Function at 0x483ac0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe6c
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
xor eax, eax
mov dword [ebp - 4], eax
push 0xffffffffffffffeb
mov eax, dword [ebp + 8]
push eax
call sub.user32.dll_GetWindowLongA
mov ebx, eax
test bx, bx
jne 0x483b15
mov eax, dword [0x48d614]
movsx eax, word [eax]
push eax
push 0xffffffffffffffeb
mov eax, dword [ebp + 8]
push eax
call sub.user32.dll_SetWindowLongA
mov ebx, dword [0x48d614]
mov bx, word [ebx]
movsx eax, bx
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
mov edx, dword [ebp + 8]
mov dword [eax], edx
mov eax, dword [0x48d488]
cmp byte [eax], 0
jbe 0x483b85
cmp edi, 0x114
jne 0x483b85
cmp byte [0x49c9cc], 0
jne 0x483b85
mov byte [0x49c9cc], 1
mov eax, dword [0x48d330]
mov ax, word [eax]
test ax, ax
jle 0x483b7e
mov word [ebp - 0x18], ax
mov word [ebp - 6], 1
mov esi, dword [0x48d524]
mov eax, dword [esi]
test eax, eax
je 0x483b71
cmp bx, word [ebp - 6]
je 0x483b71
mov edx, dword [ebp + 0x14]
push edx
mov edx, dword [ebp + 0x10]
push edx
push edi
mov eax, dword [eax]
push eax
call fcn.00483ac0
inc word [ebp - 6]
add esi, 4
dec word [ebp - 0x18]
jne 0x483b54
mov byte [0x49c9cc], 0
movsx eax, bx
mov edx, dword [0x48d524]
cmp dword [edx + eax*4 - 4], 0
je case.0x483d8b.1034
mov edx, dword [0x48d524]
mov esi, dword [edx + eax*4 - 4]
cmp byte [esi + 0x561], 0
je case.0x483d8b.1034
mov eax, edi
cmp eax, 0x204
jg 0x483cfd
je 0x484417
cmp eax, 0x101
jg 0x483c6a
je 0x484460
cmp eax, 0x10
jg 0x483c2f
je 0x484692
cmp eax, 0xf
ja case.0x483d8b.1034
jmp dword [eax*4 + 0x483bef]
cmp eax, 0x2c
jg 0x483c51
je 0x483e37
sub eax, 0x24
je 0x483df2
sub eax, 7
je 0x483e5a
jmp case.0x483d8b.1034
sub eax, 0x4e
je 0x484a27
sub eax, 0xb2
je 0x48444f
jmp case.0x483d8b.1034
cmp eax, 0x115
jg 0x483cd8
je 0x4843c3
add eax, 0xfffffefe
cmp eax, 0x12
ja case.0x483d8b.1034
jmp dword [eax*4 + 0x483c8c]
sub eax, 0x200
je 0x4843f7
dec eax
je 0x4843a3
dec eax
je 0x4843b4
dec eax
je 0x484432
jmp case.0x483d8b.1034
cmp eax, 0x408
jg 0x483d7d
je 0x4847d0
cmp eax, 0x402
jg 0x483d54
je 0x4846f5
cmp eax, 0x222
jg 0x483d3d
je 0x484537
sub eax, 0x206
je 0x484426
sub eax, 0xe
je 0x483e96
jmp case.0x483d8b.1034
sub eax, 0x400
je 0x4846b5
dec eax
je 0x4846da
jmp case.0x483d8b.1034
add eax, 0xfffffbfd
cmp eax, 4
ja case.0x483d8b.1034
jmp dword [eax*4 + 0x483d69]
add eax, 0xfffffbf7
cmp eax, 0xd
ja case.0x483d8b.1034
jmp dword [eax*4 + 0x483d92]
mov eax, esi
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
call fcn.004820dc
mov dword [ebp - 4], eax
jmp 0x484bb8
mov eax, dword [ebp + 0x14]
mov dx, word [eax + 0x10]
mov eax, esi
call fcn.0047ab98
jmp case.0x483d8b.1034
mov eax, dword [ebp + 0x14]
mov edx, dword [0x48d95c]
movsx edx, word [edx]
mov ecx, dword [0x48d3f8]
movzx ecx, byte [ecx]
add ecx, ecx
add edx, ecx
mov dword [eax + 0x20], edx
mov edx, dword [0x48d368]
movsx edx, word [edx]
mov ecx, dword [0x48d904]
movzx ecx, byte [ecx]
add edx, ecx
mov ecx, dword [0x48d3f8]
movzx ecx, byte [ecx]
add ecx, ecx
add edx, ecx
mov dword [eax + 0x24], edx
jmp case.0x483d8b.1034
cmp dword [ebp + 0x10], 0x1e240
jne case.0x483d8b.1034
mov eax, dword [0x48da78]
movzx eax, byte [eax]
add eax, 0x11
mov edx, dword [ebp + 0x14]
mov dword [edx + 0x10], eax
jmp case.0x483d8b.1034
cmp dword [ebp + 0x10], 0x1e240
jne 0x483e86
mov eax, dword [ebp + 0x14]
cmp dword [eax + 0xc], 4
ja case.0x483d8b.1034
mov edx, dword [esi + 0x1a8]
mov ecx, 7
xchg edx, eax
call fcn.0041652c
jmp case.0x483d8b.1034
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x10]
call fcn.0041578c
jmp case.0x483d8b.1034
mov eax, dword [ebp + 0x14]
mov edx, dword [eax + 4]
mov eax, dword [0x48d904]
movzx eax, byte [eax]
add edx, eax
mov eax, dword [0x48d3f8]
movzx eax, byte [eax]
add eax, eax
add edx, eax
add edx, 0x16
movsx eax, word [esi + 0x1b4]
add edx, eax
mov eax, dword [0x48d1c4]
movsx eax, word [eax]
add eax, eax
add edx, eax
add edx, 2
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0xc]
call fcn.0040bb84
mov edx, dword [ebp + 0x14]
mov dword [edx + 0xc], eax
mov eax, esi
call fcn.0047d308
jmp case.0x483d8b.1034
cmp byte [0x49beb8], 0
jne 0x484bb8
cmp dword [0x49bebc], 0
je 0x483f0e
mov eax, dword [0x49bebc]
cmp eax, dword [ebp + 8]
jne 0x484bb8
cmp byte [esi + 0x564], 0
jne case.0x483d8b.1034
mov eax, dword [ebp + 0x14]
call fcn.00405a88
test ax, ax
je case.0x483d8b.1034
cmp word [ebp + 0x14], 0
je case.0x483d8b.1034
mov ax, word [ebp + 0x14]
mov word [esi + 0x1b0], ax
mov eax, dword [ebp + 0x14]
call fcn.00405a88
movzx edx, ax
mov eax, 0x28
call fcn.0040bb84
mov word [esi + 0x1b2], ax
cmp byte [esi + 0x55d], 0
jle 0x483ffd
push 0x10
movsx eax, word [esi + 0x1b2]
movsx edx, word [esi + 0x1b4]
sub eax, edx
push eax
mov eax, dword [0x48d5e4]
movzx eax, byte [eax]
push eax
movsx eax, word [esi + 0x1b4]
push eax
movsx eax, word [esi + 0x1b0]
mov edx, dword [0x48d25c]
movsx edx, word [edx]
sub edx, 0x10
cmp eax, edx
setg al
and eax, 0x7f
add eax, eax
movsx edx, word [esi + 0x1b0]
mov ecx, dword [0x48d5e4]
movzx ecx, byte [ecx]
sub edx, ecx
sub edx, eax
push edx
push 0
mov eax, dword [esi + 0x1a4]
push eax
call sub.user32.dll_SetWindowPos
mov eax, dword [esi + 0x1a8]
test eax, eax
je 0x483ffd
push 0x10
movsx edx, word [esi + 0x1b4]
sub edx, 0xf
sub edx, 2
push edx
movsx edx, word [esi + 0x1b0]
push edx
push 0xf
push 0
push 0
push eax
call sub.user32.dll_SetWindowPos
movzx eax, word [esi + 0x50c]
mov dword [ebp - 0x194], eax
fild dword [ebp - 0x194]
mov eax, dword [0x48d318]
fistp qword [eax]
wait
movsx eax, word [esi + 0x1b2]
sub eax, 0x16
movsx edx, word [esi + 0x1b4]
sub eax, edx
mov dword [ebp - 0x194], eax
fild dword [ebp - 0x194]
mov eax, dword [0x48d1c4]
fild word [eax]
fdivp st(1)
call fcn.004028ac
mov edx, 0x80
call fcn.0040bb7c
mov word [ebp - 8], ax
mov ax, word [esi + 0x50c]
cmp ax, word [ebp - 8]
je 0x4840df
mov eax, esi
call fcn.00464bb4
mov ax, word [ebp - 8]
mov word [esi + 0x50c], ax
cmp ax, word [esi + 0x53c]
jae 0x4840bb
movzx edx, word [esi + 0x53c]
movzx eax, ax
sub edx, eax
mov eax, dword [0x48db48]
movzx eax, word [eax]
imul edx, eax
mov dword [ebp - 0x194], edx
fild dword [ebp - 0x194]
fild qword [esi + 0x188]
faddp st(1)
fistp qword [esi + 0x188]
wait
mov ax, word [esi + 0x50c]
mov word [esi + 0x53c], ax
mov eax, esi
call fcn.004232a4
mov eax, esi
call fcn.0047d4c8
movsx eax, word [esi + 0x534]
mov edx, dword [0x48d930]
cmp eax, dword [edx]
jne 0x4840df
call fcn.00444994
cmp byte [0x49beb9], 0
je case.0x483d8b.1034
mov byte [0x49beb9], 0
jmp 0x484bb8
cmp dword [ebp + 0x10], 3
jne 0x4841ac
cmp byte [0x49bee4], 2
jne 0x484147
push 0
push 1
push 0x115
mov eax, dword [esi]
push eax
call sub.user32.dll_SendMessageA
movzx eax, word [esi + 0x50e]
mov dword [ebp - 0x194], eax
fild dword [ebp - 0x194]
fild qword [esi + 0x188]
faddp st(1)
fsub dword [0x484bc4]
mov eax, dword [0x48d318]
fistp qword [eax]
wait
jmp 0x48416e
push 0
push 0
push 0x115
mov eax, dword [esi]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x48d318]
mov edx, dword [esi + 0x188]
mov dword [eax], edx
mov edx, dword [esi + 0x18c]
mov dword [eax + 4], edx
fild qword [0x48d1a8]
fcomp dword [0x484bc8]
fnstsw ax
sahf
jbe 0x4841ac
mov eax, dword [0x48d318]
push dword [eax + 4]
push dword [eax]
fild qword [esi + 0x18]
fsub dword [0x484bc4]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.0040bb94
add esp, 0xfffffff8
fistp qword [esp]
wait
mov eax, esi
call fcn.0046ad90
cmp dword [ebp + 0x10], 4
jne 0x4842fb
push 4
mov eax, dword [esi]
push eax
call sub.user32.dll_KillTimer
lea ecx, [esi + 0x4a4]
mov edx, dword [0x48d550]
mov dl, byte [edx + 0x18f5]
mov al, byte [esi + 0x55d]
call fcn.0042269c
test al, al
jbe 0x4842fb
mov eax, dword [0x48d714]
mov word [eax], 0
cmp byte [esi + 0x564], 0
jne 0x484214
mov eax, esi
call fcn.0047e098
add esp, 0xfffffff8
fistp qword [esp]
wait
mov dx, word [esi + 0x534]
mov al, 1
call fcn.004429a8
mov eax, dword [0x48d550]
cmp byte [eax + 0x185a], 0
jne 0x484230
mov eax, dword [0x48d550]
cmp byte [eax + 0x185b], 0
je 0x48426e
movsx eax, byte [esi + 0x55d]
mov edx, dword [0x48d340]
cmp byte [edx + eax - 1], 0xff
je 0x484255
lea eax, [esi + 0x4a4]
xor edx, edx
call fcn.0041f698
test eax, eax
je 0x48426e
mov eax, dword [0x48d930]
mov eax, dword [eax]
movsx edx, word [esi + 0x534]
cmp eax, edx
jne 0x48426e
mov eax, esi
call fcn.00464834
cmp byte [esi + 0x55d], 0
jle 0x4842fb
movsx eax, byte [esi + 0x55d]
mov edx, dword [0x48d340]
mov al, byte [edx + eax - 1]
cmp al, 1
je 0x4842cf
movsx edx, byte [esi + 0x55d]
mov ecx, dword [0x48d340]
cmp al, 2
je 0x4842cf
movsx edx, byte [esi + 0x55d]
mov ecx, dword [0x48d340]
cmp al, 3
je 0x4842cf
movsx eax, byte [esi + 0x55d]
mov edx, dword [0x48d340]
cmp byte [edx + eax - 1], 0xff
jne 0x4842fb
cmp byte [esi + 0x55d], 0x1a
jg 0x4842fb
mov eax, dword [0x48d3a0]
cmp byte [eax], 0
jne 0x4842fb
mov eax, dword [0x48d550]
cmp byte [eax + 0x193d], 0
je 0x4842fb
push 1
push 0xac
push 0x111
mov eax, dword [esi]
push eax
call sub.user32.dll_PostMessageA
cmp dword [ebp + 0x10], 0xc
jne 0x48436c
push 0xc
mov eax, dword [esi]
push eax
call sub.user32.dll_KillTimer
mov ax, 0x312
call fcn.0040bc04
mov edx, eax
mov eax, dword [0x48da44]
call fcn.00405c48
mov ax, 0x12d
call fcn.0040bc04
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [0x48da44]
mov edx, 4
call fcn.00411d74
mov eax, dword [0x48d9fc]
mov byte [eax], 1
mov eax, dword [0x48db2c]
cmp byte [eax], 0
je 0x48435b
call fcn.0040eb04
push 0
push 0x1f4
push 0xd
mov eax, dword [esi]
push eax
call sub.user32.dll_SetTimer
cmp dword [ebp + 0x10], 0xd
jne case.0x483d8b.1034
push 0xd
mov eax, dword [esi]
push eax
call sub.user32.dll_KillTimer
mov eax, dword [0x48d720]
mov byte [eax], 1
push 0
push 0
push 0x10
mov eax, dword [esi]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x48d720]
mov byte [eax], 0
jmp case.0x483d8b.1034
mov eax, esi
xor ecx, ecx
mov edx, dword [ebp + 0x14]
call fcn.0046b948
jmp case.0x483d8b.1034
mov eax, esi
mov edx, dword [ebp + 0x14]
call fcn.0046b7e4
jmp case.0x483d8b.1034
mov eax, dword [ebp + 0x10]
call fcn.00405a88
mov ecx, eax
mov eax, esi
mov dx, word [ebp + 0x10]
call fcn.0047c84c
jmp case.0x483d8b.1034
mov eax, dword [ebp + 0x10]
call fcn.00405a88
mov ecx, eax
mov eax, esi
mov dx, word [ebp + 0x10]
call fcn.0047cca0
jmp case.0x483d8b.1034
mov eax, dword [0x48db2c]
cmp byte [eax], 0
jne case.0x483d8b.1034
mov eax, esi
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
call fcn.0046af60
jmp case.0x483d8b.1034
mov eax, esi
mov edx, dword [ebp + 0x14]
call fcn.0046c9b0
jmp case.0x483d8b.1034
mov eax, esi
call fcn.00481d94
jmp case.0x483d8b.1034
mov eax, esi
mov cl, 1
mov edx, dword [ebp + 0x14]
call fcn.0046b948
jmp case.0x483d8b.1034
mov eax, esi
call fcn.0047c094
jmp case.0x483d8b.1034
mov eax, esi
xor ecx, ecx
mov edx, dword [ebp + 0x10]
call fcn.00463710
jmp case.0x483d8b.1034
cmp dword [ebp + 0x10], 0x10
jne case.0x483d8b.1034
mov byte [0x49bedc], 0
jmp case.0x483d8b.1034
mov eax, esi
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
call fcn.004640f8
jmp case.0x483d8b.1034
mov byte [0x49bedc], 0
mov eax, dword [0x48d8f8]
cmp byte [eax], 0
jne case.0x483d8b.1034
call sub.user32.dll_DestroyCaret
mov eax, esi
call fcn.00462224
mov word [esi + 0x49e], 0
mov dword [0x48d1a8], 0xffffffff
mov dword [0x48d1ac], 0xffffffff
jmp case.0x483d8b.1034
mov eax, dword [0x48d8ac]
mov word [eax], 0
cmp dword [esi + 0x1a8], 0
je 0x4844f8
mov eax, dword [0x48d550]
cmp byte [eax + 0xa45], 0
je 0x4844f8
mov eax, dword [esi + 0x1a8]
push eax
call sub.user32.dll_SetFocus
cmp byte [esi + 0x563], 0
je case.0x483d8b.1034
cmp byte [esi + 0x564], 0
jne case.0x483d8b.1034
mov eax, dword [0x48d3a0]
cmp byte [eax], 0
jne case.0x483d8b.1034
push 0
push 0
push 0x411
mov eax, dword [ebp + 8]
push eax
call sub.user32.dll_PostMessageA
jmp case.0x483d8b.1034
mov eax, dword [ebp + 0x14]
cmp eax, dword [ebp + 8]
jne case.0x483d8b.1034
mov eax, dword [0x48d6c4]
cmp byte [eax], 0
jne case.0x483d8b.1034
movsx eax, word [esi + 0x534]
mov edx, dword [0x48d930]
mov dword [edx], eax
xor eax, eax
mov dword [0x49bebc], eax
mov eax, dword [esi]
push eax
call sub.user32.dll_IsZoomed
test eax, eax
je 0x48457a
mov byte [esi + 0x564], 0
mov eax, dword [0x48d930]
mov ax, word [eax]
call fcn.0046243c
mov eax, dword [0x48d67c]
cmp dword [eax], 0
jbe 0x4845b2
push 0
movsx eax, word [esi + 0x534]
call fcn.00480b78
push eax
push 0x130c
mov eax, dword [0x48d67c]
mov eax, dword [eax]
push eax
call sub.user32.dll_SendMessageA
cmp dword [esi + 0x1a8], 0
je 0x4845d1
push 8
push 0xac
mov eax, dword [0x48d520]
mov eax, dword [eax]
push eax
call sub.user32.dll_CheckMenuItem
jmp 0x4845e5
push 0
push 0xac
mov eax, dword [0x48d520]
mov eax, dword [eax]
push eax
call sub.user32.dll_CheckMenuItem
mov eax, dword [0x48d20c]
mov ecx, 1
mov edx, 0x80
call fcn.00402db8
call fcn.00444994
mov eax, esi
call fcn.0047e098
add esp, 0xfffffff8
fistp qword [esp]
wait
mov dx, word [esi + 0x534]
xor eax, eax
call fcn.00446080
jmp case.0x483d8b.1034
mov eax, dword [0x48db2c]
cmp byte [eax], 0
je 0x484637
mov eax, dword [0x48d314]
cmp byte [eax], 0
jne 0x484bb8
cmp dword [ebp + 0x10], 0xf020
jne 0x484647
mov byte [esi + 0x564], 1
cmp dword [ebp + 0x10], 0xf120
je 0x48466f
cmp dword [ebp + 0x10], 0xf122
je 0x48466f
cmp dword [ebp + 0x10], 0xf030
je 0x48466f
cmp dword [ebp + 0x10], 0xf032
jne case.0x483d8b.1034
mov eax, esi
call fcn.00464bb4
test al, al
je 0x484bb8
mov eax, dword [0x48d5c8]
mov byte [eax], 0x13
mov byte [esi + 0x564], 0
jmp case.0x483d8b.1034
mov eax, esi
call fcn.00480db0
test al, al
jne 0x4846a9
mov dword [ebp - 4], 1
jmp 0x484bb8
mov byte [esi + 0x561], 0
jmp case.0x483d8b.1034
mov eax, esi
call fcn.0047d4c8
cmp byte [esi + 0x55e], 0
jne case.0x483d8b.1034
mov eax, esi
call fcn.004632ec
call fcn.00444994
jmp case.0x483d8b.1034
mov eax, dword [0x48d550]
mov al, byte [eax + 0x18f1]
mov byte [esi + 0x8f], al
call fcn.00444994
jmp case.0x483d8b.1034
mov eax, esi
call fcn.0047e098
fistp qword [ebp - 0x10]
wait
mov eax, dword [0x48da4c]
mov edx, dword [ebp + 0x10]
movzx edx, byte [eax + edx]
mov ecx, dword [0x48d6a4]
mov eax, esi
call fcn.00463dd0
push dword [ebp - 0xc]
push dword [ebp - 0x10]
mov eax, esi
xor edx, edx
call fcn.0047e0e8
mov eax, dword [0x48d608]
mov byte [eax], 0
mov eax, esi
call fcn.0047e098
add esp, 0xfffffff8
fistp qword [esp]
wait
mov ax, word [esi + 0x534]
call fcn.00445afc
jmp case.0x483d8b.1034
mov eax, dword [ebp + 0x14]
push eax
push 0
mov ecx, dword [ebp + 0x10]
mov dl, 0xf
mov eax, ebx
call fcn.0044f244
and eax, 0x7f
mov dword [ebp - 4], eax
jmp 0x484bb8
mov eax, esi
call fcn.004646c4
jmp case.0x483d8b.1034
mov eax, esi
call fcn.0047e098
add esp, 0xfffffff8
fistp qword [esp]
wait
mov ax, word [esi + 0x534]
call fcn.00445afc
jmp case.0x483d8b.1034
mov eax, dword [0x48d318]
push dword [eax + 4]
push dword [eax]
mov eax, esi
mov dl, 1
call fcn.0047e0e8
jmp case.0x483d8b.1034
mov eax, esi
call fcn.0047e098
add esp, 0xfffffff8
fistp qword [esp]
wait
mov dx, word [esi + 0x534]
xor eax, eax
call fcn.00446080
jmp case.0x483d8b.1034
push 0
push 0
mov ax, word [esi + 0x534]
xor ecx, ecx
mov dl, 0x10
call fcn.0044f244
and eax, 0x7f
mov dword [ebp - 4], eax
jmp 0x484bb8
mov eax, esi
call fcn.0047e098
fistp qword [ebp - 0x10]
wait
fld xword [0x484bcc]
fild qword [ebp - 0x10]
fcompp
fnstsw ax
sahf
jbe 0x484814
xor eax, eax
mov dword [ebp - 4], eax
jmp 0x484bb8
fild qword [ebp - 0x10]
call fcn.004028a0
mov dword [ebp - 4], eax
jmp 0x484bb8
xor eax, eax
mov dword [esi + 0x1ac], eax
jmp case.0x483d8b.1034
push 0
mov eax, esi
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
call fcn.00471898
and eax, 0x7f
mov dword [ebp - 4], eax
jmp 0x484bb8
mov eax, esi
mov edx, dword [ebp + 0x14]
call fcn.00481fcc
jmp case.0x483d8b.1034
mov eax, esi
call fcn.0047bd88
jmp case.0x483d8b.1034
mov eax, esi
mov edx, dword [ebp + 0x14]
call fcn.00481df8
jmp case.0x483d8b.1034
mov eax, dword [0x48da44]
push eax
mov eax, dword [ebp + 0x10]
push eax
push 0x189
mov eax, dword [ebp + 0x14]
push eax
call sub.user32.dll_SendMessageA
inc eax
je 0x484bb8
mov eax, dword [0x48da44]
cmp byte [eax], 0x28
jne 0x4848f1
mov eax, dword [0x48d6bc]
mov eax, dword [eax]
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcmpA
test eax, eax
je 0x48494d
mov eax, dword [0x48da44]
mov dl, 0x20
call fcn.00405e00
mov edx, eax
inc edx
mov eax, dword [0x48d7ec]
call fcn.00405c48
xor eax, eax
call fcn.0040bcc0
mov edx, dword [0x48d57c]
mov dword [edx], eax
mov eax, dword [0x48d6d4]
cmp byte [eax], 0
jne 0x484bb8
jmp 0x48494d
mov eax, dword [0x48da44]
mov dl, 0x20
call fcn.00405cf8
inc eax
mov dl, 0x20
call fcn.00405cf8
test eax, eax
je 0x48490c
mov byte [eax], 0
mov eax, dword [0x48da44]
mov dl, 0x20
call fcn.00405cf8
mov edx, eax
inc edx
mov eax, dword [0x48d7ec]
call fcn.00405c48
xor eax, eax
call fcn.0040bcc0
lea edx, [esi + 0x4a4]
call fcn.0041ea80
mov edx, dword [0x48d57c]
mov dword [edx], eax
mov eax, dword [0x48d57c]
cmp dword [eax], 0xffffffff
je 0x484bb8
mov eax, dword [0x48d57c]
mov eax, dword [eax]
call fcn.0040fd30
movsx eax, byte [esi + 0x55d]
mov edx, dword [0x48d9a0]
movzx eax, word [edx + eax*2 + 0x4c]
mov dword [ebp - 0x194], eax
fild dword [ebp - 0x194]
fmulp st(1)
fistp qword [esi + 0x188]
wait
mov eax, esi
call fcn.00464bb4
test al, al
je 0x484bb8
mov eax, dword [0x48d5c8]
mov byte [eax], 0x21
movzx eax, word [esi + 0x50e]
mov dword [ebp - 0x194], eax
fild dword [ebp - 0x194]
fild qword [esi + 0x188]
fdivrp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
call fcn.0040fd80
inc eax
mov dword [esi + 0x16c], eax
mov eax, esi
call fcn.0047d4c8
movsx eax, word [esi + 0x534]
mov edx, dword [0x48d930]
cmp eax, dword [edx]
je case.0x483d8b.1034
mov eax, dword [0x48d5c8]
mov byte [eax], 0x13
mov eax, dword [esi]
push eax
call sub.user32.dll_BringWindowToTop
jmp case.0x483d8b.1034
mov eax, esi
mov cx, word [ebp + 0x10]
mov edx, dword [ebp + 0x14]
call fcn.0046844c
jmp case.0x483d8b.1034
mov eax, esi
call fcn.0047d4c8
jmp case.0x483d8b.1034
mov eax, esi
call fcn.00464bb4
and eax, 0x7f
mov dword [ebp - 4], eax
jmp 0x484bb8
mov eax, dword [ebp + 0x14]
cmp dword [eax + 8], 0xffffff94
jne 0x484adc
mov eax, dword [ebp + 0x14]
mov al, byte [eax + 0x10]
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], 6
je 0x484ac9
cmp byte [ebp - 0x15], 7
je 0x484ac9
mov eax, dword [0x48d550]
mov al, byte [eax + 0x189a]
cmp al, byte [ebp - 0x15]
je 0x484adc
cmp dword [esi + 0x1b8], 0
jle 0x484a7b
xor ecx, ecx
mov cl, byte [ebp - 0x15]
mov edx, 0x466ee8
mov eax, dword [esi + 0x1a8]
call fcn.0040b514
mov eax, dword [0x48d550]
mov dl, byte [ebp - 0x15]
mov byte [eax + 0x189a], dl
mov dword [ebp - 0x130], 4
mov word [ebp - 6], 0
mov al, byte [ebp - 6]
call fcn.00466ea4
mov dword [ebp - 0x124], eax
lea ecx, [ebp - 0x130]
movsx edx, word [ebp - 6]
mov eax, dword [esi + 0x1a8]
call fcn.0040b424
inc word [ebp - 6]
cmp word [ebp - 6], 7
jne 0x484a99
jmp 0x484adc
mov ax, 0x13f
call fcn.0040bc04
mov edx, 4
call fcn.00411d74
mov eax, dword [ebp + 0x14]
cmp dword [eax + 8], 0xffffff9b
jne 0x484b08
mov eax, dword [ebp + 0x14]
cmp dword [eax + 0xc], 0xffffffff
jle 0x484b08
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x14]
and eax, 2
cmp eax, 2
jne 0x484b08
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0xc]
mov dword [esi + 0x1cc], eax
mov eax, dword [ebp + 0x14]
cmp dword [eax + 8], 0xfffffffb
jne 0x484b18
mov eax, esi
call fcn.0046bdb0
mov eax, dword [ebp + 0x14]
cmp dword [eax + 8], 0xfffffffd
je 0x484b2a
mov eax, dword [ebp + 0x14]
cmp dword [eax + 8], 0xfffffffc
jne case.0x483d8b.1034
mov eax, esi
xor edx, edx
call fcn.0046c2e4
cmp edi, 2
jne 0x484b65
movsx esi, bx
mov eax, dword [0x48d524]
mov eax, dword [0x48d524]
mov eax, dword [eax + esi*4 - 4]
mov edx, 0x567
call fcn.00402508
mov eax, dword [0x48d524]
xor edx, edx
mov dword [eax + esi*4 - 4], edx
xor eax, eax
call fcn.00477b88
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [ebp + 0x10]
push eax
push edi
mov eax, dword [ebp + 8]
push eax
call sub.user32.dll_DefMDIChildProcA
mov dword [ebp - 4], eax
movsx eax, bx
mov edx, dword [0x48d524]
cmp dword [edx + eax*4 - 4], 0
je 0x484bb2
mov edx, dword [0x48d9f4]
cmp byte [edx], 0
je 0x484bb2
cmp edi, 0x14
jne 0x484bb2
mov edx, dword [0x48d524]
mov eax, dword [edx + eax*4 - 4]
cmp byte [eax + 0x566], 0
jne 0x484bb8
call fcn.0047dc0c
cmp edi, 0x202
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10