Function at 0x43de10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x1f8
push esi
mov esi, dword [ebp + 0x1c]
push edi
xor edi, edi
mov dword [esp + 0x20], ecx
cmp byte [ebp + 0x20], 0
mov dword [esp + 0x34], esi
mov byte [esp + 0x17], 0
mov byte [esp + 0x18], 0
mov byte [esp + 0x19], 0
je 0x43df72
mov eax, dword [ebp + 8]
mov dword [esp + 0x10], eax
cmp word [esi], di
je 0x43e03a
push 0x3a
push esi
call fcn.004ace17
mov ecx, eax
add esp, 8
mov dword [esp + 0x24], ecx
movzx eax, word [esi]
cmp eax, 0x20
je 0x43de72
cmp eax, 9
jne 0x43de77
add esi, 2
jmp 0x43de65
test ecx, ecx
je 0x43df26
mov eax, dword [esp + 0x34]
mov edi, ecx
sub edi, eax
sar edi, 1
cmp edi, 0x20
jae 0x43df24
push edi
push eax
lea eax, [esp + 0xe8]
push eax
call fcn.004b3100
add esp, 0xc
lea ecx, [esp + 0xe0]
xor eax, eax
xor edx, edx
mov word [esp + edi*2 + 0xe0], ax
push eax
push 1
push eax
call fcn.00491c20
add esp, 0xc
test eax, eax
je 0x43df24
mov eax, dword [esp + 0x24]
add eax, 2
mov dword [esp + 0x44], eax
mov edx, eax
movzx eax, word [edx]
mov ecx, eax
mov dword [esp + 0x24], ecx
cmp eax, 0x20
je 0x43dee7
cmp eax, 9
jne 0x43deec
add edx, 2
jmp 0x43ded4
lea ecx, [esp + 0xe0]
mov dword [esp + 0x34], edx
mov esi, edx
call fcn.00410b20
mov edi, eax
sub edi, 1
js 0x43df1b
cmp word [esp + 0x24], 0
mov eax, esi
cmovne eax, dword [esp + 0x44]
mov dword [esp + 0x34], eax
cmp edi, 0xa
jl 0x43df26
push dword [esp + 0x10]
jmp 0x43f125
xor edi, edi
push 0x4e25f0
push esi
call fcn.004af78f
add esp, 8
test eax, eax
jne 0x43df4a
mov edx, dword [esp + 0x1c]
mov byte [esp + 0x17], 1
mov dword [esp + 0x2c], edx
jmp 0x43e042
push str.Show
push esi
call fcn.004af78f
add esp, 8
test eax, eax
jne 0x43e03a
mov edx, dword [esp + 0x1c]
mov byte [esp + 0x18], 1
mov dword [esp + 0x2c], edx
jmp 0x43e042
mov esi, dword [ebp + 8]
push 0x3a
push esi
call fcn.004ace17
add esp, 8
mov dword [esp + 0x10], eax
test eax, eax
je 0x43dfc0
mov ecx, esi
call fcn.00410ac0
test al, al
je 0x43dfa2
push 0x10
push 0
push esi
call fcn.004b2a5a
add esp, 0xc
jmp 0x43dfab
push esi
call fcn.004b2533
add esp, 4
lea edi, [eax - 1]
cmp edi, 9
ja 0x43f124
mov esi, dword [esp + 0x10]
add esi, 2
nop
movzx eax, word [esi]
cmp eax, 0x20
je 0x43dfbb
cmp eax, 9
je 0x43dfbb
push 0x4e25f0
push esi
mov dword [esp + 0x18], esi
call fcn.004af78f
add esp, 8
test eax, eax
jne 0x43dff2
mov edx, dword [esp + 0x1c]
mov byte [esp + 0x17], 1
mov dword [esp + 0x2c], edx
jmp 0x43e042
push str.Show
push esi
call fcn.004af78f
add esp, 8
test eax, eax
jne 0x43e013
mov edx, dword [esp + 0x1c]
mov byte [esp + 0x18], 1
mov dword [esp + 0x2c], edx
jmp 0x43e042
push 0
push 1
push 0
mov edx, 1
mov ecx, esi
call fcn.00491c20
add esp, 0xc
test eax, eax
je 0x43e03a
mov ecx, esi
call fcn.00410b20
mov byte [esp + 0x19], 1
jmp 0x43e03e
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x2c], eax
mov dl, byte [ebp + 0x20]
mov eax, 0x4f7be0
test dl, dl
mov ecx, 0x4f7ed8
cmovne ecx, eax
imul edi, edi, 0x4c
add edi, ecx
mov dword [esp + 0x9c], edi
mov eax, dword [edi + 0x20]
test eax, eax
je 0x43e078
push eax
call dword [sym.imp.USER32.dll_IsWindow]
mov dl, byte [ebp + 0x20]
test eax, eax
jne 0x43e078
mov dword [edi + 0x20], eax
cmp byte [esp + 0x18], 0
je 0x43e0b1
mov eax, dword [edi + 0x20]
test eax, eax
je 0x43f10d
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x43f10d
push 4
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x1c
cmp byte [esp + 0x17], 0
jne 0x43e161
cmp dword [edi + 0x20], 0
je 0x43e161
mov eax, dword [esp + 0x34]
cmp word [eax], 0
jne 0x43e161
mov al, byte [esp + 0x19]
test al, al
jne 0x43e0e6
mov esi, dword [esp + 0x10]
cmp word [esi], 0
jne 0x43e165
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
test dl, dl
jne 0x43e112
test al, al
je 0x43e112
mov ecx, dword [esp + 0x2c]
cmp dword [edi + 8], ecx
je 0x43e112
mov eax, dword [edi + 0x2c]
mov dword [edi + 8], ecx
test eax, eax
je 0x43e112
push 0
push ecx
push 0x402
push eax
call esi
mov eax, dword [ebp + 0x10]
cmp word [eax], 0
je 0x43e12a
mov ecx, dword [edi + 0x30]
test ecx, ecx
je 0x43e12a
push eax
push 0
push 0xc
push ecx
call esi
mov eax, dword [ebp + 0xc]
cmp word [eax], 0
je 0x43e13d
push eax
push 0
push 0xc
push dword [edi + 0x34]
call esi
mov eax, dword [ebp + 0x14]
cmp word [eax], 0
je 0x43f10d
push eax
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x1c
mov esi, dword [esp + 0x10]
mov eax, dword [edi + 0x20]
test eax, eax
je 0x43e173
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, dword [edi + 0x38]
mov ecx, dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [esp + 0x48], ecx
test eax, eax
je 0x43e18b
push eax
call ecx
mov ecx, dword [esp + 0x48]
mov eax, dword [edi + 0x3c]
test eax, eax
je 0x43e195
push eax
call ecx
mov eax, dword [edi + 0x40]
test eax, eax
je 0x43e1a1
push eax
call dword [esp + 0x4c]
mov eax, dword [edi + 0x28]
test eax, eax
je 0x43e1bb
cmp dword [edi + 0x24], 0
push eax
jne 0x43e1b5
call dword [esp + 0x4c]
jmp 0x43e1bb
call dword [sym.imp.USER32.dll_DestroyIcon]
push 0x4c
push 0
push edi
call fcn.004ad280
add esp, 0xc
cmp byte [esp + 0x17], 0
jne 0x43f10d
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x64], eax
cmp word [eax], 0
jne 0x43e1fb
mov eax, dword [0x4fa558]
mov dword [esp + 0x64], eax
test eax, eax
je 0x43e1f3
cmp word [eax], 0
jne 0x43e1fb
mov dword [esp + 0x64], 0x4cd2cc
mov dl, byte [ebp + 0x20]
xor eax, eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x1c], eax
mov eax, dword [sym.imp.KERNEL32.dll_MulDiv]
mov byte [esp + 0x17], 1
mov byte [esp + 0x18], 1
mov byte [esp + 0x1a], 1
mov byte [esp + 0x1b], 0
mov dword [esp + 0x28], 0x88c00000
mov dword [esp + 0x58], 8
mov dword [esp + 0x54], SysReAllocString
mov dword [esp + 0x20], SysReAllocString
mov dword [esp + 0x44], 0xff000000
mov dword [edi + 0x44], 0xff000000
mov dword [edi + 0x48], 0xff000000
mov dword [edi + 4], SysReAllocString
mov dword [esp + 0x3c], eax
test dl, dl
je 0x43e27f
mov eax, SysReAllocString
mov ecx, eax
jmp 0x43e298
push 0x60
push dword [0x4f9a40]
push 0x12c
call eax
mov dl, byte [ebp + 0x20]
mov ecx, eax
mov eax, 0x14
mov dword [edi], ecx
mov dword [edi + 0x1c], eax
mov eax, dword [ebp + 0x10]
mov dword [edi + 0x18], SysReAllocString
cmp word [eax], 0
mov eax, dword [ebp + 0xc]
jne 0x43e2c0
cmp word [eax], 0
jne 0x43e2c0
test dl, dl
je 0x43e2c0
xor eax, eax
xor ecx, ecx
jmp 0x43e2ca
mov eax, 0xa
mov ecx, 5
mov dword [edi + 0x10], ecx
mov dword [edi + 0xc], eax
movzx eax, word [esi]
test ax, ax
je 0x43e82d
mov ecx, eax
nop
movzx esi, cx
test esi, 0xffffff80
je 0x43e2ef
xor eax, eax
jmp 0x43e2fa
push 2
push esi
call fcn.004b15e4
add esp, 8
mov ecx, esi
and ecx, 0xffffffdf
test eax, eax
cmove ecx, esi
add ecx, 0xffffffbf
cmp ecx, 0x19
ja case.0x43e317.68
movzx eax, byte [ecx + 0x43f178]
jmp dword [eax*4 + 0x43f140]
and dword [esp + 0x58], 0xfffffff7
jmp case.0x43e317.68
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x28]
and edx, 0xff3fffff
mov dword [esp + 0x28], edx
movzx ecx, word [eax + 2]
cmp ecx, 0x31
jne 0x43e352
or edx, 0x800000
mov dword [esp + 0x28], edx
jmp 0x43e818
cmp ecx, 0x32
jne 0x43e818
or edx, 0x400000
mov dword [esp + 0x28], edx
jmp 0x43e818
mov esi, dword [esp + 0x10]
add esi, 2
movzx eax, word [esi]
mov ecx, eax
test ax, ax
je case.0x43e317.68
mov dword [esp + 0x10], esi
call fcn.0040ba80
movzx eax, ax
cmp eax, 0x42
je 0x43e3b4
cmp eax, 0x54
je 0x43e3b4
cmp eax, 0x57
je 0x43e3b4
mov eax, esi
cmp word [eax], 0x30
setne byte [esp + 0x1a]
cmp word [eax + 2], 0x30
setne byte [esp + 0x18]
jmp 0x43e517
push 0x1f
lea eax, [esi + 2]
push eax
lea eax, [esp + 0xe8]
push eax
call fcn.004b3100
xor eax, eax
add esp, 0xc
mov word [esp + 0x11e], ax
lea eax, [esp + 0xe0]
mov dword [esp + 0x38], eax
mov ax, word [esp + 0xe0]
test ax, ax
je 0x43e43b
movzx esi, ax
nop
mov ecx, 0x4e2ac4
mov edx, 0x20
nop word [eax + eax]
cmp si, dx
je 0x43e42a
movzx eax, word [ecx + 2]
add ecx, 2
mov edx, eax
test ax, ax
jne 0x43e400
mov eax, dword [esp + 0x38]
add eax, 2
mov dword [esp + 0x38], eax
movzx eax, word [eax]
mov esi, eax
test ax, ax
jne 0x43e3f0
jmp 0x43e437
mov eax, dword [esp + 0x38]
test eax, eax
je 0x43e437
xor ecx, ecx
mov word [eax], cx
mov esi, dword [esp + 0x10]
lea ecx, [esp + 0xe0]
call fcn.00492fb0
mov dword [esp + 0x30], eax
cmp eax, 0xffffffff
jne 0x43e4af
lea ecx, [esp + 0xe0]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43e460
sub ecx, edx
sar ecx, 1
cmp ecx, 6
jbe 0x43e47e
xor eax, eax
mov word [esp + 0xec], ax
push 0x10
lea eax, [esp + 0xe4]
push 0
push eax
call fcn.004b2a5a
movzx edx, al
add esp, 0xc
movzx ecx, ax
shl edx, 8
shr ecx, 8
or edx, ecx
shr eax, 0x10
shl edx, 8
movzx eax, al
or edx, eax
mov dword [esp + 0x30], edx
mov cx, word [esi]
call fcn.0040ba80
movzx eax, ax
cmp eax, 0x42
je 0x43e4e5
cmp eax, 0x54
je 0x43e4dc
cmp eax, 0x57
jne 0x43e4ed
mov eax, dword [esp + 0x30]
push eax
mov dword [edi + 0x44], eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [edi + 0x40], eax
jmp 0x43e4ed
mov eax, dword [esp + 0x30]
mov dword [edi + 0x48], eax
jmp 0x43e4ed
mov eax, dword [esp + 0x30]
mov dword [esp + 0x44], eax
lea ecx, [esp + 0xe0]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43e4f7
mov eax, dword [esp + 0x10]
sub ecx, edx
sar ecx, 1
lea eax, [eax + ecx*2]
mov dword [esp + 0x10], eax
jmp 0x43e517
mov eax, dword [esp + 0x10]
lea edx, [eax + 2]
movzx eax, word [edx]
mov ecx, eax
test ax, ax
je case.0x43e317.68
mov dword [esp + 0x10], edx
call fcn.0040ba80
movzx eax, ax
cmp eax, 0x4d
je 0x43e571
cmp eax, 0x53
mov eax, dword [esp + 0x10]
jne 0x43e818
add eax, 2
push eax
call fcn.004b2533
mov edx, eax
add esp, 4
mov eax, dword [esp + 0x10]
mov dword [esp + 0x50], edx
test edx, edx
jns 0x43e818
mov dword [esp + 0x50], 0
jmp 0x43e818
mov eax, dword [esp + 0x10]
add eax, 2
push eax
call fcn.004b2533
mov edx, eax
add esp, 4
mov eax, dword [esp + 0x10]
mov dword [esp + 0x4c], edx
test edx, edx
jns 0x43e818
mov dword [esp + 0x4c], 0
jmp 0x43e818
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x10]
and edx, 0xf7ffffff
mov ecx, edx
or ecx, 0x40000
movzx eax, word [eax + 2]
cmp eax, 0x31
cmovne ecx, edx
mov edx, ecx
or edx, 0xf0000
cmp eax, 0x32
cmovne edx, ecx
mov dword [esp + 0x28], edx
jmp case.0x43e317.68
mov eax, dword [esp + 0x10]
add eax, 2
push eax
call fcn.004b2533
mov dword [esp + 0x30], eax
mov byte [esp + 0x1d], 1
jmp 0x43e811
mov eax, dword [esp + 0x10]
cmp word [eax + 2], 0
je 0x43e818
add eax, 2
mov ecx, eax
mov dword [esp + 0x10], eax
call fcn.00410b20
mov ecx, dword [esp + 0x10]
add ecx, 2
mov dword [esp + 0x5c], eax
push 0x2d
push ecx
call fcn.004ace17
mov ecx, eax
add esp, 8
test ecx, ecx
je case.0x43e317.68
cmp word [ecx + 2], 0
je 0x43e818
lea eax, [ecx + 2]
mov ecx, eax
mov dword [esp + 0x10], eax
call fcn.00410b20
mov dword [esp + 0x68], eax
jmp case.0x43e317.68
mov byte [esp + 0x17], 0
jmp case.0x43e317.68
mov edx, dword [esp + 0x10]
add edx, 2
movzx eax, word [edx]
mov ecx, eax
test ax, ax
je case.0x43e317.68
mov dword [esp + 0x10], edx
call fcn.0040ba80
movzx eax, ax
cmp eax, 0x4d
je 0x43e6e1
cmp eax, 0x53
je 0x43e6b2
push dword [esp + 0x10]
call fcn.004b2533
add esp, 4
mov dword [edi], eax
cmp byte [ebp + 0x20], 0
jne case.0x43e317.68
push 0x60
push dword [0x4f9a40]
push eax
call dword [esp + 0x48]
mov dword [edi], eax
jmp case.0x43e317.68
mov eax, dword [esp + 0x10]
add eax, 2
push eax
call fcn.004b2533
mov edx, eax
add esp, 4
mov eax, dword [esp + 0x10]
mov dword [esp + 0x1c], edx
test edx, edx
jns 0x43e818
mov dword [esp + 0x1c], 0
jmp 0x43e818
mov eax, dword [esp + 0x10]
add eax, 2
push eax
call fcn.004b2533
mov edx, eax
add esp, 4
mov eax, dword [esp + 0x10]
mov dword [esp + 0x40], edx
test edx, edx
jns 0x43e818
mov dword [esp + 0x40], 0
jmp 0x43e818
push 4
push str.Hide
push dword [esp + 0x18]
call fcn.004af905
add esp, 0xc
test eax, eax
mov eax, dword [esp + 0x10]
jne 0x43e738
mov byte [esp + 0x1b], 1
add eax, 6
jmp 0x43e818
add eax, 2
push eax
call fcn.004b2533
add esp, 4
mov dword [edi + 4], eax
cmp byte [ebp + 0x20], 0
jne case.0x43e317.68
push 0x60
push dword [0x4f9a40]
push eax
call dword [esp + 0x48]
mov dword [edi + 4], eax
jmp case.0x43e317.68
mov eax, dword [esp + 0x10]
add eax, 2
push eax
call fcn.004b2533
mov dword [esp + 0x58], eax
jmp 0x43e811
mov eax, dword [esp + 0x10]
add eax, 2
push eax
call fcn.004b2533
mov dword [esp + 0x24], eax
jmp 0x43e811
mov edx, dword [esp + 0x10]
add edx, 2
movzx eax, word [edx]
mov ecx, eax
test ax, ax
je case.0x43e317.68
mov dword [esp + 0x10], edx
call fcn.0040ba80
movzx eax, ax
add eax, 0xffffffbe
cmp eax, 0x17
ja case.0x43e317.68
movzx eax, byte [eax + 0x43f1a8]
jmp dword [eax*4 + 0x43f194]
mov eax, dword [esp + 0x10]
add eax, 2
push eax
call fcn.004b2533
mov dword [edi + 0x1c], eax
jmp 0x43e811
cmp byte [ebp + 0x20], 0
mov eax, dword [esp + 0x10]
je 0x43e818
add eax, 2
push eax
call fcn.004b2533
mov dword [edi + 0x18], eax
jmp 0x43e811
mov eax, dword [esp + 0x10]
add eax, 2
push eax
call fcn.004b2533
mov dword [edi + 0xc], eax
jmp 0x43e811
mov eax, dword [esp + 0x10]
add eax, 2
push eax
call fcn.004b2533
mov dword [edi + 0x10], eax
add esp, 4
mov eax, dword [esp + 0x10]
add eax, 2
mov dword [esp + 0x10], eax
movzx eax, word [eax]
mov ecx, eax
test ax, ax
jne 0x43e2e0
push 0
push 0
push 0
push str.DISPLAY
call dword [sym.imp.GDI32.dll_CreateDCW]
mov esi, eax
push 0x5a
push esi
mov dword [esp + 0x18], esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x11
mov dword [esp + 0x34], eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push esi
mov dword [esp + 0x40], eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x138]
push eax
push 0x40
push esi
call dword [sym.imp.GDI32.dll_GetTextFaceW]
lea eax, [esp + 0x1c4]
push eax
push esi
call dword [sym.imp.GDI32.dll_GetTextMetricsW]
mov eax, dword [esp + 0x1c4]
mov dword [esp + 0x24], eax
mov eax, dword [edi + 0x1c]
cmp eax, 1
jge 0x43e8b3
cmp eax, 0x80000000
je 0x43e8b3
mov ecx, dword [edi + 0x18]
cmp ecx, 1
jge 0x43e8b3
cmp ecx, 0x80000000
jne 0x43e8bd
test eax, eax
je 0x43e8bd
cmp dword [edi + 0x18], 0
jne 0x43e8cd
mov dword [edi + 0x18], 0
xor eax, eax
mov dword [edi + 0x1c], 0
cmp byte [ebp + 0x20], 0
je 0x43ea84
mov ecx, dword [esp + 0x34]
cmp word [ecx], 0
je 0x43ea84
test eax, eax
je 0x43ea84
mov byte [esp + 0x60], 0
mov ecx, dword [esp + 0x34]
lea eax, [edi + 0x24]
push 0
push 0
push dword [esp + 0x68]
push 0
push eax
xor eax, eax
cmp dword [edi + 0x1c], 0x80000000
cmovne eax, dword [edi + 0x1c]
xor edx, edx
cmp dword [edi + 0x18], 0x80000000
push eax
cmovne edx, dword [edi + 0x18]
call fcn.004933c0
add esp, 0x18
mov dword [edi + 0x28], eax
test eax, eax
jne 0x43e93f
cmp byte [esp + 0x60], al
jne 0x43ea84
mov byte [esp + 0x60], 1
jmp 0x43e8f2
cmp dword [edi + 0x1c], 0
jl 0x43e94f
cmp dword [edi + 0x18], 0
jge 0x43ea84
cmp dword [edi + 0x24], 0
je 0x43e973
lea ecx, [esp + 0x124]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetIconInfo]
test eax, eax
je 0x43ea84
mov eax, dword [esp + 0x134]
test eax, eax
je 0x43ea84
lea ecx, [esp + 0xc8]
push ecx
push 0x18
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
test eax, eax
je 0x43ea68
mov eax, dword [edi + 0x1c]
cmp eax, 0xffffffff
jne 0x43e9e8
mov ecx, dword [edi + 0x18]
test ecx, ecx
jle 0x43e9e8
mov eax, dword [esp + 0xcc]
test eax, eax
je 0x43ea55
movd xmm1, dword [esp + 0xd0]
movd xmm0, eax
cvtdq2pd xmm1, xmm1
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mulsd xmm1, xmm0
addsd xmm1, qword [0x4ee898]
cvttsd2si eax, xmm1
mov dword [edi + 0x1c], eax
jmp 0x43ea55
mov ecx, dword [edi + 0x18]
cmp ecx, 0xffffffff
jne 0x43ea32
test eax, eax
jle 0x43ea32
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x43ea55
movd xmm1, dword [esp + 0xcc]
cvtdq2pd xmm1, xmm1
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm1, xmm0
addsd xmm1, qword [0x4ee898]
cvttsd2si eax, xmm1
jmp 0x43ea52
cmp eax, 0x80000000
jne 0x43ea43
mov eax, dword [esp + 0xd0]
mov dword [edi + 0x1c], eax
cmp ecx, 0x80000000
jne 0x43ea55
mov eax, dword [esp + 0xcc]
mov dword [edi + 0x18], eax
cmp dword [edi], 0x80000000
jne 0x43ea68
mov ecx, dword [edi + 0xc]
mov eax, dword [edi + 0x18]
lea eax, [eax + ecx*2]
mov dword [edi], eax
cmp dword [edi + 0x24], 1
jne 0x43ea84
push dword [esp + 0x134]
mov esi, dword [esp + 0x4c]
call esi
push dword [esp + 0x130]
call esi
mov ecx, dword [edi]
cmp ecx, 0x80000000
jne 0x43eaa3
push 0x60
push dword [0x4f9a40]
push 0x12c
call dword [esp + 0x48]
mov ecx, eax
mov dword [edi], ecx
cmp dword [edi + 0x1c], 0x80000000
jne 0x43eab3
mov dword [edi + 0x1c], 0
mov eax, dword [edi + 4]
mov edx, 0x1f4
cmp eax, 0x80000000
cmove eax, edx
push eax
push ecx
push 0
push 0
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.USER32.dll_SetRect]
mov eax, dword [ebp + 0x10]
mov esi, dword [sym.imp.GDI32.dll_CreateFontW]
cmp word [eax], 0
je 0x43ec0f
movd xmm0, dword [esp + 0x24]
mov eax, dword [esp + 0x4c]
cvtdq2pd xmm0, xmm0
test eax, eax
je 0x43eb0d
push 0x48
push dword [esp + 0x34]
push eax
call dword [esp + 0x48]
mov ecx, eax
neg ecx
jmp 0x43eb19
mulsd xmm0, qword [0x4ee8b8]
cvttsd2si ecx, xmm0
mov eax, dword [esp + 0x40]
mov esi, 0x258
mov edx, dword [ebp + 0x18]
test eax, eax
cmovne esi, eax
lea eax, [esp + 0x138]
cmp word [edx], 0
cmovne eax, edx
push eax
push 0
push 2
push 0
push 4
push 1
push 0
push 0
push 0
push esi
push 0
push 0
push 0
push ecx
call dword [sym.imp.GDI32.dll_CreateFontW]
mov dword [edi + 0x38], eax
test eax, eax
jne 0x43ebb8
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x43eb75
push 0x48
push dword [esp + 0x34]
push eax
call dword [esp + 0x48]
neg eax
jmp 0x43eb8b
movd xmm0, dword [esp + 0x24]
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x4ee8b8]
cvttsd2si eax, xmm0
lea ecx, [esp + 0x138]
push ecx
push 0
push 2
push 0
push 4
push 1
push 0
push 0
push 0
push esi
mov esi, dword [sym.imp.GDI32.dll_CreateFontW]
push 0
push 0
push 0
push eax
call esi
mov dword [edi + 0x38], eax
jmp 0x43ebbe
mov esi, dword [sym.imp.GDI32.dll_CreateFontW]
mov eax, dword [edi + 0x38]
test eax, eax
mov ecx, dword [esp + 0x38]
cmovne ecx, eax
push ecx
push dword [esp + 0x14]
call dword [sym.imp.GDI32.dll_SelectObject]
movaps xmm0, xmmword [esp + 0x80]
mov ecx, dword [edi + 0xc]
movd eax, xmm0
movaps xmmword [esp + 0x70], xmm0
sub dword [esp + 0x78], ecx
add eax, ecx
push 0x450
mov dword [esp + 0x74], eax
lea eax, [esp + 0x74]
push eax
push 0xffffffffffffffff
push dword [ebp + 0x10]
push dword [esp + 0x20]
call dword [sym.imp.USER32.dll_DrawTextW]
mov dword [edi + 0x14], eax
mov edx, dword [esp + 0x50]
mov ecx, dword [ebp + 0x18]
test edx, edx
jne 0x43ec28
cmp dword [esp + 0x1c], edx
jne 0x43ec28
test ecx, ecx
je 0x43ecaa
cmp word [ecx], 0
lea eax, [esp + 0x138]
cmovne eax, ecx
push eax
push 0
push 2
push 0
push 4
push 1
push 0
push 0
push 0
push dword [esp + 0x40]
push 0
push 0
push 0
push 0x48
push dword [esp + 0x68]
push edx
call dword [esp + 0x7c]
neg eax
push eax
call esi
mov dword [edi + 0x3c], eax
test eax, eax
jne 0x43ecaa
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x1c]
test eax, eax
jne 0x43ec78
test ecx, ecx
je 0x43ecaa
lea edx, [esp + 0x138]
push edx
push 0
push 2
push 0
push 4
push 1
push 0
push 0
push 0
push ecx
push 0
push 0
push 0
push 0x48
push dword [esp + 0x68]
push eax
call dword [esp + 0x7c]
neg eax
push eax
call esi
mov dword [edi + 0x3c], eax
mov eax, dword [edi + 0x14]
test eax, eax
mov ecx, dword [edi + 0x10]
mov esi, ecx
mov dword [esp + 0x24], 0
lea edx, [eax + ecx*2]
mov eax, dword [edi + 0x1c]
cmove edx, ecx
test eax, eax
mov dword [esp + 0x40], edx
cmove esi, dword [esp + 0x24]
add esi, edx
add esi, eax
cmp dword [edi + 4], 0x80000000
mov dword [esp + 0x24], esi
jne 0x43ed4d
mov eax, dword [ebp + 0xc]
cmp word [eax], 0
je 0x43ed3d
mov eax, dword [edi + 0x3c]
test eax, eax
mov ecx, dword [esp + 0x38]
cmovne ecx, eax
push ecx
push dword [esp + 0x14]
call dword [sym.imp.GDI32.dll_SelectObject]
movaps xmm0, xmmword [esp + 0x80]
mov ecx, dword [edi + 0xc]
movd eax, xmm0
movaps xmmword [esp + 0x70], xmm0
sub dword [esp + 0x78], ecx
add eax, ecx
push 0x410
mov dword [esp + 0x74], eax
lea eax, [esp + 0x74]
push eax
push 0xffffffffffffffff
push dword [ebp + 0xc]
push dword [esp + 0x20]
call dword [sym.imp.USER32.dll_DrawTextW]
mov ecx, dword [edi + 0x10]
jmp 0x43ed3f
xor eax, eax
add eax, ecx
add eax, esi
mov dword [edi + 4], eax
mov dword [esp + 0x8c], eax
push dword [esp + 0x6c]
mov esi, dword [esp + 0x14]
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
test eax, eax
je 0x43f11a
push dword [esp + 0x58]
movaps xmm0, xmmword [esp + 0x84]
lea eax, [esp + 0xb4]
push 0
push dword [esp + 0x30]
movaps xmmword [esp + 0xbc], xmm0
push eax
call dword [sym.imp.USER32.dll_AdjustWindowRectEx]
mov esi, dword [esp + 0xb8]
lea eax, [esp + 0xa0]
mov edi, dword [esp + 0xbc]
sub esi, dword [esp + 0xb0]
sub edi, dword [esp + 0xb4]
push 0
push eax
push 0
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov eax, dword [esp + 0xa8]
sub eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xac]
mov edx, eax
sub ecx, dword [esp + 0xa4]
cmp esi, eax
cmovle edx, esi
cmp edi, ecx
mov esi, ecx
mov dword [esp + 0x6c], edx
cmovle esi, edi
cmp dword [esp + 0x54], 0x80000000
jne 0x43ee0d
sub eax, edx
cdq
sub eax, edx
sar eax, 1
add eax, dword [esp + 0xa0]
mov dword [esp + 0x54], eax
mov edi, dword [esp + 0x20]
cmp edi, 0x80000000
jne 0x43ee2b
sub ecx, esi
mov eax, ecx
cdq
sub eax, edx
mov edi, eax
sar edi, 1
add edi, dword [esp + 0xa4]
mov ecx, dword [0x4f48cc]
lea ecx, [ecx + 0x4c]
call fcn.0046e480
test eax, eax
je 0x43ee4a
mov eax, dword [0x4f48cc]
mov eax, dword [eax + 0x4c]
mov ecx, dword [eax + 4]
jmp 0x43ee4c
xor ecx, ecx
cmp byte [esp + 0x17], 0
je 0x43ee5f
mov eax, dword [0x4f78ec]
test ecx, ecx
cmovne eax, ecx
jmp 0x43ee61
xor eax, eax
push 0
push dword [0x4f7950]
push 0
push eax
push esi
push dword [esp + 0x80]
push edi
push dword [esp + 0x70]
push dword [esp + 0x48]
push dword [esp + 0x88]
push str.AutoHotkey2
push dword [esp + 0x84]
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov esi, dword [esp + 0x9c]
mov dword [esi + 0x20], eax
test eax, eax
je 0x43f11a
mov edx, dword [esp + 0x28]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
and edx, 0x80000
jne 0x43eec1
cmp byte [esp + 0x17], 0
jne 0x43ef11
mov ecx, dword [0x4fa5ac]
mov dword [esp + 0x20], ecx
test ecx, ecx
je 0x43eed7
mov ecx, dword [0x4fa5b0]
jmp 0x43eee7
mov ecx, dword [0x4f7ab8]
mov dword [esp + 0x20], ecx
mov ecx, dword [0x4f7abc]
test edx, edx
je 0x43eef9
push ecx
push 0
push 0x80
push eax
call edi
mov eax, dword [esi + 0x20]
cmp byte [esp + 0x17], 0
jne 0x43ef11
push dword [esp + 0x20]
push 1
push 0x80
push eax
call edi
mov eax, dword [esi + 0x20]
lea ecx, [esp + 0x80]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [esi + 0xc]
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x88]
mov dword [esi + 4], eax
lea eax, [edx + edx]
mov dword [esi], ecx
sub ecx, eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x20], ecx
cmp word [eax], 0
je 0x43ef9a
push 0
push dword [0x4f7950]
xor eax, eax
cmp byte [esp + 0x20], al
push 0
push dword [esi + 0x20]
setne al
push dword [esi + 0x14]
or eax, 0x50000080
push ecx
push dword [esi + 0x10]
push edx
push eax
push dword [ebp + 0x10]
push str.static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov ecx, dword [esi + 0x38]
test ecx, ecx
mov edx, dword [esp + 0x38]
push 1
cmovne edx, ecx
mov dword [esi + 0x30], eax
push edx
push 0x30
push eax
call edi
mov edx, dword [esi + 0xc]
mov ecx, dword [esp + 0x20]
cmp byte [ebp + 0x20], 0
jne 0x43f097
mov eax, dword [esi + 0x1c]
test eax, eax
jle 0x43f097
push 0
push 0
push 0
push dword [esi + 0x20]
push eax
push ecx
push dword [esp + 0x58]
push edx
push 0x50000001
push 0
push str.msctls_progress32
push 0x200
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov edx, eax
mov dword [esi + 0x2c], edx
test edx, edx
je 0x43f097
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x68]
test ecx, ecx
jne 0x43eff3
test eax, eax
je 0x43f02f
cmp ecx, 0xffffffff
jle 0x43f025
cmp ecx, 0x10000
jge 0x43f025
cmp eax, 0xffffffff
jle 0x43f025
cmp eax, 0x10000
jge 0x43f025
movzx ecx, ax
mov eax, dword [esp + 0x5c]
shl ecx, 0x10
movzx eax, ax
or ecx, eax
push ecx
push 0
push 0x401
jmp 0x43f02c
push eax
push ecx
push 0x406
push edx
call edi
cmp dword [esp + 0x44], 0xff000000
je 0x43f055
push ecx
mov ecx, dword [esi + 0x2c]
call fcn.00494060
add esp, 4
push dword [esp + 0x44]
push 0
push 0x409
push dword [esi + 0x2c]
call edi
mov eax, dword [esi + 0x44]
cmp eax, 0xff000000
je 0x43f06c
push eax
push 0
push 0x2001
push dword [esi + 0x2c]
call edi
cmp byte [esp + 0x19], 0
mov eax, dword [esi + 0x2c]
push 0
je 0x43f08a
push dword [esp + 0x30]
push 0x402
push eax
call edi
mov eax, dword [esp + 0x2c]
jmp 0x43f094
push 0
push 0x408
push eax
call edi
mov dword [esi + 8], eax
mov eax, dword [esp + 0x8c]
sub eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x24]
sub eax, ecx
push 0
push dword [0x4f7950]
push 0
push dword [esi + 0x20]
push eax
push dword [esp + 0x34]
xor eax, eax
cmp byte [esp + 0x32], al
push ecx
push dword [esi + 0xc]
setne al
or eax, 0x50000080
push eax
push dword [ebp + 0xc]
push str.static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [esi + 0x34], eax
test eax, eax
je 0x43f0fb
mov ecx, dword [esi + 0x3c]
test ecx, ecx
mov edx, dword [esp + 0x38]
push 1
cmovne edx, ecx
push edx
push 0x30
push eax
call edi
cmp byte [esp + 0x1b], 0
jne 0x43f10d
push 4
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x1c
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x1c
push esi
mov ecx, dword [esp + 0x24]
push 0
push str.Max_window_number_is_10.
call fcn.0043bc60
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x1c