Function at 0x436849
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
push ebx
push esi
mov ebx, ecx
xor esi, esi
push edi
mov dword [0x4c7950], esi
mov dword [0x4c42b4], ebx
call fcn.004356d9
push 1
pop edi
cmp dword [0x4c42a0], edi
jne 0x436879
push edi
call fcn.00432c15
pop ecx
lea eax, [ebp - 0x18]
push 0x2d
push eax
call fcn.00461770
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
call fcn.004038fb
mov ecx, ebx
call fcn.004427db
call fcn.0044430c
mov ecx, ebx
call fcn.00443015
mov eax, dword [ebx + 4]
push 0x4b503c
lea ecx, [ebp - 8]
mov dword [0x4c42f0], eax
call fcn.0040a4e8
lea eax, [ebp - 8]
push 0x4b0f94
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040a915
push eax
lea ecx, [ebx + 0x4d98]
call fcn.00403a8c
lea ecx, [ebp - 0x18]
call fcn.004038fb
lea eax, [ebp - 8]
push 0x4b5038
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040a915
push eax
lea ecx, [ebx + 0x5444]
call fcn.00403a8c
lea ecx, [ebp - 0x18]
call fcn.004038fb
lea eax, [ebp - 8]
push 0x4b5034
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040a915
push eax
lea ecx, [ebx + 0x5af0]
call fcn.00403a8c
lea ecx, [ebp - 0x18]
call fcn.004038fb
lea eax, [ebp - 8]
push 0x4b5030
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040a915
push eax
lea ecx, [ebx + 0x619c]
call fcn.00403a8c
lea ecx, [ebp - 0x18]
call fcn.004038fb
push esi
push edi
push edi
call fcn.00467bf2
push esi
push esi
push edi
call fcn.00467bf2
add esp, 0x18
mov ecx, 0x4c3cc8
call fcn.00426c6a
mov eax, dword [ebx + 0x24]
mov esi, 0x4b22e4
mov dword [ebx + 0x87c], eax
mov dword [0x4c42e8], eax
mov eax, esi
mov dword [ebx + 0x880], edi
test eax, eax
je 0x436991
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push esi
push eax
mov ecx, 0x4c3ba4
call fcn.004039ec
mov eax, dword [0x4b0550]
push dword [ebx + 4]
lea esi, [ebx + 0x894]
mov dword [ebp - 0x34], eax
mov ecx, esi
mov dword [ebx + 0x4980], edi
call fcn.00498043
mov eax, dword [esi + 0x40]
push dword [ebx + 4]
mov dword [ebp - 0x10], eax
call dword [sym.imp.USER32.dll_GetMenu]
push eax
mov ecx, ebx
call fcn.00443567
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x43a
push dword [ebx + 4]
call esi
mov eax, dword [ebx + 4]
push 0xe800
push 0x56002640
push eax
mov dword [ebx + 0x8ec], eax
call fcn.004452c6
push edi
push 0x7d0
push edi
push 0
push 0x2b67
mov dword [ebx + 0x20], eax
push dword [ebp - 0x10]
push eax
call fcn.00444945
add esp, 0x28
mov dword [ebx + 0x58], 0xe7
cmp dword [0x4c7950], 0
je 0x436a33
mov dword [ebx + 0x58], 0x14e
push 0xe800
push 0x5600194c
push 0
push dword [ebx + 0x58]
push dword [ebx + 0x20]
call fcn.0040989e
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
add esp, 0x14
mov dword [ebp - 4], eax
push 0x31
call edi
cmp eax, 0x10
jle 0x436a68
push dword [ebp - 4]
call fcn.004237ca
pop ecx
mov eax, dword [ebp - 4]
mov ecx, ebx
mov dword [ebx + 0x4988], eax
call fcn.004367bd
lea eax, [ebx + 0x6658]
push eax
push dword [ebx + 0x4988]
call fcn.004154d8
pop ecx
pop ecx
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_GetParent]
lea ecx, [ebp - 0x30]
mov dword [0x4c42e0], eax
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
push 0x32
call edi
push 0
push 0
push 0x454
push dword [ebx + 0x4988]
call esi
lea eax, [ebp - 0x30]
push eax
push dword [ebx + 0x8d4]
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
dec eax
dec eax
movzx eax, ax
shl eax, 0x10
or al, 0xc
push eax
push 0
push 0x41f
push dword [ebx + 0x4988]
call esi
push 1
push 0
push 0x454
push dword [ebx + 0x4988]
call esi
push 0x32
call edi
mov dword [ebp - 0x18], eax
fild dword [ebp - 0x18]
fmul qword [0x4ab340]
call fcn.0049d7e0
push eax
push dword [ebx + 4]
call fcn.004355aa
pop ecx
mov dword [0x4c42e4], eax
pop ecx
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0x4c42e4]
test eax, eax
je 0x436b45
lea ecx, [ebp - 0x30]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
jne 0x436b4f
mov eax, dword [0x4c42e0]
mov dword [0x4c42e4], eax
push 1
xor edi, edi
pop esi
mov ecx, ebx
push esi
push edi
call fcn.0043acc8
push esi
push edi
mov ecx, ebx
call fcn.0043ac26
mov eax, dword [0x4c4300]
mov dword [0x4b82b8], esi
cmp eax, 0xffffffff
je 0x436b7a
cmp eax, esi
jne 0x436b80
mov dword [0x4b82b8], edi
lea eax, [ebp - 0x44]
mov ecx, 0x4c7cec
push eax
push str.WinRC
push 0x4b0ae4
call fcn.0044b1f3
test eax, eax
je 0x436ba8
lea esi, [ebp - 0x44]
mov edi, 0x4c3d28
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0x20]
push 0
mov dword [ebx + 0x890], eax
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.USER32.dll_CopyRect]
lea eax, [ebp - 0x30]
push eax
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetClientRect]
add dword [ebp - 0x2c], 0x18
mov eax, dword [ebp - 0x2c]
add dword [ebp - 0x30], 0xc
sub dword [ebp - 0x28], 0xc
sub esp, 0x10
add eax, 0x2a
lea esi, [ebp - 0x30]
mov edi, esp
mov dword [ebp - 0x24], eax
push dword [ebx + 4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebx + 0x5c]
movsd dword es:[edi], dword [esi]
call fcn.004149ed
lea eax, [ebx + 0x49c0]
lea ecx, [ebx + 0x49dc]
neg eax
sbb eax, eax
lea edi, [ebx + 0x60]
and eax, ecx
lea ecx, [ebx + 0x5c]
mov esi, ecx
mov dword [ebx + 0x94], eax
neg esi
sbb esi, esi
and esi, edi
mov eax, dword [esi]
mov dword [0x4c429c], eax
mov dword [ebx + 0xec], 1
mov eax, dword [0x4b8294]
mov dword [ebx + 0xe4], eax
call fcn.004150f4
mov eax, dword [0x4c4300]
cmp eax, 1
je 0x436c58
cmp eax, 2
je 0x436c58
push 0
push dword [edi]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x436c83
push 1
lea ecx, [ebx + 0x88c]
push 0x64
push 1
neg ecx
push 0
push 0x462
push dword [esi]
lea eax, [ebx + 0x890]
sbb ecx, ecx
and ecx, eax
push dword [ecx]
call fcn.00444945
add esp, 0x1c
mov edi, dword [sym.imp.USER32.dll_GetWindowLongW]
lea esi, [ebx + 0x890]
push 0xfffffffffffffff0
push dword [esi]
call edi
mov ecx, eax
or ch, 4
cmp eax, ecx
je 0x436ca9
push ecx
push 0xfffffffffffffff0
push dword [esi]
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 0xfffffffffffffff0
push dword [esi]
call edi
mov ecx, eax
and ch, 0xfb
cmp eax, ecx
je 0x436cc3
push ecx
push 0xfffffffffffffff0
push dword [esi]
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 1
mov ecx, esi
call fcn.004260af
mov eax, dword [ebp - 4]
test eax, eax
je 0x436ce8
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebx + 0x3c]
mov word [ebp - 0x24], 8
call fcn.0042058d
push 0
push 1
lea ecx, [ebx + 0x3c]
push 0xe800
call fcn.00426225
lea esi, [ebx + 0x848]
push 0
mov edi, 0xe801
lea ecx, [ebx + 0x3c]
push dword [esi]
push edi
call fcn.00426225
mov ecx, ebx
call fcn.00436430
cmp dword [esi], 0
mov eax, 0x46000000
je 0x436d27
mov eax, 0x56000000
push edi
push eax
push 0xe001
mov ecx, ebx
call fcn.00444a99
push 1
push dword [ebx + 0x24]
call fcn.004707b2
pop ecx
pop ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
mov ecx, 0x4c7a88
call fcn.00403580
mov esi, eax
mov eax, ebx
neg eax
lea ecx, [ebx + 0x34]
sbb eax, eax
and eax, ecx
lea ecx, [esi + 4]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.00469ee2
mov eax, ebx
lea ecx, [ebx + 0x38]
neg eax
sbb eax, eax
and eax, ecx
lea ecx, [esi + 0x10]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.00469ee2
mov ecx, ebx
call fcn.0043b778
mov eax, dword [ebx + 0x84c]
test eax, eax
je 0x436dc1
cmp eax, 0xd
jge 0x436dc1
test eax, eax
jle 0x436dc1
cmp eax, 5
je 0x436dc1
lea ecx, [eax + 0x8497]
jle 0x436db0
dec ecx
push 0
push ecx
push 0x111
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
push 1
xor edi, edi
pop eax
lea ecx, [ebx + 0x3c]
push edi
mov dword [ebp - 0x18], eax
push eax
mov eax, dword [ebx + 0x84c]
add eax, 0x80c0
push eax
call fcn.00426225
push 0x4bd614
lea ecx, [ebp - 0xc]
call fcn.00403927
mov esi, 0x4c7a70
mov ecx, esi
call fcn.0040ae23
mov ecx, esi
call fcn.0040add3
push edi
push 0x4b5028
mov ecx, esi
call fcn.00403d34
test eax, eax
jne 0x436e32
push 3
push edi
mov ecx, esi
call fcn.0040ae6d
mov ecx, esi
call fcn.0040ae23
mov ecx, esi
call fcn.0040add3
mov dword [0x4c4254], 1
mov eax, dword [0x4c7a70]
cmp dword [eax - 8], edi
je 0x437019
push esi
lea ecx, [ebp - 4]
call fcn.004038b5
push edi
push str.__Browse_
mov ecx, esi
call fcn.00403d34
test eax, eax
jne 0x436ec8
push 0xa
push edi
mov ecx, esi
call fcn.0040ae6d
push esi
lea ecx, [ebp - 4]
call fcn.00403a8c
mov eax, dword [ebp - 4]
cmp word [eax], 0x22
jne 0x436e84
push 1
push edi
lea ecx, [ebp - 4]
call fcn.0040ae6d
mov eax, dword [ebp - 4]
mov ecx, dword [eax - 8]
cmp word [eax + ecx*2 - 2], 0x22
jne 0x436e9b
dec ecx
push 1
push ecx
lea ecx, [ebp - 4]
call fcn.0040ae6d
cmp dword [ebx + 0x84c], 5
jne 0x436eab
mov ecx, ebx
call fcn.0043461e
push edi
push ecx
lea eax, [ebp - 4]
mov ecx, esp
push eax
call fcn.004038b5
lea ecx, [ebx + 0x49c0]
call fcn.004720e8
jmp 0x436fdc
push edi
push 0x4b4fe0
mov ecx, esi
call fcn.00403d34
test eax, eax
jne 0x436f09
mov eax, dword [0x4c41e4]
cmp dword [eax - 8], edi
je 0x436ef0
push 0x4c41e4
lea ecx, [ebp - 0xc]
call fcn.00403a8c
cmp dword [ebx + 0x84c], 5
jne 0x436fdc
mov ecx, ebx
call fcn.0043461e
jmp 0x436fdc
mov ecx, dword [ebp - 4]
push 1
pop esi
cmp word [ecx], 0x22
jne 0x436f22
push esi
push edi
lea ecx, [ebp - 4]
call fcn.0040ae6d
mov ecx, dword [ebp - 4]
mov eax, dword [ecx - 8]
cmp word [ecx + eax*2 - 2], 0x22
jne 0x436f38
dec eax
push esi
push eax
lea ecx, [ebp - 4]
call fcn.0040ae6d
push ecx
lea eax, [ebp - 4]
mov ecx, esp
push eax
call fcn.004038b5
call fcn.00460471
cmp eax, esi
pop ecx
je 0x436fb4
mov ecx, ebx
call fcn.00443aa4
test eax, eax
je 0x436fb4
mov eax, dword [0x4c3d64]
xor esi, esi
cmp eax, edi
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], edi
jle 0x436fdc
mov eax, dword [0x4c3d60]
lea ecx, [ebp - 0x14]
lea eax, [eax + esi*4]
push eax
call fcn.004038b5
push dword [ebp - 0x10]
mov ecx, ebx
call fcn.0043f189
cmp eax, edi
mov dword [ebp - 0x1c], eax
je 0x436fa4
push edi
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
push eax
call fcn.004038b5
mov ecx, dword [ebp - 0x1c]
call fcn.004720e8
inc dword [ebp - 0x10]
lea ecx, [ebp - 0x14]
call fcn.004038fb
inc esi
cmp esi, dword [ebp - 0x24]
jl 0x436f6a
jmp 0x436fdc
push edi
push esi
push ecx
lea eax, [ebp - 4]
mov ecx, esp
push eax
mov dword [0x4c42cc], esi
call fcn.004038b5
mov ecx, ebx
call fcn.004411dc
test eax, eax
je 0x436fe6
mov dword [ebp - 0x18], edi
mov dword [0x4c42cc], edi
lea ecx, [ebp - 4]
call fcn.004038fb
jmp 0x437029
push 0x64
push 0x805d
push 0x111
mov dword [0x4c42cc], edi
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x105
push edi
push edi
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_RedrawWindow]
lea ecx, [ebp - 4]
call fcn.004038fb
cmp dword [ebx + 0x84c], 5
jne 0x437029
mov ecx, ebx
call fcn.0043461e
push 0x80
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadIconW]
push dword [ebx + 4]
lea ecx, [ebx + 0x1cc]
mov dword [ebx + 0x1ec], eax
call fcn.004957dc
lea esi, [ebx + 0x5dc4]
lea eax, [ebp - 0x20]
push eax
mov ecx, esi
call fcn.0046e156
mov ecx, eax
add eax, 4
neg ecx
sbb ecx, ecx
and ecx, eax
mov eax, dword [ecx]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], eax
call fcn.0048996a
cmp dword [ebp - 0x24], edi
jne 0x437085
mov ecx, esi
call fcn.004702b8
lea esi, [ebx + 0x5718]
lea eax, [ebp - 0x20]
push eax
mov ecx, esi
call fcn.0046e156
mov ecx, eax
add eax, 4
neg ecx
sbb ecx, ecx
and ecx, eax
mov eax, dword [ecx]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], eax
call fcn.0048996a
cmp dword [ebp - 0x24], edi
jne 0x4370ba
mov ecx, esi
call fcn.004702b8
lea eax, [ebp - 0x28]
lea ecx, [ebx + 0x506c]
push eax
call fcn.0046e156
mov ecx, eax
add eax, 4
neg ecx
sbb ecx, ecx
and ecx, eax
mov esi, dword [ecx]
lea ecx, [ebp - 0x28]
call fcn.0048996a
cmp esi, edi
jne 0x4370ed
lea ecx, [ebx + 0x506c]
call fcn.004702b8
lea eax, [ebp - 0x20]
lea esi, [ebx + 0x49c0]
push eax
mov ecx, esi
call fcn.0046e156
mov ecx, eax
add eax, 4
neg ecx
sbb ecx, ecx
and ecx, eax
mov eax, dword [ecx]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], eax
call fcn.0048996a
cmp dword [ebp - 0x24], edi
jne 0x437122
mov ecx, esi
call fcn.004702b8
mov ecx, dword [ebp - 0xc]
cmp dword [ecx - 8], edi
je 0x43718d
mov eax, dword [0x4c41e0]
push edi
cmp dword [eax - 8], edi
jne 0x437159
push ecx
lea ecx, [ebp - 0x28]
call fcn.00489f86
push 0xffffffffffffffff
push ecx
push ecx
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.004171b4
mov ecx, esi
call fcn.00478008
lea ecx, [ebp - 0x28]
jmp 0x43717b
push eax
lea ecx, [ebp - 0x28]
call fcn.00489f86
push 0xffffffffffffffff
push ecx
push ecx
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.004171b4
mov ecx, esi
call fcn.00477f4e
lea ecx, [ebp - 0x28]
call fcn.0048996a
push 0x4bd614
lea ecx, [ebp - 0xc]
call fcn.00403adc
cmp dword [ebx + 0x84c], 5
je 0x4371c6
cmp dword [ebp - 0x18], edi
je 0x4371c6
push dword [0x4c42f4]
push ecx
mov ecx, esp
push 0x4b5004
call fcn.00403927
mov ecx, ebx
call fcn.00435223
cmp eax, edi
mov dword [0x4c42f4], eax
je 0x4371c6
push eax
mov ecx, ebx
call fcn.0044240d
mov ecx, esi
call fcn.004701e3
lea ecx, [ebx + 0x506c]
call fcn.004701e3
lea ecx, [ebx + 0x5718]
call fcn.004701e3
lea ecx, [ebx + 0x5dc4]
call fcn.004701e3
cmp dword [0x4c39a4], 5
jb 0x43720a
cmp dword [0x4c39a8], 1
jb 0x43720a
mov dword [0x4b4138], 2
push dword [0x4b4138]
push ecx
mov ecx, esp
push str.designe_mode
call fcn.0040a4e8
mov ecx, ebx
call fcn.00435223
cmp eax, edi
mov dword [0x4b4138], eax
je 0x437237
push eax
mov ecx, ebx
call fcn.004424f6
jmp 0x43724c
mov eax, 0x4bedbc
push eax
push eax
push dword [0x4c42e4]
call fcn.0048efde
add esp, 0xc
mov ecx, ebx
call fcn.004423a6
mov ecx, ebx
call fcn.0043735f
mov dword [ebx + 0x1c8], edi
mov eax, dword [0x4b4128]
cmp eax, 0xffffffff
je 0x43726d
push eax
jmp 0x43726e
push edi
mov ecx, ebx
call fcn.0043f189
mov esi, eax
cmp esi, edi
je 0x437291
push edi
mov ecx, esi
call fcn.00472696
mov ecx, esi
call fcn.004730c4
push eax
call dword [sym.imp.USER32.dll_SetFocus]
push 1
mov ecx, ebx
call fcn.00444732
push edi
push 0x36ee80
push 0x2afb
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetTimer]
lea ecx, [ebp - 0xc]
call fcn.004038fb
lea ecx, [ebp - 0x34]
call fcn.004038fb
lea ecx, [ebp - 8]
call fcn.004038fb
pop edi
pop esi
pop ebx
leave
ret