Function at 0x44e180
Capabilities:
Link many functions at runtime
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3b4
mov eax, dword [0x5a6008]
xor eax, esp
mov dword [esp + 0x3b0], eax
push ebx
push esi
push edi
push str.vncDesktop::InitWindow_:_InitWindow_called_n
push 0
push 0x5a6c48
mov esi, ecx
call fcn.0041d720
add esp, 0xc
push 0x400001cf
push 0
push 0
call dword [sym.imp.USER32.dll_OpenInputDesktop]
mov ebx, eax
mov ecx, str.vncDesktop::InitWindow_:_InitWindow:OpenInputdesktop_Error__n
test ebx, ebx
mov dword [esp + 0x54], ebx
mov eax, str.vncDesktop::InitWindow_:_InitWindow:OpenInputdesktop_OK_n
cmovne ecx, eax
push ecx
push 0
push 0x5a6c48
call fcn.0041d720
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.USER32.dll_GetThreadDesktop]
mov edi, eax
lea eax, [esp + 0x88]
push eax
push 0x100
lea eax, [esp + 0x2c0]
mov dword [esp + 0x54], edi
push eax
push 2
push ebx
call dword [sym.imp.USER32.dll_GetUserObjectInformationA]
test eax, eax
jne 0x44e22f
push str.vncDesktop::InitWindow_:_InitWindow:_GetUserObjectInformation__n
push eax
push 0x5a6c48
call fcn.0041d720
add esp, 0xc
push edi
push ebx
lea eax, [esp + 0x2c0]
push eax
push str.vncDesktop::InitWindow_:_InitWindow:SelectHDESK_to__s___x__from__x_n
push 0
push 0x5a6c48
call fcn.0041d720
mov eax, dword [sym.imp.USER32.dll_SetThreadDesktop]
add esp, 0x18
mov dword [esp + 0x50], eax
push ebx
call eax
test eax, eax
jne 0x44e270
push str.vncDesktop::InitWindow_:_InitWindow:SelectHDESK:_SetThreadDesktop__n
push eax
push 0x5a6c48
call fcn.0041d720
add esp, 0xc
mov edi, dword [sym.imp.USER32.dll_ChangeWindowMessageFilter]
push 1
push dword [0x5b6e7c]
call edi
push 1
push dword [0x5b6e74]
call edi
push 1
push dword [0x5b6e78]
call edi
push 1
push 0x12
call edi
push 1
push 0x8008
call edi
cmp word [0x5ab764], 0
jne 0x44e36c
mov eax, dword [0x5b487c]
push 0
mov dword [esp + 0x5c], 0x30
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0x44d680
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [esp + 0x78], eax
lea eax, [esp + 0x58]
push eax
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0x561a5c
mov dword [esp + 0x88], 0
call dword [sym.imp.USER32.dll_RegisterClassExA]
mov word [0x5ab764], ax
test ax, ax
jne 0x44e36c
push str.vncDesktop::InitWindow_:_failed_to_register_window_class_n
push 0
push 0x5a6c48
call fcn.0041d720
add esp, 0xc
push dword [esi + 0xe398]
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3b0]
xor ecx, esp
call fcn.00511339
mov esp, ebp
pop ebp
ret
push 0
push dword [0x5b487c]
push 0
push 0
push 0xc8
push 0x190
push closesocket
push closesocket
push 0xcf0000
push 0x593d78
push 0x561a5c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov dword [esi + 0xe404], eax
test eax, eax
jne 0x44e3b4
push str.vncDesktop::InitWindow_:_failed_to_create_hook_window_n
jmp 0x44e33a
push 0
push 0x3e8
push 0x3e9
push eax
call dword [sym.imp.USER32.dll_SetTimer]
push esi
push 0xffffffffffffffeb
push dword [esi + 0xe404]
call dword [sym.imp.USER32.dll_SetWindowLongA]
push dword [esi + 0xe404]
mov byte [esi + 0xe40c], 1
call dword [sym.imp.USER32.dll_SetClipboardViewer]
push str.vncDesktop::InitWindow_:_OOOOOOOOOOOO_load_hookdlls_n
push 0
push 0x5a6c48
mov dword [esi + 0xe408], eax
mov byte [esi + 0xe40c], 0
call fcn.0041d720
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [esp + 0xb4]
add esp, 0xc
mov dword [esi + 0xe904], 0
push 0x104
push eax
push 0
call edi
test eax, eax
je 0x44e466
lea eax, [esp + 0xa8]
push 0x5c
push eax
call fcn.005128c0
add esp, 8
test eax, eax
je 0x44e355
push str._vnchooks.dll
mov byte [eax], 0
lea eax, [esp + 0xac]
push 0x104
push eax
call fcn.005173c8
add esp, 0xc
push 0x104
lea eax, [esp + 0x1b4]
mov dword [esi + 0xe908], 0
push eax
push 0
call edi
test eax, eax
je 0x44e4bc
lea eax, [esp + 0x1b0]
push 0x5c
push eax
call fcn.005128c0
add esp, 8
test eax, eax
je 0x44e355
push str._schook_legacy.dll
mov byte [eax], 0
lea eax, [esp + 0x1b4]
push 0x104
push eax
call fcn.005173c8
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea eax, [esp + 0xa8]
push eax
mov dword [esi + 0xe910], 0
mov dword [esi + 0xe920], 0
mov dword [esi + 0xe91c], 0
mov dword [esi + 0xe928], 0
mov dword [esi + 0xe924], 0
mov dword [esi + 0xe90c], 0
mov dword [esi + 0xe918], 0
mov dword [esi + 0xe914], 0
call edi
mov dword [esi + 0xe904], eax
lea eax, [esp + 0x1b0]
push eax
call edi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esi + 0xe908], eax
mov eax, dword [esi + 0xe904]
test eax, eax
je 0x44e589
push str.UnSetHooks
push eax
call edi
push str.SetMouseFilterHook
push dword [esi + 0xe904]
mov dword [esi + 0xe910], eax
call edi
push str.SetKeyboardFilterHook
push dword [esi + 0xe904]
mov dword [esi + 0xe920], eax
call edi
push str.SetHooks
push dword [esi + 0xe904]
mov dword [esi + 0xe91c], eax
call edi
mov dword [esi + 0xe90c], eax
mov eax, dword [esi + 0xe908]
test eax, eax
je 0x44e5da
push str.UnSetHook
push eax
call edi
push str.SetHook
push dword [esi + 0xe908]
mov dword [esi + 0xe918], eax
call edi
push str.SetMouseFilterHook
push dword [esi + 0xe908]
mov dword [esi + 0xe914], eax
call edi
push str.SetKeyboardFilterHook
push dword [esi + 0xe908]
mov dword [esi + 0xe928], eax
call edi
mov dword [esi + 0xe924], eax
push str.vncDesktop::InitWindow_:_OOOOOOOOOOOO_start_dispatch_n
push 0
push 0x5a6c48
call fcn.0041d720
mov ebx, dword [sym.imp.KERNEL32.dll_SetEvent]
add esp, 0xc
mov dword [esp + 0x10], ebx
push dword [esi + 0xe398]
call ebx
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [sym.imp.USER32.dll_PeekMessageA]
mov edi, dword [sym.imp.USER32.dll_WaitMessage]
mov dword [esp + 0x20], eax
mov eax, dword [sym.imp.USER32.dll_TranslateMessage]
mov dword [esp + 0x44], eax
mov eax, dword [sym.imp.USER32.dll_DispatchMessageA]
mov dword [esp + 0x48], eax
mov eax, dword [sym.imp.GDI32.dll_CreateRectRgn]
mov dword [esp + 0x38], eax
mov eax, dword [sym.imp.GDI32.dll_CombineRgn]
mov dword [esp + 0x3c], eax
mov eax, dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x14], edi
mov dword [esp + 0x40], eax
jmp 0x44e650
mov edi, dword [esp + 0x14]
push 1
push 0
push 0
push 0
lea eax, [esp + 0x9c]
push eax
call ecx
test eax, eax
je 0x44e8a5
mov eax, dword [esp + 0x90]
cmp eax, 0x12
je 0x44e8d2
cmp byte [0x5ab8a3], 0
jne 0x44e8d2
cmp eax, 0x8008
je 0x44e8b0
cmp eax, dword [0x5b6e7c]
jne 0x44e806
push str.vnchook
push 0x10
push 0x5ac550
call fcn.00523f31
mov ecx, dword [esp + 0x18]
add esp, 0xc
cmp byte [esi + 0xe93c], 0
je 0x44e650
push str.vncDesktop::InitWindow_:_RFB_SCREEN_UPDATE___n
push 0
push 0x5a6c48
call fcn.0041d720
mov eax, dword [esp + 0xa0]
add esp, 0xc
movsx ecx, ax
shr eax, 0x10
movsx edi, ax
mov eax, dword [esp + 0x98]
movsx ebx, ax
shr eax, 0x10
movsx edx, ax
mov eax, dword [esi + 0x858]
sub ecx, eax
sub ebx, eax
mov dword [esp + 0x24], ecx
mov eax, dword [esi + 0x85c]
sub edi, eax
sub edx, eax
mov dword [esp + 0x2c], ebx
push edx
push edi
push ebx
push ecx
push str.vncDesktop::InitWindow_:_REct3__i__i__i__i___n
push 0
push 0x5a6c48
mov dword [esp + 0x44], edi
mov dword [esp + 0x34], edx
mov dword [esp + 0x4c], edx
call fcn.0041d720
lea edx, [esi + 0x898]
add esp, 0x1c
cmp ecx, dword [edx]
lea eax, [esp + 0x24]
lea ecx, [esp + 0x28]
cmovl eax, edx
cmp edi, dword [edx + 4]
mov eax, dword [eax]
mov dword [esp + 0x1c], eax
lea eax, [edx + 4]
cmovl ecx, eax
cmp dword [edx + 8], ebx
lea eax, [edx + 8]
mov edi, dword [ecx]
lea ecx, [esp + 0x2c]
cmovl ecx, eax
lea eax, [edx + 0xc]
mov edx, dword [esp + 0x18]
cmp dword [eax], edx
mov ebx, dword [ecx]
lea ecx, [esp + 0x30]
cmovl ecx, eax
mov dword [esp + 0x34], ebx
cmp dword [esp + 0x1c], ebx
mov ebx, dword [esp + 0x10]
mov eax, dword [ecx]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x18], eax
jge 0x44e64c
cmp edi, eax
jge 0x44e64c
cmp byte [esi + 0xe3a8], 0
je 0x44e7b2
push 5
call dword [esp + 0x24]
cmp byte [esi + 0xe3a8], 0
jne 0x44e7a3
push 0x560f28
call fcn.00523296
add esp, 4
mov ebx, eax
push dword [esp + 0x18]
push dword [esp + 0x38]
push edi
push dword [esp + 0x28]
call dword [esp + 0x48]
mov ecx, dword [esi + 0xe3a0]
mov edi, eax
push 2
push edi
push ecx
push ecx
call dword [esp + 0x4c]
push edi
call dword [esp + 0x44]
push ebx
call fcn.00515679
mov ebx, dword [esp + 0x14]
add esp, 4
push dword [esi + 0xe374]
call ebx
mov ecx, dword [esp + 0xc]
jmp 0x44e64c
cmp eax, dword [0x5b6e78]
jne 0x44e869
cmp byte [esi + 0xe93c], 0
mov ecx, dword [esp + 0xc]
je 0x44e650
push str.vncDesktop::InitWindow_:_RFB_MOUSE_UPDATE___n
push 0
push 0x5a6c48
call fcn.0041d720
mov ecx, dword [esp + 0xa0]
add esp, 0xc
test ecx, ecx
jne 0x44e846
mov ecx, dword [esi + 0xe890]
jmp 0x44e852
mov eax, dword [esi + 0xe888]
mov dword [esi + 0xe88c], eax
mov dword [esi + 0xe888], ecx
push dword [esi + 0xe378]
call ebx
mov ecx, dword [esp + 0xc]
jmp 0x44e650
cmp eax, 0x403
jne 0x44e884
push str.vncDesktop::InitWindow_:_OOOOOOOOOOOO_called_wm_user3_n
push 0
push 0x5a6c48
call fcn.0041d720
add esp, 0xc
lea eax, [esp + 0x8c]
push eax
call dword [esp + 0x48]
lea eax, [esp + 0x8c]
push eax
call dword [esp + 0x4c]
mov ecx, dword [esp + 0xc]
jmp 0x44e650
call edi
mov ecx, dword [esp + 0xc]
jmp 0x44e650
push str.vncDesktop::InitWindow_:_OOOOOOOOOOOO_called_wm_user4_n
push 0
push 0x5a6c48
call fcn.0041d720
add esp, 0xc
push dword [esi + 0xe404]
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x44e8fa
push str.vncDesktop::InitWindow_:_OOOOOOOOOOOO_called_wm_quit_n
push 0
push 0x5a6c48
call fcn.0041d720
add esp, 0xc
push dword [esi + 0xe404]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [esi + 0xe384]
call ebx
cmp dword [0x5aa134], 0
je 0x44e914
mov ebx, dword [esp + 0x20]
push 0x64
call ebx
cmp dword [0x5aa134], 0
jne 0x44e907
push 0x3e9
push dword [esi + 0xe404]
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [esi + 0xe904]
mov edi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
test eax, eax
je 0x44e938
push eax
call edi
mov eax, dword [esi + 0xe908]
test eax, eax
je 0x44e945
push eax
call edi
push dword [esp + 0x4c]
call dword [esp + 0x54]
push dword [esp + 0x54]
call dword [sym.imp.USER32.dll_CloseDesktop]
push str.vncDesktop::InitWindow_:_OOOOOOOOOOOO_end_dispatch_n
push 0
push 0x5a6c48
call fcn.0041d720
mov ecx, dword [esp + 0x3c8]
add esp, 0xc
mov dword [esi + 0xe404], 0
mov eax, 1
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00511339
mov esp, ebp
pop ebp
ret