Function at 0x402d6d
Capabilities:
Find taskbar
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x8014
call fcn.00417db0
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push edi
mov edi, dword [ebp + 0xc]
mov esi, ecx
push 1
mov ecx, ebx
mov eax, dword [edi]
mov dword [ebp - 4], eax
call fcn.00401aa7
push 0
mov ecx, esi
call fcn.00402b3b
mov eax, dword [ebp + 8]
cmp eax, 0xc2
ja case.default.0x402daa
jmp dword [eax*4 + 0x40445e]
push edi
mov ecx, esi
call fcn.00409887
jmp 0x4033da
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
test eax, eax
setne al
mov byte [0x4307be], al
xor eax, eax
jmp 0x4033da
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018c0
call fcn.00417c2c
mov dword [ebp - 8], eax
mov dword [ebp - 4], edx
fild qword [ebp - 8]
push ecx
push ecx
mov ecx, ebx
fstp qword [esp]
call fcn.00401ad1
jmp 0x402dd8
push 0
mov ecx, edi
call fcn.00402301
push eax
mov ecx, ebx
call fcn.004019b3
mov ecx, ebx
call fcn.00401f41
jmp 0x402dd8
push 0
mov ecx, edi
call fcn.00402301
push eax
mov ecx, ebx
call fcn.004019b3
mov ecx, ebx
call fcn.00401f61
jmp 0x402dd8
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.00401f3a
movzx eax, al
push eax
mov ecx, ebx
call fcn.00401aa7
jmp 0x402dd8
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.00401efd
jmp 0x402e4f
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.00401ece
jmp 0x402e4f
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.00401f2c
jmp 0x402e4f
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.00401f33
jmp 0x402e4f
push 0
mov ecx, edi
call fcn.00402301
cmp dword [eax], 1
jne 0x404443
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
and byte [ebp + 0xf], 0
mov byte [ebp + 0xe], al
lea eax, [ebp + 0xe]
push eax
mov ecx, ebx
call fcn.00401af4
jmp 0x402dd8
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
movzx eax, byte [eax]
jmp 0x402e52
push 1
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
push 0
mov ecx, edi
mov esi, eax
call fcn.00402301
mov ecx, eax
call fcn.004018d3
and esi, eax
jmp 0x40432d
push 1
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
push 0
mov ecx, edi
mov esi, eax
call fcn.00402301
mov ecx, eax
call fcn.004018d3
or esi, eax
jmp 0x40432d
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
not eax
jmp 0x402e52
push 1
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
push 0
mov ecx, edi
mov esi, eax
call fcn.00402301
mov ecx, eax
call fcn.004018d3
xor esi, eax
jmp 0x40432d
push 1
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
test eax, eax
push 1
mov ecx, edi
jl 0x402fc9
call fcn.00402301
mov ecx, eax
call fcn.004018d3
push 0
mov ecx, edi
mov esi, eax
call fcn.00402301
mov ecx, eax
call fcn.004018d3
mov ecx, esi
sar eax, cl
jmp 0x402e52
call fcn.00402301
mov ecx, eax
call fcn.004018d3
mov esi, eax
push 0
mov ecx, edi
neg esi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
mov ecx, esi
shl eax, cl
jmp 0x402e52
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00409280
jmp 0x4033da
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
push eax
mov ecx, esi
call fcn.00402b3b
jmp 0x402dd8
cmp dword [ebp - 4], 2
jne 0x403059
push 1
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
test eax, eax
push 0
push 0
mov ecx, edi
je 0x40305f
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
mov ecx, esi
call fcn.00413895
jmp 0x402dd8
push 0
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
mov ecx, esi
call fcn.0041377a
jmp 0x402dd8
cmp dword [ebp - 4], 4
jne 0x4030dc
push 3
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
imul eax, eax, 0x3e8
push eax
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
or eax, 0x10000
mov ecx, edi
push eax
push 1
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
push 2
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
push 0
call fcn.00414fc8
add esp, 0x14
jmp 0x402e52
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
or eax, 0x10000
mov ecx, edi
push eax
push 1
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
push 2
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x402e52
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.0040fd62
mov ecx, esi
call fcn.0041012e
jmp 0x404386
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.0040fd62
mov ecx, esi
call fcn.0041010f
jmp 0x404386
xor ebx, ebx
mov ecx, edi
push ebx
call fcn.00402301
mov ecx, eax
call fcn.004018d3
test eax, eax
jg 0x403170
push ebx
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x402dd8
call dword [sym.imp.WINMM.dll_timeGetTime]
push ebx
mov ecx, edi
mov dword [esi + 0x17ec], eax
call fcn.00402301
mov ecx, eax
call fcn.004018d3
push ebx
mov ecx, esi
mov dword [esi + 0x17e0], eax
mov dword [esi + 0x54], 2
call fcn.00402b48
jmp 0x402dd8
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.0040fdb3
lea edi, [esi + 0x1070]
push 1
mov ecx, edi
call fcn.00401aa7
mov dword [esi + 0x54], 5
push 0
mov ecx, esi
call fcn.00402b48
push edi
mov ecx, ebx
call fcn.004019b3
jmp 0x402dd8
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.0040fdb3
lea edi, [esi + 0x1070]
push 1
mov ecx, edi
call fcn.00401aa7
mov dword [esi + 0x54], 6
jmp 0x4031c6
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.0040fdb3
lea edi, [esi + 0x1070]
push 1
mov ecx, edi
call fcn.00401aa7
mov dword [esi + 0x54], 3
jmp 0x4031c6
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.0040fdb3
lea edi, [esi + 0x1070]
push 1
mov ecx, edi
call fcn.00401aa7
mov dword [esi + 0x54], 4
jmp 0x4031c6
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.0040e0a3
jmp 0x4033da
push dword [ebp - 4]
mov ecx, esi
push edi
push 0x11
call fcn.0040e1b7
jmp 0x4033da
push dword [ebp - 4]
mov ecx, esi
push edi
push 0x12
call fcn.0040e1b7
test eax, eax
jne case.default.0x402daa
cmp dword [esi + 0x10ec], eax
jne 0x402dd8
push eax
mov ecx, esi
mov dword [esi + 0x54], 7
call fcn.00402b48
add esi, 0x1070
push esi
jmp 0x4031d0
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.00410133
jmp 0x402dd8
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.0041016e
jmp 0x402dd8
push ebx
push edi
mov ecx, esi
call fcn.00407fc0
jmp 0x402dd8
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.0040800d
jmp 0x402dd8
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.00410271
jmp 0x402dd8
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.004101b8
jmp 0x402dd8
push 0
push 0x1a3
push 0x111
push 0
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
push dword [esi + 0x17e8]
call fcn.004163b6
pop ecx
jmp 0x402dd8
push 0
push 0x1a0
jmp 0x403309
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.004102ae
jmp 0x402dd8
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.004102e5
jmp 0x402dd8
push edi
mov ecx, esi
call fcn.00407f70
jmp 0x402dd8
push ebx
push edi
mov ecx, esi
call fcn.0040df50
jmp 0x4033da
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.0040dfaf
jmp 0x4033da
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.0040dff0
jmp 0x4033da
push edi
mov ecx, esi
call fcn.0040e031
jmp 0x4033da
lea eax, [ebp - 0x10]
and byte [esi + 0x1e34], 0
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xc]
push eax
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
mov ecx, esi
call fcn.0040a35b
test al, al
jne 0x4033e1
push 0xffffffffffffffff
push 0x85
mov ecx, esi
call fcn.004027ec
push 1
pop eax
pop edi
pop esi
pop ebx
leave
ret 0xc
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
lea ecx, [esi + 0x1e28]
call fcn.004010e1
call dword [sym.imp.WINMM.dll_timeGetTime]
cmp dword [ebp - 4], 2
mov dword [esi + 0x1e38], eax
jne 0x40343b
push 1
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
test eax, eax
jle 0x40343b
push 1
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
mov dword [esi + 0x1e3c], eax
jmp 0x403445
mov dword [esi + 0x1e3c], 0xfa
mov byte [esi + 0x1e34], 1
jmp 0x402dd8
and byte [esi + 0x1e34], 0
jmp 0x402dd8
push ebx
push edi
mov ecx, esi
call fcn.00405079
jmp 0x402dd8
push ebx
push edi
mov ecx, esi
call fcn.00405109
jmp 0x402dd8
push ebx
push edi
mov ecx, esi
call fcn.0040519a
jmp 0x402dd8
push ebx
push edi
mov ecx, esi
call fcn.0040e595
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.0040e857
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.0040ebfb
jmp 0x4033da
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
push dword [0x433c98]
call dword [sym.imp.USER32.dll_SetWindowTextA]
jmp 0x402dd8
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00410323
jmp 0x402dd8
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00410375
jmp 0x402dd8
push ebx
mov ecx, esi
call fcn.0040807f
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.004080e3
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.00408173
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.0040edef
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.0040ee17
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.0040ee99
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.0040ef1d
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.0040efb7
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.0040f03a
jmp 0x4033da
push dword [ebp - 4]
mov ecx, esi
push ebx
push edi
call fcn.0040f0d6
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.0040f1af
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.0040f161
jmp 0x4033da
push dword [ebp - 4]
mov ecx, esi
push ebx
push edi
call fcn.0040f2ab
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.0040f43d
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.0040521b
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.00405314
jmp 0x4033da
push dword [ebp - 4]
mov ecx, esi
push ebx
push edi
call fcn.00405393
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.0040552f
jmp 0x4033da
push 1
push ebx
push edi
mov ecx, esi
call fcn.00405662
jmp 0x4033da
push 0
jmp 0x4035fb
push ebx
push edi
mov ecx, esi
call fcn.0040f1fd
jmp 0x402dd8
push ebx
push edi
mov ecx, esi
call fcn.0040f258
jmp 0x402dd8
push ebx
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
mov ecx, esi
call fcn.00405e11
jmp 0x4033da
push dword [ebp - 4]
mov ecx, esi
push ebx
push edi
call fcn.004057b1
jmp 0x4033da
push 1
push dword [ebp - 4]
mov ecx, esi
push ebx
push edi
call fcn.00405e64
jmp 0x4033da
push 0
jmp 0x40365a
push ebx
push edi
mov ecx, esi
call fcn.0040617e
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.0040844d
jmp 0x4033da
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.004081d8
jmp 0x4033da
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00406c90
jmp 0x4033da
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.0041052b
jmp 0x402dd8
push 0
mov ecx, ebx
call fcn.00401aa7
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.00417850
pop ecx
mov esi, eax
test esi, esi
jle 0x403930
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
mov al, byte [eax + esi - 1]
push eax
call dword [sym.imp.USER32.dll_IsCharAlphaA]
test eax, eax
je 0x402dd8
dec esi
jmp 0x4036df
push 0
mov ecx, ebx
call fcn.00401aa7
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.00417850
pop ecx
mov esi, eax
test esi, esi
jle 0x403930
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
mov al, byte [eax + esi - 1]
push eax
call dword [sym.imp.USER32.dll_IsCharAlphaNumericA]
test eax, eax
je 0x402dd8
dec esi
jmp 0x40372f
push 0
mov ecx, ebx
call fcn.00401aa7
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.00417850
pop ecx
mov esi, eax
test esi, esi
jle 0x403930
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
movsx eax, byte [eax + esi - 1]
push eax
call fcn.00417ddf
test eax, eax
pop ecx
je 0x402dd8
dec esi
jmp 0x40377f
push 0
mov ecx, ebx
call fcn.00401aa7
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.00417850
pop ecx
mov esi, eax
test esi, esi
jle 0x403930
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
movsx eax, byte [eax + esi - 1]
push eax
call fcn.00417e07
test eax, eax
pop ecx
je 0x402dd8
dec esi
jmp 0x4037d0
push 0
mov ecx, ebx
call fcn.00401aa7
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.00417850
pop ecx
mov esi, eax
test esi, esi
jle 0x403930
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
mov al, byte [eax + esi - 1]
push eax
call dword [sym.imp.USER32.dll_IsCharLowerA]
test eax, eax
je 0x402dd8
dec esi
jmp 0x403821
push 0
mov ecx, ebx
call fcn.00401aa7
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.00417850
pop ecx
mov esi, eax
test esi, esi
jle 0x403930
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
mov al, byte [eax + esi - 1]
push eax
call dword [sym.imp.USER32.dll_IsCharUpperA]
test eax, eax
je 0x402dd8
dec esi
jmp 0x403871
push 0
mov ecx, ebx
call fcn.00401aa7
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.00417850
pop ecx
mov esi, eax
test esi, esi
jle 0x403930
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
movsx eax, byte [eax + esi - 1]
push eax
call fcn.00417e34
test eax, eax
pop ecx
je 0x402dd8
dec esi
jmp 0x4038c1
push 0
mov ecx, ebx
call fcn.00401aa7
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.00417850
pop ecx
mov esi, eax
test esi, esi
jle 0x403930
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
cmp byte [eax + esi - 1], 0x80
jae 0x402dd8
dec esi
jmp 0x40390e
push 1
jmp 0x402e53
push edi
mov ecx, esi
call fcn.0040f9b4
jmp 0x402e4f
push edi
mov ecx, esi
call fcn.0040f8e4
jmp 0x402e4f
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.0041529a
pop ecx
jmp 0x404386
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00410581
jmp 0x402dd8
push ebx
push edi
mov ecx, esi
call fcn.0040649a
jmp 0x4033da
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00410624
jmp 0x402dd8
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.004106ab
jmp 0x402dd8
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00410843
jmp 0x402dd8
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.004108e2
jmp 0x402dd8
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00410db1
jmp 0x402dd8
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.004109a2
jmp 0x402dd8
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00410abc
jmp 0x402dd8
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00410bc1
jmp 0x402dd8
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00410c3d
jmp 0x402dd8
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00410cb9
jmp 0x402dd8
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00410d35
jmp 0x402dd8
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.0041171a
jmp 0x402dd8
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.004117c4
jmp 0x402dd8
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00411918
jmp 0x402dd8
cmp dword [ebp - 4], 2
jne 0x403a98
push 1
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
cmp eax, 1
jne 0x403a98
push eax
jmp 0x403a9a
push 0
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.00415ee3
pop ecx
jmp 0x40332d
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.0041599c
jmp 0x403967
cmp dword [ebp - 4], 2
jb 0x403af1
push 1
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
test eax, eax
je 0x403af1
mov byte [ebp + 0x10], 1
jmp 0x403af5
and byte [ebp + 0x10], 0
push dword [ebp + 0x10]
mov ecx, edi
push 0
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.00415c23
pop ecx
jmp 0x403967
push ebx
push edi
mov ecx, esi
call fcn.0040e3f0
jmp 0x4033da
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.00415495
jmp 0x403967
push ebx
push edi
mov ecx, esi
call fcn.00406fef
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.004084df
jmp 0x4033da
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.00408559
jmp 0x4033da
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.004085ae
jmp 0x4033da
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.004086a2
jmp 0x4033da
push ebx
mov ecx, esi
call fcn.00409307
jmp 0x4033da
push ebx
mov ecx, esi
call fcn.0040891d
jmp 0x4033da
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.0040898c
jmp 0x4033da
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00406e50
jmp 0x4033da
push 0
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.00408a77
jmp 0x4033da
push 1
jmp 0x403bc7
push 2
jmp 0x403bc7
push 0
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.00408f60
jmp 0x4033da
cmp dword [0x433c88], 0
je 0x402dd8
xor ebx, ebx
mov ecx, edi
push ebx
call fcn.00402301
mov ecx, eax
call fcn.004018d3
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
jl 0x403c4b
push ebx
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
cmp eax, 0x65
jge 0x403c4b
push ebx
push ebx
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
push eax
push 0x402
push dword [0x433c88]
call esi
cmp dword [ebp - 4], 2
jb 0x402dd8
push 1
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
cmp byte [eax], 0
je 0x403c86
push 1
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
push ebx
push 0xc
push dword [0x433c80]
call esi
cmp dword [ebp - 4], 2
jbe 0x402dd8
push 2
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
push ebx
push 0xc
push dword [0x433c84]
call esi
jmp 0x402dd8
push 1
jmp 0x403be1
push ebx
push edi
mov ecx, esi
call fcn.0040f6b1
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.00406808
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.00406719
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.004068f7
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.00406b52
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.00406a8a
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.004069d9
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.00406c03
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.0040665a
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.004062ec
jmp 0x4033da
push 1
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
cmp eax, 8
jle 0x403d6a
push 0x42b598
mov ecx, ebx
call fcn.00401af4
jmp 0x4041b0
push 1
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
push eax
lea eax, [ebp - 0x8014]
push eax
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
push eax
call fcn.0041603c
add esp, 0xc
test al, al
jne 0x403e71
push 1
mov ecx, esi
call fcn.00402b3b
jmp 0x403e71
lea eax, [ebp - 0xc]
mov ecx, edi
push eax
push 0
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.00416080
pop ecx
test al, al
pop ecx
jne 0x403dda
push 1
mov ecx, esi
call fcn.00402b3b
push dword [ebp - 0xc]
jmp 0x402e53
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00411958
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.00409440
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.00407071
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.00407510
jmp 0x4033da
push ebx
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
mov ecx, esi
call fcn.00407598
jmp 0x4033da
push ebx
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
push eax
mov ecx, esi
call fcn.00407664
jmp 0x4033da
lea eax, [ebp - 0x8014]
push 0x7fff
push eax
push dword [0x433c98]
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x8014]
jmp 0x402ed3
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00411b32
jmp 0x402dd8
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00411bb4
jmp 0x402dd8
mov ecx, esi
call fcn.00408049
jmp 0x4033da
push edi
mov ecx, esi
call fcn.004096b2
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.00407705
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.00407770
jmp 0x4033da
push ebx
mov ecx, esi
call fcn.00409700
jmp 0x4033da
push ebx
push edi
mov ecx, esi
call fcn.0040973d
jmp 0x4033da
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.00416154
jmp 0x40332d
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.0041619b
jmp 0x40332d
push dword [ebp - 4]
mov ecx, esi
push edi
call fcn.004097ab
jmp 0x4033da
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00411d4d
jmp 0x402dd8
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018c0
push ecx
push ecx
fstp qword [esp]
call fcn.0040476a
jmp 0x402dfd
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018c0
push ecx
push ecx
fstp qword [esp]
call fcn.004047a8
jmp 0x402dfd
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018c0
push ecx
push ecx
fstp qword [esp]
call fcn.004047df
jmp 0x402dfd
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018c0
push ecx
push ecx
fstp qword [esp]
call fcn.00404773
jmp 0x402dfd
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018c0
push ecx
push ecx
fstp qword [esp]
call fcn.004047b1
jmp 0x402dfd
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018c0
push ecx
push ecx
fstp qword [esp]
call fcn.004047ea
jmp 0x402dfd
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018c0
push ecx
push ecx
fstp qword [esp]
call fcn.00404810
jmp 0x402dfd
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018c0
push ecx
push ecx
fstp qword [esp]
call fcn.004047f5
jmp 0x402dfd
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018c0
push ecx
push ecx
fstp qword [esp]
call fcn.0040481d
jmp 0x402dfd
push 1
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018c0
push ecx
push ecx
mov ecx, edi
fstp qword [esp]
push 0
call fcn.00402301
mov ecx, eax
call fcn.004018c0
push ecx
push ecx
fstp qword [esp]
call fcn.0040489d
jmp 0x402dfd
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018c0
fcomp qword [0x422440]
push 0
fnstsw ax
sahf
jae 0x4040b9
mov ecx, ebx
call fcn.00401aa7
jmp 0x4041b0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018c0
push ecx
push ecx
fstp qword [esp]
call fcn.004048ae
jmp 0x402dfd
cmp dword [ebp - 4], 1
jne 0x4040e2
and dword [ebp - 0xc], 0
jmp 0x4040f5
push 1
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
mov dword [ebp - 0xc], eax
fild dword [ebp - 0xc]
push ecx
push ecx
fstp qword [esp]
fld qword [0x422458]
push ecx
push ecx
fstp qword [esp]
call fcn.00404826
fstp qword [ebp - 8]
xor esi, esi
mov ecx, edi
push esi
call fcn.00402301
mov ecx, eax
call fcn.004018c0
fcomp qword [0x422440]
push esi
mov ecx, edi
fnstsw ax
sahf
jb 0x404150
call fcn.00402301
mov ecx, eax
call fcn.004018c0
fmul qword [ebp - 8]
push ecx
push ecx
fadd qword [0x422450]
fstp qword [esp]
call fcn.00404875
jmp 0x40416f
call fcn.00402301
mov ecx, eax
call fcn.004018c0
fmul qword [ebp - 8]
push ecx
push ecx
fsub qword [0x422450]
fstp qword [esp]
call fcn.00404849
fdiv qword [ebp - 8]
jmp 0x402dfd
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00409e9e
jmp 0x4033da
lea eax, [ebp - 0x10]
mov ecx, edi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xc]
push eax
push 0
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
mov ecx, esi
call fcn.0040a35b
test al, al
jne 0x4041b7
push 1
jmp 0x403014
lea edi, [esi + 0x1070]
push 1
mov ecx, edi
call fcn.00401aa7
mov eax, dword [ebp - 0xc]
push 0
inc eax
push 1
push eax
mov ecx, esi
call fcn.00404ed8
jmp 0x4031cf
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call dword [sym.imp.KERNEL32.DLL_SetCurrentDirectoryA]
test eax, eax
jmp 0x404388
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00407173
jmp 0x4033da
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.004059a9
jmp 0x4033da
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.0040fa3b
jmp 0x4033da
cmp dword [ebp - 4], 3
jb 0x40424c
push 2
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
test eax, eax
je 0x40424c
mov byte [ebp + 0x10], 1
jmp 0x404250
and byte [ebp + 0x10], 0
push dword [ebp + 0x10]
mov ecx, edi
push 1
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.00415a37
add esp, 0xc
jmp 0x404386
cmp dword [ebp - 4], 3
jb 0x4042a2
push 2
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
test eax, eax
je 0x4042a2
mov byte [ebp + 0x10], 1
jmp 0x4042a6
and byte [ebp + 0x10], 0
push dword [ebp + 0x10]
mov ecx, edi
push 1
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.00415b1a
jmp 0x40427a
cmp dword [ebp - 4], 3
jb 0x4042f2
push 2
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
test eax, eax
je 0x4042f2
mov byte [ebp + 0x10], 1
jmp 0x4042f6
and byte [ebp + 0x10], 0
xor esi, esi
mov ecx, edi
push esi
push dword [ebp + 0x10]
push 1
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
push esi
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.004155ae
add esp, 0x10
test al, al
jne 0x402dd8
push esi
jmp 0x402e53
cmp dword [ebp - 4], 3
jb 0x404353
push 2
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018d3
test eax, eax
je 0x404353
mov byte [ebp + 0x10], 1
jmp 0x404357
and byte [ebp + 0x10], 0
push 1
mov ecx, edi
push dword [ebp + 0x10]
push 1
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
push eax
call fcn.004155ae
add esp, 0x10
test al, al
jne 0x402dd8
push 0
jmp 0x402e53
push ebx
push edi
mov ecx, esi
call fcn.00411d88
jmp 0x402dd8
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00411e14
jmp 0x402dd8
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
sub esp, 0xc
mov ecx, esp
push eax
call fcn.00401000
mov ecx, 0x430ae0
call fcn.0041676a
jmp 0x402e52
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
sub esp, 0xc
mov ecx, esp
push eax
call fcn.00401000
mov ecx, 0x430ae0
call fcn.0041676a
test eax, eax
je 0x40443a
lea eax, [ebp + 0x10]
push 0
push eax
push 0
mov ecx, edi
call fcn.00402301
mov ecx, eax
call fcn.004018ad
sub esp, 0xc
mov ecx, esp
push eax
call fcn.00401000
mov ecx, 0x430ae0
call fcn.004165af
push dword [ebp + 0x10]
jmp 0x4031d0
push 1
mov ecx, esi
call fcn.00402b3b
push 0x42b598
jmp 0x402ed4
push ebx
mov ecx, esi
push dword [ebp - 4]
push edi
call fcn.00411eb3
jmp 0x402dd8