Function at 0x443260
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x69f107
mov eax, dword fs:[0]
push eax
sub esp, 0x428
mov eax, dword [0x76f950]
xor eax, esp
mov dword [esp + 0x3f0], eax
push ebx
push esi
push edi
mov eax, dword [0x76f950]
xor eax, esp
push eax
lea eax, [esp + 0x438]
mov dword fs:[0], eax
mov dword [esp + 0x44], ecx
call fcn.00456620
mov ebx, eax
mov dword [esp + 0x60], ebx
test ebx, ebx
je 0x44454f
push 0x6e6c90
lea ecx, [esp + 0x138]
call fcn.0040ac00
mov dword [esp + 0x440], 0
push 0x6e6ca0
lea ecx, [esp + 0x150]
call fcn.0040ac00
mov byte [esp + 0x440], 1
lea eax, [esp + 0x134]
push eax
lea eax, [esp + 0x150]
push eax
push ebx
call fcn.004422f0
mov byte [esp + 0x440], 0
cmp dword [esp + 0x160], 8
jb 0x443323
push dword [esp + 0x14c]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x160], 7
mov dword [esp + 0x15c], 0
mov word [esp + 0x14c], ax
mov dword [esp + 0x440], 0xffffffff
cmp dword [esp + 0x148], 8
jb 0x443367
push dword [esp + 0x134]
call fcn.00633f98
add esp, 4
xor eax, eax
push 0x6e6c98
lea ecx, [esp + 0x138]
mov dword [esp + 0x14c], 7
mov dword [esp + 0x148], 0
mov word [esp + 0x138], ax
call fcn.0040ac00
mov dword [esp + 0x440], 2
push 0x6e6cac
lea ecx, [esp + 0x150]
call fcn.0040ac00
mov byte [esp + 0x440], 3
lea eax, [esp + 0x134]
push eax
lea eax, [esp + 0x150]
push eax
push ebx
call fcn.004422f0
mov byte [esp + 0x440], 2
cmp dword [esp + 0x160], 8
jb 0x4433f3
push dword [esp + 0x14c]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x160], 7
mov dword [esp + 0x15c], 0
mov word [esp + 0x14c], ax
mov dword [esp + 0x440], 0xffffffff
cmp dword [esp + 0x148], 8
jb 0x443437
push dword [esp + 0x134]
call fcn.00633f98
add esp, 4
xor eax, eax
push 0x6e6ca4
lea ecx, [esp + 0x138]
mov dword [esp + 0x14c], 7
mov dword [esp + 0x148], 0
mov word [esp + 0x138], ax
call fcn.0040ac00
mov dword [esp + 0x440], 4
push 0x6e6cb8
lea ecx, [esp + 0x150]
call fcn.0040ac00
mov byte [esp + 0x440], 5
lea eax, [esp + 0x134]
push eax
lea eax, [esp + 0x150]
push eax
push ebx
call fcn.004422f0
mov byte [esp + 0x440], 4
cmp dword [esp + 0x160], 8
jb 0x4434c3
push dword [esp + 0x14c]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x160], 7
mov dword [esp + 0x15c], 0
mov word [esp + 0x14c], ax
mov dword [esp + 0x440], 0xffffffff
cmp dword [esp + 0x148], 8
jb 0x443507
push dword [esp + 0x134]
call fcn.00633f98
add esp, 4
xor eax, eax
push 0x6e6cb0
lea ecx, [esp + 0x138]
mov dword [esp + 0x14c], 7
mov dword [esp + 0x148], 0
mov word [esp + 0x138], ax
call fcn.0040ac00
mov dword [esp + 0x440], 6
push 0x6e6ccc
lea ecx, [esp + 0x150]
call fcn.0040ac00
mov byte [esp + 0x440], 7
lea eax, [esp + 0x134]
push eax
lea eax, [esp + 0x150]
push eax
push ebx
call fcn.004422f0
mov byte [esp + 0x440], 6
cmp dword [esp + 0x160], 8
jb 0x443593
push dword [esp + 0x14c]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x160], 7
mov dword [esp + 0x15c], 0
mov word [esp + 0x14c], ax
mov dword [esp + 0x440], 0xffffffff
cmp dword [esp + 0x148], 8
jb 0x4435d7
push dword [esp + 0x134]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x148], 7
mov dword [esp + 0x144], 0
mov word [esp + 0x134], ax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x440], 8
mov edi, dword [ebx]
mov ecx, dword [ebx + 4]
mov dword [esp + 0x5c], eax
sub ecx, edi
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
xor esi, esi
add eax, edx
mov dword [esp + 0x80], eax
je 0x44366c
add edi, 0x18
mov dword [esp + 0x3c], eax
mov ebx, dword [edi]
mov ecx, dword [edi + 4]
sub ecx, ebx
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 6
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
je 0x44365f
lea eax, [ebx + 0x74]
cmp byte [eax], 0
je 0x443659
inc esi
add eax, 0x78
dec ecx
jne 0x443653
add edi, 0x24
dec dword [esp + 0x3c]
jne 0x443634
mov ebx, dword [esp + 0x60]
mov eax, dword [esp + 0x44]
add eax, 0x1c
push esi
mov ecx, eax
mov dword [esp + 0x9c], eax
call fcn.004449d0
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
xor edi, edi
mov dword [esp + 0x84], edi
mov dword [esp + 0x78], eax
cmp dword [esp + 0x80], eax
jbe 0x444513
lea ecx, [eax + eax*8]
mov eax, dword [ebx]
lea esi, [eax + ecx*4]
mov ecx, dword [esi + 0x1c]
sub ecx, dword [esi + 0x18]
lea eax, [esi + 0x18]
mov dword [esp + 0x70], eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 6
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov dword [esp + 0x94], ebx
mov ecx, 0
je 0x4436f0
mov eax, dword [esp + 0x70]
mov eax, dword [eax]
add eax, 0x74
cmp byte [eax], 0
jne 0x443712
inc ecx
add eax, 0x78
cmp ecx, ebx
jb 0x4436e3
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [esp + 0x78]
inc eax
mov dword [esp + 0x78], eax
cmp eax, dword [esp + 0x80]
jae 0x444513
mov ebx, dword [esp + 0x60]
jmp 0x4436a4
push 0x44
lea eax, [esp + 0xf0]
push 0
push eax
call fcn.0063ac00
add esp, 0xc
cmp dword [esi + 0x14], 8
mov dword [esp + 0xf0], 0xffff0002
mov dword [esp + 0xf4], 1
mov dword [esp + 0xec], 0xffff0000
jb 0x44374f
mov esi, dword [esi]
lea eax, [esp + 0xec]
push eax
mov eax, dword [esp + 0x48]
push 0
push 0x1132
push dword [eax + 4]
mov dword [esp + 0x114], esi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
call esi
mov edx, eax
mov eax, dword [esp + 0x5c]
test eax, eax
cmove eax, edx
mov dword [esp + 0x5c], eax
xor eax, eax
mov dword [esp + 0x74], edx
mov dword [esp + 0x7c], eax
lea ecx, [ecx]
mov ecx, eax
shl ecx, 4
sub ecx, eax
mov eax, dword [esp + 0x70]
mov eax, dword [eax]
cmp byte [eax + ecx*8 + 0x74], 0
lea ebx, [eax + ecx*8]
mov dword [esp + 0x58], ebx
je 0x4444d6
mov eax, dword [esp + 0x98]
mov esi, edi
shl esi, 4
sub esi, edi
mov edi, dword [eax]
mov dword [esp + 0x48], esi
lea eax, [edi + 4]
mov dword [esp + 0x40], edi
lea eax, [eax + esi*8]
cmp eax, ebx
je 0x4437dd
push 0xffffffffffffffff
push 0
push ebx
mov ecx, eax
call fcn.0040ad70
lea ecx, [edi + 0x34]
add ebx, 0x30
lea ecx, [ecx + esi*8]
cmp ecx, ebx
je 0x4437f4
push 0xffffffffffffffff
push 0
push ebx
call fcn.0040ad70
push 1
xor eax, eax
mov dword [esp + 0x1d8], 0
mov dword [esp + 0x1dc], 0
push 0x6e6cc8
lea ecx, [esp + 0x1cc]
mov dword [esp + 0x1e0], 7
mov dword [esp + 0x1dc], 0
mov word [esp + 0x1cc], ax
call fcn.0040ae70
mov byte [esp + 0x440], 9
push 1
xor eax, eax
mov dword [esp + 0x1c0], 0
mov dword [esp + 0x1c4], 0
push 0x6e6ce0
lea ecx, [esp + 0x1b4]
mov dword [esp + 0x1c8], 7
mov dword [esp + 0x1c4], 0
mov word [esp + 0x1b4], ax
call fcn.0040ae70
mov byte [esp + 0x440], 0xa
push ebx
lea edx, [esp + 0x1b0]
lea ecx, [esp + 0x1e0]
call fcn.0040b7d0
add esp, 4
mov byte [esp + 0x440], 0xb
lea ecx, [esp + 0x1c4]
push ecx
mov edx, eax
lea ecx, [esp + 0x240]
call fcn.0040b850
add esp, 4
mov byte [esp + 0x440], 0xc
mov ecx, dword [esp + 0x58]
add ecx, 0x18
push ecx
mov edx, eax
lea ecx, [esp + 0x270]
call fcn.0040b7d0
add esp, 4
mov edi, eax
mov byte [esp + 0x440], 0xd
lea esi, [esi*8 + 0x54]
add esi, dword [esp + 0x40]
cmp esi, edi
je 0x44398b
cmp dword [esi + 0x14], 8
jb 0x44391c
push dword [esi]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], ax
cmp dword [edi + 0x14], 8
jae 0x44394a
mov eax, dword [edi + 0x10]
inc eax
je 0x44396c
add eax, eax
push eax
push edi
push esi
call fcn.006337f0
add esp, 0xc
jmp 0x44396c
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], esi
mov byte [esp + 0x440], 0xe
mov eax, dword [edi]
mov dword [esi], eax
mov byte [esp + 0x440], 0xd
mov dword [edi], 0
mov eax, dword [edi + 0x10]
mov dword [esi + 0x10], eax
mov eax, dword [edi + 0x14]
mov dword [esi + 0x14], eax
xor eax, eax
mov dword [edi + 0x14], 7
mov dword [edi + 0x10], 0
mov word [edi], ax
mov byte [esp + 0x440], 0xc
cmp dword [esp + 0x280], 8
jb 0x4439ac
push dword [esp + 0x26c]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x280], 7
mov dword [esp + 0x27c], 0
mov word [esp + 0x26c], ax
mov byte [esp + 0x440], 0xb
cmp dword [esp + 0x250], 8
jb 0x4439ed
push dword [esp + 0x23c]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x250], 7
mov dword [esp + 0x24c], 0
mov word [esp + 0x23c], ax
mov byte [esp + 0x440], 0xa
cmp dword [esp + 0x1f0], 8
jb 0x443a2e
push dword [esp + 0x1dc]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x1f0], 7
mov dword [esp + 0x1ec], 0
mov word [esp + 0x1dc], ax
mov byte [esp + 0x440], 9
cmp dword [esp + 0x1c0], 8
jb 0x443a6f
push dword [esp + 0x1ac]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x1c0], 7
mov dword [esp + 0x1bc], 0
mov word [esp + 0x1ac], ax
mov byte [esp + 0x440], 8
cmp dword [esp + 0x1d8], 8
jb 0x443ab0
push dword [esp + 0x1c4]
call fcn.00633f98
add esp, 4
xor eax, eax
push esi
mov dword [esp + 0x1dc], 7
mov dword [esp + 0x1d8], 0
mov word [esp + 0x1c8], ax
call fcn.004428b0
mov eax, dword [esp + 0x58]
mov esi, dword [esp + 0x48]
mov ecx, dword [eax + 0x6c]
sub ecx, dword [eax + 0x68]
mov edi, dword [esp + 0x40]
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [esi*8 + 0x6c]
add ecx, edi
push eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], ecx
call fcn.00444870
xor eax, eax
push 1
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
push 0x6e6cdc
lea ecx, [esp + 0x184]
mov dword [edi + esi*8 + 0x50], 0xffffffff
mov dword [esp + 0x198], 7
mov dword [esp + 0x194], 0
mov word [esp + 0x184], ax
call fcn.0040ae70
mov byte [esp + 0x440], 0xf
push ebx
lea edx, [esp + 0x180]
lea ecx, [esp + 0x150]
call fcn.0040b7d0
add esp, 4
mov byte [esp + 0x440], 0x11
cmp dword [esp + 0x190], 8
jb 0x443ba1
push dword [esp + 0x17c]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x174], eax
mov dword [esp + 0x178], eax
mov dword [esp + 0x190], 7
mov dword [esp + 0x18c], 0
mov word [esp + 0x17c], ax
mov dword [esp + 0x178], 7
mov dword [esp + 0x174], eax
mov word [esp + 0x164], ax
mov byte [esp + 0x440], 0x12
cmp dword [esp + 0x160], 8
lea ecx, [esp + 0x14c]
cmovae ecx, dword [esp + 0x14c]
lea edx, [esp + 0x64]
call fcn.004312a0
test al, al
je 0x443e02
mov eax, dword [esp + 0x6c]
cmp eax, 5
ja case.0x443c26.0
jmp dword [eax*4 + 0x444574]
lea ecx, [esp + 0x64]
call fcn.004dcf60
mov edi, eax
jmp 0x443d46
mov edi, dword [esp + 0x64]
test edi, edi
je 0x443d46
inc dword [edi]
mov edi, dword [esp + 0x64]
jmp 0x443d46
push dword [esp + 0x68]
lea ecx, [esp + 0x2b8]
push dword [esp + 0x68]
call fcn.004966e0
mov esi, eax
add esp, 8
test esi, esi
je case.0x443c26.0
cmp word [esi], 0
je case.0x443c26.0
call fcn.004df4c0
mov edi, eax
push 0xffffffffffffffff
push esi
mov ecx, edi
call fcn.0040bb30
jmp 0x443d46
movsd xmm0, qword [esp + 0x64]
movsd qword [esp + 0x8c], xmm0
call fcn.004dd310
mov edi, eax
test edi, edi
jne 0x443d46
cmp byte [0x77ae3b], al
jne 0x443ce7
push eax
push eax
mov byte [0x77ae3b], 1
call fcn.006366a9
push 0x8001f
push 0x8001f
mov dword [0x77ae3c], eax
call fcn.006366a9
add esp, 0x10
mov dword [0x77ae40], eax
jmp 0x443cec
mov eax, dword [0x77ae40]
push 0xffff
push eax
call fcn.006366a9
movsd xmm0, qword [esp + 0x94]
movsd qword [esp], xmm0
push str._.15lg
lea eax, [esp + 0x308]
push 0x80
push eax
call fcn.0063439c
add esp, 0x14
cmp word [esp + 0x2fc], 0
je case.0x443c26.0
call fcn.004df4c0
mov edi, eax
push 0xffffffffffffffff
lea eax, [esp + 0x300]
push eax
mov ecx, edi
call fcn.0040bb30
jmp 0x443d46
xor edi, edi
mov dword [esp + 0xa0], edi
mov byte [esp + 0x440], 0x13
test edi, edi
jne 0x443d62
xor ecx, ecx
mov eax, 0x6f4744
jmp 0x443d6f
mov eax, dword [edi + 4]
mov ecx, dword [edi + 0x34]
test eax, eax
jne 0x443d6f
lea eax, [edi + 8]
push ecx
push eax
lea ecx, [esp + 0x16c]
call fcn.0040ae70
mov byte [esp + 0x440], 0x12
test edi, edi
je 0x443e02
mov eax, dword [edi]
test eax, eax
jne 0x443dff
mov esi, dword [0x77ae88]
push esi
mov dword [esp + 0xa0], esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [esp + 0x440], 0x14
mov eax, dword [edi + 4]
test eax, eax
je 0x443dbe
add eax, 0xfffffffc
push eax
call fcn.00634402
add esp, 4
mov ecx, dword [0x77ae80]
mov eax, dword [0x77ae90]
dec dword [0x77ae94]
mov dword [edi + 0x38], 0
mov dword [eax + ecx*4], edi
inc ecx
mov dword [0x77ae80], ecx
mov byte [esp + 0x440], 0x12
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x77ae94], 0
jne 0x443e02
call fcn.004df050
jmp 0x443e02
dec eax
mov dword [edi], eax
cmp dword [esp + 0x50], 0
mov dword [esp + 0x3c], 0xffffffff
mov dword [esp + 0x4c], 0
jbe 0x443f5f
mov ebx, dword [esp + 0x174]
xor edx, edx
xor esi, esi
mov dword [esp + 0x8c], edx
mov dword [esp + 0x88], esi
mov eax, dword [esp + 0x54]
mov edi, dword [eax]
mov eax, dword [esp + 0x58]
add edi, esi
mov esi, dword [eax + 0x68]
add esi, edx
cmp edi, esi
je 0x443e5e
push 0xffffffffffffffff
push 0
push esi
mov ecx, edi
call fcn.0040ad70
mov ebx, dword [esp + 0x174]
lea eax, [esi + 0x18]
lea ecx, [edi + 0x18]
cmp ecx, eax
je 0x443e79
push 0xffffffffffffffff
push 0
push eax
call fcn.0040ad70
mov ebx, dword [esp + 0x174]
cmp byte [esi + 0x30], 0
mov eax, dword [esp + 0x4c]
je 0x443e96
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x40]
mov dword [edx + ecx*8 + 0x50], eax
mov ebx, dword [esp + 0x174]
mov ecx, dword [esp + 0x3c]
test ecx, ecx
jns 0x443f1c
test ebx, ebx
je 0x443f1c
cmp dword [esi + 0x14], 8
mov edi, dword [esi + 0x10]
jb 0x443ead
mov esi, dword [esi]
cmp dword [esp + 0x178], 8
lea ecx, [esp + 0x164]
cmovae ecx, dword [esp + 0x164]
cmp ebx, edi
mov edx, edi
cmovb edx, ebx
test edx, edx
jne 0x443ee0
xor eax, eax
test eax, eax
jne 0x443f08
cmp ebx, edi
jae 0x443eff
or eax, 0xffffffff
jmp 0x443f06
mov ax, word [ecx]
cmp ax, word [esi]
jne 0x443ef1
add ecx, 2
add esi, 2
dec edx
jmp 0x443ecd
movzx eax, word [ecx]
cmp ax, word [esi]
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0x443ed1
xor eax, eax
cmp ebx, edi
setne al
test eax, eax
mov ecx, dword [esp + 0x3c]
sete al
test al, al
mov eax, dword [esp + 0x4c]
cmovne ecx, eax
mov dword [esp + 0x3c], ecx
mov esi, dword [esp + 0x88]
mov edx, dword [esp + 0x8c]
inc eax
add esi, 0x30
add edx, 0x34
mov dword [esp + 0x4c], eax
mov dword [esp + 0x88], esi
mov dword [esp + 0x8c], edx
cmp eax, dword [esp + 0x50]
jb 0x443e36
test ecx, ecx
js 0x443f5f
mov ebx, dword [esp + 0x48]
mov esi, dword [esp + 0x40]
mov dword [esi + ebx*8 + 0x4c], ecx
jmp 0x443f7d
mov ebx, dword [esp + 0x48]
mov esi, dword [esp + 0x40]
mov eax, dword [esi + ebx*8 + 0x50]
test eax, eax
js 0x443f75
mov dword [esi + ebx*8 + 0x4c], eax
jmp 0x443f7d
mov dword [esi + ebx*8 + 0x4c], 0
mov eax, dword [esi + ebx*8 + 0x50]
cmp eax, dword [esi + ebx*8 + 0x4c]
je 0x44427a
push 3
xor eax, eax
mov dword [esp + 0x148], 0
mov dword [esp + 0x14c], 0
push 0x6e6cec
lea ecx, [esp + 0x13c]
mov dword [esp + 0x150], 7
mov dword [esp + 0x14c], 0
mov word [esp + 0x13c], ax
call fcn.0040ae70
mov byte [esp + 0x440], 0x15
push 2
xor eax, eax
mov dword [esp + 0x1a8], 0
mov dword [esp + 0x1ac], 0
push 0x6e6ce4
lea ecx, [esp + 0x19c]
mov dword [esp + 0x1b0], 7
mov dword [esp + 0x1ac], 0
mov word [esp + 0x19c], ax
call fcn.0040ae70
mov byte [esp + 0x440], 0x16
lea edx, [ebx*8 + 4]
add edx, esi
push edx
lea edx, [esp + 0x198]
lea ecx, [esp + 0x288]
call fcn.0040b7d0
add esp, 4
mov byte [esp + 0x440], 0x17
lea ecx, [esp + 0x134]
push ecx
mov edx, eax
lea ecx, [esp + 0x228]
call fcn.0040b850
add esp, 4
mov byte [esp + 0x440], 0x18
mov ecx, dword [esi + ebx*8 + 0x4c]
mov edx, eax
lea ecx, [ecx + ecx*2]
shl ecx, 4
add ecx, 0x18
add ecx, dword [esi + ebx*8 + 0x6c]
push ecx
lea ecx, [esp + 0x2a0]
call fcn.0040b7d0
add esp, 4
mov edi, eax
mov byte [esp + 0x440], 0x19
lea esi, [esi + ebx*8]
add esi, 0x1c
cmp esi, edi
je 0x444130
cmp dword [esi + 0x14], 8
jb 0x4440c1
push dword [esi]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], ax
cmp dword [edi + 0x14], 8
jae 0x4440ef
mov eax, dword [edi + 0x10]
inc eax
je 0x444111
add eax, eax
push eax
push edi
push esi
call fcn.006337f0
add esp, 0xc
jmp 0x444111
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], esi
mov byte [esp + 0x440], 0x1a
mov eax, dword [edi]
mov dword [esi], eax
mov byte [esp + 0x440], 0x19
mov dword [edi], 0
mov eax, dword [edi + 0x10]
mov dword [esi + 0x10], eax
mov eax, dword [edi + 0x14]
mov dword [esi + 0x14], eax
xor eax, eax
mov dword [edi + 0x14], 7
mov dword [edi + 0x10], 0
mov word [edi], ax
mov byte [esp + 0x440], 0x18
cmp dword [esp + 0x2b0], 8
jb 0x444151
push dword [esp + 0x29c]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x2b0], 7
mov dword [esp + 0x2ac], 0
mov word [esp + 0x29c], ax
mov byte [esp + 0x440], 0x17
cmp dword [esp + 0x238], 8
jb 0x444192
push dword [esp + 0x224]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x238], 7
mov dword [esp + 0x234], 0
mov word [esp + 0x224], ax
mov byte [esp + 0x440], 0x16
cmp dword [esp + 0x298], 8
jb 0x4441d3
push dword [esp + 0x284]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x298], 7
mov dword [esp + 0x294], 0
mov word [esp + 0x284], ax
mov byte [esp + 0x440], 0x15
cmp dword [esp + 0x1a8], 8
jb 0x444214
push dword [esp + 0x194]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x1a8], 7
mov dword [esp + 0x1a4], 0
mov word [esp + 0x194], ax
mov byte [esp + 0x440], 0x12
cmp dword [esp + 0x148], 8
jb 0x444255
push dword [esp + 0x134]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x148], 7
mov dword [esp + 0x144], 0
mov word [esp + 0x134], ax
jmp 0x4443d9
push 0x6e6d0c
lea ecx, [esp + 0x210]
call fcn.0040ac00
mov byte [esp + 0x440], 0x1b
lea edx, [ebx*8 + 4]
push eax
add edx, esi
lea ecx, [esp + 0x1f8]
call fcn.004454a0
add esp, 4
mov byte [esp + 0x440], 0x1c
mov ecx, dword [esi + ebx*8 + 0x4c]
mov edx, eax
lea ecx, [ecx + ecx*2]
shl ecx, 4
add ecx, 0x18
add ecx, dword [esi + ebx*8 + 0x6c]
push ecx
lea ecx, [esp + 0x258]
call fcn.0040b7d0
add esp, 4
mov edi, eax
mov byte [esp + 0x440], 0x1d
lea esi, [esi + ebx*8]
add esi, 0x1c
cmp esi, edi
je 0x444316
cmp dword [esi + 0x14], 8
jb 0x4442fb
push dword [esi]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
push edi
mov ecx, esi
mov word [esi], ax
call fcn.0040acd0
mov byte [esp + 0x440], 0x1c
cmp dword [esp + 0x268], 8
jb 0x444337
push dword [esp + 0x254]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x268], 7
mov dword [esp + 0x264], 0
mov word [esp + 0x254], ax
mov byte [esp + 0x440], 0x1b
cmp dword [esp + 0x208], 8
jb 0x444378
push dword [esp + 0x1f4]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x208], 7
mov dword [esp + 0x204], 0
mov word [esp + 0x1f4], ax
mov byte [esp + 0x440], 0x12
cmp dword [esp + 0x220], 8
jb 0x4443b9
push dword [esp + 0x20c]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x220], 7
mov dword [esp + 0x21c], 0
mov word [esp + 0x20c], ax
push 0x44
lea eax, [esp + 0xa8]
push 0
push eax
call fcn.0063ac00
mov eax, dword [esp + 0x80]
add esp, 0xc
cmp dword [esi + 0x14], 8
mov dword [esp + 0xa8], 0xffff0002
mov dword [esp + 0xac], 1
mov dword [esp + 0xa4], eax
jb 0x444419
mov esi, dword [esi]
lea eax, [esp + 0xa4]
push eax
mov eax, dword [esp + 0x48]
push 0
push 0x1132
push dword [eax + 4]
mov dword [esp + 0xcc], esi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
call esi
mov edi, dword [esp + 0x84]
mov ecx, dword [esp + 0x40]
inc edi
mov dword [ecx + ebx*8], eax
mov dword [esp + 0x84], edi
mov byte [esp + 0x440], 0x11
cmp dword [esp + 0x178], 8
jb 0x444475
push dword [esp + 0x164]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x178], 7
mov dword [esp + 0x174], 0
mov word [esp + 0x164], ax
mov byte [esp + 0x440], 8
cmp dword [esp + 0x160], 8
jb 0x4444b6
push dword [esp + 0x14c]
call fcn.00633f98
add esp, 4
xor eax, eax
mov dword [esp + 0x160], 7
mov dword [esp + 0x15c], 0
mov word [esp + 0x14c], ax
mov eax, dword [esp + 0x7c]
inc eax
mov dword [esp + 0x7c], eax
cmp eax, dword [esp + 0x94]
jb 0x443790
push dword [esp + 0x74]
mov eax, dword [esp + 0x48]
push 2
push 0x1102
push dword [eax + 4]
call esi
jmp 0x4436f6
mov edx, 2
lea ecx, [esp + 0x64]
call fcn.004dcac0
push dword [esp + 0x5c]
mov eax, dword [esp + 0x48]
push 9
push 0x110b
push dword [eax + 4]
call esi
mov esi, dword [esp + 0x60]
mov ecx, esi
call fcn.004431e0
push esi
call fcn.00633f98
add esp, 4
mov dword [esp + 0x440], 0xffffffff
lea ecx, [esp + 0x64]
call fcn.004dd7c0
mov ecx, dword [esp + 0x438]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3f0]
xor ecx, esp
call fcn.00633732
mov esp, ebp
pop ebp
ret