Function at 0x463650
Capabilities:
Get graphical window text

Disassembly:
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 4]
sub esp, 0x60
push ebx
push ebp
mov ebp, dword [esp + 0x70]
push esi
push edi
mov edi, edx
cmp al, 0xa
je 0x463675
cmp al, 2
je 0x463675
add ecx, 0x10
mov dword [esp + 0x1c], ecx
jmp 0x46367c
lea eax, [ebp + 0x5c]
mov dword [esp + 0x1c], eax
cmp word [edi], 0
mov byte [esp + 0x13], 0
je 0x465291
movzx eax, word [edi]
cmp eax, 0x2d
jne 0x46369a
mov byte [esp + 0x78], 0
jmp 0x4636a4
mov byte [esp + 0x78], 1
cmp eax, 0x2b
jne 0x4636a7
add edi, 2
cmp word [edi], 0
je 0x465291
mov ebx, 0x4a677c
mov eax, edi
call fcn.00409770
mov dword [esp + 0x14], eax
test eax, eax
jne 0x4636e8
mov eax, edi
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4636d0
sub eax, edx
sar eax, 1
lea ecx, [edi + eax*2]
mov dword [esp + 0x14], ecx
mov eax, ecx
cmp eax, edi
je 0x465273
movzx edx, word [eax]
xor ecx, ecx
push 0x4bf904
push edi
mov dword [esp + 0x20], edx
mov word [eax], cx
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x46371a
mov byte [ebp + 0x192], 1
jmp case.0x464a5e.7
push 0x4bf914
push edi
call fcn.0048f769
mov esi, dword [esp + 0x84]
add esp, 8
test eax, eax
jne 0x46374c
cmp byte [esi + 4], 0xc
je 0x46374c
cmp byte [esp + 0x78], al
je 0x46405f
or byte [esi + 5], 2
jmp case.0x464a5e.7
push 7
push 0x4ae3c4
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x4637da
add edi, 0xe
push 0x4bf928
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x463789
movzx edx, byte [esp + 0x78]
neg edx
sbb edx, edx
and edx, 2
mov dword [ebp + 0x6c], edx
jmp case.0x464a5e.7
cmp byte [esi + 4], 0xa
jne 0x4637a8
cmp byte [esp + 0x78], 0
je 0x46379f
or dword [ebp + 0x10], 4
jmp case.0x464a5e.7
and dword [ebp + 0x10], 0xfffffffb
jmp case.0x464a5e.7
cmp word [edi], 0
je 0x4637cd
mov esi, edi
call fcn.0040eb60
mov dword [ebp + 0x6c], eax
cmp eax, 0xffffffff
jne case.0x464a5e.7
mov dword [ebp + 0x6c], 2
jmp case.0x464a5e.7
movzx eax, byte [esp + 0x78]
mov dword [ebp + 0x6c], eax
jmp case.0x464a5e.7
push 6
push 0x4ae308
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x463893
cmp byte [esp + 0x78], al
je case.0x464a5e.7
movzx eax, byte [esi + 4]
add edi, 0xc
sub eax, 0xd
je 0x46384f
dec eax
je 0x46382a
mov esi, edi
call fcn.0040eb60
mov dword [ebp + 0x34], eax
cmp eax, 1
jge case.0x464a5e.7
mov dword [ebp + 0x34], 0
jmp case.0x464a5e.7
lea eax, [ebp + 0x140]
mov ecx, edi
call fcn.00475910
mov dword [ebp + 0x180], eax
cmp eax, 3
jne case.0x464a5e.7
or dword [ebp], 2
jmp case.0x464a5e.7
push 0x4bf934
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x46386d
mov dword [ebp + 0x34], 2
jmp case.0x464a5e.7
push 1
lea esi, [ebp + 0x140]
mov eax, edi
call fcn.004759a0
add esp, 4
test eax, eax
je case.0x464a5e.7
mov dword [ebp + 0x34], 1
jmp case.0x464a5e.7
push 0x4bf7e0
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x4638c3
cmp byte [esp + 0x78], al
je 0x4638b7
or dword [ebp], 0x800000
jmp case.0x464a5e.7
or dword [ebp + 4], 0x800000
jmp case.0x464a5e.7
push 0x4bf940
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x4638f3
cmp byte [esp + 0x78], al
je 0x4638e7
or dword [ebp], 0x200000
jmp case.0x464a5e.7
or dword [ebp + 4], 0x200000
jmp case.0x464a5e.7
push 7
push 0x4bf950
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x46395f
cmp byte [esi + 4], 0xb
jne 0x463923
cmp byte [esp + 0x78], al
je 0x463dbe
or dword [ebp + 4], 0x8000
jmp case.0x464a5e.7
cmp byte [esp + 0x78], 0
je 0x463953
or dword [ebp], 0x100000
cmp word [edi + 0xe], 0
je 0x463948
lea esi, [edi + 0xe]
call fcn.0040eb60
mov dword [ebp + 0x68], eax
jmp case.0x464a5e.7
or eax, 0xffffffff
mov dword [ebp + 0x68], eax
jmp case.0x464a5e.7
or dword [ebp + 4], 0x100000
jmp case.0x464a5e.7
push 0x4bf960
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x463983
cmp byte [esp + 0x78], al
je 0x46399b
or dword [ebp], 0x10000
jmp case.0x464a5e.7
push 0x4bf970
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x4639a7
cmp byte [esp + 0x78], al
je 0x463977
or dword [ebp + 4], 0x10000
jmp case.0x464a5e.7
push 0x4bf97c
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x4639d0
cmp byte [esp + 0x78], 0
je 0x463c60
or dword [ebp], 0x20000
jmp case.0x464a5e.7
push 0x4acbc8
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x4639f9
xor ecx, ecx
cmp byte [esp + 0x78], cl
sete cl
add ecx, 3
mov dword [ebp + 0x188], ecx
jmp case.0x464a5e.7
push 8
push 0x4bf814
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x463a6f
cmp word [edi + 0x10], ax
je 0x463a28
lea esi, [edi + 0x10]
call fcn.0040eb60
test eax, eax
jne 0x463a28
cmp byte [esp + 0x78], al
sete bl
jmp 0x463a2c
mov bl, byte [esp + 0x78]
mov esi, dword [esp + 0x7c]
mov eax, dword [esi]
test eax, eax
je 0x463a52
xor edx, edx
test bl, bl
sete dl
push edx
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
test bl, bl
je 0x463a66
or byte [esi + 5], 0x10
jmp case.0x464a5e.7
test bl, bl
je 0x463a5f
or dword [ebp], 0x8000000
jmp 0x463a45
or dword [ebp + 4], 0x8000000
and byte [esi + 5], 0xef
jmp case.0x464a5e.7
push 6
push 0x4bf988
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x463ae9
cmp word [edi + 0xc], ax
je 0x463a9e
lea esi, [edi + 0xc]
call fcn.0040eb60
test eax, eax
jne 0x463a9e
cmp byte [esp + 0x78], al
sete bl
jmp 0x463aa2
mov bl, byte [esp + 0x78]
mov esi, dword [esp + 0x7c]
mov eax, dword [esi]
test eax, eax
je 0x463acc
xor ecx, ecx
test bl, bl
setne cl
dec ecx
and ecx, 4
push ecx
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
test bl, bl
je 0x463ae0
or byte [esi + 5], 8
jmp case.0x464a5e.7
test bl, bl
je 0x463ad9
or dword [ebp + 4], 0x10000000
jmp 0x463abf
or dword [ebp], 0x10000000
and byte [esi + 5], 0xf7
jmp case.0x464a5e.7
push 0x4bf998
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x463b6e
movzx eax, byte [esi + 4]
dec eax
cmp eax, 0x12
ja case.0x464a5e.7
movzx edx, byte [eax + 0x4658e4]
jmp dword [edx*4 + 0x4658cc]
cmp byte [esp + 0x78], 0
je 0x463b27
or dword [ebp + 4], 0x1f
jmp case.0x464a5e.7
mov eax, dword [ebp]
and eax, 0xffffffec
or eax, 0xc
mov dword [ebp], eax
jmp case.0x464a5e.7
cmp byte [esp + 0x78], 0
je 0x463b4b
or dword [ebp + 4], 0x100080
jmp case.0x464a5e.7
or dword [ebp], 0x80
jmp case.0x464a5e.7
cmp byte [esp + 0x78], 0
je 0x463f73
or dword [ebp], 0x200
jmp case.0x464a5e.7
mov ebx, 0xa
push ebx
push 0x4bf9a4
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x463c29
movzx eax, byte [esi + 4]
add eax, 0xfffffff6
add edi, 0x14
cmp eax, 0xf
ja case.0x463ba0.12
movzx ecx, byte [eax + 0x465900]
jmp dword [ecx*4 + 0x4658f8]
cmp byte [esp + 0x78], 0
je 0x463bdd
mov esi, edi
call fcn.00477090
mov dword [ebp + 0x60], eax
cmp eax, 0xffffffff
jne case.0x464a5e.7
push 0x10
push 0
push edi
call fcn.00490f0f
add esp, 0xc
mov ecx, eax
call fcn.004318c0
mov dword [ebp + 0x60], eax
jmp case.0x464a5e.7
mov dword [ebp + 0x60], 0xff000000
jmp case.0x464a5e.7
cmp byte [esp + 0x78], 0
je 0x463c18
and byte [esi + 5], 0xdf
push 0x4acb4c
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x463c0f
or byte [esi + 5], 0x40
jmp case.0x464a5e.7
and byte [esi + 5], 0xbf
jmp case.0x464a5e.7
mov dl, byte [esi + 5]
and dl, 0xbf
or dl, 0x20
mov byte [esi + 5], dl
jmp case.0x464a5e.7
push 0x4bf97c
push edi
call fcn.0048f769
add esp, 8
test eax, eax
je 0x4639b9
push 0x4bf8cc
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x463c6c
mov al, byte [esp + 0x78]
mov byte [ebp + 0x193], al
jmp case.0x464a5e.7
or dword [ebp + 4], 0x20000
jmp case.0x464a5e.7
push 4
push 0x4aca38
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x463c99
push 3
push eax
add edi, 8
push edi
mov ecx, 0x4cb520
call fcn.004233c0
mov dword [ebp + 0x1c], eax
jmp case.0x464a5e.7
push 4
push 0x4aca0c
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x463cef
add edi, 8
cmp byte [esi + 4], bl
jne 0x463cd5
push 0x4bf9bc
push edi
call fcn.0048f769
add esp, 8
neg eax
sbb eax, eax
and eax, 0xfffffffe
add eax, 2
mov dword [ebp + 0x14], eax
jmp case.0x464a5e.7
cmp byte [esp + 0x78], 0
je case.0x464a5e.7
mov esi, edi
call fcn.0040eb60
mov dword [ebp + 0x70], eax
jmp case.0x464a5e.7
push 0x4bf9c8
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x463d0d
mov dword [ebp + 0x14], 1
jmp case.0x464a5e.7
push 0x4aca80
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x463d2b
mov dword [ebp + 0x14], 3
jmp case.0x464a5e.7
push 0x4bf9d8
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x463d55
cmp byte [0x4cc1c2], al
je case.0x464a5e.7
mov dword [ebp + 0x14], 4
jmp case.0x464a5e.7
cmp byte [esi + 4], bl
jne 0x463e08
push 0x4ae134
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x463d86
cmp byte [esp + 0x78], al
je 0x464107
or dword [ebp + 4], 0x4000
jmp case.0x464a5e.7
cmp byte [esi + 4], bl
jne 0x463e08
push 6
push 0x4ae118
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x463dd9
push 0x4ae134
add edi, 0xc
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x463dca
cmp byte [esp + 0x78], al
je 0x463917
or dword [ebp], 0x8000
jmp case.0x464a5e.7
mov cl, byte [esp + 0x78]
mov byte [ebp + 0x194], cl
jmp case.0x464a5e.7
cmp byte [esi + 4], bl
jne 0x463e08
push 0x4bf9e4
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x463e08
cmp byte [esp + 0x78], al
je 0x463dff
or dword [ebp + 0x10], 1
jmp case.0x464a5e.7
and dword [ebp + 0x10], 0xfffffffe
jmp case.0x464a5e.7
push 5
push 0x4a81a0
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x463e2c
lea esi, [edi + 0xa]
call fcn.0040eb60
mov dword [ebp + 0x64], eax
jmp case.0x464a5e.7
push 2
push 0x4bf9f0
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x463e78
push eax
push eax
push eax
push eax
lea eax, [edi + 4]
call fcn.00475d20
add esp, 0x10
test eax, eax
je case.0x464a5e.7
lea esi, [edi + 4]
call fcn.00414b80
cmp byte [esp + 0x78], 0
je 0x463e6e
or dword [ebp + 0x10], eax
jmp case.0x464a5e.7
not eax
and dword [ebp + 0x10], eax
jmp case.0x464a5e.7
push 9
push 0x4bf9f8
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x463ea6
cmp byte [esp + 0x78], al
je case.0x464a5e.7
lea esi, [edi + 0x12]
call fcn.00414b80
mov dword [ebp + 0x18], eax
jmp case.0x464a5e.7
cmp byte [esi + 4], 4
jne 0x463ed2
push 0x4a7fa0
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x463ed2
cmp byte [esp + 0x78], 0
je case.0x464847.11
or dword [ebp], 1
jmp case.0x464a5e.7
cmp byte [esi + 4], 5
jne 0x463efd
push 0x4bfa0c
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x463efd
cmp byte [esp + 0x78], al
je 0x464415
or dword [ebp], 6
jmp case.0x464a5e.7
push 0x4ad8e8
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x463f93
movzx eax, byte [esi + 4]
add eax, 0xfffffff7
cmp eax, 3
ja case.0x464a5e.7
jmp dword [eax*4 + 0x465910]
mov esi, dword [esi]
test esi, esi
je case.0x463fb5.9
movzx edx, byte [esp + 0x78]
push 0
push edx
push 0xcf
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x464a5e.7
cmp byte [esp + 0x78], 0
je 0x463f5c
or dword [ebp], 0x800
jmp case.0x464a5e.7
or dword [ebp + 4], 0x800
jmp case.0x464a5e.7
cmp byte [esp + 0x78], 0
je 0x463b62
or dword [ebp + 4], 0x200
jmp case.0x464a5e.7
cmp byte [esp + 0x78], 0
je 0x464137
or dword [ebp + 4], 8
jmp case.0x464a5e.7
push 0x4bfa1c
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x463fdc
movzx eax, byte [esi + 4]
add eax, 0xfffffff7
cmp eax, 5
ja case.0x464a5e.7
jmp dword [eax*4 + 0x465920]
cmp byte [esp + 0x78], 0
je 0x463fd3
or dword [ebp], 4
jmp case.0x464a5e.7
cmp byte [esp + 0x78], 0
je 0x463fc3
or dword [ebp + 4], 4
jmp case.0x464a5e.7
cmp byte [esi + 4], 0xc
jne 0x464068
push 0x4bfa28
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x464016
cmp byte [esp + 0x78], al
je 0x46400a
or dword [ebp], 0x1000
jmp case.0x464a5e.7
or dword [ebp + 4], 0x1000
jmp case.0x464a5e.7
cmp byte [esi + 4], 0xc
jne 0x464068
push 0x4bfa40
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x46403d
cmp byte [esp + 0x78], al
je 0x46408b
or byte [esi + 5], 0x80
jmp case.0x464a5e.7
cmp byte [esi + 4], 0xc
jne 0x464068
push 0x4bfa50
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x464068
cmp byte [esp + 0x78], al
je 0x463743
and byte [esi + 5], 0xfd
jmp case.0x464a5e.7
mov al, byte [esi + 4]
cmp al, bl
je 0x464073
cmp al, 0xb
jne 0x464094
push 0x4bfa64
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x464094
cmp byte [esp + 0x78], al
je 0x464034
and byte [esi + 5], 0x7f
jmp case.0x464a5e.7
cmp byte [esi + 4], 0xc
jne 0x4640c3
push 0x4a835c
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x4640c3
cmp byte [esp + 0x78], 0
je 0x464155
or dword [ebp], 0x2000
jmp case.0x464a5e.7
push 0x4bfa74
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x464113
mov al, byte [esi + 4]
cmp al, 0xc
jne 0x4640f0
cmp byte [esp + 0x78], 0
je 0x464350
or dword [ebp], 0x10
jmp case.0x464a5e.7
cmp al, 8
je case.0x463f23.9
cmp al, 7
jne case.0x464a5e.7
cmp byte [esp + 0x78], 0
je 0x463d7a
or dword [ebp], 0x4000
jmp case.0x464a5e.7
push 0x4bfa88
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x464161
mov al, byte [esi + 4]
cmp al, 0xc
jne 0x464140
cmp byte [esp + 0x78], 0
je case.0x464847.16
or dword [ebp], 8
jmp case.0x464a5e.7
cmp al, 8
je case.0x463b10.3
cmp al, 7
jne case.0x464a5e.7
jmp case.0x463b10.3
or dword [ebp + 4], 0x2000
jmp case.0x464a5e.7
cmp byte [esi + 4], 0xc
jne 0x4641df
push 8
push 0x4bfa9c
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x4641df
cmp byte [esp + 0x78], 0
mov ax, word [edi + 0x10]
mov word [ebp + 0x18c], ax
je 0x4641bb
or dword [ebp], 0x20
mov esi, dword [esi]
test esi, esi
je 0x4641d5
movzx eax, ax
push 0
test ax, ax
jne 0x4641b8
movzx ecx, byte [0x4cc1c2]
neg ecx
sbb ecx, ecx
and ecx, 0x25a5
add ecx, 0x2a
push ecx
jmp 0x4641c9
push eax
jmp 0x4641c9
or dword [ebp + 4], 0x20
mov esi, dword [esi]
test esi, esi
je 0x4641d5
push 0
push 0
push 0xcc
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
mov byte [esp + 0x13], 1
jmp case.0x464a5e.7
push 5
push 0x4bfab0
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x464226
cmp byte [esp + 0x78], al
je 0x46421a
add edi, ebx
cmp word [edi], ax
je 0x46420f
mov esi, edi
call fcn.0040eb60
mov dword [ebp + 0x64], eax
jmp case.0x464a5e.7
or eax, 0xffffffff
mov dword [ebp + 0x64], eax
jmp case.0x464a5e.7
mov dword [ebp + 0x64], SysStringLen
jmp case.0x464a5e.7
cmp byte [esi + 4], 8
jne 0x464251
push 0x4bfabc
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x464251
cmp byte [esp + 0x78], al
je case.0x464847.11
or dword [ebp], 1
jmp case.0x464a5e.7
push 4
push 0x4a54b4
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x4642c3
movzx eax, byte [esi + 4]
add eax, 0xfffffff9
cmp eax, 3
ja case.0x464a5e.7
jmp dword [eax*4 + 0x465938]
cmp byte [esp + 0x78], 0
je case.0x464949.11
or dword [ebp], 2
jmp case.0x464a5e.7
cmp byte [esp + 0x78], 0
je 0x4642ba
push 0x4ae0fc
add edi, 8
push edi
call fcn.0048f769
add esp, 8
neg eax
sbb eax, eax
and eax, 0xfffffff0
add eax, 0x20
or dword [ebp], eax
jmp case.0x464a5e.7
or dword [ebp + 4], 0x30
jmp case.0x464a5e.7
cmp byte [esi + 4], 0x10
jne 0x4642f6
push 0x4bfacc
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x4642f6
cmp byte [esp + 0x78], al
je 0x464484
mov eax, dword [ebp]
and eax, 0xffffffef
or eax, 0x40
mov dword [ebp], eax
jmp case.0x464a5e.7
mov bl, 0x11
cmp byte [esi + 4], bl
jne 0x4643b4
push 0x4bfad8
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x464326
cmp byte [esp + 0x78], al
je 0x46408b
or byte [esi + 5], 0x80
jmp case.0x464a5e.7
cmp byte [esi + 4], bl
jne 0x4643b4
push 0x4bfae8
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x464359
cmp byte [esp + 0x78], al
je 0x464350
or dword [ebp], 0x10
jmp case.0x464a5e.7
or dword [ebp + 4], 0x10
jmp case.0x464a5e.7
cmp byte [esi + 4], bl
jne 0x4643b4
push 0xc
push 0x4bfaf8
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x4643b4
cmp byte [esp + 0x78], 0
mov eax, 1
mov byte [ebp + 0x190], al
je 0x4643a5
or dword [ebp], eax
cmp word [edi + 0x18], 0
lea esi, [edi + 0x18]
setne cl
mov byte [ebp + 0x191], cl
call fcn.0040eb60
mov dword [ebp + 0x40], eax
jmp case.0x464a5e.7
or dword [ebp + 4], eax
mov dword [ebp + 0x40], 0xffffffff
jmp case.0x464a5e.7
push 4
push 0x4a7fc0
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x46441e
mov al, byte [esi + 4]
cmp al, bl
jne 0x4643ea
cmp byte [esp + 0x78], 0
je case.0x464a5e.7
lea esi, [edi + 8]
call fcn.0040eb60
mov dword [ebp + 0x44], eax
jmp case.0x464a5e.7
cmp al, 0xb
jne case.0x464a5e.7
mov ax, word [edi + 8]
call fcn.00409740
cmp ax, 0x53
jne case.0x464a5e.7
cmp byte [esp + 0x78], 0
je 0x464415
or dword [ebp], 6
jmp case.0x464a5e.7
or dword [ebp + 4], 6
jmp case.0x464a5e.7
cmp byte [esi + 4], bl
jne 0x46448d
push 4
push 0x4bfb14
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x464451
cmp byte [esp + 0x78], al
je case.0x464a5e.7
lea esi, [edi + 8]
call fcn.0040eb60
mov dword [ebp + 0x48], eax
jmp case.0x464a5e.7
cmp byte [esi + 4], bl
jne 0x46448d
push 5
push 0x4bfb20
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x46448d
cmp byte [esp + 0x78], al
je 0x464484
or dword [ebp], 0x40
lea esi, [edi + 0xa]
call fcn.0040eb60
mov dword [ebp + 0x4c], eax
jmp case.0x464a5e.7
or dword [ebp + 4], 0x40
jmp case.0x464a5e.7
push 7
push 0x4a5930
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x46452d
cmp byte [esi + 4], bl
jne case.0x464a5e.7
cmp byte [esp + 0x78], al
je 0x464a8d
mov dword [ebp + 0x50], 0xffffffff
mov ax, word [edi + 0xe]
call fcn.00409740
movzx eax, ax
add eax, 0xffffffbe
cmp eax, 0x12
ja case.0x4644da.67
movzx edx, byte [eax + 0x46595c]
jmp dword [edx*4 + 0x465948]
mov dword [ebp + 0x50], 0
jmp case.0x4644da.67
mov dword [ebp + 0x50], 1
jmp case.0x4644da.67
mov dword [ebp + 0x50], 2
jmp case.0x4644da.67
mov dword [ebp + 0x50], 3
mov eax, dword [ebp + 0x50]
test eax, eax
jns 0x46451d
or dword [ebp], 0x100
mov dword [ebp + 0x50], 0
jmp case.0x464a5e.7
inc eax
or dword [ebp], 0x100
mov dword [ebp + 0x50], eax
jmp case.0x464a5e.7
cmp byte [esi + 4], bl
jne 0x4645d5
push 5
push 0x4bfb2c
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x4645d5
cmp byte [esp + 0x78], al
je case.0x464a5e.7
movzx ebx, word [edi + 0xa]
test bx, bx
je case.0x464a5e.7
push eax
push 1
push eax
push eax
add edi, 0xc
push edi
mov ecx, 0x4cb520
call fcn.00423420
test eax, eax
je case.0x464a5e.7
cmp byte [eax + 0x17], 0
jne 0x464589
mov eax, dword [eax + 0xc]
test byte [eax + 0x16], 2
jne case.0x464a5e.7
mov edi, dword [esp + 0x74]
mov ecx, dword [edi + 0x10]
lea edx, [ecx - 1]
cmp edx, ecx
jae case.0x464a5e.7
lea esi, [edx + edx*4]
add esi, esi
add esi, esi
lea esp, [esp]
mov ecx, dword [edi + 0x18]
add ecx, esi
cmp dword [ecx + 8], eax
jne 0x4645c7
cmp ebx, 0x31
jne 0x4645c4
mov dword [ebp + 0x54], ecx
jmp 0x4645c7
mov dword [ebp + 0x58], ecx
dec edx
sub esi, 0x14
cmp edx, dword [edi + 0x10]
jb 0x4645b0
jmp case.0x464a5e.7
push 0x4bfb38
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x46461e
mov al, byte [esi + 4]
cmp al, bl
jne 0x464602
cmp byte [esp + 0x78], 0
je case.0x464949.11
or dword [ebp], 2
jmp case.0x464a5e.7
cmp al, 0x12
jne case.0x464a5e.7
cmp byte [esp + 0x78], 0
je 0x463fd3
or dword [ebp], 4
jmp case.0x464a5e.7
push 5
push 0x4bfb4c
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x4646d7
cmp byte [esp + 0x78], al
je case.0x464a5e.7
cmp word [edi + 0xa], ax
je case.0x464a5e.7
mov al, byte [esi + 4]
cmp al, 0xd
je 0x46468d
cmp al, 0xe
je 0x46468d
lea esi, [edi + 0xa]
mov byte [ebp + 0x18e], 1
call fcn.0040eb60
push 0x2d
add edi, 0xc
push edi
mov dword [ebp + 0x38], eax
call fcn.00490591
add esp, 8
test eax, eax
je case.0x464a5e.7
lea esi, [eax + 2]
call fcn.0040eb60
mov dword [ebp + 0x3c], eax
jmp case.0x464a5e.7
lea ebx, [ebp + 0x160]
mov eax, ebx
lea ecx, [edi + 0xa]
call fcn.00475910
mov dword [ebp + 0x184], eax
test eax, eax
je case.0x464a5e.7
mov ecx, dword [esi]
test ecx, ecx
je case.0x464a5e.7
xor edx, edx
cmp byte [esi + 4], 0xd
push ebx
setne dl
push eax
dec edx
and edx, 0xfffffff2
add edx, 0x1012
push edx
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x464a5e.7
cmp byte [esi + 4], 0x12
jne 0x464702
push 0x4bfb58
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x464702
cmp byte [esp + 0x78], al
je case.0x464847.11
or dword [ebp], 1
jmp case.0x464a5e.7
push 0x4bfb68
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x46474e
mov al, byte [esi + 4]
cmp al, 0x13
jne 0x464732
cmp byte [esp + 0x78], 0
je 0x464a8d
or dword [ebp], 0x100
jmp case.0x464a5e.7
cmp al, 0xb
jne case.0x464a5e.7
cmp byte [esp + 0x78], 0
je case.0x464847.11
or dword [ebp], 1
jmp case.0x464a5e.7
cmp byte [esi + 4], 0x13
jne 0x464780
push 0x4acbb0
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x464780
cmp byte [esp + 0x78], al
je case.0x464949.11
or dword [ebp], 2
or dword [ebp + 4], 0x80
jmp case.0x464a5e.7
cmp byte [esi + 4], 0x18
jne 0x4647cb
push 5
push 0x4a860c
push edi
call fcn.0048ffb7
add esp, 0xc
test eax, eax
jne 0x4647cb
mov ecx, dword [0x4ca55c]
lea eax, [esp + 0x40]
push eax
add edi, 0xa
push edi
push ecx
call dword [sym.imp.USER32.dll_GetClassInfoExW]
mov word [ebp + 0x198], ax
test ax, ax
jne case.0x464a5e.7
push edi
push 0x4bfb78
jmp 0x465337
push 0x4ae0e4
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x464899
movzx eax, byte [esi + 4]
dec eax
cmp byte [esp + 0x78], 0
je 0x464837
cmp eax, 0x10
ja case.0x464a5e.7
movzx edx, byte [eax + 0x465984]
jmp dword [edx*4 + 0x465970]
or dword [ebp], 8
or dword [ebp + 4], 4
jmp case.0x464a5e.7
or dword [ebp], 1
or dword [ebp + 4], 0x1e
jmp case.0x464a5e.7
or dword [ebp], 0x300
jmp case.0x464a5e.7
or dword [ebp], 1
or dword [ebp + 4], 2
jmp case.0x464a5e.7
cmp eax, 0x10
ja case.0x464a5e.7
movzx eax, byte [eax + 0x4659ac]
jmp dword [eax*4 + 0x465998]
mov esi, dword [esi]
test esi, esi
je 0x464875
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
jne case.0x464a5e.7
or dword [ebp + 4], eax
jmp case.0x464a5e.7
mov eax, dword [ebp]
mov ecx, eax
and ecx, 0x300
cmp ecx, 0x300
jne case.0x464a5e.7
and eax, 0xfffffcff
mov dword [ebp], eax
jmp case.0x464a5e.7
push 0x4a3e08
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x4649c1
movzx eax, byte [esi + 4]
dec eax
cmp byte [esp + 0x78], 0
je 0x464939
cmp eax, 0x16
ja case.0x464a5e.7
movzx edx, byte [eax + 0x4659e0]
jmp dword [edx*4 + 0x4659c0]
or dword [ebp + 4], 8
or dword [ebp], 4
jmp case.0x464a5e.7
or dword [ebp], 2
or dword [ebp + 4], 0x1d
jmp case.0x464a5e.7
or dword [ebp], 0x200
or dword [ebp + 4], 0x100
mov al, byte [esi + 4]
mov ecx, dword [ebp]
cmp al, 5
je 0x46490c
cmp al, 6
jne case.0x464a5e.7
or ecx, 0x20
mov dword [ebp], ecx
jmp case.0x464a5e.7
or dword [ebp], 2
or dword [ebp + 4], 1
jmp case.0x464a5e.7
or dword [ebp], 0x282
jmp case.0x464a5e.7
or dword [ebp], 0x20
jmp case.0x464a5e.7
cmp eax, 0x12
ja case.0x464a5e.7
movzx eax, byte [eax + 0x465a14]
jmp dword [eax*4 + 0x4659f8]
or dword [ebp + 4], 0x20
jmp case.0x464a5e.7
or dword [ebp], 4
or dword [ebp + 4], 8
jmp case.0x464a5e.7
mov esi, dword [esi]
test esi, esi
je 0x464991
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
je case.0x464a5e.7
or dword [ebp + 4], 0x200
jmp case.0x464a5e.7
mov eax, dword [ebp]
mov ecx, eax
and ecx, 0x300
cmp ecx, 0x300
je case.0x464a5e.7
and eax, 0xfffffdff
mov dword [ebp], eax
jmp case.0x464a5e.7
or dword [ebp + 4], 0x82
jmp case.0x464a5e.7
push 0x4a3e14
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x464abd
cmp byte [esp + 0x78], 0
movzx eax, byte [esi + 4]
je 0x464a4b
dec eax
cmp eax, 0x12
ja case.0x464a5e.7
movzx edx, byte [eax + 0x465a48]
jmp dword [edx*4 + 0x465a28]
or dword [ebp + 4], 4
or dword [ebp], 8
jmp case.0x464a5e.7
or dword [ebp + 4], 0x200
or dword [ebp], 0x100
mov al, byte [esi + 4]
mov ecx, dword [ebp + 4]
cmp al, 5
je 0x464a27
cmp al, 6
jne case.0x464a5e.7
or ecx, 0x20
mov dword [ebp + 4], ecx
jmp case.0x464a5e.7
or dword [ebp + 4], 3
jmp case.0x464a5e.7
or dword [ebp], 0x280
or dword [ebp + 4], 2
jmp case.0x464a5e.7
add eax, 0xfffffffd
cmp eax, 0x10
ja case.0x464a5e.7
movzx eax, byte [eax + 0x465a6c]
jmp dword [eax*4 + 0x465a5c]
or dword [ebp + 4], 0xc
jmp case.0x464a5e.7
mov esi, dword [esi]
test esi, esi
je 0x464a99
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
je case.0x464a5e.7
or dword [ebp + 4], 0x100
jmp case.0x464a5e.7
mov eax, dword [ebp]
mov ecx, eax
and ecx, 0x300
cmp ecx, 0x300
je case.0x464a5e.7
and eax, 0xfffffeff
mov dword [ebp], eax
jmp case.0x464a5e.7
push 0
push 0
push 1
push 0
mov eax, edi
call fcn.00475d20
add esp, 0x10
test eax, eax
je 0x464b09
mov esi, edi
call fcn.00414b80
cmp byte [esp + 0x78], 0
je 0x464af5
or dword [ebp], eax
mov dx, word [esp + 0x18]
mov eax, dword [esp + 0x14]
mov word [eax], dx
jmp 0x46526f
or dword [ebp + 4], eax
mov dx, word [esp + 0x18]
mov eax, dword [esp + 0x14]
mov word [eax], dx
jmp 0x46526f
mov bl, byte [esp + 0x78]
add edi, 2
cmp word [edi], 0
jne 0x464bb2
test bl, bl
je 0x464b38
mov eax, dword [esp + 0x84]
test eax, eax
je 0x464b38
cmp byte [eax + 0x17], 0
jne 0x464b32
mov eax, dword [eax + 0xc]
test byte [eax + 0x15], 2
jne 0x464bb2
mov ax, word [edi - 2]
call fcn.00409740
movzx eax, ax
cmp eax, 0x43
je 0x464b7e
cmp eax, 0x47
je 0x464b63
cmp eax, 0x56
jne 0x46532e
mov dword [esi + 8], 0
jmp case.0x464a5e.7
mov eax, dword [esi + 0xc]
test eax, eax
je 0x464b72
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esi + 0xc], 0
jmp case.0x464a5e.7
test bl, bl
jne case.0x464a5e.7
cmp byte [esi + 4], 2
je case.0x464a5e.7
mov eax, dword [esp + 0x1c]
cmp dword [eax], 0xff000000
je case.0x464a5e.7
mov dword [eax], 0xff000000
mov byte [ebp + 0x18f], 1
jmp case.0x464a5e.7
mov ax, word [edi - 2]
call fcn.00409740
movzx eax, ax
add eax, 0xffffffbd
cmp eax, 0x16
ja case.0x464bd1.68
movzx edx, byte [eax + 0x465aa8]
jmp dword [edx*4 + 0x465a80]
mov al, byte [esi + 4]
cmp al, 3
je 0x4652de
cmp al, 0x12
je 0x4652de
mov eax, dword [esp + 0x84]
push 4
mov ebx, 0x4cb520
call fcn.0041c000
mov ebx, eax
test ebx, ebx
jne 0x464c24
push 0x4bf16c
push edi
call fcn.0048f769
add esp, 8
test eax, eax
jne 0x4652d3
mov eax, dword [esp + 0x7c]
or byte [eax + 5], 1
jmp 0x464c28
mov eax, dword [esp + 0x7c]
mov al, byte [eax + 4]
cmp al, 1
je 0x464c33
cmp al, 2
jne 0x464c3a
or dword [ebp], 0x100
mov esi, dword [esp + 0x7c]
add esi, 0xc
mov edi, ebx
call fcn.004012d0
jmp case.0x464a5e.7
cmp dword [ebp + 0x13c], 0x32
jae case.0x464a5e.7
mov esi, edi
call fcn.00414b80
mov ecx, dword [ebp + 0x13c]
mov dword [ebp + ecx*4 + 0x74], eax
inc dword [ebp + 0x13c]
jmp case.0x464a5e.7
push 3
push 0
push edi
mov ecx, 0x4cb520
call fcn.004233c0
test eax, eax
je 0x465341
cmp byte [eax + 0x17], 0
jne 0x464c96
mov eax, dword [eax + 0xc]
mov dl, byte [eax + 0x16]
and dl, 0x22
cmp dl, 2
je 0x4652e5
mov ebx, dword [esp + 0x74]
xor edx, edx
cmp dword [ebx + 0x10], edx
jbe 0x464cc7
mov ecx, dword [ebx + 0x18]
add ecx, 8
cmp dword [ecx], eax
je 0x4652f0
inc edx
add ecx, 0x14
cmp edx, dword [ebx + 0x10]
jb 0x464cb6
mov dword [esi + 8], eax
jmp case.0x464a5e.7
cmp byte [esi + 4], 2
je case.0x464a5e.7
mov esi, edi
call fcn.00477090
cmp eax, 0xffffffff
jne 0x464cf9
push 0x10
push 0
push edi
call fcn.00490f0f
add esp, 0xc
mov ecx, eax
call fcn.004318c0
mov ecx, dword [esp + 0x1c]
cmp dword [ecx], eax
jne 0x464d0c
lea edx, [ebp + 0x5c]
cmp ecx, edx
jne case.0x464a5e.7
mov dword [ecx], eax
mov byte [ebp + 0x18f], 1
jmp case.0x464a5e.7
mov ax, word [edi]
call fcn.00409740
cmp ax, 0x50
jne 0x464d5d
lea esi, [edi + 2]
call fcn.0040eb60
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x464d4d
mov ecx, dword [0x4cb4f0]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x88]
add edx, eax
mov dword [ebp + 0x28], edx
jmp case.0x464a5e.7
mov esi, edi
call fcn.0040eb60
mov ecx, dword [esp + 0x74]
call fcn.0045cf70
mov dword [ebp + 0x28], eax
jmp case.0x464a5e.7
mov ax, word [edi]
call fcn.00409740
cmp ax, 0x50
jne 0x464db8
lea esi, [edi + 2]
call fcn.0040eb60
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x464da8
mov ecx, dword [0x4cb4f0]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x8c]
add edx, eax
mov dword [ebp + 0x2c], edx
jmp case.0x464a5e.7
mov esi, edi
call fcn.0040eb60
mov ecx, dword [esp + 0x74]
call fcn.0045cf70
mov dword [ebp + 0x2c], eax
jmp case.0x464a5e.7
movzx eax, word [edi]
cmp eax, 0x2b
jne 0x464ea6
mov ax, word [edi + 2]
lea esi, [edi + 2]
call fcn.00409740
cmp ax, 0x4d
jne 0x464df7
mov edi, dword [esp + 0x74]
mov eax, dword [edi + 0x78]
jmp 0x464e19
call fcn.0040eb60
mov edi, dword [esp + 0x74]
cmp byte [edi + 0xc0], 0
je 0x464e19
mov ecx, dword [0x4cb4f0]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esp + 0x7c]
mov bl, byte [edx + 6]
mov ecx, edi
mov dword [esp + 0x78], eax
call fcn.0046a100
mov esi, eax
test esi, esi
je 0x464e78
mov eax, dword [esp + 0x7c]
mov al, byte [eax + 7]
call fcn.0046a280
test eax, eax
jne 0x464e78
mov ebx, dword [esp + 0x74]
mov edx, esi
lea edi, [esp + 0x20]
mov ecx, ebx
call fcn.0046a390
mov ecx, dword [eax]
add ecx, dword [esp + 0x78]
cmp dword [ebp + 0x24], 0x80000000
mov eax, dword [eax + 4]
mov dword [ebp + 0x20], ecx
jne case.0x464a5e.7
mov ecx, dword [ebx + 0x7c]
add ecx, eax
mov dword [ebp + 0x24], ecx
jmp case.0x464a5e.7
mov edx, dword [edi + 0x88]
add edx, dword [edi + 0x80]
add edx, dword [esp + 0x78]
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], edx
jne case.0x464a5e.7
mov eax, dword [edi + 0x84]
mov dword [ebp + 0x24], eax
jmp case.0x464a5e.7
call fcn.00409740
cmp ax, 0x4d
jne 0x464efc
lea esi, [edi + 2]
call fcn.0040eb60
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x464ed6
mov ecx, dword [0x4cb4f0]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x78]
add edx, eax
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], edx
jne case.0x464a5e.7
mov eax, dword [esi + 0x94]
add eax, dword [esi + 0x7c]
mov dword [ebp + 0x24], eax
jmp case.0x464a5e.7
mov ax, word [edi]
call fcn.00409740
cmp ax, 0x50
jne 0x464f55
lea esi, [edi + 2]
call fcn.0040eb60
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x464f2f
mov ecx, dword [0x4cb4f0]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x80]
add edx, eax
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], edx
jne case.0x464a5e.7
mov eax, dword [esi + 0x84]
mov dword [ebp + 0x24], eax
jmp case.0x464a5e.7
mov ax, word [edi]
call fcn.00409740
cmp ax, 0x53
jne 0x464fb1
lea esi, [edi + 2]
call fcn.0040eb60
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x464f88
mov ecx, dword [0x4cb4f0]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x98]
add edx, eax
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], edx
jne case.0x464a5e.7
mov eax, dword [esi + 0xa4]
add eax, dword [esi + 0x7c]
mov dword [ebp + 0x24], eax
jmp case.0x464a5e.7
mov esi, edi
call fcn.0040eb60
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x464fd5
mov ecx, dword [0x4cb4f0]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], eax
jne case.0x464a5e.7
mov edx, dword [esi + 0x94]
add edx, dword [esi + 0x7c]
mov dword [ebp + 0x24], edx
jmp case.0x464a5e.7
movzx eax, word [edi]
cmp eax, 0x2b
jne 0x4650ce
mov ax, word [edi + 2]
lea esi, [edi + 2]
call fcn.00409740
cmp ax, 0x4d
jne 0x46501d
mov edi, dword [esp + 0x74]
mov eax, dword [edi + 0x7c]
jmp 0x46503f
call fcn.0040eb60
mov edi, dword [esp + 0x74]
cmp byte [edi + 0xc0], 0
je 0x46503f
mov ecx, dword [0x4cb4f0]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esp + 0x7c]
mov bl, byte [edx + 6]
mov ecx, edi
mov dword [esp + 0x78], eax
call fcn.0046a100
mov esi, eax
test esi, esi
je 0x4650a0
mov eax, dword [esp + 0x7c]
mov al, byte [eax + 7]
call fcn.0046a280
test eax, eax
jne 0x4650a0
mov ebx, dword [esp + 0x74]
mov edx, esi
lea edi, [esp + 0x28]
mov ecx, ebx
call fcn.0046a390
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x78]
add edx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], edx
jne case.0x464a5e.7
mov eax, dword [ebx + 0x78]
add eax, ecx
mov dword [ebp + 0x20], eax
jmp case.0x464a5e.7
mov ecx, dword [edi + 0x8c]
add ecx, dword [edi + 0x84]
add ecx, dword [esp + 0x78]
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], ecx
jne case.0x464a5e.7
mov edx, dword [edi + 0x80]
mov dword [ebp + 0x20], edx
jmp case.0x464a5e.7
call fcn.00409740
cmp ax, 0x4d
jne 0x465124
lea esi, [edi + 2]
call fcn.0040eb60
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x4650fe
mov ecx, dword [0x4cb4f0]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x7c]
add edx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], edx
jne case.0x464a5e.7
mov eax, dword [esi + 0x90]
add eax, dword [esi + 0x78]
mov dword [ebp + 0x20], eax
jmp case.0x464a5e.7
mov ax, word [edi]
call fcn.00409740
cmp ax, 0x50
jne 0x46517d
lea esi, [edi + 2]
call fcn.0040eb60
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x465157
mov ecx, dword [0x4cb4f0]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x84]
add edx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], edx
jne case.0x464a5e.7
mov eax, dword [esi + 0x80]
mov dword [ebp + 0x20], eax
jmp case.0x464a5e.7
mov ax, word [edi]
call fcn.00409740
cmp ax, 0x53
jne 0x4651d9
lea esi, [edi + 2]
call fcn.0040eb60
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x4651b0
mov ecx, dword [0x4cb4f0]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x9c]
add edx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], edx
jne case.0x464a5e.7
mov eax, dword [esi + 0xa0]
add eax, dword [esi + 0x78]
mov dword [ebp + 0x20], eax
jmp case.0x464a5e.7
mov esi, edi
call fcn.0040eb60
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x4651fd
mov ecx, dword [0x4cb4f0]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], eax
jne case.0x464a5e.7
mov edx, dword [esi + 0x90]
add edx, dword [esi + 0x78]
mov dword [ebp + 0x20], edx
jmp case.0x464a5e.7
mov esi, edi
call fcn.00414bb0
fstp dword [ebp + 0x30]
jmp case.0x464a5e.7
mov ax, word [edi - 2]
call fcn.00409740
cmp ax, 0x45
jne 0x46532e
push 0
push 0
push 0
push 0
mov eax, edi
call fcn.00475d20
add esp, 0x10
test eax, eax
je 0x46532e
mov esi, edi
call fcn.00414b80
test bl, bl
je 0x465260
or dword [ebp + 8], eax
jmp case.0x464a5e.7
or dword [ebp + 0xc], eax
mov ecx, dword [esp + 0x14]
mov ax, word [esp + 0x18]
mov word [ecx], ax
mov eax, dword [esp + 0x14]
mov edi, eax
movzx eax, word [edi]
cmp eax, 0x20
je 0x465282
cmp eax, 9
jne 0x465287
add edi, 2
jmp 0x465275
cmp word [edi], 0
jne 0x46368b
mov esi, dword [esp + 0x7c]
mov eax, dword [esi]
test eax, eax
je 0x4658bb
push 0xfffffffffffffff0
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, dword [ebp + 4]
mov ecx, dword [ebp]
mov ebx, eax
mov dword [esp + 0x78], eax
mov eax, edx
not eax
or ebx, ecx
and ebx, eax
movzx eax, byte [esi + 4]
add eax, 0xfffffffe
cmp eax, 8
ja case.0x4652cc.9
jmp dword [eax*4 + 0x465ac0]
mov esi, dword [esp + 0x7c]
mov eax, 0x4a6508
jmp 0x4652f5
mov eax, 0x4bfbb0
jmp 0x4652f5
add edi, 0xfffffffe
push edi
push 0x4bfc28
jmp 0x465337
mov eax, 0x4bfc88
mov dx, word [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov word [ecx], dx
cmp dword [esi], 0
je 0x465315
call fcn.004099a0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
add edi, 0xfffffffe
push edi
push eax
mov ecx, 0x4cb520
call fcn.004301a0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
add edi, 0xfffffffe
push edi
push 0x4a6d60
mov ecx, 0x4cb520
call fcn.004301a0
mov eax, dword [esp + 0x14]
mov dx, word [esp + 0x18]
mov word [eax], dx
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
mov ecx, ebx
xor ecx, dword [esp + 0x78]
and ecx, 0xf
xor ebx, ecx
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp + 0x64]
test eax, eax
je 0x465546
mov cl, byte [esi + 4]
cmp cl, 0xc
jne 0x465522
push 0
test eax, eax
jns 0x465517
mov eax, dword [esi]
push 0
push 0xc5
push eax
call edi
cmp dword [ebp + 0x64], 0x80000000
je 0x465546
test bl, 4
jne 0x465546
and ebx, 0xffefff7f
jmp 0x465546
and ebx, 0xfffffff7
or ebx, 7
jmp case.0x4652cc.9
test bl, 1
je 0x4653cd
and ebx, 0xfffffff1
or ebx, 1
jmp 0x4653d0
and ebx, 0xfffffff0
mov edi, dword [esp + 0x74]
mov eax, dword [edi + 0x1c]
cmp dword [esp + 0x80], eax
jne 0x465411
test dl, 1
je case.0x4652cc.9
push 0
mov eax, edi
mov edx, dword [eax + 4]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 1
push 0x401
push edx
mov dword [eax + 0x1c], 0xffffffff
call edi
or dword [esp + 0x78], 1
jmp 0x46536a
test cl, 1
je case.0x4652cc.9
cmp eax, dword [edi + 0x10]
jae 0x465455
mov ecx, dword [edi + 0x18]
push 1
lea eax, [eax + eax*4]
mov edx, dword [ecx + eax*4]
push 0xfffffffffffffff0
push edx
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, dword [edi + 0x18]
and eax, 0xfffe
push eax
mov eax, dword [edi + 0x1c]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [eax + eax*4]
mov edx, dword [ecx + eax*4]
push 0xf4
push edx
call edi
jmp 0x46545b
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x80]
mov dword [ecx + 0x1c], eax
push 0
add eax, 3
push eax
mov eax, dword [ecx + 4]
push 0x401
push eax
call edi
jmp 0x46536a
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, ebx
and ecx, 6
cmp cl, 6
jne 0x46549a
and ebx, 0xfffffff6
or ebx, 6
jmp 0x46536a
and ebx, 0xfffffff3
or ebx, 3
jmp 0x46536a
and ebx, 0xfffffff9
or ebx, 9
jmp case.0x4652cc.9
or ebx, 3
jmp case.0x4652cc.9
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
test bl, 1
je 0x4654ce
and ebx, 0xfffffff1
or ebx, 1
jmp 0x46536a
and ebx, 0xfffffff2
or ebx, 2
jmp 0x46536a
mov eax, dword [ebp + 0x14]
cmp eax, 0xffffffff
je case.0x4652cc.9
cmp byte [0x4cc1c2], 0
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
je 0x465501
mov edx, dword [esi]
push 0
push eax
push 0x108e
push edx
call edi
mov eax, dword [ebp + 0x14]
cmp eax, 4
je 0x46536a
and ebx, 0xfffffffc
or ebx, eax
jmp 0x46536a
mov ecx, dword [esi]
push eax
push 0xc5
push ecx
jmp 0x465544
cmp cl, 0xf
jne 0x465546
test eax, eax
jns 0x465539
mov edx, dword [esi]
push 0
push 0
push 0x403
push edx
jmp 0x465544
push 6
push eax
mov eax, dword [esi]
push 0x403
push eax
call edi
mov ecx, dword [esp + 0x78]
mov byte [esp + 0x7c], 0
cmp ecx, ebx
je 0x46562e
mov al, byte [esi + 4]
mov byte [esp + 0x7c], 1
mov byte [esp + 0x84], 0
cmp al, 4
je 0x4655e3
cmp al, 9
je 0x46558b
cmp al, 0x12
jne 0x4655f3
mov ecx, dword [esi]
push 0
push 0
push 0x408
push ecx
call edi
mov dword [esp + 0x18], eax
jmp 0x4655f3
mov eax, ebx
and eax, 0x100000
je 0x4655cb
test ecx, 0x100000
jne 0x4655cb
cmp dword [ebp + 0x68], 0
jge 0x4655be
mov eax, dword [esi]
lea edx, [esp + 0x30]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x38]
sub eax, dword [esp + 0x30]
lea ecx, [eax + eax*2]
mov dword [ebp + 0x68], ecx
mov edx, dword [ebp + 0x68]
push 0
push edx
push 0x194
jmp 0x4655ee
test eax, eax
jne 0x4655f3
test ecx, 0x100000
je 0x4655f3
mov ecx, dword [esi]
push eax
push eax
push 0x194
push ecx
jmp 0x4655f1
movzx edx, bx
push 1
push edx
push 0xf4
mov eax, dword [esi]
push eax
call edi
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esi]
push ebx
push 0xfffffffffffffff0
push ecx
call dword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x465615
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x46562e
mov edx, dword [esi]
push 0xfffffffffffffff0
push edx
call dword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, dword [esp + 0x78]
je 0x46562e
mov byte [esp + 0x84], 1
mov eax, dword [esi]
push 0xffffffffffffffec
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
or ecx, eax
not edx
and ecx, edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x80], ecx
cmp eax, ecx
je 0x4656aa
cmp byte [esp + 0x7c], 0
jne 0x465668
mov byte [esp + 0x7c], 1
mov byte [esp + 0x84], 0
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0x80]
mov ecx, dword [esi]
push eax
push 0xffffffffffffffec
push ecx
call dword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x465691
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x4656aa
mov edx, dword [esi]
push 0xffffffffffffffec
push edx
call dword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, dword [esp + 0x1c]
je 0x4656aa
mov byte [esp + 0x84], 1
cmp byte [esi + 4], 0xa
jne 0x46570c
mov eax, dword [esi]
push 0
push 0
push 0x1037
push eax
call edi
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x80], eax
cmp eax, ecx
je 0x46570c
cmp byte [esp + 0x7c], 0
jne 0x4656e0
mov byte [esp + 0x7c], 1
mov byte [esp + 0x84], 0
push ecx
mov ecx, dword [esi]
push 0
push 0x1036
push ecx
call edi
mov edx, dword [esi]
push 0
push 0
push 0x1037
push edx
call edi
cmp eax, dword [esp + 0x80]
je 0x46570c
mov byte [esp + 0x84], 1
cmp byte [esp + 0x7c], 0
je 0x465722
cmp byte [esp + 0x84], 0
je 0x465722
mov byte [esp + 0x13], 1
movzx eax, byte [esi + 4]
add eax, 0xfffffff7
cmp eax, 0x10
ja case.0x465739.13
movzx eax, byte [eax + 0x465b08]
jmp dword [eax*4 + 0x465ae4]
cmp byte [ebp + 0x18e], 0
je case.0x465739.13
mov ecx, ebp
mov eax, esi
call fcn.004698a0
jmp case.0x465739.13
mov eax, ebp
call fcn.00469980
test dword [ebp + 4], 0x100
je case.0x465739.13
mov ecx, dword [esi]
push 0
push 0
push 0x41d
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x465739.13
mov eax, ebp
mov edi, esi
call fcn.00469a90
jmp case.0x465739.13
mov edi, ebp
call fcn.00469b40
jmp case.0x465739.13
mov edx, dword [esp + 0x74]
push ebx
push edx
mov eax, ebp
mov ecx, esi
call fcn.00469b90
cmp dword [esp + 0x78], ebx
je case.0x465739.13
mov eax, dword [esp + 0x18]
mov ecx, dword [esi]
push 0
push eax
push 0x402
push ecx
jmp 0x465819
mov eax, dword [ebp + 0x13c]
test eax, eax
je case.0x465739.13
lea edx, [ebp + 0x74]
push edx
push eax
mov eax, dword [esi]
push 0xcb
push eax
call edi
mov byte [esp + 0x13], 1
jmp case.0x465739.13
mov eax, dword [ebp + 0x13c]
test eax, eax
je case.0x465739.13
mov edx, dword [esi]
lea ecx, [ebp + 0x74]
push ecx
push eax
push 0x192
push edx
call edi
mov byte [esp + 0x13], 1
jmp case.0x465739.13
mov eax, dword [ebp + 0x60]
cmp eax, 0xffffffff
je case.0x465739.13
push eax
mov eax, dword [esi]
push 0
push 0x2001
push eax
call edi
mov eax, dword [ebp + 0x188]
test eax, eax
je 0x46584a
mov edx, dword [esi]
xor ecx, ecx
cmp eax, 3
sete cl
push 0
push ecx
push 0xb
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebp + 0x188], 3
jne 0x46584a
cmp byte [esi + 4], 0xb
jne 0x465851
cmp byte [esp + 0x13], 0
je 0x46585e
mov eax, dword [esi]
push 1
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
cmp byte [esp + 0x7c], 0
je 0x4658bb
cmp byte [esp + 0x84], 0
jne 0x4658bb
mov ecx, dword [0x4c6a44]
test byte [ecx + 0x100], 1
jne 0x4658a4
mov edx, dword [0x4cad68]
push 1
push 0
push 0xffffffffffffffff
push 0x4a6284
push edx
call fcn.00478f30
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
mov ecx, dword [0x4cbb54]
push 0x4a3920
push 0
push 0x4a6284
call fcn.0042fc50
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x60
ret 0x14