Function at 0x46f560
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x492547
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x32c
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
push ebp
push edi
mov edi, ecx
mov eax, dword [edi]
push 0x3e8
push eax
call ebx
xor ebp, ebp
push ebp
push ebp
push 0x130b
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, ebp
mov dword [esp + 0x24], eax
jl 0x471ae5
mov ecx, dword [eax*4 + 0x4a6de0]
mov edx, dword [edi]
push esi
push ecx
push edx
call ebx
test eax, eax
jne 0x47197b
mov byte [edi + 0x15e], al
mov eax, dword [edi]
push 0x46f350
push eax
call fcn.004427f0
mov ecx, dword [esp + 0x30]
add esp, 8
mov esi, eax
mov eax, dword [ecx*4 + 0x4a6de0]
push eax
push 0xfffffffffffffff4
push esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 0x176
push 0x168
push 0x2f
push 0xa
push esi
call fcn.004454c0
push esi
call fcn.004433e0
add esp, 0x18
push 0x7530
push 2
push 0x403
push eax
mov dword [edi + 8], eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [edi + 8]
push ebp
push 3
push 0x403
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [edi + 8]
push ebp
push 1
push 0x403
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [edi + 8]
xor ecx, ecx
cmp byte [0x4aa144], cl
push ebp
setne cl
push ecx
push 0x401
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [esp + 0x28]
mov eax, dword [eax*4 + 0x4a6de0]
add eax, 0xfffffc16
cmp eax, 0xb
ja case.0x46f67b.1008
jmp dword [eax*4 + 0x471b00]
mov dword [esp + 0x20], ebp
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x344], ebp
mov dword [esp + 0x18], ebp
mov dword [esp + 0x14], ebp
push 0x20000
lea ecx, [esp + 0x20]
mov byte [esp + 0x348], 1
mov byte [esp + 0x30], 0
mov byte [esp + 0x31], 8
mov byte [esp + 0x32], 1
mov byte [esp + 0x33], 2
mov byte [esp + 0x34], 4
mov byte [esp + 0x35], 9
mov byte [esp + 0x36], 0xa
mov byte [esp + 0x37], 0xc
mov byte [esp + 0x38], 3
mov byte [esp + 0x39], 5
mov byte [esp + 0x3a], 6
mov byte [esp + 0x3b], 0xb
mov byte [esp + 0x3c], 0xd
mov byte [esp + 0x3d], 0xe
mov byte [esp + 0x3e], 7
mov byte [esp + 0x3f], 0xf
call fcn.004762c0
push 0x20000
lea ecx, [esp + 0x18]
call fcn.004762c0
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x2e0]
push 0xf
lea ecx, [esp + 0x14]
push ecx
push 0xe
push 0xb
push 1
push ebp
push eax
push ebp
push esi
call fcn.00441c80
mov eax, dword [esp + 0x34]
push 0x14
mov ecx, 0x12e
sub ecx, eax
push ecx
push 0xb
add eax, 0x11
push eax
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push 0x46c
push esi
call fcn.00442c20
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x2e8]
add esp, 0x54
push eax
push 0x46c
push esi
call fcn.00442e10
add esp, 0xc
cmp dword [0x4aa7b8], 0xffffffff
jne 0x46f7b6
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x2e8]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
push edx
push str.English
push str._s___s_
push eax
push ecx
call fcn.0044e7a0
mov edx, dword [esp + 0x34]
push edx
push 0x46c
push esi
call fcn.00442e10
add esp, 0x20
jmp 0x46f7c9
push str.English
push 0x46c
push esi
call fcn.00442e10
add esp, 0xc
cmp dword [0x4aa7a8], 0
jle 0x46f83c
cmp ebp, dword [0x4aa7b8]
jne 0x46f819
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2e8]
mov edx, dword [0x4aa7b0]
mov eax, dword [edx + ebp*4]
mov edx, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x20]
push eax
push str._s___s_
push ecx
push edx
call fcn.0044e7a0
mov eax, dword [esp + 0x34]
push eax
push 0x46c
push esi
call fcn.00442e10
add esp, 0x20
jmp 0x46f831
mov ecx, dword [0x4aa7b0]
mov edx, dword [ecx + ebp*4]
push edx
push 0x46c
push esi
call fcn.00442e10
add esp, 0xc
add ebp, 1
cmp ebp, dword [0x4aa7a8]
jl 0x46f7d2
push 0
push 0
push 0x14e
push 0x46c
push esi
call ebx
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call ebp
mov eax, dword [0x4aa554]
push str.English
push eax
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x46f882
push eax
push 1
push 0x14e
push 0x46c
push esi
call ebx
push eax
call ebp
jmp 0x46f8d0
xor ebp, ebp
cmp dword [0x4aa7a8], ebp
jle 0x46f8d0
lea esp, [esp]
mov ecx, dword [0x4aa7b0]
mov edx, dword [ecx + ebp*4]
mov eax, dword [0x4aa554]
push edx
push eax
call fcn.00402f60
add esp, 8
test eax, eax
jne 0x46f8c5
push eax
lea ecx, [ebp + 2]
push ecx
push 0x14e
push 0x46c
push esi
call ebx
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
add ebp, 1
cmp ebp, dword [0x4aa7a8]
jl 0x46f890
push 0x14
push 0x17
push 0xb
push 0x146
push 0x49ebe4
push 0
push 1
push 0x407
push esi
call fcn.00445350
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x2ec]
movsx ecx, byte [0x4aa549]
push 0
push 0xf
push 0x13e
push 0x26
push 0xb
push eax
push ecx
push 0
push 1
push 0x411
push esi
call fcn.00441de0
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x2f4]
movsx ecx, byte [0x4aa438]
add esp, 0x50
push 0
push 0xf
push 0x13e
push 0x3c
push 0xb
push eax
push ecx
push 0
push 1
push 0x410
push esi
call fcn.00441de0
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x2fc]
add esp, 0x2c
push 0xf
push 0x13e
push 0x52
push 0xb
push eax
call fcn.00469740
push eax
push 0
push 1
push 0x40b
push esi
call fcn.00441f70
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x304]
add esp, 0x28
push 0xf
push 0x13e
push 0x68
push 0xb
push edx
call fcn.004693a0
push eax
push 0
push 1
push 0x412
push esi
call fcn.00441f70
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x30c]
add esp, 0x28
push 0xf
push 0x13e
push 0x7e
push 0xb
push ecx
call fcn.00468950
push eax
push 0
push 1
push 0x408
push esi
call fcn.00441f70
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x314]
add esp, 0x28
push 0xf
push 0x13e
push 0x94
push 0xb
push eax
call fcn.004690e0
push eax
push 0
push 1
push 0x40a
push esi
call fcn.00441f70
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x31c]
add esp, 0x28
push 0xf
push 0x13e
push 0xaa
push 0xb
push edx
call fcn.00468db0
push eax
push 0
push 1
push 0x409
push esi
call fcn.00441f70
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x32c]
movsx edx, byte [0x4aa468]
push 0
push 0xf
push 0x13e
push 0xc0
push 0xb
push ecx
push edx
push 0
push 1
push 0x414
push esi
call fcn.00441de0
add esp, 0x54
push 0xf
lea eax, [esp + 0x14]
push eax
push 0xd9
push 0xb
push 1
push 0
push str.Hotkey:
push 0
push esi
call fcn.00441c80
mov eax, dword [0x4aa638]
add esp, 0x24
test eax, eax
je 0x46faeb
mov ecx, dword [0x4aa4f4]
cmp ecx, 0xf
ja 0x46faeb
movzx ecx, byte [esp + ecx + 0x2c]
push eax
push ecx
push 0
push 0
lea edx, [esp + 0x4c]
push 0x100
push edx
call fcn.00441520
mov ecx, dword [0x4aa4f4]
xor eax, eax
mov ah, byte [esp + ecx + 0x44]
add esp, 0x18
or eax, dword [0x4aa638]
shl eax, 0x10
mov ebp, eax
jmp 0x46fb0c
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x2cc]
push eax
lea ecx, [esp + 0x40]
push 0x100
push ecx
call fcn.00431500
add esp, 0xc
xor ebp, ebp
mov edx, dword [esp + 0x10]
push 0x14
push 0x96
push 0xd7
add edx, 0x11
push edx
push 1
push 0
push 0
push 0
lea eax, [esp + 0x5c]
push eax
push 0x46b
push esi
call fcn.004454f0
add esp, 0x2c
push 0xffffffffffffffff
push 0
push 0xb1
push 0x46b
push esi
call ebx
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xb1
push 0x46b
push esi
call ebx
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x46b
push esi
call ebx
push ebp
push 0xffffffffffffffeb
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2e8]
mov edx, dword [eax + 0x2e4]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x46c
push esi
push eax
call fcn.00443460
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x2f0]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
push str.www.voidtools.com
push edx
push eax
push ecx
call fcn.0044e7a0
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x530]
mov ecx, dword [edi + 8]
push 0
push eax
push 0x407
push esi
push ecx
call fcn.00443460
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x2d8]
mov ecx, dword [esp + 0x58]
mov edx, dword [edi + 8]
push eax
push ecx
push 0x411
push esi
push edx
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d4]
add esp, 0x4c
push ecx
mov edx, dword [eax + 0x2f8]
mov eax, dword [edi + 8]
push edx
push 0x410
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d4]
mov edx, dword [eax + 0x300]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x40b
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d4]
mov edx, dword [eax + 0x310]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x408
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d8]
mov edx, dword [eax + 0x320]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x409
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d8]
mov edx, dword [eax + 0x318]
mov eax, dword [edi + 8]
add esp, 0x50
push ecx
push edx
push 0x40a
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d4]
mov edx, dword [eax + 0x330]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x414
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d4]
mov edx, dword [eax + 0x308]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x412
push esi
push eax
call fcn.00443460
add esp, 0x3c
push esi
mov ecx, edi
call fcn.004683c0
lea ecx, [esp + 0x14]
mov byte [esp + 0x344], 0
call fcn.00476730
lea ecx, [esp + 0x1c]
mov dword [esp + 0x344], 0xffffffff
call fcn.00476730
xor ebp, ebp
jmp case.0x46f67b.1008
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x390]
movsx eax, byte [0x4aa150]
push ebp
push 0xf
push 0x13e
push 0xb
push 0xb
push edx
push eax
push ebp
push 1
push 0x413
push esi
call fcn.00441de0
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x398]
movsx eax, byte [0x4aa648]
push ebp
push 0xf
push 0x13e
push 0x21
push 0xb
push edx
push eax
push ebp
push 1
push 0x418
push esi
call fcn.00441de0
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x3a0]
movsx eax, byte [0x4aa46a]
add esp, 0x58
push ebp
push 0xf
push 0x13e
push 0x37
push 0xb
push edx
push eax
push ebp
push 1
push 0x419
push esi
call fcn.00441de0
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x688]
movsx eax, byte [0x4aa4ec]
push ebp
push 0xf
push 0x13e
push 0x4d
push 0xb
push edx
push eax
push ebp
push 1
push 0x40e
push esi
call fcn.00441de0
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x758]
add esp, 0x58
push 0xf
push ebp
push 0x63
push 0xb
push 1
push ebp
push edx
push ebp
push esi
call fcn.00441c80
push 0xde
push 0x152
push 0x73
push 0xb
push ebp
push 0x416
push 0x4014
push esi
call fcn.00442d90
add esp, 0x44
push 0x416
push esi
call ebx
push eax
mov ecx, edi
call fcn.00467a10
mov ecx, dword [0x4aa7bc]
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], ebp
mov edx, dword [ecx + 0x8dc]
push eax
push edx
push esi
call fcn.00443cf0
mov eax, dword [esp + 0x28]
add eax, 0x18
add esp, 0xc
cmp eax, 0x4b
mov dword [esp + 0x1c], eax
jge 0x46fe74
mov eax, 0x4b
mov dword [esp + 0x1c], eax
mov edx, dword [0x4aa7bc]
push 0x17
push eax
push 0x158
mov ecx, 0x15d
sub ecx, eax
mov eax, dword [edx + 0x8dc]
push ecx
push eax
push ebp
push 1
push 0x417
push esi
call fcn.00445350
push ebp
push ebp
push ebp
push ebp
mov eax, esi
call fcn.0046aa10
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d8]
mov edx, dword [eax + 0x37c]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x40c
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d8]
mov edx, dword [eax + 0x68c]
mov eax, dword [edi + 8]
add esp, 0x48
push ecx
push edx
push 0x40e
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d4]
mov edx, dword [eax + 0x38c]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x40f
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d8]
mov edx, dword [eax + 0x394]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x413
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d8]
mov edx, dword [eax + 0x39c]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x418
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d8]
mov edx, dword [eax + 0x3a4]
mov eax, dword [edi + 8]
add esp, 0x50
push ecx
push edx
push 0x419
push esi
push eax
call fcn.00443460
add esp, 0x14
jmp case.0x46f67b.1008
mov edx, dword [0x4aa7bc]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], ebp
mov eax, dword [edx + 0x740]
push ecx
push eax
push esi
call fcn.00443cf0
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x744]
lea ecx, [esp + 0x28]
push ecx
push eax
push esi
call fcn.00443cf0
mov eax, dword [esp + 0x34]
add eax, 0x18
add esp, 0x18
cmp eax, 0x4b
mov dword [esp + 0x1c], eax
jge 0x46ffd3
mov dword [esp + 0x1c], 0x4b
mov edx, dword [0x4aa7bc]
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebp
mov eax, dword [edx + 0x734]
push ecx
push eax
push esi
call fcn.00443cf0
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x738]
lea ecx, [esp + 0x20]
push ecx
push eax
push esi
call fcn.00443cf0
mov ecx, dword [0x4aa7bc]
add dword [esp + 0x2c], 0x12
mov edx, dword [ecx + 0x934]
push ebp
push 0x6e
push 0x152
push 0xb
push 0xb
push edx
push ebp
push esi
call fcn.00442a60
mov eax, dword [esp + 0x4c]
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x734]
push ebp
push 0xf
push eax
movsx eax, byte [0x4aa649]
push 0x21
push 0x15
push edx
push eax
push ebp
push 1
push 0x41a
push esi
call fcn.00441de0
mov ecx, dword [esp + 0x78]
mov edx, dword [0x4aa458]
add esp, 0x64
push 0x14
push 0x35
push 0x1f
add ecx, 0x15
push ecx
push edx
push 0xbb8
push ebp
push 0x41b
push esi
call fcn.00445200
mov eax, dword [esp + 0x38]
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x73c]
push 0xf
push ebp
push 0x21
add eax, 0x51
push eax
push 1
push ebp
push edx
push ebp
push esi
call fcn.00441c80
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x8a0]
movsx edx, byte [0x4aa4fc]
add esp, 0x48
push ebp
push 0xf
push 0x13e
push 0x3c
push 0x15
push ecx
push edx
push ebp
push 1
push 0x41c
push esi
call fcn.00441de0
mov eax, dword [esp + 0x48]
mov edx, dword [0x4aa7bc]
push 0x17
push eax
push 0x55
mov ecx, 0x153
sub ecx, eax
mov eax, dword [edx + 0x740]
push ecx
push eax
push 1
push 1
push 0x41f
push esi
call fcn.00445350
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x938]
add esp, 0x50
push ebp
push 0x53
push 0x152
push 0x80
push 0xb
push edx
push ebp
push esi
call fcn.00442a60
mov eax, dword [esp + 0x34]
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x738]
push ebp
push 0xf
push eax
movsx eax, byte [0x4aa764]
push 0x96
push 0x15
push edx
push eax
push ebp
push 1
push 0x41d
push esi
call fcn.00441de0
mov ecx, dword [esp + 0x60]
mov edx, dword [0x4aa770]
add esp, 0x4c
push 0x14
push 0x35
push 0x94
add ecx, 0x15
push ecx
push edx
push 0xbb8
push ebp
push 0x41e
push esi
call fcn.00445200
mov eax, dword [esp + 0x38]
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x73c]
push 0xf
push ebp
push 0x96
add eax, 0x51
push eax
push 1
push ebp
push edx
push ebp
push esi
call fcn.00441c80
mov eax, dword [esp + 0x64]
add esp, 0x48
push 0x17
push eax
mov edx, dword [0x4aa7bc]
push 0xaf
mov ecx, 0x153
sub ecx, eax
mov eax, dword [edx + 0x744]
push ecx
push eax
push ebp
push 1
push 0x420
push esi
call fcn.00445350
add esp, 0x24
jmp case.0x46f67b.1008
mov edx, dword [0x4aa7bc]
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebp
mov eax, dword [edx + 0x768]
push ecx
push eax
push esi
call fcn.00443cf0
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x76c]
lea ecx, [esp + 0x20]
push ecx
push eax
push esi
call fcn.00443cf0
mov eax, dword [esp + 0x2c]
add eax, 0x18
add esp, 0x18
cmp eax, 0x4b
mov dword [esp + 0x14], eax
jge 0x47023a
mov dword [esp + 0x14], 0x4b
mov eax, 0x4aa160
lea ecx, [edi + 0x17b]
mov edx, dword [eax]
mov dword [ecx], edx
add eax, 4
add ecx, 4
cmp eax, 0x4aa434
jl 0x470245
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x760]
push 0xf
push ebp
push 0xb
push 0xb
push 1
push ebp
push ecx
push ebp
push esi
call fcn.00441c80
push 0x14
push 0x152
push 0x1d
push 0xb
push 1
push 1
push ebp
push ebp
push 0x493d7a
push 0x421
push esi
call fcn.004454f0
add esp, 0x50
push ebp
push 1
push 0x8e
push 0x152
push 0x38
push 0xb
push 0x422
push esi
call fcn.00442940
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x764]
push 0xf
push ebp
push 0xca
push 0xb
push 1
push ebp
push eax
push ebp
push esi
call fcn.00441c80
add esp, 0x44
push 0x15
mov ecx, 0x14b
sub ecx, dword [esp + 0x18]
push ecx
push 0xdd
push 0xb
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push 0x425
push esi
call fcn.00442c20
mov eax, dword [esp + 0x44]
push 0x17
push eax
push 0xdc
mov edx, 0x15d
sub edx, eax
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x768]
push edx
push ecx
push ebp
push 1
push 0x426
push esi
call fcn.00445350
add esp, 0x54
push 0xf
push ebp
push 0xf7
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x778]
push 0xb
push 1
push ebp
push eax
push ebp
push esi
call fcn.00441c80
mov ecx, dword [0x4aa7bc]
mov eax, 0x144
sub eax, dword [esp + 0x38]
push 0xf
cdq
push ebp
sub eax, edx
mov edx, dword [ecx + 0x770]
push 0xf7
sar eax, 1
add eax, 0x12
push eax
push 1
push ebp
push edx
push ebp
push esi
call fcn.00441c80
add esp, 0x48
push 0x15
mov eax, 0x144
sub eax, dword [esp + 0x18]
cdq
sub eax, edx
sar eax, 1
push eax
push 0x10a
push 0xb
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push 0x423
push esi
call fcn.00442c20
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x77c]
push ecx
push 0x423
push esi
call fcn.00442e10
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x784]
push eax
push 0x423
push esi
call fcn.00442e10
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x780]
add esp, 0x48
push edx
push 0x423
push esi
call fcn.00442e10
add esp, 0xc
push ebp
push ebp
push 0x14e
push 0x423
push esi
call ebx
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, 0x144
sub eax, dword [esp + 0x14]
push 0x14
cdq
sub eax, edx
sar eax, 1
push eax
push 0x10a
add eax, 0x12
push eax
push 1
push ebp
push ebp
push ebp
push 0x493d7a
push 0x424
push esi
call fcn.004454f0
mov eax, dword [esp + 0x40]
mov edx, dword [0x4aa7bc]
push 0x17
push eax
push 0x109
mov ecx, 0x15d
sub ecx, eax
mov eax, dword [edx + 0x76c]
push ecx
push eax
push ebp
push 1
push 0x427
push esi
call fcn.00445350
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x774]
add esp, 0x50
push 0xf
push ebp
push 0x124
push 0xb
push 1
push ebp
push edx
push ebp
push esi
call fcn.00441c80
push 0x15
push 0x152
push 0x137
push 0xb
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push 0x428
push esi
call fcn.00442c20
mov ecx, dword [0x4aa7bc]
add esp, 0x54
lea eax, [esp + 0x14]
mov dword [esp + 0x14], ebp
mov edx, dword [ecx + 0x788]
push eax
push edx
push esi
call fcn.00443cf0
mov eax, dword [esp + 0x20]
add eax, 0x18
add esp, 0xc
cmp eax, 0x4b
mov dword [esp + 0x14], eax
jge 0x4704e9
mov eax, 0x4b
mov dword [esp + 0x14], eax
mov edx, dword [0x4aa7bc]
push 0x17
push eax
push 0x158
mov ecx, 0x15d
sub ecx, eax
mov eax, dword [edx + 0x788]
push ecx
push eax
push ebp
push 1
push 0x429
push esi
call fcn.00445350
add esp, 0x24
push esi
mov ecx, edi
call fcn.0046e590
jmp case.0x46f67b.1008
push ebp
push 0x4aa530
push 0x4aa148
lea ecx, [edi + 0x453]
push ecx
lea edx, [edi + 0x44f]
push edx
call fcn.0044d1a0
mov ecx, dword [0x4aa7bc]
lea eax, [esp + 0x28]
mov dword [esp + 0x28], ebp
mov edx, dword [ecx + 0x7f8]
push eax
push edx
push esi
call fcn.00443cf0
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x7fc]
lea eax, [esp + 0x34]
push eax
push edx
push esi
call fcn.00443cf0
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x800]
lea eax, [esp + 0x40]
push eax
push edx
push esi
call fcn.00443cf0
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x804]
lea eax, [esp + 0x4c]
push eax
push edx
push esi
call fcn.00443cf0
mov eax, dword [esp + 0x58]
add eax, 0x18
add esp, 0x44
cmp eax, 0x4b
mov dword [esp + 0x14], eax
jge 0x4705c1
mov dword [esp + 0x14], 0x4b
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x808]
push 0xf
push ebp
push 0xb
push 0xb
push 1
push ebp
push ecx
push ebp
push esi
call fcn.00441c80
push ebp
push ebp
push 0x6e
mov edx, 0x146
sub edx, dword [esp + 0x44]
push edx
push 0x1d
push 0xb
push 0x42a
push esi
call fcn.00442940
mov eax, dword [esp + 0x58]
add esp, 0x44
push 0x17
push eax
push 0x1d
mov ebp, 0x15d
sub ebp, eax
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x7f8]
push ebp
push ecx
push 0
push 1
push 0x42d
push esi
call fcn.00445350
mov edx, dword [esp + 0x38]
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x7fc]
push 0x17
push edx
push 0x3a
push ebp
push ecx
push 0
push 1
push 0x42e
push esi
call fcn.00445350
mov edx, dword [esp + 0x5c]
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x804]
add esp, 0x48
push 0x17
push edx
push 0x57
push ebp
push ecx
push 0
push 1
push 0x42c
push esi
call fcn.00445350
mov edx, dword [esp + 0x38]
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x800]
push 0x17
push edx
push 0x74
push ebp
push ecx
push 0
push 1
push 0x42b
push esi
call fcn.00445350
mov edx, dword [esp + 0x5c]
add esp, 0x48
push 0
push 0x7b
push 0x152
push 0x91
lea ebp, [edx + ebp - 0x152]
push ebp
push 0x493d7a
push 0x432
push esi
call fcn.00442a60
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x80c]
push 0xf
push 0
push 0xa4
add ebp, 0xb
push ebp
push 1
push 0
push ecx
push 0
push esi
call fcn.00441c80
add esp, 0x44
push 0x15
push 0x13c
push 0xb7
push ebp
push 1
push 0
push 0
push 0
push 0x493d7a
push 0x42f
push esi
call fcn.004454f0
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x810]
push 0xf
push 0
push 0xd1
push ebp
push 1
push 0
push eax
push 0
push esi
call fcn.00441c80
add esp, 0x50
push 0x15
push 0x13c
push 0xe4
push ebp
push 1
push 0
push 0
push 0
push 0x493d7a
push 0x430
push esi
call fcn.004454f0
mov edx, dword [0x4aa7bc]
lea ecx, [esp + 0x40]
mov dword [esp + 0x40], 0
mov eax, dword [edx + 0x7ec]
push ecx
push eax
push esi
sub ebp, 0xb
call fcn.00443cf0
mov eax, dword [esp + 0x4c]
add eax, 0x18
add esp, 0x38
cmp eax, 0x4b
mov dword [esp + 0x14], eax
jge 0x4707a0
mov eax, 0x4b
mov dword [esp + 0x14], eax
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x788]
push 0x17
push eax
push 0x118
sub ebp, eax
add ebp, 0x152
push ebp
push edx
push 0
push 1
push 0x431
push esi
call fcn.00445350
add esp, 0x24
push esi
mov ecx, edi
call fcn.0046d220
xor ebp, ebp
jmp case.0x46f67b.1008
cmp dword [0x4a95f0], ebp
je 0x4707fa
mov eax, dword [edi]
push 1
push 0x3e9
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov dword [esp + 0x20], ebp
mov dword [esp + 0x1c], ebp
push 0x20000
lea ecx, [esp + 0x20]
mov dword [esp + 0x348], 2
call fcn.004762c0
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x3c8]
push 0xf
push ebp
push 0xb
push 0xb
push 1
push ebp
push edx
push ebp
push esi
call fcn.00441c80
mov eax, dword [0x4aa570]
push 0x14
push 0x134
push 0x1d
push 0xb
push 1
push 1
push ebp
push ebp
push eax
push 0x456
push esi
call fcn.004454f0
add esp, 0x50
push 0x14
push 0x17
push 0x1d
push 0x146
push 0x49ebe4
push ebp
push 1
push 0x457
push esi
call fcn.00445350
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x3d4]
push 0xf
push ebp
push 0x36
push 0xb
push 1
push ebp
push edx
push ebp
push esi
call fcn.00441c80
add esp, 0x48
push ebp
push ebp
push 0x82
push 0x152
push 0x48
push 0xb
push 0x455
push esi
call fcn.00442940
push ebp
push 0x9b
push 0x152
push 0xce
push 0xb
push 0x493d7a
push 0x454
push esi
call fcn.00442a60
mov eax, dword [0x4aa7bc]
add esp, 0x40
push ebp
push 0xf
push 0x13c
push 0xe1
push 0x16
mov ecx, dword [eax + 0x554]
push ecx
push 1
push ebp
push 1
push 0x461
push esi
call fcn.00441de0
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x3dc]
push ebp
push 0xf
push 0x13c
push 0xf5
push 0x16
push eax
push 1
push ebp
push 1
push 0x462
push esi
call fcn.00441de0
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x3e4]
add esp, 0x58
push 0xf
lea ecx, [esp + 0x14]
push ecx
push 0x10d
push 0x16
push 1
push ebp
push eax
push 0x463
push esi
call fcn.00441c80
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x3ec]
push 0xf
lea ecx, [esp + 0x4c]
push ecx
push 0x128
push 0x16
push 1
push ebp
push eax
push 0x466
push esi
call fcn.00441c80
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0x58]
add esp, 0x48
cmp ecx, eax
jle 0x47099e
mov eax, ecx
mov dword [esp + 0x10], eax
push 0x14
push 0x4b
push 0x10a
add eax, 0x1c
push eax
push 1
push ebp
push ebp
push 1
push str.8192
push 0x465
push esi
call fcn.004454f0
mov ecx, dword [esp + 0x3c]
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x1c8]
push 0xf
push ebp
push 0x10d
add ecx, 0x6e
push ecx
push 1
push ebp
push eax
push 0x464
push esi
call fcn.00441c80
mov ecx, dword [esp + 0x60]
add esp, 0x50
push 0x14
push 0x4b
push 0x125
add ecx, 0x1c
push ecx
push 1
push ebp
push ebp
push 1
push str.1024
push 0x468
push esi
call fcn.004454f0
mov edx, dword [esp + 0x3c]
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x1c8]
push 0xf
push ebp
push 0x128
add edx, 0x6e
push edx
push 1
push ebp
push ecx
push 0x467
push esi
call fcn.00441c80
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x3f4]
add esp, 0x50
push ebp
push 0xf
push 0x13c
push 0x13f
push 0x16
push eax
push 1
push ebp
push 1
push 0x469
push esi
call fcn.00441de0
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x3fc]
push ebp
push 0xf
push 0x13c
push 0x153
push 0x16
push edx
push 1
push ebp
push 1
push 0x46a
push esi
call fcn.00441de0
add esp, 0x58
push esi
mov ecx, edi
call fcn.0046b6f0
push 0x13
push ebp
push ebp
push ebp
push ebp
push 1
push 0x454
push esi
call ebx
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2dc]
mov edx, dword [eax + 0x3cc]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x456
push esi
push eax
call fcn.00443460
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x3d0]
mov eax, dword [edi + 8]
push ebp
push edx
push 0x457
push esi
push eax
call fcn.00443460
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x3d8]
mov eax, dword [edi + 8]
push ebp
push edx
push 0x455
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d4]
mov edx, dword [eax + 0x558]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x461
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d4]
mov edx, dword [eax + 0x3e0]
mov eax, dword [edi + 8]
add esp, 0x50
push ecx
push edx
push 0x462
push esi
push eax
call fcn.00443460
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x3e8]
mov eax, dword [edi + 8]
push str.8192
push edx
push 0x465
push esi
push eax
call fcn.00443460
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x3f0]
push str.1024
push edx
mov eax, dword [edi + 8]
push 0x468
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d4]
mov edx, dword [eax + 0x3f8]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x469
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d4]
mov edx, dword [eax + 0x400]
mov eax, dword [edi + 8]
add esp, 0x50
push ecx
push edx
push 0x46a
push esi
push eax
call fcn.00443460
add esp, 0x14
mov dword [edi + 0x16b], 1
jmp 0x471960
cmp dword [0x4a95f0], ebp
je 0x470c16
mov ecx, dword [edi]
push 1
push 0x3e9
push ecx
call ebx
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x690]
movsx ecx, byte [0x4aa579]
push ebp
push 0xf
push 0x14c
push 0xb
push 0xb
push eax
push ecx
push ebp
push 1
push 0x3f7
push esi
call fcn.00441de0
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x698]
movsx ecx, byte [0x4aa469]
push ebp
push 0xf
push 0x14c
push 0x1d
push 0xb
push eax
push ecx
push ebp
push 1
push 0x3f8
push esi
call fcn.00441de0
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x614]
movsx ecx, byte [0x4aa79a]
add esp, 0x58
push ebp
push 0xf
push 0x14c
push 0x2f
push 0xb
push eax
push ecx
push ebp
push 1
push 0x3f6
push esi
call fcn.00441de0
push ebp
push 0x111
push 0x152
push 0x41
push 0xb
push 0x3f9
push esi
call fcn.004429d0
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x5a4]
add esp, 0x48
push 0x4b
push eax
push ebp
push 0x3f9
push esi
call ebx
push eax
call fcn.00467970
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x5a8]
add esp, 0x10
push 0xb8
push edx
push 1
push 0x3f9
push esi
call ebx
push eax
call fcn.00467970
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x5ac]
add esp, 0x10
push 0x4b
push ecx
push 2
push 0x3f9
push esi
call ebx
push eax
call fcn.00467970
mov eax, dword [0x4aa7bc]
lea edx, [esp + 0x20]
mov dword [esp + 0x20], 0x33
mov ecx, dword [eax + 0x620]
push edx
push ecx
push esi
call fcn.00443cf0
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x628]
lea edx, [esp + 0x2c]
push edx
push ecx
push esi
call fcn.00443cf0
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x630]
lea edx, [esp + 0x38]
push edx
push ecx
push esi
call fcn.00443cf0
mov eax, dword [esp + 0x44]
mov ecx, dword [0x4aa7bc]
push 0x17
add eax, 0x18
push eax
mov dword [esp + 0x4c], eax
lea edx, [eax + eax*2]
push 0x15a
mov eax, 0x151
sub eax, edx
mov edx, dword [ecx + 0x620]
push eax
push edx
push ebp
push 1
push 0x3fa
push esi
call fcn.00445350
mov eax, dword [esp + 0x68]
mov edx, dword [0x4aa7bc]
add esp, 0x58
push 0x17
push eax
push 0x15a
add eax, eax
mov ecx, 0x157
sub ecx, eax
mov eax, dword [edx + 0x628]
push ecx
push eax
push ebp
push 1
push 0x3fb
push esi
call fcn.00445350
mov eax, dword [esp + 0x34]
mov edx, dword [0x4aa7bc]
push 0x17
push eax
push 0x15a
mov ecx, 0x15d
sub ecx, eax
mov eax, dword [edx + 0x630]
push ecx
push eax
push ebp
push 1
push 0x3fc
push esi
call fcn.00445350
add esp, 0x48
push esi
mov ecx, edi
call fcn.0046bb20
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d8]
mov edx, dword [eax + 0x694]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x3f7
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d8]
mov edx, dword [eax + 0x69c]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x3f8
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d4]
mov edx, dword [eax + 0x618]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x3f6
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2dc]
mov edx, dword [eax + 0x61c]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x3f9
push esi
push eax
call fcn.00443460
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x624]
mov eax, dword [edi + 8]
add esp, 0x50
push ebp
push edx
push 0x3fa
push esi
push eax
call fcn.00443460
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x62c]
mov eax, dword [edi + 8]
push ebp
push edx
push 0x3fb
push esi
push eax
call fcn.00443460
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x634]
mov eax, dword [edi + 8]
push ebp
push edx
push 0x3fc
push esi
push eax
call fcn.00443460
add esp, 0x3c
mov dword [edi + 0x16f], 1
jmp case.0x46f67b.1008
mov dword [esp + 0x20], ebp
mov dword [esp + 0x1c], ebp
push 0x20000
lea ecx, [esp + 0x20]
mov dword [esp + 0x348], 3
call fcn.004762c0
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x410]
push 0xf
lea ecx, [esp + 0x14]
push ecx
push 0xe
push 0xb
push 1
push ebp
push eax
push ebp
push esi
call fcn.00441c80
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x598]
push 0xf
lea ecx, [esp + 0x4c]
push ecx
push 0x29
push 0xb
push 1
push ebp
push eax
push ebp
push esi
call fcn.00441c80
mov eax, dword [esp + 0x6c]
add esp, 0x48
cmp eax, dword [esp + 0x10]
jle 0x470f85
mov dword [esp + 0x10], eax
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x418]
push 0xf
lea ecx, [esp + 0x28]
push ecx
push 0x44
push 0xb
push 1
push ebp
push eax
push ebp
push esi
call fcn.00441c80
mov eax, dword [esp + 0x48]
add esp, 0x24
cmp eax, dword [esp + 0x10]
jle 0x470fb8
mov dword [esp + 0x10], eax
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x420]
push 0xf
lea ecx, [esp + 0x28]
push ecx
push 0x5f
push 0xb
push 1
push ebp
push eax
push ebp
push esi
call fcn.00441c80
mov eax, dword [esp + 0x48]
add esp, 0x24
cmp eax, dword [esp + 0x10]
jle 0x470feb
mov dword [esp + 0x10], eax
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x428]
push 0xf
lea ecx, [esp + 0x28]
push ecx
push 0x7a
push 0xb
push 1
push ebp
push eax
push ebp
push esi
call fcn.00441c80
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x34]
add esp, 0x24
cmp ecx, eax
jle 0x471022
mov eax, ecx
mov dword [esp + 0x10], eax
mov ecx, dword [0x4aa45c]
push 0x14
push 0x4b
push 0xb
add eax, 0x11
push eax
push 1
push ebp
push ebp
push ecx
push 0x43a
push esi
call fcn.00446350
mov edx, dword [esp + 0x38]
mov eax, dword [0x4aa56c]
push 0x14
push 0x4b
push 0x26
add edx, 0x11
push edx
push 1
push ebp
push ebp
push ebp
push eax
push 0x43b
push esi
call fcn.004454f0
mov ecx, dword [esp + 0x64]
mov edx, dword [0x4aa14c]
add esp, 0x54
push 0x14
push 0x4b
push 0x41
add ecx, 0x11
push ecx
push ebp
push edx
push 0x43c
push esi
call fcn.00442b40
mov eax, dword [esp + 0x30]
mov edx, dword [0x4aa4e8]
push 0x14
mov ecx, 0x14c
sub ecx, eax
push ecx
push 0x5c
add eax, 0x11
push eax
push 1
push ebp
push ebp
push ebp
push edx
push 0x43d
push esi
call fcn.004454f0
mov eax, dword [esp + 0x5c]
mov ecx, dword [0x4aa54c]
add esp, 0x4c
push 0x14
push 0x4b
push 0x77
add eax, 0x11
push eax
push 1
push ebp
push ebp
push ecx
push 0x43e
push esi
call fcn.00446350
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x430]
push ebp
push 0xf
push 0x152
push 0x92
push 0xb
push eax
movsx ecx, byte [0x4aa57a]
push ecx
push ebp
push 1
push 0x435
push esi
call fcn.00441de0
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x438]
add esp, 0x54
push 0xf
push ebp
push 0xa8
push 0xb
push 1
push ebp
push eax
push 0x448
push esi
call fcn.00441c80
mov ecx, dword [0x4aa43c]
push 0x14
push 0x134
push 0xba
push 0xb
push 1
push 1
push ebp
push ebp
push ecx
push 0x440
push esi
call fcn.004454f0
add esp, 0x50
push 0x14
push 0x17
push 0xba
push 0x146
push 0x49ebe4
push ebp
push 1
push 0x442
push esi
call fcn.00445350
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x3e4]
push 0xf
lea edx, [esp + 0x38]
push edx
push 0xd6
push 0xb
push 1
push ebp
push ecx
push 0x449
push esi
call fcn.00441c80
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x3ec]
add esp, 0x48
push 0xf
lea edx, [esp + 0x28]
push edx
push 0xf1
push 0xb
push 1
push ebp
push ecx
push 0x44b
push esi
call fcn.00441c80
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x34]
add esp, 0x24
cmp ecx, eax
jle 0x4711e8
mov eax, ecx
mov dword [esp + 0x10], eax
push 0x14
push 0x4b
push 0xd3
add eax, 0x11
push eax
mov eax, dword [0x4aa510]
add eax, 0x3ff
cdq
push 1
push 1
and edx, 0x3ff
add eax, edx
push ebp
sar eax, 0xa
push eax
push 0x444
push esi
call fcn.00446350
mov edx, dword [esp + 0x38]
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x1c8]
push 0xf
push ebp
push 0xd6
add edx, 0x63
push edx
push 1
push ebp
push ecx
push 0x44a
push esi
call fcn.00441c80
mov edx, dword [esp + 0x5c]
mov eax, dword [0x4aa13c]
add esp, 0x4c
push 0x14
push 0x4b
push 0xee
add edx, 0x11
push edx
add eax, 0x3ff
cdq
push 1
push 1
and edx, 0x3ff
add eax, edx
push ebp
sar eax, 0xa
push eax
push 0x445
push esi
call fcn.00446350
mov eax, dword [esp + 0x38]
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x1c8]
push 0xf
push ebp
push 0xf1
add eax, 0x63
push eax
push 1
push ebp
push edx
push 0x44c
push esi
call fcn.00441c80
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x580]
movsx edx, byte [0x4aa515]
add esp, 0x4c
push ebp
push 0xf
push 0x152
push 0x109
push 0xb
push ecx
push edx
push ebp
push 1
push 0x438
push esi
call fcn.00441de0
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x440]
movsx edx, byte [0x4aa578]
push ebp
push 0xf
push 0x152
push 0x11f
push 0xb
push ecx
push edx
push ebp
push 1
push 0x439
push esi
call fcn.00441de0
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x414]
mov edx, dword [edi + 8]
add esp, 0x58
push 0x49f860
push ecx
push 0x43a
push esi
push edx
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2dc]
mov edx, dword [eax + 0x59c]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x43b
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2dc]
mov edx, dword [eax + 0x41c]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x43c
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2dc]
mov edx, dword [eax + 0x424]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x43d
push esi
push eax
call fcn.00443460
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x42c]
mov eax, dword [edi + 8]
add esp, 0x50
push 0x49f85c
push edx
push 0x43e
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d4]
mov edx, dword [eax + 0x434]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x435
push esi
push eax
call fcn.00443460
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x448]
push ebp
push edx
push 0x442
mov eax, dword [edi + 8]
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d4]
mov edx, dword [eax + 0x584]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x438
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d8]
mov edx, dword [eax + 0x444]
mov eax, dword [edi + 8]
add esp, 0x50
push ecx
push edx
push 0x439
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2dc]
mov edx, dword [eax + 0x43c]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x440
push esi
push eax
call fcn.00443460
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x44c]
mov eax, dword [edi + 8]
push str.4096
push edx
push 0x444
push esi
push eax
call fcn.00443460
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x450]
mov eax, dword [edi + 8]
push 0x49f850
push edx
push 0x445
push esi
push eax
call fcn.00443460
add esp, 0x50
push esi
mov ecx, edi
call fcn.00468150
jmp 0x471960
mov dword [esp + 0x20], ebp
mov dword [esp + 0x1c], ebp
push 0x20000
lea ecx, [esp + 0x20]
mov dword [esp + 0x348], 4
call fcn.004762c0
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x458]
push 0xf
lea ecx, [esp + 0x14]
push ecx
push 0xe
push 0xb
push 1
push ebp
push eax
push ebp
push esi
call fcn.00441c80
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x460]
push 0xf
lea ecx, [esp + 0x4c]
push ecx
push 0x29
push 0xb
push 1
push ebp
push eax
push ebp
push esi
call fcn.00441c80
mov eax, dword [esp + 0x6c]
add esp, 0x48
cmp eax, dword [esp + 0x10]
jle 0x47152e
mov dword [esp + 0x10], eax
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x468]
push 0xf
lea ecx, [esp + 0x28]
push ecx
push 0x44
push 0xb
push 1
push ebp
push eax
push ebp
push esi
call fcn.00441c80
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x34]
add esp, 0x24
cmp ecx, eax
jle 0x471565
mov eax, ecx
mov dword [esp + 0x10], eax
mov ecx, dword [0x4aa558]
push 0x14
push 0x4b
push 0xb
add eax, 0x11
push eax
push 1
push ebp
push ebp
push ecx
push 0x43f
push esi
call fcn.00446350
mov edx, dword [esp + 0x38]
mov eax, dword [0x4aa588]
push 0x14
push 0x4b
push 0x26
add edx, 0x11
push edx
push 1
push 1
push ebp
push ebp
push eax
push 0x452
push esi
call fcn.004454f0
mov ecx, dword [esp + 0x64]
mov edx, dword [0x4aa528]
add esp, 0x54
push 0x14
push 0x4b
push 0x41
add ecx, 0x11
push ecx
push ebp
push edx
push 0x453
push esi
call fcn.00442b40
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x470]
movsx edx, byte [0x4aa504]
push ebp
push 0xf
push 0x152
push 0x5c
push 0xb
push ecx
push edx
push ebp
push 1
push 0x434
push esi
call fcn.00441de0
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x478]
add esp, 0x4c
push 0xf
push ebp
push 0x72
push 0xb
push 1
push ebp
push ecx
push 0x44d
push esi
call fcn.00441c80
mov edx, dword [0x4aa534]
push 0x14
push 0x134
push 0x84
push 0xb
push 1
push 1
push ebp
push ebp
push edx
push 0x441
push esi
call fcn.004454f0
add esp, 0x50
push 0x14
push 0x17
push 0x84
push 0x146
push 0x49ebe4
push ebp
push 1
push 0x443
push esi
call fcn.00445350
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x3e4]
push 0xf
lea eax, [esp + 0x38]
push eax
push 0xa0
push 0xb
push 1
push ebp
push edx
push 0x44e
push esi
call fcn.00441c80
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x3ec]
add esp, 0x48
push 0xf
lea eax, [esp + 0x28]
push eax
push 0xbb
push 0xb
push 1
push ebp
push edx
push 0x450
push esi
call fcn.00441c80
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x34]
add esp, 0x24
cmp ecx, eax
jle 0x4716d4
mov eax, ecx
mov dword [esp + 0x10], eax
push 0x14
push 0x4b
push 0x9d
add eax, 0x11
push eax
mov eax, dword [0x4aa628]
add eax, 0x3ff
cdq
push 1
push 1
and edx, 0x3ff
add eax, edx
push ebp
sar eax, 0xa
push eax
push 0x446
push esi
call fcn.00446350
mov eax, dword [esp + 0x38]
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x1c8]
push 0xf
push ebp
push 0xa0
add eax, 0x63
push eax
push 1
push ebp
push edx
push 0x44f
push esi
call fcn.00441c80
mov eax, dword [esp + 0x5c]
add esp, 0x4c
push 0x14
push 0x4b
push 0xb8
add eax, 0x11
push eax
mov eax, dword [0x4aa624]
add eax, 0x3ff
cdq
push 1
push 1
and edx, 0x3ff
add eax, edx
push ebp
sar eax, 0xa
push eax
push 0x447
push esi
call fcn.00446350
mov ecx, dword [esp + 0x38]
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x1c8]
push 0xf
push ebp
push 0xbb
add ecx, 0x63
push ecx
push 1
push ebp
push eax
push 0x451
push esi
call fcn.00441c80
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x578]
movsx eax, byte [0x4aa52c]
add esp, 0x4c
push ebp
push 0xf
push 0x152
push 0xd3
push 0xb
push edx
push eax
push ebp
push 1
push 0x437
push esi
call fcn.00441de0
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x480]
movsx eax, byte [0x4aa548]
push ebp
push 0xf
push 0x152
push 0xe9
push 0xb
push edx
push eax
push ebp
push 1
push 0x436
push esi
call fcn.00441de0
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x45c]
mov eax, dword [edi + 8]
add esp, 0x58
push 0x49f84c
push edx
push 0x43f
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d4]
mov edx, dword [eax + 0x474]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x434
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d4]
mov edx, dword [eax + 0x57c]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x437
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2d8]
mov edx, dword [eax + 0x484]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x436
push esi
push eax
call fcn.00443460
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x488]
mov eax, dword [edi + 8]
add esp, 0x50
push ebp
push edx
push 0x443
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2dc]
mov edx, dword [eax + 0x47c]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x441
push esi
push eax
call fcn.00443460
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x48c]
push str.4096
push edx
push 0x446
mov eax, dword [edi + 8]
push esi
push eax
call fcn.00443460
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x490]
mov eax, dword [edi + 8]
push 0x49f850
push edx
push 0x447
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2dc]
mov edx, dword [eax + 0x464]
mov eax, dword [edi + 8]
add esp, 0x50
push ecx
push edx
push 0x452
push esi
push eax
call fcn.00443460
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x2dc]
mov edx, dword [eax + 0x46c]
mov eax, dword [edi + 8]
push ecx
push edx
push 0x453
push esi
push eax
call fcn.00443460
add esp, 0x28
push esi
mov ecx, edi
call fcn.00468240
lea ecx, [esp + 0x1c]
mov dword [esp + 0x344], 0xffffffff
call fcn.00476730
mov byte [edi + 0x15e], 1
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx*4 + 0x4a6de0]
mov eax, dword [edi]
push 5
push edx
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
xor eax, eax
mov dword [esp + 0x1c], eax
jmp 0x4719a0
cmp eax, dword [esp + 0x28]
je 0x471ad0
call dword [sym.imp.USER32.dll_GetFocus]
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx*4 + 0x4a6de0]
mov esi, eax
mov eax, dword [edi]
push edx
push eax
call ebx
push esi
mov esi, dword [sym.imp.USER32.dll_GetParent]
mov dword [esp + 0x18], eax
call esi
cmp eax, ebp
je 0x471aa2
cmp eax, dword [esp + 0x14]
je 0x4719f1
mov edi, edi
push eax
call esi
cmp eax, ebp
je 0x471aa2
cmp eax, dword [esp + 0x14]
jne 0x4719e0
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx*4 + 0x4a6de0]
mov eax, dword [edi]
push edx
push eax
call ebx
cmp eax, ebp
je 0x471aa2
push 5
push eax
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, eax
cmp esi, ebp
je 0x471aa2
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, 0x10000
jne 0x471a4f
lea ecx, [ecx]
push 2
push esi
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, eax
cmp esi, ebp
je 0x471aa2
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, 0x10000
je 0x471a30
push esi
call dword [sym.imp.USER32.dll_SetFocus]
push 0x100
lea ecx, [esp + 0x140]
push ecx
push esi
call dword [sym.imp.USER32.dll_GetClassNameW]
lea edx, [esp + 0x13c]
push 0x49bfd8
push edx
call fcn.00467210
add esp, 8
test eax, eax
jne 0x471aa2
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xb1
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push 0xffffffffffffffff
push ebp
push 0xb1
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax*4 + 0x4a6de0]
mov edx, dword [edi]
push ecx
push edx
call ebx
test eax, eax
je 0x471ad0
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax*4 + 0x4a6de0]
mov edx, dword [edi]
push ebp
push ecx
push edx
call ebx
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [esp + 0x1c]
add eax, 1
cmp eax, 0xa
mov dword [esp + 0x1c], eax
jl 0x4719a0
pop esi
mov ecx, dword [esp + 0x338]
pop edi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x338
ret