Function at 0x44332d
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, 0x2df4
call fcn.0049e650
mov eax, dword [0x4c0390]
xor eax, esp
mov dword [esp + 0x2df0], eax
mov eax, dword [esp + 0x2df8]
push ebp
mov ebp, ecx
mov ecx, dword [esp + 0x2e00]
push esi
mov esi, dword [esp + 0x2e0c]
mov dword [esp + 8], ebp
cmp ecx, 0x4e
jne 0x444023
mov ecx, dword [esi + 8]
push edi
xor edi, edi
xor eax, eax
cmp dword [eax + 0x4bf0dc], ecx
je 0x4432f8
add eax, 4
cmp eax, 0x1c
jb 0x4432e6
jmp 0x44330b
mov eax, dword [0x4dc1c8]
push edi
push edi
push 0x400
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [esi + 8]
add eax, 0x9b
push ebx
cmp eax, 0x9a
ja case.0x4433a1.10
movzx ecx, byte [eax + 0x444068]
jmp dword [ecx*4 + 0x44403c]
mov ebx, dword [sym.imp.USER32.dll_GetKeyState]
push 0x10
call ebx
movzx edi, ax
shr edi, 0xf
push 0x12
and edi, 1
call ebx
movzx ebp, ax
shr ebp, 0xf
push 0x11
and ebp, 1
call ebx
movzx ebx, ax
shr ebx, 0xf
and ebx, 1
cmp word [esi + 0xc], 0x79
jne 0x443372
test edi, edi
jne 0x443369
test ebp, ebp
je 0x443382
mov ecx, dword [esp + 0x10]
call fcn.0043fc30
test edi, edi
jne case.0x4433a1.10
test ebp, ebp
jne case.0x4433a1.10
test ebx, ebx
jne case.0x4433a1.10
movzx eax, word [esi + 0xc]
add eax, 0xfffffff7
cmp eax, 0x6b
ja case.0x4433a1.10
movzx edx, byte [eax + 0x444124]
jmp dword [edx*4 + 0x444104]
call fcn.0049ef7d
mov ecx, dword [esp + 0x10]
push 0
push 1
mov dword [0x4ed140], eax
call fcn.00442e00
call fcn.0049ef7d
mov dword [0x4ed140], eax
jmp case.0x4433a1.10
mov ecx, dword [esp + 0x10]
call fcn.0043fba0
jmp case.0x4433a1.10
mov eax, dword [0x4dc1c8]
push 0
push 0xb4
push 0x111
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.0x4433a1.10
mov ecx, dword [esp + 0x10]
call fcn.0043dc80
jmp case.0x4433a1.10
mov ecx, 0x4dfee0
call fcn.00406c70
jmp case.0x4433a1.10
cmp dword [0x4dbc5c], 0
mov ecx, 0x4dfef0
je 0x443428
call fcn.00442470
jmp case.0x4433a1.10
call fcn.004418b0
jmp case.0x4433a1.10
cmp dword [0x4dbc64], 0
je case.0x4433a1.10
call dword [sym.imp.USER32.dll_GetFocus]
mov ecx, dword [esp + 0x10]
cmp eax, dword [ecx]
jne case.0x4433a1.10
mov edx, dword [0x4dbc64]
push edx
call dword [sym.imp.USER32.dll_SetFocus]
jmp case.0x4433a1.10
push edi
push str.SingleClick
push str.FileList
call fcn.00456400
test eax, eax
je case.0x4433a1.10
mov ecx, ebp
call fcn.0043daf0
test eax, eax
je case.0x4433a1.10
call fcn.0049ef7d
sub eax, dword [0x4ed140]
cmp eax, 0x3e8
jle case.0x4433a1.10
push edi
push 1
mov ecx, ebp
call fcn.00442e00
xor eax, eax
pop ebx
pop edi
mov ecx, dword [esp + 0x2df8]
pop esi
pop ebp
xor ecx, esp
call fcn.0049e0c6
add esp, 0x2df4
ret 0x10
mov ecx, ebp
call fcn.0043daf0
test eax, eax
je case.0x4433a1.10
jmp 0x443486
call fcn.00422a00
jmp case.0x4433a1.10
mov eax, dword [esi + 0x10]
push eax
mov ecx, ebp
call fcn.00440e70
jmp case.0x4433a1.10
mov ecx, 0x4e0c18
call fcn.004112d0
cmp dword [0x4dbd58], edi
jne 0x4435fd
cmp byte [ebp + 0xc1e], 0
jne 0x4435fd
cmp dword [0x4dbc5c], edi
je 0x443507
test al, 0x40
jne 0x443507
cmp byte [ebp + 0x1c], 0
je 0x4435fd
cmp byte [ebp + 0x1c], 0
je 0x44351f
xor ecx, ecx
mov byte [ebp + 0x1d], 0
mov word [ebp + 0x41e], cx
jmp case.0x4433a1.10
mov ecx, dword [ebp]
mov edx, dword [esi + 0x10]
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
lea eax, [esp + 0x14]
push eax
push edi
push 0x1005
push ecx
mov dword [esp + 0x24], 4
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], edi
call ebx
test eax, eax
je 0x4435fd
mov edx, dword [esp + 0x34]
push edx
lea eax, [esp + 0xdd4]
push eax
mov ecx, 0x4ecc28
call fcn.0043cc90
push 0x400
lea ecx, [esp + 0xdd4]
push ecx
lea edi, [ebp + 0x1d]
call fcn.0044d530
push eax
push edi
call fcn.00464e60
push 0x400
lea edx, [esp + 0x11d4]
push edx
lea esi, [ebp + 0x41e]
call fcn.0044d5b0
push eax
push esi
call fcn.00464ea0
mov eax, dword [ebp]
push 0
push 0
push 0x1018
push eax
call ebx
cmp word [esi], 0
je 0x4435c1
push esi
push eax
call fcn.0047da10
jmp 0x4435c9
push edi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov ecx, 0x4b1a5c
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4435f0
test dl, dl
je 0x4435ec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4435f0
add eax, 2
add ecx, 2
test dl, dl
jne 0x4435d0
xor eax, eax
jmp 0x4435f5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne case.0x4433a1.10
mov eax, 1
jmp 0x443492
mov byte [0x4ecd40], 0
mov ecx, dword [esi + 0x20]
mov dword [esp + 0x10], edi
mov byte [esp + 0x2600], 0
cmp ecx, edi
jne 0x443666
cmp byte [ebp + 0x1c], 0
je case.0x4433a1.10
mov eax, dword [ebp]
mov ecx, dword [esi + 0x10]
lea edx, [esp + 0x14]
push edx
push edi
push 0x1005
mov ebx, 1
push eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x38], 0x4ecd40
mov dword [esp + 0x3c], 0x400
mov dword [esp + 0x24], ebx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x4436c4
mov edx, 0x4ecd40
mov ebx, 1
mov al, byte [ecx]
mov byte [edx], al
add ecx, ebx
add edx, ebx
test al, al
jne 0x443670
mov esi, dword [esi + 0x2c]
cmp esi, dword [0x4ecd2c]
jae 0x4436c4
push esi
lea ecx, [esp + 0xdd4]
push ecx
mov ecx, 0x4ecc28
call fcn.0043cc90
push 0x400
lea edx, [esp + 0xdd4]
push edx
lea eax, [esp + 0x2608]
push eax
call fcn.00464e60
lea ecx, [esp + 0x2600]
push ecx
call fcn.0044d530
mov byte [eax], 0
cmp byte [0x4ecd40], 0
je case.0x4433a1.10
cmp byte [ebp + 0x1c], 0
je 0x443849
mov byte [ebp + 0x1c], 0
cmp dword [0x4dbc5c], edi
je 0x443822
lea edx, [esp + 0x1a00]
push edx
push str.Rar_MDXXXXXX
call fcn.0047ec00
test al, al
je 0x443ae8
xor eax, eax
jmp 0x443710
mov cl, byte [esp + eax + 0x1a00]
mov byte [esp + eax + 0x1e00], cl
inc eax
test cl, cl
jne 0x443710
lea eax, [esp + 0x1e00]
push eax
call fcn.0044d9b0
mov eax, 0x4ecd40
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x443737
lea edi, [esp + 0x1e00]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x443748
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0
lea ecx, [esp + 0x1e04]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
je 0x443802
call fcn.0047b000
push 0
push 0x4e75ac
mov ecx, 0x4e0c18
call fcn.004134e0
mov ecx, dword [0x4e81ac]
lea edx, [esp + 0x1e00]
push edx
call fcn.00465450
push 0
push 0x4e46c8
mov ecx, 0x4e0c18
mov dword [0x4e577c], 2
mov dword [0x4e5778], 1
mov byte [0x4e57b7], 0
call fcn.004134a0
mov eax, dword [0x4e0e20]
push 0
mov ecx, 0x4e0c18
mov dword [0x4e614c], eax
call fcn.00415320
mov esi, dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea ecx, [esp + 0x1e00]
push ecx
call esi
lea edx, [esp + 0x1a00]
push edx
call esi
jmp 0x443ae8
lea eax, [esp + 0x1e00]
push eax
push 0x1f7
call fcn.0045b8f0
push eax
call fcn.0048c7e0
add esp, 8
jmp 0x443ade
push edi
push 0x4ecd40
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
jne 0x443abf
cmp byte [0x4ecd40], al
je 0x443ae8
push 0x4ecd40
jmp 0x44380a
cmp dword [0x4dbc5c], edi
je 0x443aa5
lea ecx, [esp + 0xdd0]
push ecx
mov ecx, ebp
call fcn.0043ec80
test al, al
je 0x443897
push 0x400
lea edx, [esp + 0xdd4]
push edx
lea eax, [ebp + 0x1d]
push eax
call fcn.00464e60
push 0x400
lea ecx, [esp + 0x11d4]
push ecx
lea edx, [ebp + 0x41e]
push edx
call fcn.00464ea0
push edi
call fcn.0047af60
call fcn.00476d00
push 0x4e79ac
push 0x4e75ac
mov ecx, 0x4e0c18
call fcn.004134e0
mov eax, dword [0x4e0e20]
push edi
push str.FlatView
push str.FileList
mov dword [0x4e614c], eax
call fcn.00456400
test eax, eax
je 0x4438f6
xor eax, eax
jmp 0x4438e0
mov cl, byte [esp + eax + 0x2600]
mov byte [esp + eax + 0x1a00], cl
add eax, ebx
test cl, cl
jne 0x4438e0
jmp 0x443916
push edi
lea ecx, [esp + 0x1a04]
push ecx
mov ecx, 0x4e0c18
call fcn.004134a0
lea edx, [esp + 0x1a00]
push edx
call fcn.0044d9b0
mov ecx, dword [0x4e81ac]
lea eax, [ebp + 0x41e]
push eax
lea ebx, [ebp + 0x1d]
push ebx
mov dword [esp + 0x44], eax
call fcn.00465140
xor eax, eax
jmp 0x443940
mov cl, byte [esp + eax + 0x1a00]
mov byte [esp + eax + 0x1e00], cl
inc eax
test cl, cl
jne 0x443940
mov eax, 0x4ecd40
mov edx, eax
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x443960
lea edi, [esp + 0x1e00]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x443971
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x4e81bc]
call fcn.004650d0
mov ecx, dword [0x4e81bc]
lea eax, [esp + 0x1e00]
push eax
call fcn.00465450
push 0
push 0
push 0
lea ecx, [esp + 0x1e0c]
push ecx
mov ecx, 0x4ecc28
call fcn.0043cd90
test al, al
je 0x443a2f
lea edx, [esp + 0x1e00]
push edx
push ebx
call fcn.00464e20
test eax, eax
jne 0x443a09
lea ecx, [esp + 0x1e00]
mov eax, ebx
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x443a00
test dl, dl
je 0x4439fc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x443a00
add eax, 2
add ecx, 2
test dl, dl
jne 0x4439e0
xor eax, eax
jmp 0x443a05
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x443a2f
push 0
push 0x4ecd40
mov ecx, ebp
call fcn.00440ad0
push 0x50d
call fcn.0045b8f0
push eax
call fcn.0048c7e0
add esp, 4
jmp 0x443ae8
cmp byte [0x4ecd40], 0
mov esi, 0x4ecd40
je 0x443a67
lea ecx, [ecx]
movsx eax, byte [esi]
push eax
mov eax, dword [str._____:]
push eax
call fcn.0049dd30
add esp, 8
test eax, eax
jne 0x443ae8
push esi
call fcn.00405ad0
mov esi, eax
cmp byte [esi], 0
jne 0x443a40
push 0
lea ecx, [esp + 0x1a04]
push ecx
call fcn.0044d2f0
test al, al
jne 0x443ae8
push 0
push ebx
call fcn.0044d2f0
test al, al
je 0x443a99
mov edx, dword [esp + 0x3c]
cmp word [edx], 0
je 0x443ae8
cmp dword [0x4e0e20], 0
jne 0x443ae8
mov ecx, 0x4e0c18
call fcn.00411310
jmp 0x443ae8
push edi
lea esi, [ebp + 0x1d]
push 0x4ecd40
add ebp, 0x41e
push ebp
push esi
call fcn.0042fba0
test al, al
je 0x443ac5
mov dword [esp + 0x10], ebx
jmp 0x443ae8
push 0x4ecd40
push esi
push 0x207
call fcn.0045b8f0
push eax
call fcn.0048c7e0
add esp, 0xc
mov ecx, 0x4c9364
call fcn.00427c70
mov eax, dword [0x4dc1c8]
push 0x4ecd40
push 0
push 0x402
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [esp + 0x10]
jmp 0x443492
push 0x30
push 0x65
call fcn.0045b8f0
push eax
push 0x1f4
call fcn.0045b8f0
mov ecx, dword [0x4dc1c8]
push eax
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp case.0x4433a1.10
mov eax, dword [esi + 0xc]
sub eax, 1
je 0x443bc4
sub eax, 0x10000
jne case.0x4433a1.10
cmp dword [0x4bf0d4], 0xffffffff
jne 0x443b82
push 0xff0000
push str.AltColor
push str.SoftwareMicrosoftWindowsCurrentVersionExplorer
call fcn.00456400
push 0xd9213
push str.AltEncryptionColor
push str.SoftwareMicrosoftWindowsCurrentVersionExplorer
mov dword [0x4bf0d4], eax
call fcn.00456400
mov dword [0x4ecd3c], eax
mov edx, dword [esi + 0x2c]
push edx
lea eax, [esp + 0x44]
push eax
mov ecx, 0x4ecc28
call fcn.0043cc90
mov eax, dword [eax + 0xc10]
test eax, 0x800
je 0x443bab
mov ecx, dword [0x4bf0d4]
mov dword [esi + 0x30], ecx
test eax, 0x4000
je case.0x4433a1.10
mov edx, dword [0x4ecd3c]
mov dword [esi + 0x30], edx
jmp case.0x4433a1.10
movzx eax, byte [0x4e0c14]
neg eax
sbb eax, eax
and eax, 0x20
jmp 0x443492
test byte [esi + 0xc], 2
je case.0x4433a1.10
mov eax, dword [esi + 0x2c]
push eax
lea ecx, [esp + 0xdd4]
push ecx
mov ecx, 0x4ecc28
call fcn.0043cc90
cmp dword [0x4ecd38], edi
jne 0x443c19
mov dword [0x4ecd38], 0x4401
call fcn.0047e080
test al, al
jne 0x443c19
or dword [0x4ecd38], 0x10
call fcn.0043c9b0
test eax, eax
je 0x443d68
cmp word [esp + 0x11d0], di
je 0x443d68
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
lea edx, [esp + 0x2600]
push edx
push 0x400
call edi
mov eax, dword [0x4ecd34]
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
jne 0x443c87
push str.shell32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
je 0x443c7a
push str.SHGetFileInfoW
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4ecd34], eax
jmp 0x443c7f
mov eax, dword [0x4ecd34]
test eax, eax
je 0x443d29
mov ecx, dword [0x4ecd38]
push ecx
mov ecx, dword [esp + 0x19e4]
push 0x2b4
lea edx, [esp + 0x1a08]
push edx
push ecx
lea edx, [esp + 0x11e0]
push edx
call eax
test eax, eax
je 0x443d29
push 0x1000000
lea eax, [esp + 0xc74]
push eax
lea ecx, [esp + 0x1c1c]
push ecx
call fcn.0046d2f0
cmp byte [esp + 0xc70], 0
jne 0x443cec
lea edx, [esp + 0xc70]
push edx
lea eax, [esp + 0xdd4]
push eax
mov ecx, ebp
call fcn.0043dcc0
mov ecx, dword [0x4dbc5c]
add ecx, 2
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x20], ecx
mov ecx, dword [esi + 0x10]
lea edx, [esp + 0xc74]
push ecx
mov dword [esp + 0x30], edx
mov edx, dword [ebp]
push 0x102e
push edx
call ebx
mov eax, dword [esp + 0x1a04]
or dword [esi + 0xc], 0x1000
mov dword [esi + 0x28], eax
lea ecx, [esp + 0x1e00]
push ecx
push 0x400
call edi
lea edx, [esp + 0x1e00]
push edx
lea eax, [esp + 0x2604]
push eax
call fcn.0046d720
test eax, eax
je 0x443e69
lea ecx, [esp + 0x2600]
push ecx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
jmp 0x443e69
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea edx, [esp + 0x2600]
push edx
push 0x400
call edi
mov eax, dword [0x4ecd38]
mov edx, dword [esp + 0x19e0]
push eax
push 0x160
lea ecx, [esp + 0xc78]
push ecx
push edx
lea eax, [esp + 0xde0]
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x443e0d
cmp byte [esp + 0xd80], 0
jne 0x443dd1
lea ecx, [esp + 0xd80]
push ecx
lea edx, [esp + 0xdd4]
push edx
mov ecx, ebp
call fcn.0043dcc0
mov eax, dword [0x4dbc5c]
add eax, 2
lea edx, [esp + 0x14]
push edx
mov dword [esp + 0x20], eax
mov eax, dword [esi + 0x10]
lea ecx, [esp + 0xd84]
push eax
mov dword [esp + 0x30], ecx
mov ecx, dword [ebp]
push 0x102e
push ecx
call ebx
mov edx, dword [esp + 0xc74]
or dword [esi + 0xc], 0x1000
mov dword [esi + 0x28], edx
lea eax, [esp + 0x1e00]
push eax
push 0x400
call edi
lea ecx, [esp + 0x1e00]
lea eax, [esp + 0x2600]
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x443e50
test dl, dl
je 0x443e4c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x443e50
add eax, 2
add ecx, 2
test dl, dl
jne 0x443e30
xor eax, eax
jmp 0x443e55
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x443e69
lea ecx, [esp + 0x2600]
push ecx
call fcn.004ac688
add esp, 4
test dword [esi + 0xc], 0x1000
jne case.0x4433a1.10
lea edx, [esp + 0xc70]
push edx
lea eax, [esp + 0xdd4]
push eax
mov ecx, ebp
call fcn.0043dcc0
mov ecx, dword [0x4dbc5c]
add ecx, 2
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x20], ecx
mov ecx, dword [esi + 0x10]
lea edx, [esp + 0xc74]
push ecx
mov dword [esp + 0x30], edx
mov edx, dword [ebp]
push 0x102e
push edx
call ebx
lea eax, [esp + 0x11d0]
push eax
lea ecx, [esp + 0xdd4]
push ecx
call fcn.0042f940
push 0x400
lea edx, [esp + 0x1e04]
push edx
mov edi, eax
call fcn.0047de30
lea eax, [esp + 0x1e00]
push eax
call fcn.0044d9b0
lea eax, [esp + 0x1e00]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x443ef7
mov ecx, dword [str._rar_icon_]
mov edx, dword [0x4b3674]
mov dword [eax], ecx
mov cx, word [0x4b3678]
mov dword [eax + 4], edx
mov dl, byte [0x4b367a]
mov word [eax + 8], cx
push edi
mov byte [eax + 0xa], dl
call fcn.0042f8e0
test al, al
je 0x443f97
mov eax, dword [0x4bf0d0]
cmp eax, 0xffffffff
jne 0x444014
push 0
lea eax, [esp + 0x1e04]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
je 0x443f82
push 0x4001
push 0x160
lea ecx, [esp + 0x1a08]
push ecx
push 0
lea edx, [esp + 0x1e10]
push edx
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
test eax, eax
je 0x443f82
mov eax, dword [esp + 0x1a04]
mov dword [0x4bf0d0], eax
lea ecx, [esp + 0x1e00]
push ecx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
mov eax, dword [0x4bf0d0]
jmp 0x44400b
mov eax, dword [0x4bf0cc]
cmp eax, 0xffffffff
jne 0x444014
lea edx, [esp + 0x1e00]
push 0x4b1ba8
push edx
call fcn.0049f968
add esp, 8
test eax, eax
je 0x443ff6
push eax
call fcn.0049f646
add esp, 4
push 0x4001
push 0x160
lea eax, [esp + 0x1a08]
push eax
push 0
lea ecx, [esp + 0x1e10]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
test eax, eax
je 0x443ff6
mov edx, dword [esp + 0x1a04]
mov dword [0x4bf0cc], edx
lea eax, [esp + 0x1e00]
push eax
call fcn.004a147d
mov eax, dword [0x4bf0cc]
add esp, 4
cmp eax, 0xffffffff
je case.0x4433a1.10
or dword [esi + 0xc], 0x1000
mov dword [esi + 0x28], eax
jmp case.0x4433a1.10
mov edx, dword [esp + 0x2e08]
push esi
push edx
push ecx
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x443494