Function at 0x446340
Capabilities:
Hide graphical window
Inspect section memory permissions

Disassembly:
sub esp, 0x60
push ebx
push ebp
push esi
mov esi, ecx
push edi
cmp dword [esi + 0x24], 2
je 0x44636b
mov eax, dword [esi + 4]
push 0
push 0x366
push 0x398
push 0
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, dword [esi + 4]
push 0xfffffffffffffff0
push ecx
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ebx, dword [sym.imp.USER32.dll_GetParent]
mov ebp, eax
and ebp, 0x40000000
je 0x44638f
mov edx, dword [esi + 4]
push edx
call ebx
jmp 0x44639b
mov eax, dword [esi + 4]
push 4
push eax
call dword [sym.imp.USER32.dll_GetWindow]
mov edx, dword [esi + 4]
lea ecx, [esp + 0x50]
push ecx
push edx
mov edi, eax
call dword [sym.imp.USER32.dll_GetWindowRect]
test ebp, ebp
jne 0x446412
test edi, edi
je 0x4463cd
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, 0x10000000
je 0x4463cb
test eax, 0x20000000
je 0x4463cd
xor edi, edi
lea eax, [esp + 0x40]
push 0
push eax
push 0
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
test edi, edi
jne 0x446404
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x48]
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ecx
jmp 0x44643f
lea edx, [esp + 0x30]
push edx
push edi
call dword [sym.imp.USER32.dll_GetWindowRect]
jmp 0x44643f
mov eax, dword [esi + 4]
push eax
call ebx
mov ebp, dword [sym.imp.USER32.dll_GetClientRect]
lea ecx, [esp + 0x40]
mov ebx, eax
push ecx
push ebx
call ebp
lea edx, [esp + 0x30]
push edx
push edi
call ebp
lea eax, [esp + 0x30]
push 2
push eax
push ebx
push edi
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov ebp, dword [esp + 0x5c]
mov edx, dword [esp + 0x54]
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x58]
mov edi, dword [esp + 0x50]
sub ebp, edx
mov edx, dword [esp + 0x30]
sub ebx, edi
lea eax, [ecx + edx]
cdq
sub eax, edx
mov ecx, eax
mov eax, ebx
cdq
sub eax, edx
mov edx, dword [esp + 0x34]
sar ecx, 1
sar eax, 1
sub ecx, eax
mov eax, dword [esp + 0x3c]
add eax, edx
cdq
sub eax, edx
mov edi, eax
mov eax, ebp
cdq
sub eax, edx
sar edi, 1
sar eax, 1
sub edi, eax
mov eax, dword [esp + 0x40]
cmp ecx, eax
jl 0x44649d
mov eax, dword [esp + 0x48]
lea edx, [ecx + ebx]
cmp edx, eax
jle 0x44649f
sub eax, ebx
mov ecx, eax
mov eax, dword [esp + 0x44]
cmp edi, eax
jl 0x4464b4
mov eax, dword [esp + 0x4c]
lea edx, [edi + ebp]
cmp edx, eax
jle 0x4464b6
sub eax, ebp
mov edi, eax
mov eax, dword [esi + 4]
push 0x15
push 0xffffffffffffffff
push 0xffffffffffffffff
push edi
push ecx
push 0
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [0x4edfe8]
push 0
push 0x10
push 0x10
push 1
push 0xcc
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [esi + 4]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
mov edi, eax
push edi
push 0
push 0x80
push ecx
call ebx
mov edx, dword [esi + 4]
push edi
push 1
push 0x80
push edx
call ebx
mov ecx, esi
call fcn.00447770
push 1
push 0x2af9
call fcn.00447900
mov eax, dword [esi + 0x24]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 8
test eax, eax
je 0x446757
mov eax, dword [0x4ecbec]
mov ebp, dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov ecx, dword [eax - 0xc]
test ecx, ecx
jl 0x44654c
mov dword [esp + 0x18], eax
add eax, 0xfffffff4
push eax
call ebp
jmp 0x446560
mov ecx, dword [0x4d9540]
push eax
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x1c]
call fcn.004016e0
mov edx, dword [0x4d9540]
mov eax, 0x4dc214
test eax, eax
mov dword [esp + 0x10], edx
je 0x4465a9
push eax
call ebx
mov edi, eax
test edi, edi
je 0x4465a9
push edi
lea ecx, [esp + 0x14]
call fcn.004012f0
test eax, eax
je 0x4465a9
mov ecx, dword [esp + 0x10]
inc edi
push edi
push 0x4dc214
push ecx
call fcn.004011c0
add esp, 0xc
lea ecx, [esp + 0x10]
push 0xffffffffffffffff
call fcn.00401970
lea edx, [esp + 0x28]
mov ecx, esi
push edx
call fcn.00447bf0
mov ecx, dword [0x4d9540]
mov eax, dword [eax]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x10]
push ecx
mov edx, dword [ecx - 8]
lea ecx, [esp + 0x20]
push edx
push eax
mov eax, dword [eax - 8]
push eax
call fcn.004017b0
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x28]
call fcn.00401200
lea ecx, [esp + 0x1c]
call fcn.004014c0
mov edx, dword [0x4d9540]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x20], edx
push eax
mov eax, dword [eax - 8]
push eax
mov eax, dword [esp + 0x2c]
push eax
mov ecx, dword [eax - 8]
push ecx
lea ecx, [esp + 0x30]
call fcn.004017b0
lea edx, [esp + 0x20]
lea ecx, [esp + 0x14]
push edx
call fcn.00401200
lea ecx, [esp + 0x20]
call fcn.004014c0
mov eax, dword [esi + 0x1f74]
mov ecx, dword [esp + 0x14]
lea edi, [esi + 0x1f74]
cmp eax, ecx
je 0x44667f
mov edx, dword [eax - 0xc]
test edx, edx
jge 0x446653
mov edx, dword [0x4d9544]
add eax, 0xfffffff4
cmp eax, edx
jne 0x44665a
mov eax, dword [ecx - 0xc]
test eax, eax
jge 0x446668
mov eax, dword [ecx - 8]
push ecx
push eax
mov ecx, edi
call fcn.00401630
jmp 0x44667b
mov ecx, edi
call fcn.0040e950
mov eax, dword [esp + 0x14]
mov dword [edi], eax
add eax, 0xfffffff4
push eax
call ebp
mov ecx, dword [esp + 0x14]
mov eax, dword [0x4d9544]
mov edi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea edx, [ecx - 0xc]
cmp edx, eax
je 0x4466ab
add ecx, 0xfffffff4
push ecx
call edi
test eax, eax
jg 0x4466ab
mov eax, dword [esp + 0x14]
add eax, 0xfffffff4
push eax
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0x24]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4466d6
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x4466d6
mov edx, dword [esp + 0x24]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0x28]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x446701
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x446701
mov edx, dword [esp + 0x28]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0x10]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x44672c
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x44672c
mov edx, dword [esp + 0x10]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0x18]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x446757
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x446757
mov edx, dword [esp + 0x18]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov edi, dword [esi + 4]
lea eax, [esi + 0x1f58]
push eax
add eax, 8
push eax
push 0x4edfe0
call fcn.0040bbb0
mov eax, dword [0x4edfe8]
push 0
push 0x410630
push edi
push 0x86
push eax
call dword [sym.imp.USER32.dll_CreateDialogParamW]
mov ecx, dword [esi + 0x1f5c]
push 5
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [esi + 0x24]
lea edi, [esi + 0x54]
test eax, eax
je 0x4467de
mov edx, 0x4e3a5c
lea ebp, [edi + 0x4c]
test edx, edx
je 0x4467b4
push edx
call ebx
mov ebx, eax
jmp 0x4467b6
xor ebx, ebx
push ebx
mov ecx, ebp
call fcn.00401420
test eax, eax
je 0x4467de
mov eax, dword [ebp]
inc ebx
push ebx
push 0x4e3a5c
push eax
call fcn.004011c0
add esp, 0xc
mov ecx, ebp
push 0xffffffffffffffff
call fcn.00401970
lea ecx, [esp + 0x50]
push ecx
mov ecx, esi
call fcn.004476e0
lea edx, [esp + 0x60]
push eax
push edx
call dword [sym.imp.USER32.dll_CopyRect]
mov eax, dword [esi + 0x1f84]
lea ebx, [edi + 4]
mov dword [edi + 0x68], eax
mov ecx, dword [esi + 0x48]
mov dword [edi + 0x6c], ecx
mov dword [esi + 0x1f78], edi
mov eax, dword [ebx]
lea edx, [esi + 0x1f54]
test eax, eax
mov dword [edi + 0x54], edx
jne 0x44682a
mov eax, dword [esi + 4]
push 0
push eax
mov ecx, edi
call fcn.0044b9b0
mov eax, dword [esi + 0x24]
test eax, eax
je 0x446838
mov dword [edi + 0x58], 0x447c30
mov ecx, dword [edi + 0x60]
lea edx, [esi + 0x1f94]
push ecx
push edx
mov dword [edi + 0x5c], esi
call fcn.00413030
mov eax, dword [esi + 4]
mov ecx, dword [ebx]
push eax
push ecx
call dword [sym.imp.USER32.dll_SetParent]
push 0
push 0x10000
push 0
mov ecx, ebx
call fcn.00419e60
mov edx, dword [ebx]
mov ebp, dword [sym.imp.USER32.dll_ShowWindow]
push 5
push edx
call ebp
push 0x129
mov ecx, edi
call fcn.004442f0
push str.__text___g___g___g___g___svg___body___html_
lea ecx, [esp + 0x24]
call fcn.004014f0
push str._Ver:
lea ecx, [esp + 0x28]
call fcn.004014f0
push str._html__head__meta_http_equiv_X_UA_Compatible__content_IEEmulateIE10____META_HTTP_EQUIV_MSThemeCompatible__CONTENT_yes___style_body_background_color:222233__color:FFFFFF__font_family:Verdana__sans_serif___.iii_VERTICAL_ALIGN:middle__border:0__font_weight:bold__A:hover_color:_linkcolor_ov__text_decoration:underline__A:visited_color:_linkcolor_vi__text_decoration:none__A:link_color:_linkcolor__text_decoration:none__A:active_color:c00__text_decoration:underline__A:hover_color:c00__text_decoration:underline___style___head__body______style_top:154px__left:22__border:_solid_1px_red______div_style_overflow:_hidden__width:_100___height:_55px__padding:_0px__background_color:FFFFFF__aligncenter__svg_width_515__height_50__style_border:_solid_2px_888888______filter_idlightA3__feGaussianBlur_inSourceAlpha_stdDeviation3_resultB____feSpecularLighting_inB_specularExponent128_resultS__feDistantLight_azimuth225_elevation70_____feSpecularLighting__feComposite_inS_in2SourceAlpha_operatorin_resultL____feComposite_inSourceGraphic_in2L_operatorarithmetic_k21_k31_____filter__filter_idin_and_out__feGaussianBlur_stdDeviation4_inSourceAlpha____feOffset_resultfO_dy5_dx5____feComposite_in2fO_operatorxor_inSourceGraphic_____filter__g__g_transform_scale_0.25_0.25_____g_filter_url_in_and_out_____g_filter_url_lightA3_____text_y_154px___font_family_Verdana__sans_serif__font_weight_bold__font_style_normal__font_size_154px__
lea ecx, [esp + 0x2c]
call fcn.004014f0
lea eax, [esp + 0x20]
lea ecx, [esp + 0x24]
push eax
push 0x4ecd3c
push ecx
lea edx, [esp + 0x34]
push 0x4ecbec
lea eax, [esp + 0x24]
push edx
push eax
call fcn.0040f0a0
lea ecx, [esp + 0x24]
push eax
push ecx
call fcn.0040f0a0
lea edx, [esp + 0x24]
push eax
push edx
call fcn.0040f0a0
push eax
lea eax, [esp + 0x34]
push eax
call fcn.0040f0a0
lea ecx, [esp + 0x1c]
call fcn.004014c0
lea ecx, [esp + 0x18]
call fcn.004014c0
lea ecx, [esp + 0x14]
call fcn.004014c0
lea ecx, [esp + 0x28]
call fcn.004014c0
lea ecx, [esp + 0x24]
call fcn.004014c0
lea ecx, [esp + 0x20]
call fcn.004014c0
push ecx
lea edx, [esp + 0x30]
mov ecx, esp
push edx
call fcn.00401200
mov ecx, edi
call fcn.00444560
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esi + 0x24]
test eax, eax
je 0x44694f
mov ecx, esi
call fcn.004469b0
mov ecx, esi
call fcn.004475d0
mov eax, dword [esi + 0x24]
mov ebx, 5
cmp eax, 1
jne 0x446968
mov ebx, 3
mov ecx, dword [esi + 0x20]
lea eax, [esi + 0x20]
cmp dword [ecx - 8], 0xa
jle 0x446990
push ecx
mov ecx, esp
push eax
call fcn.00401200
mov ecx, edi
call fcn.00443e90
mov edx, dword [esi + 4]
mov ebx, 3
push ebx
push edx
call ebp
cmp dword [esi + 0x24], 2
je 0x44699d
mov eax, dword [esi + 4]
push ebx
push eax
call ebp
lea ecx, [esp + 0x2c]
call fcn.004014c0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x60
ret