Function at 0x44c873
Capabilities:
Get graphical window text
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x430
and dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x4c], 7
mov dword [ebp - 0x18], 0
jmp 0x44c89e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x44c8b1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x34], 3
jmp 0x44c897
mov dword [ebp - 0x18], 0
jmp 0x44c8c1
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x44c8d4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x74], 0xb7f3
jmp 0x44c8ba
cmp dword [ebp - 4], 0
je 0x44c8e6
mov dword [ebp - 0x290], 1
jmp 0x44c8ed
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x290]
cmp eax, dword [ebp - 4]
jg 0x44c908
mov dword [ebp - 0x294], 1
jmp 0x44c90f
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x294], eax
jle 0x44c926
mov dword [ebp - 0x20c], 1
jmp 0x44c92d
and dword [ebp - 0x20c], 0
cmp dword [ebp - 0x20c], 0xfffffffc
jge 0x44c948
cmp dword [ebp - 4], 0
je 0x44c948
mov dword [ebp - 0x10c], 1
jmp 0x44c94f
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x10c], eax
jg 0x44c96d
push 9
pop eax
test eax, eax
je 0x44c96d
mov dword [ebp - 0x214], 1
jmp 0x44c974
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 0xcb6a
jge 0x44c98c
mov dword [ebp - 0x114], 1
jmp 0x44c993
and dword [ebp - 0x114], 0
mov eax, 0xffff
sub eax, dword [ebp - 0x114]
jne 0x44c9af
cmp dword [ebp - 4], 0
jne 0x44c9af
and dword [ebp - 0x21c], 0
jmp 0x44c9b9
mov dword [ebp - 0x21c], 1
mov eax, dword [ebp - 0x21c]
add eax, 0x4e2b
je 0x44c9d8
cmp dword [ebp - 4], 0
je 0x44c9d8
mov dword [ebp - 0x11c], 1
jmp 0x44c9df
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
neg eax
imul eax, eax, 0x3d1a
test eax, eax
jle 0x44c9fd
mov dword [ebp - 0x224], 1
jmp 0x44ca04
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x224]
jl 0x44ca1b
mov dword [ebp - 0x124], 1
jmp 0x44ca22
and dword [ebp - 0x124], 0
cmp dword [ebp - 0x124], 0xa0a9
jle 0x44ca3a
mov dword [ebp - 0x2cc], 1
jmp 0x44ca41
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x384], eax
cmp dword [ebp - 4], 0
je 0x44ccbb
mov dword [ebp - 0xdc], 0xfffa
mov dword [ebp - 0xd0], 0
jmp 0x44ca80
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 4
jge 0x44ca9c
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x350], 0x737ae9f9
jmp 0x44ca73
mov dword [ebp - 4], 0
jmp 0x44caac
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jg 0x44cadd
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x44cacc
push 0
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x350], 0
je 0x44cadb
jmp 0x44caa5
jmp 0x44caa5
cmp dword [ebp - 0x4c], 0x4fc6a3f0
jg 0x44caf2
mov dword [ebp - 0x12c], 1
jmp 0x44caf9
and dword [ebp - 0x12c], 0
mov eax, 0xdb40
test eax, eax
je 0x44cb14
cmp dword [ebp - 4], 0
je 0x44cb14
mov dword [ebp - 0x22c], 1
jmp 0x44cb1b
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 8
jae 0x44cb30
mov dword [ebp - 0x234], 1
jmp 0x44cb37
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x12c]
imul eax, dword [ebp - 0x234]
test eax, eax
jne 0x44cb57
cmp dword [ebp - 0x4c], 0
jne 0x44cb57
and dword [ebp - 0x134], 0
jmp 0x44cb61
mov dword [ebp - 0x134], 1
cmp dword [ebp - 0x134], 0xffffffff
jle 0x44cb76
mov dword [ebp - 0x23c], 1
jmp 0x44cb7d
and dword [ebp - 0x23c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x350]
add eax, dword [ebp - 0x23c]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x34]
imul eax, dword [ebp - 0x4c]
cmp eax, 9
jae 0x44cbb0
mov dword [ebp - 0x13c], 1
jmp 0x44cbb7
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 0
jne 0x44cbd9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x350], 0
jne 0x44cbd9
and dword [ebp - 0x244], 0
jmp 0x44cbe3
mov dword [ebp - 0x244], 1
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x244], eax
jle 0x44cbfa
mov dword [ebp - 0x144], 1
jmp 0x44cc01
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x144], eax
jne 0x44cc18
mov dword [ebp - 0x24c], 1
jmp 0x44cc1f
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
sub eax, dword [ebp - 0x24c]
cmp dword [ebp - 0xdc], eax
jle 0x44cc50
mov dword [ebp - 0x14c], 1
jmp 0x44cc57
and dword [ebp - 0x14c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp - 0x14c], eax
je 0x44cc75
mov dword [ebp - 0x254], 1
jmp 0x44cc7c
and dword [ebp - 0x254], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x350]
cmp dword [ebp - 0x254], eax
jl 0x44cc9d
mov dword [ebp - 0x154], 1
jmp 0x44cca4
and dword [ebp - 0x154], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x154]
mov dword [ebp + eax - 0x350], ecx
jmp 0x44cefe
mov dword [ebp - 0x27c], 0xd9490441
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x308], 0xfc23faab
mov dword [ebp - 0x94], 0
jmp 0x44ccef
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x44cd0b
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x38c], 0xd5b128c8
jmp 0x44cce2
mov eax, dword [ebp - 4]
mov dword [ebp - 0x394], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x78]
sub ecx, dword [ebp - 0x308]
cmp dword [ebp + eax - 0x34], ecx
jg 0x44cd35
mov dword [ebp - 0x25c], 1
jmp 0x44cd3c
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x25c]
cmp eax, 0x3003
jg 0x44cd58
mov dword [ebp - 0x15c], 1
jmp 0x44cd5f
and dword [ebp - 0x15c], 0
cmp dword [ebp - 0x15c], 0x85fae11b
jae 0x44cd77
mov dword [ebp - 0x264], 1
jmp 0x44cd7e
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x264]
sub eax, dword [ebp - 4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x34]
jle 0x44cd9f
mov dword [ebp - 0x164], 1
jmp 0x44cda6
and dword [ebp - 0x164], 0
imul eax, dword [ebp - 0x164], 0xfff7
cmp eax, dword [ebp - 4]
jle 0x44cdc1
mov dword [ebp - 0x26c], 1
jmp 0x44cdc8
and dword [ebp - 0x26c], 0
cmp dword [ebp - 0x26c], 0x781be2fc
je 0x44cde0
mov dword [ebp - 0x16c], 1
jmp 0x44cde7
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x16c], eax
jle 0x44cdfe
mov dword [ebp - 0x274], 1
jmp 0x44ce05
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x274], eax
je 0x44ce1c
mov dword [ebp - 0x174], 1
jmp 0x44ce23
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x174], eax
je 0x44ce3a
mov dword [ebp - 0x17c], 1
jmp 0x44ce41
and dword [ebp - 0x17c], 0
mov dword [ebp - 0x27c], 0xffff
mov eax, dword [ebp - 0x27c]
imul eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x4c]
jl 0x44ceca
mov dword [ebp - 0x39c], 0
mov dword [ebp - 0x424], 7
mov dword [ebp - 0x420], 7
mov dword [ebp - 0x41c], 7
mov dword [ebp - 0x418], 7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x74]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x74], eax
mov dword [ebp - 4], 0
jmp 0x44ceb4
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jg 0x44cec8
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x34], 0
je 0x44cec6
jmp 0x44cec8
jmp 0x44cead
jmp 0x44cefe
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x44cefe
push 0xff6
push 0x24f2
push 0x6eb
push 0xea3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_IntersectClipRect]
cmp dword [ebp - 0x4c], 0
jne 0x44cf12
or eax, 0xffffffff
jne 0x44cf12
and dword [ebp - 0x284], 0
jmp 0x44cf1c
mov dword [ebp - 0x284], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x74]
mov dword [ebp - 0x3a4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x74]
mov dword [ebp - 0x3b8], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x74]
cmp dword [ebp + eax - 0x74], ecx
jg 0x44cf68
mov dword [ebp - 0x28c], 1
jmp 0x44cf6f
and dword [ebp - 0x28c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x28c]
mov dword [ebp + eax - 0x34], ecx
mov dword [ebp - 0xc], 0xb26bdde0
mov dword [ebp - 0x374], 7
mov dword [ebp - 0x370], 7
mov dword [ebp - 0x36c], 7
mov dword [ebp - 0x368], 7
mov dword [ebp - 0xc], 0xffffffea
jmp 0x44cfbe
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xfffffffb
jle 0x44d237
mov dword [ebp - 0x38], 7
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0x318], 0x3494
mov dword [ebp - 0x330], 0xffffffff
mov dword [ebp - 0xb4], 0
jmp 0x44d006
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x44d022
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x358], 0xfb6318d5
jmp 0x44cff9
mov dword [ebp - 0x38], 0
jmp 0x44d032
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jg 0x44d0dc
mov dword [ebp - 0x9c], 0
jmp 0x44d055
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x44d071
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x88], 0xffffffff
jmp 0x44d048
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x358], 0x5a60d005
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x88], 0
jmp 0x44d0ad
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x88], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 2
jge 0x44d0d7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
mov dword [ebp + eax*4 - 0x358], 0x3e8e1b88
jmp 0x44d092
jmp 0x44d02b
cmp dword [ebp - 0x38], 0xfcf33f23
ja 0x44d0f1
mov dword [ebp - 0x310], 1
jmp 0x44d0f8
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0xc], eax
jg 0x44d115
mov eax, 0x426
test eax, eax
jne 0x44d115
and dword [ebp - 0x184], 0
jmp 0x44d11f
mov dword [ebp - 0x184], 1
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x184]
jl 0x44d13f
cmp dword [ebp - 0xfc], 0
je 0x44d13f
mov dword [ebp - 0x220], 1
jmp 0x44d146
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x318]
cmp dword [ebp - 0x220], eax
jne 0x44d160
mov dword [ebp - 0x320], 1
jmp 0x44d167
and dword [ebp - 0x320], 0
cmp dword [ebp - 0xc], 0
je 0x44d17f
cmp dword [ebp - 0xc], 0
je 0x44d17f
mov dword [ebp - 0x198], 1
jmp 0x44d186
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x198], eax
jne 0x44d19d
mov dword [ebp - 0x268], 1
jmp 0x44d1a4
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x268], eax
jge 0x44d21c
cmp dword [ebp - 0xc], 0
je 0x44d21c
cmp dword [ebp - 0xc], 0
jne 0x44d1df
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0xc], 0
je 0x44d1d6
mov eax, 0x5a12a2ef
test eax, eax
jne 0x44d1df
and dword [ebp - 0x1a0], 0
jmp 0x44d1e9
mov dword [ebp - 0x1a0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x374]
cmp dword [ebp - 0x1a0], eax
jle 0x44d20a
mov dword [ebp - 0x228], 1
jmp 0x44d211
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x38], eax
jmp 0x44d232
mov dword [ebp - 0x328], 0xe4de5a82
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x330], eax
jmp 0x44cfb7
mov dword [ebp - 0xbc], 0
jmp 0x44d250
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x44d26c
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x2a0], 0xfffffff8
jmp 0x44d243
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2a0], 0
jmp 0x44d29a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2a0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2a0], 0xb
jl 0x44d2dc
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x44d2c8
push 0xfb8
push 0x2382
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2a0], 0
je 0x44d2da
jmp 0x44d2dc
jmp 0x44d27f
mov dword [ebp - 0x3e4], 0x1f9c28ad
mov byte [ebp - 0x3f], 0
movzx eax, byte [ebp - 0x3f]
test eax, eax
je 0x44d302
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x44d32e
push 0
push 0x1d5
push 0x15b6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
mov dword [ebp - 0x3ec], 1
mov dword [ebp - 0x3f4], 0xbd035c5
mov dword [ebp - 0x3fc], 0x3053
mov dword [ebp - 0x410], 0x3a151cd2
mov dword [ebp - 0x24], 0
jmp 0x44d366
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x44d37c
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x380], 0xffffffff
jmp 0x44d35f
mov dword [ebp - 0x24], 0
jmp 0x44d38c
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x44d3a2
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1a8], 1
jmp 0x44d385
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1a8], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x68], 0x5baf43b
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x44d3f9
push 0
push 0xe29
push 0x22d8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
cmp dword [ebp - 0x68], 0
je 0x44d429
mov byte [ebp - 0x47], 0
movzx eax, byte [ebp - 0x47]
test eax, eax
je 0x44d413
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov byte [ebp - 0x43], 0
movzx eax, byte [ebp - 0x43]
test eax, eax
je 0x44d427
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
jmp 0x44d485
mov dword [ebp - 0xa4], 0
jmp 0x44d442
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x44d45e
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x300], 0xa8e97eed
jmp 0x44d435
mov dword [ebp - 0x68], 0
jmp 0x44d46e
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jg 0x44d485
mov eax, dword [ebp - 0x68]
cmp dword [ebp + eax*4 - 0x300], 0
je 0x44d483
jmp 0x44d485
jmp 0x44d467
mov eax, dword [ebp - 0xe4]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x44d49c
xor eax, eax
jmp 0x44e883
mov dword [ebp - 0xf0], 0x4f823aaf
mov dword [ebp - 0x1b8], 0xffffffff
mov dword [ebp - 0xc4], 4
mov dword [ebp - 0x2f0], 0x9cdf9c77
mov dword [ebp - 0x100], 1
mov dword [ebp - 0x340], 1
mov dword [ebp - 0x33c], 1
mov dword [ebp - 0x338], 1
mov dword [ebp - 0x334], 1
mov dword [ebp - 0xac], 1
mov dword [ebp - 0x2c], 0
jmp 0x44d510
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x44d526
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x190], 0xffffffff
jmp 0x44d509
mov dword [ebp - 0x2c], 0
jmp 0x44d536
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x44d54c
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x364], 1
jmp 0x44d52f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x364]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x364], eax
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
inc eax
inc eax
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x1b8], 0x3a4c6382
jne 0x44d5a6
mov dword [ebp - 0x2b0], 1
jmp 0x44d5ad
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
neg eax
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x190]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x190]
jne 0x44d5dc
mov dword [ebp - 0x1b0], 1
jmp 0x44d5e3
and dword [ebp - 0x1b0], 0
imul eax, dword [ebp - 0x1b0], 0xffffffff
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x190]
jge 0x44d60e
mov eax, 0xebef9f3b
test eax, eax
je 0x44d60e
mov dword [ebp - 0x2d4], 1
jmp 0x44d615
and dword [ebp - 0x2d4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x190]
mov dword [ebp - 0x3f0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x190], 1
jge 0x44d644
mov dword [ebp - 0x230], 1
jmp 0x44d64b
and dword [ebp - 0x230], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x190]
cmp eax, dword [ebp - 0x230]
jge 0x44d66c
mov dword [ebp - 0x270], 1
jmp 0x44d673
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x1b8]
imul eax, dword [ebp - 0x270]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x190]
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x340], 6
jge 0x44d6a8
mov dword [ebp - 0x1c0], 1
jmp 0x44d6af
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x1c0], eax
jl 0x44d6c9
mov dword [ebp - 0x238], 1
jmp 0x44d6d0
and dword [ebp - 0x238], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x190]
cmp dword [ebp - 0x238], eax
jne 0x44d6f1
mov dword [ebp - 0x1c8], 1
jmp 0x44d6f8
and dword [ebp - 0x1c8], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1c8]
mov dword [ebp + eax - 0x340], ecx
mov eax, 0x21b7
test eax, eax
je 0x44d745
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x388], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0xf0]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x364], eax
cmp dword [ebp - 0xac], 0xec6c
jne 0x44d75d
mov dword [ebp - 0x1d0], 1
jmp 0x44d764
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x2f0]
cmp dword [ebp - 0x1d0], eax
jl 0x44d77e
mov dword [ebp - 0x240], 1
jmp 0x44d785
and dword [ebp - 0x240], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x240]
mov dword [ebp + eax - 0x340], ecx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x8c], 0
jmp 0x44d7c0
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x44d7d9
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x30], 1
jmp 0x44d7b3
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x30], 3
jmp 0x44d7fe
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x30], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0xfffffff1
jl 0x44db17
mov dword [ebp - 0x2c8], 0x25b0e446
mov dword [ebp - 0x2c4], 0x25b0e446
mov dword [ebp - 0x2c0], 0x25b0e446
mov dword [ebp - 0x2bc], 0x25b0e446
mov dword [ebp - 8], 0x6d4f2887
mov dword [ebp - 0xe8], 0x9cdc345f
mov dword [ebp - 0x32c], 0xf69a7501
mov dword [ebp - 8], 3
jmp 0x44d862
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x44db12
mov dword [ebp - 0x200], 0xffffffff
mov dword [ebp - 0x1d8], 9
mov dword [ebp - 0x84], 0x3acb6d64
mov dword [ebp - 0xcc], 0
jmp 0x44d8a3
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x44d8bf
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x430], 7
jmp 0x44d896
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x44d906
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x2c8]
mov dword [ebp - 0x1d8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c8]
cmp dword [ebp - 0x1d8], eax
je 0x44d8fa
cmp dword [ebp - 0x84], 0
jne 0x44d8fa
cmp dword [ebp - 8], 0
je 0x44d906
mov dword [ebp - 0x278], 1
jmp 0x44d90d
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x2c8]
cmp dword [ebp - 0x278], eax
jle 0x44d92b
mov dword [ebp - 0x1e0], 1
jmp 0x44d932
and dword [ebp - 0x1e0], 0
cmp dword [ebp - 0x1e0], 0xae9f9034
jne 0x44d94a
mov dword [ebp - 0x248], 1
jmp 0x44d951
and dword [ebp - 0x248], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c8]
cmp dword [ebp - 0x248], eax
jge 0x44d972
mov dword [ebp - 0x1e8], 1
jmp 0x44d979
and dword [ebp - 0x1e8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x430]
cmp dword [ebp - 0x1e8], eax
jne 0x44d999
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x2c8], 0x90f3
jne 0x44d9b5
mov dword [ebp - 0x2a4], 1
jmp 0x44d9bc
and dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x2a4], 0xfffffffb
jl 0x44d9d1
mov dword [ebp - 0x1f0], 1
jmp 0x44d9d8
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x1f0]
jne 0x44d9ef
mov dword [ebp - 0x250], 1
jmp 0x44d9f6
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x2c8]
cmp eax, dword [ebp - 0x250]
jl 0x44da14
mov dword [ebp - 0x1f8], 1
jmp 0x44da1b
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x1f8], eax
jl 0x44da32
mov dword [ebp - 0x280], 1
jmp 0x44da39
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0x280]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x30]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x30]
jg 0x44da66
mov dword [ebp - 0x258], 1
jmp 0x44da6d
and dword [ebp - 0x258], 0
mov dword [ebp - 0x200], 0xfffd
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x258]
jne 0x44da9d
mov dword [ebp - 0x2dc], 1
jmp 0x44daa4
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x2c8]
mov dword [ebp - 0x378], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x32c], eax
mov dword [ebp - 0x84], 0
jmp 0x44dae9
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xfffffff0
je 0x44db0d
mov byte [ebp - 0x3a], 0
movzx eax, byte [ebp - 0x3a]
test eax, eax
je 0x44db0b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetCapture]
jmp 0x44dadc
jmp 0x44d85b
jmp 0x44d7e9
mov byte [ebp - 0x3c], 0
movzx eax, byte [ebp - 0x3c]
test eax, eax
je 0x44db32
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov eax, dword [ebp - 0x7c]
cmp dword [eax], 0x4550
je 0x44db44
xor eax, eax
jmp 0x44e883
lea eax, [ebp - 0xa8]
push eax
push dword [ebp - 0x7c]
push 0x27ac
push 1
push 0xc55
push 0x1e57
push 1
push 0x6428
push 1
push 0x4527
call fcn.0044075d
add esp, 0x28
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x1c4], 0xfffffff9
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x20], 0
jmp 0x44dba0
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xd
jl 0x44dfe0
mov dword [ebp - 0x10], 0xf9b2cfb6
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x44dbd4
push 0x2564
push 0x1a06
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CheckDlgButton]
mov dword [ebp - 0x10], 3
jmp 0x44dbe4
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffe2
jg 0x44dfdb
mov dword [ebp - 0x60], 0xd4826422
mov dword [ebp - 0x1c], 0
jmp 0x44dc05
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x44dc1b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd8], 1
jmp 0x44dbfe
mov dword [ebp - 0x1c], 0
jmp 0x44dc2b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x44dc41
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3b0], 0xffffffff
jmp 0x44dc24
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xd8], 0
jmp 0x44dc6f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xd8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xd8], 0x1a
je 0x44de19
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0x2f4], 0x3b5b0d69
mov eax, dword [ebp - 0xf8]
shl eax, 2
test eax, eax
jne 0x44ddcc
xor eax, eax
inc eax
je 0x44dcc9
cmp dword [ebp - 0x20], 0
je 0x44dcc9
mov dword [ebp - 0x208], 1
jmp 0x44dcd0
and dword [ebp - 0x208], 0
cmp dword [ebp - 0x208], 0xfffffffb
jb 0x44dce5
mov dword [ebp - 0x298], 1
jmp 0x44dcec
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x298]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x398], eax
mov eax, 0x5a82
imul eax, eax, 0x8fe4
test eax, eax
jne 0x44dd31
cmp dword [ebp - 0x20], 0
jne 0x44dd31
and dword [ebp - 0x210], 0
jmp 0x44dd3b
mov dword [ebp - 0x210], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x210], eax
jl 0x44dd52
mov dword [ebp - 0x260], 1
jmp 0x44dd59
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x260]
je 0x44dd70
mov dword [ebp - 0x218], 1
jmp 0x44dd77
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
je 0x44dd90
cmp dword [ebp - 0x10], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd8]
cmp dword [ebp - 0x10], eax
jge 0x44ddae
mov dword [ebp - 0x288], 1
jmp 0x44ddb5
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x288]
test eax, eax
jne 0x44ddcc
and dword [ebp - 0x180], 0
jmp 0x44ddd6
mov dword [ebp - 0x180], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
cmp dword [ebp - 0x180], eax
jle 0x44ddf7
mov dword [ebp - 0x194], 1
jmp 0x44ddfe
and dword [ebp - 0x194], 0
imul eax, dword [ebp - 0x194], 0x82a7
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x60], eax
jmp 0x44dc54
mov dword [ebp - 0x60], 0
jmp 0x44de29
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x16
jge 0x44dfd6
mov dword [ebp - 0x1dc], 0x30bf04b2
mov dword [ebp - 0xb8], 0
jmp 0x44de56
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x44de72
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x3d0], 7
jmp 0x44de49
cmp dword [ebp - 0x1c4], 0xffffffff
je 0x44de87
mov dword [ebp - 0x19c], 1
jmp 0x44de8e
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1a4], eax
jg 0x44deb7
cmp dword [ebp - 0x20], 0
je 0x44deb7
mov dword [ebp - 0x314], 1
jmp 0x44debe
and dword [ebp - 0x314], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xd8], 0xffff
je 0x44deea
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3d0], 0
jne 0x44deea
and dword [ebp - 0x1ac], 0
jmp 0x44def4
mov dword [ebp - 0x1ac], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3d0]
cmp dword [ebp - 0x1ac], eax
jl 0x44df15
mov dword [ebp - 0x1b4], 1
jmp 0x44df1c
and dword [ebp - 0x1b4], 0
cmp dword [ebp - 0x1b4], 1
jg 0x44df31
mov dword [ebp - 0x1bc], 1
jmp 0x44df38
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x1bc]
inc eax
cmp eax, dword [ebp - 0x1c4]
jne 0x44df56
mov dword [ebp - 0x1cc], 1
jmp 0x44df5d
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
add eax, 0x5e4a7d94
cmp eax, dword [ebp - 0x10]
jg 0x44df79
mov dword [ebp - 0x1d4], 1
jmp 0x44df80
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x1dc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b0]
cmp dword [ebp - 0x1dc], eax
jne 0x44dfad
mov dword [ebp - 0x1e4], 1
jmp 0x44dfb4
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x1e4]
lea eax, [ecx + eax + 0x6189]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd8], eax
jmp 0x44de22
jmp 0x44dbdd
jmp 0x44db99
cmp dword [ebp - 0xa8], 0
jne 0x44dff0
xor eax, eax
jmp 0x44e883
push 0x332e
push 0x5b21
lea eax, [ebp - 0x14]
push eax
push 1
push 0x7b1
push 1
push 0x353a
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x3dc]
push eax
push dword [ebp - 0xe4]
push 1
push dword [ebp - 0x7c]
push 0x7a32
push 1
push 0x3bfa
push 1
call fcn.0044b990
add esp, 0x40
mov dword [ebp - 0x3a0], 0x9fe387fb
mov byte [ebp - 0x40], 0
movzx eax, byte [ebp - 0x40]
test eax, eax
je 0x44e059
push 0
call dword [sym.imp.USER32.dll_DestroyCursor]
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x44e07e
push 0x1ae5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetROP2]
push 0x298d
push 0x42f0
push dword [ebp - 0x14]
push 0
push 0x2afa
push dword [ebp - 0x7c]
push 1
push 0x1192
push 1
push dword [ebp + 8]
call fcn.0044075d
add esp, 0x28
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x108], 0x426a7609
mov dword [ebp - 0x324], 0x88e10e5e
mov dword [ebp - 0x28], 0
jmp 0x44e0d7
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x44e0ed
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2b8], 0x18d5
jmp 0x44e0d0
mov dword [ebp - 0x28], 0
jmp 0x44e0fd
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x44e113
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2ac], 0xe1b8
jmp 0x44e0f6
mov byte [ebp - 0x44], 0
movzx eax, byte [ebp - 0x44]
test eax, eax
je 0x44e12c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetCapture]
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x3e0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b8]
mov dword [ebp - 0x3a8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b8]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x2b8]
lea eax, [eax + ecx - 0x6b60b004]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2ac]
jne 0x44e187
mov dword [ebp - 0x1ec], 1
jmp 0x44e18e
and dword [ebp - 0x1ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ac]
cmp dword [ebp - 0x1ec], eax
jle 0x44e1af
mov dword [ebp - 0x1f4], 1
jmp 0x44e1b6
and dword [ebp - 0x1f4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b8]
cmp dword [ebp - 0x1f4], eax
jl 0x44e1d7
mov dword [ebp - 0x1fc], 1
jmp 0x44e1de
and dword [ebp - 0x1fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ac]
imul eax, dword [ebp - 0x1fc]
test eax, eax
je 0x44e222
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2ac], 0
je 0x44e222
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2ac], 0
je 0x44e222
mov dword [ebp - 0x204], 1
jmp 0x44e229
and dword [ebp - 0x204], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b8]
cmp eax, dword [ebp - 0x204]
jg 0x44e24a
mov dword [ebp - 0x104], 1
jmp 0x44e251
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0xa8]
sub ecx, dword [eax + 0x34]
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x3f8], 0xe2fd
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x304], eax
mov dword [ebp - 0x70], 0xfffffff2
jmp 0x44e2af
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x1b
jne 0x44e2df
mov byte [ebp - 0x46], 0
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x44e2d5
push 0x9a2
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
cmp dword [ebp - 0x70], 0
je 0x44e2dd
jmp 0x44e2a8
jmp 0x44e2a8
cmp dword [ebp - 0x110], 0
je 0x44e310
push dword [ebp - 0x110]
push dword [ebp - 0x14]
push 0x5543
push 1
push 0
push 1
push 1
push 0x11de
push 0x45c5
call fcn.004429d9
add esp, 0x24
mov dword [ebp - 0x40c], 0xf99ff606
mov dword [ebp - 0x408], 0xf99ff606
mov dword [ebp - 0x404], 0xf99ff606
mov dword [ebp - 0x400], 0xf99ff606
mov dword [ebp - 0xc8], 0x76e6bacd
mov dword [ebp - 0xc8], 0
jmp 0x44e35b
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jg 0x44e37a
mov byte [ebp - 0x3b], 0
movzx eax, byte [ebp - 0x3b]
test eax, eax
je 0x44e378
push 0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x44e34e
push dword [ebp - 0x14]
call fcn.0043cf14
pop ecx
test eax, eax
jne 0x44e38e
xor eax, eax
jmp 0x44e883
mov dword [ebp - 0x2ec], 0xffffffff
mov dword [ebp - 0x2e8], 0xffffffff
mov dword [ebp - 0x2e4], 0xffffffff
mov dword [ebp - 0x2e0], 0xffffffff
mov dword [ebp - 0xb0], 0xfffffffb
mov dword [ebp - 0x3b4], 0x98ab79ae
mov dword [ebp - 0xc0], 0
jmp 0x44e3e3
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jge 0x44e3fc
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x64], 0x606de713
jmp 0x44e3d6
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x64], 0
jmp 0x44e421
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x64], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 4
jge 0x44e445
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp + eax*4 - 0x2ec], 0x905d09ea
jmp 0x44e40c
mov dword [ebp - 0xb0], 0x19
jmp 0x44e45e
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0xffffffea
jle 0x44e74f
mov dword [ebp - 0x30c], 0xc28cae2f
mov dword [ebp - 0x3e8], 0xffffffff
mov dword [ebp - 0x31c], 3
mov dword [ebp - 0x90], 0
jmp 0x44e4a2
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x44e4be
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x98], 1
jmp 0x44e495
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x44e4e7
push 0xfce
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolygon]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x98], 0xffffffe9
jmp 0x44e515
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x98]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x98], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x98], 0x1d
jg 0x44e74a
mov dword [ebp - 0x54], 0xd513c61c
mov dword [ebp - 0xa0], 4
mov dword [ebp - 0xf4], 9
mov dword [ebp - 0xec], 0xd6446bd2
mov dword [ebp - 0x168], 0xa7054f86
mov dword [ebp - 0x54], 0
jmp 0x44e568
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jg 0x44e745
mov dword [ebp - 0x3bc], 0
mov dword [ebp - 0x414], 0x7cbae8b0
mov dword [ebp - 0x3c4], 0xfffffffe
mov dword [ebp - 0x2d8], 5
mov dword [ebp - 0x37c], 0xffffffff
cmp dword [ebp - 0xa0], 0
jne 0x44e5b9
mov dword [ebp - 0x118], 1
jmp 0x44e5c0
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x118]
jle 0x44e5da
mov dword [ebp - 0x138], 1
jmp 0x44e5e1
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x2e4]
cmp dword [ebp - 0x31c], eax
jl 0x44e5ff
mov dword [ebp - 0x120], 1
jmp 0x44e606
and dword [ebp - 0x120], 0
cmp dword [ebp - 0x120], 0x6d786ff5
jg 0x44e61e
mov dword [ebp - 0x128], 1
jmp 0x44e625
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x128], eax
je 0x44e63f
mov dword [ebp - 0x130], 1
jmp 0x44e646
and dword [ebp - 0x130], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x130], eax
jg 0x44e664
mov dword [ebp - 0x140], 1
jmp 0x44e66b
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x2e8]
imul eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x140]
jge 0x44e690
mov dword [ebp - 0x148], 1
jmp 0x44e697
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0xec], eax
jge 0x44e6ca
mov dword [ebp - 0x150], 1
jmp 0x44e6d1
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x2e4]
cmp eax, dword [ebp - 0x150]
jge 0x44e6ef
mov dword [ebp - 0x158], 1
jmp 0x44e6f6
and dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 0x13cd4fe9
jg 0x44e70e
mov dword [ebp - 0x160], 1
jmp 0x44e715
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
imul eax, dword [ebp - 0x30c]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x2d8], eax
jmp 0x44e561
jmp 0x44e4fa
jmp 0x44e451
push 0x1226
push 1
push 0
push 0
push dword [ebp - 0x14]
push 1
push 0x4283
push 0x4348
push 0x22be
push 0x4470
push 0x36f
push 0x50f8
push 0x3584
push 1
call fcn.00447846
add esp, 0x38
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x6c], 6
mov dword [ebp - 0x5c], 7
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x80], 0xffffffe6
jmp 0x44e7be
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x20
jle 0x44e811
mov dword [ebp - 0x5c], 0xffffffef
jmp 0x44e7d4
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffee
jle 0x44e809
mov dword [ebp - 0x6c], 0
jmp 0x44e7ea
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 4
jl 0x44e807
mov dword [ebp - 0x2d0], 0xfffffffb
cmp dword [ebp - 0x2d0], 0
je 0x44e805
jmp 0x44e807
jmp 0x44e7e3
jmp 0x44e7cd
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x5c], eax
jmp 0x44e7b7
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x44e862
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xa8]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x170], ecx
jne 0x44e836
xor eax, eax
jmp 0x44e883
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x170]
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0
jne 0x44e858
xor eax, eax
jmp 0x44e883
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x10], 1
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x10], 0
je 0x44e876
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x178], eax
jmp 0x44e87d
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
mov esp, ebp
pop ebp
ret