Function at 0x464ab0
Capabilities:
Get graphical window text

Disassembly:
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 4]
sub esp, 0x60
push ebx
push ebp
mov ebp, dword [esp + 0x70]
push esi
push edi
mov edi, edx
cmp al, 0xa
je 0x464ad5
cmp al, 2
je 0x464ad5
add ecx, 0x10
mov dword [esp + 0x1c], ecx
jmp 0x464adc
lea eax, [ebp + 0x5c]
mov dword [esp + 0x1c], eax
cmp word [edi], 0
mov byte [esp + 0x13], 0
je 0x4666f1
movzx eax, word [edi]
cmp eax, 0x2d
jne 0x464afa
mov byte [esp + 0x78], 0
jmp 0x464b04
mov byte [esp + 0x78], 1
cmp eax, 0x2b
jne 0x464b07
add edi, 2
cmp word [edi], 0
je 0x4666f1
mov ebx, 0x4a780c
mov eax, edi
call fcn.00409e50
mov dword [esp + 0x14], eax
test eax, eax
jne 0x464b48
mov eax, edi
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x464b30
sub eax, edx
sar eax, 1
lea ecx, [edi + eax*2]
mov dword [esp + 0x14], ecx
mov eax, ecx
cmp eax, edi
je 0x4666d3
movzx edx, word [eax]
xor ecx, ecx
push 0x4c0aec
push edi
mov dword [esp + 0x20], edx
mov word [eax], cx
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x464b7a
mov byte [ebp + 0x192], 1
jmp case.0x465ebe.7
push 0x4c0afc
push edi
call fcn.00490f59
mov esi, dword [esp + 0x84]
add esp, 8
test eax, eax
jne 0x464bac
cmp byte [esi + 4], 0xc
je 0x464bac
cmp byte [esp + 0x78], al
je 0x4654bf
or byte [esi + 5], 2
jmp case.0x465ebe.7
push 7
push 0x4af540
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x464c3a
add edi, 0xe
push 0x4c0b10
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x464be9
movzx edx, byte [esp + 0x78]
neg edx
sbb edx, edx
and edx, 2
mov dword [ebp + 0x6c], edx
jmp case.0x465ebe.7
cmp byte [esi + 4], 0xa
jne 0x464c08
cmp byte [esp + 0x78], 0
je 0x464bff
or dword [ebp + 0x10], 4
jmp case.0x465ebe.7
and dword [ebp + 0x10], 0xfffffffb
jmp case.0x465ebe.7
cmp word [edi], 0
je 0x464c2d
mov esi, edi
call fcn.0040f2d0
mov dword [ebp + 0x6c], eax
cmp eax, 0xffffffff
jne case.0x465ebe.7
mov dword [ebp + 0x6c], 2
jmp case.0x465ebe.7
movzx eax, byte [esp + 0x78]
mov dword [ebp + 0x6c], eax
jmp case.0x465ebe.7
push 6
push 0x4af484
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x464cf3
cmp byte [esp + 0x78], al
je case.0x465ebe.7
movzx eax, byte [esi + 4]
add edi, 0xc
sub eax, 0xd
je 0x464caf
dec eax
je 0x464c8a
mov esi, edi
call fcn.0040f2d0
mov dword [ebp + 0x34], eax
cmp eax, 1
jge case.0x465ebe.7
mov dword [ebp + 0x34], 0
jmp case.0x465ebe.7
lea eax, [ebp + 0x140]
mov ecx, edi
call fcn.00476dd0
mov dword [ebp + 0x180], eax
cmp eax, 3
jne case.0x465ebe.7
or dword [ebp], 2
jmp case.0x465ebe.7
push 0x4c0b1c
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x464ccd
mov dword [ebp + 0x34], 2
jmp case.0x465ebe.7
push 1
lea esi, [ebp + 0x140]
mov eax, edi
call fcn.00476e60
add esp, 4
test eax, eax
je case.0x465ebe.7
mov dword [ebp + 0x34], 1
jmp case.0x465ebe.7
push 0x4c09c8
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x464d23
cmp byte [esp + 0x78], al
je 0x464d17
or dword [ebp], 0x800000
jmp case.0x465ebe.7
or dword [ebp + 4], 0x800000
jmp case.0x465ebe.7
push 0x4c0b28
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x464d53
cmp byte [esp + 0x78], al
je 0x464d47
or dword [ebp], 0x200000
jmp case.0x465ebe.7
or dword [ebp + 4], 0x200000
jmp case.0x465ebe.7
push 7
push 0x4c0b38
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x464dbf
cmp byte [esi + 4], 0xb
jne 0x464d83
cmp byte [esp + 0x78], al
je 0x46521e
or dword [ebp + 4], 0x8000
jmp case.0x465ebe.7
cmp byte [esp + 0x78], 0
je 0x464db3
or dword [ebp], 0x100000
cmp word [edi + 0xe], 0
je 0x464da8
lea esi, [edi + 0xe]
call fcn.0040f2d0
mov dword [ebp + 0x68], eax
jmp case.0x465ebe.7
or eax, 0xffffffff
mov dword [ebp + 0x68], eax
jmp case.0x465ebe.7
or dword [ebp + 4], 0x100000
jmp case.0x465ebe.7
push 0x4c0b48
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x464de3
cmp byte [esp + 0x78], al
je 0x464dfb
or dword [ebp], 0x10000
jmp case.0x465ebe.7
push 0x4c0b58
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x464e07
cmp byte [esp + 0x78], al
je 0x464dd7
or dword [ebp + 4], 0x10000
jmp case.0x465ebe.7
push 0x4c0b64
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x464e30
cmp byte [esp + 0x78], 0
je 0x4650c0
or dword [ebp], 0x20000
jmp case.0x465ebe.7
push 0x4add88
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x464e59
xor ecx, ecx
cmp byte [esp + 0x78], cl
sete cl
add ecx, 3
mov dword [ebp + 0x188], ecx
jmp case.0x465ebe.7
push 8
push 0x4c09fc
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x464ecf
cmp word [edi + 0x10], ax
je 0x464e88
lea esi, [edi + 0x10]
call fcn.0040f2d0
test eax, eax
jne 0x464e88
cmp byte [esp + 0x78], al
sete bl
jmp 0x464e8c
mov bl, byte [esp + 0x78]
mov esi, dword [esp + 0x7c]
mov eax, dword [esi]
test eax, eax
je 0x464eb2
xor edx, edx
test bl, bl
sete dl
push edx
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
test bl, bl
je 0x464ec6
or byte [esi + 5], 0x10
jmp case.0x465ebe.7
test bl, bl
je 0x464ebf
or dword [ebp], 0x8000000
jmp 0x464ea5
or dword [ebp + 4], 0x8000000
and byte [esi + 5], 0xef
jmp case.0x465ebe.7
push 6
push 0x4c0b70
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x464f49
cmp word [edi + 0xc], ax
je 0x464efe
lea esi, [edi + 0xc]
call fcn.0040f2d0
test eax, eax
jne 0x464efe
cmp byte [esp + 0x78], al
sete bl
jmp 0x464f02
mov bl, byte [esp + 0x78]
mov esi, dword [esp + 0x7c]
mov eax, dword [esi]
test eax, eax
je 0x464f2c
xor ecx, ecx
test bl, bl
setne cl
dec ecx
and ecx, 4
push ecx
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
test bl, bl
je 0x464f40
or byte [esi + 5], 8
jmp case.0x465ebe.7
test bl, bl
je 0x464f39
or dword [ebp + 4], 0x10000000
jmp 0x464f1f
or dword [ebp], 0x10000000
and byte [esi + 5], 0xf7
jmp case.0x465ebe.7
push 0x4c0b80
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x464fce
movzx eax, byte [esi + 4]
dec eax
cmp eax, 0x12
ja case.0x465ebe.7
movzx edx, byte [eax + 0x466d44]
jmp dword [edx*4 + 0x466d2c]
cmp byte [esp + 0x78], 0
je 0x464f87
or dword [ebp + 4], 0x1f
jmp case.0x465ebe.7
mov eax, dword [ebp]
and eax, 0xffffffec
or eax, 0xc
mov dword [ebp], eax
jmp case.0x465ebe.7
cmp byte [esp + 0x78], 0
je 0x464fab
or dword [ebp + 4], 0x100080
jmp case.0x465ebe.7
or dword [ebp], 0x80
jmp case.0x465ebe.7
cmp byte [esp + 0x78], 0
je 0x4653d3
or dword [ebp], 0x200
jmp case.0x465ebe.7
mov ebx, 0xa
push ebx
push 0x4c0b8c
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x465089
movzx eax, byte [esi + 4]
add eax, 0xfffffff6
add edi, 0x14
cmp eax, 0xf
ja case.0x465000.12
movzx ecx, byte [eax + 0x466d60]
jmp dword [ecx*4 + 0x466d58]
cmp byte [esp + 0x78], 0
je 0x46503d
mov esi, edi
call fcn.00478550
mov dword [ebp + 0x60], eax
cmp eax, 0xffffffff
jne case.0x465ebe.7
push 0x10
push 0
push edi
call fcn.0049244f
add esp, 0xc
mov ecx, eax
call fcn.00432330
mov dword [ebp + 0x60], eax
jmp case.0x465ebe.7
mov dword [ebp + 0x60], 0xff000000
jmp case.0x465ebe.7
cmp byte [esp + 0x78], 0
je 0x465078
and byte [esi + 5], 0xdf
push 0x4add0c
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x46506f
or byte [esi + 5], 0x40
jmp case.0x465ebe.7
and byte [esi + 5], 0xbf
jmp case.0x465ebe.7
mov dl, byte [esi + 5]
and dl, 0xbf
or dl, 0x20
mov byte [esi + 5], dl
jmp case.0x465ebe.7
push 0x4c0b64
push edi
call fcn.00490f59
add esp, 8
test eax, eax
je 0x464e19
push 0x4c0ab4
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x4650cc
mov al, byte [esp + 0x78]
mov byte [ebp + 0x193], al
jmp case.0x465ebe.7
or dword [ebp + 4], 0x20000
jmp case.0x465ebe.7
push 4
push 0x4adbf8
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x4650f9
push 3
push eax
add edi, 8
push edi
mov ecx, 0x4cc518
call fcn.00423cc0
mov dword [ebp + 0x1c], eax
jmp case.0x465ebe.7
push 4
push 0x4adbcc
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x46514f
add edi, 8
cmp byte [esi + 4], bl
jne 0x465135
push 0x4c0ba4
push edi
call fcn.00490f59
add esp, 8
neg eax
sbb eax, eax
and eax, 0xfffffffe
add eax, 2
mov dword [ebp + 0x14], eax
jmp case.0x465ebe.7
cmp byte [esp + 0x78], 0
je case.0x465ebe.7
mov esi, edi
call fcn.0040f2d0
mov dword [ebp + 0x70], eax
jmp case.0x465ebe.7
push 0x4c0bb0
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x46516d
mov dword [ebp + 0x14], 1
jmp case.0x465ebe.7
push 0x4adc40
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x46518b
mov dword [ebp + 0x14], 3
jmp case.0x465ebe.7
push 0x4c0bc0
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x4651b5
cmp byte [0x4cd1c2], al
je case.0x465ebe.7
mov dword [ebp + 0x14], 4
jmp case.0x465ebe.7
cmp byte [esi + 4], bl
jne 0x465268
push 0x4af2ac
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x4651e6
cmp byte [esp + 0x78], al
je 0x465567
or dword [ebp + 4], 0x4000
jmp case.0x465ebe.7
cmp byte [esi + 4], bl
jne 0x465268
push 6
push 0x4af290
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x465239
push 0x4af2ac
add edi, 0xc
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x46522a
cmp byte [esp + 0x78], al
je 0x464d77
or dword [ebp], 0x8000
jmp case.0x465ebe.7
mov cl, byte [esp + 0x78]
mov byte [ebp + 0x194], cl
jmp case.0x465ebe.7
cmp byte [esi + 4], bl
jne 0x465268
push 0x4c0bcc
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x465268
cmp byte [esp + 0x78], al
je 0x46525f
or dword [ebp + 0x10], 1
jmp case.0x465ebe.7
and dword [ebp + 0x10], 0xfffffffe
jmp case.0x465ebe.7
push 5
push 0x4a9280
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x46528c
lea esi, [edi + 0xa]
call fcn.0040f2d0
mov dword [ebp + 0x64], eax
jmp case.0x465ebe.7
push 2
push 0x4c0bd8
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x4652d8
push eax
push eax
push eax
push eax
lea eax, [edi + 4]
call fcn.004771e0
add esp, 0x10
test eax, eax
je case.0x465ebe.7
lea esi, [edi + 4]
call fcn.00415480
cmp byte [esp + 0x78], 0
je 0x4652ce
or dword [ebp + 0x10], eax
jmp case.0x465ebe.7
not eax
and dword [ebp + 0x10], eax
jmp case.0x465ebe.7
push 9
push 0x4c0be0
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x465306
cmp byte [esp + 0x78], al
je case.0x465ebe.7
lea esi, [edi + 0x12]
call fcn.00415480
mov dword [ebp + 0x18], eax
jmp case.0x465ebe.7
cmp byte [esi + 4], 4
jne 0x465332
push 0x4a9080
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x465332
cmp byte [esp + 0x78], 0
je case.0x465ca7.11
or dword [ebp], 1
jmp case.0x465ebe.7
cmp byte [esi + 4], 5
jne 0x46535d
push 0x4c0bf4
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x46535d
cmp byte [esp + 0x78], al
je 0x465875
or dword [ebp], 6
jmp case.0x465ebe.7
push 0x4aea78
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x4653f3
movzx eax, byte [esi + 4]
add eax, 0xfffffff7
cmp eax, 3
ja case.0x465ebe.7
jmp dword [eax*4 + 0x466d70]
mov esi, dword [esi]
test esi, esi
je case.0x465415.9
movzx edx, byte [esp + 0x78]
push 0
push edx
push 0xcf
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x465ebe.7
cmp byte [esp + 0x78], 0
je 0x4653bc
or dword [ebp], 0x800
jmp case.0x465ebe.7
or dword [ebp + 4], 0x800
jmp case.0x465ebe.7
cmp byte [esp + 0x78], 0
je 0x464fc2
or dword [ebp + 4], 0x200
jmp case.0x465ebe.7
cmp byte [esp + 0x78], 0
je 0x465597
or dword [ebp + 4], 8
jmp case.0x465ebe.7
push 0x4c0c04
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x46543c
movzx eax, byte [esi + 4]
add eax, 0xfffffff7
cmp eax, 5
ja case.0x465ebe.7
jmp dword [eax*4 + 0x466d80]
cmp byte [esp + 0x78], 0
je 0x465433
or dword [ebp], 4
jmp case.0x465ebe.7
cmp byte [esp + 0x78], 0
je 0x465423
or dword [ebp + 4], 4
jmp case.0x465ebe.7
cmp byte [esi + 4], 0xc
jne 0x4654c8
push 0x4c0c10
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x465476
cmp byte [esp + 0x78], al
je 0x46546a
or dword [ebp], 0x1000
jmp case.0x465ebe.7
or dword [ebp + 4], 0x1000
jmp case.0x465ebe.7
cmp byte [esi + 4], 0xc
jne 0x4654c8
push 0x4c0c28
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x46549d
cmp byte [esp + 0x78], al
je 0x4654eb
or byte [esi + 5], 0x80
jmp case.0x465ebe.7
cmp byte [esi + 4], 0xc
jne 0x4654c8
push 0x4c0c38
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x4654c8
cmp byte [esp + 0x78], al
je 0x464ba3
and byte [esi + 5], 0xfd
jmp case.0x465ebe.7
mov al, byte [esi + 4]
cmp al, bl
je 0x4654d3
cmp al, 0xb
jne 0x4654f4
push 0x4c0c4c
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x4654f4
cmp byte [esp + 0x78], al
je 0x465494
and byte [esi + 5], 0x7f
jmp case.0x465ebe.7
cmp byte [esi + 4], 0xc
jne 0x465523
push 0x4a943c
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x465523
cmp byte [esp + 0x78], 0
je 0x4655b5
or dword [ebp], 0x2000
jmp case.0x465ebe.7
push 0x4c0c5c
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x465573
mov al, byte [esi + 4]
cmp al, 0xc
jne 0x465550
cmp byte [esp + 0x78], 0
je 0x4657b0
or dword [ebp], 0x10
jmp case.0x465ebe.7
cmp al, 8
je case.0x465383.9
cmp al, 7
jne case.0x465ebe.7
cmp byte [esp + 0x78], 0
je 0x4651da
or dword [ebp], 0x4000
jmp case.0x465ebe.7
push 0x4c0c70
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x4655c1
mov al, byte [esi + 4]
cmp al, 0xc
jne 0x4655a0
cmp byte [esp + 0x78], 0
je case.0x465ca7.16
or dword [ebp], 8
jmp case.0x465ebe.7
cmp al, 8
je case.0x464f70.3
cmp al, 7
jne case.0x465ebe.7
jmp case.0x464f70.3
or dword [ebp + 4], 0x2000
jmp case.0x465ebe.7
cmp byte [esi + 4], 0xc
jne 0x46563f
push 8
push 0x4c0c84
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x46563f
cmp byte [esp + 0x78], 0
mov ax, word [edi + 0x10]
mov word [ebp + 0x18c], ax
je 0x46561b
or dword [ebp], 0x20
mov esi, dword [esi]
test esi, esi
je 0x465635
movzx eax, ax
push 0
test ax, ax
jne 0x465618
movzx ecx, byte [0x4cd1c2]
neg ecx
sbb ecx, ecx
and ecx, 0x25a5
add ecx, 0x2a
push ecx
jmp 0x465629
push eax
jmp 0x465629
or dword [ebp + 4], 0x20
mov esi, dword [esi]
test esi, esi
je 0x465635
push 0
push 0
push 0xcc
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
mov byte [esp + 0x13], 1
jmp case.0x465ebe.7
push 5
push 0x4c0c98
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x465686
cmp byte [esp + 0x78], al
je 0x46567a
add edi, ebx
cmp word [edi], ax
je 0x46566f
mov esi, edi
call fcn.0040f2d0
mov dword [ebp + 0x64], eax
jmp case.0x465ebe.7
or eax, 0xffffffff
mov dword [ebp + 0x64], eax
jmp case.0x465ebe.7
mov dword [ebp + 0x64], SysStringLen
jmp case.0x465ebe.7
cmp byte [esi + 4], 8
jne 0x4656b1
push 0x4c0ca4
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x4656b1
cmp byte [esp + 0x78], al
je case.0x465ca7.11
or dword [ebp], 1
jmp case.0x465ebe.7
push 4
push 0x4a6544
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x465723
movzx eax, byte [esi + 4]
add eax, 0xfffffff9
cmp eax, 3
ja case.0x465ebe.7
jmp dword [eax*4 + 0x466d98]
cmp byte [esp + 0x78], 0
je case.0x465da9.11
or dword [ebp], 2
jmp case.0x465ebe.7
cmp byte [esp + 0x78], 0
je 0x46571a
push 0x4af274
add edi, 8
push edi
call fcn.00490f59
add esp, 8
neg eax
sbb eax, eax
and eax, 0xfffffff0
add eax, 0x20
or dword [ebp], eax
jmp case.0x465ebe.7
or dword [ebp + 4], 0x30
jmp case.0x465ebe.7
cmp byte [esi + 4], 0x10
jne 0x465756
push 0x4c0cb4
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x465756
cmp byte [esp + 0x78], al
je 0x4658e4
mov eax, dword [ebp]
and eax, 0xffffffef
or eax, 0x40
mov dword [ebp], eax
jmp case.0x465ebe.7
mov bl, 0x11
cmp byte [esi + 4], bl
jne 0x465814
push 0x4c0cc0
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x465786
cmp byte [esp + 0x78], al
je 0x4654eb
or byte [esi + 5], 0x80
jmp case.0x465ebe.7
cmp byte [esi + 4], bl
jne 0x465814
push 0x4c0cd0
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x4657b9
cmp byte [esp + 0x78], al
je 0x4657b0
or dword [ebp], 0x10
jmp case.0x465ebe.7
or dword [ebp + 4], 0x10
jmp case.0x465ebe.7
cmp byte [esi + 4], bl
jne 0x465814
push 0xc
push 0x4c0ce0
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x465814
cmp byte [esp + 0x78], 0
mov eax, 1
mov byte [ebp + 0x190], al
je 0x465805
or dword [ebp], eax
cmp word [edi + 0x18], 0
lea esi, [edi + 0x18]
setne cl
mov byte [ebp + 0x191], cl
call fcn.0040f2d0
mov dword [ebp + 0x40], eax
jmp case.0x465ebe.7
or dword [ebp + 4], eax
mov dword [ebp + 0x40], 0xffffffff
jmp case.0x465ebe.7
push 4
push 0x4a90a0
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x46587e
mov al, byte [esi + 4]
cmp al, bl
jne 0x46584a
cmp byte [esp + 0x78], 0
je case.0x465ebe.7
lea esi, [edi + 8]
call fcn.0040f2d0
mov dword [ebp + 0x44], eax
jmp case.0x465ebe.7
cmp al, 0xb
jne case.0x465ebe.7
mov ax, word [edi + 8]
call fcn.00409e20
cmp ax, 0x53
jne case.0x465ebe.7
cmp byte [esp + 0x78], 0
je 0x465875
or dword [ebp], 6
jmp case.0x465ebe.7
or dword [ebp + 4], 6
jmp case.0x465ebe.7
cmp byte [esi + 4], bl
jne 0x4658ed
push 4
push 0x4c0cfc
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x4658b1
cmp byte [esp + 0x78], al
je case.0x465ebe.7
lea esi, [edi + 8]
call fcn.0040f2d0
mov dword [ebp + 0x48], eax
jmp case.0x465ebe.7
cmp byte [esi + 4], bl
jne 0x4658ed
push 5
push 0x4c0d08
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x4658ed
cmp byte [esp + 0x78], al
je 0x4658e4
or dword [ebp], 0x40
lea esi, [edi + 0xa]
call fcn.0040f2d0
mov dword [ebp + 0x4c], eax
jmp case.0x465ebe.7
or dword [ebp + 4], 0x40
jmp case.0x465ebe.7
push 7
push 0x4a69c0
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x46598d
cmp byte [esi + 4], bl
jne case.0x465ebe.7
cmp byte [esp + 0x78], al
je 0x465eed
mov dword [ebp + 0x50], 0xffffffff
mov ax, word [edi + 0xe]
call fcn.00409e20
movzx eax, ax
add eax, 0xffffffbe
cmp eax, 0x12
ja case.0x46593a.67
movzx edx, byte [eax + 0x466dbc]
jmp dword [edx*4 + 0x466da8]
mov dword [ebp + 0x50], 0
jmp case.0x46593a.67
mov dword [ebp + 0x50], 1
jmp case.0x46593a.67
mov dword [ebp + 0x50], 2
jmp case.0x46593a.67
mov dword [ebp + 0x50], 3
mov eax, dword [ebp + 0x50]
test eax, eax
jns 0x46597d
or dword [ebp], 0x100
mov dword [ebp + 0x50], 0
jmp case.0x465ebe.7
inc eax
or dword [ebp], 0x100
mov dword [ebp + 0x50], eax
jmp case.0x465ebe.7
cmp byte [esi + 4], bl
jne 0x465a35
push 5
push 0x4c0d14
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x465a35
cmp byte [esp + 0x78], al
je case.0x465ebe.7
movzx ebx, word [edi + 0xa]
test bx, bx
je case.0x465ebe.7
push eax
push 1
push eax
push eax
add edi, 0xc
push edi
mov ecx, 0x4cc518
call fcn.00423d20
test eax, eax
je case.0x465ebe.7
cmp byte [eax + 0x17], 0
jne 0x4659e9
mov eax, dword [eax + 0xc]
test byte [eax + 0x16], 2
jne case.0x465ebe.7
mov edi, dword [esp + 0x74]
mov ecx, dword [edi + 0x10]
lea edx, [ecx - 1]
cmp edx, ecx
jae case.0x465ebe.7
lea esi, [edx + edx*4]
add esi, esi
add esi, esi
lea esp, [esp]
mov ecx, dword [edi + 0x18]
add ecx, esi
cmp dword [ecx + 8], eax
jne 0x465a27
cmp ebx, 0x31
jne 0x465a24
mov dword [ebp + 0x54], ecx
jmp 0x465a27
mov dword [ebp + 0x58], ecx
dec edx
sub esi, 0x14
cmp edx, dword [edi + 0x10]
jb 0x465a10
jmp case.0x465ebe.7
push 0x4c0d20
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x465a7e
mov al, byte [esi + 4]
cmp al, bl
jne 0x465a62
cmp byte [esp + 0x78], 0
je case.0x465da9.11
or dword [ebp], 2
jmp case.0x465ebe.7
cmp al, 0x12
jne case.0x465ebe.7
cmp byte [esp + 0x78], 0
je 0x465433
or dword [ebp], 4
jmp case.0x465ebe.7
push 5
push 0x4c0d34
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x465b37
cmp byte [esp + 0x78], al
je case.0x465ebe.7
cmp word [edi + 0xa], ax
je case.0x465ebe.7
mov al, byte [esi + 4]
cmp al, 0xd
je 0x465aed
cmp al, 0xe
je 0x465aed
lea esi, [edi + 0xa]
mov byte [ebp + 0x18e], 1
call fcn.0040f2d0
push 0x2d
add edi, 0xc
push edi
mov dword [ebp + 0x38], eax
call fcn.00491ad1
add esp, 8
test eax, eax
je case.0x465ebe.7
lea esi, [eax + 2]
call fcn.0040f2d0
mov dword [ebp + 0x3c], eax
jmp case.0x465ebe.7
lea ebx, [ebp + 0x160]
mov eax, ebx
lea ecx, [edi + 0xa]
call fcn.00476dd0
mov dword [ebp + 0x184], eax
test eax, eax
je case.0x465ebe.7
mov ecx, dword [esi]
test ecx, ecx
je case.0x465ebe.7
xor edx, edx
cmp byte [esi + 4], 0xd
push ebx
setne dl
push eax
dec edx
and edx, 0xfffffff2
add edx, 0x1012
push edx
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x465ebe.7
cmp byte [esi + 4], 0x12
jne 0x465b62
push 0x4c0d40
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x465b62
cmp byte [esp + 0x78], al
je case.0x465ca7.11
or dword [ebp], 1
jmp case.0x465ebe.7
push 0x4c0d50
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x465bae
mov al, byte [esi + 4]
cmp al, 0x13
jne 0x465b92
cmp byte [esp + 0x78], 0
je 0x465eed
or dword [ebp], 0x100
jmp case.0x465ebe.7
cmp al, 0xb
jne case.0x465ebe.7
cmp byte [esp + 0x78], 0
je case.0x465ca7.11
or dword [ebp], 1
jmp case.0x465ebe.7
cmp byte [esi + 4], 0x13
jne 0x465be0
push 0x4add70
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x465be0
cmp byte [esp + 0x78], al
je case.0x465da9.11
or dword [ebp], 2
or dword [ebp + 4], 0x80
jmp case.0x465ebe.7
cmp byte [esi + 4], 0x18
jne 0x465c2b
push 5
push 0x4a96f8
push edi
call fcn.0049115d
add esp, 0xc
test eax, eax
jne 0x465c2b
mov ecx, dword [0x4cb550]
lea eax, [esp + 0x40]
push eax
add edi, 0xa
push edi
push ecx
call dword [sym.imp.USER32.dll_GetClassInfoExW]
mov word [ebp + 0x198], ax
test ax, ax
jne case.0x465ebe.7
push edi
push 0x4c0d60
jmp 0x466797
push 0x4af25c
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x465cf9
movzx eax, byte [esi + 4]
dec eax
cmp byte [esp + 0x78], 0
je 0x465c97
cmp eax, 0x10
ja case.0x465ebe.7
movzx edx, byte [eax + 0x466de4]
jmp dword [edx*4 + 0x466dd0]
or dword [ebp], 8
or dword [ebp + 4], 4
jmp case.0x465ebe.7
or dword [ebp], 1
or dword [ebp + 4], 0x1e
jmp case.0x465ebe.7
or dword [ebp], 0x300
jmp case.0x465ebe.7
or dword [ebp], 1
or dword [ebp + 4], 2
jmp case.0x465ebe.7
cmp eax, 0x10
ja case.0x465ebe.7
movzx eax, byte [eax + 0x466e0c]
jmp dword [eax*4 + 0x466df8]
mov esi, dword [esi]
test esi, esi
je 0x465cd5
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
jne case.0x465ebe.7
or dword [ebp + 4], eax
jmp case.0x465ebe.7
mov eax, dword [ebp]
mov ecx, eax
and ecx, 0x300
cmp ecx, 0x300
jne case.0x465ebe.7
and eax, 0xfffffcff
mov dword [ebp], eax
jmp case.0x465ebe.7
push 0x4a4e98
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x465e21
movzx eax, byte [esi + 4]
dec eax
cmp byte [esp + 0x78], 0
je 0x465d99
cmp eax, 0x16
ja case.0x465ebe.7
movzx edx, byte [eax + 0x466e40]
jmp dword [edx*4 + 0x466e20]
or dword [ebp + 4], 8
or dword [ebp], 4
jmp case.0x465ebe.7
or dword [ebp], 2
or dword [ebp + 4], 0x1d
jmp case.0x465ebe.7
or dword [ebp], 0x200
or dword [ebp + 4], 0x100
mov al, byte [esi + 4]
mov ecx, dword [ebp]
cmp al, 5
je 0x465d6c
cmp al, 6
jne case.0x465ebe.7
or ecx, 0x20
mov dword [ebp], ecx
jmp case.0x465ebe.7
or dword [ebp], 2
or dword [ebp + 4], 1
jmp case.0x465ebe.7
or dword [ebp], 0x282
jmp case.0x465ebe.7
or dword [ebp], 0x20
jmp case.0x465ebe.7
cmp eax, 0x12
ja case.0x465ebe.7
movzx eax, byte [eax + 0x466e74]
jmp dword [eax*4 + 0x466e58]
or dword [ebp + 4], 0x20
jmp case.0x465ebe.7
or dword [ebp], 4
or dword [ebp + 4], 8
jmp case.0x465ebe.7
mov esi, dword [esi]
test esi, esi
je 0x465df1
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
je case.0x465ebe.7
or dword [ebp + 4], 0x200
jmp case.0x465ebe.7
mov eax, dword [ebp]
mov ecx, eax
and ecx, 0x300
cmp ecx, 0x300
je case.0x465ebe.7
and eax, 0xfffffdff
mov dword [ebp], eax
jmp case.0x465ebe.7
or dword [ebp + 4], 0x82
jmp case.0x465ebe.7
push 0x4a4ea4
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x465f1d
cmp byte [esp + 0x78], 0
movzx eax, byte [esi + 4]
je 0x465eab
dec eax
cmp eax, 0x12
ja case.0x465ebe.7
movzx edx, byte [eax + 0x466ea8]
jmp dword [edx*4 + 0x466e88]
or dword [ebp + 4], 4
or dword [ebp], 8
jmp case.0x465ebe.7
or dword [ebp + 4], 0x200
or dword [ebp], 0x100
mov al, byte [esi + 4]
mov ecx, dword [ebp + 4]
cmp al, 5
je 0x465e87
cmp al, 6
jne case.0x465ebe.7
or ecx, 0x20
mov dword [ebp + 4], ecx
jmp case.0x465ebe.7
or dword [ebp + 4], 3
jmp case.0x465ebe.7
or dword [ebp], 0x280
or dword [ebp + 4], 2
jmp case.0x465ebe.7
add eax, 0xfffffffd
cmp eax, 0x10
ja case.0x465ebe.7
movzx eax, byte [eax + 0x466ecc]
jmp dword [eax*4 + 0x466ebc]
or dword [ebp + 4], 0xc
jmp case.0x465ebe.7
mov esi, dword [esi]
test esi, esi
je 0x465ef9
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0x300
cmp eax, 0x300
je case.0x465ebe.7
or dword [ebp + 4], 0x100
jmp case.0x465ebe.7
mov eax, dword [ebp]
mov ecx, eax
and ecx, 0x300
cmp ecx, 0x300
je case.0x465ebe.7
and eax, 0xfffffeff
mov dword [ebp], eax
jmp case.0x465ebe.7
push 0
push 0
push 1
push 0
mov eax, edi
call fcn.004771e0
add esp, 0x10
test eax, eax
je 0x465f69
mov esi, edi
call fcn.00415480
cmp byte [esp + 0x78], 0
je 0x465f55
or dword [ebp], eax
mov dx, word [esp + 0x18]
mov eax, dword [esp + 0x14]
mov word [eax], dx
jmp 0x4666cf
or dword [ebp + 4], eax
mov dx, word [esp + 0x18]
mov eax, dword [esp + 0x14]
mov word [eax], dx
jmp 0x4666cf
mov bl, byte [esp + 0x78]
add edi, 2
cmp word [edi], 0
jne 0x466012
test bl, bl
je 0x465f98
mov eax, dword [esp + 0x84]
test eax, eax
je 0x465f98
cmp byte [eax + 0x17], 0
jne 0x465f92
mov eax, dword [eax + 0xc]
test byte [eax + 0x15], 2
jne 0x466012
mov ax, word [edi - 2]
call fcn.00409e20
movzx eax, ax
cmp eax, 0x43
je 0x465fde
cmp eax, 0x47
je 0x465fc3
cmp eax, 0x56
jne 0x46678e
mov dword [esi + 8], 0
jmp case.0x465ebe.7
mov eax, dword [esi + 0xc]
test eax, eax
je 0x465fd2
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esi + 0xc], 0
jmp case.0x465ebe.7
test bl, bl
jne case.0x465ebe.7
cmp byte [esi + 4], 2
je case.0x465ebe.7
mov eax, dword [esp + 0x1c]
cmp dword [eax], 0xff000000
je case.0x465ebe.7
mov dword [eax], 0xff000000
mov byte [ebp + 0x18f], 1
jmp case.0x465ebe.7
mov ax, word [edi - 2]
call fcn.00409e20
movzx eax, ax
add eax, 0xffffffbd
cmp eax, 0x16
ja case.0x466031.68
movzx edx, byte [eax + 0x466f08]
jmp dword [edx*4 + 0x466ee0]
mov al, byte [esi + 4]
cmp al, 3
je 0x46673e
cmp al, 0x12
je 0x46673e
mov eax, dword [esp + 0x84]
push 4
mov ebx, 0x4cc518
call fcn.0041c820
mov ebx, eax
test ebx, ebx
jne 0x466084
push 0x4c0354
push edi
call fcn.00490f59
add esp, 8
test eax, eax
jne 0x466733
mov eax, dword [esp + 0x7c]
or byte [eax + 5], 1
jmp 0x466088
mov eax, dword [esp + 0x7c]
mov al, byte [eax + 4]
cmp al, 1
je 0x466093
cmp al, 2
jne 0x46609a
or dword [ebp], 0x100
mov esi, dword [esp + 0x7c]
add esi, 0xc
mov edi, ebx
call fcn.00401330
jmp case.0x465ebe.7
cmp dword [ebp + 0x13c], 0x32
jae case.0x465ebe.7
mov esi, edi
call fcn.00415480
mov ecx, dword [ebp + 0x13c]
mov dword [ebp + ecx*4 + 0x74], eax
inc dword [ebp + 0x13c]
jmp case.0x465ebe.7
push 3
push 0
push edi
mov ecx, 0x4cc518
call fcn.00423cc0
test eax, eax
je 0x4667a1
cmp byte [eax + 0x17], 0
jne 0x4660f6
mov eax, dword [eax + 0xc]
mov dl, byte [eax + 0x16]
and dl, 0x22
cmp dl, 2
je 0x466745
mov ebx, dword [esp + 0x74]
xor edx, edx
cmp dword [ebx + 0x10], edx
jbe 0x466127
mov ecx, dword [ebx + 0x18]
add ecx, 8
cmp dword [ecx], eax
je 0x466750
inc edx
add ecx, 0x14
cmp edx, dword [ebx + 0x10]
jb 0x466116
mov dword [esi + 8], eax
jmp case.0x465ebe.7
cmp byte [esi + 4], 2
je case.0x465ebe.7
mov esi, edi
call fcn.00478550
cmp eax, 0xffffffff
jne 0x466159
push 0x10
push 0
push edi
call fcn.0049244f
add esp, 0xc
mov ecx, eax
call fcn.00432330
mov ecx, dword [esp + 0x1c]
cmp dword [ecx], eax
jne 0x46616c
lea edx, [ebp + 0x5c]
cmp ecx, edx
jne case.0x465ebe.7
mov dword [ecx], eax
mov byte [ebp + 0x18f], 1
jmp case.0x465ebe.7
mov ax, word [edi]
call fcn.00409e20
cmp ax, 0x50
jne 0x4661bd
lea esi, [edi + 2]
call fcn.0040f2d0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x4661ad
mov ecx, dword [0x4cc4e8]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x88]
add edx, eax
mov dword [ebp + 0x28], edx
jmp case.0x465ebe.7
mov esi, edi
call fcn.0040f2d0
mov ecx, dword [esp + 0x74]
call fcn.0045e3c0
mov dword [ebp + 0x28], eax
jmp case.0x465ebe.7
mov ax, word [edi]
call fcn.00409e20
cmp ax, 0x50
jne 0x466218
lea esi, [edi + 2]
call fcn.0040f2d0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x466208
mov ecx, dword [0x4cc4e8]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x8c]
add edx, eax
mov dword [ebp + 0x2c], edx
jmp case.0x465ebe.7
mov esi, edi
call fcn.0040f2d0
mov ecx, dword [esp + 0x74]
call fcn.0045e3c0
mov dword [ebp + 0x2c], eax
jmp case.0x465ebe.7
movzx eax, word [edi]
cmp eax, 0x2b
jne 0x466306
mov ax, word [edi + 2]
lea esi, [edi + 2]
call fcn.00409e20
cmp ax, 0x4d
jne 0x466257
mov edi, dword [esp + 0x74]
mov eax, dword [edi + 0x78]
jmp 0x466279
call fcn.0040f2d0
mov edi, dword [esp + 0x74]
cmp byte [edi + 0xc0], 0
je 0x466279
mov ecx, dword [0x4cc4e8]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esp + 0x7c]
mov bl, byte [edx + 6]
mov ecx, edi
mov dword [esp + 0x78], eax
call fcn.0046b5c0
mov esi, eax
test esi, esi
je 0x4662d8
mov eax, dword [esp + 0x7c]
mov al, byte [eax + 7]
call fcn.0046b740
test eax, eax
jne 0x4662d8
mov ebx, dword [esp + 0x74]
mov edx, esi
lea edi, [esp + 0x20]
mov ecx, ebx
call fcn.0046b850
mov ecx, dword [eax]
add ecx, dword [esp + 0x78]
cmp dword [ebp + 0x24], 0x80000000
mov eax, dword [eax + 4]
mov dword [ebp + 0x20], ecx
jne case.0x465ebe.7
mov ecx, dword [ebx + 0x7c]
add ecx, eax
mov dword [ebp + 0x24], ecx
jmp case.0x465ebe.7
mov edx, dword [edi + 0x88]
add edx, dword [edi + 0x80]
add edx, dword [esp + 0x78]
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], edx
jne case.0x465ebe.7
mov eax, dword [edi + 0x84]
mov dword [ebp + 0x24], eax
jmp case.0x465ebe.7
call fcn.00409e20
cmp ax, 0x4d
jne 0x46635c
lea esi, [edi + 2]
call fcn.0040f2d0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x466336
mov ecx, dword [0x4cc4e8]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x78]
add edx, eax
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], edx
jne case.0x465ebe.7
mov eax, dword [esi + 0x94]
add eax, dword [esi + 0x7c]
mov dword [ebp + 0x24], eax
jmp case.0x465ebe.7
mov ax, word [edi]
call fcn.00409e20
cmp ax, 0x50
jne 0x4663b5
lea esi, [edi + 2]
call fcn.0040f2d0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x46638f
mov ecx, dword [0x4cc4e8]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x80]
add edx, eax
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], edx
jne case.0x465ebe.7
mov eax, dword [esi + 0x84]
mov dword [ebp + 0x24], eax
jmp case.0x465ebe.7
mov ax, word [edi]
call fcn.00409e20
cmp ax, 0x53
jne 0x466411
lea esi, [edi + 2]
call fcn.0040f2d0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x4663e8
mov ecx, dword [0x4cc4e8]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x98]
add edx, eax
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], edx
jne case.0x465ebe.7
mov eax, dword [esi + 0xa4]
add eax, dword [esi + 0x7c]
mov dword [ebp + 0x24], eax
jmp case.0x465ebe.7
mov esi, edi
call fcn.0040f2d0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x466435
mov ecx, dword [0x4cc4e8]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
cmp dword [ebp + 0x24], 0x80000000
mov dword [ebp + 0x20], eax
jne case.0x465ebe.7
mov edx, dword [esi + 0x94]
add edx, dword [esi + 0x7c]
mov dword [ebp + 0x24], edx
jmp case.0x465ebe.7
movzx eax, word [edi]
cmp eax, 0x2b
jne 0x46652e
mov ax, word [edi + 2]
lea esi, [edi + 2]
call fcn.00409e20
cmp ax, 0x4d
jne 0x46647d
mov edi, dword [esp + 0x74]
mov eax, dword [edi + 0x7c]
jmp 0x46649f
call fcn.0040f2d0
mov edi, dword [esp + 0x74]
cmp byte [edi + 0xc0], 0
je 0x46649f
mov ecx, dword [0x4cc4e8]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esp + 0x7c]
mov bl, byte [edx + 6]
mov ecx, edi
mov dword [esp + 0x78], eax
call fcn.0046b5c0
mov esi, eax
test esi, esi
je 0x466500
mov eax, dword [esp + 0x7c]
mov al, byte [eax + 7]
call fcn.0046b740
test eax, eax
jne 0x466500
mov ebx, dword [esp + 0x74]
mov edx, esi
lea edi, [esp + 0x28]
mov ecx, ebx
call fcn.0046b850
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x78]
add edx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], edx
jne case.0x465ebe.7
mov eax, dword [ebx + 0x78]
add eax, ecx
mov dword [ebp + 0x20], eax
jmp case.0x465ebe.7
mov ecx, dword [edi + 0x8c]
add ecx, dword [edi + 0x84]
add ecx, dword [esp + 0x78]
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], ecx
jne case.0x465ebe.7
mov edx, dword [edi + 0x80]
mov dword [ebp + 0x20], edx
jmp case.0x465ebe.7
call fcn.00409e20
cmp ax, 0x4d
jne 0x466584
lea esi, [edi + 2]
call fcn.0040f2d0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x46655e
mov ecx, dword [0x4cc4e8]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x7c]
add edx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], edx
jne case.0x465ebe.7
mov eax, dword [esi + 0x90]
add eax, dword [esi + 0x78]
mov dword [ebp + 0x20], eax
jmp case.0x465ebe.7
mov ax, word [edi]
call fcn.00409e20
cmp ax, 0x50
jne 0x4665dd
lea esi, [edi + 2]
call fcn.0040f2d0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x4665b7
mov ecx, dword [0x4cc4e8]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x84]
add edx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], edx
jne case.0x465ebe.7
mov eax, dword [esi + 0x80]
mov dword [ebp + 0x20], eax
jmp case.0x465ebe.7
mov ax, word [edi]
call fcn.00409e20
cmp ax, 0x53
jne 0x466639
lea esi, [edi + 2]
call fcn.0040f2d0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x466610
mov ecx, dword [0x4cc4e8]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x9c]
add edx, eax
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], edx
jne case.0x465ebe.7
mov eax, dword [esi + 0xa0]
add eax, dword [esi + 0x78]
mov dword [ebp + 0x20], eax
jmp case.0x465ebe.7
mov esi, edi
call fcn.0040f2d0
mov esi, dword [esp + 0x74]
cmp byte [esi + 0xc0], 0
je 0x46665d
mov ecx, dword [0x4cc4e8]
push 0x60
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
cmp dword [ebp + 0x20], 0x80000000
mov dword [ebp + 0x24], eax
jne case.0x465ebe.7
mov edx, dword [esi + 0x90]
add edx, dword [esi + 0x78]
mov dword [ebp + 0x20], edx
jmp case.0x465ebe.7
mov esi, edi
call fcn.004154b0
fstp dword [ebp + 0x30]
jmp case.0x465ebe.7
mov ax, word [edi - 2]
call fcn.00409e20
cmp ax, 0x45
jne 0x46678e
push 0
push 0
push 0
push 0
mov eax, edi
call fcn.004771e0
add esp, 0x10
test eax, eax
je 0x46678e
mov esi, edi
call fcn.00415480
test bl, bl
je 0x4666c0
or dword [ebp + 8], eax
jmp case.0x465ebe.7
or dword [ebp + 0xc], eax
mov ecx, dword [esp + 0x14]
mov ax, word [esp + 0x18]
mov word [ecx], ax
mov eax, dword [esp + 0x14]
mov edi, eax
movzx eax, word [edi]
cmp eax, 0x20
je 0x4666e2
cmp eax, 9
jne 0x4666e7
add edi, 2
jmp 0x4666d5
cmp word [edi], 0
jne 0x464aeb
mov esi, dword [esp + 0x7c]
mov eax, dword [esi]
test eax, eax
je 0x466d1b
push 0xfffffffffffffff0
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, dword [ebp + 4]
mov ecx, dword [ebp]
mov ebx, eax
mov dword [esp + 0x78], eax
mov eax, edx
not eax
or ebx, ecx
and ebx, eax
movzx eax, byte [esi + 4]
add eax, 0xfffffffe
cmp eax, 8
ja case.0x46672c.9
jmp dword [eax*4 + 0x466f20]
mov esi, dword [esp + 0x7c]
mov eax, 0x4a7598
jmp 0x466755
mov eax, 0x4c0d98
jmp 0x466755
add edi, 0xfffffffe
push edi
push 0x4c0e10
jmp 0x466797
mov eax, 0x4c0e70
mov dx, word [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov word [ecx], dx
cmp dword [esi], 0
je 0x466775
call fcn.0040a080
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
add edi, 0xfffffffe
push edi
push eax
mov ecx, 0x4cc518
call fcn.00430c90
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
add edi, 0xfffffffe
push edi
push 0x4a7df0
mov ecx, 0x4cc518
call fcn.00430c90
mov eax, dword [esp + 0x14]
mov dx, word [esp + 0x18]
mov word [eax], dx
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
mov ecx, ebx
xor ecx, dword [esp + 0x78]
and ecx, 0xf
xor ebx, ecx
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp + 0x64]
test eax, eax
je 0x4669a6
mov cl, byte [esi + 4]
cmp cl, 0xc
jne 0x466982
push 0
test eax, eax
jns 0x466977
mov eax, dword [esi]
push 0
push 0xc5
push eax
call edi
cmp dword [ebp + 0x64], 0x80000000
je 0x4669a6
test bl, 4
jne 0x4669a6
and ebx, 0xffefff7f
jmp 0x4669a6
and ebx, 0xfffffff7
or ebx, 7
jmp case.0x46672c.9
test bl, 1
je 0x46682d
and ebx, 0xfffffff1
or ebx, 1
jmp 0x466830
and ebx, 0xfffffff0
mov edi, dword [esp + 0x74]
mov eax, dword [edi + 0x1c]
cmp dword [esp + 0x80], eax
jne 0x466871
test dl, 1
je case.0x46672c.9
push 0
mov eax, edi
mov edx, dword [eax + 4]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 1
push 0x401
push edx
mov dword [eax + 0x1c], 0xffffffff
call edi
or dword [esp + 0x78], 1
jmp 0x4667ca
test cl, 1
je case.0x46672c.9
cmp eax, dword [edi + 0x10]
jae 0x4668b5
mov ecx, dword [edi + 0x18]
push 1
lea eax, [eax + eax*4]
mov edx, dword [ecx + eax*4]
push 0xfffffffffffffff0
push edx
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, dword [edi + 0x18]
and eax, 0xfffe
push eax
mov eax, dword [edi + 0x1c]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [eax + eax*4]
mov edx, dword [ecx + eax*4]
push 0xf4
push edx
call edi
jmp 0x4668bb
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x80]
mov dword [ecx + 0x1c], eax
push 0
add eax, 3
push eax
mov eax, dword [ecx + 4]
push 0x401
push eax
call edi
jmp 0x4667ca
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, ebx
and ecx, 6
cmp cl, 6
jne 0x4668fa
and ebx, 0xfffffff6
or ebx, 6
jmp 0x4667ca
and ebx, 0xfffffff3
or ebx, 3
jmp 0x4667ca
and ebx, 0xfffffff9
or ebx, 9
jmp case.0x46672c.9
or ebx, 3
jmp case.0x46672c.9
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
test bl, 1
je 0x46692e
and ebx, 0xfffffff1
or ebx, 1
jmp 0x4667ca
and ebx, 0xfffffff2
or ebx, 2
jmp 0x4667ca
mov eax, dword [ebp + 0x14]
cmp eax, 0xffffffff
je case.0x46672c.9
cmp byte [0x4cd1c2], 0
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
je 0x466961
mov edx, dword [esi]
push 0
push eax
push 0x108e
push edx
call edi
mov eax, dword [ebp + 0x14]
cmp eax, 4
je 0x4667ca
and ebx, 0xfffffffc
or ebx, eax
jmp 0x4667ca
mov ecx, dword [esi]
push eax
push 0xc5
push ecx
jmp 0x4669a4
cmp cl, 0xf
jne 0x4669a6
test eax, eax
jns 0x466999
mov edx, dword [esi]
push 0
push 0
push 0x403
push edx
jmp 0x4669a4
push 6
push eax
mov eax, dword [esi]
push 0x403
push eax
call edi
mov ecx, dword [esp + 0x78]
mov byte [esp + 0x7c], 0
cmp ecx, ebx
je 0x466a8e
mov al, byte [esi + 4]
mov byte [esp + 0x7c], 1
mov byte [esp + 0x84], 0
cmp al, 4
je 0x466a43
cmp al, 9
je 0x4669eb
cmp al, 0x12
jne 0x466a53
mov ecx, dword [esi]
push 0
push 0
push 0x408
push ecx
call edi
mov dword [esp + 0x18], eax
jmp 0x466a53
mov eax, ebx
and eax, 0x100000
je 0x466a2b
test ecx, 0x100000
jne 0x466a2b
cmp dword [ebp + 0x68], 0
jge 0x466a1e
mov eax, dword [esi]
lea edx, [esp + 0x30]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x38]
sub eax, dword [esp + 0x30]
lea ecx, [eax + eax*2]
mov dword [ebp + 0x68], ecx
mov edx, dword [ebp + 0x68]
push 0
push edx
push 0x194
jmp 0x466a4e
test eax, eax
jne 0x466a53
test ecx, 0x100000
je 0x466a53
mov ecx, dword [esi]
push eax
push eax
push 0x194
push ecx
jmp 0x466a51
movzx edx, bx
push 1
push edx
push 0xf4
mov eax, dword [esi]
push eax
call edi
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esi]
push ebx
push 0xfffffffffffffff0
push ecx
call dword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x466a75
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x466a8e
mov edx, dword [esi]
push 0xfffffffffffffff0
push edx
call dword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, dword [esp + 0x78]
je 0x466a8e
mov byte [esp + 0x84], 1
mov eax, dword [esi]
push 0xffffffffffffffec
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
or ecx, eax
not edx
and ecx, edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x80], ecx
cmp eax, ecx
je 0x466b0a
cmp byte [esp + 0x7c], 0
jne 0x466ac8
mov byte [esp + 0x7c], 1
mov byte [esp + 0x84], 0
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0x80]
mov ecx, dword [esi]
push eax
push 0xffffffffffffffec
push ecx
call dword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
jne 0x466af1
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x466b0a
mov edx, dword [esi]
push 0xffffffffffffffec
push edx
call dword [sym.imp.USER32.dll_GetWindowLongW]
cmp eax, dword [esp + 0x1c]
je 0x466b0a
mov byte [esp + 0x84], 1
cmp byte [esi + 4], 0xa
jne 0x466b6c
mov eax, dword [esi]
push 0
push 0
push 0x1037
push eax
call edi
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x80], eax
cmp eax, ecx
je 0x466b6c
cmp byte [esp + 0x7c], 0
jne 0x466b40
mov byte [esp + 0x7c], 1
mov byte [esp + 0x84], 0
push ecx
mov ecx, dword [esi]
push 0
push 0x1036
push ecx
call edi
mov edx, dword [esi]
push 0
push 0
push 0x1037
push edx
call edi
cmp eax, dword [esp + 0x80]
je 0x466b6c
mov byte [esp + 0x84], 1
cmp byte [esp + 0x7c], 0
je 0x466b82
cmp byte [esp + 0x84], 0
je 0x466b82
mov byte [esp + 0x13], 1
movzx eax, byte [esi + 4]
add eax, 0xfffffff7
cmp eax, 0x10
ja case.0x466b99.13
movzx eax, byte [eax + 0x466f68]
jmp dword [eax*4 + 0x466f44]
cmp byte [ebp + 0x18e], 0
je case.0x466b99.13
mov ecx, ebp
mov eax, esi
call fcn.0046ad60
jmp case.0x466b99.13
mov eax, ebp
call fcn.0046ae40
test dword [ebp + 4], 0x100
je case.0x466b99.13
mov ecx, dword [esi]
push 0
push 0
push 0x41d
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x466b99.13
mov eax, ebp
mov edi, esi
call fcn.0046af50
jmp case.0x466b99.13
mov edi, ebp
call fcn.0046b000
jmp case.0x466b99.13
mov edx, dword [esp + 0x74]
push ebx
push edx
mov eax, ebp
mov ecx, esi
call fcn.0046b050
cmp dword [esp + 0x78], ebx
je case.0x466b99.13
mov eax, dword [esp + 0x18]
mov ecx, dword [esi]
push 0
push eax
push 0x402
push ecx
jmp 0x466c79
mov eax, dword [ebp + 0x13c]
test eax, eax
je case.0x466b99.13
lea edx, [ebp + 0x74]
push edx
push eax
mov eax, dword [esi]
push 0xcb
push eax
call edi
mov byte [esp + 0x13], 1
jmp case.0x466b99.13
mov eax, dword [ebp + 0x13c]
test eax, eax
je case.0x466b99.13
mov edx, dword [esi]
lea ecx, [ebp + 0x74]
push ecx
push eax
push 0x192
push edx
call edi
mov byte [esp + 0x13], 1
jmp case.0x466b99.13
mov eax, dword [ebp + 0x60]
cmp eax, 0xffffffff
je case.0x466b99.13
push eax
mov eax, dword [esi]
push 0
push 0x2001
push eax
call edi
mov eax, dword [ebp + 0x188]
test eax, eax
je 0x466caa
mov edx, dword [esi]
xor ecx, ecx
cmp eax, 3
sete cl
push 0
push ecx
push 0xb
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebp + 0x188], 3
jne 0x466caa
cmp byte [esi + 4], 0xb
jne 0x466cb1
cmp byte [esp + 0x13], 0
je 0x466cbe
mov eax, dword [esi]
push 1
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
cmp byte [esp + 0x7c], 0
je 0x466d1b
cmp byte [esp + 0x84], 0
jne 0x466d1b
mov ecx, dword [0x4c7a54]
test byte [ecx + 0x100], 1
jne 0x466d04
mov edx, dword [0x4cbd60]
push 1
push 0
push 0xffffffffffffffff
push 0x4a7314
push edx
call fcn.0047a6b0
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x14
mov ecx, dword [0x4ccb4c]
push 0x4a4910
push 0
push 0x4a7314
call fcn.004305e0
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x60
ret 0x14