Function at 0x463e80
Capabilities:
Get graphical window text

Disassembly:
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 4]
sub esp, 0x60
push ebx
push ebp
mov ebp, dword [esp + 0x70]
push esi
push edi
mov edi, edx
cmp al, 0xa
je 0x463ea5
cmp al, 2
je 0x463ea5
add ecx, 0x10
mov dword [esp + 0x1c], ecx
jmp 0x463eac
lea eax, [ebp + 0x5c]
mov dword [esp + 0x1c], eax
cmp word [edi], 0
mov byte [esp + 0x13], 0
je 0x465ac1
movzx eax, word [edi]
cmp eax, 0x2d
jne 0x463eca
mov byte [esp + 0x78], 0
jmp 0x463ed4
mov byte [esp + 0x78], 1
cmp eax, 0x2b
jne 0x463ed7
add edi, 2
cmp word [edi], 0
je 0x465ac1
mov ebx, 0x4a682c
mov eax, edi
call fcn.00409ab0
mov dword [esp + 0x14], eax
test eax, eax
jne 0x463f18
mov eax, edi
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x463f00
sub eax, edx
sar eax, 1
lea ecx, [edi + eax*2]
mov dword [esp + 0x14], ecx
mov eax, ecx
cmp eax, edi
je 0x465aa3
movzx edx, word [eax]
xor ecx, ecx
push 0x4bfa4c
push edi
mov dword [esp + 0x20], edx
mov word [eax], cx
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x463f4a
mov byte [ebp + 0x192], 1
jmp case.0x46528e.7
push 0x4bfa5c
push edi
call fcn.0048fff9
mov esi, dword [esp + 0x84]
add esp, 8
test eax, eax
jne 0x463f7c
cmp byte [esi + 4], 0xc
je 0x463f7c
cmp byte [esp + 0x78], al
je 0x46488f
or byte [esi + 5], 2
jmp case.0x46528e.7
push 7
push 0x4ae514
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x46400a
add edi, 0xe
push 0x4bfa70
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x463fb9
movzx edx, byte [esp + 0x78]
neg edx
sbb edx, edx
and edx, 2
mov dword [ebp + 0x6c], edx
jmp case.0x46528e.7
cmp byte [esi + 4], 0xa
jne 0x463fd8
cmp byte [esp + 0x78], 0
je 0x463fcf
or dword [ebp + 0x10], 4
jmp case.0x46528e.7
and dword [ebp + 0x10], 0xfffffffb
jmp case.0x46528e.7
cmp word [edi], 0
je 0x463ffd
mov esi, edi
call fcn.0040efb0
mov dword [ebp + 0x6c], eax
cmp eax, 0xffffffff
jne case.0x46528e.7
mov dword [ebp + 0x6c], 2
jmp case.0x46528e.7
movzx eax, byte [esp + 0x78]
mov dword [ebp + 0x6c], eax
jmp case.0x46528e.7
push 6
push 0x4ae458
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x4640c3
cmp byte [esp + 0x78], al
je case.0x46528e.7
movzx eax, byte [esi + 4]
add edi, 0xc
sub eax, 0xd
je 0x46407f
dec eax
je 0x46405a
mov esi, edi
call fcn.0040efb0
mov dword [ebp + 0x34], eax
cmp eax, 1
jge case.0x46528e.7
mov dword [ebp + 0x34], 0
jmp case.0x46528e.7
lea eax, [ebp + 0x140]
mov ecx, edi
call fcn.00476190
mov dword [ebp + 0x180], eax
cmp eax, 3
jne case.0x46528e.7
or dword [ebp], 2
jmp case.0x46528e.7
push 0x4bfa7c
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x46409d
mov dword [ebp + 0x34], 2
jmp case.0x46528e.7
push 1
lea esi, [ebp + 0x140]
mov eax, edi
call fcn.00476220
add esp, 4
test eax, eax
je case.0x46528e.7
mov dword [ebp + 0x34], 1
jmp case.0x46528e.7
push 0x4bf928
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x4640f3
cmp byte [esp + 0x78], al
je 0x4640e7
or dword [ebp], 0x800000
jmp case.0x46528e.7
or dword [ebp + 4], 0x800000
jmp case.0x46528e.7
push 0x4bfa88
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464123
cmp byte [esp + 0x78], al
je 0x464117
or dword [ebp], 0x200000
jmp case.0x46528e.7
or dword [ebp + 4], 0x200000
jmp case.0x46528e.7
push 7
push 0x4bfa98
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x46418f
cmp byte [esi + 4], 0xb
jne 0x464153
cmp byte [esp + 0x78], al
je 0x4645ee
or dword [ebp + 4], 0x8000
jmp case.0x46528e.7
cmp byte [esp + 0x78], 0
je 0x464183
or dword [ebp], 0x100000
cmp word [edi + 0xe], 0
je 0x464178
lea esi, [edi + 0xe]
call fcn.0040efb0
mov dword [ebp + 0x68], eax
jmp case.0x46528e.7
or eax, 0xffffffff
mov dword [ebp + 0x68], eax
jmp case.0x46528e.7
or dword [ebp + 4], 0x100000
jmp case.0x46528e.7
push 0x4bfaa8
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x4641b3
cmp byte [esp + 0x78], al
je 0x4641cb
or dword [ebp], 0x10000
jmp case.0x46528e.7
push 0x4bfab8
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x4641d7
cmp byte [esp + 0x78], al
je 0x4641a7
or dword [ebp + 4], 0x10000
jmp case.0x46528e.7
push 0x4bfac4
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464200
cmp byte [esp + 0x78], 0
je 0x464490
or dword [ebp], 0x20000
jmp case.0x46528e.7
push 0x4acd18
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464229
xor ecx, ecx
cmp byte [esp + 0x78], cl
sete cl
add ecx, 3
mov dword [ebp + 0x188], ecx
jmp case.0x46528e.7
push 8
push 0x4bf95c
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x46429f
cmp word [edi + 0x10], ax
je 0x464258
lea esi, [edi + 0x10]
call fcn.0040efb0
test eax, eax
jne 0x464258
cmp byte [esp + 0x78], al
sete bl
jmp 0x46425c
mov bl, byte [esp + 0x78]
mov esi, dword [esp + 0x7c]
mov eax, dword [esi]
test eax, eax
je 0x464282
xor edx, edx
test bl, bl
sete dl
push edx
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
test bl, bl
je 0x464296
or byte [esi + 5], 0x10
jmp case.0x46528e.7
test bl, bl
je 0x46428f
or dword [ebp], 0x8000000
jmp 0x464275
or dword [ebp + 4], 0x8000000
and byte [esi + 5], 0xef
jmp case.0x46528e.7
push 6
push 0x4bfad0
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x464319
cmp word [edi + 0xc], ax
je 0x4642ce
lea esi, [edi + 0xc]
call fcn.0040efb0
test eax, eax
jne 0x4642ce
cmp byte [esp + 0x78], al
sete bl
jmp 0x4642d2
mov bl, byte [esp + 0x78]
mov esi, dword [esp + 0x7c]
mov eax, dword [esi]
test eax, eax
je 0x4642fc
xor ecx, ecx
test bl, bl
setne cl
dec ecx
and ecx, 4
push ecx
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
test bl, bl
je 0x464310
or byte [esi + 5], 8
jmp case.0x46528e.7
test bl, bl
je 0x464309
or dword [ebp + 4], 0x10000000
jmp 0x4642ef
or dword [ebp], 0x10000000
and byte [esi + 5], 0xf7
jmp case.0x46528e.7
push 0x4bfae0
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x46439e
movzx eax, byte [esi + 4]
dec eax
cmp eax, 0x12
ja case.0x46528e.7
movzx edx, byte [eax + 0x466114]
jmp dword [edx*4 + 0x4660fc]
cmp byte [esp + 0x78], 0
je 0x464357
or dword [ebp + 4], 0x1f
jmp case.0x46528e.7
mov eax, dword [ebp]
and eax, 0xffffffec
or eax, 0xc
mov dword [ebp], eax
jmp case.0x46528e.7
cmp byte [esp + 0x78], 0
je 0x46437b
or dword [ebp + 4], 0x100080
jmp case.0x46528e.7
or dword [ebp], 0x80
jmp case.0x46528e.7
cmp byte [esp + 0x78], 0
je 0x4647a3
or dword [ebp], 0x200
jmp case.0x46528e.7
mov ebx, 0xa
push ebx
push 0x4bfaec
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x464459
movzx eax, byte [esi + 4]
add eax, 0xfffffff6
add edi, 0x14
cmp eax, 0xf
ja case.0x4643d0.12
movzx ecx, byte [eax + 0x466130]
jmp dword [ecx*4 + 0x466128]
cmp byte [esp + 0x78], 0
je 0x46440d
mov esi, edi
call fcn.00477910
mov dword [ebp + 0x60], eax
cmp eax, 0xffffffff
jne case.0x46528e.7
push 0x10
push 0
push edi
call fcn.0049179f
add esp, 0xc
mov ecx, eax
call fcn.00432030
mov dword [ebp + 0x60], eax
jmp case.0x46528e.7
mov dword [ebp + 0x60], 0xff000000
jmp case.0x46528e.7
cmp byte [esp + 0x78], 0
je 0x464448
and byte [esi + 5], 0xdf
push 0x4acc9c
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x46443f
or byte [esi + 5], 0x40
jmp case.0x46528e.7
and byte [esi + 5], 0xbf
jmp case.0x46528e.7
mov dl, byte [esi + 5]
and dl, 0xbf
or dl, 0x20
mov byte [esi + 5], dl
jmp case.0x46528e.7
push 0x4bfac4
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
je 0x4641e9
push 0x4bfa14
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x46449c
mov al, byte [esp + 0x78]
mov byte [ebp + 0x193], al
jmp case.0x46528e.7
or dword [ebp + 4], 0x20000
jmp case.0x46528e.7
push 4
push 0x4acb88
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x4644c9
push 3
push eax
add edi, 8
push edi
mov ecx, 0x4cb508
call fcn.00423950
mov dword [ebp + 0x1c], eax
jmp case.0x46528e.7
push 4
push 0x4acb5c
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x46451f
add edi, 8
cmp byte [esi + 4], bl
jne 0x464505
push 0x4bfb04
push edi
call fcn.0048fff9
add esp, 8
neg eax
sbb eax, eax
and eax, 0xfffffffe
add eax, 2
mov dword [ebp + 0x14], eax
jmp case.0x46528e.7
cmp byte [esp + 0x78], 0
je case.0x46528e.7
mov esi, edi
call fcn.0040efb0
mov dword [ebp + 0x70], eax
jmp case.0x46528e.7
push 0x4bfb10
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x46453d
mov dword [ebp + 0x14], 1
jmp case.0x46528e.7
push 0x4acbd0
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x46455b
mov dword [ebp + 0x14], 3
jmp case.0x46528e.7
push 0x4bfb20
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464585
cmp byte [0x4cc1ca], al
je case.0x46528e.7
mov dword [ebp + 0x14], 4
jmp case.0x46528e.7
cmp byte [esi + 4], bl
jne 0x464638
push 0x4ae284
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x4645b6
cmp byte [esp + 0x78], al
je 0x464937
or dword [ebp + 4], 0x4000
jmp case.0x46528e.7
cmp byte [esi + 4], bl
jne 0x464638
push 6
push 0x4ae268
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x464609
push 0x4ae284
add edi, 0xc
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x4645fa
cmp byte [esp + 0x78], al
je 0x464147
or dword [ebp], 0x8000
jmp case.0x46528e.7
mov cl, byte [esp + 0x78]
mov byte [ebp + 0x194], cl
jmp case.0x46528e.7
cmp byte [esi + 4], bl
jne 0x464638
push 0x4bfb2c
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464638
cmp byte [esp + 0x78], al
je 0x46462f
or dword [ebp + 0x10], 1
jmp case.0x46528e.7
and dword [ebp + 0x10], 0xfffffffe
jmp case.0x46528e.7
push 5
push 0x4a8268
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x46465c
lea esi, [edi + 0xa]
call fcn.0040efb0
mov dword [ebp + 0x64], eax
jmp case.0x46528e.7
push 2
push 0x4bfb38
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x4646a8
push eax
push eax
push eax
push eax
lea eax, [edi + 4]
call fcn.004765a0
add esp, 0x10
test eax, eax
je case.0x46528e.7
lea esi, [edi + 4]
call fcn.00415040
cmp byte [esp + 0x78], 0
je 0x46469e
or dword [ebp + 0x10], eax
jmp case.0x46528e.7
not eax
and dword [ebp + 0x10], eax
jmp case.0x46528e.7
push 9
push 0x4bfb40
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x4646d6
cmp byte [esp + 0x78], al
je case.0x46528e.7
lea esi, [edi + 0x12]
call fcn.00415040
mov dword [ebp + 0x18], eax
jmp case.0x46528e.7
cmp byte [esi + 4], 4
jne 0x464702
push 0x4a8068
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464702
cmp byte [esp + 0x78], 0
je case.0x465077.11
or dword [ebp], 1
jmp case.0x46528e.7
cmp byte [esi + 4], 5
jne 0x46472d
push 0x4bfb54
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x46472d
cmp byte [esp + 0x78], al
je 0x464c45
or dword [ebp], 6
jmp case.0x46528e.7
push 0x4ada38
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x4647c3
movzx eax, byte [esi + 4]
add eax, 0xfffffff7
cmp eax, 3
ja case.0x46528e.7
jmp dword [eax*4 + 0x466140]
mov esi, dword [esi]
test esi, esi
je case.0x4647e5.9
movzx edx, byte [esp + 0x78]
push 0
push edx
push 0xcf
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x46528e.7
cmp byte [esp + 0x78], 0
je 0x46478c
or dword [ebp], 0x800
jmp case.0x46528e.7
or dword [ebp + 4], 0x800
jmp case.0x46528e.7
cmp byte [esp + 0x78], 0
je 0x464392
or dword [ebp + 4], 0x200
jmp case.0x46528e.7
cmp byte [esp + 0x78], 0
je 0x464967
or dword [ebp + 4], 8
jmp case.0x46528e.7
push 0x4bfb64
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x46480c
movzx eax, byte [esi + 4]
add eax, 0xfffffff7
cmp eax, 5
ja case.0x46528e.7
jmp dword [eax*4 + 0x466150]
cmp byte [esp + 0x78], 0
je 0x464803
or dword [ebp], 4
jmp case.0x46528e.7
cmp byte [esp + 0x78], 0
je 0x4647f3
or dword [ebp + 4], 4
jmp case.0x46528e.7
cmp byte [esi + 4], 0xc
jne 0x464898
push 0x4bfb70
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464846
cmp byte [esp + 0x78], al
je 0x46483a
or dword [ebp], 0x1000
jmp case.0x46528e.7
or dword [ebp + 4], 0x1000
jmp case.0x46528e.7
cmp byte [esi + 4], 0xc
jne 0x464898
push 0x4bfb88
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x46486d
cmp byte [esp + 0x78], al
je 0x4648bb
or byte [esi + 5], 0x80
jmp case.0x46528e.7
cmp byte [esi + 4], 0xc
jne 0x464898
push 0x4bfb98
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464898
cmp byte [esp + 0x78], al
je 0x463f73
and byte [esi + 5], 0xfd
jmp case.0x46528e.7
mov al, byte [esi + 4]
cmp al, bl
je 0x4648a3
cmp al, 0xb
jne 0x4648c4
push 0x4bfbac
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x4648c4
cmp byte [esp + 0x78], al
je 0x464864
and byte [esi + 5], 0x7f
jmp case.0x46528e.7
cmp byte [esi + 4], 0xc
jne 0x4648f3
push 0x4a8424
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x4648f3
cmp byte [esp + 0x78], 0
je 0x464985
or dword [ebp], 0x2000
jmp case.0x46528e.7
push 0x4bfbbc
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464943
mov al, byte [esi + 4]
cmp al, 0xc
jne 0x464920
cmp byte [esp + 0x78], 0
je 0x464b80
or dword [ebp], 0x10
jmp case.0x46528e.7
cmp al, 8
je case.0x464753.9
cmp al, 7
jne case.0x46528e.7
cmp byte [esp + 0x78], 0
je 0x4645aa
or dword [ebp], 0x4000
jmp case.0x46528e.7
push 0x4bfbd0
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464991
mov al, byte [esi + 4]
cmp al, 0xc
jne 0x464970
cmp byte [esp + 0x78], 0
je case.0x465077.16
or dword [ebp], 8
jmp case.0x46528e.7
cmp al, 8
je case.0x464340.3
cmp al, 7
jne case.0x46528e.7
jmp case.0x464340.3
or dword [ebp + 4], 0x2000
jmp case.0x46528e.7
cmp byte [esi + 4], 0xc
jne 0x464a0f
push 8
push 0x4bfbe4
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x464a0f
cmp byte [esp + 0x78], 0
mov ax, word [edi + 0x10]
mov word [ebp + 0x18c], ax
je 0x4649eb
or dword [ebp], 0x20
mov esi, dword [esi]
test esi, esi
je 0x464a05
movzx eax, ax
push 0
test ax, ax
jne 0x4649e8
movzx ecx, byte [0x4cc1ca]
neg ecx
sbb ecx, ecx
and ecx, 0x25a5
add ecx, 0x2a
push ecx
jmp 0x4649f9
push eax
jmp 0x4649f9
or dword [ebp + 4], 0x20
mov esi, dword [esi]
test esi, esi
je 0x464a05
push 0
push 0
push 0xcc
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
mov byte [esp + 0x13], 1
jmp case.0x46528e.7
push 5
push 0x4bfbf8
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x464a56
cmp byte [esp + 0x78], al
je 0x464a4a
add edi, ebx
cmp word [edi], ax
je 0x464a3f
mov esi, edi
call fcn.0040efb0
mov dword [ebp + 0x64], eax
jmp case.0x46528e.7
or eax, 0xffffffff
mov dword [ebp + 0x64], eax
jmp case.0x46528e.7
mov dword [ebp + 0x64], SysStringLen
jmp case.0x46528e.7
cmp byte [esi + 4], 8
jne 0x464a81
push 0x4bfc04
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464a81
cmp byte [esp + 0x78], al
je case.0x465077.11
or dword [ebp], 1
jmp case.0x46528e.7
push 4
push 0x4a5564
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x464af3
movzx eax, byte [esi + 4]
add eax, 0xfffffff9
cmp eax, 3
ja case.0x46528e.7
jmp dword [eax*4 + 0x466168]
cmp byte [esp + 0x78], 0
je case.0x465179.11
or dword [ebp], 2
jmp case.0x46528e.7
cmp byte [esp + 0x78], 0
je 0x464aea
push 0x4ae24c
add edi, 8
push edi
call fcn.0048fff9
add esp, 8
neg eax
sbb eax, eax
and eax, 0xfffffff0
add eax, 0x20
or dword [ebp], eax
jmp case.0x46528e.7
or dword [ebp + 4], 0x30
jmp case.0x46528e.7
cmp byte [esi + 4], 0x10
jne 0x464b26
push 0x4bfc14
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464b26
cmp byte [esp + 0x78], al
je 0x464cb4
mov eax, dword [ebp]
and eax, 0xffffffef
or eax, 0x40
mov dword [ebp], eax
jmp case.0x46528e.7
mov bl, 0x11
cmp byte [esi + 4], bl
jne 0x464be4
push 0x4bfc20
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464b56
cmp byte [esp + 0x78], al
je 0x4648bb
or byte [esi + 5], 0x80
jmp case.0x46528e.7
cmp byte [esi + 4], bl
jne 0x464be4
push 0x4bfc30
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464b89
cmp byte [esp + 0x78], al
je 0x464b80
or dword [ebp], 0x10
jmp case.0x46528e.7
or dword [ebp + 4], 0x10
jmp case.0x46528e.7
cmp byte [esi + 4], bl
jne 0x464be4
push 0xc
push 0x4bfc40
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x464be4
cmp byte [esp + 0x78], 0
mov eax, 1
mov byte [ebp + 0x190], al
je 0x464bd5
or dword [ebp], eax
cmp word [edi + 0x18], 0
lea esi, [edi + 0x18]
setne cl
mov byte [ebp + 0x191], cl
call fcn.0040efb0
mov dword [ebp + 0x40], eax
jmp case.0x46528e.7
or dword [ebp + 4], eax
mov dword [ebp + 0x40], 0xffffffff
jmp case.0x46528e.7
push 4
push 0x4a8088
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x464c4e
mov al, byte [esi + 4]
cmp al, bl
jne 0x464c1a
cmp byte [esp + 0x78], 0
je case.0x46528e.7
lea esi, [edi + 8]
call fcn.0040efb0
mov dword [ebp + 0x44], eax
jmp case.0x46528e.7
cmp al, 0xb
jne case.0x46528e.7
mov ax, word [edi + 8]
call fcn.00409a80
cmp ax, 0x53
jne case.0x46528e.7
cmp byte [esp + 0x78], 0
je 0x464c45
or dword [ebp], 6
jmp case.0x46528e.7
or dword [ebp + 4], 6
jmp case.0x46528e.7
cmp byte [esi + 4], bl
jne 0x464cbd
push 4
push 0x4bfc5c
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x464c81
cmp byte [esp + 0x78], al
je case.0x46528e.7
lea esi, [edi + 8]
call fcn.0040efb0
mov dword [ebp + 0x48], eax
jmp case.0x46528e.7
cmp byte [esi + 4], bl
jne 0x464cbd
push 5
push 0x4bfc68
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x464cbd
cmp byte [esp + 0x78], al
je 0x464cb4
or dword [ebp], 0x40
lea esi, [edi + 0xa]
call fcn.0040efb0
mov dword [ebp + 0x4c], eax
jmp case.0x46528e.7
or dword [ebp + 4], 0x40
jmp case.0x46528e.7
push 7
push 0x4a59e0
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x464d5d
cmp byte [esi + 4], bl
jne case.0x46528e.7
cmp byte [esp + 0x78], al
je 0x4652bd
mov dword [ebp + 0x50], 0xffffffff
mov ax, word [edi + 0xe]
call fcn.00409a80
movzx eax, ax
add eax, 0xffffffbe
cmp eax, 0x12
ja case.0x464d0a.67
movzx edx, byte [eax + 0x46618c]
jmp dword [edx*4 + 0x466178]
mov dword [ebp + 0x50], 0
jmp case.0x464d0a.67
mov dword [ebp + 0x50], 1
jmp case.0x464d0a.67
mov dword [ebp + 0x50], 2
jmp case.0x464d0a.67
mov dword [ebp + 0x50], 3
mov eax, dword [ebp + 0x50]
test eax, eax
jns 0x464d4d
or dword [ebp], 0x100
mov dword [ebp + 0x50], 0
jmp case.0x46528e.7
inc eax
or dword [ebp], 0x100
mov dword [ebp + 0x50], eax
jmp case.0x46528e.7
cmp byte [esi + 4], bl
jne 0x464e05
push 5
push 0x4bfc74
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x464e05
cmp byte [esp + 0x78], al
je case.0x46528e.7
movzx ebx, word [edi + 0xa]
test bx, bx
je case.0x46528e.7
push eax
push 1
push eax
push eax
add edi, 0xc
push edi
mov ecx, 0x4cb508
call fcn.004239b0
test eax, eax
je case.0x46528e.7
cmp byte [eax + 0x17], 0
jne 0x464db9
mov eax, dword [eax + 0xc]
test byte [eax + 0x16], 2
jne case.0x46528e.7
mov edi, dword [esp + 0x74]
mov ecx, dword [edi + 0x10]
lea edx, [ecx - 1]
cmp edx, ecx
jae case.0x46528e.7
lea esi, [edx + edx*4]
add esi, esi
add esi, esi
lea esp, [esp]
mov ecx, dword [edi + 0x18]
add ecx, esi
cmp dword [ecx + 8], eax
jne 0x464df7
cmp ebx, 0x31
jne 0x464df4
mov dword [ebp + 0x54], ecx
jmp 0x464df7
mov dword [ebp + 0x58], ecx
dec edx
sub esi, 0x14
cmp edx, dword [edi + 0x10]
jb 0x464de0
jmp case.0x46528e.7
push 0x4bfc80
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464e4e
mov al, byte [esi + 4]
cmp al, bl
jne 0x464e32
cmp byte [esp + 0x78], 0
je case.0x465179.11
or dword [ebp], 2
jmp case.0x46528e.7
cmp al, 0x12
jne case.0x46528e.7
cmp byte [esp + 0x78], 0
je 0x464803
or dword [ebp], 4
jmp case.0x46528e.7
push 5
push 0x4bfc94
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x464f07
cmp byte [esp + 0x78], al
je case.0x46528e.7
cmp word [edi + 0xa], ax
je case.0x46528e.7
mov al, byte [esi + 4]
cmp al, 0xd
je 0x464ebd
cmp al, 0xe
je 0x464ebd
lea esi, [edi + 0xa]
mov byte [ebp + 0x18e], 1
call fcn.0040efb0
push 0x2d
add edi, 0xc
push edi
mov dword [ebp + 0x38], eax
call fcn.00490e21
add esp, 8
test eax, eax
je case.0x46528e.7
lea esi, [eax + 2]
call fcn.0040efb0
mov dword [ebp + 0x3c], eax
jmp case.0x46528e.7
lea ebx, [ebp + 0x160]
mov eax, ebx
lea ecx, [edi + 0xa]
call fcn.00476190
mov dword [ebp + 0x184], eax
test eax, eax
je case.0x46528e.7
mov ecx, dword [esi]
test ecx, ecx
je case.0x46528e.7
xor edx, edx
cmp byte [esi + 4], 0xd
push ebx
setne dl
push eax
dec edx
and edx, 0xfffffff2
add edx, 0x1012
push edx
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x46528e.7
cmp byte [esi + 4], 0x12
jne 0x464f32
push 0x4bfca0
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464f32
cmp byte [esp + 0x78], al
je case.0x465077.11
or dword [ebp], 1
jmp case.0x46528e.7
push 0x4bfcb0
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464f7e
mov al, byte [esi + 4]
cmp al, 0x13
jne 0x464f62
cmp byte [esp + 0x78], 0
je 0x4652bd
or dword [ebp], 0x100
jmp case.0x46528e.7
cmp al, 0xb
jne case.0x46528e.7
cmp byte [esp + 0x78], 0
je case.0x465077.11
or dword [ebp], 1
jmp case.0x46528e.7
cmp byte [esi + 4], 0x13
jne 0x464fb0
push 0x4acd00
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x464fb0
cmp byte [esp + 0x78], al
je case.0x465179.11
or dword [ebp], 2
or dword [ebp + 4], 0x80
jmp case.0x46528e.7
cmp byte [esi + 4], 0x18
jne 0x464ffb
push 5
push 0x4a86d4
push edi
call fcn.004901fd
add esp, 0xc
test eax, eax
jne 0x464ffb
mov ecx, dword [0x4ca55c]
lea eax, [esp + 0x40]
push eax
add edi, 0xa
push edi
push ecx
call dword [sym.imp.USER32.dll_GetClassInfoExW]
mov word [ebp + 0x198], ax
test ax, ax
jne case.0x46528e.7
push edi
push 0x4bfcc0
jmp 0x465b67
push 0x4ae234
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x4650c9
movzx eax, byte [esi + 4]
dec eax
cmp byte [esp + 0x78], 0
je 0x465067
cmp eax, 0x10
ja case.0x46528e.7
movzx edx, byte [eax + 0x4661b4]
jmp dword [edx*4 + 0x4661a0]
or dword [ebp], 8
or dword [ebp + 4], 4
jmp case.0x46528e.7
or dword [ebp], 1
or dword [ebp + 4], 0x1e
jmp case.0x46528e.7
or dword [ebp], 0x300
jmp case.0x46528e.7
or dword [ebp], 1
or dword [ebp + 4], 2
jmp case.0x46528e.7
cmp eax, 0x10
ja case.0x46528e.7
movzx eax, byte [eax + 0x4661dc]
jmp dword [eax*4 + 0x4661c8]
mov esi, dword [esi]
test esi, esi
je 0x4650a5
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
jne case.0x46528e.7
or dword [ebp + 4], eax
jmp case.0x46528e.7
mov eax, dword [ebp]
mov ecx, eax
and ecx, 0x300
cmp ecx, 0x300
jne case.0x46528e.7
and eax, 0xfffffcff
mov dword [ebp], eax
jmp case.0x46528e.7
push 0x4a3eb8
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x4651f1
movzx eax, byte [esi + 4]
dec eax
cmp byte [esp + 0x78], 0
je 0x465169
cmp eax, 0x16
ja case.0x46528e.7
movzx edx, byte [eax + 0x466210]
jmp dword [edx*4 + 0x4661f0]
or dword [ebp + 4], 8
or dword [ebp], 4
jmp case.0x46528e.7
or dword [ebp], 2
or dword [ebp + 4], 0x1d
jmp case.0x46528e.7
or dword [ebp], 0x200
or dword [ebp + 4], 0x100
mov al, byte [esi + 4]
mov ecx, dword [ebp]
cmp al, 5
je 0x46513c
cmp al, 6
jne case.0x46528e.7
or ecx, 0x20
mov dword [ebp], ecx
jmp case.0x46528e.7
or dword [ebp], 2
or dword [ebp + 4], 1
jmp case.0x46528e.7
or dword [ebp], 0x282
jmp case.0x46528e.7
or dword [ebp], 0x20
jmp case.0x46528e.7
cmp eax, 0x12
ja case.0x46528e.7
movzx eax, byte [eax + 0x466244]
jmp dword [eax*4 + 0x466228]
or dword [ebp + 4], 0x20
jmp case.0x46528e.7
or dword [ebp], 4
or dword [ebp + 4], 8
jmp case.0x46528e.7
mov esi, dword [esi]
test esi, esi
je 0x4651c1
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
je case.0x46528e.7
or dword [ebp + 4], 0x200
jmp case.0x46528e.7
mov eax, dword [ebp]
mov ecx, eax
and ecx, 0x300
cmp ecx, 0x300
je case.0x46528e.7
and eax, 0xfffffdff
mov dword [ebp], eax
jmp case.0x46528e.7
or dword [ebp + 4], 0x82
jmp case.0x46528e.7
push 0x4a3ec4
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x4652ed
cmp byte [esp + 0x78], 0
movzx eax, byte [esi + 4]
je 0x46527b
dec eax
cmp eax, 0x12
ja case.0x46528e.7
movzx edx, byte [eax + 0x466278]
jmp dword [edx*4 + 0x466258]
or dword [ebp + 4], 4
or dword [ebp], 8
jmp case.0x46528e.7
or dword [ebp + 4], 0x200
or dword [ebp], 0x100
mov al, byte [esi + 4]
mov ecx, dword [ebp + 4]
cmp al, 5
je 0x465257
cmp al, 6
jne case.0x46528e.7
or ecx, 0x20
mov dword [ebp + 4], ecx
jmp case.0x46528e.7
or dword [ebp + 4], 3
jmp case.0x46528e.7
or dword [ebp], 0x280
or dword [ebp + 4], 2
jmp case.0x46528e.7
add eax, 0xfffffffd
cmp eax, 0x10
ja case.0x46528e.7
movzx eax, byte [eax + 0x46629c]
jmp dword [eax*4 + 0x46628c]
or dword [ebp + 4], 0xc
jmp case.0x46528e.7
mov esi, dword [esi]
test esi, esi
je 0x4652c9
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
je case.0x46528e.7
or dword [ebp + 4], 0x100
jmp case.0x46528e.7
mov eax, dword [ebp]
mov ecx, eax
and ecx, 0x300
cmp ecx, 0x300
je case.0x46528e.7
and eax, 0xfffffeff
mov dword [ebp], eax
jmp case.0x46528e.7
push 0
push 0
push 1
push 0
mov eax, edi
call fcn.004765a0
add esp, 0x10
test eax, eax
je 0x465339
mov esi, edi
call fcn.00415040
cmp byte [esp + 0x78], 0
je 0x465325
or dword [ebp], eax
mov dx, word [esp + 0x18]
mov eax, dword [esp + 0x14]
mov word [eax], dx
jmp 0x465a9f
or dword [ebp + 4], eax
mov dx, word [esp + 0x18]
mov eax, dword [esp + 0x14]
mov word [eax], dx
jmp 0x465a9f
mov bl, byte [esp + 0x78]
add edi, 2
cmp word [edi], 0
jne 0x4653e2
test bl, bl
je 0x465368
mov eax, dword [esp + 0x84]
test eax, eax
je 0x465368
cmp byte [eax + 0x17], 0
jne 0x465362
mov eax, dword [eax + 0xc]
test byte [eax + 0x15], 2
jne 0x4653e2
mov ax, word [edi - 2]
call fcn.00409a80
movzx eax, ax
cmp eax, 0x43
je 0x4653ae
cmp eax, 0x47
je 0x465393
cmp eax, 0x56
jne 0x465b5e
mov dword [esi + 8], 0
jmp case.0x46528e.7
mov eax, dword [esi + 0xc]
test eax, eax
je 0x4653a2
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esi + 0xc], 0
jmp case.0x46528e.7
test bl, bl
jne case.0x46528e.7
cmp byte [esi + 4], 2
je case.0x46528e.7
mov eax, dword [esp + 0x1c]
cmp dword [eax], 0xff000000
je case.0x46528e.7
mov dword [eax], 0xff000000
mov byte [ebp + 0x18f], 1
jmp case.0x46528e.7
mov ax, word [edi - 2]
call fcn.00409a80
movzx eax, ax
add eax, 0xffffffbd
cmp eax, 0x16
ja case.0x465401.68
movzx edx, byte [eax + 0x4662d8]
jmp dword [edx*4 + 0x4662b0]
mov al, byte [esi + 4]
cmp al, 3
je 0x465b0e
cmp al, 0x12
je 0x465b0e
mov eax, dword [esp + 0x84]
push 4
mov ebx, 0x4cb508
call fcn.0041c550
mov ebx, eax
test ebx, ebx
jne 0x465454
push 0x4bf2b4
push edi
call fcn.0048fff9
add esp, 8
test eax, eax
jne 0x465b03
mov eax, dword [esp + 0x7c]
or byte [eax + 5], 1
jmp 0x465458
mov eax, dword [esp + 0x7c]
mov al, byte [eax + 4]
cmp al, 1
je 0x465463
cmp al, 2
jne 0x46546a
or dword [ebp], 0x100
mov esi, dword [esp + 0x7c]
add esi, 0xc
mov edi, ebx
call fcn.004012d0
jmp case.0x46528e.7
cmp dword [ebp + 0x13c], 0x32
jae case.0x46528e.7
mov esi, edi
call fcn.00415040
mov ecx, dword [ebp + 0x13c]
mov dword [ebp + ecx*4 + 0x74], eax
inc dword [ebp + 0x13c]
jmp case.0x46528e.7
push 3
push 0
push edi
mov ecx, 0x4cb508
call fcn.00423950
test eax, eax
je 0x465b71
cmp byte [eax + 0x17], 0
jne 0x4654c6
mov eax, dword [eax + 0xc]
mov dl, byte [eax + 0x16]
and dl, 0x22
cmp dl, 2
je 0x465b15
mov ebx, dword [esp + 0x74]
xor edx, edx
cmp dword [ebx + 0x10], edx
jbe 0x4654f7
mov ecx, dword [ebx + 0x18]
add ecx, 8
cmp dword [ecx], eax
je 0x465b20
inc edx
add ecx, 0x14
cmp edx, dword [ebx + 0x10]
jb 0x4654e6
mov dword [esi + 8], eax
jmp case.0x46528e.7
cmp byte [esi + 4], 2
je case.0x46528e.7
mov esi, edi
call fcn.00477910
cmp eax, 0xffffffff
jne 0x465529
push 0x10
push 0
push edi
call fcn.0049179f
add esp, 0xc
mov ecx, eax
call fcn.00432030
mov ecx, dword [esp + 0x1c]
cmp dword [ecx], eax
jne 0x46553c
lea edx, [ebp + 0x5c]
cmp ecx, edx
jne case.0x46528e.7
mov dword [ecx], eax
mov byte [ebp + 0x18f], 1
jmp case.0x46528e.7
mov ax, word [edi]
call fcn.00409a80
cmp ax, 0x50
jne 0x46558d
lea esi, [edi + 2]
call fcn.0040efb0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x46557d
mov ecx, dword [0x4cb4f4]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x88]
add edx, eax
mov dword [ebp + 0x28], edx
jmp case.0x46528e.7
mov esi, edi
call fcn.0040efb0
mov ecx, dword [esp + 0x74]
call fcn.0045d790
mov dword [ebp + 0x28], eax
jmp case.0x46528e.7
mov ax, word [edi]
call fcn.00409a80
cmp ax, 0x50
jne 0x4655e8
lea esi, [edi + 2]
call fcn.0040efb0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x4655d8
mov ecx, dword [0x4cb4f4]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x8c]
add edx, eax
mov dword [ebp + 0x2c], edx
jmp case.0x46528e.7
mov esi, edi
call fcn.0040efb0
mov ecx, dword [esp + 0x74]
call fcn.0045d790
mov dword [ebp + 0x2c], eax
jmp case.0x46528e.7
movzx eax, word [edi]
cmp eax, 0x2b
jne 0x4656d6
mov ax, word [edi + 2]
lea esi, [edi + 2]
call fcn.00409a80
cmp ax, 0x4d
jne 0x465627
mov edi, dword [esp + 0x74]
mov eax, dword [edi + 0x78]
jmp 0x465649
call fcn.0040efb0
mov edi, dword [esp + 0x74]
cmp byte [edi + 0xc0], 0
je 0x465649
mov ecx, dword [0x4cb4f4]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esp + 0x7c]
mov bl, byte [edx + 6]
mov ecx, edi
mov dword [esp + 0x78], eax
call fcn.0046a970
mov esi, eax
test esi, esi
je 0x4656a8
mov eax, dword [esp + 0x7c]
mov al, byte [eax + 7]
call fcn.0046aaf0
test eax, eax
jne 0x4656a8
mov ebx, dword [esp + 0x74]
mov edx, esi
lea edi, [esp + 0x20]
mov ecx, ebx
call fcn.0046ac00
mov ecx, dword [eax]
add ecx, dword [esp + 0x78]
cmp dword [ebp + 0x24], 0x80000000
mov eax, dword [eax + 4]
mov dword [ebp + 0x20], ecx
jne case.0x46528e.7
mov ecx, dword [ebx + 0x7c]
add ecx, eax
mov dword [ebp + 0x24], ecx
jmp case.0x46528e.7
mov edx, dword [edi + 0x88]
add edx, dword [edi + 0x80]
add edx, dword [esp + 0x78]
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], edx
jne case.0x46528e.7
mov eax, dword [edi + 0x84]
mov dword [ebp + 0x24], eax
jmp case.0x46528e.7
call fcn.00409a80
cmp ax, 0x4d
jne 0x46572c
lea esi, [edi + 2]
call fcn.0040efb0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x465706
mov ecx, dword [0x4cb4f4]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x78]
add edx, eax
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], edx
jne case.0x46528e.7
mov eax, dword [esi + 0x94]
add eax, dword [esi + 0x7c]
mov dword [ebp + 0x24], eax
jmp case.0x46528e.7
mov ax, word [edi]
call fcn.00409a80
cmp ax, 0x50
jne 0x465785
lea esi, [edi + 2]
call fcn.0040efb0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x46575f
mov ecx, dword [0x4cb4f4]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x80]
add edx, eax
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], edx
jne case.0x46528e.7
mov eax, dword [esi + 0x84]
mov dword [ebp + 0x24], eax
jmp case.0x46528e.7
mov ax, word [edi]
call fcn.00409a80
cmp ax, 0x53
jne 0x4657e1
lea esi, [edi + 2]
call fcn.0040efb0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x4657b8
mov ecx, dword [0x4cb4f4]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x98]
add edx, eax
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], edx
jne case.0x46528e.7
mov eax, dword [esi + 0xa4]
add eax, dword [esi + 0x7c]
mov dword [ebp + 0x24], eax
jmp case.0x46528e.7
mov esi, edi
call fcn.0040efb0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x465805
mov ecx, dword [0x4cb4f4]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], eax
jne case.0x46528e.7
mov edx, dword [esi + 0x94]
add edx, dword [esi + 0x7c]
mov dword [ebp + 0x24], edx
jmp case.0x46528e.7
movzx eax, word [edi]
cmp eax, 0x2b
jne 0x4658fe
mov ax, word [edi + 2]
lea esi, [edi + 2]
call fcn.00409a80
cmp ax, 0x4d
jne 0x46584d
mov edi, dword [esp + 0x74]
mov eax, dword [edi + 0x7c]
jmp 0x46586f
call fcn.0040efb0
mov edi, dword [esp + 0x74]
cmp byte [edi + 0xc0], 0
je 0x46586f
mov ecx, dword [0x4cb4f4]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esp + 0x7c]
mov bl, byte [edx + 6]
mov ecx, edi
mov dword [esp + 0x78], eax
call fcn.0046a970
mov esi, eax
test esi, esi
je 0x4658d0
mov eax, dword [esp + 0x7c]
mov al, byte [eax + 7]
call fcn.0046aaf0
test eax, eax
jne 0x4658d0
mov ebx, dword [esp + 0x74]
mov edx, esi
lea edi, [esp + 0x28]
mov ecx, ebx
call fcn.0046ac00
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x78]
add edx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], edx
jne case.0x46528e.7
mov eax, dword [ebx + 0x78]
add eax, ecx
mov dword [ebp + 0x20], eax
jmp case.0x46528e.7
mov ecx, dword [edi + 0x8c]
add ecx, dword [edi + 0x84]
add ecx, dword [esp + 0x78]
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], ecx
jne case.0x46528e.7
mov edx, dword [edi + 0x80]
mov dword [ebp + 0x20], edx
jmp case.0x46528e.7
call fcn.00409a80
cmp ax, 0x4d
jne 0x465954
lea esi, [edi + 2]
call fcn.0040efb0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x46592e
mov ecx, dword [0x4cb4f4]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x7c]
add edx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], edx
jne case.0x46528e.7
mov eax, dword [esi + 0x90]
add eax, dword [esi + 0x78]
mov dword [ebp + 0x20], eax
jmp case.0x46528e.7
mov ax, word [edi]
call fcn.00409a80
cmp ax, 0x50
jne 0x4659ad
lea esi, [edi + 2]
call fcn.0040efb0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x465987
mov ecx, dword [0x4cb4f4]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x84]
add edx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], edx
jne case.0x46528e.7
mov eax, dword [esi + 0x80]
mov dword [ebp + 0x20], eax
jmp case.0x46528e.7
mov ax, word [edi]
call fcn.00409a80
cmp ax, 0x53
jne 0x465a09
lea esi, [edi + 2]
call fcn.0040efb0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x4659e0
mov ecx, dword [0x4cb4f4]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x9c]
add edx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], edx
jne case.0x46528e.7
mov eax, dword [esi + 0xa0]
add eax, dword [esi + 0x78]
mov dword [ebp + 0x20], eax
jmp case.0x46528e.7
mov esi, edi
call fcn.0040efb0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x465a2d
mov ecx, dword [0x4cb4f4]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], eax
jne case.0x46528e.7
mov edx, dword [esi + 0x90]
add edx, dword [esi + 0x78]
mov dword [ebp + 0x20], edx
jmp case.0x46528e.7
mov esi, edi
call fcn.00415070
fstp dword [ebp + 0x30]
jmp case.0x46528e.7
mov ax, word [edi - 2]
call fcn.00409a80
cmp ax, 0x45
jne 0x465b5e
push 0
push 0
push 0
push 0
mov eax, edi
call fcn.004765a0
add esp, 0x10
test eax, eax
je 0x465b5e
mov esi, edi
call fcn.00415040
test bl, bl
je 0x465a90
or dword [ebp + 8], eax
jmp case.0x46528e.7
or dword [ebp + 0xc], eax
mov ecx, dword [esp + 0x14]
mov ax, word [esp + 0x18]
mov word [ecx], ax
mov eax, dword [esp + 0x14]
mov edi, eax
movzx eax, word [edi]
cmp eax, 0x20
je 0x465ab2
cmp eax, 9
jne 0x465ab7
add edi, 2
jmp 0x465aa5
cmp word [edi], 0
jne 0x463ebb
mov esi, dword [esp + 0x7c]
mov eax, dword [esi]
test eax, eax
je 0x4660eb
push 0xfffffffffffffff0
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, dword [ebp + 4]
mov ecx, dword [ebp]
mov ebx, eax
mov dword [esp + 0x78], eax
mov eax, edx
not eax
or ebx, ecx
and ebx, eax
movzx eax, byte [esi + 4]
add eax, 0xfffffffe
cmp eax, 8
ja case.0x465afc.9
jmp dword [eax*4 + 0x4662f0]
mov esi, dword [esp + 0x7c]
mov eax, 0x4a65b8
jmp 0x465b25
mov eax, 0x4bfcf8
jmp 0x465b25
add edi, 0xfffffffe
push edi
push 0x4bfd70
jmp 0x465b67
mov eax, 0x4bfdd0
mov dx, word [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov word [ecx], dx
cmp dword [esi], 0
je 0x465b45
call fcn.00409ce0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
add edi, 0xfffffffe
push edi
push eax
mov ecx, 0x4cb508
call fcn.00430950
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
add edi, 0xfffffffe
push edi
push 0x4a6e10
mov ecx, 0x4cb508
call fcn.00430950
mov eax, dword [esp + 0x14]
mov dx, word [esp + 0x18]
mov word [eax], dx
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
mov ecx, ebx
xor ecx, dword [esp + 0x78]
and ecx, 0xf
xor ebx, ecx
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp + 0x64]
test eax, eax
je 0x465d76
mov cl, byte [esi + 4]
cmp cl, 0xc
jne 0x465d52
push 0
test eax, eax
jns 0x465d47
mov eax, dword [esi]
push 0
push 0xc5
push eax
call edi
cmp dword [ebp + 0x64], 0x80000000
je 0x465d76
test bl, 4
jne 0x465d76
and ebx, 0xffefff7f
jmp 0x465d76
and ebx, 0xfffffff7
or ebx, 7
jmp case.0x465afc.9
test bl, 1
je 0x465bfd
and ebx, 0xfffffff1
or ebx, 1
jmp 0x465c00
and ebx, 0xfffffff0
mov edi, dword [esp + 0x74]
mov eax, dword [edi + 0x1c]
cmp dword [esp + 0x80], eax
jne 0x465c41
test dl, 1
je case.0x465afc.9
push 0
mov eax, edi
mov edx, dword [eax + 4]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 1
push 0x401
push edx
mov dword [eax + 0x1c], 0xffffffff
call edi
or dword [esp + 0x78], 1
jmp 0x465b9a
test cl, 1
je case.0x465afc.9
cmp eax, dword [edi + 0x10]
jae 0x465c85
mov ecx, dword [edi + 0x18]
push 1
lea eax, [eax + eax*4]
mov edx, dword [ecx + eax*4]
push 0xfffffffffffffff0
push edx
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, dword [edi + 0x18]
and eax, 0xfffe
push eax
mov eax, dword [edi + 0x1c]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [eax + eax*4]
mov edx, dword [ecx + eax*4]
push 0xf4
push edx
call edi
jmp 0x465c8b
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x80]
mov dword [ecx + 0x1c], eax
push 0
add eax, 3
push eax
mov eax, dword [ecx + 4]
push 0x401
push eax
call edi
jmp 0x465b9a
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, ebx
and ecx, 6
cmp cl, 6
jne 0x465cca
and ebx, 0xfffffff6
or ebx, 6
jmp 0x465b9a
and ebx, 0xfffffff3
or ebx, 3
jmp 0x465b9a
and ebx, 0xfffffff9
or ebx, 9
jmp case.0x465afc.9
or ebx, 3
jmp case.0x465afc.9
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
test bl, 1
je 0x465cfe
and ebx, 0xfffffff1
or ebx, 1
jmp 0x465b9a
and ebx, 0xfffffff2
or ebx, 2
jmp 0x465b9a
mov eax, dword [ebp + 0x14]
cmp eax, 0xffffffff
je case.0x465afc.9
cmp byte [0x4cc1ca], 0
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
je 0x465d31
mov edx, dword [esi]
push 0
push eax
push 0x108e
push edx
call edi
mov eax, dword [ebp + 0x14]
cmp eax, 4
je 0x465b9a
and ebx, 0xfffffffc
or ebx, eax
jmp 0x465b9a
mov ecx, dword [esi]
push eax
push 0xc5
push ecx
jmp 0x465d74
cmp cl, 0xf
jne 0x465d76
test eax, eax
jns 0x465d69
mov edx, dword [esi]
push 0
push 0
push 0x403
push edx
jmp 0x465d74
push 6
push eax
mov eax, dword [esi]
push 0x403
push eax
call edi
mov ecx, dword [esp + 0x78]
mov byte [esp + 0x7c], 0
cmp ecx, ebx
je 0x465e5e
mov al, byte [esi + 4]
mov byte [esp + 0x7c], 1
mov byte [esp + 0x84], 0
cmp al, 4
je 0x465e13
cmp al, 9
je 0x465dbb
cmp al, 0x12
jne 0x465e23
mov ecx, dword [esi]
push 0
push 0
push 0x408
push ecx
call edi
mov dword [esp + 0x18], eax
jmp 0x465e23
mov eax, ebx
and eax, 0x100000
je 0x465dfb
test ecx, 0x100000
jne 0x465dfb
cmp dword [ebp + 0x68], 0
jge 0x465dee
mov eax, dword [esi]
lea edx, [esp + 0x30]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x38]
sub eax, dword [esp + 0x30]
lea ecx, [eax + eax*2]
mov dword [ebp + 0x68], ecx
mov edx, dword [ebp + 0x68]
push 0
push edx
push 0x194
jmp 0x465e1e
test eax, eax
jne 0x465e23
test ecx, 0x100000
je 0x465e23
mov ecx, dword [esi]
push eax
push eax
push 0x194
push ecx
jmp 0x465e21
movzx edx, bx
push 1
push edx
push 0xf4
mov eax, dword [esi]
push eax
call edi
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esi]
push ebx
push 0xfffffffffffffff0
push ecx
call dword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x465e45
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x465e5e
mov edx, dword [esi]
push 0xfffffffffffffff0
push edx
call dword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, dword [esp + 0x78]
je 0x465e5e
mov byte [esp + 0x84], 1
mov eax, dword [esi]
push 0xffffffffffffffec
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
or ecx, eax
not edx
and ecx, edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x80], ecx
cmp eax, ecx
je 0x465eda
cmp byte [esp + 0x7c], 0
jne 0x465e98
mov byte [esp + 0x7c], 1
mov byte [esp + 0x84], 0
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0x80]
mov ecx, dword [esi]
push eax
push 0xffffffffffffffec
push ecx
call dword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x465ec1
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x465eda
mov edx, dword [esi]
push 0xffffffffffffffec
push edx
call dword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, dword [esp + 0x1c]
je 0x465eda
mov byte [esp + 0x84], 1
cmp byte [esi + 4], 0xa
jne 0x465f3c
mov eax, dword [esi]
push 0
push 0
push 0x1037
push eax
call edi
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x80], eax
cmp eax, ecx
je 0x465f3c
cmp byte [esp + 0x7c], 0
jne 0x465f10
mov byte [esp + 0x7c], 1
mov byte [esp + 0x84], 0
push ecx
mov ecx, dword [esi]
push 0
push 0x1036
push ecx
call edi
mov edx, dword [esi]
push 0
push 0
push 0x1037
push edx
call edi
cmp eax, dword [esp + 0x80]
je 0x465f3c
mov byte [esp + 0x84], 1
cmp byte [esp + 0x7c], 0
je 0x465f52
cmp byte [esp + 0x84], 0
je 0x465f52
mov byte [esp + 0x13], 1
movzx eax, byte [esi + 4]
add eax, 0xfffffff7
cmp eax, 0x10
ja case.0x465f69.13
movzx eax, byte [eax + 0x466338]
jmp dword [eax*4 + 0x466314]
cmp byte [ebp + 0x18e], 0
je case.0x465f69.13
mov ecx, ebp
mov eax, esi
call fcn.0046a110
jmp case.0x465f69.13
mov eax, ebp
call fcn.0046a1f0
test dword [ebp + 4], 0x100
je case.0x465f69.13
mov ecx, dword [esi]
push 0
push 0
push 0x41d
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x465f69.13
mov eax, ebp
mov edi, esi
call fcn.0046a300
jmp case.0x465f69.13
mov edi, ebp
call fcn.0046a3b0
jmp case.0x465f69.13
mov edx, dword [esp + 0x74]
push ebx
push edx
mov eax, ebp
mov ecx, esi
call fcn.0046a400
cmp dword [esp + 0x78], ebx
je case.0x465f69.13
mov eax, dword [esp + 0x18]
mov ecx, dword [esi]
push 0
push eax
push 0x402
push ecx
jmp 0x466049
mov eax, dword [ebp + 0x13c]
test eax, eax
je case.0x465f69.13
lea edx, [ebp + 0x74]
push edx
push eax
mov eax, dword [esi]
push 0xcb
push eax
call edi
mov byte [esp + 0x13], 1
jmp case.0x465f69.13
mov eax, dword [ebp + 0x13c]
test eax, eax
je case.0x465f69.13
mov edx, dword [esi]
lea ecx, [ebp + 0x74]
push ecx
push eax
push 0x192
push edx
call edi
mov byte [esp + 0x13], 1
jmp case.0x465f69.13
mov eax, dword [ebp + 0x60]
cmp eax, 0xffffffff
je case.0x465f69.13
push eax
mov eax, dword [esi]
push 0
push 0x2001
push eax
call edi
mov eax, dword [ebp + 0x188]
test eax, eax
je 0x46607a
mov edx, dword [esi]
xor ecx, ecx
cmp eax, 3
sete cl
push 0
push ecx
push 0xb
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebp + 0x188], 3
jne 0x46607a
cmp byte [esi + 4], 0xb
jne 0x466081
cmp byte [esp + 0x13], 0
je 0x46608e
mov eax, dword [esi]
push 1
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
cmp byte [esp + 0x7c], 0
je 0x4660eb
cmp byte [esp + 0x84], 0
jne 0x4660eb
mov ecx, dword [0x4c6a44]
test byte [ecx + 0x100], 1
jne 0x4660d4
mov edx, dword [0x4cad6c]
push 1
push 0
push 0xffffffffffffffff
push 0x4a6334
push edx
call fcn.004797c0
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
mov ecx, dword [0x4cbb3c]
push 0x4a3920
push 0
push 0x4a6334
call fcn.004302a0
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x60
ret 0x14