Function at 0x465ea2
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb4
push ebx
push esi
push edi
mov esi, dword [ebp + 0x1c]
mov ebx, dword [ebp + 0x14]
mov edi, dword [ebp + 0x10]
cmp dword [edi + 8], 0
jne 0x465f05
push 0x63
push esi
push dword [ebp + 0x18]
push edi
mov eax, dword [ebp + 0xc]
push dword [eax]
push dword [ebp + 8]
call fcn.004e47a0
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jne 0x465efd
cmp dword [edi + 8], 1
je 0x465efd
cmp dword [edi + 8], 2
je 0x465efd
cmp dword [edi + 8], 3
je 0x465efd
cmp dword [edi + 8], 4
je 0x465efd
push 6
push esi
push edi
call fcn.0047a1dc
jmp 0x4677aa
mov eax, dword [ebp - 4]
jmp 0x4677aa
cmp dword [edi + 0x40], 0
jne 0x465f15
mov eax, 2
jmp 0x4677aa
cmp dword [edi + 8], 2
jl 0x465f2e
mov edx, dword [edi + 0x40]
cmp dword [edx + 0x40], 0
jne 0x465f2e
mov eax, 2
jmp 0x4677aa
cmp dword [edi + 8], 3
jl 0x465f4a
mov edx, dword [edi + 0x40]
mov ecx, dword [edx + 0x40]
cmp dword [ecx + 0x40], 0
jne 0x465f4a
mov eax, 2
jmp 0x4677aa
cmp dword [edi + 8], 4
jne 0x465f69
mov edx, dword [edi + 0x40]
mov ecx, dword [edx + 0x40]
mov eax, dword [ecx + 0x40]
cmp dword [eax + 0x40], 0
jne 0x465f69
mov eax, 2
jmp 0x4677aa
mov edx, dword [edi + 0x40]
cmp dword [edx + 0x1c], 1
je 0x465f7c
mov eax, 1
jmp 0x4677aa
cmp dword [edi + 8], 2
jl 0x465f98
mov edx, dword [edi + 0x40]
mov ecx, dword [edx + 0x40]
cmp dword [ecx + 0x1c], 1
je 0x465f98
mov eax, 1
jmp 0x4677aa
cmp dword [edi + 8], 3
jl 0x465fb7
mov edx, dword [edi + 0x40]
mov ecx, dword [edx + 0x40]
mov eax, dword [ecx + 0x40]
cmp dword [eax + 0x1c], 1
je 0x465fb7
mov eax, 1
jmp 0x4677aa
cmp dword [edi + 8], 4
jne 0x465fd9
mov edx, dword [edi + 0x40]
mov ecx, dword [edx + 0x40]
mov eax, dword [ecx + 0x40]
mov edx, dword [eax + 0x40]
cmp dword [edx + 0x1c], 1
je 0x465fd9
mov eax, 1
jmp 0x4677aa
mov edx, dword [edi + 0x40]
cmp dword [edx + 0xc], 0
jne 0x46779a
cmp dword [edi + 8], 2
jl 0x465ffc
mov ecx, dword [edi + 0x40]
mov eax, dword [ecx + 0x40]
cmp dword [eax + 0xc], 0
jne 0x46779a
cmp dword [edi + 8], 3
jl 0x466015
mov edx, dword [edi + 0x40]
mov ecx, dword [edx + 0x40]
mov eax, dword [ecx + 0x40]
cmp dword [eax + 0xc], 0
jne 0x46779a
cmp dword [edi + 8], 4
jne 0x466031
mov edx, dword [edi + 0x40]
mov ecx, dword [edx + 0x40]
mov eax, dword [ecx + 0x40]
mov edx, dword [eax + 0x40]
cmp dword [edx + 0xc], 0
jne 0x46779a
xor ecx, ecx
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp + 0x18]
mov byte [eax], 0
mov dword [ebp - 4], 0xffffffff
cmp dword [edi + 8], 1
jne 0x4660ae
cmp dword [ebp + 0x20], 0
je 0x466061
mov edx, dword [ebp + 0x20]
push dword [edx + 0xc54]
call fcn.0045e026
test eax, eax
jne 0x46606f
push 6
push esi
push edi
call fcn.0047a1dc
jmp 0x4677aa
mov ecx, dword [ebp + 0x20]
mov eax, dword [ecx + 0xc54]
push esi
push edi
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov eax, dword [edi + 0x40]
push dword [eax]
call fcn.00555124
pop ecx
mov dword [ebp - 8], eax
jmp 0x466389
cmp dword [edi + 8], 2
jne 0x4661b5
mov edx, dword [edi + 0x40]
push dword [edx]
call fcn.004e43bb
test eax, eax
je 0x466177
cmp dword [ebp + 0x20], 0
je 0x4660e2
mov ecx, dword [ebp + 0x20]
push dword [ecx + 0xc54]
call fcn.0045e026
test eax, eax
jne 0x4660f0
push 6
push esi
push edi
call fcn.0047a1dc
jmp 0x4677aa
mov eax, dword [ebp + 0x20]
mov edx, dword [eax + 0xc54]
push esi
push edi
mov edi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov eax, dword [edi + 0x40]
push dword [eax]
call fcn.00555124
pop ecx
mov dword [ebp - 8], eax
mov edx, dword [edi + 0x40]
mov ecx, dword [edx + 0x40]
push dword [ecx]
call fcn.00555124
pop ecx
mov dword [ebp - 4], eax
mov eax, dword [edi + 0x40]
mov edx, dword [eax + 0x40]
mov ecx, dword [edx]
mov eax, dword [ebp + 0x18]
push esi
push edi
mov edi, ecx
mov esi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov dword [ebp - 0x24], 1
jmp 0x466389
mov eax, dword [edi + 0x40]
mov edx, dword [eax]
push esi
push edi
mov edi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov eax, dword [edi + 0x40]
mov edx, dword [eax + 0x40]
push dword [edx]
call fcn.00555124
pop ecx
mov dword [ebp - 8], eax
jmp 0x466389
cmp dword [edi + 8], 3
jne 0x466306
mov ecx, dword [edi + 0x40]
push dword [ecx]
call fcn.004e43bb
test eax, eax
je 0x46627a
cmp dword [ebp + 0x20], 0
je 0x4661e9
mov eax, dword [ebp + 0x20]
push dword [eax + 0xc54]
call fcn.0045e026
test eax, eax
jne 0x4661f7
push 6
push esi
push edi
call fcn.0047a1dc
jmp 0x4677aa
mov edx, dword [ebp + 0x20]
mov ecx, dword [edx + 0xc54]
push esi
push edi
mov edi, ecx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov eax, dword [edi + 0x40]
push dword [eax]
call fcn.00555124
pop ecx
mov dword [ebp - 8], eax
mov edx, dword [edi + 0x40]
mov ecx, dword [edx + 0x40]
mov eax, dword [ecx]
mov edx, dword [ebp + 0x18]
push esi
push edi
mov edi, eax
mov esi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov eax, dword [edi + 0x40]
mov edx, dword [eax + 0x40]
mov ecx, dword [edx + 0x40]
push dword [ecx]
call fcn.00555124
pop ecx
mov dword [ebp - 4], eax
jmp 0x466389
mov eax, dword [edi + 0x40]
mov edx, dword [eax]
push esi
push edi
mov edi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov eax, dword [edi + 0x40]
mov edx, dword [eax + 0x40]
push dword [edx]
call fcn.00555124
pop ecx
mov dword [ebp - 8], eax
mov ecx, dword [edi + 0x40]
mov eax, dword [ecx + 0x40]
mov edx, dword [eax + 0x40]
push dword [edx]
call fcn.00555124
pop ecx
mov dword [ebp - 4], eax
mov ecx, dword [edi + 0x40]
mov eax, dword [ecx + 0x40]
mov edx, dword [eax + 0x40]
mov ecx, dword [edx]
mov eax, dword [ebp + 0x18]
push esi
push edi
mov edi, ecx
mov esi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov dword [ebp - 0x24], 1
jmp 0x466389
mov eax, dword [edi + 0x40]
mov edx, dword [eax]
push esi
push edi
mov edi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov eax, dword [edi + 0x40]
mov edx, dword [eax + 0x40]
push dword [edx]
call fcn.00555124
pop ecx
mov dword [ebp - 8], eax
mov ecx, dword [edi + 0x40]
mov eax, dword [ecx + 0x40]
mov edx, dword [eax + 0x40]
mov ecx, dword [edx]
mov eax, dword [ebp + 0x18]
push esi
push edi
mov edi, ecx
mov esi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov eax, dword [edi + 0x40]
mov edx, dword [eax + 0x40]
mov ecx, dword [edx + 0x40]
mov eax, dword [ecx + 0x40]
push dword [eax]
call fcn.00555124
pop ecx
mov dword [ebp - 4], eax
push esi
call fcn.0045e077
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x4663a6
push 6
push esi
push edi
call fcn.0047a1dc
jmp 0x4677aa
cmp dword [ebp - 8], 1
jl 0x4663b5
cmp dword [ebp - 8], 0xbb8
jle 0x4663c3
push 6
push esi
push edi
call fcn.0047a1dc
jmp 0x4677aa
add dword [ebp - 8], 0x1770
push dword [ebp - 8]
mov edx, dword [ebp - 0x14]
push dword [edx + 0xc8]
call sub.USER32.dll_GetDlgItem
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x466401
push 0x64
push esi
push dword [ebp - 0x1c]
call sub.USER32.dll_GetClassNameA
push 0xfffffffffffffff0
push dword [ebp - 0x1c]
call sub.USER32.dll_GetWindowLongA
mov dword [ebp - 0x20], eax
jmp 0x466567
push dword [ebp - 8]
push dword [ebp - 0x14]
call fcn.0045f403
test eax, eax
jne 0x46641e
push 6
push esi
push edi
call fcn.0047a1dc
jmp 0x4677aa
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0xfe4]
test eax, eax
je 0x46779a
push 0
push 0x3e7
push esi
push dword [ebp - 8]
push eax
call sub.USER32.dll_GetMenuStringA
test eax, eax
je 0x46779a
cmp dword [edi + 0x10], 0
je 0x46653d
push 0x2e
push dword [edi]
call fcn.0054c5b8
add esp, 8
mov dword [ebp - 0x28], eax
test eax, eax
je 0x46653d
push 0
push dword [ebp - 8]
mov edx, dword [ebp - 0x14]
push dword [edx + 0xfe4]
call fcn.004caf02
mov dword [ebp - 0x2c], eax
push 0x5619ae
push dword [ebp - 0x28]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x4664bd
test byte [ebp - 0x2c], 8
je 0x4664ab
push edi
mov esi, 0x5619b6
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push edi
mov esi, 0x5619b9
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push 0x5619bc
push dword [ebp - 0x28]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x4664fb
test byte [ebp - 0x2c], 1
je 0x4664e9
push edi
mov esi, 0x5619c6
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push edi
mov esi, 0x5619c9
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push 0x5619cc
push dword [ebp - 0x28]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x46779a
push esi
push edi
mov edi, esi
mov esi, ebx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
jmp 0x46779a
push esi
push edi
mov edi, esi
mov esi, ebx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
jmp 0x46779a
mov eax, dword [ebp + 0x24]
dec eax
je 0x466579
dec eax
je 0x466784
jmp 0x4669b3
cmp dword [ebp - 0x24], 0
je 0x466586
mov dword [ebp - 4], 1
cmp dword [ebp - 4], 1
jge 0x466593
mov dword [ebp - 4], 1
push 0x5619d3
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x466638
push 0
push 0
push 0x18b
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x46779a
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x10]
jg 0x46661a
push ebx
mov ecx, dword [ebp - 4]
dec ecx
push ecx
push 0x189
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
inc eax
je 0x46661a
push 1
push 0
push ebx
push dword [ebp + 0x18]
call fcn.0051d2f8
test eax, eax
je 0x46660f
push dword [ebp - 4]
push 0x5619dc
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
mov eax, dword [ebp + 0x18]
mov byte [eax], 0
jmp 0x46661a
inc dword [ebp - 4]
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x10]
jle 0x4665cf
mov ecx, dword [ebp + 0x18]
cmp byte [ecx], 0
je 0x46779a
push edi
mov esi, 0x5619e0
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push 0x5619e3
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x4666dd
push 0
push 0
push 0x146
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x46779a
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x10]
jg 0x4666bf
push ebx
mov ecx, dword [ebp - 4]
dec ecx
push ecx
push 0x148
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
inc eax
je 0x4666bf
push 1
push 0
push ebx
push dword [ebp + 0x18]
call fcn.0051d2f8
test eax, eax
je 0x4666b4
push dword [ebp - 4]
push 0x5619ed
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
mov eax, dword [ebp + 0x18]
mov byte [eax], 0
jmp 0x4666bf
inc dword [ebp - 4]
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x10]
jle 0x466674
mov ecx, dword [ebp + 0x18]
cmp byte [ecx], 0
je 0x46779a
push edi
mov esi, 0x5619f1
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push esi
call fcn.00478fe6
test eax, eax
je 0x46779a
push 0
push 0
push 0xba
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x10]
jg 0x466766
mov word [ebx], 0x3b5
push ebx
mov ecx, dword [ebp - 4]
dec ecx
push ecx
push 0xc4
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
test eax, eax
jl 0x466729
mov byte [ebx + eax], 0
jmp 0x46672c
mov byte [ebx], 0
cmp byte [ebx], 0
je 0x466766
push 1
push 0
push ebx
push dword [ebp + 0x18]
call fcn.0051d2f8
test eax, eax
je 0x46675b
push dword [ebp - 4]
push 0x5619f4
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
mov eax, dword [ebp + 0x18]
mov byte [eax], 0
jmp 0x466766
inc dword [ebp - 4]
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x10]
jle 0x466707
mov ecx, dword [ebp + 0x18]
cmp byte [ecx], 0
je 0x46779a
push edi
mov esi, 0x5619f8
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
cmp dword [ebp - 4], 0
jg 0x466791
mov dword [ebp - 4], 0x2c
mov edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], 1
push 0x5619fb
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x46684f
push 0
push 0
push 0x18b
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x46779a
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 0x10]
jg 0x46779a
push esi
mov eax, dword [ebp - 4]
dec eax
push eax
push 0x189
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
inc eax
je 0x46779a
push ebx
call fcn.0054c2d0
pop ecx
push eax
push esi
call fcn.0054c2d0
pop ecx
pop edx
add edx, eax
cmp edx, 0x3b5
ja 0x46779a
cmp byte [ebx], 0
je 0x466835
push dword [ebp - 0xc]
push 0x561a04
push ebx
call fcn.0054c2d0
pop ecx
add eax, ebx
push eax
call sub.USER32.dll_wsprintfA
add esp, 0xc
push esi
push ebx
call fcn.0054c1f4
add esp, 8
inc dword [ebp - 4]
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 0x10]
jle 0x4667de
jmp 0x46779a
push 0x561a08
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x466900
push 0
push 0
push 0x146
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x46779a
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x10]
jg 0x46779a
push esi
mov edx, dword [ebp - 4]
dec edx
push edx
push 0x148
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
inc eax
je 0x46779a
push ebx
call fcn.0054c2d0
pop ecx
push eax
push esi
call fcn.0054c2d0
pop ecx
pop ecx
add ecx, eax
cmp ecx, 0x3b5
ja 0x46779a
cmp byte [ebx], 0
je 0x4668e6
push dword [ebp - 0xc]
push 0x561a12
push ebx
call fcn.0054c2d0
pop ecx
add eax, ebx
push eax
call sub.USER32.dll_wsprintfA
add esp, 0xc
push esi
push ebx
call fcn.0054c1f4
add esp, 8
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x10]
jle 0x46688f
jmp 0x46779a
push esi
call fcn.00478fe6
test eax, eax
je 0x46779a
push 0
push 0
push 0xba
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x10]
jg 0x46779a
mov word [esi], 0x3b5
push esi
mov ecx, dword [ebp - 4]
dec ecx
push ecx
push 0xc4
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
test eax, eax
jl 0x466950
mov byte [esi + eax], 0
jmp 0x466953
mov byte [esi], 0
cmp byte [esi], 0
je 0x46779a
push ebx
call fcn.0054c2d0
pop ecx
push eax
push esi
call fcn.0054c2d0
pop ecx
pop edx
add edx, eax
cmp edx, 0x3b5
ja 0x46779a
cmp byte [ebx], 0
je 0x466999
push dword [ebp - 0xc]
push 0x561a16
push ebx
call fcn.0054c2d0
pop ecx
add eax, ebx
push eax
call sub.USER32.dll_wsprintfA
add esp, 0xc
push esi
push ebx
call fcn.0054c1f4
add esp, 8
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x10]
jle 0x46692e
jmp 0x46779a
cmp dword [edi + 0x10], 0
je 0x46764b
push 0x2e
push dword [edi]
call fcn.0054c5b8
add esp, 8
mov dword [ebp - 0x28], eax
test eax, eax
je 0x46764b
push 0x561a1a
push dword [ebp - 0x28]
call fcn.0054c494
add esp, 8
test eax, eax
je 0x46764b
push 0x561a21
push dword [ebp - 0x28]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x466b6d
push esi
push edi
mov esi, 0x561a27
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
pop esi
push 0x561a2a
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x466a66
cmp dword [ebp - 4], 1
jl 0x46779a
push 0
mov edx, dword [ebp - 4]
dec edx
push edx
push 0x18a
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x46779a
push dword [ebp - 0x10]
push 0x561a33
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
push 0x561a38
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x466ae6
cmp dword [ebp - 4], 0
jl 0x46779a
cmp dword [ebp - 4], 0
jne 0x466aaf
push 0
push 0
push 0xe
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
push 0x561a42
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
push 0
mov ecx, dword [ebp - 4]
dec ecx
push ecx
push 0x149
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x46779a
push dword [ebp - 0x10]
push 0x561a47
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
push esi
call fcn.00478fe6
test eax, eax
je 0x466b46
cmp dword [ebp - 4], 1
jl 0x46779a
push 0
mov eax, dword [ebp - 4]
dec eax
push eax
push 0xbb
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x46779a
push 0
push dword [ebp - 0x10]
push 0xc1
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
push 0x561a4c
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
push 0
push 0
push 0xe
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
push 0x561a51
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
push 0x561a56
push dword [ebp - 0x28]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x466cc4
push 0x561a5e
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x466bcb
push 0
push 0
push 0x18b
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x46779a
push dword [ebp - 0x10]
push 0x561a67
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
push 0x561a6c
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x466c11
push 0
push 0
push 0x146
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x46779a
push dword [ebp - 0x10]
push 0x561a76
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
push esi
call fcn.00478fe6
test eax, eax
je 0x466c45
push 0
push 0
push 0xba
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
push 0x561a7b
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
push 0x561a80
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x466c89
xor edx, edx
mov dword [ebp - 0x30], edx
xor ecx, ecx
mov dword [ebp - 0x34], ecx
lea eax, [ebp - 0x34]
push eax
lea edx, [ebp - 0x30]
push edx
push 2
push dword [ebp - 0x1c]
call sub.USER32.dll_GetScrollRange
push dword [ebp - 0x34]
push 0x561a8b
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
push 0
push 0
push 0xe
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jle 0x466cb2
push edi
mov esi, 0x561a8f
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push edi
mov esi, 0x561a92
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push str..sel
push dword [ebp - 0x28]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x466f7a
push 0x561a9b
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x466e65
test byte [ebp - 0x1f], 8
je 0x466de8
push 0
push 0
push 0x190
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 4], 0
jne 0x466d3d
cmp dword [ebp - 0x10], 0xffffffff
je 0x466d22
cmp dword [ebp - 0x10], 0
jg 0x466d27
xor edx, edx
mov dword [ebp - 0x10], edx
push dword [ebp - 0x10]
push 0x561aa4
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
cmp dword [ebp - 0x10], 0xffffffff
je 0x46779a
cmp dword [ebp - 0x10], 0
jle 0x46779a
cmp dword [ebp - 4], 0
jge 0x466d5e
mov dword [ebp - 4], 1
dec dword [ebp - 4]
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 0x10]
jge 0x46779a
mov eax, dword [ebp - 0x10]
shl eax, 2
push eax
call fcn.00557db4
pop ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x466d91
push 8
push esi
push edi
call fcn.0047a1dc
jmp 0x4677aa
push dword [ebp - 0x18]
push dword [ebp - 0x10]
push 0x191
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x466db3
cmp dword [ebp - 0x10], 0
jg 0x466dc1
push dword [ebp - 0x18]
call fcn.00557ca0
pop ecx
jmp 0x46779a
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + ecx*4]
inc eax
push eax
push 0x561aa9
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebp - 0x18]
call fcn.00557ca0
pop ecx
jmp 0x46779a
push 0
push 0
push 0x188
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 4], 0
jne 0x466e2c
cmp dword [ebp - 0x10], 0xffffffff
jne 0x466e1a
push edi
mov esi, 0x561aad
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push edi
mov esi, 0x561ab0
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
cmp dword [ebp - 4], 0xffffffff
jne 0x466e39
mov dword [ebp - 4], 1
cmp dword [ebp - 0x10], 0xffffffff
je 0x46779a
cmp dword [ebp - 4], 1
jne 0x46779a
mov edx, dword [ebp - 0x10]
inc edx
push edx
push 0x561ab3
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
push 0x561ab8
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x466ef4
push 0
push 0
push 0x147
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 4], 0
jne 0x466ebb
cmp dword [ebp - 0x10], 0xffffffff
jne 0x466ea9
push edi
mov esi, 0x561ac2
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push edi
mov esi, 0x561ac5
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
cmp dword [ebp - 4], 0xffffffff
jne 0x466ec8
mov dword [ebp - 4], 1
cmp dword [ebp - 0x10], 0xffffffff
je 0x46779a
cmp dword [ebp - 4], 1
jne 0x46779a
mov edx, dword [ebp - 0x10]
inc edx
push edx
push 0x561ac8
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
push esi
call fcn.00478fe6
test eax, eax
je 0x466f41
cmp dword [ebp - 4], 1
jl 0x46779a
push 0
lea ecx, [ebp - 0x10]
push ecx
push 1
push dword [ebp - 0x1c]
call fcn.00478d41
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x10]
push 1
push dword [ebp - 0x1c]
call fcn.00478e75
mov edx, dword [ebp - 0x10]
inc edx
push edx
push 0x561acd
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
push 0x561ad2
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x46779a
push 2
push dword [ebp - 0x1c]
call sub.USER32.dll_GetScrollPos
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
push 0x561add
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
push 0x561ae2
push dword [ebp - 0x28]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x4670fc
push 0x561aea
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x466ff9
cmp dword [ebp - 4], 1
jl 0x46779a
push 0
mov ecx, dword [ebp - 4]
dec ecx
push ecx
push 0x187
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x46779a
cmp dword [ebp - 0x10], 0
je 0x466fe7
push edi
mov esi, 0x561af3
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push edi
mov esi, 0x561af6
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push 0x561af9
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x467086
cmp dword [ebp - 4], 1
jl 0x46779a
push 0
push 0
push 0x146
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x46779a
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x10]
jg 0x46779a
push 0
push 0
push 0x147
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x467074
mov ecx, dword [ebp - 4]
dec ecx
cmp ecx, dword [ebp - 0x10]
jne 0x467074
push edi
mov esi, 0x561b03
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push edi
mov esi, 0x561b06
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push 0x561b09
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x46779a
push dword [ebp - 8]
mov edx, dword [ebp - 0x14]
push dword [edx + 0xc8]
call sub.USER32.dll_IsDlgButtonChecked
test al, 1
je 0x4670c3
push edi
mov esi, 0x561b11
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push dword [ebp - 8]
mov edx, dword [ebp - 0x14]
push dword [edx + 0xc8]
call sub.USER32.dll_IsDlgButtonChecked
test al, 2
je 0x4670ea
push edi
mov esi, 0x561b14
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push edi
mov esi, 0x561b17
mov edi, ebx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push str..next
push dword [ebp - 0x28]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x467162
push 0
push dword [ebp - 0x1c]
mov edx, dword [ebp - 0x14]
push dword [edx + 0xc8]
call sub.USER32.dll_GetNextDlgTabItem
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x46779a
push dword [ebp - 0x1c]
call sub.USER32.dll_GetDlgCtrlID
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x46779a
mov ecx, dword [ebp - 8]
add ecx, 0xffffe890
push ecx
push 0x561b21
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
push str..prev
push dword [ebp - 0x28]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x4671c8
push 1
push dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
push dword [eax + 0xc8]
call sub.USER32.dll_GetNextDlgTabItem
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x46779a
push dword [ebp - 0x1c]
call sub.USER32.dll_GetDlgCtrlID
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x46779a
mov edx, dword [ebp - 8]
add edx, 0xffffe890
push edx
push 0x561b2c
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
push str..visible
push dword [ebp - 0x28]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x467227
push 0x561b3a
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x4671f4
test byte [ebp - 0x20], 3
jne 0x46723b
push dword [ebp - 0x1c]
call sub.USER32.dll_IsWindowVisible
test eax, eax
je 0x467213
push edi
mov esi, 0x561b42
mov edi, ebx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push edi
mov esi, 0x561b49
mov edi, ebx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp 0x46779a
push str..enabled
push dword [ebp - 0x28]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x46726e
push dword [ebp - 0x1c]
call sub.USER32.dll_IsWindowEnabled
test eax, eax
je 0x46725a
push edi
mov esi, 0x561b5b
mov edi, ebx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push edi
mov esi, 0x561b62
mov edi, ebx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp 0x46779a
push str..edited
push dword [ebp - 0x28]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x4672cd
push esi
push edi
mov esi, 0x561b73
mov edi, ebx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
pop esi
push esi
call fcn.00478fe6
test eax, eax
je 0x46779a
push 0
push 0
push 0xb8
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
test eax, eax
je 0x46779a
push edi
mov esi, 0x561b7b
mov edi, ebx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp 0x46779a
push str..selstart
push dword [ebp - 0x28]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x467315
push esi
call fcn.00478fe6
test eax, eax
je 0x46779a
push 0
lea edx, [ebp - 4]
push edx
push 1
push dword [ebp - 0x1c]
call fcn.00478d41
push dword [ebp - 4]
push 0x561b8d
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
push str..selend
push dword [ebp - 0x28]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x46735d
push esi
call fcn.00478fe6
test eax, eax
je 0x46779a
lea ecx, [ebp - 4]
push ecx
push 0
push 1
push dword [ebp - 0x1c]
call fcn.00478d41
push dword [ebp - 4]
push 0x561b9a
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x46779a
push str..seltext
push dword [ebp - 0x28]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x46779a
push 0x561ba8
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x467452
test byte [ebp - 0x1f], 8
je 0x467428
push 0
push 0
push 0x190
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x46779a
cmp dword [ebp - 0x10], 0
jle 0x46779a
mov eax, dword [ebp - 0x10]
shl eax, 2
push eax
call fcn.00557db4
pop ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x4673e1
push 8
push esi
push edi
call fcn.0047a1dc
jmp 0x4677aa
push dword [ebp - 0x18]
push dword [ebp - 0x10]
push 0x191
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x467403
cmp dword [ebp - 0x10], 0
jg 0x467411
push dword [ebp - 0x18]
call fcn.00557ca0
pop ecx
jmp 0x46779a
mov edx, dword [ebp - 0x18]
mov ecx, dword [edx]
inc ecx
mov dword [ebp - 4], ecx
push dword [ebp - 0x18]
call fcn.00557ca0
pop ecx
jmp 0x46764b
push 0
push 0
push 0x188
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x46779a
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 4], eax
jmp 0x46764b
push 0x561bb1
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x46748c
push 0
push 0
push 0x147
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x46779a
xor edx, edx
mov dword [ebp - 4], edx
jmp 0x46764b
push esi
call fcn.00478fe6
test eax, eax
je 0x46779a
lea ecx, [ebp - 0x4c]
push ecx
lea eax, [ebp - 0x48]
push eax
push 1
push dword [ebp - 0x1c]
call fcn.00478d41
lea edx, [ebp - 0x3c]
push edx
push dword [ebp - 0x48]
push 1
push dword [ebp - 0x1c]
call fcn.00478e75
lea ecx, [ebp - 0x40]
push ecx
push dword [ebp - 0x4c]
push 1
push dword [ebp - 0x1c]
call fcn.00478e75
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x44], eax
mov byte [esi], 0
mov edx, dword [ebp - 0x44]
cmp edx, dword [ebp - 0x40]
jg 0x467621
mov word [ebx], 0x3b5
push ebx
push dword [ebp - 0x44]
push 0xc4
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
test eax, eax
jl 0x467503
mov byte [ebx + eax], 0
jmp 0x467506
mov byte [ebx], 0
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [ebp - 0x3c]
jne 0x4675a7
push 0
push dword [ebp - 0x44]
push 0xbb
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x467621
push ebx
call fcn.0054c2d0
pop ecx
cmp eax, dword [ebp - 0x38]
jl 0x46756e
mov edx, dword [ebp - 0x38]
add edx, ebx
push esi
push edi
mov edi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x40]
jne 0x467612
mov edx, dword [ebp - 0x4c]
sub edx, dword [ebp - 0x48]
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0
jge 0x46758e
xor ecx, ecx
mov dword [ebp - 0x38], ecx
push esi
call fcn.0054c2d0
pop ecx
cmp eax, dword [ebp - 0x38]
jl 0x467621
mov eax, dword [ebp - 0x38]
mov byte [esi + eax], 0
jmp 0x467621
mov edx, dword [ebp - 0x44]
cmp edx, dword [ebp - 0x40]
jne 0x4675f5
push 0
push dword [ebp - 0x44]
push 0xbb
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x4c]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], 0
jl 0x467621
cmp byte [esi], 0
je 0x4675e6
push 0x561bbb
push esi
call fcn.0054c1f4
add esp, 8
push dword [ebp - 0x38]
push ebx
push esi
call fcn.0054c32c
add esp, 0xc
jmp 0x467621
cmp byte [esi], 0
je 0x467608
push 0x561bbf
push esi
call fcn.0054c1f4
add esp, 8
push ebx
push esi
call fcn.0054c1f4
add esp, 8
inc dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x40]
jle 0x4674e3
push esi
push edi
mov edi, esi
mov esi, ebx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
jmp 0x46779a
push 0x561bc3
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x46767f
cmp dword [ebp - 4], 1
jl 0x46779a
push ebx
mov eax, dword [ebp - 4]
dec eax
push eax
push 0x189
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
jmp 0x46779a
push 0x561bcc
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x4676c4
cmp dword [ebp - 4], 1
jge 0x4676ac
push ebx
push 0x3b5
push 0xd
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
jmp 0x46779a
push ebx
mov edx, dword [ebp - 4]
dec edx
push edx
push 0x148
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
jmp 0x46779a
push esi
call fcn.00478fe6
test eax, eax
je 0x467708
cmp dword [ebp - 4], 1
jge 0x4676db
mov dword [ebp - 4], 1
mov word [ebx], 0x3b5
push ebx
mov ecx, dword [ebp - 4]
dec ecx
push ecx
push 0xc4
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
test eax, eax
jl 0x467700
mov byte [ebx + eax], 0
jmp 0x46779a
mov byte [ebx], 0
jmp 0x46779a
push 0x561bd6
push esi
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x467773
test byte [ebp - 0x20], 3
je 0x467773
mov byte [ebx], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x1004]
test eax, eax
je 0x46775c
mov edx, dword [eax + 0xc]
cmp edx, dword [ebp - 8]
jne 0x467752
lea ecx, [eax + 0x10]
push ecx
push dword [eax + 0x114]
push 0x561bde
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0x10
jmp 0x46775c
mov eax, dword [eax + 0x124]
test eax, eax
jne 0x467730
cmp byte [ebx], 0
jne 0x46779a
push ebx
push 0x3b5
push 0xd
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
jmp 0x46779a
push ebx
push 0x3b5
push 0xd
push dword [ebp - 0x1c]
call sub.USER32.dll_SendMessageA
jmp 0x46779a
push dword [edi + 0x40]
mov eax, dword [ebp + 0xc]
push dword [eax]
call fcn.004c6cb6
mov edx, dword [ebp + 0xc]
mov dword [edx], eax
dec dword [edi + 8]
cmp dword [edi + 8], 0
jg 0x467785
xor ecx, ecx
mov dword [edi + 8], ecx
mov eax, 2
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20