ebp - 0x78]
call fcn.0040bba0
test byte [ebp - 0x1b0], 1
je 0x422964
and dword [ebp - 0x1b0], 0xfffffffe
push esi
push 1
lea ecx, [ebp - 0x40]
call fcn.0040bba0
push esi
push 1
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 8
call fcn.0040bba0
push 0x49f080
lea ecx, [ebp - 0xcc]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0xcc]
mov byte [ebp - 4], 9
call fcn.004382b2
push 0x49f080
cmp eax, 0xffffffff
jle 0x4229e3
lea ecx, [ebp - 0xe8]
call fcn.0040a4c4
lea eax, [ebp - 0x13c]
mov byte [ebp - 4], 0xa
or dword [ebp - 0x1b0], 8
push eax
lea edi, [ebp - 0xe8]
lea esi, [ebx + 0x1074]
call fcn.00438262
mov dword [ebp - 4], 0xb
or dword [ebp - 0x1b0], 0x10
xor esi, esi
jmp 0x4229fc
lea ecx, [ebp - 0xb0]
call fcn.0040a4c4
mov dword [ebp - 4], 0xc
or dword [ebp - 0x1b0], 0x20
push eax
lea ecx, [ebp - 0x190]
call fcn.0040a4f5
mov dword [ebp - 4], 0xd
test byte [ebp - 0x1b0], 0x20
je 0x422a2d
and dword [ebp - 0x1b0], 0xffffffdf
push esi
push 1
lea ecx, [ebp - 0xb0]
call fcn.0040bba0
test byte [ebp - 0x1b0], 0x10
je 0x422a4b
and dword [ebp - 0x1b0], 0xffffffef
push esi
push 1
lea ecx, [ebp - 0x13c]
call fcn.0040bba0
test byte [ebp - 0x1b0], 8
je 0x422a69
and dword [ebp - 0x1b0], 0xfffffff7
push esi
push 1
lea ecx, [ebp - 0xe8]
call fcn.0040bba0
push esi
push 1
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x11
call fcn.0040bba0
push str.Finish
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x12
call fcn.004382b2
push str.Finish
cmp eax, 0xffffffff
jle 0x422ae2
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x13
or dword [ebp - 0x1b0], 0x40
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
mov dword [ebp - 4], 0x14
or dword [ebp - 0x1b0], 0x80
xor esi, esi
jmp 0x422afb
lea ecx, [ebp - 0x78]
call fcn.0040a4c4
mov dword [ebp - 4], 0x15
or dword [ebp - 0x1b0], 0x100
push eax
lea ecx, [ebp - 0x1ac]
call fcn.0040a4f5
mov dword [ebp - 4], 0x16
test dword [ebp - 0x1b0], 0x100
je 0x422b2f
and dword [ebp - 0x1b0], 0xfffffeff
push esi
push 1
lea ecx, [ebp - 0x78]
call fcn.0040bba0
test byte [ebp - 0x1b0], 0x80
je 0x422b50
and dword [ebp - 0x1b0], 0xffffff7f
push esi
push 1
lea ecx, [ebp - 0x94]
call fcn.0040bba0
test byte [ebp - 0x1b0], 0x40
je 0x422b6b
and dword [ebp - 0x1b0], 0xffffffbf
push esi
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push esi
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1a
call fcn.0040bba0
push 0x49ea20
lea ecx, [ebp - 0xe8]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0xe8]
mov byte [ebp - 4], 0x1b
call fcn.004382b2
push 0x49ea20
cmp eax, 0xffffffff
jle 0x422bf0
lea ecx, [ebp - 0xcc]
call fcn.0040a4c4
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x1c
or dword [ebp - 0x1b0], 0x200
push eax
lea edi, [ebp - 0xcc]
lea esi, [ebx + 0x1074]
call fcn.00438262
mov dword [ebp - 4], 0x1d
or dword [ebp - 0x1b0], 0x400
xor esi, esi
jmp 0x422c0c
lea ecx, [ebp - 0x13c]
call fcn.0040a4c4
mov dword [ebp - 4], 0x1e
or dword [ebp - 0x1b0], 0x800
push eax
lea ecx, [ebp - 0x174]
call fcn.0040a4f5
mov dword [ebp - 4], 0x1f
test dword [ebp - 0x1b0], 0x800
je 0x422c43
and dword [ebp - 0x1b0], 0xfffff7ff
push esi
push 1
lea ecx, [ebp - 0x13c]
call fcn.0040bba0
test dword [ebp - 0x1b0], 0x400
je 0x422c67
and dword [ebp - 0x1b0], 0xfffffbff
push esi
push 1
lea ecx, [ebp - 0x104]
call fcn.0040bba0
test dword [ebp - 0x1b0], 0x200
je 0x422c8b
and dword [ebp - 0x1b0], 0xfffffdff
push esi
push 1
lea ecx, [ebp - 0xcc]
call fcn.0040bba0
push esi
push 1
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
push 0x49f060
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x24
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x422d03
push 0x49f060
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x25
or dword [ebp - 0x1b0], 0x1000
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
or dword [ebp - 0x1b0], 0x2000
cmp dword [eax + 0x14], 8
jb 0x422d08
mov eax, dword [eax]
jmp 0x422d08
mov eax, str.Back
push eax
push dword [ebx + 0x51c]
call dword [sym.imp.USER32.dll_SetWindowTextW]
test dword [ebp - 0x1b0], 0x2000
je 0x422d37
and dword [ebp - 0x1b0], 0xffffdfff
push 0
push 1
lea ecx, [ebp - 0x78]
call fcn.0040bba0
mov dword [ebp - 4], 0x24
test dword [ebp - 0x1b0], 0x1000
je 0x422d60
and dword [ebp - 0x1b0], 0xffffefff
push 0
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
mov esi, 0x49f080
push esi
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x26
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x422dd3
push esi
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x27
or dword [ebp - 0x1b0], 0x4000
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
or dword [ebp - 0x1b0], 0x8000
cmp dword [eax + 0x14], 8
jb 0x422dd5
mov eax, dword [eax]
jmp 0x422dd5
mov eax, esi
push eax
push dword [ebx + 0x518]
call dword [sym.imp.USER32.dll_SetWindowTextW]
test dword [ebp - 0x1b0], 0x8000
je 0x422e04
and dword [ebp - 0x1b0], 0xffff7fff
push 0
push 1
lea ecx, [ebp - 0x78]
call fcn.0040bba0
mov dword [ebp - 4], 0x26
test dword [ebp - 0x1b0], 0x4000
je 0x422e2d
and dword [ebp - 0x1b0], 0xffffbfff
push 0
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
mov esi, 0x49ea20
push esi
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x28
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x422ea0
push esi
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x29
or dword [ebp - 0x1b0], 0x10000
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
or dword [ebp - 0x1b0], 0x20000
cmp dword [eax + 0x14], 8
jb 0x422ea2
mov eax, dword [eax]
jmp 0x422ea2
mov eax, esi
push eax
push dword [ebx + 0x520]
call dword [sym.imp.USER32.dll_SetWindowTextW]
test dword [ebp - 0x1b0], 0x20000
je 0x422ed1
and dword [ebp - 0x1b0], 0xfffdffff
push 0
push 1
lea ecx, [ebp - 0x78]
call fcn.0040bba0
mov dword [ebp - 4], 0x28
test dword [ebp - 0x1b0], 0x10000
je 0x422efa
and dword [ebp - 0x1b0], 0xfffeffff
push 0
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
push 0x49f060
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x2a
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x422f70
push 0x49f060
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x2b
or dword [ebp - 0x1b0], 0x40000
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
or dword [ebp - 0x1b0], 0x80000
cmp dword [eax + 0x14], 8
jb 0x422f75
mov eax, dword [eax]
jmp 0x422f75
mov eax, str.Back
mov ecx, dword [ebx + 0x2f4]
xor esi, esi
cmp ecx, esi
je 0x422f89
push eax
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextW]
test dword [ebp - 0x1b0], 0x80000
je 0x422faa
and dword [ebp - 0x1b0], 0xfff7ffff
push esi
push 1
lea ecx, [ebp - 0x78]
call fcn.0040bba0
mov dword [ebp - 4], 0x2a
test dword [ebp - 0x1b0], 0x40000
je 0x422fd2
and dword [ebp - 0x1b0], 0xfffbffff
push esi
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push esi
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
mov esi, 0x49f080
push esi
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x2c
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x423044
push esi
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x2d
or dword [ebp - 0x1b0], 0x100000
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
or dword [ebp - 0x1b0], 0x200000
cmp dword [eax + 0x14], 8
jb 0x423046
mov eax, dword [eax]
jmp 0x423046
mov eax, esi
mov ecx, dword [ebx + 0x26c]
xor esi, esi
cmp ecx, esi
je 0x42305a
push eax
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextW]
test dword [ebp - 0x1b0], 0x200000
je 0x42307b
and dword [ebp - 0x1b0], 0xffdfffff
push esi
push 1
lea ecx, [ebp - 0x78]
call fcn.0040bba0
mov dword [ebp - 4], 0x2c
test dword [ebp - 0x1b0], 0x100000
je 0x4230a3
and dword [ebp - 0x1b0], 0xffefffff
push esi
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push esi
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
mov esi, 0x49ea20
push esi
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x2e
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x423115
push esi
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x2f
or dword [ebp - 0x1b0], 0x400000
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
or dword [ebp - 0x1b0], 0x800000
cmp dword [eax + 0x14], 8
jb 0x423117
mov eax, dword [eax]
jmp 0x423117
mov eax, esi
mov ecx, dword [ebx + 0x37c]
xor esi, esi
cmp ecx, esi
je 0x42312b
push eax
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextW]
test dword [ebp - 0x1b0], 0x800000
je 0x42314c
and dword [ebp - 0x1b0], 0xff7fffff
push esi
push 1
lea ecx, [ebp - 0x78]
call fcn.0040bba0
mov dword [ebp - 4], 0x2e
test dword [ebp - 0x1b0], 0x400000
je 0x423174
and dword [ebp - 0x1b0], 0xffbfffff
push esi
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push esi
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
mov esi, str.PreviousX
push esi
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x30
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x423213
push esi
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x31
or dword [ebp - 0x1b0], 0x1000000
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 4], 0x32
or dword [ebp - 0x1b0], 0x2000000
mov ecx, eax
call fcn.00456a76
or dword [ebp - 0x1b0], 0x4000000
cmp dword [eax + 0x14], 0x10
pop ecx
jb 0x423204
mov eax, dword [eax]
push eax
call fcn.0046fa73
pop ecx
mov dword [ebp - 0x1dc], eax
jmp 0x42321d
mov dword [ebp - 0x1dc], 0xfa
test dword [ebp - 0x1b0], 0x4000000
je 0x42323f
and dword [ebp - 0x1b0], 0xfbffffff
push 0
push 1
lea ecx, [ebp - 0x78]
call fcn.00401524
test dword [ebp - 0x1b0], 0x2000000
je 0x423264
and dword [ebp - 0x1b0], 0xfdffffff
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.0040bba0
mov dword [ebp - 4], 0x30
test dword [ebp - 0x1b0], 0x1000000
je 0x42328d
and dword [ebp - 0x1b0], 0xfeffffff
push 0
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
mov esi, str.PreviousY
push esi
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x33
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x42332d
push esi
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x34
or dword [ebp - 0x1b0], 0x8000000
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 4], 0x35
or dword [ebp - 0x1b0], 0x10000000
mov ecx, eax
call fcn.00456a76
or dword [ebp - 0x1b0], 0x20000000
cmp dword [eax + 0x14], 0x10
pop ecx
jb 0x42331e
mov eax, dword [eax]
push eax
call fcn.0046fa73
pop ecx
mov dword [ebp - 0x1e0], eax
jmp 0x423337
mov dword [ebp - 0x1e0], 0x25
test dword [ebp - 0x1b0], 0x20000000
je 0x423359
and dword [ebp - 0x1b0], 0xdfffffff
push 0
push 1
lea ecx, [ebp - 0x78]
call fcn.00401524
test dword [ebp - 0x1b0], 0x10000000
je 0x42337e
and dword [ebp - 0x1b0], 0xefffffff
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.0040bba0
mov dword [ebp - 4], 0x33
test dword [ebp - 0x1b0], 0x8000000
je 0x4233a7
and dword [ebp - 0x1b0], 0xf7ffffff
push 0
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
mov esi, str.PreviousWidth
push esi
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x36
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x423447
push esi
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x37
or dword [ebp - 0x1b0], 0x40000000
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 4], 0x38
or dword [ebp - 0x1b0], 0x80000000
mov ecx, eax
call fcn.00456a76
cmp dword [eax + 0x14], 0x10
pop ecx
mov dword [ebp - 0x1b4], 1
jb 0x423438
mov eax, dword [eax]
push eax
call fcn.0046fa73
pop ecx
mov dword [ebp - 0x1d0], eax
jmp 0x423451
mov dword [ebp - 0x1d0], 0x4b
test byte [ebp - 0x1b4], 1
je 0x42346d
and dword [ebp - 0x1b4], 0xfffffffe
push 0
push 1
lea ecx, [ebp - 0x78]
call fcn.00401524
test dword [ebp - 0x1b0], 0x80000000
je 0x423492
and dword [ebp - 0x1b0], 0x7fffffff
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.0040bba0
mov dword [ebp - 4], 0x36
test dword [ebp - 0x1b0], 0x40000000
je 0x4234b1
push 0
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
mov esi, str.PreviousHeight
push esi
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x39
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x423548
push esi
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x3a
or dword [ebp - 0x1b4], 2
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 4], 0x3b
or dword [ebp - 0x1b4], 4
mov ecx, eax
call fcn.00456a76
or dword [ebp - 0x1b4], 8
cmp dword [eax + 0x14], 0x10
pop ecx
jb 0x423539
mov eax, dword [eax]
push eax
call fcn.0046fa73
pop ecx
mov dword [ebp - 0x1bc], eax
jmp 0x423552
mov dword [ebp - 0x1bc], 0x17
test byte [ebp - 0x1b4], 8
je 0x42356e
and dword [ebp - 0x1b4], 0xfffffff7
push 0
push 1
lea ecx, [ebp - 0x78]
call fcn.00401524
test byte [ebp - 0x1b4], 4
je 0x42358d
and dword [ebp - 0x1b4], 0xfffffffb
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.0040bba0
mov dword [ebp - 4], 0x39
test byte [ebp - 0x1b4], 2
je 0x4235b0
and dword [ebp - 0x1b4], 0xfffffffd
push 0
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
mov esi, str.NextX
push esi
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x3c
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x423647
push esi
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x3d
or dword [ebp - 0x1b4], 0x10
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 4], 0x3e
or dword [ebp - 0x1b4], 0x20
mov ecx, eax
call fcn.00456a76
or dword [ebp - 0x1b4], 0x40
cmp dword [eax + 0x14], 0x10
pop ecx
jb 0x423638
mov eax, dword [eax]
push eax
call fcn.0046fa73
pop ecx
mov dword [ebp - 0x1cc], eax
jmp 0x423651
mov dword [ebp - 0x1cc], 0xa9
test byte [ebp - 0x1b4], 0x40
je 0x42366d
and dword [ebp - 0x1b4], 0xffffffbf
push 0
push 1
lea ecx, [ebp - 0x78]
call fcn.00401524
test byte [ebp - 0x1b4], 0x20
je 0x42368c
and dword [ebp - 0x1b4], 0xffffffdf
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.0040bba0
mov dword [ebp - 4], 0x3c
test byte [ebp - 0x1b4], 0x10
je 0x4236af
and dword [ebp - 0x1b4], 0xffffffef
push 0
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
mov esi, str.NextY
push esi
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x3f
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x42374f
push esi
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x40
or dword [ebp - 0x1b4], 0x80
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 4], 0x41
or dword [ebp - 0x1b4], 0x100
mov ecx, eax
call fcn.00456a76
or dword [ebp - 0x1b4], 0x200
cmp dword [eax + 0x14], 0x10
pop ecx
jb 0x423740
mov eax, dword [eax]
push eax
call fcn.0046fa73
pop ecx
mov dword [ebp - 0x1c4], eax
jmp 0x423759
mov dword [ebp - 0x1c4], 0x25
test dword [ebp - 0x1b4], 0x200
je 0x42377b
and dword [ebp - 0x1b4], 0xfffffdff
push 0
push 1
lea ecx, [ebp - 0x78]
call fcn.00401524
test dword [ebp - 0x1b4], 0x100
je 0x4237a0
and dword [ebp - 0x1b4], 0xfffffeff
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.0040bba0
mov dword [ebp - 4], 0x3f
test byte [ebp - 0x1b4], 0x80
je 0x4237c6
and dword [ebp - 0x1b4], 0xffffff7f
push 0
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
mov esi, str.NextWidth
push esi
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x42
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x423866
push esi
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x43
or dword [ebp - 0x1b4], 0x400
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 4], 0x44
or dword [ebp - 0x1b4], 0x800
mov ecx, eax
call fcn.00456a76
or dword [ebp - 0x1b4], 0x1000
cmp dword [eax + 0x14], 0x10
pop ecx
jb 0x423857
mov eax, dword [eax]
push eax
call fcn.0046fa73
pop ecx
mov dword [ebp - 0x1b8], eax
jmp 0x423870
mov dword [ebp - 0x1b8], 0x4b
test dword [ebp - 0x1b4], 0x1000
je 0x423892
and dword [ebp - 0x1b4], 0xffffefff
push 0
push 1
lea ecx, [ebp - 0x78]
call fcn.00401524
test dword [ebp - 0x1b4], 0x800
je 0x4238b7
and dword [ebp - 0x1b4], 0xfffff7ff
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.0040bba0
mov dword [ebp - 4], 0x42
test dword [ebp - 0x1b4], 0x400
je 0x4238e0
and dword [ebp - 0x1b4], 0xfffffbff
push 0
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
mov esi, str.NextHeight
push esi
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x45
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x423980
push esi
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x46
or dword [ebp - 0x1b4], 0x2000
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 4], 0x47
or dword [ebp - 0x1b4], 0x4000
mov ecx, eax
call fcn.00456a76
or dword [ebp - 0x1b4], 0x8000
cmp dword [eax + 0x14], 0x10
pop ecx
jb 0x423971
mov eax, dword [eax]
push eax
call fcn.0046fa73
pop ecx
mov dword [ebp - 0x1b0], eax
jmp 0x42398a
mov dword [ebp - 0x1b0], 0x17
test dword [ebp - 0x1b4], 0x8000
je 0x4239ac
and dword [ebp - 0x1b4], 0xffff7fff
push 0
push 1
lea ecx, [ebp - 0x78]
call fcn.00401524
test dword [ebp - 0x1b4], 0x4000
je 0x4239d1
and dword [ebp - 0x1b4], 0xffffbfff
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.0040bba0
mov dword [ebp - 4], 0x45
test dword [ebp - 0x1b4], 0x2000
je 0x4239fa
and dword [ebp - 0x1b4], 0xffffdfff
push 0
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
mov esi, str.CancelX
push esi
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x48
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x423a9a
push esi
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x49
or dword [ebp - 0x1b4], 0x10000
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 4], 0x4a
or dword [ebp - 0x1b4], 0x20000
mov ecx, eax
call fcn.00456a76
or dword [ebp - 0x1b4], 0x40000
cmp dword [eax + 0x14], 0x10
pop ecx
jb 0x423a8b
mov eax, dword [eax]
push eax
call fcn.0046fa73
pop ecx
mov dword [ebp - 0x1d8], eax
jmp 0x423aa4
mov dword [ebp - 0x1d8], 0x58
test dword [ebp - 0x1b4], 0x40000
je 0x423ac6
and dword [ebp - 0x1b4], 0xfffbffff
push 0
push 1
lea ecx, [ebp - 0x78]
call fcn.00401524
test dword [ebp - 0x1b4], 0x20000
je 0x423aeb
and dword [ebp - 0x1b4], 0xfffdffff
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.0040bba0
mov dword [ebp - 4], 0x48
test dword [ebp - 0x1b4], 0x10000
je 0x423b14
and dword [ebp - 0x1b4], 0xfffeffff
push 0
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
mov esi, str.CancelY
push esi
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x4b
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x423bb4
push esi
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x4c
or dword [ebp - 0x1b4], 0x80000
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 4], 0x4d
or dword [ebp - 0x1b4], 0x100000
mov ecx, eax
call fcn.00456a76
or dword [ebp - 0x1b4], 0x200000
cmp dword [eax + 0x14], 0x10
pop ecx
jb 0x423ba5
mov eax, dword [eax]
push eax
call fcn.0046fa73
pop ecx
mov dword [ebp - 0x1e4], eax
jmp 0x423bbe
mov dword [ebp - 0x1e4], 0x25
test dword [ebp - 0x1b4], 0x200000
je 0x423be0
and dword [ebp - 0x1b4], 0xffdfffff
push 0
push 1
lea ecx, [ebp - 0x78]
call fcn.00401524
test dword [ebp - 0x1b4], 0x100000
je 0x423c05
and dword [ebp - 0x1b4], 0xffefffff
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.0040bba0
mov dword [ebp - 4], 0x4b
test dword [ebp - 0x1b4], 0x80000
je 0x423c2e
and dword [ebp - 0x1b4], 0xfff7ffff
push 0
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push 0
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
mov esi, str.CancelWidth
push esi
lea ecx, [ebp - 0xb0]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0xb0]
mov byte [ebp - 4], 0x4e
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x423cd4
push esi
lea ecx, [ebp - 0x5c]
call fcn.0040a4c4
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x4f
or dword [ebp - 0x1b4], 0x400000
push eax
lea edi, [ebp - 0x5c]
lea esi, [ebx + 0x1074]
call fcn.00438262
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 4], 0x50
or dword [ebp - 0x1b4], 0x800000
mov ecx, eax
call fcn.00456a76
or dword [ebp - 0x1b4], 0x1000000
cmp dword [eax + 0x14], 0x10
pop ecx
jb 0x423cc5
mov eax, dword [eax]
push eax
call fcn.0046fa73
pop ecx
mov dword [ebp - 0x1d4], eax
jmp 0x423cde
mov dword [ebp - 0x1d4], 0x4b
test dword [ebp - 0x1b4], 0x1000000
je 0x423d00
and dword [ebp - 0x1b4], 0xfeffffff
push 0
push 1
lea ecx, [ebp - 0x78]
call fcn.00401524
test dword [ebp - 0x1b4], 0x800000
je 0x423d25
and dword [ebp - 0x1b4], 0xff7fffff
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.0040bba0
mov dword [ebp - 4], 0x4e
test dword [ebp - 0x1b4], 0x400000
je 0x423d4e
and dword [ebp - 0x1b4], 0xffbfffff
push 0
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040bba0
push 0
push 1
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
mov esi, str.CancelHeight
push esi
lea ecx, [ebp - 0x40]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0x40]
mov byte [ebp - 4], 0x51
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x423df7
push esi
lea ecx, [ebp - 0xb0]
call fcn.0040a4c4
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x52
or dword [ebp - 0x1b4], 0x2000000
push eax
lea edi, [ebp - 0xb0]
lea esi, [ebx + 0x1074]
call fcn.00438262
lea ecx, [ebp - 0x78]
push ecx
mov dword [ebp - 4], 0x53
or dword [ebp - 0x1b4], 0x4000000
mov ecx, eax
call fcn.00456a76
or dword [ebp - 0x1b4], 0x8000000
cmp dword [eax + 0x14], 0x10
pop ecx
jb 0x423de8
mov eax, dword [eax]
push eax
call fcn.0046fa73
pop ecx
mov dword [ebp - 0x1c0], eax
jmp 0x423e01
mov dword [ebp - 0x1c0], 0x17
xor esi, esi
test dword [ebp - 0x1b4], 0x8000000
je 0x423e24
and dword [ebp - 0x1b4], 0xf7ffffff
push esi
push 1
lea ecx, [ebp - 0x78]
call fcn.00401524
test dword [ebp - 0x1b4], 0x4000000
je 0x423e48
and dword [ebp - 0x1b4], 0xfbffffff
push esi
push 1
lea ecx, [ebp - 0x94]
call fcn.0040bba0
mov dword [ebp - 4], 0x51
test dword [ebp - 0x1b4], 0x2000000
je 0x423e73
and dword [ebp - 0x1b4], 0xfdffffff
push esi
push 1
lea ecx, [ebp - 0xb0]
call fcn.0040bba0
push esi
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0040bba0
mov eax, dword [ebp - 0x1c8]
add eax, 0x21c
push eax
lea ecx, [ebp - 0x120]
call fcn.004016f0
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 0x54
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edi, 0x49bf64
push edi
call fcn.0046de90
pop ecx
push edi
mov edi, eax
mov eax, dword [ebp - 0x110]
lea ecx, [ebp - 0x120]
call fcn.004129b8
test eax, eax
jne 0x423eec
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push eax
push dword [ebx + 0x520]
call esi
push 0
push dword [ebx + 0x37c]
call esi
jmp 0x424027
cmp byte [ebx + 0x52c], 0
je 0x423fbe
cmp dword [ebx + 0x534], 3
jg 0x423f11
push esi
push esi
push 1
push 0xc000008c
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov edi, dword [ebx + 0x530]
add edi, 0x54
push str.ERROR
call fcn.00410e89
test eax, eax
je 0x423fbe
cmp dword [ebx + 0x534], 3
push dword [ebp - 0x1c0]
push dword [ebp - 0x1d4]
jle 0x423f02
mov eax, dword [ebx + 0x530]
sub esp, 0x1c
add eax, 0x54
mov ecx, esp
mov dword [ebp - 0x1c8], esp
push eax
call fcn.0040a49c
lea eax, [ebx + 0x378]
push eax
call fcn.0044dff4
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 5
push dword [ebx + 0x37c]
call esi
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c0]
sub ecx, dword [ebp - 0x24]
sub eax, dword [ebp - 0x1e4]
sub ecx, dword [ebp - 0x1d8]
push 1
push dword [ebp - 0x1c0]
push dword [ebp - 0x1d4]
push eax
push ecx
push dword [ebx + 0x37c]
call dword [sym.imp.USER32.dll_MoveWindow]
xor edi, edi
push edi
push dword [ebx + 0x520]
call esi
jmp 0x424029
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push dword [ebx + 0x37c]
call esi
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c0]
sub ecx, dword [ebp - 0x24]
sub eax, dword [ebp - 0x1e4]
sub ecx, dword [ebp - 0x1d8]
push 1
push dword [ebp - 0x1c0]
push dword [ebp - 0x1d4]
push eax
push ecx
push dword [ebx + 0x520]
call dword [sym.imp.USER32.dll_MoveWindow]
push 5
push dword [ebx + 0x520]
call esi
push 1
push 0
push 0xf4
push dword [ebx + 0x520]
call dword [sym.imp.USER32.dll_SendMessageW]
xor edi, edi
cmp byte [ebp + 0x10], 0
jne 0x424084
mov ecx, dword [ebp + 0xc]
dec ecx
cmp ecx, edi
jl 0x424066
mov edx, ecx
imul edx, edx, 0x4a0
cmp ecx, edi
jl 0x42407d
cmp ecx, dword [ebx + 0x760]
jge 0x42407d
mov eax, dword [ebx + 0x75c]
cmp byte [eax + edx + 0x25c], 0
jne 0x424084
dec ecx
sub edx, 0x4a0
cmp ecx, edi
jge 0x424043
push edi
push dword [ebx + 0x2f4]
call esi
push edi
push dword [ebx + 0x51c]
call esi
jmp 0x4241b6
push edi
push edi
jmp 0x423f04
cmp byte [ebx + 0x52c], 0
je 0x424147
cmp dword [ebx + 0x534], edi
jle 0x42407d
mov edi, dword [ebx + 0x530]
push str.ERROR
call fcn.00410e89
xor edi, edi
test eax, eax
je 0x424147
push dword [ebp - 0x1bc]
push dword [ebp - 0x1d0]
cmp dword [ebx + 0x534], edi
jle 0x42407d
mov eax, dword [ebx + 0x530]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c8], esp
push eax
call fcn.0040a49c
lea eax, [ebx + 0x2f0]
push eax
call fcn.0044dff4
xor eax, eax
cmp byte [ebx + 0x224], al
setne al
dec eax
and eax, 5
push eax
push dword [ebx + 0x2f4]
call esi
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1bc]
sub ecx, dword [ebp - 0x24]
sub eax, dword [ebp - 0x1e0]
sub ecx, dword [ebp - 0x1dc]
push 1
push dword [ebp - 0x1bc]
push dword [ebp - 0x1d0]
push eax
push ecx
push dword [ebx + 0x2f4]
call dword [sym.imp.USER32.dll_MoveWindow]
push edi
push dword [ebx + 0x51c]
call esi
jmp 0x4241b8
push edi
push dword [ebx + 0x2f4]
call esi
xor eax, eax
cmp byte [ebx + 0x224], al
setne al
dec eax
and eax, 5
push eax
push dword [ebx + 0x51c]
call esi
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1bc]
sub ecx, dword [ebp - 0x24]
sub eax, dword [ebp - 0x1e0]
sub ecx, dword [ebp - 0x1dc]
push 1
push dword [ebp - 0x1bc]
push dword [ebp - 0x1d0]
push eax
push ecx
push dword [ebx + 0x51c]
call dword [sym.imp.USER32.dll_MoveWindow]
push 1
push edi
push 0xf4
push dword [ebx + 0x51c]
call dword [sym.imp.USER32.dll_SendMessageW]
xor edi, edi
mov eax, dword [ebx + 0xc28]
cmp eax, edi
je 0x424201
xor ecx, ecx
cmp eax, edi
jle 0x424201
xor edx, edx
cmp ecx, edi
jl 0x42407d
cmp ecx, dword [ebx + 0xc28]
jge 0x42407d
mov eax, dword [ebx + 0xc24]
cmp dword [eax + edx + 0x428], 9
je 0x42452b
inc ecx
add edx, 0x4a0
cmp ecx, dword [ebx + 0xc28]
jl 0x4241ca
cmp byte [ebp + 0x10], 0
jne 0x42452b
mov eax, dword [ebp + 0xc]
mov edx, ebx
call fcn.004246c0
test al, al
je 0x42452b
mov esi, str.Finish
push esi
lea ecx, [ebp - 0xcc]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0xcc]
mov byte [ebp - 4], 0x55
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x42428f
push esi
lea ecx, [ebp - 0xb0]
call fcn.0040a4c4
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x56
or dword [ebp - 0x1b4], 0x10000000
push eax
lea edi, [ebp - 0xb0]
lea esi, [ebx + 0x1074]
call fcn.00438262
or dword [ebp - 0x1b4], 0x20000000
cmp dword [eax + 0x14], 8
jb 0x424291
mov eax, dword [eax]
jmp 0x424291
mov eax, esi
push eax
push dword [ebx + 0x518]
call dword [sym.imp.USER32.dll_SetWindowTextW]
test dword [ebp - 0x1b4], 0x20000000
je 0x4242c3
and dword [ebp - 0x1b4], 0xdfffffff
push 0
push 1
lea ecx, [ebp - 0x104]
call fcn.0040bba0
mov dword [ebp - 4], 0x55
test dword [ebp - 0x1b4], 0x10000000
je 0x4242ef
and dword [ebp - 0x1b4], 0xefffffff
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.0040bba0
push 0
push 1
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x54
call fcn.0040bba0
mov esi, str.Finish
push esi
lea ecx, [ebp - 0xe8]
call fcn.0040a4c4
lea eax, [ebx + 0x1074]
push eax
lea edi, [ebp - 0xe8]
mov byte [ebp - 4], 0x57
call fcn.004382b2
cmp eax, 0xffffffff
jle 0x424374
push esi
lea ecx, [ebp - 0xb0]
call fcn.0040a4c4
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x58
or dword [ebp - 0x1b4], 0x40000000
push eax
lea edi, [ebp - 0xb0]
lea esi, [ebx + 0x1074]
call fcn.00438262
or dword [ebp - 0x1b4], 0x80000000
cmp dword [eax + 0x14], 8
jb 0x424376
mov eax, dword [eax]
jmp 0x424376
mov eax, esi
mov ecx, dword [ebx + 0x26c]
xor edi, edi
cmp ecx, edi
je 0x42438a
push eax
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextW]
xor esi, esi
inc esi
test dword [ebp - 0x1b4], 0x80000000
je 0x4243b0
and dword [ebp - 0x1b4], 0x7fffffff
push edi
push esi
lea ecx, [ebp - 0x104]
call fcn.0040bba0
mov dword [ebp - 4], 0x57
test dword [ebp - 0x1b4], 0x40000000
je 0x4243d0
push edi
push esi
lea ecx, [ebp - 0xb0]
call fcn.0040bba0
push edi
push esi
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x54
call fcn.0040bba0
cmp dword [ebx + 0x534], 4
jne 0x4244c6
cmp dword [ebx + 0x534], 2
jg 0x4243ff
push edi
push edi
push esi
jmp 0x423f06
mov edi, dword [ebx + 0x530]
add edi, 0x38
push str.ERROR
call fcn.00410e89
test eax, eax
je 0x4244c6
cmp dword [ebx + 0x534], 2
push dword [ebp - 0x1b0]
push dword [ebp - 0x1b8]
jg 0x424435
push 0
push 0
jmp 0x4243f9
mov eax, dword [ebx + 0x530]
sub esp, 0x1c
add eax, 0x38
mov ecx, esp
mov dword [ebp - 0x1c8], esp
push eax
call fcn.0040a49c
lea eax, [ebx + 0x268]
push eax
call fcn.0044dff4
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
push esi
push dword [ebp - 0x1b0]
sub eax, dword [ebp - 0x1b0]
push dword [ebp - 0x1b8]
sub eax, dword [ebp - 0x1c4]
push eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x1cc]
push eax
push dword [ebx + 0x26c]
call dword [sym.imp.USER32.dll_MoveWindow]
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push 5
push dword [ebx + 0x26c]
call edi
push 0
push dword [ebx + 0x518]
call edi
push dword [ebx + 0x26c]
call dword [sym.imp.USER32.dll_SetFocus]
push esi
push dword [ebx + 0x26c]
jmp 0x424667
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push dword [ebx + 0x26c]
call edi
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
push esi
push dword [ebp - 0x1b0]
sub eax, dword [ebp - 0x1b0]
push dword [ebp - 0x1b8]
sub eax, dword [ebp - 0x1c4]
push eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x1cc]
push eax
push dword [ebx + 0x518]
call dword [sym.imp.USER32.dll_MoveWindow]
push 5
push dword [ebx + 0x518]
call edi
push dword [ebx + 0x518]
call dword [sym.imp.USER32.dll_SetFocus]
push esi
jmp 0x424661
cmp dword [ebx + 0x534], 4
jne 0x424606
cmp dword [ebx + 0x534], 1
jle 0x42407d
mov edi, dword [ebx + 0x530]
add edi, 0x1c
push str.ERROR
call fcn.00410e89
xor edi, edi
test eax, eax
je 0x424606
push dword [ebp - 0x1b0]
inc edi
push dword [ebp - 0x1b8]
cmp dword [ebx + 0x534], edi
jg 0x424581
push 0
push 0
push edi
jmp 0x423f06
mov eax, dword [ebx + 0x530]
sub esp, 0x1c
add eax, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c8], esp
push eax
call fcn.0040a49c
lea eax, [ebx + 0x268]
push eax
call fcn.0044dff4
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
push edi
push dword [ebp - 0x1b0]
sub eax, dword [ebp - 0x1b0]
push dword [ebp - 0x1b8]
sub eax, dword [ebp - 0x1c4]
push eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x1cc]
push eax
push dword [ebx + 0x26c]
call dword [sym.imp.USER32.dll_MoveWindow]
push 5
push dword [ebx + 0x26c]
call esi
push 0
push dword [ebx + 0x518]
call esi
push dword [ebx + 0x26c]
call dword [sym.imp.USER32.dll_SetFocus]
push edi
jmp 0x4244bb
push edi
push dword [ebx + 0x26c]
call esi
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
push 1
push dword [ebp - 0x1b0]
sub eax, dword [ebp - 0x1b0]
push dword [ebp - 0x1b8]
sub eax, dword [ebp - 0x1c4]
push eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x1cc]
push eax
push dword [ebx + 0x518]
call dword [sym.imp.USER32.dll_MoveWindow]
push 5
push dword [ebx + 0x518]
call esi
push dword [ebx + 0x518]
call dword [sym.imp.USER32.dll_SetFocus]
push 1
push dword [ebx + 0x518]
push 0x28
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
xor esi, esi
xor edi, edi
push esi
inc edi
push edi
lea ecx, [ebp - 0x120]
call fcn.00401524
push esi
push edi
lea ecx, [ebp - 0x174]
call fcn.0040bba0
push esi
push edi
lea ecx, [ebp - 0x1ac]
call fcn.0040bba0
push esi
push edi
lea ecx, [ebp - 0x190]
call fcn.0040bba0
push esi
push edi
lea ecx, [ebp - 0x158]
call fcn.0040bba0
call fcn.00474f44
ret 0xc