Function at 0x4499e0
Capabilities:
Hide graphical window

Disassembly:
push 0xffffffffffffffff
push 0x46522b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x7c
push ebx
push ebp
push esi
xor esi, esi
push edi
mov ebp, ecx
mov dword [esp + 0x24], esi
push 1
push 1
push 0x18
push 0x18
push 0x64
mov dword [esp + 0xa8], esi
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
push ecx
mov ebx, eax
mov eax, esp
lea ecx, [esp + 0x28]
mov dword [esp + 0x38], esp
mov dword [eax], 0xcc
call fcn.0040bc30
mov eax, dword [esp + 0x24]
push esi
push eax
push ebx
call dword [sym.imp.COMCTL32.dll_ImageList_Add]
mov ecx, dword [esp + 0x24]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp eax, esi
je 0x449a53
mov dword [esp + 0x24], esi
mov edx, dword [ebp + 4]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 1
push edx
call esi
lea edi, [ebp + 0x94]
push eax
mov ecx, edi
call fcn.0040cf30
test eax, eax
je 0x449a7a
mov ecx, edi
call fcn.0040c7d0
mov dword [edi + 0x24], ebx
mov al, byte [edi + 0x20]
test al, 8
je 0x449a99
mov eax, dword [edi + 4]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x449a99
mov ecx, edi
call fcn.0040c570
mov eax, 1
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], eax
mov dword [edi + 0x30], 2
mov dword [edi + 0x34], 4
mov dword [edi + 0x20], eax
mov ecx, dword [ebp + 4]
push 2
push ecx
call esi
lea edi, [ebp + 0xdc]
push eax
mov ecx, edi
call fcn.0040cf30
test eax, eax
je 0x449ada
mov ecx, edi
call fcn.0040c7d0
mov dword [edi + 0x24], ebx
mov al, byte [edi + 0x20]
test al, 8
je 0x449af9
mov edx, dword [edi + 4]
push edx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x449af9
mov ecx, edi
call fcn.0040c570
mov ebx, 1
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], ebx
mov dword [edi + 0x30], 2
mov dword [edi + 0x34], 4
mov dword [edi + 0x20], ebx
mov eax, dword [ebp + 4]
push 0xcb
push eax
call esi
push 0x640000
push 0
push 0x401
push eax
mov dword [ebp + 0x37c], eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp + 4]
push 0
push 0x1f4
push ebx
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
mov edx, dword [ebp + 4]
mov ebx, dword [sym.imp.USER32.dll_SetWindowTextW]
push 0x470084
push edx
call ebx
push 0x46f180
push 0x20
push 0
push 0
push 0
push 0x86
mov edi, dword [sym.imp.GDI32.dll_CreateFontW]
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xfffffffffffffff4
call edi
push 0x46f180
push 0x20
push 0
push 0
push 0
push 0x86
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0xc
mov dword [ebp + 0x124], eax
call edi
mov dword [ebp + 0x128], eax
mov eax, dword [ebp + 4]
push 0x40c
push eax
call esi
mov edx, dword [ebp + 0x148]
lea edi, [ebp + 0x148]
push edi
mov ecx, edi
mov dword [esp + 0x34], eax
call dword [edx + 4]
push eax
lea ecx, [edi + 8]
call fcn.0040bc80
lea eax, [edi + 8]
push eax
mov eax, dword [esp + 0x34]
push 0xfffffffffffffffc
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
je 0x449c09
mov ecx, dword [esp + 0x30]
mov dword [edi + 0x1c], eax
mov dword [edi + 4], ecx
push 0xc
push 1
push 0
mov ecx, edi
call fcn.0042b010
mov edx, dword [ebp + 4]
push 0x409
push edx
call esi
lea edi, [ebp + 0x174]
mov dword [esp + 0x30], eax
push edi
mov ecx, edi
mov eax, dword [edi]
call dword [eax + 4]
push eax
lea ecx, [edi + 8]
call fcn.0040bc80
mov ecx, dword [esp + 0x30]
lea eax, [edi + 8]
push eax
push 0xfffffffffffffffc
push ecx
call dword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
je 0x449c5b
mov edx, dword [esp + 0x30]
mov dword [edi + 0x1c], eax
mov dword [edi + 4], edx
push 0xfffffffffffffff4
push 0
push 0xff
mov ecx, edi
call fcn.0042b010
mov eax, dword [ebp + 4]
push 0x40a
push eax
call esi
mov edx, dword [ebp + 0x1a0]
lea edi, [ebp + 0x1a0]
push edi
mov ecx, edi
mov dword [esp + 0x34], eax
call dword [edx + 4]
push eax
lea ecx, [edi + 8]
call fcn.0040bc80
lea eax, [edi + 8]
push eax
mov eax, dword [esp + 0x34]
push 0xfffffffffffffffc
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
je 0x449cb4
mov ecx, dword [esp + 0x30]
mov dword [edi + 0x1c], eax
mov dword [edi + 4], ecx
push 0xfffffffffffffff4
push 1
push 0xff
mov ecx, edi
call fcn.0042b010
mov edx, dword [0x46f42c]
push ecx
mov eax, esp
mov dword [esp + 0x38], esp
mov dword [esp + 0x34], eax
mov dword [eax], edx
mov eax, 0x47a15c
test eax, eax
je 0x449d3f
mov ecx, eax
shr ecx, 0x10
jne 0x449cfd
mov ecx, dword [esp + 0x34]
xor eax, eax
mov edx, 0x47a15c
mov ax, dx
push eax
call fcn.00407c70
jmp 0x449d3f
push 0x47a15c
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
mov dword [esp + 0x38], eax
je 0x449d3f
mov ecx, dword [esp + 0x34]
push eax
call fcn.00408040
test eax, eax
je 0x449d3f
mov eax, dword [esp + 0x38]
lea ecx, [eax + eax]
lea edx, [eax + eax + 2]
mov eax, dword [esp + 0x34]
push ecx
push 0x47a15c
push edx
mov ecx, dword [eax]
push ecx
call fcn.00407060
add esp, 0x10
mov ecx, edi
call fcn.0042b090
mov edx, dword [ebp + 4]
xor eax, eax
push 0x3ea
push edx
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
call esi
lea ecx, [esp + 0x7c]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp + 4]
mov edi, dword [sym.imp.USER32.dll_ScreenToClient]
lea edx, [esp + 0x7c]
push edx
push eax
call edi
test eax, eax
je 0x449d9e
mov edx, dword [ebp + 4]
lea ecx, [esp + 0x84]
push ecx
push edx
call edi
mov eax, dword [ebp + 4]
lea edi, [ebp + 0x264]
mov dword [esp + 0x34], eax
mov eax, dword [0x473700]
test eax, eax
jne 0x449dbe
mov dword [0x473700], 0
lea ecx, [edi + 0x1c]
push ecx
push 0x4736d0
push 0x47b7a0
call fcn.00421590
push 0
push eax
mov eax, dword [esp + 0x3c]
push 0x25a
push 0
push 0x50000000
lea edx, [esp + 0x90]
push 0x47a15c
push edx
push eax
mov ecx, edi
call fcn.00422040
mov eax, dword [ebp + 0x368]
mov ecx, dword [ebp + 0x268]
push eax
push ecx
call ebx
mov edx, dword [ebp + 4]
push 0x40b
push edx
call esi
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call edi
mov eax, dword [ebp + 4]
push 0x40a
push eax
call esi
push 0
push eax
call edi
mov ecx, dword [ebp + 4]
push 0xd4
push ecx
call esi
mov ecx, dword [ebp + 0x364]
push ecx
push eax
call ebx
mov edx, dword [ebp + 4]
push 0x3ea
push edx
call esi
mov ecx, dword [ebp + 0x368]
push ecx
push eax
call ebx
push ecx
lea ecx, [ebp + 0x378]
mov eax, esp
mov dword [esp + 0x38], esp
mov dword [eax], 0xe4
call fcn.0040bc30
mov eax, dword [ebp + 4]
push 0x407
push eax
call esi
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 1
push 0xf1
push eax
call edi
mov ecx, dword [ebp + 4]
push 0x3fb
push ecx
call esi
mov ecx, dword [ebp + 0x128]
push 1
lea ebx, [ebp + 0x134]
push ecx
push 0x30
push eax
mov dword [ebx], eax
call edi
mov esi, dword [ebx]
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
or al, 0x20
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov edx, dword [0x46f42c]
mov dword [esp + 0x18], edx
lea eax, [esp + 0x18]
lea esi, [ebp + 0x13c]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push esi
mov byte [esp + 0xa0], 1
call fcn.00407110
mov ecx, ebp
call fcn.00449530
test eax, eax
jne 0x449f1c
mov eax, dword [esi]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov edi, eax
test edi, edi
je 0x449f11
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push edi
push eax
lea ecx, [esp + 0x20]
call fcn.004080a0
mov ecx, dword [0x46f42c]
mov dword [esp + 0x2c], ecx
lea edx, [esp + 0x2c]
mov byte [esp + 0x94], 2
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push esi
call fcn.00407110
mov ecx, ebp
call fcn.004496f0
mov al, byte [esp + 0x13]
mov byte [esp + 0x4c], al
xor eax, eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
push ecx
mov ecx, dword [0x46f42c]
mov esi, esp
mov edx, 0x46fa74
test edx, edx
mov byte [esp + 0x98], 3
mov dword [esp + 0x38], esp
mov dword [esi], ecx
je 0x449fd4
mov eax, edx
shr eax, 0x10
jne 0x449f95
xor eax, eax
mov ecx, edx
mov ax, cx
mov ecx, esi
push eax
call fcn.00407c70
jmp 0x449fd4
push 0x46fa74
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
test edi, edi
je 0x449fd4
push edi
mov ecx, esi
call fcn.00408040
test eax, eax
je 0x449fd4
mov eax, dword [esi]
lea ecx, [edi + edi]
lea edx, [edi + edi + 2]
cmp edx, ecx
jb 0x449fd4
mov edi, eax
mov eax, ecx
mov esi, 0x46fa74
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x50]
mov byte [esp + 0x98], 4
push ecx
lea ecx, [ebp + 0x138]
call fcn.0040c4b0
push eax
call fcn.0041b120
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.00407200
mov byte [esp + 0xa0], 3
call fcn.00402610
mov ecx, dword [esp + 0x5c]
add esp, 0xc
test ecx, ecx
je 0x44a028
mov eax, dword [esp + 0x54]
sub eax, ecx
sar eax, 2
cmp eax, 3
jge 0x44a11b
mov edx, dword [0x46f42c]
push ecx
mov edi, esp
mov eax, 0x47a15c
test eax, eax
mov dword [esp + 0x38], esp
mov dword [edi], edx
je 0x44a098
mov ecx, eax
shr ecx, 0x10
jne 0x44a05b
xor eax, eax
mov edx, 0x47a15c
mov ax, dx
mov ecx, edi
push eax
call fcn.00407c70
jmp 0x44a098
push 0x47a15c
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
test esi, esi
je 0x44a098
push esi
mov ecx, edi
call fcn.00408040
test eax, eax
je 0x44a098
mov edi, dword [edi]
lea ecx, [esi + esi]
lea eax, [esi + esi + 2]
cmp eax, ecx
jb 0x44a098
mov edx, ecx
mov esi, 0x47a15c
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp + 0x13c]
mov byte [esp + 0x98], 5
call fcn.0040c4b0
mov edi, dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
call edi
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.00407200
lea ecx, [ebp + 0x368]
mov byte [esp + 0x9c], 6
call fcn.0040c4b0
push eax
call edi
push ecx
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.00407200
push ecx
lea eax, [ebp + 0x138]
mov ecx, esp
mov dword [esp + 0x4c], esp
push eax
mov byte [esp + 0xa8], 7
call fcn.00407110
push 0xffffff
push 1
push ebx
mov ecx, ebp
mov byte [esp + 0xb0], 3
call fcn.0044b910
jmp 0x44a1e3
mov eax, dword [0x46f42c]
push ecx
mov edi, esp
mov ecx, 0x47a15c
test ecx, ecx
mov dword [esp + 0x40], esp
mov dword [edi], eax
je 0x44a185
mov edx, ecx
shr edx, 0x10
jne 0x44a148
xor eax, eax
mov ax, cx
mov ecx, edi
push eax
call fcn.00407c70
jmp 0x44a185
push 0x47a15c
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
test esi, esi
je 0x44a185
push esi
mov ecx, edi
call fcn.00408040
test eax, eax
je 0x44a185
mov edi, dword [edi]
lea ecx, [esi + esi]
lea edx, [esi + esi + 2]
cmp edx, ecx
jb 0x44a185
mov eax, ecx
mov esi, 0x47a15c
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
mov byte [esp + 0xa0], 8
call fcn.00407110
lea ecx, [ebp + 0x368]
mov byte [esp + 0x9c], 9
call fcn.0040c4b0
mov edi, dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
call edi
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00407200
push 0xc2
push 0xffffff
push 1
push ebx
mov ecx, ebp
mov byte [esp + 0xb0], 3
call fcn.0044be10
mov ecx, dword [0x46f42c]
mov dword [esp + 0x14], ecx
mov eax, dword [ebp + 0x13c]
push ecx
mov byte [esp + 0x98], 0xa
mov dword [esp + 0x40], esp
mov edx, dword [eax - 0xc]
mov ebx, esp
test edx, edx
jl 0x44a217
mov dword [ebx], eax
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x44a237
mov dword [ebx], ecx
mov esi, dword [ebp + 0x13c]
test esi, esi
jne 0x44a227
xor eax, eax
jmp 0x44a22e
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push esi
push eax
mov ecx, ebx
call fcn.004080a0
mov ecx, ebp
call fcn.004498c0
cmp eax, 6
ja case.0x44a247.3
jmp dword [eax*4 + 0x44a820]
mov eax, 0x4739e0
test eax, eax
jne 0x44a25d
push eax
jmp 0x44a332
push 0x4739e0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x4739e0
jmp 0x44a332
mov ecx, str.game
test ecx, ecx
jne 0x44a283
xor eax, eax
push ecx
jmp 0x44a332
push str.game
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push str.game
jmp 0x44a332
mov edx, str.bank
test edx, edx
jne 0x44a2a9
xor eax, eax
push edx
jmp 0x44a332
push str.bank
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push str.bank
jmp 0x44a332
mov eax, str.stock
test eax, eax
jne 0x44a2c7
push eax
jmp 0x44a332
push str.stock
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push str.stock
jmp 0x44a332
mov ecx, 0x4739b4
test ecx, ecx
jne 0x44a2e7
xor eax, eax
push ecx
jmp 0x44a332
push 0x4739b4
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x4739b4
jmp 0x44a332
mov edx, 0x4739ac
test edx, edx
jne 0x44a307
xor eax, eax
push edx
jmp 0x44a332
push 0x4739ac
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x4739ac
jmp 0x44a332
mov eax, str.others
test eax, eax
je 0x44a32d
push str.others
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push str.others
push eax
lea ecx, [esp + 0x1c]
call fcn.004080a0
mov ecx, dword [0x46f42c]
mov dword [esp + 0x28], ecx
mov eax, dword [ebp + 0x13c]
mov byte [esp + 0x94], 0xb
push eax
call edi
mov esi, eax
xor edi, edi
cmp esi, edi
jne 0x44a369
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
xor eax, eax
jmp 0x44a372
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
push esi
call ebx
push esi
push eax
lea ecx, [esp + 0x30]
call fcn.004080a0
mov edx, dword [esp + 0x28]
push str.iexplore.exe
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44a3b0
mov eax, 0x4739b4
test eax, eax
je 0x44a3a1
push 0x4739b4
call ebx
push 0x4739b4
push eax
lea ecx, [esp + 0x1c]
call fcn.004080a0
mov ecx, dword [0x46f42c]
mov dword [esp + 0x20], ecx
lea edx, [esp + 0x34]
mov byte [esp + 0x94], 0xc
push edx
call fcn.004063d0
add esp, 4
mov ecx, dword [esp + 0x18]
mov edx, dword [ebp + 0x12c]
mov eax, dword [eax]
push ecx
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [esp + 0x34]
push ecx
push edx
push eax
push str.Boxinject_New
lea ecx, [esp + 0x38]
push str._safebox_customInfo__submodule__s__submodule__pid__s__pid__uid____CDATA__s_____uid__att_tar_type__s__att_tar_type__att_type__d__att_type__soft_name____CDATA__s_____soft_name___safebox_customInfo_
push ecx
mov byte [esp + 0xb4], 0xd
call fcn.004076f0
mov eax, dword [esp + 0x54]
mov ecx, dword [0x46f430]
add esp, 0x20
mov byte [esp + 0x94], 0xc
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x44a43e
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x44a43e
mov eax, dword [esp + 0x34]
add eax, 0xfffffff4
push eax
call fcn.004535f0
add esp, 4
mov eax, dword [ebp + 0x368]
lea esi, [ebp + 0x380]
push eax
mov ecx, esi
call fcn.00441970
mov ecx, dword [0x46f42c]
mov dword [esp + 0x1c], ecx
mov edx, str.safebox_inject
mov byte [esp + 0x94], 0xe
test edx, edx
jne 0x44a471
xor eax, eax
jmp 0x44a478
push str.safebox_inject
call ebx
push str.safebox_inject
push eax
lea ecx, [esp + 0x24]
call fcn.004080a0
mov eax, dword [0x46f42c]
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov eax, str.safebox
mov byte [esp + 0x94], 0x12
test eax, eax
je 0x44a4b0
push str.safebox
call ebx
push str.safebox
push eax
lea ecx, [esp + 0x48]
call fcn.004080a0
push 0x473810
lea ecx, [esp + 0x48]
call fcn.004217b0
push 0x47a15c
lea ecx, [esp + 0x4c]
call fcn.00407430
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x20]
cmp eax, ecx
mov byte [esp + 0x94], 0x13
je 0x44a531
cmp dword [eax - 0xc], edi
jge 0x44a501
mov edx, dword [0x46f430]
add eax, 0xfffffff4
cmp eax, edx
jne 0x44a506
cmp dword [ecx - 0xc], edi
jge 0x44a516
push ecx
mov ecx, dword [ecx - 8]
push ecx
lea ecx, [esp + 0x50]
call fcn.004080a0
jmp 0x44a531
lea ecx, [esp + 0x48]
call fcn.004083e0
mov eax, dword [esp + 0x20]
mov dword [esp + 0x48], eax
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov edx, str.SafeboxTray
test edx, edx
jne 0x44a53e
xor eax, eax
jmp 0x44a545
push str.SafeboxTray
call ebx
push str.SafeboxTray
push eax
lea ecx, [esp + 0x4c]
call fcn.004080a0
mov eax, str.safebox_inject
test eax, eax
je 0x44a564
push str.safebox_inject
call ebx
push str.safebox_inject
push eax
lea ecx, [esp + 0x24]
call fcn.004080a0
push 0x1388
mov ecx, esi
call fcn.00442ae0
lea ecx, [esp + 0x40]
lea edx, [esp + 0x1c]
push ecx
push edx
mov ecx, esi
call fcn.00442ba0
mov ecx, esi
call fcn.00441a60
mov eax, dword [ebp + 4]
push edi
push 0x64
push 2
push eax
call dword [sym.imp.USER32.dll_SetTimer]
mov ecx, dword [ebp + 0xe0]
push 0xfffffffffffffff0
push ecx
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, dword [ebp + 0xe0]
and eax, 0xffff
and al, 0xfe
push 1
push eax
push 0xf4
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp + 4]
lea eax, [esp + 0x6c]
push eax
push ecx
mov dword [esp + 0x64], edi
mov dword [esp + 0x68], edi
mov dword [esp + 0x6c], edi
mov dword [esp + 0x70], edi
mov dword [esp + 0x74], edi
mov dword [esp + 0x78], edi
mov dword [esp + 0x7c], edi
mov dword [esp + 0x80], edi
call dword [sym.imp.USER32.dll_GetClientRect]
lea edx, [esp + 0x5c]
push edi
push edx
push edi
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x5c]
mov ecx, dword [esp + 0x60]
mov ebx, dword [esp + 0x78]
sub eax, edx
mov edx, dword [esp + 0x68]
mov esi, dword [esp + 0x6c]
sub edx, ecx
mov ecx, dword [esp + 0x70]
push 1
sub ecx, ebx
mov ebx, dword [esp + 0x78]
sub eax, ebx
add ecx, edx
push edi
add eax, esi
push edi
push ecx
push eax
mov eax, dword [ebp + 4]
push 0xffffffffffffffff
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [esp + 0x48]
mov edx, dword [0x46f430]
mov byte [esp + 0x94], 0x14
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x44a68b
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x44a691
mov edx, dword [esp + 0x48]
lea eax, [edx - 0xc]
push eax
call fcn.004535f0
add esp, 4
jmp 0x44a691
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea ecx, [esp + 0x44]
call fcn.00408010
lea ecx, [esp + 0x40]
mov byte [esp + 0x94], 0xf
call fcn.00408010
mov eax, dword [esp + 0x1c]
mov edx, dword [0x46f430]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x44a6d6
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x44a6d6
mov edx, dword [esp + 0x1c]
lea eax, [edx - 0xc]
push eax
call fcn.004535f0
add esp, 4
mov eax, dword [esp + 0x20]
mov edx, dword [0x46f430]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x44a701
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x44a701
mov edx, dword [esp + 0x20]
lea eax, [edx - 0xc]
push eax
call fcn.004535f0
add esp, 4
mov eax, dword [esp + 0x28]
mov edx, dword [0x46f430]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x44a72c
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x44a72c
mov edx, dword [esp + 0x28]
lea eax, [edx - 0xc]
push eax
call fcn.004535f0
add esp, 4
mov eax, dword [esp + 0x14]
mov edx, dword [0x46f430]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x44a757
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x44a757
mov edx, dword [esp + 0x14]
lea eax, [edx - 0xc]
push eax
call fcn.004535f0
add esp, 4
mov ebx, dword [esp + 0x54]
mov esi, dword [esp + 0x50]
cmp esi, ebx
mov byte [esp + 0x94], 2
je 0x44a77e
push edi
mov ecx, esi
call fcn.0040af50
add esi, 4
cmp esi, ebx
jne 0x44a76b
mov esi, dword [esp + 0x50]
push esi
call fcn.004535f0
mov eax, dword [esp + 0x30]
mov edx, dword [0x46f430]
add esp, 4
mov dword [esp + 0x50], edi
lea ecx, [eax - 0xc]
mov dword [esp + 0x54], edi
cmp ecx, edx
mov dword [esp + 0x58], edi
je 0x44a7c2
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x44a7c2
mov edx, dword [esp + 0x2c]
add edx, 0xfffffff4
push edx
call fcn.004535f0
add esp, 4
mov eax, dword [esp + 0x18]
mov edx, dword [0x46f430]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x44a7f1
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x44a7f1
mov edx, dword [esp + 0x18]
add edx, 0xfffffff4
push edx
call fcn.004535f0
add esp, 4
mov eax, dword [esp + 0x24]
cmp eax, edi
je 0x44a800
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [esp + 0x8c]
pop edi
pop esi
pop ebp
mov eax, 1
mov dword fs:[0], ecx
pop ebx
add esp, 0x88
ret 8