Function at 0x436e60
Capabilities:
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4937ef
mov eax, dword fs:[0]
push eax
sub esp, 0xb8
mov eax, dword [0x4bb028]
xor eax, esp
mov dword [esp + 0xb4], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4bb028]
xor eax, esp
push eax
lea eax, [esp + 0xcc]
mov dword fs:[0], eax
mov ebp, dword [esp + 0xdc]
lea ecx, [esp + 0x30]
call dword [0x497e20]
lea ecx, [esp + 0x2c]
mov dword [esp + 0xd4], 0
call dword [0x497e20]
lea ecx, [esp + 0x54]
call dword [0x497e20]
lea ecx, [esp + 0x4c]
call dword [0x497e20]
lea ecx, [esp + 0x58]
call dword [0x497e20]
lea ecx, [esp + 0x44]
call dword [0x497e20]
lea ecx, [esp + 0x3c]
call dword [0x497e20]
lea ecx, [esp + 0x60]
call dword [0x497e20]
lea ecx, [esp + 0x50]
call dword [0x497e20]
lea ecx, [esp + 0x48]
call dword [0x497e20]
lea ecx, [esp + 0x40]
call dword [0x497e20]
lea ecx, [esp + 0x5c]
call dword [0x497e20]
lea ecx, [esp + 0x34]
call dword [0x497e20]
lea ecx, [esp + 0x28]
call dword [0x497e20]
lea ecx, [esp + 0x38]
call dword [0x497e20]
push str.tab_btn_normal.png
lea ecx, [esp + 0x3c]
mov byte [esp + 0xd8], 0xe
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_3]
push str.tab_btn_hover.png
lea ecx, [esp + 0x38]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_3]
push str.tab_btn_click.png
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_3]
push str.main_right_top_mark_hover_bg.png
lea ecx, [esp + 0x30]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_3]
push str.main_right_top_mark_click_bg.png
lea ecx, [esp + 0x34]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_3]
push str.main_right_top_mark_hover_bg.png
lea ecx, [esp + 0x50]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_3]
push str.main_right_top_mark_click_bg.png
lea ecx, [esp + 0x58]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_3]
push str.main_close_hover.png
lea ecx, [esp + 0x5c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_3]
push str.main_close_click.png
lea ecx, [esp + 0x48]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_3]
push str.main_close.png
lea ecx, [esp + 0x40]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_3]
push str.main_min.png
lea ecx, [esp + 0x64]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_3]
push str.main_feedback.png
lea ecx, [esp + 0x54]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_3]
push str.main_restore.png
lea ecx, [esp + 0x4c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_3]
push str.main_skin.png
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_3]
push str.main_like.png
lea ecx, [esp + 0x44]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_3]
mov eax, dword [ebp + 0x20]
push 0
push 0
push 0x31
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
call sub.mfc90u.dll_CGdiObject::FromHandle
mov edx, dword [eax + 4]
lea ecx, [esp + 0x68]
push ecx
push 0x5c
push edx
call dword [sym.imp.GDI32.dll_GetObjectW]
fld qword [0x4bca20]
fmul qword [0x4a8b28]
call fcn.0048b190
mov dword [esp + 0x68], eax
lea eax, [esp + 0x68]
lea ebx, [ebp + 0xe078]
push eax
mov dword [esp + 0x68], ebx
call fcn.00453000
lea ecx, [esp + 0x68]
lea ebx, [ebp + 0xb130]
push ecx
call fcn.00453000
lea edx, [esp + 0x68]
lea ebx, [ebp + 0x2328]
push edx
call fcn.00453000
lea eax, [esp + 0x68]
lea ebx, [ebp + 0xac58]
push eax
call fcn.00453000
lea ecx, [esp + 0x68]
lea ebx, [ebp + 0x1e78]
push ecx
call fcn.00453000
lea edx, [esp + 0x68]
lea ebx, [ebp + 0xbb8]
push edx
call fcn.00453000
lea eax, [esp + 0x68]
lea ebx, [ebp + 0x1518]
push eax
call fcn.00453000
lea ecx, [esp + 0x68]
lea ebx, [ebp + 0x1068]
push ecx
call fcn.00453000
lea edx, [esp + 0x68]
lea ebx, [ebp + 0x27d8]
push edx
call fcn.00453000
lea eax, [esp + 0x68]
lea ebx, [ebp + 0x2c88]
push eax
call fcn.00453000
lea ecx, [esp + 0x68]
lea ebx, [ebp + 0x3138]
push ecx
call fcn.00453000
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe0], 0xf
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe4], 0x10
mov edx, dword [esp + 0x54]
mov esi, esp
mov dword [esp + 0x30], esp
push edx
lea edi, [ebp + 0xc8ec]
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe8], 0x11
mov eax, dword [esp + 0x6c]
mov esi, esp
mov dword [esp + 0x2c], esp
push eax
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xec], 0x12
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x4987c8
call dword [0x497c80]
lea ebx, [ebp + 0x2328]
mov ecx, ebx
mov byte [esp + 0xec], 0xe
call fcn.004526f0
push 0x10
push ecx
mov ecx, dword [esp + 0x44]
mov esi, esp
mov dword [esp + 0x1c], esp
push ecx
push edi
call fcn.00458430
push ebx
call fcn.00452960
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe0], 0x13
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe4], 0x14
mov edx, dword [esp + 0x64]
mov esi, esp
mov dword [esp + 0x30], esp
push edx
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe8], 0x15
mov eax, dword [esp + 0x60]
mov esi, esp
mov dword [esp + 0x30], esp
push eax
push edi
call fcn.00458430
mov byte [esp + 0xe8], 0x16
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0x4987c8
call dword [0x497c80]
lea ebx, [ebp + 0x1e78]
mov ecx, ebx
mov byte [esp + 0xec], 0xe
call fcn.004526f0
push 0x10
push ecx
mov ecx, dword [esp + 0x68]
mov esi, esp
mov dword [esp + 0x1c], esp
push ecx
push edi
call fcn.00458430
push ebx
call fcn.00452960
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe0], 0x17
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe4], 0x18
mov edx, dword [esp + 0x40]
mov esi, esp
mov dword [esp + 0x30], esp
push edx
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe8], 0x19
mov eax, dword [esp + 0x40]
mov esi, esp
mov dword [esp + 0x30], esp
push eax
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xec], 0x1a
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0x4987c8
call dword [0x497c80]
lea ebx, [ebp + 0x19c8]
mov ecx, ebx
mov byte [esp + 0xec], 0xe
call fcn.004526f0
push 0x10
push ecx
mov ecx, dword [esp + 0x58]
mov esi, esp
mov dword [esp + 0x1c], esp
push ecx
push edi
call fcn.00458430
push ebx
call fcn.00452960
mov ebx, dword [sym.imp.USER32.dll_SetRect]
push 0
push 0
push 0
push 5
lea edx, [ebp + 0x1d5c]
push edx
call ebx
push 0
push 5
push 1
push 5
lea eax, [ebp + 0x1d6c]
push eax
call ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x4987c8
mov dword [ebp + 0x1d7c], 0x8024
call dword [0x497c80]
push ecx
mov byte [esp + 0xe0], 0x1b
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe4], 0x1c
mov ecx, dword [esp + 0x40]
mov esi, esp
mov dword [esp + 0x30], esp
push ecx
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe8], 0x1d
mov edx, dword [esp + 0x40]
mov esi, esp
mov dword [esp + 0x30], esp
push edx
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xec], 0x1e
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0x4987c8
call dword [0x497c80]
lea ecx, [ebp + 0x1518]
mov byte [esp + 0xec], 0xe
call fcn.004526f0
mov eax, dword [esp + 0x48]
push 0x10
push ecx
mov esi, esp
mov dword [esp + 0x1c], esp
push eax
push edi
call fcn.00458430
lea eax, [ebp + 0x1518]
push eax
call fcn.00452960
push 0
push 0
push 0
push 5
lea ecx, [ebp + 0x18ac]
push ecx
call ebx
push 0
push 5
push 1
push 5
lea edx, [ebp + 0x18bc]
push edx
call ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x4987c8
mov dword [ebp + 0x18cc], 0x8024
call dword [0x497c80]
mov byte [esp + 0xdc], 0x1f
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe4], 0x20
mov eax, dword [esp + 0x40]
mov esi, esp
mov dword [esp + 0x30], esp
push eax
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe8], 0x21
mov ecx, dword [esp + 0x40]
mov esi, esp
mov dword [esp + 0x30], esp
push ecx
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xec], 0x22
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0x4987c8
call dword [0x497c80]
lea ecx, [ebp + 0x1068]
mov byte [esp + 0xec], 0xe
call fcn.004526f0
mov edx, dword [esp + 0x5c]
push 0x10
push ecx
mov esi, esp
mov dword [esp + 0x1c], esp
push edx
push edi
call fcn.00458430
lea eax, [ebp + 0x1068]
push eax
call fcn.00452960
push 0
push 0
push 0
push 5
lea eax, [ebp + 0x13fc]
push eax
call ebx
push 0
push 5
push 1
push 5
lea ecx, [ebp + 0x140c]
push ecx
call ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x4987c8
mov dword [ebp + 0x141c], 0x8024
call dword [0x497c80]
push ecx
mov byte [esp + 0xe0], 0x23
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe4], 0x24
mov edx, dword [esp + 0x40]
mov esi, esp
mov dword [esp + 0x30], esp
push edx
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe8], 0x25
mov eax, dword [esp + 0x40]
mov esi, esp
mov dword [esp + 0x30], esp
push eax
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xec], 0x26
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0x4987c8
call dword [0x497c80]
lea ecx, [ebp + 0xbb8]
mov byte [esp + 0xec], 0xe
call fcn.004526f0
push 0
push 0
push 0
push 5
lea ecx, [ebp + 0xf4c]
push ecx
call ebx
push 0
push 5
push 1
push 5
lea edx, [ebp + 0xf5c]
push edx
call ebx
mov eax, dword [esp + 0x40]
push 0x10
push ecx
mov esi, esp
mov dword [esp + 0x1c], esp
push eax
push edi
mov dword [ebp + 0xf6c], 0x8024
call fcn.00458430
lea eax, [ebp + 0xbb8]
push eax
call fcn.00452960
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xdc], 0x27
mov esi, esp
mov dword [esp + 0x20], esp
push str.main_right_top_mark_sep.png
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe0], 0x28
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe4], 0x29
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x4987c8
call dword [0x497c80]
lea ecx, [ebp + 0x1e78]
mov byte [esp + 0xe4], 0xe
call fcn.00452a30
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x4987c8
call dword [0x497c80]
mov byte [esp + 0xd8], 0x2a
push ecx
mov esi, esp
mov dword [esp + 0x20], esp
push str.main_right_top_mark_sep.png
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe0], 0x2b
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe4], 0x2c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x4987c8
call dword [0x497c80]
lea ecx, [ebp + 0x19c8]
mov byte [esp + 0xe4], 0xe
call fcn.00452a30
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xdc], 0x2d
mov esi, esp
mov dword [esp + 0x20], esp
push str.main_right_top_mark_sep.png
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe0], 0x2e
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe4], 0x2f
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x4987c8
call dword [0x497c80]
lea ecx, [ebp + 0x1518]
mov byte [esp + 0xe4], 0xe
call fcn.00452a30
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xdc], 0x30
mov esi, esp
mov dword [esp + 0x20], esp
push str.main_right_top_mark_sep.png
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe0], 0x31
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe4], 0x32
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x4987c8
call dword [0x497c80]
mov byte [esp + 0xe4], 0xe
lea ecx, [ebp + 0x1068]
call fcn.00452a30
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xdc], 0x33
mov esi, esp
mov dword [esp + 0x20], esp
push str.main_right_top_mark_sep.png
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe0], 0x34
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe4], 0x35
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x4987c8
call dword [0x497c80]
lea ecx, [ebp + 0xbb8]
mov byte [esp + 0xe4], 0xe
call fcn.00452a30
push 1
push ecx
mov ecx, dword [esp + 0x30]
mov esi, esp
mov dword [esp + 0x1c], esp
push ecx
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe0], 0x36
mov edx, dword [esp + 0x34]
mov esi, esp
mov dword [esp + 0x24], esp
push edx
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe4], 0x37
mov eax, dword [esp + 0x38]
mov esi, esp
mov dword [esp + 0x30], esp
push eax
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe8], 0x38
mov ecx, dword [esp + 0x48]
mov esi, esp
mov dword [esp + 0x30], esp
push ecx
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xec], 0x39
mov edx, dword [esp + 0x50]
mov esi, esp
mov dword [esp + 0x3c], esp
push edx
push edi
call fcn.00458430
lea ecx, [ebp + 0x3138]
mov byte [esp + 0xec], 0xe
call fcn.004526f0
mov dword [ebp + 0x34ec], 0x8024
push 0
push 5
push 0
push 5
lea eax, [ebp + 0x34dc]
push eax
call ebx
push 1
push ecx
mov ecx, dword [esp + 0x30]
mov esi, esp
mov dword [esp + 0x1c], esp
push ecx
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe0], 0x3a
mov edx, dword [esp + 0x34]
mov esi, esp
mov dword [esp + 0x24], esp
push edx
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe4], 0x3b
mov eax, dword [esp + 0x38]
mov esi, esp
mov dword [esp + 0x30], esp
push eax
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe8], 0x3c
mov ecx, dword [esp + 0x48]
mov esi, esp
mov dword [esp + 0x30], esp
push ecx
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xec], 0x3d
mov edx, dword [esp + 0x50]
mov esi, esp
mov dword [esp + 0x3c], esp
push edx
push edi
call fcn.00458430
lea ecx, [ebp + 0x2c88]
mov byte [esp + 0xec], 0xe
call fcn.004526f0
push 0
push 5
push 0
push 5
lea eax, [ebp + 0x302c]
push eax
mov dword [ebp + 0x303c], 0x8024
call ebx
push 1
push ecx
mov ecx, dword [esp + 0x30]
mov esi, esp
mov dword [esp + 0x1c], esp
push ecx
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe0], 0x3e
mov edx, dword [esp + 0x34]
mov esi, esp
mov dword [esp + 0x24], esp
push edx
push edi
call fcn.00458430
mov byte [esp + 0xe0], 0x3f
push ecx
mov eax, dword [esp + 0x38]
mov esi, esp
mov dword [esp + 0x30], esp
push eax
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe8], 0x40
mov ecx, dword [esp + 0x48]
mov esi, esp
mov dword [esp + 0x30], esp
push ecx
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xec], 0x41
mov edx, dword [esp + 0x50]
mov esi, esp
mov dword [esp + 0x3c], esp
push edx
push edi
call fcn.00458430
lea ecx, [ebp + 0x27d8]
mov byte [esp + 0xec], 0xe
call fcn.004526f0
push 0
push 5
push 0
push 5
lea eax, [ebp + 0x2b7c]
push eax
mov dword [ebp + 0x2b8c], 0x8024
call ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe0], 0x42
mov esi, esp
mov dword [esp + 0x24], esp
push str.menu_normal.png
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe4], 0x43
mov esi, esp
mov dword [esp + 0x30], esp
push str.menu_click.png
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe8], 0x44
mov esi, esp
mov dword [esp + 0x30], esp
push str.menu_hover.png
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xec], 0x45
mov esi, esp
mov dword [esp + 0x3c], esp
push str.menu_normal.png
push edi
call fcn.00458430
lea ecx, [ebp + 0xac58]
mov byte [esp + 0xec], 0xe
call fcn.004526f0
push 0
push 0x14
push 0
mov dword [ebp + 0xb00c], 0x8025
push 5
lea ecx, [ebp + 0xaffc]
push ecx
call ebx
push 0x10
push ecx
mov esi, esp
mov dword [esp + 0x1c], esp
push str.tab_ad.png
push edi
call fcn.00458430
lea eax, [ebp + 0x27d8]
push eax
call fcn.00452960
push 0x10
push ecx
mov esi, esp
mov dword [esp + 0x1c], esp
push str.tab_oc.png
push edi
call fcn.00458430
lea eax, [ebp + 0x2c88]
push eax
call fcn.00452960
push 0x10
push ecx
mov esi, esp
mov dword [esp + 0x1c], esp
push str.tab_ov.png
push edi
call fcn.00458430
lea eax, [ebp + 0x3138]
push eax
call fcn.00452960
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe0], 0x46
mov esi, esp
mov dword [esp + 0x24], esp
push str.pop_btn_normal.png
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe4], 0x47
mov esi, esp
mov dword [esp + 0x30], esp
push str.pop_btn_click.png
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe8], 0x48
mov esi, esp
mov dword [esp + 0x30], esp
push str.pop_btn_hover.png
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xec], 0x49
mov esi, esp
mov dword [esp + 0x3c], esp
push str.pop_btn_normal.png
push edi
call fcn.00458430
lea ecx, [ebp + 0xb988]
mov byte [esp + 0xec], 0xe
call fcn.00424f30
push 0
lea ecx, [ebp + 0xc2a0]
call sub.mfc90u.dll_CWnd::ShowWindow
push 0
lea ecx, [ebp + 0xbdf0]
call sub.mfc90u.dll_CWnd::ShowWindow
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe0], 0x4a
mov esi, esp
mov dword [esp + 0x24], esp
push str.usertype_btn.png
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe4], 0x4b
mov esi, esp
mov dword [esp + 0x30], esp
push str.usertype_btn.png
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe8], 0x4c
mov esi, esp
mov dword [esp + 0x30], esp
push str.usertype_btn.png
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xec], 0x4d
mov esi, esp
mov dword [esp + 0x3c], esp
push str.usertype_btn.png
push edi
call fcn.00458430
lea ecx, [ebp + 0xb130]
mov byte [esp + 0xec], 0xe
call fcn.004526f0
push 0
push 0
push 0
push 5
add ebp, 0xb4d4
push ebp
call ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x4987c8
call dword [0x497c80]
push ecx
mov byte [esp + 0xe0], 0x4e
mov esi, esp
mov dword [esp + 0x24], esp
push str.activenow_normal.png
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe4], 0x4f
mov esi, esp
mov dword [esp + 0x30], esp
push str.activenow_click.png
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xe8], 0x50
mov esi, esp
mov dword [esp + 0x30], esp
push str.activenow_hover.png
push edi
call fcn.00458430
push ecx
mov byte [esp + 0xec], 0x51
mov esi, esp
mov dword [esp + 0x3c], esp
push str.activenow_normal.png
push edi
call fcn.00458430
mov ecx, dword [esp + 0x7c]
mov byte [esp + 0xec], 0xe
call fcn.004526f0
lea ecx, [esp + 0x38]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x34]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x5c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x40]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x48]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x50]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x60]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x3c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x44]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x58]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x4c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x54]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x30]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov ecx, dword [esp + 0xcc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xb4]
xor ecx, esp
call fcn.0048a3f6
add esp, 0xc4
ret 4