Function at 0x46eda0
Capabilities:
Capture webcam image
Create process on windows
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xfc
push ebx
mov ebx, dword [ebp + 0x14]
push esi
push edi
xor edi, edi
mov esi, ecx
mov dword [ebx], edi
call fcn.00472be4
mov ecx, dword [esi + 0xf0]
mov dword [ebp + 0x14], eax
cmp ecx, edi
je 0x46edde
push ebx
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.004546e8
cmp dword [ebx], edi
jne 0x46fc89
mov eax, dword [ebp + 0xc]
mov ecx, 0x8087
cmp eax, ecx
ja 0x46fbba
je 0x46f425
add ecx, 0xffffffd2
cmp eax, ecx
ja 0x46f39a
je 0x46f2e8
sub eax, 0x6f
je 0x46f2e5
dec eax
je 0x46f2d4
sub eax, 0x390
je 0x46f263
sub eax, 0x7c4a
jne 0x46fc72
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push edi
push 0x804a
push 0x419
push dword [esi + 0x22c]
call ebx
lea ecx, [ebp - 0xac]
push ecx
push eax
push 0x41d
push dword [esi + 0x22c]
call ebx
mov eax, dword [ebp - 0xa4]
push 1
push 0x804a
push 0x403
push dword [esi + 0x22c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x28], eax
call ebx
lea eax, [ebp - 0x2c]
push eax
push dword [esi + 0x22c]
call dword [sym.imp.USER32.dll_ClientToScreen]
lea ecx, [ebp - 0x34]
mov dword [ebp + 8], edi
mov dword [ebp - 0x10], edi
call fcn.0046c410
mov eax, dword [0x4af550]
push edi
mov dword [ebp + 0x10], eax
lea eax, [ebp + 0x10]
push edi
push eax
mov ecx, esi
call fcn.0046e5fc
mov eax, dword [ebp + 0x10]
cmp dword [eax - 8], edi
jne 0x46eecf
lea ecx, [ebp + 0x10]
call fcn.004038fb
lea ecx, [ebp - 0x34]
call fcn.0046c455
jmp 0x46fc72
push edi
push eax
lea ecx, [ebp - 8]
call fcn.004899c9
lea eax, [ebp - 8]
lea ecx, [ebp - 4]
neg eax
sbb eax, eax
and eax, ecx
lea ecx, [ebp - 0x10]
push ecx
mov dword [ebp - 0x1c], eax
mov eax, dword [eax]
lea ecx, [ebp + 8]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.0046c47d
test al, al
je 0x46f233
lea ebx, [esi + 0x730]
mov ecx, ebx
call fcn.00487e0e
push 4
mov dword [esi + 0x7b0], esi
mov dword [esi + 0x77c], 0xe0
call fcn.0049c301
cmp eax, edi
pop ecx
je 0x46ef33
mov dword [eax], edi
mov dword [ebp + 0x14], eax
jmp 0x46ef36
mov dword [ebp + 0x14], edi
push dword [ebp + 8]
lea ecx, [ebp - 0x40]
call fcn.004117e9
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x38], eax
call fcn.00445d43
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp + 0x14]
push dword [eax]
call fcn.00415817
mov eax, dword [ebp - 0x40]
cmp eax, edi
je 0x46ef69
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x40], edi
mov eax, dword [esi + 4]
mov ecx, dword [0x4c6b2c]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x38], edi
call fcn.00445573
mov eax, dword [eax]
mov dword [eax + 0x10], ebx
cmp dword [esi + 0x790], edi
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xb4], edi
mov dword [ebp - 0xb0], edi
jne 0x46efb0
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov dword [esi + 0x790], eax
lea eax, [esi + 0x730]
push eax
push dword [esi + 0x790]
call fcn.00474a0f
pop ecx
mov ebx, 0x800
test eax, eax
pop ecx
jle 0x46efdc
push edi
push edi
push ebx
push dword [esi + 0x790]
call dword [sym.imp.USER32.dll_AppendMenuW]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0x14]
push dword [ebp - 0x10]
mov eax, dword [eax]
mov ecx, dword [ecx]
push eax
mov dword [ebp + 0x14], ecx
call dword [sym.imp.SHELL32.dll_ILClone]
push eax
lea ecx, [esi + 0x730]
push dword [ebp + 0x14]
call fcn.004869b7
push edi
push edi
push ebx
push dword [esi + 0x790]
call dword [sym.imp.USER32.dll_AppendMenuW]
mov dword [ebp + 0xc], edi
call dword [sym.imp.USER32.dll_CreatePopupMenu]
lea ebx, [esi + 0x730]
mov dword [ebp + 0xc], eax
push ebx
push 0x899
push ecx
mov ecx, esp
push str.Quick_Links
call fcn.0040a529
push dword [ebp + 0xc]
push 0x10
push dword [esi + 0x790]
call fcn.0047493c
add esp, 0x18
push ebx
push 0x89a
push ecx
mov eax, esp
push 0x29
push eax
call fcn.00461337
pop ecx
pop ecx
push 0x8059
push edi
push dword [ebp + 0xc]
call fcn.0047493c
add esp, 0x18
push ebx
push 0x89b
push ecx
mov eax, esp
push 0x2b
push eax
call fcn.00461337
pop ecx
pop ecx
push 0x805b
push edi
push dword [ebp + 0xc]
call fcn.0047493c
add esp, 0x18
push ebx
push 0x89c
push ecx
mov eax, esp
push 0x88
push eax
call fcn.00461337
pop ecx
pop ecx
push 0x805c
push edi
push dword [ebp + 0xc]
call fcn.0047493c
add esp, 0x18
push ebx
push 0x89d
push ecx
mov eax, esp
push 0x2a
push eax
call fcn.00461337
pop ecx
pop ecx
push 0x805a
push edi
push dword [esi + 0x790]
call fcn.0047493c
push dword [esi + 0x790]
call fcn.004469ac
mov eax, dword [esi + 0x270]
add esp, 0x1c
mov dword [esi + 0x754], edi
mov dword [esi + 0x750], eax
push edi
mov dword [esi + 0x7b0], esi
push dword [esi + 0x224]
call dword [sym.imp.USER32.dll_ShowWindow]
push edi
push 0x128
push dword [esi + 4]
mov ecx, ebx
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
call fcn.00486d66
mov ebx, eax
mov eax, dword [esi + 0x73c]
cmp eax, edi
je 0x46f133
mov ebx, eax
push 5
push dword [esi + 0x224]
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, esi
call fcn.00475dc6
cmp ebx, 0x898
jl 0x46f215
cmp ebx, 0x1068
jge 0x46f215
mov ecx, dword [esi + 0x7bc]
lea eax, [esi + 0x7b4]
xor edx, edx
cmp ecx, edi
jle 0x46f180
mov eax, dword [eax]
cmp dword [eax], ebx
je 0x46f1ea
inc edx
add eax, 4
cmp edx, ecx
jl 0x46f174
or eax, 0xffffffff
cmp eax, 0xffffffff
je 0x46f215
mov ecx, dword [esi + 0x7b8]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
lea ecx, [ebp - 0x58]
push eax
call fcn.004573a0
push str.WREWTEWTSFSDFSADSF
lea ecx, [ebp - 0x44]
call fcn.00403927
push dword [ebp - 0x44]
push dword [ebp - 0x50]
call fcn.0049c975
mov ebx, eax
pop ecx
neg ebx
pop ecx
sbb bl, bl
lea ecx, [ebp - 0x44]
inc bl
call fcn.004038fb
test bl, bl
je 0x46f1ee
push edi
push dword [ebp - 0x54]
call fcn.0049c2d8
pop ecx
push eax
push 0x111
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x46f20d
mov eax, edx
jmp 0x46f183
push dword [esi + 0x73c]
lea eax, [ebp - 0x58]
sub esp, 0x14
mov ecx, esp
push eax
call fcn.004573a0
mov ecx, dword [esi + 0xf0]
call fcn.0045744c
lea ecx, [ebp - 0x58]
call fcn.004284a6
cmp dword [ebp + 0xc], edi
je 0x46f222
lea ecx, [ebp + 0xc]
call fcn.00419e95
lea ecx, [ebp - 0xb8]
call fcn.0045a8ca
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 8]
call fcn.004893ad
lea ecx, [ebp + 0x10]
call fcn.004038fb
lea ecx, [ebp - 0x34]
call fcn.0046c455
push edi
push 0x804a
push 0x403
push dword [esi + 0x22c]
call ebx
jmp 0x46fc72
mov ecx, dword [esi + 0xf0]
cmp ecx, edi
je 0x46fc87
call fcn.00454cfd
mov edi, eax
lea eax, [ebp - 0xc0]
push eax
mov ecx, esi
call fcn.0046dc79
mov ecx, eax
add eax, 4
neg ecx
sbb ecx, ecx
push edi
and ecx, eax
push dword [ecx]
lea ecx, [ebp - 8]
call fcn.00489980
lea ecx, [ebp - 0xc0]
call fcn.004893ad
mov esi, 0x4c6284
mov ecx, esi
call fcn.00403816
lea eax, [ebp - 8]
lea ecx, [ebp - 4]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, esi
push eax
call fcn.004042a3
lea ecx, [ebp - 8]
call fcn.004893ad
jmp 0x46fc87
push 0x11
mov ecx, esi
call fcn.0046fd99
push 1
pop eax
jmp 0x46fc89
push edi
jmp 0x46f2d6
mov eax, dword [0x4af550]
push edi
mov dword [ebp + 0xc], eax
lea eax, [ebp + 0xc]
push edi
push eax
mov ecx, esi
call fcn.0046e5fc
cmp dword [0x4c28dc], 5
jae 0x46f31b
push 5
push edi
push edi
push dword [ebp + 0xc]
push str.explore
push edi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x46f392
lea ecx, [ebp - 0xfc]
call fcn.004973d8
push edi
lea ecx, [ebp - 8]
push dword [ebp + 0xc]
call fcn.004899c9
lea eax, [ebp - 8]
lea ecx, [ebp - 4]
neg eax
sbb eax, eax
push 0x4bc51c
and eax, ecx
lea ecx, [ebp + 0x14]
mov eax, dword [eax]
mov dword [ebp - 0xc8], eax
call fcn.0040a529
lea eax, [ebp + 0x14]
push eax
push 0x4000
push ecx
mov ecx, esp
push 0x4b12e4
call fcn.0040a529
push dword [esi + 4]
lea ecx, [ebp - 0xfc]
call fcn.00497423
lea ecx, [ebp + 0x14]
call fcn.004038fb
lea ecx, [ebp - 8]
call fcn.004893ad
lea ecx, [ebp - 0xfc]
call fcn.00497415
lea ecx, [ebp + 0xc]
jmp 0x46fc6d
sub eax, 0x805a
je 0x46f419
dec eax
je 0x46f3fb
dec eax
je 0x46f3c5
sub eax, 0xd
jne 0x46fc72
mov ecx, dword [esi + 0xf0]
push 0x8069
call fcn.00456e85
jmp 0x46fc89
mov eax, dword [0x4af550]
push edi
mov dword [ebp + 0xc], eax
lea eax, [ebp + 0xc]
push edi
push eax
mov ecx, esi
call fcn.0046e5fc
push edi
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
push eax
call fcn.004038b5
mov ecx, esi
call fcn.00471c08
lea ecx, [ebp + 0xc]
call fcn.004038fb
jmp 0x46f2dd
mov eax, dword [0x4af550]
push edi
mov dword [ebp + 0xc], eax
lea eax, [ebp + 0xc]
push 1
push eax
mov ecx, esi
call fcn.0046e5fc
lea ecx, [ebp + 0xc]
jmp 0x46fc6d
mov ecx, esi
call fcn.0046e9aa
jmp 0x46f2dd
mov ecx, esi
call fcn.004706bd
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0x8087
push 0x419
push dword [esi + 0x220]
call edi
lea ecx, [ebp - 0xac]
push ecx
push eax
push 0x41d
push dword [esi + 0x220]
call edi
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
push eax
push dword [esi + 0x220]
call dword [sym.imp.USER32.dll_ClientToScreen]
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov ebx, eax
lea eax, [ebp - 0x70]
push 0x36
push eax
mov dword [ebp + 0xc], ebx
call fcn.00461337
pop ecx
mov edi, dword [sym.imp.USER32.dll_AppendMenuW]
pop ecx
push dword [eax]
mov eax, dword [esi + 0x210]
neg eax
sbb eax, eax
push 1
and al, 0xf8
add eax, 8
push eax
push ebx
call edi
lea ecx, [ebp - 0x70]
call fcn.004038fb
lea eax, [ebp - 0x6c]
push 0x37
push eax
call fcn.00461337
pop ecx
pop ecx
push dword [eax]
mov eax, dword [esi + 0x20c]
neg eax
sbb eax, eax
push 2
and eax, 8
push eax
push ebx
call edi
lea ecx, [ebp - 0x6c]
call fcn.004038fb
lea eax, [ebp - 0x84]
push 0x38
push eax
call fcn.00461337
mov eax, dword [eax]
pop ecx
pop ecx
push eax
mov eax, dword [esi + 0x208]
neg eax
sbb eax, eax
push 3
and eax, 8
push eax
push ebx
call edi
lea ecx, [ebp - 0x84]
call fcn.004038fb
push 0x9e
lea eax, [ebp - 0x90]
push eax
call fcn.00461337
pop ecx
pop ecx
push dword [eax]
mov eax, dword [esi + 0x218]
neg eax
sbb eax, eax
push 4
and eax, 8
push eax
push ebx
call edi
lea ecx, [ebp - 0x90]
call fcn.004038fb
push 0x4bc518
mov ebx, 0x800
push 0
push ebx
push dword [ebp + 0xc]
call edi
lea eax, [ebp - 0x8c]
push 0x39
push eax
call fcn.00461337
pop ecx
pop ecx
push dword [eax]
push 0x805e
push 0
push dword [ebp + 0xc]
call edi
lea ecx, [ebp - 0x8c]
call fcn.004038fb
lea eax, [ebp - 0x64]
push 0x87
push eax
call fcn.00461337
pop ecx
pop ecx
push dword [eax]
push 0xe120
push 0
push dword [ebp + 0xc]
call edi
lea ecx, [ebp - 0x64]
call fcn.004038fb
lea eax, [ebp - 0x38]
push 0x9c41
push eax
call fcn.00461337
mov eax, dword [0x4af550]
pop ecx
pop ecx
mov dword [ebp - 0x14], eax
push ebx
lea ecx, [ebp - 0x14]
call fcn.00403c58
push ebx
push eax
push dword [esi + 0x264]
call dword [sym.imp.USER32.dll_GetWindowTextW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x14]
call fcn.00403cd2
mov eax, dword [ebp - 0x14]
push dword [ebp - 0x38]
mov eax, dword [eax - 8]
push 0x40
neg eax
sbb eax, eax
and al, 0xfd
add eax, 3
or ah, 4
push eax
push 0
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_InsertMenuW]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
mov edi, str.Fav_Filter
push edi
push 0x4afae4
call fcn.0044a9d1
and dword [ebp + 8], 0
and dword [ebp + 0x10], 0
add esp, 0x14
mov dword [ebp - 0x28], eax
test eax, eax
jle 0x46f81f
mov eax, dword [0x4af550]
push dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
mov dword [ebp + 0x14], eax
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push 0x4b0ab0
push eax
call fcn.00403d66
push dword [ebp + 0x14]
lea eax, [ebp - 0x94]
push dword [ebp - 0x30]
push edi
push eax
call fcn.0044aadb
add esp, 0x1c
lea ecx, [ebp + 0x14]
push eax
call fcn.00403a8c
lea ecx, [ebp - 0x94]
call fcn.004038fb
push 0x5c
push 3
push dword [ebp + 0x14]
lea eax, [ebp - 0x10]
push eax
call fcn.0048e9cf
add esp, 0x10
test eax, eax
je 0x46f7da
push 7
lea eax, [ebp - 0x60]
pop ecx
mov edx, dword [0x4af550]
mov dword [eax], edx
add eax, 4
dec ecx
jne 0x46f69b
and dword [ebp - 0x18], 0
lea eax, [ebp - 0x60]
mov dword [ebp - 0x20], eax
mov eax, dword [0x4af550]
push 0x5c
push dword [ebp - 0x18]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push dword [ebp + 0x14]
push eax
call fcn.0048e9cf
mov ecx, dword [ebp - 0x20]
add esp, 0x10
lea eax, [ebp - 0xc]
push eax
call fcn.00403a8c
lea ecx, [ebp - 0xc]
call fcn.004038fb
inc dword [ebp - 0x18]
add dword [ebp - 0x20], 4
cmp dword [ebp - 0x18], 3
jl 0x46f6b3
lea eax, [ebp - 0x58]
lea ecx, [ebp - 0x5c]
push eax
mov eax, 0x4afefc
push eax
push ecx
lea ecx, [ebp - 0x60]
push eax
push ecx
push eax
lea eax, [ebp - 0x10]
push 0x4b0324
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.0040a956
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0040a956
push eax
lea eax, [ebp - 0x98]
push eax
call fcn.00403b20
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.0040a956
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.00403b20
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.0040a956
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00403b20
lea ecx, [ebp - 0x78]
call fcn.004038fb
lea ecx, [ebp - 0x9c]
call fcn.004038fb
lea ecx, [ebp - 0x80]
call fcn.004038fb
lea ecx, [ebp - 0x98]
call fcn.004038fb
lea ecx, [ebp - 0x88]
call fcn.004038fb
lea ecx, [ebp - 0x68]
call fcn.004038fb
mov eax, dword [ebp + 0x10]
push dword [ebp - 0x1c]
add eax, 0x3e8
push eax
push 0x400
push dword [ebp + 8]
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_InsertMenuW]
inc dword [ebp + 8]
lea ecx, [ebp - 0x1c]
call fcn.004038fb
lea eax, [ebp - 0x44]
mov dword [ebp - 0xc], 7
mov dword [ebp - 0x20], eax
sub dword [ebp - 0x20], 4
mov ecx, dword [ebp - 0x20]
call fcn.004038fb
dec dword [ebp - 0xc]
jne 0x46f7c9
lea ecx, [ebp - 0x30]
call fcn.004038fb
lea ecx, [ebp + 0x14]
call fcn.004038fb
lea ecx, [ebp - 0x10]
call fcn.004038fb
inc dword [ebp + 0x10]
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebp - 0x28]
jl 0x46f631
cmp dword [ebp + 8], 0
je 0x46f81f
push 0x4bc518
push 0
push 0xc00
push dword [ebp + 8]
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_InsertMenuW]
push 1
push 0x8087
push 0x403
push dword [esi + 0x220]
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov ecx, dword [esi + 0x50]
push 0x12a
push edx
push eax
push dword [ebp + 0xc]
call fcn.00497e46
push 0
push 0x8087
push 0x403
mov dword [ebp + 0x10], eax
push dword [esi + 0x220]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebp + 0x10], 0
je 0x46fb92
mov ecx, dword [ebp + 0x10]
cmp ecx, 3
jne 0x46f88d
lea eax, [esi + 0x208]
xor ecx, ecx
cmp dword [eax], ecx
sete cl
mov dword [eax], ecx
jmp 0x46f90a
cmp ecx, 4
jne 0x46f8a5
xor eax, eax
cmp dword [esi + 0x218], eax
sete al
mov dword [esi + 0x218], eax
jmp 0x46f90a
cmp ecx, 2
jne 0x46f8bd
xor eax, eax
cmp dword [esi + 0x20c], eax
sete al
mov dword [esi + 0x20c], eax
jmp 0x46f90a
cmp ecx, 1
jne 0x46f8d5
xor eax, eax
cmp dword [esi + 0x210], eax
sete al
mov dword [esi + 0x210], eax
jmp 0x46f90a
mov eax, 0x805e
cmp ecx, eax
jne 0x46f8f1
push 0
push eax
push 0x111
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x46f90a
cmp ecx, 0xe120
jne 0x46f90a
push 0x4bc518
push dword [esi + 0x264]
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov ecx, esi
call fcn.00472a10
push 0
mov ecx, esi
call fcn.0047557b
mov ecx, esi
call fcn.00472b92
cmp dword [ebp + 0x10], 0x40
jne 0x46fa05
mov eax, dword [0x4af550]
push ebx
lea ecx, [ebp + 0x14]
mov dword [ebp + 0x14], eax
mov dword [ebp + 8], eax
call fcn.00403c58
push ebx
push eax
push dword [esi + 0x264]
call dword [sym.imp.USER32.dll_GetWindowTextW]
push 0xffffffffffffffff
lea ecx, [ebp + 0x14]
call fcn.00403cd2
push ecx
lea eax, [ebp + 0x14]
mov ecx, esp
push eax
call fcn.004038b5
lea eax, [ebp - 0x74]
mov ecx, esi
push eax
call fcn.004756d6
push eax
lea ecx, [ebp + 0x14]
call fcn.00403a8c
lea ecx, [ebp - 0x74]
call fcn.004038fb
mov eax, dword [ebp + 0x14]
cmp dword [eax - 8], 0
je 0x46f9f5
push eax
xor eax, eax
push dword [esi + 0x208]
cmp dword [esi + 0x210], eax
push dword [esi + 0x20c]
sete al
push eax
lea eax, [ebp + 8]
push str._d_d_d_s
push eax
call fcn.00403d66
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
mov ebx, 0x4afae4
push edi
push ebx
call fcn.0044a9d1
add esp, 0x2c
mov dword [ebp - 0x28], eax
push eax
lea eax, [ebp + 0x14]
push 0x4b0ab0
push eax
call fcn.00403d66
push 0
push dword [ebp + 8]
push dword [ebp + 0x14]
push edi
call fcn.0044aaba
mov eax, dword [ebp - 0x28]
push 0
inc eax
push eax
push edi
push ebx
call fcn.0044a990
add esp, 0x2c
lea ecx, [ebp + 8]
call fcn.004038fb
lea ecx, [ebp + 0x14]
call fcn.004038fb
mov ecx, dword [ebp + 0x10]
cmp ecx, 0x3e8
jl 0x46fb65
cmp ecx, 0x4b0
jg 0x46fb65
mov eax, dword [0x4af550]
add ecx, 0xfffffc18
mov dword [ebp + 8], eax
mov dword [ebp + 0x14], eax
push ecx
lea eax, [ebp + 8]
push 0x4b0ab0
push eax
call fcn.00403d66
push dword [ebp + 0x14]
lea eax, [ebp - 0x7c]
push dword [ebp + 8]
push edi
push eax
call fcn.0044aadb
add esp, 0x1c
lea ecx, [ebp + 0x14]
push eax
call fcn.00403a8c
lea ecx, [ebp - 0x7c]
call fcn.004038fb
push 7
lea eax, [ebp - 0x60]
pop ecx
mov edx, dword [0x4af550]
mov dword [eax], edx
add eax, 4
dec ecx
jne 0x46fa6a
xor ebx, ebx
lea edi, [ebp - 0x60]
mov eax, dword [0x4af550]
push 0x5c
push ebx
mov dword [ebp + 0x10], eax
push dword [ebp + 0x14]
lea eax, [ebp + 0x10]
push eax
call fcn.0048e9cf
add esp, 0x10
lea eax, [ebp + 0x10]
mov ecx, edi
push eax
call fcn.00403a8c
lea ecx, [ebp + 0x10]
call fcn.004038fb
inc ebx
add edi, 4
cmp ebx, 4
jl 0x46fa7d
mov eax, dword [ebp - 0x54]
xor ebx, ebx
cmp dword [eax - 8], ebx
je 0x46fb42
push dword [ebp - 0x60]
call fcn.0049c2d8
push dword [ebp - 0x5c]
neg eax
sbb eax, eax
inc eax
mov dword [esi + 0x210], eax
call fcn.0049c2d8
push dword [ebp - 0x58]
mov dword [esi + 0x20c], eax
call fcn.0049c2d8
lea edi, [esi + 0x208]
add esp, 0xc
lea ecx, [esi + 0x21c]
mov dword [edi], eax
lea eax, [ebp - 0x54]
push eax
call fcn.00403a8c
mov ecx, dword [esi + 0xf0]
push edi
add ecx, 0x15c
mov dword [esi + 0x214], 1
call fcn.00454aa2
push dword [ebp - 0x54]
push dword [esi + 0x264]
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov ecx, dword [esi + 0xf0]
push ebx
push ebx
push dword [esi + 0x214]
call fcn.00457b3d
push 7
lea edi, [ebp - 0x44]
pop ebx
sub edi, 4
mov ecx, edi
call fcn.004038fb
dec ebx
jne 0x46fb48
lea ecx, [ebp + 0x14]
call fcn.004038fb
lea ecx, [ebp + 8]
call fcn.004038fb
mov ecx, dword [esi + 0xf0]
lea eax, [esi + 0x208]
push eax
add ecx, 0x15c
call fcn.00454aa2
push 0x105
push 0
push 0
push dword [esi + 0x264]
call dword [sym.imp.USER32.dll_RedrawWindow]
lea ecx, [ebp - 0x14]
call fcn.004038fb
lea ecx, [ebp - 0x38]
call fcn.004038fb
cmp dword [ebp + 0xc], 0
je 0x46fc72
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x46fc72
mov ecx, 0xa773
cmp eax, ecx
ja 0x46fc3c
je 0x46fc0a
sub eax, 0x848b
je 0x46fbf1
dec eax
je 0x46fbe9
dec eax
je 0x46fbe1
dec eax
jne 0x46fc72
push edi
push 0x702c
jmp 0x46fbf7
push edi
push 0x702b
jmp 0x46fbf7
push edi
push 0x702a
jmp 0x46fbf7
push edi
push 0x7029
push 0x111
push dword [ebp + 0x14]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x46f2dd
xor eax, eax
cmp dword [esi + 0x420], edi
push edi
sete al
push eax
push str.show_tree
push dword [esi + 0x40]
mov dword [esi + 0x420], eax
call fcn.0044a990
add esp, 0x10
mov ecx, esi
push dword [esi + 0x420]
call fcn.00476977
jmp 0x46fc72
sub eax, 0xa775
je 0x46fc76
sub eax, 0x10a92
je 0x46fc4e
dec eax
dec eax
jmp 0x46fc72
mov eax, dword [0x4af550]
mov dword [ebp + 0xc], eax
lea eax, [ebp + 0xc]
push eax
push 1
push edi
push dword [esi + 4]
call fcn.00472c2b
add esp, 0x10
lea ecx, [ebp + 0xc]
test eax, eax
call fcn.004038fb
xor eax, eax
jmp 0x46fc89
push 1
mov ecx, esi
pop edi
push edi
call fcn.004757e1
test eax, eax
je 0x46fc87
mov dword [ebx], edi
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x10