Function at 0x4444f0
Capabilities:
Enumerate gui resources
Lock the desktop

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x238
push ebx
push esi
push edi
xor edi, edi
mov ebx, ecx
push edi
push dword [ebp + 8]
mov ecx, 0x658670
call fcn.0041c6d0
mov esi, eax
mov dword [ebp - 0x10], esi
test esi, esi
je 0x4445e0
cmp dword [ebp + 0x14], edi
je 0x4447a6
test byte [0x652fc0], 4
je 0x44457f
mov ecx, dword [esi + 0x814]
lea eax, [esi + 0x814]
test ecx, ecx
jne 0x444542
mov dword [ebp - 8], edi
jmp 0x44455d
mov eax, dword [ecx]
lea edx, [ebp - 4]
push edx
push 0x10000302
push ecx
call dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov dword [ebp - 8], eax
lea eax, [esi + 0x814]
mov ecx, eax
call fcn.004056b0
movzx eax, al
push eax
push dword [ebp - 8]
push str.Acquire_device:_pktID_d__IsBtn_d_n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0x14
mov eax, dword [ebp + 0x10]
mov dword [ebp - 4], edi
cmp eax, 0x1b
je 0x44458f
cmp eax, 0x49
jne 0x4445ac
mov ecx, dword [0x658538]
cmp ecx, 0x237c
je 0x4445a5
cmp ecx, 0x237d
jne 0x4445ac
mov dword [ebp - 4], 1
push eax
push dword [ebp + 0xc]
lea ecx, [ebx + 0x98]
push dword [ebp + 8]
mov dword [ebp - 8], ecx
call fcn.00442a60
push dword [ebp - 4]
mov ecx, eax
mov dword [ebp - 0xc], eax
push 1
push esi
call fcn.00441130
test eax, eax
jne 0x4445eb
push dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
call fcn.00442b10
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
cmp dword [ebx + 0x70], edi
je 0x444661
test byte [esi + 0x7d0], 1
je 0x444661
push 0
push 0x51aae4
push dword [ebp + 0xc]
mov ecx, ebx
push dword [ebp + 8]
call fcn.004486e0
push 0x51aae4
push dword [ebp + 0xc]
lea ecx, [ebx + 0x4c]
push dword [ebp + 8]
call fcn.0041c660
test byte [0x652fc0], 4
mov dword [ebp - 4], eax
je 0x444644
push eax
push str._nSound_Config_String_is__s__n
push 3
push str.CPluginAction::Event
call fcn.004cb410
mov eax, dword [ebp - 4]
add esp, 0x10
test eax, eax
je 0x444661
cmp word [eax], di
je 0x444661
cmp dword [ebp + 0x10], 0xb
je 0x444661
push 0x22001
push 0
push eax
call dword [sym.imp.WINMM.dll_PlaySoundW]
cmp dword [esi + 0x73c], edi
je 0x444703
push 0
push 0x513a70
push dword [ebp + 0xc]
mov ecx, ebx
push dword [ebp + 8]
call fcn.004486e0
push 0x513a70
push dword [ebp + 0xc]
lea ecx, [ebx + 0x4c]
push dword [ebp + 8]
call fcn.0041c5c0
test eax, eax
je 0x444703
cmp eax, dword [ebx + 0x50]
jae 0x444703
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 0x54]
mov ecx, dword [eax + ecx*4 + 8]
mov dword [ebp - 0x30], ecx
test ecx, ecx
je 0x444703
cmp word [ecx], di
je 0x444703
mov eax, dword [esi + 0x73c]
dec eax
jne 0x444703
lea eax, [ebp - 4]
mov dword [ebp - 4], edi
push eax
push 0x51afdc
push ecx
call fcn.004d4967
mov eax, dword [ebp - 4]
add esp, 0xc
test eax, eax
je 0x444703
test byte [0x652fc0], 4
je 0x4446fb
push dword [ebp - 0x30]
push str.LEDPattern_String_is:__s__n
push 3
push str.CPluginAction::Event
call fcn.004cb410
mov eax, dword [ebp - 4]
add esp, 0x10
push eax
mov ecx, esi
call fcn.0042ea80
cmp dword [ebx + 0x70], edi
je 0x444711
test byte [esi + 0x7d0], 1
jne 0x444719
cmp dword [esi + 0x73c], edi
je 0x444749
mov eax, dword [ebp + 0x10]
cmp eax, 5
je 0x444730
cmp eax, 0x10
je 0x444730
cmp eax, 0x1c
je 0x444730
cmp eax, 0x39
jne 0x44474c
push 0
push eax
call fcn.00441210
add esp, 4
mov ecx, ebx
push eax
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.004486e0
mov eax, dword [ebp + 0x10]
cmp eax, 0x62
ja case.0x444758.4
movzx eax, byte [eax + 0x445860]
jmp dword [eax*4 + 0x445858]
test byte [0x652fc0], 8
je 0x444797
lea ecx, [esi + 0x814]
call fcn.004056b0
movzx eax, al
lea ecx, [esi + 0x814]
push eax
call fcn.004081e0
push eax
push str.Unacquire_device:_pktID_d__IsBtn_d_n
push 4
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0x14
mov ecx, dword [ebp - 0xc]
push 1
push 0
push esi
call fcn.00441130
jmp case.0x444758.4
push dword [ebp + 0x10]
lea eax, [ebx + 0x98]
push dword [ebp + 0xc]
mov ecx, eax
mov dword [ebp - 8], eax
push dword [ebp + 8]
call fcn.00445a20
mov dword [ebp - 0xc], eax
test eax, eax
je 0x4445e0
mov ecx, dword [ebp + 0xc]
xor edx, edx
mov dword [ebp - 4], edx
test cl, 0x10
je 0x44481b
cmp dword [esi + 0x714], edx
je 0x44481b
push dword [0x6579b8]
call dword [sym.imp.USER32.dll_GetDC]
mov ecx, dword [ebp - 0x10]
mov esi, eax
mov eax, dword [ebp + 0xc]
sar eax, 0xc
push 0
and eax, 0xff
dec eax
push eax
push dword [ebp + 0x14]
push esi
call fcn.0041bda0
push esi
push dword [0x6579b8]
call dword [sym.imp.USER32.dll_ReleaseDC]
mov esi, dword [ebp - 0x10]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
cmp edx, 0x62
ja case.0x44482e.4
movzx eax, byte [edx + 0x4459a0]
jmp dword [eax*4 + 0x4458c4]
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
cmp dword [ebp + 0x14], edi
je 0x444859
mov ecx, ebx
call fcn.0044a440
mov edi, eax
jmp 0x4457d3
mov edi, 1
jmp 0x4457da
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
cmp dword [ebp + 0x14], edi
je 0x444859
mov ecx, ebx
call fcn.0044a240
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
cmp dword [ebp + 0x14], edi
je 0x444859
push dword [ebp + 8]
mov ecx, ebx
call fcn.004414f0
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
cmp dword [ebp + 0x14], edi
je 0x444859
push dword [ebp + 8]
mov ecx, ebx
call fcn.00441810
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
cmp dword [ebp + 0x14], edi
je 0x444859
push dword [ebp + 0x10]
mov ecx, ebx
call fcn.00448d60
mov edi, eax
jmp 0x4457d3
cmp dword [ebp + 0x14], edi
je 0x44495b
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne 0x44495b
push eax
push 5
push dword [ebp + 0xc]
mov ecx, ebx
push dword [ebp + 8]
call fcn.00449620
mov edi, eax
test edi, edi
jne 0x444960
cmp dword [esi + 0x7b4], eax
je 0x444960
mov eax, dword [ebp + 8]
shl eax, 0x10
or eax, 5
push eax
push dword [ebp + 0xc]
push 0x9002
push dword [0x6579b8]
call dword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
cmp dword [ebp + 0x14], eax
sete al
jmp 0x444e2c
mov edi, 1
xor eax, eax
cmp dword [ebp + 0x14], eax
sete al
jmp 0x444e2c
cmp dword [ebp + 0x14], edi
je case.0x44482e.11
test byte [0x652fc0], 4
mov edi, dword [esi + 0xab8]
je 0x4449a1
push 0
push 0
mov ecx, edi
call fcn.0049f9e0
push eax
push str.epaToggleExtZone:_will_update_CBDualModeZone__UserCfg_x__n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0x10
push edi
mov ecx, esi
call fcn.00432100
push 0
push 0
mov ecx, edi
call fcn.0049ece0
test al, al
jns case.0x44482e.11
test byte [0x652fc0], 4
mov edi, dword [esi + 0xa70]
je 0x4449e7
push 0
push 0
mov ecx, edi
call fcn.0049f9e0
push eax
push str.epaToggleExtZone:_will_update_CBSliderZone__UserCfg_x__n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0x10
push edi
mov ecx, esi
call fcn.00432100
mov edi, 1
jmp 0x4457d3
cmp dword [ebp + 0x14], edi
je 0x444859
push 1
mov ecx, esi
call fcn.0042f820
mov edi, eax
jmp 0x4457d3
push dword [ebp + 0x14]
mov ecx, esi
call fcn.0042f820
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
push dword [ebp + 0x14]
mov ecx, ebx
push 4
push dword [ebp + 8]
call fcn.00449920
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
push dword [ebp + 0x14]
mov ecx, ebx
push 8
push dword [ebp + 8]
call fcn.00449920
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
push dword [ebp + 0x14]
mov ecx, ebx
push 1
push dword [ebp + 8]
call fcn.00449920
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
push dword [ebp + 0x14]
mov ecx, ebx
push 2
push dword [ebp + 8]
call fcn.00449920
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
mov eax, dword [ebp + 0x14]
jne 0x444acb
test eax, eax
je 0x444ad5
mov edi, 1
jmp 0x4457d6
push dword [ebp + 8]
mov ecx, ebx
call fcn.0044a1e0
mov edi, eax
jmp 0x4457da
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
cmp dword [ebp + 0x14], edi
je 0x444859
mov ecx, ebx
call fcn.00441d50
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
cmp dword [ebp + 0x14], edi
je 0x444859
mov ecx, ebx
call fcn.00441d70
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne 0x44495b
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x44495b
push 0
push 0x10
push dword [ebp + 0xc]
mov ecx, ebx
push dword [ebp + 8]
call fcn.00449620
mov edi, eax
xor eax, eax
cmp dword [ebp + 0x14], eax
sete al
jmp 0x444e2c
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
cmp dword [ebp + 0x14], edi
je 0x444859
mov ecx, ebx
call fcn.00448e40
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
cmp dword [ebp + 0x14], edi
je 0x444859
mov ecx, ebx
call fcn.00442330
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
cmp dword [ebp + 0x14], edi
je 0x444859
mov ecx, ebx
call fcn.004415c0
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
cmp dword [ebp + 0x14], edi
je 0x444859
mov ecx, ebx
call fcn.004412d0
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
cmp dword [ebp + 0x14], edi
je 0x444859
mov ecx, ebx
call fcn.00441400
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
cmp dword [ebp + 0x14], edi
je 0x444859
mov ecx, ebx
call fcn.004416b0
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
cmp dword [ebp + 0x14], edi
je 0x444859
mov ecx, ebx
call fcn.00441760
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
push dword [ebp + 0x14]
mov ecx, ebx
push dword [ebp + 8]
call fcn.0044c4b0
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
push dword [ebp + 0x14]
mov ecx, ebx
push dword [ebp + 8]
call fcn.0044c160
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
cmp dword [ebp + 0x14], edi
je 0x444859
push 1
push dword [ebp + 0xc]
mov ecx, ebx
push dword [ebp + 8]
call fcn.00448fd0
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
call fcn.004c66e0
push 0x104
lea ecx, [ebp - 0x238]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
push 0x12
lea eax, [ebp - 0x238]
push str.Photos_PhotoCanvas
push eax
call fcn.004d277f
add esp, 0xc
test eax, eax
jne 0x444d8c
push esi
mov esi, dword [ebp + 0xc]
mov ecx, ebx
push esi
call fcn.0044b3c0
test eax, eax
je 0x444d8f
mov ecx, ebx
cmp dword [ebp + 0x14], edi
je 0x444d77
push 1
call fcn.0044ca50
push 1
push esi
push dword [ebp + 8]
mov ecx, ebx
call fcn.00448fd0
jmp 0x4457d3
push 0
call fcn.0044ca50
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov esi, dword [ebp + 0xc]
cmp dword [ebp + 0x14], edi
je 0x444859
push 1
push esi
push dword [ebp + 8]
mov ecx, ebx
call fcn.00448fd0
mov edi, eax
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
push dword [ebp + 0x14]
mov ecx, ebx
push dword [ebp + 0xc]
push dword [ebp + 0x10]
push dword [ebp + 8]
call fcn.0044a0c0
mov edi, eax
jmp 0x4457d3
mov eax, dword [ebp + 0x14]
xor edx, edx
test eax, eax
sete dl
mov dword [ebp - 4], edx
jmp 0x444de9
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x444e08
push ecx
push 0x10
mov ecx, esi
call fcn.00427740
push eax
push 0
push 0
push dword [ebp + 0x10]
mov ecx, esi
push 0
call fcn.0042ba50
push esi
push dword [ebp + 0xc]
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne 0x444e29
push dword [ebp + 0x14]
mov ecx, ebx
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0044a540
mov edi, eax
mov eax, dword [ebp - 4]
test eax, eax
je 0x4457d3
lea ecx, [esi + 0x30]
call fcn.00405910
test al, al
jne 0x4457d3
push 0
mov ecx, esi
call fcn.00430af0
jmp 0x4457d3
cmp dword [ebp + 0x14], edi
je 0x4457da
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne 0x4457d3
call dword [sym.imp.USER32.dll_LockWorkStation]
jmp 0x4457d3
cmp dword [ebp + 0x14], edi
je 0x444859
push ecx
push dword [ebp + 8]
mov ecx, ebx
call fcn.00441fa0
mov edi, eax
jmp 0x4457d3
mov ebx, dword [ebp + 0x14]
test ebx, ebx
je 0x444ea0
mov edi, 1
jmp 0x444eab
push 1
mov ecx, esi
call fcn.00430af0
mov edi, eax
mov dword [esi + 0x7bc], 1
test ebx, ebx
je 0x4457da
add esi, 0xc4
cmp word [esi], 0
je 0x4457d3
push 0
push dword [0x6579b8]
push 0
push esi
call fcn.004c9e70
add esp, 0x10
mov eax, ebx
jmp 0x4457d6
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x444ef8
mov edi, 1
jmp 0x4457d6
push 0
mov ecx, esi
call fcn.00430af0
mov edi, eax
jmp 0x4457da
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x444f19
mov edi, 1
jmp 0x4457d6
xor eax, eax
mov ecx, esi
cmp dword [esi + 0x7b4], eax
sete al
push eax
call fcn.00430af0
mov edi, eax
jmp 0x4457da
push dword [ebp + 0x14]
mov ecx, esi
call fcn.00430af0
mov edi, eax
jmp 0x4457d3
push dword [ebp + 0x14]
mov ecx, ebx
push dword [ebp + 8]
call fcn.0044ce20
mov edi, eax
jmp 0x4457d3
cmp dword [ebp + 0x14], edi
je 0x444fa7
mov eax, dword [0x657894]
mov edi, dword [ebp + 8]
push ecx
push edi
mov ecx, 0x657894
call dword [eax + 0x68]
push eax
mov eax, dword [0x657894]
mov ecx, 0x657894
call dword [eax + 0x34]
push esi
mov esi, dword [ebp + 0xc]
mov ecx, ebx
push esi
mov dword [ebp + 8], eax
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
push dword [ebp + 8]
mov ecx, ebx
push esi
push edi
call fcn.0044a9d0
mov edi, eax
jmp 0x4457d3
cmp edx, 0x45
jne 0x4457da
mov ecx, dword [ebp - 0xc]
push 1
push 0
push esi
call fcn.00441130
mov edi, dword [ebp + 0xc]
mov ecx, 0x657894
mov eax, dword [0x657894]
push edi
push dword [ebp + 8]
call dword [eax + 0x68]
push eax
mov eax, dword [0x657894]
mov ecx, 0x657894
call dword [eax + 0x34]
push esi
push edi
mov ecx, ebx
mov dword [ebp + 0x14], eax
call fcn.0044af90
test eax, eax
jne 0x444859
push dword [ebp + 0x14]
mov ecx, ebx
push edi
push dword [ebp + 8]
call fcn.0044a9d0
mov edi, eax
jmp 0x4457da
cmp dword [ebp + 0x14], edi
je 0x4457da
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
push eax
push 1
push eax
push eax
push dword [ebp + 8]
mov ecx, ebx
call fcn.00449560
mov edi, eax
jmp 0x4457d3
cmp dword [ebp + 0x14], edi
je 0x4457da
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
push eax
push 1
push 1
push eax
push dword [ebp + 8]
mov ecx, ebx
call fcn.00449560
mov edi, eax
jmp 0x4457d3
cmp dword [ebp + 0x14], edi
je 0x4457da
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
push eax
push 1
push eax
push 1
push dword [ebp + 8]
mov ecx, ebx
call fcn.00449560
mov edi, eax
jmp 0x4457d3
cmp dword [ebp + 0x14], edi
je 0x4457da
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
push eax
push 1
push 1
push 1
push dword [ebp + 8]
mov ecx, ebx
call fcn.00449560
mov edi, eax
jmp 0x4457d3
cmp dword [ebp + 0x14], edi
je 0x4457da
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
push eax
push 1
push eax
push 2
push dword [ebp + 8]
mov ecx, ebx
call fcn.00449560
mov edi, eax
jmp 0x4457d3
cmp dword [ebp + 0x14], edi
je 0x4457da
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
push eax
push 1
push 1
push 2
push dword [ebp + 8]
mov ecx, ebx
call fcn.00449560
mov edi, eax
jmp 0x4457d3
cmp dword [ebp + 0x14], edi
je 0x444859
push 0x32
call fcn.00441210
add esp, 4
mov esi, eax
mov ecx, ebx
push 0
push esi
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.004486e0
push esi
mov esi, dword [ebp + 0xc]
lea ecx, [ebx + 0x4c]
push esi
push dword [ebp + 8]
call fcn.0041c660
mov dword [ebp + 0xc], eax
test eax, eax
je 0x4457d3
cmp word [eax], di
je 0x4457d3
push dword [ebp - 0x10]
mov ecx, ebx
push esi
call fcn.0044af90
test eax, eax
jne 0x445199
push dword [ebp + 0xc]
mov ecx, ebx
push esi
push dword [ebp + 8]
call fcn.0044a9d0
mov edi, eax
jmp 0x44519e
mov edi, 1
test byte [0x652fc0], 4
je 0x4457d3
push dword [ebp + 0xc]
push str.SendWindowMessage_String_is:__s__n
push 3
push str.CPluginAction::Event
call fcn.004cb410
add esp, 0x10
jmp 0x4457d3
cmp dword [ebp + 0x14], edi
je 0x4457da
mov eax, dword [0x6570a8]
mov ecx, 0x6570a8
push 0xc
call dword [eax + 4]
test eax, eax
je 0x4457d3
mov ecx, eax
call fcn.0044ceb0
test eax, eax
je 0x4457d3
cmp dword [esi + 0x9a8], 0x10
mov ecx, esi
je 0x44520d
push 0x10
call fcn.0042eaf0
jmp 0x4457d3
push 0
call fcn.0042eaf0
jmp 0x4457d3
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
mov eax, dword [ebp + 0x14]
jne 0x444acb
test eax, eax
je 0x445247
push 1
push dword [ebp + 0xc]
mov ecx, ebx
push dword [ebp + 8]
call fcn.00448fd0
mov edi, eax
mov eax, dword [ebp + 0x14]
jmp 0x44524c
mov edi, 1
test byte [esi + 0x7b8], 2
je 0x4457d3
cmp dword [esi + 0x7b4], 0
je 0x4457d3
test eax, eax
je 0x4457da
mov ecx, dword [esi + 0x34]
test ecx, ecx
jne 0x445278
lea ecx, [esi + 0x40]
mov eax, dword [ecx]
push 1
push 0x1000320
push ecx
call dword [eax + 0x18]
jmp 0x4457d3
cmp dword [ebp + 0x14], edi
je 0x4457da
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
push 0x5daa08
push 0x4c6150
mov dword [0x5daa08], 1
mov dword [0x5daa0c], edi
call dword [sym.imp.USER32.dll_EnumWindows]
test byte [0x652fc0], 4
je 0x4452e7
push dword [0x5daa0c]
push str.Open_App_Count:__d_n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0x10
mov dword [ebp + 8], edi
cmp dword [ebx + 0x94], edi
je 0x445318
test byte [0x652fc0], 4
je 0x4457d3
push str.Win10:3_FingerFickUp_in__Win__Tab__recently_sent:_Do_nothing_n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0xc
jmp 0x4457d3
lea eax, [ebp + 8]
push eax
call fcn.004c94f0
add esp, 4
test al, al
je 0x4453bb
cmp dword [ebp + 8], edi
je 0x445357
test byte [0x652fc0], 4
je 0x4457d3
push str.Win10:3_FingerFickUp_in__Win__Tab__window:_Do_nothing_n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0xc
jmp 0x4457d3
test byte [0x652fc0], 4
je 0x445374
push str.Win10:_3FingerFlickUp_in__Ctrl__Alt__Tab__window:_Send_Enter_n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0xc
push 0x1c
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 1
push eax
push 1
mov ecx, 0x6570a8
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], 0xd
mov dword [ebp - 0x24], edi
call fcn.00487eb0
push 0x1c
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x24], 2
push eax
push 1
mov ecx, 0x6570a8
call fcn.00487eb0
jmp 0x4457d3
cmp dword [0x5daa08], edi
je 0x445406
cmp dword [0x5daa0c], edi
jbe 0x445406
cmp dword [0x656f90], edi
jne 0x445406
test byte [0x652fc0], 4
je 0x4453f0
push str.Win10:3_FingerFickUp:_restore_window_n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0xc
mov ecx, ebx
call fcn.0044cd70
mov dword [0x656f90], 1
jmp 0x4457d3
test byte [0x652fc0], 4
mov dword [0x656f90], edi
je 0x445429
push str.Win10:3_FingerFickUp:_Launch_Task_Switcher_n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0xc
push 1
push 1
push 1
mov ecx, ebx
call fcn.0044cb90
push 0x442230
push 0x1f4
push ebx
mov dword [ebx + 0x94], 1
push dword [0x6579b8]
call dword [sym.imp.USER32.dll_SetTimer]
test eax, eax
jne 0x4457d3
test byte [0x652fc0], 1
je 0x44547c
push str.Create_Timer_Fail_n
push 1
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0xc
mov dword [ebx + 0x94], edi
jmp 0x4457d3
cmp dword [ebp + 0x14], edi
je 0x4457da
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne case.0x44482e.11
lea eax, [ebp + 8]
mov dword [ebp + 8], edi
push eax
call fcn.004c94f0
add esp, 4
test al, al
je 0x445562
cmp dword [ebp + 8], edi
je 0x4454f8
test byte [0x652fc0], 4
je 0x4454da
push str.Win10:3_FingerFickDown_in__Win__Tab__window:_Turn_off_Task_Switcher_n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0xc
push 0
push 0
push 0
mov ecx, ebx
call fcn.0044cb90
mov dword [ebx + 0x94], edi
mov dword [0x656f90], edi
jmp 0x4457d3
test byte [0x652fc0], 4
je 0x445515
push str.Win10:_3FingerFlickDown_in__Ctrl__Alt__Tab__window:_Send_Enter_n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0xc
push 0x1c
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 1
push eax
push 1
mov ecx, 0x6570a8
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], 0xd
mov dword [ebp - 0x24], edi
call fcn.00487eb0
push 0x1c
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x24], 2
push eax
push 1
mov ecx, 0x6570a8
call fcn.00487eb0
mov dword [0x656f90], edi
jmp 0x4457d3
push 0x5daa08
push 0x4c6150
mov dword [0x5daa08], 1
mov dword [0x5daa0c], edi
call dword [sym.imp.USER32.dll_EnumWindows]
cmp dword [0x5daa08], edi
je 0x4455b2
test byte [0x652fc0], 4
je 0x4455d6
push str.Win10:3_FingerFickDown:_Do_nothing_n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0xc
mov dword [0x656f90], edi
jmp 0x4457d3
test byte [0x652fc0], 4
je 0x4455cf
push str.Win10:3_FingerFickDown:_Minimize_all_window_n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0xc
mov ecx, ebx
call fcn.0044cd70
mov dword [0x656f90], edi
jmp 0x4457d3
cmp dword [ebp + 0x14], edi
je 0x444859
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne 0x4457d3
lea eax, [ebp + 8]
mov dword [ebp + 8], edi
push eax
call fcn.004c94f0
add esp, 4
test al, al
je 0x445639
cmp dword [ebp + 8], edi
je 0x445639
test byte [0x652fc0], 4
je 0x4457d3
push str.Win10:_3_FingerFlickLeft_in__Win__D__window:_Do_nothing_n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0xc
jmp 0x4457d3
test byte [0x652fc0], 4
je 0x445656
push str.Win10:_3_FingerFlickLeft:_Switch_App_to_left_n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0xc
push 0
push 1
push 1
mov ecx, ebx
call fcn.0044cb90
jmp 0x4457d3
cmp dword [ebp + 0x14], edi
je 0x444859
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne 0x4457d3
lea eax, [ebp + 8]
mov dword [ebp + 8], edi
push eax
call fcn.004c94f0
add esp, 4
test al, al
je 0x4456c0
cmp dword [ebp + 8], edi
je 0x4456c0
test byte [0x652fc0], 4
je 0x4457d3
push str.Win10:_3_FingerFlickRight_in__Win__D__window:_Do_nothing_n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0xc
jmp 0x4457d3
test byte [0x652fc0], 4
je 0x4456dd
push str.Win10:_3_FingerFlickRight:_Switch_App_to_Right_n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0xc
push 0
push 0
push 1
mov ecx, ebx
call fcn.0044cb90
jmp 0x4457d3
cmp dword [ebp + 0x14], edi
je 0x444859
push esi
push ecx
mov ecx, ebx
call fcn.0044af90
test eax, eax
jne 0x4457d3
mov dword [ebp + 8], edi
xor esi, esi
mov edi, edi
lea eax, [ebp + 8]
push eax
call fcn.004c94f0
add esp, 4
movzx ebx, al
test al, al
jne 0x445731
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
inc esi
cmp esi, 0xa
jl 0x445710
test byte [0x652fc0], 4
je 0x445752
push dword [ebp + 8]
push ebx
push str.TaskSwitcher:__d__HasDesktopButton:__d_n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0x14
test ebx, ebx
je 0x4457d3
cmp dword [ebp + 8], edi
jne 0x4457d3
push 0x1c
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 1
push eax
push 1
mov ecx, 0x6570a8
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], 0xd
mov dword [ebp - 0x24], edi
call fcn.00487eb0
push 0x1c
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x24], 2
push eax
push 1
mov ecx, 0x6570a8
call fcn.00487eb0
test byte [0x652fc0], 4
je 0x4457d3
push str.Send_Return_to_finish_Task_Switcher_n
push 3
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0xc
jmp 0x4457d3
push edx
push str.Invalid_plugin_type__d_received_n
push 0
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0x10
xor edi, edi
mov eax, dword [ebp + 0x14]
test eax, eax
jne 0x44584d
mov ebx, dword [ebp - 0x10]
mov esi, dword [ebx + 0xa6c]
test esi, esi
je 0x4457fd
lea ecx, [ebx + 0x814]
call fcn.004062e0
xor ecx, ecx
cmp eax, esi
setge cl
test ecx, ecx
jne 0x445842
test byte [0x652fc0], 8
je 0x445835
lea ecx, [ebx + 0x814]
call fcn.004056b0
movzx eax, al
lea ecx, [ebx + 0x814]
push eax
call fcn.004081e0
push eax
push str.Unacquire_device:_pktID_d__IsBtn_d_Release_n
push 4
push str.CPluginAction::Event
call fcn.004cb3a0
add esp, 0x14
mov ecx, dword [ebp - 0xc]
push 1
push 0
push ebx
call fcn.00441130
push dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
call fcn.00442b10
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10