Function at 0x44f5e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x61958b
mov eax, dword fs:[0]
push eax
sub esp, 0x280
mov eax, dword [0x69e3d4]
xor eax, esp
mov dword [esp + 0x278], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x69e3d4]
xor eax, esp
push eax
lea eax, [esp + 0x294]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x2a4]
lea ecx, [esp + 0x60]
call fcn.0044bc50
mov dword [esp + 0x29c], 0
or edi, 0xffffffff
cmp dword [ebp + 0xd0], 0
mov dword [ebp + 0x1a50], edi
je 0x44f6b6
mov eax, dword [ebp + 0xe4]
test eax, eax
je 0x44f6b6
lea esi, [eax - 1]
test esi, esi
jl 0x44f693
lea eax, [esi*8]
sub eax, esi
lea ebx, [ebp + eax*4 + 0xec]
lea esp, [esp]
mov ecx, dword [esp + 0x2ac]
mov edx, dword [esp + 0x2a8]
push ecx
push edx
call fcn.0044c0d0
test eax, eax
jne 0x44f693
sub esi, 1
sub ebx, 0x1c
test esi, esi
jge 0x44f670
test esi, esi
mov dword [ebp + 0x1a50], esi
jl 0x44f6b6
lea eax, [esi*8]
sub eax, esi
lea eax, [ebp + eax*4 + 0xec]
lea esi, [esp + 0x60]
call fcn.0044bcb0
cmp dword [ebp + 0x1a50], 0
jge 0x44ff09
xor ebx, ebx
lea esi, [esp + 0x60]
call fcn.0044bee0
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
lea esi, [esp + 0x2a8]
mov edi, ebp
call fcn.0044c6d0
mov ecx, dword [esp + 0x2ac]
mov edx, dword [esp + 0x2a8]
push ecx
push edx
push ebx
push ebp
call fcn.0044f420
mov esi, eax
mov dword [esp + 0x14], esi
mov dword [esp + 0x2c], ebx
call dword [sym.imp.user32.dll_GetDesktopWindow]
cmp esi, eax
jne 0x44f77d
mov eax, dword [esp + 0x2ac]
mov ecx, dword [esp + 0x2a8]
push 1
push eax
push ecx
mov dword [ebp + 0x1a10], ebx
call fcn.00565775
lea edx, [esp + 0x34]
push edx
push eax
mov dword [esp + 0x3c], 0x28
call fcn.00565882
lea eax, [esp + 0x38]
push eax
lea edi, [ebp + 0xc0]
push edi
call dword [sym.imp.user32.dll_CopyRect]
mov ecx, dword [ebp + 0xcc]
mov edx, dword [ebp + 0xc8]
mov eax, dword [ebp + 0xc4]
push ecx
mov ecx, dword [edi]
push edx
push eax
push ecx
call dword [sym.imp.gdi32.dll_CreateRectRgn]
mov dword [esp + 0x74], eax
jmp 0x44f7ee
push esi
call dword [sym.imp.user32.dll_IsWindow]
test eax, eax
je 0x44f8e9
mov edx, dword [esp + 0x2ac]
mov eax, dword [esp + 0x2a8]
shl edx, 0x10
and eax, 0xffff
or edx, eax
push edx
push ebx
push 0x84
push esi
call dword [sym.imp.user32.dll_SendMessageA]
push ebx
push ebx
push ebx
push ebx
mov dword [esp + 0x3c], eax
mov dword [ebp + 0x1a10], esi
call dword [sym.imp.gdi32.dll_CreateRectRgn]
push esi
mov ebx, eax
mov dword [esp + 0x78], eax
call fcn.0044cef0
add esp, 4
test eax, eax
jg 0x44f7ec
mov ecx, dword [esp + 0x74]
push ecx
call dword [sym.imp.gdi32.dll_DeleteObject]
mov dword [esp + 0x74], 0
xor ebx, ebx
push 0xff
lea edx, [esp + 0x190]
push edx
push esi
mov byte [esp + 0x198], 0
call dword [sym.imp.user32.dll_GetClassNameA]
cmp dword [ebp + 0x1a10], ebx
mov byte [esp + 0x28b], 0
je 0x44f821
cmp dword [esp + 0x2c], 1
je 0x44f842
mov edi, str.OFormSub
lea esi, [esp + 0x18c]
mov ecx, 9
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x44fe8f
mov esi, dword [esp + 0x14]
xor ebx, ebx
lea ecx, [esp + 0x18]
push ecx
push esi
mov dword [ebp + 0x1a08], ebx
call dword [sym.imp.user32.dll_GetClientRect]
push 2
call fcn.0056572d
lea edx, [esp + 0x2a8]
push edx
push esi
mov dword [esp + 0x30], eax
mov dword [esp + 0x2b4], ebx
mov dword [esp + 0x2b0], ebx
call dword [sym.imp.user32.dll_ClientToScreen]
mov eax, dword [esp + 0x2a8]
mov ecx, dword [esp + 0x2ac]
add dword [esp + 0x20], eax
add dword [esp + 0x24], ecx
push 0xffffffffffffffec
push esi
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
call dword [sym.imp.user32.dll_GetWindowLongA]
mov ebx, eax
and ebx, 0x7000
mov edi, str.Internet_Explorer_Server
lea esi, [esp + 0x18c]
mov ecx, 0x19
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
mov dword [esp + 0x30], ebx
jne 0x44f8fe
mov eax, 2
add dword [esp + 0x18], eax
add dword [esp + 0x1c], eax
sub dword [esp + 0x20], eax
sub dword [esp + 0x24], eax
test ebx, ebx
je 0x44f8f4
mov ecx, dword [esp + 0x28]
add dword [esp + 0x18], ecx
jmp 0x44f921
mov dword [ebp + 0x1a10], ebx
jmp 0x44f7ee
mov edx, dword [esp + 0x28]
sub dword [esp + 0x20], edx
jmp 0x44f921
mov edi, str.EXCEL7
lea esi, [esp + 0x18c]
mov ecx, 7
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x44f921
mov eax, dword [esp + 0x28]
sub dword [esp + 0x24], eax
sub dword [esp + 0x20], eax
mov eax, dword [esp + 0x74]
xor edi, edi
cmp eax, edi
je 0x44f97c
lea ecx, [esp + 0x7c]
push ecx
push eax
call dword [sym.imp.gdi32.dll_GetRgnBox]
lea edx, [esp + 0x7c]
push edx
lea eax, [esp + 0x1c]
push eax
mov ecx, eax
push ecx
call dword [sym.imp.user32.dll_IntersectRect]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push edx
mov edx, dword [esp + 0x1c]
push eax
push ecx
push edx
call dword [sym.imp.gdi32.dll_CreateRectRgn]
mov esi, eax
mov eax, dword [esp + 0x74]
push 1
push eax
push esi
push eax
call dword [sym.imp.gdi32.dll_CombineRgn]
push esi
call dword [sym.imp.gdi32.dll_DeleteObject]
cmp dword [ebp + 0x1a14], edi
je 0x44fed5
mov eax, dword [esp + 0x28]
cdq
sub eax, edx
cmp ebx, edi
mov dword [esp + 0x2c], 1
mov dword [ebp + 0x1a60], edi
mov dword [ebp + 0x1a5c], edi
mov ebx, eax
je 0x44f9b3
mov ecx, dword [esp + 0x18]
sar ebx, 1
sub ecx, ebx
jmp 0x44f9bc
mov eax, dword [esp + 0x20]
sar ebx, 1
lea ecx, [ebx + eax]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
mov esi, dword [sym.imp.user32.dll_SendMessageA]
add eax, edx
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x2a8], ecx
mov dword [esp + 0x2ac], eax
and ecx, 0xffff
shl eax, 0x10
or eax, ecx
mov ecx, dword [esp + 0x14]
push eax
push edi
push 0x84
push ecx
call esi
mov edx, dword [esp + 0x2a8]
sub edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x14]
mov edi, eax
mov eax, dword [esp + 0x2ac]
and edx, 0xffff
shl eax, 0x10
or edx, eax
push edx
push 0
push 0x84
push ecx
call esi
mov edx, dword [esp + 0x2a8]
mov ecx, dword [esp + 0x2ac]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x28]
add eax, edx
mov edx, dword [esp + 0x14]
and eax, 0xffff
shl ecx, 0x10
or eax, ecx
push eax
push 0
push 0x84
push edx
call esi
mov ecx, dword [esp + 0x14]
mov esi, eax
push 0xff
lea eax, [esp + 0x90]
push eax
push ecx
call dword [sym.imp.user32.dll_GetClassNameA]
cmp edi, 7
mov byte [esp + 0x18b], 0
mov dword [esp + 0x34], 0x1c
mov dword [esp + 0x38], 0x17
je 0x44fe36
cmp dword [esp + 0x5c], 7
je 0x44fe36
cmp esi, 7
je 0x44fe36
mov edi, str.Internet_Explorer_Server
lea esi, [esp + 0x8c]
mov ecx, 0x19
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x44fb36
cmp dword [esp + 0x30], edx
mov dword [ebp + 0x1a54], 1
je 0x44faeb
mov ecx, dword [esp + 0x24]
sub ecx, ebx
sub ecx, dword [esp + 0x1c]
lea eax, [ebx - 2]
sub ecx, 2
mov dword [ebp + 0x1a5c], eax
mov dword [ebp + 0x1a60], ecx
jmp 0x44fb0e
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
sub eax, ebx
sub eax, dword [esp + 0x1c]
sub edx, ebx
sub edx, dword [esp + 0x18]
sub eax, 2
mov dword [ebp + 0x1a5c], edx
mov dword [ebp + 0x1a60], eax
mov ecx, dword [esp + 0x14]
lea eax, [ebp + 0x1a5c]
push eax
push ecx
call dword [sym.imp.user32.dll_ClientToScreen]
mov eax, 2
mov dword [esp + 0x48], 0
mov dword [esp + 0x40], eax
jmp 0x44fe5e
mov edi, str.MozillaWindowClass
lea esi, [esp + 0x8c]
mov ecx, 0x13
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x44fdff
mov edi, str.NS_AE_WindowClass
lea esi, [esp + 0x8c]
mov ecx, 0x12
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x44fdff
mov edi, str._WwG
lea esi, [esp + 0x8c]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x44fdff
mov edi, str.EXCEL7
lea esi, [esp + 0x8c]
mov ecx, 7
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x44fdff
mov edi, str.OperaWindowClass
lea esi, [esp + 0x8c]
mov ecx, 0x11
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x44fbfb
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.user32.dll_GetParent]
mov edx, ebx
sub edx, dword [esp + 0x18]
lea ecx, [ebp + 0x1a5c]
add edx, dword [esp + 0x20]
push ecx
mov dword [ecx], edx
mov edx, dword [esp + 0x28]
sub edx, ebx
sub edx, dword [esp + 0x20]
mov dword [esp + 0x18], eax
mov dword [ebp + 0x1a54], 6
mov dword [ebp + 0x1a60], edx
push eax
jmp 0x44fb1a
mov edi, str.FRAMES2
lea esi, [esp + 0x8c]
mov ecx, 8
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x44fca9
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.user32.dll_GetParent]
push 0xff
lea edx, [esp + 0x90]
push edx
push eax
mov dword [esp + 0x20], eax
call dword [sym.imp.user32.dll_GetClassNameA]
mov edi, str.FRAMES2
lea esi, [esp + 0x8c]
mov ecx, 8
xor eax, eax
mov byte [esp + 0x18b], 0
repe cmpsb byte [esi], byte es:[edi]
jne 0x44feb7
mov edx, dword [esp + 0x24]
mov ecx, ebx
sub ecx, dword [esp + 0x18]
lea eax, [ebp + 0x1a5c]
add ecx, dword [esp + 0x20]
sub edx, ebx
sub edx, dword [esp + 0x1c]
push eax
mov dword [eax], ecx
mov eax, dword [esp + 0x18]
push eax
mov dword [ebp + 0x1a54], 6
mov dword [ebp + 0x1a60], edx
mov dword [esp + 0x50], 0
mov dword [esp + 0x48], 2
call dword [sym.imp.user32.dll_ClientToScreen]
jmp 0x44fe5a
mov ecx, dword [esp + 0x2ac]
mov edx, dword [esp + 0x2a8]
push ecx
push edx
push 1
push ebp
call fcn.0044f420
test eax, eax
mov dword [ebp + 0x1a08], eax
je 0x44fd0a
cmp eax, dword [esp + 0x14]
je 0x44fd0a
push 0xff
lea ecx, [esp + 0x90]
push ecx
push eax
call dword [sym.imp.user32.dll_GetClassNameA]
mov edi, str.ScrollBar
lea esi, [esp + 0x8c]
mov ecx, 0xa
xor edx, edx
mov byte [esp + 0x18b], 0
repe cmpsb byte [esi], byte es:[edi]
je 0x44fd0a
mov dword [ebp + 0x1a08], edx
xor ebx, ebx
cmp dword [ebp + 0x1a08], ebx
jne 0x44fd42
mov eax, dword [esp + 0x2a8]
sub eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2ac]
push ecx
push eax
push 1
push ebp
mov dword [esp + 0x2b8], eax
call fcn.0044f420
mov dword [ebp + 0x1a08], eax
mov ebx, 1
mov eax, dword [ebp + 0x1a08]
test eax, eax
je 0x44feb7
cmp eax, dword [esp + 0x14]
je 0x44feb7
push 0xff
lea edx, [esp + 0x90]
push edx
push eax
call dword [sym.imp.user32.dll_GetClassNameA]
mov ecx, dword [ebp + 0x1a08]
lea eax, [esp + 0x8c]
push eax
push ecx
mov byte [esp + 0x193], 0
call fcn.0049f320
add esp, 8
mov edi, str.ScrollBar
lea esi, [esp + 0x8c]
mov ecx, 0xa
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x44feb7
mov ecx, dword [ebp + 0x1a08]
lea eax, [esp + 0x34]
push eax
push 2
push ecx
call dword [sym.imp.user32.dll_GetScrollInfo]
lea edx, [esp + 0x7c]
mov esi, eax
mov eax, dword [ebp + 0x1a08]
push edx
call fcn.004ed150
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x8c]
add eax, 8
add ecx, 0xfffffff8
add esp, 4
test ebx, ebx
mov dword [ebp + 0x1a5c], eax
mov dword [ebp + 0x1a60], ecx
je 0x44fe4a
mov edx, dword [esp + 0x28]
sub dword [esp + 0x20], edx
jmp 0x44fe4a
mov edx, dword [esp + 0x24]
mov ecx, ebx
sub ecx, dword [esp + 0x18]
lea eax, [ebp + 0x1a5c]
add ecx, dword [esp + 0x20]
sub edx, ebx
sub edx, dword [esp + 0x1c]
push eax
mov dword [eax], ecx
mov eax, dword [esp + 0x18]
mov dword [ebp + 0x1a54], 6
mov dword [ebp + 0x1a60], edx
push eax
jmp 0x44fb1a
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x34]
push ecx
push 1
push edx
call dword [sym.imp.user32.dll_GetScrollInfo]
mov esi, eax
mov eax, dword [esp + 0x44]
test eax, eax
jbe 0x44fe56
mov dword [esp + 0x2c], eax
test esi, esi
je 0x44feb7
mov eax, dword [esp + 0x40]
sub eax, dword [esp + 0x2c]
cmp dword [esp + 0x48], eax
jge 0x44feb7
call fcn.005702dd
mov eax, dword [eax + 0xc]
push str.SCROLLCUR
push eax
call dword [sym.imp.user32.dll_LoadCursorA]
push eax
call dword [sym.imp.user32.dll_SetCursor]
mov eax, dword [esp + 0x14]
mov dword [ebp + 0x1a0c], eax
jmp 0x44fed5
mov ecx, dword [ebp + 0xc0]
mov edx, dword [ebp + 0xc4]
mov eax, dword [ebp + 0xc8]
mov dword [esp + 0x18], ecx
mov ecx, dword [ebp + 0xcc]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
push 0x7f00
push 0
call dword [sym.imp.user32.dll_LoadCursorA]
push eax
call dword [sym.imp.user32.dll_SetCursor]
mov dword [ebp + 0x1a0c], 0
lea esi, [esp + 0x18]
mov edi, ebp
call fcn.0044c770
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x34]
mov dword [eax + 8], edx
lea esi, [esp + 0x70]
mov dword [eax + 0xc], ecx
call fcn.0044be50
lea ebx, [ebp + 0x60]
lea edi, [esp + 0x60]
mov esi, ebx
call fcn.0044bd10
test eax, eax
jne 0x44ff58
push 1
mov esi, ebp
call fcn.0044ffc0
mov eax, edi
mov esi, ebx
call fcn.0044bcb0
push 0
mov esi, ebp
call fcn.0044ffc0
cmp dword [ebp + 0x1a18], 0
jne 0x44ff58
mov edx, dword [ebp + 0x20]
push 0
push 0x1f4
push 1
push edx
call dword [sym.imp.user32.dll_SetTimer]
mov dword [ebp + 0x1a18], eax
lea ecx, [esp + 0x60]
mov dword [esp + 0x29c], 0xffffffff
call fcn.0044bc80
mov ecx, dword [esp + 0x294]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x278]
xor ecx, esp
call fcn.005a58d9
add esp, 0x28c
ret 0xc