Function at 0x444210
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x124
push ebx
push esi
mov ebx, ecx
mov al, byte [ebx + 0x195]
push edi
mov edi, dword [ebp + 8]
mov byte [ebx + 0x194], al
mov esi, dword [edi + 4]
xor eax, eax
cmp esi, 0x10d
mov byte [esp + 0xf], 0
mov byte [esp + 0xe], 0
mov dword [0x58ace8], eax
mov dword [esp + 0x10], eax
jg 0x444302
je case.0x44432c.271
lea eax, [esi - 6]
cmp eax, 0x4b
ja case.0x44432c.272
movzx ecx, byte [eax + 0x4452a4]
jmp dword [ecx*4 + 0x44528c]
mov edx, edi
mov eax, dword [edx + 8]
cmp ax, 1
je 0x444289
cmp ax, 2
jne case.0x44432c.514
mov eax, dword [ebx + 0x160]
test eax, eax
je 0x44429d
mov edx, dword [ebx]
push eax
mov eax, dword [edx + 0x7c]
mov ecx, ebx
call eax
mov eax, 0xf4240
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov esi, dword [0x58b108]
test esi, esi
je 0x4442cc
mov edx, dword [ebx]
mov eax, dword [edx + 0x24]
mov ecx, ebx
call eax
cmp esi, dword [eax + 0x6c]
je 0x4442cc
mov ecx, esi
mov edi, ebx
call fcn.00449220
mov dword [0x58b108], 0
jmp case.0x44432c.272
cmp dword [0x59b4dc], 0
je case.0x44432c.272
mov eax, dword [0x587b60]
test eax, eax
je 0x4442f4
mov byte [eax], 0
mov eax, 0xf4240
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp esi, 0x282
jg 0x444e36
je case.0x44432c.271
lea eax, [esi - 0x10f]
cmp eax, 0xfb
ja case.0x44432c.272
movzx ecx, byte [eax + 0x445320]
jmp dword [ecx*4 + 0x4452f0]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, eax
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x44434c
cmp eax, esi
jne 0x44434c
add dword [ebx + 0x24], 1
jmp 0x444371
cmp byte [ebx + 0xc], 0
je 0x44435e
lea edx, [ebx + 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x444367
mov eax, dword [ebx]
mov edx, dword [eax + 0x18]
mov ecx, ebx
call edx
mov dword [ebx + 0x24], 0
mov dword [ebx + 0x20], esi
mov ecx, dword [ebx + 0x5c]
test ecx, ecx
lea edi, [ebx + 0x5c]
je 0x444388
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [edi], 0
mov eax, dword [ebp + 8]
movsx ecx, word [eax + 0xc]
movsx edx, word [eax + 0xe]
mov dword [esp + 0x24], ecx
push 0
fild dword [esp + 0x28]
mov dword [esp + 0x28], edx
push 0xd
lea edx, [esp + 0x1c]
fstp dword [esp + 0x1c]
lea eax, [esp + 0x48]
fild dword [esp + 0x2c]
fstp dword [esp + 0x20]
call fcn.00442dc0
mov ecx, dword [ebx + 0x150]
test ecx, ecx
je 0x4443fb
lea eax, [esp + 0x10]
push eax
lea edx, [esp + 0x44]
push edx
call fcn.00456bf0
cmp eax, 0xf4240
jne 0x4443fb
cmp dword [esp + 0x10], 0
mov byte [esp + 0xe], 1
je 0x4443fb
mov eax, dword [ebx + 0x50]
test eax, eax
je 0x444401
mov eax, dword [eax + 0x6c]
push eax
call dword [sym.imp.USER32.dll_SetCapture]
jmp 0x444401
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov esi, dword [esp + 0x10]
call fcn.004499d0
mov byte [esp + 0xf], 1
lea ecx, [esp + 0x40]
call fcn.00442f60
cmp dword [ebx + 0x24], 0
je 0x444438
cmp dword [ebx + 0x20], 0
je 0x444438
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [ebx + 0x20], eax
jne 0x444438
add dword [ebx + 0x24], 0xffffffff
jmp case.0x44432c.272
mov dword [ebx + 0x20], 0
cmp byte [ebx + 0xc], 0
je 0x444454
lea ecx, [ebx + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp case.0x44432c.272
mov edx, dword [ebx]
mov eax, dword [edx + 0x1c]
mov ecx, ebx
call eax
jmp case.0x44432c.272
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, eax
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x44447b
cmp eax, esi
jne 0x44447b
add dword [ebx + 0x24], 1
jmp 0x4444a0
cmp byte [ebx + 0xc], 0
je 0x44448d
lea ecx, [ebx + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x444496
mov edx, dword [ebx]
mov eax, dword [edx + 0x18]
mov ecx, ebx
call eax
mov dword [ebx + 0x24], 0
mov dword [ebx + 0x20], esi
mov ecx, dword [ebx + 0x5c]
test ecx, ecx
lea edi, [ebx + 0x5c]
je 0x4444b7
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
mov dword [edi], 0
mov esi, dword [ebp + 8]
movsx ecx, word [esi + 0xc]
movsx edx, word [esi + 0xe]
mov dword [esp + 0x24], ecx
push 0
fild dword [esp + 0x28]
mov dword [esp + 0x28], edx
push 1
lea edx, [esp + 0x1c]
fstp dword [esp + 0x1c]
lea eax, [esp + 0x48]
fild dword [esp + 0x2c]
fstp dword [esp + 0x20]
call fcn.00442dc0
mov al, byte [esi + 0x10]
test al, 8
setle cl
sub cl, 1
and ecx, 8
test al, 4
setle dl
sub dl, 1
and edx, 4
or cl, dl
test al, 2
setle dl
sub dl, 1
and edx, 2
or cl, dl
test al, 1
setg al
or cl, al
mov byte [esp + 0xa4], cl
mov ecx, dword [ebx + 0x150]
test ecx, ecx
je 0x44455e
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x44]
push eax
call fcn.00456bf0
cmp eax, 0xf4240
jne 0x44455e
cmp dword [esp + 0x10], 0
je 0x444559
mov eax, dword [ebx + 0x50]
test eax, eax
je 0x444559
mov ecx, dword [eax + 0x6c]
push ecx
call dword [sym.imp.USER32.dll_SetCapture]
mov byte [esp + 0xe], 1
mov esi, dword [esp + 0x10]
call fcn.004499d0
lea ecx, [esp + 0x40]
mov byte [esp + 0xf], 1
call fcn.00442f60
cmp dword [ebx + 0x24], 0
je 0x444595
cmp dword [ebx + 0x20], 0
je 0x444595
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [ebx + 0x20], eax
jne 0x444595
add dword [ebx + 0x24], 0xffffffff
jmp case.0x44432c.272
cmp byte [ebx + 0xc], 0
mov dword [ebx + 0x20], 0
je 0x4445b1
lea edx, [ebx + 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp case.0x44432c.272
mov eax, dword [ebx]
mov edx, dword [eax + 0x1c]
mov ecx, ebx
call edx
jmp case.0x44432c.272
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call esi
mov edi, eax
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x4445da
cmp eax, edi
jne 0x4445da
add dword [ebx + 0x24], 1
jmp 0x4445ff
cmp byte [ebx + 0xc], 0
je 0x4445ec
lea eax, [ebx + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x4445f5
mov edx, dword [ebx]
mov eax, dword [edx + 0x18]
mov ecx, ebx
call eax
mov dword [ebx + 0x24], 0
mov dword [ebx + 0x20], edi
cmp dword [ebx + 0x5c], 0
je 0x44462d
cmp dword [ebx + 0x24], 0
je 0x444438
cmp dword [ebx + 0x20], 0
je 0x444438
call esi
cmp dword [ebx + 0x20], eax
jne 0x444438
add dword [ebx + 0x24], 0xffffffff
jmp case.0x44432c.272
mov ecx, dword [ebx + 0x64]
test ecx, ecx
lea edi, [ebx + 0x64]
je 0x444644
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
mov dword [edi], 0
mov eax, dword [ebp + 8]
movsx ecx, word [eax + 0xc]
movsx edx, word [eax + 0xe]
mov dword [esp + 0x24], ecx
push 0
fild dword [esp + 0x28]
mov dword [esp + 0x28], edx
push 7
lea edx, [esp + 0x1c]
fstp dword [esp + 0x1c]
lea eax, [esp + 0xb8]
fild dword [esp + 0x2c]
fstp dword [esp + 0x20]
call fcn.00442dc0
mov ecx, dword [ebx + 0x150]
test ecx, ecx
je 0x4446bb
lea eax, [esp + 0x10]
push eax
lea edx, [esp + 0xb4]
push edx
call fcn.00456bf0
cmp eax, 0xf4240
jne 0x4446bb
cmp dword [esp + 0x10], 0
je 0x4446b6
mov eax, dword [ebx + 0x50]
test eax, eax
je 0x4446b6
mov eax, dword [eax + 0x6c]
push eax
call dword [sym.imp.USER32.dll_SetCapture]
mov byte [esp + 0xe], 1
mov esi, dword [esp + 0x10]
call fcn.004499d0
mov eax, dword [ebx + 0x5c]
test eax, eax
mov byte [esp + 0xf], 1
je 0x44474d
cmp dword [0x59b4dc], 0
mov dword [esp + 0x10], eax
jne 0x444738
mov eax, dword [ebp + 8]
movsx ecx, word [eax + 0xc]
movsx edx, word [eax + 0xe]
mov dword [esp + 0x24], ecx
push 0
fild dword [esp + 0x28]
mov dword [esp + 0x28], edx
push 4
lea edx, [esp + 0x1c]
fstp dword [esp + 0x1c]
lea eax, [esp + 0x48]
fild dword [esp + 0x2c]
fstp dword [esp + 0x20]
call fcn.00442dc0
mov ecx, dword [ebx + 0x5c]
lea eax, [esp + 0x10]
push eax
lea edx, [esp + 0x44]
push edx
call fcn.00456bf0
cmp eax, 0xf4240
jne 0x44472f
mov byte [esp + 0xe], 1
lea ecx, [esp + 0x40]
call fcn.00442f60
mov ecx, dword [ebx + 0x5c]
test ecx, ecx
je 0x44474d
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [ebx + 0x5c], 0
lea ecx, [esp + 0xb0]
call fcn.00442f60
cmp dword [ebx + 0x24], 0
je 0x444779
cmp dword [ebx + 0x20], 0
je 0x444779
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [ebx + 0x20], eax
jne 0x444779
add dword [ebx + 0x24], 0xffffffff
jmp case.0x44432c.272
mov dword [ebx + 0x20], 0
cmp byte [ebx + 0xc], 0
je 0x444454
lea eax, [ebx + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp case.0x44432c.272
cmp esi, 0x204
sete byte [esp + 0x2f]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edi, eax
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x4447bd
cmp eax, edi
jne 0x4447bd
add dword [ebx + 0x24], 1
jmp 0x4447e2
cmp byte [ebx + 0xc], 0
je 0x4447cf
lea ecx, [ebx + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x4447d8
mov edx, dword [ebx]
mov eax, dword [edx + 0x18]
mov ecx, ebx
call eax
mov dword [ebx + 0x24], 0
mov dword [ebx + 0x20], edi
cmp esi, 0x1c
jne 0x44486c
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 8]
test eax, eax
mov byte [0x59b495], al
jne 0x444801
mov edi, ebx
call fcn.00443120
cmp dword [ebx + 0x5c], 0
jne 0x44486c
cmp dword [ebx + 0x24], 0
je 0x444830
cmp dword [ebx + 0x20], 0
je 0x444830
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [ebx + 0x20], eax
jne 0x444830
add dword [ebx + 0x24], 0xffffffff
mov eax, 0xf4240
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp byte [ebx + 0xc], 0
mov dword [ebx + 0x20], 0
je 0x444855
add ebx, 0x28
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, 0xf4240
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx]
mov eax, dword [edx + 0x1c]
mov ecx, ebx
call eax
mov eax, 0xf4240
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
call dword [sym.imp.USER32.dll_ReleaseCapture]
cmp esi, 6
mov al, byte [0x59b4dc]
je 0x444881
cmp esi, 0x1c
jne 0x444883
xor al, al
cmp dword [ebx + 0x5c], 0
lea esi, [ebx + 0x5c]
je 0x44494a
test al, al
jne 0x444945
mov eax, esi
lea edi, [esp + 0x24]
mov dword [esp + 0x24], 0
call fcn.0048c310
mov ecx, dword [esi]
test ecx, ecx
je 0x4448be
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
mov dword [esi], 0
mov eax, dword [ebp + 8]
movsx ecx, word [eax + 0xc]
movsx edx, word [eax + 0xe]
mov dword [esp + 0x1c], ecx
push 0
fild dword [esp + 0x20]
mov dword [esp + 0x20], edx
push 4
lea edx, [esp + 0x1c]
fstp dword [esp + 0x1c]
lea eax, [esp + 0xb8]
fild dword [esp + 0x24]
fstp dword [esp + 0x20]
call fcn.00442dc0
mov edi, dword [esp + 0x24]
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0xb4]
push ecx
mov ecx, edi
call fcn.00456bf0
cmp eax, 0xf4240
jne 0x444919
mov byte [esp + 0xe], 1
mov ecx, dword [esi]
test ecx, ecx
je 0x44492c
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
mov dword [esi], 0
lea ecx, [esp + 0xb0]
call fcn.00442f60
test edi, edi
je 0x444945
mov edx, dword [edi]
mov eax, dword [edx + 8]
mov ecx, edi
call eax
cmp dword [esi], 0
jne 0x44495f
mov esi, dword [ebp + 8]
cmp dword [esi + 4], 0x202
jne 0x444962
mov byte [ebx + 0x194], 1
jmp 0x444962
mov esi, dword [ebp + 8]
cmp byte [esp + 0x2f], 0
mov byte [esp + 0xf], 1
je 0x444759
mov ecx, dword [ebx + 0x60]
test ecx, ecx
lea edi, [ebx + 0x60]
mov dword [esp + 0x10], 0
je 0x444991
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
mov dword [edi], 0
movsx ecx, word [esi + 0xc]
movsx edx, word [esi + 0xe]
mov dword [esp + 0x1c], ecx
push 0
fild dword [esp + 0x20]
mov dword [esp + 0x20], edx
push 5
lea edx, [esp + 0x1c]
fstp dword [esp + 0x1c]
lea eax, [esp + 0xb8]
fild dword [esp + 0x24]
fstp dword [esp + 0x20]
call fcn.00442dc0
mov ecx, dword [ebx + 0x150]
test ecx, ecx
je 0x4449f0
lea eax, [esp + 0x10]
push eax
lea edx, [esp + 0xb4]
push edx
call fcn.00456bf0
cmp eax, 0xf4242
jne 0x4449f0
mov dword [esp + 0x10], 0
mov esi, dword [esp + 0x10]
call fcn.004499d0
mov eax, dword [edi]
test eax, eax
je 0x444a29
mov edx, dword [ebx]
mov edx, dword [edx + 0x50]
push eax
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 8]
push eax
mov ecx, ebx
call edx
mov ecx, dword [edi]
test ecx, ecx
je 0x444a24
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [edi], 0
mov byte [esp + 0xe], 1
mov byte [esp + 0xf], 1
jmp 0x44474d
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, eax
mov eax, dword [ebx + 0x20]
xor edi, edi
cmp eax, edi
je 0x444a4e
cmp eax, esi
jne 0x444a4e
add dword [ebx + 0x24], 1
jmp 0x444a6f
cmp byte [ebx + 0xc], 0
je 0x444a60
lea ecx, [ebx + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x444a69
mov edx, dword [ebx]
mov eax, dword [edx + 0x18]
mov ecx, ebx
call eax
mov dword [ebx + 0x24], edi
mov dword [ebx + 0x20], esi
cmp dword [ebx + 0x64], edi
je 0x444af9
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [ebp + 8]
movsx edx, word [eax + 0xc]
movsx eax, word [eax + 0xe]
mov ecx, dword [ebx + 0x64]
mov dword [esp + 0x1c], edx
push edi
fild dword [esp + 0x20]
mov dword [esp + 0x20], eax
push 8
lea edx, [esp + 0x1c]
fstp dword [esp + 0x1c]
lea eax, [esp + 0xb8]
fild dword [esp + 0x24]
mov dword [esp + 0x18], ecx
fstp dword [esp + 0x20]
call fcn.00442dc0
mov ecx, dword [ebx + 0x64]
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0xb4]
push eax
call fcn.00456bf0
cmp eax, 0xf4240
jne 0x444adc
mov byte [esp + 0xe], 1
mov ecx, dword [ebx + 0x64]
cmp ecx, edi
je 0x444aed
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
mov dword [ebx + 0x64], edi
lea ecx, [esp + 0xb0]
call fcn.00442f60
cmp dword [ebx + 0x24], edi
mov byte [esp + 0xf], 1
je 0x444b17
cmp dword [ebx + 0x20], edi
je 0x444b17
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [ebx + 0x20], eax
je 0x444770
cmp byte [ebx + 0xc], 0
mov dword [ebx + 0x20], edi
je 0x444454
lea ecx, [ebx + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp case.0x44432c.272
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, eax
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x444b4c
cmp eax, esi
jne 0x444b4c
add dword [ebx + 0x24], 1
jmp 0x444b71
cmp byte [ebx + 0xc], 0
je 0x444b5e
lea ecx, [ebx + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x444b67
mov edx, dword [ebx]
mov eax, dword [edx + 0x18]
mov ecx, ebx
call eax
mov dword [ebx + 0x24], 0
mov dword [ebx + 0x20], esi
cmp dword [ebx + 0x64], 0
lea eax, [ebx + 0x64]
lea edi, [ebx + 0x5c]
je 0x444b7f
mov edi, eax
cmp dword [ebx + 0x60], 0
lea eax, [ebx + 0x60]
je 0x444b8a
mov edi, eax
mov eax, dword [edi]
test eax, eax
je 0x444c21
mov dword [esp + 0x10], eax
call fcn.0042d5d0
test eax, eax
jne 0x444ba5
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 8]
movsx ecx, word [eax + 0xc]
movsx edx, word [eax + 0xe]
mov dword [esp + 0x1c], ecx
push 0
fild dword [esp + 0x20]
mov dword [esp + 0x20], edx
push 3
lea edx, [esp + 0x1c]
fstp dword [esp + 0x1c]
lea eax, [esp + 0x48]
fild dword [esp + 0x24]
fstp dword [esp + 0x20]
call fcn.00442dc0
cmp dword [esp + 0x10], 0
je 0x444c0f
mov ecx, dword [edi]
lea eax, [esp + 0x10]
push eax
lea edx, [esp + 0x44]
push edx
call fcn.00456bf0
cmp eax, 0xf4240
jne 0x444c0f
mov esi, dword [esp + 0x10]
mov byte [esp + 0xe], 1
call fcn.004499d0
lea ecx, [esp + 0x40]
jmp 0x444754
mov esi, dword [esp + 0x10]
call fcn.004499d0
lea ecx, [esp + 0x40]
call fcn.00442f60
cmp dword [ebx + 0x150], 0
je 0x444ca4
mov eax, dword [ebp + 8]
movsx edx, word [eax + 0xc]
movsx eax, word [eax + 0xe]
mov ecx, dword [ebx + 0x5c]
mov dword [esp + 0x1c], edx
push 0
fild dword [esp + 0x20]
mov dword [esp + 0x20], eax
push 2
lea edx, [esp + 0x1c]
fstp dword [esp + 0x1c]
lea eax, [esp + 0xb8]
fild dword [esp + 0x24]
mov dword [esp + 0x18], ecx
fstp dword [esp + 0x20]
call fcn.00442dc0
mov ecx, dword [ebx + 0x150]
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0xb4]
push eax
call fcn.00456bf0
cmp eax, 0xf4240
jne 0x444c8c
mov byte [esp + 0xe], 1
mov esi, dword [esp + 0x10]
lea edi, [ebx + 0x5c]
call fcn.004499d0
lea ecx, [esp + 0xb0]
call fcn.00442f60
mov eax, dword [ebp + 8]
mov edx, dword [ebx]
mov byte [ebx + 0x196], 0
movsx ecx, word [eax + 0xe]
movsx edi, word [eax + 0xc]
mov eax, dword [edx + 0x24]
mov dword [esp + 0x34], ecx
mov ecx, ebx
call eax
push eax
lea esi, [esp + 0x124]
call fcn.00427010
cmp edi, dword [eax]
jl 0x444cec
cmp edi, dword [eax + 8]
jge 0x444cec
mov ecx, dword [esp + 0x34]
cmp ecx, dword [eax + 4]
jl 0x444cec
cmp ecx, dword [eax + 0xc]
mov byte [esp + 0xf], 1
jl 0x444cf1
mov byte [esp + 0xf], 0
cmp dword [ebx + 0x24], 0
je 0x444438
cmp dword [ebx + 0x20], 0
je 0x444438
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [ebx + 0x20], eax
jne 0x444438
add dword [ebx + 0x24], 0xffffffff
jmp case.0x44432c.272
cmp byte [0x59b495], 0
mov byte [0x58acae], 0
je 0x444e11
mov eax, dword [0x587aa4]
test eax, eax
jne 0x444d50
push 0x17
call dword [sym.imp.USER32.dll_GetSystemMetrics]
neg eax
sbb eax, eax
neg eax
add eax, 1
mov dword [0x587aa4], eax
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, 0x8000
seta al
test al, al
je 0x444e11
mov ecx, edi
mov edx, dword [ecx + 8]
mov dword [0x58acd8], edx
jmp case.0x44432c.272
cmp dword [0x58acd8], 0
je case.0x44432c.272
mov eax, edi
cmp dword [eax + 8], 2
jne case.0x44432c.272
cmp byte [0x59b495], 0
je 0x444dcd
mov eax, dword [0x587aa4]
test eax, eax
jne 0x444db7
push 0x17
call dword [sym.imp.USER32.dll_GetSystemMetrics]
neg eax
sbb eax, eax
neg eax
add eax, 1
mov dword [0x587aa4], eax
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, 0x8000
seta al
test al, al
jne case.0x44432c.272
cmp byte [0x58acae], 0
je 0x444e11
push 0
push str.32768
push 0
push 0
call dword [sym.imp.USER32.dll_FindWindowExA]
mov esi, eax
test esi, esi
je 0x444e11
mov edi, dword [sym.imp.USER32.dll_PostMessageA]
push 0x11c0001
push 0xd
push 0x100
push esi
call edi
push 0xc11c0001
push 0xd
push 0x101
push esi
call edi
mov dword [0x58acd8], 0
jmp case.0x44432c.272
mov ecx, edi
test word [ecx + 0xa], 0x8000
seta dl
mov byte [0x58acae], dl
jmp case.0x44432c.272
cmp esi, 0x8000009
jg 0x444f87
je 0x444f43
cmp esi, 0x288
je case.0x44432c.271
cmp esi, 0x8000008
jne case.0x44432c.272
fldz
push 0x11
fst qword [esp + 0x34]
lea ecx, [esp + 0x34]
lea eax, [esp + 0x44]
fstp qword [esp + 0x3c]
call fcn.00442d40
mov eax, edi
movsx ecx, word [eax + 0xc]
movsx edx, word [eax + 0xe]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
fild dword [esp + 0x14]
fstp dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
fild dword [esp + 0x18]
mov dword [esp + 0x9c], eax
fstp dword [esp + 0x20]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xa0], ecx
mov ecx, dword [ebx + 0x150]
test ecx, ecx
je 0x444ed6
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x44]
push eax
call fcn.00456bf0
cmp eax, 0xf4240
jne 0x444ed6
mov byte [esp + 0xe], 1
lea ecx, [esp + 0x40]
call fcn.00442f60
jmp case.0x44432c.272
cmp dword [ebx + 0x178], 0
je case.0x44432c.272
mov ecx, edi
push ecx
mov edx, 0x1e
lea eax, [esp + 0x44]
call fcn.00442f00
mov ecx, dword [ebx + 0x178]
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x44]
mov dword [esp + 0x20], 0
mov edx, dword [ecx]
mov edx, dword [edx + 0x74]
push eax
push ecx
call edx
lea edi, [esp + 0xa8]
mov esi, eax
mov dword [esp + 0x40], vtable.ytUIEvent.0
call fcn.00401070
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [esp + 0x1c], eax
mov eax, edi
movsx edx, word [eax + 0xc]
movsx ecx, word [eax + 0xa]
movsx eax, word [eax + 0xe]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
fild dword [esp + 0x14]
lea edx, [esp + 0x1c]
lea esi, [esp + 0x24]
lea eax, [esp + 0x40]
fstp dword [esp + 0x24]
mov dword [esp + 0x20], ecx
fild dword [esp + 0x18]
fstp dword [esp + 0x28]
call fcn.00442cc0
jmp 0x44511c
cmp esi, 0x800000a
je 0x4450cd
cmp esi, 0x5850534d
jne case.0x44432c.272
cmp byte [0x59b495], 0
je 0x444fdd
mov eax, dword [0x587aa4]
test eax, eax
jne 0x444fc7
push 0x17
call dword [sym.imp.USER32.dll_GetSystemMetrics]
neg eax
sbb eax, eax
neg eax
add eax, 1
mov dword [0x587aa4], eax
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, 0x8000
seta al
test al, al
jne case.0x44432c.272
call fcn.0042acb0
test al, al
jne case.0x44432c.272
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edi, eax
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x445003
cmp eax, edi
jne 0x445003
add dword [ebx + 0x24], 1
jmp 0x445028
cmp byte [ebx + 0xc], 0
je 0x445015
lea ecx, [ebx + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x44501e
mov edx, dword [ebx]
mov eax, dword [edx + 0x18]
mov ecx, ebx
call eax
mov dword [ebx + 0x24], 0
mov dword [ebx + 0x20], edi
mov eax, dword [ebp + 8]
movsx ecx, word [eax + 0xa]
mov dword [esp + 0x1c], ecx
movsx edx, word [eax + 0xc]
fild dword [esp + 0x1c]
movsx eax, word [eax + 0xe]
fdiv qword [0x568240]
mov dword [esp + 0x18], eax
mov eax, dword [ebx + 0x50]
test eax, eax
mov dword [esp + 0x14], edx
fstp dword [esp + 0x1c]
je 0x445067
mov edx, dword [eax + 0x6c]
lea ecx, [esp + 0x14]
push ecx
push edx
call dword [sym.imp.USER32.dll_ScreenToClient]
fild dword [esp + 0x14]
cmp esi, 0x5850534d
sete al
lea edx, [esp + 0x30]
fstp dword [esp + 0x30]
fild dword [esp + 0x18]
fstp dword [esp + 0x34]
fld dword [esp + 0x1c]
push eax
push ecx
lea eax, [esp + 0xb8]
fstp dword [esp]
call fcn.00442c40
mov ecx, dword [ebx + 0x150]
test ecx, ecx
je 0x4450c1
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0xb4]
push eax
call fcn.00456bf0
cmp eax, 0xf4240
jne 0x4450c1
mov byte [esp + 0xe], 1
lea ecx, [esp + 0xb0]
jmp 0x444413
fldz
push 0x12
fst qword [esp + 0x34]
lea ecx, [esp + 0x34]
lea eax, [esp + 0x44]
fstp qword [esp + 0x3c]
call fcn.00442d40
movsx ecx, word [edi + 0xc]
movsx edx, word [edi + 0xe]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
fild dword [esp + 0x14]
fstp dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
fild dword [esp + 0x18]
mov dword [esp + 0x9c], eax
fstp dword [esp + 0x20]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xa0], ecx
mov ecx, dword [ebx + 0x150]
test ecx, ecx
je 0x445141
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x44]
push eax
call fcn.00456bf0
cmp eax, 0xf4240
jne 0x445141
mov byte [esp + 0xe], 1
lea edi, [esp + 0xa8]
mov dword [esp + 0x40], vtable.ytUIEvent.0
call fcn.00401070
cmp dword [ebx + 0x180], 0
je case.0x445180.72
mov eax, dword [ebx + 0x50]
test eax, eax
je case.0x445180.72
cmp byte [eax + 0x3e], 0
jne case.0x445180.72
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
add ecx, 0xffffffb9
cmp ecx, 0x5b
ja case.0x445180.72
movzx ecx, byte [ecx + 0x445424]
jmp dword [ecx*4 + 0x44541c]
push eax
mov edx, 0x1d
lea eax, [esp + 0xb4]
call fcn.00442f00
mov ebx, dword [ebx + 0x180]
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0xb4]
mov dword [esp + 0x20], 0
mov edx, dword [ebx]
mov edx, dword [edx + 0x74]
push ecx
push ebx
mov ecx, ebx
call edx
lea ecx, [esp + 0xb0]
mov esi, eax
call fcn.00442f60
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp byte [esp + 0xf], 0
je 0x445212
cmp byte [ebx + 0x194], 0
jne 0x445212
cmp byte [ebx + 0x196], 0
jne 0x445212
push 0x7f00
push 0
mov byte [ebx + 0x196], 1
mov byte [ebx + 0x194], 1
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
cmp byte [ebx + 0x174], 0
je 0x44524d
mov eax, dword [ebx + 0x50]
test eax, eax
je 0x44524d
mov eax, dword [eax + 0x6c]
test eax, eax
je 0x44524d
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
neg eax
sbb eax, eax
add eax, 1
test al, al
jne 0x44524d
mov byte [ebx + 0x174], al
mov eax, dword [ebx]
mov edx, dword [eax + 0x84]
mov ecx, ebx
call edx
cmp byte [esp + 0xe], 0
je 0x44527b
fldz
or ecx, 0xffffffff
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
or edx, ecx
mov dword [eax + 4], edx
or esi, ecx
push ecx
or edi, ecx
mov dword [eax + 8], esi
mov dword [eax + 0xc], edi
fstp dword [esp]
push 1
push ebx
call fcn.00446010
pop edi
pop esi
mov eax, 0xf4241
pop ebx
mov esp, ebp
pop ebp
ret 4