Function at 0x461750
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x60
push ebx
mov ebx, dword [esp + 0x70]
mov al, byte [ebx + 4]
push ebp
mov ebp, dword [esp + 0x70]
push esi
push edi
mov edi, ecx
cmp al, 0xa
je 0x461775
cmp al, 2
je 0x461775
lea eax, [ebx + 0x10]
mov dword [esp + 0x1c], eax
jmp 0x46177c
lea ecx, [ebp + 0x5c]
mov dword [esp + 0x1c], ecx
cmp byte [edi], 0
mov byte [esp + 0x17], 0
je 0x4633d6
lea ebx, [ebx]
mov al, byte [edi]
cmp al, 0x2d
jne 0x46179d
mov byte [esp + 0x78], 0
jmp 0x4617a6
mov byte [esp + 0x78], 1
cmp al, 0x2b
jne 0x4617a7
inc edi
mov cl, byte [edi]
test cl, cl
je 0x4633d6
mov edx, edi
mov esi, 0x49c14c
mov al, 0x20
lea ebx, [ebx]
cmp cl, al
je 0x461822
mov al, byte [esi + 1]
inc esi
test al, al
jne 0x4617c0
mov cl, byte [edx + 1]
inc edx
test cl, cl
jne 0x4617b3
mov eax, edi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4617e0
sub eax, edx
add eax, edi
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
cmp eax, edi
je 0x4633b6
mov dl, byte [eax]
push 0x4a2184
push edi
mov byte [esp + 0x1e], dl
mov byte [eax], 0
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461828
mov byte [ebp + 0x191], 1
jmp case.0x462b9d.7
mov dword [esp + 0x18], edx
jmp 0x4617ef
push 0x4a218c
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461853
cmp byte [ebx + 4], 0xc
je 0x461853
cmp byte [esp + 0x78], al
je 0x46216e
or byte [ebx + 5], 2
jmp case.0x462b9d.7
push 7
push 0x4a0640
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x4618e0
add edi, 7
push 0x4a2198
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461890
movzx eax, byte [esp + 0x78]
neg eax
sbb eax, eax
and eax, 2
mov dword [ebp + 0x6c], eax
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0xa
jne 0x4618af
cmp byte [esp + 0x78], 0
je 0x4618a6
or dword [ebp + 0x10], 4
jmp case.0x462b9d.7
and dword [ebp + 0x10], 0xfffffffb
jmp case.0x462b9d.7
cmp byte [edi], 0
je 0x4618d3
mov esi, edi
call fcn.0040e430
mov dword [ebp + 0x6c], eax
cmp eax, 0xffffffff
jne case.0x462b9d.7
mov dword [ebp + 0x6c], 2
jmp case.0x462b9d.7
movzx ecx, byte [esp + 0x78]
mov dword [ebp + 0x6c], ecx
jmp case.0x462b9d.7
push 6
push 0x4a05d8
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x461999
cmp byte [esp + 0x78], al
je case.0x462b9d.7
movzx eax, byte [ebx + 4]
add edi, 6
sub eax, 0xd
je 0x461955
dec eax
je 0x461930
mov esi, edi
call fcn.0040e430
mov dword [ebp + 0x34], eax
cmp eax, 1
jge case.0x462b9d.7
mov dword [ebp + 0x34], 0
jmp case.0x462b9d.7
lea eax, [ebp + 0x140]
mov ecx, edi
call fcn.004737c0
mov dword [ebp + 0x180], eax
cmp eax, 3
jne case.0x462b9d.7
or dword [ebp], 2
jmp case.0x462b9d.7
push 0x4a21a0
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461973
mov dword [ebp + 0x34], 2
jmp case.0x462b9d.7
push 1
lea esi, [ebp + 0x140]
mov eax, edi
call fcn.00473840
add esp, 4
test eax, eax
je case.0x462b9d.7
mov dword [ebp + 0x34], 1
jmp case.0x462b9d.7
push 0x4a20e8
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x4619c9
cmp byte [esp + 0x78], al
je 0x4619bd
or dword [ebp], 0x800000
jmp case.0x462b9d.7
or dword [ebp + 4], 0x800000
jmp case.0x462b9d.7
push 0x4a21a8
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x4619f9
cmp byte [esp + 0x78], al
je 0x4619ed
or dword [ebp], 0x200000
jmp case.0x462b9d.7
or dword [ebp + 4], 0x200000
jmp case.0x462b9d.7
push 7
push 0x4a21b0
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x461a64
cmp byte [ebx + 4], 0xb
jne 0x461a29
cmp byte [esp + 0x78], al
je 0x461ec4
or dword [ebp + 4], 0x8000
jmp case.0x462b9d.7
cmp byte [esp + 0x78], 0
je 0x461a58
or dword [ebp], 0x100000
cmp byte [edi + 7], 0
je 0x461a4d
lea esi, [edi + 7]
call fcn.0040e430
mov dword [ebp + 0x68], eax
jmp case.0x462b9d.7
or eax, 0xffffffff
mov dword [ebp + 0x68], eax
jmp case.0x462b9d.7
or dword [ebp + 4], 0x100000
jmp case.0x462b9d.7
push 0x4a21b8
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461a88
cmp byte [esp + 0x78], al
je 0x461aa0
or dword [ebp], 0x10000
jmp case.0x462b9d.7
push 0x4a21c0
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461aac
cmp byte [esp + 0x78], al
je 0x461a7c
or dword [ebp + 4], 0x10000
jmp case.0x462b9d.7
push 0x4a21c8
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461ad5
cmp byte [esp + 0x78], 0
je 0x461d63
or dword [ebp], 0x20000
jmp case.0x462b9d.7
push 0x49f8c0
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461afe
xor edx, edx
cmp byte [esp + 0x78], dl
sete dl
add edx, 3
mov dword [ebp + 0x188], edx
jmp case.0x462b9d.7
push 8
push 0x4a2104
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x461b75
cmp byte [edi + 8], al
lea esi, [edi + 8]
je 0x461b2e
call fcn.0040e430
test eax, eax
jne 0x461b2e
cmp byte [esp + 0x78], al
sete al
mov byte [esp + 0x78], al
mov eax, dword [ebx]
test eax, eax
je 0x461b55
xor ecx, ecx
cmp byte [esp + 0x78], cl
sete cl
push ecx
push eax
call dword [sym.imp.USER32.DLL_EnableWindow]
cmp byte [esp + 0x78], 0
je 0x461b6c
or byte [ebx + 5], 0x10
jmp case.0x462b9d.7
cmp byte [esp + 0x78], 0
je 0x461b65
or dword [ebp], 0x8000000
jmp 0x461b45
or dword [ebp + 4], 0x8000000
and byte [ebx + 5], 0xef
jmp case.0x462b9d.7
push 6
push 0x4a21d0
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x461bf0
cmp byte [edi + 6], al
lea esi, [edi + 6]
je 0x461ba5
call fcn.0040e430
test eax, eax
jne 0x461ba5
cmp byte [esp + 0x78], al
sete dl
mov byte [esp + 0x78], dl
mov eax, dword [ebx]
test eax, eax
je 0x461bd0
xor ecx, ecx
cmp byte [esp + 0x78], cl
setne cl
dec ecx
and ecx, 4
push ecx
push eax
call dword [sym.imp.USER32.DLL_ShowWindow]
cmp byte [esp + 0x78], 0
je 0x461be7
or byte [ebx + 5], 8
jmp case.0x462b9d.7
cmp byte [esp + 0x78], 0
je 0x461be0
or dword [ebp + 4], 0x10000000
jmp 0x461bc0
or dword [ebp], 0x10000000
and byte [ebx + 5], 0xf7
jmp case.0x462b9d.7
push 0x4a21d8
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461c75
movzx eax, byte [ebx + 4]
dec eax
cmp eax, 0x12
ja case.0x462b9d.7
movzx edx, byte [eax + 0x463a54]
jmp dword [edx*4 + 0x463a3c]
cmp byte [esp + 0x78], 0
je 0x461c2e
or dword [ebp + 4], 0x1f
jmp case.0x462b9d.7
mov eax, dword [ebp]
and eax, 0xffffffec
or eax, 0xc
mov dword [ebp], eax
jmp case.0x462b9d.7
cmp byte [esp + 0x78], 0
je 0x461c52
or dword [ebp + 4], 0x100080
jmp case.0x462b9d.7
or dword [ebp], 0x80
jmp case.0x462b9d.7
cmp byte [esp + 0x78], 0
je 0x462082
or dword [ebp], 0x200
jmp case.0x462b9d.7
push 0xa
push 0x4a21e0
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x461d2c
movzx eax, byte [ebx + 4]
add eax, 0xfffffff6
add edi, 0xa
cmp eax, 0xf
ja case.0x461ca3.12
movzx ecx, byte [eax + 0x463a70]
jmp dword [ecx*4 + 0x463a68]
cmp byte [esp + 0x78], 0
je 0x461ce0
mov esi, edi
call fcn.00474db0
mov dword [ebp + 0x60], eax
cmp eax, 0xffffffff
jne case.0x462b9d.7
push 0x10
push 0
push edi
call fcn.00488945
add esp, 0xc
mov ecx, eax
call fcn.00430990
mov dword [ebp + 0x60], eax
jmp case.0x462b9d.7
mov dword [ebp + 0x60], 0xff000000
jmp case.0x462b9d.7
cmp byte [esp + 0x78], 0
je 0x461d1b
and byte [ebx + 5], 0xdf
push 0x49f880
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461d12
or byte [ebx + 5], 0x40
jmp case.0x462b9d.7
and byte [ebx + 5], 0xbf
jmp case.0x462b9d.7
mov dl, byte [ebx + 5]
and dl, 0xbf
or dl, 0x20
mov byte [ebx + 5], dl
jmp case.0x462b9d.7
push 0x4a21c8
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
je 0x461abe
push 0x4a2164
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461d6f
mov al, byte [esp + 0x78]
mov byte [ebp + 0x192], al
jmp case.0x462b9d.7
or dword [ebp + 4], 0x20000
jmp case.0x462b9d.7
push 4
push 0x49f7e0
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x461d9c
push 3
push eax
add edi, 4
push edi
mov ecx, 0x4ad268
call fcn.00422630
mov dword [ebp + 0x1c], eax
jmp case.0x462b9d.7
push 4
push 0x49f7c4
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x461df3
add edi, 4
cmp byte [ebx + 4], 0xa
jne 0x461dd9
push 0x4a21ec
push edi
call fcn.00486ea1
add esp, 8
neg eax
sbb eax, eax
and eax, 0xfffffffe
add eax, 2
mov dword [ebp + 0x14], eax
jmp case.0x462b9d.7
cmp byte [esp + 0x78], 0
je case.0x462b9d.7
mov esi, edi
call fcn.0040e430
mov dword [ebp + 0x70], eax
jmp case.0x462b9d.7
push 0x4a21f4
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461e11
mov dword [ebp + 0x14], 1
jmp case.0x462b9d.7
push 0x49f80c
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461e2f
mov dword [ebp + 0x14], 3
jmp case.0x462b9d.7
push 0x4a21fc
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461e59
cmp byte [0x4ada42], al
je case.0x462b9d.7
mov dword [ebp + 0x14], 4
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0xa
jne 0x461f0f
push 0x4a047c
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461e8b
cmp byte [esp + 0x78], al
je 0x462218
or dword [ebp + 4], 0x4000
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0xa
jne 0x461f0f
push 6
push 0x4a046c
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x461edf
push 0x4a047c
add edi, 6
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461ed0
cmp byte [esp + 0x78], al
je 0x461a1d
or dword [ebp], 0x8000
jmp case.0x462b9d.7
mov cl, byte [esp + 0x78]
mov byte [ebp + 0x193], cl
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0xa
jne 0x461f0f
push 0x4a2204
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461f0f
cmp byte [esp + 0x78], al
je 0x461f06
or dword [ebp + 0x10], 1
jmp case.0x462b9d.7
and dword [ebp + 0x10], 0xfffffffe
jmp case.0x462b9d.7
push 5
push 0x49cf6c
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x461f33
lea esi, [edi + 5]
call fcn.0040e430
mov dword [ebp + 0x64], eax
jmp case.0x462b9d.7
mov esi, 2
push esi
push 0x4a220c
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x461f83
push eax
push eax
push eax
add edi, esi
push eax
mov eax, edi
call fcn.00473bb0
add esp, 0x10
test eax, eax
je case.0x462b9d.7
mov esi, edi
call fcn.004142e0
cmp byte [esp + 0x78], 0
je 0x461f79
or dword [ebp + 0x10], eax
jmp case.0x462b9d.7
not eax
and dword [ebp + 0x10], eax
jmp case.0x462b9d.7
push 9
push 0x4a2210
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x461fb1
cmp byte [esp + 0x78], al
je case.0x462b9d.7
lea esi, [edi + 9]
call fcn.004142e0
mov dword [ebp + 0x18], eax
jmp case.0x462b9d.7
cmp byte [ebx + 4], 4
jne 0x461fdd
push 0x49ce38
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x461fdd
cmp byte [esp + 0x78], 0
je case.0x462975.11
or dword [ebp], 1
jmp case.0x462b9d.7
cmp byte [ebx + 4], 5
jne 0x462008
push 0x4a221c
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x462008
cmp byte [esp + 0x78], al
je 0x462535
or dword [ebp], 6
jmp case.0x462b9d.7
push 0x4a000c
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x4620a2
movzx eax, byte [ebx + 4]
add eax, 0xfffffff7
cmp eax, 3
ja case.0x462b9d.7
jmp dword [eax*4 + 0x463a80]
mov edx, dword [esp + 0x7c]
mov eax, dword [edx]
test eax, eax
je case.0x4620c4.9
movzx ecx, byte [esp + 0x78]
push 0
push ecx
push 0xcf
push eax
call dword [sym.imp.USER32.DLL_SendMessageA]
jmp case.0x462b9d.7
cmp byte [esp + 0x78], 0
je 0x46206b
or dword [ebp], 0x800
jmp case.0x462b9d.7
or dword [ebp + 4], 0x800
jmp case.0x462b9d.7
cmp byte [esp + 0x78], 0
je 0x461c69
or dword [ebp + 4], 0x200
jmp case.0x462b9d.7
cmp byte [esp + 0x78], 0
je 0x462248
or dword [ebp + 4], 8
jmp case.0x462b9d.7
push 0x4a2224
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x4620eb
movzx eax, byte [ebx + 4]
add eax, 0xfffffff7
cmp eax, 5
ja case.0x462b9d.7
jmp dword [eax*4 + 0x463a90]
cmp byte [esp + 0x78], 0
je 0x4620e2
or dword [ebp], 4
jmp case.0x462b9d.7
cmp byte [esp + 0x78], 0
je 0x4620d2
or dword [ebp + 4], 4
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0xc
jne 0x462177
push 0x4a222c
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x462125
cmp byte [esp + 0x78], al
je 0x462119
or dword [ebp], 0x1000
jmp case.0x462b9d.7
or dword [ebp + 4], 0x1000
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0xc
jne 0x462177
push 0x4a2238
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x46214c
cmp byte [esp + 0x78], al
je 0x46219a
or byte [ebx + 5], 0x80
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0xc
jne 0x462177
push 0x4a2240
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x462177
cmp byte [esp + 0x78], al
je 0x46184a
and byte [ebx + 5], 0xfd
jmp case.0x462b9d.7
mov al, byte [ebx + 4]
cmp al, 0xa
je 0x462182
cmp al, 0xb
jne 0x4621a3
push 0x4a224c
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x4621a3
cmp byte [esp + 0x78], al
je 0x462143
and byte [ebx + 5], 0x7f
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0xc
jne 0x4621d2
push 0x49d06c
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x4621d2
cmp byte [esp + 0x78], 0
je 0x462268
or dword [ebp], 0x2000
jmp case.0x462b9d.7
push 0x4a2254
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x462224
mov bl, byte [ebx + 4]
cmp bl, 0xc
jne 0x4621ff
cmp byte [esp + 0x78], al
je 0x462476
or dword [ebp], 0x10
jmp case.0x462b9d.7
cmp bl, 8
je case.0x46202e.9
cmp bl, 7
jne case.0x462b9d.7
cmp byte [esp + 0x78], 0
je 0x461e7f
or dword [ebp], 0x4000
jmp case.0x462b9d.7
push 0x4a2260
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x462274
mov bl, byte [ebx + 4]
cmp bl, 0xc
jne 0x462251
cmp byte [esp + 0x78], al
je case.0x462975.16
or dword [ebp], 8
jmp case.0x462b9d.7
cmp bl, 8
je case.0x461c17.3
cmp bl, 7
jne case.0x462b9d.7
jmp case.0x461c17.3
or dword [ebp + 4], 0x2000
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0xc
jne 0x462307
push 8
push 0x4a226c
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x462307
mov dl, byte [edi + 8]
mov byte [ebp + 0x18c], dl
cmp byte [esp + 0x78], al
je 0x4622e3
or dword [ebp], 0x20
mov ebx, dword [ebx]
test ebx, ebx
je 0x4622fd
mov al, dl
push 0
test al, al
jne 0x4622dd
movzx eax, byte [0x4ada42]
neg eax
sbb eax, eax
and eax, 0x25a5
add eax, 0x2a
push eax
push 0xcc
push ebx
call dword [sym.imp.USER32.DLL_SendMessageW]
mov byte [esp + 0x17], 1
jmp case.0x462b9d.7
movsx ecx, al
push ecx
jmp 0x4622f1
or dword [ebp + 4], 0x20
mov ebx, dword [ebx]
test ebx, ebx
je 0x4622fd
push 0
push 0
push 0xcc
push ebx
call dword [sym.imp.USER32.DLL_SendMessageA]
mov byte [esp + 0x17], 1
jmp case.0x462b9d.7
push 5
push 0x4a2278
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x46234d
cmp byte [esp + 0x78], al
je 0x462341
cmp byte [edi + 5], al
je 0x462336
lea esi, [edi + 5]
call fcn.0040e430
mov dword [ebp + 0x64], eax
jmp case.0x462b9d.7
or eax, 0xffffffff
mov dword [ebp + 0x64], eax
jmp case.0x462b9d.7
mov dword [ebp + 0x64], CreateStatusWindowA
jmp case.0x462b9d.7
cmp byte [ebx + 4], 8
jne 0x462378
push 0x4a2280
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x462378
cmp byte [esp + 0x78], al
je case.0x462975.11
or dword [ebp], 1
jmp case.0x462b9d.7
push 4
push 0x49b790
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x4623e9
movzx eax, byte [ebx + 4]
add eax, 0xfffffff9
cmp eax, 3
ja case.0x462b9d.7
jmp dword [eax*4 + 0x463aa8]
cmp byte [esp + 0x78], 0
je case.0x462a81.11
or dword [ebp], esi
jmp case.0x462b9d.7
cmp byte [esp + 0x78], 0
je 0x4623e0
push 0x4a045c
add edi, 4
push edi
call fcn.00486ea1
add esp, 8
neg eax
sbb eax, eax
and eax, 0xfffffff0
add eax, 0x20
or dword [ebp], eax
jmp case.0x462b9d.7
or dword [ebp + 4], 0x30
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0x10
jne 0x46241c
push 0x4a2288
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x46241c
cmp byte [esp + 0x78], al
je 0x4625a6
mov edx, dword [ebp]
and edx, 0xffffffef
or edx, 0x40
mov dword [ebp], edx
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0x11
jne 0x4624d6
push 0x4a2290
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x46244b
cmp byte [esp + 0x78], al
je 0x46219a
or byte [ebx + 5], 0x80
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0x11
jne 0x4624d6
push 0x4a2298
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x46247f
cmp byte [esp + 0x78], al
je 0x462476
or dword [ebp], 0x10
jmp case.0x462b9d.7
or dword [ebp + 4], 0x10
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0x11
jne 0x4624d6
push 0xc
push 0x4a22a0
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x4624d6
mov byte [ebp + 0x18f], 1
cmp byte [esp + 0x78], al
je 0x4624c6
or dword [ebp], 1
cmp byte [edi + 0xc], al
lea esi, [edi + 0xc]
setne al
mov byte [ebp + 0x190], al
call fcn.0040e430
mov dword [ebp + 0x40], eax
jmp case.0x462b9d.7
or dword [ebp + 4], 1
mov dword [ebp + 0x40], 0xffffffff
jmp case.0x462b9d.7
push 4
push 0x49ce48
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x46253e
mov bl, byte [ebx + 4]
cmp bl, 0x11
jne 0x46250c
cmp byte [esp + 0x78], al
je case.0x462b9d.7
lea esi, [edi + 4]
call fcn.0040e430
mov dword [ebp + 0x44], eax
jmp case.0x462b9d.7
cmp bl, 0xb
jne case.0x462b9d.7
mov al, byte [edi + 4]
call fcn.00409350
cmp al, 0x53
jne case.0x462b9d.7
cmp byte [esp + 0x78], 0
je 0x462535
or dword [ebp], 6
jmp case.0x462b9d.7
or dword [ebp + 4], 6
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0x11
jne 0x4625af
push 4
push 0x4a22b0
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x462572
cmp byte [esp + 0x78], al
je case.0x462b9d.7
lea esi, [edi + 4]
call fcn.0040e430
mov dword [ebp + 0x48], eax
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0x11
jne 0x4625af
push 5
push 0x4a22b8
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x4625af
cmp byte [esp + 0x78], al
je 0x4625a6
or dword [ebp], 0x40
lea esi, [edi + 5]
call fcn.0040e430
mov dword [ebp + 0x4c], eax
jmp case.0x462b9d.7
or dword [ebp + 4], 0x40
jmp case.0x462b9d.7
push 7
push 0x49ba04
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x46264b
cmp byte [ebx + 4], 0x11
jne case.0x462b9d.7
cmp byte [esp + 0x78], al
je 0x462bd0
mov dword [ebp + 0x50], 0xffffffff
mov al, byte [edi + 7]
call fcn.00409350
movsx eax, al
add eax, 0xffffffbe
cmp eax, 0x12
ja case.0x4625fc.67
movzx ecx, byte [eax + 0x463acc]
jmp dword [ecx*4 + 0x463ab8]
mov dword [ebp + 0x50], 0
jmp case.0x4625fc.67
mov dword [ebp + 0x50], 1
jmp case.0x4625fc.67
mov dword [ebp + 0x50], esi
jmp case.0x4625fc.67
mov dword [ebp + 0x50], 3
mov eax, dword [ebp + 0x50]
test eax, eax
jns 0x46263b
or dword [ebp], 0x100
mov dword [ebp + 0x50], 0
jmp case.0x462b9d.7
inc eax
or dword [ebp], 0x100
mov dword [ebp + 0x50], eax
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0x11
jne 0x4626f5
push 5
push 0x4a22c0
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x4626f5
cmp byte [esp + 0x78], al
je case.0x462b9d.7
mov bl, byte [edi + 5]
test bl, bl
je case.0x462b9d.7
push eax
push 1
push eax
push eax
add edi, 6
push edi
mov ecx, 0x4ad268
call fcn.00422690
test eax, eax
je case.0x462b9d.7
cmp byte [eax + 0x17], 0
jne 0x4626a6
mov eax, dword [eax + 0xc]
test byte [eax + 0x16], 2
jne case.0x462b9d.7
mov edx, dword [esp + 0x74]
mov ecx, dword [edx + 0x10]
lea edx, [ecx - 1]
cmp edx, ecx
jae case.0x462b9d.7
mov edi, dword [esp + 0x74]
lea esi, [edx + edx*4]
add esi, esi
add esi, esi
lea ecx, [ecx]
mov ecx, dword [edi + 0x18]
add ecx, esi
cmp dword [ecx + 8], eax
jne 0x4626e7
cmp bl, 0x31
jne 0x4626e4
mov dword [ebp + 0x54], ecx
jmp 0x4626e7
mov dword [ebp + 0x58], ecx
dec edx
sub esi, 0x14
cmp edx, dword [edi + 0x10]
jb 0x4626d0
jmp case.0x462b9d.7
push 0x4a22c8
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x46273e
mov bl, byte [ebx + 4]
cmp bl, 0x11
jne 0x462721
cmp byte [esp + 0x78], al
je case.0x462a81.11
or dword [ebp], esi
jmp case.0x462b9d.7
cmp bl, 0x12
jne case.0x462b9d.7
cmp byte [esp + 0x78], 0
je 0x4620e2
or dword [ebp], 4
jmp case.0x462b9d.7
push 5
push 0x4a22d4
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x462805
cmp byte [esp + 0x78], al
je case.0x462b9d.7
cmp byte [edi + 5], al
je case.0x462b9d.7
mov edx, dword [esp + 0x7c]
mov al, byte [edx + 4]
cmp al, 0xd
je 0x4627b0
cmp al, 0xe
je 0x4627b0
lea esi, [edi + 5]
mov byte [ebp + 0x18d], 1
call fcn.0040e430
push 0x2d
add edi, 6
push edi
mov dword [ebp + 0x38], eax
call fcn.00487e91
add esp, 8
test eax, eax
je case.0x462b9d.7
lea esi, [eax + 1]
call fcn.0040e430
mov dword [ebp + 0x3c], eax
jmp case.0x462b9d.7
lea esi, [ebp + 0x160]
mov eax, esi
lea ecx, [edi + 5]
call fcn.004737c0
mov dword [ebp + 0x184], eax
test eax, eax
je case.0x462b9d.7
mov ecx, dword [esp + 0x7c]
mov ecx, dword [ecx]
test ecx, ecx
je case.0x462b9d.7
push esi
push eax
mov eax, dword [esp + 0x84]
xor edx, edx
cmp byte [eax + 4], 0xd
setne dl
dec edx
and edx, 0xfffffff2
add edx, 0x1012
push edx
push ecx
call dword [sym.imp.USER32.DLL_SendMessageA]
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0x12
jne 0x462830
push 0x4a22dc
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x462830
cmp byte [esp + 0x78], al
je case.0x462975.11
or dword [ebp], 1
jmp case.0x462b9d.7
push 0x4a22e4
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x46287e
mov bl, byte [ebx + 4]
cmp bl, 0x13
jne 0x462861
cmp byte [esp + 0x78], 0
je 0x462bd0
or dword [ebp], 0x100
jmp case.0x462b9d.7
cmp bl, 0xb
jne case.0x462b9d.7
cmp byte [esp + 0x78], 0
je case.0x462975.11
or dword [ebp], 1
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0x13
jne 0x4628af
push 0x49f8b4
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x4628af
cmp byte [esp + 0x78], al
je case.0x462a81.11
or dword [ebp], esi
or dword [ebp + 4], 0x80
jmp case.0x462b9d.7
cmp byte [ebx + 4], 0x18
jne 0x4628fa
push 5
push 0x49d20c
push edi
call fcn.00487920
add esp, 0xc
test eax, eax
jne 0x4628fa
mov edx, dword [0x4ac2c4]
lea ecx, [esp + 0x40]
push ecx
add edi, 5
push edi
push edx
call dword [sym.imp.USER32.DLL_GetClassInfoExA]
mov word [ebp + 0x196], ax
test ax, ax
jne case.0x462b9d.7
push edi
push 0x4a22ec
jmp 0x463472
push 0x4a0450
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x4629cb
movzx eax, byte [ebx + 4]
dec eax
cmp byte [esp + 0x78], 0
je 0x462965
cmp eax, 0x10
ja case.0x462b9d.7
movzx eax, byte [eax + 0x463af4]
jmp dword [eax*4 + 0x463ae0]
or dword [ebp], 8
or dword [ebp + 4], 4
jmp case.0x462b9d.7
or dword [ebp], 1
or dword [ebp + 4], 0x1e
jmp case.0x462b9d.7
or dword [ebp], 0x300
jmp case.0x462b9d.7
or dword [ebp], 1
or dword [ebp + 4], esi
jmp case.0x462b9d.7
cmp eax, 0x10
ja case.0x462b9d.7
movzx ecx, byte [eax + 0x463b1c]
jmp dword [ecx*4 + 0x463b08]
mov edx, dword [esp + 0x7c]
mov eax, dword [edx]
test eax, eax
je 0x4629a7
push 0xfffffffffffffff0
push eax
call dword [sym.imp.USER32.DLL_GetWindowLongA]
and eax, 0x300
cmp eax, 0x300
jne case.0x462b9d.7
or dword [ebp + 4], eax
jmp case.0x462b9d.7
mov eax, dword [ebp]
mov ecx, eax
and ecx, 0x300
cmp ecx, 0x300
jne case.0x462b9d.7
and eax, 0xfffffcff
mov dword [ebp], eax
jmp case.0x462b9d.7
push 0x49ab50
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x462afd
movzx eax, byte [ebx + 4]
dec eax
cmp byte [esp + 0x78], 0
je 0x462a71
cmp eax, 0x16
ja case.0x462b9d.7
movzx edx, byte [eax + 0x463b50]
jmp dword [edx*4 + 0x463b30]
or dword [ebp + 4], 8
or dword [ebp], 4
jmp case.0x462b9d.7
or dword [ebp], esi
or dword [ebp + 4], 0x1d
jmp case.0x462b9d.7
or dword [ebp], 0x200
or dword [ebp + 4], 0x100
mov eax, dword [esp + 0x7c]
mov al, byte [eax + 4]
mov ecx, dword [ebp]
cmp al, 5
je 0x462a45
cmp al, 6
jne case.0x462b9d.7
or ecx, 0x20
mov dword [ebp], ecx
jmp case.0x462b9d.7
or dword [ebp], esi
or dword [ebp + 4], 1
jmp case.0x462b9d.7
or dword [ebp], 0x282
jmp case.0x462b9d.7
or dword [ebp], 0x20
jmp case.0x462b9d.7
cmp eax, 0x12
ja case.0x462b9d.7
movzx ecx, byte [eax + 0x463b84]
jmp dword [ecx*4 + 0x463b68]
or dword [ebp + 4], 0x20
jmp case.0x462b9d.7
or dword [ebp], 4
or dword [ebp + 4], 8
jmp case.0x462b9d.7
mov edx, dword [esp + 0x7c]
mov eax, dword [edx]
test eax, eax
je 0x462acd
push 0xfffffffffffffff0
push eax
call dword [sym.imp.USER32.DLL_GetWindowLongA]
and eax, 0x300
cmp eax, 0x300
je case.0x462b9d.7
or dword [ebp + 4], 0x200
jmp case.0x462b9d.7
mov eax, dword [ebp]
mov ecx, eax
and ecx, 0x300
cmp ecx, 0x300
je case.0x462b9d.7
and eax, 0xfffffdff
mov dword [ebp], eax
jmp case.0x462b9d.7
or dword [ebp + 4], 0x82
jmp case.0x462b9d.7
push 0x49ab58
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x462c00
cmp byte [esp + 0x78], 0
movzx eax, byte [ebx + 4]
je 0x462b8a
dec eax
cmp eax, 0x12
ja case.0x462b9d.7
movzx edx, byte [eax + 0x463bb8]
jmp dword [edx*4 + 0x463b98]
or dword [ebp + 4], 4
or dword [ebp], 8
jmp case.0x462b9d.7
or dword [ebp + 4], 0x200
or dword [ebp], 0x100
mov eax, dword [esp + 0x7c]
mov al, byte [eax + 4]
mov ecx, dword [ebp + 4]
cmp al, 5
je 0x462b67
cmp al, 6
jne case.0x462b9d.7
or ecx, 0x20
mov dword [ebp + 4], ecx
jmp case.0x462b9d.7
or dword [ebp + 4], 3
jmp case.0x462b9d.7
or dword [ebp], 0x280
or dword [ebp + 4], esi
jmp case.0x462b9d.7
add eax, 0xfffffffd
cmp eax, 0x10
ja case.0x462b9d.7
movzx ecx, byte [eax + 0x463bdc]
jmp dword [ecx*4 + 0x463bcc]
or dword [ebp + 4], 0xc
jmp case.0x462b9d.7
mov edx, dword [esp + 0x7c]
mov eax, dword [edx]
test eax, eax
je 0x462bdc
push 0xfffffffffffffff0
push eax
call dword [sym.imp.USER32.DLL_GetWindowLongA]
and eax, 0x300
cmp eax, 0x300
je case.0x462b9d.7
or dword [ebp + 4], 0x100
jmp case.0x462b9d.7
mov eax, dword [ebp]
mov ecx, eax
and ecx, 0x300
cmp ecx, 0x300
je case.0x462b9d.7
and eax, 0xfffffeff
mov dword [ebp], eax
jmp case.0x462b9d.7
xor esi, esi
push esi
push esi
push 1
push esi
mov eax, edi
call fcn.00473bb0
add esp, 0x10
test eax, eax
je 0x462c47
mov esi, edi
call fcn.004142e0
cmp byte [esp + 0x78], 0
je 0x462c35
or dword [ebp], eax
mov dl, byte [esp + 0x16]
mov eax, dword [esp + 0x18]
mov byte [eax], dl
jmp 0x4633b6
or dword [ebp + 4], eax
mov dl, byte [esp + 0x16]
mov eax, dword [esp + 0x18]
mov byte [eax], dl
jmp 0x4633b6
inc edi
cmp byte [edi], 0
jne 0x462cf6
cmp byte [esp + 0x78], 0
je 0x462c76
mov eax, dword [esp + 0x84]
cmp eax, esi
je 0x462c76
cmp byte [eax + 0x17], 0
jne 0x462c6c
mov eax, dword [eax + 0xc]
test byte [eax + 0x15], 2
jne 0x462cf6
mov al, byte [edi - 1]
call fcn.00409350
cmp al, 0x43
je 0x462cc1
cmp al, 0x47
je 0x462ca0
cmp al, 0x56
jne 0x46346b
mov al, byte [esp + 0x16]
mov ecx, dword [esp + 0x18]
mov dword [ebx + 8], esi
mov byte [ecx], al
jmp 0x4633b6
mov eax, dword [ebx + 0xc]
cmp eax, esi
je 0x462caf
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov al, byte [esp + 0x16]
mov ecx, dword [esp + 0x18]
mov dword [ebx + 0xc], esi
mov byte [ecx], al
jmp 0x4633b6
cmp byte [esp + 0x78], 0
jne 0x462ce7
cmp byte [ebx + 4], 2
je 0x462ce7
mov eax, dword [esp + 0x1c]
cmp dword [eax], 0xff000000
je 0x462ce7
mov dword [eax], 0xff000000
mov byte [ebp + 0x18e], 1
mov al, byte [esp + 0x16]
mov ecx, dword [esp + 0x18]
mov byte [ecx], al
jmp 0x4633b6
mov al, byte [edi - 1]
call fcn.00409350
movsx eax, al
add eax, 0xffffffbd
cmp eax, 0x16
ja case.0x462d14.68
movzx edx, byte [eax + 0x463c18]
jmp dword [edx*4 + 0x463bf0]
mov al, byte [ebx + 4]
cmp al, 3
je 0x463421
cmp al, 0x12
je 0x463421
mov eax, dword [esp + 0x84]
push 0x4ad268
mov ebx, 4
mov ecx, edi
call fcn.0041b3f0
mov ebx, eax
test ebx, ebx
jne 0x462d6c
push 0x4a1d58
push edi
call fcn.00486ea1
add esp, 8
test eax, eax
jne 0x463416
mov eax, dword [esp + 0x7c]
or byte [eax + 5], 1
jmp 0x462d70
mov eax, dword [esp + 0x7c]
mov al, byte [eax + 4]
cmp al, 1
je 0x462d7b
cmp al, 2
jne 0x462d82
or dword [ebp], 0x100
mov esi, dword [esp + 0x7c]
add esi, 0xc
mov edi, ebx
call fcn.004012c0
jmp case.0x462b9d.7
cmp dword [ebp + 0x13c], 0x32
jae case.0x462b9d.7
mov esi, edi
call fcn.004142e0
mov ecx, dword [ebp + 0x13c]
mov dword [ebp + ecx*4 + 0x74], eax
inc dword [ebp + 0x13c]
jmp case.0x462b9d.7
push 3
push esi
push edi
mov ecx, 0x4ad268
call fcn.00422630
cmp eax, esi
je 0x46347c
cmp byte [eax + 0x17], 0
jne 0x462ddd
mov eax, dword [eax + 0xc]
mov dl, byte [eax + 0x16]
and dl, 0x22
cmp dl, 2
je 0x463428
mov esi, dword [esp + 0x74]
xor edx, edx
cmp dword [esi + 0x10], edx
jbe 0x462e0e
mov ecx, dword [esi + 0x18]
add ecx, 8
cmp dword [ecx], eax
je 0x463431
inc edx
add ecx, 0x14
cmp edx, dword [esi + 0x10]
jb 0x462dfd
mov dword [ebx + 8], eax
jmp case.0x462b9d.7
cmp byte [ebx + 4], 2
je case.0x462b9d.7
mov esi, edi
call fcn.00474db0
cmp eax, 0xffffffff
jne 0x462e40
push 0x10
push 0
push edi
call fcn.00488945
add esp, 0xc
mov ecx, eax
call fcn.00430990
mov ecx, dword [esp + 0x1c]
cmp dword [ecx], eax
jne 0x462e53
lea edx, [ebp + 0x5c]
cmp ecx, edx
jne case.0x462b9d.7
mov dword [ecx], eax
mov byte [ebp + 0x18e], 1
jmp case.0x462b9d.7
mov al, byte [edi]
call fcn.00409350
cmp al, 0x50
jne 0x462ea1
lea esi, [edi + 1]
call fcn.0040e430
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x462e91
mov ecx, dword [0x4ad254]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.DLL_MulDiv]
mov edx, dword [esi + 0x88]
add edx, eax
mov dword [ebp + 0x28], edx
jmp case.0x462b9d.7
mov esi, edi
call fcn.0040e430
mov ecx, dword [esp + 0x74]
call fcn.0045b300
mov dword [ebp + 0x28], eax
jmp case.0x462b9d.7
mov al, byte [edi]
call fcn.00409350
cmp al, 0x50
jne 0x462ef9
lea esi, [edi + 1]
call fcn.0040e430
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x462ee9
mov ecx, dword [0x4ad254]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.DLL_MulDiv]
mov edx, dword [esi + 0x8c]
add edx, eax
mov dword [ebp + 0x2c], edx
jmp case.0x462b9d.7
mov esi, edi
call fcn.0040e430
mov ecx, dword [esp + 0x74]
call fcn.0045b300
mov dword [ebp + 0x2c], eax
jmp case.0x462b9d.7
mov al, byte [edi]
cmp al, 0x2b
jne 0x462fe8
mov al, byte [edi + 1]
call fcn.00409350
cmp al, 0x4d
jne 0x462f30
mov eax, dword [esp + 0x74]
mov esi, dword [eax + 0x78]
jmp 0x462f57
lea esi, [edi + 1]
call fcn.0040e430
mov ecx, dword [esp + 0x74]
cmp byte [ecx + 0xc0], 0
je 0x462f55
mov edx, dword [0x4ad254]
push 0x60
push edx
push eax
call dword [sym.imp.KERNEL32.DLL_MulDiv]
mov esi, eax
mov eax, dword [esp + 0x7c]
mov bl, byte [eax + 6]
mov ecx, dword [esp + 0x74]
call fcn.00468270
mov edi, eax
test edi, edi
je 0x462fb8
mov ecx, dword [esp + 0x7c]
mov al, byte [ecx + 7]
mov ecx, dword [esp + 0x74]
call fcn.004683d0
test eax, eax
jne 0x462fb8
mov ecx, dword [esp + 0x74]
mov edx, edi
lea edi, [esp + 0x20]
call fcn.004684e0
mov ecx, dword [eax]
mov eax, dword [eax + 4]
add ecx, esi
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], ecx
jne case.0x462b9d.7
mov edx, dword [esp + 0x74]
mov ecx, dword [edx + 0x7c]
add ecx, eax
mov dword [ebp + 0x24], ecx
jmp case.0x462b9d.7
mov eax, dword [esp + 0x74]
mov edx, dword [eax + 0x88]
add edx, dword [eax + 0x80]
add edx, esi
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], edx
jne case.0x462b9d.7
mov ecx, dword [eax + 0x84]
mov dword [ebp + 0x24], ecx
jmp case.0x462b9d.7
call fcn.00409350
cmp al, 0x4d
jne 0x46303e
lea esi, [edi + 1]
call fcn.0040e430
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x463016
mov edx, dword [0x4ad254]
push 0x60
push edx
push eax
call dword [sym.imp.KERNEL32.DLL_MulDiv]
mov ecx, dword [esi + 0x78]
add ecx, eax
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], ecx
jne case.0x462b9d.7
mov eax, esi
mov edx, dword [eax + 0x94]
add edx, dword [eax + 0x7c]
mov dword [ebp + 0x24], edx
jmp case.0x462b9d.7
mov al, byte [edi]
call fcn.00409350
cmp al, 0x50
jne 0x463096
lea esi, [edi + 1]
call fcn.0040e430
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x46306e
mov ecx, dword [0x4ad254]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.DLL_MulDiv]
mov edx, dword [esi + 0x80]
add edx, eax
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], edx
jne case.0x462b9d.7
mov eax, esi
mov ecx, dword [eax + 0x84]
mov dword [ebp + 0x24], ecx
jmp case.0x462b9d.7
mov al, byte [edi]
call fcn.00409350
cmp al, 0x53
jne 0x4630f1
lea esi, [edi + 1]
call fcn.0040e430
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x4630c6
mov edx, dword [0x4ad254]
push 0x60
push edx
push eax
call dword [sym.imp.KERNEL32.DLL_MulDiv]
mov ecx, dword [esi + 0x98]
add ecx, eax
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], ecx
jne case.0x462b9d.7
mov eax, esi
mov edx, dword [eax + 0xa4]
add edx, dword [eax + 0x7c]
mov dword [ebp + 0x24], edx
jmp case.0x462b9d.7
mov esi, edi
call fcn.0040e430
mov ecx, dword [esp + 0x74]
cmp byte [ecx + 0xc0], 0
je 0x463115
mov edx, dword [0x4ad254]
push 0x60
push edx
push eax
call dword [sym.imp.KERNEL32.DLL_MulDiv]
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], eax
jne case.0x462b9d.7
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x94]
add ecx, dword [eax + 0x7c]
mov dword [ebp + 0x24], ecx
jmp case.0x462b9d.7
mov al, byte [edi]
cmp al, 0x2b
jne 0x463215
mov al, byte [edi + 1]
call fcn.00409350
cmp al, 0x4d
jne 0x463159
mov edx, dword [esp + 0x74]
mov eax, dword [edx + 0x7c]
jmp 0x46317e
lea esi, [edi + 1]
call fcn.0040e430
mov ecx, dword [esp + 0x74]
cmp byte [ecx + 0xc0], 0
je 0x46317e
mov edx, dword [0x4ad254]
push 0x60
push edx
push eax
call dword [sym.imp.KERNEL32.DLL_MulDiv]
mov edi, dword [esp + 0x74]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x7c]
mov bl, byte [eax + 6]
mov ecx, edi
call fcn.00468270
mov esi, eax
test esi, esi
je 0x4631e7
mov ecx, dword [esp + 0x7c]
mov al, byte [ecx + 7]
mov ecx, edi
call fcn.004683d0
test eax, eax
jne 0x4631e7
mov ecx, dword [esp + 0x74]
mov edx, esi
lea edi, [esp + 0x28]
call fcn.004684e0
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x78]
add edx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], edx
jne case.0x462b9d.7
mov eax, dword [esp + 0x74]
mov edx, dword [eax + 0x78]
add edx, ecx
mov dword [ebp + 0x20], edx
jmp case.0x462b9d.7
mov eax, dword [edi + 0x8c]
add eax, dword [edi + 0x84]
add eax, dword [esp + 0x78]
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], eax
jne case.0x462b9d.7
mov ecx, dword [edi + 0x80]
mov dword [ebp + 0x20], ecx
jmp case.0x462b9d.7
call fcn.00409350
cmp al, 0x4d
jne 0x46326b
lea esi, [edi + 1]
call fcn.0040e430
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x463243
mov edx, dword [0x4ad254]
push 0x60
push edx
push eax
call dword [sym.imp.KERNEL32.DLL_MulDiv]
mov ecx, dword [esi + 0x7c]
add ecx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], ecx
jne case.0x462b9d.7
mov eax, esi
mov edx, dword [eax + 0x90]
add edx, dword [eax + 0x78]
mov dword [ebp + 0x20], edx
jmp case.0x462b9d.7
mov al, byte [edi]
call fcn.00409350
cmp al, 0x50
jne 0x4632c3
lea esi, [edi + 1]
call fcn.0040e430
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x46329b
mov ecx, dword [0x4ad254]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.DLL_MulDiv]
mov edx, dword [esi + 0x84]
add edx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], edx
jne case.0x462b9d.7
mov eax, esi
mov ecx, dword [eax + 0x80]
mov dword [ebp + 0x20], ecx
jmp case.0x462b9d.7
mov al, byte [edi]
call fcn.00409350
cmp al, 0x53
jne 0x46331e
lea esi, [edi + 1]
call fcn.0040e430
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x4632f3
mov edx, dword [0x4ad254]
push 0x60
push edx
push eax
call dword [sym.imp.KERNEL32.DLL_MulDiv]
mov ecx, dword [esi + 0x9c]
add ecx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], ecx
jne case.0x462b9d.7
mov eax, esi
mov edx, dword [eax + 0xa0]
add edx, dword [eax + 0x78]
mov dword [ebp + 0x20], edx
jmp case.0x462b9d.7
mov esi, edi
call fcn.0040e430
mov ecx, dword [esp + 0x74]
cmp byte [ecx + 0xc0], 0
je 0x463342
mov edx, dword [0x4ad254]
push 0x60
push edx
push eax
call dword [sym.imp.KERNEL32.DLL_MulDiv]
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], eax
jne case.0x462b9d.7
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x90]
add ecx, dword [eax + 0x78]
mov dword [ebp + 0x20], ecx
jmp case.0x462b9d.7
mov esi, edi
call fcn.00414310
fstp dword [ebp + 0x30]
jmp case.0x462b9d.7
mov al, byte [edi - 1]
call fcn.00409350
cmp al, 0x45
jne 0x46346b
push esi
push esi
push esi
push esi
mov eax, edi
call fcn.00473bb0
add esp, 0x10
test eax, eax
je 0x46346b
mov esi, edi
call fcn.004142e0
cmp byte [esp + 0x78], 0
je 0x4633a5
or dword [ebp + 8], eax
jmp case.0x462b9d.7
or dword [ebp + 0xc], eax
mov edx, dword [esp + 0x18]
mov al, byte [esp + 0x16]
mov ebx, dword [esp + 0x7c]
mov byte [edx], al
mov edi, dword [esp + 0x18]
lea ebx, [ebx]
mov al, byte [edi]
cmp al, 0x20
je 0x4633ca
cmp al, 9
jne 0x4633cd
inc edi
jmp 0x4633c0
cmp byte [edi], 0
jne 0x461790
mov eax, dword [ebx]
test eax, eax
je 0x463a2b
push 0xfffffffffffffff0
push eax
call dword [sym.imp.USER32.DLL_GetWindowLongA]
mov ecx, dword [ebp]
mov edx, dword [ebp + 4]
mov edi, eax
or eax, ecx
not edx
and eax, edx
mov dword [esp + 0x78], eax
movzx eax, byte [ebx + 4]
add eax, 0xfffffffe
mov dword [esp + 0x18], edi
cmp eax, 8
ja case.0x46340f.9
jmp dword [eax*4 + 0x463c30]
mov ebx, dword [esp + 0x7c]
mov eax, 0x49c008
jmp 0x463436
mov eax, 0x4a2308
jmp 0x463436
dec edi
push edi
push 0x4a2344
jmp 0x463472
mov eax, 0x4a2374
mov cl, byte [esp + 0x16]
mov edx, dword [esp + 0x18]
mov byte [edx], cl
cmp dword [ebx], 0
je 0x463454
call fcn.00409520
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
dec edi
push edi
push eax
mov ecx, 0x4ad268
call fcn.0042f2b0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
dec edi
push edi
push 0x49c478
mov ecx, 0x4ad268
call fcn.0042f2b0
mov al, byte [esp + 0x16]
mov ecx, dword [esp + 0x18]
mov byte [ecx], al
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
mov eax, dword [esp + 0x78]
mov edx, eax
xor edx, edi
and edx, 0xf
xor eax, edx
mov dword [esp + 0x78], eax
jmp case.0x46340f.9
mov eax, dword [esp + 0x78]
and eax, 0xfffffff7
or eax, 7
mov dword [esp + 0x78], eax
jmp case.0x46340f.9
mov eax, dword [esp + 0x78]
test al, 1
je 0x4634cb
and eax, 0xfffffff1
or eax, 1
jmp 0x4634ce
and eax, 0xfffffff0
mov edi, dword [esp + 0x74]
mov dword [esp + 0x78], eax
mov eax, dword [edi + 0x1c]
cmp dword [esp + 0x80], eax
jne 0x463516
test byte [ebp + 4], 1
je 0x46362e
mov ecx, dword [edi + 4]
mov esi, dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x401
push ecx
mov dword [edi + 0x1c], 0xffffffff
call esi
or dword [esp + 0x18], 1
mov edi, dword [esp + 0x18]
jmp 0x463638
test cl, 1
je 0x46362e
cmp eax, dword [edi + 0x10]
jae 0x46355a
lea edx, [eax + eax*4]
mov eax, dword [edi + 0x18]
mov ecx, dword [eax + edx*4]
push 1
push 0xfffffffffffffff0
push ecx
call dword [sym.imp.USER32.DLL_GetWindowLongA]
mov esi, dword [sym.imp.USER32.DLL_SendMessageA]
and eax, 0xfffe
push eax
mov eax, dword [edi + 0x1c]
lea edx, [eax + eax*4]
mov eax, dword [edi + 0x18]
mov ecx, dword [eax + edx*4]
push 0xf4
push ecx
call esi
jmp 0x463560
mov esi, dword [sym.imp.USER32.DLL_SendMessageA]
mov eax, dword [esp + 0x80]
mov edx, dword [edi + 4]
push 0
mov dword [edi + 0x1c], eax
add eax, 3
push eax
push 0x401
push edx
call esi
mov edi, dword [esp + 0x18]
jmp 0x463638
mov eax, dword [esp + 0x78]
mov esi, dword [sym.imp.USER32.DLL_SendMessageA]
mov ecx, eax
and ecx, 6
cmp cl, 6
jne 0x4635a7
and eax, 0xfffffff6
or eax, 6
mov dword [esp + 0x78], eax
jmp 0x463638
and eax, 0xfffffff3
or eax, 3
mov dword [esp + 0x78], eax
jmp 0x463638
mov edx, dword [esp + 0x78]
and edx, 0xfffffff9
or edx, 9
mov dword [esp + 0x78], edx
jmp case.0x46340f.9
or dword [esp + 0x78], 3
jmp case.0x46340f.9
mov eax, dword [esp + 0x78]
mov esi, dword [sym.imp.USER32.DLL_SendMessageA]
test al, 1
je 0x4635e7
and eax, 0xfffffff1
or eax, 1
mov dword [esp + 0x78], eax
jmp 0x463638
and eax, 0xfffffff2
or eax, 2
mov dword [esp + 0x78], eax
jmp 0x463638
mov eax, dword [ebp + 0x14]
cmp eax, 0xffffffff
je case.0x46340f.9
cmp byte [0x4ada42], 0
mov esi, dword [sym.imp.USER32.DLL_SendMessageA]
je 0x463617
push 0
push eax
mov eax, dword [ebx]
push 0x108e
push eax
call esi
mov eax, dword [ebp + 0x14]
cmp eax, 4
je 0x463638
mov ecx, dword [esp + 0x78]
and ecx, 0xfffffffc
or ecx, eax
mov dword [esp + 0x78], ecx
jmp 0x463638
mov edi, dword [esp + 0x18]
mov esi, dword [sym.imp.USER32.DLL_SendMessageA]
mov eax, dword [ebp + 0x64]
test eax, eax
je 0x4636a2
mov cl, byte [ebx + 4]
cmp cl, 0xc
jne 0x46367e
push 0
test eax, eax
jns 0x463673
mov edx, dword [ebx]
push 0
push 0xc5
push edx
call esi
cmp dword [ebp + 0x64], 0x80000000
je 0x4636a2
test byte [esp + 0x78], 4
jne 0x4636a2
and dword [esp + 0x78], 0xffefff7f
jmp 0x4636a2
push eax
mov eax, dword [ebx]
push 0xc5
push eax
jmp 0x4636a0
cmp cl, 0xf
jne 0x4636a2
test eax, eax
jns 0x463695
mov ecx, dword [ebx]
push 0
push 0
push 0x403
push ecx
jmp 0x4636a0
mov edx, dword [ebx]
push 6
push eax
push 0x403
push edx
call esi
mov ecx, dword [esp + 0x78]
mov byte [esp + 0x84], 0
cmp edi, ecx
je 0x463790
mov al, byte [ebx + 4]
mov byte [esp + 0x84], 1
mov byte [esp + 0x80], 0
cmp al, 4
je 0x463741
cmp al, 9
je 0x4636e9
cmp al, 0x12
jne 0x463753
mov eax, dword [ebx]
push 0
push 0
push 0x408
push eax
call esi
mov dword [esp + 0x20], eax
jmp 0x463753
mov eax, ecx
and eax, 0x100000
je 0x463729
test edi, 0x100000
jne 0x463729
cmp dword [ebp + 0x68], 0
jge 0x46371c
mov edx, dword [ebx]
lea ecx, [esp + 0x30]
push ecx
push edx
call dword [sym.imp.USER32.DLL_GetWindowRect]
mov eax, dword [esp + 0x38]
sub eax, dword [esp + 0x30]
lea eax, [eax + eax*2]
mov dword [ebp + 0x68], eax
mov ecx, dword [ebp + 0x68]
push 0
push ecx
push 0x194
jmp 0x46374e
test eax, eax
jne 0x463753
test edi, 0x100000
je 0x463753
push eax
push eax
mov eax, dword [ebx]
push 0x194
push eax
jmp 0x463751
movzx ecx, word [esp + 0x78]
push 1
push ecx
push 0xf4
mov edx, dword [ebx]
push edx
call esi
push 0
call dword [sym.imp.KERNEL32.DLL_SetLastError]
mov eax, dword [esp + 0x78]
mov ecx, dword [ebx]
push eax
push 0xfffffffffffffff0
push ecx
call dword [sym.imp.USER32.DLL_SetWindowLongA]
test eax, eax
jne 0x463779
call dword [sym.imp.KERNEL32.DLL_GetLastError]
test eax, eax
jne 0x463790
mov edx, dword [ebx]
push 0xfffffffffffffff0
push edx
call dword [sym.imp.USER32.DLL_GetWindowLongA]
cmp eax, edi
je 0x463790
mov byte [esp + 0x80], 1
mov eax, dword [ebx]
push 0xffffffffffffffec
push eax
call dword [sym.imp.USER32.DLL_GetWindowLongA]
mov edi, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
or edi, eax
not ecx
and edi, ecx
mov dword [esp + 0x1c], eax
cmp eax, edi
je 0x463804
cmp byte [esp + 0x84], 0
jne 0x4637c9
mov byte [esp + 0x84], 1
mov byte [esp + 0x80], 0
push 0
call dword [sym.imp.KERNEL32.DLL_SetLastError]
mov edx, dword [ebx]
push edi
push 0xffffffffffffffec
push edx
call dword [sym.imp.USER32.DLL_SetWindowLongA]
test eax, eax
jne 0x4637eb
call dword [sym.imp.KERNEL32.DLL_GetLastError]
test eax, eax
jne 0x463804
mov eax, dword [ebx]
push 0xffffffffffffffec
push eax
call dword [sym.imp.USER32.DLL_GetWindowLongA]
cmp eax, dword [esp + 0x1c]
je 0x463804
mov byte [esp + 0x80], 1
cmp byte [ebx + 4], 0xa
jne 0x463862
mov ecx, dword [ebx]
push 0
push 0
push 0x1037
push ecx
call esi
mov edi, eax
mov eax, dword [ebp + 0x10]
cmp edi, eax
je 0x463862
cmp byte [esp + 0x84], 0
jne 0x46383b
mov byte [esp + 0x84], 1
mov byte [esp + 0x80], 0
mov edx, dword [ebx]
push eax
push 0
push 0x1036
push edx
call esi
mov eax, dword [ebx]
push 0
push 0
push 0x1037
push eax
call esi
cmp eax, edi
je 0x463862
mov byte [esp + 0x80], 1
cmp byte [esp + 0x84], 0
je 0x46387b
cmp byte [esp + 0x80], 0
je 0x46387b
mov byte [esp + 0x17], 1
movzx eax, byte [ebx + 4]
add eax, 0xfffffff7
cmp eax, 0x10
ja case.0x463892.13
movzx ecx, byte [eax + 0x463c78]
jmp dword [ecx*4 + 0x463c54]
cmp byte [ebp + 0x18d], 0
je case.0x463892.13
mov ecx, ebp
mov eax, ebx
call fcn.00467a10
jmp case.0x463892.13
mov eax, ebp
mov esi, ebx
call fcn.00467af0
test dword [ebp + 4], 0x100
je case.0x463892.13
mov edx, dword [ebx]
push 0
push 0
push 0x41d
push edx
call dword [sym.imp.USER32.DLL_SendMessageA]
jmp case.0x463892.13
mov edi, dword [esp + 0x7c]
mov eax, ebp
call fcn.00467c00
mov ebx, edi
jmp case.0x463892.13
mov esi, dword [esp + 0x7c]
mov edi, ebp
call fcn.00467cb0
mov ebx, esi
jmp case.0x463892.13
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x74]
push eax
push ecx
mov eax, ebp
mov ecx, ebx
call fcn.00467d00
mov edx, dword [esp + 0x18]
cmp edx, dword [esp + 0x78]
je case.0x463892.13
mov eax, dword [esp + 0x20]
mov ecx, dword [ebx]
push 0
push eax
push 0x402
push ecx
jmp 0x463986
mov eax, dword [ebp + 0x13c]
test eax, eax
je case.0x463892.13
lea edx, [ebp + 0x74]
push edx
push eax
mov eax, dword [ebx]
push 0xcb
push eax
call esi
mov byte [esp + 0x17], 1
jmp case.0x463892.13
mov eax, dword [ebp + 0x13c]
test eax, eax
je case.0x463892.13
mov edx, dword [ebx]
lea ecx, [ebp + 0x74]
push ecx
push eax
push 0x192
push edx
call esi
mov byte [esp + 0x17], 1
jmp case.0x463892.13
mov eax, dword [ebp + 0x60]
cmp eax, 0xffffffff
je case.0x463892.13
push eax
mov eax, dword [ebx]
push 0
push 0x2001
push eax
call esi
mov eax, dword [ebp + 0x188]
test eax, eax
je 0x4639b7
mov edx, dword [ebx]
xor ecx, ecx
cmp eax, 3
sete cl
push 0
push ecx
push 0xb
push edx
call dword [sym.imp.USER32.DLL_SendMessageA]
cmp dword [ebp + 0x188], 3
jne 0x4639b7
cmp byte [ebx + 4], 0xb
jne 0x4639be
cmp byte [esp + 0x17], 0
je 0x4639cb
mov eax, dword [ebx]
push 1
push 0
push eax
call dword [sym.imp.USER32.DLL_InvalidateRect]
cmp byte [esp + 0x84], 0
je 0x463a2b
cmp byte [esp + 0x80], 0
jne 0x463a2b
mov ecx, dword [0x4a8978]
test byte [ecx + 0xe0], 1
jne 0x463a14
mov edx, dword [0x4acad0]
push 1
push 0
push 0xffffffffffffffff
push 0x49bec0
push edx
call fcn.00476c10
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
mov ecx, dword [0x4ad5dc]
push 0x49a8ad
push 0
push 0x49bec0
call fcn.0042ed70
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x60
ret 0x14