Function at 0x431df0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x1e8
push esi
mov esi, dword [ebp + 0x1c]
push edi
xor edi, edi
mov dword [esp + 0x20], ecx
cmp byte [ebp + 0x20], 0
mov dword [esp + 0x2c], esi
mov byte [esp + 0x11], 0
mov byte [esp + 0x12], 0
mov byte [esp + 0x13], 0
je 0x431f52
mov eax, dword [ebp + 8]
mov dword [esp + 0xc], eax
cmp word [esi], di
je 0x431ffc
push 0x3a
push esi
call fcn.00496bcf
mov ecx, eax
add esp, 8
mov dword [esp + 0x14], ecx
movzx eax, word [esi]
cmp eax, 0x20
je 0x431e52
cmp eax, 9
jne 0x431e57
add esi, 2
jmp 0x431e45
test ecx, ecx
je 0x431f06
mov eax, dword [esp + 0x2c]
mov edi, ecx
sub edi, eax
sar edi, 1
cmp edi, 0x20
jae 0x431f04
push edi
push eax
lea eax, [esp + 0xd8]
push eax
call fcn.004a1eb4
add esp, 0xc
lea ecx, [esp + 0xd0]
xor eax, eax
xor edx, edx
mov word [esp + edi*2 + 0xd0], ax
push eax
push 1
push eax
call fcn.0047c7e0
add esp, 0xc
test eax, eax
je 0x431f04
mov eax, dword [esp + 0x14]
add eax, 2
mov dword [esp + 0x3c], eax
mov edx, eax
movzx eax, word [edx]
mov ecx, eax
mov dword [esp + 0x14], ecx
cmp eax, 0x20
je 0x431ec7
cmp eax, 9
jne 0x431ecc
add edx, 2
jmp 0x431eb4
lea ecx, [esp + 0xd0]
mov dword [esp + 0x2c], edx
mov esi, edx
call fcn.0040f490
mov edi, eax
sub edi, 1
js 0x431efb
cmp word [esp + 0x14], 0
mov eax, esi
cmovne eax, dword [esp + 0x3c]
mov dword [esp + 0x2c], eax
cmp edi, 0xa
jl 0x431f06
push dword [esp + 0xc]
jmp 0x433194
xor edi, edi
push 0x4ca350
push esi
call fcn.00499643
add esp, 8
test eax, eax
jne 0x431f2a
mov edx, dword [esp + 0x1c]
mov byte [esp + 0x11], 1
mov dword [esp + 0x28], edx
jmp 0x432004
push str.Show
push esi
call fcn.00499643
add esp, 8
test eax, eax
jne 0x431ffc
mov edx, dword [esp + 0x1c]
mov byte [esp + 0x12], 1
mov dword [esp + 0x28], edx
jmp 0x432004
mov esi, dword [ebp + 8]
push 0x3a
push esi
call fcn.00496bcf
add esp, 8
mov dword [esp + 0xc], eax
test eax, eax
je 0x431f82
mov ecx, esi
call fcn.0040f490
lea edi, [eax - 1]
cmp edi, 9
ja 0x433193
mov esi, dword [esp + 0xc]
add esi, 2
movzx eax, word [esi]
cmp eax, 0x20
je 0x431f7f
cmp eax, 9
je 0x431f7f
push 0x4ca350
push esi
mov dword [esp + 0x14], esi
call fcn.00499643
add esp, 8
test eax, eax
jne 0x431fb4
mov edx, dword [esp + 0x1c]
mov byte [esp + 0x11], 1
mov dword [esp + 0x28], edx
jmp 0x432004
push str.Show
push esi
call fcn.00499643
add esp, 8
test eax, eax
jne 0x431fd5
mov edx, dword [esp + 0x1c]
mov byte [esp + 0x12], 1
mov dword [esp + 0x28], edx
jmp 0x432004
push 0
push 1
push 0
mov edx, 1
mov ecx, esi
call fcn.0047c7e0
add esp, 0xc
test eax, eax
je 0x431ffc
mov ecx, esi
call fcn.0040f490
mov byte [esp + 0x13], 1
jmp 0x432000
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x28], eax
mov dl, byte [ebp + 0x20]
mov eax, 0x4dc6b8
test dl, dl
mov ecx, 0x4dc9b0
cmovne ecx, eax
imul edi, edi, 0x4c
add edi, ecx
mov dword [esp + 0x6c], edi
mov eax, dword [edi + 0x20]
test eax, eax
je 0x432037
push eax
call dword [sym.imp.USER32.dll_IsWindow]
mov dl, byte [ebp + 0x20]
test eax, eax
jne 0x432037
mov dword [edi + 0x20], eax
cmp byte [esp + 0x12], 0
je 0x432070
mov eax, dword [edi + 0x20]
test eax, eax
je 0x43317c
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x43317c
push 4
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x1c
cmp byte [esp + 0x11], 0
jne 0x432120
cmp dword [edi + 0x20], 0
je 0x432120
mov eax, dword [esp + 0x2c]
cmp word [eax], 0
jne 0x432120
mov al, byte [esp + 0x13]
test al, al
jne 0x4320a5
mov esi, dword [esp + 0xc]
cmp word [esi], 0
jne 0x432124
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
test dl, dl
jne 0x4320d1
test al, al
je 0x4320d1
mov ecx, dword [esp + 0x28]
cmp dword [edi + 8], ecx
je 0x4320d1
mov eax, dword [edi + 0x2c]
mov dword [edi + 8], ecx
test eax, eax
je 0x4320d1
push 0
push ecx
push 0x402
push eax
call esi
mov eax, dword [ebp + 0x10]
cmp word [eax], 0
je 0x4320e9
mov ecx, dword [edi + 0x30]
test ecx, ecx
je 0x4320e9
push eax
push 0
push 0xc
push ecx
call esi
mov eax, dword [ebp + 0xc]
cmp word [eax], 0
je 0x4320fc
push eax
push 0
push 0xc
push dword [edi + 0x34]
call esi
mov eax, dword [ebp + 0x14]
cmp word [eax], 0
je 0x43317c
push eax
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x1c
mov esi, dword [esp + 0xc]
mov eax, dword [edi + 0x20]
test eax, eax
je 0x432132
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, dword [edi + 0x38]
mov ecx, dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [esp + 0x44], ecx
test eax, eax
je 0x43214a
push eax
call ecx
mov ecx, dword [esp + 0x44]
mov eax, dword [edi + 0x3c]
test eax, eax
je 0x432154
push eax
call ecx
mov eax, dword [edi + 0x40]
test eax, eax
je 0x432160
push eax
call dword [esp + 0x48]
mov eax, dword [edi + 0x28]
test eax, eax
je 0x43217a
cmp dword [edi + 0x24], 0
push eax
jne 0x432174
call dword [esp + 0x48]
jmp 0x43217a
call dword [sym.imp.USER32.dll_DestroyIcon]
push 0x4c
push 0
push edi
call fcn.004971b0
add esp, 0xc
cmp byte [esp + 0x11], 0
jne 0x43317c
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x60], eax
cmp word [eax], 0
jne 0x4321ba
mov eax, dword [0x4de770]
mov dword [esp + 0x60], eax
test eax, eax
je 0x4321b2
cmp word [eax], 0
jne 0x4321ba
mov dword [esp + 0x60], 0x4b70dc
mov dl, byte [ebp + 0x20]
xor eax, eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x1c], eax
mov eax, dword [sym.imp.KERNEL32.dll_MulDiv]
mov byte [esp + 0x11], 1
mov byte [esp + 0x12], 1
mov byte [esp + 0x1a], 1
mov byte [esp + 0x1b], 0
mov dword [esp + 0x24], 0x88c00000
mov dword [esp + 0x58], 8
mov dword [esp + 0x54], VariantInit
mov dword [esp + 0x20], VariantInit
mov dword [esp + 0x3c], 0xff000000
mov dword [edi + 0x44], 0xff000000
mov dword [edi + 0x48], 0xff000000
mov dword [edi + 4], SysReAllocString
mov dword [esp + 0x34], eax
test dl, dl
je 0x43223e
mov eax, SysReAllocString
mov ecx, eax
jmp 0x432257
push 0x60
push dword [0x4ddc8c]
push 0x12c
call eax
mov dl, byte [ebp + 0x20]
mov ecx, eax
mov eax, 0x14
mov dword [edi], ecx
mov dword [edi + 0x1c], eax
mov eax, dword [ebp + 0x10]
mov dword [edi + 0x18], SysReAllocString
cmp word [eax], 0
mov eax, dword [ebp + 0xc]
jne 0x43227f
cmp word [eax], 0
jne 0x43227f
test dl, dl
je 0x43227f
xor eax, eax
xor ecx, ecx
jmp 0x432289
mov eax, 0xa
mov ecx, 5
mov dword [edi + 0x10], ecx
mov dword [edi + 0xc], eax
movzx eax, word [esi]
test ax, ax
je 0x432864
mov ecx, eax
nop dword [eax]
movzx esi, cx
test esi, 0xffffff80
je 0x4322af
xor eax, eax
jmp 0x4322ba
push 2
push esi
call fcn.0049bd84
add esp, 8
mov ecx, esi
and ecx, 0xffffffdf
test eax, eax
cmove ecx, esi
add ecx, 0xffffffbf
cmp ecx, 0x19
ja case.0x4322d7.68
movzx eax, byte [ecx + 0x4331e4]
jmp dword [eax*4 + 0x4331ac]
and dword [esp + 0x58], 0xfffffff7
jmp case.0x4322d7.68
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x24]
and edx, 0xff3fffff
mov dword [esp + 0x24], edx
movzx ecx, word [eax + 2]
cmp ecx, 0x31
jne 0x432312
or edx, 0x800000
mov dword [esp + 0x24], edx
jmp 0x43284f
cmp ecx, 0x32
jne 0x43284f
or edx, 0x400000
mov dword [esp + 0x24], edx
jmp 0x43284f
mov ecx, dword [esp + 0xc]
movzx eax, word [ecx + 2]
mov edx, eax
test ax, ax
je case.0x4322d7.68
mov esi, edx
lea eax, [ecx + 2]
mov dword [esp + 0xc], eax
test esi, 0xffffff80
je 0x432352
xor edx, edx
jmp 0x432363
push 2
push esi
call fcn.0049bd84
mov edx, eax
add esp, 8
mov eax, dword [esp + 0xc]
mov ecx, esi
and ecx, 0xffffffdf
test edx, edx
cmove ecx, esi
cmp ecx, 0x42
je 0x432394
cmp ecx, 0x54
je 0x432394
cmp ecx, 0x57
je 0x432394
cmp word [eax], 0x30
setne byte [esp + 0x1a]
cmp word [eax + 2], 0x30
setne byte [esp + 0x12]
jmp 0x432501
add eax, 2
push 0x1f
push eax
lea eax, [esp + 0xd8]
push eax
call fcn.004a1eb4
xor eax, eax
add esp, 0xc
mov word [esp + 0x10e], ax
lea eax, [esp + 0xd0]
mov dword [esp + 0x30], eax
mov ax, word [esp + 0xd0]
test ax, ax
je 0x432417
movzx esi, ax
nop
mov ecx, 0x4ca844
mov edx, 0x20
nop word [eax + eax]
cmp si, dx
je 0x43240a
movzx eax, word [ecx + 2]
add ecx, 2
mov edx, eax
test ax, ax
jne 0x4323e0
mov eax, dword [esp + 0x30]
add eax, 2
mov dword [esp + 0x30], eax
movzx eax, word [eax]
mov esi, eax
test ax, ax
jne 0x4323d0
jmp 0x432417
mov eax, dword [esp + 0x30]
test eax, eax
je 0x432417
xor ecx, ecx
mov word [eax], cx
lea ecx, [esp + 0xd0]
call fcn.0047dc40
mov esi, eax
cmp esi, 0xffffffff
jne 0x43247f
lea ecx, [esp + 0xd0]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x432434
sub ecx, edx
sar ecx, 1
cmp ecx, 6
jbe 0x432452
xor eax, eax
mov word [esp + 0xdc], ax
push 0x10
lea eax, [esp + 0xd4]
push 0
push eax
call fcn.0049d195
movzx esi, al
add esp, 0xc
movzx ecx, ax
shl esi, 8
shr ecx, 8
or esi, ecx
shr eax, 0x10
shl esi, 8
movzx eax, al
or esi, eax
mov eax, dword [esp + 0xc]
movzx eax, word [eax]
mov dword [esp + 0x14], eax
test eax, 0xffffff80
je 0x432495
xor edx, edx
jmp 0x4324a6
push 2
push eax
call fcn.0049bd84
mov edx, eax
add esp, 8
mov eax, dword [esp + 0x14]
mov ecx, eax
and ecx, 0xffffffdf
test edx, edx
cmove ecx, eax
cmp ecx, 0x42
je 0x4324d3
cmp ecx, 0x54
je 0x4324ce
cmp ecx, 0x57
jne 0x4324d7
push esi
mov dword [edi + 0x44], esi
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [edi + 0x40], eax
jmp 0x4324d7
mov dword [edi + 0x48], esi
jmp 0x4324d7
mov dword [esp + 0x3c], esi
lea ecx, [esp + 0xd0]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4324e1
mov eax, dword [esp + 0xc]
sub ecx, edx
sar ecx, 1
lea eax, [eax + ecx*2]
mov dword [esp + 0xc], eax
jmp 0x432501
mov eax, dword [esp + 0xc]
lea edx, [eax + 2]
movzx eax, word [edx]
mov ecx, eax
test ax, ax
je case.0x4322d7.68
mov esi, ecx
mov dword [esp + 0xc], edx
test esi, 0xffffff80
je 0x432524
xor eax, eax
jmp 0x432533
push 2
push esi
call fcn.0049bd84
mov edx, dword [esp + 0x14]
add esp, 8
mov ecx, esi
and ecx, 0xffffffdf
test eax, eax
cmove ecx, esi
cmp ecx, 0x4d
je 0x432576
cmp ecx, 0x53
jne case.0x4322d7.68
lea eax, [edx + 2]
push eax
call fcn.0049ccd5
mov edx, eax
add esp, 4
mov eax, dword [esp + 0xc]
mov dword [esp + 0x4c], edx
test edx, edx
jns 0x43284f
mov dword [esp + 0x4c], 0
jmp 0x43284f
lea eax, [edx + 2]
push eax
call fcn.0049ccd5
mov edx, eax
add esp, 4
mov eax, dword [esp + 0xc]
mov dword [esp + 0x48], edx
test edx, edx
jns 0x43284f
mov dword [esp + 0x48], 0
jmp 0x43284f
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0xc]
and edx, 0xf7ffffff
mov ecx, edx
or ecx, 0x40000
movzx eax, word [eax + 2]
cmp eax, 0x31
cmovne ecx, edx
mov edx, ecx
or edx, 0xf0000
cmp eax, 0x32
cmovne edx, ecx
mov dword [esp + 0x24], edx
jmp case.0x4322d7.68
mov eax, dword [esp + 0xc]
add eax, 2
push eax
call fcn.0049ccd5
mov dword [esp + 0x2c], eax
mov byte [esp + 0x17], 1
jmp 0x432848
mov eax, dword [esp + 0xc]
cmp word [eax + 2], 0
je 0x43284f
add eax, 2
mov ecx, eax
mov dword [esp + 0xc], eax
call fcn.0040f490
mov ecx, dword [esp + 0xc]
add ecx, 2
mov dword [esp + 0x68], eax
push 0x2d
push ecx
call fcn.00496bcf
mov ecx, eax
add esp, 8
test ecx, ecx
je case.0x4322d7.68
cmp word [ecx + 2], 0
je 0x43284f
lea eax, [ecx + 2]
mov ecx, eax
mov dword [esp + 0xc], eax
call fcn.0040f490
mov dword [esp + 0x64], eax
jmp case.0x4322d7.68
mov byte [esp + 0x11], 0
jmp case.0x4322d7.68
mov ecx, dword [esp + 0xc]
movzx eax, word [ecx + 2]
mov edx, eax
test ax, ax
je case.0x4322d7.68
mov esi, edx
lea eax, [ecx + 2]
mov dword [esp + 0xc], eax
test esi, 0xffffff80
je 0x432684
xor edx, edx
jmp 0x432695
push 2
push esi
call fcn.0049bd84
mov edx, eax
add esp, 8
mov eax, dword [esp + 0xc]
mov ecx, esi
and ecx, 0xffffffdf
test edx, edx
cmove ecx, esi
cmp ecx, 0x4d
je 0x4326fd
cmp ecx, 0x53
je 0x4326d2
push eax
call fcn.0049ccd5
add esp, 4
mov dword [edi], eax
cmp byte [ebp + 0x20], 0
jne case.0x4322d7.68
push 0x60
push dword [0x4ddc8c]
push eax
call dword [esp + 0x40]
mov dword [edi], eax
jmp case.0x4322d7.68
add eax, 2
push eax
call fcn.0049ccd5
mov edx, eax
add esp, 4
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1c], edx
test edx, edx
jns 0x43284f
mov dword [esp + 0x1c], 0
jmp 0x43284f
add eax, 2
push eax
call fcn.0049ccd5
mov edx, eax
add esp, 4
mov eax, dword [esp + 0xc]
mov dword [esp + 0x38], edx
test edx, edx
jns 0x43284f
mov dword [esp + 0x38], 0
jmp 0x43284f
push 4
push str.Hide
push dword [esp + 0x14]
call fcn.0049b726
add esp, 0xc
test eax, eax
mov eax, dword [esp + 0xc]
jne 0x432750
mov byte [esp + 0x1b], 1
add eax, 6
jmp 0x43284f
add eax, 2
push eax
call fcn.0049ccd5
add esp, 4
mov dword [edi + 4], eax
cmp byte [ebp + 0x20], 0
jne case.0x4322d7.68
push 0x60
push dword [0x4ddc8c]
push eax
call dword [esp + 0x40]
mov dword [edi + 4], eax
jmp case.0x4322d7.68
mov eax, dword [esp + 0xc]
add eax, 2
push eax
call fcn.0049ccd5
mov dword [esp + 0x58], eax
jmp 0x432848
mov eax, dword [esp + 0xc]
add eax, 2
push eax
call fcn.0049ccd5
mov dword [esp + 0x24], eax
jmp 0x432848
mov ecx, dword [esp + 0xc]
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
je case.0x4322d7.68
mov esi, edx
mov dword [esp + 0xc], ecx
test esi, 0xffffff80
je 0x4327d1
xor eax, eax
jmp 0x4327dc
push 2
push esi
call fcn.0049bd84
add esp, 8
mov ecx, esi
and ecx, 0xffffffdf
test eax, eax
cmove ecx, esi
add ecx, 0xffffffbe
cmp ecx, 0x17
ja case.0x4322d7.68
movzx eax, byte [ecx + 0x433214]
jmp dword [eax*4 + 0x433200]
mov eax, dword [esp + 0xc]
add eax, 2
push eax
call fcn.0049ccd5
mov dword [edi + 0x1c], eax
jmp 0x432848
cmp byte [ebp + 0x20], 0
mov eax, dword [esp + 0xc]
je 0x43284f
add eax, 2
push eax
call fcn.0049ccd5
mov dword [edi + 0x18], eax
jmp 0x432848
mov eax, dword [esp + 0xc]
add eax, 2
push eax
call fcn.0049ccd5
mov dword [edi + 0xc], eax
jmp 0x432848
mov eax, dword [esp + 0xc]
add eax, 2
push eax
call fcn.0049ccd5
mov dword [edi + 0x10], eax
add esp, 4
mov eax, dword [esp + 0xc]
add eax, 2
mov dword [esp + 0xc], eax
movzx eax, word [eax]
mov ecx, eax
test ax, ax
jne 0x4322a0
push 0
push 0
push 0
push str.DISPLAY
call dword [sym.imp.GDI32.dll_CreateDCW]
mov esi, eax
push 0x5a
push esi
mov dword [esp + 0x14], esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x11
mov dword [esp + 0x54], eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push esi
mov dword [esp + 0x38], eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x40], eax
lea eax, [esp + 0x128]
push eax
push 0x40
push esi
call dword [sym.imp.GDI32.dll_GetTextFaceW]
lea eax, [esp + 0x1b4]
push eax
push esi
call dword [sym.imp.GDI32.dll_GetTextMetricsW]
mov eax, dword [esp + 0x1b4]
mov dword [esp + 0x14], eax
mov eax, dword [edi + 0x1c]
cmp eax, 1
jge 0x4328ea
cmp eax, 0x80000000
je 0x4328ea
mov ecx, dword [edi + 0x18]
cmp ecx, 1
jge 0x4328ea
cmp ecx, 0x80000000
jne 0x4328f4
test eax, eax
je 0x4328f4
cmp dword [edi + 0x18], 0
jne 0x432904
mov dword [edi + 0x18], 0
xor eax, eax
mov dword [edi + 0x1c], 0
cmp byte [ebp + 0x20], 0
je 0x432abb
mov ecx, dword [esp + 0x2c]
cmp word [ecx], 0
je 0x432abb
test eax, eax
je 0x432abb
mov byte [esp + 0x5c], 0
mov ecx, dword [esp + 0x2c]
lea eax, [edi + 0x24]
push 0
push 0
push dword [esp + 0x64]
push 0
push eax
xor eax, eax
cmp dword [edi + 0x1c], 0x80000000
cmovne eax, dword [edi + 0x1c]
xor edx, edx
cmp dword [edi + 0x18], 0x80000000
push eax
cmovne edx, dword [edi + 0x18]
call fcn.0047dfa0
add esp, 0x18
mov dword [edi + 0x28], eax
test eax, eax
jne 0x432976
cmp byte [esp + 0x5c], al
jne 0x432abb
mov byte [esp + 0x5c], 1
jmp 0x432929
cmp dword [edi + 0x1c], 0
jl 0x432986
cmp dword [edi + 0x18], 0
jge 0x432abb
cmp dword [edi + 0x24], 0
je 0x4329aa
lea ecx, [esp + 0x114]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetIconInfo]
test eax, eax
je 0x432abb
mov eax, dword [esp + 0x124]
test eax, eax
je 0x432abb
lea ecx, [esp + 0xb8]
push ecx
push 0x18
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
test eax, eax
je 0x432a9f
mov eax, dword [edi + 0x1c]
cmp eax, 0xffffffff
jne 0x432a1f
mov ecx, dword [edi + 0x18]
test ecx, ecx
jle 0x432a1f
mov eax, dword [esp + 0xbc]
test eax, eax
je 0x432a8c
movd xmm1, dword [esp + 0xc0]
movd xmm0, eax
cvtdq2pd xmm1, xmm1
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mulsd xmm1, xmm0
addsd xmm1, qword [0x4d4698]
cvttsd2si eax, xmm1
mov dword [edi + 0x1c], eax
jmp 0x432a8c
mov ecx, dword [edi + 0x18]
cmp ecx, 0xffffffff
jne 0x432a69
test eax, eax
jle 0x432a69
mov ecx, dword [esp + 0xc0]
test ecx, ecx
je 0x432a8c
movd xmm1, dword [esp + 0xbc]
cvtdq2pd xmm1, xmm1
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm1, xmm0
addsd xmm1, qword [0x4d4698]
cvttsd2si eax, xmm1
jmp 0x432a89
cmp eax, 0x80000000
jne 0x432a7a
mov eax, dword [esp + 0xc0]
mov dword [edi + 0x1c], eax
cmp ecx, 0x80000000
jne 0x432a8c
mov eax, dword [esp + 0xbc]
mov dword [edi + 0x18], eax
cmp dword [edi], 0x80000000
jne 0x432a9f
mov ecx, dword [edi + 0xc]
mov eax, dword [edi + 0x18]
lea eax, [eax + ecx*2]
mov dword [edi], eax
cmp dword [edi + 0x24], 1
jne 0x432abb
push dword [esp + 0x124]
mov esi, dword [esp + 0x48]
call esi
push dword [esp + 0x120]
call esi
mov ecx, dword [edi]
cmp ecx, 0x80000000
jne 0x432ada
push 0x60
push dword [0x4ddc8c]
push 0x12c
call dword [esp + 0x40]
mov ecx, eax
mov dword [edi], ecx
cmp dword [edi + 0x1c], 0x80000000
jne 0x432aea
mov dword [edi + 0x1c], 0
mov eax, dword [edi + 4]
mov edx, 0x1f4
cmp eax, 0x80000000
cmove eax, edx
push eax
push ecx
push 0
push 0
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.USER32.dll_SetRect]
mov eax, dword [ebp + 0x10]
mov esi, dword [sym.imp.GDI32.dll_CreateFontW]
cmp word [eax], 0
je 0x432c46
movd xmm0, dword [esp + 0x14]
mov eax, dword [esp + 0x48]
cvtdq2pd xmm0, xmm0
test eax, eax
je 0x432b44
push 0x48
push dword [esp + 0x54]
push eax
call dword [esp + 0x40]
mov ecx, eax
neg ecx
jmp 0x432b50
mulsd xmm0, qword [0x4d46b8]
cvttsd2si ecx, xmm0
mov eax, dword [esp + 0x38]
mov esi, 0x258
mov edx, dword [ebp + 0x18]
test eax, eax
cmovne esi, eax
lea eax, [esp + 0x128]
cmp word [edx], 0
cmovne eax, edx
push eax
push 0
push 2
push 0
push 4
push 1
push 0
push 0
push 0
push esi
push 0
push 0
push 0
push ecx
call dword [sym.imp.GDI32.dll_CreateFontW]
mov dword [edi + 0x38], eax
test eax, eax
jne 0x432bef
mov eax, dword [esp + 0x48]
test eax, eax
je 0x432bac
push 0x48
push dword [esp + 0x54]
push eax
call dword [esp + 0x40]
neg eax
jmp 0x432bc2
movd xmm0, dword [esp + 0x14]
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x4d46b8]
cvttsd2si eax, xmm0
lea ecx, [esp + 0x128]
push ecx
push 0
push 2
push 0
push 4
push 1
push 0
push 0
push 0
push esi
mov esi, dword [sym.imp.GDI32.dll_CreateFontW]
push 0
push 0
push 0
push eax
call esi
mov dword [edi + 0x38], eax
jmp 0x432bf5
mov esi, dword [sym.imp.GDI32.dll_CreateFontW]
mov eax, dword [edi + 0x38]
test eax, eax
mov ecx, dword [esp + 0x30]
cmovne ecx, eax
push ecx
push dword [esp + 0x10]
call dword [sym.imp.GDI32.dll_SelectObject]
movaps xmm0, xmmword [esp + 0x80]
mov ecx, dword [edi + 0xc]
movd eax, xmm0
movaps xmmword [esp + 0x70], xmm0
sub dword [esp + 0x78], ecx
add eax, ecx
push 0x450
mov dword [esp + 0x74], eax
lea eax, [esp + 0x74]
push eax
push 0xffffffffffffffff
push dword [ebp + 0x10]
push dword [esp + 0x1c]
call dword [sym.imp.USER32.dll_DrawTextW]
mov dword [edi + 0x14], eax
mov edx, dword [esp + 0x4c]
mov ecx, dword [ebp + 0x18]
test edx, edx
jne 0x432c5f
cmp dword [esp + 0x1c], edx
jne 0x432c5f
test ecx, ecx
je 0x432ce7
cmp word [ecx], 0
lea eax, [esp + 0x128]
cmovne eax, ecx
push eax
push 0
push 2
push 0
push 4
push 1
push 0
push 0
push 0
push dword [esp + 0x40]
push 0
push 0
push 0
push 0x48
push dword [esp + 0x88]
push edx
call dword [esp + 0x74]
neg eax
push eax
call esi
mov dword [edi + 0x3c], eax
test eax, eax
jne 0x432ce7
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x1c]
test eax, eax
jne 0x432cb2
test ecx, ecx
je 0x432ce7
lea edx, [esp + 0x128]
push edx
push 0
push 2
push 0
push 4
push 1
push 0
push 0
push 0
push ecx
push 0
push 0
push 0
push 0x48
push dword [esp + 0x88]
push eax
call dword [esp + 0x74]
neg eax
push eax
call esi
mov dword [edi + 0x3c], eax
mov eax, dword [edi + 0x14]
test eax, eax
mov ecx, dword [edi + 0x10]
mov esi, ecx
mov dword [esp + 0x14], 0
lea edx, [eax + ecx*2]
mov eax, dword [edi + 0x1c]
cmove edx, ecx
test eax, eax
mov dword [esp + 0x38], edx
cmove esi, dword [esp + 0x14]
add esi, edx
add esi, eax
cmp dword [edi + 4], 0x80000000
mov dword [esp + 0x14], esi
jne 0x432d8a
mov eax, dword [ebp + 0xc]
cmp word [eax], 0
je 0x432d7a
mov eax, dword [edi + 0x3c]
test eax, eax
mov ecx, dword [esp + 0x30]
cmovne ecx, eax
push ecx
push dword [esp + 0x10]
call dword [sym.imp.GDI32.dll_SelectObject]
movaps xmm0, xmmword [esp + 0x80]
mov ecx, dword [edi + 0xc]
movd eax, xmm0
movaps xmmword [esp + 0x70], xmm0
sub dword [esp + 0x78], ecx
add eax, ecx
push 0x410
mov dword [esp + 0x74], eax
lea eax, [esp + 0x74]
push eax
push 0xffffffffffffffff
push dword [ebp + 0xc]
push dword [esp + 0x1c]
call dword [sym.imp.USER32.dll_DrawTextW]
mov ecx, dword [edi + 0x10]
jmp 0x432d7c
xor eax, eax
add eax, ecx
add eax, esi
mov dword [edi + 4], eax
mov dword [esp + 0x8c], eax
push dword [esp + 0x40]
mov esi, dword [esp + 0x10]
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
test eax, eax
je 0x433189
push dword [esp + 0x58]
movaps xmm0, xmmword [esp + 0x84]
lea eax, [esp + 0xa4]
push 0
push dword [esp + 0x2c]
movaps xmmword [esp + 0xac], xmm0
push eax
call dword [sym.imp.USER32.dll_AdjustWindowRectEx]
mov esi, dword [esp + 0xa8]
lea eax, [esp + 0x90]
mov edi, dword [esp + 0xac]
sub esi, dword [esp + 0xa0]
sub edi, dword [esp + 0xa4]
push 0
push eax
push 0
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov eax, dword [esp + 0x98]
sub eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x9c]
mov edx, eax
sub ecx, dword [esp + 0x94]
cmp esi, eax
cmovle edx, esi
cmp edi, ecx
mov esi, ecx
mov dword [esp + 0x40], edx
cmovle esi, edi
cmp dword [esp + 0x54], 0x80000000
jne 0x432e4a
sub eax, edx
cdq
sub eax, edx
sar eax, 1
add eax, dword [esp + 0x90]
mov dword [esp + 0x54], eax
mov edi, dword [esp + 0x20]
cmp edi, 0x80000000
jne 0x432e68
sub ecx, esi
mov eax, ecx
cdq
sub eax, edx
mov edi, eax
sar edi, 1
add edi, dword [esp + 0x94]
mov ecx, dword [0x4d98d8]
lea ecx, [ecx + 0x4c]
call fcn.00461ab0
test eax, eax
je 0x432e87
mov eax, dword [0x4d98d8]
mov eax, dword [eax + 0x4c]
mov ecx, dword [eax + 4]
jmp 0x432e89
xor ecx, ecx
cmp byte [esp + 0x11], 0
je 0x432e9c
mov eax, dword [0x4dc424]
test ecx, ecx
cmovne eax, ecx
jmp 0x432e9e
xor eax, eax
push 0
push dword [0x4dc464]
push 0
push eax
push esi
push dword [esp + 0x54]
push edi
push dword [esp + 0x70]
push dword [esp + 0x44]
push dword [esp + 0x84]
push str.B7l5a3c9k5d1e0e7r0Y
push dword [esp + 0x84]
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov esi, dword [esp + 0x6c]
mov dword [esi + 0x20], eax
test eax, eax
je 0x433189
mov edx, dword [esp + 0x24]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
and edx, 0x80000
jne 0x432ef8
cmp byte [esp + 0x11], 0
jne 0x432f48
mov ecx, dword [0x4de7c4]
mov dword [esp + 0x20], ecx
test ecx, ecx
je 0x432f0e
mov ecx, dword [0x4de7c8]
jmp 0x432f1e
mov ecx, dword [0x4dc584]
mov dword [esp + 0x20], ecx
mov ecx, dword [0x4dc588]
test edx, edx
je 0x432f30
push ecx
push 0
push 0x80
push eax
call edi
mov eax, dword [esi + 0x20]
cmp byte [esp + 0x11], 0
jne 0x432f48
push dword [esp + 0x20]
push 1
push 0x80
push eax
call edi
mov eax, dword [esi + 0x20]
lea ecx, [esp + 0x80]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [esi + 0xc]
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x88]
mov dword [esi + 4], eax
lea eax, [edx + edx]
mov dword [esi], ecx
sub ecx, eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x20], ecx
cmp word [eax], 0
je 0x432fd1
push 0
push dword [0x4dc464]
xor eax, eax
cmp byte [esp + 0x1a], al
push 0
push dword [esi + 0x20]
setne al
push dword [esi + 0x14]
or eax, 0x50000080
push ecx
push dword [esi + 0x10]
push edx
push eax
push dword [ebp + 0x10]
push str.static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov ecx, dword [esi + 0x38]
test ecx, ecx
mov edx, dword [esp + 0x30]
push 1
cmovne edx, ecx
mov dword [esi + 0x30], eax
push edx
push 0x30
push eax
call edi
mov edx, dword [esi + 0xc]
mov ecx, dword [esp + 0x20]
cmp byte [ebp + 0x20], 0
jne 0x433106
mov eax, dword [esi + 0x1c]
test eax, eax
jle 0x433106
push 0
push 0
push 0
push dword [esi + 0x20]
push eax
push ecx
push dword [esp + 0x50]
push edx
push 0x50000001
push 0
push str.msctls_progress32
push 0x200
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov edx, eax
mov dword [esi + 0x2c], edx
test edx, edx
je 0x433106
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x64]
test ecx, ecx
jne 0x43302a
test eax, eax
je 0x433066
cmp ecx, 0xffffffff
jle 0x43305c
cmp ecx, 0x10000
jge 0x43305c
cmp eax, 0xffffffff
jle 0x43305c
cmp eax, 0x10000
jge 0x43305c
movzx ecx, ax
mov eax, dword [esp + 0x68]
shl ecx, 0x10
movzx eax, ax
or ecx, eax
push ecx
push 0
push 0x401
jmp 0x433063
push eax
push ecx
push 0x406
push edx
call edi
cmp dword [esp + 0x3c], 0xff000000
je 0x4330c4
mov eax, dword [esi + 0x2c]
push str.uxtheme
mov dword [esp + 0x70], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [esp + 0x40], eax
test eax, eax
je 0x4330b4
push str.SetWindowTheme
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4330aa
push 0x4b70dc
push 0x4b70dc
push dword [esp + 0x74]
call eax
push dword [esp + 0x40]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push dword [esp + 0x3c]
push 0
push 0x409
push dword [esi + 0x2c]
call edi
mov eax, dword [esi + 0x44]
cmp eax, 0xff000000
je 0x4330db
push eax
push 0
push 0x2001
push dword [esi + 0x2c]
call edi
cmp byte [esp + 0x13], 0
mov eax, dword [esi + 0x2c]
push 0
je 0x4330f9
push dword [esp + 0x2c]
push 0x402
push eax
call edi
mov eax, dword [esp + 0x28]
jmp 0x433103
push 0
push 0x408
push eax
call edi
mov dword [esi + 8], eax
mov eax, dword [esp + 0x8c]
sub eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x14]
sub eax, ecx
push 0
push dword [0x4dc464]
push 0
push dword [esi + 0x20]
push eax
push dword [esp + 0x34]
xor eax, eax
cmp byte [esp + 0x32], al
push ecx
push dword [esi + 0xc]
setne al
or eax, 0x50000080
push eax
push dword [ebp + 0xc]
push str.static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [esi + 0x34], eax
test eax, eax
je 0x43316a
mov ecx, dword [esi + 0x3c]
test ecx, ecx
mov edx, dword [esp + 0x30]
push 1
cmovne edx, ecx
push edx
push 0x30
push eax
call edi
cmp byte [esp + 0x1b], 0
jne 0x43317c
push 4
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x1c
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x1c
push esi
mov ecx, dword [esp + 0x24]
push 0
push str.Max_window_number_is_10.
call fcn.0042ff20
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x1c