Function at 0x466b20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x57f815
mov eax, dword fs:[0]
push eax
sub esp, 0x178
push ebx
push esi
push edi
mov eax, dword [0x60bd28]
xor eax, esp
push eax
lea eax, [esp + 0x188]
mov dword fs:[0], eax
mov ebx, ecx
mov eax, dword [ebp + 8]
xor esi, esi
mov dword [eax], esi
mov dword [eax + 4], esi
cmp dword [ebx + 0x148], esi
je 0x466b6e
mov eax, dword [ebx + 0x1a8]
jmp 0x466b79
push esi
push 0x596192
call fcn.0045e3f0
mov edi, dword [ebp + 0xc]
push edi
lea ecx, [esp + 0xa0]
push str._body_
push ecx
mov dword [esp + 0x54], eax
call fcn.004027b0
add esp, 0xc
push eax
mov ecx, edi
mov dword [esp + 0x194], esi
call fcn.004025f0
mov eax, dword [esp + 0x9c]
add eax, 0xfffffff0
mov dword [esp + 0x190], 0xffffffff
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x466bd3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 7
push str.__body_
mov ecx, edi
call fcn.004086f0
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 4]
mov dword [ebx + 0x154], edx
mov eax, dword [ecx]
mov dword [ebx + 0x150], eax
mov edx, dword [ecx + 0xc]
mov dword [ebx + 0x15c], edx
mov eax, dword [ecx + 8]
mov dword [ebx + 0x158], eax
sub eax, dword [ebx + 0x150]
mov esi, dword [ecx]
mov dword [esp + 0xa8], eax
mov eax, dword [ecx + 4]
mov ecx, dword [ebx + 0x174]
mov dword [esp + 0xc4], ecx
push 0x596192
lea ecx, [esp + 0x28]
mov dword [esp + 0x3c], eax
call fcn.00402a30
push 0x596192
lea ecx, [esp + 0xa8]
mov dword [esp + 0x194], 1
call fcn.00402a30
push 0x596192
lea ecx, [esp + 0x1c]
mov byte [esp + 0x194], 2
call fcn.00402a30
push 0x596192
lea ecx, [esp + 0x30]
mov byte [esp + 0x194], 3
call fcn.00402a30
push 0x596192
lea ecx, [esp + 0x2c]
mov byte [esp + 0x194], 4
call fcn.00402a30
push esi
mov ecx, ebx
mov byte [esp + 0x194], 5
call fcn.00464950
mov ecx, dword [edi]
mov edx, dword [ebx + 0xcc]
mov dword [esp + 0x34], eax
mov dword [esp + 0xa0], eax
mov eax, dword [ebx + 0xb8]
mov dword [esp + 0x3c], eax
mov eax, dword [ecx - 0xc]
test eax, eax
mov dword [esp + 0x44], edx
mov dword [esp + 0x9c], 0
jle 0x468d9d
lea ecx, [ecx]
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x9c]
push edx
lea eax, [esp + 0xa8]
push eax
push ecx
lea edx, [esp + 0xf4]
push edx
mov ecx, ebx
call fcn.00462850
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x194], 6
call fcn.004025f0
mov eax, dword [esp + 0xe8]
add eax, 0xfffffff0
mov byte [esp + 0x190], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466d40
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0xa4]
push ecx
lea edx, [esp + 0xd0]
push edx
mov ecx, ebx
call fcn.0045f370
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x194], 7
call fcn.004025f0
mov eax, dword [esp + 0xcc]
add eax, 0xfffffff0
mov byte [esp + 0x190], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466d94
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [esp + 0x24]
cmp dword [edi - 0xc], 0
je 0x467345
mov eax, dword [ebx + 0xa4]
sub eax, 1
je 0x466e49
sub eax, 1
je 0x466e3e
sub eax, 1
jne 0x466e56
lea ecx, [esp + 0x24]
call fcn.0041e8b0
mov edi, dword [esp + 0x24]
mov edx, dword [edi - 0xc]
xor esi, esi
test edx, edx
jle 0x466e56
test esi, esi
jl 0x468f74
cmp esi, edx
jg 0x468f74
mov al, byte [esi + edi]
cmp al, 0x61
jl 0x466e32
cmp esi, edx
jg 0x468f74
cmp al, 0x7a
jg 0x466e32
test esi, esi
je 0x466e19
lea ecx, [esi - 1]
test ecx, ecx
jl 0x468f74
cmp ecx, edx
jg 0x468f74
cmp byte [ecx + edi], 0x20
jne 0x466e32
cmp esi, edx
jg 0x468f74
sub al, 0x20
lea ecx, [esp + 0x24]
push eax
push esi
call fcn.00457100
mov edi, dword [esp + 0x24]
mov edx, dword [edi - 0xc]
add esi, 1
cmp esi, edx
jl 0x466dd9
jmp 0x466e56
lea ecx, [esp + 0x24]
call fcn.0041e8b0
jmp 0x466e52
lea ecx, [esp + 0x24]
call fcn.00426b70
mov edi, dword [esp + 0x24]
cmp dword [edi - 0xc], 0
je 0x467345
mov ecx, dword [ebx + 0x160]
push 0
push 0
push ecx
call dword [sym.imp.GDI32.dll_SetTextJustification]
mov eax, dword [esp + 0x24]
mov ecx, dword [eax - 0xc]
lea edx, [esp + 0x1c]
push edx
push ecx
push eax
mov eax, dword [ebx + 0x160]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x38]
push ecx
push edx
mov ecx, ebx
call fcn.004533d0
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x10], eax
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x466ecc
cmp eax, dword [esi]
jne 0x466ecc
mov edi, esi
mov eax, 1
lock xadd dword [edx], eax
jmp 0x466f02
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 1
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x468f7e
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
add eax, 1
push eax
add esi, 0x10
push esi
push eax
lea ecx, [edi + 0x10]
push ecx
call fcn.0053fac1
add esp, 0x10
lea esi, [edi + 0x10]
mov dword [esp + 0x30], esi
mov edi, dword [ebx + 0x150]
sub edi, dword [esp + 0x34]
mov eax, dword [esp + 0xa8]
add edi, eax
cmp dword [ebx + 0x170], 0
mov byte [esp + 0x190], 8
je 0x466fad
mov edx, edi
sub edx, dword [esp + 0x1c]
jns 0x466fad
test eax, eax
je 0x466fad
mov ecx, dword [esp + 0xa8]
lea eax, [esp + 0x14]
push eax
push ecx
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0xe0]
push eax
mov ecx, ebx
mov dword [esp + 0x24], edi
call fcn.00460860
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x194], 9
call fcn.004025f0
mov eax, dword [esp + 0xd4]
add eax, 0xfffffff0
mov byte [esp + 0x190], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466f9f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x30]
mov dword [esp + 0x1c], ecx
jmp 0x46700c
mov edx, dword [esp + 0x24]
cmp dword [edx - 0xc], 0
mov ecx, dword [edx - 0x10]
lea eax, [edx - 0x10]
mov dword [esp + 0x14], ecx
je 0x46700c
cmp dword [eax + 0xc], 0
lea ecx, [eax + 0xc]
jge 0x466fe4
cmp dword [edx - 8], 0
jl 0x468f74
mov dword [edx - 0xc], 0
mov edx, dword [esp + 0x24]
mov byte [edx], 0
jmp 0x46700c
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466ffa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x24], eax
cmp dword [ebx + 0x168], 0
jne 0x467230
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4672c6
mov ecx, dword [esp + 0x3c]
sub ecx, eax
jne 0x4670aa
mov ecx, dword [esi - 0xc]
lea eax, [ecx - 1]
test eax, eax
jl 0x468f74
cmp eax, ecx
jg 0x468f74
cmp byte [esi + eax], 0x20
jne 0x4670aa
lea ecx, [esp + 0x30]
call fcn.0040c3f0
mov esi, dword [esp + 0x30]
push 0x20
push ecx
mov dword [esp + 0x1c], esp
lea eax, [esi - 0x10]
mov dword [esp + 0x1c], esp
push eax
call fcn.00401b70
mov edx, dword [esp + 0x20]
add eax, 0x10
add esp, 4
mov ecx, ebx
mov dword [edx], eax
call fcn.00458a90
mov edx, dword [ebx + 0x160]
lea ecx, [esp + 0x104]
push ecx
mov dword [esp + 0x48], eax
mov eax, dword [esi - 0xc]
push eax
push esi
push edx
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov eax, dword [esp + 0x104]
sub eax, dword [esp + 0x1c]
add dword [esp + 0x3c], eax
cmp dword [ebx + 0xc8], 3
jne 0x4670d3
cmp dword [ebx + 0xd0], 0
je 0x4670d3
mov ecx, dword [esp + 0x44]
sub edi, dword [esp + 0x3c]
mov edx, dword [ebx + 0x160]
push ecx
push edi
push edx
call dword [sym.imp.GDI32.dll_SetTextJustification]
mov eax, dword [esp + 0x1c]
sub dword [esp + 0x3c], eax
mov eax, dword [esi - 0xc]
mov edx, dword [ebx + 0x160]
lea ecx, [esp + 0x1c]
push ecx
push eax
push esi
push edx
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x34]
add ecx, eax
push ecx
add edx, edi
push edx
push eax
push edi
mov ecx, ebx
call fcn.00466680
mov eax, dword [esi - 0xc]
mov ecx, dword [ebx + 0x160]
push eax
mov eax, dword [esp + 0x14]
push esi
push eax
push edi
push ecx
call dword [sym.imp.GDI32.dll_TextOutA]
push 0x20
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
lea edi, [esi - 0x10]
mov dword [esp + 0x1c], esp
mov dword [esp + 0x48], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x46715d
cmp eax, dword [edi]
jne 0x46715d
mov dword [esp + 0x1c], edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x467199
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 1
push ecx
mov ecx, eax
call edx
test eax, eax
mov dword [esp + 0x1c], eax
je 0x468f7e
mov eax, dword [edi + 4]
mov ecx, dword [esp + 0x1c]
mov dword [ecx + 4], eax
mov eax, dword [edi + 4]
add eax, 1
push eax
add edi, 0x10
push edi
push eax
add ecx, 0x10
push ecx
call fcn.0053fac1
add esp, 0x10
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x48]
add ecx, 0x10
mov dword [edx], ecx
mov ecx, ebx
call fcn.00458a90
sub dword [esp + 0x44], eax
cmp dword [ebx + 0x58], 0
je 0x4672c6
mov eax, dword [ebx + 0x60]
xor ecx, ecx
cmp dword [ebx + 0x48], 0x2bc
push eax
setge cl
add ecx, 1
push ecx
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
mov edx, dword [ebx + 0x160]
push eax
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [esp + 0x34]
mov edx, dword [ebx + 0x160]
push 0
mov edi, eax
mov eax, dword [esp + 0x14]
push eax
push ecx
push edx
call dword [sym.imp.GDI32.dll_MoveToEx]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x34]
push eax
mov eax, dword [ebx + 0x160]
add ecx, edx
push ecx
push eax
call dword [sym.imp.GDI32.dll_LineTo]
mov ecx, dword [ebx + 0x160]
push edi
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
jmp 0x4672c6
mov edx, dword [ebx + 0x84]
mov dword [ebx + 0xc8], edx
push 0x20
push ecx
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
lea edi, [esi - 0x10]
mov dword [esp + 0x1c], esp
mov dword [esp + 0x48], esp
call edx
cmp dword [edi + 0xc], 0
lea ecx, [edi + 0xc]
jl 0x467270
cmp eax, dword [edi]
jne 0x467270
mov dword [esp + 0x1c], edi
mov eax, 1
lock xadd dword [ecx], eax
jmp 0x4672ac
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 1
push ecx
mov ecx, eax
call edx
test eax, eax
mov dword [esp + 0x1c], eax
je 0x468f7e
mov eax, dword [edi + 4]
mov ecx, dword [esp + 0x1c]
mov dword [ecx + 4], eax
mov eax, dword [edi + 4]
add eax, 1
push eax
add edi, 0x10
push edi
push eax
add ecx, 0x10
push ecx
call fcn.0053fac1
add esp, 0x10
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x48]
add ecx, 0x10
mov dword [edx], ecx
mov ecx, ebx
call fcn.00458a90
add dword [ebx + 0xcc], eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x24]
add dword [esp + 0x34], eax
cmp dword [ecx - 0xc], 0
je 0x467313
mov edx, dword [ebp + 8]
push edx
push 1
lea eax, [esp + 0x3c]
push eax
mov ecx, ebx
mov dword [ebx + 0xd0], 1
call fcn.00465940
mov ecx, dword [esp + 0x34]
mov edx, dword [ebx + 0xcc]
mov eax, dword [ebx + 0xb8]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0x44], edx
mov dword [esp + 0x3c], eax
add esi, 0xfffffff0
mov byte [esp + 0x190], 5
lea ecx, [esi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x467337
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
mov eax, dword [esp + 0x24]
cmp dword [eax - 0xc], 0
jne 0x466e60
mov ecx, dword [esp + 0xa4]
cmp dword [ecx - 0xc], 0
je 0x468d5f
mov ecx, dword [ebx + 0x40]
cmp dword [ecx - 0xc], 0
mov esi, dword [ecx - 0x10]
lea edi, [ebx + 0x40]
lea eax, [ecx - 0x10]
je 0x4673ad
cmp dword [eax + 0xc], 0
lea edx, [eax + 0xc]
jge 0x467389
cmp dword [ecx - 8], 0
jl 0x468f74
mov dword [ecx - 0xc], 0
mov edx, dword [edi]
mov byte [edx], 0
jmp 0x4673ad
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x46739f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0xc]
mov ecx, esi
call eax
add eax, 0x10
mov dword [edi], eax
xor eax, eax
lea ecx, [esp + 0x30]
push ecx
mov dword [esp + 0x34], eax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xa8]
push edi
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x20], esp
mov esi, esp
push eax
call fcn.00401b70
add eax, 0x10
add esp, 4
mov ecx, ebx
mov dword [esi], eax
call fcn.0045aad0
mov esi, eax
test esi, esi
je 0x468d5f
mov edx, dword [edi]
cmp dword [edx - 0xc], 0
je 0x467a75
mov eax, dword [esp + 0x30]
push eax
mov ecx, ebx
call fcn.00466780
test eax, eax
je 0x468d5f
xor eax, eax
cmp dword [esp + 0x30], eax
jne case.0x467425.5
add esi, 0xffffffff
cmp esi, 0x16
ja case.0x467425.5
jmp dword [esi*4 + 0x468f90]
shl dword [ebx + 0x48], 1
mov eax, 0x384
cmp dword [ebx + 0x48], eax
jle case.0x467425.5
mov ecx, ebx
mov dword [ebx + 0x48], eax
call fcn.004558f0
jmp 0x468d5f
xor ecx, ecx
cmp dword [ebx + 0x4c], eax
sete cl
mov dword [ebx + 0x4c], ecx
mov ecx, ebx
call fcn.004558f0
jmp 0x468d5f
xor edx, edx
cmp dword [ebx + 0x50], eax
mov ecx, ebx
sete dl
mov dword [ebx + 0x50], edx
call fcn.004558f0
jmp 0x468d5f
xor ecx, ecx
cmp dword [ebx + 0x54], eax
sete cl
mov dword [ebx + 0x54], ecx
mov ecx, ebx
call fcn.004558f0
jmp 0x468d5f
mov edx, dword [esp + 0x18]
cmp dword [edx - 0xc], eax
jle case.0x467425.5
mov edi, 1
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0xe8]
push eax
mov ecx, ebx
call fcn.0045f4a0
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x194], 0xa
call fcn.004025f0
lea ecx, [esp + 0xdc]
mov byte [esp + 0x190], 5
call fcn.00401340
mov ecx, dword [esp + 0x2c]
cmp dword [ecx - 0xc], 0
je 0x4676a0
lea edx, [esp + 0x2c]
push str.face
push edx
call fcn.00401be0
add esp, 8
test al, al
je 0x467574
push ecx
lea esi, [ebx + 0x5c]
mov ecx, esp
mov dword [esp + 0x34], esp
push esi
call fcn.00402120
push ecx
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov byte [esp + 0x19c], 0xb
call fcn.00402120
lea ecx, [esp + 0xb4]
push ecx
mov ecx, ebx
mov byte [esp + 0x19c], 5
call fcn.0045aef0
push eax
mov ecx, esi
mov byte [esp + 0x194], 0xc
call fcn.00402890
lea ecx, [esp + 0xac]
mov byte [esp + 0x190], 5
call fcn.00401340
jmp 0x4676a0
lea edx, [esp + 0x2c]
push str.size
push edx
call fcn.00401be0
add esp, 8
test al, al
je 0x4675a3
mov eax, dword [ebx + 0x44]
push edi
push eax
lea ecx, [esp + 0x30]
push ecx
mov ecx, ebx
call fcn.0045ec20
mov dword [ebx + 0x44], eax
jmp 0x4676a0
lea edx, [esp + 0x2c]
push str.color
push edx
call fcn.00401be0
add esp, 8
test al, al
je 0x4675f0
cmp dword [ebx + 0x148], 0
je 0x4675da
mov eax, dword [ebx + 0x60]
push eax
lea ecx, [esp + 0x2c]
push ecx
mov ecx, ebx
call fcn.0045ea50
mov dword [ebx + 0x60], eax
jmp 0x4676a0
push 0
push 0x596192
mov ecx, ebx
call fcn.0045e3f0
mov dword [ebx + 0x60], eax
jmp 0x4676a0
lea edx, [esp + 0x2c]
push str.style
push edx
call fcn.00401be0
add esp, 8
test al, al
je 0x467617
lea eax, [esp + 0x28]
push eax
mov ecx, ebx
call fcn.004588a0
jmp 0x4676a0
lea ecx, [esp + 0x2c]
push str.weight
push ecx
call fcn.00401be0
add esp, 8
test al, al
je 0x467642
mov edx, dword [ebx + 0x48]
push edx
lea eax, [esp + 0x2c]
push eax
mov ecx, ebx
call fcn.004582b0
mov dword [ebx + 0x48], eax
jmp 0x4676a0
lea ecx, [esp + 0x2c]
push str.bkgnd
push ecx
call fcn.00401be0
add esp, 8
test al, al
je 0x4676a0
lea edx, [esp + 0x28]
push str.transparent
push edx
call fcn.00401be0
add esp, 8
test al, al
je 0x467678
mov eax, dword [esp + 0x28]
cmp dword [eax - 0xc], 0
je 0x467681
cmp dword [ebx + 0x148], 0
jne 0x467686
mov dword [ebx + 0x78], edi
jmp 0x4676a0
mov ecx, dword [ebx + 0x64]
push ecx
lea edx, [esp + 0x2c]
push edx
mov ecx, ebx
mov dword [ebx + 0x78], 2
call fcn.0045ea50
mov dword [ebx + 0x64], eax
mov eax, dword [esp + 0x18]
mov eax, dword [eax - 0xc]
cmp dword [esp + 0x10], eax
jl 0x4674a3
mov ecx, ebx
call fcn.004558f0
jmp 0x468d5f
mov ecx, ebx
mov dword [ebx + 0x84], eax
call fcn.004558f0
jmp 0x468d5f
mov ecx, ebx
mov dword [ebx + 0x84], 1
call fcn.004558f0
jmp 0x468d5f
mov ecx, ebx
mov dword [ebx + 0x84], 2
call fcn.004558f0
jmp 0x468d5f
mov ecx, ebx
mov dword [ebx + 0x84], 3
call fcn.004558f0
jmp 0x468d5f
mov ecx, ebx
mov dword [ebx + 0x88], 3
call fcn.004558f0
jmp 0x468d5f
mov ecx, ebx
mov dword [ebx + 0x88], eax
call fcn.004558f0
jmp 0x468d5f
mov ecx, ebx
mov dword [ebx + 0x88], 1
call fcn.004558f0
jmp 0x468d5f
mov ecx, ebx
mov dword [ebx + 0x88], 2
call fcn.004558f0
jmp 0x468d5f
mov ecx, dword [esp + 0xa4]
push edi
push ecx
mov ecx, ebx
call fcn.00464920
mov ecx, ebx
call fcn.004558f0
jmp 0x468d5f
mov edx, dword [esp + 0x18]
cmp dword [edx - 0xc], eax
jle case.0x467425.5
mov edi, edi
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0xe4]
push eax
mov ecx, ebx
call fcn.0045f4a0
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x194], 0xd
call fcn.004025f0
lea ecx, [esp + 0xd8]
mov byte [esp + 0x190], 5
call fcn.00401340
lea ecx, [esp + 0x2c]
push 0x5a0574
push ecx
call fcn.00401be0
add esp, 8
test al, al
je 0x467880
push edi
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x596192
call fcn.00402a30
push ecx
lea edx, [esp + 0x34]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
mov byte [esp + 0x1a0], 0xe
call fcn.00402120
lea eax, [esp + 0xfc]
push eax
mov ecx, ebx
mov byte [esp + 0x1a0], 5
call fcn.0045aef0
push eax
lea ecx, [esp + 0xc0]
push 0x596b3c
push ecx
mov byte [esp + 0x1a0], 0xf
call fcn.004027b0
add esp, 0xc
mov eax, dword [eax]
push eax
mov ecx, ebx
mov byte [esp + 0x198], 0x10
call fcn.00464920
lea ecx, [esp + 0xb8]
call fcn.00401340
lea ecx, [esp + 0xf0]
mov byte [esp + 0x190], 5
call fcn.00401340
mov edx, dword [esp + 0x18]
mov eax, dword [edx - 0xc]
cmp dword [esp + 0x10], eax
jl 0x467790
mov ecx, ebx
call fcn.004558f0
jmp 0x468d5f
lea esi, [ebx + 0xb4]
mov ecx, esi
mov dword [ebx + 0xb0], 2
call fcn.00401a90
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
jle 0x467a2f
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0xcc]
push ecx
mov ecx, ebx
call fcn.0045f4a0
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x194], 0x11
call fcn.004025f0
lea ecx, [esp + 0xc0]
mov byte [esp + 0x190], 5
call fcn.00401340
mov edx, dword [esp + 0x2c]
cmp dword [edx - 0xc], 0
je 0x467a1e
lea eax, [esp + 0x2c]
push str.href
push eax
call fcn.00401be0
add esp, 8
test al, al
je 0x467999
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x596192
mov dword [ebx + 0xb0], 1
call fcn.00402a30
push ecx
lea edx, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
mov byte [esp + 0x19c], 0x12
call fcn.00402120
lea eax, [esp + 0xe8]
push eax
mov ecx, ebx
mov byte [esp + 0x19c], 5
call fcn.0045aef0
push eax
mov ecx, esi
mov byte [esp + 0x194], 0x13
call fcn.00402890
lea ecx, [esp + 0xe0]
mov byte [esp + 0x190], 5
call fcn.00401340
lea ecx, [esp + 0x2c]
push 0x5a0568
push ecx
call fcn.00401be0
add esp, 8
test al, al
je 0x467a1e
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x596192
mov dword [ebx + 0xb0], 2
call fcn.00402a30
push ecx
lea edx, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
mov byte [esp + 0x19c], 0x14
call fcn.00402120
lea eax, [esp + 0xd0]
push eax
mov ecx, ebx
mov byte [esp + 0x19c], 5
call fcn.0045aef0
push eax
mov ecx, esi
mov byte [esp + 0x194], 0x15
call fcn.00402890
lea ecx, [esp + 0xc8]
mov byte [esp + 0x190], 5
call fcn.00401340
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx - 0xc]
cmp dword [esp + 0x10], eax
jl 0x4678c2
add dword [ebx + 0x180], 1
mov eax, dword [ebx + 0x180]
cmp eax, dword [ebx + 0x17c]
push edi
jne 0x467a5d
push str.a:hover
mov ecx, ebx
call fcn.00464920
mov ecx, ebx
call fcn.004558f0
jmp 0x468d5f
push str.a:link
mov ecx, ebx
call fcn.00464920
mov ecx, ebx
call fcn.004558f0
jmp 0x468d5f
call fcn.00512f10
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x468f83
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x90], eax
call fcn.00512f10
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x468f83
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x94], eax
lea ecx, [esp + 0x10c]
call fcn.00457ed0
lea eax, [esi - 6]
cmp eax, 0xe
mov byte [esp + 0x190], 0x17
ja case.0x467aea.9
movzx ecx, byte [eax + 0x46900c]
jmp dword [ecx*4 + 0x468fec]
push edi
lea ecx, [esp + 0x110]
call fcn.0045ac90
lea edx, [esp + 0x10c]
push edx
push 0x59fd4c
mov ecx, ebx
mov dword [esp + 0x164], 1
call fcn.00464920
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
mov esi, 0x64
lea edi, [esi - 0x63]
jle 0x467c71
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0xf0]
push ecx
mov ecx, ebx
call fcn.0045f4a0
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x194], 0x18
call fcn.004025f0
mov eax, dword [esp + 0xe4]
add eax, 0xfffffff0
mov byte [esp + 0x190], 0x17
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x467b8e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x2c]
cmp dword [eax - 0xc], 0
je 0x467c5c
push str.width
push eax
call fcn.0053fceb
add esp, 8
test eax, eax
sete al
test al, al
je 0x467bd8
lea ecx, [esp + 0x28]
push ecx
mov ecx, ebx
call fcn.00458a50
push 0
push 0x64
lea edx, [esp + 0x30]
push edx
mov ecx, ebx
mov edi, eax
call fcn.0045ec20
mov esi, eax
jmp 0x467c5c
mov eax, dword [esp + 0x2c]
push str.size
push eax
call fcn.0053fceb
add esp, 8
test eax, eax
sete al
test al, al
je 0x467c12
mov ecx, dword [esp + 0x15c]
push 0
push ecx
lea edx, [esp + 0x30]
push edx
mov ecx, ebx
call fcn.0045ec20
mov dword [esp + 0x15c], eax
jmp 0x467c5c
lea eax, [esp + 0x2c]
push str.color
push eax
call fcn.00401be0
add esp, 8
test al, al
je 0x467c5c
cmp dword [ebx + 0x148], 0
je 0x467c47
mov ecx, dword [esp + 0x12c]
push ecx
lea edx, [esp + 0x2c]
push edx
mov ecx, ebx
call fcn.0045ea50
jmp 0x467c55
push 0
push 0x596192
mov ecx, ebx
call fcn.0045e3f0
mov dword [esp + 0x12c], eax
mov eax, dword [esp + 0x18]
mov eax, dword [eax - 0xc]
cmp dword [esp + 0x10], eax
jl 0x467b33
test edi, edi
je 0x467c9b
cmp dword [ebx + 0x168], 1
jne 0x467c87
add dword [ebx + 0xc4], esi
mov esi, 1
jmp 0x467c9b
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 8]
sub ecx, dword [eax]
push 0x64
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov esi, eax
mov eax, dword [ebx + 0x168]
cmp eax, 1
jne 0x467cd7
mov eax, dword [esp + 0x15c]
mov ecx, dword [ebx + 0xbc]
add eax, 8
cmp ecx, eax
jle 0x467cbc
mov eax, ecx
mov edx, dword [ebx + 0x84]
add dword [esp + 0x34], esi
mov dword [ebx + 0xbc], eax
mov dword [ebx + 0xc8], edx
jmp case.0x467aea.9
test eax, eax
jne 0x467d1b
mov eax, dword [ebx + 0xbc]
mov ecx, dword [esp + 0x38]
cdq
sub eax, edx
mov edx, dword [esp + 0x15c]
push edx
push 1
sar eax, 1
add eax, ecx
mov ecx, dword [esp + 0x134]
push ecx
mov ecx, dword [esp + 0x40]
push eax
lea edx, [esi + ecx]
push edx
push eax
mov eax, dword [ebx + 0x160]
push ecx
push eax
lea ecx, [ebx + 0xd4]
call fcn.00451970
add dword [esp + 0x34], esi
jmp case.0x467aea.9
mov ecx, dword [esp + 0x18]
cmp dword [ecx - 0xc], 0
mov eax, 1
je 0x467d7b
push eax
lea edx, [esp + 0xd4]
push edx
lea ecx, [esp + 0x20]
call fcn.004207b0
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x194], 0x19
call fcn.004025f0
lea ecx, [esp + 0xd0]
mov byte [esp + 0x190], 0x17
call fcn.00401340
push 0
push 1
lea eax, [esp + 0x20]
push eax
mov ecx, ebx
call fcn.0045ec20
mov ecx, dword [ebp + 8]
push ecx
push eax
lea edx, [esp + 0x3c]
push edx
mov ecx, ebx
mov dword [ebx + 0xd0], 0
call fcn.00465940
mov eax, dword [esp + 0x34]
mov ecx, dword [ebx + 0xcc]
mov edx, dword [ebx + 0xb8]
mov dword [esp + 0xa0], eax
mov dword [esp + 0x44], ecx
mov dword [esp + 0x3c], edx
jmp case.0x467aea.9
mov ecx, dword [esp + 0x18]
cmp dword [ecx - 0xc], 0
mov eax, 1
je 0x467e11
push eax
lea edx, [esp + 0xf0]
push edx
lea ecx, [esp + 0x20]
call fcn.004207b0
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x194], 0x1a
call fcn.004025f0
lea ecx, [esp + 0xec]
mov byte [esp + 0x190], 0x17
call fcn.00401340
push 0
push 1
lea eax, [esp + 0x20]
push eax
mov ecx, ebx
call fcn.0045ec20
push eax
lea ecx, [esp + 0x38]
push ecx
mov ecx, ebx
call fcn.00453510
jmp case.0x467aea.9
xor esi, esi
mov ecx, 1
mov eax, 0x64
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], ecx
lea ecx, [esp + 0x90]
mov dword [esp + 0x58], esi
mov dword [esp + 0x5c], esi
mov dword [esp + 0x60], esi
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x8c], 0xff00ff
mov dword [esp + 0x80], esi
mov dword [esp + 0x78], esi
mov dword [esp + 0x7c], esi
call fcn.00401a90
lea ecx, [esp + 0x94]
call fcn.00401a90
lea edx, [esp + 0x54]
push edx
lea eax, [esp + 0x1c]
push eax
mov ecx, ebx
call fcn.0045fc40
mov eax, dword [esp + 0x58]
cmp eax, esi
mov ecx, dword [esp + 0x90]
mov edi, dword [esp + 0x60]
mov edx, dword [esp + 0x5c]
jne 0x467ebc
cmp edx, esi
jne 0x467ebc
cmp edi, esi
jne 0x467ebc
cmp dword [ecx - 0xc], esi
je case.0x467aea.9
cmp eax, esi
mov dword [esp + 0x14], 1
je 0x467ed8
push eax
mov ecx, ebx
call fcn.00455710
mov edx, eax
mov dword [esp + 0x10], edx
jmp 0x467f1d
cmp dword [ecx - 0xc], esi
je 0x467eed
push ecx
mov ecx, ebx
call fcn.004531a0
mov edx, eax
mov dword [esp + 0x10], edx
jmp 0x467f1d
cmp edx, esi
je 0x467f09
mov ecx, dword [esp + 0x94]
push ecx
push edx
mov ecx, ebx
call fcn.004531c0
mov edx, eax
mov dword [esp + 0x10], edx
jmp 0x467f1d
cmp edi, esi
je case.0x467aea.9
xor esi, esi
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], esi
mov edx, edi
cmp edx, esi
je case.0x467aea.9
lea eax, [esp + 0x54]
push eax
mov ecx, ebx
call fcn.004536b0
mov edi, eax
lea eax, [esp + 0x1c]
push eax
lea ecx, [ebx + 0xd4]
push edx
mov dword [esp + 0x38], edi
call fcn.0044feb0
cmp dword [esp + 0x84], 0
je 0x467f6c
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x1c]
push 0x64
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov esi, eax
mov dword [esp + 0x6c], esi
jmp 0x467f70
mov esi, dword [esp + 0x6c]
cmp dword [esp + 0x88], 0
mov eax, dword [esp + 0x70]
je 0x467f90
mov ecx, dword [esp + 0x20]
push 0x64
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [esp + 0x70], eax
test esi, esi
je 0x467fb6
test eax, eax
je 0x467fb6
test edi, edi
je 0x467fb6
mov ecx, dword [ebx + 0x194]
mov edx, dword [ebx + 0x198]
add ecx, esi
add edx, eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
jmp 0x467fba
mov ecx, dword [esp + 0x1c]
mov eax, dword [ebx + 0x150]
mov esi, dword [esp + 0x34]
mov edx, dword [esp + 0xa8]
sub eax, esi
add eax, edx
cmp dword [ebx + 0x170], 0
je 0x46801f
sub eax, ecx
jns 0x46801f
test edx, edx
je 0x46801f
mov edx, dword [ebp + 8]
push edx
push 1
lea eax, [esp + 0x3c]
push eax
mov ecx, ebx
mov dword [ebx + 0xd0], 1
call fcn.00465940
mov ecx, dword [ebx + 0xcc]
mov esi, dword [esp + 0x34]
mov edx, dword [ebx + 0xb8]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xa0], esi
mov dword [esp + 0x3c], edx
sub dword [esp + 0x3c], ecx
cmp dword [ebx + 0x168], 1
jne 0x468038
mov eax, dword [ebx + 0x84]
mov dword [ebx + 0xc8], eax
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x38]
push ecx
push edx
mov ecx, ebx
call fcn.00453480
cmp dword [esp + 0x6c], 0
mov edi, eax
je 0x46811f
cmp dword [esp + 0x70], 0
je 0x46811f
cmp dword [ebx + 0x168], 0
jne 0x46811f
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
add eax, edi
push eax
add ecx, esi
push ecx
push edi
push esi
mov ecx, ebx
call fcn.00466680
cmp dword [ebx + 0xb0], 0
je 0x4680a6
mov edx, dword [ebx + 0x180]
cmp edx, dword [ebx + 0x17c]
jne 0x4680a6
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x78], eax
jmp 0x4680aa
mov eax, dword [esp + 0x78]
cmp dword [ebx + 0x148], 0
jne 0x4680bf
and eax, 0xff00
or eax, 8
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [ebx + 0x1a0]
push ecx
mov ecx, dword [ebx + 0x19c]
push edx
mov edx, dword [ebx + 0x198]
push ecx
mov ecx, dword [ebx + 0x194]
push edx
mov edx, dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x94]
push edx
mov edx, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0xa8]
push eax
mov eax, dword [esp + 0x90]
push ecx
mov ecx, dword [esp + 0x90]
push edx
mov edx, dword [ebx + 0x160]
push eax
push ecx
push edi
push esi
push edx
lea ecx, [ebx + 0xd4]
call fcn.00452a60
add esi, dword [esp + 0x1c]
mov dword [esp + 0x34], esi
cmp dword [esp + 0x14], 0
je case.0x467aea.9
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp case.0x467aea.9
xor edi, edi
mov eax, 0x64
mov esi, 1
lea ecx, [esp + 0x90]
mov dword [esp + 0x58], edi
mov dword [esp + 0x5c], edi
mov dword [esp + 0x60], edi
mov dword [esp + 0x6c], eax
mov dword [esp + 0x84], esi
mov dword [esp + 0x70], eax
mov dword [esp + 0x88], esi
mov dword [esp + 0x78], edi
mov dword [esp + 0x7c], edi
call fcn.00401a90
lea ecx, [esp + 0x94]
call fcn.00401a90
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0x1c]
push edx
mov ecx, ebx
call fcn.0045fc40
cmp dword [esp + 0x58], edi
jne 0x4681c3
cmp dword [esp + 0x5c], edi
jne 0x4681c3
cmp dword [esp + 0x60], edi
jne 0x4681c3
mov eax, dword [esp + 0x90]
cmp dword [eax - 0xc], edi
je case.0x467aea.9
cmp dword [esp + 0x84], edi
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x14], esi
mov esi, dword [esp + 0x70]
mov eax, esi
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
je 0x4681fe
push 0x64
push ecx
push 0xb
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x1c], ecx
cmp dword [esp + 0x88], edi
je 0x468221
push 0x64
push esi
push 0xc
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
cmp dword [esp + 0x58], edi
je 0x468239
push eax
push ecx
mov ecx, dword [esp + 0x60]
push ecx
mov ecx, ebx
call fcn.004556d0
mov edx, eax
jmp 0x468289
mov edx, dword [esp + 0x90]
cmp dword [edx - 0xc], edi
je 0x468255
push eax
push ecx
mov eax, edx
push eax
mov ecx, ebx
call fcn.00453100
mov edx, eax
jmp 0x468289
cmp dword [esp + 0x5c], edi
je 0x468275
mov edx, dword [esp + 0x94]
push edx
push eax
mov eax, dword [esp + 0x64]
push ecx
push eax
mov ecx, ebx
call fcn.00453120
mov edx, eax
jmp 0x468289
cmp dword [esp + 0x60], edi
je case.0x467aea.9
mov edx, dword [esp + 0x60]
xor edi, edi
mov dword [esp + 0x14], edi
cmp edx, edi
mov dword [esp + 0x40], edx
je case.0x467aea.9
lea ecx, [esp + 0x54]
push ecx
mov ecx, ebx
call fcn.004536b0
mov edi, eax
lea eax, [esp + 0x1c]
push eax
lea ecx, [ebx + 0xd4]
push edx
mov dword [esp + 0x38], edi
call fcn.0044fe30
mov esi, dword [esp + 0x1c]
test esi, esi
mov eax, dword [esp + 0x20]
mov dword [esp + 0x6c], esi
mov dword [esp + 0x70], eax
je 0x4682e8
test eax, eax
je 0x4682e8
test edi, edi
je 0x4682e8
add esi, dword [ebx + 0x194]
add eax, dword [ebx + 0x198]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], eax
mov eax, dword [ebx + 0x150]
mov edi, dword [esp + 0x34]
mov ecx, dword [esp + 0xa8]
sub eax, edi
add eax, ecx
cmp dword [ebx + 0x170], 0
je 0x46834d
sub eax, esi
jns 0x46834d
test ecx, ecx
je 0x46834d
mov ecx, dword [ebp + 8]
push ecx
push 1
lea edx, [esp + 0x3c]
push edx
mov ecx, ebx
mov dword [ebx + 0xd0], 1
call fcn.00465940
mov edi, dword [esp + 0x34]
mov eax, dword [ebx + 0xcc]
mov ecx, dword [ebx + 0xb8]
mov esi, dword [esp + 0x1c]
mov dword [esp + 0xa0], edi
mov dword [esp + 0x44], eax
mov dword [esp + 0x3c], ecx
sub dword [esp + 0x3c], esi
cmp dword [ebx + 0x168], 1
jne 0x468366
mov edx, dword [ebx + 0x84]
mov dword [ebx + 0xc8], edx
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x38]
push eax
push ecx
mov ecx, ebx
call fcn.00453480
cmp dword [esp + 0x6c], 0
mov dword [esp + 0x10], eax
je 0x468443
cmp dword [esp + 0x70], 0
je 0x468443
cmp dword [ebx + 0x168], 0
jne 0x468443
mov edx, dword [esp + 0x20]
add edx, eax
push edx
add esi, edi
push esi
push eax
push edi
mov ecx, ebx
call fcn.00466680
cmp dword [ebx + 0xb0], 0
je 0x4683d2
mov eax, dword [ebx + 0x180]
cmp eax, dword [ebx + 0x17c]
jne 0x4683d2
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x78], eax
jmp 0x4683d6
mov eax, dword [esp + 0x78]
cmp dword [ebx + 0x148], 0
jne 0x4683eb
and eax, 0xff00
or eax, 8
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [ebx + 0x1a0]
push ecx
mov ecx, dword [ebx + 0x19c]
push edx
mov edx, dword [ebx + 0x198]
push ecx
mov ecx, dword [ebx + 0x194]
push edx
mov edx, dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x84]
push edx
mov edx, dword [esp + 0x84]
push eax
mov eax, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x30]
push ecx
mov ecx, dword [ebx + 0x160]
push edx
push eax
push edi
push ecx
lea ecx, [ebx + 0xd4]
call fcn.00452d00
mov esi, dword [esp + 0x1c]
add edi, esi
cmp dword [esp + 0x14], 0
mov dword [esp + 0x34], edi
je case.0x467aea.9
mov edx, dword [esp + 0x40]
push edx
call dword [sym.imp.USER32.dll_DestroyIcon]
jmp case.0x467aea.9
xor edi, edi
mov eax, 0x64
mov esi, 1
lea ecx, [esp + 0x90]
mov dword [esp + 0x54], edi
mov dword [esp + 0x58], edi
mov dword [esp + 0x5c], edi
mov dword [esp + 0x60], edi
mov dword [esp + 0x6c], eax
mov dword [esp + 0x84], esi
mov dword [esp + 0x70], eax
mov dword [esp + 0x88], esi
mov dword [esp + 0x74], edi
mov dword [esp + 0x80], edi
mov dword [esp + 0x8c], 0xff00ff
mov dword [esp + 0x64], edi
mov dword [esp + 0x68], edi
mov dword [esp + 0x78], edi
mov dword [esp + 0x7c], edi
call fcn.00401a90
lea ecx, [esp + 0x94]
call fcn.00401a90
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x1c]
push ecx
mov ecx, ebx
call fcn.0045fc40
lea edx, [esp + 0x54]
push edx
mov ecx, ebx
call fcn.004536b0
mov ecx, dword [esp + 0x58]
cmp ecx, edi
mov edx, dword [esp + 0x90]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x5c]
jne 0x46875f
cmp eax, edi
jne 0x46875f
cmp dword [esp + 0x60], edi
jne 0x46875b
cmp dword [edx - 0xc], edi
jne 0x46875b
cmp dword [ebx + 0x120], edi
je case.0x467aea.9
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
mov eax, dword [ebx + 0x120]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_GetImageCount]
mov ecx, dword [esp + 0x54]
cmp ecx, eax
jge case.0x467aea.9
push edi
push ecx
mov ecx, dword [ebx + 0x120]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_GetIcon]
cmp eax, edi
mov dword [esp + 0x40], eax
je case.0x467aea.9
cmp dword [esp + 0x84], edi
mov esi, dword [esp + 0x6c]
mov eax, dword [esp + 0x70]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], eax
je 0x4685a0
mov edx, dword [ebx + 0x124]
push 0x64
push esi
push edx
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov esi, eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x1c], esi
cmp dword [esp + 0x88], edi
je 0x4685c5
mov eax, dword [esp + 0x70]
mov ecx, dword [ebx + 0x128]
push 0x64
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
cmp esi, edi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], eax
je 0x4685f3
cmp eax, edi
je 0x4685f3
cmp dword [esp + 0x30], edi
je 0x4685f3
mov ecx, dword [ebx + 0x194]
add ecx, esi
mov dword [esp + 0x4c], ecx
mov ecx, dword [ebx + 0x198]
add ecx, eax
mov dword [esp + 0x50], ecx
mov eax, dword [ebx + 0x150]
mov edi, dword [esp + 0x34]
mov ecx, dword [esp + 0xa8]
sub eax, edi
add eax, ecx
cmp dword [ebx + 0x170], 0
je 0x46865a
sub eax, dword [esp + 0x4c]
jns 0x46865a
test ecx, ecx
je 0x46865a
mov edx, dword [ebp + 8]
push edx
push 1
lea eax, [esp + 0x3c]
push eax
mov ecx, ebx
mov dword [ebx + 0xd0], 1
call fcn.00465940
mov edi, dword [esp + 0x34]
mov ecx, dword [ebx + 0xcc]
mov edx, dword [ebx + 0xb8]
mov esi, dword [esp + 0x1c]
mov dword [esp + 0xa0], edi
mov dword [esp + 0x44], ecx
mov dword [esp + 0x3c], edx
sub dword [esp + 0x3c], esi
cmp dword [ebx + 0x168], 1
jne 0x468673
mov eax, dword [ebx + 0x84]
mov dword [ebx + 0xc8], eax
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x38]
push ecx
push edx
mov ecx, ebx
call fcn.00453480
test esi, esi
mov dword [esp + 0x10], eax
je 0x468752
cmp dword [esp + 0x20], 0
je 0x468752
cmp dword [ebx + 0x168], 0
jne 0x468752
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x4c]
add eax, esi
push eax
add ecx, edi
push ecx
push esi
push edi
mov ecx, ebx
call fcn.00466680
cmp dword [ebx + 0xb0], 0
je 0x4686e4
mov edx, dword [ebx + 0x180]
cmp edx, dword [ebx + 0x17c]
jne 0x4686e4
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x78], eax
jmp 0x4686e8
mov eax, dword [esp + 0x78]
cmp dword [ebx + 0x148], 0
jne 0x4686fd
and eax, 0xff00
or eax, 8
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [ebx + 0x1a0]
push ecx
mov ecx, dword [ebx + 0x19c]
push edx
mov edx, dword [ebx + 0x198]
push ecx
mov ecx, dword [ebx + 0x194]
push edx
mov edx, dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x34]
push edx
mov edx, dword [esp + 0x34]
push eax
mov eax, dword [esp + 0x5c]
push eax
mov eax, dword [ebx + 0x160]
push ecx
push edx
push esi
push edi
push eax
lea ecx, [ebx + 0xd4]
call fcn.00452d00
mov ecx, dword [esp + 0x40]
push ecx
call dword [sym.imp.USER32.dll_DestroyIcon]
add edi, dword [esp + 0x4c]
jmp 0x468d01
mov eax, dword [esp + 0x5c]
cmp ecx, edi
mov dword [esp + 0x14], esi
je 0x468771
push ecx
mov ecx, ebx
call fcn.00455710
jmp 0x4687a8
cmp dword [edx - 0xc], edi
je 0x468780
push edx
mov ecx, ebx
call fcn.004531a0
jmp 0x4687a8
cmp eax, edi
je 0x468796
mov edx, dword [esp + 0x94]
push edx
push eax
mov ecx, ebx
call fcn.004531c0
jmp 0x4687a8
mov eax, dword [esp + 0x60]
cmp eax, edi
je case.0x467aea.9
xor edi, edi
mov dword [esp + 0x14], edi
cmp eax, edi
mov dword [esp + 0x10], eax
je case.0x467aea.9
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x1c]
push eax
lea ecx, [ebx + 0xd4]
push edx
call fcn.0044feb0
mov eax, dword [esp + 0x64]
test eax, eax
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov esi, dword [esp + 0x68]
jne 0x4687f5
test esi, esi
jne 0x4687ef
cmp edx, ecx
mov esi, edx
jl 0x4687e9
mov esi, ecx
mov dword [esp + 0x64], esi
jmp 0x4687fb
mov dword [esp + 0x64], esi
jmp 0x4687ff
test esi, esi
jne 0x4687ff
mov esi, eax
mov dword [esp + 0x68], esi
cmp dword [esp + 0x84], 0
je 0x468823
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x64]
push 0x64
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edi, eax
mov dword [esp + 0x6c], edi
jmp 0x468827
mov edi, dword [esp + 0x6c]
cmp dword [esp + 0x88], 0
je 0x468845
mov edx, dword [esp + 0x70]
push 0x64
push edx
push esi
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [esp + 0x70], eax
jmp 0x468849
mov eax, dword [esp + 0x70]
test edi, edi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], eax
je 0x468878
test eax, eax
je 0x468878
cmp dword [esp + 0x30], 0
je 0x468878
mov ecx, dword [ebx + 0x194]
add ecx, edi
mov dword [esp + 0x4c], ecx
mov ecx, dword [ebx + 0x198]
add ecx, eax
mov dword [esp + 0x50], ecx
mov eax, dword [esp + 0x1c]
cdq
idiv dword [esp + 0x64]
mov edi, eax
mov eax, dword [esp + 0x20]
cdq
idiv esi
mov esi, eax
mov eax, dword [esp + 0x74]
test eax, eax
je 0x468922
mov ecx, dword [ebx + 0x168]
cmp ecx, 1
jne 0x4688e1
mov ecx, dword [esp + 0x54]
mov edx, esi
imul edx, edi
mov dword [esp + 0x100], eax
lea eax, [esp + 0xf4]
mov dword [esp + 0xf4], ecx
push eax
lea ecx, [ebx + 0x260]
mov dword [esp + 0xfc], edx
mov dword [esp + 0x100], 0
call fcn.00463170
jmp 0x468922
test ecx, ecx
jne 0x468922
add dword [ebx + 0x184], 1
mov eax, dword [ebx + 0x184]
push eax
lea ecx, [ebx + 0x260]
call fcn.00453880
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov dword [esp + 0xf8], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0xfc], edx
mov dword [esp + 0x100], eax
mov dword [esp + 0x54], ecx
mov ecx, esi
imul ecx, edi
cmp dword [esp + 0x54], ecx
jge 0x468127
test edi, edi
je 0x468127
test esi, esi
je 0x468127
mov eax, dword [ebx + 0x150]
mov esi, dword [esp + 0x34]
mov ecx, dword [esp + 0xa8]
sub eax, esi
add eax, ecx
cmp dword [ebx + 0x170], 0
je 0x4689a4
sub eax, dword [esp + 0x4c]
jns 0x4689a4
test ecx, ecx
je 0x4689a4
mov edx, dword [ebp + 8]
push edx
push 1
lea eax, [esp + 0x3c]
push eax
mov ecx, ebx
mov dword [ebx + 0xd0], 1
call fcn.00465940
mov esi, dword [esp + 0x34]
mov ecx, dword [ebx + 0xcc]
mov edx, dword [ebx + 0xb8]
mov dword [esp + 0xa0], esi
mov dword [esp + 0x44], ecx
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0x4c]
sub dword [esp + 0x3c], eax
cmp dword [ebx + 0x168], 1
jne 0x4689c1
mov ecx, dword [ebx + 0x84]
mov dword [ebx + 0xc8], ecx
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x38]
push edx
push eax
mov ecx, ebx
call fcn.00453480
cmp dword [esp + 0x6c], 0
mov edi, eax
je 0x468abd
cmp dword [esp + 0x70], 0
je 0x468abd
cmp dword [ebx + 0x168], 0
jne 0x468abd
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x4c]
add ecx, edi
push ecx
add edx, esi
push edx
push edi
push esi
mov ecx, ebx
call fcn.00466680
cmp dword [ebx + 0xb0], 0
je 0x468a2f
mov eax, dword [ebx + 0x180]
cmp eax, dword [ebx + 0x17c]
jne 0x468a2f
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x78], eax
jmp 0x468a33
mov eax, dword [esp + 0x78]
cmp dword [ebx + 0x148], 0
jne 0x468a48
and eax, 0xff00
or eax, 8
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [ebx + 0x1a0]
push ecx
mov ecx, dword [ebx + 0x19c]
push edx
mov edx, dword [ebx + 0x198]
push ecx
mov ecx, dword [ebx + 0x194]
push edx
mov edx, dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x94]
push edx
mov edx, dword [esp + 0x80]
push eax
mov eax, dword [esp + 0xa8]
push eax
mov eax, dword [esp + 0x84]
push ecx
mov ecx, dword [esp + 0x78]
push edx
mov edx, dword [esp + 0x38]
push eax
mov eax, dword [esp + 0x9c]
push ecx
mov ecx, dword [esp + 0x9c]
push edx
mov edx, dword [ebx + 0x160]
push eax
push ecx
push edi
push esi
push edx
lea ecx, [ebx + 0xd4]
call fcn.00452f50
add esi, dword [esp + 0x4c]
jmp 0x468123
lea ecx, [esp + 0x24]
xor esi, esi
call fcn.00401a90
mov ecx, dword [esp + 0x18]
cmp dword [ecx - 0xc], esi
jle case.0x467aea.9
mov edi, edi
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0xbc]
push edx
mov ecx, ebx
call fcn.0045f4a0
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x194], 0x1b
call fcn.004025f0
mov eax, dword [esp + 0xb0]
add eax, 0xfffffff0
mov byte [esp + 0x190], 0x17
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x468b3b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x2c]
cmp dword [eax - 0xc], 0
je 0x468c25
push str.idres
push eax
call fcn.0053fceb
add esp, 8
test eax, eax
sete al
test al, al
je 0x468b76
push 0
push esi
lea ecx, [esp + 0x30]
push ecx
mov ecx, ebx
call fcn.0045ec20
mov esi, eax
jmp 0x468c25
mov edx, dword [esp + 0x2c]
push str.iddll
push edx
call fcn.0053fceb
add esp, 8
test eax, eax
sete al
test al, al
je 0x468ba8
push 0
push 0
lea eax, [esp + 0x30]
push eax
mov ecx, ebx
call fcn.0045ec20
mov esi, eax
jmp 0x468c25
lea ecx, [esp + 0x2c]
push str.srcdll
push ecx
call fcn.00401be0
add esp, 8
test al, al
je 0x468c25
push ecx
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00402120
push ecx
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov byte [esp + 0x19c], 0x1c
call fcn.00402120
lea ecx, [esp + 0xbc]
push ecx
mov ecx, ebx
mov byte [esp + 0x19c], 0x17
call fcn.0045aef0
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x194], 0x1d
call fcn.004025f0
lea ecx, [esp + 0xb4]
mov byte [esp + 0x190], 0x17
call fcn.00401340
mov edx, dword [esp + 0x18]
mov eax, dword [edx - 0xc]
cmp dword [esp + 0x10], eax
jl 0x468ae0
test esi, esi
je case.0x467aea.9
push esi
lea eax, [esp + 0xc0]
push eax
mov ecx, ebx
call fcn.0045df40
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x194], 0x1e
call fcn.004025f0
lea ecx, [esp + 0xbc]
mov byte [esp + 0x190], 0x17
call fcn.00401340
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx - 0xc]
test eax, eax
je case.0x467aea.9
lea edx, [esp + 0x1c]
push edx
push eax
mov eax, dword [ebx + 0x160]
push ecx
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
cmp dword [ebx + 0x168], 1
jne 0x468cac
mov ecx, dword [ebx + 0x84]
mov dword [ebx + 0xc8], ecx
mov edi, dword [esp + 0x20]
mov edx, dword [esp + 0x38]
push edi
push edx
mov ecx, ebx
call fcn.004533d0
cmp dword [ebx + 0x168], 0
mov esi, eax
jne 0x468cf9
mov eax, dword [esp + 0x1c]
add edi, esi
push edi
mov edi, dword [esp + 0x38]
add eax, edi
push eax
push esi
push edi
mov ecx, ebx
call fcn.00466680
mov eax, dword [esp + 0x24]
mov ecx, dword [eax - 0xc]
push ecx
mov ecx, dword [ebx + 0x160]
push eax
push esi
push edi
push ecx
call dword [sym.imp.GDI32.dll_TextOutA]
jmp 0x468cfd
mov edi, dword [esp + 0x34]
add edi, dword [esp + 0x1c]
mov dword [esp + 0x34], edi
lea ecx, [esp + 0x10c]
call fcn.00457f60
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
mov byte [esp + 0x190], 5
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x468d3c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x90]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x468d5f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [edx - 0xc]
cmp dword [esp + 0x9c], eax
jl 0x466ce0
mov eax, dword [esp + 0xa0]
cmp eax, dword [esp + 0x34]
je 0x468d9d
mov ecx, dword [ebp + 8]
push ecx
push 1
lea edx, [esp + 0x3c]
push edx
mov ecx, ebx
mov dword [ebx + 0xd0], 0
call fcn.00465940
mov eax, dword [ebx + 0x160]
push 0
push 0
push eax
call dword [sym.imp.GDI32.dll_SetTextJustification]
mov eax, dword [esp + 0x38]
mov ecx, dword [ebp + 0x10]
sub eax, dword [ecx + 4]
mov edx, dword [ebp + 8]
mov dword [edx + 4], eax
mov eax, dword [esp + 0xc4]
cmp eax, dword [ebx + 0x174]
mov dword [esp + 0x9c], eax
jge 0x468e8b
lea ecx, [eax*8]
sub ecx, eax
add ecx, ecx
add ecx, ecx
mov dword [esp + 0x48], ecx
lea esp, [esp]
mov eax, dword [ebx + 0x234]
test eax, eax
je 0x468e1e
mov ecx, dword [ebx + 0x238]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x9c], eax
jb 0x468e23
call fcn.005416ed
mov esi, dword [ebx + 0x234]
add esi, dword [esp + 0x48]
mov ecx, 7
lea edi, [ebx + 0xb8]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0xc4]
test eax, eax
je 0x468e69
mov esi, dword [ebp + 8]
mov ecx, dword [esi]
push 0x64
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
add dword [ebx + 0xb8], eax
mov eax, dword [ebx + 0xb8]
mov ecx, dword [esi]
cmp ecx, eax
jle 0x468e67
mov eax, ecx
mov dword [esi], eax
mov eax, dword [esp + 0x9c]
add dword [esp + 0x48], 0x1c
add eax, 1
cmp eax, dword [ebx + 0x174]
mov dword [esp + 0x9c], eax
jl 0x468df0
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
mov byte [esp + 0x190], 4
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x468eb3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
mov byte [esp + 0x190], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x468edb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x190], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x468f03
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xa4]
add eax, 0xfffffff0
mov byte [esp + 0x190], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x468f2e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov dword [esp + 0x190], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x468f59
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 8]
mov ecx, dword [esp + 0x188]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 0x80070057
call fcn.00401010
call fcn.00401200
push 0x80004005
call fcn.00401010
lea ecx, [ecx]
sub al, 0x74
inc esi
add byte [esp + esi*2 + 0x46], cl
add byte [ebx + 0x74], ah
inc esi
add byte [edx + 0x74], bh
inc esi
add byte [ecx + 0x69004674], dl
jp 0x468fed
add byte [ecx + 0x7a], ch
inc esi
add byte [ecx + 0x7a], ch
inc esi
add byte [ebp - 0x30ffb98a], bh
jbe 0x468ffd
add ch, ah
jbe 0x469001
add bl, bh
jbe 0x469005
add byte [ecx], dl
ja 0x469009
add byte [edi], ah
ja 0x46900d
add byte [ecx], bh
ja 0x469011
add byte [edi + 0x77], cl
inc esi
add byte [ecx + 0x7a], ch
inc esi
add byte [ecx + 0x7a], ch
inc esi
add byte [ecx + 0x7a], ch
inc esi
add byte [ecx + 0x7a], ch
inc esi
add byte [ebp + 0x77], ah
inc esi
add byte [ecx - 0x62ffb989], al
js 0x469031
add cl, dh
jp 0x469035
add byte [edi*2 + 0x7dba0046], ah
inc esi
add byte [ebx], ah
jle 0x469041
add byte [edx - 0x7f], al
inc esi
add byte [esp + eax*4 + 0x46], ah
add dh, al
add dword [esi], case.0x467aea.19
test byte [esi], al
invalid
mov al, byte [esi]
add eax, 0x468d
lea eax, [esi]
add byte [ecx], al
add al, byte [edi]
add dword [edx], eax
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
add eax, dword [eax - 858993658]
int3
or byte [ebx - 0x35d4f7b2], cl
sub ecx, edx
sar ecx, 4
test edx, edx
je 0x46907b
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 4
cmp ecx, eax
jae 0x46907b
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x14]
mov edi, dword [esi + 8]
mov byte [esp + 8], 0
mov eax, dword [esp + 8]
push eax
push ecx
push esi
push edx
push 1
push edi
call fcn.00463790
add esp, 0x18
add edi, 0x10
mov dword [esi + 8], edi
pop edi
pop esi
add esp, 8
ret 4
mov edi, dword [esi + 8]
cmp edx, edi
jbe 0x469087
call fcn.005416ed
mov eax, dword [esp + 0x14]
push eax
push edi
push esi
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.004669d0
pop edi
pop esi
add esp, 8
ret 4