Function at 0x4302c0
Capabilities:
Check for time delay via gettickcount
Resolve function by parsing pe exports

Disassembly:
push ebp
sub esp, 0x104
lea ebp, [esp - 4]
mov eax, dword [0x48c0d0]
xor eax, ebp
mov dword [ebp + 0x104], eax
push 0x38
mov eax, 0x471846
call fcn.0045a6ad
mov eax, dword [ebp + 0x118]
mov esi, dword [ebp + 0x114]
mov ebx, ecx
cmp dword [ebx + 0xc], 0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x11c]
mov dword [ebp - 0x30], eax
je 0x4315d8
lea ecx, [ebx + 0x10c]
mov dword [ebp - 0x2c], ecx
jmp 0x43038e
mov ecx, dword [ebp - 0x2c]
push 0
call fcn.0042d5ce
mov eax, dword [edi + 0x84]
test eax, eax
je 0x430342
lea ecx, [eax + 0x34]
call fcn.004444bb
test al, al
je 0x430342
mov ecx, dword [edi + 0x84]
push edi
add ecx, 0x34
call fcn.004444ca
and dword [ebp - 0x10], 0
lea ecx, [ebx + 0xc4]
call fcn.0042d98f
test eax, eax
jle 0x43037d
push dword [ebp - 0x10]
lea ecx, [ebx + 0xc4]
call fcn.0042d642
mov edx, dword [eax]
push edi
mov ecx, eax
call dword [edx]
inc dword [ebp - 0x10]
lea ecx, [ebx + 0xc4]
call fcn.0042d98f
cmp dword [ebp - 0x10], eax
jl 0x430355
mov ecx, edi
call fcn.0042d673
push edi
call fcn.00457a6e
pop ecx
mov ecx, dword [ebp - 0x2c]
push 0
call fcn.0042d629
mov edi, eax
test edi, edi
jne 0x430313
and dword [ebp - 0x10], eax
lea ecx, [ebx + 0xe8]
call fcn.0042d98f
mov edi, dword [ebp + 0x110]
test eax, eax
jle 0x4303f5
push dword [ebp - 0x10]
lea ecx, [ebx + 0xe8]
mov byte [ebp - 0x25], 0
call fcn.0042d642
mov edx, dword [eax]
lea ecx, [ebp - 0x25]
push ecx
push dword [ebp - 0x14]
mov ecx, eax
push esi
push edi
call dword [edx]
cmp byte [ebp - 0x25], 0
jne 0x430481
inc dword [ebp - 0x10]
lea ecx, [ebx + 0xe8]
call fcn.0042d98f
cmp dword [ebp - 0x10], eax
jl 0x4303b7
mov eax, 0x113
cmp edi, eax
ja 0x430d5d
je 0x430cc0
cmp edi, 0x4e
ja 0x430ade
je 0x430abf
sub edi, 5
je 0x430a66
sub edi, 0xa
je 0x430604
dec edi
je 0x43055e
sub edi, 4
je 0x430550
sub edi, 0xc
je 0x43048d
sub edi, 4
jne 0x43154f
mov eax, dword [ebx + 0x78]
mov ecx, dword [ebp - 0x14]
test eax, eax
jle 0x430454
mov dword [ecx + 0x18], eax
mov eax, dword [ebx + 0x7c]
test eax, eax
jle 0x43045e
mov dword [ecx + 0x1c], eax
mov eax, dword [ebx + 0x80]
test eax, eax
jle 0x43046b
mov dword [ecx + 0x20], eax
mov eax, dword [ebx + 0x84]
test eax, eax
jle 0x43154f
mov dword [ecx + 0x24], eax
jmp 0x43154f
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
mov al, 1
jmp 0x4315da
cmp word [ebp - 0x14], 1
jne 0x43154f
cmp byte [ebx + 0xc2], 0
jne 0x430486
and dword [ebp - 0x34], 0
xor eax, eax
lea edi, [ebp - 0x30]
stosd dword es:[edi], eax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x34]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_ScreenToClient]
push dword [ebp - 0x30]
mov ecx, ebx
push dword [ebp - 0x34]
call fcn.0042fc14
mov dword [ebp - 0x10], eax
test eax, eax
je 0x43154f
mov ecx, eax
mov eax, dword [ecx]
call dword [eax + 0x14]
test al, 2
je 0x43154f
xor eax, eax
push 7
pop ecx
lea edi, [ebp + 0xa8]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0xc0], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp + 0xb0], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp + 0xa4], 0x17
mov dword [ebp + 0xbc], esi
mov dword [ebp + 0xb4], eax
call fcn.0042e4d2
mov word [ebp + 0xba], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x10]
lea edx, [ebp + 0xa4]
mov dword [ebp + 0xac], eax
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
jmp 0x430486
mov eax, dword [ebp - 0x30]
mov dword [eax], 1
jmp 0x430486
and dword [ebp + 0xe4], 0
push 7
xor eax, eax
pop ecx
lea edi, [ebp + 0xe8]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x70]
mov dword [ebp + 0xf0], eax
mov eax, dword [ebx + 0x74]
mov dword [ebp + 0xf4], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x64]
mov dword [ebp + 0xec], eax
test ecx, ecx
je 0x4305b6
lea edx, [ebp + 0xe4]
mov dword [ebp + 0xe4], 0xa
mov dword [ebp + 0xe8], ecx
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
mov ecx, dword [ebx + 0x68]
test ecx, ecx
je 0x4305dc
lea edx, [ebp + 0xe4]
mov dword [ebp + 0xe4], 0xe
mov dword [ebp + 0xe8], ecx
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
push 0
mov ecx, ebx
call fcn.0042fe56
push 4
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetWindow]
test eax, eax
je 0x43154f
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x43154f
xor eax, eax
xor esi, esi
mov dword [ebp - 0x44], esi
lea edi, [ebp - 0x40]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push esi
lea eax, [ebp - 0x44]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetUpdateRect]
test eax, eax
je 0x430486
cmp dword [ebx + 0x5c], esi
jne 0x430669
push 0x3c
lea eax, [ebp + 0x88]
push esi
push eax
mov dword [ebp + 0x84], esi
call fcn.00459f00
add esp, 0xc
lea eax, [ebp + 0x84]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_BeginPaint]
lea eax, [ebp + 0x84]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x430486
cmp byte [ebx + 0xbd], 0
je 0x43076a
and dword [ebp - 0x24], esi
xor eax, eax
lea edi, [ebp - 0x20]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebx + 0xc]
mov byte [ebx + 0xbd], 0
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x43076a
mov ecx, dword [ebx + 0x5c]
call fcn.00437bcd
mov ecx, dword [ebx + 0x5c]
test al, al
mov eax, dword [ecx]
je 0x43072f
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x24]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x34]
mov eax, dword [ebx + 0x18]
mov esi, dword [sym.imp.GDI32.dll_DeleteDC]
test eax, eax
je 0x4306d7
push eax
call esi
mov eax, dword [ebx + 0x1c]
xor edi, edi
cmp eax, edi
je 0x4306e3
push eax
call esi
mov eax, dword [ebx + 0x20]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
cmp eax, edi
je 0x4306f3
push eax
call esi
mov eax, dword [ebx + 0x24]
cmp eax, edi
je 0x4306fd
push eax
call esi
mov dword [ebx + 0x18], edi
mov dword [ebx + 0x1c], edi
mov dword [ebx + 0x20], edi
mov dword [ebx + 0x24], edi
jmp 0x430748
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov dword [ebp - 0x2c], eax
call dword [eax + 0x30]
mov ecx, dword [ebp - 0x10]
sub esp, 0x10
mov esi, eax
mov eax, dword [ebp - 0x2c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x34]
mov ecx, dword [ebx + 0x5c]
mov eax, dword [ecx]
push SysReAllocString
push 0
push 0x42f4f9
call dword [eax + 0xfc]
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x43070b
lea eax, [ebx + 0xbc]
cmp byte [eax], 0
je 0x43076a
mov byte [eax], 0
xor eax, eax
push eax
push eax
push eax
push str.windowinit
push dword [ebx + 0x5c]
mov ecx, ebx
call fcn.0042f982
cmp byte [ebx + 0xbe], 0
je 0x43077c
push 1
mov ecx, ebx
call fcn.0042fff0
cmp byte [ebx + 0xbf], 0
je 0x4307ca
cmp dword [ebx + 0x20], 0
jne 0x4307ca
and dword [ebp - 0x24], 0
xor eax, eax
lea edi, [ebp - 0x20]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [ebx + 0x14]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebx + 0x18], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
push eax
push dword [ebx + 0x14]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebx + 0x20], eax
and dword [ebp + 0xc4], 0
push 0x3c
lea eax, [ebp + 0xc8]
push 0
push eax
call fcn.00459f00
add esp, 0xc
lea eax, [ebp + 0xc4]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_BeginPaint]
cmp byte [ebx + 0xbf], 0
je 0x430a04
push dword [ebx + 0x20]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebx + 0x18]
call esi
push dword [ebx + 0x18]
mov dword [ebp - 0x30], eax
call dword [sym.imp.GDI32.dll_SaveDC]
cmp byte [ebx + 0xc0], 0
mov dword [ebp - 0x2c], eax
je 0x430909
mov eax, dword [ebx + 0x24]
test eax, eax
jne 0x4308c0
and dword [ebp - 0x24], eax
lea edi, [ebp - 0x20]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x24]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [ebx + 0x14]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebx + 0x1c], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
push eax
push dword [ebx + 0x14]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
push dword [ebx + 0x1c]
mov dword [ebx + 0x24], eax
call esi
mov eax, dword [ebp + 0xd8]
sub eax, dword [ebp + 0xd0]
push 0xcc0020
push dword [ebp + 0xd0]
push dword [ebp + 0xcc]
push dword [ebp + 0xc4]
push eax
mov eax, dword [ebp + 0xd4]
sub eax, dword [ebp + 0xcc]
push eax
push dword [ebp + 0xd0]
push dword [ebp + 0xcc]
push dword [ebx + 0x1c]
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x4308c6
push eax
push dword [ebx + 0x1c]
call esi
mov eax, dword [ebp + 0xd8]
sub eax, dword [ebp + 0xd0]
push 0xcc0020
push dword [ebp + 0xd0]
push dword [ebp + 0xcc]
push dword [ebx + 0x1c]
push eax
mov eax, dword [ebp + 0xd4]
sub eax, dword [ebp + 0xcc]
push eax
push dword [ebp + 0xd0]
push dword [ebp + 0xcc]
push dword [ebx + 0x18]
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [ebx + 0x5c]
mov eax, dword [ecx]
lea edx, [ebp + 0xcc]
push edx
push dword [ebx + 0x18]
call dword [eax + 0x118]
and dword [ebp - 0x10], 0
lea edi, [ebx + 0xf4]
mov ecx, edi
call fcn.0042d98f
test eax, eax
jle 0x430960
push dword [ebp - 0x10]
mov ecx, edi
call fcn.0042d642
mov edx, dword [eax]
lea ecx, [ebp + 0xcc]
push ecx
push dword [ebx + 0x18]
mov ecx, eax
call dword [edx + 0x130]
inc dword [ebp - 0x10]
mov ecx, edi
call fcn.0042d98f
cmp dword [ebp - 0x10], eax
jl 0x430933
push dword [ebp - 0x2c]
push dword [ebx + 0x18]
call dword [sym.imp.GDI32.dll_RestoreDC]
mov eax, dword [ebp + 0xd8]
sub eax, dword [ebp + 0xd0]
push 0xcc0020
push dword [ebp + 0xd0]
push dword [ebp + 0xcc]
push dword [ebx + 0x18]
push eax
mov eax, dword [ebp + 0xd4]
sub eax, dword [ebp + 0xcc]
push eax
push dword [ebp + 0xd0]
push dword [ebp + 0xcc]
push dword [ebp + 0xc4]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x30]
push dword [ebx + 0x18]
call esi
cmp byte [ebx + 0x58], 0
je 0x430a37
push dword [0x48d928]
push dword [ebp + 0xc4]
call esi
push 5
mov edi, eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebp + 0xc4]
call esi
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x44]
push dword [ebp + 0xc4]
call dword [sym.imp.GDI32.dll_Rectangle]
push edi
push dword [ebp + 0xc4]
call esi
jmp 0x430a37
push dword [ebp + 0xc4]
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x5c]
lea edx, [ebp + 0xcc]
push edx
push dword [ebp + 0xc4]
mov esi, eax
mov eax, dword [ecx]
call dword [eax + 0x118]
push esi
push dword [ebp + 0xc4]
call dword [sym.imp.GDI32.dll_RestoreDC]
lea eax, [ebp + 0xc4]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_EndPaint]
cmp byte [ebx + 0xbd], 0
je 0x430486
push 0
push 0
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x430486
mov edx, dword [ebx + 0x60]
test edx, edx
je 0x430aa8
push 7
pop ecx
xor eax, eax
lea edi, [ebp + 0xe8]
rep stosd dword es:[edi], eax
mov dword [ebp + 0xe4], 0x16
mov dword [ebp + 0xe8], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x60]
lea edx, [ebp + 0xe4]
mov dword [ebp + 0xec], eax
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
mov ebx, dword [ebx + 0x5c]
test ebx, ebx
je 0x430486
mov ecx, ebx
call fcn.00437bd4
jmp 0x430486
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x430486
push eax
push esi
push 0x204e
push dword [eax]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x430481
sub edi, 0x7b
je 0x430c49
sub edi, 0x85
je 0x430bda
dec edi
je 0x430b6d
dec edi
je 0x430b19
sub edi, 0xf
jne 0x43154f
cmp dword [ebp - 0x14], edi
je 0x43154f
push dword [ebp - 0x14]
push esi
push 0x2111
push dword [ebp - 0x14]
jmp 0x430ad3
cmp dword [ebx + 0x60], 0
je 0x43154f
xor eax, eax
push 7
pop ecx
lea edi, [ebp + 0xe8]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x70]
mov dword [ebp + 0xf0], eax
mov eax, dword [ebx + 0x74]
mov dword [ebp + 0xe4], 5
mov word [ebp + 0xf8], si
mov dword [ebp + 0xf4], eax
call fcn.0042e4d2
mov word [ebp + 0xfa], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x60]
jmp 0x430d43
cmp dword [ebx + 0x6c], 0
je 0x43154f
xor eax, eax
push 7
pop ecx
lea edi, [ebp + 0xe8]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x70]
mov dword [ebp + 0xf0], eax
mov eax, dword [ebx + 0x74]
mov dword [ebp + 0xe4], 4
mov word [ebp + 0xf8], si
mov dword [ebp + 0xf4], eax
call fcn.0042e4d2
mov word [ebp + 0xfa], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x6c]
lea edx, [ebp + 0xe4]
mov dword [ebp + 0xec], eax
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
and dword [ebx + 0x6c], 0
jmp 0x43154f
cmp dword [ebx + 0x60], 0
je 0x43154f
xor eax, eax
push 7
pop ecx
lea edi, [ebp + 0xe8]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x70]
mov dword [ebp + 0xf0], eax
mov eax, dword [ebx + 0x74]
mov dword [ebp + 0xe4], 3
mov word [ebp + 0xf8], si
mov dword [ebp + 0xf4], eax
call fcn.0042e4d2
mov word [ebp + 0xfa], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x60]
lea edx, [ebp + 0xe4]
mov dword [ebp + 0xec], eax
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
mov eax, dword [ebx + 0x60]
mov dword [ebx + 0x6c], eax
jmp 0x43154f
mov eax, dword [ebp - 0x14]
movsx ecx, ax
shr eax, 0x10
cwde
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x1c]
push eax
push dword [ebx + 0xc]
mov dword [ebp - 0x1c], ecx
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [ebx + 0x68], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebx + 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebx + 0x74], eax
je 0x43154f
mov ecx, ebx
call fcn.0042ec77
push 7
xor eax, eax
pop ecx
lea edi, [ebp + 0xe8]
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebx + 0x68]
mov dword [ebp + 0xf0], ecx
mov ecx, dword [ebp - 0x18]
mov dword [ebp + 0xe4], 0x11
mov dword [ebp + 0xe8], eax
mov dword [ebp + 0xf4], ecx
mov dword [ebp + 0x100], eax
jmp 0x430eb8
and dword [ebp - 0x10], 0
lea edi, [ebx + 0xd0]
mov ecx, edi
call fcn.0042d98f
test eax, eax
jle 0x43154f
push dword [ebp - 0x10]
mov ecx, edi
call fcn.0042d642
mov ecx, dword [eax + 8]
mov dword [ebp - 0x30], eax
cmp ecx, dword [ebx + 0xc]
jne 0x430cfc
movzx ecx, si
cmp dword [eax + 0xc], ecx
jne 0x430cfc
cmp byte [eax + 0x10], 0
je 0x430d10
inc dword [ebp - 0x10]
mov ecx, edi
call fcn.0042d98f
cmp dword [ebp - 0x10], eax
jl 0x430cd9
jmp 0x43154f
mov esi, dword [ebp - 0x30]
push 7
xor eax, eax
pop ecx
lea edi, [ebp + 0xe8]
rep stosd dword es:[edi], eax
mov eax, dword [esi]
mov dword [ebp + 0xe8], eax
mov eax, dword [esi + 4]
mov dword [ebp + 0xe4], 0x18
mov dword [ebp + 0xfc], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi]
mov dword [ebp + 0xec], eax
mov eax, dword [ecx]
lea edx, [ebp + 0xe4]
push edx
call dword [eax + pe_nt_image_headers32]
jmp 0x43154f
mov eax, 0x204
cmp edi, eax
ja 0x4311b4
je 0x431132
mov eax, edi
sub eax, 0x133
je 0x431118
sub eax, 5
je 0x431118
sub eax, 0xc8
je 0x430fa4
dec eax
je 0x430ee6
dec eax
je 0x430e4d
dec eax
jne 0x43154f
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebp - 0x14]
movsx ecx, ax
shr eax, 0x10
cwde
push eax
mov dword [ebp - 0x1c], ecx
mov dword [ebx + 0x70], ecx
push ecx
mov ecx, ebx
mov dword [ebp - 0x18], eax
mov dword [ebx + 0x74], eax
call fcn.0042fc14
mov dword [ebp - 0x10], eax
test eax, eax
je 0x43154f
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x43154f
mov ecx, ebx
call fcn.0042ec62
push 7
pop ecx
xor eax, eax
lea edi, [ebp + 0xe8]
rep stosd dword es:[edi], eax
mov dword [ebp + 0xe4], 0x10
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x10]
mov dword [ebp + 0xf0], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp + 0xe8], edi
mov dword [ebp + 0xf4], eax
mov word [ebp + 0xfa], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp + 0xe4]
mov dword [ebp + 0xec], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + pe_nt_image_headers32]
mov dword [ebx + 0x68], edi
jmp 0x43154f
mov ecx, dword [ebp - 0x14]
movsx eax, word [ebp - 0x14]
shr ecx, 0x10
cmp dword [ebx + 0x68], 0
movsx ecx, cx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ecx
mov dword [ebx + 0x70], eax
mov dword [ebx + 0x74], ecx
je 0x43154f
mov ecx, ebx
call fcn.0042ec77
xor eax, eax
push 7
pop ecx
lea edi, [ebp + 0xe8]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x68]
mov dword [ebp + 0xe8], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0x100], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp + 0xf0], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp + 0xe4], 0xe
mov dword [ebp + 0xfc], esi
mov dword [ebp + 0xf4], eax
mov word [ebp + 0xfa], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x68]
lea edx, [ebp + 0xe4]
mov dword [ebp + 0xec], eax
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
and dword [ebx + 0x68], 0
jmp 0x43154f
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0x14]
movsx eax, word [ebp - 0x14]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x18], ecx
mov dword [ebx + 0x74], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1c], eax
mov dword [ebx + 0x70], eax
call fcn.0042fc14
mov dword [ebp - 0x10], eax
test eax, eax
je 0x43154f
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x43154f
mov ecx, dword [ebp - 0x10]
mov dword [ebx + 0x68], ecx
mov eax, dword [ecx]
call dword [eax + 0xf0]
mov ecx, ebx
call fcn.0042ec62
xor eax, eax
push 7
pop ecx
lea edi, [ebp + 0xe8]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x14]
mov edi, dword [ebp - 0x10]
mov dword [ebp + 0x100], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp + 0xf0], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp + 0xe4], 0xd
mov dword [ebp + 0xe8], edi
mov dword [ebp + 0xfc], esi
mov dword [ebp + 0xf4], eax
mov word [ebp + 0xfa], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp + 0xe4]
mov dword [ebp + 0xec], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
jmp 0x430d52
cmp byte [ebx + 0xc1], 0
jne 0x430ffb
xor eax, eax
lea edi, [ebp - 0x40]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebx + 0xc]
push 3
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx + 0x28]
pop ecx
mov dword [ebp - 0x44], 0x10
mov dword [ebp - 0x40], ecx
test eax, eax
jne 0x430fd8
mov dword [ebp - 0x38], 0x190
jmp 0x430fea
push 0
push ecx
push 0x415
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.COMCTL32.dll__TrackMouseEvent]
mov byte [ebx + 0xc1], 1
mov eax, dword [ebp - 0x14]
movsx esi, ax
shr eax, 0x10
cwde
push eax
push esi
mov ecx, ebx
mov dword [ebp - 0x18], eax
mov dword [ebx + 0x70], esi
mov dword [ebx + 0x74], eax
call fcn.0042fc14
mov dword [ebp - 0x10], eax
test eax, eax
je 0x43102d
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x43154f
and dword [ebp + 0xe4], 0
push 7
xor eax, eax
pop ecx
lea edi, [ebp + 0xe8]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp + 0xf0], esi
mov dword [ebp + 0xf4], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x64]
mov dword [ebp + 0xec], eax
cmp dword [ebp - 0x10], ecx
je 0x4310a4
test ecx, ecx
je 0x4310a4
lea edx, [ebp + 0xe4]
mov dword [ebp + 0xe4], 0xa
mov dword [ebp + 0xe8], ecx
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
mov eax, dword [ebx + 0x28]
and dword [ebx + 0x64], 0
test eax, eax
je 0x4310a4
lea ecx, [ebx + 0x2c]
push ecx
push 0
push 0x411
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, dword [ebp - 0x10]
cmp esi, dword [ebx + 0x64]
je 0x4310d4
test esi, esi
je 0x4310d4
lea ecx, [ebp + 0xe4]
mov dword [ebp + 0xe4], 0xb
mov dword [ebp + 0xe8], esi
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + pe_nt_image_headers32]
mov dword [ebx + 0x64], esi
mov ecx, dword [ebx + 0x68]
test ecx, ecx
je 0x4310f0
mov dword [ebp + 0xe4], 9
mov dword [ebp + 0xe8], ecx
jmp 0x430d49
test esi, esi
je 0x43154f
lea ecx, [ebp + 0xe4]
mov dword [ebp + 0xe4], 9
mov dword [ebp + 0xe8], esi
mov eax, dword [esi]
push ecx
mov ecx, esi
jmp 0x430d52
cmp dword [ebp - 0x14], 0
je 0x43154f
push dword [ebp - 0x14]
add edi, 0x2000
push esi
push edi
jmp 0x430b14
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0x14]
movsx eax, word [ebp - 0x14]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x18], ecx
mov dword [ebx + 0x74], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1c], eax
mov dword [ebx + 0x70], eax
call fcn.0042fc14
mov dword [ebp - 0x10], eax
test eax, eax
je 0x43154f
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x43154f
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
call dword [eax + 0xf0]
mov ecx, ebx
call fcn.0042ec62
push 7
xor eax, eax
pop ecx
lea edi, [ebp + 0xe8]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0xe4], 0xf
mov dword [ebp + 0xfc], esi
mov dword [ebp + 0x100], eax
jmp 0x430e06
sub edi, 0x20a
je 0x431480
sub edi, 0x97
je 0x43131e
dec edi
dec edi
je 0x4312e2
sub edi, 0x75
je 0x431222
sub edi, 0x7ce9
jne 0x43154f
lea esi, [ebx + 0x100]
mov ecx, esi
call fcn.0042d98f
test eax, eax
jle 0x431216
push edi
mov ecx, esi
call fcn.0042d642
test eax, eax
je 0x43120a
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx]
mov ecx, esi
inc edi
call fcn.0042d98f
cmp edi, eax
jl 0x4311f6
mov ecx, esi
call fcn.0042d49c
jmp 0x43154f
lea eax, [ebp + 0xf4]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetClientRect]
push esi
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x5c]
lea edx, [ebp + 0xf4]
push edx
mov dword [ebp - 0x18], eax
mov eax, dword [ecx]
push esi
call dword [eax + 0x118]
test byte [ebp - 0x14], 0x10
je 0x4312d3
push 5
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x10], eax
test eax, eax
je 0x4312d3
mov eax, dword [ebp - 0x14]
or eax, 2
mov dword [ebp - 0x30], eax
and dword [ebp - 0x44], 0
xor eax, eax
lea edi, [ebp - 0x40]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea eax, [ebp - 0x44]
push eax
push dword [ebx + 0xc]
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [ebp - 0x40]
push 0
neg eax
push eax
mov eax, dword [ebp - 0x44]
neg eax
push eax
push esi
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
push dword [ebp - 0x30]
push esi
push 0x317
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_SendMessageW]
push 2
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x431270
push dword [ebp - 0x18]
push esi
call dword [sym.imp.GDI32.dll_RestoreDC]
jmp 0x43154f
mov eax, dword [ebx + 0x28]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x4312fd
lea ecx, [ebx + 0x2c]
push ecx
push 0
push 0x411
push eax
call esi
lea edi, [ebx + 0xc1]
cmp byte [edi], 0
je 0x431316
push 0xffffffffffffffff
push 0
push 0x200
push dword [ebx + 0xc]
call esi
mov byte [edi], 0
jmp 0x43154f
mov eax, dword [ebp - 0x14]
movsx ecx, ax
shr eax, 0x10
cwde
push eax
mov dword [ebp - 0x1c], ecx
push ecx
mov ecx, ebx
mov byte [ebx + 0xc1], 0
mov dword [ebp - 0x18], eax
call fcn.0042fc14
mov esi, eax
test esi, esi
je 0x43154f
mov edx, dword [ebx + 0x64]
test edx, edx
je 0x43139c
push 7
xor eax, eax
pop ecx
lea edi, [ebp + 0xe8]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp + 0xf0], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp + 0xf4], eax
mov dword [ebp + 0xe4], 0xc
mov dword [ebp + 0xe8], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x64]
lea edx, [ebp + 0xe4]
mov dword [ebp + 0xec], eax
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
mov eax, dword [esi]
lea ecx, [ebp]
push ecx
mov ecx, esi
call dword [eax + 0x98]
and dword [ebp - 4], 0
lea ecx, [ebp]
call fcn.0042d798
test al, al
je 0x4313cb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp]
call fcn.0042d673
jmp 0x430486
push 0x2c
lea edi, [ebx + 0x2c]
push 0
push edi
call fcn.00459f00
mov eax, dword [ebx + 0xc]
mov dword [edi], 0x2c
mov dword [ebx + 0x30], 1
mov dword [ebx + 0x34], eax
mov dword [ebx + 0x38], eax
mov eax, dword [0x48d92c]
add esp, 0xc
lea ecx, [ebp]
mov dword [ebx + 0x4c], eax
call fcn.0042d7c3
mov dword [ebx + 0x50], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x30]
cmp dword [ebx + 0x28], 0
lea edi, [ebx + 0x3c]
mov esi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x43145a
xor edi, edi
push edi
push dword [0x48d92c]
mov eax, SysReAllocString
push edi
push dword [ebx + 0xc]
push eax
push eax
push eax
push eax
push Ordinal_4
push edi
push str.tooltips_class32
push edi
call dword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [ebx + 0x2c]
push ecx
push edi
push 0x432
push eax
mov dword [ebx + 0x28], eax
call esi
jmp 0x43145c
xor edi, edi
lea eax, [ebx + 0x2c]
push eax
push edi
push 0x436
push dword [ebx + 0x28]
call esi
lea eax, [ebx + 0x2c]
push eax
push 1
push 0x411
push dword [ebx + 0x28]
call esi
jmp 0x4313ba
movsx eax, word [ebp - 0x14]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
shr eax, 0x10
cwde
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x1c]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
push ecx
mov dword [ebx + 0x74], ecx
push eax
mov ecx, ebx
mov dword [ebx + 0x70], eax
call fcn.0042fc14
mov dword [ebp - 0x10], eax
test eax, eax
je 0x43154f
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x43154f
xor eax, eax
push 7
pop ecx
lea edi, [ebp + 0xe8]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp + 0xe8], eax
xor eax, eax
shr esi, 0x10
test si, si
setl al
mov dword [ebp + 0xe4], 0x12
mov dword [ebp + 0xfc], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0x100], eax
call fcn.0042e4d2
mov word [ebp + 0xfa], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x10]
lea edx, [ebp + 0xe4]
mov dword [ebp + 0xec], eax
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
movzx eax, word [ebx + 0x74]
movzx ecx, word [ebx + 0x70]
shl eax, 0x10
or eax, ecx
push eax
push 0
push 0x200
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x2c]
push 0
call fcn.0042d629
mov edi, eax
test edi, edi
je 0x4315d8
add ebx, 0xc4
mov ecx, dword [ebp - 0x2c]
push 0
call fcn.0042d5ce
lea esi, [edi + 0x84]
mov eax, dword [esi]
test eax, eax
je 0x431592
lea ecx, [eax + 0x34]
call fcn.004444bb
test al, al
je 0x431592
mov ecx, dword [esi]
push edi
add ecx, 0x34
call fcn.004444ca
mov ecx, ebx
xor esi, esi
call fcn.0042d98f
test eax, eax
jle 0x4315ba
push esi
mov ecx, ebx
call fcn.0042d642
mov edx, dword [eax]
push edi
mov ecx, eax
call dword [edx]
mov ecx, ebx
inc esi
call fcn.0042d98f
cmp esi, eax
jl 0x43159f
mov ecx, edi
call fcn.0042d673
push edi
call fcn.00457a6e
pop ecx
mov ecx, dword [ebp - 0x2c]
push 0
call fcn.0042d629
mov edi, eax
test edi, edi
jne 0x431565
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x104]
xor ecx, ebp
call fcn.00457a79
add ebp, 0x108
leave
ret 0x10