Function at 0x447c58
Capabilities:
Get graphical window text
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb8
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x10], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x448d27
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 5], 0
xor edx, edx
push ebp
push 0x448cfa
push dword fs:[edx]
mov dword fs:[edx], esp
xor eax, eax
push ebp
push 0x447cd1
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x448d40
push 1
mov ecx, 0x448d40
mov edx, 0x448d4c
mov eax, 0x80000002
call fcn.0042f5c0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x447cdb
mov dl, 1
mov eax, dword [0x41a700]
call fcn.00403e6c
mov edx, dword [ebp - 4]
mov dword [edx + 0x7e], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1b]
test eax, eax
je 0x447cfa
sub eax, 0xffffffb8
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x3b7]
push eax
call sub.ole32.dll_RegisterDragDrop
push 0x448d90
call sub.user32.dll_RegisterWindowMessageA
mov edx, dword [ebp - 4]
mov dword [edx + 0x934], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0xa6], 0xffffffff
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0xd1], edx
mov dword [eax + 0xd5], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x8f1], edx
xor eax, eax
push ebp
push 0x447d95
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x448da4
call sub.kernel32.dll_GlobalFindAtomA
test ax, ax
jne 0x447d8b
push 0
push 0
mov edx, dword [0x46b4c4]
mov edx, dword [edx]
mov ecx, 0x448dc4
mov eax, 0x80000001
call fcn.0042f96c
push 0x448da4
call sub.kernel32.dll_GlobalAddAtomA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x447d9f
mov eax, dword [ebp - 4]
mov byte [eax + 0x8ff], 1
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0xb5], edx
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 4]
mov dword [edx + 0xaa], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0xae], 0xa
mov eax, dword [ebp - 4]
mov byte [eax + 0xb4], 0
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 8], edx
mov eax, dword [ebp - 4]
mov dword [eax + 0xc], 0xffffffff
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x82], edx
mov dl, 1
mov eax, dword [0x44422c]
call fcn.00444c20
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x4ed], ebx
mov eax, dword [ebp - 4]
mov dword [ebx + 0x68], eax
mov dword [ebx + 0x64], 0x451fb0
mov eax, dword [ebp - 4]
mov dword [ebx + 0x60], eax
mov dword [ebx + 0x5c], 0x452070
mov eax, dword [ebp - 4]
mov dword [ebx + 0x50], eax
mov dword [ebx + 0x4c], 0x4520e4
mov eax, dword [ebp - 4]
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x24], 0x4537a0
mov eax, dword [ebp - 4]
mov dword [ebx + 0x30], eax
mov dword [ebx + 0x2c], 0x453690
mov eax, dword [ebp - 4]
mov dword [ebx + 0x38], eax
mov dword [ebx + 0x34], 0x4538e0
mov eax, dword [ebp - 4]
mov dword [ebx + 0x40], eax
mov dword [ebx + 0x3c], 0x453840
mov eax, dword [ebp - 4]
mov dword [ebx + 0x48], eax
mov dword [ebx + 0x44], 0x4538d8
mov eax, dword [ebp - 4]
mov dword [ebx + 0x70], eax
mov dword [ebx + 0x6c], 0x45444c
mov eax, dword [ebp - 4]
mov dword [ebx + 0x78], eax
mov dword [ebx + 0x74], 0x454464
mov eax, dword [ebp - 4]
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x7c], 0x4544f4
mov eax, dword [ebp - 4]
mov byte [eax + 0x8f6], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x8f5], 0
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x4470fc]
call fcn.004545b0
mov edx, dword [ebp - 4]
mov dword [edx + 0x92c], eax
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.0044fb3c
xor edx, edx
xor eax, eax
call fcn.0042c338
mov edx, dword [ebp - 4]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x54], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x58], edx
mov eax, dword [ebp - 4]
mov byte [eax + 0x19], 0
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x37], edx
mov eax, dword [ebp - 4]
mov byte [eax + 0x19], 0
mov dl, 1
mov eax, dword [0x446f50]
call fcn.00403e6c
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x27], edx
mov eax, dword [ebp - 4]
mov byte [eax + 0x18], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
xor edx, edx
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 4]
mov byte [eax + 0x75], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x74], 0
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
add eax, 0x18
mov ecx, 1
mov edx, dword [0x45d100]
call fcn.00406280
add esp, 4
mov dl, 1
mov eax, dword [0x41a700]
call fcn.00403e6c
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9], ebx
lea ecx, [ebp - 0x30]
xor edx, edx
mov eax, 0x448dd4
call fcn.0045ea14
mov edx, dword [ebp - 0x30]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc9]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
cmp ebx, 0
jl 0x447ff6
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x38]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc9]
mov edx, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x38]
mov ecx, 2
mov edx, 1
call fcn.004052c0
mov eax, dword [ebp - 0x34]
mov edx, 0x448de4
call fcn.004051ac
jne 0x447ff0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc9]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0x48]
dec ebx
cmp ebx, 0xffffffff
jne 0x447fa8
push 0x15
call sub.user32.dll_GetSysColor
push eax
push 0xf
call sub.user32.dll_GetSysColor
mov ecx, 0x14
pop edx
call fcn.0045f104
mov dword [0x46af24], eax
mov eax, dword [0x46af28]
mov dword [0x46af28], eax
push 0xd
call sub.user32.dll_GetSysColor
mov dword [0x46af2c], eax
push 5
call sub.user32.dll_GetSysColor
push eax
push 0xd
call sub.user32.dll_GetSysColor
mov ecx, 0x23
pop edx
call fcn.0045f104
mov dword [0x46af30], eax
push 0xd
call sub.user32.dll_GetSysColor
mov dword [0x46af34], eax
push 5
call sub.user32.dll_GetSysColor
push eax
push 0xd
call sub.user32.dll_GetSysColor
mov ecx, 0x32
pop edx
call fcn.0045f104
mov dword [0x46af38], eax
cmp dword [0x46cb24], 0
jne 0x4480a1
xor edx, edx
xor eax, eax
call fcn.0042c338
mov dword [0x46cb24], eax
mov ecx, 0x3f2
mov edx, dword [0x46c668]
mov eax, dword [0x46cb24]
call fcn.0042cb44
call fcn.0042dd54
cmp al, 4
jne 0x4480d6
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
call fcn.0042af74
mov edx, 0x448df0
call fcn.00425e40
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
call fcn.0042af74
mov edx, 0xe
call fcn.00425e30
jmp 0x448100
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
call fcn.0042af74
mov edx, 0x448e10
call fcn.00425e40
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
call fcn.0042af74
mov edx, 0xd
call fcn.00425e30
xor eax, eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
add eax, 0x91c
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1b]
mov eax, dword [eax + 0x2d]
push eax
mov eax, dword [eax]
call dword [eax + 0x94]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
mov dx, word [0x448e18]
call fcn.004280c8
mov ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov dword [eax + 0xc], ebx
mov eax, ebx
mov edx, 0x11
call fcn.0042a8f0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
call fcn.0042af74
mov edx, 0xd
call fcn.00425e30
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
call fcn.0042af74
mov edx, 0x80000007
call fcn.00425e10
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [eax + 0x55e], edx
mov dword [eax + 0x55a], 0x456d24
mov edx, dword [ebp - 0xc]
call fcn.0042a810
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, 2
call fcn.0042a85c
mov eax, dword [0x46b430]
mov eax, dword [eax]
sub eax, 1
jb 0x4481c6
je 0x4481db
dec eax
je 0x4481f0
dec eax
je 0x448205
jmp 0x448218
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, 0x78
call fcn.0042a8ac
jmp 0x448218
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, 0xaf
call fcn.0042a8ac
jmp 0x448218
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, 0xfa
call fcn.0042a8ac
jmp 0x448218
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, 0x15e
call fcn.0042a8ac
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dl, 1
call fcn.0042a310
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + 0x53d], 0xa
mov edx, 0x80000005
call fcn.0042a91c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov byte [eax + 0x541], 1
push 0xd
push 0xffffffffffffffff
push 0x153
mov eax, dword [eax + 0x3b7]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
call fcn.00428f38
test eax, eax
jne 0x448289
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x448d04
mov eax, dword [0x46b1f8]
cmp byte [eax], 0
je 0x44830d
xor ebx, ebx
push 0
lea eax, [ebp - 0x10]
push eax
lea edx, [ebp - 0x40]
mov eax, ebx
call fcn.004094d8
mov ecx, dword [ebp - 0x40]
lea eax, [ebp - 0x3c]
mov edx, 0x448e24
call fcn.004050ac
mov ecx, dword [ebp - 0x3c]
mov edx, dword [0x46b4c4]
mov edx, dword [edx]
mov eax, 0x80000001
call fcn.0042f3e0
cmp dword [ebp - 0x10], 0
je 0x4482e7
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x10]
call fcn.0042b660
inc ebx
cmp ebx, 0xa
jle 0x448295
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, 0x448e30
call fcn.0042b660
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, 0x448e54
call fcn.0042b660
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [eax + 0x56], edx
mov dword [eax + 0x52], 0x448f24
mov edx, dword [ebp - 4]
mov dword [eax + 0x4ef], edx
mov dword [eax + 0x4eb], 0x448fac
mov edx, dword [ebp - 4]
push edx
push 0x4490e8
call fcn.0042b844
mov eax, dword [ebp - 4]
push eax
push 0x4491a0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
call fcn.0042b864
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [eax + 0x400], edx
mov dword [eax + 0x3fc], 0x448f24
mov edx, dword [ebp - 4]
push edx
push 0x44a64c
call fcn.0042e260
mov eax, dword [ebp - 4]
push eax
push 0x44a4e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
call fcn.0042de3c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov dword [eax + 0x4e], edx
mov dword [eax + 0x4a], fcn.0044a668
mov edx, dword [ebp - 4]
mov dword [eax + 0x11c], edx
mov dword [eax + 0x118], 0x44a654
mov edx, dword [ebp - 4]
mov dword [eax + 0x10c], edx
mov dword [eax + 0x108], 0x44c424
xor edx, edx
push ebp
push 0x4483fa
push dword fs:[edx]
mov dword fs:[edx], esp
mov edx, 0x4491bc
call fcn.0042da58
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x448409
xor eax, eax
push ebp
push 0x448434
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x42948c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
call fcn.0042da58
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x448443
push 5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x3b7]
push eax
call sub.user32.dll_GetWindow
push eax
call sub.user32.dll_SetFocus
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, 0x448e78
call fcn.0042a1f0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + 0x1c], 0x63
call fcn.0042d964
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
call fcn.0042a8d4
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
call fcn.0042a890
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
call fcn.0042a844
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
call fcn.0042a7f8
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
call fcn.00428f38
push eax
call sub.user32.dll_MoveWindow
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
xor edx, edx
call fcn.0042e710
mov ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov dword [eax + 4], ebx
mov eax, dword [ebp - 4]
mov dword [ebx + 0x3f8], eax
mov dword [ebx + 0x3f4], 0x454bc4
mov byte [ebx + 0x59c], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
call fcn.0042af74
call fcn.00425e94
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x14]
mov ebx, dword [edx + 4]
mov dword [ebx + 0x521], eax
mov eax, ebx
call fcn.00428f38
test eax, eax
jne 0x448543
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x448d04
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 4]
mov dl, 1
call fcn.0042a310
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 4]
mov edx, dword [0x46af20]
mov dword [eax + 0x5a2], edx
mov byte [eax + 0x5a1], 1
mov dword [eax + 0x598], 0xe
mov dl, 1
call fcn.0042bc40
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 4]
mov dword [eax + 0x5c6], edx
mov dword [eax + 0x5c2], 0x44e4ec
mov edx, dword [ebp - 4]
mov dword [eax + 0x5ae], edx
mov dword [eax + 0x5aa], 0x44f2d0
mov edx, dword [ebp - 4]
mov ebx, dword [edx + 0x14]
mov edx, dword [ebp - 4]
mov dword [eax + 0x556], edx
mov dword [eax + 0x552], 0x44fb3c
mov eax, dword [ebx + 0xc]
call fcn.0042a7f8
mov ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
call fcn.0042a890
add ebx, eax
add ebx, 3
mov dword [ebp - 0xc], ebx
mov ebx, dword [0x46af28]
mov eax, dword [0x46af20]
mov dword [0x46af28], eax
xor edx, edx
xor eax, eax
call fcn.0042c338
mov dword [ebp - 0x14], eax
push 0x3e8
push 0
push 0
push 0xfffffffffffffff7
push 3
push 1
push 0
push 0xffffffffffffffff
xor ecx, ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0044c444
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov dword [eax + 0x58b], edx
xor edx, edx
xor eax, eax
call fcn.0042c338
mov dword [ebp - 0x14], eax
push 0x3e8
push 0
push 0
push 0xfffffffffffffff7
push 3
push 1
push 0
push 0xffffffffffffffff
mov ecx, 1
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0044c444
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov dword [eax + 0x593], edx
xor edx, edx
xor eax, eax
call fcn.0042c338
mov dword [ebp - 0x14], eax
push 0x3e8
push 0
push 0
push 0xfffffffffffffff7
push 3
push 1
push 0
push 0xffffffffffffffff
mov ecx, 2
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0044c444
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov dword [eax + 0x58f], edx
mov dword [0x46af28], ebx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 4]
mov byte [eax + 0x59e], 1
mov edx, dword [ebp - 4]
mov dword [eax + 0x54e], edx
mov dword [eax + 0x54a], 0x44cc58
mov edx, 5
mov eax, 5
call fcn.0042c338
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
call fcn.0042af74
push eax
mov eax, dword [ebp - 0x14]
call fcn.0042ca24
call fcn.0042651c
pop edx
call fcn.00425c08
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc9]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0x448785
inc esi
xor ebx, ebx
lea ecx, [ebp - 0x44]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc9]
mov edx, ebx
call fcn.0041c3f4
mov eax, dword [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x14]
call fcn.0042ca24
pop edx
call fcn.004264b4
cmp eax, dword [0x46af1c]
jle 0x448781
lea ecx, [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc9]
mov edx, ebx
call fcn.0041c3f4
mov eax, dword [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x14]
call fcn.0042ca24
pop edx
call fcn.004264b4
mov dword [0x46af1c], eax
inc ebx
dec esi
jne 0x44872a
push 0
mov edx, dword [0x46b4c4]
mov edx, dword [edx]
mov ecx, 0x448e9c
mov eax, 0x80000001
call fcn.0042f854
mov ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov dword [eax + 0x1c], ebx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc9]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jl 0x4487c6
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
xor edx, edx
mov dword [eax + 0x1c], edx
xor eax, eax
push ebp
push 0x4487f8
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov edx, dword [eax + 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc9]
call fcn.0041c3f4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x448855
mov ebx, 0x1388
lea eax, [ebp - 0x1c]
push eax
push 0
push ebx
mov eax, dword [ebp - 0x10]
push eax
push 1
mov eax, dword [0x46af1c]
push eax
push 3
push 1
push 0
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0044c4c4
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x10]
push eax
push 1
push 0
push 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
call fcn.00423964
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
add eax, 3
mov edx, dword [0x46b3f4]
mov dword [edx], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov ebx, dword [eax + 4]
mov eax, dword [ebp - 4]
mov dword [ebx + 0x10c], eax
mov dword [ebx + 0x108], 0x4476d8
mov eax, dword [ebp - 4]
mov dword [ebx + 0x400], eax
mov dword [ebx + 0x3fc], 0x447488
xor edi, edi
mov eax, dword [ebx + 0x583]
call fcn.004060ac
mov esi, eax
test esi, esi
jl 0x44891f
inc esi
xor ebx, ebx
imul eax, ebx, 0x2b
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x14]
mov edx, dword [edx + 4]
mov edx, dword [edx + 0x583]
add edi, dword [edx + eax*2 + 0x10]
inc ebx
dec esi
jne 0x448905
push 0xffffffffffffffff
mov eax, dword [0x46b3bc]
mov eax, dword [eax]
push eax
push edi
push 0
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 4]
call fcn.00428f38
push eax
call sub.user32.dll_MoveWindow
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
xor edx, edx
call fcn.0042e710
mov ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov dword [eax + 8], ebx
mov eax, dword [ebp - 4]
push eax
push 0x44f2d0
mov eax, ebx
call fcn.0042a010
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 8]
mov byte [eax + 0x59c], 1
mov byte [eax + 0x59d], 0
mov dl, 1
call fcn.0042a310
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
call fcn.0042af74
call fcn.00425e94
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x14]
mov ebx, dword [edx + 8]
mov dword [ebx + 0x521], eax
mov eax, ebx
call fcn.00428f38
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 8]
mov dword [eax + 0x598], 0xe
mov edx, dword [0x46af20]
mov dword [eax + 0x5a2], edx
mov byte [eax + 0x5a1], 1
mov dl, 1
call fcn.0042bc40
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [eax + 0x10c], edx
mov dword [eax + 0x108], 0x4476d8
mov edx, dword [ebp - 4]
mov dword [eax + 0x400], edx
mov dword [eax + 0x3fc], 0x447488
mov edx, dword [ebp - 4]
mov dword [eax + 0x5c6], edx
mov dword [eax + 0x5c2], 0x44e4ec
xor edx, edx
mov eax, 2
call fcn.0042c338
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
push 0
push 0
push 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 8]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
call fcn.00423c84
xor edi, edi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x583]
call fcn.004060ac
mov esi, eax
test esi, esi
jl 0x448a85
inc esi
xor ebx, ebx
imul eax, ebx, 0x2b
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x14]
mov edx, dword [edx + 8]
mov edx, dword [edx + 0x583]
add edi, dword [edx + eax*2 + 0x10]
inc ebx
dec esi
jne 0x448a6b
mov eax, dword [ebp - 4]
mov dword [eax + 0x2f], edi
push 0xffffffffffffffff
mov eax, dword [0x46b3bc]
mov eax, dword [eax]
push eax
push edi
push 0
mov eax, dword [ebp - 0xc]
add eax, 2
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 8]
call fcn.00428f38
push eax
call sub.user32.dll_MoveWindow
mov eax, dword [ebp - 4]
mov byte [eax + 0x8f6], 1
lea eax, [ebp - 0x2c]
push eax
push 5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
call fcn.00428f38
push eax
call sub.user32.dll_GetWindow
push eax
call sub.user32.dll_GetWindowRect
add dword [ebp - 0x2c], 0x14
push 0x40
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x2c]
push eax
push 0xffffffffffffffff
push 5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
call fcn.00428f38
push eax
call sub.user32.dll_GetWindow
push eax
call sub.user32.dll_SetWindowPos
push 0x80000003
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 4]
call fcn.00428f38
push eax
push 0
mov eax, dword [0x46c668]
push eax
push 0
mov edx, dword [0x46b1dc]
xor ecx, ecx
mov eax, 8
call fcn.00407bd8
mov edx, dword [ebp - 4]
mov dword [edx + 0x33], eax
push 0x13
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x33]
push eax
call sub.user32.dll_SetWindowPos
mov eax, dword [ebp - 4]
push eax
push fcn.0044a270
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
call fcn.0042db0c
mov eax, dword [ebp - 4]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 4]
call fcn.0044a270
mov eax, dword [ebp - 4]
call fcn.0044d498
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 4]
mov dword [eax + 0x55e], edx
mov dword [eax + 0x55a], 0x456d24
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 4]
mov dword [eax + 0x55e], edx
mov dword [eax + 0x55a], 0x44d924
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [eax + 0x55e], edx
mov dword [eax + 0x55a], 0x456230
cmp dword [0x46cb20], 0
jne 0x448bfc
mov dl, 1
mov eax, dword [0x446e80]
call fcn.00403e6c
mov dword [0x46cb20], eax
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 4]
mov dword [edx + 0x93c], eax
mov eax, dword [ebp - 4]
add eax, 0x940
call fcn.00404da0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
call fcn.00428f38
mov edx, eax
mov eax, dword [0x46cb20]
call fcn.004471b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 4]
mov dword [eax + 0x4f7], edx
mov dword [eax + 0x4f3], 0x450b78
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 4]
mov dword [eax + 0x4ff], edx
mov dword [eax + 0x4fb], 0x450ba0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [eax + 0x4f7], edx
mov dword [eax + 0x4f3], 0x450b78
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [eax + 0x4ff], edx
mov dword [eax + 0x4fb], 0x450ba0
mov eax, dword [0x46b4c0]
cmp byte [eax], 0
jne 0x448cb2
mov eax, dword [0x46b19c]
cmp byte [eax], 0
je 0x448cdd
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x14]
mov edx, dword [edx + 4]
mov dword [edx + 0x1c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 4]
call fcn.00428f38
mov edx, eax
mov eax, dword [0x46cb20]
call fcn.004471b8
mov eax, dword [ebp - 4]
call fcn.00450a44
mov eax, dword [0x46b344]
inc dword [eax]
mov byte [ebp - 5], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x448d04
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x448d2e
lea eax, [ebp - 0x48]
mov edx, 7
call fcn.00404dc4
lea eax, [ebp - 0x10]
call fcn.00404da0
ret