Function at 0x485ec0
Capabilities:
Check os version
Create thread
Enumerate gui resources
Get file system object information
Get graphical window text
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, 0x2708
call fcn.00492790
mov eax, dword [0x4dc6e0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebx + 8]
xorps xmm0, xmm0
push esi
push edi
mov dword [ebp - 0x259c], eax
xor ecx, ecx
xor eax, eax
mov byte [ebp - 0x2511], 0
push 0x1fe
mov dword [ebp - 0x2598], eax
mov dword [ebp - 0x2624], eax
mov word [ebp - 0x448], ax
lea eax, [ebp - 0x446]
push ecx
push eax
mov dword [ebp - 0x25bc], 0
movsd qword [ebp - 0x2610], xmm0
movsd qword [ebp - 0x2590], xmm0
movsd qword [ebp - 0x25b8], xmm0
mov dword [ebp - 0x25ac], ecx
movsd qword [ebp - 0x2668], xmm0
movlpd qword [ebp - 0x25a8], xmm0
movlpd qword [ebp - 0x2638], xmm0
movlpd qword [ebp - 0x2550], xmm0
movlpd qword [ebp - 0x2660], xmm0
movlpd qword [ebp - 0x2578], xmm0
call fcn.004906c0
xor ecx, ecx
mov byte [ebp - 0x2525], 0
add esp, 0xc
mov dword [ebp - 0x25b0], ecx
xorps xmm0, xmm0
mov byte [ebp - 0x251d], cl
mov dword [ebp - 0x2654], ecx
mov byte [ebp - 0x2569], cl
mov ecx, 0x4dfd10
movlpd qword [ebp - 0x2618], xmm0
movlpd qword [ebp - 0x2558], xmm0
call fcn.004588d0
mov ecx, 0x4f68c8
call fcn.0047a950
mov ecx, 0x4f6930
call fcn.0047a950
mov ecx, 0x4f6998
call fcn.0047a950
movzx eax, byte [0x4e0632]
mov edx, 1
cmp dword [0x4f6a70], eax
movzx ecx, byte [ebp - 0x2511]
cmovne ecx, edx
mov dword [0x4f6a70], eax
xor eax, eax
mov dword [ebp - 0x2518], ecx
push 0x50
push eax
mov word [ebp - 0x1448], ax
lea eax, [ebp - 0x1c98]
push eax
call fcn.004906c0
mov eax, dword [0x4ea1a4]
mov ecx, dword [0x4ea19c]
mov edx, dword [0x4ea1a0]
mov esi, dword [0x4ea1c8]
mov edi, dword [0x4ea1cc]
mov dword [0x4ea19c], eax
mov eax, dword [0x4ea1b4]
mov dword [0x4ea1a0], eax
mov eax, dword [0x4f6868]
mov dword [0x4ea1a8], eax
mov eax, dword [0x4f686c]
mov dword [0x4ea1ac], eax
lea eax, [ebp - 0x2558]
push eax
push 0x4ea1c8
push dword [0x4ea1c4]
mov dword [0x4ea1a4], ecx
push dword [0x4ea1bc]
mov dword [0x4ea1b4], edx
push dword [0x4ea1b8]
push 0x4ea1b4
push 0x4ea1a4
call fcn.00469000
mov ecx, edx
mov dword [0x4f6868], eax
mov edx, dword [0x4ea1c8]
add esp, 0x28
sub eax, dword [0x4ea1a8]
mov dword [0x4f686c], ecx
sbb ecx, dword [0x4ea1ac]
sub edx, esi
mov esi, dword [0x4ea1cc]
sbb esi, edi
mov dword [ebp - 0x2524], eax
add edx, dword [ebp - 0x2558]
mov dword [ebp - 0x2594], edx
adc esi, dword [ebp - 0x2554]
mov edx, dword [0x4e523c]
mov dword [ebp - 0x251c], ecx
mov dword [ebp - 0x25a0], esi
cmp edx, 1
jbe 0x486304
xor esi, esi
test edx, edx
jle 0x486304
xor edi, edi
mov eax, dword [0x4ea1b8]
mov edx, dword [edi + eax + 8]
mov ecx, dword [edi + eax]
mov dword [ebp - 0x2530], edx
mov edx, dword [edi + eax + 0xc]
mov dword [ebp - 0x2548], edx
mov edx, dword [edi + eax + 0x10]
sub edx, ecx
mov dword [ebp - 0x253c], edx
mov edx, dword [edi + eax + 0x14]
mov dword [ebp - 0x2544], edx
mov edx, dword [edi + eax + 4]
sbb dword [ebp - 0x2544], edx
mov eax, dword [ebp - 0x2530]
add dword [ebp - 0x253c], eax
mov eax, dword [ebp - 0x2548]
adc dword [ebp - 0x2544], eax
sub dword [ebp - 0x2530], ecx
mov eax, dword [ebp - 0x2524]
sbb dword [ebp - 0x2548], edx
or eax, dword [ebp - 0x251c]
je 0x4861d7
mov eax, dword [0x4f6848]
mov ecx, dword [ebp - 0x253c]
mov edx, dword [ebp - 0x2544]
mov eax, dword [eax + esi*4]
sub ecx, dword [eax + 0x888]
sbb edx, dword [eax + 0x88c]
call fcn.004939cf
mov edx, dword [ebp - 0x251c]
mov ecx, dword [ebp - 0x2524]
cvtsd2ss xmm0, xmm0
cvtss2sd xmm0, xmm0
mulsd xmm0, qword [0x4ba8c0]
movsd qword [ebp - 0x2558], xmm0
call fcn.004939cf
movsd xmm1, qword [ebp - 0x2558]
xorps xmm2, xmm2
cvtsd2ss xmm0, xmm0
cvtss2sd xmm0, xmm0
divsd xmm1, xmm0
jmp 0x4861de
xorps xmm2, xmm2
movapd xmm1, xmm2
mov eax, dword [0x4f6848]
xorps xmm0, xmm0
mov ecx, dword [ebp - 0x253c]
cvtsd2ss xmm0, xmm1
mov eax, dword [eax + esi*4]
mov dword [eax + 0x888], ecx
mov ecx, dword [ebp - 0x2544]
cvtps2pd xmm0, xmm0
mov dword [eax + 0x88c], ecx
mov eax, dword [ebp - 0x2524]
or eax, dword [ebp - 0x251c]
movsd qword [ebp - 0x2558], xmm0
je 0x486282
mov eax, dword [0x4f6848]
mov ecx, dword [ebp - 0x2530]
mov edx, dword [ebp - 0x2548]
mov eax, dword [eax + esi*4]
sub ecx, dword [eax + 0x890]
sbb edx, dword [eax + 0x894]
call fcn.004939cf
mov edx, dword [ebp - 0x251c]
mov ecx, dword [ebp - 0x2524]
cvtsd2ss xmm0, xmm0
cvtss2sd xmm0, xmm0
mulsd xmm0, qword [0x4ba8c0]
movsd qword [ebp - 0x2648], xmm0
call fcn.004939cf
movsd xmm1, qword [ebp - 0x2648]
cvtsd2ss xmm0, xmm0
cvtss2sd xmm0, xmm0
divsd xmm1, xmm0
jmp 0x486286
movapd xmm1, xmm2
mov eax, dword [0x4f6848]
xorps xmm0, xmm0
mov ecx, dword [ebp - 0x2530]
cvtsd2ss xmm0, xmm1
push 0
mov eax, dword [eax + esi*4]
sub esp, 0x10
cvtps2pd xmm0, xmm0
mov dword [eax + 0x890], ecx
mov ecx, dword [ebp - 0x2548]
mov dword [eax + 0x894], ecx
mov eax, dword [0x4f6848]
movsd qword [esp + 8], xmm0
movsd xmm0, qword [ebp - 0x2558]
movsd qword [esp], xmm0
push dword [0x4f686c]
push dword [0x4f6868]
push dword [eax + esi*4]
call fcn.0043cb30
mov edx, dword [0x4e523c]
inc esi
add esp, 0x20
add edi, 0x30
cmp esi, edx
jl 0x486102
mov eax, dword [ebp - 0x2524]
mov ecx, dword [ebp - 0x251c]
jmp 0x486314
movsd xmm0, qword [ebp - 0x2688]
movsd qword [ebp - 0x2558], xmm0
push ecx
push eax
push 0
push edx
call fcn.00492750
mov esi, dword [0x4e028c]
xorps xmm0, xmm0
mov dword [ebp - 0x2538], eax
mov eax, dword [ebp - 0x2634]
mov dword [ebp - 0x2544], eax
mov eax, dword [ebp - 0x2638]
mov dword [ebp - 0x2534], edx
mov dword [ebp - 0x2580], esi
movss dword [ebp - 0x2600], xmm0
mov dword [ebp - 0x2548], eax
test esi, esi
je 0x486e1a
cmp dword [esi + 0x4c], 0xffffffff
jne 0x48636d
cmp dword [esi + 0x44], 0
jne 0x486378
xorps xmm0, xmm0
movsd qword [esi + 0x520], xmm0
cmp dword [esi + 0x44], 0xfffffff6
mov edi, dword [esi + 0x5b0]
mov dword [ebp - 0x2604], edi
jne 0x486d40
lea eax, [ebp - 0x2680]
mov byte [ebp - 0x2525], 1
push eax
push 0xffffffffffffffff
push 0x1053
push dword [0x4e5184]
mov dword [ebp - 0x2680], 1
mov dword [ebp - 0x2678], esi
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x25f8], eax
cmp eax, 0xffffffff
jne 0x4863ed
mov eax, dword [esi + 0x28]
test al, 2
je 0x4863ed
test al, 1
je 0x4863de
cmp byte [0x4e45c5], 0
jne 0x4863ed
push esi
push dword [0x4e5184]
call fcn.004439e0
add esp, 8
mov ecx, dword [0x4e523c]
xorps xmm0, xmm0
xor edx, edx
mov dword [ebp - 0x25dc], esi
movlpd qword [ebp - 0x2638], xmm0
movlpd qword [ebp - 0x2648], xmm0
movlpd qword [ebp - 0x25c8], xmm0
movlpd qword [ebp - 0x2558], xmm0
test ecx, ecx
jle 0x486798
cmp ecx, 4
jb 0x486633
mov eax, ecx
and eax, 0x80000003
jns 0x48643d
dec eax
or eax, 0xfffffffc
inc eax
mov edi, dword [0x4ea1c4]
sub ecx, eax
mov eax, dword [0x4ea1b8]
xorps xmm7, xmm7
movdqa xmm0, xmm7
mov dword [ebp - 0x252c], ecx
mov ecx, dword [0x4ea1bc]
add edi, 0x10
add eax, 0x18
movdqa xmmword [ebp - 0x2650], xmm0
movdqa xmm6, xmm7
movdqa xmmword [ebp - 0x2640], xmm0
movdqa xmm4, xmm0
movdqa xmmword [ebp - 0x2560], xmm0
movdqa xmm3, xmm0
movdqa xmm5, xmm0
add ecx, 0x1c
mov edi, edi
movd xmm0, dword [eax + 0x40]
lea edi, [edi + 0x20]
movd xmm2, dword [eax + 0x10]
lea ecx, [ecx + 0x60]
movd xmm1, dword [ecx - 0x78]
lea eax, [eax + 0xc0]
punpckldq xmm2, xmm0
add edx, 4
movd xmm0, dword [ecx - 0x60]
punpckldq xmm1, xmm0
xorps xmm0, xmm0
paddd xmm2, xmm1
movq xmm1, qword [eax - 0xb8]
movhpd xmm1, qword [eax - 0x88]
punpckldq xmm2, xmm0
movq xmm0, qword [eax - 0xc0]
movhpd xmm0, qword [eax - 0x90]
paddq xmm1, xmm0
paddq xmm2, xmmword [ebp - 0x2560]
movdqa xmm0, xmm1
paddq xmm1, xmmword [ebp - 0x2640]
paddq xmm0, xmmword [ebp - 0x2650]
movdqa xmmword [ebp - 0x2650], xmm0
movq xmm0, qword [edi - 0x30]
movhpd xmm0, qword [edi - 0x28]
paddq xmm7, xmm0
movd xmm0, dword [eax - 0x20]
movdqa xmmword [ebp - 0x2560], xmm2
movd xmm2, dword [eax - 0x50]
punpckldq xmm2, xmm0
movd xmm0, dword [ecx - 0x30]
movdqa xmmword [ebp - 0x2640], xmm1
movd xmm1, dword [ecx - 0x48]
punpckldq xmm1, xmm0
xorps xmm0, xmm0
paddd xmm2, xmm1
movq xmm1, qword [eax - 0x58]
movhpd xmm1, qword [eax - 0x28]
punpckldq xmm2, xmm0
paddq xmm5, xmm2
movq xmm0, qword [eax - 0x60]
movhpd xmm0, qword [eax - 0x30]
paddq xmm1, xmm0
movq xmm0, qword [edi - 0x20]
paddq xmm4, xmm1
movhpd xmm0, qword [edi - 0x18]
paddq xmm3, xmm1
paddq xmm6, xmm0
cmp edx, dword [ebp - 0x252c]
jl 0x486490
paddq xmm5, xmmword [ebp - 0x2560]
paddq xmm6, xmm7
paddq xmm3, xmmword [ebp - 0x2640]
movdqa xmm0, xmm5
paddq xmm4, xmmword [ebp - 0x2650]
psrldq xmm0, 8
paddq xmm5, xmm0
movdqa xmm0, xmm3
psrldq xmm0, 8
paddq xmm3, xmm0
movd dword [ebp - 0x2524], xmm5
movdqa xmm0, xmm4
movd dword [ebp - 0x2568], xmm3
psrldq xmm0, 8
paddq xmm4, xmm0
psrldq xmm5, 4
movdqa xmm0, xmm6
movd dword [ebp - 0x2530], xmm4
psrldq xmm0, 8
paddq xmm6, xmm0
psrldq xmm3, 4
movd dword [ebp - 0x251c], xmm6
psrldq xmm4, 4
psrldq xmm6, 4
movd edi, xmm5
movd dword [ebp - 0x2540], xmm3
movd dword [ebp - 0x2570], xmm4
movd dword [ebp - 0x2564], xmm6
jmp 0x48668d
mov eax, dword [ebp - 0x2554]
mov ecx, dword [ebp - 0x25c8]
mov edi, dword [ebp - 0x25c4]
mov dword [ebp - 0x2564], eax
mov eax, dword [ebp - 0x2558]
mov dword [ebp - 0x251c], eax
mov eax, dword [ebp - 0x2634]
mov dword [ebp - 0x2570], eax
mov eax, dword [ebp - 0x2638]
mov dword [ebp - 0x2530], eax
mov eax, dword [ebp - 0x2644]
mov dword [ebp - 0x2540], eax
mov eax, dword [ebp - 0x2648]
mov dword [ebp - 0x2568], eax
mov dword [ebp - 0x2524], ecx
mov dword [ebp - 0x253c], edi
cmp edx, dword [0x4e523c]
jge 0x486751
mov edi, dword [0x4ea1b8]
lea eax, [edx + edx*2]
mov esi, dword [ebp - 0x253c]
add edi, 0x20
shl eax, 4
add edi, eax
lea eax, [edx + edx*2]
lea eax, [eax*8 + 4]
add eax, dword [0x4ea1bc]
mov dword [ebp - 0x257c], eax
lea esp, [esp]
mov ecx, dword [ebp - 0x257c]
mov eax, dword [edi + 8]
add eax, dword [ecx]
add dword [ebp - 0x2524], eax
mov ecx, dword [edi - 8]
mov eax, dword [edi - 4]
adc esi, 0
add ecx, dword [edi]
adc eax, dword [edi + 4]
lea edi, [edi + 0x30]
add dword [ebp - 0x2530], ecx
adc dword [ebp - 0x2570], eax
add dword [ebp - 0x2568], ecx
mov ecx, dword [0x4ea1c4]
adc dword [ebp - 0x2540], eax
mov eax, dword [ebp - 0x251c]
add eax, dword [ecx + edx*8]
mov dword [ebp - 0x251c], eax
mov eax, dword [ebp - 0x2564]
adc eax, dword [ecx + edx*8 + 4]
inc edx
add dword [ebp - 0x257c], 0x18
mov dword [ebp - 0x2564], eax
cmp edx, dword [0x4e523c]
jl 0x4866d0
mov dword [ebp - 0x253c], esi
mov esi, dword [ebp - 0x2580]
mov edi, dword [ebp - 0x253c]
mov eax, dword [ebp - 0x2524]
sub eax, dword [esi + 0x540]
mov ecx, edi
sbb ecx, dword [esi + 0x544]
js 0x48676d
jg 0x486784
test eax, eax
jne 0x486784
xorps xmm0, xmm0
movlpd qword [ebp - 0x2558], xmm0
mov ecx, dword [ebp - 0x2554]
mov eax, dword [ebp - 0x2558]
cmp eax, dword [esi + 0x538]
jne 0x4867f7
cmp ecx, dword [esi + 0x53c]
jne 0x4867f7
xor dl, dl
jmp 0x4867f9
mov eax, dword [ebp - 0x2554]
mov edi, dword [ebp - 0x25c4]
mov dword [ebp - 0x2564], eax
mov eax, dword [ebp - 0x2558]
mov dword [ebp - 0x251c], eax
mov eax, dword [ebp - 0x2634]
mov dword [ebp - 0x2570], eax
mov eax, dword [ebp - 0x2638]
mov dword [ebp - 0x2530], eax
mov eax, dword [ebp - 0x2644]
mov dword [ebp - 0x2540], eax
mov eax, dword [ebp - 0x2648]
mov dword [ebp - 0x2568], eax
mov eax, dword [ebp - 0x25c8]
mov dword [ebp - 0x2524], eax
jmp 0x486757
mov dl, 1
mov dword [esi + 0x538], eax
mov dword [esi + 0x53c], ecx
push dword [ebp - 0x25f8]
movzx eax, dl
push 0x444
push dword [0x4e5184]
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
add esp, 0x10
mov eax, dword [ebp - 0x2524]
cmp eax, dword [esi + 0x540]
jne 0x486842
cmp edi, dword [esi + 0x544]
jne 0x486842
xor cl, cl
jmp 0x486844
mov cl, 1
mov dword [esi + 0x540], eax
mov dword [esi + 0x544], edi
push dword [ebp - 0x25f8]
movzx eax, cl
push 0x443
push dword [0x4e5184]
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
add esp, 0x10
mov ecx, dword [ebp - 0x251c]
sub ecx, dword [esi + 0x550]
mov edi, dword [ebp - 0x2564]
mov eax, edi
sbb eax, dword [esi + 0x554]
cmp ecx, dword [esi + 0x548]
jne 0x4868a1
cmp eax, dword [esi + 0x54c]
jne 0x4868a1
xor dl, dl
jmp 0x4868a3
mov dl, 1
mov dword [esi + 0x54c], eax
mov dword [esi + 0x548], ecx
push dword [ebp - 0x25f8]
movzx eax, dl
push 0x4b0
push dword [0x4e5184]
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
add esp, 0x10
mov eax, dword [ebp - 0x251c]
cmp eax, dword [esi + 0x550]
jne 0x4868ec
cmp edi, dword [esi + 0x554]
jne 0x4868ec
xor cl, cl
jmp 0x4868ee
mov cl, 1
mov dword [esi + 0x550], eax
mov dword [esi + 0x554], edi
push dword [ebp - 0x25f8]
movzx eax, cl
push 0x4ab
push dword [0x4e5184]
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
add esp, 0x10
mov ecx, dword [ebp - 0x2530]
sub ecx, dword [esi + 0x528]
mov edi, dword [ebp - 0x2570]
mov edx, edi
sbb edx, dword [esi + 0x52c]
cmp dword [0x4ea130], 0
je 0x48699a
mov eax, dword [ebp - 0x2594]
or eax, dword [ebp - 0x25a0]
je 0x4869e4
mov edx, dword [esi + 0x54c]
mov ecx, dword [esi + 0x548]
call fcn.004939cf
mov edx, dword [ebp - 0x25a0]
mov ecx, dword [ebp - 0x2594]
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [0x4bac0c]
movss dword [ebp - 0x252c], xmm0
call fcn.004939cf
movss xmm1, dword [ebp - 0x252c]
cvtsd2ss xmm0, xmm0
divss xmm1, xmm0
jmp 0x4869e7
mov eax, dword [ebp - 0x2538]
or eax, dword [ebp - 0x2534]
je 0x4869e4
call fcn.004939cf
mov edx, dword [ebp - 0x2534]
mov ecx, dword [ebp - 0x2538]
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [0x4bac0c]
movss dword [ebp - 0x252c], xmm0
call fcn.004939cf
movss xmm1, dword [ebp - 0x252c]
cvtsd2ss xmm0, xmm0
divss xmm1, xmm0
jmp 0x4869e7
xorps xmm1, xmm1
cvtps2pd xmm0, xmm1
movsd xmm1, qword [0x4ba8c0]
comisd xmm0, xmm1
movsd qword [ebp - 0x2558], xmm0
jbe 0x486a08
movsd qword [ebp - 0x2558], xmm1
mov eax, dword [ebp - 0x2568]
mov ecx, eax
sub ecx, dword [esi + 0x530]
mov dword [ebp - 0x252c], ecx
mov ecx, dword [ebp - 0x2540]
mov edx, ecx
sbb edx, dword [esi + 0x534]
add dword [ebp - 0x2548], eax
mov dword [esi + 0x530], eax
mov eax, dword [ebp - 0x2538]
adc dword [ebp - 0x2544], ecx
or eax, dword [ebp - 0x2534]
mov dword [esi + 0x534], ecx
je 0x486a92
mov ecx, dword [ebp - 0x252c]
call fcn.004939cf
mov edx, dword [ebp - 0x2534]
mov ecx, dword [ebp - 0x2538]
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [0x4bac0c]
movss dword [ebp - 0x252c], xmm0
call fcn.004939cf
movss xmm1, dword [ebp - 0x252c]
cvtsd2ss xmm0, xmm0
divss xmm1, xmm0
jmp 0x486a95
xorps xmm1, xmm1
push 0
cvtps2pd xmm0, xmm1
sub esp, 0x10
movsd qword [esp + 8], xmm0
movsd xmm0, qword [ebp - 0x2558]
movsd qword [esp], xmm0
push dword [0x4f686c]
push dword [0x4f6868]
push dword [esi + 0x55c]
call fcn.0043cb30
add esp, 0x20
xorps xmm0, xmm0
push 0
sub esp, 0x10
movups xmmword [esp], xmm0
push dword [0x4f686c]
push dword [0x4f6868]
push dword [esi + 0x38c]
call fcn.0043cb30
mov eax, dword [esi + 0x428]
add esp, 0x20
test eax, eax
je 0x486b1b
push 0
sub esp, 0x10
xorps xmm0, xmm0
movups xmmword [esp], xmm0
push dword [0x4f686c]
push dword [0x4f6868]
push eax
call fcn.0043cb30
add esp, 0x20
test byte [esi + 0x28], 0x40
movsd xmm1, qword [ebp - 0x2558]
je 0x486b3d
movapd xmm0, xmm1
addsd xmm0, qword [ebp - 0x2590]
movsd qword [ebp - 0x2590], xmm0
cmp dword [esi + 0x44], 0
je 0x486b57
movapd xmm0, xmm1
addsd xmm0, qword [ebp - 0x2610]
movsd qword [ebp - 0x2610], xmm0
comisd xmm1, xmmword [ebp - 0x25b8]
jbe 0x486b71
mov ecx, esi
movsd qword [ebp - 0x25b8], xmm1
mov dword [ebp - 0x25ac], ecx
mov eax, dword [ebp - 0x2530]
cmp eax, dword [esi + 0x528]
jne 0x486b8b
cmp edi, dword [esi + 0x52c]
jne 0x486b8b
xor cl, cl
jmp 0x486b8d
mov cl, 1
mov dword [esi + 0x528], eax
mov dword [esi + 0x52c], edi
push dword [ebp - 0x25f8]
movzx eax, cl
push 0x43f
push dword [0x4e5184]
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
mov eax, dword [ebp - 0x25dc]
mov dword [eax + 0x10], 0
push dword [ebp - 0x25f8]
push 0x4a7
push dword [0x4e5184]
push 1
call fcn.0044bc90
push dword [ebp - 0x25f8]
mov ecx, dword [ebp - 0x2518]
test al, al
push 0x4a9
push dword [0x4e5184]
movzx ecx, cl
mov edi, 1
cmovne ecx, edi
push edi
mov dword [ebp - 0x252c], ecx
call fcn.0044bc90
push dword [ebp - 0x25f8]
mov ecx, dword [ebp - 0x252c]
test al, al
push 0x532
push dword [0x4e5184]
movzx ecx, cl
cmovne ecx, edi
push edi
mov dword [ebp - 0x252c], ecx
call fcn.0044bc90
mov ecx, dword [ebp - 0x252c]
add esp, 0x40
movsd xmm0, qword [ebp - 0x2558]
test al, al
movzx ecx, cl
cmovne ecx, edi
ucomisd xmm0, qword [esi + 0x510]
mov byte [ebp - 0x2518], cl
lahf
test ah, 0x44
jnp 0x486c6a
mov al, 1
jmp 0x486c6c
xor al, al
movsd qword [esi + 0x510], xmm0
push dword [ebp - 0x25f8]
movzx eax, al
push 0x41f
push dword [0x4e5184]
push eax
call fcn.0044bc90
movsd xmm0, qword [ebp - 0x2558]
addsd xmm0, qword [esi + 0x520]
movsd qword [esi + 0x520], xmm0
push dword [ebp - 0x25f8]
push 0x665
push dword [0x4e5184]
push 1
call fcn.0044bc90
or byte [ebp - 0x2518], al
add esp, 0x20
lea eax, [esi + 0x54]
mov dword [ebp - 0x252c], eax
mov eax, dword [esi + 0x54]
test eax, eax
je 0x486d21
mov esi, dword [ebp - 0x252c]
mov edi, esi
nop
movsd xmm0, qword [ebp - 0x2558]
movsd qword [eax + 0x520], xmm0
mov eax, dword [esi]
push dword [eax + 0x2c]
push 0x665
push dword [0x4e5184]
push 1
call fcn.0044bc90
mov edi, dword [edi]
add esp, 0x10
or byte [ebp - 0x2518], al
add edi, 0x54
mov eax, dword [edi]
test eax, eax
jne 0x486ce0
mov esi, dword [ebp - 0x2580]
mov eax, dword [ebp - 0x2598]
mov edi, dword [ebp - 0x2604]
dec eax
dec dword [ebp - 0x25f8]
mov byte [ebp - 0x2511], 1
jmp 0x486df1
mov eax, dword [esi + 0x28]
test al, 2
je 0x486d54
test al, 1
je 0x486d9c
cmp byte [0x4e45c5], 0
je 0x486d9c
cmp dword [esi + 0x2c], 0xffffffff
je 0x486d9c
push esi
push dword [0x4e5184]
call fcn.00444030
lea eax, [ebp - 0x2511]
mov dword [ebp - 0x25dc], esi
push eax
push esi
lea eax, [ebp - 0x25fc]
mov dword [ebp - 0x25f8], 0xffffffff
push eax
push dword [ebp - 0x259c]
call fcn.00480ae0
add esp, 0x18
mov byte [ebp - 0x2518], 1
jmp 0x486de2
lea eax, [ebp - 0x2511]
mov dword [ebp - 0x25dc], esi
push eax
push esi
lea eax, [ebp - 0x25fc]
mov dword [ebp - 0x25f8], 0xffffffff
push eax
push dword [ebp - 0x259c]
call fcn.00480ae0
mov ecx, dword [ebp - 0x2518]
add esp, 0x10
test al, al
movzx ecx, cl
mov eax, 1
cmovne ecx, eax
mov byte [ebp - 0x2518], cl
cmp byte [ebp - 0x2511], 0
je 0x486e0a
mov eax, dword [ebp - 0x2598]
mov edx, dword [ebp - 0x25bc]
inc eax
mov dword [ebp - 0x2598], eax
mov dword [esi + 0x5ac], edx
mov dword [ebp - 0x25bc], esi
mov dword [ebp - 0x2580], edi
mov esi, edi
test edi, edi
jne 0x486361
mov eax, dword [ebp - 0x25a8]
mov edi, dword [ebp - 0x25a4]
mov esi, dword [0x4ea1a4]
mov dword [ebp - 0x2658], eax
mov eax, dword [ebp - 0x254c]
mov dword [ebp - 0x252c], eax
mov eax, dword [ebp - 0x2550]
mov dword [ebp - 0x2604], eax
mov eax, dword [ebp - 0x265c]
mov dword [ebp - 0x2568], eax
mov eax, dword [ebp - 0x2660]
mov dword [ebp - 0x2570], eax
mov eax, dword [ebp - 0x2574]
mov dword [ebp - 0x2564], eax
mov eax, dword [ebp - 0x2578]
mov dword [ebp - 0x2530], eax
mov eax, dword [ebp - 0x2614]
mov dword [ebp - 0x253c], eax
mov eax, dword [ebp - 0x2618]
mov dword [ebp - 0x2628], edi
mov dword [ebp - 0x257c], eax
inc dword [ebp - 0x1c68]
mov eax, dword [esi + 4]
add dword [ebp - 0x1c60], eax
mov eax, dword [esi + 0x4c]
add dword [ebp - 0x1c58], eax
mov eax, dword [esi + 0x44]
mov dword [ebp - 0x2524], esi
mov dword [ebp - 0x2574], eax
test eax, eax
je 0x486eff
mov eax, dword [ebp - 0x2524]
mov edx, dword [esi + 0x30]
mov esi, dword [esi + 0x34]
mov ecx, dword [eax + 0x28]
mov eax, dword [eax + 0x2c]
add ecx, edx
adc eax, esi
add dword [ebp - 0x2658], ecx
adc edi, eax
add dword [ebp - 0x2548], edx
mov eax, dword [ebp - 0x2574]
adc dword [ebp - 0x2544], esi
mov esi, dword [ebp - 0x2524]
mov dword [ebp - 0x2628], edi
mov edi, dword [0x4e028c]
mov dword [ebp - 0x2620], edi
test edi, edi
je 0x486f3e
mov ecx, dword [esi + 0x20]
mov edx, dword [esi + 0x24]
cmp dword [edi + 0x270], ecx
jne 0x486f2e
cmp dword [edi + 0x274], edx
jne 0x486f2e
cmp dword [edi + 0x44], eax
je 0x486ff2
mov edi, dword [edi + 0x5b0]
mov dword [ebp - 0x2620], edi
test edi, edi
jne 0x486f15
push eax
push 0
push 0x410
mov dword [ebp - 0x25a4], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x251c], eax
mov dword [ebp - 0x261c], eax
test eax, eax
jne 0x486fa5
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x486f99
push 0
lea eax, [ebp - 0x2634]
push eax
push 4
lea eax, [ebp - 0x261c]
push eax
push 4
lea eax, [ebp - 0x25a4]
push eax
push 0x8335003c
push dword [0x4db648]
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov eax, dword [ebp - 0x261c]
mov dword [ebp - 0x251c], eax
push 0x5c0
lea eax, [ebp - 0x2258]
push 0
push eax
call fcn.004906c0
mov eax, dword [esi + 0x44]
add esp, 0xc
mov dword [ebp - 0x2214], eax
cmp word [esi + 0x38], 0
je 0x488060
movzx eax, word [esi + 0x38]
shr eax, 1
push eax
push dword [esi + 0x3c]
lea eax, [ebp - 0x848]
push 0x100
push eax
call fcn.0049124f
add esp, 0x10
jmp 0x488079
push eax
push 0
push 0x2000000
mov dword [ebp - 0x265c], eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x251c], eax
mov dword [ebp - 0x2580], eax
test eax, eax
jne 0x487059
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x48704d
push 0
lea eax, [ebp - 0x2644]
push eax
push 4
lea eax, [ebp - 0x2580]
push eax
push 4
lea eax, [ebp - 0x265c]
push eax
push 0x8335003c
push dword [0x4db648]
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov eax, dword [ebp - 0x2580]
mov dword [ebp - 0x251c], eax
lea eax, [ebp - 0x2680]
mov dword [ebp - 0x2680], 1
push eax
push 0xffffffffffffffff
push 0x1053
push dword [ebp - 0x259c]
mov dword [ebp - 0x2678], edi
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x25f8], eax
mov ecx, dword [edi + 0x28]
test cl, 2
je 0x4870b5
test cl, 1
je 0x48709f
cmp byte [0x4e45c5], 0
jne 0x4870b5
cmp eax, 0xffffffff
jne 0x4870b5
push edi
push dword [0x4e5184]
call fcn.004439e0
add esp, 8
jmp 0x4870b8
mov dword [edi + 0x2c], eax
push dword [ebp - 0x25f8]
push edi
push dword [0x4f686c]
push dword [0x4f6868]
push dword [ebp - 0x2534]
push dword [ebp - 0x2538]
push dword [ebp - 0x251c]
push esi
call fcn.004790b0
or byte [ebp - 0x2518], al
add esp, 0x20
mov ecx, dword [esi + 0x34]
mov eax, ecx
mov edx, dword [esi + 0x30]
add edx, dword [esi + 0x28]
mov dword [ebp - 0x2614], ecx
mov ecx, edx
adc eax, dword [esi + 0x2c]
sub ecx, dword [edi + 0x528]
mov dword [ebp - 0x25a4], edx
mov edx, eax
sbb edx, dword [edi + 0x52c]
cmp dword [0x4ea130], 0
mov dword [ebp - 0x2574], eax
je 0x48717f
mov eax, dword [ebp - 0x2594]
or eax, dword [ebp - 0x25a0]
je 0x4871df
mov edx, dword [edi + 0x54c]
mov ecx, dword [edi + 0x548]
call fcn.004939cf
mov edx, dword [ebp - 0x25a0]
mov ecx, dword [ebp - 0x2594]
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [0x4bac0c]
movss dword [ebp - 0x254c], xmm0
call fcn.004939cf
movss xmm1, dword [ebp - 0x254c]
cvtsd2ss xmm0, xmm0
divss xmm1, xmm0
jmp 0x4871e2
cmp dword [edi + 0x44], 0
jne 0x487195
movsd xmm0, qword [ebp - 0x2558]
mov dword [ebp - 0x25b0], edi
jmp 0x4871ed
mov eax, dword [ebp - 0x2538]
or eax, dword [ebp - 0x2534]
je 0x4871df
call fcn.004939cf
mov edx, dword [ebp - 0x2534]
mov ecx, dword [ebp - 0x2538]
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [0x4bac0c]
movss dword [ebp - 0x254c], xmm0
call fcn.004939cf
movss xmm1, dword [ebp - 0x254c]
cvtsd2ss xmm0, xmm0
divss xmm1, xmm0
jmp 0x4871e2
xorps xmm1, xmm1
cvtps2pd xmm0, xmm1
movsd qword [ebp - 0x2558], xmm0
movsd xmm1, qword [0x4ba8c0]
comisd xmm0, xmm1
jbe 0x487203
movsd qword [ebp - 0x2558], xmm1
mov eax, dword [ebp - 0x2538]
or eax, dword [ebp - 0x2534]
je 0x487262
mov ecx, dword [esi + 0x30]
sub ecx, dword [edi + 0x530]
mov edx, dword [ebp - 0x2614]
sbb edx, dword [edi + 0x534]
call fcn.004939cf
mov edx, dword [ebp - 0x2534]
mov ecx, dword [ebp - 0x2538]
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [0x4bac0c]
movss dword [ebp - 0x254c], xmm0
call fcn.004939cf
movss xmm1, dword [ebp - 0x254c]
cvtsd2ss xmm0, xmm0
divss xmm1, xmm0
jmp 0x487265
xorps xmm1, xmm1
mov eax, dword [esi + 0x30]
movsd xmm0, qword [edi + 0x568]
comisd xmm0, xmmword [ebp - 0x2668]
mov dword [edi + 0x530], eax
mov eax, dword [ebp - 0x2614]
mov dword [edi + 0x534], eax
cvtps2pd xmm2, xmm1
jbe 0x4872a4
cvtpd2ps xmm0, xmm0
mov dword [ebp - 0x2624], edi
cvtps2pd xmm0, xmm0
movsd qword [ebp - 0x2668], xmm0
test byte [edi + 0x28], 0x40
movsd xmm1, qword [ebp - 0x2558]
je 0x4872c5
movaps xmm0, xmm1
addsd xmm0, qword [ebp - 0x2590]
movsd qword [ebp - 0x2590], xmm0
push 0
sub esp, 0x10
unpcklpd xmm1, xmm1
cmp dword [edi + 0x44], 0
je 0x48733d
mov eax, dword [esi + 0x28]
or eax, dword [esi + 0x2c]
jne 0x4872e2
movups xmmword [esp], xmm1
jmp 0x4872ed
movsd qword [esp + 8], xmm2
movsd qword [esp], xmm1
push dword [0x4f686c]
push dword [0x4f6868]
push dword [edi + 0x55c]
call fcn.0043cb30
movsd xmm1, qword [ebp - 0x2558]
add esp, 0x20
comisd xmm1, xmmword [ebp - 0x25b8]
movapd xmm0, xmm1
addsd xmm0, qword [ebp - 0x2610]
movsd qword [ebp - 0x2610], xmm0
jbe 0x48736d
movsd qword [ebp - 0x25b8], xmm1
mov dword [ebp - 0x25ac], edi
jmp 0x48736d
movsd qword [esp + 8], xmm1
xorps xmm0, xmm0
movsd qword [esp], xmm0
push dword [0x4f686c]
push dword [0x4f6868]
push dword [edi + 0x55c]
call fcn.0043cb30
movsd xmm1, qword [ebp - 0x2558]
add esp, 0x20
ucomisd xmm1, qword [edi + 0x510]
lahf
test ah, 0x44
jnp 0x48737f
mov al, 1
jmp 0x487381
xor al, al
movsd qword [edi + 0x510], xmm1
push dword [ebp - 0x25f8]
movzx eax, al
push 0x41f
push dword [0x4e5184]
push eax
call fcn.0044bc90
movsd xmm0, qword [edi + 0x520]
add esp, 0x10
addsd xmm0, qword [ebp - 0x2558]
or byte [ebp - 0x2518], al
mov byte [ebp - 0x2511], 1
ucomisd xmm0, qword [edi + 0x520]
lahf
test ah, 0x44
jp 0x4873d8
mov byte [ebp - 0x2511], 0
movsd qword [edi + 0x520], xmm0
push dword [ebp - 0x25f8]
push 0x665
push dword [0x4e5184]
push 1
call fcn.0044bc90
or byte [ebp - 0x2518], al
add esp, 0x10
cmp dword [edi + 0x54], 0
lea eax, [edi + 0x54]
mov dword [ebp - 0x254c], eax
je 0x487463
mov esi, eax
mov eax, dword [esi]
movsd xmm0, qword [eax + 0x520]
cvtpd2ps xmm0, xmm0
cvtps2pd xmm0, xmm0
addsd xmm0, qword [ebp - 0x2558]
movsd qword [eax + 0x520], xmm0
mov eax, dword [esi]
push dword [eax + 0x2c]
push 0x665
push dword [0x4e5184]
push 1
call fcn.0044bc90
mov esi, dword [esi]
add esp, 0x10
or byte [ebp - 0x2518], al
add esi, 0x54
cmp dword [esi], 0
jne 0x487412
mov esi, dword [ebp - 0x2524]
push dword [ebp - 0x25f8]
movzx eax, byte [ebp - 0x2511]
push 0x4a7
push dword [0x4e5184]
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
dec dword [ebp - 0x2598]
push edi
push dword [ebp - 0x251c]
call fcn.004685e0
add esp, 0x18
test al, al
je 0x4874be
push 0xffffffffffffffff
push dword [ebp - 0x25f8]
push 0x7eb
push dword [0x4e5180]
call dword [sym.imp.USER32.dll_PostMessageW]
call fcn.0044d4b0
mov eax, dword [edi + 0x28]
shr eax, 7
and eax, 0xffffff01
mov byte [ebp - 0x2511], 0
mov dword [ebp - 0x2614], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 4
jbe 0x4874e8
lea ecx, [esi + 0xb8]
jmp 0x4874f5
mov byte [ebp - 0x2511], 1
lea ecx, [esi + 0x88]
mov esi, dword [esi + 4]
xor edx, edx
mov dword [ebp - 0x254c], esi
test esi, esi
je 0x48752a
lea eax, [ecx + 0x38]
add ecx, 0x34
lea ebx, [ebx]
cmp dword [ecx], 5
jne 0x48751b
cmp dword [eax], 5
jne 0x48751b
inc edx
add ecx, 0x40
add eax, 0x40
dec esi
jne 0x487510
mov esi, dword [ebp - 0x254c]
cmp esi, edx
jne 0x487537
or dword [edi + 0x28], 0x80
jmp 0x48753e
and dword [edi + 0x28], 0xffffff7f
mov eax, dword [edi + 0x28]
shr eax, 7
and eax, 1
cmp al, byte [ebp - 0x2614]
je 0x48756d
push 0xffffffffffffffff
push dword [ebp - 0x25f8]
push 0x7eb
push dword [0x4e5180]
call dword [sym.imp.USER32.dll_PostMessageW]
call fcn.0044d4b0
mov esi, dword [edi + 0x320]
lea ecx, [edi + 0x320]
test esi, esi
je 0x487583
cmp word [esi], 0
jne 0x4875eb
cmp byte [edi + 0x28d], 2
jae 0x4875eb
push 0
lea eax, [edi + 0x328]
push eax
lea eax, [edi + 0x324]
push eax
push ecx
push dword [edi + 0x44]
push dword [ebp - 0x251c]
call fcn.0046b7e0
push esi
call fcn.0048faf7
inc byte [edi + 0x28d]
add esp, 0x1c
mov eax, dword [edi + 0x320]
test eax, eax
je 0x4875eb
cmp word [eax], 0
je 0x4875eb
push dword [ebp - 0x25f8]
push 0x408
push dword [0x4e5184]
push 1
call fcn.0044bc90
add esp, 0x10
or byte [ebp - 0x2518], al
mov al, byte [edi + 0x28c]
cmp al, 2
jb 0x4875fe
mov cl, byte [ebx + 0xc]
test cl, cl
je 0x487638
jmp 0x48760c
cmp byte [ebx + 0xc], 0
jne 0x48760c
inc al
mov byte [edi + 0x28c], al
push 0
push 0
push dword [edi + 0x44]
push dword [ebp - 0x251c]
call fcn.00478c00
mov cl, byte [ebx + 0xc]
add esp, 0x10
test al, al
je 0x487631
or dword [edi + 0x28], 0x800
jmp 0x487638
and dword [edi + 0x28], 0xfffff7ff
mov al, byte [edi + 0x278]
cmp al, 2
jb 0x48764c
test cl, cl
je 0x4876e4
jmp 0x487658
test cl, cl
jne 0x487658
inc al
mov byte [edi + 0x278], al
mov ecx, dword [ebp - 0x251c]
test ecx, ecx
je 0x4876e1
mov eax, dword [edi + 0x27c]
push ecx
push edi
mov dword [ebp - 0x254c], eax
call fcn.00467420
lea ecx, [ebp - 0x254c]
mov dword [edi + 0x27c], eax
add esp, 8
cmp eax, dword [ecx]
je 0x4876b1
cmp al, byte [ecx]
jne 0x4876b5
mov al, byte [edi + 0x27d]
cmp al, byte [ecx + 1]
jne 0x4876b5
mov al, byte [edi + 0x27e]
cmp al, byte [ecx + 2]
jne 0x4876b5
mov al, byte [edi + 0x27f]
cmp al, byte [ecx + 3]
jne 0x4876b5
xor ecx, ecx
jmp 0x4876ba
sbb ecx, ecx
or ecx, 1
push dword [ebp - 0x25f8]
xor eax, eax
test ecx, ecx
push 0x4af
push dword [0x4e5184]
sete al
push eax
call fcn.0044bc90
add esp, 0x10
or byte [ebp - 0x2518], al
mov cl, byte [ebx + 0xc]
cmp dword [edi + 0x504], 0
jne 0x48776f
mov al, byte [edi + 0x500]
cmp al, 2
jb 0x487701
test cl, cl
je 0x487766
jmp 0x48770d
test cl, cl
jne 0x48770d
inc al
mov byte [edi + 0x500], al
push dword [edi + 0x44]
call fcn.004570a0
push edi
mov dword [edi + 0x504], eax
call fcn.0043c470
add esp, 8
mov byte [edi + 0x508], al
cmp dword [edi + 0x504], 0
je 0x487775
cmp byte [ebp - 0x251d], 0
jne 0x487748
call fcn.00457bd0
mov byte [ebp - 0x251d], 1
push 0xffffffffffffffff
push dword [ebp - 0x25f8]
push 0x7eb
push dword [0x4e5180]
call dword [sym.imp.USER32.dll_PostMessageW]
call fcn.0044d4b0
cmp dword [edi + 0x504], 0
je 0x487775
inc dword [ebp - 0x1c50]
mov eax, dword [ebp - 0x2524]
mov esi, dword [edi + 0x558]
mov eax, dword [eax + 0x40]
cmp eax, esi
mov dword [edi + 0x558], eax
push dword [ebp - 0x25f8]
setne cl
push 5
push dword [0x4e5184]
movzx eax, cl
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
add esp, 0x10
cmp dword [edi + 0x558], esi
je 0x4877e9
mov ecx, dword [ebp - 0x25dc]
mov eax, dword [ecx + 0x558]
cmp eax, 4
jne 0x4877d3
cmp dword [ecx + 0x3b8], 0
jne 0x4877d3
xor eax, eax
push eax
push dword [0x4e5180]
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call fcn.0048a040
add esp, 8
mov edx, dword [ebp - 0x25a4]
mov ecx, dword [ebp - 0x2574]
cmp edx, dword [edi + 0x528]
jne 0x487809
cmp ecx, dword [edi + 0x52c]
jne 0x487809
xor al, al
jmp 0x48780b
mov al, 1
mov dword [edi + 0x528], edx
mov dword [edi + 0x52c], ecx
push dword [ebp - 0x25f8]
movzx eax, al
push 0x43f
push dword [0x4e5184]
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
add esp, 0x10
mov eax, dword [0x4ea1b0]
test eax, eax
je 0x48788a
lea ecx, [ebp - 0x25c4]
push ecx
push dword [ebp - 0x251c]
call eax
mov eax, dword [ebp - 0x25c4]
cmp eax, dword [edi + 0x284]
mov dword [edi + 0x284], eax
push dword [ebp - 0x25f8]
setne cl
push 0x683
push dword [0x4e5184]
movzx eax, cl
push eax
call fcn.0044bc90
add esp, 0x10
or byte [ebp - 0x2518], al
mov esi, dword [ebp - 0x2524]
mov eax, dword [esi + 0x4c]
cmp eax, dword [edi + 0x5c]
mov dword [edi + 0x5c], eax
push dword [ebp - 0x25f8]
setne cl
push 0x12
push dword [0x4e5184]
movzx eax, cl
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
mov eax, dword [esi + 0x60]
sub eax, dword [edi + 0x370]
cmp eax, dword [edi + 0x374]
mov dword [edi + 0x374], eax
push dword [ebp - 0x25f8]
setne cl
push 0x49b
push dword [0x4e5184]
movzx eax, cl
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
mov eax, dword [esi + 0x60]
cmp eax, dword [edi + 0x370]
mov dword [edi + 0x370], eax
push dword [ebp - 0x25f8]
setne cl
push 0x423
push dword [0x4e5184]
movzx eax, cl
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
mov eax, dword [esi + 0x68]
cmp eax, dword [edi + 0x384]
mov dword [edi + 0x384], eax
push dword [ebp - 0x25f8]
setne cl
push 0x427
push dword [0x4e5184]
movzx eax, cl
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
add esp, 0x40
mov eax, dword [esi + 0x64]
cmp eax, dword [edi + 0x388]
mov dword [edi + 0x388], eax
push dword [ebp - 0x25f8]
setne cl
push 0x428
push dword [0x4e5184]
movzx eax, cl
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
mov eax, dword [esi + 0x70]
cmp eax, dword [edi + 0x398]
mov dword [edi + 0x398], eax
push dword [ebp - 0x25f8]
setne cl
push 9
push dword [0x4e5184]
movzx eax, cl
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
mov eax, dword [esi + 0x78]
cmp eax, dword [edi + 0x39c]
mov dword [edi + 0x39c], eax
push dword [ebp - 0x25f8]
setne cl
push 0xa
push dword [0x4e5184]
movzx eax, cl
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
mov eax, dword [esi + 0x80]
cmp eax, dword [edi + 0x380]
mov dword [edi + 0x380], eax
push dword [ebp - 0x25f8]
setne cl
push 0x426
push dword [0x4e5184]
movzx eax, cl
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
add esp, 0x40
mov eax, dword [esi + 0x7c]
sub eax, dword [edi + 0x378]
cmp eax, dword [edi + 0x37c]
mov dword [edi + 0x37c], eax
push dword [ebp - 0x25f8]
setne cl
push 0x4a8
push dword [0x4e5184]
movzx eax, cl
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
add esp, 0x10
mov ecx, dword [esi + 0x7c]
xor eax, eax
cmp eax, dword [ebp - 0x253c]
jb 0x487a7e
ja 0x487a72
cmp ecx, dword [ebp - 0x257c]
jbe 0x487a7e
mov dword [ebp - 0x257c], ecx
mov dword [ebp - 0x253c], eax
cmp ecx, dword [edi + 0x378]
mov dword [edi + 0x378], ecx
push dword [ebp - 0x25f8]
setne al
push 0x424
push dword [0x4e5184]
movzx esi, al
push esi
call fcn.0044bc90
push dword [ebp - 0x25f8]
or byte [ebp - 0x2518], al
push 0x4a9
push dword [0x4e5184]
push esi
call fcn.0044bc90
or byte [ebp - 0x2518], al
add esp, 0x20
mov edx, dword [edi + 0x38c]
test edx, edx
je 0x487b25
mov ecx, dword [edi + 0x380]
shr ecx, 0xa
mov eax, ecx
shr eax, 0x1f
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x4bac10]
comisd xmm0, xmmword [edx + 0x28]
jb 0x487b25
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4bac10]
cvtpd2ps xmm0, xmm0
mulss xmm0, dword [0x4bac08]
cvtps2pd xmm0, xmm0
movsd qword [edx + 0x28], xmm0
mov eax, dword [edi + 0x378]
xorps xmm0, xmm0
push 0
sub esp, 0x10
movsd qword [esp + 8], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4bac10]
cvtpd2ps xmm0, xmm0
mulss xmm0, dword [0x4bc448]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push dword [0x4f686c]
push dword [0x4f6868]
push dword [edi + 0x38c]
call fcn.0043cb30
mov esi, dword [ebp - 0x2524]
mov eax, dword [esi + 0x5c]
cmp eax, dword [edi + 0x36c]
mov dword [edi + 0x36c], eax
push dword [ebp - 0x25f8]
setne cl
push 0x45a
push dword [0x4e5184]
movzx eax, cl
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
push 0x23
push dword [0x4e5184]
call fcn.00445710
add esp, 0x38
test al, al
jne 0x487bdf
push 0x4ac
push dword [0x4e5184]
call fcn.00445710
add esp, 8
test al, al
je 0x487d53
mov esi, dword [esi + 0x44]
lea eax, [ebp - 0x248]
push 0x4af9b8
push 0x100
push eax
call fcn.004911bd
add esp, 0xc
mov dword [0x4f688c], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp esi, eax
je 0x487c39
push esi
lea eax, [ebp - 0x248]
mov byte [0x4f6888], 0
push 0x4801b0
mov dword [0x4f6880], eax
mov dword [0x4f6884], 0x100
call dword [sym.imp.USER32.dll_EnumWindows]
jmp 0x487c55
mov eax, dword [0x4e5180]
push 0x100
push dword [0x4f6880]
mov dword [0x4f688c], eax
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov al, byte [edi + 0x26c]
mov esi, dword [0x4f688c]
push 0x4ac
push dword [0x4e5184]
mov byte [ebp - 0x2511], al
call fcn.00445710
add esp, 8
test al, al
je 0x487c8f
test esi, esi
je 0x487c8f
push esi
call dword [0x4ea148]
mov byte [ebp - 0x2511], al
lea eax, [edi + 0x68]
mov edx, eax
lea ecx, [ebp - 0x248]
lea ebx, [ebx]
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x487cc6
test ax, ax
je 0x487cc2
mov ax, word [ecx + 2]
cmp ax, word [edx + 2]
jne 0x487cc6
add ecx, 4
add edx, 4
test ax, ax
jne 0x487ca0
xor eax, eax
jmp 0x487ccb
sbb eax, eax
or eax, 1
test eax, eax
mov al, byte [ebp - 0x2511]
jne 0x487ce4
mov byte [ebp - 0x2511], 0
cmp al, byte [edi + 0x26c]
je 0x487ceb
mov byte [ebp - 0x2511], 1
mov byte [edi + 0x26c], al
lea eax, [ebp - 0x248]
push eax
lea eax, [edi + 0x68]
push 0x100
push eax
call fcn.004911bd
mov dword [edi + 0x268], esi
push dword [ebp - 0x25f8]
movzx esi, byte [ebp - 0x2511]
push 0x23
push dword [0x4e5184]
push esi
call fcn.0044bc90
push dword [ebp - 0x25f8]
or byte [ebp - 0x2518], al
push 0x4ac
push dword [0x4e5184]
push esi
call fcn.0044bc90
mov esi, dword [ebp - 0x2524]
add esp, 0x2c
or byte [ebp - 0x2518], al
mov eax, dword [esi + 4]
cmp eax, dword [edi + 0x60]
mov dword [edi + 0x60], eax
push dword [ebp - 0x25f8]
setne cl
push 0x429
push dword [0x4e5184]
movzx eax, cl
push eax
call fcn.0044bc90
or byte [ebp - 0x2518], al
add esp, 0x10
mov eax, dword [edi + 0x428]
test eax, eax
je 0x487e12
mov eax, dword [edi + 0x418]
add eax, dword [edi + 0x3f8]
mov ecx, dword [edi + 0x41c]
adc ecx, dword [edi + 0x3fc]
add eax, dword [edi + 0x3d8]
mov dword [ebp - 0x254c], eax
adc ecx, dword [edi + 0x3dc]
mov dword [ebp - 0x25a4], ecx
mov edx, ecx
mov ecx, eax
call fcn.004939cf
mov eax, dword [edi + 0x428]
comisd xmm0, xmmword [eax + 0x28]
jb 0x487e12
mov edx, dword [ebp - 0x25a4]
mov ecx, dword [ebp - 0x254c]
call fcn.004939cf
mov eax, dword [edi + 0x428]
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [0x4bac08]
cvtss2sd xmm0, xmm0
movsd qword [eax + 0x28], xmm0
mov eax, dword [edi + 0x428]
movsd xmm0, qword [eax + 0x28]
movsd qword [eax + 0x40], xmm0
mov edx, dword [edi + 0x3fc]
mov ecx, dword [edi + 0x3f8]
call fcn.004939cf
mov edx, dword [edi + 0x3dc]
mov ecx, dword [edi + 0x3d8]
cvtsd2ss xmm0, xmm0
push 0
sub esp, 8
movss dword [ebp - 0x25a4], xmm0
cvtss2sd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.004939cf
mov edx, dword [edi + 0x41c]
mov ecx, dword [edi + 0x418]
cvtsd2ss xmm0, xmm0
addss xmm0, dword [ebp - 0x25a4]
movss dword [ebp - 0x25a4], xmm0
call fcn.004939cf
movss xmm1, dword [ebp - 0x25a4]
sub esp, 8
cvtsd2ss xmm0, xmm0
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
movsd qword [esp], xmm0
push dword [0x4f686c]
push dword [0x4f6868]
push dword [edi + 0x428]
call fcn.0043cb30
add esp, 0x20
lea eax, [edi + 0x3c0]
mov ecx, 0x4f68c8
push eax
push edi
call fcn.00440320
lea eax, [edi + 0x430]
mov ecx, 0x4f6930
push eax
push edi
call fcn.00440320
lea eax, [edi + 0x498]
mov ecx, 0x4f6998
push eax
push edi
call fcn.00440320
push dword [ebp - 0x25f8]
push 0x532
push dword [0x4e5184]
push 1
call fcn.0044bc90
or byte [ebp - 0x2518], al
add esp, 0x10
cmp dword [edi + 0x504], 0
je 0x487f1d
cmp byte [ebp - 0x251d], 0
jne 0x487f1d
call fcn.00457bd0
mov byte [ebp - 0x251d], 1
push dword [ebp - 0x25f8]
push edi
call fcn.00457c10
or byte [ebp - 0x2518], al
add esp, 8
test byte [edi + 0x28], 0x40
je 0x487fa3
mov ecx, dword [esi + 0x28]
add ecx, dword [esi + 0x30]
mov eax, dword [esi + 0x2c]
adc eax, dword [esi + 0x34]
add dword [ebp - 0x2604], ecx
adc dword [ebp - 0x252c], eax
mov eax, dword [ebp - 0x2570]
add eax, dword [esi + 0x7c]
mov dword [ebp - 0x2570], eax
adc dword [ebp - 0x2568], 0
mov eax, dword [ebp - 0x2530]
add eax, dword [esi + 0x68]
mov dword [ebp - 0x2530], eax
adc dword [ebp - 0x2564], 0
inc dword [ebp - 0x1c64]
mov eax, dword [esi + 4]
add dword [ebp - 0x1c5c], eax
mov eax, dword [esi + 0x4c]
add dword [ebp - 0x1c54], eax
cmp dword [edi + 0x504], 0
je 0x487fa3
inc dword [ebp - 0x1c4c]
push dword [ebp - 0x25f8]
push 0x4a9
push dword [0x4e5184]
push 1
call fcn.0044bc90
push dword [ebp - 0x25f8]
push 0x532
push dword [0x4e5184]
push 1
call fcn.0044bc90
push dword [ebp - 0x25f8]
push 0x4a7
push dword [0x4e5184]
push 1
call fcn.0044bc90
mov cl, byte [edi + 0x18]
add esp, 0x30
xor dl, dl
test cl, cl
je 0x488018
mov eax, dword [edi + 0x1c]
cmp eax, dword [0x4e0424]
jge 0x48800e
mov dword [edi + 0x10], 2
mov dword [edi + 0x14], eax
jmp 0x488038
test cl, cl
je 0x488018
mov dl, 1
mov byte [edi + 0x18], 0
mov ecx, dword [ebp - 0x2518]
test dl, dl
movzx eax, cl
mov ecx, 1
cmovne eax, ecx
mov dword [edi + 0x10], 0
mov byte [ebp - 0x2518], al
mov eax, dword [ebp - 0x251c]
test eax, eax
je 0x488049
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esi]
test eax, eax
je 0x488ba4
mov edi, dword [ebp - 0x2628]
add esi, eax
jmp 0x486e98
push 0x4c0828
lea eax, [ebp - 0x848]
push 0x100
push eax
call fcn.004911bd
add esp, 0xc
lea ecx, [ebp - 0x2654]
push ecx
push 0x100
lea ecx, [ebp - 0x448]
push ecx
push 0x100
lea ecx, [ebp - 0xc48]
push ecx
push 0x100
lea ecx, [ebp - 0xa48]
push ecx
lea eax, [esi + 0x20]
push eax
push dword [esi + 0x44]
push dword [ebp - 0x251c]
call fcn.004835d0
add esp, 0x28
cmp word [ebp - 0xc48], 0
je 0x4880d2
cmp word [ebp - 0xa48], 0
mov eax, 0x4afa48
jne 0x4880d7
mov eax, 0x4af9b8
lea ecx, [ebp - 0xa48]
push ecx
push eax
lea eax, [ebp - 0xc48]
push eax
lea eax, [ebp - 0x1c48]
push 0x4be550
push eax
call fcn.0043c580
lea eax, [ebp - 0x448]
push eax
call fcn.0048faa4
add esp, 0x18
mov dword [ebp - 0x1f28], eax
cmp dword [ebp - 0x2654], 0
je 0x48811f
or dword [ebp - 0x2230], 0x200
lea eax, [ebp - 0x2694]
push eax
push 1
lea eax, [ebp - 0x1fcf]
push eax
push 0x3d
push dword [ebp - 0x251c]
call dword [0x4ea064]
mov eax, dword [0x4f687c]
test eax, eax
je 0x4881de
push dword [ebp - 0x251c]
call eax
test eax, eax
je 0x4881de
mov eax, dword [0x4ea198]
test eax, eax
je 0x4881d4
push 0
lea ecx, [ebp - 0x262c]
mov dword [ebp - 0x262c], 0
push ecx
push dword [ebp - 0x251c]
call eax
cmp eax, 0x7a
jne 0x4881d4
mov eax, dword [ebp - 0x262c]
add eax, eax
push eax
call fcn.0048fb2f
add esp, 4
mov dword [ebp - 0x2574], eax
push eax
lea eax, [ebp - 0x262c]
push eax
push dword [ebp - 0x251c]
call dword [0x4ea198]
test eax, eax
jne 0x4881c6
push dword [ebp - 0x2574]
call fcn.0048faa4
add esp, 4
mov dword [ebp - 0x1f20], eax
push dword [ebp - 0x2574]
call fcn.0048faf7
add esp, 4
or dword [ebp - 0x2230], 0x1000
push 0xffffffffffffffff
lea eax, [ebp - 0x2258]
mov dword [ebp - 0x1ef0], 0xffffffff
push eax
push dword [0x4f686c]
mov dword [ebp - 0x1ea0], 0xffffffff
push dword [0x4f6868]
push dword [ebp - 0x2534]
push dword [ebp - 0x2538]
push dword [ebp - 0x251c]
push esi
call fcn.004790b0
mov eax, dword [esi + 0x48]
add esp, 0x20
test eax, eax
jne 0x48823f
lea eax, [ebp - 0x648]
push 0x4c1f44
push eax
call fcn.004406f0
add esp, 8
jmp 0x48827e
push 0x100
lea ecx, [ebp - 0x648]
push ecx
lea ecx, [esi + 0x20]
push ecx
push eax
call fcn.00483520
push dword [esi + 0x48]
lea eax, [ebp - 0x48]
push 0x4c1f54
push eax
call fcn.004652b0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x648]
push 0x100
push eax
call fcn.00493457
add esp, 0x28
lea eax, [ebp - 0x2581]
push eax
lea eax, [ebp - 0x1f30]
push eax
lea eax, [ebp - 0x1f34]
push eax
lea eax, [ebp - 0x1f38]
push eax
push dword [esi + 0x44]
push dword [ebp - 0x251c]
call fcn.0046b7e0
add esp, 0x18
cmp byte [ebp - 0x2581], 0
je 0x4882be
or dword [ebp - 0x2230], 0x400
mov eax, dword [esi + 0x44]
push 0x4af9b8
mov dword [ebp - 0x254c], eax
lea eax, [ebp - 0x248]
push 0x100
push eax
call fcn.004911bd
add esp, 0xc
mov dword [0x4f688c], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [ebp - 0x254c]
cmp ecx, eax
je 0x488324
push ecx
lea eax, [ebp - 0x248]
mov byte [0x4f6888], 0
push 0x4801b0
mov dword [0x4f6880], eax
mov dword [0x4f6884], 0x100
call dword [sym.imp.USER32.dll_EnumWindows]
jmp 0x488340
mov eax, dword [0x4e5180]
push 0x100
push dword [0x4f6880]
mov dword [0x4f688c], eax
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov eax, dword [0x4f688c]
mov dword [ebp - 0x1ff0], eax
test eax, eax
je 0x48835c
push eax
call dword [0x4ea148]
mov byte [ebp - 0x1fec], al
cmp byte [ebp - 0x2569], 0
jne 0x488371
call fcn.00469190
mov byte [ebp - 0x2569], 1
cmp dword [0x4ea0a4], 0
mov eax, dword [esi + 0x44]
mov dword [ebp - 0x254c], eax
je 0x4883bc
test eax, eax
je 0x4883bc
mov edx, dword [0x4e6028]
xor ecx, ecx
test edx, edx
je 0x4883bc
mov eax, dword [0x4e6024]
add eax, 0x24
jmp 0x4883a0
mov esi, dword [ebp - 0x254c]
cmp dword [eax], esi
mov esi, dword [ebp - 0x2524]
je 0x4884f9
inc ecx
add eax, 0x2c
cmp ecx, edx
jb 0x4883a0
and dword [ebp - 0x2230], 0xffffffdf
push 0x4af9b8
lea eax, [ebp - 0x1fca]
push 0x41
push eax
call fcn.004911bd
lea eax, [ebp - 0x848]
push eax
call fcn.0048faa4
mov dword [ebp - 0x221c], eax
lea eax, [ebp - 0x2258]
push eax
push dword [ebp - 0x251c]
call fcn.004685e0
add esp, 0x18
test al, al
jne 0x488471
mov eax, dword [ebp - 0x1f40]
xor ecx, ecx
mov dword [ebp - 0x2510], ecx
test eax, eax
je 0x488439
push 0x101
push 0x2b4
lea ecx, [ebp - 0x2510]
push ecx
push 0
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov eax, dword [ebp - 0x1f40]
mov ecx, dword [ebp - 0x2510]
mov dword [ebp - 0x2224], ecx
xor ecx, ecx
mov dword [ebp - 0x2510], ecx
test eax, eax
je 0x48846b
push 0x100
push 0x2b4
lea ecx, [ebp - 0x2510]
push ecx
push 0
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov ecx, dword [ebp - 0x2510]
mov dword [ebp - 0x2220], ecx
mov eax, dword [esi + 0x40]
lea ecx, [esi + 0x20]
mov dword [ebp - 0x1d00], eax
cmp dword [esi + 0x48], 0
jne 0x4884a8
mov eax, dword [ebp - 0x2214]
test eax, eax
je 0x4884a8
mov dword [0x4e5fe8], eax
mov eax, dword [ecx]
mov dword [0x4e5ff0], eax
mov eax, dword [ecx + 4]
mov dword [0x4e5ff4], eax
mov dword [esi + 0x48], 0xffffffff
mov eax, dword [esi + 0x48]
xorps xmm0, xmm0
mov dword [ebp - 0x220c], eax
mov dword [ebp - 0x2204], 0
mov eax, dword [esi + 0x4c]
mov dword [ebp - 0x21fc], eax
mov eax, dword [ecx]
mov dword [ebp - 0x1fe8], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0x1fe4], eax
movlpd qword [ebp - 0x2558], xmm0
mov byte [ebp - 0x2511], 0
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 4
jbe 0x488505
lea ecx, [esi + 0xb8]
jmp 0x488512
or dword [ebp - 0x2230], 0x20
jmp 0x4883c3
mov byte [ebp - 0x2511], 1
lea ecx, [esi + 0x88]
mov eax, dword [esi + 4]
mov dword [ebp - 0x2574], eax
test eax, eax
je 0x488558
mov edx, dword [ebp - 0x2558]
lea eax, [ecx + 0x30]
mov ecx, dword [ebp - 0x2554]
mov edi, edi
add edx, dword [eax]
adc ecx, 0
add eax, 0x40
dec dword [ebp - 0x2574]
jne 0x488530
test ecx, ecx
jl 0x488558
jg 0x48854a
test edx, edx
je 0x488558
mov dword [ebp - 0x1d18], edx
mov dword [ebp - 0x1d14], ecx
jmp 0x488563
xorps xmm0, xmm0
movlpd qword [ebp - 0x1d18], xmm0
mov dword [ebp - 0x1cac], 0
mov byte [ebp - 0x2511], 0
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 4
jbe 0x488586
lea ecx, [esi + 0xb8]
jmp 0x488593
mov byte [ebp - 0x2511], 1
lea ecx, [esi + 0x88]
mov eax, dword [esi + 4]
xor edx, edx
test eax, eax
je 0x4885cd
mov edi, dword [esi + 4]
lea eax, [ecx + 0x38]
mov dword [ebp - 0x2574], edi
add ecx, 0x34
mov edi, dword [ebp - 0x2620]
cmp dword [ecx], 5
jne 0x4885bc
cmp dword [eax], 5
jne 0x4885bc
inc edx
add ecx, 0x40
add eax, 0x40
dec dword [ebp - 0x2574]
jne 0x4885b1
mov eax, dword [esi + 4]
cmp eax, edx
jne 0x4885db
or dword [ebp - 0x2230], 0x80
push 0
push 0
push dword [ebp - 0x2214]
push dword [ebp - 0x251c]
call fcn.00478c00
add esp, 0x10
test al, al
je 0x488603
or dword [ebp - 0x2230], 0x800
jmp 0x48860d
and dword [ebp - 0x2230], 0xfffff7ff
push dword [ebp - 0x251c]
lea eax, [ebp - 0x2258]
push eax
call fcn.00467420
mov dword [ebp - 0x1fdc], eax
mov dword [ebp - 0x2208], 0
mov ecx, dword [esi + 0x28]
add ecx, dword [esi + 0x30]
mov eax, dword [esi + 0x2c]
adc eax, dword [esi + 0x34]
mov dword [ebp - 0x1d30], ecx
mov dword [ebp - 0x1d2c], eax
mov eax, dword [esi + 0x30]
mov dword [ebp - 0x1d28], eax
mov eax, dword [esi + 0x34]
mov dword [ebp - 0x1d24], eax
mov dword [ebp - 0x21f4], 0
mov eax, dword [esi + 0x60]
mov dword [ebp - 0x1ee8], eax
mov eax, dword [esi + 0x7c]
mov dword [ebp - 0x1ee0], eax
mov eax, dword [esi + 0x5c]
mov dword [ebp - 0x1eec], eax
mov eax, dword [esi + 0x80]
mov dword [ebp - 0x1ed8], eax
mov eax, dword [esi + 0x68]
push 0x4c1f60
push dword [ebp - 0x221c]
mov dword [ebp - 0x1ed4], eax
mov eax, dword [esi + 0x64]
mov dword [ebp - 0x1ed0], eax
call fcn.00491646
add esp, 0x10
test eax, eax
jne 0x4886c8
lea eax, [ebp - 0x1ef4]
push eax
push dword [ebp - 0x2214]
call fcn.0048e690
add esp, 8
mov eax, dword [0x4ea1b0]
mov dword [ebp - 0x1fd4], 0xffffffff
test eax, eax
je 0x4886ea
lea ecx, [ebp - 0x1fd4]
push ecx
push dword [ebp - 0x251c]
call eax
mov eax, dword [esi + 0x7c]
xor ecx, ecx
cmp ecx, dword [ebp - 0x253c]
jb 0x48870d
ja 0x488701
cmp eax, dword [ebp - 0x257c]
jbe 0x48870d
mov dword [ebp - 0x257c], eax
mov dword [ebp - 0x253c], ecx
mov eax, dword [0x4ea0ac]
test eax, eax
je 0x488738
lea ecx, [ebp - 0x21f4]
push ecx
push dword [esi + 0x44]
call eax
mov ecx, dword [ebp - 0x21f4]
test eax, eax
mov eax, 0xffffffff
cmove ecx, eax
mov dword [ebp - 0x21f4], ecx
cmp dword [0x4dc400], 0
je 0x488759
xorps xmm0, xmm0
movsd qword [ebp - 0x1d48], xmm0
movsd qword [ebp - 0x2558], xmm0
jmp 0x48887e
mov ecx, dword [esi + 0x28]
add ecx, dword [esi + 0x30]
mov edx, dword [esi + 0x2c]
adc edx, dword [esi + 0x34]
cmp dword [0x4ea130], 0
je 0x4887cb
cmp dword [0x4dfca4], 2
jl 0x4887cb
mov eax, dword [ebp - 0x2594]
or eax, dword [ebp - 0x25a0]
je 0x488815
mov edx, dword [esi + 0x1c]
mov ecx, dword [esi + 0x18]
call fcn.0049393e
mov edx, dword [ebp - 0x25a0]
mov ecx, dword [ebp - 0x2594]
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [0x4bac0c]
movss dword [ebp - 0x254c], xmm0
call fcn.004939cf
movss xmm1, dword [ebp - 0x254c]
cvtsd2ss xmm0, xmm0
divss xmm1, xmm0
jmp 0x488818
mov eax, dword [ebp - 0x2538]
or eax, dword [ebp - 0x2534]
je 0x488815
call fcn.004939cf
mov edx, dword [ebp - 0x2534]
mov ecx, dword [ebp - 0x2538]
cvtsd2ss xmm0, xmm0
mulss xmm0, dword [0x4bac0c]
movss dword [ebp - 0x254c], xmm0
call fcn.004939cf
movss xmm1, dword [ebp - 0x254c]
cvtsd2ss xmm0, xmm0
divss xmm1, xmm0
jmp 0x488818
xorps xmm1, xmm1
cvtps2pd xmm0, xmm1
movsd xmm1, qword [0x4ba8c0]
comisd xmm0, xmm1
movsd qword [ebp - 0x2558], xmm0
jbe 0x48883c
movaps xmm0, xmm1
movsd qword [ebp - 0x2558], xmm0
test byte [ebp - 0x2230], 0x40
movsd qword [ebp - 0x1d48], xmm0
je 0x488865
addsd xmm0, qword [ebp - 0x2590]
movsd qword [ebp - 0x2590], xmm0
movsd xmm0, qword [ebp - 0x2558]
cmp dword [ebp - 0x2214], 0
je 0x48887e
addsd xmm0, qword [ebp - 0x2610]
movsd qword [ebp - 0x2610], xmm0
lea eax, [ebp - 0x648]
push eax
call fcn.0048faa4
mov dword [ebp - 0x2210], eax
lea eax, [ebp - 0x1c48]
push eax
call fcn.0048faa4
or dword [ebp - 0x2230], 4
push 0x4e4f70
push eax
mov dword [ebp - 0x2200], eax
call fcn.00491646
add esp, 0x10
test eax, eax
mov eax, dword [ebp - 0x2230]
jne 0x4888ca
or eax, 0x40
mov dword [ebp - 0x2230], eax
cmp byte [0x4e45bf], 0
jne 0x4888e1
test byte [ebp - 0x2230], 0x40
jne 0x4888e1
and eax, 0xfffffffd
jmp 0x4888e4
or eax, 2
mov dword [ebp - 0x2230], eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x21f0]
push 0x100
push eax
call fcn.004911bd
add esp, 0xc
cmp dword [0x4dc400], 0
je 0x48891a
mov dword [ebp - 0x2248], 0
jmp 0x488968
mov eax, dword [0x4ea1ac]
cmp eax, dword [ebp - 0x1fe4]
jl 0x48894d
jg 0x488936
mov eax, dword [0x4ea1a8]
cmp eax, dword [ebp - 0x1fe8]
jbe 0x48894d
xorps xmm0, xmm0
mov dword [ebp - 0x2248], 0
movsd qword [ebp - 0x1d48], xmm0
jmp 0x488957
mov dword [ebp - 0x2248], 2
mov dword [ebp - 0x2244], 0
mov byte [ebp - 0x2240], 0
push dword [ebp - 0x2214]
mov byte [ebp - 0x1d58], 0
call fcn.004570a0
mov dword [ebp - 0x1d54], eax
lea eax, [ebp - 0x2258]
push eax
call fcn.0043c470
mov byte [ebp - 0x1d50], al
add esp, 8
mov eax, dword [ebp - 0x1d54]
test eax, eax
je 0x4889c4
cmp byte [ebp - 0x251d], 0
jne 0x4889ba
call fcn.00457bd0
mov eax, dword [ebp - 0x1d54]
mov byte [ebp - 0x251d], 1
test eax, eax
je 0x4889c4
inc dword [ebp - 0x1c50]
lea eax, [ebp - 0x2258]
push 0xffffffffffffffff
push eax
call fcn.00457c10
add esp, 8
mov dword [ebp - 0x1cf4], 0
lea eax, [ebp - 0x2258]
mov dword [ebp - 0x1cf8], 0
xor ecx, ecx
mov dword [ebp - 0x2244], 0
push eax
mov eax, dword [0x4db654]
cmp eax, dword [esi + 0x44]
sete cl
push ecx
push 0x7ee
push dword [0x4e5180]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0xffffffffffffffff
mov ecx, eax
push ecx
push dword [0x4f686c]
mov dword [ebp - 0x2540], ecx
push dword [0x4f6868]
push dword [ebp - 0x2534]
push dword [ebp - 0x2538]
push dword [ebp - 0x251c]
push esi
call fcn.004790b0
mov ecx, dword [ebp - 0x2540]
add esp, 0x20
mov edx, dword [ebp - 0x25bc]
mov dword [ebp - 0x25bc], ecx
mov byte [ebp - 0x2518], 1
mov eax, dword [ecx + 0x540]
mov dword [ecx + 0x538], eax
mov eax, dword [ecx + 0x544]
mov dword [ecx + 0x53c], eax
mov eax, dword [ecx + 0x550]
mov dword [ecx + 0x548], eax
mov eax, dword [ecx + 0x554]
mov dword [ecx + 0x54c], eax
mov dword [ecx + 0x5ac], edx
mov eax, dword [ebp - 0x1f40]
test eax, eax
je 0x488b15
cmp word [eax], 0x5b
je 0x488b15
cmp byte [0x4e45c6], 0
je 0x488ad9
lea eax, [ecx + 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov ecx, dword [ebp - 0x2540]
push ecx
push 0
push 0x48aa90
call fcn.00493b6c
mov ecx, dword [ebp - 0x2540]
add esp, 0xc
push dword [ecx + 0x318]
push dword [ecx + 0x58]
call fcn.00437630
mov ecx, dword [ebp - 0x2540]
xor edx, edx
mov dword [ecx + 0x33c], eax
mov eax, 2
cmp byte [0x4e45d0], dl
cmovne eax, edx
push eax
push 1
push ecx
call fcn.0048cde0
mov ecx, dword [ebp - 0x2540]
add esp, 0x14
cmp dword [ecx + 0x44], 0
je 0x488b3b
movsd xmm0, qword [ebp - 0x2558]
comisd xmm0, xmmword [ebp - 0x25b8]
jbe 0x488b3b
movsd qword [ebp - 0x25b8], xmm0
mov dword [ebp - 0x25ac], ecx
test byte [ebp - 0x2230], 0x40
je 0x488038
mov eax, dword [ebp - 0x2570]
add eax, dword [esi + 0x7c]
mov dword [ebp - 0x2570], eax
adc dword [ebp - 0x2568], 0
mov eax, dword [ebp - 0x2530]
add eax, dword [esi + 0x68]
mov dword [ebp - 0x2530], eax
adc dword [ebp - 0x2564], 0
inc dword [ebp - 0x1c64]
mov eax, dword [esi + 4]
add dword [ebp - 0x1c5c], eax
mov eax, dword [esi + 0x4c]
add dword [ebp - 0x1c54], eax
cmp dword [ebp - 0x1d54], 0
je 0x488038
inc dword [ebp - 0x1c4c]
jmp 0x488038
cmp byte [ebp - 0x2525], 0
jne 0x488d43
cmp byte [0x4e45bf], 0
je 0x488d43
push 0x5c0
lea eax, [ebp - 0x2258]
push 0
push eax
call fcn.004906c0
or dword [ebp - 0x2230], 6
xor esi, esi
add esp, 0xc
mov byte [ebp - 0x1fdc], 0xff
mov dword [ebp - 0x1d54], 0
mov dword [ebp - 0x1ea0], 0xffffffff
mov dword [ebp - 0x1ef0], 0xffffffff
mov dword [ebp - 0x1cac], 0
mov dword [ebp - 0x2248], 0
mov dword [ebp - 0x2214], 0xfffffff6
cmp dword [0x4e523c], esi
jle 0x488cbb
mov edx, dword [0x4ea1b8]
mov edi, dword [0x4ea1bc]
add edx, 0x20
add edi, 4
mov edi, edi
mov eax, dword [edx + 8]
lea edi, [edi + 0x18]
add eax, dword [edi - 0x18]
add dword [ebp - 0x1d18], eax
adc dword [ebp - 0x1d14], 0
mov eax, dword [edx - 8]
add eax, dword [edx]
mov ecx, dword [edx - 4]
adc ecx, dword [edx + 4]
add dword [ebp - 0x1d30], eax
adc dword [ebp - 0x1d2c], ecx
mov eax, dword [edx - 8]
add eax, dword [edx]
mov ecx, dword [edx - 4]
adc ecx, dword [edx + 4]
lea edx, [edx + 0x30]
add dword [ebp - 0x1d28], eax
mov eax, dword [ebp - 0x1d08]
adc dword [ebp - 0x1d24], ecx
mov ecx, dword [0x4ea1c4]
add eax, dword [ecx + esi*8]
mov dword [ebp - 0x1d08], eax
mov eax, dword [ebp - 0x1d04]
adc eax, dword [ecx + esi*8 + 4]
inc esi
mov dword [ebp - 0x1d04], eax
cmp esi, dword [0x4e523c]
jl 0x488c40
mov edi, dword [ebp - 0x2620]
push 0x4c07ec
call fcn.0048faa4
push 0x4c1f7c
mov dword [ebp - 0x1f48], eax
call fcn.0048faa4
mov dword [ebp - 0x221c], eax
mov eax, dword [0x4e5ff0]
mov dword [ebp - 0x1fe8], eax
mov eax, dword [0x4e5ff4]
mov dword [ebp - 0x1fe4], eax
mov eax, dword [0x4e5fe8]
push 0x4b0550
mov dword [ebp - 0x220c], eax
call fcn.0048faa4
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
add esp, 0xc
mov dword [ebp - 0x2210], eax
lea eax, [ebp - 0x2258]
push eax
xor eax, eax
cmp dword [0x4db654], eax
sete al
push eax
push 0x7ee
push dword [0x4e5180]
call esi
mov edx, dword [ebp - 0x25bc]
mov dword [eax + 0x5ac], edx
jmp 0x488d49
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4f6a70], 0
jne 0x488e1e
mov eax, dword [0x4e0878]
cmp eax, 0x3e8
je 0x488e1e
mov ecx, dword [ebp - 0x2518]
test cl, cl
jne 0x488e1e
cmp dword [eax*4 + 0x4e06f8], 0x41f
jne 0x488e1e
lea eax, [ebp - 0x25fc]
mov dword [ebp - 0x25fc], 4
push eax
push 0
push 0x104b
push dword [ebp - 0x259c]
mov dword [ebp - 0x25f8], 1
mov dword [ebp - 0x25f4], 0
call esi
test eax, eax
je 0x488e1e
lea ecx, [ecx]
cmp byte [0x4e087c], 0
mov eax, dword [ebp - 0x25dc]
je 0x488de1
movsd xmm0, qword [edi + 0x510]
comisd xmm0, xmmword [eax + 0x510]
jmp 0x488df1
movsd xmm0, qword [eax + 0x510]
comisd xmm0, xmmword [edi + 0x510]
ja 0x488e17
inc dword [ebp - 0x25f8]
mov edi, eax
lea eax, [ebp - 0x25fc]
push eax
push 0
push 0x104b
push dword [ebp - 0x259c]
call esi
test eax, eax
jne 0x488dc0
jmp 0x488e1e
mov byte [ebp - 0x2518], 1
mov esi, dword [ebp - 0x2538]
mov eax, esi
mov edi, dword [ebp - 0x2534]
or eax, edi
je 0x488e82
mov ecx, dword [ebp - 0x2548]
sub ecx, dword [0x4f6a78]
mov edx, dword [ebp - 0x2544]
sbb edx, dword [0x4f6a7c]
call fcn.004939cf
cvtsd2ss xmm0, xmm0
mov edx, edi
mov ecx, esi
mulss xmm0, dword [0x4bac0c]
movss dword [ebp - 0x2600], xmm0
call fcn.004939cf
movss xmm1, dword [ebp - 0x2600]
cvtsd2ss xmm0, xmm0
divss xmm1, xmm0
movss dword [ebp - 0x2600], xmm1
mov eax, dword [ebp - 0x2548]
movsd xmm3, qword [ebp - 0x2590]
mov dword [0x4f6a78], eax
mov eax, dword [ebp - 0x2544]
mov dword [0x4f6a7c], eax
lea eax, [ebp - 0x2590]
push eax
lea eax, [ebp - 0x2690]
movsd qword [ebp - 0x1c90], xmm3
push eax
mov eax, dword [ebp - 0x2568]
push 0
push eax
mov eax, dword [ebp - 0x2570]
push eax
call fcn.00482610
mov eax, dword [ebp - 0x2564]
add esp, 0x14
fstp qword [ebp - 0x1c80]
push 0
push 0x400
push eax
mov eax, dword [ebp - 0x2530]
push eax
call fcn.00493cf0
mov ecx, eax
call fcn.004939cf
divsd xmm0, qword [ebp - 0x2590]
mov eax, dword [ebp - 0x257c]
mov dword [0x4f6870], eax
mov eax, dword [ebp - 0x253c]
mov dword [0x4f6874], eax
mov eax, dword [ebp - 0x25b0]
movsd xmm1, qword [0x4ba8c0]
mulsd xmm0, xmm1
movsd qword [ebp - 0x1c70], xmm0
test eax, eax
je 0x489091
movapd xmm0, xmm1
xorps xmm1, xmm1
subsd xmm0, qword [ebp - 0x2610]
comisd xmm1, xmm0
movsd qword [ebp - 0x2590], xmm0
jbe 0x488f5a
movsd qword [ebp - 0x2590], xmm1
mov dword [ebp - 0x2678], eax
lea eax, [ebp - 0x2680]
push eax
push 0xffffffffffffffff
push 0x1053
push dword [ebp - 0x259c]
mov dword [ebp - 0x2680], 1
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x25b0]
movsd xmm0, qword [ebp - 0x2590]
mov dword [ebp - 0x25f8], eax
ucomisd xmm0, qword [ecx + 0x510]
lahf
test ah, 0x44
jnp 0x488faa
mov al, 1
jmp 0x488fac
xor al, al
movsd qword [ecx + 0x510], xmm0
push dword [ebp - 0x25f8]
movzx eax, al
push 0x41f
push dword [0x4e5184]
push eax
call fcn.0044bc90
mov ecx, dword [ebp - 0x25b0]
add esp, 0x10
or byte [ebp - 0x2518], al
mov byte [ebp - 0x2525], 1
movsd xmm0, qword [ecx + 0x520]
addsd xmm0, qword [ebp - 0x2590]
ucomisd xmm0, qword [ecx + 0x520]
lahf
test ah, 0x44
jp 0x489009
mov byte [ebp - 0x2525], 0
movsd qword [ecx + 0x520], xmm0
push dword [ebp - 0x25f8]
push 0x665
push dword [0x4e5184]
push 1
call fcn.0044bc90
push dword [ebp - 0x25f8]
or byte [ebp - 0x2518], al
movzx eax, byte [ebp - 0x2525]
push 0x4a7
push dword [0x4e5184]
push eax
call fcn.0044bc90
movsd xmm0, qword [ebp - 0x2590]
add esp, 0x20
mov ecx, dword [ebp - 0x25b0]
or byte [ebp - 0x2518], al
push 0
sub esp, 0x10
movsd qword [esp + 8], xmm0
xorps xmm0, xmm0
movsd qword [esp], xmm0
push dword [0x4f686c]
push dword [0x4f6868]
push dword [ecx + 0x55c]
call fcn.0043cb30
add esp, 0x20
cmp byte [ebp - 0x2518], 0
jne 0x4890e6
mov eax, dword [ebp - 0x2598]
test eax, eax
je 0x4890e6
push 0
push 0
push 0x1004
push dword [0x4e5184]
call dword [sym.imp.USER32.dll_SendMessageW]
mov edi, eax
xor esi, esi
test edi, edi
jle 0x4890da
push 0xffffffffffffffff
push esi
push 0x7eb
push dword [0x4e5180]
call dword [sym.imp.USER32.dll_PostMessageW]
inc esi
cmp esi, edi
jl 0x4890c1
mov edi, dword [ebp - 0x2534]
mov esi, dword [ebp - 0x2538]
movsd xmm0, qword [0x4ba8c0]
movsd xmm1, qword [ebp - 0x2610]
comisd xmm1, xmm0
ja 0x489100
movsd xmm0, xmm1
lea eax, [ebp - 0x2690]
movsd qword [ebp - 0x1c98], xmm0
push eax
lea eax, [ebp - 0x2688]
push eax
lea eax, [ebp - 0x1c98]
push eax
push dword [0x4e5194]
call fcn.0048b550
mov ecx, dword [ebp - 0x25ac]
add esp, 0x10
test ecx, ecx
je 0x4891ca
cmp byte [0x4e45b8], 0
mov eax, dword [ecx + 0x44]
movsd xmm0, qword [ebp - 0x25b8]
je 0x489185
test eax, eax
jle 0x489173
push eax
push dword [ecx + 0x3c]
lea eax, [ebp - 0x1448]
sub esp, 8
movsd qword [esp], xmm0
push 0x4bab68
push eax
call fcn.0043c580
add esp, 0x18
jmp 0x4891ca
push dword [ecx + 0x3c]
sub esp, 8
movsd qword [esp], xmm0
push 0x4c1f94
jmp 0x4891bb
test eax, eax
jle 0x4891ab
push eax
push dword [ecx + 0x3c]
lea eax, [ebp - 0x1448]
sub esp, 8
movsd qword [esp], xmm0
push 0x4bab88
push eax
call fcn.0043c580
add esp, 0x18
jmp 0x4891ca
push dword [ecx + 0x3c]
sub esp, 8
movsd qword [esp], xmm0
push 0x4c1fb0
lea eax, [ebp - 0x1448]
push eax
call fcn.0043c580
add esp, 0x14
movss xmm1, dword [ebp - 0x2600]
lea eax, [ebp - 0x1448]
push eax
cvtps2pd xmm0, xmm1
sub esp, 0x10
movsd qword [esp + 8], xmm0
movsd xmm0, qword [ebp - 0x1c98]
movsd qword [esp], xmm0
push dword [0x4f686c]
push dword [0x4f6868]
push dword [0x4f6854]
call fcn.0043cb30
add esp, 0x20
cmp dword [0x4dfc88], 0
je 0x489296
push dword [0x4f6860]
push dword [0x4f685c]
push dword [0x4f684c]
push dword [ebp - 0x2624]
push dword [0x4f6858]
push 0
push dword [0x4e523c]
push edi
push esi
call fcn.00493cf0
push edx
push eax
push dword [0x4f686c]
push dword [0x4f6868]
call fcn.0043f4b0
movsd xmm0, qword [ebp - 0x2668]
add esp, 0x1c
fstp dword [ebp - 0x25c4]
movsd qword [esp], xmm0
movss xmm0, dword [ebp - 0x25c4]
push dword [ebp - 0x2624]
cvtps2pd xmm0, xmm0
sub esp, 8
movsd qword [esp], xmm0
push dword [0x4f6858]
call fcn.0048ae90
add esp, 0x18
cmp dword [0x4f6a04], 0
je 0x4892ae
push 0x4f68c8
mov ecx, 0x4f6a00
call fcn.00440000
cmp dword [0x4f6a1c], 0
je 0x4892c6
push 0x4f6930
mov ecx, 0x4f6a18
call fcn.00440000
cmp dword [0x4f6a34], 0
je 0x4892de
push 0x4f6998
mov ecx, 0x4f6a30
call fcn.00440000
push 0xfffffffffffffffe
push 0x41f
push dword [0x4e5184]
push 1
call fcn.0044bc90
push 0xfffffffffffffffe
push 0x424
push dword [0x4e5184]
push 1
call fcn.0044bc90
push 0xfffffffffffffffe
push 0x427
push dword [0x4e5184]
push 1
call fcn.0044bc90
push 0xfffffffffffffffe
push 0x672
push dword [0x4e5184]
push 1
call fcn.0044bc90
movsd xmm0, qword [ebp - 0x25b8]
add esp, 0x38
mov ecx, dword [ebp - 0x25ac]
movsd qword [esp], xmm0
movsd xmm0, qword [ebp - 0x1c98]
push ecx
sub esp, 8
movsd qword [esp], xmm0
push dword [0x4f6854]
call fcn.0048ae90
movsd xmm0, qword [ebp - 0x2688]
add esp, 0x10
movsd qword [esp], xmm0
push dword [0x4f6850]
call fcn.0048ade0
movsd xmm0, qword [ebp - 0x2690]
add esp, 4
movsd qword [esp], xmm0
push dword [0x4f6864]
call fcn.0048b4a0
mov eax, dword [ebp - 0x2518]
add esp, 0xc
cmp byte [ebx + 0xc], 0
mov ecx, 1
movzx eax, al
cmovne eax, ecx
cmp dword [0x4dc400], 0
mov dword [ebp - 0x25c4], eax
je 0x4894da
cmp dword [0x4d9438], 0xffffffff
je 0x48949c
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x1004
push dword [0x4e5184]
mov dword [ebp - 0x26c4], 0
mov dword [ebp - 0x26c8], 4
mov dword [ebp - 0x26c0], 0
call esi
cmp dword [ebp - 0x26c4], eax
jge 0x4894ca
nop
lea eax, [ebp - 0x26c8]
push eax
push 0
push 0x104b
push dword [0x4e5184]
call esi
mov eax, dword [ebp - 0x26a8]
mov eax, dword [eax + 0x44]
cmp eax, dword [0x4d9438]
je 0x48946c
inc dword [ebp - 0x26c4]
push 0
push 0
push 0x1004
push dword [0x4e5184]
mov dword [ebp - 0x26c8], 4
mov dword [ebp - 0x26c0], 0
call esi
cmp dword [ebp - 0x26c4], eax
jl 0x489410
jmp 0x4894ca
lea eax, [ebp - 0x26fc]
mov dword [ebp - 0x26ec], 3
push eax
push dword [ebp - 0x26c4]
mov dword [ebp - 0x26f0], 3
push 0x102b
push dword [0x4e5184]
call esi
jmp 0x4894ca
lea eax, [ebp - 0x26fc]
mov dword [ebp - 0x26ec], 3
push eax
push 0
push 0x102b
push dword [0x4e5184]
mov dword [ebp - 0x26f0], 3
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [ebp - 0x25c4]
mov dword [0x4dc400], 0
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0048fc6c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret