PINNED WINDOW 00d9e470..00d9e660 (may include neighboring functions)
00d9e470 push     ecx
00d9e471 push     ebx
00d9e472 mov      ebx, dword ptr [esp + 0x10]
00d9e476 push     ebp
00d9e477 push     esi
00d9e478 push     edi
00d9e479 mov      ebp, edx
00d9e47b mov      esi, ecx
00d9e47d test     ebx, ebx
00d9e47f jne      0xd9e48f
00d9e481 call     0xda2e20
00d9e486 mov      eax, dword ptr [eax + 8]
00d9e489 mov      dword ptr [esp + 0x1c], eax
00d9e48d mov      ebx, eax
00d9e48f mov      edi, dword ptr [esp + 0x18]
00d9e493 test     edi, edi
00d9e495 jne      0xd9e4ab
00d9e497 mov      ecx, esi
00d9e499 call     0xda2e20
00d9e49e mov      edi, dword ptr [eax + 4]
00d9e4a1 cmp      edi, 4
00d9e4a4 jge      0xd9e4ab
00d9e4a6 mov      edi, 4
00d9e4ab test     ebp, ebp
00d9e4ad jne      0xd9e4b6
00d9e4af mov      ebp, 1
00d9e4b4 mov      edi, ebp
00d9e4b6 cmp      dword ptr [esi + 0x74], 0xa
00d9e4ba jl       0xd9e4c5
00d9e4bc mov      edx, dword ptr [esi]
00d9e4be mov      eax, dword ptr [edx + 0x18]
00d9e4c1 mov      ecx, esi
00d9e4c3 call     eax
00d9e4c5 push     ebx
00d9e4c6 push     edi
00d9e4c7 mov      edx, ebp
00d9e4c9 mov      ecx, esi
00d9e4cb call     0xd9d4d0
00d9e4d0 mov      dword ptr [esp + 0x18], eax
00d9e4d4 test     eax, eax
00d9e4d6 jne      0xd9e59e
00d9e4dc cmp      dword ptr [esi + 0x68], eax
00d9e4df jne      0xd9e519
00d9e4e1 mov      ecx, dword ptr [esi + 0x1d8]
00d9e4e7 test     ecx, ecx
00d9e4e9 je       0xd9e53a
00d9e4eb cmp      byte ptr [esi + 0x7d], al
00d9e4ee jne      0xd9e53a
00d9e4f0 mov      edx, dword ptr [esp + 0x24]
00d9e4f4 push     edx
00d9e4f5 mov      edx, dword ptr [esp + 0x24]
00d9e4f9 push     edx
00d9e4fa mov      byte ptr [esi + 0x7d], 1
00d9e4fe mov      eax, dword ptr [ecx]
00d9e500 mov      eax, dword ptr [eax + 4]
00d9e503 push     ebx
00d9e504 push     edi
00d9e505 mov      edx, ebp
00d9e507 call     eax
00d9e509 mov      byte ptr [esi + 0x7d], 0
00d9e50d test     eax, eax
00d9e50f je       0xd9e53a
00d9e511 pop      edi
00d9e512 pop      esi
00d9e513 pop      ebp
00d9e514 pop      ebx
00d9e515 pop      ecx
00d9e516 ret      0x10
00d9e519 push     edi
00d9e51a mov      edx, ebp
00d9e51c mov      ecx, esi
00d9e51e call     0xd9d710
00d9e523 test     eax, eax
00d9e525 je       0xd9e53a
00d9e527 push     ebx
00d9e528 push     edi
00d9e529 mov      edx, ebp
00d9e52b mov      ecx, esi
00d9e52d call     0xd9d4d0
00d9e532 mov      dword ptr [esp + 0x18], eax
00d9e536 test     eax, eax
00d9e538 jne      0xd9e59a
00d9e53a mov      edx, dword ptr [esi]
00d9e53c mov      eax, dword ptr [edx + 0xa4]
00d9e542 mov      ecx, esi
00d9e544 call     eax
00d9e546 test     eax, eax
00d9e548 je       0xd9e57f
00d9e54a mov      ecx, dword ptr [esp + 0x24]
00d9e54e mov      edx, dword ptr [esp + 0x20]
00d9e552 push     ecx
00d9e553 push     edx
00d9e554 push     ebx
00d9e555 push     edi
00d9e556 mov      edx, ebp
00d9e558 mov      ecx, esi
00d9e55a call     eax
00d9e55c test     eax, eax
00d9e55e je       0xd9e57f
00d9e560 mov      edx, dword ptr [esp + 0x24]
00d9e564 push     edx
00d9e565 mov      edx, dword ptr [esp + 0x24]
00d9e569 push     edx
00d9e56a mov      ecx, eax
00d9e56c mov      eax, dword ptr [eax]
00d9e56e mov      eax, dword ptr [eax + 4]
00d9e571 push     ebx
00d9e572 push     edi
00d9e573 mov      edx, ebp
00d9e575 call     eax
00d9e577 test     eax, eax
00d9e579 jne      0xd9e64f
00d9e57f mov      edx, dword ptr [esi]
00d9e581 mov      eax, dword ptr [edx + 0xa0]
00d9e587 mov      ecx, esi
00d9e589 call     eax
00d9e58b test     eax, eax
00d9e58d je       0xd9e590
00d9e58f int3     
00d9e590 pop      edi
00d9e591 pop      esi
00d9e592 pop      ebp
00d9e593 xor      eax, eax
00d9e595 pop      ebx
00d9e596 pop      ecx
00d9e597 ret      0x10
00d9e59a mov      eax, dword ptr [esp + 0x18]
00d9e59e xor      edx, edx
00d9e5a0 cmp      ebx, 2
00d9e5a3 je       0xd9e5e5
00d9e5a5 mov      ecx, dword ptr [esi + 0x70]
00d9e5a8 add      ecx, eax
00d9e5aa lea      ecx, [ecx + edi + 0x1f]
00d9e5ae mov      eax, ecx
00d9e5b0 div      edi
00d9e5b2 push     1
00d9e5b4 sub      ecx, edx
00d9e5b6 add      ecx, 0xf
00d9e5b9 mov      edx, ecx
00d9e5bb and      edx, 0xf
00d9e5be sub      ecx, edx
00d9e5c0 bsr      eax, edi
00d9e5c3 movzx    edx, byte ptr [esi + 0x78]
00d9e5c7 mov      ebx, ecx
00d9e5c9 setne    cl
00d9e5cc mov      dword ptr [esp + 0x14], eax
00d9e5d0 movzx    eax, cl
00d9e5d3 mov      ecx, dword ptr [esp + 0x14]
00d9e5d7 push     edx
00d9e5d8 mov      edx, dword ptr [esp + 0x24]
00d9e5dc neg      eax
00d9e5de and      ecx, eax
00d9e5e0 push     ecx
00d9e5e1 push     ebp
00d9e5e2 push     edx
00d9e5e3 jmp      0xd9e61f
00d9e5e5 mov      ecx, dword ptr [eax + 4]
00d9e5e8 sub      ecx, dword ptr [esi + 0x70]
00d9e5eb lea      ebx, [edi + 0xf]
00d9e5ee mov      eax, ebx
00d9e5f0 and      eax, 0xf
00d9e5f3 sub      ebx, eax
00d9e5f5 sub      ecx, ebp
00d9e5f7 mov      eax, ecx
00d9e5f9 div      ebx
00d9e5fb sub      ecx, edx
00d9e5fd mov      ebx, ecx
00d9e5ff bsr      ecx, edi
00d9e602 setne    dl
00d9e605 mov      dword ptr [esp + 0x1c], ecx
00d9e609 movzx    ecx, byte ptr [esi + 0x78]
00d9e60d movzx    eax, dl
00d9e610 mov      edx, dword ptr [esp + 0x1c]
00d9e614 push     ecx
00d9e615 neg      eax
00d9e617 push     1
00d9e619 and      edx, eax
00d9e61b push     edx
00d9e61c push     ebp
00d9e61d push     2
00d9e61f mov      eax, dword ptr [esp + 0x38]
00d9e623 mov      ecx, dword ptr [esp + 0x34]
00d9e627 push     eax
00d9e628 push     ecx
00d9e629 lea      edx, [ebx + ebp]
00d9e62c push     edx
00d9e62d mov      edx, dword ptr [esp + 0x38]
00d9e631 push     ebx
00d9e632 mov      ecx, esi
00d9e634 call     0xd9e320
00d9e639 cmp      dword ptr [esi + 0x74], 1
00d9e63d jl       0xd9e64d
00d9e63f mov      dl, byte ptr [0x14570fa]
00d9e645 push     ebp
00d9e646 mov      ecx, ebx
00d9e648 call     0xd95820
00d9e64d mov      eax, ebx
00d9e64f pop      edi
00d9e650 pop      esi
00d9e651 pop      ebp
00d9e652 pop      ebx
00d9e653 pop      ecx
00d9e654 ret      0x10
00d9e657 int3     
00d9e658 int3     
00d9e659 int3     
00d9e65a int3     
00d9e65b int3     
00d9e65c int3     
00d9e65d int3     
00d9e65e int3     
00d9e65f int3     
PINNED WINDOW 00d9ee50..00d9f080 (may include neighboring functions)
00d9ee50 push     esi
00d9ee51 mov      esi, edx
00d9ee53 push     edi
00d9ee54 mov      edi, ecx
00d9ee56 test     esi, esi
00d9ee58 je       0xd9efd0
00d9ee5e push     ebp
00d9ee5f mov      ebp, dword ptr [edi + 0x1d8]
00d9ee65 test     ebp, ebp
00d9ee67 je       0xd9eea1
00d9ee69 cmp      byte ptr [edi + 0x7d], 0
00d9ee6d jne      0xd9eea1
00d9ee6f mov      edx, dword ptr [edi + 0x70]
00d9ee72 mov      ecx, esi
00d9ee74 call     0xd9dc20
00d9ee79 cmp      eax, edi
00d9ee7b je       0xd9eea1
00d9ee7d mov      byte ptr [edi + 0x7d], 1
00d9ee81 mov      eax, dword ptr [ebp]
00d9ee84 mov      eax, dword ptr [eax + 0xc]
00d9ee87 push     0x769
00d9ee8c push     0xf76b1202
00d9ee91 mov      edx, esi
00d9ee93 mov      ecx, ebp
00d9ee95 call     eax
00d9ee97 pop      ebp
00d9ee98 mov      byte ptr [edi + 0x7d], 0
00d9ee9c pop      edi
00d9ee9d pop      esi
00d9ee9e ret      8
00d9eea1 cmp      dword ptr [edi + 0x74], 0xa
00d9eea5 jl       0xd9eeb0
00d9eea7 mov      edx, dword ptr [edi]
00d9eea9 mov      eax, dword ptr [edx + 0x18]
00d9eeac mov      ecx, edi
00d9eeae call     eax
00d9eeb0 sub      esi, dword ptr [edi + 0x70]
00d9eeb3 mov      ebp, dword ptr [edi + 0x74]
00d9eeb6 sub      esi, 0x20
00d9eeb9 cmp      ebp, 1
00d9eebc jle      0xd9eedf
00d9eebe mov      edx, esi
00d9eec0 mov      ecx, edi
00d9eec2 call     0xd9cbc0
00d9eec7 test     eax, eax
00d9eec9 jne      0xd9eecc
00d9eecb int3     
00d9eecc cmp      ebp, 1
00d9eecf jle      0xd9eedf
00d9eed1 mov      edx, esi
00d9eed3 mov      ecx, edi
00d9eed5 call     0xd9cbc0
00d9eeda test     eax, eax
00d9eedc jne      0xd9eedf
00d9eede int3     
00d9eedf cmp      ebp, 3
00d9eee2 jl       0xd9ef0b
00d9eee4 cmp      ebp, 1
00d9eee7 jle      0xd9eef7
00d9eee9 mov      edx, esi
00d9eeeb mov      ecx, edi
00d9eeed call     0xd9cd90
00d9eef2 test     eax, eax
00d9eef4 jne      0xd9eef7
00d9eef6 int3     
00d9eef7 cmp      dword ptr [edi + 0x74], 1
00d9eefb jle      0xd9ef0b
00d9eefd mov      edx, esi
00d9eeff mov      ecx, edi
00d9ef01 call     0xd9cdc0
00d9ef06 test     eax, eax
00d9ef08 jne      0xd9ef0b
00d9ef0a int3     
00d9ef0b cmp      dword ptr [esp + 0x10], 0
00d9ef10 push     ebx
00d9ef11 jne      0xd9ef25
00d9ef13 mov      ecx, dword ptr [esi + 0x14]
00d9ef16 mov      ebx, dword ptr [esi + 0x18]
00d9ef19 mov      dword ptr [esp + 0x14], ecx
00d9ef1d and      ebx, 0xffff
00d9ef23 jmp      0xd9ef29
00d9ef25 mov      ebx, dword ptr [esp + 0x18]
00d9ef29 cmp      dword ptr [edi + 0x74], 1
00d9ef2d jl       0xd9ef46
00d9ef2f mov      edx, dword ptr [esi + 4]
00d9ef32 sub      edx, esi
00d9ef34 sub      edx, 0x20
00d9ef37 push     edx
00d9ef38 mov      dl, byte ptr [0x14570fb]
00d9ef3e lea      ecx, [esi + 0x20]
00d9ef41 call     0xd95820
00d9ef46 and      dword ptr [esi + 0x18], 0xfffeffff
00d9ef4d mov      eax, dword ptr [esi + 8]
00d9ef50 mov      ecx, dword ptr [esi + 0xc]
00d9ef53 mov      ebp, dword ptr [esi + 0x10]
00d9ef56 mov      dword ptr [eax + 0xc], ecx
00d9ef59 mov      edx, dword ptr [esi + 0xc]
00d9ef5c mov      eax, dword ptr [esi + 8]
00d9ef5f mov      dword ptr [edx + 8], eax
00d9ef62 mov      eax, dword ptr [esi + 4]
00d9ef65 xor      edx, edx
00d9ef67 mov      dword ptr [esi + 8], edx
00d9ef6a mov      dword ptr [esi + 0xc], edx
00d9ef6d mov      ecx, dword ptr [edi + 0x70]
00d9ef70 dec      dword ptr [edi + 0x60]
00d9ef73 lea      ecx, [ecx + ecx + 0x20]
00d9ef77 sub      eax, ecx
00d9ef79 sub      eax, esi
00d9ef7b mov      ecx, 0xffffffe0
00d9ef80 sub      ecx, eax
00d9ef82 add      dword ptr [edi + 0x5c], ecx
00d9ef85 mov      ecx, dword ptr [edi + 0xc]
00d9ef88 cmp      ecx, edx
00d9ef8a je       0xd9ef9c
00d9ef8c movzx    edx, byte ptr [esi + 0x1b]
00d9ef90 lea      ecx, [ecx + edx*4]
00d9ef93 mov      edx, 0xffffffe0
00d9ef98 sub      edx, eax
00d9ef9a add      dword ptr [ecx], edx
00d9ef9c mov      eax, dword ptr [esp + 0x14]
00d9efa0 push     0
00d9efa2 push     ebx
00d9efa3 push     eax
00d9efa4 mov      edx, esi
00d9efa6 mov      ecx, edi
00d9efa8 call     0xd9dfb0
00d9efad mov      eax, dword ptr [ebp + 0x10]
00d9efb0 mov      ecx, dword ptr [eax + 4]
00d9efb3 add      ebp, 0xc
00d9efb6 pop      ebx
00d9efb7 cmp      dword ptr [ecx + 4], ebp
00d9efba jne      0xd9efcf
00d9efbc test     byte ptr [eax + 0x1a], 1
00d9efc0 jne      0xd9efcf
00d9efc2 cmp      dword ptr [eax + 0xc], 0
00d9efc6 je       0xd9efcf
00d9efc8 mov      ecx, edi
00d9efca call     0xd9d7b0
00d9efcf pop      ebp
00d9efd0 pop      edi
00d9efd1 pop      esi
00d9efd2 ret      8
00d9efd5 int3     
00d9efd6 int3     
00d9efd7 int3     
00d9efd8 int3     
00d9efd9 int3     
00d9efda int3     
00d9efdb int3     
00d9efdc int3     
00d9efdd int3     
00d9efde int3     
00d9efdf int3     
00d9efe0 push     ebp
00d9efe1 push     edi
00d9efe2 mov      edi, ecx
00d9efe4 mov      ebp, edx
00d9efe6 test     edi, edi
00d9efe8 je       0xd9f03d
00d9efea call     0x4dff60
00d9efef test     eax, eax
00d9eff1 je       0xd9f03d
00d9eff3 push     esi
00d9eff4 call     0x4dff60
00d9eff9 mov      esi, eax
00d9effb mov      ecx, esi
00d9effd call     0xda2cc0
00d9f002 cmp      dword ptr [eax + 4], 0x93d82b95
00d9f009 jne      0xd9f02b
00d9f00b mov      edx, dword ptr [eax + 0x70]
00d9f00e mov      ecx, edi
00d9f010 call     0xd9dc20
00d9f015 test     eax, eax
00d9f017 je       0xd9f02b
00d9f019 cmp      dword ptr [eax + 4], 0x93d82b95
00d9f020 jne      0xd9f02b
00d9f022 mov      esi, dword ptr [eax + 0x18]
00d9f025 test     esi, esi
00d9f027 jne      0xd9f02b
00d9f029 mov      esi, eax
00d9f02b mov      ecx, dword ptr [esp + 0x10]
00d9f02f mov      eax, dword ptr [esi]
00d9f031 mov      eax, dword ptr [eax + 0xc]
00d9f034 push     ecx
00d9f035 push     ebp
00d9f036 mov      edx, edi
00d9f038 mov      ecx, esi
00d9f03a call     eax
00d9f03c pop      esi
00d9f03d pop      edi
00d9f03e pop      ebp
00d9f03f ret      4
00d9f042 int3     
00d9f043 int3     
00d9f044 int3     
00d9f045 int3     
00d9f046 int3     
00d9f047 int3     
00d9f048 int3     
00d9f049 int3     
00d9f04a int3     
00d9f04b int3     
00d9f04c int3     
00d9f04d int3     
00d9f04e int3     
00d9f04f int3     
00d9f050 push     esi
00d9f051 push     edi
00d9f052 mov      esi, ecx
00d9f054 mov      edi, edx
00d9f056 lea      edx, [esi + 0x1ac]
00d9f05c call     0xd9cd30
00d9f061 test     eax, eax
00d9f063 jne      0xd9f06b
00d9f065 mov      dword ptr [edi + 4], eax
00d9f068 pop      edi
00d9f069 pop      esi
00d9f06a ret      
00d9f06b mov      ecx, dword ptr [esi + 0x70]
00d9f06e lea      eax, [ecx + eax + 0x20]
00d9f072 mov      dword ptr [edi + 4], eax
00d9f075 pop      edi
00d9f076 pop      esi
00d9f077 ret      
00d9f078 int3     
00d9f079 int3     
00d9f07a int3     
00d9f07b int3     
00d9f07c int3     
00d9f07d int3     
00d9f07e int3     
00d9f07f int3     
PINNED WINDOW 00d92e60..00d93000 (may include neighboring functions)
00d92e60 push     esi
00d92e61 push     edi
00d92e62 mov      esi, edx
00d92e64 mov      edi, ecx
00d92e66 call     0x4dff60
00d92e6b test     eax, eax
00d92e6d jne      0xd92e74
00d92e6f pop      edi
00d92e70 pop      esi
00d92e71 ret      8
00d92e74 mov      ecx, dword ptr [esp + 0x10]
00d92e78 mov      edx, dword ptr [esp + 0xc]
00d92e7c push     ebx
00d92e7d mov      ebx, dword ptr [eax]
00d92e7f push     ecx
00d92e80 push     edx
00d92e81 push     0
00d92e83 mov      ecx, eax
00d92e85 mov      eax, dword ptr [ebx + 4]
00d92e88 push     esi
00d92e89 mov      edx, edi
00d92e8b call     eax
00d92e8d pop      ebx
00d92e8e pop      edi
00d92e8f pop      esi
00d92e90 ret      8
00d92e93 int3     
00d92e94 int3     
00d92e95 int3     
00d92e96 int3     
00d92e97 int3     
00d92e98 int3     
00d92e99 int3     
00d92e9a int3     
00d92e9b int3     
00d92e9c int3     
00d92e9d int3     
00d92e9e int3     
00d92e9f int3     
00d92ea0 push     esi
00d92ea1 mov      esi, ecx
00d92ea3 call     0x4dff60
00d92ea8 cmp      dword ptr [eax + 4], 0x968ec1e2
00d92eaf jne      0xd92eb8
00d92eb1 mov      ecx, eax
00d92eb3 call     0xda2cc0
00d92eb8 mov      eax, dword ptr [eax + 4]
00d92ebb cmp      eax, 0x93d82b95
00d92ec0 je       0xd92ef1
00d92ec2 cmp      eax, 0xdebe7899
00d92ec7 je       0xd92ee4
00d92ec9 push     edi
00d92eca call     0x4dff60
00d92ecf mov      edi, dword ptr [eax]
00d92ed1 push     0x4c
00d92ed3 mov      ecx, eax
00d92ed5 mov      eax, dword ptr [edi + 0xc]
00d92ed8 push     0x9e8e4104
00d92edd mov      edx, esi
00d92edf call     eax
00d92ee1 pop      edi
00d92ee2 pop      esi
00d92ee3 ret      
00d92ee4 push     0
00d92ee6 xor      edx, edx
00d92ee8 mov      ecx, esi
00d92eea call     0xe08670
00d92eef pop      esi
00d92ef0 ret      
00d92ef1 push     0
00d92ef3 xor      edx, edx
00d92ef5 mov      ecx, esi
00d92ef7 call     0xd9efe0
00d92efc pop      esi
00d92efd ret      
00d92efe int3     
00d92eff int3     
00d92f00 cmp      word ptr [ecx], 0
00d92f04 mov      eax, ecx
00d92f06 je       0xd92f19
00d92f08 jmp      0xd92f10
00d92f0a lea      ebx, [ebx]
00d92f10 add      eax, 2
00d92f13 cmp      word ptr [eax], 0
00d92f17 jne      0xd92f10
00d92f19 sub      eax, ecx
00d92f1b sar      eax, 1
00d92f1d ret      
00d92f1e int3     
00d92f1f int3     
00d92f20 cmp      word ptr [ecx], 0
00d92f24 mov      eax, ecx
00d92f26 je       0xd92f39
00d92f28 jmp      0xd92f30
00d92f2a lea      ebx, [ebx]
00d92f30 add      eax, 2
00d92f33 cmp      word ptr [eax], 0
00d92f37 jne      0xd92f30
00d92f39 sub      eax, ecx
00d92f3b sar      eax, 1
00d92f3d lea      eax, [eax + eax + 2]
00d92f41 ret      
00d92f42 int3     
00d92f43 int3     
00d92f44 int3     
00d92f45 int3     
00d92f46 int3     
00d92f47 int3     
00d92f48 int3     
00d92f49 int3     
00d92f4a int3     
00d92f4b int3     
00d92f4c int3     
00d92f4d int3     
00d92f4e int3     
00d92f4f int3     
00d92f50 push     esi
00d92f51 movzx    esi, word ptr [edx]
00d92f54 mov      eax, ecx
00d92f56 test     si, si
00d92f59 je       0xd92f73
00d92f5b push     edi
00d92f5c mov      edi, edx
00d92f5e sub      edi, ecx
00d92f60 mov      word ptr [eax], si
00d92f63 movzx    edx, word ptr [edi + eax + 2]
00d92f68 add      eax, 2
00d92f6b mov      esi, edx
00d92f6d test     dx, dx
00d92f70 jne      0xd92f60
00d92f72 pop      edi
00d92f73 xor      edx, edx
00d92f75 mov      word ptr [eax], dx
00d92f78 sub      eax, ecx
00d92f7a sar      eax, 1
00d92f7c pop      esi
00d92f7d ret      
00d92f7e int3     
00d92f7f int3     
00d92f80 push     esi
00d92f81 mov      esi, dword ptr [esp + 8]
00d92f85 mov      eax, ecx
00d92f87 cmp      esi, 1
00d92f8a jle      0xd92fa7
00d92f8c push     edi
00d92f8d mov      edi, edx
00d92f8f sub      edi, ecx
00d92f91 movzx    edx, word ptr [edi + eax]
00d92f95 test     dx, dx
00d92f98 je       0xd92fa6
00d92f9a mov      word ptr [eax], dx
00d92f9d dec      esi
00d92f9e add      eax, 2
00d92fa1 cmp      esi, 1
00d92fa4 jg       0xd92f91
00d92fa6 pop      edi
00d92fa7 xor      edx, edx
00d92fa9 mov      word ptr [eax], dx
00d92fac sub      eax, ecx
00d92fae sar      eax, 1
00d92fb0 pop      esi
00d92fb1 ret      4
00d92fb4 int3     
00d92fb5 int3     
00d92fb6 int3     
00d92fb7 int3     
00d92fb8 int3     
00d92fb9 int3     
00d92fba int3     
00d92fbb int3     
00d92fbc int3     
00d92fbd int3     
00d92fbe int3     
00d92fbf int3     
00d92fc0 sub      esp, 0xc
00d92fc3 mov      eax, dword ptr [esp + 0x10]
00d92fc7 push     ebp
00d92fc8 mov      ebp, ecx
00d92fca lea      ecx, [ebp + eax*2]
00d92fce push     esi
00d92fcf lea      eax, [edx + eax*2]
00d92fd2 push     edi
00d92fd3 mov      esi, ebp
00d92fd5 mov      dword ptr [esp + 0xc], ecx
00d92fd9 mov      dword ptr [esp + 0x10], eax
00d92fdd mov      edi, 0xfffffffe
00d92fe2 cmp      ecx, ebp
00d92fe4 jae      0xd92fec
00d92fe6 mov      dword ptr [esp + 0xc], edi
00d92fea mov      ecx, edi
00d92fec cmp      eax, edx
00d92fee jae      0xd92ff4
00d92ff0 mov      dword ptr [esp + 0x10], edi
00d92ff4 cmp      ebp, ecx
00d92ff6 jae      0xd9300f
00d92ff8 movzx    eax, word ptr [esi]
00d92ffb cmp      ax, word ptr [edx]
00d92ffe jne      0xd9300f
PINNED WINDOW 00da2540..00da2620 (may include neighboring functions)
00da2540 push     ebx
00da2541 push     esi
00da2542 mov      esi, ecx
00da2544 push     edi
00da2545 mov      edi, dword ptr [esi + 0x30]
00da2548 mov      ecx, edi
00da254a mov      ebx, edx
00da254c call     0xda1c90
00da2551 mov      edx, dword ptr [esp + 0x1c]
00da2555 mov      ecx, dword ptr [esi + 0x34]
00da2558 mov      eax, dword ptr [ecx]
00da255a mov      eax, dword ptr [eax + 4]
00da255d push     edx
00da255e mov      edx, dword ptr [esp + 0x1c]
00da2562 push     edx
00da2563 mov      edx, dword ptr [esp + 0x1c]
00da2567 push     edx
00da2568 mov      edx, dword ptr [esp + 0x1c]
00da256c push     edx
00da256d mov      edx, ebx
00da256f call     eax
00da2571 mov      ecx, edi
00da2573 mov      esi, eax
00da2575 call     0xda1cb0
00da257a pop      edi
00da257b mov      eax, esi
00da257d pop      esi
00da257e pop      ebx
00da257f ret      0x10
00da2582 int3     
00da2583 int3     
00da2584 int3     
00da2585 int3     
00da2586 int3     
00da2587 int3     
00da2588 int3     
00da2589 int3     
00da258a int3     
00da258b int3     
00da258c int3     
00da258d int3     
00da258e int3     
00da258f int3     
00da2590 push     ebx
00da2591 push     esi
00da2592 mov      esi, ecx
00da2594 push     edi
00da2595 mov      edi, dword ptr [esi + 0x30]
00da2598 mov      ecx, edi
00da259a mov      ebx, edx
00da259c call     0xda1c90
00da25a1 mov      edx, dword ptr [esp + 0x20]
00da25a5 mov      ecx, dword ptr [esi + 0x34]
00da25a8 mov      eax, dword ptr [ecx]
00da25aa mov      eax, dword ptr [eax + 8]
00da25ad push     edx
00da25ae mov      edx, dword ptr [esp + 0x20]
00da25b2 push     edx
00da25b3 mov      edx, dword ptr [esp + 0x20]
00da25b7 push     edx
00da25b8 mov      edx, dword ptr [esp + 0x20]
00da25bc push     edx
00da25bd mov      edx, dword ptr [esp + 0x20]
00da25c1 push     edx
00da25c2 mov      edx, ebx
00da25c4 call     eax
00da25c6 mov      ecx, edi
00da25c8 mov      esi, eax
00da25ca call     0xda1cb0
00da25cf pop      edi
00da25d0 mov      eax, esi
00da25d2 pop      esi
00da25d3 pop      ebx
00da25d4 ret      0x14
00da25d7 int3     
00da25d8 int3     
00da25d9 int3     
00da25da int3     
00da25db int3     
00da25dc int3     
00da25dd int3     
00da25de int3     
00da25df int3     
00da25e0 push     ebx
00da25e1 push     esi
00da25e2 mov      esi, ecx
00da25e4 push     edi
00da25e5 mov      edi, dword ptr [esi + 0x30]
00da25e8 mov      ecx, edi
00da25ea mov      ebx, edx
00da25ec call     0xda1c90
00da25f1 mov      edx, dword ptr [esp + 0x14]
00da25f5 mov      ecx, dword ptr [esi + 0x34]
00da25f8 mov      eax, dword ptr [ecx]
00da25fa mov      eax, dword ptr [eax + 0xc]
00da25fd push     edx
00da25fe mov      edx, dword ptr [esp + 0x14]
00da2602 push     edx
00da2603 mov      edx, ebx
00da2605 call     eax
00da2607 mov      ecx, edi
00da2609 call     0xda1cb0
00da260e pop      edi
00da260f pop      esi
00da2610 pop      ebx
00da2611 ret      8
00da2614 int3     
00da2615 int3     
00da2616 int3     
00da2617 int3     
00da2618 int3     
00da2619 int3     
00da261a int3     
00da261b int3     
00da261c int3     
00da261d int3     
00da261e int3     
00da261f int3     
PINNED WINDOW 00d9f0b0..00d9f3b0 (may include neighboring functions)
00d9f0b0 push     ecx
00d9f0b1 push     esi
00d9f0b2 mov      dword ptr [esp + 4], edx
00d9f0b6 mov      esi, ecx
00d9f0b8 test     edx, edx
00d9f0ba jne      0xd9f0e0
00d9f0bc mov      eax, dword ptr [esp + 0x1c]
00d9f0c0 mov      ecx, dword ptr [esp + 0x18]
00d9f0c4 mov      edx, dword ptr [esp + 0x14]
00d9f0c8 push     eax
00d9f0c9 mov      eax, dword ptr [esp + 0x14]
00d9f0cd push     ecx
00d9f0ce push     edx
00d9f0cf mov      edx, dword ptr [esp + 0x18]
00d9f0d3 push     eax
00d9f0d4 mov      ecx, esi
00d9f0d6 call     0xd9e470
00d9f0db pop      esi
00d9f0dc pop      ecx
00d9f0dd ret      0x14
00d9f0e0 push     edi
00d9f0e1 mov      edi, dword ptr [esp + 0x18]
00d9f0e5 test     edi, edi
00d9f0e7 jne      0xd9f0f7
00d9f0e9 call     0xda2e20
00d9f0ee mov      ecx, dword ptr [eax + 8]
00d9f0f1 mov      dword ptr [esp + 0x18], ecx
00d9f0f5 mov      edi, ecx
00d9f0f7 push     ebx
00d9f0f8 mov      ebx, dword ptr [esp + 0x18]
00d9f0fc test     ebx, ebx
00d9f0fe jne      0xd9f114
00d9f100 mov      ecx, esi
00d9f102 call     0xda2e20
00d9f107 mov      ebx, dword ptr [eax + 4]
00d9f10a cmp      ebx, 4
00d9f10d jge      0xd9f114
00d9f10f mov      ebx, 4
00d9f114 push     ebp
00d9f115 mov      ebp, dword ptr [esi + 0x1d8]
00d9f11b test     ebp, ebp
00d9f11d je       0xd9f162
00d9f11f cmp      byte ptr [esi + 0x7d], 0
00d9f123 jne      0xd9f162
00d9f125 mov      edx, dword ptr [esi + 0x70]
00d9f128 mov      ecx, dword ptr [esp + 0x10]
00d9f12c call     0xd9dc20
00d9f131 cmp      eax, esi
00d9f133 je       0xd9f162
00d9f135 mov      ecx, dword ptr [esp + 0x28]
00d9f139 mov      edx, dword ptr [esp + 0x24]
00d9f13d push     ecx
00d9f13e push     edx
00d9f13f mov      edx, dword ptr [esp + 0x18]
00d9f143 push     edi
00d9f144 mov      edi, dword ptr [esp + 0x24]
00d9f148 mov      byte ptr [esi + 0x7d], 1
00d9f14c mov      eax, dword ptr [ebp]
00d9f14f mov      eax, dword ptr [eax + 8]
00d9f152 push     ebx
00d9f153 push     edi
00d9f154 mov      ecx, ebp
00d9f156 call     eax
00d9f158 mov      ebp, dword ptr [esp + 0x10]
00d9f15c mov      byte ptr [esi + 0x7d], 0
00d9f160 jmp      0xd9f184
00d9f162 mov      ecx, dword ptr [esp + 0x28]
00d9f166 mov      edx, dword ptr [esp + 0x24]
00d9f16a mov      ebp, dword ptr [esp + 0x10]
00d9f16e push     edi
00d9f16f mov      edi, dword ptr [esp + 0x1c]
00d9f173 push     1
00d9f175 push     ecx
00d9f176 push     edx
00d9f177 push     ebx
00d9f178 push     edi
00d9f179 push     0
00d9f17b mov      edx, ebp
00d9f17d mov      ecx, esi
00d9f17f call     0xd9e950
00d9f184 test     eax, eax
00d9f186 jne      0xd9f227
00d9f18c mov      eax, dword ptr [esp + 0x28]
00d9f190 mov      ecx, dword ptr [esp + 0x24]
00d9f194 mov      edx, dword ptr [esp + 0x20]
00d9f198 push     eax
00d9f199 push     ecx
00d9f19a push     edx
00d9f19b push     ebx
00d9f19c mov      edx, edi
00d9f19e mov      ecx, esi
00d9f1a0 call     0xd9e470
00d9f1a5 mov      dword ptr [esp + 0x20], eax
00d9f1a9 test     eax, eax
00d9f1ab jne      0xd9f1cc
00d9f1ad mov      ecx, dword ptr [esp + 0x28]
00d9f1b1 mov      edx, dword ptr [esp + 0x24]
00d9f1b5 mov      eax, dword ptr [esi]
00d9f1b7 mov      eax, dword ptr [eax + 0xc]
00d9f1ba push     ecx
00d9f1bb push     edx
00d9f1bc mov      edx, ebp
00d9f1be mov      ecx, esi
00d9f1c0 call     eax
00d9f1c2 pop      ebp
00d9f1c3 pop      ebx
00d9f1c4 pop      edi
00d9f1c5 xor      eax, eax
00d9f1c7 pop      esi
00d9f1c8 pop      ecx
00d9f1c9 ret      0x14
00d9f1cc mov      ebx, ebp
00d9f1ce sub      ebx, dword ptr [esi + 0x70]
00d9f1d1 sub      ebx, 0x20
00d9f1d4 cmp      dword ptr [esi + 0x74], 1
00d9f1d8 jle      0xd9f1e8
00d9f1da mov      edx, ebx
00d9f1dc mov      ecx, esi
00d9f1de call     0xd9cbc0
00d9f1e3 test     eax, eax
00d9f1e5 jne      0xd9f1e8
00d9f1e7 int3     
00d9f1e8 mov      eax, dword ptr [esi + 0x70]
00d9f1eb lea      ecx, [eax + eax + 0x20]
00d9f1ef mov      eax, dword ptr [ebx + 4]
00d9f1f2 sub      eax, ecx
00d9f1f4 sub      eax, ebx
00d9f1f6 test     edi, edi
00d9f1f8 je       0xd9f210
00d9f1fa test     eax, eax
00d9f1fc je       0xd9f210
00d9f1fe cmp      eax, edi
00d9f200 jb       0xd9f204
00d9f202 mov      eax, edi
00d9f204 mov      ecx, dword ptr [esp + 0x20]
00d9f208 push     eax
00d9f209 mov      edx, ebp
00d9f20b call     0xd958b0
00d9f210 mov      edx, dword ptr [esp + 0x28]
00d9f214 mov      eax, dword ptr [esp + 0x24]
00d9f218 push     edx
00d9f219 push     eax
00d9f21a mov      edx, ebp
00d9f21c mov      ecx, esi
00d9f21e call     0xd9ee50
00d9f223 mov      eax, dword ptr [esp + 0x20]
00d9f227 pop      ebp
00d9f228 pop      ebx
00d9f229 pop      edi
00d9f22a pop      esi
00d9f22b pop      ecx
00d9f22c ret      0x14
00d9f22f int3     
00d9f230 push     ebp
00d9f231 mov      ebp, esp
00d9f233 and      esp, 0xfffffff0
00d9f236 sub      esp, 0x264
00d9f23c mov      eax, dword ptr [ebp + 8]
00d9f23f push     ebx
00d9f240 mov      dword ptr [esp + 0x14], ecx
00d9f244 push     esi
00d9f245 lea      ecx, [eax - 2]
00d9f248 push     edi
00d9f249 mov      esi, edx
00d9f24b cmp      ecx, 0xe
00d9f24e ja       0xd9f351
00d9f254 cmp      dword ptr [ebp + 0x1c], 0
00d9f258 je       0xd9f274
00d9f25a cmp      dword ptr [ebp + 0xc], 0
00d9f25e je       0xd9f26a
00d9f260 mov      dword ptr [esp + 0x18], 0x213b09c
00d9f268 jmp      0xd9f28a
00d9f26a mov      dword ptr [esp + 0x18], 0x213b0c0
00d9f272 jmp      0xd9f28a
00d9f274 cmp      dword ptr [ebp + 0xc], 0
00d9f278 mov      dword ptr [esp + 0x18], 0x213b0e4
00d9f280 jne      0xd9f28a
00d9f282 mov      dword ptr [esp + 0x18], 0x213b108
00d9f28a cdq      
00d9f28b xorpd    xmm0, xmm0
00d9f28f movlpd   qword ptr [esp + 0x38], xmm0
00d9f295 movaps   xmm0, xmmword ptr [esi]
00d9f298 mov      dword ptr [esp + 0x34], edx
00d9f29c mov      edx, dword ptr [ebp + 0x10]
00d9f29f lea      esi, [esp + 0x26a]
00d9f2a6 mov      dword ptr [esp + 0x30], eax
00d9f2aa lea      eax, [edx + edx]
00d9f2ad mov      edi, esi
00d9f2af sub      edi, eax
00d9f2b1 lea      ecx, [esp + 0x68]
00d9f2b5 movaps   xmmword ptr [esp + 0x20], xmm0
00d9f2ba mov      ebx, 1
00d9f2bf cmp      edi, ecx
00d9f2c1 jae      0xd9f2c5
00d9f2c3 mov      edi, ecx
00d9f2c5 movaps   xmm0, xmmword ptr [esp + 0x20]
00d9f2ca lea      edx, [esp + 0x40]
00d9f2ce push     edx
00d9f2cf lea      eax, [esp + 0x24]
00d9f2d3 push     eax
00d9f2d4 lea      edx, [esp + 0x38]
00d9f2d8 lea      ecx, [esp + 0x58]
00d9f2dc movaps   xmmword ptr [esp + 0x58], xmm0
00d9f2e1 call     0xe00200
00d9f2e6 mov      ecx, dword ptr [esp + 0x40]
00d9f2ea mov      edx, dword ptr [esp + 0x18]
00d9f2ee mov      ax, word ptr [edx + ecx*2]
00d9f2f2 mov      ecx, dword ptr [esp + 0x28]
00d9f2f6 sub      esi, 2
00d9f2f9 or       ecx, dword ptr [esp + 0x2c]
00d9f2fd mov      word ptr [esi], ax
00d9f300 jne      0xd9f310
00d9f302 mov      edx, dword ptr [esp + 0x20]
00d9f306 or       edx, dword ptr [esp + 0x24]
00d9f30a jne      0xd9f310
00d9f30c cmp      edi, esi
00d9f30e jae      0xd9f338
00d9f310 lea      eax, [esp + 0x68]
00d9f314 cmp      esi, eax
00d9f316 jbe      0xd9f338
00d9f318 mov      eax, dword ptr [ebp + 0x14]
00d9f31b test     eax, eax
00d9f31d je       0xd9f330
00d9f31f cmp      ebx, eax
00d9f321 jl       0xd9f32f
00d9f323 mov      cx, word ptr [ebp + 0x18]
00d9f327 sub      esi, 2
00d9f32a mov      word ptr [esi], cx
00d9f32d sub      ebx, eax
00d9f32f inc      ebx
00d9f330 lea      edx, [esp + 0x68]
00d9f334 cmp      esi, edx
00d9f336 ja       0xd9f2c5
00d9f338 mov      ecx, dword ptr [esp + 0x1c]
00d9f33c mov      eax, dword ptr [ecx]
00d9f33e mov      eax, dword ptr [eax + 0x18]
00d9f341 lea      edx, [esp + 0x26a]
00d9f348 sub      edx, esi
00d9f34a sar      edx, 1
00d9f34c push     edx
00d9f34d mov      edx, esi
00d9f34f call     eax
00d9f351 pop      edi
00d9f352 pop      esi
00d9f353 pop      ebx
00d9f354 mov      esp, ebp
00d9f356 pop      ebp
00d9f357 ret      0x18
00d9f35a int3     
00d9f35b int3     
00d9f35c int3     
00d9f35d int3     
00d9f35e int3     
00d9f35f int3     
00d9f360 push     ebp
00d9f361 mov      ebp, esp
00d9f363 and      esp, 0xfffffff0
00d9f366 sub      esp, 0x10
00d9f369 mov      eax, dword ptr [ebp + 8]
00d9f36c mov      dword ptr [esp], eax
00d9f36f mov      eax, dword ptr [ebp + 0xc]
00d9f372 mov      dword ptr [esp + 4], eax
00d9f376 mov      eax, dword ptr [ebp + 0x20]
00d9f379 push     eax
00d9f37a mov      eax, dword ptr [ebp + 0x1c]
00d9f37d push     eax
00d9f37e mov      eax, dword ptr [ebp + 0x18]
00d9f381 push     eax
00d9f382 mov      eax, dword ptr [ebp + 0x14]
00d9f385 push     eax
00d9f386 mov      eax, dword ptr [ebp + 0x10]
00d9f389 push     eax
00d9f38a push     edx
00d9f38b xorpd    xmm0, xmm0
00d9f38f lea      edx, [esp + 0x18]
00d9f393 movlpd   qword ptr [esp + 0x20], xmm0
00d9f399 call     0xd9f230
00d9f39e mov      esp, ebp
00d9f3a0 pop      ebp
00d9f3a1 ret      0x1c
00d9f3a4 int3     
00d9f3a5 int3     
00d9f3a6 int3     
00d9f3a7 int3     
00d9f3a8 int3     
00d9f3a9 int3     
00d9f3aa int3     
00d9f3ab int3     
00d9f3ac int3     
00d9f3ad int3     
00d9f3ae int3     
00d9f3af int3     
