Function at 0x44cb80
Capabilities:
Check for peb beingdebugged flag
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4bcfc8
mov eax, dword fs:[0]
push eax
sub esp, 0x60
push ebx
push esi
push edi
mov eax, dword [0x4e3f80]
xor eax, esp
push eax
lea eax, [esp + 0x70]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [edi + 0xa8]
mov ecx, dword [edi + 0xac]
mov edx, dword [edi + 0xb0]
mov dword [esp + 0x28], eax
mov eax, dword [edi + 0xb4]
mov dword [esp + 0x24], ecx
mov ecx, dword [ebp + 8]
mov dword [esp + 0x20], eax
lea eax, [ecx - 0x7d]
mov dword [esp + 0x1c], edx
cmp eax, 8
ja case.0x44cbe5.127
jmp dword [eax*4 + 0x44d46c]
mov ebx, dword [ebp + 0xc]
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x44cbf4
sub eax, edx
sar eax, 1
jne 0x44cc44
push 0x4c3af8
lea ecx, [edi + 0x668]
call fcn.00401a90
push 0x4c3af8
lea ecx, [edi + 0x664]
call fcn.00401a90
mov dword [edi + 0x1c0], 1
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xor esi, esi
movzx eax, word [ebx + esi*2 + 2]
inc esi
test ax, ax
je 0x44cc57
cmp ax, 0x20
jne 0x44cc46
push esi
push ebx
lea ecx, [esp + 0x34]
call fcn.00423400
lea ecx, [edi + 0x668]
push eax
mov dword [esp + 0x7c], 0
call fcn.00408830
lea ecx, [esp + 0x2c]
mov dword [esp + 0x78], 0xffffffff
call fcn.00401a70
lea esi, [ebx + esi*2 + 2]
push esi
lea ecx, [esp + 0x34]
call fcn.004019b0
push eax
lea ecx, [edi + 0x664]
mov dword [esp + 0x7c], 1
call fcn.00408830
lea ecx, [esp + 0x30]
call fcn.00401a70
push esi
call fcn.0049e31d
add esp, 4
mov dword [edi + 0x658], eax
mov dword [edi + 0x1c0], 1
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
call fcn.0044ef30
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [edi]
mov eax, dword [edx + 0x50]
mov ecx, edi
call eax
test eax, eax
je 0x44d454
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x3c]
push eax
push 0x4cbae4
push ecx
call fcn.0049e2e5
mov eax, dword [esp + 0x48]
add esp, 0x14
cmp eax, 7
ja case.default.0x44cd38
jmp dword [eax*4 + 0x44d490]
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, ecx
cdq
mov ebx, eax
xor ebx, edx
sub ebx, edx
mov eax, esi
cdq
xor eax, edx
sub eax, edx
cmp ebx, eax
mov eax, ecx
jl 0x44cd5f
mov eax, esi
sub dword [edi + 0xa8], eax
sub dword [edi + 0xac], eax
add dword [edi + 0xb0], eax
add dword [edi + 0xb4], eax
jmp case.default.0x44cd38
mov eax, dword [esp + 0x10]
sub dword [edi + 0xac], eax
add dword [edi + 0xb4], eax
jmp case.default.0x44cd38
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, ecx
cdq
mov ebx, eax
xor ebx, edx
sub ebx, edx
mov eax, esi
cdq
xor eax, edx
sub eax, edx
cmp ebx, eax
mov eax, ecx
jl 0x44cd65
mov eax, esi
jmp 0x44cd65
mov edx, dword [esp + 0x14]
add dword [edi + 0xb0], edx
jmp case.default.0x44cd38
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, ecx
cdq
mov ebx, eax
xor ebx, edx
sub ebx, edx
mov eax, esi
cdq
xor eax, edx
sub eax, edx
cmp ebx, eax
mov eax, ecx
jl 0x44cd6b
mov eax, esi
add dword [edi + 0xb0], eax
add dword [edi + 0xb4], eax
jmp case.default.0x44cd38
mov eax, dword [esp + 0x10]
add dword [edi + 0xb4], eax
jmp case.default.0x44cd38
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, ecx
cdq
mov ebx, eax
xor ebx, edx
sub ebx, edx
mov eax, esi
cdq
xor eax, edx
sub eax, edx
cmp ebx, eax
mov eax, ecx
jl 0x44ce19
mov eax, esi
sub dword [edi + 0xa8], eax
add dword [edi + 0xb0], eax
add dword [edi + 0xb4], eax
jmp case.default.0x44cd38
mov eax, dword [esp + 0x14]
sub dword [edi + 0xa8], eax
add dword [edi + 0xb0], eax
cmp dword [edi + 0xb0], 1
jl 0x44d0b4
mov eax, dword [edi + 0xb4]
cmp eax, 1
jl 0x44d0b4
mov ecx, dword [esp + 0x20]
cmp eax, ecx
jle 0x44cf8c
push 0x4c3af6
lea ecx, [esp + 0x3c]
call fcn.00408080
mov dword [esp + 0x78], 2
mov eax, dword [eax]
mov edx, dword [edi]
push 0
push eax
mov eax, dword [edx + 0x64]
push 0x81
mov ecx, edi
call eax
lea ecx, [esp + 0x38]
mov dword [esp + 0x78], 0xffffffff
call fcn.00401a70
mov ecx, dword [0x4ee77c]
mov ebx, dword [sym.imp.USER32.dll_GetDC]
push ecx
call ebx
push 8
mov esi, eax
push esi
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0044f1c0
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [edi]
mov edx, dword [eax + 0x88]
lea ecx, [esp + 0x5c]
push ecx
mov ecx, edi
call edx
mov eax, dword [esp + 0x68]
sub eax, dword [esp + 0x60]
cmp dword [esp + 0x50], eax
jge 0x44cf45
jmp 0x44cef0
mov eax, dword [edi + 0x1c8]
mov edx, dword [edi]
mov edx, dword [edx + 0x94]
add eax, 8
push eax
mov ecx, edi
call edx
mov eax, dword [0x4ee77c]
push eax
call ebx
push 8
mov esi, eax
push esi
lea ecx, [esp + 0x54]
push ecx
mov ecx, edi
call fcn.0044f1c0
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov edx, dword [edi]
mov edx, dword [edx + 0x88]
lea eax, [esp + 0x5c]
push eax
mov ecx, edi
call edx
mov eax, dword [esp + 0x68]
sub eax, dword [esp + 0x60]
cmp dword [esp + 0x50], eax
jl 0x44cef0
push 0x4c3af6
lea ecx, [esp + 0x40]
call fcn.00408080
mov dword [esp + 0x78], 3
mov eax, dword [eax]
mov edx, dword [edi]
mov edx, dword [edx + 0x64]
push 0
push eax
push 0x81
mov ecx, edi
call edx
lea ecx, [esp + 0x3c]
call fcn.00401a70
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
jge 0x44d454
push 0x4c3af6
lea ecx, [esp + 0x44]
call fcn.00408080
mov dword [esp + 0x78], 4
mov eax, dword [eax]
mov edx, dword [edi]
push 0
push eax
mov eax, dword [edx + 0x64]
push 0x81
mov ecx, edi
call eax
lea ecx, [esp + 0x40]
mov dword [esp + 0x78], 0xffffffff
call fcn.00401a70
mov ecx, dword [0x4ee77c]
mov ebx, dword [sym.imp.USER32.dll_GetDC]
push ecx
call ebx
push 0xfffffffffffffff8
mov esi, eax
push esi
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0044f1c0
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [edi]
mov edx, dword [eax + 0x88]
lea ecx, [esp + 0x5c]
push ecx
mov ecx, edi
call edx
mov eax, dword [esp + 0x68]
sub eax, dword [esp + 0x60]
cmp dword [esp + 0x50], eax
jl 0x44d06d
mov eax, dword [edi + 0x1c8]
cmp eax, 0x10
jle 0x44d06d
mov edx, dword [edi]
add eax, 0xfffffff8
push eax
mov eax, dword [edx + 0x94]
mov ecx, edi
call eax
mov ecx, dword [0x4ee77c]
push ecx
call ebx
push 0xfffffffffffffff8
mov esi, eax
push esi
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.0044f1c0
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [edi]
mov edx, dword [eax + 0x88]
lea ecx, [esp + 0x5c]
push ecx
mov ecx, edi
call edx
mov eax, dword [esp + 0x68]
sub eax, dword [esp + 0x60]
cmp dword [esp + 0x50], eax
jge 0x44d012
push 0x4c3af6
lea ecx, [esp + 0x48]
call fcn.00408080
mov dword [esp + 0x78], 5
mov eax, dword [eax]
mov edx, dword [edi]
mov edx, dword [edx + 0x64]
push 0
push eax
push 0x81
mov ecx, edi
call edx
lea ecx, [esp + 0x44]
call fcn.00401a70
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
mov dword [edi + 0xa8], eax
mov eax, dword [esp + 0x20]
mov dword [edi + 0xac], ecx
mov dword [edi + 0xb0], edx
mov dword [edi + 0xb4], eax
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
lea ecx, [esp + 0x14]
push ecx
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x3c]
push eax
push 0x4cbae4
push ecx
call fcn.0049e2e5
mov ecx, dword [esp + 0x48]
add dword [edi + 0xa8], ecx
mov bl, byte [esp + 0x28]
mov eax, dword [edi + 0xa8]
add esp, 0x14
test bl, 2
je 0x44d143
test ecx, ecx
je 0x44d143
cdq
and edx, 7
add eax, edx
sar eax, 3
add eax, eax
add eax, eax
add eax, eax
mov dword [edi + 0xa8], eax
mov ecx, dword [esp + 0x10]
add dword [edi + 0xac], ecx
mov eax, dword [edi + 0xac]
test bl, 1
je 0x44d171
test ecx, ecx
je 0x44d171
cdq
and edx, 7
add eax, edx
sar eax, 3
add eax, eax
add eax, eax
add eax, eax
mov dword [edi + 0xac], eax
push 0x4c3af6
lea ecx, [esp + 0x4c]
call fcn.00408080
mov dword [esp + 0x78], 6
mov eax, dword [eax]
mov edx, dword [edi]
mov edx, dword [edx + 0x64]
push 0
push eax
push 0x81
mov ecx, edi
call edx
lea ecx, [esp + 0x48]
call fcn.00401a70
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [ebp + 0xc]
lea eax, [esp + 0x34]
push eax
push 0x4c3af0
push ecx
call fcn.0049e2e5
mov edx, dword [0x4ee77c]
add esp, 0xc
push edx
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
push 0
push esi
lea eax, [esp + 0x1c]
push eax
mov ecx, edi
call fcn.0044f1c0
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov edx, dword [edi]
mov edx, dword [edx + 0x88]
lea eax, [esp + 0x4c]
push eax
mov ecx, edi
call edx
mov ebx, dword [esp + 0x54]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x58]
mov esi, dword [esp + 0x50]
mov eax, ebx
sub eax, ecx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x34]
sub edx, esi
cmp eax, 7
ja case.default.0x44d22b
jmp dword [eax*4 + 0x44d4b0]
mov eax, dword [esp + 0x14]
lea ebx, [eax + ecx]
jmp 0x44d31f
mov ebx, dword [esp + 0x14]
mov eax, ebx
sub eax, dword [esp + 0x20]
cdq
sub eax, edx
sar eax, 1
neg eax
add ecx, eax
mov eax, dword [esp + 0x18]
add ebx, ecx
add eax, esi
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x58], eax
jmp 0x44d329
mov edx, dword [esp + 0x18]
mov ecx, ebx
sub ecx, dword [esp + 0x14]
add edx, esi
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x58], edx
jmp case.default.0x44d22b
mov eax, dword [esp + 0x18]
sub eax, edx
cdq
sub eax, edx
sar eax, 1
neg eax
add esi, eax
mov eax, dword [esp + 0x18]
mov ecx, ebx
sub ecx, dword [esp + 0x14]
add eax, esi
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], esi
mov dword [esp + 0x58], eax
jmp case.default.0x44d22b
mov esi, dword [esp + 0x58]
mov ecx, ebx
sub ecx, dword [esp + 0x14]
sub esi, dword [esp + 0x18]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], esi
jmp case.default.0x44d22b
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x58]
mov eax, ebx
sub eax, dword [esp + 0x20]
cdq
sub eax, edx
sar eax, 1
neg eax
add ecx, eax
add ebx, ecx
sub esi, dword [esp + 0x18]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], esi
jmp 0x44d329
mov eax, dword [esp + 0x14]
lea ebx, [eax + ecx]
mov eax, dword [esp + 0x18]
sub edx, eax
add esi, edx
add eax, esi
mov dword [esp + 0x50], esi
mov dword [esp + 0x58], eax
jmp 0x44d329
mov eax, dword [esp + 0x14]
lea ebx, [eax + ecx]
mov eax, dword [esp + 0x18]
sub eax, edx
cdq
sub eax, edx
sar eax, 1
neg eax
add esi, eax
mov dword [esp + 0x50], esi
mov edx, dword [esp + 0x18]
add edx, esi
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], ebx
mov eax, dword [esp + 0x58]
sub eax, esi
push eax
sub ebx, ecx
push ebx
push esi
push ecx
mov ecx, edi
call fcn.00422150
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [ebp + 0xc]
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x30]
push eax
push str._d___d___d___d
push ecx
call fcn.0049e2e5
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x34]
add esp, 0x18
cmp esi, ecx
jle 0x44d394
mov eax, esi
mov esi, ecx
mov ecx, eax
mov dword [esp + 0x24], esi
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
cmp eax, edx
jle 0x44d3aa
mov dword [esp + 0x20], edx
mov edx, eax
mov dword [esp + 0x28], edx
mov eax, dword [edi + 0xa8]
cmp esi, eax
jge 0x44d3dc
mov ebx, dword [edi + 0xb0]
add ebx, eax
cmp ecx, ebx
jle 0x44d3dc
mov ecx, dword [edi + 0xac]
cmp dword [esp + 0x20], ecx
jge 0x44d3d8
mov ebx, dword [edi + 0xb4]
add ebx, ecx
cmp edx, ebx
jg 0x44d404
mov ecx, dword [esp + 0x1c]
cmp ecx, eax
jle 0x44d454
mov ecx, dword [edi + 0xb0]
add ecx, eax
cmp ecx, esi
jle 0x44d454
mov eax, dword [edi + 0xac]
cmp edx, eax
jle 0x44d454
mov edx, dword [edi + 0xb4]
add edx, eax
cmp edx, dword [esp + 0x20]
jle 0x44d454
mov eax, dword [edi]
mov edx, dword [eax + 0x64]
or dword [edi + 0xc8], 2
push 0
push 0x4c3af8
push 0x28
mov ecx, edi
call edx
mov eax, dword [edi]
mov edx, dword [eax + 0x58]
mov ecx, edi
call edx
mov eax, dword [edi]
mov edx, dword [eax + 0x60]
mov ecx, edi
call edx
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
push eax
push edx
push ecx
mov ecx, edi
call fcn.00446b20
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc