Function at 0x43de97
Capabilities:
Check for time delay via gettickcount
Check for unmoving mouse cursor

Disassembly:
push 0x170
mov eax, 0x4710db
call fcn.0046c277
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp + 0x10]
mov ebx, ecx
cmp dword [ebx], 0
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x160], eax
je 0x43f76c
jmp 0x43df61
push 0
mov ecx, esi
call fcn.00439383
cmp byte [ebx + 0x2c8], 0
jne 0x43df4f
mov eax, dword [edi + 0x88]
test eax, eax
je 0x43df08
lea ecx, [eax + 0x34]
call fcn.004429b4
test al, al
je 0x43df08
mov ecx, dword [edi + 0x88]
push edi
add ecx, 0x34
call fcn.00442a11
and dword [ebp - 0x150], 0
lea ecx, [ebx + 0x18c]
call fcn.004498c6
test eax, eax
jle 0x43df4f
push dword [ebp - 0x150]
lea ecx, [ebx + 0x18c]
call fcn.00439400
mov edx, dword [eax]
push edi
mov ecx, eax
call dword [edx]
inc dword [ebp - 0x150]
lea ecx, [ebx + 0x18c]
call fcn.004498c6
cmp dword [ebp - 0x150], eax
jl 0x43df1e
test edi, edi
je 0x43df61
mov ecx, edi
call fcn.0043b7ff
push edi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
pop ecx
lea esi, [ebx + 0x1d4]
push 0
mov ecx, esi
call fcn.004393e4
mov edi, eax
test edi, edi
jne 0x43ded1
and dword [ebp - 0x150], eax
lea ecx, [ebx + 0x1b0]
call fcn.004498c6
mov esi, dword [ebp + 8]
test eax, eax
jle 0x43dfea
push dword [ebp - 0x150]
lea ecx, [ebx + 0x1b0]
mov byte [ebp - 0x159], 0
call fcn.00439400
mov edx, dword [eax]
lea ecx, [ebp - 0x159]
push ecx
push dword [ebp - 0x14c]
mov ecx, eax
push dword [ebp - 0x158]
push esi
call dword [edx]
cmp byte [ebp - 0x159], 0
jne 0x43e07f
inc dword [ebp - 0x150]
lea ecx, [ebx + 0x1b0]
call fcn.004498c6
cmp dword [ebp - 0x150], eax
jl 0x43df92
mov eax, 0x113
cmp esi, eax
ja 0x43eb86
je 0x43eaea
cmp esi, 0x4e
ja 0x43e8e0
je 0x43e8b9
sub esi, 5
je 0x43e866
sub esi, 0xa
je 0x43e1a8
dec esi
je 0x43e165
sub esi, 4
je 0x43e154
sub esi, 0xc
je 0x43e08e
sub esi, 4
jne 0x43f753
mov eax, dword [ebx + 0x140]
mov ecx, dword [ebp - 0x14c]
test eax, eax
jle 0x43e04f
mov dword [ecx + 0x18], eax
mov eax, dword [ebx + 0x144]
test eax, eax
jle 0x43e05c
mov dword [ecx + 0x1c], eax
mov eax, dword [ebx + 0x148]
test eax, eax
jle 0x43e069
mov dword [ecx + 0x20], eax
mov eax, dword [ebx + 0x14c]
test eax, eax
jle 0x43f753
mov dword [ecx + 0x24], eax
jmp 0x43f753
mov ecx, dword [ebp - 0x160]
mov dword [ecx], eax
mov al, 1
jmp 0x43f76e
cmp word [ebp - 0x14c], 1
jne 0x43f753
cmp byte [ebx + 0x18a], 0
jne 0x43e087
and dword [ebp - 0x58], 0
xor eax, eax
lea edi, [ebp - 0x54]
stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x58]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_ScreenToClient]
push dword [ebp - 0x54]
mov ecx, ebx
push dword [ebp - 0x58]
call fcn.0043d6cc
mov esi, eax
test esi, esi
je 0x43f753
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
test al, 2
je 0x43f753
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x124]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x128], 0x17
mov dword [ebp - 0x118], eax
call fcn.0043b7ac
mov word [ebp - 0x112], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x120], eax
mov eax, dword [esi]
push ecx
mov ecx, esi
jmp 0x43ef54
mov eax, dword [ebp - 0x160]
mov dword [eax], 1
jmp 0x43e087
xor edi, edi
mov dword [ebx + 0x12c], edi
cmp dword [ebx + 0x130], edi
je 0x43e182
mov ecx, ebx
call fcn.0043c0ad
mov dword [ebx + 0x130], edi
push edi
mov ecx, ebx
call fcn.0043d9df
push 4
push dword [ebx]
call dword [sym.imp.USER32.dll_GetWindow]
cmp eax, edi
je 0x43f753
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x43f753
and dword [ebp - 0x108], 0
xor eax, eax
lea edi, [ebp - 0x104]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor esi, esi
push esi
lea eax, [ebp - 0x108]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_GetUpdateRect]
test eax, eax
je 0x43e087
push 0x3c
push esi
cmp dword [ebx + 0x124], esi
jne 0x43e217
lea eax, [ebp - 0x144]
push eax
mov dword [ebp - 0x148], esi
call sub.MSVCR100.dll_memset
add esp, 0xc
lea eax, [ebp - 0x148]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_BeginPaint]
lea eax, [ebp - 0x148]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x43e087
lea eax, [ebp - 0xac]
push eax
mov dword [ebp - 0xb0], esi
call sub.MSVCR100.dll_memset
add esp, 0xc
lea eax, [ebp - 0xb0]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_BeginPaint]
cmp byte [ebx + 0x185], 0
je 0x43e35f
and dword [ebp - 0x40], esi
xor eax, eax
lea edi, [ebp - 0x3c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebx]
mov byte [ebx + 0x185], 0
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x43e35f
mov ecx, dword [ebx + 0x124]
call fcn.00443238
mov ecx, dword [ebx + 0x124]
test al, al
mov eax, dword [ecx]
je 0x43e31c
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x40]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x38]
mov eax, dword [ebx + 0xc]
mov esi, dword [sym.imp.GDI32.dll_DeleteDC]
test eax, eax
je 0x43e2b2
push eax
call esi
mov eax, dword [ebx + 0x10]
xor edi, edi
cmp eax, edi
je 0x43e2be
push eax
call esi
mov eax, dword [ebx + 0x14]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
cmp eax, edi
je 0x43e2ce
push eax
call esi
mov eax, dword [ebx + 0x18]
cmp eax, edi
je 0x43e2d8
push eax
call esi
mov dword [ebx + 0xc], edi
mov dword [ebx + 0x10], edi
mov dword [ebx + 0x14], edi
mov dword [ebx + 0x18], edi
mov dword [ebx + 0x50], edi
jmp 0x43e338
mov ecx, dword [ebp - 0x150]
mov eax, dword [ecx]
mov dword [ebp - 0x160], eax
call dword [eax + 0x34]
mov ecx, dword [ebp - 0x150]
sub esp, 0x10
mov esi, eax
mov eax, dword [ebp - 0x160]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x38]
mov ecx, dword [ebx + 0x124]
mov eax, dword [ecx]
push SysReAllocString
push 0
push 0x43ca57
call dword [eax + pe_nt_image_headers32]
mov dword [ebp - 0x150], eax
test eax, eax
jne 0x43e2e9
cmp byte [ebx + 0x184], 0
je 0x43e35f
xor eax, eax
push eax
push eax
push eax
push str.windowinit
push dword [ebx + 0x124]
mov ecx, ebx
mov byte [ebx + 0x184], 0
call fcn.0043d439
cmp byte [ebx + 0x186], 0
je 0x43e371
push 1
mov ecx, ebx
call fcn.0043dba4
cmp byte [ebx + 0x54], 0
je 0x43e644
push 0xffffffffffffffec
push dword [ebx]
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov ecx, 0x80000
test ecx, eax
jne 0x43e39b
or eax, ecx
push eax
push 0xffffffffffffffec
push dword [ebx]
call dword [sym.imp.USER32.dll_SetWindowLongA]
and dword [ebp - 0x70], 0
xor eax, eax
lea edi, [ebp - 0x6c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x70]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_GetClientRect]
cmp byte [ebx + 0x78], 0
je 0x43e3cc
lea esi, [ebp - 0x70]
lea edi, [ebp - 0x108]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov byte [ebx + 0x78], 0
jmp 0x43e3fb
lea eax, [ebx + 0x58]
push eax
lea eax, [ebp - 0x108]
push eax
push eax
call dword [sym.imp.USER32.dll_UnionRect]
lea esi, [ebp - 0x70]
lea edi, [ebp - 0x108]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x10
lea eax, [ebx + 0x58]
push 0
push eax
movsd dword es:[edi], dword [esi]
call sub.MSVCR100.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x68]
sub eax, dword [ebp - 0x70]
mov esi, dword [ebp - 0x64]
sub esi, dword [ebp - 0x6c]
cmp dword [ebx + 0x14], 0
mov dword [ebp - 0x158], eax
jne 0x43e438
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebx + 0xc], eax
lea eax, [ebx + 0x50]
push eax
push esi
push dword [ebp - 0x158]
push dword [ebx + 8]
call fcn.0044cf7c
add esp, 0x10
mov dword [ebx + 0x14], eax
push dword [ebx + 0x14]
push dword [ebx + 0xc]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebx + 0xc]
mov dword [ebp - 0x14c], eax
call dword [sym.imp.GDI32.dll_SaveDC]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x104]
mov esi, eax
cmp eax, dword [ebp - 0xfc]
jge 0x43e4a6
imul eax, dword [ebp - 0x158]
mov edi, eax
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x100]
sub ecx, eax
shl ecx, 2
push ecx
mov ecx, dword [ebx + 0x50]
add eax, edi
lea eax, [ecx + eax*4]
push 0
push eax
call sub.MSVCR100.dll_memset
add edi, dword [ebp - 0x158]
add esp, 0xc
inc esi
cmp esi, dword [ebp - 0xfc]
jl 0x43e472
mov ecx, dword [ebx + 0x124]
mov eax, dword [ecx]
lea edx, [ebp - 0x108]
push edx
push dword [ebx + 0xc]
call dword [eax + 0x134]
lea eax, [ebp - 0x108]
push eax
push dword [ebx + 0xc]
mov ecx, ebx
call fcn.0043cdd9
lea ecx, [ebx + 0x1bc]
xor edi, edi
call fcn.004498c6
test eax, eax
jle 0x43e510
push edi
lea ecx, [ebx + 0x1bc]
call fcn.00439400
mov edx, dword [eax]
lea ecx, [ebp - 0xa8]
push ecx
push dword [ebx + 0xc]
mov ecx, eax
call dword [edx + 0x14c]
lea ecx, [ebx + 0x1bc]
inc edi
call fcn.004498c6
cmp edi, eax
jl 0x43e4e0
mov eax, dword [ebx + 0x68]
xor ecx, ecx
cmp eax, ecx
jg 0x43e528
cmp dword [ebx + 0x6c], ecx
jg 0x43e528
cmp dword [ebx + 0x70], ecx
jg 0x43e528
cmp dword [ebx + 0x74], ecx
jle 0x43e59f
add eax, dword [ebp - 0x70]
lea esi, [ebp - 0x70]
lea edi, [ebp - 0x60]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x60], eax
mov eax, dword [ebx + 0x6c]
add dword [ebp - 0x5c], eax
mov eax, dword [ebx + 0x70]
sub dword [ebp - 0x58], eax
mov eax, dword [ebx + 0x74]
sub dword [ebp - 0x54], eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x60]
push eax
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x43e59f
mov eax, dword [ebp - 0x5c]
mov esi, eax
cmp eax, dword [ebp - 0x54]
jge 0x43e59f
imul eax, dword [ebp - 0x158]
mov edx, eax
mov eax, dword [ebp - 0x60]
mov ecx, eax
cmp eax, dword [ebp - 0x58]
jge 0x43e593
add eax, edx
shl eax, 2
mov edi, dword [ebx + 0x50]
mov byte [edi + eax + 3], 0xff
inc ecx
add eax, 4
cmp ecx, dword [ebp - 0x58]
jl 0x43e582
add edx, dword [ebp - 0x158]
inc esi
cmp esi, dword [ebp - 0x54]
jl 0x43e573
push dword [ebp - 0x160]
push dword [ebx + 0xc]
call dword [sym.imp.GDI32.dll_RestoreDC]
xor eax, eax
xor esi, esi
mov dword [ebp - 0x40], esi
lea edi, [ebp - 0x3c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x34]
sub eax, ecx
push 2
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x150]
push eax
push esi
lea eax, [ebp - 0x17c]
push eax
push dword [ebx + 0xc]
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x16c]
push eax
push esi
push dword [ebx]
mov dword [ebp - 0x168], ecx
mov dword [ebp - 0x174], edx
mov dword [ebp - 0x17c], esi
mov dword [ebp - 0x178], esi
mov dword [ebp - 0x150], 0x1ff0000
call dword [sym.imp.USER32.dll_UpdateLayeredWindow]
push dword [ebp - 0x14c]
push dword [ebx + 0xc]
call dword [sym.imp.GDI32.dll_SelectObject]
jmp 0x43e779
cmp dword [ebx + 0x14], 0
jne 0x43e688
and dword [ebp - 0x40], 0
xor eax, eax
lea edi, [ebp - 0x3c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x40]
push eax
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebx + 0x14], eax
push dword [ebx + 0x14]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebx + 0xc]
call esi
push dword [ebx + 0xc]
mov dword [ebp - 0x158], eax
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x124]
lea edx, [ebp - 0xa8]
push edx
push dword [ebx + 0xc]
mov dword [ebp - 0x160], eax
mov eax, dword [ecx]
call dword [eax + 0x134]
and dword [ebp - 0x150], 0
lea ecx, [ebx + 0x1bc]
call fcn.004498c6
test eax, eax
jle 0x43e717
push dword [ebp - 0x150]
lea ecx, [ebx + 0x1bc]
call fcn.00439400
mov edx, dword [eax]
lea ecx, [ebp - 0xa8]
push ecx
push dword [ebx + 0xc]
mov ecx, eax
call dword [edx + 0x14c]
inc dword [ebp - 0x150]
lea ecx, [ebx + 0x1bc]
call fcn.004498c6
cmp dword [ebp - 0x150], eax
jl 0x43e6d9
push dword [ebp - 0x160]
push dword [ebx + 0xc]
call dword [sym.imp.GDI32.dll_RestoreDC]
mov eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa4]
push 0xcc0020
push dword [ebp - 0xa4]
push dword [ebp - 0xa8]
push dword [ebx + 0xc]
push eax
mov eax, dword [ebp - 0xa0]
sub eax, dword [ebp - 0xa8]
push eax
push dword [ebp - 0xa4]
push dword [ebp - 0xa8]
push dword [ebp - 0xb0]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x158]
push dword [ebx + 0xc]
call esi
xor esi, esi
xor eax, eax
mov dword [ebp - 0x20], esi
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
sub esi, dword [ebp - 0x20]
cmp byte [ebx + 0x187], 0
mov dword [ebp - 0x150], eax
je 0x43e839
cmp dword [ebx + 0x14], 0
jne 0x43e839
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0xa
mov dword [ebx + 0xc], eax
pop ecx
xor eax, eax
lea edi, [ebp - 0x130]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x12c], eax
imul eax, esi
push 0x20
xor ecx, ecx
cdq
inc ecx
mov word [ebp - 0x128], cx
pop ecx
and edx, 3
add eax, edx
mov word [ebp - 0x126], cx
xor ecx, ecx
push ecx
sar eax, 2
push ecx
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x160]
push eax
push ecx
lea eax, [ebp - 0x134]
push eax
push dword [ebx + 8]
mov dword [ebp - 0x134], 0x2c
mov dword [ebp - 0x130], esi
mov dword [ebp - 0x124], ecx
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov dword [ebx + 0x14], eax
lea eax, [ebp - 0xb0]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_EndPaint]
cmp byte [ebx + 0x185], 0
je 0x43e087
push 0
push 0
push dword [ebx]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x43e087
mov edx, dword [ebx + 0x128]
test edx, edx
je 0x43e89f
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x30], 0x16
mov dword [ebp - 0x2c], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x128]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x124]
mov ebx, dword [ebx + 0x124]
test ebx, ebx
je 0x43e087
mov ecx, ebx
call fcn.0044323f
jmp 0x43e087
mov eax, dword [ebp - 0x14c]
test eax, eax
je 0x43e087
push eax
push dword [ebp - 0x158]
push 0x204e
push dword [eax]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x43e07f
sub esi, 0x7b
je 0x43ea57
sub esi, 0x85
je 0x43e9e9
dec esi
je 0x43e980
dec esi
je 0x43e92d
sub esi, 0xf
jne 0x43f753
cmp dword [ebp - 0x14c], esi
je 0x43f753
push dword [ebp - 0x14c]
push dword [ebp - 0x158]
push 0x2111
push dword [ebp - 0x14c]
jmp 0x43e8d5
cmp dword [ebx + 0x128], 0
je 0x43f753
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov al, byte [ebp - 0x158]
mov byte [ebp - 0x1c], al
mov eax, dword [ebx + 0x138]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0x13c]
mov dword [ebp - 0x30], 5
mov dword [ebp - 0x20], eax
call fcn.0043b7ac
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x128]
jmp 0x43eb72
cmp dword [ebx + 0x134], 0
je 0x43f753
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov al, byte [ebp - 0x158]
mov byte [ebp - 0x1c], al
mov eax, dword [ebx + 0x138]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0x13c]
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x20], eax
call fcn.0043b7ac
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x134]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x124]
and dword [ebx + 0x134], 0
jmp 0x43f753
cmp dword [ebx + 0x128], 0
je 0x43f753
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov al, byte [ebp - 0x158]
mov byte [ebp - 0x1c], al
mov eax, dword [ebx + 0x138]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0x13c]
mov dword [ebp - 0x30], 3
mov dword [ebp - 0x20], eax
call fcn.0043b7ac
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x128]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x124]
mov eax, dword [ebx + 0x128]
mov dword [ebx + 0x134], eax
jmp 0x43f753
mov eax, dword [ebp - 0x14c]
movsx ecx, ax
shr eax, 0x10
cwde
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x154]
push eax
push dword [ebx]
mov dword [ebp - 0x154], ecx
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [ebx + 0x130], 0
mov eax, dword [ebp - 0x154]
mov dword [ebx + 0x138], eax
mov eax, dword [ebp - 0x150]
mov dword [ebx + 0x13c], eax
je 0x43f753
mov ecx, ebx
call fcn.0043c0ad
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x154]
mov eax, dword [ebx + 0x130]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x20], ecx
mov cx, word [ebp - 0x158]
mov dword [ebp - 0x30], 0x11
mov dword [ebp - 0x2c], eax
mov word [ebp - 0x1a], cx
mov dword [ebp - 0x14], eax
jmp 0x43ece4
and dword [ebp - 0x150], 0
lea ecx, [ebx + 0x198]
call fcn.004498c6
test eax, eax
jle 0x43f753
push dword [ebp - 0x150]
lea ecx, [ebx + 0x198]
call fcn.00439400
mov esi, eax
mov eax, dword [esi + 8]
cmp eax, dword [ebx]
jne 0x43eb30
movzx eax, word [ebp - 0x158]
cmp dword [esi + 0xc], eax
jne 0x43eb30
cmp byte [esi + 0x10], 0
je 0x43eb4e
inc dword [ebp - 0x150]
lea ecx, [ebx + 0x198]
call fcn.004498c6
cmp dword [ebp - 0x150], eax
jl 0x43eb04
jmp 0x43f753
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov eax, dword [esi]
mov dword [ebp - 0x2c], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x30], 0x18
mov dword [ebp - 0x18], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x124]
jmp 0x43f753
mov eax, 0x204
cmp esi, eax
ja 0x43f291
je 0x43f1f1
mov eax, esi
sub eax, 0x133
je 0x43f1cc
sub eax, 5
je 0x43f1cc
sub eax, 0xc8
je 0x43ee4d
dec eax
je 0x43ed0b
dec eax
je 0x43ec71
dec eax
jne 0x43f753
push dword [ebx]
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebp - 0x14c]
movsx ecx, ax
shr eax, 0x10
cwde
push eax
mov dword [ebp - 0x154], ecx
mov dword [ebx + 0x138], ecx
push ecx
mov ecx, ebx
mov dword [ebp - 0x150], eax
mov dword [ebx + 0x13c], eax
call fcn.0043d6cc
mov esi, eax
test esi, esi
je 0x43f753
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
cmp eax, ebx
jne 0x43f753
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x20], eax
mov ax, word [ebp - 0x158]
mov dword [ebp - 0x30], 0x10
mov dword [ebp - 0x2c], esi
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x124]
mov dword [ebx + 0x130], esi
jmp 0x43f753
mov eax, dword [ebp - 0x14c]
movsx esi, word [ebp - 0x14c]
shr eax, 0x10
cmp dword [ebx + 0x130], 0
cwde
mov dword [ebp - 0x168], eax
mov dword [ebx + 0x138], esi
mov dword [ebx + 0x13c], eax
je 0x43f753
mov ecx, ebx
call fcn.0043c0ad
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x130]
mov ecx, dword [ebp - 0x14c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x168]
mov dword [ebp - 0x30], 0xe
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], ecx
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x130]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x124]
and dword [ebx + 0x130], 0
jmp 0x43f753
push dword [ebx]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0x14c]
movsx eax, word [ebp - 0x14c]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x150], ecx
mov dword [ebx + 0x13c], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x154], eax
mov dword [ebx + 0x138], eax
call fcn.0043d6cc
mov esi, eax
test esi, esi
je 0x43f753
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
cmp eax, ebx
jne 0x43f753
mov eax, dword [ebx + 0x130]
test eax, eax
je 0x43ede4
cmp eax, esi
je 0x43ede4
mov ecx, ebx
call fcn.0043c0c9
test al, al
je 0x43ede4
call fcn.0043c0ad
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x14c]
mov eax, dword [ebx + 0x130]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x30], 0xe
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], ecx
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x130]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x124]
and dword [ebx + 0x130], 0
jmp 0x43edea
mov dword [ebx + 0x130], esi
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x104]
mov ecx, ebx
call fcn.0043c099
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x4c]
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x44], ecx
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x50], 0xd
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x40], ecx
mov word [ebp - 0x3a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x48], eax
mov eax, dword [esi]
push ecx
mov ecx, esi
jmp 0x43eb7b
cmp byte [ebx + 0x189], 0
jne 0x43eea3
xor eax, eax
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebx]
push 3
mov dword [ebp - 0x18], eax
mov eax, dword [ebx + 0x1c]
pop ecx
mov dword [ebp - 0x20], 0x10
mov dword [ebp - 0x1c], ecx
test eax, eax
jne 0x43ee80
mov dword [ebp - 0x14], 0x190
jmp 0x43ee92
push 0
push ecx
push 0x415
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.COMCTL32.dll__TrackMouseEvent]
mov byte [ebx + 0x189], 1
mov ecx, dword [ebp - 0x14c]
movsx eax, word [ebp - 0x14c]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x160], ecx
mov dword [ebx + 0x13c], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x164], eax
mov dword [ebx + 0x138], eax
call fcn.0043d6cc
mov esi, eax
mov dword [ebp - 0x150], esi
test esi, esi
je 0x43eef2
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
cmp eax, ebx
jne 0x43f753
and dword [ebp - 0x50], 0
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x4c]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x40], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [ebx + 0x130]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x34], eax
test edx, edx
je 0x43ef5f
mov ecx, ebx
call fcn.0043c0c9
test al, al
je 0x43ef5f
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x50], 9
mov dword [ebp - 0x4c], edx
mov eax, dword [edx]
push ecx
mov ecx, edx
call dword [eax + 0x124]
jmp 0x43e087
mov ecx, dword [ebx + 0x12c]
cmp esi, ecx
je 0x43efb2
xor edi, edi
cmp ecx, edi
je 0x43efb2
lea edx, [ebp - 0x50]
mov dword [ebp - 0x50], 0xa
mov dword [ebp - 0x4c], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x124]
push 0x10
lea eax, [ebx + 0x30]
push edi
push eax
mov dword [ebx + 0x12c], edi
call sub.MSVCR100.dll_memset
mov eax, dword [ebx + 0x1c]
add esp, 0xc
cmp eax, edi
je 0x43efb2
lea ecx, [ebx + 0x20]
push ecx
push edi
push 0x411
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, dword [ebx + 0x12c]
je 0x43efdc
test esi, esi
je 0x43efdc
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x50], 0xb
mov dword [ebp - 0x4c], esi
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x124]
mov dword [ebx + 0x12c], esi
mov ecx, dword [ebx + 0x130]
test ecx, ecx
je 0x43eff8
lea edx, [ebp - 0x50]
mov dword [ebp - 0x50], 9
mov dword [ebp - 0x4c], ecx
mov eax, dword [ecx]
push edx
jmp 0x43f012
test esi, esi
je 0x43f753
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x50], 9
mov dword [ebp - 0x4c], esi
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x124]
test esi, esi
je 0x43f753
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0xb0]
test al, al
je 0x43f753
mov eax, dword [esi]
lea ecx, [ebp - 0x20]
push ecx
mov ecx, esi
call dword [eax + 0xb8]
lea eax, [ebx + 0x30]
push eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.USER32.dll_EqualRect]
test eax, eax
jne 0x43f753
mov eax, dword [esi]
lea ecx, [ebp - 0xb4]
push ecx
mov ecx, esi
call dword [eax + 0xa0]
lea ecx, [ebp - 0xb4]
mov dword [ebp - 4], 1
call fcn.004394d5
test al, al
je 0x43f0ad
mov eax, dword [esi]
lea ecx, [ebp - 0xf8]
push ecx
mov ecx, esi
call dword [eax + 0xb4]
push eax
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 2
call fcn.00439704
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 1
call fcn.00439431
push 0x2c
pop esi
push esi
lea edi, [ebx + 0x20]
push 0
push edi
call sub.MSVCR100.dll_memset
mov eax, dword [ebx]
mov dword [edi], esi
mov dword [ebx + 0x24], 1
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], eax
mov eax, dword [0x48e6b4]
add esp, 0xc
lea ecx, [ebp - 0xb4]
mov dword [ebx + 0x40], eax
call fcn.00439451
lea esi, [ebp - 0x20]
lea edi, [ebx + 0x30]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor edi, edi
mov dword [ebx + 0x44], eax
cmp dword [ebx + 0x1c], edi
jne 0x43f134
push edi
push dword [0x48e6b4]
mov eax, SysReAllocString
push edi
push dword [ebx]
push eax
push eax
push eax
push eax
push SysStringLen
push edi
push str.tooltips_class32
push edi
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebx + 0x20]
push ecx
push edi
push 0x404
push eax
mov dword [ebx + 0x1c], eax
call esi
jmp 0x43f13a
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
lea eax, [ebp - 0x16c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x16c]
add eax, 0xf
movzx eax, ax
add ecx, 0xf
movzx ecx, cx
shl eax, 0x10
or eax, ecx
push eax
push edi
push 0x412
push dword [ebx + 0x1c]
call esi
mov ecx, dword [ebp - 0x150]
mov eax, dword [ecx]
call dword [eax + 0xac]
push eax
push edi
push 0x418
push dword [ebx + 0x1c]
call esi
lea eax, [ebx + 0x20]
push eax
push edi
push 0x409
push dword [ebx + 0x1c]
call esi
lea eax, [ebx + 0x20]
push eax
push 1
push 0x411
push dword [ebx + 0x1c]
call esi
lea eax, [ebx + 0x20]
push eax
push edi
push 0x40c
push dword [ebx + 0x1c]
call esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb4]
call fcn.00439431
jmp 0x43f753
cmp dword [ebp - 0x14c], 0
je 0x43f753
push dword [ebp - 0x14c]
add esi, 0x2000
push dword [ebp - 0x158]
push esi
jmp 0x43e925
push dword [ebx]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0x14c]
movsx eax, word [ebp - 0x14c]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x150], ecx
mov dword [ebx + 0x13c], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x154], eax
mov dword [ebx + 0x138], eax
call fcn.0043d6cc
mov esi, eax
test esi, esi
je 0x43f753
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
cmp eax, ebx
jne 0x43f753
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x104]
mov ecx, ebx
call fcn.0043c099
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x30], 0xf
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], ecx
jmp 0x43ec48
sub esi, 0x20a
je 0x43f5e4
sub esi, 0x97
je 0x43f449
dec esi
dec esi
je 0x43f3fc
sub esi, 0x75
je 0x43f31b
sub esi, 0x7ce9
jne 0x43f753
push dword [ebx]
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x43f753
lea ecx, [ebx + 0x1c8]
xor edi, edi
call fcn.004498c6
test eax, eax
jle 0x43f30b
push edi
lea ecx, [ebx + 0x1c8]
call fcn.00439400
test eax, eax
je 0x43f2fb
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx]
lea ecx, [ebx + 0x1c8]
inc edi
call fcn.004498c6
cmp edi, eax
jl 0x43f2e3
lea ecx, [ebx + 0x1c8]
call fcn.0043922b
jmp 0x43f753
lea eax, [ebp - 0x40]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [ebp - 0x158]
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x124]
lea edx, [ebp - 0x40]
push edx
push dword [ebp - 0x158]
mov dword [ebp - 0x160], eax
mov eax, dword [ecx]
call dword [eax + 0x134]
test byte [ebp - 0x14c], 0x10
je 0x43f3e5
push 5
push dword [ebx]
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, eax
test esi, esi
je 0x43f3e5
mov eax, dword [ebp - 0x14c]
or eax, 2
mov dword [ebp - 0x150], eax
and dword [ebp - 0x20], 0
xor eax, eax
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x20]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea eax, [ebp - 0x20]
push eax
push dword [ebx]
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [ebp - 0x1c]
push 0
neg eax
push eax
mov eax, dword [ebp - 0x20]
neg eax
push eax
push dword [ebp - 0x158]
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
push dword [ebp - 0x150]
push dword [ebp - 0x158]
push 0x317
push esi
call dword [sym.imp.USER32.dll_SendMessageA]
push 2
push esi
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, eax
test esi, esi
jne 0x43f37d
push dword [ebp - 0x160]
push dword [ebp - 0x158]
call dword [sym.imp.GDI32.dll_RestoreDC]
jmp 0x43f753
push 0x10
lea eax, [ebx + 0x30]
push 0
push eax
call sub.MSVCR100.dll_memset
mov eax, dword [ebx + 0x1c]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
add esp, 0xc
test eax, eax
je 0x43f427
lea ecx, [ebx + 0x20]
push ecx
push 0
push 0x411
push eax
call esi
cmp byte [ebx + 0x189], 0
je 0x43f43d
push 0xffffffffffffffff
push 0
push 0x200
push dword [ebx]
call esi
mov byte [ebx + 0x189], 0
jmp 0x43f753
mov eax, dword [ebp - 0x14c]
movsx esi, ax
shr eax, 0x10
cwde
push eax
push esi
mov ecx, ebx
mov byte [ebx + 0x189], 0
mov dword [ebp - 0x168], eax
call fcn.0043d6cc
mov edi, eax
mov dword [ebp - 0x150], edi
test edi, edi
je 0x43f753
mov edx, dword [ebx + 0x12c]
test edx, edx
je 0x43f4c7
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], 0xc
mov dword [ebp - 0x2c], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x12c]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x124]
mov edi, dword [ebp - 0x150]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0xb0]
test al, al
jne 0x43e087
mov eax, dword [edi]
lea ecx, [ebp - 0xb4]
push ecx
mov ecx, edi
call dword [eax + 0xa0]
and dword [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.004394d5
test al, al
je 0x43f511
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb4]
call fcn.00439431
jmp 0x43e087
push 0x2c
pop esi
push esi
lea edi, [ebx + 0x20]
push 0
push edi
call sub.MSVCR100.dll_memset
mov eax, dword [ebx]
mov dword [edi], esi
mov dword [ebx + 0x24], 1
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], eax
mov eax, dword [0x48e6b4]
add esp, 0xc
lea ecx, [ebp - 0xb4]
mov dword [ebx + 0x40], eax
call fcn.00439451
mov ecx, dword [ebp - 0x150]
mov dword [ebx + 0x44], eax
mov eax, dword [ecx]
call dword [eax + 0x34]
cmp dword [ebx + 0x1c], 0
lea edi, [ebx + 0x30]
mov esi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
jne 0x43f5a4
xor edi, edi
push edi
push dword [0x48e6b4]
mov eax, SysReAllocString
push edi
push dword [ebx]
push eax
push eax
push eax
push eax
push SysStringLen
push edi
push str.tooltips_class32
push 8
call dword [sym.imp.USER32.dll_CreateWindowExA]
lea ecx, [ebx + 0x20]
push ecx
push edi
push 0x404
push eax
mov dword [ebx + 0x1c], eax
call esi
jmp 0x43f5a6
xor edi, edi
mov ecx, dword [ebp - 0x150]
mov eax, dword [ecx]
call dword [eax + 0xac]
push eax
push edi
push 0x418
push dword [ebx + 0x1c]
call esi
lea eax, [ebx + 0x20]
push eax
push edi
push 0x409
push dword [ebx + 0x1c]
call esi
lea eax, [ebx + 0x20]
push eax
push 1
push 0x411
push dword [ebx + 0x1c]
call esi
jmp 0x43f4fd
movsx eax, word [ebp - 0x14c]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x14c]
shr eax, 0x10
cwde
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x154]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x150]
mov eax, dword [ebp - 0x154]
push ecx
mov dword [ebx + 0x13c], ecx
push eax
mov ecx, ebx
mov dword [ebx + 0x138], eax
call fcn.0043d6cc
mov esi, eax
test esi, esi
je 0x43f753
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
cmp eax, ebx
jne 0x43f753
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x158]
shr eax, 0x10
xor ecx, ecx
test ax, ax
mov eax, dword [ebp - 0x14c]
sets cl
mov dword [ebp - 0x30], 0x12
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], ecx
call fcn.0043b7ac
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x124]
movzx eax, word [ebx + 0x13c]
movzx ecx, word [ebx + 0x138]
shl eax, 0x10
or eax, ecx
push eax
push 0
push 0x200
push dword [ebx]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x43f753
push 0
mov ecx, esi
call fcn.00439383
cmp byte [ebx + 0x2c8], 0
jne 0x43f741
mov eax, dword [edi + 0x88]
test eax, eax
je 0x43f6fa
lea ecx, [eax + 0x34]
call fcn.004429b4
test al, al
je 0x43f6fa
mov ecx, dword [edi + 0x88]
push edi
add ecx, 0x34
call fcn.00442a11
and dword [ebp - 0x150], 0
lea ecx, [ebx + 0x18c]
call fcn.004498c6
test eax, eax
jle 0x43f741
push dword [ebp - 0x150]
lea ecx, [ebx + 0x18c]
call fcn.00439400
mov edx, dword [eax]
push edi
mov ecx, eax
call dword [edx]
inc dword [ebp - 0x150]
lea ecx, [ebx + 0x18c]
call fcn.004498c6
cmp dword [ebp - 0x150], eax
jl 0x43f710
test edi, edi
je 0x43f753
mov ecx, edi
call fcn.0043b7ff
push edi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
pop ecx
lea esi, [ebx + 0x1d4]
push 0
mov ecx, esi
call fcn.004393e4
mov edi, eax
test edi, edi
jne 0x43f6c3
xor al, al
call fcn.0046c2c1
ret 0x10