Function at 0x4428b1
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
mov edx, 0x1d
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x4428b8
mov edx, dword [esp + 0x88]
lea ecx, [esp]
call fcn.004d5000
mov edx, dword [esp + 0x8c]
lea ecx, [esp + 4]
call fcn.004d5000
mov edx, dword [esp + 0x94]
lea ecx, [esp + 8]
call fcn.004d5000
mov dword [section..data], 0xb00488
mov dword [section..data], 0xb00489
mov dword [esp + 0x14], 0xffffffff
mov dword [section..data], 0xb0048a
cmp dword [esp + 0x80], 0
je 0x444761
mov dword [section..data], 0xb0048b
mov ebp, dword [esp + 0x80]
push dword [ebp + 0x3c]
call fcn.005248f6
mov dword [section..data], 0xb0048f
mov ebp, dword [esp + 0x80]
push dword [ebp + 0x3c]
call fcn.005247a9
mov dword [esp + 0x2c], eax
mov dword [section..data], 0xb00490
cmp dword [esp + 0x2c], 0
je 0x444757
mov dword [section..data], 0xb00492
mov ebp, dword [esp + 0x80]
push dword [ebp + 8]
call fcn.00509554
mov dword [section..data], 0xb00493
mov ebp, dword [esp + 0x2c]
mov dword [ebp], 0xffffffff
mov dword [section..data], 0xb00494
push dword [esp + 0x84]
mov dword [section..data], 0xb00496
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x442c70
mov dword [section..data], 0xb00498
mov ebp, dword [esp + 0x84]
mov ebx, dword [ebp]
and ebx, 4
and ebx, ebx
je 0x4429e9
mov eax, 1
jmp 0x4429eb
xor eax, eax
mov ebx, eax
push ebx
push 0x808080
push dword [esp + 0xc]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.0050789d
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x1e], eax
mov dword [section..data], 0xb00499
mov ebp, dword [esp + 0x30]
cmp dword [ebp + 0x1e], 0
je 0x442c57
mov dword [section..data], 0xb0049a
push dword [0x6c3674]
call fcn.005233c7
push eax
push dword [0x6c3618]
push dword [0x6c3618]
push 0
push 0
push 0xffffffff
call fcn.00507fce
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x26], eax
mov dword [section..data], 0xb0049b
push dword [esp + 0x88]
mov ebp, dword [esp + 0x34]
pop dword [ebp]
mov dword [section..data], 0xb0049c
push dword [esp + 0x94]
mov ebp, dword [esp + 0x34]
pop dword [ebp + 0x10]
mov dword [section..data], 0xb0049d
cmp dword [0x6c36d0], 0
je 0x442ada
mov dword [section..data], 0xb0049e
push dword [0x6c36d0]
call fcn.0052e26a
push eax
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.00509562
mov dword [section..data], 0xb0049f
mov dword [section..data], 0xb004a0
push dword [0x6c3630]
push 1
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.005008fd
mov dword [section..data], 0xb004a1
lea eax, [0x4513f5]
push eax
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef1c
mov dword [section..data], 0xb004a2
push 0
lea eax, [0x4513f5]
push eax
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x26]
call fcn.004feed7
mov dword [section..data], 0xb004a3
push 2
lea eax, [0x4513f5]
push eax
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x26]
call fcn.004feed7
mov dword [section..data], 0xb004a4
mov ebp, dword [esp + 0x84]
mov ebx, dword [ebp]
and ebx, 1
and ebx, ebx
je 0x442c4d
mov dword [section..data], 0xb004a5
mov dword [esp + 0x20], 1
mov dword [section..data], 0xb004a6
mov ebp, dword [esp + 0x84]
push dword [ebp + 0x3c]
call fcn.00524756
mov ebp, dword [esp + 0x84]
push dword [ebp + 0x3c]
call fcn.0052476b
or eax, eax
je 0x442c4d
mov dword [section..data], 0xb004a6
mov dword [section..data], 0xb004a7
mov ebp, dword [esp + 0x84]
mov ebp, dword [ebp + 0x40]
mov ebx, dword [ebp + 8]
and ebx, ebx
jne 0x442c34
mov dword [section..data], 0xb004a8
cmp dword [esp + 0x20], 0
je 0x442c01
xor eax, eax
jmp 0x442c06
mov eax, 1
and eax, eax
je 0x442c11
mov eax, 1
jmp 0x442c13
xor eax, eax
push eax
mov ebp, dword [esp + 0x88]
mov ebp, dword [ebp + 0x40]
pop eax
mov dword [ebp + 0x18], eax
mov dword [section..data], 0xb004a9
mov dword [esp + 0x20], 0
mov dword [section..data], 0xb004aa
mov dword [section..data], 0xb004ab
jmp 0x442bb0
mov dword [section..data], 0xb004ac
mov dword [section..data], 0xb004ad
mov dword [section..data], 0xb004af
jmp 0x4445ae
mov dword [section..data], 0xb004af
mov ebx, 1
cmp ebx, dword [esp]
jne 0x442ece
mov dword [section..data], 0xb004b0
push dword [esp + 0xc]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.005010de
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x1e], eax
mov dword [section..data], 0xb004b1
mov ebp, dword [esp + 0x30]
cmp dword [ebp + 0x1e], 0
je 0x442eb5
mov dword [section..data], 0xb004b3
push 0xffffffec
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
mov ebx, eax
and ebx, 0xfffffdff
push ebx
push 0xffffffec
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb004b4
push 0xfffffff0
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
mov ebx, eax
or ebx, 0x800000
push ebx
push 0xfffffff0
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb004b5
push dword [esp + 4]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00500da2
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x22], eax
mov dword [section..data], 0xb004b7
mov edx, 0x5f840c
lea ecx, [esp + 0x2c]
call fcn.004d5008
mov dword [section..data], 0xb004be
push 0
push dword [0x6c35b4]
push dword [0x6c364c]
push dword [esp + 0x38]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.004b17bb
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x26], eax
mov dword [section..data], 0xb004c2
push dword [esp + 0x88]
mov ebp, dword [esp + 0x34]
pop dword [ebp]
mov dword [section..data], 0xb004c3
push dword [esp + 0x94]
mov ebp, dword [esp + 0x34]
pop dword [ebp + 0x14]
mov dword [section..data], 0xb004c4
lea eax, [0x4513f5]
push eax
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef1c
mov dword [section..data], 0xb004c5
lea eax, [0x4513f5]
push eax
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x26]
call fcn.004fef1c
mov dword [section..data], 0xb004c6
push 0xfffffffc
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
push eax
push 0xffffffeb
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb004c6
lea eax, [0x410782]
push eax
push 0xfffffffc
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb004c7
mov dword [section..data], 0xb004c9
jmp 0x4445ae
mov dword [section..data], 0xb004c9
mov ebx, 2
cmp ebx, dword [esp]
jne 0x442f8e
mov dword [section..data], 0xb004cb
push 0
push dword [0x6c35b4]
push dword [0x6c364c]
push dword [esp + 0x10]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.004b17bb
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x1e], eax
mov dword [section..data], 0xb004cf
mov ebp, dword [esp + 0x30]
cmp dword [ebp + 0x1e], 0
je 0x442f75
mov dword [section..data], 0xb004d0
push dword [esp + 0x88]
mov ebp, dword [esp + 0x34]
pop dword [ebp]
mov dword [section..data], 0xb004d1
lea eax, [0x4513f5]
push eax
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef1c
mov dword [section..data], 0xb004d2
mov dword [section..data], 0xb004d4
jmp 0x4445ae
mov dword [section..data], 0xb004d4
mov ebx, 4
cmp ebx, dword [esp]
jne 0x44305a
mov dword [section..data], 0xb004d5
push dword [esp + 4]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00504527
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x1e], eax
mov dword [section..data], 0xb004d6
mov ebp, dword [esp + 0x30]
cmp dword [ebp + 0x1e], 0
je 0x443041
mov dword [section..data], 0xb004d7
push dword [esp + 0x88]
mov ebp, dword [esp + 0x34]
pop dword [ebp]
mov dword [section..data], 0xb004d8
push dword [esp + 0x94]
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004ff1d1
mov dword [section..data], 0xb004d9
lea eax, [0x4513f5]
push eax
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef1c
mov dword [section..data], 0xb004da
mov dword [section..data], 0xb004dc
jmp 0x4445ae
mov dword [section..data], 0xb004dc
mov ebx, 3
cmp ebx, dword [esp]
jne 0x443161
mov dword [section..data], 0xb004dd
mov eax, 0x5f820c
push eax
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00504527
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x1e], eax
mov dword [section..data], 0xb004de
mov ebp, dword [esp + 0x30]
cmp dword [ebp + 0x1e], 0
je 0x443148
mov dword [section..data], 0xb004df
push dword [esp + 4]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00500da2
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x22], eax
mov dword [section..data], 0xb004e0
push dword [esp + 0x88]
mov ebp, dword [esp + 0x34]
pop dword [ebp]
mov dword [section..data], 0xb004e1
push dword [esp + 0x94]
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004ff1d1
mov dword [section..data], 0xb004e2
lea eax, [0x4513f5]
push eax
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef1c
mov dword [section..data], 0xb004e3
mov dword [section..data], 0xb004e5
jmp 0x4445ae
mov dword [section..data], 0xb004e5
mov ebx, 5
cmp ebx, dword [esp]
jne 0x4433b3
mov dword [section..data], 0xb004e6
mov eax, 0x5f820c
push eax
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.005010de
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x1e], eax
mov dword [section..data], 0xb004e7
mov ebp, dword [esp + 0x30]
cmp dword [ebp + 0x1e], 0
je 0x44339a
mov dword [section..data], 0xb004e9
push 0xffffffec
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
mov ebx, eax
and ebx, 0xfffffdff
push ebx
push 0xffffffec
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb004ea
push 0xfffffff0
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
mov ebx, eax
or ebx, 0x800000
push ebx
push 0xfffffff0
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb004eb
push dword [esp + 4]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00500da2
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x22], eax
mov dword [section..data], 0xb004ec
push 1
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.004fffe9
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x26], eax
mov dword [section..data], 0xb004ed
push dword [esp + 0x88]
mov ebp, dword [esp + 0x34]
pop dword [ebp]
mov dword [section..data], 0xb004ee
push dword [esp + 0x94]
mov ebp, dword [esp + 0x34]
pop dword [ebp + 0x14]
mov dword [section..data], 0xb004ef
push dword [esp + 0xc]
call fcn.0052c880
mov ebp, dword [esp + 0x30]
mov dword [ebp + 0x10], eax
mov dword [section..data], 0xb004f0
lea eax, [0x4513f5]
push eax
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef1c
mov dword [section..data], 0xb004f1
lea eax, [0x4513f5]
push eax
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x26]
call fcn.004fef1c
mov dword [section..data], 0xb004f2
push 0xfffffffc
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
push eax
push 0xffffffeb
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb004f2
lea eax, [0x410782]
push eax
push 0xfffffffc
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb004f3
mov dword [section..data], 0xb004f5
jmp 0x4445ae
mov dword [section..data], 0xb004f5
mov ebx, 6
cmp ebx, dword [esp]
jne 0x4436bb
mov dword [section..data], 0xb004f6
cmp dword [esp + 0x94], 0
je 0x4433fd
mov dword [section..data], 0xb004f7
mov dword [esp + 0x1c], 0x42
mov dword [section..data], 0xb004f8
jmp 0x443419
mov dword [section..data], 0xb004f8
mov dword [section..data], 0xb004f9
mov dword [esp + 0x1c], 0
mov dword [section..data], 0xb004fa
mov dword [section..data], 0xb004fb
push dword [esp + 0x1c]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00506370
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x1e], eax
mov dword [section..data], 0xb004fc
mov ebp, dword [esp + 0x30]
cmp dword [ebp + 0x1e], 0
je 0x4436a2
mov dword [section..data], 0xb004fd
push dword [esp + 4]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00500da2
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x22], eax
mov dword [section..data], 0xb004fe
push dword [esp + 0x88]
mov ebp, dword [esp + 0x34]
pop dword [ebp]
mov dword [section..data], 0xb004ff
mov edx, dword [0x6c8ed0]
push edx
push edx
mov eax, 0x5f8486
push eax
mov eax, 0x5fa1ea
push eax
push dword [esp + 0x1c]
call fcn.0052d100
lea eax, [esp + 0x10]
push eax
call fcn.0052ec20
mov dword [section..data], 0xb00500
mov eax, 0x5f8486
push eax
push dword [esp + 0x10]
call fcn.0052c4a0
mov ebx, eax
inc ebx
mov dword [esp + 0x28], ebx
mov dword [section..data], 0xb00501
mov dword [esp + 0x24], 0
jmp 0x44352c
mov dword [section..data], 0xb00501
mov ebx, dword [esp + 0x28]
dec ebx
cmp ebx, dword [esp + 0x24]
jl 0x4435b5
mov dword [section..data], 0xb00502
mov edx, dword [0x6c8ed0]
push edx
push edx
mov edx, dword [0x6c8ed0]
push edx
push edx
push dword [0x6c8ed0]
mov eax, 0x5f8486
push eax
mov ebx, dword [esp + 0x3c]
inc ebx
push ebx
push dword [esp + 0x28]
call fcn.0052c530
mov edx, dword [0x6be9ac]
add dword [esp], edx
call fcn.0052c480
add dword [0x6c8ed0], 2
push dword [esp + 0x2c]
mov ebp, dword [esp + 0x3c]
push dword [ebp + 0x1e]
mov edx, dword [0x6be9ac]
add dword [esp + 8], edx
call fcn.00502ec5
pop dword [0x6c8ed0]
mov dword [section..data], 0xb00503
inc dword [esp + 0x24]
jno 0x443522
mov dword [section..data], 0xb00504
push 0
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004ff1d1
mov dword [section..data], 0xb00505
lea eax, [0x4513f5]
push eax
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef1c
mov dword [section..data], 0xb00507
cmp dword [esp + 0x94], 0
je 0x443698
mov dword [section..data], 0xb00509
lea ebp, [esp + 0x34]
mov dword [ebp], 0x34
mov dword [section..data], 0xb0050a
lea eax, [esp + 0x34]
push eax
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetComboBoxInfo
and eax, eax
je 0x44368e
mov dword [section..data], 0xb0050b
push 0xfffffffc
lea ebp, [esp + 0x38]
push dword [ebp + 0x2c]
call sub.USER32.dll_GetWindowLongW
push eax
push 0xffffffeb
lea ebp, [esp + 0x3c]
push dword [ebp + 0x2c]
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb0050c
lea eax, [0x410782]
push eax
push 0xfffffffc
lea ebp, [esp + 0x3c]
push dword [ebp + 0x2c]
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb0050d
mov dword [section..data], 0xb0050e
mov dword [section..data], 0xb00510
mov dword [section..data], 0xb00512
jmp 0x4445ae
mov dword [section..data], 0xb00512
mov ebx, 7
cmp ebx, dword [esp]
jne 0x443749
mov dword [section..data], 0xb00513
push dword [esp + 0xc]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00500da2
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x1e], eax
mov dword [section..data], 0xb00514
mov ebp, dword [esp + 0x30]
cmp dword [ebp + 0x1e], 0
je 0x443730
mov dword [section..data], 0xb00515
push dword [esp + 0x88]
mov ebp, dword [esp + 0x34]
pop dword [ebp]
mov dword [section..data], 0xb00516
mov dword [section..data], 0xb00518
jmp 0x4445ae
mov dword [section..data], 0xb00518
mov ebx, 0xa
cmp ebx, dword [esp]
jne 0x44381d
mov dword [section..data], 0xb00519
push 0
push dword [esp + 0x98]
push 0
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.005095d1
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x1e], eax
mov dword [section..data], 0xb0051a
mov ebp, dword [esp + 0x30]
cmp dword [ebp + 0x1e], 0
je 0x443804
mov dword [section..data], 0xb0051b
push dword [esp + 4]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00500da2
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x22], eax
mov dword [section..data], 0xb0051c
push dword [esp + 0x88]
mov ebp, dword [esp + 0x34]
pop dword [ebp]
mov dword [section..data], 0xb0051d
mov dword [section..data], 0xb0051f
jmp 0x4445ae
mov dword [section..data], 0xb0051f
mov ebx, 0xb
cmp ebx, dword [esp]
jne 0x44398a
mov dword [section..data], 0xb00520
push dword [esp + 0x94]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00509ad3
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x1e], eax
mov dword [section..data], 0xb00521
mov ebp, dword [esp + 0x30]
cmp dword [ebp + 0x1e], 0
je 0x443971
mov dword [section..data], 0xb00523
push 0xffffffec
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
mov ebx, eax
and ebx, 0xfffffdff
push ebx
push 0xffffffec
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb00524
push 0xfffffff0
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
mov ebx, eax
or ebx, 0x800000
push ebx
push 0xfffffff0
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb00525
push dword [esp + 4]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00500da2
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x22], eax
mov dword [section..data], 0xb00526
push dword [esp + 0x88]
mov ebp, dword [esp + 0x34]
pop dword [ebp]
mov dword [section..data], 0xb00527
lea eax, [0x4513f5]
push eax
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef1c
mov dword [section..data], 0xb00528
mov dword [section..data], 0xb0052a
jmp 0x4445ae
mov dword [section..data], 0xb0052a
mov ebx, 0xc
cmp ebx, dword [esp]
jne 0x443a23
mov dword [section..data], 0xb0052b
push dword [esp + 0x88]
mov ebp, dword [esp + 0x34]
pop dword [ebp]
mov dword [section..data], 0xb0052c
mov ebx, dword [esp + 0x94]
and ebx, ebx
jge 0x4439f2
mov dword [section..data], 0xb0052d
mov ebx, dword [0x6c3618]
mov eax, ebx
mov ecx, 2
cdq
idiv ecx
mov ebx, eax
mov dword [esp + 0x94], ebx
mov dword [section..data], 0xb0052e
mov dword [section..data], 0xb0052f
push dword [esp + 0x94]
mov ebp, dword [esp + 0x34]
pop dword [ebp + 0x10]
mov dword [section..data], 0xb00531
jmp 0x4445ae
mov dword [section..data], 0xb00531
mov ebx, 0xd
cmp ebx, dword [esp]
jne 0x443bb5
mov dword [section..data], 0xb00532
push 3
push dword [esp + 0x98]
push 0
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00504883
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x1e], eax
mov dword [section..data], 0xb00533
mov ebp, dword [esp + 0x30]
cmp dword [ebp + 0x1e], 0
je 0x443b9c
mov dword [section..data], 0xb00535
push 0xffffffec
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
mov ebx, eax
and ebx, 0xfffffdff
push ebx
push 0xffffffec
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb00536
push 0xfffffff0
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
mov ebx, eax
or ebx, 0x800000
push ebx
push 0xfffffff0
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb00537
push dword [esp + 4]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00500da2
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x22], eax
mov dword [section..data], 0xb00538
push dword [esp + 0x88]
mov ebp, dword [esp + 0x34]
pop dword [ebp]
mov dword [section..data], 0xb00539
push 0
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004ff1d1
mov dword [section..data], 0xb0053a
lea eax, [0x4513f5]
push eax
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef1c
mov dword [section..data], 0xb0053b
mov dword [section..data], 0xb0053d
jmp 0x4445ae
mov dword [section..data], 0xb0053d
mov ebx, 0xe
cmp ebx, dword [esp]
je 0x443beb
mov ebx, 0xf
cmp ebx, dword [esp]
je 0x443beb
mov ebx, 0x10
cmp ebx, dword [esp]
je 0x443beb
mov ebx, 8
cmp ebx, dword [esp]
jne 0x443e70
mov dword [section..data], 0xb0053e
mov ebx, dword [esp + 0x88]
cmp ebx, 8
jne 0x443c1f
mov dword [section..data], 0xb0053f
mov dword [esp + 0x1c], 0x20
mov dword [section..data], 0xb00540
jmp 0x443c6f
mov dword [section..data], 0xb00540
mov ebx, dword [esp + 0x88]
cmp ebx, 0x10
jne 0x443c53
mov dword [section..data], 0xb00541
mov dword [esp + 0x1c], 0x2000
mov dword [section..data], 0xb00542
jmp 0x443c6f
mov dword [section..data], 0xb00542
mov dword [section..data], 0xb00543
mov dword [esp + 0x1c], 0
mov dword [section..data], 0xb00544
mov dword [section..data], 0xb00545
push dword [esp + 0x1c]
push dword [esp + 0x10]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00500f9a
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x1e], eax
mov dword [section..data], 0xb00546
mov ebx, dword [esp + 0x88]
cmp ebx, 0x10
jne 0x443ce8
mov dword [section..data], 0xb00547
push 4
push 1
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004feeac
mov dword [section..data], 0xb00548
mov dword [section..data], 0xb00556
mov ebp, dword [esp + 0x30]
cmp dword [ebp + 0x1e], 0
je 0x443e57
mov dword [section..data], 0xb00558
push 0xffffffec
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
mov ebx, eax
and ebx, 0xfffffdff
push ebx
push 0xffffffec
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb00559
push 0xfffffff0
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
mov ebx, eax
or ebx, 0x800000
push ebx
push 0xfffffff0
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb0055a
push dword [esp + 4]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00500da2
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x22], eax
mov dword [section..data], 0xb0055b
push dword [esp + 0x88]
mov ebp, dword [esp + 0x34]
pop dword [ebp]
mov dword [section..data], 0xb0055c
lea eax, [0x4513f5]
push eax
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef1c
mov dword [section..data], 0xb0055d
push 0xfffffffc
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
push eax
push 0xffffffeb
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb0055d
lea eax, [0x410782]
push eax
push 0xfffffffc
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb0055e
mov dword [section..data], 0xb00560
jmp 0x4445ae
mov dword [section..data], 0xb00560
mov ebx, 0x11
cmp ebx, dword [esp]
je 0x443e92
mov ebx, 9
cmp ebx, dword [esp]
jne 0x443f66
mov dword [section..data], 0xb00561
push dword [esp + 0x94]
push 0
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00509d66
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x1e], eax
mov dword [section..data], 0xb00562
mov ebp, dword [esp + 0x30]
cmp dword [ebp + 0x1e], 0
je 0x443f4d
mov dword [section..data], 0xb00563
push dword [esp + 4]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00500da2
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x22], eax
mov dword [section..data], 0xb00564
push dword [esp + 0x88]
mov ebp, dword [esp + 0x34]
pop dword [ebp]
mov dword [section..data], 0xb00565
lea eax, [0x4513f5]
push eax
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef1c
mov dword [section..data], 0xb00566
mov dword [section..data], 0xb00568
jmp 0x4445ae
mov dword [section..data], 0xb00568
mov ebx, 0x12
cmp ebx, dword [esp]
jne 0x4445a4
mov dword [section..data], 0xb00569
push 0x800
mov eax, 0x5f820c
push eax
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00500f9a
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x1e], eax
mov dword [section..data], 0xb0056a
mov ebp, dword [esp + 0x30]
cmp dword [ebp + 0x1e], 0
je 0x44458e
mov dword [section..data], 0xb0056c
push 0xffffffec
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
mov ebx, eax
and ebx, 0xfffffdff
push ebx
push 0xffffffec
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb0056d
push 0xfffffff0
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
mov ebx, eax
or ebx, 0x800000
push ebx
push 0xfffffff0
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb0056e
push dword [esp + 4]
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.00500da2
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x22], eax
mov dword [section..data], 0xb00570
push 0
push dword [0x6c35b4]
push dword [0x6c364c]
mov eax, 0x5fac5c
push eax
push 0x19
push 0x19
push 0
push 0
push 0xffffffff
call fcn.004b17bb
push eax
mov ebp, dword [esp + 0x34]
pop eax
mov dword [ebp + 0x26], eax
mov dword [section..data], 0xb00574
push dword [esp + 0x88]
mov ebp, dword [esp + 0x34]
pop dword [ebp]
mov dword [section..data], 0xb00576
mov eax, 0x5fa1ea
push eax
push dword [esp + 0x10]
call fcn.0052c4a0
mov ebx, eax
cmp ebx, 1
jl 0x4444bd
mov dword [section..data], 0xb00577
mov edx, dword [0x6c8ed0]
push edx
push edx
mov edx, dword [0x6c8ed0]
push edx
push edx
mov eax, 0x5fa1ea
push eax
push 1
push dword [esp + 0x24]
call fcn.0052c530
mov edx, dword [0x6be9ac]
add dword [esp], edx
call fcn.0052c480
lea eax, [esp + 0x6c]
push eax
call fcn.0052ec20
mov dword [section..data], 0xb00578
mov edx, dword [0x6c8ed0]
push edx
push edx
mov edx, dword [0x6c8ed0]
push edx
push edx
push dword [0x6c8ed0]
mov eax, 0x5fa1ea
push eax
push 2
push dword [esp + 0x28]
call fcn.0052c530
mov edx, dword [0x6be9ac]
add dword [esp], edx
call fcn.0052c480
mov edx, dword [0x6be9ac]
add dword [esp], edx
call fcn.0052c880
pop dword [0x6c8ed0]
mov dword [esp + 0x6c], eax
mov dword [section..data], 0xb00579
mov edx, dword [esp + 0x68]
push dword [0x6c8ed0]
push edx
call fcn.0052eca0
mov edx, 0x606e74
push edx
call fcn.0052eca0
mov edx, dword [0x6c8ed0]
push edx
push edx
mov eax, dword [esp + 0x78]
cdq
push edx
push eax
call fcn.0052bab0
pop eax
lea eax, [esp + 0x74]
push eax
call fcn.0052ec20
mov dword [section..data], 0xb0057b
mov eax, 0x5fa1ea
push eax
push dword [esp + 0x10]
call fcn.0052c4a0
mov ebx, eax
cmp ebx, 2
jne 0x4444a7
mov dword [section..data], 0xb0057c
mov edx, dword [0x6c8ed0]
push edx
push edx
mov edx, dword [0x6c8ed0]
push edx
push edx
mov eax, 0x5fa1ea
push eax
push 3
push dword [esp + 0x24]
call fcn.0052c530
mov edx, dword [0x6be9ac]
add dword [esp], edx
call fcn.0052c480
lea eax, [esp + 0x10]
push eax
call fcn.0052ec20
mov dword [section..data], 0xb0057d
mov edx, dword [esp + 0x70]
push dword [0x6c8ed0]
push edx
call fcn.0052eca0
mov edx, 0x606e74
push edx
call fcn.0052eca0
lea eax, [esp + 0x74]
push eax
call fcn.0052ec20
mov dword [section..data], 0xb0057e
mov eax, 0x5f9d8a
push eax
push dword [esp + 0x10]
call fcn.0052ca80
and eax, eax
je 0x4442ee
mov dword [section..data], 0xb0057e
mov ebx, dword [esp + 0x74]
or ebx, 0x100
mov dword [esp + 0x74], ebx
mov dword [section..data], 0xb0057e
mov edx, dword [esp + 0x70]
push dword [0x6c8ed0]
push edx
call fcn.0052eca0
mov edx, 0x5f9d8a
push edx
call fcn.0052eca0
lea eax, [esp + 0x74]
push eax
call fcn.0052ec20
mov dword [section..data], 0xb0057e
mov dword [section..data], 0xb0057f
mov eax, 0x5f9ece
push eax
push dword [esp + 0x10]
call fcn.0052ca80
and eax, eax
je 0x44435c
mov dword [section..data], 0xb0057f
mov ebx, dword [esp + 0x74]
or ebx, 0x200
mov dword [esp + 0x74], ebx
mov dword [section..data], 0xb0057f
mov edx, dword [esp + 0x70]
push dword [0x6c8ed0]
push edx
call fcn.0052eca0
mov edx, 0x5f9ece
push edx
call fcn.0052eca0
lea eax, [esp + 0x74]
push eax
call fcn.0052ec20
mov dword [section..data], 0xb0057f
mov dword [section..data], 0xb00580
mov eax, 0x5fa084
push eax
push dword [esp + 0x10]
call fcn.0052ca80
and eax, eax
je 0x4443c7
mov dword [section..data], 0xb00580
mov ebx, dword [esp + 0x74]
or ebx, 8
mov dword [esp + 0x74], ebx
mov dword [section..data], 0xb00580
mov edx, dword [esp + 0x70]
push dword [0x6c8ed0]
push edx
call fcn.0052eca0
mov edx, 0x5fa084
push edx
call fcn.0052eca0
lea eax, [esp + 0x74]
push eax
call fcn.0052ec20
mov dword [section..data], 0xb00580
mov dword [section..data], 0xb00581
mov eax, 0x5fa0ce
push eax
push dword [esp + 0x10]
call fcn.0052ca80
and eax, eax
je 0x444432
mov dword [section..data], 0xb00581
mov ebx, dword [esp + 0x74]
or ebx, 4
mov dword [esp + 0x74], ebx
mov dword [section..data], 0xb00581
mov edx, dword [esp + 0x70]
push dword [0x6c8ed0]
push edx
call fcn.0052eca0
mov edx, 0x5fa0ce
push edx
call fcn.0052eca0
lea eax, [esp + 0x74]
push eax
call fcn.0052ec20
mov dword [section..data], 0xb00581
mov dword [section..data], 0xb00582
mov eax, 0x5f9eaa
push eax
push dword [esp + 0x10]
call fcn.0052ca80
and eax, eax
je 0x44449d
mov dword [section..data], 0xb00582
mov ebx, dword [esp + 0x74]
or ebx, 0x10
mov dword [esp + 0x74], ebx
mov dword [section..data], 0xb00582
mov edx, dword [esp + 0x70]
push dword [0x6c8ed0]
push edx
call fcn.0052eca0
mov edx, 0x5f9eaa
push edx
call fcn.0052eca0
lea eax, [esp + 0x74]
push eax
call fcn.0052ec20
mov dword [section..data], 0xb00582
mov dword [section..data], 0xb00583
mov dword [section..data], 0xb00584
jmp 0x4444ec
mov dword [section..data], 0xb00584
mov dword [section..data], 0xb00585
mov edx, dword [0x6c8ed0]
push edx
push edx
push dword [esp + 0x14]
call fcn.0052c480
lea eax, [esp + 0x74]
push eax
call fcn.0052ec20
mov dword [section..data], 0xb00586
mov dword [section..data], 0xb00587
push dword [esp + 0x70]
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.00500629
mov dword [section..data], 0xb00588
lea eax, [0x4513f5]
push eax
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x26]
call fcn.004fef1c
mov dword [section..data], 0xb00589
push 0xfffffffc
mov ebp, dword [esp + 0x34]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_GetWindowLongW
push eax
push 0xffffffeb
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb00589
lea eax, [0x410782]
push eax
push 0xfffffffc
mov ebp, dword [esp + 0x38]
push dword [ebp + 0x1e]
call fcn.004fef2e
push eax
call sub.USER32.dll_SetWindowLongW
mov dword [section..data], 0xb0058a
mov dword [section..data], 0xb0058c
jmp 0x4445ae
mov dword [section..data], 0xb0058c
mov dword [section..data], 0xb00591
pop eax
mov dword [section..data], 0xb00593
mov ebp, dword [esp + 0x2c]
mov ebx, dword [ebp]
cmp ebx, 0xffffffff
je 0x44471b
mov dword [section..data], 0xb00594
mov edx, dword [esp]
push dword [0x6c8ed0]
push edx
call fcn.0052eca0
mov ebp, dword [esp + 0x30]
lea eax, [ebp + 4]
push eax
call fcn.0052ec20
mov dword [section..data], 0xb00595
mov edx, dword [esp + 4]
push dword [0x6c8ed0]
push edx
call fcn.0052eca0
mov ebp, dword [esp + 0x30]
lea eax, [ebp + 8]
push eax
call fcn.0052ec20
mov dword [section..data], 0xb00596
mov ebp, dword [esp + 0x2c]
mov dword [ebp + 0x18], 0xffffffff
mov dword [section..data], 0xb00597
mov dword [esp + 0x20], 0
jmp 0x444653
mov dword [section..data], 0xb00597
mov eax, 3
cmp eax, dword [esp + 0x20]
jl 0x4446bf
mov dword [section..data], 0xb00598
mov ebp, dword [esp + 0x2c]
push ebp
mov eax, dword [esp + 0x24]
shl eax, 2
pop ebp
add ebp, eax
cmp dword [ebp + 0x1e], 0
je 0x4446a5
mov dword [section..data], 0xb00599
push dword [esp + 0x80]
mov ebp, dword [esp + 0x30]
push ebp
mov eax, dword [esp + 0x28]
shl eax, 2
pop ebp
add ebp, eax
push dword [ebp + 0x1e]
call fcn.00501c50
mov dword [section..data], 0xb0059d
mov dword [section..data], 0xb0059e
inc dword [esp + 0x20]
jno 0x444649
mov dword [section..data], 0xb0059f
mov ebp, dword [esp + 0x80]
push dword [ebp + 0x3c]
call fcn.005248ca
mov dword [esp + 0x14], eax
mov dword [section..data], 0xb005a0
push 1
push dword [esp + 0x84]
call fcn.00447be1
mov dword [section..data], 0xb005a1
push 0
push dword [esp + 0x30]
call fcn.00451a79
mov dword [section..data], 0xb005a2
jmp 0x44473e
mov dword [section..data], 0xb005a2
mov dword [section..data], 0xb005a3
mov ebp, dword [esp + 0x80]
push dword [ebp + 0x3c]
call fcn.00524c51
mov dword [section..data], 0xb005a4
mov dword [section..data], 0xb005a5
call fcn.00501c6d
mov dword [section..data], 0xb005a7
mov dword [section..data], 0xb005a8
mov dword [section..data], 0xb005a9
mov eax, dword [esp + 0x14]
jmp 0x444787
push dword [esp + 0x6c]
call fcn.0052ed00
push dword [esp + 4]
call fcn.0052ed00
push dword [esp]
call fcn.0052ed00
push dword [esp + 0x28]
call fcn.0052ed00
push dword [esp + 0x64]
call fcn.0052ed00
push dword [esp + 8]
call fcn.0052ed00
add esp, 0x74
pop ebx
pop ebp
ret 0x18