Function at 0x48c299
Capabilities:
Check for unmoving mouse cursor
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x134
push ebx
mov ebx, ecx
mov byte [esp + 0x17], 0
push esi
push edi
mov dword [esp + 0x34], ebx
cmp byte [ebx + 0x64], 0
mov dword [esp + 0x20], 0x4009
je 0x48c521
mov esi, dword [ebx + 0x34]
xor ecx, ecx
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x90], ecx
mov dword [esp + 0x94], ecx
test esi, esi
je 0x48c521
mov edi, dword [ebp + 0x24]
mov ebx, dword [ebp + 0x10]
jmp 0x48c2f9
mov edx, dword [esi + 4]
test edx, edx
je 0x48c32b
push dword [ebp + 0x20]
mov eax, dword [edx]
lea ecx, [esp + 0x8c]
push ecx
mov ecx, dword [ebp + 0x14]
push dword [ecx]
mov ecx, dword [ebp + 0xc]
push dword [ebx]
push dword [ecx]
push edx
call dword [eax + 0x74]
mov ecx, dword [esp + 0x88]
test eax, eax
jns 0x48c32b
mov byte [edi], 0
test cx, cx
je 0x48c513
xor edx, edx
mov byte [esp + 0xe8], 0
mov word [esp + 0xd8], dx
lea eax, [esp + 0x88]
cmp cx, 3
jne 0x48c36d
mov eax, dword [esp + 0x90]
mov dword [esp + 0xd4], eax
mov dword [esp + 0xe9], edx
jmp 0x48c4e2
mov edx, 0x4003
cmp cx, dx
jne 0x48c397
mov eax, dword [esp + 0x90]
mov eax, dword [eax]
mov dword [esp + 0xd4], eax
mov dword [esp + 0xe9], 0
jmp 0x48c4e2
mov dword [esp + 0xd4], 0
cmp cx, 0xa
jne 0x48c3d1
cmp dword [esp + 0x90], 0x80020004
jne 0x48c45f
mov byte [esp + 0xe8], 1
mov dword [esp + 0xe9], 0x80020005
jmp 0x48c4e2
cmp cx, 9
je 0x48c3e1
mov edx, 0x4009
cmp cx, dx
jne 0x48c45f
test ecx, 0x4000
je 0x48c3f4
mov eax, dword [esp + 0x90]
mov edx, dword [eax]
jmp 0x48c3fb
mov edx, dword [esp + 0x90]
test edx, edx
je 0x48c4d7
push 0
push 0
lea ecx, [esp + 0xe0]
xor eax, eax
push ecx
lea ecx, [esp + 0x84]
mov dword [esp + 0x84], eax
push ecx
push 3
push 0
push 0x4cd4e0
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov eax, dword [edx]
push 0
push edx
call dword [eax + 0x18]
mov dword [esp + 0xe9], eax
test eax, eax
js 0x48c4ce
mov ecx, dword [esp + 0x88]
lea eax, [esp + 0xd8]
movzx edx, word [eax]
cmp edx, 1
jne 0x48c474
mov dword [esp + 0xe9], 0x800a005e
jmp 0x48c4e2
xor ecx, ecx
mov dword [esp + 0x60], ecx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], ecx
mov ecx, 0x400c
cmp dx, cx
jne 0x48c498
mov eax, dword [eax + 8]
cmp word [eax], cx
je 0x48c490
push 3
push 2
push 0x400
push eax
lea eax, [esp + 0x70]
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayPtrOfIndex]
mov dword [esp + 0xe9], eax
test eax, eax
js 0x48c4ce
mov eax, dword [esp + 0x68]
mov dword [esp + 0xd4], eax
mov dword [esp + 0xe9], 0
mov ecx, dword [esp + 0x88]
jmp 0x48c4e2
mov dword [esp + 0xe9], 0x800a005b
cmp word [esp + 0xd8], 0
mov edx, dword [ebp + 0x18]
mov eax, dword [esp + 0xd4]
mov byte [esp + 0x1f], 1
mov dword [edx], eax
je 0x48c513
lea eax, [esp + 0xd8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [esp + 0x88]
mov esi, dword [esi]
test esi, esi
jne 0x48c2f9
mov ebx, dword [esp + 0x34]
cmp byte [ebp + 0x28], 0
mov ecx, dword [sym.imp.USER32.dll_GetKeyState]
jne case.0x48c555.258
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
cmp eax, 0x201
ja case.0x48c555.258
je 0x48cbdb
sub eax, 0x100
cmp eax, 5
ja case.0x48c555.258
jmp dword [eax*4 + 0x48c281]
mov eax, dword [ebx + 0x2c]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
mov esi, dword [eax + 0x2c]
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x50], esi
push dword [eax]
push 0x87
push dword [ebp + 8]
call edi
mov dword [esp + 0x28], eax
test al, 4
jne 0x48ca67
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
lea edx, [ecx - 9]
cmp edx, 0x22
ja case.0x48c5a1.10
movzx eax, byte [edx + 0x48c25d]
jmp dword [eax*4 + 0x48c24d]
mov eax, dword [sym.imp.USER32.dll_GetKeyState]
mov edi, dword [esi + 0x28]
push 0x10
call eax
movzx ecx, ax
shr ecx, 0xf
and ecx, 0xffffff01
mov dword [esp + 0x38], ecx
jmp 0x48c5c9
mov al, byte [esi + 0x52]
mov byte [esp + 0x33], al
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
mov byte [esp + 0xad], 1
mov byte [esp + 0xac], cl
test edi, edi
je 0x48c658
push 0
mov edx, str.TabStop
mov ecx, edi
call fcn.0048bf51
test eax, eax
je 0x48c658
mov eax, dword [edi + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
cmp byte [eax + 0x65], 0
je 0x48c658
push SysReAllocString
mov edx, str.TabIndex
mov ecx, edi
call fcn.0048bf51
mov dword [esp + 0x98], eax
jmp 0x48c663
mov dword [esp + 0x98], VariantCopyInd
mov edx, dword [esi + 0x18]
lea ecx, [esp + 0x98]
call fcn.0048be28
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x48], eax
test eax, eax
jne 0x48c69c
cmp byte [esp + 0x33], al
setne al
dec eax
and eax, dword [esp + 0xa4]
mov dword [esp + 0x48], eax
test eax, eax
je case.0x48c5a1.10
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x5c], 0
mov byte [esp + 0x28], 0
mov eax, dword [ecx + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
mov eax, dword [eax + 0x3c]
mov dword [esp + 0x5c], eax
test eax, eax
jne 0x48c6fc
lea edx, [esp + 0x40]
mov dword [esp + 0x40], eax
mov eax, dword [ecx]
push edx
push 0x4d0bd4
push ecx
call dword [eax]
test eax, eax
js 0x48c6fc
mov ecx, dword [esp + 0x40]
test ecx, ecx
je 0x48c6fc
mov eax, dword [ecx]
lea edx, [esp + 0x5c]
push edx
push ecx
mov byte [esp + 0x30], 1
call dword [eax + 0xc]
mov eax, dword [esp + 0x40]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [esp + 0x5c], 0
mov esi, dword [esp + 0x48]
mov edi, dword [esi + 0xc]
jne 0x48c717
mov esi, dword [esp + 0x4c]
mov ecx, dword [esp + 0x38]
jmp 0x48c5c9
mov eax, dword [edi + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
cmp byte [eax + 0x5e], 0
je 0x48c834
lea edx, [esp + 0x74]
mov dword [esp + 0x74], 0
mov ecx, edi
call fcn.0048bd93
cmp dword [esp + 0x74], 0
jne 0x48c834
mov eax, dword [esi + 0xc]
mov edx, dword [eax + 0x28]
mov eax, dword [edx + 0x64]
test eax, eax
je 0x48c7b4
mov ecx, dword [eax + 0x2c]
test ecx, ecx
je 0x48c7b4
mov eax, dword [edx + 0x68]
test eax, eax
jne 0x48c76d
mov eax, dword [ecx + 0x18]
test eax, eax
je 0x48c7b4
mov esi, dword [eax + 0x30]
test esi, esi
je 0x48c7b0
jmp 0x48c779
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
test eax, eax
je 0x48c7aa
cmp byte [eax + 0x5e], 0
je 0x48c7aa
lea edx, [esp + 0x70]
mov dword [esp + 0x70], 0
call fcn.0048bd93
cmp dword [esp + 0x70], 0
jne 0x48c7b9
mov esi, dword [esi]
test esi, esi
jne 0x48c779
mov esi, dword [esp + 0x48]
mov edi, dword [esi + 0xc]
jmp 0x48c7d7
cmp dword [esi + 0xc], 0
mov edi, dword [esp + 0x48]
mov edi, dword [edi + 0xc]
je 0x48c7d3
mov esi, dword [esp + 0x4c]
mov ecx, dword [esp + 0x38]
jmp 0x48c5c9
mov esi, dword [esp + 0x48]
push 0
push 0
push 0
lea ecx, [esp + 0x84]
mov dword [esp + 0x74], 0xffffffff
push ecx
push 4
mov eax, 3
mov dword [esp + 0x94], 1
mov word [esp + 0x74], ax
lea eax, [esp + 0x74]
push 0
push 0x4cd4e0
mov dword [esp + 0x94], eax
mov eax, dword [edi]
push 0
push edi
mov dword [esp + 0xa8], 1
mov dword [esp + 0xa0], 0x4a01ac
call dword [eax + 0x18]
mov ecx, dword [esi + 0xc]
mov edx, str.CausesValidation
push 0
call fcn.0048bf51
test eax, eax
je 0x48c866
mov eax, dword [esi + 0xc]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax + 0x64]
mov ecx, dword [ecx + 0x80]
call fcn.0048bcd3
test al, al
je 0x48c866
mov dl, 1
jmp 0x48ce19
mov eax, dword [ebp + 0x10]
mov edx, esi
mov ebx, dword [esp + 0x4c]
mov ecx, ebx
push dword [eax]
push dword [esp + 0x2c]
push dword [esp + 0x64]
call fcn.0048bbaf
add esp, 0xc
cmp dword [0x4a0180], 0
je 0x48cbc7
push 0
push 3
push 0x128
push dword [ebx + 0x3c]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24
cmp byte [ebx + 0x63], 0
jne 0x48ca67
test byte [esp + 0x28], 1
jne 0x48ca67
cmp ecx, 0x25
je 0x48c8d9
cmp ecx, 0x26
je 0x48c8d9
xor al, al
jmp 0x48c8db
mov al, 1
mov esi, dword [esi + 0x28]
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
mov byte [esp + 0xad], 0
mov byte [esp + 0xac], al
test esi, esi
je 0x48c95e
push 0
mov edx, str.TabStop
mov ecx, esi
call fcn.0048bf51
test eax, eax
je 0x48c95e
mov eax, dword [esi + 0x28]
lea edi, [esi + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
cmp byte [eax + 0x65], 0
je 0x48c95e
push SysReAllocString
mov edx, str.TabIndex
mov ecx, esi
call fcn.0048bf51
mov dword [esp + 0x98], eax
jmp 0x48c970
mov dword [esp + 0x98], VariantCopyInd
lea edi, [esi + 0x28]
test esi, esi
je 0x48c990
mov edx, dword [edi]
mov eax, dword [edx + 0x64]
test eax, eax
je 0x48c98c
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x48c98c
mov edx, dword [edx + 0x68]
test edx, edx
jne 0x48c997
mov edx, dword [eax + 0x18]
jmp 0x48c997
xor edx, edx
jmp 0x48c997
mov edx, dword [esp + 0x4c]
mov edx, dword [edx + 0x18]
lea ecx, [esp + 0x98]
call fcn.0048be28
mov esi, dword [esp + 0xa8]
test esi, esi
jne 0x48c9bd
mov esi, dword [esp + 0xa4]
test esi, esi
je 0x48ca67
mov ecx, dword [esi + 0xc]
mov byte [esp + 0x28], 0
mov eax, dword [ecx + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
mov edi, dword [eax + 0x3c]
mov dword [esp + 0x5c], edi
test edi, edi
jne 0x48ca1d
lea edx, [esp + 0x40]
mov dword [esp + 0x40], edi
mov eax, dword [ecx]
push edx
push 0x4d0bd4
push ecx
call dword [eax]
test eax, eax
js 0x48ca15
mov ecx, dword [esp + 0x40]
test ecx, ecx
je 0x48ca15
mov eax, dword [ecx]
lea edx, [esp + 0x5c]
push edx
push ecx
mov byte [esp + 0x30], 1
call dword [eax + 0xc]
mov eax, dword [esp + 0x40]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov edi, dword [esp + 0x5c]
test edi, edi
je 0x48ca67
mov ecx, dword [esi + 0xc]
mov edx, str.CausesValidation
push 0
call fcn.0048bf51
test eax, eax
je 0x48ca4f
mov eax, dword [esi + 0xc]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax + 0x64]
mov ecx, dword [ecx + 0x80]
call fcn.0048bcd3
test al, al
je 0x48ca4f
mov dl, 1
jmp 0x48ce19
mov eax, dword [ebp + 0x10]
mov edx, esi
mov ecx, dword [esp + 0x4c]
push dword [eax]
push dword [esp + 0x2c]
push edi
call fcn.0048bbaf
add esp, 0xc
mov edx, dword [ebp + 8]
mov esi, dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [sym.imp.USER32.dll_GetKeyState]
mov edi, dword [ebp + 0x10]
cmp byte [esp + 0x1f], 0
jne case.0x48d65d.523
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
cmp eax, 0x100
ja 0x48d333
je case.0x48d352.260
dec eax
cmp eax, 0x83
ja case.0x48d65d.523
movzx eax, byte [eax + 0x48c1c9]
jmp dword [eax*4 + 0x48c19d]
call dword [sym.imp.USER32.dll_GetFocus]
push 0
push 0
mov esi, eax
push 0x87
push esi
call edi
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x4c]
push esi
push dword [eax + 0x3c]
call dword [sym.imp.USER32.dll_IsChild]
test eax, eax
je 0x48ca67
test byte [esp + 0x28], 0x30
je 0x48ca67
push 0
push 0
push 0xf5
push esi
call edi
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24
mov edx, dword [ebp + 0xc]
mov ecx, 0x2c
mov eax, ebx
mov eax, dword [ecx + eax]
mov ecx, dword [eax + 0x2c]
test ecx, ecx
je 0x48ca67
cmp byte [ecx + 0x52], 0
mov edi, dword [ebp + 0x10]
je 0x48ccdb
mov eax, dword [edx]
mov edx, dword [ebp + 8]
mov dword [esp + 0x104], eax
mov eax, dword [edi]
mov dword [esp + 0x108], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], 0
mov eax, dword [eax]
mov dword [esp + 0x100], edx
mov dword [esp + 0x10c], eax
mov dword [esp + 0x28], 0
mov eax, dword [ecx + 0x18]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
mov esi, dword [eax + 0x34]
test esi, esi
je 0x48ccde
lea esp, [esp]
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x48cbb6
mov eax, dword [ecx]
lea edx, [esp + 0x28]
push edx
lea edx, [esp + 0x104]
push edx
push ecx
call dword [eax + 0xb0]
mov esi, dword [esi]
test esi, esi
jne 0x48cb99
cmp word [esp + 0x28], si
je 0x48ccdb
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24
mov ecx, dword [ebx + 0x2c]
mov edx, str.CausesValidation
push 0
mov edi, dword [ecx + 0x2c]
mov ecx, dword [ecx + 0x24]
call fcn.0048bf51
test eax, eax
je 0x48cc06
mov ecx, ebx
call fcn.0048bcd3
test al, al
je 0x48cc06
mov dl, 1
jmp 0x48ce19
push 0xffffffffffffffe0
push dword [ebp + 8]
xor esi, esi
call dword [sym.imp.USER32.dll_GetClassWord]
movzx ecx, ax
mov ax, word [0x4a017c]
cmp cx, ax
jne 0x48cc26
test ax, ax
jne 0x48cc36
mov ax, word [0x4a0178]
cmp cx, ax
jne 0x48cc43
test ax, ax
je 0x48cc43
push 0xffffffffffffffeb
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov esi, eax
mov edi, dword [edi + 0x3c]
mov edx, dword [ebp + 8]
cmp edi, edx
je 0x48cc93
push 0
push 0
push 0x87
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0x48e7c7
push edi
mov dword [esp + 0x34], eax
call dword [sym.imp.USER32.dll_EnumChildWindows]
mov eax, dword [esp + 0x28]
test eax, 0x2000
je 0x48cc90
test al, 0x30
je 0x48cc90
push 1
push 1
push 0xf4
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [ebp + 8]
test esi, esi
je 0x48ca6a
cmp dword [esi + 0x3c], edx
jne 0x48ca6a
mov ecx, dword [esi + 0x2c]
mov edx, str.CanGetFocus
push 0
mov ecx, dword [ecx + 0x24]
call fcn.0048bf51
mov esi, dword [sym.imp.USER32.dll_SetFocus]
test eax, eax
je 0x48ccc5
push dword [ebp + 8]
call esi
mov edx, dword [ebp + 8]
jmp 0x48ca70
mov edx, dword [ebp + 8]
mov esi, dword [sym.imp.USER32.dll_SetFocus]
jmp 0x48ca76
mov edx, dword [ebp + 8]
mov ecx, dword [sym.imp.USER32.dll_GetKeyState]
mov esi, dword [sym.imp.USER32.dll_SetFocus]
jmp 0x48ca79
call fcn.0049998e
mov ecx, dword [ebx + 0x2c]
mov esi, eax
mov eax, dword [ecx + 0x2c]
test eax, eax
je case.0x48d65d.523
mov eax, dword [eax + 0x18]
cmp eax, dword [ecx + 0x24]
je case.0x48d65d.523
cmp byte [esi + 0x122], 0
jne case.0x48d65d.523
cmp byte [esi + 0x123], 0
jne case.0x48d65d.523
mov edi, dword [ebp + 8]
lea eax, [esp + 0x130]
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea eax, [esp + 0x134]
push eax
push edi
call dword [sym.imp.USER32.dll_GetParent]
push eax
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov al, byte [esi + 0x123]
mov byte [esi + 0x123], 1
cmp dword [ebx + 0xac], 0
mov byte [esp + 0x33], al
jne 0x48ce0f
mov ecx, dword [ebx + 0x2c]
fld qword [0x4cb070]
mov eax, dword [ecx + 0x2c]
mov eax, dword [eax + 0x40]
mov dword [esp + 0x34], eax
cmp eax, 0x60
jne 0x48cd97
fstp st(0)
fild dword [esp + 0x130]
jmp 0x48cdb2
fild dword [esp + 0x130]
fstp qword [esp + 0x20]
fmul qword [esp + 0x20]
fild dword [esp + 0x34]
fstp qword [esp + 0x20]
fdiv qword [esp + 0x20]
mov ecx, dword [ecx + 0x24]
sub esp, 8
mov edx, str.PixelsLeft
fstp qword [esp]
call fcn.0048bb1f
mov ecx, dword [ebx + 0x2c]
fild dword [esp + 0x134]
mov eax, dword [ecx + 0x2c]
mov eax, dword [eax + 0x40]
mov dword [esp + 0x34], eax
cmp eax, 0x60
je 0x48cdf8
fstp qword [esp + 0x50]
fld qword [esp + 0x50]
fmul qword [0x4cb070]
fild dword [esp + 0x34]
fstp qword [esp + 0x50]
fdiv qword [esp + 0x50]
mov ecx, dword [ecx + 0x24]
sub esp, 8
mov edx, str.PixelsTop
fstp qword [esp]
call fcn.0048bb1f
mov al, byte [esp + 0x33]
mov byte [esi + 0x123], al
mov dl, byte [esp + 0x1f]
mov ebx, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x1c]
test ecx, ecx
je 0x48ce39
mov eax, dword [ecx]
test eax, eax
je 0x48ce39
mov eax, dword [eax + 0x44]
cmp eax, dword [ecx + 4]
je 0x48ce39
mov dword [ebx], 0
mov dl, 1
mov al, dl
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24
call fcn.0049998e
mov ecx, dword [ebx + 0x2c]
mov esi, eax
mov eax, dword [ecx + 0x2c]
test eax, eax
je 0x48cfa1
mov eax, dword [eax + 0x18]
cmp eax, dword [ecx + 0x24]
je 0x48cfa1
cmp byte [esi + 0x122], 0
jne 0x48cfa1
cmp byte [esi + 0x123], 0
jne 0x48cfa1
mov edi, dword [ebp + 8]
lea eax, [esp + 0xf0]
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea eax, [esp + 0xf4]
push eax
push edi
call dword [sym.imp.USER32.dll_GetParent]
push eax
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov al, byte [esi + 0x123]
mov byte [esi + 0x123], 1
cmp dword [ebx + 0xac], 0
mov byte [esp + 0x33], al
jne 0x48cf9b
mov ecx, dword [ebx + 0x2c]
fld qword [0x4cb070]
mov eax, dword [ecx + 0x2c]
mov eax, dword [eax + 0x40]
cmp eax, 0x60
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0xf8]
jne 0x48cefb
sub eax, dword [esp + 0xf0]
fstp st(0)
mov dword [esp + 0x38], eax
fild dword [esp + 0x38]
jmp 0x48cf1e
sub eax, dword [esp + 0xf0]
mov dword [esp + 0x20], eax
fild dword [esp + 0x20]
fstp qword [esp + 0x20]
fmul qword [esp + 0x20]
fild dword [esp + 0x34]
fstp qword [esp + 0x20]
fdiv qword [esp + 0x20]
mov ecx, dword [ecx + 0x24]
sub esp, 8
mov edx, str.PixelsWidth
fstp qword [esp]
call fcn.0048bb1f
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ecx + 0x2c]
mov eax, dword [eax + 0x40]
cmp eax, 0x60
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0xfc]
jne 0x48cf5b
sub eax, dword [esp + 0xf4]
mov dword [esp + 0x20], eax
fild dword [esp + 0x20]
jmp 0x48cf84
sub eax, dword [esp + 0xf4]
mov dword [esp + 0x20], eax
fild dword [esp + 0x20]
fstp qword [esp + 0x50]
fld qword [esp + 0x50]
fmul qword [0x4cb070]
fild dword [esp + 0x34]
fstp qword [esp + 0x50]
fdiv qword [esp + 0x50]
mov ecx, dword [ecx + 0x24]
sub esp, 8
mov edx, str.PixelsHeight
fstp qword [esp]
call fcn.0048bb1f
mov al, byte [esp + 0x33]
mov byte [esi + 0x123], al
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ecx + 0x2c]
test eax, eax
je case.0x48d65d.523
mov eax, dword [eax + 0x18]
cmp eax, dword [ecx + 0x24]
je case.0x48d65d.523
mov esi, dword [ebx + 0x34]
test esi, esi
je 0x48cfdc
lea esp, [esp]
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x48cfd6
mov eax, dword [ecx]
push ecx
call dword [eax + 0x64]
mov esi, dword [esi]
test esi, esi
jne 0x48cfc9
mov esi, dword [ebx + 0x34]
test esi, esi
je case.0x48d65d.523
mov edi, edi
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x48cff6
mov eax, dword [ecx]
push ecx
call dword [eax + 0x68]
mov esi, dword [esi]
test esi, esi
jne 0x48cfe9
jmp case.0x48d65d.523
mov eax, dword [ebp + 0x14]
mov edi, dword [ebx + 0x2c]
mov edx, dword [eax]
mov dword [esp + 0x20], edx
cmp dword [edx + 4], 2
jne 0x48d059
mov eax, dword [edi + 0x2c]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
mov esi, dword [eax + 0x34]
test esi, esi
je 0x48d0f0
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x48d047
push dword [edx + 8]
mov eax, dword [ecx]
push ecx
call dword [eax + 0xac]
mov edx, dword [esp + 0x20]
mov esi, dword [esi]
test esi, esi
jne 0x48d030
mov ebx, dword [ebp + 0x18]
mov dl, 1
mov dword [ebx], esi
jmp 0x48ce1c
mov edi, dword [edi + 0x24]
cmp dword [edi + 0x30], 0
je 0x48d0bb
mov eax, dword [edx + 0x14]
mov ecx, dword [edx + 0x18]
mov dword [esp + 0x38], eax
lea eax, [esp + 0x38]
mov dword [esp + 0x3c], ecx
push eax
mov eax, dword [edi + 0x28]
mov dword [esp + 0x2c], 0
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
push dword [eax + 0x3c]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebx + 0x2c]
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x40]
push 0
push eax
lea edx, [esp + 0x44]
call fcn.0048ba5b
mov eax, dword [esp + 0x34]
add esp, 0xc
test eax, eax
je 0x48d0bb
mov eax, dword [eax + 0x2c]
mov edi, dword [eax + 0x24]
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
mov esi, dword [eax + 0x34]
test esi, esi
je 0x48d0f0
mov edi, edi
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x48d0ea
mov eax, dword [ecx]
push edi
push ecx
call dword [eax + 0xa8]
mov esi, dword [esi]
test esi, esi
jne 0x48d0d9
mov ebx, dword [ebp + 0x18]
mov dl, 1
mov dword [ebx], 0
jmp 0x48ce1c
mov eax, dword [ebx + 0x2c]
mov ebx, dword [ebp + 0x18]
mov eax, dword [eax + 0x2c]
cmp edx, dword [eax + 0x3c]
je 0x48e2fe
cmp dword [eax + 0xa0], 0
je 0x48e2fe
mov dword [ebx], 0xffffffff
mov dl, 1
jmp 0x48ce1c
mov ecx, dword [ebx + 0x2c]
mov dword [ebx + 0x3c], edx
mov edx, str.VisualStyles
push 0xffffffffffffffff
mov ecx, dword [ecx + 0x24]
call fcn.0048bf51
test eax, eax
jne case.0x48d65d.523
push str.UxTheme.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
test esi, esi
je case.0x48d65d.523
push str.SetWindowTheme
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x4d2168
push 0x4d2168
push dword [ebp + 8]
call eax
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp case.0x48d65d.523
mov esi, dword [ebx + 0x34]
mov edi, dword [edi]
mov dword [esp + 0x28], 0
test esi, esi
je case.0x48d65d.523
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x48d1ad
mov eax, dword [ecx]
lea edx, [esp + 0x28]
push edx
push edi
push ecx
call dword [eax + 0x1c]
mov esi, dword [esi]
test esi, esi
jne 0x48d19a
mov ebx, dword [ebp + 0x18]
cmp word [esp + 0x28], si
je 0x48e2fe
mov dword [ebx], 1
mov dl, 1
jmp 0x48ce1c
mov eax, dword [ebx + 0x2c]
mov esi, dword [ebx + 0x34]
movzx ecx, word [edi]
mov edx, dword [eax + 0x2c]
cmp byte [edx + 0x4b], 0
jne 0x48d221
test esi, esi
je case.0x48d65d.523
test cx, cx
jne 0x48d209
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x48d1fa
mov eax, dword [ecx]
push ecx
call dword [eax + 0x5c]
mov esi, dword [esi]
test esi, esi
jne 0x48d1ed
jmp case.0x48d65d.523
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x48d216
mov eax, dword [ecx]
push ecx
call dword [eax + 0x58]
mov esi, dword [esi]
test esi, esi
jne 0x48d209
jmp case.0x48d65d.523
test cx, cx
setne al
mov byte [edx + 0x4f], al
jmp case.0x48d65d.523
mov eax, dword [ebp + 0x10]
mov edi, dword [ebx + 0xb0]
mov eax, dword [eax]
test eax, eax
je 0x48d244
mov dword [ebx + 0xb0], eax
mov esi, dword [ebx + 0x34]
xor eax, eax
mov dword [esp + 0x28], eax
test esi, esi
je 0x48d26d
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x48d263
mov eax, dword [ecx]
lea edx, [esp + 0x28]
push edx
push ecx
call dword [eax + 0x60]
mov esi, dword [esi]
test esi, esi
jne 0x48d251
mov eax, dword [esp + 0x28]
mov ecx, dword [ebp + 0x10]
cmp dword [ecx], 0
je 0x48d27b
mov dword [ebx + 0xb0], edi
mov ebx, dword [ebp + 0x18]
test ax, ax
je 0x48e2fe
mov dword [ebx], 0
mov dl, 1
jmp 0x48ce1c
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
test eax, eax
je case.0x48d65d.523
mov esi, dword [sym.imp.USER32.dll_PostMessageW]
cmp dword [eax + 0x3c], edx
je 0x48d2c3
push 0
push 0
push 0x406
push edx
call dword [sym.imp.USER32.dll_GetParent]
push eax
call esi
mov edx, dword [ebp + 8]
push 0
push 0
push 0x407
push edx
call esi
jmp case.0x48d65d.523
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
cmp dword [eax + 0x58], 0
je 0x48d2eb
pop edi
pop esi
xor al, al
pop ebx
mov esp, ebp
pop ebp
ret 0x24
test eax, eax
je case.0x48d65d.523
push 0
push dword [edi]
mov edi, dword [sym.imp.USER32.dll_PostMessageW]
push 0x409
push edx
call edi
mov eax, dword [ebx + 0x2c]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 0x2c]
cmp dword [eax + 0x3c], ecx
je case.0x48d65d.523
mov eax, dword [ebp + 0x10]
push ecx
mov esi, dword [eax]
call dword [sym.imp.USER32.dll_GetParent]
push 0
push esi
push 0x408
push eax
call edi
jmp case.0x48d65d.523
cmp eax, 0x200
ja 0x48d637
je 0x48d59f
sub eax, 0x101
cmp eax, 4
ja case.0x48d65d.523
jmp dword [eax*4 + 0x48c189]
movzx eax, byte [edi]
mov dword [esp + 0x40], eax
test eax, eax
je 0x48d45e
push 0x11
call ecx
movsx esi, ax
mov eax, dword [sym.imp.USER32.dll_GetKeyState]
and esi, 0xbfffffff
push 0x10
call eax
movsx edi, ax
shr edi, 1
or edi, esi
push 0x12
shr edi, 1
call dword [sym.imp.USER32.dll_GetKeyState]
mov esi, dword [ebx + 0x34]
cwde
and eax, 0x9fffffff
or eax, edi
shr eax, 0x1d
mov dword [esp + 0x28], eax
test esi, esi
je 0x48d3c6
mov ebx, eax
mov edi, edi
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x48d3bc
mov eax, dword [ecx]
lea edx, [esp + 0x40]
push ebx
push edx
push ecx
call dword [eax + 0x24]
mov esi, dword [esi]
test esi, esi
jne 0x48d3a9
mov ebx, dword [esp + 0x34]
test dword [ebx + 0x6c], 0x2000000
je 0x48d3da
mov ecx, ebx
call fcn.0048ba43
test al, al
je 0x48d457
mov edx, dword [ebx + 0x7c]
cmp edx, 0xffffffff
je 0x48d457
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x24]
mov ecx, dword [eax + 0x18]
movzx eax, word [esp + 0x40]
add ecx, 4
mov dword [esp + 0x38], eax
xor eax, eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x100]
mov dword [esp + 0x60], eax
mov eax, 0x4002
mov word [esp + 0x110], ax
lea eax, [esp + 0x38]
mov dword [esp + 0x118], eax
mov eax, 2
mov word [esp + 0x100], ax
mov eax, dword [esp + 0x28]
mov word [esp + 0x108], ax
lea eax, [esp + 0x60]
push eax
push edx
mov dword [esp + 0x70], 2
call fcn.00496209
movsx eax, word [esp + 0x38]
jmp 0x48d45b
mov eax, dword [esp + 0x40]
mov edi, dword [ebp + 0x10]
mov ebx, dword [ebp + 0x18]
mov dword [edi], eax
test eax, eax
jne 0x48e2fe
mov dword [ebx], eax
mov dl, 1
jmp 0x48ce1c
movzx eax, byte [edi]
mov dword [esp + 0x40], eax
test eax, eax
je 0x48d45e
push 0x11
call ecx
movsx esi, ax
push 0x10
and esi, 0xbfffffff
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edi, ax
shr edi, 1
or edi, esi
push 0x12
shr edi, 1
call dword [sym.imp.USER32.dll_GetKeyState]
mov esi, dword [ebx + 0x34]
cwde
and eax, 0x9fffffff
or eax, edi
shr eax, 0x1d
mov dword [esp + 0x28], eax
test esi, esi
je 0x48d4da
mov ebx, eax
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x48d4d0
mov eax, dword [ecx]
lea edx, [esp + 0x40]
push ebx
push edx
push ecx
call dword [eax + 0x28]
mov esi, dword [esi]
test esi, esi
jne 0x48d4bd
mov ebx, dword [esp + 0x34]
test dword [ebx + 0x6c], 0x2000000
je 0x48d4f2
mov ecx, ebx
call fcn.0048ba43
test al, al
je 0x48d457
mov edx, dword [ebx + 0x80]
jmp 0x48d3dd
mov eax, dword [edi]
and eax, 0xffff
mov dword [esp + 0x40], eax
je 0x48d596
mov esi, dword [ebx + 0x34]
test esi, esi
je 0x48d531
lea esp, [esp]
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x48d52b
mov eax, dword [ecx]
lea edx, [esp + 0x40]
push edx
push ecx
call dword [eax + 0x2c]
mov esi, dword [esi]
test esi, esi
jne 0x48d519
test dword [ebx + 0x6c], 0x2000000
je 0x48d545
mov ecx, ebx
call fcn.0048ba43
test al, al
je 0x48d596
mov edx, dword [ebx + 0x84]
cmp edx, 0xffffffff
je 0x48d596
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x24]
mov ecx, dword [eax + 0x18]
xor eax, eax
mov dword [esp + 0x64], eax
add ecx, 4
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x78]
mov dword [esp + 0x60], eax
mov eax, 0x4002
mov word [esp + 0x78], ax
lea eax, [esp + 0x40]
mov dword [esp + 0x80], eax
lea eax, [esp + 0x60]
push eax
push edx
mov dword [esp + 0x70], 1
call fcn.00496209
mov eax, dword [esp + 0x40]
jmp 0x48d45e
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
cmp dword [eax + 0xa0], 0
je case.0x48d65d.523
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0
push eax
mov dword [esp + 0x30], 0
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [ebx + 0x2c]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ecx, dword [eax + 0x2c]
sub esi, dword [ecx + 0xa8]
mov dword [esp + 0x28], esi
sub edx, dword [ecx + 0xac]
mov dword [esp + 0x2c], edx
cmp byte [ecx + 0x97], 0
jne 0x48d627
test esi, esi
jne 0x48d600
test edx, edx
je 0x48d627
mov eax, dword [ecx + 0x9c]
push 0
push dword [ecx + 0xa4]
add eax, edx
push dword [ecx + 0xa0]
push eax
mov eax, dword [ecx + 0x98]
mov ecx, ebx
add eax, esi
push eax
call fcn.0048eb18
mov ebx, dword [ebp + 0x18]
mov dl, 1
mov dword [ebx], 0
jmp 0x48ce1c
cmp eax, 0x406
ja 0x48da91
je 0x48da33
sub eax, 0x201
cmp eax, 0xd
ja case.0x48d65d.523
movzx eax, byte [eax + 0x48c179]
jmp dword [eax*4 + 0x48c165]
mov byte [ebx + 0x67], 1
jmp case.0x48d65d.523
mov eax, dword [ebx]
lea ecx, [esp + 0xb0]
push ecx
fldz
push ebx
fstp qword [esp + 0xb8]
call dword [eax + 0x14]
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x11
call edi
movsx esi, ax
push 0x10
and esi, 0xbfffffff
call edi
movsx edi, ax
shr edi, 1
or edi, esi
push 0x12
shr edi, 1
call dword [sym.imp.USER32.dll_GetKeyState]
mov esi, dword [ebx + 0x34]
cwde
and eax, 0x9fffffff
mov dword [esp + 0x4c], 0
or eax, edi
shr eax, 0x1d
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov dword [esp + 0x34], eax
test esi, esi
je case.0x48d65d.523
mov edi, edi
mov edi, dword [esi + 4]
test edi, edi
je 0x48d785
mov ecx, dword [ebx + 0x2c]
lea eax, [esp + 0x4c]
mov edx, dword [edi]
push eax
mov eax, dword [ebp + 0x14]
sub esp, 8
movsx eax, word [eax + 2]
mov dword [esp + 0x2c], eax
fild dword [esp + 0x2c]
mov eax, dword [ebp + 0x14]
fstp qword [esp + 0x2c]
fld qword [esp + 0x2c]
fdiv qword [esp + 0xbc]
movsx eax, word [eax]
fmul qword [ecx + 0x68]
fstp dword [esp + 0x2c]
fld dword [esp + 0x2c]
fstp dword [esp + 4]
mov dword [esp + 0x2c], eax
fild dword [esp + 0x2c]
fstp qword [esp + 0x2c]
fld qword [esp + 0x2c]
fdiv qword [esp + 0xbc]
fmul qword [ecx + 0x60]
xor ecx, ecx
cmp dword [esp + 0x40], 0x207
setne cl
xor eax, eax
dec ecx
and ecx, 4
cmp dword [esp + 0x40], 0x204
fstp dword [esp + 0x2c]
fld dword [esp + 0x2c]
setne al
dec eax
and eax, 2
or ecx, eax
xor eax, eax
cmp dword [esp + 0x40], 0x201
fstp dword [esp]
push dword [esp + 0x44]
sete al
or ecx, eax
push ecx
push edi
call dword [edx + 0x40]
mov esi, dword [esi]
test esi, esi
jne 0x48d6d9
mov ebx, dword [ebp + 0x18]
cmp word [esp + 0x4c], si
je 0x48e2fe
mov dword [ebx], esi
mov dl, 1
jmp 0x48ce1c
mov eax, dword [ebx]
lea ecx, [esp + 0x50]
push ecx
fldz
push ebx
fstp qword [esp + 0x58]
call dword [eax + 0x14]
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x11
call edi
movsx esi, ax
push 0x10
and esi, 0xbfffffff
call edi
movsx edi, ax
shr edi, 1
or edi, esi
push 0x12
shr edi, 1
call dword [sym.imp.USER32.dll_GetKeyState]
mov esi, dword [ebx + 0x34]
cwde
and eax, 0x9fffffff
mov dword [esp + 0x48], 0
or eax, edi
shr eax, 0x1d
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov dword [esp + 0x34], eax
test esi, esi
je case.0x48d65d.523
mov edi, dword [esi + 4]
test edi, edi
je 0x48d8b0
mov ecx, dword [ebx + 0x2c]
lea eax, [esp + 0x48]
mov edx, dword [edi]
push eax
mov eax, dword [ebp + 0x14]
sub esp, 8
movsx eax, word [eax + 2]
mov dword [esp + 0x2c], eax
fild dword [esp + 0x2c]
mov eax, dword [ebp + 0x14]
fstp qword [esp + 0x2c]
fld qword [esp + 0x2c]
fdiv qword [esp + 0x5c]
movsx eax, word [eax]
fmul qword [ecx + 0x68]
fstp dword [esp + 0x2c]
fld dword [esp + 0x2c]
fstp dword [esp + 4]
mov dword [esp + 0x2c], eax
fild dword [esp + 0x2c]
fstp qword [esp + 0x2c]
fld qword [esp + 0x2c]
fdiv qword [esp + 0x5c]
fmul qword [ecx + 0x60]
xor ecx, ecx
cmp dword [esp + 0x40], 0x208
setne cl
xor eax, eax
dec ecx
and ecx, 4
cmp dword [esp + 0x40], 0x205
fstp dword [esp + 0x2c]
fld dword [esp + 0x2c]
setne al
dec eax
and eax, 2
or ecx, eax
xor eax, eax
cmp dword [esp + 0x40], 0x202
fstp dword [esp]
push dword [esp + 0x44]
sete al
or ecx, eax
push ecx
push edi
call dword [edx + 0x44]
mov esi, dword [esi]
test esi, esi
jne 0x48d80a
mov ebx, dword [ebp + 0x18]
cmp word [esp + 0x48], si
je 0x48e2fe
mov dword [ebx], esi
mov dl, 1
jmp 0x48ce1c
mov eax, dword [ebx]
lea ecx, [esp + 0x40]
push ecx
fldz
push ebx
fstp qword [esp + 0x48]
call dword [eax + 0x14]
mov eax, dword [edi]
lea esi, [ebx + 0x34]
mov ecx, dword [ebp + 0x14]
lea edx, [esp + 0x28]
mov dword [esp + 0x74], eax
shr eax, 2
mov dword [esp + 0x20], eax
movsx eax, word [ecx]
mov dword [esp + 0x28], eax
movsx eax, word [ecx + 2]
mov ecx, dword [ebx + 0x2c]
mov dword [esp + 0x38], eax
lea eax, [esp + 0x70]
push 0
push eax
lea eax, [esp + 0x40]
mov dword [esp + 0x78], esi
push eax
call fcn.0048ba5b
fild dword [esp + 0x34]
add esp, 0xc
fstp qword [esp + 0x50]
fld qword [esp + 0x50]
fdiv qword [esp + 0x40]
fild dword [esp + 0x38]
fstp qword [esp + 0x50]
fld qword [esp + 0x50]
mov ecx, dword [esp + 0x70]
fdiv qword [esp + 0x40]
cmp ecx, esi
jne 0x48d95e
mov eax, dword [ebx + 0x2c]
fld qword [eax + 0x60]
fmulp st(2)
fxch st(1)
fst qword [esp + 0x50]
fld qword [eax + 0x68]
jmp 0x48d96e
fld qword [0x4cb048]
fmul st(2), st(0)
fxch st(2)
fst qword [esp + 0x50]
fxch st(1)
mov esi, dword [ecx]
fmulp st(2)
fxch st(1)
fst qword [esp + 0xb0]
test esi, esi
je 0x48d9d4
mov ebx, dword [esp + 0x20]
mov edi, dword [esi + 4]
test edi, edi
je 0x48d9bb
mov eax, dword [esp + 0x74]
sub esp, 8
mov edx, dword [edi]
mov ecx, ebx
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
and ecx, 4
fstp dword [esp + 4]
and eax, 3
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
or ecx, eax
fstp dword [esp]
push ecx
push edi
call dword [edx + 0x54]
jmp 0x48d9bf
fstp st(1)
fstp st(0)
mov esi, dword [esi]
fld qword [esp + 0x50]
fld qword [esp + 0xb0]
test esi, esi
jne 0x48d983
mov ebx, dword [esp + 0x34]
test dword [ebx + 0x6c], 0x2000000
fstp st(1)
fstp st(0)
je 0x48d9f0
mov ecx, ebx
call fcn.0048ba43
test al, al
je case.0x48d65d.523
cmp dword [ebx + 0xa0], 0xffffffff
je 0x48e2fb
test dword [ebx + 0x6c], 0x1000
je 0x48da15
mov ecx, ebx
call fcn.0048ba2b
test al, al
je case.0x48d65d.523
push 0
push dword [ebx + 0xa0]
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x24]
mov ecx, dword [eax + 0x18]
add ecx, 4
call fcn.00496209
jmp case.0x48d65d.523
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
test eax, eax
je case.0x48d65d.523
cmp byte [eax + 0x52], 0
je case.0x48d65d.523
cmp byte [eax + 0x53], 0
jne case.0x48d65d.523
mov byte [eax + 0x53], 1
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
mov esi, dword [eax + 0x34]
test esi, esi
je case.0x48d65d.523
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x48da86
mov eax, dword [ecx]
push ecx
call dword [eax + 0x38]
mov esi, dword [esi]
test esi, esi
jne 0x48da79
jmp case.0x48d65d.523
cmp eax, 0x409
ja 0x48dbf0
je 0x48dbc0
sub eax, 0x407
je 0x48db32
sub eax, 1
jne case.0x48d65d.523
mov eax, dword [ebx + 0x2c]
mov ecx, dword [edi]
mov eax, dword [eax + 0x2c]
test eax, eax
je case.0x48d65d.523
cmp byte [eax + 0x52], 0
je case.0x48d65d.523
cmp byte [eax + 0x53], 0
je case.0x48d65d.523
test ecx, ecx
je 0x48daf0
push ecx
push dword [eax + 0x3c]
call dword [sym.imp.USER32.dll_IsChild]
test eax, eax
jne case.0x48d65d.523
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
mov byte [eax + 0x53], 0
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x80]
mov esi, dword [eax + 0x34]
test esi, esi
je case.0x48d65d.523
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x48db27
mov eax, dword [ecx]
push ecx
call dword [eax + 0x3c]
mov esi, dword [esi]
test esi, esi
jne 0x48db1a
jmp case.0x48d65d.523
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax + 0x2c]
test eax, eax
je 0x48db8d
cmp dword [eax + 0x3c], edx
jne 0x48db86
cmp byte [eax + 0x52], 0
je 0x48db6a
inc dword [eax + 0x58]
mov ecx, dword [ebx + 0x2c]
mov ecx, dword [ecx + 0x2c]
call fcn.0048b7f2
mov dl, al
mov eax, dword [ebx + 0x2c]
mov ecx, dword [eax + 0x2c]
dec dword [ecx + 0x58]
test dl, dl
jne case.0x48d65d.523
jmp 0x48db8d
mov ecx, dword [eax + 0x28]
test ecx, ecx
je 0x48db8d
push 0
mov edx, str.hWnd
call fcn.0048bf51
test eax, eax
je 0x48db8d
push eax
call esi
jmp 0x48db8d
mov ecx, ebx
call fcn.0048e839
mov esi, dword [ebx + 0x34]
test esi, esi
je 0x48dbac
jmp 0x48db99
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x48dba6
mov eax, dword [ecx]
push ecx
call dword [eax + 0x30]
mov esi, dword [esi]
test esi, esi
jne 0x48db99
mov eax, dword [ebx + 0x70]
cmp eax, 0xffffffff
je case.0x48d65d.523
push 0
push eax
jmp 0x48da1d
mov esi, dword [ebx + 0x34]
test esi, esi
je 0x48dbdc
mov edi, edi
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x48dbd6
mov eax, dword [ecx]
push ecx
call dword [eax + 0x34]
mov esi, dword [esi]
test esi, esi
jne 0x48dbc9
mov eax, dword [ebx + 0x74]
cmp eax, 0xffffffff
je case.0x48d65d.523
push 0
push eax
jmp 0x48da1d
cmp eax, 0x77ea
jne case.0x48d65d.523
mov edi, dword [edi]
mov esi, dword [ebx + 0x34]
mov dword [esp + 0x38], edi
mov eax, dword [edi + 4]
cmp eax, 0x114
ja 0x48e1d5
je 0x48e19b
sub eax, 0x20
cmp eax, 0xf1
ja case.0x48e1ea.278
movzx eax, byte [eax + 0x48c071]
jmp dword [eax*4 + 0x48c059]
mov ecx, dword [ebx + 0xb4]
test ecx, ecx
je 0x48dcaf
xor eax, eax
cmp ecx, 0x13
setge al
dec eax
and eax, ecx
mov dword [esp + 0x20], eax
jne 0x48dc83
test edx, edx
je 0x48dc83
push 0xfffffffffffffff4
push edx
call dword [sym.imp.USER32.dll_GetClassLongA]
mov esi, eax
mov eax, dword [0x4a0174]
test eax, eax
jne 0x48dc78
push 0x7f00
push eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [0x4a0174], eax
test esi, esi
je 0x48dc83
cmp esi, eax
je 0x48dc83
push esi
jmp 0x48dc94
mov eax, dword [0x4a0188]
mov ecx, dword [esp + 0x20]
mov eax, dword [eax + ecx*4]
test eax, eax
je 0x48dc9a
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov eax, dword [ebp + 0x18]
mov byte [esp + 0x1f], 1
mov dword [eax], 1
mov dword [edi + 0x10], 1
lea eax, [esp + 0x38]
mov dword [esp + 0x38], 0
push eax
mov dword [esp + 0x40], 0
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [esp + 0x38]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebx + 0x2c]
mov ebx, dword [eax + 0x24]
mov dword [esp + 0x20], ebx
mov edx, dword [ebx + 0x30]
test edx, edx
je 0x48dd38
mov ebx, dword [edx + 0xc]
mov ecx, dword [ebx + 0x28]
test ecx, ecx
je 0x48dd2e
mov eax, dword [ecx + 0x64]
mov eax, dword [eax + 0x80]
test eax, eax
je 0x48dd2e
cmp byte [eax + 0x60], 0
je 0x48dd2e
mov esi, dword [ecx + 0x24]
cmp dword [esp + 0x38], esi
jl 0x48dd2e
mov eax, dword [ecx + 0x2c]
add eax, esi
cmp dword [esp + 0x38], eax
jg 0x48dd2e
mov esi, dword [ecx + 0x28]
cmp dword [esp + 0x3c], esi
jl 0x48dd2e
mov eax, dword [ecx + 0x30]
add eax, esi
cmp dword [esp + 0x3c], eax
jle 0x48dd38
mov edx, dword [edx]
test edx, edx
jne 0x48dce9
mov ebx, dword [esp + 0x20]
push 0
mov edx, str.MousePointer
mov ecx, ebx
call fcn.0048bf51
mov esi, eax
test esi, esi
je case.0x48e1ea.278
cmp esi, 0x63
jne 0x48ddea
mov edx, str.MouseIcon
mov byte [esp + 0x1f], 0
mov ecx, ebx
call fcn.0048f1c2
mov esi, eax
test esi, esi
je case.0x48e1ea.278
mov ecx, dword [esi]
lea eax, [esp + 0x40]
push eax
push 0x4d0b50
push esi
mov dword [esp + 0x4c], 0
call dword [ecx]
mov ecx, dword [esp + 0x40]
test ecx, ecx
je 0x48ddd4
mov dword [esp + 0x28], 0
lea edx, [esp + 0x28]
mov eax, dword [ecx]
push edx
push ecx
call dword [eax + 0xc]
mov eax, dword [esp + 0x28]
test eax, eax
je 0x48ddca
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov eax, dword [ebp + 0x18]
mov byte [esp + 0x1f], 1
mov dword [eax], 1
mov dword [edi + 0x10], 1
mov eax, dword [esp + 0x40]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x1f]
mov byte [edi + 0x14], 1
jmp 0x48ce1c
cmp esi, 0x13
jl 0x48de28
mov eax, dword [ebp + 8]
xor esi, esi
test eax, eax
je 0x48de28
push 0xfffffffffffffff4
push eax
call dword [sym.imp.USER32.dll_GetClassLongA]
mov ebx, eax
mov eax, dword [0x4a0174]
test eax, eax
jne 0x48de1d
push 0x7f00
push eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [0x4a0174], eax
test ebx, ebx
je 0x48de28
cmp ebx, eax
je 0x48de28
push ebx
jmp 0x48de35
mov eax, dword [0x4a0188]
mov eax, dword [eax + esi*4]
test eax, eax
je 0x48de3b
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov ebx, dword [ebp + 0x18]
mov dl, 1
mov dword [ebx], 1
mov dword [edi + 0x10], 1
mov byte [edi + 0x14], dl
jmp 0x48ce1c
mov eax, dword [edi + 8]
movzx ecx, word [eax + 2]
movzx eax, word [eax]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x20], eax
test esi, esi
je 0x48de93
mov ebx, ecx
mov edi, eax
mov edx, dword [esi + 4]
test edx, edx
je 0x48de81
mov ecx, dword [edx]
push edi
movzx eax, bx
push eax
push edx
call dword [ecx + 0xc]
mov esi, dword [esi]
test esi, esi
jne 0x48de6f
mov edi, dword [esp + 0x38]
mov ebx, dword [esp + 0x34]
mov ecx, dword [esp + 0x28]
test cx, cx
jne case.0x48e1ea.278
cmp dword [ebx + 0x78], 0xffffffff
je case.0x48e1ea.278
test dword [ebx + 0x6c], 0x1000
je 0x48debe
mov ecx, ebx
call fcn.0048ba2b
test al, al
je case.0x48e1ea.278
mov eax, dword [ebx + 0x2c]
push 0
push dword [ebx + 0x78]
mov eax, dword [eax + 0x24]
mov ecx, dword [eax + 0x18]
add ecx, 4
call fcn.00496209
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x1f]
mov byte [edi + 0x14], 1
jmp 0x48ce1c
test esi, esi
je case.0x48e1ea.278
xor ecx, ecx
mov ebx, ecx
mov dword [esp + 0x120], ecx
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], ebx
mov dword [esp + 0x12c], ecx
mov edx, dword [esi + 4]
test edx, edx
je 0x48df37
mov ecx, dword [edx]
lea eax, [esp + 0x120]
push eax
mov eax, dword [edi + 0xc]
push dword [eax]
push edx
call dword [ecx + 0x98]
mov ebx, dword [esp + 0x128]
mov ecx, dword [esp + 0x120]
test cx, cx
je 0x48e0f9
xor edx, edx
mov byte [esp + 0xcc], 0
mov word [esp + 0xbc], dx
lea eax, [esp + 0x120]
cmp cx, 3
jne 0x48df78
mov edx, ebx
mov dword [esp + 0xcd], 0
mov dword [esp + 0xb8], edx
jmp 0x48e0d2
mov edx, 0x4003
cmp cx, dx
jne 0x48df9b
mov edx, dword [ebx]
mov dword [esp + 0xb8], edx
mov dword [esp + 0xcd], 0
jmp 0x48e0d2
xor edx, edx
mov dword [esp + 0xb8], edx
cmp cx, 0xa
jne 0x48dfce
cmp ebx, 0x80020004
jne 0x48e04d
mov byte [esp + 0xcc], 1
mov dword [esp + 0xcd], 0x80020005
jmp 0x48e0d2
cmp cx, 9
je 0x48dfdb
cmp cx, word [esp + 0x20]
jne 0x48e04d
test ecx, 0x4000
je 0x48dfe5
mov ebx, dword [ebx]
test ebx, ebx
je 0x48e0c7
push 0
push 0
lea ecx, [esp + 0xc4]
xor eax, eax
push ecx
lea ecx, [esp + 0x84]
mov dword [esp + 0x84], eax
push ecx
push 3
push 0
push 0x4cd4e0
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov eax, dword [ebx]
push 0
push ebx
call dword [eax + 0x18]
mov dword [esp + 0xcd], eax
test eax, eax
js 0x48e0be
mov edx, dword [esp + 0xb8]
lea eax, [esp + 0xbc]
movzx ecx, word [eax]
cmp ecx, 1
jne 0x48e062
mov dword [esp + 0xcd], 0x800a005e
jmp 0x48e0d2
xor edx, edx
mov dword [esp + 0x60], edx
mov dword [esp + 0x64], edx
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], edx
mov edx, 0x400c
cmp cx, dx
jne 0x48e086
mov eax, dword [eax + 8]
cmp word [eax], dx
je 0x48e07e
push 3
push 2
push 0x400
push eax
lea eax, [esp + 0x70]
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayPtrOfIndex]
mov dword [esp + 0xcd], eax
test eax, eax
js 0x48e0be
mov edx, dword [esp + 0x68]
mov dword [esp + 0xb8], edx
mov dword [esp + 0xcd], 0
jmp 0x48e0d2
mov edx, dword [esp + 0xb8]
jmp 0x48e0d2
mov dword [esp + 0xcd], 0x800a005b
cmp word [esp + 0xbc], 0
mov ebx, dword [ebp + 0x18]
mov dword [ebx], edx
mov dword [edi + 0x10], edx
mov byte [edi + 0x14], 1
je 0x48e0fc
lea eax, [esp + 0xbc]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x48e0fc
mov ebx, dword [ebp + 0x18]
mov esi, dword [esi]
test esi, esi
jne 0x48deec
mov dl, byte [esp + 0x1f]
mov byte [edi + 0x14], 1
jmp 0x48ce1c
mov dword [esp + 0x28], 0
test esi, esi
je case.0x48e1ea.278
lea ebx, [ebx]
mov edx, dword [esi + 4]
test edx, edx
je 0x48e140
mov ecx, dword [edx]
lea eax, [esp + 0x28]
push eax
mov eax, dword [edi + 0xc]
push dword [eax]
push edx
call dword [ecx + 0x7c]
mov esi, dword [esi]
test esi, esi
jne 0x48e129
jmp 0x48e179
mov dword [esp + 0x28], 0
test esi, esi
je case.0x48e1ea.278
nop
mov edx, dword [esi + 4]
test edx, edx
je 0x48e173
mov ecx, dword [edx]
lea eax, [esp + 0x28]
push eax
mov eax, dword [edi + 0xc]
push dword [eax]
push edx
call dword [ecx + 0x80]
mov esi, dword [esi]
test esi, esi
jne 0x48e159
cmp word [esp + 0x28], 0
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x1f]
je 0x48e2f2
mov dword [ebx], 1
mov byte [edi + 0x14], 1
jmp 0x48ce1c
test esi, esi
je case.0x48e1ea.278
lea ebx, [ebx]
mov edx, dword [esi + 4]
test edx, edx
je 0x48e1bf
mov eax, dword [edi + 8]
mov ecx, dword [edx]
push 0xffffffffffffffff
movzx eax, word [eax]
push eax
push edx
call dword [ecx + 0x20]
mov esi, dword [esi]
test esi, esi
jne 0x48e1a9
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x1f]
mov byte [edi + 0x14], 1
jmp 0x48ce1c
sub eax, 0x115
cmp eax, 0x23
ja case.0x48e1ea.278
movzx eax, byte [eax + 0x48c031]
jmp dword [eax*4 + 0x48c019]
test esi, esi
je case.0x48e1ea.278
mov edx, dword [esi + 4]
test edx, edx
je 0x48e20f
mov eax, dword [edi + 8]
mov ecx, dword [edx]
push 0
movzx eax, word [eax]
push eax
push edx
call dword [ecx + 0x20]
mov esi, dword [esi]
test esi, esi
jne 0x48e1f9
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x1f]
mov byte [edi + 0x14], 1
jmp 0x48ce1c
test esi, esi
je case.0x48e1ea.278
mov edx, dword [esi + 4]
test edx, edx
je 0x48e245
mov ecx, dword [edx]
lea eax, [edi + 0x10]
push 0
push eax
mov eax, dword [edi + 8]
push dword [eax]
push edx
call dword [ecx + 0x18]
mov esi, dword [esi]
test esi, esi
jne 0x48e22d
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x1f]
mov byte [edi + 0x14], 1
jmp 0x48ce1c
test esi, esi
je case.0x48e1ea.278
lea ebx, [ebx]
mov edx, dword [esi + 4]
test edx, edx
je 0x48e281
mov ecx, dword [edx]
lea eax, [edi + 0x10]
push 8
push eax
mov eax, dword [edi + 8]
push dword [eax]
push edx
call dword [ecx + 0x18]
mov esi, dword [esi]
test esi, esi
jne 0x48e269
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x1f]
mov byte [edi + 0x14], 1
jmp 0x48ce1c
test esi, esi
je case.0x48e1ea.278
mov edx, dword [esi + 4]
test edx, edx
je 0x48e2b3
mov ecx, dword [edx]
lea eax, [edi + 0x10]
push 1
push eax
mov eax, dword [edi + 8]
push dword [eax]
push edx
call dword [ecx + 0x18]
mov esi, dword [esi]
test esi, esi
jne 0x48e29b
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x1f]
mov byte [edi + 0x14], 1
jmp 0x48ce1c
test esi, esi
je case.0x48e1ea.278
mov edx, dword [esi + 4]
test edx, edx
je 0x48e2e5
mov ecx, dword [edx]
lea eax, [edi + 0x10]
push 6
push eax
mov eax, dword [edi + 8]
push dword [eax]
push edx
call dword [ecx + 0x18]
mov esi, dword [esi]
test esi, esi
jne 0x48e2cd
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x1f]
mov byte [edi + 0x14], 1
jmp 0x48ce1c
mov ebx, dword [ebp + 0x18]
mov dl, byte [esp + 0x1f]
jmp 0x48ce1c