Function at 0x436ec0
Capabilities:
Check for time delay via gettickcount
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x46ff6b
mov eax, dword fs:[0]
push eax
sub esp, 0x13c
mov eax, dword [0x4878d4]
xor eax, esp
mov dword [esp + 0x138], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4878d4]
xor eax, esp
push eax
lea eax, [esp + 0x150]
mov dword fs:[0], eax
mov eax, dword [esp + 0x16c]
mov edi, dword [esp + 0x164]
mov ebx, dword [esp + 0x168]
mov esi, ecx
cmp dword [esi], 0
mov dword [esp + 0x44], eax
je 0x438221
lea ecx, [esi + 0x144]
mov dword [esp + 0x34], 0
call fcn.004484d0
mov ebp, dword [esp + 0x160]
test eax, eax
jle 0x436f85
lea ecx, [ecx]
mov ecx, dword [esp + 0x34]
push ecx
lea ecx, [esi + 0x144]
mov byte [esp + 0x47], 0
call fcn.00431f30
mov edx, dword [eax]
mov edx, dword [edx]
lea ecx, [esp + 0x43]
push ecx
push ebx
push edi
push ebp
mov ecx, eax
call edx
cmp byte [esp + 0x43], 0
jne 0x4377c1
inc dword [esp + 0x34]
lea ecx, [esi + 0x144]
call fcn.004484d0
cmp dword [esp + 0x34], eax
jl 0x436f40
cmp ebp, 0x111
ja 0x437814
je 0x4377f1
lea eax, [ebp - 5]
cmp eax, 0xfd
ja case.default.0x437aae
movzx edx, byte [eax + 0x438284]
jmp dword [edx*4 + 0x438250]
mov ecx, dword [esi + 0xe4]
xor eax, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0xe0]
mov dword [esp + 0x14], 0
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0xd4]
mov dword [esp + 0x1c], eax
test ecx, ecx
je 0x43701c
mov dword [esp + 0x14], 9
mov dword [esp + 0x18], ecx
mov edx, dword [ecx]
mov edx, dword [edx + 0xec]
lea eax, [esp + 0x14]
push eax
call edx
mov ecx, dword [esi + 0xd8]
test ecx, ecx
je 0x437041
mov dword [esp + 0x14], 0xd
mov dword [esp + 0x18], ecx
mov eax, dword [ecx]
mov eax, dword [eax + 0xec]
lea edx, [esp + 0x14]
push edx
call eax
push 0
mov ecx, esi
call fcn.00436ac0
mov ecx, dword [esi]
push 4
push ecx
call dword [sym.imp.USER32.dll_GetWindow]
test eax, eax
je 0x438221
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x438221
mov edx, dword [esp + 0x44]
mov dword [edx], 1
mov al, 1
jmp 0x438223
mov ecx, dword [esi]
xor eax, eax
xor ebp, ebp
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
push ebp
lea eax, [esp + 0x18]
push eax
push ecx
mov dword [esp + 0x20], ebp
call dword [sym.imp.USER32.dll_GetUpdateRect]
test eax, eax
je 0x4377c7
cmp byte [esi + 0x125], 0
je 0x4371ce
xor eax, eax
lea edx, [esp + 0x48]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov eax, dword [esi]
push edx
push eax
mov byte [esi + 0x125], 0
mov dword [esp + 0x50], ebp
call dword [sym.imp.USER32.dll_GetClientRect]
lea ecx, [esp + 0x48]
push ecx
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x4371ce
mov ecx, dword [esi + 0xcc]
mov edx, dword [ecx]
cmp byte [ecx + 0x90], al
je 0x437145
mov edi, dword [esp + 0x48]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [esp + 0x5c]
mov dword [eax + 4], edi
mov edi, dword [esp + 0x60]
mov dword [eax + 8], edi
mov edi, dword [esp + 0x64]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0x34]
call eax
mov eax, dword [esi + 8]
cmp eax, ebp
je 0x43712f
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [esi + 0xc]
cmp eax, ebp
je 0x43713d
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [esi + 8], ebp
mov dword [esi + 0xc], ebp
jmp 0x4371ac
mov eax, dword [edx + 0xe8]
push SysReAllocString
push ebp
push 0x435960
call eax
mov edi, eax
cmp edi, ebp
je 0x4371ac
mov edi, edi
mov ebx, dword [edi]
mov edx, dword [ebx + 0x30]
mov ecx, edi
call edx
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov edx, dword [ebx + 0x34]
mov dword [ecx + 0xc], eax
mov ecx, edi
call edx
mov ecx, dword [esi + 0xcc]
mov eax, dword [ecx]
mov edx, dword [eax + 0xe8]
push SysReAllocString
push ebp
push 0x435960
call edx
mov edi, eax
cmp edi, ebp
jne 0x437160
cmp byte [esi + 0x124], 0
je 0x4371ce
mov eax, dword [esi + 0xcc]
push ebp
push ebp
push 9
push eax
mov ecx, esi
mov byte [esi + 0x124], 0
call fcn.004356b0
cmp byte [esi + 0x126], 0
je 0x43727c
cmp byte [esi + 0x125], 0
je 0x4371fb
mov ecx, dword [esi]
push ebp
push ebp
push ecx
mov byte [esi + 0x126], 1
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x43727c
mov edx, dword [esi + 0xd0]
mov ecx, dword [esi + 0xcc]
xor eax, eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x34], edx
push reloc.WS2_32.dll_closesocket
mov dword [esp + 0x3c], eax
lea edx, [esp + 0x38]
mov byte [esp + 0x40], 1
mov eax, dword [ecx]
mov eax, dword [eax + 0xe8]
push edx
push 0x4345b0
call eax
cmp eax, ebp
jne 0x43726d
mov ecx, dword [esi + 0xcc]
xor eax, eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x4c], eax
push reloc.WS2_32.dll_closesocket
lea eax, [esp + 0x4c]
mov dword [esp + 0x4c], ebp
mov byte [esp + 0x54], 1
mov edx, dword [ecx]
mov edx, dword [edx + 0xe8]
push eax
push 0x4345b0
call edx
cmp eax, ebp
je 0x437275
push eax
mov ecx, esi
call fcn.00436ac0
mov byte [esi + 0x126], 0
cmp byte [esi + 0x127], 0
je 0x4372d6
cmp dword [esi + 0xc], ebp
jne 0x4372d6
mov ecx, dword [esi]
xor eax, eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
lea eax, [esp + 0x48]
push eax
push ecx
mov dword [esp + 0x50], ebp
call dword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [esi + 4]
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov ecx, dword [esp + 0x50]
sub ecx, dword [esp + 0x48]
mov edx, dword [esi + 4]
mov dword [esi + 8], eax
mov eax, dword [esp + 0x54]
sub eax, dword [esp + 0x4c]
push eax
push ecx
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [esi + 0xc], eax
push 0x3c
lea eax, [esp + 0x90]
push ebp
push eax
mov dword [esp + 0x94], ebp
call fcn.0045cac0
mov edx, dword [esi]
add esp, 0xc
lea ecx, [esp + 0x88]
push ecx
push edx
call dword [sym.imp.USER32.dll_BeginPaint]
cmp byte [esi + 0x127], 0
je 0x43743a
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 8]
mov ebp, dword [sym.imp.GDI32.dll_SelectObject]
push eax
push ecx
call ebp
mov edx, dword [esi + 8]
push edx
mov dword [esp + 0x38], eax
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [esi + 0xcc]
lea edx, [esp + 0x90]
mov edi, eax
mov eax, dword [ecx]
mov eax, dword [eax + 0xf8]
push edx
mov edx, dword [esi + 8]
push edx
call eax
mov ecx, dword [esi + 8]
push edi
push ecx
call dword [sym.imp.GDI32.dll_RestoreDC]
lea ebx, [esi + 0x150]
mov ecx, ebx
xor edi, edi
call fcn.004484d0
test eax, eax
jle 0x437394
push edi
mov ecx, ebx
call fcn.00431f30
mov edx, dword [eax]
mov edx, dword [edx + 0x114]
lea ecx, [esp + 0x90]
push ecx
mov ecx, dword [esi + 8]
push ecx
mov ecx, eax
call edx
mov ecx, ebx
inc edi
call fcn.004484d0
cmp edi, eax
jl 0x437368
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
mov edx, dword [esi + 8]
push 0xcc0020
push eax
push ecx
push edx
mov edx, dword [esp + 0xac]
sub edx, eax
push edx
mov edx, dword [esp + 0xac]
sub edx, ecx
push edx
push eax
mov eax, dword [esp + 0xa4]
push ecx
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [esp + 0x34]
mov edx, dword [esi + 8]
push ecx
push edx
call ebp
cmp byte [esi + 0x44], 0
je 0x437479
mov eax, dword [0x489270]
mov ecx, dword [esp + 0x88]
push eax
push ecx
call ebp
push 5
mov edi, eax
call dword [sym.imp.GDI32.dll_GetStockObject]
mov edx, dword [esp + 0x88]
push eax
push edx
call ebp
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x90]
push edx
push eax
push ecx
call dword [sym.imp.GDI32.dll_Rectangle]
mov edx, dword [esp + 0x88]
push edi
push edx
call ebp
jmp 0x437479
mov eax, dword [esp + 0x88]
push eax
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [esi + 0xcc]
mov edx, dword [ecx]
mov edx, dword [edx + 0xf8]
mov edi, eax
lea eax, [esp + 0x90]
push eax
mov eax, dword [esp + 0x8c]
push eax
call edx
mov eax, dword [esp + 0x88]
push edi
push eax
call dword [sym.imp.GDI32.dll_RestoreDC]
mov edx, dword [esi]
lea ecx, [esp + 0x88]
push ecx
push edx
call dword [sym.imp.USER32.dll_EndPaint]
cmp byte [esi + 0x125], 0
je 0x4374a0
mov eax, dword [esi]
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov al, 1
jmp 0x438223
mov ecx, dword [esi + 0xe8]
mov dword [ebx + 0x18], ecx
mov edx, dword [esi + 0xec]
mov dword [ebx + 0x1c], edx
jmp 0x438221
cmp dword [esi + 0xd0], 0
je 0x43750c
xor eax, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x14], 0x17
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0xd0]
mov dword [esp + 0x1c], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0xec]
lea edx, [esp + 0x14]
push edx
call eax
mov ecx, dword [esi + 0xcc]
call fcn.00434fc0
mov al, 1
jmp 0x438223
cmp dword [esi + 0xd0], 0
je 0x438221
mov ecx, dword [esi + 0xe0]
mov edx, dword [esi + 0xe4]
xor eax, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x14], 4
mov word [esp + 0x28], di
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], edx
call fcn.00433490
mov word [esp + 0x2a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, dword [esi + 0xd0]
mov dword [esp + 0x1c], eax
mov eax, dword [esi]
mov edx, dword [eax + 0xec]
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call edx
jmp 0x438221
cmp dword [esi + 0xd0], 0
je 0x438221
mov ecx, dword [esi + 0xe4]
xor eax, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0xe0]
mov dword [esp + 0x14], 2
mov word [esp + 0x28], di
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
call fcn.00433490
mov word [esp + 0x2a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0xd0]
mov dword [esp + 0x1c], eax
mov edx, dword [ecx]
mov edx, dword [edx + 0xec]
lea eax, [esp + 0x14]
push eax
call edx
mov eax, dword [esi + 0xd0]
mov dword [esi + 0xdc], eax
jmp 0x438221
cmp dword [esi + 0xdc], 0
je 0x438221
mov ecx, dword [esi + 0xe0]
mov edx, dword [esi + 0xe4]
xor eax, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x14], 3
mov word [esp + 0x28], di
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], edx
call fcn.00433490
mov word [esp + 0x2a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0xdc]
mov dword [esp + 0x1c], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0xec]
lea edx, [esp + 0x14]
push edx
call eax
mov dword [esi + 0xdc], 0
jmp 0x438221
cmp bx, 1
jne 0x438221
cmp byte [esi + 0x129], 0
jne 0x4377c7
lea ecx, [esp + 0x34]
xor ebp, ebp
push ecx
mov dword [esp + 0x38], ebp
mov dword [esp + 0x3c], ebp
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [esi]
lea edx, [esp + 0x34]
push edx
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x34]
push ecx
push edx
mov ecx, esi
call fcn.00435940
mov esi, eax
cmp esi, ebp
je 0x438221
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
mov ecx, esi
call edx
test al, 2
je 0x438221
mov ecx, dword [esp + 0x38]
xor eax, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x14], 0x18
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
call fcn.00433490
mov word [esp + 0x2a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x1c], eax
mov edx, dword [esi]
mov edx, dword [edx + 0xec]
lea eax, [esp + 0x14]
push eax
mov ecx, esi
call edx
mov al, bl
jmp 0x438223
test edi, edi
je 0x438221
mov eax, dword [ebx + 4]
mov ecx, dword [esi]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push edi
add ebp, 0x2000
push ebp
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [esp + 0x44]
mov dword [edx], eax
mov al, 1
jmp 0x438223
test edi, edi
je 0x438221
mov eax, dword [ebx + 0x14]
push ebx
push edi
add ebp, 0x2000
push ebp
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0x44]
mov dword [ecx], eax
mov al, 1
jmp 0x438223
test ebx, ebx
je 0x4377c7
mov edx, dword [ebx]
push ebx
push edi
add ebp, 0x2000
push ebp
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0x44]
mov dword [ecx], eax
mov al, 1
jmp 0x438223
test ebx, ebx
je 0x438221
push ebx
push edi
push 0x2111
push ebx
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [esp + 0x44]
mov dword [edx], eax
mov al, 1
jmp 0x438223
cmp ebp, 0x200
ja 0x437a8d
je 0x4378d5
cmp ebp, 0x113
jne case.default.0x437aae
lea ecx, [esi + 0x138]
xor ebp, ebp
call fcn.004484d0
test eax, eax
jle 0x438221
jmp 0x437850
push ebp
lea ecx, [esi + 0x138]
call fcn.00431f30
mov ebx, eax
mov eax, dword [ebx + 8]
cmp eax, dword [esi]
jne 0x437873
movzx ecx, di
cmp dword [ebx + 0xc], ecx
jne 0x437873
cmp byte [ebx + 0x10], 0
je 0x437888
lea ecx, [esi + 0x138]
inc ebp
call fcn.004484d0
cmp ebp, eax
jl 0x437850
jmp 0x438221
mov edx, dword [ebx + 4]
xor eax, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x14], 0x1b
mov dword [esp + 0x2c], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx]
mov dword [esp + 0x1c], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0xec]
lea edx, [esp + 0x14]
push edx
call eax
jmp 0x438221
cmp byte [esi + 0x128], 0
jne 0x437939
mov ecx, dword [esi]
xor eax, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov eax, dword [esi + 0x10]
mov dword [esp + 0x14], 0x10
mov dword [esp + 0x18], 3
mov dword [esp + 0x1c], ecx
test eax, eax
jne 0x437913
mov dword [esp + 0x20], 0x3e8
jmp 0x437927
push 0
push 3
push 0x415
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esp + 0x20], eax
lea edx, [esp + 0x14]
push edx
call dword [sym.imp.COMCTL32.dll__TrackMouseEvent]
mov byte [esi + 0x128], 1
mov ecx, dword [esi + 0xcc]
movsx ebp, bx
shr ebx, 0x10
movsx ebx, bx
push 0xd
lea edx, [esp + 0x38]
mov dword [esi + 0xe0], ebp
mov dword [esi + 0xe4], ebx
mov dword [esp + 0x38], ebp
mov dword [esp + 0x3c], ebx
mov eax, dword [ecx]
mov eax, dword [eax + 0xe8]
push edx
push 0x434760
call eax
mov edi, eax
test edi, edi
je 0x437989
mov edx, dword [edi]
mov eax, dword [edx + 0x1c]
mov ecx, edi
call eax
cmp eax, esi
jne 0x438221
xor eax, eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x54], ebp
mov dword [esp + 0x58], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0xd4]
xor ebx, ebx
mov dword [esp + 0x50], eax
cmp edi, ecx
je 0x437a06
cmp ecx, ebx
je 0x437a06
mov dword [esp + 0x48], 9
mov dword [esp + 0x4c], edi
mov edx, dword [ecx]
mov edx, dword [edx + 0xec]
lea eax, [esp + 0x48]
push eax
call edx
mov eax, dword [esi + 0x10]
mov dword [esi + 0xd4], ebx
cmp eax, ebx
je 0x437a06
lea ecx, [esi + 0x14]
push ecx
push ebx
push 0x411
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [esi + 0xd4]
cmp edi, eax
je 0x437a37
cmp edi, ebx
je 0x437a37
mov dword [esp + 0x4c], eax
mov dword [esp + 0x48], 0xa
mov edx, dword [edi]
mov edx, dword [edx + 0xec]
lea eax, [esp + 0x48]
push eax
mov ecx, edi
call edx
mov dword [esi + 0xd4], edi
mov esi, dword [esi + 0xd8]
cmp esi, ebx
je 0x437a63
mov dword [esp + 0x48], 8
mov dword [esp + 0x4c], ebx
mov eax, dword [esi]
mov edx, dword [eax + 0xec]
lea ecx, [esp + 0x48]
push ecx
mov ecx, esi
call edx
jmp 0x438221
cmp edi, ebx
je 0x438221
mov dword [esp + 0x48], 8
mov dword [esp + 0x4c], ebx
mov eax, dword [edi]
mov edx, dword [eax + 0xec]
lea ecx, [esp + 0x48]
push ecx
mov ecx, edi
call edx
jmp 0x438221
cmp ebp, 0x2a1
ja 0x438021
je 0x437e71
lea eax, [ebp - 0x201]
cmp eax, 5
ja case.default.0x437aae
jmp dword [eax*4 + 0x438384]
mov eax, dword [esi]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, ebx
shr ecx, 0x10
movsx ecx, cx
movsx eax, bx
push ecx
mov dword [esp + 0x3c], ecx
mov dword [esi + 0xe4], ecx
push eax
mov ecx, esi
mov dword [esp + 0x3c], eax
mov dword [esi + 0xe0], eax
call fcn.00435940
mov ebp, eax
test ebp, ebp
je 0x438221
mov edx, dword [ebp]
mov eax, dword [edx + 0x1c]
mov ecx, ebp
call eax
cmp eax, esi
jne 0x438221
mov dword [esi + 0xd8], ebp
mov edx, dword [ebp]
mov eax, dword [edx + 0xdc]
mov ecx, ebp
call eax
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
xor eax, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], 0xc
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], edx
mov word [esp + 0x2a], di
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp]
mov edx, dword [eax + 0xec]
lea ecx, [esp + 0x14]
push ecx
mov ecx, ebp
call edx
mov eax, dword [esi]
push eax
call dword [sym.imp.USER32.dll_SetCapture]
mov byte [esi + 0x129], 1
jmp 0x438221
mov ecx, dword [esi]
push ecx
call dword [sym.imp.USER32.dll_SetFocus]
mov edx, ebx
shr edx, 0x10
movsx ecx, dx
movsx eax, bx
push ecx
mov dword [esp + 0x3c], ecx
mov dword [esi + 0xe4], ecx
push eax
mov ecx, esi
mov dword [esp + 0x3c], eax
mov dword [esi + 0xe0], eax
call fcn.00435940
mov ebp, eax
test ebp, ebp
je 0x438221
mov eax, dword [ebp]
mov edx, dword [eax + 0x1c]
mov ecx, ebp
call edx
cmp eax, esi
jne 0x438221
mov dword [esi + 0xd8], ebp
mov eax, dword [ebp]
mov edx, dword [eax + 0xdc]
mov ecx, ebp
call edx
mov ecx, dword [esp + 0x38]
xor eax, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x14], 0xf
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
mov word [esp + 0x2a], di
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x1c], eax
mov edx, dword [ebp]
mov edx, dword [edx + 0xec]
lea eax, [esp + 0x14]
push eax
jmp 0x437b70
mov ecx, ebx
shr ecx, 0x10
cmp dword [esi + 0xd8], 0
movsx eax, cx
movsx ebp, bx
mov dword [esp + 0x38], eax
mov dword [esi + 0xe0], ebp
mov dword [esi + 0xe4], eax
je 0x438221
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov edx, dword [esp + 0x38]
xor eax, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov byte [esi + 0x129], 0
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], 0xd
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], edx
mov word [esp + 0x2a], di
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0xd8]
mov dword [esp + 0x1c], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0xec]
lea edx, [esp + 0x14]
push edx
call eax
mov dword [esi + 0xd8], 0
jmp 0x438221
mov ecx, ebx
shr ecx, 0x10
cmp dword [esi + 0xd8], 0
movsx eax, cx
movsx ebp, bx
mov dword [esp + 0x38], eax
mov dword [esi + 0xe0], ebp
mov dword [esi + 0xe4], eax
je 0x438221
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov edx, dword [esp + 0x38]
xor eax, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov byte [esi + 0x129], 0
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], 0x10
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], edx
mov word [esp + 0x2a], di
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0xd8]
mov dword [esp + 0x1c], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0xec]
lea edx, [esp + 0x14]
push edx
call eax
mov dword [esi + 0xd8], 0
jmp 0x438221
movsx ebp, bx
shr ebx, 0x10
movsx eax, bx
push eax
push ebp
mov ecx, esi
mov dword [esp + 0x40], eax
mov dword [esi + 0xe0], ebp
mov dword [esi + 0xe4], eax
call fcn.00435940
mov ebx, eax
test ebx, ebx
je 0x438221
mov edx, dword [ebx]
mov eax, dword [edx + 0x1c]
mov ecx, ebx
call eax
cmp eax, esi
jne 0x438221
mov dword [esp + 0x14], 0xe
mov ecx, dword [esp + 0x38]
xor eax, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ecx
mov word [esp + 0x2a], di
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x1c], eax
mov edx, dword [ebx]
mov edx, dword [edx + 0xec]
lea eax, [esp + 0x14]
push eax
mov ecx, ebx
call edx
mov dword [esi + 0xd8], ebx
jmp 0x437b74
movsx ebp, bx
shr ebx, 0x10
movsx eax, bx
push eax
push ebp
mov ecx, esi
mov dword [esp + 0x40], eax
mov dword [esi + 0xe0], ebp
mov dword [esi + 0xe4], eax
call fcn.00435940
mov ebx, eax
test ebx, ebx
je 0x438221
mov edx, dword [ebx]
mov eax, dword [edx + 0x1c]
mov ecx, ebx
call eax
cmp eax, esi
jne 0x438221
mov dword [esp + 0x14], 0x11
jmp 0x437dd2
mov ecx, dword [esi + 0xcc]
movsx edi, bx
shr ebx, 0x10
movsx ebp, bx
push 0xd
lea eax, [esp + 0x38]
mov byte [esi + 0x128], 0
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], ebp
mov edx, dword [ecx]
mov edx, dword [edx + 0xe8]
push eax
push 0x434760
call edx
mov ebx, eax
test ebx, ebx
je 0x438221
cmp dword [esi + 0xd4], 0
je 0x437f09
xor eax, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], ebp
mov dword [esp + 0x14], 0xb
mov dword [esp + 0x18], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0xd4]
mov dword [esp + 0x1c], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0xec]
lea edx, [esp + 0x14]
push edx
call eax
mov edx, dword [ebx]
mov edx, dword [edx + 0x98]
lea eax, [esp + 0xc8]
push eax
mov ecx, ebx
call edx
lea ecx, [esp + 0xc8]
mov dword [esp + 0x158], 0
call fcn.00432250
test al, al
jne 0x438003
push 0x30
lea edi, [esi + 0x14]
push 0
push edi
call fcn.0045cac0
mov eax, dword [esi]
mov dword [edi], 0x2c
mov dword [esi + 0x18], 1
mov dword [esi + 0x1c], eax
mov dword [esi + 0x20], eax
mov eax, dword [0x489274]
add esp, 0xc
lea ecx, [esp + 0xc8]
mov dword [esi + 0x34], eax
call fcn.00432050
mov dword [esi + 0x38], eax
mov edx, dword [ebx]
mov eax, dword [edx + 0x30]
mov ecx, ebx
call eax
cmp dword [esi + 0x10], 0
mov ecx, dword [eax]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esi + 0x24], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x28], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x2c], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x30], edx
jne 0x437fe7
mov eax, dword [0x489274]
mov ecx, dword [esi]
push 0
push eax
push 0
push ecx
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push reloc.WS2_32.dll_closesocket
push 0
push 0x47c780
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
push edi
push 0
push 0x432
push eax
mov dword [esi + 0x10], eax
call ebx
mov edx, dword [esi + 0x10]
push edi
push 0
push 0x436
push edx
call ebx
mov eax, dword [esi + 0x10]
push edi
push 1
push 0x411
push eax
call ebx
lea ecx, [esp + 0xc8]
mov dword [esp + 0x158], 0xffffffff
call fcn.00432010
mov al, 1
jmp 0x438223
mov eax, ebp
sub eax, 0x2a3
je 0x4381e8
sub eax, 0x75
je 0x43812e
sub eax, 0x7ce9
je 0x4380e8
cmp ebp, 0x20a
jne 0x438221
cmp dword [esi + 0xd0], 0
je 0x438221
xor eax, eax
xor ecx, ecx
shr edi, 0x10
test di, di
setl cl
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x68], 0x13
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0xd0]
mov dword [esp + 0x70], eax
mov edx, dword [ecx]
mov edx, dword [edx + 0xec]
lea eax, [esp + 0x68]
push eax
call edx
movzx eax, word [esi + 0xe4]
movzx ecx, word [esi + 0xe0]
mov edx, dword [esi]
shl eax, 0x10
or eax, ecx
push eax
push 0
push 0x200
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x438221
add esi, 0x15c
mov ecx, esi
xor edi, edi
call fcn.004484d0
test eax, eax
jle 0x438122
jmp 0x438100
push edi
mov ecx, esi
call fcn.00431f30
test eax, eax
je 0x438116
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
push 1
call eax
mov ecx, esi
inc edi
call fcn.004484d0
cmp edi, eax
jl 0x438100
mov ecx, esi
call fcn.00431d90
jmp 0x438221
mov edx, dword [esi]
lea ecx, [esp + 0x48]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
push edi
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [esi + 0xcc]
mov dword [esp + 0x34], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0xf8]
lea edx, [esp + 0x48]
push edx
push edi
call eax
test bl, 0x10
je 0x4381da
mov ecx, dword [esi]
push 5
push ecx
call dword [sym.imp.USER32.dll_GetWindow]
mov ebp, eax
test ebp, ebp
je 0x4381da
or ebx, 2
xor eax, eax
lea edx, [esp + 0x14]
push edx
push ebp
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [esi]
push 2
lea eax, [esp + 0x18]
push eax
push ecx
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
push 0
neg edx
push edx
neg eax
push eax
push edi
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
push ebx
push edi
push 0x317
push ebp
call dword [sym.imp.USER32.dll_SendMessageW]
push 2
push ebp
call dword [sym.imp.USER32.dll_GetWindow]
mov ebp, eax
test ebp, ebp
jne 0x438176
mov ecx, dword [esp + 0x34]
push ecx
push edi
call dword [sym.imp.GDI32.dll_RestoreDC]
jmp 0x438221
mov eax, dword [esi + 0x10]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x438203
lea edx, [esi + 0x14]
push edx
push 0
push 0x411
push eax
call edi
cmp byte [esi + 0x128], 0
je 0x43821a
mov eax, dword [esi]
push 0xffffffffffffffff
push 0
push 0x200
push eax
call edi
mov byte [esi + 0x128], 0
xor al, al
mov ecx, dword [esp + 0x150]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x138]
xor ecx, esp
call fcn.004599ea
add esp, 0x148
ret 0x10