Function at 0x440b00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x168
push esi
mov esi, dword [ebp + 0x1c]
push edi
xor edi, edi
mov dword [esp + 0x30], ecx
cmp byte [ebp + 0x20], 0
mov dword [esp + 0x24], esi
mov byte [esp + 0x12], 0
mov byte [esp + 0x11], 0
mov byte [esp + 0x13], 0
je 0x440ca7
cmp byte [esi], 0
mov eax, dword [ebp + 8]
mov dword [esp + 0xc], eax
je 0x440e05
push 0x3a
push esi
call fcn.004b87b6
mov ecx, eax
add esp, 8
mov dword [esp + 0x3c], ecx
mov al, byte [esi]
cmp al, 0x20
je 0x440b5f
cmp al, 9
jne 0x440b62
inc esi
jmp 0x440b55
test ecx, ecx
je 0x440c5b
mov eax, dword [esp + 0x24]
mov edi, ecx
sub edi, eax
cmp edi, 0x20
jae 0x440c59
push edi
push eax
lea eax, [esp + 0x78]
push eax
call fcn.004ba990
add esp, 0xc
mov byte [esp + edi + 0x70], 0
xor edx, edx
lea ecx, [esp + 0x70]
push 0
push 1
push 0
call fcn.0049df30
add esp, 0xc
test eax, eax
je 0x440c59
mov ecx, dword [esp + 0x3c]
inc ecx
mov edx, ecx
mov al, byte [edx]
cmp al, 0x20
je 0x440bbc
cmp al, 9
jne 0x440bbf
inc edx
jmp 0x440bb2
test al, al
mov esi, edx
cmovne edx, ecx
lea ecx, [esp + 0x70]
mov dword [esp + 0x24], edx
nop
mov al, byte [ecx]
cmp al, 0x20
je 0x440bda
cmp al, 9
jne 0x440bdd
inc ecx
jmp 0x440bd0
test al, al
je 0x440c23
cmp al, 0x2d
je 0x440be9
cmp al, 0x2b
jne 0x440bf0
lea eax, [ecx + 1]
mov ecx, eax
mov al, byte [eax]
cmp al, 0x30
jne 0x440c23
mov al, byte [ecx + 1]
cmp al, 0x78
je 0x440bff
cmp al, 0x58
jne 0x440c23
movsx eax, byte [ecx + 2]
push eax
call fcn.004b99b0
add esp, 4
test eax, eax
je 0x440c23
push 0x10
lea eax, [esp + 0x74]
push 0
push eax
call fcn.004b9ad3
add esp, 0xc
jmp 0x440c30
lea eax, [esp + 0x70]
push eax
call fcn.004b9548
add esp, 4
lea edi, [eax - 1]
test edi, edi
js 0x440c3c
cmp edi, 0xa
jl 0x440c5b
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x30]
push esi
push 0
push str.Max_window_number_is_10.
call fcn.0043ea30
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x1c
xor edi, edi
push 0x4d9c04
push esi
call fcn.004b626e
add esp, 8
test eax, eax
jne 0x440c7f
mov edx, dword [esp + 0x24]
mov byte [esp + 0x12], 1
mov dword [esp + 0x1c], edx
jmp 0x440e0d
push str.Show
push esi
call fcn.004b626e
add esp, 8
test eax, eax
jne 0x440e05
mov edx, dword [esp + 0x24]
mov byte [esp + 0x11], 1
mov dword [esp + 0x1c], edx
jmp 0x440e0d
mov esi, dword [ebp + 8]
push 0x3a
push esi
call fcn.004b87b6
add esp, 8
mov dword [esp + 0xc], eax
test eax, eax
je 0x440d30
mov ecx, esi
nop
mov al, byte [ecx]
cmp al, 0x20
je 0x440cca
cmp al, 9
jne 0x440ccd
inc ecx
jmp 0x440cc0
test al, al
je 0x440d0f
cmp al, 0x2d
je 0x440cd9
cmp al, 0x2b
jne 0x440ce0
lea eax, [ecx + 1]
mov ecx, eax
mov al, byte [eax]
cmp al, 0x30
jne 0x440d0f
mov al, byte [ecx + 1]
cmp al, 0x78
je 0x440cef
cmp al, 0x58
jne 0x440d0f
movsx eax, byte [ecx + 2]
push eax
call fcn.004b99b0
add esp, 4
test eax, eax
je 0x440d0f
push 0x10
push 0
push esi
call fcn.004b9ad3
add esp, 0xc
jmp 0x440d18
push esi
call fcn.004b9548
add esp, 4
lea edi, [eax - 1]
cmp edi, 9
ja 0x440c40
mov esi, dword [esp + 0xc]
inc esi
nop dword [eax]
mov al, byte [esi]
cmp al, 0x20
je 0x440d28
cmp al, 9
je 0x440d28
push 0x4d9c04
push esi
mov dword [esp + 0x14], esi
call fcn.004b626e
add esp, 8
test eax, eax
jne 0x440d62
mov edx, dword [esp + 0x24]
mov byte [esp + 0x12], 1
mov dword [esp + 0x1c], edx
jmp 0x440e0d
push str.Show
push esi
call fcn.004b626e
add esp, 8
test eax, eax
jne 0x440d86
mov edx, dword [esp + 0x24]
mov byte [esp + 0x11], 1
mov dword [esp + 0x1c], edx
jmp 0x440e0d
push 0
push 1
push 0
mov edx, 1
mov ecx, esi
call fcn.0049df30
add esp, 0xc
test eax, eax
je 0x440e05
mov ecx, esi
mov al, byte [ecx]
cmp al, 0x20
je 0x440dab
cmp al, 9
jne 0x440dae
inc ecx
jmp 0x440da1
test al, al
je 0x440df5
cmp al, 0x2d
je 0x440dba
cmp al, 0x2b
jne 0x440dc1
lea eax, [ecx + 1]
mov ecx, eax
mov al, byte [eax]
cmp al, 0x30
jne 0x440df5
mov al, byte [ecx + 1]
cmp al, 0x78
je 0x440dd0
cmp al, 0x58
jne 0x440df5
movsx eax, byte [ecx + 2]
push eax
call fcn.004b99b0
add esp, 4
test eax, eax
je 0x440df5
push 0x10
push 0
push esi
call fcn.004b9ad3
add esp, 0xc
mov byte [esp + 0x13], 1
jmp 0x440e09
push esi
call fcn.004b9548
add esp, 4
mov byte [esp + 0x13], 1
jmp 0x440e09
mov eax, dword [esp + 0x24]
mov dword [esp + 0x1c], eax
mov dl, byte [ebp + 0x20]
mov eax, 0x4eb998
test dl, dl
mov ecx, 0x4ebc90
cmovne ecx, eax
imul edi, edi, 0x4c
add edi, ecx
mov dword [esp + 0x14], edi
mov eax, dword [edi + 0x20]
test eax, eax
je 0x440e40
push eax
call dword [sym.imp.USER32.dll_IsWindow]
mov dl, byte [ebp + 0x20]
test eax, eax
jne 0x440e40
mov dword [edi + 0x20], eax
cmp byte [esp + 0x11], 0
je 0x440e60
mov eax, dword [edi + 0x20]
test eax, eax
je 0x441fd5
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jmp 0x441fc8
cmp byte [esp + 0x12], 0
jne 0x440f0a
cmp dword [edi + 0x20], 0
je 0x440f0a
mov eax, dword [esp + 0x24]
cmp byte [eax], 0
jne 0x440f0a
mov al, byte [esp + 0x13]
test al, al
jne 0x440e92
mov esi, dword [esp + 0xc]
cmp byte [esi], al
jne 0x440f0a
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
test dl, dl
jne 0x440ebe
test al, al
je 0x440ebe
mov ecx, dword [esp + 0x1c]
cmp dword [edi + 8], ecx
je 0x440ebe
mov eax, dword [edi + 0x2c]
mov dword [edi + 8], ecx
test eax, eax
je 0x440ebe
push 0
push ecx
push 0x402
push eax
call esi
mov eax, dword [ebp + 0x10]
cmp byte [eax], 0
je 0x440ed5
mov ecx, dword [edi + 0x30]
test ecx, ecx
je 0x440ed5
push eax
push 0
push 0xc
push ecx
call esi
mov eax, dword [ebp + 0xc]
cmp byte [eax], 0
je 0x440ee7
push eax
push 0
push 0xc
push dword [edi + 0x34]
call esi
mov eax, dword [ebp + 0x14]
cmp byte [eax], 0
je 0x441fd5
push eax
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x1c
mov eax, dword [edi + 0x20]
test eax, eax
je 0x440f18
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, dword [edi + 0x38]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [esp + 0x68], esi
test eax, eax
je 0x440f2c
push eax
call esi
mov eax, dword [edi + 0x3c]
test eax, eax
je 0x440f36
push eax
call esi
mov eax, dword [edi + 0x40]
test eax, eax
je 0x440f40
push eax
call esi
mov eax, dword [edi + 0x28]
test eax, eax
je 0x440f58
cmp dword [edi + 0x24], 0
push eax
jne 0x440f52
call esi
jmp 0x440f58
call dword [sym.imp.USER32.dll_DestroyIcon]
push 0x4c
push 0
push edi
call fcn.004b4390
add esp, 0xc
cmp byte [esp + 0x12], 0
jne 0x441fd5
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x64], ecx
cmp byte [ecx], 0
jne 0x440f97
mov ecx, dword [0x4ede50]
mov dword [esp + 0x64], ecx
test ecx, ecx
je 0x440f8f
cmp byte [ecx], 0
jne 0x440f97
mov dword [esp + 0x64], 0x4d5231
mov cl, byte [ebp + 0x20]
xor eax, eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x34], eax
mov eax, dword [sym.imp.KERNEL32.dll_MulDiv]
mov byte [esp + 0x12], 1
mov byte [esp + 0x19], 1
mov byte [esp + 0x1a], 1
mov byte [esp + 0x1b], 0
mov dword [esp + 0x20], 0x88c00000
mov dword [esp + 0x44], 8
mov dword [esp + 0x58], CreateStatusWindowA
mov dword [esp + 0x30], CreateStatusWindowA
mov dword [esp + 0x5c], 0xff000000
mov dword [edi + 0x44], 0xff000000
mov dword [edi + 0x48], 0xff000000
mov dword [edi + 4], CreateStatusWindowA
mov dword [esp + 0x2c], eax
test cl, cl
je 0x44101b
mov esi, SysReAllocString
mov eax, esi
jmp 0x441032
push 0x60
push dword [0x4ed800]
mov esi, 0x14
push 0x12c
call eax
mov cl, byte [ebp + 0x20]
mov dword [edi], eax
mov eax, dword [ebp + 0x10]
mov dword [edi + 0x1c], esi
mov dword [edi + 0x18], CreateStatusWindowA
cmp byte [eax], 0
mov eax, dword [ebp + 0xc]
jne 0x441058
cmp byte [eax], 0
jne 0x441058
test cl, cl
je 0x441058
xor eax, eax
xor ecx, ecx
jmp 0x441062
mov eax, 0xa
mov ecx, 5
mov dword [edi + 0x10], ecx
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0xc]
mov al, byte [eax]
test al, al
je 0x44167a
mov esi, dword [esp + 0xc]
nop word [eax + eax]
movzx eax, al
mov dword [esp + 0x28], eax
test eax, 0xffffff80
jne 0x4410a4
push 2
push eax
call fcn.004b8e5e
add esp, 8
test eax, eax
mov eax, dword [esp + 0x28]
je 0x4410a4
and eax, 0xffffffdf
movsx eax, al
add eax, 0xffffffbf
cmp eax, 0x19
ja case.0x4410ba.68
movzx eax, byte [eax + 0x442024]
jmp dword [eax*4 + 0x441fec]
and dword [esp + 0x44], 0xfffffff7
jmp case.0x4410ba.68
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x20]
and edx, 0xff3fffff
mov dword [esp + 0x20], edx
mov al, byte [eax + 1]
cmp al, 0x31
jne 0x4410f3
or edx, 0x800000
mov dword [esp + 0x20], edx
jmp case.0x441618.67
mov esi, dword [esp + 0xc]
cmp al, 0x32
jne case.0x4410ba.68
or edx, 0x400000
mov dword [esp + 0x20], edx
jmp case.0x4410ba.68
mov ecx, dword [esp + 0xc]
mov al, byte [ecx + 1]
mov byte [esp + 0x11], al
test al, al
je case.0x441618.67
lea esi, [ecx + 1]
movzx ecx, al
mov dword [esp + 0xc], esi
test ecx, 0xffffff80
jne 0x441148
push 2
push ecx
call fcn.004b8e5e
add esp, 8
test eax, eax
mov al, byte [esp + 0x11]
je 0x441148
and al, 0xdf
cmp al, 0x42
je 0x44116e
cmp al, 0x54
je 0x44116e
cmp al, 0x57
je 0x44116e
mov eax, dword [esp + 0xc]
cmp byte [eax], 0x30
setne byte [esp + 0x1a]
cmp byte [eax + 1], 0x30
setne byte [esp + 0x19]
jmp 0x441289
push 0x1f
lea eax, [esi + 1]
push eax
lea eax, [esp + 0x78]
push eax
call fcn.004ba990
mov dl, byte [esp + 0x7c]
lea esi, [esp + 0x7c]
add esp, 0xc
mov byte [esp + 0x8f], 0
test dl, dl
je 0x4411bd
mov ecx, 0x4d9e7c
mov al, 0x20
nop dword [eax]
cmp dl, al
je 0x4411b6
mov al, byte [ecx + 1]
inc ecx
test al, al
jne 0x4411a0
mov dl, byte [esi + 1]
inc esi
test dl, dl
jne 0x441195
jmp 0x4411bd
test esi, esi
je 0x4411bd
mov byte [esi], 0
lea ecx, [esp + 0x70]
call fcn.0049f180
mov esi, eax
cmp esi, 0xffffffff
jne 0x441217
lea ecx, [esp + 0x70]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4411d4
movzx eax, byte [esp + 0x76]
sub ecx, edx
xor edx, edx
cmp ecx, 6
push 0x10
cmova eax, edx
mov byte [esp + 0x7a], al
lea eax, [esp + 0x74]
push edx
push eax
call fcn.004b9ad3
movzx esi, ax
add esp, 0xc
movzx ecx, al
shr esi, 8
shl ecx, 8
or esi, ecx
shr eax, 0x10
shl esi, 8
movzx eax, al
or esi, eax
mov eax, dword [esp + 0xc]
mov al, byte [eax]
movzx ecx, al
mov byte [esp + 0x11], al
test ecx, 0xffffff80
jne 0x441241
push 2
push ecx
call fcn.004b8e5e
add esp, 8
test eax, eax
mov al, byte [esp + 0x11]
je 0x441241
and al, 0xdf
cmp al, 0x42
je 0x441261
cmp al, 0x54
je 0x44125c
cmp al, 0x57
jne 0x441265
push esi
mov dword [edi + 0x44], esi
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [edi + 0x40], eax
jmp 0x441265
mov dword [edi + 0x48], esi
jmp 0x441265
mov dword [esp + 0x5c], esi
lea ecx, [esp + 0x70]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x441270
mov eax, dword [esp + 0xc]
sub ecx, edx
add eax, ecx
mov dword [esp + 0xc], eax
jmp 0x441289
mov eax, dword [esp + 0xc]
lea ecx, [eax + 1]
mov al, byte [ecx]
mov byte [esp + 0x11], al
test al, al
je case.0x441618.67
mov dword [esp + 0xc], ecx
movzx ecx, al
test ecx, 0xffffff80
jne 0x4412be
push 2
push ecx
call fcn.004b8e5e
add esp, 8
test eax, eax
mov al, byte [esp + 0x11]
je 0x4412be
and al, 0xdf
cmp al, 0x4d
je 0x4412f7
cmp al, 0x53
jne case.0x441618.67
mov eax, dword [esp + 0xc]
inc eax
push eax
call fcn.004b9548
mov esi, dword [esp + 0x10]
mov edx, eax
add esp, 4
mov dword [esp + 0x50], edx
test edx, edx
jns case.0x4410ba.68
mov dword [esp + 0x50], 0
jmp case.0x4410ba.68
mov eax, dword [esp + 0xc]
inc eax
push eax
call fcn.004b9548
mov esi, dword [esp + 0x10]
mov edx, eax
add esp, 4
mov dword [esp + 0x4c], edx
test edx, edx
jns case.0x4410ba.68
mov dword [esp + 0x4c], 0
jmp case.0x4410ba.68
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0xc]
and edx, 0xf7ffffff
mov ecx, edx
or ecx, 0x40000
mov al, byte [eax + 1]
cmp al, 0x31
cmovne ecx, edx
mov edx, ecx
or edx, 0xf0000
cmp al, 0x32
cmovne edx, ecx
mov dword [esp + 0x20], edx
jmp case.0x441618.67
mov eax, dword [esp + 0xc]
inc eax
push eax
call fcn.004b9548
mov dword [esp + 0x20], eax
mov byte [esp + 0x17], 1
jmp 0x441663
mov ecx, dword [esp + 0xc]
inc ecx
mov al, byte [ecx]
test al, al
je case.0x441618.67
mov dword [esp + 0xc], ecx
cmp al, 0x20
je 0x44138c
cmp al, 9
jne 0x441392
mov al, byte [ecx + 1]
inc ecx
jmp 0x441384
test al, al
je 0x4413d7
cmp al, 0x2d
je 0x44139e
cmp al, 0x2b
jne 0x4413a5
lea eax, [ecx + 1]
mov ecx, eax
mov al, byte [eax]
cmp al, 0x30
jne 0x4413d7
mov al, byte [ecx + 1]
cmp al, 0x78
je 0x4413b4
cmp al, 0x58
jne 0x4413d7
movsx eax, byte [ecx + 2]
push eax
call fcn.004b99b0
add esp, 4
test eax, eax
je 0x4413d7
push 0x10
push 0
push dword [esp + 0x14]
call fcn.004b9ad3
add esp, 0xc
jmp 0x4413e3
push dword [esp + 0xc]
call fcn.004b9548
add esp, 4
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0xc]
inc eax
push 0x2d
push eax
call fcn.004b87b6
add esp, 8
test eax, eax
je case.0x441618.67
lea ecx, [eax + 1]
mov dword [esp + 0xc], eax
mov al, byte [ecx]
test al, al
je case.0x441618.67
mov dword [esp + 0xc], ecx
cmp al, 0x20
je 0x44141c
cmp al, 9
jne 0x441422
mov al, byte [ecx + 1]
inc ecx
jmp 0x441414
test al, al
je 0x44146e
cmp al, 0x2d
je 0x44142e
cmp al, 0x2b
jne 0x441435
lea eax, [ecx + 1]
mov ecx, eax
mov al, byte [eax]
cmp al, 0x30
jne 0x44146e
mov al, byte [ecx + 1]
cmp al, 0x78
je 0x441444
cmp al, 0x58
jne 0x44146e
movsx eax, byte [ecx + 2]
push eax
call fcn.004b99b0
add esp, 4
test eax, eax
je 0x44146e
push 0x10
push 0
push dword [esp + 0x14]
call fcn.004b9ad3
add esp, 0xc
mov dword [esp + 0x38], eax
jmp case.0x441618.67
push dword [esp + 0xc]
call fcn.004b9548
mov dword [esp + 0x3c], eax
jmp 0x441663
mov byte [esp + 0x12], 0
jmp case.0x4410ba.68
mov ecx, dword [esp + 0xc]
inc ecx
mov al, byte [ecx]
mov byte [esp + 0x11], al
test al, al
je case.0x441618.67
mov dword [esp + 0xc], ecx
movzx ecx, al
test ecx, 0xffffff80
jne 0x4414c1
push 2
push ecx
call fcn.004b8e5e
add esp, 8
test eax, eax
mov al, byte [esp + 0x11]
je 0x4414c1
and al, 0xdf
cmp al, 0x4d
je 0x441522
cmp al, 0x53
je 0x4414f5
push dword [esp + 0xc]
call fcn.004b9548
add esp, 4
mov dword [edi], eax
cmp byte [ebp + 0x20], 0
jne case.0x441618.67
push 0x60
push dword [0x4ed800]
push eax
call dword [esp + 0x38]
mov dword [edi], eax
jmp case.0x441618.67
mov eax, dword [esp + 0xc]
inc eax
push eax
call fcn.004b9548
mov esi, dword [esp + 0x10]
mov edx, eax
add esp, 4
mov dword [esp + 0x34], edx
test edx, edx
jns case.0x4410ba.68
mov dword [esp + 0x34], 0
jmp case.0x4410ba.68
mov eax, dword [esp + 0xc]
inc eax
push eax
call fcn.004b9548
mov esi, dword [esp + 0x10]
mov edx, eax
add esp, 4
mov dword [esp + 0x60], edx
test edx, edx
jns case.0x4410ba.68
mov dword [esp + 0x60], 0
jmp case.0x4410ba.68
push 4
push str.Hide
push dword [esp + 0x14]
call fcn.004b653e
add esp, 0xc
test eax, eax
jne 0x441577
mov esi, dword [esp + 0xc]
mov byte [esp + 0x1b], 1
add esi, 3
jmp case.0x4410ba.68
mov eax, dword [esp + 0xc]
inc eax
push eax
call fcn.004b9548
add esp, 4
mov dword [edi + 4], eax
cmp byte [ebp + 0x20], 0
jne case.0x441618.67
push 0x60
push dword [0x4ed800]
push eax
call dword [esp + 0x38]
mov dword [edi + 4], eax
jmp case.0x441618.67
mov eax, dword [esp + 0xc]
inc eax
push eax
call fcn.004b9548
mov dword [esp + 0x5c], eax
jmp 0x441663
mov eax, dword [esp + 0xc]
inc eax
push eax
call fcn.004b9548
mov dword [esp + 0x34], eax
jmp 0x441663
mov eax, dword [esp + 0xc]
inc eax
mov cl, byte [eax]
test cl, cl
je case.0x441618.67
mov dword [esp + 0xc], eax
movzx eax, cl
mov dword [esp + 0x28], eax
test eax, 0xffffff80
jne 0x441606
push 2
push eax
call fcn.004b8e5e
add esp, 8
test eax, eax
mov eax, dword [esp + 0x28]
je 0x441606
and eax, 0xffffffdf
movsx eax, al
add eax, 0xffffffbe
cmp eax, 0x17
ja case.0x441618.67
movzx eax, byte [eax + 0x442054]
jmp dword [eax*4 + 0x442040]
mov eax, dword [esp + 0xc]
inc eax
push eax
call fcn.004b9548
mov dword [edi + 0x1c], eax
jmp 0x441663
cmp byte [ebp + 0x20], 0
je case.0x441618.67
mov eax, dword [esp + 0xc]
inc eax
push eax
call fcn.004b9548
mov dword [edi + 0x18], eax
jmp 0x441663
mov eax, dword [esp + 0xc]
inc eax
push eax
call fcn.004b9548
mov dword [edi + 0xc], eax
jmp 0x441663
mov eax, dword [esp + 0xc]
inc eax
push eax
call fcn.004b9548
mov dword [edi + 0x10], eax
add esp, 4
mov esi, dword [esp + 0xc]
mov al, byte [esi + 1]
inc esi
mov dword [esp + 0xc], esi
test al, al
jne 0x441080
push 0
push 0
push 0
push str.DISPLAY
call dword [sym.imp.GDI32.dll_CreateDCA]
mov esi, eax
push 0x5a
push esi
mov dword [esp + 0x14], esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x11
mov dword [esp + 0x58], eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push esi
mov dword [esp + 0x50], eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x40], eax
lea eax, [esp + 0xf0]
push eax
push 0x40
push esi
call dword [sym.imp.GDI32.dll_GetTextFaceA]
lea eax, [esp + 0x138]
push eax
push esi
call dword [sym.imp.GDI32.dll_GetTextMetricsA]
mov eax, dword [esp + 0x138]
mov dword [esp + 0x3c], eax
mov eax, dword [edi + 0x1c]
cmp eax, 1
jge 0x441700
cmp eax, 0x80000000
je 0x441704
mov ecx, dword [edi + 0x18]
cmp ecx, 1
jge 0x441700
cmp ecx, 0x80000000
jne 0x44170a
test eax, eax
je 0x44170a
cmp dword [edi + 0x18], 0
jne 0x44171a
mov dword [edi + 0x18], 0
xor eax, eax
mov dword [edi + 0x1c], 0
cmp byte [ebp + 0x20], 0
je 0x4418bb
mov ecx, dword [esp + 0x24]
cmp byte [ecx], 0
je 0x4418bb
test eax, eax
je 0x4418bb
mov byte [esp + 0x28], 0
mov ecx, dword [esp + 0x24]
lea eax, [edi + 0x24]
push 0
push 0
push dword [esp + 0x30]
push 0
push eax
xor eax, eax
cmp dword [edi + 0x1c], 0x80000000
cmovne eax, dword [edi + 0x1c]
xor edx, edx
cmp dword [edi + 0x18], 0x80000000
push eax
cmovne edx, dword [edi + 0x18]
call fcn.0049f4e0
add esp, 0x18
mov dword [edi + 0x28], eax
test eax, eax
jne 0x44178b
cmp byte [esp + 0x28], al
jne 0x4418bb
mov byte [esp + 0x28], 1
jmp 0x44173e
cmp dword [edi + 0x1c], 0
jl 0x44179b
cmp dword [edi + 0x18], 0
jge 0x4418bb
cmp dword [edi + 0x24], 0
je 0x4417c7
lea ecx, [esp + 0xdc]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetIconInfo]
test eax, eax
je 0x4418bb
mov eax, dword [esp + 0xec]
test eax, eax
je 0x4418bb
lea ecx, [esp + 0x70]
push ecx
push 0x18
push eax
call dword [sym.imp.GDI32.dll_GetObjectA]
test eax, eax
je 0x44189f
mov eax, dword [edi + 0x1c]
cmp eax, 0xffffffff
jne 0x44182b
mov ecx, dword [edi + 0x18]
test ecx, ecx
jle 0x44182b
mov eax, dword [esp + 0x74]
test eax, eax
je 0x44188c
movd xmm1, dword [esp + 0x78]
movd xmm0, eax
cvtdq2pd xmm1, xmm1
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mulsd xmm1, xmm0
addsd xmm1, qword [0x4e1c08]
cvttsd2si eax, xmm1
mov dword [edi + 0x1c], eax
jmp 0x44188c
mov ecx, dword [edi + 0x18]
cmp ecx, 0xffffffff
jne 0x44186f
test eax, eax
jle 0x44186f
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x44188c
movd xmm1, dword [esp + 0x74]
cvtdq2pd xmm1, xmm1
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm1, xmm0
addsd xmm1, qword [0x4e1c08]
cvttsd2si eax, xmm1
jmp 0x441889
cmp eax, 0x80000000
jne 0x44187d
mov eax, dword [esp + 0x78]
mov dword [edi + 0x1c], eax
cmp ecx, 0x80000000
jne 0x44188c
mov eax, dword [esp + 0x74]
mov dword [edi + 0x18], eax
cmp dword [edi], 0x80000000
jne 0x44189f
mov ecx, dword [edi + 0xc]
mov eax, dword [edi + 0x18]
lea eax, [eax + ecx*2]
mov dword [edi], eax
cmp dword [edi + 0x24], 1
jne 0x4418bb
push dword [esp + 0xec]
mov esi, dword [esp + 0x6c]
call esi
push dword [esp + 0xe8]
call esi
mov ecx, dword [edi]
cmp ecx, 0x80000000
jne 0x4418da
push 0x60
push dword [0x4ed800]
push 0x12c
call dword [esp + 0x38]
mov ecx, eax
mov dword [edi], ecx
cmp dword [edi + 0x1c], 0x80000000
jne 0x4418ea
mov dword [edi + 0x1c], 0
mov eax, dword [edi + 4]
mov edx, 0x1f4
cmp eax, 0x80000000
cmove eax, edx
push eax
push ecx
push 0
push 0
lea eax, [esp + 0xb0]
push eax
call dword [sym.imp.USER32.dll_SetRect]
mov eax, dword [ebp + 0x10]
mov edi, dword [sym.imp.GDI32.dll_CreateFontA]
cmp byte [eax], 0
je 0x441a54
mov eax, dword [ebp + 0x18]
lea esi, [esp + 0xf0]
movd xmm0, dword [esp + 0x3c]
mov edi, 0x258
cvtdq2pd xmm0, xmm0
cmp byte [eax], 0
cmovne esi, eax
mov eax, dword [esp + 0x60]
test eax, eax
cmovne edi, eax
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x44195f
push 0x48
push dword [esp + 0x58]
push eax
call dword [esp + 0x38]
neg eax
jmp 0x44196b
mulsd xmm0, qword [0x4e1c28]
cvttsd2si eax, xmm0
push esi
push 0
push 2
push 0
push 4
push 1
push 0
push 0
push 0
push edi
push 0
push 0
push 0
push eax
call dword [sym.imp.GDI32.dll_CreateFontA]
mov esi, dword [esp + 0x14]
mov dword [esi + 0x38], eax
test eax, eax
jne 0x4419ef
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x4419ac
push 0x48
push dword [esp + 0x58]
push eax
call dword [esp + 0x38]
neg eax
jmp 0x4419c2
movd xmm0, dword [esp + 0x3c]
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x4e1c28]
cvttsd2si eax, xmm0
lea ecx, [esp + 0xf0]
push ecx
push 0
push 2
push 0
push 4
push 1
push 0
push 0
push 0
push edi
mov edi, dword [sym.imp.GDI32.dll_CreateFontA]
push 0
push 0
push 0
push eax
call edi
mov dword [esi + 0x38], eax
jmp 0x4419f5
mov edi, dword [sym.imp.GDI32.dll_CreateFontA]
mov eax, dword [esi + 0x38]
test eax, eax
mov ecx, dword [esp + 0x48]
cmovne ecx, eax
push ecx
push dword [esp + 0x10]
call dword [sym.imp.GDI32.dll_SelectObject]
movaps xmm0, xmmword [esp + 0xa0]
mov ecx, dword [esi + 0xc]
movd eax, xmm0
movaps xmmword [esp + 0x90], xmm0
sub dword [esp + 0x98], ecx
add eax, ecx
push 0x450
mov dword [esp + 0x94], eax
lea eax, [esp + 0x94]
push eax
push 0xffffffffffffffff
push dword [ebp + 0x10]
push dword [esp + 0x1c]
call dword [sym.imp.USER32.dll_DrawTextA]
mov dword [esi + 0x14], eax
jmp 0x441a58
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x50]
mov eax, dword [ebp + 0x18]
test ecx, ecx
jne 0x441a71
cmp dword [esp + 0x34], ecx
jne 0x441a71
test eax, eax
je 0x441af9
cmp byte [eax], 0
lea esi, [esp + 0xf0]
push 0x48
push dword [esp + 0x58]
cmovne esi, eax
push ecx
call dword [esp + 0x38]
push esi
push 0
push 2
push 0
push 4
push 1
push 0
push 0
push 0
push dword [esp + 0x58]
neg eax
push 0
push 0
push 0
push eax
call edi
mov esi, dword [esp + 0x14]
mov dword [esi + 0x3c], eax
test eax, eax
jne 0x441af9
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x34]
test eax, eax
jne 0x441ac4
test ecx, ecx
je 0x441af9
lea edx, [esp + 0xf0]
push edx
push 0
push 2
push 0
push 4
push 1
push 0
push 0
push 0
push ecx
push 0
push 0
push 0
push 0x48
push dword [esp + 0x8c]
push eax
call dword [esp + 0x6c]
neg eax
push eax
call edi
mov dword [esi + 0x3c], eax
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 0x10]
test eax, eax
je 0x441b07
add eax, ecx
jmp 0x441b09
xor eax, eax
lea edx, [eax + ecx]
xor edi, edi
mov eax, dword [esi + 0x1c]
mov esi, ecx
test eax, eax
mov dword [esp + 0x68], edx
cmove esi, edi
mov edi, dword [esp + 0x14]
add esi, eax
add esi, edx
mov dword [esp + 0x3c], esi
cmp dword [edi + 4], 0x80000000
jne 0x441bac
mov eax, dword [ebp + 0xc]
cmp byte [eax], 0
je 0x441b9c
mov eax, dword [edi + 0x3c]
test eax, eax
mov ecx, dword [esp + 0x48]
cmovne ecx, eax
push ecx
push dword [esp + 0x10]
call dword [sym.imp.GDI32.dll_SelectObject]
movaps xmm0, xmmword [esp + 0xa0]
mov ecx, dword [edi + 0xc]
movd eax, xmm0
movaps xmmword [esp + 0x90], xmm0
sub dword [esp + 0x98], ecx
add eax, ecx
push 0x410
mov dword [esp + 0x94], eax
lea eax, [esp + 0x94]
push eax
push 0xffffffffffffffff
push dword [ebp + 0xc]
push dword [esp + 0x1c]
call dword [sym.imp.USER32.dll_DrawTextA]
mov ecx, dword [edi + 0x10]
jmp 0x441b9e
xor eax, eax
add eax, ecx
add eax, esi
mov dword [edi + 4], eax
mov dword [esp + 0xac], eax
push dword [esp + 0x40]
mov esi, dword [esp + 0x10]
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
test eax, eax
je 0x441fe2
push dword [esp + 0x44]
movaps xmm0, xmmword [esp + 0xa4]
lea eax, [esp + 0xc4]
push 0
push dword [esp + 0x28]
movaps xmmword [esp + 0xcc], xmm0
push eax
call dword [sym.imp.USER32.dll_AdjustWindowRectEx]
mov esi, dword [esp + 0xc8]
lea eax, [esp + 0xb0]
mov edi, dword [esp + 0xcc]
sub esi, dword [esp + 0xc0]
sub edi, dword [esp + 0xc4]
push 0
push eax
push 0
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov eax, dword [esp + 0xb8]
sub eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xbc]
mov edx, eax
sub ecx, dword [esp + 0xb4]
cmp esi, eax
cmovle edx, esi
cmp edi, ecx
mov esi, ecx
mov dword [esp + 0x40], edx
cmovle esi, edi
cmp dword [esp + 0x58], 0x80000000
jne 0x441c6c
sub eax, edx
cdq
sub eax, edx
sar eax, 1
add eax, dword [esp + 0xb0]
mov dword [esp + 0x58], eax
mov edi, dword [esp + 0x30]
cmp edi, 0x80000000
jne 0x441c8a
sub ecx, esi
mov eax, ecx
cdq
sub eax, edx
mov edi, eax
sar edi, 1
add edi, dword [esp + 0xb4]
mov ecx, dword [0x4e88cc]
lea ecx, [ecx + 0x4c]
call fcn.00476360
test eax, eax
je 0x441ca9
mov eax, dword [0x4e88cc]
mov eax, dword [eax + 0x4c]
mov ecx, dword [eax + 4]
jmp 0x441cab
xor ecx, ecx
cmp byte [esp + 0x12], 0
je 0x441cbe
mov eax, dword [0x4eb73c]
test ecx, ecx
cmovne eax, ecx
jmp 0x441cc0
xor eax, eax
push 0
push dword [0x4eb7a0]
push 0
push eax
push esi
push dword [esp + 0x54]
mov esi, dword [esp + 0x38]
push edi
push dword [esp + 0x74]
push esi
push dword [esp + 0x88]
push str.AutoHotkey2
push dword [esp + 0x70]
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x20], eax
test eax, eax
je 0x441fe2
and esi, 0x80000
mov dword [esp + 0x20], esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
jne 0x441d18
cmp byte [esp + 0x12], 0
jne 0x441d6c
mov edi, dword [0x4edea4]
test edi, edi
je 0x441d2a
mov edx, dword [0x4edea8]
jmp 0x441d36
mov edi, dword [0x4eb8c0]
mov edx, dword [0x4eb8c4]
cmp dword [esp + 0x20], 0
mov ecx, eax
je 0x441d51
push edx
push 0
push 0x80
push eax
call esi
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x20]
cmp byte [esp + 0x12], 0
mov eax, ecx
jne 0x441d6c
push edi
push 1
push 0x80
push ecx
call esi
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x20]
lea ecx, [esp + 0xa0]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0xac]
mov edi, dword [esp + 0xa8]
mov ecx, dword [edx + 0xc]
mov dword [edx + 4], eax
mov dword [edx], edi
lea eax, [ecx + ecx]
sub edi, eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x30], edi
cmp byte [eax], 0
je 0x441dfc
push 0
push dword [0x4eb7a0]
xor eax, eax
cmp byte [esp + 0x21], al
push 0
push dword [edx + 0x20]
setne al
push dword [edx + 0x14]
or eax, 0x50000080
push edi
push dword [edx + 0x10]
push ecx
push eax
push dword [ebp + 0x10]
push str.static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x48]
push 1
mov dword [ecx + 0x30], eax
mov ecx, dword [ecx + 0x38]
test ecx, ecx
cmovne edx, ecx
push edx
push 0x30
push eax
call esi
mov edx, dword [esp + 0x14]
mov ecx, dword [edx + 0xc]
cmp byte [ebp + 0x20], 0
jne 0x441f5a
mov eax, dword [edx + 0x1c]
test eax, eax
jle 0x441f5a
push 0
push 0
push 0
push dword [edx + 0x20]
push eax
push edi
push dword [esp + 0x80]
push ecx
push 0x50000001
push 0
push str.msctls_progress32
push 0x200
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov edx, eax
mov eax, dword [esp + 0x14]
mov dword [eax + 0x2c], edx
test edx, edx
je 0x441f5e
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x38]
test eax, eax
jne 0x441e5e
test ecx, ecx
je 0x441e96
jmp 0x441e6a
cmp eax, 0xffffffff
jle 0x441e8c
cmp eax, 0x10000
jge 0x441e8c
cmp ecx, 0xffffffff
jle 0x441e8c
cmp ecx, 0x10000
jge 0x441e8c
movzx ecx, cx
shl ecx, 0x10
movzx eax, ax
or ecx, eax
push ecx
push 0
push 0x401
jmp 0x441e93
push ecx
push eax
push 0x406
push edx
call esi
cmp dword [esp + 0x5c], 0xff000000
je 0x441efb
mov edx, dword [esp + 0x14]
push str.uxtheme
mov eax, dword [edx + 0x2c]
mov dword [esp + 0x44], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
je 0x441ee3
push str.SetWindowTheme
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x441edc
push 0x4da5ac
push 0x4da5ac
push dword [esp + 0x48]
call eax
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push dword [esp + 0x5c]
mov eax, dword [esp + 0x18]
push 0
push 0x409
push dword [eax + 0x2c]
call esi
mov edi, dword [esp + 0x30]
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x44]
cmp eax, 0xff000000
je 0x441f1a
push eax
push 0
push 0x2001
push dword [ecx + 0x2c]
call esi
mov ecx, dword [esp + 0x14]
cmp byte [esp + 0x13], 0
mov eax, dword [ecx + 0x2c]
push 0
je 0x441f3f
push dword [esp + 0x20]
push 0x402
push eax
call esi
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov dword [eax + 8], ecx
jmp 0x441f5e
push 0
push 0x408
push eax
call esi
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov dword [eax + 8], ecx
jmp 0x441f5e
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x3c]
push 0
push dword [0x4eb7a0]
push 0
push dword [eax + 0x20]
mov eax, dword [esp + 0xbc]
sub eax, dword [esp + 0xb4]
sub eax, ecx
push eax
push edi
mov edi, dword [esp + 0x2c]
xor eax, eax
cmp byte [esp + 0x32], al
push ecx
setne al
push dword [edi + 0xc]
or eax, 0x50000080
push eax
push dword [ebp + 0xc]
push str.static
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov dword [edi + 0x34], eax
test eax, eax
je 0x441fc3
mov ecx, dword [edi + 0x3c]
test ecx, ecx
mov edx, dword [esp + 0x48]
push 1
cmovne edx, ecx
push edx
push 0x30
push eax
call esi
cmp byte [esp + 0x1b], 0
jne 0x441fd5
push 4
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x1c
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret 0x1c