Function at 0x46d310
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x60
push ebx
mov ebx, dword [esp + 0x70]
mov al, byte [ebx + 4]
push ebp
mov ebp, dword [esp + 0x70]
push esi
push edi
mov edi, ecx
cmp al, 0xa
je 0x46d335
cmp al, 2
je 0x46d335
lea eax, [ebx + 0x10]
mov dword [esp + 0x1c], eax
jmp 0x46d33c
lea ecx, [ebp + 0x5c]
mov dword [esp + 0x1c], ecx
cmp word [edi], 0
mov byte [esp + 0x13], 0
je 0x46efdc
jmp 0x46d350
movzx eax, word [edi]
cmp eax, 0x2d
jne 0x46d35f
mov byte [esp + 0x78], 0
jmp 0x46d369
mov byte [esp + 0x78], 1
cmp eax, 0x2b
jne 0x46d36c
add edi, 2
movzx eax, word [edi]
test ax, ax
je 0x46efdc
mov esi, edi
lea ebx, [ebx]
movzx edx, ax
mov ecx, 0x4b3acc
mov eax, 0x20
lea ecx, [ecx]
cmp dx, ax
je 0x46d400
movzx eax, word [ecx + 2]
add ecx, 2
test ax, ax
jne 0x46d390
movzx eax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x46d380
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x46d3b2
sub eax, edx
sar eax, 1
lea edx, [edi + eax*2]
mov dword [esp + 0x14], edx
cmp dword [esp + 0x14], edi
je 0x46efb5
mov eax, dword [esp + 0x14]
movzx ecx, word [eax]
xor edx, edx
push 0x4cdaf4
push edi
mov dword [esp + 0x20], ecx
mov word [eax], dx
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46d406
mov byte [ebp + 0x192], 1
jmp case.0x46e76e.7
mov dword [esp + 0x14], esi
jmp 0x46d3c8
push 0x4cdb04
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46d431
cmp byte [ebx + 4], 0xc
je 0x46d431
cmp byte [esp + 0x78], al
je 0x46dd50
or byte [ebx + 5], 2
jmp case.0x46e76e.7
push 7
push 0x4b5bc0
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46d4bf
add edi, 0xe
push 0x4cdb18
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46d46e
movzx eax, byte [esp + 0x78]
neg eax
sbb eax, eax
and eax, 2
mov dword [ebp + 0x6c], eax
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0xa
jne 0x46d48d
cmp byte [esp + 0x78], 0
je 0x46d484
or dword [ebp + 0x10], 4
jmp case.0x46e76e.7
and dword [ebp + 0x10], 0xfffffffb
jmp case.0x46e76e.7
cmp word [edi], 0
je 0x46d4b2
mov esi, edi
call fcn.004142c0
mov dword [ebp + 0x6c], eax
cmp eax, 0xffffffff
jne case.0x46e76e.7
mov dword [ebp + 0x6c], 2
jmp case.0x46e76e.7
movzx ecx, byte [esp + 0x78]
mov dword [ebp + 0x6c], ecx
jmp case.0x46e76e.7
push 6
push 0x4b5918
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46d578
cmp byte [esp + 0x78], al
je case.0x46e76e.7
movzx eax, byte [ebx + 4]
add edi, 0xc
sub eax, 0xd
je 0x46d534
dec eax
je 0x46d50f
mov esi, edi
call fcn.004142c0
mov dword [ebp + 0x34], eax
cmp eax, 1
jge case.0x46e76e.7
mov dword [ebp + 0x34], 0
jmp case.0x46e76e.7
lea eax, [ebp + 0x140]
mov ecx, edi
call fcn.0047fa00
mov dword [ebp + 0x180], eax
cmp eax, 3
jne case.0x46e76e.7
or dword [ebp], 2
jmp case.0x46e76e.7
push 0x4cdb24
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46d552
mov dword [ebp + 0x34], 2
jmp case.0x46e76e.7
push 1
lea esi, [ebp + 0x140]
mov eax, edi
call fcn.0047fa90
add esp, 4
test eax, eax
je case.0x46e76e.7
mov dword [ebp + 0x34], 1
jmp case.0x46e76e.7
push 0x4cd9d0
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46d5a8
cmp byte [esp + 0x78], al
je 0x46d59c
or dword [ebp], 0x800000
jmp case.0x46e76e.7
or dword [ebp + 4], 0x800000
jmp case.0x46e76e.7
push 0x4cdb30
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46d5d8
cmp byte [esp + 0x78], al
je 0x46d5cc
or dword [ebp], 0x200000
jmp case.0x46e76e.7
or dword [ebp + 4], 0x200000
jmp case.0x46e76e.7
push 7
push 0x4cdb40
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46d644
cmp byte [ebx + 4], 0xb
jne 0x46d608
cmp byte [esp + 0x78], al
je 0x46daa6
or dword [ebp + 4], 0x8000
jmp case.0x46e76e.7
cmp byte [esp + 0x78], 0
je 0x46d638
or dword [ebp], 0x100000
cmp word [edi + 0xe], 0
je 0x46d62d
lea esi, [edi + 0xe]
call fcn.004142c0
mov dword [ebp + 0x68], eax
jmp case.0x46e76e.7
or eax, 0xffffffff
mov dword [ebp + 0x68], eax
jmp case.0x46e76e.7
or dword [ebp + 4], 0x100000
jmp case.0x46e76e.7
push 0x4cdb50
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46d668
cmp byte [esp + 0x78], al
je 0x46d680
or dword [ebp], 0x10000
jmp case.0x46e76e.7
push 0x4cdb60
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46d68c
cmp byte [esp + 0x78], al
je 0x46d65c
or dword [ebp + 4], 0x10000
jmp case.0x46e76e.7
push 0x4cdb6c
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46d6b5
cmp byte [esp + 0x78], 0
je 0x46d945
or dword [ebp], 0x20000
jmp case.0x46e76e.7
push 0x4b5d9c
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46d6de
xor edx, edx
cmp byte [esp + 0x78], dl
sete dl
add edx, 3
mov dword [ebp + 0x188], edx
jmp case.0x46e76e.7
push 8
push 0x4cda04
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46d756
cmp word [edi + 0x10], ax
je 0x46d70f
lea esi, [edi + 0x10]
call fcn.004142c0
test eax, eax
jne 0x46d70f
cmp byte [esp + 0x78], al
sete al
mov byte [esp + 0x78], al
mov eax, dword [ebx]
test eax, eax
je 0x46d736
xor ecx, ecx
cmp byte [esp + 0x78], cl
sete cl
push ecx
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
cmp byte [esp + 0x78], 0
je 0x46d74d
or byte [ebx + 5], 0x10
jmp case.0x46e76e.7
cmp byte [esp + 0x78], 0
je 0x46d746
or dword [ebp], 0x8000000
jmp 0x46d726
or dword [ebp + 4], 0x8000000
and byte [ebx + 5], 0xef
jmp case.0x46e76e.7
push 6
push 0x4cdb78
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46d7d2
cmp word [edi + 0xc], ax
je 0x46d787
lea esi, [edi + 0xc]
call fcn.004142c0
test eax, eax
jne 0x46d787
cmp byte [esp + 0x78], al
sete dl
mov byte [esp + 0x78], dl
mov eax, dword [ebx]
test eax, eax
je 0x46d7b2
xor ecx, ecx
cmp byte [esp + 0x78], cl
setne cl
dec ecx
and ecx, 4
push ecx
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
cmp byte [esp + 0x78], 0
je 0x46d7c9
or byte [ebx + 5], 8
jmp case.0x46e76e.7
cmp byte [esp + 0x78], 0
je 0x46d7c2
or dword [ebp + 4], 0x10000000
jmp 0x46d7a2
or dword [ebp], 0x10000000
and byte [ebx + 5], 0xf7
jmp case.0x46e76e.7
push 0x4cdb88
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46d857
movzx eax, byte [ebx + 4]
dec eax
cmp eax, 0x12
ja case.0x46e76e.7
movzx edx, byte [eax + 0x46f664]
jmp dword [edx*4 + 0x46f64c]
cmp byte [esp + 0x78], 0
je 0x46d810
or dword [ebp + 4], 0x1f
jmp case.0x46e76e.7
mov eax, dword [ebp]
and eax, 0xffffffec
or eax, 0xc
mov dword [ebp], eax
jmp case.0x46e76e.7
cmp byte [esp + 0x78], 0
je 0x46d834
or dword [ebp + 4], 0x100080
jmp case.0x46e76e.7
or dword [ebp], 0x80
jmp case.0x46e76e.7
cmp byte [esp + 0x78], 0
je 0x46dc64
or dword [ebp], 0x200
jmp case.0x46e76e.7
push 0xa
push 0x4cdb94
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46d90e
movzx eax, byte [ebx + 4]
add eax, 0xfffffff6
add edi, 0x14
cmp eax, 0xf
ja case.0x46d885.12
movzx ecx, byte [eax + 0x46f680]
jmp dword [ecx*4 + 0x46f678]
cmp byte [esp + 0x78], 0
je 0x46d8c2
mov esi, edi
call fcn.00481180
mov dword [ebp + 0x60], eax
cmp eax, 0xffffffff
jne case.0x46e76e.7
push 0x10
push 0
push edi
call fcn.0049bf9d
add esp, 0xc
mov ecx, eax
call fcn.0043bbb0
mov dword [ebp + 0x60], eax
jmp case.0x46e76e.7
mov dword [ebp + 0x60], 0xff000000
jmp case.0x46e76e.7
cmp byte [esp + 0x78], 0
je 0x46d8fd
and byte [ebx + 5], 0xdf
push 0x4b5d20
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46d8f4
or byte [ebx + 5], 0x40
jmp case.0x46e76e.7
and byte [ebx + 5], 0xbf
jmp case.0x46e76e.7
mov dl, byte [ebx + 5]
and dl, 0xbf
or dl, 0x20
mov byte [ebx + 5], dl
jmp case.0x46e76e.7
push 0x4cdb6c
push edi
call fcn.00499c29
add esp, 8
test eax, eax
je 0x46d69e
push 0x4cdabc
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46d951
mov al, byte [esp + 0x78]
mov byte [ebp + 0x193], al
jmp case.0x46e76e.7
or dword [ebp + 4], 0x20000
jmp case.0x46e76e.7
push 4
push 0x4b597c
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46d97e
push 3
push eax
add edi, 8
push edi
mov ecx, 0x4da728
call fcn.0042d110
mov dword [ebp + 0x1c], eax
jmp case.0x46e76e.7
push 4
push 0x4b57d0
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46d9d5
add edi, 8
cmp byte [ebx + 4], 0xa
jne 0x46d9bb
push 0x4cdbac
push edi
call fcn.00499c29
add esp, 8
neg eax
sbb eax, eax
and eax, 0xfffffffe
add eax, 2
mov dword [ebp + 0x14], eax
jmp case.0x46e76e.7
cmp byte [esp + 0x78], 0
je case.0x46e76e.7
mov esi, edi
call fcn.004142c0
mov dword [ebp + 0x70], eax
jmp case.0x46e76e.7
push 0x4cdbb8
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46d9f3
mov dword [ebp + 0x14], 1
jmp case.0x46e76e.7
push 0x4b5bf8
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46da11
mov dword [ebp + 0x14], 3
jmp case.0x46e76e.7
push 0x4cdbc8
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46da3b
cmp byte [0x4db3fa], al
je case.0x46e76e.7
mov dword [ebp + 0x14], 4
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0xa
jne 0x46daf1
push 0x4bc5f0
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46da6d
cmp byte [esp + 0x78], al
je 0x46ddfa
or dword [ebp + 4], 0x4000
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0xa
jne 0x46daf1
push 6
push 0x4bc5d4
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46dac1
push 0x4bc5f0
add edi, 0xc
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46dab2
cmp byte [esp + 0x78], al
je 0x46d5fc
or dword [ebp], 0x8000
jmp case.0x46e76e.7
mov cl, byte [esp + 0x78]
mov byte [ebp + 0x194], cl
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0xa
jne 0x46daf1
push 0x4cdbd4
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46daf1
cmp byte [esp + 0x78], al
je 0x46dae8
or dword [ebp + 0x10], 1
jmp case.0x46e76e.7
and dword [ebp + 0x10], 0xfffffffe
jmp case.0x46e76e.7
push 5
push 0x4b5e0c
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46db15
lea esi, [edi + 0xa]
call fcn.004142c0
mov dword [ebp + 0x64], eax
jmp case.0x46e76e.7
mov esi, 2
push esi
push 0x4cdbe0
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46db65
push eax
push eax
push eax
push eax
lea eax, [edi + 4]
call fcn.0047fe10
add esp, 0x10
test eax, eax
je case.0x46e76e.7
lea esi, [edi + 4]
call fcn.00404070
cmp byte [esp + 0x78], 0
je 0x46db5b
or dword [ebp + 0x10], eax
jmp case.0x46e76e.7
not eax
and dword [ebp + 0x10], eax
jmp case.0x46e76e.7
push 9
push 0x4cdbe8
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46db93
cmp byte [esp + 0x78], al
je case.0x46e76e.7
lea esi, [edi + 0x12]
call fcn.00404070
mov dword [ebp + 0x18], eax
jmp case.0x46e76e.7
cmp byte [ebx + 4], 4
jne 0x46dbbf
push 0x4b5340
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46dbbf
cmp byte [esp + 0x78], 0
je case.0x46e546.11
or dword [ebp], 1
jmp case.0x46e76e.7
cmp byte [ebx + 4], 5
jne 0x46dbea
push 0x4cdbfc
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46dbea
cmp byte [esp + 0x78], al
je 0x46e102
or dword [ebp], 6
jmp case.0x46e76e.7
push 0x4bbdb8
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46dc84
movzx eax, byte [ebx + 4]
add eax, 0xfffffff7
cmp eax, 3
ja case.0x46e76e.7
jmp dword [eax*4 + 0x46f690]
mov edx, dword [esp + 0x7c]
mov eax, dword [edx]
test eax, eax
je case.0x46dca6.9
movzx ecx, byte [esp + 0x78]
push 0
push ecx
push 0xcf
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x46e76e.7
cmp byte [esp + 0x78], 0
je 0x46dc4d
or dword [ebp], 0x800
jmp case.0x46e76e.7
or dword [ebp + 4], 0x800
jmp case.0x46e76e.7
cmp byte [esp + 0x78], 0
je 0x46d84b
or dword [ebp + 4], 0x200
jmp case.0x46e76e.7
cmp byte [esp + 0x78], 0
je 0x46de2a
or dword [ebp + 4], 8
jmp case.0x46e76e.7
push 0x4cdc0c
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46dccd
movzx eax, byte [ebx + 4]
add eax, 0xfffffff7
cmp eax, 5
ja case.0x46e76e.7
jmp dword [eax*4 + 0x46f6a0]
cmp byte [esp + 0x78], 0
je 0x46dcc4
or dword [ebp], 4
jmp case.0x46e76e.7
cmp byte [esp + 0x78], 0
je 0x46dcb4
or dword [ebp + 4], 4
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0xc
jne 0x46dd59
push 0x4cdc18
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46dd07
cmp byte [esp + 0x78], al
je 0x46dcfb
or dword [ebp], 0x1000
jmp case.0x46e76e.7
or dword [ebp + 4], 0x1000
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0xc
jne 0x46dd59
push 0x4cdc30
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46dd2e
cmp byte [esp + 0x78], al
je 0x46dd7c
or byte [ebx + 5], 0x80
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0xc
jne 0x46dd59
push 0x4cdc40
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46dd59
cmp byte [esp + 0x78], al
je 0x46d428
and byte [ebx + 5], 0xfd
jmp case.0x46e76e.7
mov al, byte [ebx + 4]
cmp al, 0xa
je 0x46dd64
cmp al, 0xb
jne 0x46dd85
push 0x4cdc54
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46dd85
cmp byte [esp + 0x78], al
je 0x46dd25
and byte [ebx + 5], 0x7f
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0xc
jne 0x46ddb4
push 0x4b6018
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46ddb4
cmp byte [esp + 0x78], 0
je 0x46de4a
or dword [ebp], 0x2000
jmp case.0x46e76e.7
push 0x4cdc64
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46de06
mov bl, byte [ebx + 4]
cmp bl, 0xc
jne 0x46dde1
cmp byte [esp + 0x78], al
je 0x46e03f
or dword [ebp], 0x10
jmp case.0x46e76e.7
cmp bl, 8
je case.0x46dc10.9
cmp bl, 7
jne case.0x46e76e.7
cmp byte [esp + 0x78], 0
je 0x46da61
or dword [ebp], 0x4000
jmp case.0x46e76e.7
push 0x4cdc78
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46de56
mov bl, byte [ebx + 4]
cmp bl, 0xc
jne 0x46de33
cmp byte [esp + 0x78], al
je case.0x46e546.16
or dword [ebp], 8
jmp case.0x46e76e.7
cmp bl, 8
je case.0x46d7f9.3
cmp bl, 7
jne case.0x46e76e.7
jmp case.0x46d7f9.3
or dword [ebp + 4], 0x2000
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0xc
jne 0x46decf
push 8
push 0x4cdc8c
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46decf
mov dx, word [edi + 0x10]
mov word [ebp + 0x18c], dx
cmp byte [esp + 0x78], al
je 0x46deab
or dword [ebp], 0x20
mov ebx, dword [ebx]
test ebx, ebx
je 0x46dec5
movzx eax, dx
push 0
test ax, ax
jne 0x46dea8
movzx eax, byte [0x4db3fa]
neg eax
sbb eax, eax
and eax, 0x25a5
add eax, 0x2a
push eax
jmp 0x46deb9
or dword [ebp + 4], 0x20
mov ebx, dword [ebx]
test ebx, ebx
je 0x46dec5
push 0
push 0
push 0xcc
push ebx
call dword [sym.imp.USER32.dll_SendMessageW]
mov byte [esp + 0x13], 1
jmp case.0x46e76e.7
push 5
push 0x4cdca0
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46df16
cmp byte [esp + 0x78], al
je 0x46df0a
cmp word [edi + 0xa], ax
je 0x46deff
lea esi, [edi + 0xa]
call fcn.004142c0
mov dword [ebp + 0x64], eax
jmp case.0x46e76e.7
or eax, 0xffffffff
mov dword [ebp + 0x64], eax
jmp case.0x46e76e.7
mov dword [ebp + 0x64], connect
jmp case.0x46e76e.7
cmp byte [ebx + 4], 8
jne 0x46df41
push 0x4cdcac
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46df41
cmp byte [esp + 0x78], al
je case.0x46e546.11
or dword [ebp], 1
jmp case.0x46e76e.7
push 4
push 0x4b2810
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46dfb2
movzx eax, byte [ebx + 4]
add eax, 0xfffffff9
cmp eax, 3
ja case.0x46e76e.7
jmp dword [eax*4 + 0x46f6b8]
cmp byte [esp + 0x78], 0
je case.0x46e652.11
or dword [ebp], esi
jmp case.0x46e76e.7
cmp byte [esp + 0x78], 0
je 0x46dfa9
push 0x4bc5b8
add edi, 8
push edi
call fcn.00499c29
add esp, 8
neg eax
sbb eax, eax
and eax, 0xfffffff0
add eax, 0x20
or dword [ebp], eax
jmp case.0x46e76e.7
or dword [ebp + 4], 0x30
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0x10
jne 0x46dfe5
push 0x4cdcbc
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46dfe5
cmp byte [esp + 0x78], al
je 0x46e173
mov edx, dword [ebp]
and edx, 0xffffffef
or edx, 0x40
mov dword [ebp], edx
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0x11
jne 0x46e0a0
push 0x4cdcc8
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46e014
cmp byte [esp + 0x78], al
je 0x46dd7c
or byte [ebx + 5], 0x80
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0x11
jne 0x46e0a0
push 0x4cdcd8
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46e048
cmp byte [esp + 0x78], al
je 0x46e03f
or dword [ebp], 0x10
jmp case.0x46e76e.7
or dword [ebp + 4], 0x10
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0x11
jne 0x46e0a0
push 0xc
push 0x4cdce8
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46e0a0
mov byte [ebp + 0x190], 1
cmp byte [esp + 0x78], al
je 0x46e090
or dword [ebp], 1
cmp word [edi + 0x18], ax
lea esi, [edi + 0x18]
setne al
mov byte [ebp + 0x191], al
call fcn.004142c0
mov dword [ebp + 0x40], eax
jmp case.0x46e76e.7
or dword [ebp + 4], 1
mov dword [ebp + 0x40], 0xffffffff
jmp case.0x46e76e.7
push 4
push 0x4b53ac
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46e10b
mov bl, byte [ebx + 4]
cmp bl, 0x11
jne 0x46e0d6
cmp byte [esp + 0x78], al
je case.0x46e76e.7
lea esi, [edi + 8]
call fcn.004142c0
mov dword [ebp + 0x44], eax
jmp case.0x46e76e.7
cmp bl, 0xb
jne case.0x46e76e.7
mov ax, word [edi + 8]
call fcn.0040ef10
cmp ax, 0x53
jne case.0x46e76e.7
cmp byte [esp + 0x78], 0
je 0x46e102
or dword [ebp], 6
jmp case.0x46e76e.7
or dword [ebp + 4], 6
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0x11
jne 0x46e17c
push 4
push 0x4cdd04
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46e13f
cmp byte [esp + 0x78], al
je case.0x46e76e.7
lea esi, [edi + 8]
call fcn.004142c0
mov dword [ebp + 0x48], eax
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0x11
jne 0x46e17c
push 5
push 0x4cdd10
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46e17c
cmp byte [esp + 0x78], al
je 0x46e173
or dword [ebp], 0x40
lea esi, [edi + 0xa]
call fcn.004142c0
mov dword [ebp + 0x4c], eax
jmp case.0x46e76e.7
or dword [ebp + 4], 0x40
jmp case.0x46e76e.7
push 7
push 0x4b2c8c
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46e219
cmp byte [ebx + 4], 0x11
jne case.0x46e76e.7
cmp byte [esp + 0x78], al
je 0x46e7a1
mov dword [ebp + 0x50], 0xffffffff
mov ax, word [edi + 0xe]
call fcn.0040ef10
movzx eax, ax
add eax, 0xffffffbe
cmp eax, 0x12
ja case.0x46e1ca.67
movzx ecx, byte [eax + 0x46f6dc]
jmp dword [ecx*4 + 0x46f6c8]
mov dword [ebp + 0x50], 0
jmp case.0x46e1ca.67
mov dword [ebp + 0x50], 1
jmp case.0x46e1ca.67
mov dword [ebp + 0x50], esi
jmp case.0x46e1ca.67
mov dword [ebp + 0x50], 3
mov eax, dword [ebp + 0x50]
test eax, eax
jns 0x46e209
or dword [ebp], 0x100
mov dword [ebp + 0x50], 0
jmp case.0x46e76e.7
inc eax
or dword [ebp], 0x100
mov dword [ebp + 0x50], eax
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0x11
jne 0x46e2c5
push 5
push 0x4cdd1c
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46e2c5
cmp byte [esp + 0x78], al
je case.0x46e76e.7
movzx ebx, word [edi + 0xa]
test bx, bx
je case.0x46e76e.7
push eax
push 1
push eax
push eax
add edi, 0xc
push edi
mov ecx, 0x4da728
call fcn.0042d170
test eax, eax
je case.0x46e76e.7
cmp byte [eax + 0x17], 0
jne 0x46e276
mov eax, dword [eax + 0xc]
test byte [eax + 0x16], 2
jne case.0x46e76e.7
mov edx, dword [esp + 0x74]
mov ecx, dword [edx + 0x10]
lea edx, [ecx - 1]
cmp edx, ecx
jae case.0x46e76e.7
mov edi, dword [esp + 0x74]
lea esi, [edx + edx*4]
add esi, esi
add esi, esi
lea ecx, [ecx]
mov ecx, dword [edi + 0x18]
add ecx, esi
cmp dword [ecx + 8], eax
jne 0x46e2b7
cmp ebx, 0x31
jne 0x46e2b4
mov dword [ebp + 0x54], ecx
jmp 0x46e2b7
mov dword [ebp + 0x58], ecx
dec edx
sub esi, 0x14
cmp edx, dword [edi + 0x10]
jb 0x46e2a0
jmp case.0x46e76e.7
push 0x4cdd28
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46e30e
mov bl, byte [ebx + 4]
cmp bl, 0x11
jne 0x46e2f1
cmp byte [esp + 0x78], al
je case.0x46e652.11
or dword [ebp], esi
jmp case.0x46e76e.7
cmp bl, 0x12
jne case.0x46e76e.7
cmp byte [esp + 0x78], 0
je 0x46dcc4
or dword [ebp], 4
jmp case.0x46e76e.7
push 5
push 0x4cdd3c
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46e3d6
cmp byte [esp + 0x78], al
je case.0x46e76e.7
cmp word [edi + 0xa], ax
je case.0x46e76e.7
mov edx, dword [esp + 0x7c]
mov al, byte [edx + 4]
cmp al, 0xd
je 0x46e381
cmp al, 0xe
je 0x46e381
lea esi, [edi + 0xa]
mov byte [ebp + 0x18e], 1
call fcn.004142c0
push 0x2d
add edi, 0xc
push edi
mov dword [ebp + 0x38], eax
call fcn.0049a90e
add esp, 8
test eax, eax
je case.0x46e76e.7
lea esi, [eax + 2]
call fcn.004142c0
mov dword [ebp + 0x3c], eax
jmp case.0x46e76e.7
lea esi, [ebp + 0x160]
mov eax, esi
lea ecx, [edi + 0xa]
call fcn.0047fa00
mov dword [ebp + 0x184], eax
test eax, eax
je case.0x46e76e.7
mov ecx, dword [esp + 0x7c]
mov ecx, dword [ecx]
test ecx, ecx
je case.0x46e76e.7
push esi
push eax
mov eax, dword [esp + 0x84]
xor edx, edx
cmp byte [eax + 4], 0xd
setne dl
dec edx
and edx, 0xfffffff2
add edx, 0x1012
push edx
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0x12
jne 0x46e401
push 0x4cdd48
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46e401
cmp byte [esp + 0x78], al
je case.0x46e546.11
or dword [ebp], 1
jmp case.0x46e76e.7
push 0x4cdd58
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46e44f
mov bl, byte [ebx + 4]
cmp bl, 0x13
jne 0x46e432
cmp byte [esp + 0x78], 0
je 0x46e7a1
or dword [ebp], 0x100
jmp case.0x46e76e.7
cmp bl, 0xb
jne case.0x46e76e.7
cmp byte [esp + 0x78], 0
je case.0x46e546.11
or dword [ebp], 1
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0x13
jne 0x46e480
push 0x4b5d84
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46e480
cmp byte [esp + 0x78], al
je case.0x46e652.11
or dword [ebp], esi
or dword [ebp + 4], 0x80
jmp case.0x46e76e.7
cmp byte [ebx + 4], 0x18
jne 0x46e4cb
push 5
push 0x4b647c
push edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x46e4cb
mov edx, dword [0x4d9700]
lea ecx, [esp + 0x40]
push ecx
add edi, 0xa
push edi
push edx
call dword [sym.imp.USER32.dll_GetClassInfoExW]
mov word [ebp + 0x198], ax
test ax, ax
jne case.0x46e76e.7
push edi
push 0x4cdd68
jmp 0x46f080
push 0x4bc5a0
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46e59c
movzx eax, byte [ebx + 4]
dec eax
cmp byte [esp + 0x78], 0
je 0x46e536
cmp eax, 0x10
ja case.0x46e76e.7
movzx eax, byte [eax + 0x46f704]
jmp dword [eax*4 + 0x46f6f0]
or dword [ebp], 8
or dword [ebp + 4], 4
jmp case.0x46e76e.7
or dword [ebp], 1
or dword [ebp + 4], 0x1e
jmp case.0x46e76e.7
or dword [ebp], 0x300
jmp case.0x46e76e.7
or dword [ebp], 1
or dword [ebp + 4], esi
jmp case.0x46e76e.7
cmp eax, 0x10
ja case.0x46e76e.7
movzx ecx, byte [eax + 0x46f72c]
jmp dword [ecx*4 + 0x46f718]
mov edx, dword [esp + 0x7c]
mov eax, dword [edx]
test eax, eax
je 0x46e578
push 0xfffffffffffffff0
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
jne case.0x46e76e.7
or dword [ebp + 4], eax
jmp case.0x46e76e.7
mov eax, dword [ebp]
mov ecx, eax
and ecx, 0x300
cmp ecx, 0x300
jne case.0x46e76e.7
and eax, 0xfffffcff
mov dword [ebp], eax
jmp case.0x46e76e.7
push 0x4b1164
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46e6ce
movzx eax, byte [ebx + 4]
dec eax
cmp byte [esp + 0x78], 0
je 0x46e642
cmp eax, 0x16
ja case.0x46e76e.7
movzx edx, byte [eax + 0x46f760]
jmp dword [edx*4 + 0x46f740]
or dword [ebp + 4], 8
or dword [ebp], 4
jmp case.0x46e76e.7
or dword [ebp], esi
or dword [ebp + 4], 0x1d
jmp case.0x46e76e.7
or dword [ebp], 0x200
or dword [ebp + 4], 0x100
mov eax, dword [esp + 0x7c]
mov al, byte [eax + 4]
mov ecx, dword [ebp]
cmp al, 5
je 0x46e616
cmp al, 6
jne case.0x46e76e.7
or ecx, 0x20
mov dword [ebp], ecx
jmp case.0x46e76e.7
or dword [ebp], esi
or dword [ebp + 4], 1
jmp case.0x46e76e.7
or dword [ebp], 0x282
jmp case.0x46e76e.7
or dword [ebp], 0x20
jmp case.0x46e76e.7
cmp eax, 0x12
ja case.0x46e76e.7
movzx ecx, byte [eax + 0x46f794]
jmp dword [ecx*4 + 0x46f778]
or dword [ebp + 4], 0x20
jmp case.0x46e76e.7
or dword [ebp], 4
or dword [ebp + 4], 8
jmp case.0x46e76e.7
mov edx, dword [esp + 0x7c]
mov eax, dword [edx]
test eax, eax
je 0x46e69e
push 0xfffffffffffffff0
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
je case.0x46e76e.7
or dword [ebp + 4], 0x200
jmp case.0x46e76e.7
mov eax, dword [ebp]
mov ecx, eax
and ecx, 0x300
cmp ecx, 0x300
je case.0x46e76e.7
and eax, 0xfffffdff
mov dword [ebp], eax
jmp case.0x46e76e.7
or dword [ebp + 4], 0x82
jmp case.0x46e76e.7
push 0x4b1170
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46e7d1
cmp byte [esp + 0x78], 0
movzx eax, byte [ebx + 4]
je 0x46e75b
dec eax
cmp eax, 0x12
ja case.0x46e76e.7
movzx edx, byte [eax + 0x46f7c8]
jmp dword [edx*4 + 0x46f7a8]
or dword [ebp + 4], 4
or dword [ebp], 8
jmp case.0x46e76e.7
or dword [ebp + 4], 0x200
or dword [ebp], 0x100
mov eax, dword [esp + 0x7c]
mov al, byte [eax + 4]
mov ecx, dword [ebp + 4]
cmp al, 5
je 0x46e738
cmp al, 6
jne case.0x46e76e.7
or ecx, 0x20
mov dword [ebp + 4], ecx
jmp case.0x46e76e.7
or dword [ebp + 4], 3
jmp case.0x46e76e.7
or dword [ebp], 0x280
or dword [ebp + 4], esi
jmp case.0x46e76e.7
add eax, 0xfffffffd
cmp eax, 0x10
ja case.0x46e76e.7
movzx ecx, byte [eax + 0x46f7ec]
jmp dword [ecx*4 + 0x46f7dc]
or dword [ebp + 4], 0xc
jmp case.0x46e76e.7
mov edx, dword [esp + 0x7c]
mov eax, dword [edx]
test eax, eax
je 0x46e7ad
push 0xfffffffffffffff0
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
je case.0x46e76e.7
or dword [ebp + 4], 0x100
jmp case.0x46e76e.7
mov eax, dword [ebp]
mov ecx, eax
and ecx, 0x300
cmp ecx, 0x300
je case.0x46e76e.7
and eax, 0xfffffeff
mov dword [ebp], eax
jmp case.0x46e76e.7
push 0
push 0
push 1
push 0
mov eax, edi
call fcn.0047fe10
add esp, 0x10
test eax, eax
je 0x46e805
mov esi, edi
call fcn.00404070
cmp byte [esp + 0x78], 0
je 0x46e7fd
or dword [ebp], eax
jmp 0x46efa9
or dword [ebp + 4], eax
jmp 0x46efa9
add edi, esi
cmp word [edi], 0
jne 0x46e8cb
cmp byte [esp + 0x78], 0
je 0x46e836
mov eax, dword [esp + 0x84]
test eax, eax
je 0x46e836
cmp byte [eax + 0x17], 0
jne 0x46e82c
mov eax, dword [eax + 0xc]
test byte [eax + 0x15], 2
jne 0x46e8cb
mov ax, word [edi - 2]
call fcn.0040ef10
movzx eax, ax
cmp eax, 0x43
je 0x46e894
cmp eax, 0x47
je 0x46e86d
cmp eax, 0x56
jne 0x46f077
mov ax, word [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [ebx + 8], 0
mov word [ecx], ax
jmp 0x46efb5
mov eax, dword [ebx + 0xc]
test eax, eax
je 0x46e87c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov ax, word [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [ebx + 0xc], 0
mov word [ecx], ax
jmp 0x46efb5
cmp byte [esp + 0x78], 0
jne 0x46e8ba
cmp byte [ebx + 4], 2
je 0x46e8ba
mov eax, dword [esp + 0x1c]
cmp dword [eax], 0xff000000
je 0x46e8ba
mov dword [eax], 0xff000000
mov byte [ebp + 0x18f], 1
mov ax, word [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov word [ecx], ax
jmp 0x46efb5
mov ax, word [edi - 2]
call fcn.0040ef10
movzx eax, ax
add eax, 0xffffffbd
cmp eax, 0x16
ja case.0x46e8ea.68
movzx edx, byte [eax + 0x46f828]
jmp dword [edx*4 + 0x46f800]
mov al, byte [ebx + 4]
cmp al, 3
je 0x46f027
cmp al, 0x12
je 0x46f027
mov eax, dword [esp + 0x84]
push 4
mov ebx, 0x4da728
call fcn.00423960
mov ebx, eax
test ebx, ebx
jne 0x46e93d
push 0x4b5830
push edi
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x46f01c
mov eax, dword [esp + 0x7c]
or byte [eax + 5], 1
jmp 0x46e941
mov eax, dword [esp + 0x7c]
mov al, byte [eax + 4]
cmp al, 1
je 0x46e94c
cmp al, 2
jne 0x46e953
or dword [ebp], 0x100
mov esi, dword [esp + 0x7c]
add esi, 0xc
mov edi, ebx
call fcn.004013c0
jmp case.0x46e76e.7
cmp dword [ebp + 0x13c], 0x32
jae case.0x46e76e.7
mov esi, edi
call fcn.00404070
mov ecx, dword [ebp + 0x13c]
mov dword [ebp + ecx*4 + 0x74], eax
inc dword [ebp + 0x13c]
jmp case.0x46e76e.7
push 3
push 0
push edi
mov ecx, 0x4da728
call fcn.0042d110
test eax, eax
je 0x46f08a
cmp byte [eax + 0x17], 0
jne 0x46e9af
mov eax, dword [eax + 0xc]
mov dl, byte [eax + 0x16]
and dl, 0x22
cmp dl, 2
je 0x46f02e
mov ecx, dword [esp + 0x74]
xor edx, edx
cmp dword [ecx + 0x10], edx
jbe 0x46e9e4
mov ecx, dword [ecx + 0x18]
mov esi, dword [esp + 0x74]
add ecx, 8
cmp dword [ecx], eax
je 0x46f039
inc edx
add ecx, 0x14
cmp edx, dword [esi + 0x10]
jb 0x46e9d3
mov dword [ebx + 8], eax
jmp case.0x46e76e.7
cmp byte [ebx + 4], 2
je case.0x46e76e.7
mov esi, edi
call fcn.00481180
cmp eax, 0xffffffff
jne 0x46ea16
push 0x10
push 0
push edi
call fcn.0049bf9d
add esp, 0xc
mov ecx, eax
call fcn.0043bbb0
mov ecx, dword [esp + 0x1c]
cmp dword [ecx], eax
jne 0x46ea29
lea edx, [ebp + 0x5c]
cmp ecx, edx
jne case.0x46e76e.7
mov dword [ecx], eax
mov byte [ebp + 0x18f], 1
jmp case.0x46e76e.7
mov ax, word [edi]
call fcn.0040ef10
cmp ax, 0x50
jne 0x46ea7a
lea esi, [edi + 2]
call fcn.004142c0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x46ea6a
mov ecx, dword [0x4da714]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x88]
add edx, eax
mov dword [ebp + 0x28], edx
jmp case.0x46e76e.7
mov esi, edi
call fcn.004142c0
mov ecx, dword [esp + 0x74]
call fcn.00466c50
mov dword [ebp + 0x28], eax
jmp case.0x46e76e.7
mov ax, word [edi]
call fcn.0040ef10
cmp ax, 0x50
jne 0x46ead5
lea esi, [edi + 2]
call fcn.004142c0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x46eac5
mov ecx, dword [0x4da714]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x8c]
add edx, eax
mov dword [ebp + 0x2c], edx
jmp case.0x46e76e.7
mov esi, edi
call fcn.004142c0
mov ecx, dword [esp + 0x74]
call fcn.00466c50
mov dword [ebp + 0x2c], eax
jmp case.0x46e76e.7
movzx eax, word [edi]
cmp eax, 0x2b
jne 0x46ebc9
mov ax, word [edi + 2]
call fcn.0040ef10
cmp ax, 0x4d
jne 0x46eb11
mov eax, dword [esp + 0x74]
mov esi, dword [eax + 0x78]
jmp 0x46eb38
lea esi, [edi + 2]
call fcn.004142c0
mov ecx, dword [esp + 0x74]
cmp byte [ecx + 0xc0], 0
je 0x46eb36
mov edx, dword [0x4da714]
push 0x60
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov esi, eax
mov eax, dword [esp + 0x7c]
mov bl, byte [eax + 6]
mov ecx, dword [esp + 0x74]
call fcn.00473ee0
mov edi, eax
test edi, edi
je 0x46eb99
mov ecx, dword [esp + 0x7c]
mov al, byte [ecx + 7]
mov ecx, dword [esp + 0x74]
call fcn.00474060
test eax, eax
jne 0x46eb99
mov ecx, dword [esp + 0x74]
mov edx, edi
lea edi, [esp + 0x20]
call fcn.00474170
mov ecx, dword [eax]
mov eax, dword [eax + 4]
add ecx, esi
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], ecx
jne case.0x46e76e.7
mov edx, dword [esp + 0x74]
mov ecx, dword [edx + 0x7c]
add ecx, eax
mov dword [ebp + 0x24], ecx
jmp case.0x46e76e.7
mov eax, dword [esp + 0x74]
mov edx, dword [eax + 0x88]
add edx, dword [eax + 0x80]
add edx, esi
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], edx
jne case.0x46e76e.7
mov ecx, dword [eax + 0x84]
mov dword [ebp + 0x24], ecx
jmp case.0x46e76e.7
call fcn.0040ef10
cmp ax, 0x4d
jne 0x46ec21
lea esi, [edi + 2]
call fcn.004142c0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x46ebf9
mov edx, dword [0x4da714]
push 0x60
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, dword [esi + 0x78]
add ecx, eax
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], ecx
jne case.0x46e76e.7
mov eax, esi
mov edx, dword [eax + 0x94]
add edx, dword [eax + 0x7c]
mov dword [ebp + 0x24], edx
jmp case.0x46e76e.7
mov ax, word [edi]
call fcn.0040ef10
cmp ax, 0x50
jne 0x46ec7c
lea esi, [edi + 2]
call fcn.004142c0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x46ec54
mov ecx, dword [0x4da714]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x80]
add edx, eax
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], edx
jne case.0x46e76e.7
mov eax, esi
mov ecx, dword [eax + 0x84]
mov dword [ebp + 0x24], ecx
jmp case.0x46e76e.7
mov ax, word [edi]
call fcn.0040ef10
cmp ax, 0x53
jne 0x46ecda
lea esi, [edi + 2]
call fcn.004142c0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x46ecaf
mov edx, dword [0x4da714]
push 0x60
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, dword [esi + 0x98]
add ecx, eax
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], ecx
jne case.0x46e76e.7
mov eax, esi
mov edx, dword [eax + 0xa4]
add edx, dword [eax + 0x7c]
mov dword [ebp + 0x24], edx
jmp case.0x46e76e.7
mov esi, edi
call fcn.004142c0
mov ecx, dword [esp + 0x74]
cmp byte [ecx + 0xc0], 0
je 0x46ecfe
mov edx, dword [0x4da714]
push 0x60
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], eax
jne case.0x46e76e.7
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x94]
add ecx, dword [eax + 0x7c]
mov dword [ebp + 0x24], ecx
jmp case.0x46e76e.7
movzx eax, word [edi]
cmp eax, 0x2b
jne 0x46ee03
mov ax, word [edi + 2]
call fcn.0040ef10
cmp ax, 0x4d
jne 0x46ed47
mov edx, dword [esp + 0x74]
mov eax, dword [edx + 0x7c]
jmp 0x46ed6c
lea esi, [edi + 2]
call fcn.004142c0
mov ecx, dword [esp + 0x74]
cmp byte [ecx + 0xc0], 0
je 0x46ed6c
mov edx, dword [0x4da714]
push 0x60
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edi, dword [esp + 0x74]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x7c]
mov bl, byte [eax + 6]
mov ecx, edi
call fcn.00473ee0
mov esi, eax
test esi, esi
je 0x46edd5
mov ecx, dword [esp + 0x7c]
mov al, byte [ecx + 7]
mov ecx, edi
call fcn.00474060
test eax, eax
jne 0x46edd5
mov ecx, dword [esp + 0x74]
mov edx, esi
lea edi, [esp + 0x28]
call fcn.00474170
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x78]
add edx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], edx
jne case.0x46e76e.7
mov eax, dword [esp + 0x74]
mov edx, dword [eax + 0x78]
add edx, ecx
mov dword [ebp + 0x20], edx
jmp case.0x46e76e.7
mov eax, dword [edi + 0x8c]
add eax, dword [edi + 0x84]
add eax, dword [esp + 0x78]
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], eax
jne case.0x46e76e.7
mov ecx, dword [edi + 0x80]
mov dword [ebp + 0x20], ecx
jmp case.0x46e76e.7
call fcn.0040ef10
cmp ax, 0x4d
jne 0x46ee5b
lea esi, [edi + 2]
call fcn.004142c0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x46ee33
mov edx, dword [0x4da714]
push 0x60
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, dword [esi + 0x7c]
add ecx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], ecx
jne case.0x46e76e.7
mov eax, esi
mov edx, dword [eax + 0x90]
add edx, dword [eax + 0x78]
mov dword [ebp + 0x20], edx
jmp case.0x46e76e.7
mov ax, word [edi]
call fcn.0040ef10
cmp ax, 0x50
jne 0x46eeb6
lea esi, [edi + 2]
call fcn.004142c0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x46ee8e
mov ecx, dword [0x4da714]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x84]
add edx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], edx
jne case.0x46e76e.7
mov eax, esi
mov ecx, dword [eax + 0x80]
mov dword [ebp + 0x20], ecx
jmp case.0x46e76e.7
mov ax, word [edi]
call fcn.0040ef10
cmp ax, 0x53
jne 0x46ef14
lea esi, [edi + 2]
call fcn.004142c0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x46eee9
mov edx, dword [0x4da714]
push 0x60
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, dword [esi + 0x9c]
add ecx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], ecx
jne case.0x46e76e.7
mov eax, esi
mov edx, dword [eax + 0xa0]
add edx, dword [eax + 0x78]
mov dword [ebp + 0x20], edx
jmp case.0x46e76e.7
mov esi, edi
call fcn.004142c0
mov ecx, dword [esp + 0x74]
cmp byte [ecx + 0xc0], 0
je 0x46ef38
mov edx, dword [0x4da714]
push 0x60
push edx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], eax
jne case.0x46e76e.7
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x90]
add ecx, dword [eax + 0x78]
mov dword [ebp + 0x20], ecx
jmp case.0x46e76e.7
mov esi, edi
call fcn.0041a3c0
fstp dword [ebp + 0x30]
jmp case.0x46e76e.7
mov ax, word [edi - 2]
call fcn.0040ef10
cmp ax, 0x45
jne 0x46f077
push 0
push 0
push 0
push 0
mov eax, edi
call fcn.0047fe10
add esp, 0x10
test eax, eax
je 0x46f077
mov esi, edi
call fcn.00404070
cmp byte [esp + 0x78], 0
je 0x46efa2
or dword [ebp + 8], eax
jmp case.0x46e76e.7
or dword [ebp + 0xc], eax
mov ebx, dword [esp + 0x7c]
mov eax, dword [esp + 0x14]
mov dx, word [esp + 0x18]
mov word [eax], dx
mov edi, dword [esp + 0x14]
lea esp, [esp]
movzx eax, word [edi]
cmp eax, 0x20
je 0x46efcd
cmp eax, 9
jne 0x46efd2
add edi, 2
jmp 0x46efc0
cmp word [edi], 0
jne 0x46d350
mov eax, dword [ebx]
test eax, eax
je 0x46f63d
push 0xfffffffffffffff0
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, dword [ebp]
mov edx, dword [ebp + 4]
mov esi, eax
or eax, ecx
not edx
and eax, edx
mov dword [esp + 0x14], eax
movzx eax, byte [ebx + 4]
add eax, 0xfffffffe
mov dword [esp + 0x18], esi
cmp eax, 8
ja case.0x46f015.9
jmp dword [eax*4 + 0x46f840]
mov ebx, dword [esp + 0x7c]
mov eax, 0x4b3858
jmp 0x46f03e
mov eax, 0x4cdda0
jmp 0x46f03e
add edi, 0xfffffffe
push edi
push 0x4cde18
jmp 0x46f080
mov eax, 0x4cde78
mov cx, word [esp + 0x18]
mov edx, dword [esp + 0x14]
mov word [edx], cx
cmp dword [ebx], 0
je 0x46f05e
call fcn.0040f100
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
add edi, 0xfffffffe
push edi
push eax
mov ecx, 0x4da728
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
add edi, 0xfffffffe
push edi
push 0x4b40b0
mov ecx, 0x4da728
call fcn.0043a420
mov ax, word [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov word [ecx], ax
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
mov eax, dword [esp + 0x14]
mov edx, eax
xor edx, esi
and edx, 0xf
xor eax, edx
mov dword [esp + 0x14], eax
jmp 0x46f11b
mov eax, dword [esp + 0x14]
and eax, 0xfffffff7
or eax, 7
mov dword [esp + 0x14], eax
jmp 0x46f11b
mov eax, dword [esp + 0x14]
test al, 1
je 0x46f0d5
and eax, 0xfffffff1
or eax, 1
jmp 0x46f0d8
and eax, 0xfffffff0
mov esi, dword [esp + 0x74]
mov edi, dword [esp + 0x80]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0x1c]
cmp edi, eax
jne 0x46f173
test byte [ebp + 4], 1
je case.0x46f015.9
mov ecx, dword [esi + 4]
push 0
push 1
push 0x401
push ecx
mov dword [esi + 0x1c], 0xffffffff
call dword [sym.imp.USER32.dll_SendMessageW]
or dword [esp + 0x18], 1
mov esi, dword [esp + 0x18]
mov eax, dword [ebp + 0x64]
test eax, eax
je 0x46f2ba
mov cl, byte [ebx + 4]
cmp cl, 0xc
jne 0x46f28c
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
test eax, eax
jns 0x46f27f
mov edx, dword [ebx]
push 0
push 0xc5
push edx
call edi
cmp dword [ebp + 0x64], 0x80000000
je 0x46f2c0
test byte [esp + 0x14], 4
jne 0x46f2c0
and dword [esp + 0x14], 0xffefff7f
jmp 0x46f2c0
test cl, 1
je case.0x46f015.9
cmp eax, dword [esi + 0x10]
jae 0x46f1af
lea edx, [eax + eax*4]
mov eax, dword [esi + 0x18]
mov ecx, dword [eax + edx*4]
push 1
push 0xfffffffffffffff0
push ecx
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0xfffe
push eax
mov eax, dword [esi + 0x1c]
lea edx, [eax + eax*4]
mov eax, dword [esi + 0x18]
mov ecx, dword [eax + edx*4]
push 0xf4
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [esi + 4]
push 0
mov dword [esi + 0x1c], edi
add edi, 3
push edi
push 0x401
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x46f015.9
mov eax, dword [esp + 0x14]
mov ecx, eax
and ecx, 6
cmp cl, 6
jne 0x46f1e9
and eax, 0xfffffff6
or eax, 6
mov dword [esp + 0x14], eax
jmp 0x46f11b
and eax, 0xfffffff3
or eax, 3
mov dword [esp + 0x14], eax
jmp 0x46f11b
mov edx, dword [esp + 0x14]
and edx, 0xfffffff9
or edx, 9
mov dword [esp + 0x14], edx
jmp 0x46f11b
or dword [esp + 0x14], 3
jmp 0x46f11b
mov eax, dword [esp + 0x14]
test al, 1
je 0x46f22c
and eax, 0xfffffff1
or eax, 1
mov dword [esp + 0x14], eax
jmp 0x46f11b
and eax, 0xfffffff2
or eax, 2
mov dword [esp + 0x14], eax
jmp 0x46f11b
mov eax, dword [ebp + 0x14]
cmp eax, 0xffffffff
je case.0x46f015.9
cmp byte [0x4db3fa], 0
je 0x46f261
push 0
push eax
mov eax, dword [ebx]
push 0x108e
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp + 0x14]
cmp eax, 4
je 0x46f11b
mov ecx, dword [esp + 0x14]
and ecx, 0xfffffffc
or ecx, eax
mov dword [esp + 0x14], ecx
jmp 0x46f11b
push eax
mov eax, dword [ebx]
push 0xc5
push eax
call edi
jmp 0x46f2c0
cmp cl, 0xf
jne 0x46f2ba
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jns 0x46f2ab
mov ecx, dword [ebx]
push 0
push 0
push 0x403
push ecx
call edi
jmp 0x46f2c0
mov edx, dword [ebx]
push 6
push eax
push 0x403
push edx
call edi
jmp 0x46f2c0
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x84], 0
cmp esi, ecx
je 0x46f3af
mov al, byte [ebx + 4]
mov byte [esp + 0x84], 1
mov byte [esp + 0x78], 0
cmp al, 4
je 0x46f363
cmp al, 9
je 0x46f30b
cmp al, 0x12
jne 0x46f375
mov eax, dword [ebx]
push 0
push 0
push 0x408
push eax
call edi
mov dword [esp + 0x80], eax
jmp 0x46f375
mov eax, ecx
and eax, 0x100000
je 0x46f34b
test esi, 0x100000
jne 0x46f34b
cmp dword [ebp + 0x68], 0
jge 0x46f33e
mov edx, dword [ebx]
lea ecx, [esp + 0x30]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x38]
sub eax, dword [esp + 0x30]
lea eax, [eax + eax*2]
mov dword [ebp + 0x68], eax
mov ecx, dword [ebp + 0x68]
push 0
push ecx
push 0x194
jmp 0x46f370
test eax, eax
jne 0x46f375
test esi, 0x100000
je 0x46f375
push eax
push eax
mov eax, dword [ebx]
push 0x194
push eax
jmp 0x46f373
movzx ecx, word [esp + 0x14]
push 1
push ecx
push 0xf4
mov edx, dword [ebx]
push edx
call edi
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0x14]
mov ecx, dword [ebx]
push eax
push 0xfffffffffffffff0
push ecx
call dword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x46f39b
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x46f3af
mov edx, dword [ebx]
push 0xfffffffffffffff0
push edx
call dword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, esi
je 0x46f3af
mov byte [esp + 0x78], 1
mov eax, dword [ebx]
push 0xffffffffffffffec
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov edi, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov esi, eax
or edi, esi
not ecx
and edi, ecx
cmp esi, edi
je 0x46f419
cmp byte [esp + 0x84], 0
jne 0x46f3e3
mov byte [esp + 0x84], 1
mov byte [esp + 0x78], 0
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edx, dword [ebx]
push edi
push 0xffffffffffffffec
push edx
call dword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x46f405
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x46f419
mov eax, dword [ebx]
push 0xffffffffffffffec
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, esi
je 0x46f419
mov byte [esp + 0x78], 1
cmp byte [ebx + 4], 0xa
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x46f477
mov ecx, dword [ebx]
push 0
push 0
push 0x1037
push ecx
call esi
mov edi, eax
mov eax, dword [ebp + 0x10]
cmp edi, eax
je 0x46f477
cmp byte [esp + 0x84], 0
jne 0x46f453
mov byte [esp + 0x84], 1
mov byte [esp + 0x78], 0
mov edx, dword [ebx]
push eax
push 0
push 0x1036
push edx
call esi
mov eax, dword [ebx]
push 0
push 0
push 0x1037
push eax
call esi
cmp eax, edi
je 0x46f477
mov byte [esp + 0x78], 1
cmp byte [esp + 0x84], 0
je 0x46f48d
cmp byte [esp + 0x78], 0
je 0x46f48d
mov byte [esp + 0x13], 1
movzx eax, byte [ebx + 4]
add eax, 0xfffffff7
cmp eax, 0x10
ja case.0x46f4a4.13
movzx ecx, byte [eax + 0x46f888]
jmp dword [ecx*4 + 0x46f864]
cmp byte [ebp + 0x18e], 0
je case.0x46f4a4.13
mov ecx, ebp
mov eax, ebx
call fcn.00473680
jmp case.0x46f4a4.13
mov eax, ebp
mov esi, ebx
call fcn.00473760
test dword [ebp + 4], 0x100
je case.0x46f4a4.13
mov edx, dword [ebx]
push 0
push 0
push 0x41d
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x46f4a4.13
mov edi, dword [esp + 0x7c]
mov eax, ebp
call fcn.00473870
mov ebx, edi
jmp case.0x46f4a4.13
mov esi, dword [esp + 0x7c]
mov edi, ebp
call fcn.00473920
mov ebx, esi
jmp case.0x46f4a4.13
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x74]
push eax
push ecx
mov eax, ebp
mov ecx, ebx
call fcn.00473970
mov edx, dword [esp + 0x18]
cmp edx, dword [esp + 0x14]
je case.0x46f4a4.13
mov eax, dword [esp + 0x80]
mov ecx, dword [ebx]
push 0
push eax
push 0x402
push ecx
jmp 0x46f59b
mov eax, dword [ebp + 0x13c]
test eax, eax
je case.0x46f4a4.13
lea edx, [ebp + 0x74]
push edx
push eax
mov eax, dword [ebx]
push 0xcb
push eax
call esi
mov byte [esp + 0x13], 1
jmp case.0x46f4a4.13
mov eax, dword [ebp + 0x13c]
test eax, eax
je case.0x46f4a4.13
mov edx, dword [ebx]
lea ecx, [ebp + 0x74]
push ecx
push eax
push 0x192
push edx
call esi
mov byte [esp + 0x13], 1
jmp case.0x46f4a4.13
mov eax, dword [ebp + 0x60]
cmp eax, 0xffffffff
je case.0x46f4a4.13
push eax
mov eax, dword [ebx]
push 0
push 0x2001
push eax
call esi
mov eax, dword [ebp + 0x188]
test eax, eax
je 0x46f5cc
mov edx, dword [ebx]
xor ecx, ecx
cmp eax, 3
sete cl
push 0
push ecx
push 0xb
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebp + 0x188], 3
jne 0x46f5cc
cmp byte [ebx + 4], 0xb
jne 0x46f5d3
cmp byte [esp + 0x13], 0
je 0x46f5e0
mov eax, dword [ebx]
push 1
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
cmp byte [esp + 0x84], 0
je 0x46f63d
cmp byte [esp + 0x78], 0
jne 0x46f63d
mov ecx, dword [0x4d5b14]
test byte [ecx + 0x100], 1
jne 0x46f626
mov edx, dword [0x4d9f14]
push 1
push 0
push 0xffffffffffffffff
push 0x4b35d4
push edx
call fcn.00483320
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
mov ebx, dword [0x4dad5c]
push 0x4b0cf8
push 0
push 0x4b35d4
call fcn.00439cd0
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x60
ret 0x14