Function at 0x463580
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5d2302
mov eax, dword fs:[0]
push eax
sub esp, 0xac
push ebx
push ebp
push esi
push edi
mov eax, dword [0x613ad0]
xor eax, esp
push eax
lea eax, [esp + 0xc0]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esi + 0x54]
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x24]
push ecx
xor ebx, ebx
push edx
mov dword [esp + 0x1c], ebx
call dword [sym.imp.USER32.dll_GetClientRect]
cmp dword [esi + 0x1d0], ebx
mov edx, dword [esp + 0xd4]
mov ecx, dword [esp + 0xd0]
je 0x4635f4
cmp ecx, dword [esi + 0x70]
je 0x4635ee
cmp edx, ebx
jne 0x4635ee
mov dword [esi + 0x70], ecx
jmp 0x4645bb
mov dword [esi + 0x1d0], ebx
mov eax, dword [esi + 0x74]
cmp ecx, eax
jne 0x46364b
cmp dword [esi + 0xd0], ebx
je 0x46364b
cmp edx, ebx
jne 0x46364b
cmp dword [0x615428], ebx
je 0x4645bb
mov ecx, dword [esi + 0x58]
lea eax, [esp + 0x18]
push eax
call fcn.0058de18
cmp dword [esp + 0x18], ebx
jne 0x463630
cmp dword [esp + 0x1c], ebx
je 0x4645bb
xor ecx, ecx
xor eax, eax
push ecx
mov dword [esp + 0x20], ecx
mov ecx, dword [esi + 0x58]
push eax
mov dword [esp + 0x20], eax
call fcn.0058d3d4
jmp 0x4645bb
cmp dword [0x615428], 1
jne 0x4637a7
push eax
call fcn.0042d330
mov ecx, dword [esp + 0xd4]
push ecx
mov edi, eax
call fcn.0042d330
add esp, 8
cmp edi, eax
je 0x463729
cmp dword [esp + 0xd8], ebx
jne 0x463729
mov edx, dword [esi + 0x74]
push edx
call fcn.0042d370
mov edi, eax
mov eax, dword [esi + 0x74]
push eax
call fcn.0042d330
mov ebp, eax
add esp, 8
cmp ebp, ebx
je 0x4636aa
cmp dword [ebp + 0x28c], ebx
jne 0x4636b6
cmp edi, ebx
je 0x463729
cmp dword [edi + 0x158], ebx
je 0x463729
cmp dword [esi + 0x1c8], ebx
jne 0x463729
push 0x84
call fcn.0057def7
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov dword [esp + 0xc8], ebx
je 0x4636e5
mov ecx, eax
call fcn.00402310
mov edi, eax
jmp 0x4636e7
xor edi, edi
push 0xc
mov dword [esp + 0xcc], 0xffffffff
mov dword [edi + 4], 0xf
call fcn.0057def7
add esp, 4
push esi
push eax
mov dword [eax], edi
mov dword [eax + 4], ebx
mov dword [eax + 8], ebp
mov ecx, dword [esi + 0x54]
push 0x263d
call fcn.0040d500
mov dword [esi + 0x1c8], 1
jmp 0x4645bb
cmp dword [0x615428], 1
jne 0x4637a7
mov ecx, dword [esi + 0x74]
push ecx
call fcn.0042d330
add esp, 4
test eax, eax
je 0x4637a7
cmp dword [esi + 0x9c], ebx
je 0x4637a7
mov eax, dword [esi + 0x74]
cmp dword [esp + 0xd0], eax
je 0x4637a7
cmp dword [esp + 0xd8], ebx
jne 0x4637a7
push eax
call fcn.0042d330
add esp, 4
cmp dword [eax + 0x284], ebx
je 0x4637a7
xor edi, edi
cmp dword [esi + 0x9c], ebx
jle 0x4637a7
lea ebp, [esi + 0x94]
push edi
mov ecx, ebp
call fcn.00401700
mov eax, dword [eax]
mov edx, dword [eax + 0xa8]
mov eax, dword [edx + 0x10]
cmp dword [eax - 0xc], ebx
je 0x4638fa
add edi, 1
cmp edi, dword [esi + 0x9c]
jl 0x463780
cmp dword [esi + 0xf8], ebx
je 0x4637bb
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov dword [esi + 0xf8], ebx
mov ebp, 1
cmp dword [0x615428], ebp
jne 0x463895
cmp dword [esp + 0xd8], ebx
jne 0x463819
xor edi, edi
cmp dword [esi + 0x9c], ebx
jle 0x463819
nop
cmp edi, ebx
jl 0x46429a
cmp edi, dword [esi + 0x9c]
jge 0x46429a
mov edx, dword [esi + 0x98]
lea eax, [edx + edi*4]
mov eax, dword [eax]
push eax
mov ecx, esi
call fcn.00460f60
add edi, ebp
cmp edi, dword [esi + 0x9c]
jl 0x4637e0
cmp dword [0x615428], ebp
jne 0x463895
test dword [esi + 0x110], 0x100
je 0x463849
push ebx
push 0xffffffffffffffff
push 8
mov ecx, esi
mov dword [esi + 0x110], ebx
call fcn.00460510
test eax, eax
je 0x463841
mov dword [esi + 0x1d0], ebp
cmp dword [0x615428], ebp
jne 0x463895
cmp dword [esi + 0x174], ebx
jle 0x46387f
lea edi, [esi + 0x16c]
cmp dword [edi + 8], ebx
jle 0x46429a
mov eax, dword [edi + 4]
mov eax, dword [eax]
push ebp
push ebp
mov ecx, eax
call fcn.0045c8a0
push ebp
push ebx
mov ecx, edi
call fcn.0058e891
cmp dword [esi + 0x174], ebx
jg 0x463857
cmp dword [esi + 0x1cc], ebx
jg 0x46388f
cmp dword [esi + 0x188], ebx
jle 0x463895
mov dword [esi + 0x1d0], ebp
cmp dword [esi + 0x1d0], ebx
je 0x46396b
xor edi, edi
cmp dword [esi + 0x64], ebx
jle 0x4638cc
cmp edi, ebx
jl 0x46429a
cmp edi, dword [esi + 0x64]
jge 0x46429a
mov ecx, dword [esi + 0x60]
mov ecx, dword [ecx + edi*4]
push ebx
call fcn.0058a7df
add edi, ebp
cmp edi, dword [esi + 0x64]
jl 0x4638a8
cmp dword [esi + 0x1cc], ebx
mov edx, dword [esp + 0xd0]
mov dword [esi + 0x70], edx
jne 0x4645bb
cmp dword [esi + 0x188], ebx
jne 0x4645bb
mov ecx, esi
call fcn.0045fe00
jmp 0x4645bb
mov eax, dword [esi + 0x74]
cmp eax, ebx
je 0x46391d
mov ecx, dword [0x61546c]
cmp ecx, ebx
je 0x46391d
mov ecx, dword [ecx + 0x20]
push 1
push eax
push 0x2640
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [esp + 0x14]
call fcn.00402080
push ebx
lea edx, [esp + 0x18]
push edx
push 0x7d29
mov ecx, 0x61537c
mov dword [esp + 0xd4], 1
call fcn.00405220
mov eax, dword [0x61540c]
mov ecx, dword [esp + 0x14]
push 0x50010
push eax
push ecx
mov ecx, esi
call fcn.0058276d
lea ecx, [esp + 0x14]
call fcn.00401f40
jmp 0x4645bb
cmp dword [0x615428], ebp
jne 0x463c65
cmp dword [esi + 0x1e8], ebx
je 0x463a12
cmp dword [esi + 0x1f8], ebx
je 0x463a12
mov eax, dword [esi + 0x1f0]
cmp dword [esi + 0x1ec], eax
jge 0x463a12
mov ebp, dword [esp + 0xd0]
cmp ebp, dword [esi + 0x70]
je 0x4645bb
mov dword [esi + 0x1ec], eax
mov eax, dword [esi + 0x20]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call fcn.0058f29b
push ebx
push ebx
push ebx
mov edi, eax
push ebx
push edi
lea ecx, [esi + 0x1f4]
call fcn.00414900
mov ecx, dword [edi + 4]
mov edx, dword [esi + 0x20]
push ecx
push edx
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [esi + 0x20]
push 1
push eax
mov dword [esi + 0x1e8], ebx
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [esp + 0xd8]
mov edx, dword [esp + 0xd4]
push ecx
push edx
push ebp
mov ecx, esi
call fcn.00463580
jmp 0x4645bb
mov ebp, dword [esp + 0xd0]
cmp ebp, ebx
je 0x463c6c
mov ecx, ebp
call fcn.0042d450
test eax, eax
jbe 0x463c6c
mov ecx, dword [esi + 0xd0]
cmp ecx, ebx
je 0x463c6c
cmp dword [esi + 0x1e8], ebx
jne 0x463c15
mov ecx, ebp
mov dword [esi + 0x70], ebp
mov dword [esi + 0x1ec], ebx
mov dword [esi + 0x1f0], ebx
call fcn.0042d450
cmp eax, 0x20
mov dword [esi + 0x1e8], eax
jne 0x463a81
call fcn.005ab422
cdq
mov ecx, 0x17
idiv ecx
add edx, 1
mov dword [esi + 0x1e8], edx
lea edi, [esi + 0x1f4]
push ebx
mov ecx, edi
call fcn.004137c0
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x1c]
push eax
mov ecx, ebp
call fcn.0042d050
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
push ecx
push edx
mov ecx, edi
call fcn.004146c0
cmp dword [esi + 0x1f8], ebx
je 0x463c6c
mov ecx, ebp
call fcn.0042d470
mov ecx, 0xb
sub ecx, eax
imul ecx, ecx, 0x32
cmp dword [esi + 0x64], ebx
mov dword [esi + 0x1f0], ecx
je 0x463b13
lea ebp, [esi + 0x5c]
lea esp, [esp]
cmp dword [ebp + 8], ebx
jle 0x46429a
mov edx, dword [ebp + 4]
mov edi, dword [edx]
push 1
push ebx
mov ecx, ebp
call fcn.0058e891
cmp edi, ebx
je 0x463b07
mov eax, dword [edi]
mov edx, dword [eax + 4]
push 1
mov ecx, edi
call edx
cmp dword [esi + 0x64], ebx
jne 0x463ae0
mov ebp, dword [esp + 0xd0]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
push 1
lea eax, [esi + 0x21c]
push eax
mov eax, dword [esi + 0x1f8]
push ebx
push ebx
push ecx
push edx
push ebp
push esi
push eax
call fcn.0042e170
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x44]
add esp, 0x24
cmp eax, dword [esi + 0x7c]
jne 0x463b52
cmp ecx, dword [esi + 0x80]
je 0x463c01
push 0x5eea6c
push 0x5eea6c
push ecx
mov ecx, dword [esi + 0x54]
push eax
push 1
call fcn.0058dcf3
mov edx, dword [esi + 0x54]
mov eax, dword [edx + 0x20]
lea ecx, [esp + 0x24]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x18]
cmp eax, ecx
jle 0x463b95
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
mov dword [esi + 0x84], eax
jmp 0x463b9b
mov dword [esi + 0x84], ebx
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x20]
cmp eax, ecx
jle 0x463bb6
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
mov dword [esi + 0x88], eax
jmp 0x463bbc
mov dword [esi + 0x88], ebx
push ebx
lea ecx, [esi + 0xbc]
call fcn.004137c0
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
push 0x14
push ecx
mov ecx, dword [esi + 0x54]
push edx
push 1
call fcn.005827d1
mov ecx, dword [esi + 0x88]
sub ecx, eax
push ecx
mov ecx, dword [esi + 0x54]
push ebx
call fcn.005827d1
mov edx, dword [esi + 0x84]
sub edx, eax
push edx
push ebx
mov ecx, esi
call fcn.0058a9ae
mov eax, dword [esi + 0x20]
push ebx
push 0xa
push 1
push eax
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x4645bb
mov edx, dword [esi + 0x1ec]
cmp edx, dword [esi + 0x1f0]
jl 0x463c6c
mov eax, dword [esi + 0xc0]
cmp eax, ebx
je 0x463c6c
cmp dword [esi + 0x1f8], ebx
je 0x463c6c
cmp dword [esi + 0x208], ecx
jne 0x463c6c
mov ecx, dword [esi + 0x20c]
cmp ecx, dword [esi + 0xd4]
jne 0x463c6c
push ebx
push ebx
push ebx
push ebx
push eax
lea ecx, [esi + 0x1f4]
call fcn.00414900
mov dword [esp + 0x14], 1
jmp 0x463c6c
mov ebp, dword [esp + 0xd0]
push 0xffffffffffffffff
lea ecx, [esi + 0xfc]
push ebx
call fcn.00596040
push 0xffffffffffffffff
lea ecx, [esi + 0x94]
push ebx
mov dword [esi + 0x110], ebx
call fcn.00596040
mov edx, dword [esi + 0x74]
mov ecx, dword [esi + 0xe8]
cmp ecx, ebx
mov dword [esi + 0x78], edx
mov dword [esi + 0x74], ebp
mov dword [esi + 0x70], ebx
je 0x463cac
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
cmp dword [esi + 0x64], ebx
mov dword [esi + 0xe8], ebx
je 0x463cf3
lea ebp, [esi + 0x5c]
lea ebx, [ebx]
cmp dword [ebp + 8], ebx
jle 0x46429a
mov eax, dword [ebp + 4]
mov edi, dword [eax]
push 1
push ebx
mov ecx, ebp
call fcn.0058e891
cmp edi, ebx
je 0x463ce7
mov eax, dword [edi]
mov edx, dword [eax + 4]
push 1
mov ecx, edi
call edx
cmp dword [esi + 0x64], ebx
jne 0x463cc0
mov ebp, dword [esp + 0xd0]
cmp dword [esp + 0x14], ebx
jne 0x463d05
push ebx
lea ecx, [esi + 0xbc]
call fcn.004137c0
cmp ebp, ebx
mov dword [esi + 0x11c], ebx
je 0x463e23
push ebp
call fcn.0042d330
add esp, 4
test eax, eax
je 0x463e23
mov eax, dword [esp + 0xd0]
push eax
call fcn.0042d330
mov ebp, eax
add esp, 4
cmp ebp, ebx
je 0x463e23
cmp dword [ebp + 0x160], ebx
je 0x463e23
cmp dword [ebp + 0x294], ebx
je 0x463e23
cmp dword [0x615428], 1
jne 0x463e23
mov ecx, dword [0x615430]
cmp dword [ecx - 0xc], ebx
jne 0x463e2b
push esi
lea ecx, [esp + 0x4c]
call fcn.004211e0
lea ecx, [esp + 0x48]
mov dword [esp + 0xc8], 2
call fcn.00580db0
cmp eax, 1
je 0x463e0f
push 0x84
call fcn.0057def7
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0xc8], 3
je 0x463dc4
lea edx, [ebp + 0x1f4]
push edx
mov ecx, eax
call fcn.00402590
mov edi, eax
jmp 0x463dc6
xor edi, edi
push 0xc
mov byte [esp + 0xcc], 2
mov dword [edi + 0x5c], 1
call fcn.0057def7
add esp, 4
push esi
push eax
mov dword [eax], edi
mov dword [eax + 4], ebx
mov dword [eax + 8], ebp
mov ecx, dword [esi + 0x58]
push 0x263d
call fcn.0040d500
lea ecx, [esp + 0x48]
mov dword [esp + 0xc8], 0xffffffff
call fcn.00421220
jmp 0x4645bb
lea ecx, [esp + 0x48]
mov dword [esp + 0xc8], 0xffffffff
call fcn.00421220
cmp dword [0x615428], ebx
je 0x463e3d
mov eax, dword [esp + 0xd0]
push eax
mov ecx, 0x61537c
call fcn.0043d220
mov ecx, esi
call fcn.0045e300
cmp dword [esi + 0x74], ebx
je 0x464544
mov eax, dword [esi + 0x80]
cmp eax, ebx
jl 0x4645bb
mov ebp, dword [esp + 0x14]
cmp ebp, ebx
jne 0x463e8d
mov ecx, dword [esi + 0x7c]
push eax
push ecx
lea ecx, [esi + 0xbc]
call fcn.004146c0
cmp dword [esi + 0xc0], ebx
jne 0x463e8d
push 0xffffffffffffffff
push ebx
push 0x7e45
call fcn.0059026b
jmp 0x4645bb
cmp dword [esi + 0x90], ebx
jne 0x463f7d
mov ecx, dword [esi + 0x80]
mov eax, dword [esi + 0x7c]
push 0x5eea6c
push 0x5eea6c
push ecx
mov ecx, dword [esi + 0x54]
push eax
push 1
call fcn.0058dcf3
mov ecx, dword [esi + 0x54]
lea edx, [esp + 0x18]
push edx
call fcn.0058de18
cmp dword [esp + 0x18], ebx
jne 0x463ed1
cmp dword [esp + 0x1c], ebx
je 0x463ef7
cmp dword [0x615428], ebx
jne 0x463ee1
mov eax, dword [esi + 0x78]
cmp eax, dword [esi + 0x74]
je 0x463ef7
xor eax, eax
xor ecx, ecx
push eax
mov dword [esp + 0x1c], ecx
push ecx
mov ecx, dword [esi + 0x54]
mov dword [esp + 0x24], eax
call fcn.0058d3d4
mov eax, dword [esi + 0x54]
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x24]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
mov edi, dword [esi + 0x7c]
mov eax, dword [esp + 0x2c]
cmp eax, edi
jle 0x463f23
sub eax, edi
cdq
sub eax, edx
sar eax, 1
mov dword [esi + 0x84], eax
jmp 0x463f29
mov dword [esi + 0x84], ebx
mov ecx, dword [esi + 0x80]
mov eax, dword [esp + 0x30]
cmp eax, ecx
jle 0x463f46
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
mov dword [esi + 0x88], eax
jmp 0x463f4c
mov dword [esi + 0x88], ebx
push 0x14
push ecx
mov ecx, dword [esi + 0x54]
push edi
push 1
call fcn.005827d1
mov ecx, dword [esi + 0x88]
sub ecx, eax
push ecx
mov ecx, dword [esi + 0x54]
push ebx
call fcn.005827d1
mov edx, dword [esi + 0x84]
sub edx, eax
push edx
push ebx
mov ecx, esi
call fcn.0058a9ae
push 5
mov ecx, esi
call fcn.0058a7a3
cmp dword [esi + 0xc0], ebx
je 0x463fba
cmp ebp, ebx
jne 0x463fba
mov eax, dword [esi + 0x74]
push eax
call fcn.0042d200
mov ecx, dword [esi + 0xd4]
mov edx, dword [esi + 0xd0]
add esp, 4
push eax
push ecx
mov ecx, dword [esi + 0xc0]
push edx
push ebx
push ebx
call fcn.0058fef9
mov eax, dword [esi + 0x74]
cmp eax, ebx
je 0x464096
push eax
call fcn.0042d100
mov edi, eax
add esp, 4
cmp edi, ebx
je 0x464096
cmp edi, 0xffffffff
je 0x464096
push 0x28
call fcn.0057def7
add esp, 4
mov dword [esp + 0x18], eax
cmp eax, ebx
mov dword [esp + 0xc8], 4
je 0x464007
mov ecx, eax
call fcn.00413700
jmp 0x464009
xor eax, eax
mov dword [esi + 0xe8], eax
cmp dword [edi + 0x18], ebx
mov dword [esp + 0xc8], 0xffffffff
je 0x46404c
push edi
call fcn.00431e60
mov ecx, dword [esi + 0xe8]
add esp, 4
mov ebp, eax
mov eax, dword [edi + 0x24]
push 1
push eax
push ebp
push ebx
call fcn.00415920
push 0x8000
push ebx
push ebp
call dword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x46405b
mov edi, dword [edi + 0x10]
push 1
push ebx
push ebx
push edi
mov ecx, eax
call fcn.00415920
mov eax, dword [esi + 0xe8]
cmp dword [eax + 0x14], ebx
je 0x464096
push ebx
push ebx
push eax
mov ecx, 0x61537c
call fcn.00402c80
mov ecx, dword [esi + 0xd4]
mov edx, dword [esi + 0xd0]
mov eax, dword [esi + 0xc0]
push ecx
mov ecx, dword [esi + 0xe8]
push edx
push eax
push ecx
mov ecx, esi
call fcn.0045e380
lea ecx, [esp + 0x34]
mov dword [esi + 0x8c], ebx
call fcn.00580534
mov edx, dword [esi + 0x74]
push edx
mov dword [esp + 0xcc], 5
call fcn.0042d330
add esp, 4
test eax, eax
je 0x4640cd
mov ecx, dword [esi + 0x74]
push 8
lea eax, [esp + 0x38]
push eax
push ecx
jmp 0x4640d7
mov eax, dword [esi + 0x74]
push ebx
lea edx, [esp + 0x38]
push edx
push eax
call fcn.0042dc10
mov edx, dword [esi + 0x74]
add esp, 0xc
lea ecx, [esp + 0x34]
push ecx
push edx
call fcn.0042dc30
add esp, 8
push 0xffffffffffffffff
push ebx
lea ecx, [esi + 0x16c]
mov dword [esi + 0x164], ebx
mov dword [esi + 0x1e8], ebx
mov dword [esi + 0x168], ebx
call fcn.00596040
push 0xffffffffffffffff
push ebx
lea ecx, [esi + 0x180]
call fcn.00596040
mov eax, dword [esp + 0x3c]
mov dword [esi + 0x1c8], ebx
mov dword [esp + 0x18], ebx
lea esp, [esp]
xor edi, edi
cmp eax, ebx
mov dword [esp + 0x20], edi
jle 0x46422d
mov edi, edi
cmp edi, ebx
jl 0x46429a
cmp edi, eax
jge 0x46429a
cmp dword [esp + 0x18], ebx
mov eax, dword [esp + 0x38]
mov ebp, dword [eax + edi*4]
jne 0x46420b
cmp dword [ebp + 8], 0x5453514f
jne 0x46419b
mov eax, dword [esi + 0x9c]
lea ecx, [esi + 0x94]
push ebp
push eax
call fcn.00596164
mov ecx, ebp
call fcn.004285d0
mov eax, dword [ebp + 0x84]
cmp eax, 7
je 0x464194
cmp eax, 6
jne 0x46419b
mov ecx, ebp
call fcn.00428340
cmp dword [ebp + 8], 0x5052474f
jne 0x46420b
xor ebx, ebx
cmp dword [ebp + 0x1c], ebx
jle 0x46420b
test ebx, ebx
jl 0x46429a
cmp ebx, dword [ebp + 0x1c]
jge 0x46429a
mov ecx, dword [ebp + 0x18]
mov edi, dword [ecx + ebx*4]
cmp dword [edi + 8], 0x5453514f
lea eax, [ecx + ebx*4]
jne 0x4641ff
mov eax, dword [esi + 0x9c]
lea ecx, [esi + 0x94]
push edi
push eax
call fcn.00596164
mov ecx, edi
call fcn.004285d0
mov eax, dword [edi + 0x84]
cmp eax, 7
je 0x4641f8
cmp eax, 6
jne 0x4641ff
mov ecx, edi
call fcn.00428340
add ebx, 1
cmp ebx, dword [ebp + 0x1c]
jl 0x4641ab
mov edi, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
push edx
push ebp
mov ecx, esi
call fcn.00460070
mov eax, dword [esp + 0x3c]
add edi, 1
xor ebx, ebx
cmp edi, eax
mov dword [esp + 0x20], edi
jl 0x464140
mov ecx, dword [esp + 0x18]
add ecx, 1
cmp ecx, 2
mov dword [esp + 0x18], ecx
jl 0x464130
xor edi, edi
cmp dword [esi + 0x64], ebx
jle 0x464285
cmp edi, ebx
jl 0x46429a
cmp edi, dword [esi + 0x64]
jge 0x46429a
mov eax, dword [esi + 0x60]
mov ebp, dword [eax + edi*4]
lea eax, [eax + edi*4]
mov ecx, ebp
call fcn.00459ac0
cmp dword [eax + 0x54], ebx
jne 0x464277
mov ecx, dword [ebp + 0x20]
push ebx
push ebx
push 0x2669
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov ebp, 1
add edi, ebp
cmp edi, dword [esi + 0x64]
jl 0x464248
jmp 0x46428a
mov ebp, 1
cmp dword [esi + 0x9c], ebp
jne 0x4642ac
cmp dword [esi + 0x9c], ebx
jg 0x46429f
call fcn.0057e0f5
mov eax, dword [esi + 0x98]
mov ecx, dword [eax]
call fcn.00427920
cmp dword [esp + 0x14], ebx
mov dword [esi + 0x164], ebp
jne 0x4642c0
push ebx
mov ecx, esi
call fcn.00461f70
cmp dword [0x615428], ebp
jne 0x464314
mov ecx, esi
call fcn.0058a800
mov edx, dword [esi + 0x74]
push edx
mov ecx, esi
call fcn.00460170
lea eax, [esi + 0xfc]
push eax
mov eax, dword [esi + 0x74]
push eax
call fcn.0042dc30
add esp, 8
test byte [esi + 0x110], 0x20
je 0x464301
push ebx
push ebx
push 5
mov ecx, esi
call fcn.00460510
test dword [esi + 0x110], 0x400
je 0x464314
mov ecx, esi
call fcn.0045ffe0
mov dword [esi + 0xf0], ebx
cmp dword [0x615428], ebp
jne 0x464469
mov eax, dword [esi + 0x74]
cmp dword [eax + 0x64], ebx
je 0x464469
push eax
call fcn.0042d0d0
mov edi, eax
add esp, 4
cmp edi, ebx
je 0x464469
cmp edi, 0xffffffff
je 0x464469
cmp edi, dword [esi + 0xf4]
je 0x46448f
mov ebp, dword [esi + 0xec]
cmp ebp, ebx
je 0x464374
mov ecx, ebp
call fcn.0041c850
push ebp
call fcn.0057df27
add esp, 4
mov dword [esi + 0xec], ebx
cmp dword [edi + 0x18], ebx
je 0x4643b1
push edi
call fcn.00431e60
mov ecx, dword [0x6152f8]
mov edx, dword [ecx + 0x20]
add esp, 4
push edi
mov ebp, eax
push ebp
push 0x2655
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x8000
push ebx
push ebp
call dword [sym.imp.KERNEL32.dll_VirtualFree]
mov dword [edi + 0x18], ebx
mov dword [esi + 0xf4], edi
push 4
lea eax, [esp + 0x18]
add edi, 0x10
push eax
mov ecx, edi
call fcn.00403530
lea ecx, [esp + 0x14]
push ecx
mov byte [esp + 0xcc], 6
call fcn.00422500
push 0x6c
mov dword [esi + 0xf0], eax
call fcn.0057def7
add esp, 8
mov dword [esp + 0x18], eax
cmp eax, ebx
mov byte [esp + 0xc8], 7
je 0x464403
mov ecx, eax
call fcn.0041c830
jmp 0x464405
xor eax, eax
mov ecx, dword [esi + 0x20]
mov dword [esi + 0xec], eax
mov edx, dword [eax]
mov edx, dword [edx]
push ebx
push ecx
mov ecx, eax
mov byte [esp + 0xd0], 6
call edx
mov ecx, dword [esi + 0xec]
mov edi, dword [edi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push edi
call edx
mov ecx, dword [esi + 0xec]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
push 1
call edx
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0xc8], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46448f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x46448f
mov edi, dword [esi + 0xec]
cmp edi, ebx
je 0x464483
mov ecx, edi
call fcn.0041c850
push edi
call fcn.0057df27
add esp, 4
mov dword [esi + 0xf4], ebx
mov dword [esi + 0xec], ebx
mov ecx, dword [esi + 0x58]
cmp ecx, ebx
je 0x4644b8
call fcn.00584446
test eax, eax
je 0x4644b8
mov ecx, dword [esi + 0x58]
call fcn.00584446
mov ecx, dword [eax + 0x20]
push ebx
push ebx
push 0x2641
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x615428], 1
jne 0x464521
mov eax, dword [esi + 0x90]
mov ecx, dword [esi + 0x74]
mov edx, dword [esi + 0x58]
mov edx, dword [edx + 0x20]
push eax
push ecx
push 0x264b
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
push ebx
push ebx
mov ecx, esi
call fcn.00460960
xor eax, eax
cmp dword [esi + 0x9c], ebx
jle 0x464521
cmp eax, ebx
jl 0x46429a
cmp eax, dword [esi + 0x9c]
jge 0x46429a
mov ecx, dword [esi + 0x98]
lea ecx, [ecx + eax*4]
mov ecx, dword [ecx]
add eax, 1
mov dword [ecx + 0x110], ebx
cmp eax, dword [esi + 0x9c]
jl 0x4644f1
mov edx, dword [esi + 0x20]
push 1
push ebx
push edx
call dword [sym.imp.USER32.dll_InvalidateRect]
lea ecx, [esp + 0x34]
mov dword [esp + 0xc8], 0xffffffff
call fcn.0058054b
jmp 0x4645bb
cmp dword [esi + 0x90], ebx
mov dword [esi + 0x84], ebx
mov dword [esi + 0x88], ebx
jne 0x4645b3
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
push 0x5eea6c
push 0x5eea6c
push ecx
mov ecx, dword [esi + 0x54]
push eax
push 1
call fcn.0058dcf3
mov ecx, dword [esi + 0x54]
lea eax, [esp + 0x18]
push eax
call fcn.0058de18
cmp dword [esp + 0x18], ebx
jne 0x46458f
cmp dword [esp + 0x1c], ebx
je 0x4645a5
xor eax, eax
xor ecx, ecx
push eax
mov dword [esp + 0x1c], ecx
push ecx
mov ecx, dword [esi + 0x54]
mov dword [esp + 0x24], eax
call fcn.0058d3d4
push 0x14
push ebx
push ebx
push ebx
push ebx
push ebx
mov ecx, esi
call fcn.0058a9ae
push ebx
mov ecx, esi
call fcn.0058a7a3
mov ecx, dword [esp + 0xc0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb8
ret 0xc