Function at 0x75e613e7
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor eax, eax
mov word [ebp - 0x20], ax
mov word [ebp - 0x1e], ax
mov eax, dword [ebx + 4]
mov dword [ebp - 0x18], eax
mov eax, dword [ebx]
mov dword [ebp - 0x14], eax
mov ax, word [ebx + 8]
mov word [ebp - 0x10], ax
mov ax, word [ebx + 0xa]
mov word [ebp - 0xe], ax
mov ax, word [ebx + 0xc]
mov word [ebp - 0xc], ax
mov ax, word [ebx + 0xe]
mov word [ebp - 0xa], ax
mov ax, word [ebx + 0x10]
mov dword [ebp - 0x1c], esi
mov word [ebp - 8], ax
jmp 0x75e6144b
lea eax, [ebp - 0x44]
push eax
push dword [ebp + 0x14]
call sym.USER32.dll_ClientToScreen
push 0xffffffffffffffec
push dword [ebp + 0x14]
call sym.USER32.dll_GetWindowLongW
test eax, 0x400000
je 0x75e60619
jmp 0x75e68ceb
test dword [ebp - 0x14], eax
je 0x75e61512
jmp 0x75e6150b
mov eax, 0x400
cmp word [ebp - 0x78], ax
jb 0x75e4fba2
test byte [ebp - 0x14], 8
jne 0x75e68c17
mov ebx, esi
neg ebx
and ebx, 3
add ebx, esi
jmp 0x75e615d5
test byte [ebp - 4], 4
jne 0x75e68c2b
mov eax, dword [0x75ea0138]
mov ecx, dword [eax + 0xc8c]
mov eax, dword [eax + 0xc90]
mov dword [ebp + 0xc], ecx
mov dword [ebp - 0x50], eax
jmp 0x75e61619
mov ecx, eax
or ecx, edx
je 0x75e60619
cmp eax, edi
jne 0x75e5d570
cmp edx, dword [ebp - 0x48]
jne 0x75e5d570
jmp 0x75e60619
mov eax, dword [esi + 0x130]
or dword [eax + 4], ecx
jmp 0x75e6105f
mov dx, word [ebx + 0xe]
mov eax, dword [ebx + 4]
and dword [ebp - 0x6c], 0
mov cx, word [ebx + 0xa]
mov di, word [ebx + 0xc]
mov dword [ebp - 0x68], eax
mov eax, dword [ebx]
mov word [ebp - 0x5a], dx
movzx edx, word [ebx + 0x10]
mov dword [ebp - 0x64], eax
mov ax, word [ebx + 8]
mov dword [ebp - 0x58], edx
jmp 0x75e61a08
mov eax, 0xffff
cmp bx, ax
jne 0x75e5d54a
movzx eax, word [esi + 2]
push eax
push dword [ebp + 8]
call sym.USER32.dll_LoadMenuW
mov dword [ebp - 0x34], eax
test eax, eax
jne 0x75e61567
jmp 0x75e5d569
lea eax, [esi + 4]
jmp 0x75e6157b
or dword [ebp - 4], 1
and dword [ebp - 0x14], 0xefffffff
jmp 0x75e6162f
and dword [ebp - 0x64], 0xff7fffff
or dword [ebp - 0x68], 0x200
jmp 0x75e61acf
mov eax, dword [esi + 0x130]
test byte [eax + 0x18], 1
jne 0x75e612c0
test byte [esi + 0x37], 0x10
jne 0x75e612c0
push 1
push ebx
call sym.USER32.dll_ShowWindow
push ebx
call sym.USER32.dll_UpdateWindow
jmp 0x75e612c0
and dword [ebp - 0x14], 0xff37fffd
jmp 0x75e614f8
test eax, eax
jne 0x75e61419
jmp 0x75e612db
mov eax, esi
jmp 0x75e56d87
lea ecx, [edi + 0x3c]
jmp 0x75e61ffd
xor esi, esi
cmp dword [ebp - 0x34], esi
jne 0x75e68cf7
jmp 0x75e68cff
xor eax, eax
jmp 0x75e612d9
cmp byte [0x75ea0040], 0
je 0x75e68d22
jmp 0x75e60619
mov edi, 0x8002
jmp 0x75e60f55
mov ebx, dword [ebp + 0x14]
jmp 0x75e612c0
cmp eax, ecx
je 0x75e614dd
mov eax, 0x400
or dword [ebp - 0x18], eax
jmp 0x75e614e2
push edi
push dword [ebp + 0x14]
call sym.USER32.dll_GetSystemMenu
jmp 0x75e6100f
mov ecx, dword [ebp - 0x40]
jmp 0x75e60ed2
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x64], eax
movsx eax, word [ebp - 0xa]
add eax, dword [ebp - 0x44]
push 1
mov dword [ebp - 0x5c], eax
movsx eax, word [ebp - 8]
add eax, ecx
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x60], ecx
call fcn.75e44d69
cmp dword [ebp - 0x28], esi
je 0x75e51260
mov dword [ebp - 0x4c], eax
or eax, edx
mov dword [ebp - 0x48], edx
jne 0x75e60619
jmp 0x75e5d559
mov dword [ebp - 0x28], 1
jmp 0x75e60e5f
mov eax, dword [0x75ea04f8]
push dword [eax + 0x5c]
push dword [eax + 0x58]
call fcn.75e40aa2
mov edi, eax
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x48], esi
jmp 0x75e60e6a
push esi
push dword [ebp + 0x14]
call fcn.75e60d33
mov edi, eax
or eax, edx
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x28], esi
je 0x75e60885
mov eax, edi
or eax, dword [ebp - 0x48]
je 0x75e60891
test dword [ebp - 0x14], 0x1800
jne 0x75e61fcc
movsx eax, word [ebp - 0xe]
imul eax, dword [ebp + 0xc]
inc eax
inc eax
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [ebp - 0x44], eax
movsx eax, word [ebp - 0xc]
imul eax, dword [ebp - 0x50]
add eax, 4
cdq
and edx, 7
add eax, edx
mov ecx, eax
sar ecx, 3
test byte [ebp - 0x14], 1
mov dword [ebp - 0x40], ecx
jne 0x75e60727
cmp dword [ebp + 0x14], esi
je 0x75e60727
mov eax, dword [ebp - 0x14]
shr eax, 0x10
and eax, 0xc000
mov edx, 0x4000
cmp ax, dx
jne 0x75e4eafc
movsx eax, word [ebp - 0xa]
mov edx, dword [ebp - 0x44]
lea esi, [eax + edx]
cmp dword [ebp - 0x44], esi
movsx edx, word [ebp - 8]
lea edi, [edx + ecx]
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], edi
jg 0x75e68d2c
cmp ecx, edi
jg 0x75e68d2c
push dword [ebp - 0x18]
lea eax, [ebp - 0x44]
push dword [ebp - 0x14]
push eax
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
call fcn.75e60d94
test byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x44]
jne 0x75e68d40
mov word [ebp - 0xe], cx
test byte [ebp - 4], 0x20
mov eax, dword [ebp - 0x40]
mov word [ebp - 0xc], ax
jne 0x75e68d4e
mov edx, dword [ebp - 0x3c]
sub edx, ecx
mov word [ebp - 0xa], dx
mov ecx, dword [ebp - 0x38]
mov edi, dword [ebp - 0x70]
sub ecx, eax
cmp word [edi], 0
mov word [ebp - 8], cx
jne 0x75e68d5c
jmp 0x75e5d582
push 0xffffffffffffffff
push dword [ebp - 0x80]
lea eax, [ebp - 0x94]
push eax
call fcn.75e3822d
push dword [ebp - 0x78]
movsx eax, word [ebp - 8]
mov esi, dword [ebp + 0x20]
push 0
push dword [ebp + 8]
and esi, 0xfffffffe
push dword [ebp - 0x34]
shl esi, 0x1e
push dword [ebp + 0x14]
mov dword [ebp - 0x74], esi
push eax
push dword [ebp - 0xa]
call fcn.75e612e5
push eax
movsx eax, word [ebp - 0xc]
push eax
push dword [ebp - 0xe]
call fcn.75e612e5
or esi, dword [ebp - 0x18]
push eax
push dword [ebp - 0x14]
lea eax, [ebp - 0x94]
push eax
push edi
push esi
call fcn.75e3a776
mov dword [ebp + 0x14], eax
test eax, eax
je 0x75e5d559
mov ecx, eax
call fcn.75e3618b
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0x20]
and eax, 8
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x48], eax
jne 0x75e68d82
mov eax, dword [ebp - 0x30]
or eax, dword [ebp - 0x2c]
je 0x75e5d559
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
call fcn.75e5edd7
test eax, eax
je 0x75e5d559
xor edi, edi
cmp dword [ebp - 0x1c], edi
jne 0x75e68d8f
mov esi, dword [ebp - 0x30]
mov al, byte [esi + 0x36]
test al, 8
jne 0x75e61dd2
mov eax, dword [esi + 0x130]
and dword [eax + 0x18], 0xfffffffd
mov eax, dword [esi + 0x130]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 8], ecx
mov eax, dword [esi + 0x130]
mov ecx, dword [ebp - 0x50]
mov dword [eax + 0xc], ecx
mov eax, dword [esi + 0x130]
mov ecx, dword [ebp + 0x18]
mov dword [eax], ecx
mov eax, dword [esi + 0x130]
and dword [eax + 0x18], 0xfffffffe
mov eax, dword [esi + 0x130]
xor ecx, ecx
inc ecx
test byte [ebp + 0x20], 2
mov dword [eax + 0x20], ecx
mov dword [eax + 0x24], edi
jne 0x75e52392
test byte [ebp - 4], 4
je 0x75e6108a
mov eax, dword [ebp - 0x24]
mov ecx, dword [esi + 0x130]
cdq
mov dword [ecx + 0x30], eax
mov dword [ecx + 0x34], edx
cmp dword [ebp + 0x18], edi
je 0x75e6108a
push edi
push edi
push dword [ebp - 0x24]
push 0x30
push dword [ebp - 0x2c]
push esi
call fcn.75e3955c
cmp word [ebp - 0x10], di
je 0x75e611ad
xor eax, eax
cmp word [ebp - 0x20], di
sete al
dec eax
and eax, 6
add eax, 0x12
mov dword [ebp - 0x80], eax
jmp 0x75e619db
and dword [ebp - 0x88], 0
lea ecx, [edx + 4]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x8c], edx
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x7c], 0
jne 0x75e68dac
mov eax, dword [ebp + 8]
mov edi, dword [ebp - 0x78]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp word [eax], cx
jne 0x75e68e63
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x58], ecx
je 0x75e61104
mov eax, dword [ebp - 0x64]
and eax, 0x3fffffff
or eax, 0x40000000
mov dword [ebp - 0x64], eax
test ebx, 0xffff0000
jne 0x75e61b04
movsx eax, word [ebp - 0x5a]
push edi
push dword [ebp - 0x28]
push dword [ebp - 0x70]
push dword [ebp - 0x58]
push dword [ebp + 0x14]
push eax
push dword [ebp - 0x5c]
call fcn.75e612e5
push eax
movsx eax, word [ebp - 0x5e]
push eax
push dword [ebp - 0x60]
call fcn.75e612e5
push eax
push dword [ebp - 0x64]
lea eax, [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x74]
or eax, dword [ebp - 0x68]
push ebx
push eax
call fcn.75e3a776
mov ebx, eax
test ebx, ebx
je 0x75e68e7f
xor edi, edi
cmp dword [ebp - 0x6c], edi
jne 0x75e68e8c
cmp dword [ebp - 0x24], edi
je 0x75e61176
push edi
push dword [ebp - 0x24]
push 0x30
push ebx
call sym.USER32.dll_SendMessageW
push edi
push edi
push 0x87
push ebx
call sym.USER32.dll_SendMessageW
test al, 0x10
jne 0x75e61f5c
mov ecx, dword [ebp - 0x34]
movzx eax, word [ecx]
push 0xfffffffffffffffe
pop edx
sub edx, eax
sub edx, ecx
and edx, 3
add edx, eax
lea ebx, [edx + ecx + 2]
cmp word [ebp - 0x10], di
jne 0x75e619db
xor edi, edi
test byte [esi + 0x35], 4
jne 0x75e611ce
push edi
push edi
push edi
push dword [ebp - 0x2c]
push esi
call fcn.75e60bca
mov ecx, eax
or ecx, edx
je 0x75e68e9c
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
cmp dword [ebp + 0x18], edi
je 0x75e6125a
push edi
push dword [ebp + 0x1c]
push dword [ebp - 0x54]
push 0x110
push dword [ebp - 0x2c]
push esi
call fcn.75e3955c
mov ecx, dword [ebp + 0x14]
mov dl, 1
mov ebx, eax
call fcn.75e3992d
test eax, eax
je 0x75e5d58c
cmp ebx, edi
je 0x75e6125a
mov eax, dword [esi + 0x130]
test byte [eax + 0x18], 1
jne 0x75e6125a
test byte [esi + 0x35], 4
jne 0x75e6125a
push dword [ebp - 0x54]
call sym.USER32.dll_IsWindow
test eax, eax
je 0x75e61228
test byte [esi + 0x2d], 2
je 0x75e6122b
mov dword [ebp - 0x54], edi
push edi
push edi
push edi
push dword [ebp - 0x2c]
push esi
call fcn.75e60bca
mov ecx, eax
or ecx, edx
je 0x75e68eb1
mov ebx, dword [eax]
cmp ebx, edi
je 0x75e6124d
push ebx
call fcn.75e60cbd
push ebx
push dword [ebp - 0x54]
push dword [ebp - 0x2c]
push esi
call fcn.75e61b23
mov ebx, dword [ebp + 0x14]
push ebx
call sym.USER32.dll_IsWindow
test eax, eax
je 0x75e68eb8
mov eax, dword [0x75ea0138]
test byte [eax], 0x80
jne 0x75e612ac
mov eax, dword [eax + 0x1334]
test al, 0x20
jne 0x75e612ac
test eax, eax
jns 0x75e612ac
push 0x400
call sym.USER32.dll_GetAppCompatFlags2
test al, 2
jne 0x75e612ac
mov al, byte [esi + 0x37]
and al, 0xc0
cmp al, 0x40
je 0x75e612ac
push edi
push edi
push 3
push 0x127
push dword [ebp - 0x2c]
push esi
call fcn.75e3955c
test byte [ebp - 4], 8
jne 0x75e68ed7
test byte [ebp - 4], 1
jne 0x75e5d412
test byte [ebp + 0x20], 4
jne 0x75e612d7
mov dl, 1
mov ecx, ebx
call fcn.75e3992d
test eax, eax
je 0x75e68ef4
mov eax, ebx
pop edi
pop ebx
pop esi
leave
ret 0x1c
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xa4
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0xf70]
push esi
xor esi, esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 4], esi
cmp dword [eax + 0x78], esi
je 0x75e68b9b
push ebx
mov ebx, dword [ebp + 0xc]
push edi
mov eax, 0xfffc
test word [ebp + 8], ax
push 0
pop eax
setne al
mov dword [ebp - 0x7c], eax
mov eax, 0xffff
cmp word [ebx + 2], ax
jne 0x75e4d871
push 6
pop ecx
mov esi, ebx
lea edi, [ebp - 0x20]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp + 8]
movzx esi, word [ebp - 0x14]
test eax, eax
je 0x75e68ba7
push eax
call dword [0x75ea0e1c]
mov edi, 0x40000000
or eax, edi
mov ecx, 0x400
cmp ax, cx
mov dword [ebp - 0x78], eax
sbb eax, eax
inc eax
mov dword [ebp - 0x74], eax
je 0x75e614a6
mov ecx, dword fs:[0x18]
mov ecx, dword [ecx + 0xf70]
and dword [ebp - 0x14], 0xffff7fff
cmp dword [ecx + 0x810], 0x400
jb 0x75e68bb3
or dword [ebp - 0x14], 4
or esi, 4
xor ecx, ecx
cmp dword [ebp - 0x7c], ecx
jne 0x75e614ba
test dword [ebp - 0x14], 0x200
jne 0x75e68bcc
movzx edx, word [ebp - 0x14]
cmp esi, edx
jne 0x75e68bd8
test byte [ebp - 0x14], 0x80
jne 0x75e61f46
test dword [ebp - 0x14], 0x2000
jne 0x75e5d701
mov eax, 0x400
test dword [ebp - 0x14], eax
jne 0x75e5d531
test dword [ebp - 0x14], 0x400000
jne 0x75e61dc6
test byte [ebp - 0x14], 2
jne 0x75e68be5
test dword [ebp - 0x14], edi
jne 0x75e4f06d
or dword [ebp - 0x18], 0x10000
mov eax, 0xffff8000
mov edx, eax
cmp word [ebp - 0xe], dx
je 0x75e68bee
cmp word [ebp - 0xa], ax
je 0x75e68bfd
cmp word [ebp - 0xa], cx
jl 0x75e68c01
cmp word [ebp - 8], cx
jl 0x75e68c0c
xor eax, eax
cmp word [ebp - 0x20], cx
setne al
lea eax, [eax*8 + 0x12]
add eax, ebx
mov esi, eax
movzx ebx, word [esi]
mov dword [ebp - 0x48], ebx
cmp bx, cx
jne 0x75e56d75
mov dword [ebp - 0x34], ecx
mov eax, 0xffff
cmp bx, ax
je 0x75e56da0
push esi
call fcn.75e6168c
push eax
mov dword [ebp - 0x70], eax
call fcn.75e6168c
push eax
mov dword [ebp - 0x80], eax
call fcn.75e6168c
mov esi, eax
push 0
mov dword [ebp - 0x28], esi
call dword [sym.imp.gdi32.dll_CreateCompatibleDC]
mov dword [ebp - 0x2c], eax
test eax, eax
je 0x75e5d559
test byte [ebp - 0x14], 0x40
je 0x75e4fb8d
push dword [ebp + 0x20]
lea ecx, [ebp - 0x20]
push dword [ebp - 0x78]
push ecx
lea ecx, [ebp - 0x28]
push ecx
push eax
call fcn.75e61785
mov ebx, dword [ebp - 0x28]
or dword [ebp - 4], 4
neg ebx
and ebx, 3
add ebx, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x75e4fbb0
push dword [ebp - 0x24]
mov esi, dword [sym.imp.gdi32.dll_SelectObject]
push dword [ebp - 0x2c]
call esi
mov edi, eax
test edi, edi
je 0x75e68c2b
lea eax, [ebp - 0x50]
push eax
push 0
push dword [ebp - 0x2c]
call dword [sym.imp.gdi32.dll_GdiGetCharDimensions]
push edi
push dword [ebp - 0x2c]
mov dword [ebp + 0xc], eax
call esi
cmp dword [ebp + 0xc], 0
je 0x75e4fbba
push dword [ebp - 0x2c]
call dword [sym.imp.gdi32.dll_DeleteDC]
test dword [ebp - 0x14], 0x10000000
jne 0x75e5d3ef
test byte [ebp - 0x14], 0x20
jne 0x75e61639
or dword [ebp - 4], 2
movsx eax, word [ebp - 0xa]
imul eax, dword [ebp + 0xc]
xor esi, esi
inc eax
inc eax
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [ebp - 0x3c], eax
movsx eax, word [ebp - 8]
imul eax, dword [ebp - 0x50]
push dword [ebp - 0x18]
add eax, 4
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0x38], eax
movzx eax, word [ebp - 0x48]
push eax
push dword [ebp - 0x14]
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x44], esi
call fcn.75e45184
jmp 0x75e68c42
mov eax, 0xffff
add word [ebp - 0x10], ax
cmp word [ebp - 0x20], 0
je 0x75e52676
push 6
pop ecx
mov esi, ebx
lea edi, [ebp - 0x6c]
rep movsd dword es:[edi], dword [esi]
mov di, word [ebp - 0x5c]
mov cx, word [ebp - 0x5e]
mov ax, word [ebp - 0x60]
mov esi, dword [ebp - 0x30]
cwde
imul eax, dword [ebp + 0xc]
inc eax
inc eax
cdq
and edx, 3
add eax, edx
sar eax, 2
mov word [ebp - 0x60], ax
movsx eax, cx
imul eax, dword [ebp - 0x50]
add eax, 4
cdq
and edx, 7
add eax, edx
sar eax, 3
mov word [ebp - 0x5e], ax
movsx eax, di
imul eax, dword [ebp + 0xc]
inc eax
inc eax
cdq
and edx, 3
add eax, edx
sar eax, 2
mov word [ebp - 0x5c], ax
movsx eax, word [ebp - 0x5a]
imul eax, dword [ebp - 0x50]
mov edi, dword [0x75ea0138]
add eax, 4
cdq
and edx, 7
add eax, edx
sar eax, 3
mov word [ebp - 0x5a], ax
mov eax, dword [ebp - 0x80]
add ebx, eax
mov eax, 0xffff
cmp word [ebx], ax
jne 0x75e61afa
mov ax, word [ebx + 2]
mov ecx, 0xff7f
and ax, cx
movzx eax, ax
cmp ax, 0x19
jae 0x75e68e7f
movzx eax, ax
lea edx, [ebx + 4]
movzx ebx, word [edi + eax*2 + 0x354]
mov eax, edx
and eax, 1
add edx, eax
push 4
pop eax
or dword [ebp - 0x68], eax
test byte [esi + 0x34], al
je 0x75e61acf
test dword [ebp - 0x64], 0x800000
jne 0x75e5d3ff
movzx ecx, word [edi + 0x35e]
cmp ebx, ecx
je 0x75e5d3ff
mov ecx, 0xffff
cmp word [edx], cx
je 0x75e610ac
push edx
call fcn.75e6168c
push 0xffffffffffffffff
mov dword [ebp - 0x34], eax
push edx
lea eax, [ebp - 0x94]
push eax
call fcn.75e3822d
jmp 0x75e68da1
push ebx
call fcn.75e616a9
mov edx, eax
jmp 0x75e61aa1
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0xa4]
push eax
call fcn.75e3822d
lea ebx, [ebp - 0xa4]
jmp 0x75e61110
or dword [ebp - 0x18], 0x100
jmp 0x75e614f8
test al, 7
jne 0x75e5e706
push 0x5c
push dword [ebp + 0x14]
call fcn.75e39774
jmp 0x75e6100f
or dword [ebp - 0x18], 0x101
jmp 0x75e614d0
mov eax, dword [esi + 0x130]
mov ecx, dword [ebp - 0x58]
mov dword [eax + 0x20], ecx
mov dword [eax + 0x24], edi
jmp 0x75e6118b
cmp dword [ebp - 0x74], esi
je 0x75e60e77
mov eax, edi
or eax, dword [ebp - 0x48]
je 0x75e60e77
cmp byte [0x75ea0040], 0
je 0x75e68ce1
jmp 0x75e5d551
lea ecx, [edi + 0x4c]
test eax, eax
je 0x75e5d551
mov eax, dword [ecx + 8]
movsx edx, word [ebp - 0xa]
sub eax, edx
add eax, dword [ecx]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x44], eax
mov eax, dword [ecx + 0xc]
add eax, dword [ecx + 4]
movsx ecx, word [ebp - 8]
sub eax, ecx
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
mov dword [ebp - 0x40], ecx
jmp 0x75e60ed2
push 0xf
call fcn.75e40e16
jmp 0x75e5d53d
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
jmp 0x75e6145a
test dword [ebp - 0x14], 0x4000
je 0x75e614a6
and dword [ebp - 0x14], 0xfffffffb
and esi, 0xfffffffb
jmp 0x75e614a6
mov dword [ebp - 4], 8
jmp 0x75e614ba
cmp eax, ecx
je 0x75e614c6
jmp 0x75e5d569
or dword [ebp - 0x18], 8
jmp 0x75e61502
or dword [ebp - 4], 0x10
xor edx, edx
mov word [ebp - 0xe], dx
jmp 0x75e61523
or dword [ebp - 4], 0x20
xor eax, eax
mov word [ebp - 0xa], ax
jmp 0x75e61537
xor eax, eax
mov word [ebp - 8], ax
jmp 0x75e61541
push 0x10
call dword [sym.imp.gdi32.dll_GetStockObject]
or dword [ebp - 4], 4
mov dword [ebp - 0x24], eax
jmp 0x75e4fba2
mov eax, dword [0x75ea00f8]
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x24], eax
jmp 0x75e4fbba
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x44]
mov word [ebp - 0xa], ax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x40]
test dword [ebp - 0x14], 0x1000
mov word [ebp - 8], ax
je 0x75e60e43
mov eax, dword [0x75ea0138]
mov edx, dword [0x75ea013c]
mov ecx, eax
add ecx, 0x7a4
adc edx, esi
mov dword [ebp - 0x48], edx
cmp dword [ecx], esi
je 0x75e60e43
cmp dword [ebp - 0x74], esi
je 0x75e60e43
push 2
push dword [eax + 0xc5c]
push dword [eax + 0xc58]
call fcn.75e461a0
mov dword [ebp - 0x4c], eax
or eax, edx
mov dword [ebp - 0x48], edx
je 0x75e5d559
mov eax, dword [0x75ea0138]
mov ecx, dword [eax + 0xc58]
mov dword [ebp - 0x44], ecx
mov ecx, dword [eax + 0xc5c]
movsx eax, word [ebp - 0xa]
cdq
sub eax, edx
sar eax, 1
neg eax
add dword [ebp - 0x44], eax
movsx eax, word [ebp - 8]
cdq
sub eax, edx
sar eax, 1
neg eax
add ecx, eax
jmp 0x75e62023
call sym.USER32.dll_IsThreadDesktopComposited
jmp 0x75e61ff2
movsx eax, word [ebp - 0xa]
sub dword [ebp - 0x44], eax
jmp 0x75e60619
push dword [ebp - 0x34]
call sym.USER32.dll_DestroyMenu
cmp dword [ebp - 0x24], esi
je 0x75e5d569
cmp dword [ebp - 0x84], esi
jne 0x75e5d569
push dword [ebp - 0x24]
call dword [sym.imp.gdi32.dll_DeleteObject]
jmp 0x75e5d569
call sym.USER32.dll_IsThreadDesktopComposited
jmp 0x75e60619
neg edx
push edx
neg eax
push eax
lea eax, [ebp - 0x44]
push eax
call sym.USER32.dll_OffsetRect
jmp 0x75e60efa
mov eax, 0xffff8000
mov word [ebp - 0xe], ax
jmp 0x75e60f20
mov ecx, 0xffff8000
mov word [ebp - 0xa], cx
jmp 0x75e60f3a
test edi, 0xffff0000
je 0x75e60f55
push 0xffffffffffffffff
push edi
lea eax, [ebp - 0xa4]
push eax
call fcn.75e3822d
lea edi, [ebp - 0xa4]
jmp 0x75e60f55
push dword [ebp + 0x14]
call fcn.75e79bfb
jmp 0x75e60fd7
push 0x54
push dword [ebp - 0x1c]
push dword [ebp + 0x14]
call fcn.75e43b47
jmp 0x75e61001
mov edi, dword [0x75ea0138]
jmp 0x75e610cb
test byte [ebp - 4], 2
je 0x75e610d5
mov eax, ebx
and eax, 0xffff0000
jne 0x75e68dc8
cmp bx, word [edi + 0x356]
je 0x75e68e0a
test eax, eax
je 0x75e610d5
mov ecx, 0x75e68efc
mov eax, ebx
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x75e68dfd
test dx, dx
je 0x75e68df9
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x75e68dfd
add eax, 4
add ecx, 4
test dx, dx
jne 0x75e68dd7
xor eax, eax
jmp 0x75e68e02
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x75e610d5
mov eax, dword [esi + 0x130]
mov ecx, dword [eax + 0x28]
or ecx, dword [eax + 0x2c]
jne 0x75e68e38
call fcn.75e79bd1
mov ecx, dword [esi + 0x130]
cdq
mov dword [ecx + 0x28], eax
mov dword [ecx + 0x2c], edx
mov eax, dword [esi + 0x130]
mov ecx, dword [eax + 0x28]
or ecx, dword [eax + 0x2c]
je 0x75e68e7f
mov eax, dword [esi + 0x130]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x70], eax
test eax, eax
jne 0x75e68e4f
push eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
push eax
call dword [0x75ea0e1c]
mov edi, eax
or edi, 0x40000000
jmp 0x75e610de
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x7c], ecx
jne 0x75e68e74
cmp dword [ebp - 0x48], ecx
je 0x75e610ef
mov eax, dword [eax + 2]
mov dword [ebp - 0x28], eax
jmp 0x75e610ef
test byte [esi + 0x34], 0x10
je 0x75e68ea4
xor edi, edi
jmp 0x75e6118b
push 0x54
push dword [ebp - 0x6c]
push ebx
call fcn.75e43b47
jmp 0x75e61165
mov dword [ebp - 0x54], edi
jmp 0x75e611ce
push dword [ebp + 0x14]
call sym.USER32.dll_DestroyWindow
jmp 0x75e5d569
xor ebx, ebx
jmp 0x75e6124d
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0xf70]
cmp dword [eax + 0x810], 0x400
sbb eax, eax
and eax, ebx
jmp 0x75e612d9
push 0x5d
push ebx
call fcn.75e39774
push ebx
call sym.USER32.dll_IsWindow
test eax, eax
jne 0x75e612b6
xor ebx, ebx
jmp 0x75e612c0
xor ebx, ebx
jmp 0x75e612d7