Function at 0x402740
Capabilities:
Get file system object information
Get graphical window text
Get user security identifier
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x8f8
mov eax, dword [esp + 0x8fc]
push ebx
xor ebx, ebx
push ebp
push esi
push edi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x30], ebx
mov dword [0x447f28], eax
mov dword [esp + 0x20], 0x81
mov dword [esp + 0x24], ebx
lea edi, [ebx + 1]
cmp eax, ebx
jne 0x40279b
test byte [0x447fdc], 1
mov eax, dword [0x447f34]
jne 0x40278d
or dword [0x447fdc], edi
mov dword [0x447fd8], ebx
push ebx
push 0x81
push ebx
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
cmp dword [esp + 0x918], ebx
jne 0x4027ac
mov dword [esp + 0x20], 0x82
push ebx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov esi, eax
cmp esi, ebx
je 0x402864
cmp dword [0x447f34], ebx
jne 0x4027cb
mov dword [0x447f2c], ebx
lea eax, [esp + 0x2f8]
push eax
push 0x18
push ebx
call dword [sym.imp.GDI32.dll_GetObjectA]
push ebx
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SetTextColor]
push 0xffffff
push ebx
call dword [sym.imp.GDI32.dll_SetBkColor]
mov ecx, dword [0x447f20]
mov edx, dword [esp + 0x300]
mov eax, dword [esp + 0x2fc]
push 0x8800c6
push ebx
push ecx
mov ecx, dword [esp + 0x2f8]
push esi
push edx
mov edx, dword [esp + 0x2fc]
push eax
push ecx
push edx
push ebx
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [0x447f20]
cmp eax, edi
jae 0x402840
mov eax, dword [0x447f2c]
sub eax, ecx
jmp 0x402843
or eax, 0xffffffff
mov dword [esp + 0x30], 0x781
mov dword [0x447f2c], ebx
cmp eax, ebx
jne 0x402864
mov eax, dword [0x447f24]
lea ecx, [eax + ecx + 1]
mov dword [0x447f24], ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [esp + 0xb0]
push edx
push 0x20019
push ebx
push 0x40f368
push reloc.OLEAUT32.dll_SysReAllocString
mov ebp, eax
mov dword [esp + 0x73c], ebx
mov dword [esp + 0xc4], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4028ad
mov ecx, dword [esp + 0xb0]
mov eax, ecx
imul eax, ecx
imul eax, ecx
jmp 0x4028be
mov eax, dword [esp + 0x30]
push eax
call fcn.00407291
mov eax, dword [esp + 0x18]
add esp, 4
mov dword [esp + 0x728], edi
mov dword [esp + 0x64], eax
cmp eax, ebx
jne 0x4028d1
mov dword [esp + 0x64], ebp
push ebx
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
push ebx
mov esi, eax
call dword [sym.imp.USER32.dll_SetActiveWindow]
push esi
call dword [sym.imp.USER32.dll_EndDeferWindowPos]
mov byte [esp + 0x64], bl
mov eax, dword [esp + 0x64]
mov dword [0x447f38], eax
cmp eax, ebx
je 0x406b06
push 5
mov dword [esp + 0x38], edi
xor esi, esi
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov edi, dword [sym.imp.USER32.dll_GetWindow]
push eax
call edi
cmp eax, ebx
je 0x402922
push 2
push eax
inc esi
call edi
cmp eax, ebx
jne 0x402918
push esi
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
mov esi, 2
cmp dword [0x447f20], ebx
je 0x40293a
mov esi, dword [esp + 0x20]
add ebp, dword [esp + 0x30]
xor eax, eax
movzx ecx, bp
mov dword [esp + 0x2c], ebp
cmp ecx, ebx
jle 0x40296e
mov edx, dword [esp + 0x2f0]
mov edi, dword [esp + 0x918]
dec edx
inc edi
imul edx, edi
mov edi, edi
cmp edx, ebx
je 0x402969
test al, al
jne 0x402969
inc esi
inc eax
cmp eax, ecx
jl 0x402960
mov ecx, dword [esp + 0x90c]
push 0x7f02
push ebx
mov dword [0x447f30], ebp
mov dword [esp + 0x70], 0x30
mov dword [esp + 0x74], 3
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], 0x1e
mov dword [esp + 0x84], ecx
call dword [sym.imp.USER32.dll_LoadIconA]
push 0x7f00
push ebx
mov dword [esp + 0x88], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
lea edx, [esp + 0x68]
push edx
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0x10
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], str.MY_EXCLUSIVE_CLASS
mov dword [esp + 0x98], ebx
call dword [sym.imp.USER32.dll_RegisterClassExA]
mov eax, dword [esp + 0x90c]
push ebx
push ebx
push ebx
push 0x3e8
push eax
call dword [sym.imp.USER32.dll_CreateDialogParamA]
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x103
lea ecx, [esp + 0xb9]
push ebx
push ecx
mov dword [esp + 0x734], ebx
mov byte [esp + 0xc0], bl
call fcn.00406b30
push 0x48
lea edx, [esp + 0x83c]
push edx
lea eax, [esp + 0x7c]
push eax
call fcn.00406f30
add esp, 0x18
lea ecx, [esp + 0xb4]
push ecx
lea edx, [esp + 0x8c]
push edx
call dword [sym.imp.RPCRT4.dll_UuidToStringA]
test eax, eax
je 0x402a6f
mov eax, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x90c]
mov dword [esp + 0x82c], ecx
mov dword [0x447f20], ebx
cmp dword [esp + 0x24], ebx
je 0x402a8f
xor eax, eax
mov dword [eax], esi
jmp 0x402a95
mov dword [0x447f34], ebx
mov edx, dword [0x447f30]
xor esi, esi
cmp edx, dword [0x447f2c]
jbe 0x402b27
mov eax, dword [esp + 0x2c]
mov ebx, eax
imul ebx, eax
xor edi, edi
test ebx, ebx
jle 0x402b27
mov ebp, dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, edi
cmp dword [0x447f2c], 0
jne 0x402ad8
push 0x40f3a0
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
jmp 0x402ae1
cmp dword [0x447f34], 0
jne 0x402b27
cmp dword [0x447f38], 0
je 0x402b27
mov eax, 0x2e8ba2e9
imul dword [esp + 0x2c]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
xor ecx, ecx
test eax, eax
jle 0x402b10
test esi, esi
je 0x406b06
inc ecx
cmp ecx, eax
jl 0x402b03
cmp dword [0x447f34], 0
jne 0x406b06
push esi
call ebp
inc edi
xor esi, esi
cmp edi, ebx
jl 0x402ac0
xor esi, esi
cmp dword [esp + 0x2c], esi
je 0x402b40
cmp dword [0x447f30], esi
je 0x402b40
mov eax, dword [esp + 0x24]
inc eax
mov dword [esp + 0x28], eax
mov ecx, dword [0x447f34]
mov edi, dword [esp + 0x918]
push ecx
mov dword [esp + 0x14], esi
mov ebx, edi
xor ebp, ebp
call dword [sym.imp.USER32.dll_GetMenu]
mov ecx, dword [0x447f34]
mov dword [esp + 0x30], eax
cmp dword [esp + 0x24], esi
je 0x402b76
mov ebx, dword [esp + 0x28]
inc ebx
imul ebx, ecx
add ebx, edi
mov eax, dword [esp + 0x34]
mov edx, 0xf
nop
imul eax, ecx
dec edx
jne 0x402b80
mov dword [esp + 0x34], eax
test eax, eax
jne 0x402b98
mov esi, 0x1000
jmp 0x402c8f
jns 0x402c53
mov eax, dword [0x447f20]
mov ecx, dword [esp + 0x30]
mov edi, dword [sym.imp.USER32.dll_GetMenuItemInfoA]
lea edx, [esp + 0x68]
push edx
push 0
push eax
push ecx
mov dword [esp + 0x7c], 4
call edi
mov eax, dword [0x447f24]
mov ecx, dword [esp + 0x7c]
mov esi, dword [0x447f34]
lea edx, [esp + 0x68]
push edx
push 0
push eax
push ecx
add esi, 0xb0
mov dword [esp + 0x7c], 8
call edi
mov edx, dword [esp + 0x80]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [esp + 0x84]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [0x447f2c]
add eax, 0x10
imul eax, ebx
imul eax, dword [esp + 0x28]
lea ecx, [eax + eax*4]
lea eax, [esp + 0x68]
push eax
push 0
lea edx, [ecx*4 - 0x400]
mov ecx, dword [esp + 0x38]
push 0x10
push ecx
mov dword [esp + 0x20], edx
mov dword [esp + 0x7c], 4
call edi
mov edx, dword [0x447f2c]
mov ecx, dword [0x447f34]
neg edx
mov dword [0x447f24], edx
cmp esi, 1
jae 0x402c8d
mov eax, dword [esp + 0x10]
mov dword [0x447f24], eax
mov ebx, dword [esp + 0x24]
mov edx, dword [0x447f2c]
mov edi, dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov eax, esi
imul eax, eax, 0x101
add eax, edx
add eax, ecx
lea ecx, [edx + esi*4]
shl ecx, 4
test ecx, ecx
je 0x402cc6
push eax
push ebp
push ecx
call dword [sym.imp.KERNEL32.dll_HeapCreate]
jmp 0x402cd0
jbe 0x402c5c
mov ebx, dword [esp + 0x24]
lea edx, [ebx + 1]
lea ebp, [ecx + 1]
imul ebp, edx
imul ebp, esi
mov eax, ebx
imul ebp, ebp, 0x27
imul eax, dword [esp + 0x28]
mov edx, 0x10
sub edx, eax
mov dword [0x447f20], edx
test ebp, ebp
je 0x402c60
mov dword [0x447f24], 0
jmp 0x402c60
mov eax, dword [esp + 0x34]
push esi
push eax
push 0
call edi
mov dword [esp + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
cmp dword [esp + 0x28], 0
mov ebp, eax
mov dword [esp + 0x20], 1
mov dword [esp + 0x1c], 0
mov esi, 0x20
jle 0x402d3f
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x10], ecx
inc esi
push esi
push 0
push ebp
call edi
mov dword [esp + 0x30], eax
test ebx, ebx
jne 0x402d31
push eax
push ebx
push ebp
call dword [sym.imp.KERNEL32.dll_HeapFree]
test eax, eax
je 0x402d39
mov eax, dword [esp + 0x20]
cmp dword [0x447f30], eax
jle 0x402d39
shl eax, 4
mov dword [esp + 0x20], eax
jmp 0x402d39
mov dword [esp + 0x1c], 1
dec dword [esp + 0x10]
jne 0x402d00
imul esi, dword [esp + 0x20]
cmp dword [esp + 0x1c], 0
jne 0x402d59
mov edx, dword [esp + 0x14]
push esi
push 0
push edx
call edi
mov dword [esp + 0x30], eax
push 0x4000
push 0x160
lea eax, [esp + 0x348]
push eax
push 0
lea ecx, [esp + 0x1f4]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
test eax, eax
jne 0x402d8b
mov edx, dword [0x447f24]
mov dword [0x447f20], edx
push str.shell32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor eax, eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
push 0x28
lea eax, [esp + 0x3c]
push eax
call esi
push eax
call sub.PSAPI.DLL_GetProcessMemoryInfo
push 0x2000
call fcn.00406e97
push 0x28
lea ecx, [esp + 0x40]
push 0
push ecx
mov ebp, eax
call fcn.00406b30
add esp, 0x10
push 0x28
lea edx, [esp + 0x3c]
push edx
call esi
push eax
call sub.PSAPI.DLL_GetProcessMemoryInfo
test ebp, ebp
je 0x402e2b
push ebp
call fcn.00407291
push 0x28
lea eax, [esp + 0x40]
push 0
push eax
call fcn.00406b30
add esp, 0x10
push 0x28
lea ecx, [esp + 0x3c]
push ecx
call esi
push eax
call sub.PSAPI.DLL_GetProcessMemoryInfo
lea edx, [esp + 0x728]
push edx
xor esi, esi
push esi
call dword [sym.imp.USER32.dll_FindWindowA]
lea ecx, [esp + 0x14]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [esp + 0x14]
push edx
push esi
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
xor ecx, ecx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], ecx
mov dword [esp + 0x5c], ecx
push 0x28
lea ecx, [esp + 0x3c]
push ecx
push eax
mov dword [esp + 0x44], 0x28
call sub.PSAPI.DLL_GetProcessMemoryInfo
mov edi, dword [sym.imp.ADVAPI32.dll_LookupAccountNameA]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
push esi
lea ecx, [esp + 0x1c]
push ecx
push esi
lea edx, [esp + 0xc8]
push edx
push esi
mov dword [esp + 0x38], esi
mov dword [esp + 0x2c], esi
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
xor ebp, ebp
mov dword [esp + 0x20], ebp
call esi
cmp eax, 0x534
jne 0x402ed9
mov dword [esp + 0x20], ebp
jmp 0x402f3c
call esi
cmp eax, 0x7a
jne 0x402ed3
mov eax, dword [esp + 0x10]
mov esi, dword [sym.imp.KERNEL32.dll_LocalAlloc]
push eax
push 0x40
call esi
mov ebp, eax
test ebp, ebp
jne 0x402ef9
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x1c]
push ecx
push 0x40
call esi
mov esi, eax
test esi, esi
jne 0x402f0c
mov dword [esp + 0x20], eax
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
push esi
lea ecx, [esp + 0x1c]
push ecx
push ebp
lea edx, [esp + 0xc8]
push edx
push 0
call edi
test eax, eax
jne 0x402f31
mov dword [esp + 0x20], eax
test esi, esi
je 0x402f3c
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push 0x7f02
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
mov esi, dword [sym.imp.USER32.dll_SetCursor]
push eax
call esi
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
mov edi, eax
lea eax, [esp + 0x38]
push eax
push 0
push 0x1019
push ebx
mov dword [esp + 0x48], 1
call ebp
and dword [esp + 0x3c], 0xffff67ff
lea ecx, [esp + 0x38]
push ecx
push 0
push 0x101a
push ebx
call ebp
lea edx, [esp + 0x38]
push edx
push 0
push 0x1019
push ebx
mov dword [esp + 0x48], 0x11
call ebp
or dword [esp + 0x3c], 0x9800
lea eax, [esp + 0x38]
push eax
push 0
push 0x101a
push ebx
call ebp
mov ecx, dword [esp + 0x34]
push 0
push ecx
push 0x1051
push ebx
call ebp
test eax, eax
jne 0x402fd3
push eax
push eax
push 0x1030
push ebx
call ebp
push edi
call esi
call dword [sym.imp.USER32.dll_CreatePopupMenu]
push 0x30
xor edi, edi
lea edx, [esp + 0x6c]
push edi
push edx
mov esi, eax
call fcn.00406b30
mov eax, dword [0x447f24]
add esp, 0xc
push edi
push eax
push 0x101d
push ebx
mov dword [esp + 0x78], 0x30
mov dword [esp + 0x7c], 0x1b
mov dword [esp + 0x80], edi
call ebp
lea ecx, [esp + 0x68]
push ecx
neg eax
push 1
sbb eax, eax
push edi
and eax, 8
mov dword [esp + 0x8c], edi
mov dword [esp + 0x90], edi
mov edi, dword [sym.imp.USER32.dll_InsertMenuItemA]
push esi
mov dword [esp + 0x84], eax
mov dword [esp + 0xa4], 1
call edi
lea edx, [esp + 0x68]
push edx
push 1
push 0
push esi
mov dword [esp + 0x80], 0x800
call edi
xor eax, eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
lea eax, [esp + 0x68]
push eax
push 1
push 1
push esi
mov dword [esp + 0x9c], str.More...
mov dword [esp + 0x88], 2
call edi
lea ecx, [esp + 0x14]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
push 0
push ebx
push 0
push edx
push eax
push 0x182
push esi
call dword [sym.imp.USER32.dll_TrackPopupMenu]
mov esi, eax
test esi, esi
jle 0x403159
dec esi
cmp esi, 1
jl 0x4030e1
test ebx, ebx
je 0x403159
push 0
push 0
push str.More
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x403159
push 0
push esi
push 0x101d
push ebx
call ebp
push 0
test eax, eax
jle 0x40311d
push esi
push 0x101d
push ebx
call ebp
push 0
push esi
push 0x101e
push ebx
call ebp
push 0
push 0
push 0x101f
push ebx
call ebp
push 0
push esi
push 0x1202
push eax
jmp 0x403157
push 0
push 0x101f
push ebx
call ebp
push 0x2c
lea ecx, [esp + 0x318]
push 0
push ecx
mov edi, eax
call fcn.00406b30
add esp, 0xc
lea edx, [esp + 0x310]
push edx
push esi
push 0x1201
mov dword [esp + 0x31c], 3
push edi
call ebp
push 0xff
lea eax, [esp + 0xb9]
push 0
push eax
call fcn.00406b30
mov ecx, dword [0x447f30]
add esp, 0xc
cmp dword [0x447f2c], 0
mov dword [esp + 0xb4], ecx
je 0x4031d0
lea edx, [esp + 0x2e8]
push edx
lea eax, [esp + 0x1e8]
push eax
lea ecx, [esp + 0x348]
push ecx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea edx, [esp + 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp dword [0x447f34], 0
je 0x4031ef
lea eax, [esp + 0x340]
push eax
lea ecx, [esp + 0x1e8]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push 0x2c
lea edx, [esp + 0x3c]
push 0
push edx
call fcn.00406b30
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, dword [0x447f2c]
add esp, 0xc
push eax
push ecx
mov dword [0x447f20], eax
mov ebx, ecx
call esi
mov ebp, eax
cmp edi, 0x110
jne 0x40323f
mov eax, dword [0x447f20]
push eax
push ebx
call esi
push 0
push eax
push ebp
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0xff
lea ecx, [esp + 0xb9]
push 0
push ecx
call fcn.00406b30
mov ecx, dword [0x447f2c]
mov edx, dword [0x447f30]
add esp, 0xc
lea eax, [esp + 0x1b8]
push eax
push ecx
mov dword [esp + 0xbc], edx
call dword [sym.imp.USER32.dll_GetIconInfo]
mov edx, dword [0x447f34]
mov ebx, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
inc edx
push edx
call ebx
mov edi, dword [sym.imp.USER32.dll_LoadImageA]
push 0x10
push 0
push 0
mov ebp, eax
push 0
lea eax, [esp + 0xc4]
push eax
push 0
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
cmp dword [0x447f2c], 0
je 0x4032ff
lea ecx, [esp + 0x2e8]
push ecx
lea edx, [esp + 0x1e8]
push edx
lea eax, [esp + 0x348]
push eax
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea ecx, [esp + 0xcc]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, dword [0x447f24]
mov eax, dword [0x447f34]
push edx
push eax
call esi
mov ecx, dword [0x447f34]
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
mov dword [0x447fd4], eax
mov eax, dword [0x447f34]
test eax, eax
je 0x403344
lea edx, [esp + 0x340]
push edx
lea eax, [esp + 0x1e8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov eax, dword [0x447f34]
mov edx, dword [0x447f20]
mov ecx, dword [0x447f2c]
push edx
push eax
mov ebp, eax
mov dword [esp + 0x1c], ecx
call esi
cmp dword [esp + 0x14], 0x110
mov dword [esp + 0x10], eax
jne 0x40337f
mov eax, dword [0x447f20]
push eax
push ebp
call esi
mov ecx, dword [esp + 0x10]
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0xff
lea edx, [esp + 0xb9]
push 0
push edx
call fcn.00406b30
mov eax, dword [0x447f30]
push 0x2c
lea ecx, [esp + 0x48]
push 0
push ecx
mov dword [esp + 0xcc], eax
call fcn.00406b30
mov edx, dword [0x447f24]
add esp, 0x18
cmp dword [0x447f2c], 0
mov dword [0x447f20], edx
je 0x40340f
lea eax, [esp + 0x2e8]
push eax
lea ecx, [esp + 0x1e8]
push ecx
lea edx, [esp + 0x348]
push edx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea eax, [esp + 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp dword [0x447f34], 0
je 0x40342e
lea ecx, [esp + 0x340]
push ecx
lea edx, [esp + 0x1e8]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ecx, dword [0x447f2c]
lea eax, [esp + 0x1b8]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetIconInfo]
mov edx, dword [0x447f34]
inc edx
push edx
call ebx
push 0x10
push 0
push 0
mov ebp, eax
push 0
lea eax, [esp + 0xc4]
push eax
push 0
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [0x447f2c]
lea ecx, [esp + 0x1b8]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetIconInfo]
cmp dword [0x447f34], 0
je 0x40349f
lea eax, [esp + 0x340]
push eax
lea ecx, [esp + 0x1e8]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push 0xff
lea edx, [esp + 0xb9]
push 0
push edx
call fcn.00406b30
mov ecx, dword [0x447f34]
mov eax, dword [0x447f30]
add esp, 0xc
inc ecx
push ecx
mov dword [esp + 0xb8], eax
call ebx
push 0x10
push 0
push 0
push 0
lea edx, [esp + 0xc4]
push edx
push 0
mov ebp, eax
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
push eax
push ecx
call esi
mov edx, dword [0x447f34]
push edx
call dword [sym.imp.USER32.dll_GetMenu]
cmp dword [0x447f2c], 0
mov dword [0x447fd0], eax
je 0x40355e
lea eax, [esp + 0x2e8]
push eax
lea ecx, [esp + 0x1e8]
push ecx
lea edx, [esp + 0x348]
push edx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea eax, [esp + 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, dword [0x447f2c]
lea ecx, [esp + 0x1b8]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetIconInfo]
mov ecx, dword [0x447f20]
mov eax, dword [0x447f34]
mov ebp, dword [0x447f2c]
push ecx
push eax
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x4035b4
mov edx, dword [0x447f20]
mov eax, dword [esp + 0x14]
push edx
push eax
call esi
mov ecx, dword [esp + 0x10]
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0xff
lea edx, [esp + 0xb9]
push 0
push edx
call fcn.00406b30
mov edx, dword [0x447f2c]
mov eax, dword [0x447f30]
add esp, 0xc
lea ecx, [esp + 0x1b8]
push ecx
push edx
mov dword [esp + 0xbc], eax
call dword [sym.imp.USER32.dll_GetIconInfo]
mov eax, dword [0x447f34]
inc eax
push eax
call ebx
push 0x10
push 0
push 0
push 0
lea ecx, [esp + 0xc4]
push ecx
push 0
mov ebp, eax
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
cmp dword [0x447f2c], 0
je 0x403666
lea edx, [esp + 0x2e8]
push edx
lea eax, [esp + 0x1e8]
push eax
lea ecx, [esp + 0x348]
push ecx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea edx, [esp + 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0xff
lea eax, [esp + 0xb9]
push 0
push eax
call fcn.00406b30
mov eax, dword [0x447f2c]
mov ecx, dword [0x447f30]
add esp, 0xc
lea edx, [esp + 0x1b8]
push edx
push eax
mov dword [esp + 0xbc], ecx
call dword [sym.imp.USER32.dll_GetIconInfo]
mov ecx, dword [0x447f20]
mov eax, dword [0x447f34]
mov ebp, dword [0x447f2c]
push ecx
push eax
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x4036df
mov edx, dword [0x447f20]
mov eax, dword [esp + 0x14]
push edx
push eax
call esi
mov ecx, dword [esp + 0x10]
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov edx, dword [0x447f34]
inc edx
push edx
call ebx
push 0x10
push 0
push 0
mov ebp, eax
push 0
lea eax, [esp + 0xc4]
push eax
push 0
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
push 0x2c
lea ecx, [esp + 0x3c]
push 0
push ecx
call fcn.00406b30
mov edx, dword [0x447f24]
push 0xff
lea eax, [esp + 0xc5]
push 0
push eax
mov dword [0x447f20], edx
call fcn.00406b30
mov edx, dword [0x447f34]
mov ecx, dword [0x447f30]
add esp, 0x18
inc edx
push edx
mov dword [esp + 0xb8], ecx
call ebx
push 0x10
push 0
push 0
mov ebp, eax
push 0
lea eax, [esp + 0xc4]
push eax
push 0
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [0x447f20]
mov eax, dword [0x447f34]
mov ebp, dword [0x447f2c]
push ecx
push eax
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x4037ae
mov edx, dword [0x447f20]
mov eax, dword [esp + 0x14]
push edx
push eax
call esi
mov ecx, dword [esp + 0x10]
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov edx, dword [0x447f24]
mov eax, dword [0x447f34]
push edx
push eax
call esi
mov ecx, dword [0x447f34]
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
cmp dword [0x447f34], 0
mov dword [0x447fcc], eax
je 0x4037ee
lea edx, [esp + 0x340]
push edx
lea eax, [esp + 0x1e8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push 0x2c
lea ecx, [esp + 0x3c]
push 0
push ecx
call fcn.00406b30
mov edx, dword [0x447f24]
push 0xff
lea eax, [esp + 0xc5]
push 0
push eax
mov dword [0x447f20], edx
call fcn.00406b30
mov eax, dword [0x447f2c]
mov ecx, dword [0x447f30]
add esp, 0x18
lea edx, [esp + 0x1b8]
push edx
push eax
mov dword [esp + 0xbc], ecx
call dword [sym.imp.USER32.dll_GetIconInfo]
cmp dword [0x447f2c], 0
je 0x403893
lea ecx, [esp + 0x2e8]
push ecx
lea edx, [esp + 0x1e8]
push edx
lea eax, [esp + 0x348]
push eax
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea ecx, [esp + 0xcc]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, dword [0x447f34]
inc edx
push edx
call ebx
push 0x10
push 0
push 0
mov ebp, eax
push 0
lea eax, [esp + 0xc4]
push eax
push 0
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
push 0x2c
lea ecx, [esp + 0x3c]
push 0
push ecx
call fcn.00406b30
mov edx, dword [0x447f24]
push 0xff
lea eax, [esp + 0xc5]
push 0
push eax
mov dword [0x447f20], edx
call fcn.00406b30
mov ecx, dword [0x447f30]
add esp, 0x18
cmp dword [0x447f2c], 0
mov dword [esp + 0xb4], ecx
je 0x40394c
lea edx, [esp + 0x2e8]
push edx
lea eax, [esp + 0x1e8]
push eax
lea ecx, [esp + 0x348]
push ecx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea edx, [esp + 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0x2c
lea eax, [esp + 0x3c]
push 0
push eax
call fcn.00406b30
mov ecx, dword [0x447f24]
add esp, 0xc
cmp dword [0x447f34], 0
mov dword [0x447f20], ecx
je 0x403988
lea edx, [esp + 0x340]
push edx
lea eax, [esp + 0x1e8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push 0xff
lea ecx, [esp + 0xb9]
push 0
push ecx
call fcn.00406b30
mov eax, dword [0x447f34]
mov edx, dword [0x447f30]
add esp, 0xc
inc eax
push eax
mov dword [esp + 0xb8], edx
call ebx
push 0x10
push 0
push 0
push 0
lea ecx, [esp + 0xc4]
push ecx
push 0
mov ebp, eax
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [0x447f2c]
lea edx, [esp + 0x1b8]
push edx
push eax
call dword [sym.imp.USER32.dll_GetIconInfo]
cmp dword [0x447f34], 0
je 0x403a06
lea ecx, [esp + 0x340]
push ecx
lea edx, [esp + 0x1e8]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push 0x2c
lea eax, [esp + 0x3c]
push 0
push eax
call fcn.00406b30
mov ecx, dword [0x447f24]
add esp, 0xc
cmp dword [0x447f2c], 0
mov dword [0x447f20], ecx
je 0x403a7a
lea edx, [esp + 0x2e8]
push edx
lea eax, [esp + 0x1e8]
push eax
lea ecx, [esp + 0x348]
push ecx
call fcn.00406c2e
mov ebp, dword [sym.imp.KERNEL32.dll_CreateFileA]
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea edx, [esp + 0xcc]
push edx
call ebp
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
jmp 0x403a80
mov ebp, dword [sym.imp.KERNEL32.dll_CreateFileA]
push 0xff
lea eax, [esp + 0xb9]
push 0
push eax
call fcn.00406b30
mov edx, dword [0x447f24]
mov eax, dword [0x447f34]
mov ecx, dword [0x447f30]
add esp, 0xc
push edx
push eax
mov dword [esp + 0xbc], ecx
call esi
mov ecx, dword [0x447f34]
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
lea edx, [esp + 0x1b8]
mov dword [0x447fc8], eax
mov eax, dword [0x447f2c]
push edx
push eax
call dword [sym.imp.USER32.dll_GetIconInfo]
cmp dword [0x447f2c], 0
je 0x403b28
lea ecx, [esp + 0x2e8]
push ecx
lea edx, [esp + 0x1e8]
push edx
lea eax, [esp + 0x348]
push eax
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea ecx, [esp + 0xcc]
push ecx
call ebp
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0xff
lea edx, [esp + 0xb9]
push 0
push edx
call fcn.00406b30
mov edx, dword [0x447f2c]
mov eax, dword [0x447f30]
add esp, 0xc
lea ecx, [esp + 0x1b8]
push ecx
push edx
mov dword [esp + 0xbc], eax
call dword [sym.imp.USER32.dll_GetIconInfo]
cmp dword [0x447f2c], 0
je 0x403baf
lea eax, [esp + 0x2e8]
push eax
lea ecx, [esp + 0x1e8]
push ecx
lea edx, [esp + 0x348]
push edx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea eax, [esp + 0xcc]
push eax
call ebp
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [0x447f34]
test eax, eax
je 0x403bd3
lea ecx, [esp + 0x340]
push ecx
lea edx, [esp + 0x1e8]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov eax, dword [0x447f34]
mov ecx, dword [0x447f20]
mov ebp, dword [0x447f2c]
push ecx
push eax
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x403c0f
mov edx, dword [0x447f20]
mov eax, dword [esp + 0x14]
push edx
push eax
call esi
mov ecx, dword [esp + 0x10]
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0x2c
lea edx, [esp + 0x3c]
push 0
push edx
call fcn.00406b30
mov eax, dword [0x447f24]
add esp, 0xc
push eax
mov dword [0x447f20], eax
mov eax, dword [0x447f34]
push eax
call esi
mov ecx, dword [0x447f34]
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
mov edx, dword [0x447f20]
mov ebp, dword [0x447f2c]
mov dword [0x447fc4], eax
mov eax, dword [0x447f34]
push edx
push eax
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x403c85
mov eax, dword [0x447f20]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call esi
mov edx, dword [esp + 0x10]
push 0
push eax
push edx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
push eax
push ecx
call esi
mov edx, dword [0x447f34]
push edx
call dword [sym.imp.USER32.dll_GetMenu]
mov ecx, dword [0x447f2c]
mov dword [0x447fc0], eax
lea eax, [esp + 0x1b8]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetIconInfo]
mov ebp, dword [0x447f34]
test ebp, ebp
je 0x403ce1
lea edx, [esp + 0x340]
push edx
lea eax, [esp + 0x1e8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebp, dword [0x447f34]
push 0xff
lea ecx, [esp + 0xb9]
push 0
push ecx
call fcn.00406b30
mov ecx, dword [0x447f20]
mov edx, dword [0x447f30]
mov eax, dword [0x447f2c]
add esp, 0xc
push ecx
push ebp
mov dword [esp + 0xbc], edx
mov dword [esp + 0x1c], eax
call esi
cmp dword [esp + 0x14], 0x110
mov dword [esp + 0x10], eax
jne 0x403d3e
mov edx, dword [0x447f20]
push edx
push ebp
call esi
push 0
push eax
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0x2c
lea ecx, [esp + 0x3c]
push 0
push ecx
call fcn.00406b30
mov ecx, dword [0x447f2c]
mov edx, dword [0x447f24]
add esp, 0xc
lea eax, [esp + 0x1b8]
push eax
push ecx
mov dword [0x447f20], edx
call dword [sym.imp.USER32.dll_GetIconInfo]
mov edx, dword [0x447f24]
mov eax, dword [0x447f34]
push edx
push eax
call esi
mov ecx, dword [0x447f34]
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
cmp dword [0x447f2c], 0
mov dword [0x447fbc], eax
je 0x403de4
lea edx, [esp + 0x2e8]
push edx
lea eax, [esp + 0x1e8]
push eax
lea ecx, [esp + 0x348]
push ecx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea edx, [esp + 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0xff
lea eax, [esp + 0xb9]
push 0
push eax
call fcn.00406b30
mov edx, dword [0x447f24]
mov eax, dword [0x447f34]
mov ecx, dword [0x447f30]
add esp, 0xc
push edx
push eax
mov dword [esp + 0xbc], ecx
call esi
mov ecx, dword [0x447f34]
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
push 0x2c
lea edx, [esp + 0x3c]
push 0
push edx
mov dword [0x447fb8], eax
call fcn.00406b30
mov ecx, dword [0x447f34]
mov eax, dword [0x447f24]
add esp, 0xc
inc ecx
push ecx
mov dword [0x447f20], eax
call ebx
push 0x10
push 0
push 0
push 0
lea edx, [esp + 0xc4]
push edx
push 0
mov ebp, eax
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [0x447f2c]
lea eax, [esp + 0x1b8]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetIconInfo]
mov edx, dword [0x447f20]
mov eax, dword [0x447f34]
mov ebp, dword [0x447f2c]
push edx
push eax
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x403ec1
mov eax, dword [0x447f20]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call esi
mov edx, dword [esp + 0x10]
push 0
push eax
push edx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0x2c
lea eax, [esp + 0x3c]
push 0
push eax
call fcn.00406b30
mov ecx, dword [0x447f24]
push 0xff
lea edx, [esp + 0xc5]
push 0
push edx
mov dword [0x447f20], ecx
call fcn.00406b30
mov eax, dword [0x447f30]
add esp, 0x18
cmp dword [0x447f2c], 0
mov dword [esp + 0xb4], eax
je 0x403f51
lea ecx, [esp + 0x2e8]
push ecx
lea edx, [esp + 0x1e8]
push edx
lea eax, [esp + 0x348]
push eax
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea ecx, [esp + 0xcc]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, dword [0x447f34]
inc edx
push edx
call ebx
push 0x10
push 0
push 0
mov ebp, eax
push 0
lea eax, [esp + 0xc4]
push eax
push 0
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [0x447f2c]
lea ecx, [esp + 0x1b8]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetIconInfo]
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
push eax
push ecx
call esi
mov edx, dword [0x447f34]
push edx
call dword [sym.imp.USER32.dll_GetMenu]
push 0x2c
mov dword [0x447fb4], eax
lea eax, [esp + 0x3c]
push 0
push eax
call fcn.00406b30
mov eax, dword [0x447f34]
mov ecx, dword [0x447f24]
add esp, 0xc
mov dword [0x447f20], ecx
test eax, eax
je 0x403ff0
lea edx, [esp + 0x340]
push edx
lea eax, [esp + 0x1e8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov eax, dword [0x447f34]
mov ecx, dword [0x447f20]
mov ebp, dword [0x447f2c]
push ecx
push eax
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x40402c
mov edx, dword [0x447f20]
mov eax, dword [esp + 0x14]
push edx
push eax
call esi
mov ecx, dword [esp + 0x10]
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov edx, dword [0x447f24]
mov eax, dword [0x447f34]
push edx
push eax
call esi
mov ecx, dword [0x447f34]
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
push 0x2c
lea edx, [esp + 0x3c]
push 0
push edx
mov dword [0x447fb0], eax
call fcn.00406b30
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
mov ebp, dword [0x447f2c]
add esp, 0xc
push eax
push ecx
mov dword [0x447f20], eax
mov dword [esp + 0x1c], ecx
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x4040a3
mov eax, dword [0x447f20]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call esi
mov edx, dword [esp + 0x10]
push 0
push eax
push edx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0xff
lea eax, [esp + 0xb9]
push 0
push eax
call fcn.00406b30
mov edx, dword [0x447f20]
mov eax, dword [0x447f34]
mov ecx, dword [0x447f30]
mov ebp, dword [0x447f2c]
add esp, 0xc
push edx
push eax
mov dword [esp + 0xbc], ecx
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x404107
mov eax, dword [0x447f20]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call esi
mov edx, dword [esp + 0x10]
push 0
push eax
push edx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
push eax
push ecx
call esi
mov edx, dword [0x447f34]
push edx
call dword [sym.imp.USER32.dll_GetMenu]
push 0x2c
mov dword [0x447fac], eax
lea eax, [esp + 0x3c]
push 0
push eax
call fcn.00406b30
mov ecx, dword [0x447f24]
add esp, 0xc
cmp dword [0x447f2c], 0
mov dword [0x447f20], ecx
je 0x404198
lea edx, [esp + 0x2e8]
push edx
lea eax, [esp + 0x1e8]
push eax
lea ecx, [esp + 0x348]
push ecx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea edx, [esp + 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [0x447f34]
inc eax
push eax
call ebx
push 0x10
push 0
push 0
push 0
lea ecx, [esp + 0xc4]
push ecx
push 0
mov ebp, eax
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
push 0xff
lea edx, [esp + 0xb9]
push 0
push edx
call fcn.00406b30
mov ecx, dword [0x447f34]
mov eax, dword [0x447f30]
add esp, 0xc
inc ecx
push ecx
mov dword [esp + 0xb8], eax
call ebx
push 0x10
push 0
push 0
push 0
lea edx, [esp + 0xc4]
push edx
push 0
mov ebp, eax
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
cmp dword [0x447f34], 0
je 0x404229
lea eax, [esp + 0x340]
push eax
lea ecx, [esp + 0x1e8]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov eax, dword [0x447f2c]
lea edx, [esp + 0x1b8]
push edx
push eax
call dword [sym.imp.USER32.dll_GetIconInfo]
mov ecx, dword [0x447f20]
mov eax, dword [0x447f34]
mov ebp, dword [0x447f2c]
push ecx
push eax
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x40427e
mov edx, dword [0x447f20]
mov eax, dword [esp + 0x14]
push edx
push eax
call esi
mov ecx, dword [esp + 0x10]
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0x2c
lea edx, [esp + 0x3c]
push 0
push edx
call fcn.00406b30
mov ebp, dword [0x447f24]
push 0xff
lea eax, [esp + 0xc5]
push 0
push eax
mov dword [0x447f20], ebp
call fcn.00406b30
mov eax, dword [0x447f34]
mov ecx, dword [0x447f30]
mov edx, dword [0x447f2c]
add esp, 0x18
push ebp
push eax
mov dword [esp + 0xbc], ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
call esi
cmp dword [esp + 0x14], 0x110
mov ebp, eax
jne 0x4042f6
mov eax, dword [0x447f20]
mov ecx, dword [esp + 0x10]
push eax
push ecx
call esi
push 0
push eax
push ebp
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
cmp dword [0x447f2c], 0
je 0x404349
lea edx, [esp + 0x2e8]
push edx
lea eax, [esp + 0x1e8]
push eax
lea ecx, [esp + 0x348]
push ecx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea edx, [esp + 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp dword [0x447f34], 0
je 0x404368
lea eax, [esp + 0x340]
push eax
lea ecx, [esp + 0x1e8]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edx, dword [0x447f24]
mov eax, dword [0x447f34]
push edx
push eax
call esi
mov ecx, dword [0x447f34]
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
mov edx, dword [0x447f34]
inc edx
push edx
mov dword [0x447fa8], eax
call ebx
push 0x10
push 0
push 0
mov ebp, eax
push 0
lea eax, [esp + 0xc4]
push eax
push 0
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [0x447f24]
mov edx, dword [0x447f34]
push ecx
push edx
call esi
mov eax, dword [0x447f34]
push eax
call dword [sym.imp.USER32.dll_GetMenu]
push 0x2c
lea ecx, [esp + 0x3c]
push 0
push ecx
mov dword [0x447fa4], eax
call fcn.00406b30
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
mov ebp, dword [0x447f2c]
add esp, 0xc
push eax
push ecx
mov dword [0x447f20], eax
mov dword [esp + 0x1c], ecx
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x404429
mov edx, dword [0x447f20]
mov eax, dword [esp + 0x14]
push edx
push eax
call esi
mov ecx, dword [esp + 0x10]
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0xff
lea edx, [esp + 0xb9]
push 0
push edx
call fcn.00406b30
mov eax, dword [0x447f30]
mov ecx, dword [0x447f20]
mov ebp, dword [0x447f2c]
add esp, 0xc
mov dword [esp + 0xb4], eax
mov eax, dword [0x447f34]
push ecx
push eax
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x40448d
mov edx, dword [0x447f20]
mov eax, dword [esp + 0x14]
push edx
push eax
call esi
mov ecx, dword [esp + 0x10]
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
cmp dword [0x447f2c], 0
je 0x4044e0
lea edx, [esp + 0x2e8]
push edx
lea eax, [esp + 0x1e8]
push eax
lea ecx, [esp + 0x348]
push ecx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea edx, [esp + 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp dword [0x447f34], 0
je 0x4044ff
lea eax, [esp + 0x340]
push eax
lea ecx, [esp + 0x1e8]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edx, dword [0x447f34]
inc edx
push edx
call ebx
push 0x10
push 0
push 0
mov ebp, eax
push 0
lea eax, [esp + 0xc4]
push eax
push 0
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [0x447f24]
mov edx, dword [0x447f34]
push ecx
push edx
call esi
mov eax, dword [0x447f34]
push eax
call dword [sym.imp.USER32.dll_GetMenu]
push 0x2c
lea ecx, [esp + 0x3c]
push 0
push ecx
mov dword [0x447fa0], eax
call fcn.00406b30
mov edx, dword [0x447f24]
push 0x2c
lea eax, [esp + 0x1c8]
push 0
push eax
mov dword [0x447f20], edx
call fcn.00406b30
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
mov ebp, dword [0x447f2c]
add esp, 0x18
push eax
push ecx
mov dword [0x447f20], eax
mov dword [esp + 0x1c], ecx
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x4045bc
mov ecx, dword [0x447f20]
mov edx, dword [esp + 0x14]
push ecx
push edx
call esi
push 0
push eax
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
cmp dword [0x447f34], 0
je 0x4045db
lea ecx, [esp + 0x340]
push ecx
lea edx, [esp + 0x1e8]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push 0x2c
lea eax, [esp + 0x3c]
push 0
push eax
call fcn.00406b30
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
add esp, 0xc
push eax
push ecx
mov dword [0x447f20], eax
call esi
mov edx, dword [0x447f34]
push edx
call dword [sym.imp.USER32.dll_GetMenu]
mov ecx, dword [0x447f2c]
mov dword [0x447f9c], eax
lea eax, [esp + 0x1b8]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetIconInfo]
push 0xff
lea edx, [esp + 0xb9]
push 0
push edx
call fcn.00406b30
mov eax, dword [0x447f30]
mov dword [esp + 0xc0], eax
mov eax, dword [0x447f34]
add esp, 0xc
test eax, eax
je 0x40466e
lea ecx, [esp + 0x340]
push ecx
lea edx, [esp + 0x1e8]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov eax, dword [0x447f34]
mov edx, dword [0x447f20]
mov ecx, dword [0x447f2c]
push edx
push eax
mov ebp, eax
mov dword [esp + 0x1c], ecx
call esi
cmp dword [esp + 0x14], 0x110
mov dword [esp + 0x10], eax
jne 0x4046a9
mov eax, dword [0x447f20]
push eax
push ebp
call esi
mov ecx, dword [esp + 0x10]
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov edx, dword [0x447f34]
inc edx
push edx
call ebx
push 0x10
push 0
push 0
mov ebp, eax
push 0
lea eax, [esp + 0xc4]
push eax
push 0
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
cmp dword [0x447f2c], 0
je 0x404724
lea ecx, [esp + 0x2e8]
push ecx
lea edx, [esp + 0x1e8]
push edx
lea eax, [esp + 0x348]
push eax
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea ecx, [esp + 0xcc]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0xff
lea edx, [esp + 0xb9]
push 0
push edx
call fcn.00406b30
mov eax, dword [0x447f30]
add esp, 0xc
cmp dword [0x447f34], 0
mov dword [esp + 0xb4], eax
je 0x404766
lea ecx, [esp + 0x340]
push ecx
lea edx, [esp + 0x1e8]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov eax, dword [0x447f34]
inc eax
push eax
call ebx
push 0x10
push 0
push 0
push 0
lea ecx, [esp + 0xc4]
push ecx
push 0
mov ebp, eax
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [0x447f24]
mov eax, dword [0x447f34]
push edx
push eax
call esi
mov ecx, dword [0x447f34]
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
lea edx, [esp + 0x1b8]
mov dword [0x447f98], eax
mov eax, dword [0x447f2c]
push edx
push eax
call dword [sym.imp.USER32.dll_GetIconInfo]
mov ecx, dword [0x447f20]
mov eax, dword [0x447f34]
mov ebp, dword [0x447f2c]
push ecx
push eax
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x404803
mov edx, dword [0x447f20]
mov eax, dword [esp + 0x14]
push edx
push eax
call esi
mov ecx, dword [esp + 0x10]
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0x2c
lea edx, [esp + 0x3c]
push 0
push edx
call fcn.00406b30
mov eax, dword [0x447f24]
push 0xff
lea ecx, [esp + 0xc5]
push 0
push ecx
mov dword [0x447f20], eax
call fcn.00406b30
mov edx, dword [0x447f30]
add esp, 0x18
cmp dword [0x447f2c], 0
mov dword [esp + 0xb4], edx
je 0x404892
lea eax, [esp + 0x2e8]
push eax
lea ecx, [esp + 0x1e8]
push ecx
lea edx, [esp + 0x348]
push edx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea eax, [esp + 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp dword [0x447f34], 0
mov ebp, dword [sym.imp.KERNEL32.dll_FindFirstFileA]
je 0x4048b3
lea ecx, [esp + 0x340]
push ecx
lea edx, [esp + 0x1e8]
push edx
call ebp
push 0x2c
lea eax, [esp + 0x3c]
push 0
push eax
call fcn.00406b30
mov ecx, dword [0x447f24]
add esp, 0xc
cmp dword [0x447f34], 0
mov dword [0x447f20], ecx
je 0x4048eb
lea edx, [esp + 0x340]
push edx
lea eax, [esp + 0x1e8]
push eax
call ebp
push 0xff
lea ecx, [esp + 0xb9]
push 0
push ecx
call fcn.00406b30
mov ecx, dword [0x447f2c]
mov edx, dword [0x447f30]
add esp, 0xc
lea eax, [esp + 0x1b8]
push eax
push ecx
mov dword [esp + 0xbc], edx
call dword [sym.imp.USER32.dll_GetIconInfo]
cmp dword [0x447f2c], 0
je 0x404977
lea edx, [esp + 0x2e8]
push edx
lea eax, [esp + 0x1e8]
push eax
lea ecx, [esp + 0x348]
push ecx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea edx, [esp + 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [0x447f34]
test eax, eax
je 0x404997
lea eax, [esp + 0x340]
push eax
lea ecx, [esp + 0x1e8]
push ecx
call ebp
mov eax, dword [0x447f34]
mov edx, dword [0x447f20]
mov ebp, dword [0x447f2c]
push edx
push eax
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x4049d2
mov eax, dword [0x447f20]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call esi
mov edx, dword [esp + 0x10]
push 0
push eax
push edx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0xff
lea eax, [esp + 0xb9]
push 0
push eax
call fcn.00406b30
mov ecx, dword [0x447f30]
push 0x2c
lea edx, [esp + 0x48]
push 0
push edx
mov dword [esp + 0xcc], ecx
call fcn.00406b30
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
mov ebp, dword [0x447f2c]
add esp, 0x18
push eax
push ecx
mov dword [0x447f20], eax
mov dword [esp + 0x1c], ecx
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x404a49
mov eax, dword [0x447f20]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call esi
mov edx, dword [esp + 0x10]
push 0
push eax
push edx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
cmp dword [0x447f2c], 0
je 0x404a9c
lea eax, [esp + 0x2e8]
push eax
lea ecx, [esp + 0x1e8]
push ecx
lea edx, [esp + 0x348]
push edx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea eax, [esp + 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ecx, dword [0x447f34]
inc ecx
push ecx
call ebx
push 0x10
push 0
push 0
push 0
lea edx, [esp + 0xc4]
push edx
push 0
mov ebp, eax
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
push 0x2c
lea eax, [esp + 0x314]
push 0
push eax
call fcn.00406b30
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
add esp, 0xc
push eax
push ecx
mov dword [0x447f20], eax
call esi
mov edx, dword [0x447f34]
push edx
call dword [sym.imp.USER32.dll_GetMenu]
mov ecx, dword [0x447f2c]
mov ebp, dword [sym.imp.USER32.dll_GetIconInfo]
mov dword [0x447f94], eax
lea eax, [esp + 0x1b8]
push eax
push ecx
call ebp
push 0xff
lea edx, [esp + 0xb9]
push 0
push edx
call fcn.00406b30
mov edx, dword [0x447f2c]
mov eax, dword [0x447f30]
add esp, 0xc
lea ecx, [esp + 0x38]
push ecx
push edx
mov dword [esp + 0xbc], eax
call ebp
push 0x2c
lea eax, [esp + 0x6c]
push 0
push eax
call fcn.00406b30
mov ecx, dword [0x447f24]
add esp, 0xc
cmp dword [0x447f2c], 0
mov dword [0x447f20], ecx
je 0x404bb6
lea edx, [esp + 0x2e8]
push edx
lea eax, [esp + 0x1e8]
push eax
lea ecx, [esp + 0x348]
push ecx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea edx, [esp + 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ecx, dword [0x447f20]
mov eax, dword [0x447f34]
mov ebp, dword [0x447f2c]
push ecx
push eax
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x404bf7
mov edx, dword [0x447f20]
mov eax, dword [esp + 0x14]
push edx
push eax
call esi
mov ecx, dword [esp + 0x10]
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0xff
lea edx, [esp + 0xb9]
push 0
push edx
call fcn.00406b30
mov eax, dword [0x447f30]
add esp, 0xc
cmp dword [0x447f2c], 0
mov dword [esp + 0xb4], eax
je 0x404c6d
lea ecx, [esp + 0x2e8]
push ecx
lea edx, [esp + 0x1e8]
push edx
lea eax, [esp + 0x348]
push eax
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea ecx, [esp + 0xcc]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, dword [0x447f34]
inc edx
push edx
call ebx
push 0x10
push 0
push 0
mov ebp, eax
push 0
lea eax, [esp + 0xc4]
push eax
push 0
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
push 0x2c
lea ecx, [esp + 0x6c]
push 0
push ecx
call fcn.00406b30
mov eax, dword [0x447f24]
mov edx, dword [0x447f34]
add esp, 0xc
push eax
push edx
mov dword [0x447f20], eax
call esi
mov eax, dword [0x447f34]
push eax
call dword [sym.imp.USER32.dll_GetMenu]
mov ecx, dword [0x447f20]
mov ebp, dword [0x447f2c]
mov dword [0x447f90], eax
mov eax, dword [0x447f34]
push ecx
push eax
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x404d0c
mov edx, dword [0x447f20]
mov eax, dword [esp + 0x14]
push edx
push eax
call esi
mov ecx, dword [esp + 0x10]
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov eax, dword [0x447f2c]
mov ebp, dword [sym.imp.USER32.dll_GetIconInfo]
lea edx, [esp + 0x38]
push edx
push eax
call ebp
push 0xff
lea ecx, [esp + 0xb9]
push 0
push ecx
call fcn.00406b30
mov ecx, dword [0x447f2c]
mov edx, dword [0x447f30]
add esp, 0xc
lea eax, [esp + 0x1b8]
push eax
push ecx
mov dword [esp + 0xbc], edx
call ebp
mov edx, dword [0x447f34]
inc edx
push edx
call ebx
push 0x10
push 0
push 0
mov ebp, eax
push 0
lea eax, [esp + 0xc4]
push eax
push 0
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
cmp dword [0x447f2c], 0
je 0x404dcf
lea ecx, [esp + 0x2e8]
push ecx
lea edx, [esp + 0x1e8]
push edx
lea eax, [esp + 0x348]
push eax
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea ecx, [esp + 0xcc]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, dword [0x447f20]
mov eax, dword [0x447f34]
mov ebp, dword [0x447f2c]
push edx
push eax
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x404e0f
mov eax, dword [0x447f20]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call esi
mov edx, dword [esp + 0x10]
push 0
push eax
push edx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0x2c
lea eax, [esp + 0x6c]
push 0
push eax
call fcn.00406b30
mov ecx, dword [0x447f24]
add esp, 0xc
cmp dword [0x447f34], 0
mov dword [0x447f20], ecx
je 0x404e4b
lea edx, [esp + 0x340]
push edx
lea eax, [esp + 0x1e8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ecx, dword [0x447f24]
mov edx, dword [0x447f34]
push ecx
push edx
call esi
mov eax, dword [0x447f34]
mov ebp, dword [sym.imp.USER32.dll_GetMenu]
push eax
call ebp
cmp dword [0x447f34], 0
mov dword [0x447f8c], eax
je 0x404e8d
lea ecx, [esp + 0x340]
push ecx
lea edx, [esp + 0x1e8]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
push eax
push ecx
call esi
mov edx, dword [0x447f34]
push edx
call ebp
push 0xff
mov dword [0x447f88], eax
lea eax, [esp + 0xb9]
push 0
push eax
call fcn.00406b30
mov edx, dword [0x447f34]
mov ecx, dword [0x447f30]
add esp, 0xc
inc edx
push edx
mov dword [esp + 0xb8], ecx
call ebx
push 0x10
push 0
push 0
mov dword [esp + 0x20], eax
push 0
lea eax, [esp + 0xc4]
push eax
push 0
call edi
mov ecx, dword [esp + 0x14]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [0x447f24]
mov eax, dword [0x447f34]
push edx
push eax
call esi
mov ecx, dword [0x447f34]
push ecx
call ebp
push 0x2c
lea edx, [esp + 0x6c]
push 0
push edx
mov dword [0x447f84], eax
call fcn.00406b30
mov eax, dword [0x447f24]
add esp, 0xc
cmp dword [0x447f34], 0
mov dword [0x447f20], eax
je 0x404f53
lea ecx, [esp + 0x340]
push ecx
lea edx, [esp + 0x1e8]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push 0xff
lea eax, [esp + 0xb9]
push 0
push eax
call fcn.00406b30
mov ecx, dword [0x447f30]
push 0x2c
lea edx, [esp + 0x78]
push 0
push edx
mov dword [esp + 0xcc], ecx
call fcn.00406b30
mov eax, dword [0x447f24]
add esp, 0x18
cmp dword [0x447f34], 0
mov dword [0x447f20], eax
je 0x404fae
lea ecx, [esp + 0x340]
push ecx
lea edx, [esp + 0x1e8]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp dword [0x447f2c], 0
je 0x405001
lea eax, [esp + 0x2e8]
push eax
lea ecx, [esp + 0x1e8]
push ecx
lea edx, [esp + 0x348]
push edx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea eax, [esp + 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ecx, dword [0x447f34]
inc ecx
push ecx
call ebx
push 0x10
push 0
push 0
push 0
lea edx, [esp + 0xc4]
push edx
push 0
mov dword [esp + 0x2c], eax
call edi
push eax
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [0x447f24]
mov edx, dword [0x447f34]
push ecx
push edx
call esi
mov eax, dword [0x447f34]
push eax
call ebp
mov edx, dword [0x447f2c]
lea ecx, [esp + 0x38]
push ecx
push edx
mov dword [0x447f80], eax
call dword [sym.imp.USER32.dll_GetIconInfo]
mov edx, dword [0x447f20]
mov eax, dword [0x447f34]
mov ecx, dword [0x447f2c]
push edx
push eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
call esi
cmp dword [esp + 0x14], 0x110
mov dword [esp + 0x1c], eax
jne 0x4050a4
mov eax, dword [0x447f20]
mov ecx, dword [esp + 0x10]
push eax
push ecx
call esi
mov edx, dword [esp + 0x1c]
push 0
push eax
push edx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0xff
lea eax, [esp + 0xb9]
push 0
push eax
call fcn.00406b30
mov eax, dword [0x447f2c]
mov ecx, dword [0x447f30]
add esp, 0xc
lea edx, [esp + 0x38]
push edx
push eax
mov dword [esp + 0xbc], ecx
call dword [sym.imp.USER32.dll_GetIconInfo]
push 0x2c
lea ecx, [esp + 0x6c]
push 0
push ecx
call fcn.00406b30
mov edx, dword [0x447f24]
add esp, 0xc
cmp dword [0x447f2c], 0
mov dword [0x447f20], edx
je 0x405149
lea eax, [esp + 0x2e8]
push eax
lea ecx, [esp + 0x1e8]
push ecx
lea edx, [esp + 0x348]
push edx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea eax, [esp + 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ecx, dword [0x447f24]
mov edx, dword [0x447f34]
push ecx
push edx
call esi
mov eax, dword [0x447f34]
push eax
call ebp
push 0xff
lea ecx, [esp + 0xb9]
push 0
push ecx
mov dword [0x447f7c], eax
call fcn.00406b30
mov edx, dword [0x447f30]
add esp, 0xc
cmp dword [0x447f34], 0
mov dword [esp + 0xb4], edx
je 0x4051a9
lea eax, [esp + 0x340]
push eax
lea ecx, [esp + 0x1e8]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp dword [0x447f2c], 0
je 0x4051fc
lea edx, [esp + 0x2e8]
push edx
lea eax, [esp + 0x1e8]
push eax
lea ecx, [esp + 0x348]
push ecx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea edx, [esp + 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
push eax
push ecx
call esi
mov edx, dword [0x447f34]
push edx
call ebp
push 0x2c
mov dword [0x447f78], eax
lea eax, [esp + 0x6c]
push 0
push eax
call fcn.00406b30
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
mov edx, dword [0x447f2c]
add esp, 0xc
push eax
push ecx
mov dword [0x447f20], eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
call esi
cmp dword [esp + 0x14], 0x110
mov dword [esp + 0x1c], eax
jne 0x405275
mov eax, dword [0x447f20]
mov ecx, dword [esp + 0x10]
push eax
push ecx
call esi
mov edx, dword [esp + 0x1c]
push 0
push eax
push edx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0x2c
lea eax, [esp + 0x6c]
push 0
push eax
call fcn.00406b30
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
add esp, 0xc
push eax
push ecx
mov dword [0x447f20], eax
call esi
mov edx, dword [0x447f34]
push edx
call ebp
push 0xff
mov dword [0x447f74], eax
lea eax, [esp + 0xb9]
push 0
push eax
call fcn.00406b30
mov ecx, dword [0x447f30]
add esp, 0xc
cmp dword [0x447f2c], 0
mov dword [esp + 0xb4], ecx
je 0x40531f
lea edx, [esp + 0x2e8]
push edx
lea eax, [esp + 0x1e8]
push eax
lea ecx, [esp + 0x348]
push ecx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea edx, [esp + 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
push eax
push ecx
call esi
mov edx, dword [0x447f34]
push edx
call ebp
push 0xff
mov dword [0x447f70], eax
lea eax, [esp + 0xb9]
push 0
push eax
call fcn.00406b30
mov ecx, dword [0x447f30]
push 0x2c
lea edx, [esp + 0x78]
push 0
push edx
mov dword [esp + 0xcc], ecx
call fcn.00406b30
mov eax, dword [0x447f24]
add esp, 0x18
cmp dword [0x447f34], 0
mov dword [0x447f20], eax
je 0x405397
lea ecx, [esp + 0x340]
push ecx
lea edx, [esp + 0x1e8]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov eax, dword [0x447f34]
inc eax
push eax
call ebx
push 0x10
push 0
push 0
push 0
lea ecx, [esp + 0xc4]
push ecx
push 0
mov ebp, eax
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
push 0xff
lea edx, [esp + 0xb9]
push 0
push edx
call fcn.00406b30
mov eax, dword [0x447f30]
add esp, 0xc
cmp dword [0x447f2c], 0
mov dword [esp + 0xb4], eax
je 0x405434
lea ecx, [esp + 0x2e8]
push ecx
lea edx, [esp + 0x1e8]
push edx
lea eax, [esp + 0x348]
push eax
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea ecx, [esp + 0xcc]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp dword [0x447f34], 0
je 0x405453
lea edx, [esp + 0x340]
push edx
lea eax, [esp + 0x1e8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ecx, dword [0x447f34]
inc ecx
push ecx
call ebx
push 0x10
push 0
push 0
push 0
lea edx, [esp + 0xc4]
push edx
push 0
mov ebp, eax
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
push 0x2c
lea eax, [esp + 0x6c]
push 0
push eax
call fcn.00406b30
mov ecx, dword [0x447f24]
push 0xff
lea edx, [esp + 0xc5]
push 0
push edx
mov dword [0x447f20], ecx
call fcn.00406b30
mov ecx, dword [0x447f34]
mov eax, dword [0x447f30]
add esp, 0x18
inc ecx
push ecx
mov dword [esp + 0xb8], eax
call ebx
push 0x10
push 0
push 0
push 0
lea edx, [esp + 0xc4]
push edx
push 0
mov ebp, eax
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [0x447f2c]
lea eax, [esp + 0x38]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetIconInfo]
mov edx, dword [0x447f24]
mov eax, dword [0x447f34]
push edx
push eax
call esi
mov ecx, dword [0x447f34]
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
mov edx, dword [0x447f20]
mov ebp, dword [0x447f2c]
mov dword [0x447f6c], eax
mov eax, dword [0x447f34]
push edx
push eax
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x405553
mov eax, dword [0x447f20]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call esi
mov edx, dword [esp + 0x10]
push 0
push eax
push edx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0x2c
lea eax, [esp + 0x6c]
push 0
push eax
call fcn.00406b30
mov ecx, dword [0x447f24]
mov ebp, dword [sym.imp.KERNEL32.dll_FindFirstFileA]
add esp, 0xc
cmp dword [0x447f34], 0
mov dword [0x447f20], ecx
je 0x405591
lea edx, [esp + 0x340]
push edx
lea eax, [esp + 0x1e8]
push eax
call ebp
mov edx, dword [0x447f2c]
lea ecx, [esp + 0x38]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetIconInfo]
cmp dword [0x447f34], 0
je 0x4055be
lea eax, [esp + 0x340]
push eax
lea ecx, [esp + 0x1e8]
push ecx
call ebp
push 0xff
lea edx, [esp + 0xb9]
push 0
push edx
call fcn.00406b30
mov ecx, dword [0x447f24]
mov edx, dword [0x447f34]
mov eax, dword [0x447f30]
add esp, 0xc
push ecx
push edx
mov dword [esp + 0xbc], eax
call esi
mov eax, dword [0x447f34]
push eax
call dword [sym.imp.USER32.dll_GetMenu]
cmp dword [0x447f2c], 0
mov dword [0x447f68], eax
je 0x405655
lea ecx, [esp + 0x2e8]
push ecx
lea edx, [esp + 0x1e8]
push edx
lea eax, [esp + 0x348]
push eax
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea ecx, [esp + 0xcc]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp dword [0x447f34], 0
je 0x405670
lea edx, [esp + 0x340]
push edx
lea eax, [esp + 0x1e8]
push eax
call ebp
mov ecx, dword [0x447f34]
inc ecx
push ecx
call ebx
push 0x10
push 0
push 0
push 0
lea edx, [esp + 0xc4]
push edx
push 0
mov ebp, eax
call edi
push eax
push ebp
mov ebp, dword [sym.imp.GDI32.dll_SelectObject]
call ebp
push 0xff
lea eax, [esp + 0xb9]
push 0
push eax
call fcn.00406b30
mov edx, dword [0x447f24]
mov eax, dword [0x447f34]
mov ecx, dword [0x447f30]
add esp, 0xc
push edx
push eax
mov dword [esp + 0xbc], ecx
call esi
mov ecx, dword [0x447f34]
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
cmp dword [0x447f34], 0
mov dword [0x447f64], eax
je 0x4056fe
lea edx, [esp + 0x340]
push edx
lea eax, [esp + 0x1e8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ecx, dword [0x447f34]
inc ecx
push ecx
call ebx
push 0x10
push 0
push 0
push 0
lea edx, [esp + 0xc4]
push edx
push 0
mov dword [esp + 0x2c], eax
call edi
push eax
mov eax, dword [esp + 0x18]
push eax
call ebp
push 0x2c
lea ecx, [esp + 0x6c]
push 0
push ecx
call fcn.00406b30
mov edx, dword [0x447f24]
add esp, 0xc
cmp dword [0x447f2c], 0
mov dword [0x447f20], edx
je 0x405798
lea eax, [esp + 0x2e8]
push eax
lea ecx, [esp + 0x1e8]
push ecx
lea edx, [esp + 0x348]
push edx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea eax, [esp + 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, dword [0x447f20]
mov eax, dword [0x447f34]
mov ecx, dword [0x447f2c]
push edx
push eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
call esi
cmp dword [esp + 0x14], 0x110
mov dword [esp + 0x1c], eax
jne 0x4057de
mov eax, dword [0x447f20]
mov ecx, dword [esp + 0x10]
push eax
push ecx
call esi
mov edx, dword [esp + 0x1c]
push 0
push eax
push edx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0xff
lea eax, [esp + 0xb9]
push 0
push eax
call fcn.00406b30
mov edx, dword [0x447f34]
mov ecx, dword [0x447f30]
add esp, 0xc
inc edx
push edx
mov dword [esp + 0xb8], ecx
call ebx
push 0x10
push 0
push 0
mov dword [esp + 0x20], eax
push 0
lea eax, [esp + 0xc4]
push eax
push 0
call edi
mov ecx, dword [esp + 0x14]
push eax
push ecx
call ebp
cmp dword [0x447f34], 0
je 0x40584b
lea edx, [esp + 0x340]
push edx
lea eax, [esp + 0x1e8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ecx, dword [0x447f24]
mov edx, dword [0x447f34]
push ecx
push edx
call esi
mov eax, dword [0x447f34]
push eax
call dword [sym.imp.USER32.dll_GetMenu]
mov edx, dword [0x447f2c]
lea ecx, [esp + 0x38]
push ecx
push edx
mov dword [0x447f60], eax
call dword [sym.imp.USER32.dll_GetIconInfo]
push 0xff
lea eax, [esp + 0xb9]
push 0
push eax
call fcn.00406b30
mov edx, dword [0x447f34]
mov ecx, dword [0x447f30]
add esp, 0xc
inc edx
push edx
mov dword [esp + 0xb8], ecx
call ebx
push 0x10
push 0
push 0
mov dword [esp + 0x20], eax
push 0
lea eax, [esp + 0xc4]
push eax
push 0
call edi
mov ecx, dword [esp + 0x14]
push eax
push ecx
call ebp
cmp dword [0x447f34], 0
je 0x4058eb
lea edx, [esp + 0x340]
push edx
lea eax, [esp + 0x1e8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp dword [0x447f2c], 0
je 0x40593e
lea ecx, [esp + 0x2e8]
push ecx
lea edx, [esp + 0x1e8]
push edx
lea eax, [esp + 0x348]
push eax
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea ecx, [esp + 0xcc]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0xff
lea edx, [esp + 0xb9]
push 0
push edx
call fcn.00406b30
mov ecx, dword [0x447f34]
mov eax, dword [0x447f30]
add esp, 0xc
inc ecx
push ecx
mov dword [esp + 0xb8], eax
call ebx
push 0x10
push 0
push 0
push 0
lea edx, [esp + 0xc4]
push edx
push 0
mov ebp, eax
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
push eax
push ecx
call esi
mov edx, dword [0x447f34]
push edx
call dword [sym.imp.USER32.dll_GetMenu]
push 0x2c
mov dword [0x447f5c], eax
lea eax, [esp + 0x6c]
push 0
push eax
call fcn.00406b30
mov ecx, dword [0x447f24]
push 0xff
lea edx, [esp + 0xc5]
push 0
push edx
mov dword [0x447f20], ecx
call fcn.00406b30
mov eax, dword [0x447f30]
push 0x2c
lea ecx, [esp + 0x32c]
push 0
push ecx
mov dword [esp + 0xd8], eax
call fcn.00406b30
mov eax, dword [0x447f34]
mov edx, dword [0x447f24]
add esp, 0x24
inc eax
push eax
mov dword [0x447f20], edx
call ebx
push 0x10
push 0
push 0
push 0
lea ecx, [esp + 0xc4]
push ecx
push 0
mov ebp, eax
call edi
push eax
push ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [0x447f20]
mov eax, dword [0x447f34]
mov ebp, dword [0x447f2c]
push edx
push eax
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x405a6b
mov eax, dword [0x447f20]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call esi
mov edx, dword [esp + 0x10]
push 0
push eax
push edx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
cmp dword [0x447f2c], 0
je 0x405abe
lea eax, [esp + 0x2e8]
push eax
lea ecx, [esp + 0x1e8]
push ecx
lea edx, [esp + 0x348]
push edx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea eax, [esp + 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, dword [0x447f2c]
mov ebp, dword [sym.imp.USER32.dll_GetIconInfo]
lea ecx, [esp + 0x38]
push ecx
push edx
call ebp
push 0xff
lea eax, [esp + 0xb9]
push 0
push eax
call fcn.00406b30
mov ecx, dword [0x447f30]
add esp, 0xc
cmp dword [0x447f34], 0
mov dword [esp + 0xb4], ecx
je 0x405b15
lea edx, [esp + 0x340]
push edx
lea eax, [esp + 0x1e8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edx, dword [0x447f2c]
lea ecx, [esp + 0x38]
push ecx
push edx
call ebp
mov eax, dword [0x447f24]
mov ecx, dword [0x447f34]
push eax
push ecx
call esi
mov edx, dword [0x447f34]
push edx
call dword [sym.imp.USER32.dll_GetMenu]
mov ecx, dword [0x447f20]
mov ebp, dword [0x447f2c]
mov dword [0x447f58], eax
mov eax, dword [0x447f34]
push ecx
push eax
mov dword [esp + 0x1c], eax
call esi
mov dword [esp + 0x10], eax
cmp ebp, 0x110
jne 0x405b85
mov edx, dword [0x447f20]
mov eax, dword [esp + 0x14]
push edx
push eax
call esi
mov ecx, dword [esp + 0x10]
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov edx, dword [0x447f34]
inc edx
push edx
call ebx
push 0x10
push 0
push 0
mov ebp, eax
push 0
lea eax, [esp + 0xc4]
push eax
push 0
call edi
push eax
push ebp
mov ebp, dword [sym.imp.GDI32.dll_SelectObject]
call ebp
push 0xff
lea ecx, [esp + 0xb9]
push 0
push ecx
call fcn.00406b30
mov ecx, dword [0x447f2c]
mov edx, dword [0x447f30]
add esp, 0xc
lea eax, [esp + 0x38]
push eax
push ecx
mov dword [esp + 0xbc], edx
call dword [sym.imp.USER32.dll_GetIconInfo]
cmp dword [0x447f34], 0
je 0x405c04
lea edx, [esp + 0x340]
push edx
lea eax, [esp + 0x1e8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ecx, dword [0x447f34]
inc ecx
push ecx
call ebx
push 0x10
push 0
push 0
push 0
lea edx, [esp + 0xc4]
push edx
push 0
mov dword [esp + 0x2c], eax
call edi
push eax
mov eax, dword [esp + 0x18]
push eax
call ebp
mov edx, dword [0x447f20]
mov eax, dword [0x447f34]
mov ecx, dword [0x447f2c]
push edx
push eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
call esi
cmp dword [esp + 0x14], 0x110
mov dword [esp + 0x1c], eax
jne 0x405c74
mov eax, dword [0x447f20]
mov ecx, dword [esp + 0x10]
push eax
push ecx
call esi
mov edx, dword [esp + 0x1c]
push 0
push eax
push edx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0xff
lea eax, [esp + 0xb9]
push 0
push eax
call fcn.00406b30
mov ecx, dword [0x447f30]
push 0x2c
lea edx, [esp + 0x78]
push 0
push edx
mov dword [esp + 0xcc], ecx
call fcn.00406b30
mov eax, dword [0x447f24]
add esp, 0x18
push eax
mov dword [0x447f20], eax
mov eax, dword [0x447f34]
push eax
call esi
mov ecx, dword [0x447f34]
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
cmp dword [0x447f2c], 0
mov dword [0x447f54], eax
je 0x405d1e
lea edx, [esp + 0x2e8]
push edx
lea eax, [esp + 0x1e8]
push eax
lea ecx, [esp + 0x348]
push ecx
call fcn.00406c2e
add esp, 0xc
push 0
push 0
push 4
push 0
push 0
push 0x40000000
lea edx, [esp + 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, dword [0x447f20]
mov eax, dword [0x447f34]
mov ecx, dword [0x447f2c]
push edx
push eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
call esi
cmp dword [esp + 0x14], 0x110
mov dword [esp + 0x1c], eax
jne 0x405d64
mov eax, dword [0x447f20]
mov ecx, dword [esp + 0x10]
push eax
push ecx
call esi
mov edx, dword [esp + 0x1c]
push 0
push eax
push edx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
cmp dword [0x447f34], 0
je 0x405d83
lea eax, [esp + 0x340]
push eax
lea ecx, [esp + 0x1e8]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edx, dword [0x447f34]
inc edx
push edx
call ebx
push 0x10
push 0
push 0
mov dword [esp + 0x20], eax
push 0
lea eax, [esp + 0xc4]
push eax
push 0
call edi
mov ecx, dword [esp + 0x14]
push eax
push ecx
call ebp
mov edx, dword [0x447f24]
mov eax, dword [0x447f34]
push edx
push eax
call esi
mov ecx, dword [0x447f34]
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
mov ecx, dword [0x447f20]
mov edx, dword [0x447f2c]
mov dword [0x447f50], eax
mov eax, dword [0x447f34]
push ecx
push eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
call esi
cmp dword [esp + 0x14], 0x110
mov dword [esp + 0x1c], eax
jne 0x405e15
mov edx, dword [0x447f20]
mov eax, dword [esp + 0x10]
push edx
push eax
call esi
mov ecx, dword [esp + 0x1c]
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push 0xff
lea edx, [esp + 0xb9]
push 0
push edx
call fcn.00406b30
mov ecx, dword [0x447f34]
mov eax, dword [0x447f30]
add esp, 0xc
inc ecx
push ecx
mov dword [esp + 0xb8], eax
call ebx
push 0x10
push 0
push 0
push 0
lea edx, [esp + 0xc4]
push edx
push 0
mov dword [esp + 0x2c], eax
call edi
push eax
mov eax, dword [esp + 0x18]
push eax
call ebp
mov ecx, dword [0x447f24]
mov edx, dword [0x447f34]
push ecx
push edx
call esi
mov eax, dword [0x447f34]
push eax
call dword [sym.imp.USER32.dll_GetMenu]
push 0xff
lea ecx, [esp + 0xb9]
push 0
push ecx
mov dword [0x447f4c], eax
call fcn.00406b30
mov edx, dword [0x447f30]
add esp, 0xc
cmp dword [0x447f34], 0
mov dword [esp + 0xb4], edx
je 0x405ec6
lea eax, [esp + 0x340]
push eax
lea ecx, [esp + 0x1e8]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edx, dword [0x447f34]
inc edx
push edx
call ebx
push 0x10
push 0
push 0
mov dword [esp + 0x20], eax
push 0
lea eax, [esp + 0xc4]
push eax
push 0
call edi
mov ecx, dword [esp + 0x14]
push eax
push ecx
call ebp
mov ecx, dword [0x447f20]
mov eax, dword [0x447f34]
mov edx, dword [0x447f2c]
push ecx
push eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
call esi
cmp dword [esp + 0x14], 0x110
mov dword [esp + 0x1c], eax
jne 0x405f37
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x8f8
ret 0x10