Function at 0x44ad30
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x50b366
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x13c
mov eax, dword [esp + 0x14c]
push ebx
push esi
push edi
mov edi, ecx
push eax
call fcn.0044aac0
mov ecx, dword [edi + 0xfc8]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x418
push ecx
call ebx
mov edx, dword [edi + 0xda8]
push 0
push 0xe800
push 0x410
push edx
mov esi, eax
call ebx
mov edx, dword [edi + 0xda8]
lea ecx, [esp + 0x30]
push ecx
push eax
push 0x41c
push edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x40], 0x50
mov dword [esp + 0x44], 0x41
call ebx
mov ecx, dword [esp + 0x38]
and ch, 0xfe
test esi, esi
mov dword [esp + 0x38], ecx
jle 0x44add8
mov eax, dword [edi + 0xfc8]
push 0
push 0
push 0x416
push eax
call ebx
dec esi
jne 0x44adc3
mov eax, dword [edi + 0x6a0]
lea ecx, [edi + 0xfac]
cmp eax, 2
push 0
jge 0x44adf7
push 0x8800
push 0x1000
jmp 0x44adfe
push 0x9800
push 0
call fcn.004e12c7
xor eax, eax
mov word [0x573a00], 0x42
xor ebx, ebx
lea esi, [esp + 0x80]
cmp eax, 0xffffffff
je 0x44ae60
push 0xa
push 0x573a02
push ebx
call fcn.004bdd5d
add esp, 0xc
mov ecx, edi
push 0xfffffffffffffffb
push 0x573a00
push 0x55c49c
call fcn.0046d1b0
cmp eax, 0xfffffffb
jne 0x44ae48
mov dword [esi], ebx
jmp 0x44ae57
cmp eax, 0x2c
jl 0x44ae55
mov dword [esi], 1
jmp 0x44ae57
mov dword [esi], eax
inc ebx
add esi, 4
cmp ebx, 0x2c
jl 0x44ae17
mov ecx, dword [0x56b44c]
push ebp
xor ebp, ebp
mov dword [esp + 0x10], ecx
xor esi, esi
lea ecx, [esp + 0x10]
mov dword [esp + 0x154], esi
call fcn.004e1daf
lea edx, [ebx - 1]
lea ecx, [edi + 0xfac]
push edx
push esi
call fcn.004fa66d
cmp ebx, esi
mov dword [esp + 0x14], esi
jle 0x44afd8
lea eax, [esp + 0x84]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x14]
push 0xa
push 0x573a02
push ecx
call fcn.004bdd5d
mov edx, dword [esp + 0x24]
add esp, 0xc
mov esi, dword [edx]
test esi, esi
jl 0x44afb7
cmp esi, 0x2c
jge 0x44afbc
mov eax, dword [esi*4 + 0x55f2d8]
cmp eax, 1
je 0x44aef3
mov ecx, dword [edi + 0x6a0]
test ecx, ecx
je 0x44aef3
mov ecx, dword [esi*4 + 0x55f388]
or al, 0x10
push ecx
jmp 0x44aefb
mov ecx, dword [esi*4 + 0x55f388]
push ecx
mov edx, dword [esi*4 + 0x55f178]
push eax
push edx
push ebp
lea ecx, [edi + 0xfac]
call fcn.004ec7cf
mov eax, dword [edi + 0x6a0]
cmp eax, 1
je 0x44af2e
cmp eax, 2
jne 0x44afab
cmp dword [esi*4 + 0x55f438], 1
jne 0x44afab
mov eax, dword [0x5762a0]
test eax, eax
je 0x44af4e
mov eax, dword [esi*4 + 0x55f228]
lea ecx, [esp + 0x10]
push eax
push ecx
call fcn.0041a380
add esp, 8
jmp 0x44af5f
mov edx, dword [esi*4 + 0x55f228]
lea ecx, [esp + 0x10]
push edx
call fcn.004e2fed
mov eax, dword [esp + 0x10]
push 0xa
lea ecx, [esp + 0x14]
mov esi, dword [eax - 8]
call fcn.004e2363
sub esi, eax
lea ecx, [esp + 0x1c]
dec esi
push esi
push ecx
lea ecx, [esp + 0x18]
call fcn.004d6e91
mov eax, dword [eax]
lea ecx, [edi + 0xfac]
push eax
push ebp
mov byte [esp + 0x15c], 1
call fcn.004ec90d
lea ecx, [esp + 0x1c]
mov byte [esp + 0x154], 0
call fcn.004e1e27
lea ecx, [esp + 0x10]
inc ebp
call fcn.004e1daf
jmp 0x44afbc
cmp esi, 0x2c
jl 0x44afd8
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
inc eax
add edx, 4
cmp eax, ebx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
jl 0x44aea6
mov eax, dword [edi + 0x1010]
lea esi, [edi + 0xfac]
or al, 0x24
mov ecx, esi
push eax
call fcn.004fa876
mov eax, dword [edi + 0x6a0]
cmp eax, 1
mov eax, dword [edi + 0x608]
je 0x44b01f
test eax, eax
je 0x44b00a
push 0x120014
jmp 0x44b03d
mov eax, dword [edi + 0xfc8]
push 0x160018
push 0
push 0x41f
push eax
jmp 0x44b04b
test eax, eax
je 0x44b038
mov ecx, dword [edi + 0xfc8]
push 0x24003a
push 0
push 0x41f
push ecx
jmp 0x44b04b
push 0x2c003a
mov edx, dword [edi + 0xfc8]
push 0
push 0x41f
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [esi]
lea ecx, [esp + 0x24]
push ecx
push 0
mov ecx, esi
call dword [eax + 0xe0]
mov edx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x24]
mov eax, dword [esp + 0x30]
sub edx, ebp
mov esi, 2
mov dword [esp + 0x38], 0x361
add edx, esi
mov dword [esp + 0x68], 0xe800
mov dword [esp + 0x58], edx
mov edx, dword [esp + 0x28]
sub eax, edx
pop ebp
cmp eax, 0x12
mov dword [esp + 0x58], 0x12
jl 0x44b0a3
mov dword [esp + 0x58], eax
mov eax, dword [edi + 0xfc8]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x418
push eax
call ebx
test eax, eax
jle 0x44b0de
mov edx, dword [edi + 0xfc8]
lea ecx, [esp + 0x20]
dec eax
push ecx
push eax
push 0x41d
push edx
call ebx
mov eax, dword [esp + 0x28]
mov dword [esp + 0x74], eax
jmp 0x44b0e6
mov dword [esp + 0x74], esi
mov dword [esp + 0x5c], esi
mov eax, dword [edi + 0x5d8]
test eax, eax
je 0x44b0fe
mov ecx, dword [esp + 0x38]
and cl, 0x7f
or ch, 1
mov dword [esp + 0x38], ecx
mov eax, dword [esp + 0x1c]
mov ecx, dword [edi + 0xda8]
lea edx, [esp + 0x30]
push edx
push eax
push 0x40b
push ecx
call ebx
mov edx, dword [edi + 0xfc8]
push 1
push 0
push edx
call dword [sym.imp.USER32.dll_InvalidateRect]
lea ecx, [esp + 0xc]
mov dword [esp + 0x150], 0xffffffff
call fcn.004e1e27
mov ecx, dword [esp + 0x148]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x148
ret 4