Function at 0x465ba0
Capabilities:
Link many functions at runtime
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x583ba5
mov eax, dword fs:[0]
push eax
sub esp, 0x3a0
mov eax, dword [0x5cca0c]
xor eax, esp
mov dword [esp + 0x398], eax
push ebx
push esi
push edi
mov eax, dword [0x5cca0c]
xor eax, esp
push eax
lea eax, [esp + 0x3b0]
mov dword fs:[0], eax
xor ebx, ebx
mov esi, ecx
mov edi, 0xf
mov dword [esp + 0x44], esi
mov dword [esp + 0x2c8], edi
mov dword [esp + 0x2c4], ebx
mov byte [esp + 0x2b4], bl
lea eax, [esp + 0x208]
push eax
mov dword [esp + 0x3bc], ebx
call fcn.004ae0d0
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.XunYouPlatform.txt
push eax
push ecx
mov byte [esp + 0x3e0], 1
call fcn.0040cf70
add esp, 0xc
lea ecx, [esp + 0x2cc]
call fcn.00458000
add esp, 0x1c
cmp dword [esp + 0x220], 0x10
mov byte [esp + 0x23], al
mov byte [esp + 0x3b8], bl
jb 0x465c6a
mov edx, dword [esp + 0x20c]
push edx
call fcn.0055215c
add esp, 4
cmp byte [esp + 0x23], bl
je 0x466b4f
lea ecx, [esp + 0x4c]
call fcn.0042df20
mov dword [esp + 0x50], eax
mov byte [eax + 0x35], 1
mov eax, dword [esp + 0x50]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x50]
mov dword [eax], eax
mov eax, dword [esp + 0x50]
mov dword [eax + 8], eax
mov dword [esp + 0x54], ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x2d4]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push eax
mov byte [esp + 0x3e0], 2
mov byte [ecx + 4], bl
call fcn.0040a080
lea ecx, [esp + 0x68]
call fcn.004b6400
lea ecx, [esp + 0x58]
call fcn.004376f0
mov dword [esp + 0x5c], eax
mov byte [eax + 0x11], 1
mov eax, dword [esp + 0x5c]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [eax], eax
mov eax, dword [esp + 0x5c]
mov dword [eax + 8], eax
mov dword [esp + 0x60], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
push 0x59648b
lea ecx, [esp + 0x20c]
push str.only_include_control_id_list
push ecx
mov byte [esp + 0x3c4], 4
call fcn.004828e0
add esp, 0xc
cmp dword [esp + 0x21c], ebx
mov byte [esp + 0x3b8], 5
je 0x465dc9
lea ecx, [esp + 0x24]
call fcn.004bb870
push 0x2c
lea edx, [esp + 0x20c]
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x3c0], 6
call fcn.004bbdd0
lea ecx, [esp + 0x24]
xor esi, esi
call fcn.004ba7f0
test eax, eax
jbe 0x465db8
nop
push esi
lea ecx, [esp + 0x28]
call fcn.004ba7a0
cmp dword [eax + 0x18], 0x10
jb 0x465d85
mov eax, dword [eax + 4]
jmp 0x465d88
add eax, 4
push eax
call fcn.00554a20
add esp, 4
mov dword [esp + 0x48], eax
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x68]
push ecx
lea ecx, [esp + 0x60]
call fcn.0045b860
lea ecx, [esp + 0x24]
add esi, 1
call fcn.004ba7f0
cmp esi, eax
jb 0x465d70
lea ecx, [esp + 0x24]
mov byte [esp + 0x3b8], 5
call fcn.004bb880
mov dword [esp + 0x14], 0x3ea
mov edx, dword [esp + 0x44]
mov esi, dword [edx + 4]
call fcn.004a1350
cmp eax, ebx
je 0x465e01
push str.uiview_get_dlg_item
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
je 0x465e01
mov ecx, dword [esp + 0x14]
push ecx
push esi
call eax
cmp eax, ebx
je 0x46682d
cmp dword [esp + 0x60], ebx
je 0x465e96
mov edx, dword [esp + 0x5c]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x68]
push ecx
lea ecx, [esp + 0x60]
mov dword [esp + 0x98], edx
call fcn.00456560
mov esi, eax
mov eax, dword [esi]
cmp eax, ebx
je 0x465e39
lea edx, [esp + 0x58]
cmp eax, edx
je 0x465e3e
call fcn.005532de
mov eax, dword [esp + 0x90]
cmp dword [esi + 4], eax
jne 0x465e72
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x84]
mov dword [esp + 0x84], ecx
push edx
lea ecx, [esp + 0x38]
mov dword [esp + 0x8c], ebx
call fcn.004615c0
jmp 0x46682d
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x7c]
push ecx
lea ecx, [esp + 0x38]
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], 5
call fcn.004615c0
mov esi, 0x3f0
cmp dword [esp + 0x14], esi
jne 0x465f04
call fcn.00444df0
cmp byte [eax + 0x50], bl
jne 0x465f04
lea edx, [esp + 0x74]
push edx
lea ecx, [esp + 0x38]
mov dword [esp + 0x78], esi
mov dword [esp + 0x7c], ebx
call fcn.004615c0
mov eax, dword [esp + 0x44]
mov esi, dword [eax + 0x4b8]
mov eax, dword [eax + 0x4b4]
mov dword [esp + 0x48], eax
call fcn.004a1350
cmp eax, ebx
je 0x46682d
push str.uiview_show_window
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
je 0x46682d
mov ecx, dword [esp + 0x48]
push ebx
push esi
push ecx
call eax
jmp 0x46682d
mov dword [esp + 0x23c], edi
mov dword [esp + 0x238], ebx
mov byte [esp + 0x228], bl
mov dword [esp + 0x258], edi
mov dword [esp + 0x254], ebx
mov byte [esp + 0x244], bl
mov dword [esp + 0x264], ebx
mov dword [esp + 0x268], ebx
mov dword [esp + 0x26c], ebx
mov dword [esp + 0x270], ebx
mov dword [esp + 0x274], ebx
mov dword [esp + 0x278], ebx
mov dword [esp + 0x27c], ebx
mov dword [esp + 0x280], ebx
mov dword [esp + 0x284], ebx
mov dword [esp + 0x288], ebx
mov dword [esp + 0x28c], ebx
mov dword [esp + 0x290], ebx
mov ecx, dword [esp + 0x14]
lea esi, [esp + 0x1ec]
mov byte [esp + 0x3b8], 7
call fcn.0045ac40
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push 0x59648b
mov byte [esp + 0x3dc], 8
mov byte [ecx + 4], bl
call fcn.0040c1c0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x54], esp
push 7
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push str.caption
mov byte [esp + 0x3f8], 9
mov byte [ecx + 4], bl
call fcn.0040c1c0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x6c], esp
push 0xffffffffffffffff
push ebx
mov edx, esi
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [esp + 0x418], 0xa
mov byte [ecx + 4], bl
call fcn.0040a080
lea eax, [esp + 0xf0]
push eax
lea ecx, [esp + 0xa4]
mov byte [esp + 0x410], 8
call fcn.004b4420
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x230]
mov byte [esp + 0x3c4], 0xb
call fcn.0040a080
cmp dword [esp + 0xb4], 0x10
mov byte [esp + 0x3b8], 8
jb 0x466060
mov ecx, dword [esp + 0xa0]
push ecx
call fcn.0055215c
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push 0x59648b
mov byte [ecx + 4], bl
call fcn.0040c1c0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x54], esp
push 3
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push 0x597c68
mov byte [esp + 0x3f8], 0xc
mov byte [ecx + 4], bl
call fcn.0040c1c0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x6c], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x248]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [esp + 0x418], 0xd
mov byte [ecx + 4], bl
call fcn.0040a080
lea eax, [esp + 0xf0]
push eax
lea ecx, [esp + 0xa4]
mov byte [esp + 0x410], 8
call fcn.004b4420
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x24c]
mov byte [esp + 0x3c4], 0xe
call fcn.0040a080
mov esi, 0x10
cmp dword [esp + 0xb4], esi
mov byte [esp + 0x3b8], 8
jb 0x466127
mov ecx, dword [esp + 0xa0]
push ecx
call fcn.0055215c
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 1
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push 0x596c00
mov byte [ecx + 4], bl
call fcn.0040c1c0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x54], esp
push 9
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push str.open_type
mov byte [esp + 0x3f8], 0xf
mov byte [ecx + 4], bl
call fcn.0040c1c0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x6c], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x248]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [esp + 0x418], 0x10
mov byte [ecx + 4], bl
call fcn.0040a080
lea eax, [esp + 0xf0]
push eax
lea ecx, [esp + 0xa4]
mov byte [esp + 0x410], 8
call fcn.004b4420
cmp dword [eax + 0x18], esi
jb 0x4661bb
mov eax, dword [eax + 4]
jmp 0x4661be
add eax, 4
push eax
call fcn.00554a20
add esp, 4
cmp dword [esp + 0xb4], esi
mov dword [esp + 0x25c], eax
jb 0x4661e7
mov ecx, dword [esp + 0xa0]
push ecx
call fcn.0055215c
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 1
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push 0x596c00
mov byte [ecx + 4], bl
call fcn.0040c1c0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x54], esp
push 7
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push str.timeout
mov byte [esp + 0x3f8], 0x11
mov byte [ecx + 4], bl
call fcn.0040c1c0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x6c], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x248]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [esp + 0x418], 0x12
mov byte [ecx + 4], bl
call fcn.0040a080
lea eax, [esp + 0xf0]
push eax
lea ecx, [esp + 0xa4]
mov byte [esp + 0x410], 8
call fcn.004b4420
cmp dword [eax + 0x18], esi
jb 0x46627b
mov eax, dword [eax + 4]
jmp 0x46627e
add eax, 4
push eax
call fcn.00554a20
add esp, 4
cmp dword [esp + 0xb4], esi
mov dword [esp + 0x260], eax
jb 0x4662a7
mov ecx, dword [esp + 0xa0]
push ecx
call fcn.0055215c
add esp, 4
push 0xd6
lea edx, [esp + 0x2d1]
push ebx
push edx
mov byte [esp + 0x2d8], bl
call fcn.00552500
mov eax, dword [esp + 0x20]
push eax
lea ecx, [esp + 0x2dc]
push str.control_id__d_url
push ecx
call fcn.0044c710
push 0x59648b
lea edx, [esp + 0x2e8]
push edx
lea eax, [esp + 0x2b4]
push eax
call fcn.004828e0
add esp, 0x24
cmp dword [esp + 0x2a8], ebx
mov byte [esp + 0x3b8], 0x13
je 0x46631d
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x29c]
push ecx
lea ecx, [esp + 0x24c]
call fcn.0040a080
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push 0x59648b
mov byte [ecx + 4], bl
call fcn.0040c1c0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x54], esp
push 8
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push str.position
mov byte [esp + 0x3f8], 0x14
mov byte [ecx + 4], bl
call fcn.0040c1c0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x6c], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x248]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [esp + 0x418], 0x15
mov byte [ecx + 4], bl
call fcn.0040a080
lea eax, [esp + 0x224]
push eax
lea ecx, [esp + 0xa4]
mov byte [esp + 0x410], 0x13
call fcn.004b4420
cmp dword [esp + 0x1e4], ebx
mov byte [esp + 0x3b8], 0x16
je 0x466410
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x1f4]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [ecx + 4], bl
call fcn.0040a080
lea eax, [esp + 0x1cc]
push eax
call fcn.00455d90
mov ecx, dword [eax]
mov dword [esp + 0x284], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x288], edx
mov ecx, dword [eax + 8]
mov dword [esp + 0x28c], ecx
mov edx, dword [eax + 0xc]
add esp, 0x20
mov dword [esp + 0x270], edx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push 0x59648b
mov byte [ecx + 4], bl
call fcn.0040c1c0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x54], esp
push 0xb
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push str.ie_position
mov byte [esp + 0x3f8], 0x17
mov byte [ecx + 4], bl
call fcn.0040c1c0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x6c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x248]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push eax
mov byte [esp + 0x418], 0x18
mov byte [ecx + 4], bl
call fcn.0040a080
lea ecx, [esp + 0xf0]
push ecx
lea ecx, [esp + 0xa4]
mov byte [esp + 0x410], 0x16
call fcn.004b4420
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x1dc]
mov byte [esp + 0x3c4], 0x19
call fcn.0040a080
cmp dword [esp + 0xb4], esi
mov byte [esp + 0x3b8], 0x16
jb 0x4664d2
mov edx, dword [esp + 0xa0]
push edx
call fcn.0055215c
add esp, 4
cmp dword [esp + 0x1e4], ebx
je 0x466534
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x1f4]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], bl
call fcn.0040a080
lea ecx, [esp + 0x1bc]
push ecx
call fcn.00455d90
mov edx, dword [eax]
mov dword [esp + 0x294], edx
mov ecx, dword [eax + 4]
mov dword [esp + 0x298], ecx
mov edx, dword [eax + 8]
mov dword [esp + 0x29c], edx
mov eax, dword [eax + 0xc]
add esp, 0x20
mov dword [esp + 0x280], eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push 0x59648b
mov byte [ecx + 4], bl
call fcn.0040c1c0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x54], esp
push 0x15
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push str.close_button_position
mov byte [esp + 0x3f8], 0x1a
mov byte [ecx + 4], bl
call fcn.0040c1c0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x6c], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x248]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [esp + 0x418], 0x1b
mov byte [ecx + 4], bl
call fcn.0040a080
lea eax, [esp + 0xf0]
push eax
lea ecx, [esp + 0xa4]
mov byte [esp + 0x410], 0x16
call fcn.004b4420
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x1dc]
mov byte [esp + 0x3c4], 0x1c
call fcn.0040a080
cmp dword [esp + 0xb4], esi
mov byte [esp + 0x3b8], 0x16
jb 0x4665f6
mov ecx, dword [esp + 0xa0]
push ecx
call fcn.0055215c
add esp, 4
cmp dword [esp + 0x1e4], ebx
je 0x466658
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x1f4]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [ecx + 4], bl
call fcn.0040a080
lea eax, [esp + 0x1dc]
push eax
call fcn.00455d90
mov ecx, dword [eax]
mov dword [esp + 0x2a4], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x2a8], edx
mov ecx, dword [eax + 8]
mov dword [esp + 0x2ac], ecx
mov edx, dword [eax + 0xc]
add esp, 0x20
mov dword [esp + 0x290], edx
push 0x5cdf78
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [esp + 0x254], ebx
je 0x466784
sub esp, 0x70
lea eax, [esp + 0x294]
mov ecx, esp
mov dword [esp + 0x80], esp
push eax
call fcn.004585d0
mov ecx, dword [esp + 0x84]
push ecx
lea edx, [esp + 0x1a0]
push edx
call fcn.0045c140
add esp, 0x78
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0xb8], ecx
push eax
lea ecx, [esp + 0xc0]
mov byte [esp + 0x3bc], 0x1d
call fcn.004585d0
lea edx, [esp + 0xb8]
push edx
lea eax, [esp + 0x28]
push eax
mov ecx, 0x5cdf6c
mov byte [esp + 0x3c0], 0x1e
call fcn.004628e0
cmp dword [esp + 0xf0], esi
jb 0x4666fa
mov ecx, dword [esp + 0xdc]
push ecx
call fcn.0055215c
add esp, 4
cmp dword [esp + 0xd4], esi
mov dword [esp + 0xf0], edi
mov dword [esp + 0xec], ebx
mov byte [esp + 0xdc], bl
jb 0x466728
mov edx, dword [esp + 0xc0]
push edx
call fcn.0055215c
add esp, 4
cmp dword [esp + 0x164], esi
mov dword [esp + 0xd4], edi
mov dword [esp + 0xd0], ebx
mov byte [esp + 0xc0], bl
jb 0x466756
mov eax, dword [esp + 0x150]
push eax
call fcn.0055215c
add esp, 4
cmp dword [esp + 0x148], esi
mov dword [esp + 0x164], edi
mov dword [esp + 0x160], ebx
mov byte [esp + 0x150], bl
jb 0x466784
mov ecx, dword [esp + 0x134]
push ecx
call fcn.0055215c
add esp, 4
push 0x5cdf78
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [esp + 0x1e8], esi
jb 0x4667a8
mov edx, dword [esp + 0x1d4]
push edx
call fcn.0055215c
add esp, 4
cmp dword [esp + 0x2ac], esi
mov dword [esp + 0x1e8], edi
mov dword [esp + 0x1e4], ebx
mov byte [esp + 0x1d4], bl
jb 0x4667d6
mov eax, dword [esp + 0x298]
push eax
call fcn.0055215c
add esp, 4
cmp dword [esp + 0x204], esi
mov dword [esp + 0x2ac], edi
mov dword [esp + 0x2a8], ebx
mov byte [esp + 0x298], bl
jb 0x466804
mov ecx, dword [esp + 0x1f0]
push ecx
call fcn.0055215c
add esp, 4
lea ecx, [esp + 0x224]
mov dword [esp + 0x204], edi
mov dword [esp + 0x200], ebx
mov byte [esp + 0x1f0], bl
mov byte [esp + 0x3b8], 5
call fcn.00455740
mov eax, dword [esp + 0x14]
add eax, 1
cmp eax, 0x3f3
mov dword [esp + 0x14], eax
jl 0x465dd1
mov eax, dword [esp + 0x38]
cmp eax, ebx
je 0x466a98
mov edx, dword [esp + 0x3c]
mov ecx, edx
sub ecx, eax
sar ecx, 3
je 0x466a98
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x14], ebx
xor esi, esi
cmp eax, ebx
mov dword [esp + 0x7c], esi
je 0x466a98
mov ecx, edx
sub ecx, eax
sar ecx, 3
cmp esi, ecx
jae 0x466a98
cmp eax, ebx
lea ecx, [eax + esi*8]
mov dword [esp + 0x74], ecx
je 0x4668d1
sub edx, eax
sar edx, 3
cmp esi, edx
jb 0x4668da
call fcn.005532de
mov eax, dword [esp + 0x38]
lea edx, [eax + esi*8 + 4]
lea eax, [esp + 0x24]
push eax
mov dword [esp + 0x4c], edx
call dword [sym.imp.USER32.dll_SetRectEmpty]
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx]
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 4]
mov dword [esp + 0x84], edx
mov dword [esp + 0x18], ecx
call fcn.004a1350
cmp eax, ebx
je 0x466932
push str.uiview_get_window_rect
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
je 0x466932
mov edx, dword [esp + 0x84]
mov ecx, dword [esp + 0x18]
push edx
push ecx
lea edx, [esp + 0x2c]
push edx
call eax
cmp dword [esp + 0x14], ebx
je 0x4669ec
mov eax, dword [esp + 0x48]
cmp dword [eax], ebx
je 0x4669ec
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x68], edx
mov edx, dword [esp + 0x14]
push ebx
mov dword [esp + 0x70], eax
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x34]
push edx
lea eax, [esp + 0x6c]
push eax
mov dword [esp + 0x7c], ecx
call dword [sym.imp.USER32.dll_OffsetRect]
mov ecx, dword [esp + 0x64]
mov eax, dword [esp + 0x68]
mov edi, dword [esp + 0x6c]
mov esi, dword [esp + 0x70]
sub edi, ecx
mov dword [esp + 0x84], ecx
mov ecx, dword [esp + 0x74]
mov edx, dword [ecx]
sub esi, eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 4]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x10], ecx
call fcn.004a1350
cmp eax, ebx
je 0x4669e3
push str.uiview_move_window
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
je 0x4669e3
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x84]
push 1
push esi
push edi
push edx
mov edx, dword [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x24]
push edx
push ecx
call eax
mov esi, dword [esp + 0x7c]
mov edi, 0xf
mov edx, dword [esp + 0x48]
cmp dword [edx], ebx
jne 0x466a5c
mov eax, dword [esp + 0x74]
mov ecx, dword [eax]
mov edx, dword [esp + 0x44]
mov eax, dword [edx + 4]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x1c], eax
call fcn.004a1350
cmp eax, ebx
je 0x466a2f
push str.uiview_show_window
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
je 0x466a2f
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
push ebx
push ecx
push edx
call eax
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x2c]
lea ecx, [esp + 0x8c]
add dword [esp + 0x14], eax
push ecx
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x466a5c
mov edx, dword [esp + 0x94]
sub edx, dword [esp + 0x24]
add dword [esp + 0x14], edx
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x94], edx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x90], ecx
add esi, 1
jmp 0x4668a2
cmp dword [esp + 0x220], 0x10
jb 0x466ab6
mov ecx, dword [esp + 0x20c]
push ecx
call fcn.0055215c
mov eax, dword [esp + 0x3c]
add esp, 4
cmp eax, ebx
mov dword [esp + 0x220], edi
mov dword [esp + 0x21c], ebx
mov byte [esp + 0x20c], bl
je 0x466ad8
push eax
call fcn.0055215c
add esp, 4
mov eax, dword [esp + 0x5c]
push eax
lea ecx, [esp + 0x5c]
push ecx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov edx, dword [eax]
push edx
mov esi, ecx
push esi
lea edx, [esp + 0x74]
push edx
mov byte [esp + 0x3cc], 2
call fcn.0043cdb0
mov eax, dword [esp + 0x5c]
push eax
call fcn.0055215c
mov eax, dword [esp + 0x54]
add esp, 4
push eax
lea ecx, [esp + 0x50]
push ecx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov edx, dword [eax]
mov esi, ecx
push edx
push esi
lea ecx, [esp + 0x74]
push ecx
mov ecx, esi
mov byte [esp + 0x3cc], bl
call fcn.00430ef0
mov edx, dword [esp + 0x50]
push edx
call fcn.0055215c
mov esi, dword [esp + 0x48]
add esp, 4
mov edi, dword [esi + 4]
call fcn.004a1350
cmp eax, ebx
je 0x466b7b
push str.uiview_get_dlg_item
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
je 0x466b7b
push 0x3f0
push edi
call eax
cmp eax, ebx
je 0x466c50
mov edi, dword [esi + 4]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
call fcn.004a1350
cmp eax, ebx
je 0x466bc4
push str.uiview_get_window_rect
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
je 0x466bc4
push 0x3f0
push edi
lea ecx, [esp + 0x2c]
push ecx
call eax
mov edx, dword [esi + 0x4b4]
lea edi, [esi + 0x4b4]
mov esi, dword [edi + 4]
mov dword [esp + 0x10], edx
call fcn.004a1350
cmp eax, ebx
je 0x466bfd
push str.uiview_get_window_rect
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
je 0x466bfd
mov ecx, dword [esp + 0x10]
push esi
push ecx
lea edx, [esp + 0x3c]
push edx
call eax
mov esi, dword [esp + 0x34]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x28]
add ecx, esi
mov ebx, ecx
sub ebx, esi
mov esi, dword [esp + 0x3c]
add eax, edx
add esi, ebx
mov ebx, eax
sub ebx, edx
mov edx, dword [esp + 0x40]
add edx, ebx
push 1
mov ebx, eax
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], ebx
mov dword [esp + 0x48], ecx
mov dword [eax + 8], esi
mov ecx, edi
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], edx
mov dword [esp + 0x4c], ebx
mov dword [eax + 0xc], edx
call fcn.00449f70
cmp dword [esp + 0x2c8], 0x10
jb 0x466c6a
mov edx, dword [esp + 0x2b4]
push edx
call fcn.0055215c
add esp, 4
mov ecx, dword [esp + 0x3b0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x398]
xor ecx, esp
call fcn.00552d63
mov esp, ebp
pop ebp
ret