Function at 0x44a350
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1e8
push ebx
push esi
xor esi, esi
mov dword [ebp - 0xc], 0xb110c93b
inc esi
mov byte [ebp - 0x3d], dl
push edi
mov edi, ecx
mov dword [ebp - 0x34], esi
xor ecx, ecx
mov dword [ebp - 0x28], 0xfffffffb
mov dword [ebp - 0x30], edi
mov dword [ebp - 4], ecx
jmp 0x44a390
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x8c], 0xfbce008f
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x44a37f
mov dword [ebp - 4], ecx
jmp 0x44a3a4
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x68], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x44a39a
mov dword [ebp - 0xc], ecx
jmp 0x44a4ed
mov dword [ebp - 0x18], 0xdf98a59c
mov dword [ebp - 0x48], 0xfffffffd
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x2c], 0xebda1846
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x34], 0xb870004d
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], 0xfffffff5
jle 0x44a4ea
mov dword [ebp - 0x10], 0x509cf13e
mov dword [ebp - 0x38], 0xfffffff9
mov dword [ebp - 0x2c], 3
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], 0x64f6128b
mov dword [ebp - 4], ecx
jmp 0x44a42d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1bc], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x44a420
mov dword [ebp - 4], ecx
jmp 0x44a445
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x88], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x44a438
inc dword [ebp - 0x68]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x68]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
push 0
setne dl
sub edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
inc ecx
neg ecx
sbb ecx, ecx
inc ecx
imul ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
sub eax, 0x5cf1
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
imul edx, eax, 0xf3bb
add edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x8c]
cmp edx, eax
setge cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff5
pop ecx
jg 0x44a3f5
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xffffffe8
jle 0x44a3b1
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x2c], 0x2f4a8b10
mov dword [ebp - 0x14], 0xd21f1eb3
mov dword [ebp - 0xc], ecx
jmp 0x44a522
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x1b0], 0x9ef72d4e
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x44a511
inc dword [ebp - 0x14]
mov dword [ebp - 0x14], ecx
jmp 0x44a53f
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x1b0], ecx
jne 0x44a545
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jle 0x44a530
mov dword [ebp - 0x18], 0x97a888ad
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x2c], 0xfc6c064b
mov dword [ebp - 0xc], ecx
jmp 0x44a56c
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x18c], 0x25062d7b
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x44a55b
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, 0xa5dec4f
setle cl
sub ecx, 8
sub ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
add ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setne dl
xor ecx, ecx
mov dword [ebp - 0x18c], edx
mov eax, dword [ebp - 0x18]
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
cmp eax, ecx
setg dl
imul edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jne 0x44a5c4
mov eax, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x18c]
xor ecx, ecx
mov eax, dword [0x4bea0c]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x24], 0xe5077045
mov dword [ebp - 0x24], 0x8c105a83
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], 0xc0e07525
mov dword [ebp - 0x20], 0x9829cbc2
mov dword [ebp - 0x24], 0x8475761a
mov dword [ebp - 0x48], eax
mov dword [ebx], ecx
mov dword [ebx + 4], ecx
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], ecx
mov dword [ebp - 4], ecx
jmp 0x44a61b
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x54], 0xe0cf5720
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x44a60d
mov dword [ebp - 4], ecx
jmp 0x44a636
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xa0], 0xffffffff
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x44a625
mov dword [ebp - 4], ecx
jmp 0x44a652
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x120], 0xb82c4475
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x44a641
dec dword [ebp - 0x9c]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x54], 0xcd32
jle 0x44a679
mov eax, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x120]
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x1c], 0xfffffffa
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x9c]
setl dl
xor ecx, ecx
cmp eax, edx
setne cl
cmp byte [ebp - 0x3d], 0
mov dword [ebp - 0x24], ecx
je 0x44a97c
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x48], ecx
jne 0x44a97f
mov dword [ebp - 0x10], 0x56915a13
xor ecx, ecx
mov dword [ebp - 0x24], 0x3111
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x38], 0xeca51c18
mov dword [ebp - 0xc], ecx
jmp 0x44a714
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xf8], 2
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x44a703
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], 2
jg 0x44a897
xor ebx, ebx
mov dword [ebp - 4], 0xc6e5c7a0
mov dword [ebp - 0x1c], 0xfffffffe
mov dword [ebp - 0x20], 0xfb6c7178
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], 2
jg 0x44a83d
xor edi, edi
mov dword [ebp - 0x14], 0xf6c74aa0
mov dword [ebp - 0x20], 0xdc509ca4
mov dword [ebp - 0x20], 0xda37b187
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x20], 0xafe2
mov dword [ebp - 0xc], ebx
jmp 0x44a786
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x130], 0x7d7c869b
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x44a775
mov dword [ebp - 0x14], ebx
jmp 0x44a826
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xf8]
mov eax, dword [ebp - 0x10]
cmp eax, 0x2d6273d5
setne cl
xor edx, edx
mov dword [ebp - 0x12c], ecx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
cmp eax, ecx
setg dl
xor eax, eax
cmp edx, 0xf261
setg al
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x12c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
je 0x44a7ff
lea edx, [edi + 1]
cmp dword [ebp - 0x14], ebx
jne 0x44a801
mov edx, ebx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0xf8]
mov eax, dword [ebp - 0x10]
add ecx, edx
mov dword [ebp + eax*4 - 0xf8], ecx
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0xf8], ebx
jne 0x44a830
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jle 0x44a794
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jle 0x44a74d
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
mov dword [ebp - 4], eax
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
cmp edx, eax
setge cl
cmp ecx, 7
jae 0x44a863
mov eax, dword [ebp - 4]
mov dword [ebp - 0xf0], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
xor eax, eax
inc eax
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jle 0x44a729
mov ebx, dword [ebp + 8]
xor ecx, ecx
mov edi, dword [ebp - 0x30]
mov byte [ebp - 5], cl
cmp byte [ebp - 5], 0
je 0x44a8a9
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
xor ecx, ecx
mov dword [ebp - 0xc], 0x4dd03248
push 2
pop eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x34], 0xfffffffb
mov byte [ebp - 5], cl
cmp byte [ebp - 5], 0
mov dword [ebx + 8], 4
je 0x44a8f5
push ecx
call esi
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
xor ecx, ecx
cmp dword [ebp - 0xc], ecx
jne 0x44a956
mov eax, dword [ebp - 0xb4]
xor ecx, ecx
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xb4]
mov edx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xb8]
imul edx, eax
mov eax, dword [ebp - 0xc]
cmp eax, edx
mov eax, dword [ebp - 0xc]
setg cl
xor edx, edx
cmp ecx, eax
setg dl
sub edx, 0xe6f7fbf2
neg edx
sbb edx, edx
inc edx
cmp edx, 0xfffa
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0xb8]
jg 0x44a956
xor ecx, ecx
jmp 0x44a95b
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0xb4]
xor edx, edx
cmp ecx, eax
mov dword [ebx + 0xc], 0x4bea0c
mov eax, dword [ebp - 0x24]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
inc ecx
xor edx, edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x18], edx
jmp 0x44aac5
mov dword [ebp - 0x10], edx
jmp 0x44a9a5
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x140], 0xeb0647dc
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x44a994
mov dword [ebp - 0x10], edx
jmp 0x44a9c1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x148], 0x17c10977
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x44a9b0
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x44a9e5
push edx
push edx
push 0x20b
push edx
push edx
push edx
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
xor ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x13c], 0x14
jmp 0x44aab5
mov dword [ebp - 0x1c], 0x355fff83
mov dword [ebp - 4], edx
jmp 0x44aa11
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1e8], 0xaeb9
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x44aa00
mov dword [ebp - 4], edx
jmp 0x44aa2d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x84], 0xded68044
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x44aa1c
mov dword [ebp - 4], edx
jmp 0x44aa49
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x100], 0x733582f8
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x44aa38
mov dword [ebp - 0x80], edx
jmp 0x44aaa9
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 0xc], edx
jmp 0x44aa70
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x1a4], 0xc67ee39f
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x44aa5f
inc dword [ebp - 0x198]
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x148]
add ecx, eax
jne 0x44aa9b
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x1c]
test eax, eax
jne 0x44aa9b
mov eax, edx
inc ecx
jmp 0x44aaa0
xor ecx, ecx
inc ecx
mov eax, ecx
mov dword [ebp - 0x100], eax
inc dword [ebp - 0x80]
cmp dword [ebp - 0x80], 2
jle 0x44aa53
dec dword [ebp - 0x13c]
cmp dword [ebp - 0x13c], 0xffffffff
jg 0x44a9f4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jg 0x44a98f
cmp edi, dword [ebp - 0x48]
jge 0x44bb9c
mov dword [ebp - 0x10], 0xfffffff9
xor ebx, ebx
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x10], ebx
jmp 0x44aafd
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x114], 0xa473eb90
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x44aaec
mov dword [ebp - 0x10], ebx
jmp 0x44ab19
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xfc], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x44ab08
mov dword [ebp - 0x10], 0xffffffe8
jmp 0x44ab8a
mov dword [ebp - 0x28], 0xffffffff
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x44ab47
push 0x2138
call esi
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
xor ecx, ecx
inc ecx
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jl 0x44ab87
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x114], ebx
je 0x44ab69
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x114], ebx
jne 0x44ab84
jmp 0x44ab7c
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x44ab7c
push 0x1563
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov eax, dword [ebp - 0x28]
dec dword [ebp - 0x28]
jns 0x44ab4f
xor ecx, ecx
inc ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 9
jle 0x44ab27
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], ebx
jl 0x44abb5
mov edx, 0x13244d51
mov dword [ebp - 0xfc], edx
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x114]
dec dword [ebp - 0x10]
jns 0x44ab9d
mov dword [ebp - 0x2c], 0xcec79e67
mov esi, 0x4bea10
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x10], ebx
jmp 0x44abd6
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1c4], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x44abc9
mov dword [ebp - 0x10], ebx
jmp 0x44abf2
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1dc], 0x43cdf98a
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x44abe1
dec dword [ebp - 0x20]
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x44ac0d
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor ecx, ecx
inc ecx
mov dword [ebp - 0x38], ebx
test edi, edi
jle 0x44b297
mov dword [ebp - 4], 5
mov dword [ebp - 0x28], 0xa8cd
mov dword [ebp - 0x2c], 0x34859bb7
mov dword [ebp - 0x1c], 0xd2e6
mov dword [ebp - 0x3c], 0x3f7cfeb4
mov dword [ebp - 0xc], ebx
jmp 0x44ac51
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x98], 0x2487223b
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x44ac40
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp ecx, eax
mov eax, dword [ebp - 4]
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
xor edx, edx
mov dword [ebp - 0x28], ecx
inc edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x2c], 0x3413f087
mov dword [ebp - 0x2c], 8
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x2c], 0x728ad64d
mov dword [ebp - 0x2c], 0xa2589d38
mov dword [ebp - 0x2c], 0x11bd77df
mov dword [ebp - 0x20], 0xfffffffd
mov dword [ebp - 0xc], ebx
jmp 0x44accf
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x168], 0x52324067
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x44acbe
mov dword [ebp - 0x28], 0xfffffffb
cmp dword [ebp - 0x28], 0x24
jle 0x44ad50
mov dword [ebp - 4], ebx
jmp 0x44ad13
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x44ad10
push 0x1691
push ebx
push ebx
push 0x2219
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
inc dword [ebp - 4]
cmp dword [ebp - 4], 7
jne 0x44ace6
mov dword [ebp - 4], 0xffffffe8
jmp 0x44ad3e
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x44ad3b
push 0x16f5
push 0x134f
call dword [sym.imp.USER32.dll_SetCaretPos]
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffe2
jge 0x44ad22
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x24
jg 0x44ace1
xor edx, edx
inc edx
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x94]
imul ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, eax
cmp ecx, dword [ebp - 4]
je 0x44ad7b
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov edi, dword [esi]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x14], 0xafd0
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x18], ebx
jmp 0x44af05
mov dword [ebp - 4], 0xe814b733
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x28], 0x7f03
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x44ade8
push 0x1563
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edx, dword [ebp - 4]
xor ecx, ecx
mov eax, dword [ebp - 4]
sub edx, 7
cmp eax, edx
setl cl
cmp ecx, 0xfffb
jne 0x44aeb0
mov dword [ebp - 0x24], 0x5b49
push 3
mov dword [ebp - 0x20], 0x758e356e
mov dword [ebp - 0xc], ebx
pop edx
jmp 0x44ae2b
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x10c], 0x392f2092
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x44ae1a
cmp dword [ebp - 0x1c], ebx
jne 0x44ae38
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], ebx
jmp 0x44aea8
mov eax, dword [ebp - 4]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x10c]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x10c]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x10c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x10c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
test eax, eax
setle cl
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x28], ebx
jmp 0x44aea0
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x10c], 0x7a9b65ca
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jl 0x44ae8f
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jle 0x44ae4c
jmp 0x44aeff
mov dword [ebp - 0x24], 0x4b72b416
mov dword [ebp - 0x14], ebx
jmp 0x44aef4
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x44aee0
push 0x10f6
push 0x354
push 0x20c3
push 0x170b
push ebx
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x44aef1
push ebx
push ebx
call dword [sym.imp.GDI32.dll_GetRgnBox]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1f
je 0x44aebc
cmp dword [ebp - 0x24], ebx
jne 0x44af0f
dec dword [ebp - 0x18]
push 1
pop edx
cmp dword [ebp - 0x18], 0xffffffe9
jge 0x44adc3
mov dword [ebp - 0x10], 0x1824a8c6
xor eax, eax
mov dword [ebp - 0x1c], 0xccb03629
inc eax
mov dword [ebp - 0x3c], eax
add esi, 4
mov dword [ebp - 0x2c], 6
mov dword [ebp - 0x10], 3
cmp dword [ebp - 0x10], 0xfffffffd
mov dword [ebp - 0x14], esi
je 0x44af82
mov dword [ebp - 0xc], 0xffffffff
mov dword [ebp - 0x2c], 0x3066c93e
mov dword [ebp - 0xc], 0xf
jmp 0x44af70
mov dword [ebp - 0x20], 0xdb85613
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x44af6a
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
inc dword [ebp - 0x20]
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xfffffffd
jg 0x44af54
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffffd
jne 0x44af3d
xor eax, eax
inc eax
cmp dword [ebp - 0x3c], ebx
jne 0x44af9c
cmp dword [ebp - 0x10], ebx
je 0x44af8f
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov edx, ebx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x10]
jmp 0x44af9e
mov edx, eax
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov esi, dword [esi]
cmp edx, eax
setl cl
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x10], 3
mov dword [ebp - 0x18], 0xa98ceef9
mov dword [ebp - 4], 0x595ad338
mov dword [ebp - 0x24], 0x5d872072
mov dword [ebp - 0xc], ebx
jmp 0x44afdf
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x164], 7
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x44afce
mov dword [ebp - 0x10], ebx
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
je 0x44aff6
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jge 0x44b004
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp eax, 1
setl cl
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 4]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 0xfffffffb
sete al
cmp eax, dword [ebp - 0x24]
jge 0x44b091
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x44b079
push 0x1e75
push ebx
push 0x1441
push 0x1aea
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtFloodFill]
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x44b0fa
push ebx
push 0x132b
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
jmp 0x44b0fa
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x44b0fa
xor edi, edi
inc edi
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x44b0b3
push ebx
push ebx
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 4], 3
cmp dword [ebp - 4], ebx
jl 0x44b0f2
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x44b0d6
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x44b0ed
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
dec dword [ebp - 4]
jns 0x44b0bf
dec dword [ebp - 0x18]
jns 0x44b0a0
mov edi, dword [ebp - 0x34]
add dword [ebp - 0x14], 4
test esi, esi
mov esi, dword [ebp - 0x14]
jne 0x44b108
add esi, 8
mov dword [ebp - 0xc], 0x6c0e2632
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], 0x27f44fb6
mov dword [ebp - 0x24], ebx
push 2
mov dword [ebp - 0x2c], 0x42d63d2c
mov dword [ebp - 4], ebx
pop ecx
jmp 0x44b13c
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x50], 0x2fd4
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x44b12e
mov dword [ebp - 4], ebx
jmp 0x44b157
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xd4], 0xa6e8
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x44b146
mov dword [ebp - 4], ebx
jmp 0x44b172
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x154], 1
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x44b161
mov eax, dword [ebp - 0x50]
xor ecx, ecx
mov eax, dword [ebp - 0x4c]
cmp eax, 0xfffffffc
mov eax, dword [ebp - 0x50]
setne cl
xor edx, edx
imul eax, ecx
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x4c]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
xor ebx, ebx
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0xc]
sub ecx, eax
mov eax, dword [ebp - 0x50]
sub ecx, eax
imul eax, ecx, 5
mov ecx, dword [ebp - 0x50]
cmp eax, 0x1a1f
mov eax, dword [ebp - 0x50]
setne bl
xor edx, edx
cmp ecx, eax
setl dl
xor eax, eax
imul edx, ebx
inc eax
cmp edx, eax
jle 0x44b1d5
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0xd0]
xor edx, edx
mov eax, dword [ebp - 0x4c]
cmp eax, ecx
mov eax, dword [ebp - 0xd0]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
xor ebx, ebx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x20], 0x971cf717
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xc]
je 0x44b215
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x18], ebx
je 0x44b215
xor edx, edx
inc edx
mov ecx, edx
jmp 0x44b21a
xor edx, edx
mov ecx, ebx
inc edx
xor eax, eax
cmp ecx, 0x7758a8c
setne al
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xa164e62b
sbb eax, eax
neg eax
dec eax
jne 0x44b243
mov ecx, ebx
cmp dword [ebp - 0x50], ebx
je 0x44b245
mov ecx, edx
mov eax, dword [ebp - 0xd4]
imul eax, ecx
mov dword [ebp - 0x154], eax
mov ecx, dword [ebp - 0x4c]
imul ecx, eax
mov eax, dword [ebp - 0x18]
sub eax, ecx
je 0x44b270
cmp dword [ebp - 0x154], ebx
je 0x44b270
xor ecx, ecx
inc ecx
mov eax, ecx
jmp 0x44b275
xor ecx, ecx
mov eax, ebx
inc ecx
mov dword [ebp - 0x18], eax
add esi, edi
mov eax, dword [ebp - 0xd0]
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp eax, dword [ebp - 0x30]
jl 0x44ac18
mov dword [ebp - 4], 0xfffffff7
mov dword [ebp - 0xc], ebx
jmp 0x44b2b4
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xdc], 0x20fe6e32
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x44b2a3
mov dword [ebp - 4], ebx
jmp 0x44b482
push 4
pop edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x24], 0xbb35b689
mov dword [ebp - 0x2c], 0x4763c6da
mov dword [ebp - 0x34], 0xfffffffa
mov dword [ebp - 0x2c], 0x4c01e07a
mov dword [ebp - 0x1c], 0xb872
mov dword [ebp - 0x10], ebx
jmp 0x44b2fd
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1d4], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x44b2f0
mov dword [ebp - 0x10], ebx
jmp 0x44b318
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x17c], 0x3019c36c
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x44b307
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ebx
jl 0x44b3e2
mov dword [ebp - 0x14], 0x3f9e923e
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], ebx
jl 0x44b367
mov dword [ebp - 0xc], 0xd8f6efba
mov dword [ebp - 0xc], ebx
jmp 0x44b35d
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x44b35a
call dword [sym.imp.USER32.dll_GetCapture]
xor ecx, ecx
inc ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jle 0x44b348
dec dword [ebp - 0x14]
jns 0x44b33c
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
setle dl
mov dword [ebp + eax*4 - 0xdc], ecx
mov eax, dword [ebp - 4]
sub ecx, eax
imul ecx, edx
cmp ecx, dword [ebp - 0x1d4]
jle 0x44b399
cmp dword [ebp - 4], ebx
je 0x44b3a6
cmp dword [ebp - 0xd8], ebx
je 0x44b3a6
xor eax, eax
inc eax
jmp 0x44b3a8
mov eax, ebx
xor ecx, ecx
cmp eax, 0x193
mov eax, dword [ebp - 4]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
push 0
setge dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setl bl
xor ecx, ecx
cmp ebx, eax
pop ebx
setge cl
mov dword [ebp - 0x24], ecx
dec dword [ebp - 0x18]
push 1
pop ecx
jns 0x44b32a
cmp dword [ebp - 0xd8], 0x3eaa
jg 0x44b465
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x24], 0x5950169f
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0xc], ebx
jmp 0x44b415
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x174], 0x5c935cb5
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x44b404
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff9
jg 0x44b42d
imul eax, dword [ebp - 4], 9
mov edx, ecx
test eax, eax
jne 0x44b42f
mov edx, ebx
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x34]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp edx, 0x20a3
setl al
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x44b47c
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x44b47c
mov dword [ebp - 0x30], 6
mov dword [ebp - 0x30], 0x2129e5e2
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xd8], eax
dec dword [ebp - 4]
push 1
pop ecx
cmp dword [ebp - 4], 0xfffffff3
jle 0x44b2c2
mov edi, dword [esi]
xor eax, eax
mov dword [ebp - 0x14], 0xfffffffe
inc eax
mov dword [ebp - 4], 0xd8a94b2a
mov dword [ebp - 0x38], 0xc369029e
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0x846c
mov dword [ebp - 0x64], edi
mov dword [ebp - 0xc], ebx
jmp 0x44b4c2
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x70], ebx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x44b4b8
mov eax, dword [ebp - 4]
xor edx, edx
inc dword [ebp - 0x14]
mov ecx, dword [ebp - 4]
imul ecx, dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp ecx, eax
setl dl
sub edx, dword [ebp - 4]
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp eax, edx
sbb eax, eax
xor ebx, ebx
neg eax
sub eax, dword [ebp - 4]
add eax, 6
cmp eax, 0xffffffff
setl bl
imul ebx, dword [ebp - 4]
sub ebx, dword [ebp - 0x70]
mov eax, dword [ebp - 4]
neg ebx
mov edx, dword [ebp - 0x14]
sbb ebx, ebx
sub edx, eax
mov eax, dword [ebp - 4]
inc ebx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, ebx
setl al
xor ebx, ebx
imul eax, eax, 0xbc44
test eax, eax
jle 0x44b53f
cmp dword [ebp - 0x6c], ebx
je 0x44b53f
xor ecx, ecx
inc ecx
mov eax, ecx
jmp 0x44b544
xor ecx, ecx
mov eax, ebx
inc ecx
mov dword [ebp - 4], eax
cmp dword [ebp - 0x14], ebx
je 0x44b64b
mov dword [ebp - 0x18], 0xfffffff7
mov dword [ebp - 0x24], 0x4aba13e9
mov dword [ebp - 0xc], ebx
jmp 0x44b571
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x58], 0x18177c4
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x44b563
mov dword [ebp - 0x14], 0xfffffffd
cmp dword [ebp - 0x14], 0x14
jg 0x44b5ed
mov dword [ebp - 0x24], 0xc0b8072
mov dword [ebp - 0xc], ebx
jmp 0x44b5a0
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x170], 0xa151
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x44b58f
mov eax, dword [ebp - 4]
xor edx, edx
cmp eax, 9
mov eax, dword [ebp - 0x16c]
setne dl
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x24], ecx
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x44b5e1
push 0x730
push 0xff7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableScrollBar]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x14
jle 0x44b583
xor ecx, ecx
inc ecx
mov dword [ebp - 4], 0xffffffff
jmp 0x44b640
mov dword [ebp - 0x1c], 0x60dd4f95
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x18], ebx
je 0x44b620
mov dword [ebp - 0x58], ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 4]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setg dl
xor ecx, ecx
cmp edx, eax
push 1
setge cl
mov dword [ebp - 0x24], ecx
inc dword [ebp - 4]
pop ecx
cmp dword [ebp - 4], 6
jne 0x44b5f6
jmp 0x44b713
mov dword [ebp - 0x14], 0x7e1f
mov dword [ebp - 0x18], 0xda7dc4ca
mov dword [ebp - 0x20], 0x5dc571eb
mov dword [ebp - 0xc], ebx
jmp 0x44b676
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xe4], 5
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x44b665
cmp dword [ebp - 0x30], ebx
je 0x44b6df
imul eax, dword [ebp - 0x70], 0xffff0006
test eax, eax
jne 0x44b696
mov eax, dword [ebp - 0x30]
inc eax
cmp eax, dword [ebp - 0x70]
mov eax, ebx
jge 0x44b698
mov eax, ecx
mov dword [ebp - 0x14], eax
xor ebx, ebx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xe4], ecx
mov ecx, 0x4e98
mov eax, dword [ebp - 0x18]
sub ecx, eax
sub ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x70]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setg bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x38]
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
xor ebx, ebx
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x18]
jne 0x44b6e8
cmp dword [ebp - 0x70], ebx
jne 0x44b6e8
mov edx, ebx
jmp 0x44b6ed
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 4]
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x14], ebx
jmp 0x44b70d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x70], 0x105a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x44b6ff
mov dword [ebp - 0x24], 0xa421e0b
add esi, 4
mov dword [ebp - 0x34], 0x2a7e9f21
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], ebx
jmp 0x44b73d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xec], 0xffffffff
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x44b72c
xor ecx, ecx
mov dword [ebp - 4], ebx
inc ecx
jmp 0x44b755
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x44], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x44b74b
mov dword [ebp - 4], ebx
jmp 0x44b770
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x194], 0x1a93826a
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x44b75f
cmp dword [ebp - 0xec], ebx
je 0x44b783
cmp dword [ebp - 0x44], ebx
jne 0x44b78a
mov edx, ebx
cmp dword [ebp - 0x24], ebx
je 0x44b78c
mov edx, ecx
mov dword [ebp - 0x190], edx
xor ecx, ecx
mov eax, dword [ebp - 0x44]
sub edx, eax
mov eax, dword [ebp - 0xec]
cmp edx, eax
mov eax, dword [ebp - 0x44]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x44]
setle bl
xor ecx, ecx
cmp ebx, eax
mov eax, 0xe8f2
setg cl
sub eax, ecx
xor ecx, ecx
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x44]
setl cl
add eax, ecx
mov ecx, dword [ebp - 0xec]
imul ecx, eax
xor eax, eax
test ecx, ecx
setle al
xor edx, edx
sub eax, 0xa
cmp eax, 0xc22c
mov eax, dword [ebp - 0x44]
mov esi, dword [esi]
setg dl
mov dword [ebp - 0x2c], esi
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x28], 0xb26bdde0
add ecx, 4
mov dword [ebp - 4], 0x9a9b8fa4
xor edx, edx
mov dword [ebp - 0x18], 0xd5b611fb
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0xc], edx
jmp 0x44b83f
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x60], 0x55f992db
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x44b831
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0xffffffe6
je 0x44baa3
xor edi, edi
inc edi
mov dword [ebp - 0x10], 0x4cc
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0xc], edx
xor edx, edx
mov dword [ebp - 0x20], 0xc7fffaa2
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0xc]
cmp eax, 0xbc24
mov eax, dword [ebp - 0xc]
setne dl
xor ebx, ebx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setl bl
sub ebx, edx
neg ebx
sbb ebx, ebx
xor ecx, ecx
inc ebx
cmp ebx, eax
setle cl
xor edx, edx
imul eax, ecx, 0x5f43
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setl dl
sub edx, dword [ebp - 0x20]
imul edx, dword [ebp - 0xc]
imul edx, dword [ebp - 0x10]
cmp edx, dword [ebp - 0x20]
jge 0x44b8f4
xor edx, edx
cmp dword [ebp - 0x10], edx
je 0x44b8f6
cmp dword [ebp - 0x18], edx
je 0x44b8f6
mov byte [ebp - 5], dl
cmp byte [ebp - 5], dl
je 0x44b902
push 0x2382
push 0x21b6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
xor edx, edx
jmp 0x44b902
xor edx, edx
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], edx
jne 0x44ba9a
mov dword [ebp - 4], edx
jmp 0x44ba84
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x60], edx
je 0x44b9b6
mov dword [ebp - 0x3c], 0xe77da19
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], 6
jg 0x44ba81
mov dword [ebp - 0x30], 0x5f37d796
mov dword [ebp - 0x38], 0xf7cb2c1d
mov dword [ebp - 0x30], 0x8c4b1e4f
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], 8
jl 0x44ba81
cmp dword [ebp - 4], edi
jle 0x44b90a
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffe6
jne 0x44b855
mov edi, dword [ebp - 0x64]
mov esi, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x14]
test esi, esi
jne 0x44bb92
cmp byte [ebp - 0x3d], 0
je 0x44bac2
xor eax, eax
inc eax
cmp dword [ebp - 0x48], eax
jne 0x44bac2
mov edx, dword [ebp + 8]
lea eax, [edi + 0x10]
add dword [edx + 8], eax
mov eax, dword [ecx]
mov dword [ebp - 0x2c], eax
mov eax, dword [ecx + 4]
add ecx, 8
push edi
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x14], ecx
call fcn.0048d63c
mov ebx, eax
xor eax, eax
pop ecx
mov dword [ebp - 0xe0], eax
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
lea eax, [ebp - 0xe0]
push eax
push edi
mov dword [ebp - 0x24], ebx
call fcn.004704c4
mov esi, dword [ebp - 0xcc]
xor edx, edx
mov ecx, edx
test edi, edi
jle 0x44bb6b
mov eax, ecx
and eax, 0x80000001
jns 0x44bb28
dec eax
or eax, 0xfffffffe
inc eax
neg eax
sbb eax, eax
and eax, dword [ebp - 0x2c]
add eax, ecx
add eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x64]
cdq
idiv edi
xor eax, eax
cmp word [esi + edx*2], ax
je 0x44bb54
xor ebx, ebx
lea eax, [edx + 1]
cdq
idiv edi
cmp word [esi + edx*2], bx
jne 0x44bb45
xor eax, eax
inc eax
mov word [esi + edx*2], ax
mov eax, dword [ebp - 0x14]
mov al, byte [edx + eax]
mov byte [ecx + ebx], al
inc ecx
cmp ecx, edi
jl 0x44bb1a
mov eax, dword [ebp + 8]
mov dword [eax], edi
mov dword [eax + 4], ebx
test esi, esi
je 0x44bb97
push esi
call fcn.0048ebf6
xor edx, edx
pop ecx
mov dword [ebp - 0xcc], edx
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0xc4], edx
mov ebx, dword [ebp + 8]
jmp 0x44bb99
mov ebx, eax
xor ecx, ecx
inc ecx
mov dword [ebp + 8], edx
jmp 0x44bbaf
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x74], 0x5dcec3d7
inc dword [ebp + 8]
cmp dword [ebp + 8], ecx
jl 0x44bba1
mov dword [ebp + 8], edx
jmp 0x44bbc7
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x7c], 0xe5ccc90a
inc dword [ebp + 8]
cmp dword [ebp + 8], 2
jl 0x44bbb9
mov dword [ebp - 0x78], edx
jmp 0x44bc27
or eax, 0xffffffff
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x78]
cmp dword [ebp + eax*4 - 0x74], edx
jne 0x44bc2c
mov dword [ebp - 0xa4], edx
jmp 0x44bc1c
mov eax, dword [ebp - 0xa4]
cmp dword [ebp + eax*4 - 0x74], edx
jne 0x44bc24
mov eax, dword [ebp - 0xa4]
cmp dword [ebp + eax*4 - 0x74], edx
jne 0x44bc24
inc dword [ebp - 0xa4]
cmp dword [ebp - 0xa4], edx
jle 0x44bbfe
inc dword [ebp - 0x78]
cmp dword [ebp - 0x78], edx
jle 0x44bbd2
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret