Function at 0x4356d6
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0x1bc
mov eax, 0x49fb8a
call fcn.00465a29
mov ebx, ecx
mov dword [ebp - 0x1a0], ebx
cmp dword [ebx], 0
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1b4], edi
mov dword [ebp - 0x1ac], eax
je 0x436e57
lea ecx, [ebx + 0x108]
push 0
mov dword [ebp - 0x1bc], ecx
call fcn.0043a4bc
mov esi, eax
test esi, esi
je 0x4357a4
lea eax, [ebx + 0xc0]
mov ebx, eax
push 0
call fcn.0043a458
mov eax, dword [esi + 0x108]
test eax, eax
je 0x435755
lea ecx, [eax + 0x34]
call fcn.00444afa
test al, al
je 0x435755
push esi
call fcn.00444b55
mov ecx, ebx
xor edi, edi
call fcn.00439635
test eax, eax
jle 0x43577d
push edi
mov ecx, ebx
call fcn.0043a4d8
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
mov ecx, ebx
inc edi
call fcn.00439635
cmp edi, eax
jl 0x435762
push ecx
mov ecx, esi
call fcn.00435134
mov ecx, dword [ebp - 0x1bc]
push 0
call fcn.0043a4bc
mov esi, eax
test esi, esi
jne 0x435732
mov ebx, dword [ebp - 0x1a0]
mov edi, dword [ebp - 0x1b4]
xor edx, edx
lea ecx, [ebx + 0xe4]
mov dword [ebp - 0x198], edx
call fcn.00439635
mov esi, dword [ebp + 8]
test eax, eax
jle 0x435815
mov edi, dword [ebp - 0x1a4]
push edx
mov byte [ebp - 0x1ad], 0
call fcn.0043a4d8
lea ecx, [ebp - 0x1ad]
push ecx
push edi
push dword [ebp - 0x1b4]
mov edx, dword [eax]
mov ecx, eax
push esi
call dword [edx]
cmp byte [ebp - 0x1ad], 0
jne 0x4358a0
mov edx, dword [ebp - 0x198]
lea ecx, [ebx + 0xe4]
inc edx
mov dword [ebp - 0x198], edx
call fcn.00439635
cmp edx, eax
jl 0x4357c4
mov edi, dword [ebp - 0x1b4]
mov eax, 0x113
cmp esi, eax
ja 0x436617
je 0x436598
cmp esi, 0x4e
ja 0x4363d4
je 0x4363b2
sub esi, 5
je 0x43636a
sub esi, 0xa
je 0x435a59
sub esi, 1
je 0x4359d5
sub esi, 4
je 0x4359c5
sub esi, 0xc
je 0x4358af
sub esi, 4
jne 0x436dd8
mov ecx, dword [ebx + 0x6c]
mov eax, dword [ebp - 0x1a4]
test ecx, ecx
jle 0x435879
mov dword [eax + 0x18], ecx
mov ecx, dword [ebx + 0x70]
test ecx, ecx
jle 0x435883
mov dword [eax + 0x1c], ecx
mov ecx, dword [ebx + 0x74]
test ecx, ecx
jle 0x43588d
mov dword [eax + 0x20], ecx
mov ecx, dword [ebx + 0x78]
test ecx, ecx
jle 0x436dd8
mov dword [eax + 0x24], ecx
jmp 0x436dd8
mov ecx, dword [ebp - 0x1ac]
mov dword [ecx], eax
mov al, 1
jmp 0x436e59
mov eax, dword [ebp - 0x1a4]
cmp ax, 2
jne 0x4358de
cmp byte [ebx + 0xb8], 0
je 0x436dd8
push 0x7f86
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
jmp 0x4358a8
xor ecx, ecx
inc ecx
cmp ax, cx
jne 0x436dd8
cmp byte [ebx + 0xb6], 0
je 0x4358fa
mov al, cl
jmp 0x436e59
and dword [ebp - 0x1c8], 0
lea eax, [ebp - 0x1c8]
and dword [ebp - 0x1c4], 0
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x1c8]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_ScreenToClient]
push dword [ebp - 0x1c4]
mov ecx, ebx
push dword [ebp - 0x1c8]
call fcn.00438113
mov esi, eax
test esi, esi
je 0x436dd8
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x14]
test al, 2
je 0x436dd8
xor eax, eax
lea edi, [ebp - 0x130]
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1b4]
mov edi, dword [ebp - 0x1a4]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x134], 0x17
mov dword [ebp - 0x118], edi
mov dword [ebp - 0x124], eax
call fcn.00434c2d
mov word [ebp - 0x11e], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x12c], eax
lea ecx, [ebp - 0x134]
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x108]
jmp 0x4358a8
mov ecx, dword [ebp - 0x1ac]
xor eax, eax
inc eax
mov dword [ecx], eax
jmp 0x436e59
and dword [ebp - 0x30], 0
lea edi, [ebp - 0x2c]
push 7
xor eax, eax
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x64]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0x68]
mov dword [ebp - 0x20], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x58]
mov dword [ebp - 0x28], eax
test ecx, ecx
je 0x435a15
mov dword [ebp - 0x30], 0xa
lea edx, [ebp - 0x30]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x108]
mov ecx, dword [ebx + 0x5c]
test ecx, ecx
je 0x435a32
mov dword [ebp - 0x30], 0xe
lea edx, [ebp - 0x30]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x108]
push 0
mov ecx, ebx
call fcn.0043715b
push 4
push dword [ebx]
call dword [sym.imp.USER32.dll_GetWindow]
test eax, eax
je 0x436dd8
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x436dd8
cmp byte [ebx + 0xb8], 0
xorps xmm0, xmm0
push 0
je 0x435fbe
lea eax, [ebp - 0x50]
push eax
push dword [ebx]
movups xmmword [ebp - 0x50], xmm0
call dword [sym.imp.USER32.dll_GetUpdateRect]
test eax, eax
je 0x4358a8
xor eax, eax
cmp dword [ebx + 0x50], eax
jne 0x435abf
push 0x40
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.0047e1d0
add esp, 0xc
lea eax, [ebp - 0x154]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_BeginPaint]
lea eax, [ebp - 0x154]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x4358a8
cmp byte [ebx + 0xb4], al
je 0x435cf0
push 0xffffffffffffffec
push dword [ebx]
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, 0x80000
test ecx, eax
jne 0x435aeb
xor eax, ecx
push eax
push 0xffffffffffffffec
push dword [ebx]
call dword [sym.imp.USER32.dll_SetWindowLongW]
lea eax, [ebp - 0x40]
xorps xmm0, xmm0
push eax
push dword [ebx]
movups xmmword [ebp - 0x40], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
push 0x40
lea eax, [ebp - 0x194]
push 0
push eax
call fcn.0047e1d0
add esp, 0xc
lea eax, [ebp - 0x194]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_BeginPaint]
cmp dword [ebx + 0x10], 0
mov edi, dword [sym.imp.GDI32.dll_DeleteDC]
je 0x435b31
push dword [ebx + 0x10]
call edi
cmp dword [ebx + 0x18], 0
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
je 0x435b42
push dword [ebx + 0x18]
call esi
xor eax, eax
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x18], eax
cmp byte [ebx + 0xb1], al
je 0x435bf0
mov byte [ebx + 0xb1], al
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x435bf0
mov ecx, dword [ebx + 0x50]
call fcn.0044137a
test al, al
je 0x435bd2
cmp dword [ebx + 0x10], 0
je 0x435b85
push dword [ebx + 0x10]
call edi
cmp dword [ebx + 0x18], 0
je 0x435b90
push dword [ebx + 0x18]
call esi
mov ecx, dword [ebx + 0x50]
lea esi, [ebp - 0x40]
and dword [ebx + 0x10], 0
sub esp, 0x10
and dword [ebx + 0x18], 0
mov edi, esp
mov eax, dword [ecx]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x34]
jmp 0x435bf0
mov ebx, dword [eax]
mov ecx, eax
call dword [ebx + 0x30]
mov ecx, dword [ebp - 0x198]
sub esp, 0x10
mov esi, eax
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ebx + 0x34]
mov ebx, dword [ebp - 0x1a0]
mov ecx, dword [ebx + 0x50]
mov eax, dword [ecx]
push SysReAllocString
push 0
push 0x43827c
call dword [eax + 0xfc]
mov dword [ebp - 0x198], eax
test eax, eax
jne 0x435bae
cmp byte [ebx + 0xb2], 0
je 0x435c02
push 1
mov ecx, ebx
call fcn.00437569
cmp byte [ebx + 0xb3], 0
je 0x435c37
cmp dword [ebx + 0x18], 0
jne 0x435c37
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebx + 0x10], eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x40]
push eax
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebx + 0x18], eax
push dword [ebx + 0x18]
push dword [ebx + 0x10]
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebx + 0x50]
lea edx, [ebp - 0x40]
push edx
push dword [ebx + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x118]
lea eax, [ebp - 0x20]
xorps xmm0, xmm0
push eax
push dword [ebx]
movups xmmword [ebp - 0x20], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1b4], eax
mov al, byte [ebx + 0xbc]
push 2
mov byte [ebp - 0x1aa], al
lea eax, [ebp - 0x1ac]
push eax
push ecx
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], ecx
push eax
push dword [ebx + 0x10]
lea eax, [ebp - 0x1b8]
mov dword [ebp - 0x1bc], ecx
push eax
lea eax, [ebp - 0x1a8]
mov word [ebp - 0x1ac], cx
push eax
push ecx
push dword [ebx]
mov byte [ebp - 0x1a9], 1
call dword [sym.imp.USER32.dll_UpdateLayeredWindow]
lea eax, [ebp - 0x194]
jmp 0x435ab1
cmp byte [ebx + 0xb1], al
je 0x435dae
mov byte [ebx + 0xb1], al
xorps xmm0, xmm0
lea eax, [ebp - 0x20]
push eax
push dword [ebx]
movups xmmword [ebp - 0x20], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x435dae
mov ecx, dword [ebx + 0x50]
call fcn.0044137a
test al, al
mov eax, dword [ecx]
je 0x435d92
sub esp, 0x10
lea esi, [ebp - 0x20]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x34]
cmp dword [ebx + 0xc], 0
je 0x435d53
push dword [ebx + 0xc]
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp dword [ebx + 0x14], 0
je 0x435d62
push dword [ebx + 0x14]
call dword [sym.imp.GDI32.dll_DeleteObject]
xor eax, eax
mov dword [ebx + 0xc], eax
mov dword [ebx + 0x14], eax
jmp 0x435dae
mov ebx, dword [eax]
mov ecx, eax
call dword [ebx + 0x30]
mov ecx, dword [ebp - 0x198]
sub esp, 0x10
mov esi, eax
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ebx + 0x34]
mov ebx, dword [ebp - 0x1a0]
mov ecx, dword [ebx + 0x50]
mov eax, dword [ecx]
push SysReAllocString
push 0
push 0x43827c
call dword [eax + 0xfc]
mov dword [ebp - 0x198], eax
test eax, eax
jne 0x435d6c
cmp byte [ebx + 0xb2], 0
je 0x435dc0
push 1
mov ecx, ebx
call fcn.00437569
cmp byte [ebx + 0xb3], 0
je 0x435e08
cmp dword [ebx + 0x14], 0
jne 0x435e08
lea eax, [ebp - 0x40]
xorps xmm0, xmm0
push eax
push dword [ebx]
movups xmmword [ebp - 0x40], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x40]
push eax
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebx + 0x14], eax
push 0x40
lea eax, [ebp - 0x114]
push 0
push eax
call fcn.0047e1d0
add esp, 0xc
lea eax, [ebp - 0x114]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_BeginPaint]
cmp byte [ebx + 0xb3], 0
je 0x435f5e
push dword [ebx + 0x14]
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebx + 0xc]
call edi
push dword [ebx + 0xc]
mov dword [ebp - 0x198], eax
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x50]
mov dword [ebp - 0x1bc], eax
lea eax, [ebp - 0x10c]
push eax
push dword [ebx + 0xc]
mov edx, dword [ecx]
call dword [edx + 0x118]
lea ecx, [ebx + 0xf0]
xor esi, esi
call fcn.00439635
test eax, eax
jle 0x435eb4
lea edi, [ebx + 0xf0]
push esi
mov ecx, edi
call fcn.0043a4d8
lea ecx, [ebp - 0x10c]
push ecx
push dword [ebx + 0xc]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x130]
mov ecx, edi
inc esi
call fcn.00439635
cmp esi, eax
jl 0x435e86
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp - 0x1bc]
push dword [ebx + 0xc]
call dword [sym.imp.GDI32.dll_RestoreDC]
mov eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0x108]
push 0xcc0020
push dword [ebp - 0x108]
push dword [ebp - 0x10c]
push dword [ebx + 0xc]
push eax
mov eax, dword [ebp - 0x104]
sub eax, dword [ebp - 0x10c]
push eax
push dword [ebp - 0x108]
push dword [ebp - 0x10c]
push dword [ebp - 0x114]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x198]
push dword [ebx + 0xc]
call edi
cmp byte [ebx + 0x4c], 0
je 0x435f91
push dword [0x4d1c74]
push dword [ebp - 0x114]
call edi
push 5
mov esi, eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebp - 0x114]
call edi
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x114]
call dword [sym.imp.GDI32.dll_Rectangle]
push esi
push dword [ebp - 0x114]
call edi
jmp 0x435f91
push dword [ebp - 0x114]
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x50]
mov esi, eax
lea eax, [ebp - 0x10c]
push eax
push dword [ebp - 0x114]
mov edx, dword [ecx]
call dword [edx + 0x118]
push esi
push dword [ebp - 0x114]
call dword [sym.imp.GDI32.dll_RestoreDC]
lea eax, [ebp - 0x114]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_EndPaint]
cmp byte [ebx + 0xb1], 0
je 0x4358a8
push 0
push 0
push dword [ebx]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x4358a8
lea eax, [ebp - 0x40]
push eax
push dword [ebx]
movups xmmword [ebp - 0x40], xmm0
call dword [sym.imp.USER32.dll_GetUpdateRect]
test eax, eax
je 0x4358a8
xor eax, eax
cmp dword [ebx + 0x50], eax
jne 0x436003
push 0x40
push eax
lea eax, [ebp - 0x194]
push eax
call fcn.0047e1d0
add esp, 0xc
lea eax, [ebp - 0x194]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_BeginPaint]
jmp 0x435ce5
cmp byte [ebx + 0xb1], al
je 0x4360e1
mov byte [ebx + 0xb1], al
xorps xmm0, xmm0
lea eax, [ebp - 0x20]
push eax
push dword [ebx]
movups xmmword [ebp - 0x20], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x4360e1
mov ecx, dword [ebx + 0x50]
call fcn.0044137a
test al, al
mov eax, dword [ecx]
je 0x4360c5
sub esp, 0x10
lea esi, [ebp - 0x20]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x34]
cmp dword [ebx + 0xc], 0
mov esi, dword [sym.imp.GDI32.dll_DeleteDC]
je 0x436068
push dword [ebx + 0xc]
call esi
cmp dword [ebx + 0x10], 0
je 0x436073
push dword [ebx + 0x10]
call esi
cmp dword [ebx + 0x14], 0
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
je 0x436084
push dword [ebx + 0x14]
call esi
cmp dword [ebx + 0x18], 0
je 0x43608f
push dword [ebx + 0x18]
call esi
xor eax, eax
mov dword [ebx + 0xc], eax
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x18], eax
jmp 0x4360e1
mov ebx, dword [eax]
mov ecx, eax
call dword [ebx + 0x30]
mov ecx, dword [ebp - 0x198]
sub esp, 0x10
mov esi, eax
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ebx + 0x34]
mov ebx, dword [ebp - 0x1a0]
mov ecx, dword [ebx + 0x50]
mov eax, dword [ecx]
push SysReAllocString
push 0
push 0x43827c
call dword [eax + 0xfc]
mov dword [ebp - 0x198], eax
test eax, eax
jne 0x43609f
cmp byte [ebx + 0xb2], 0
je 0x4360f3
push 1
mov ecx, ebx
call fcn.00437569
cmp byte [ebx + 0xb3], 0
je 0x43613b
cmp dword [ebx + 0x14], 0
jne 0x43613b
lea eax, [ebp - 0x50]
xorps xmm0, xmm0
push eax
push dword [ebx]
movups xmmword [ebp - 0x50], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x50]
push eax
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebx + 0x14], eax
push 0x40
lea eax, [ebp - 0x114]
push 0
push eax
call fcn.0047e1d0
add esp, 0xc
lea eax, [ebp - 0x114]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_BeginPaint]
cmp byte [ebx + 0xb3], 0
je 0x435f5e
push dword [ebx + 0x14]
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebx + 0xc]
call edi
push dword [ebx + 0xc]
mov dword [ebp - 0x198], eax
call dword [sym.imp.GDI32.dll_SaveDC]
cmp byte [ebx + 0xb4], 0
mov esi, dword [sym.imp.GDI32.dll_BitBlt]
mov dword [ebp - 0x1bc], eax
je 0x436274
cmp dword [ebx + 0x18], 0
jne 0x43622d
lea eax, [ebp - 0x50]
xorps xmm0, xmm0
push eax
push dword [ebx]
movups xmmword [ebp - 0x50], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebx + 0x10], eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x50]
push eax
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
push dword [ebx + 0x10]
mov dword [ebx + 0x18], eax
call edi
mov eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0x108]
push 0xcc0020
push dword [ebp - 0x108]
push dword [ebp - 0x10c]
push dword [ebp - 0x114]
push eax
mov eax, dword [ebp - 0x104]
sub eax, dword [ebp - 0x10c]
push eax
push dword [ebp - 0x108]
push dword [ebp - 0x10c]
push dword [ebx + 0x10]
call esi
jmp 0x436235
push dword [ebx + 0x18]
push dword [ebx + 0x10]
call edi
mov eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0x108]
push 0xcc0020
push dword [ebp - 0x108]
push dword [ebp - 0x10c]
push dword [ebx + 0x10]
push eax
mov eax, dword [ebp - 0x104]
sub eax, dword [ebp - 0x10c]
push eax
push dword [ebp - 0x108]
push dword [ebp - 0x10c]
push dword [ebx + 0xc]
call esi
mov ecx, dword [ebx + 0x50]
lea edx, [ebp - 0x10c]
push edx
push dword [ebx + 0xc]
mov eax, dword [ecx]
call dword [eax + 0x118]
lea ecx, [ebx + 0xf0]
xor esi, esi
call fcn.00439635
test eax, eax
jle 0x4362ce
lea edi, [ebx + 0xf0]
push esi
mov ecx, edi
call fcn.0043a4d8
lea ecx, [ebp - 0x10c]
push ecx
push dword [ebx + 0xc]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x130]
mov ecx, edi
inc esi
call fcn.00439635
cmp esi, eax
jl 0x4362a0
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp - 0x1bc]
push dword [ebx + 0xc]
call dword [sym.imp.GDI32.dll_RestoreDC]
mov eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0x108]
push 0xcc0020
push dword [ebp - 0x108]
push dword [ebp - 0x10c]
push dword [ebx + 0xc]
push eax
mov eax, dword [ebp - 0x104]
sub eax, dword [ebp - 0x10c]
push eax
push dword [ebp - 0x108]
push dword [ebp - 0x10c]
push dword [ebp - 0x114]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x198]
push dword [ebx + 0xc]
call edi
cmp byte [ebx + 0x4c], 0
je 0x435f91
push dword [0x4d1c74]
push dword [ebp - 0x114]
call edi
push 5
mov esi, eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebp - 0x114]
call edi
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
jmp 0x435f47
mov edx, dword [ebx + 0x54]
test edx, edx
je 0x43639d
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x30], 0x16
mov dword [ebp - 0x2c], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x54]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov ecx, dword [ebx + 0x50]
test ecx, ecx
je 0x4358a8
call fcn.00441381
jmp 0x4358a8
mov eax, dword [ebp - 0x1a4]
test eax, eax
je 0x4358a8
push eax
push edi
push 0x204e
push dword [eax]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4358a0
sub esi, 0x7b
je 0x436514
sub esi, 0x85
je 0x4364b7
sub esi, 1
je 0x43645c
sub esi, 1
je 0x436414
sub esi, 0xf
jne 0x436dd8
mov eax, dword [ebp - 0x1a4]
test eax, eax
je 0x436dd8
push eax
push edi
push 0x2111
push eax
jmp 0x4363c9
cmp dword [ebx + 0x54], 0
je 0x436dd8
xor eax, eax
lea edi, [ebp - 0x2c]
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1b4]
mov word [ebp - 0x1c], ax
mov eax, dword [ebx + 0x64]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0x68]
mov dword [ebp - 0x30], 5
mov dword [ebp - 0x20], eax
call fcn.00434c2d
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x54]
jmp 0x436603
cmp dword [ebx + 0x60], 0
je 0x436dd8
xor eax, eax
lea edi, [ebp - 0x2c]
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1b4]
mov word [ebp - 0x1c], ax
mov eax, dword [ebx + 0x64]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0x68]
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x20], eax
call fcn.00434c2d
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x60]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
and dword [ebx + 0x60], 0
jmp 0x436dd8
cmp dword [ebx + 0x54], 0
je 0x436dd8
xor eax, eax
lea edi, [ebp - 0x2c]
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1b4]
mov word [ebp - 0x1c], ax
mov eax, dword [ebx + 0x64]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0x68]
mov dword [ebp - 0x30], 3
mov dword [ebp - 0x20], eax
call fcn.00434c2d
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x54]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov eax, dword [ebx + 0x54]
mov dword [ebx + 0x60], eax
jmp 0x436dd8
mov ecx, dword [ebp - 0x1a4]
movsx eax, cx
mov dword [ebp - 0x19c], eax
shr ecx, 0x10
movsx eax, cx
mov dword [ebp - 0x198], eax
lea eax, [ebp - 0x19c]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [ebx + 0x5c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebx + 0x64], eax
mov eax, dword [ebp - 0x198]
mov dword [ebx + 0x68], eax
je 0x436dd8
mov ecx, ebx
call fcn.00437550
xor eax, eax
lea edi, [ebp - 0x2c]
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x19c]
mov ecx, dword [ebx + 0x5c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x30], 0x11
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], ecx
jmp 0x436764
lea ecx, [ebx + 0xcc]
xor edx, edx
call fcn.00439635
test eax, eax
jle 0x436dd8
push edx
call fcn.0043a4d8
mov esi, eax
mov eax, dword [ebx]
cmp dword [esi + 8], eax
jne 0x4365ca
movzx ecx, di
cmp dword [esi + 0xc], ecx
jne 0x4365ca
cmp byte [esi + 0x10], 0
je 0x4365df
lea ecx, [ebx + 0xcc]
inc edx
call fcn.00439635
cmp edx, eax
jl 0x4365ad
jmp 0x436dd8
push 7
xor eax, eax
lea edi, [ebp - 0x2c]
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [esi]
mov dword [ebp - 0x2c], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x30], 0x18
mov dword [ebp - 0x18], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi]
mov dword [ebp - 0x28], eax
mov eax, dword [ecx]
lea edx, [ebp - 0x30]
push edx
call dword [eax + 0x108]
jmp 0x436dd8
mov eax, 0x204
cmp esi, eax
ja 0x436a36
je 0x4369a2
mov eax, esi
sub eax, 0x133
je 0x436985
sub eax, 5
je 0x436985
sub eax, 0xc8
je 0x436830
sub eax, 1
je 0x436789
sub eax, 1
je 0x436705
sub eax, 1
jne 0x436dd8
push dword [ebx]
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebp - 0x1a4]
movsx ecx, ax
shr eax, 0x10
cwde
push eax
mov dword [ebp - 0x198], ecx
mov dword [ebx + 0x64], ecx
push ecx
mov ecx, ebx
mov dword [ebp - 0x1a0], eax
mov dword [ebx + 0x68], eax
call fcn.00438113
mov esi, eax
test esi, esi
je 0x436dd8
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x436dd8
mov ecx, ebx
call fcn.0043753c
xor eax, eax
lea edi, [ebp - 0x2c]
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x30], 0x10
mov dword [ebp - 0x2c], esi
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x30]
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x108]
mov dword [ebx + 0x5c], esi
jmp 0x436dd8
mov eax, dword [ebp - 0x1a4]
movsx esi, ax
shr eax, 0x10
cmp dword [ebx + 0x5c], 0
cwde
mov dword [ebp - 0x198], eax
mov dword [ebx + 0x64], esi
mov dword [ebx + 0x68], eax
je 0x436dd8
mov ecx, ebx
call fcn.00437550
push 7
xor eax, eax
lea edi, [ebp - 0x2c]
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x5c]
mov edi, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x198]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x30], 0xe
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], ecx
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x5c]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
and dword [ebx + 0x5c], 0
jmp 0x436dd8
push dword [ebx]
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebp - 0x1a4]
movsx ecx, ax
shr eax, 0x10
cwde
push eax
mov dword [ebp - 0x198], ecx
mov dword [ebx + 0x64], ecx
push ecx
mov ecx, ebx
mov dword [ebp - 0x1a0], eax
mov dword [ebx + 0x68], eax
call fcn.00438113
mov esi, eax
test esi, esi
je 0x436dd8
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x436dd8
mov dword [ebx + 0x5c], esi
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0xf0]
mov ecx, ebx
call fcn.0043753c
push 7
xor eax, eax
lea edi, [ebp - 0x2c]
pop ecx
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x198]
mov eax, dword [ebp - 0x1b4]
mov edi, dword [ebp - 0x1a4]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x1a0]
mov dword [ebp - 0x30], 0xd
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x20], ecx
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28], eax
jmp 0x436978
cmp byte [ebx + 0xb5], 0
jne 0x436887
xor eax, eax
lea edi, [ebp - 0x3c]
cmp dword [ebx + 0x1c], 0
stosd dword es:[edi], eax
push 3
pop ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebx]
mov dword [ebp - 0x40], 0x10
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], eax
jne 0x436862
mov dword [ebp - 0x34], 0x190
jmp 0x436876
push 0
push ecx
push 0x415
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.COMCTL32.dll__TrackMouseEvent]
mov byte [ebx + 0xb5], 1
mov eax, dword [ebp - 0x1a4]
movsx ecx, ax
shr eax, 0x10
cwde
push eax
mov dword [ebp - 0x198], ecx
mov dword [ebx + 0x64], ecx
push ecx
mov ecx, ebx
mov dword [ebp - 0x1a0], eax
mov dword [ebx + 0x68], eax
call fcn.00438113
mov esi, eax
test esi, esi
je 0x4368c4
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x436dd8
and dword [ebp - 0x30], 0
lea edi, [ebp - 0x2c]
push 7
xor eax, eax
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x20], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x58]
mov dword [ebp - 0x28], eax
cmp esi, ecx
je 0x43692c
test ecx, ecx
je 0x43692c
mov dword [ebp - 0x30], 0xa
lea edx, [ebp - 0x30]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x108]
and dword [ebx + 0x58], 0
cmp dword [ebx + 0x1c], 0
je 0x43692c
lea eax, [ebx + 0x20]
push eax
push 0
push 0x411
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp esi, dword [ebx + 0x58]
je 0x436950
test esi, esi
je 0x436950
mov dword [ebp - 0x30], 0xb
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x2c], esi
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x108]
mov dword [ebx + 0x58], esi
mov ecx, dword [ebx + 0x5c]
test ecx, ecx
je 0x436966
mov dword [ebp - 0x30], 9
mov dword [ebp - 0x2c], ecx
jmp 0x436606
test esi, esi
je 0x436dd8
mov dword [ebp - 0x30], 9
mov dword [ebp - 0x2c], esi
mov eax, dword [esi]
lea ecx, [ebp - 0x30]
push ecx
mov ecx, esi
jmp 0x43660c
mov ecx, dword [ebp - 0x1a4]
test ecx, ecx
je 0x436dd8
push ecx
push edi
lea eax, [esi + 0x2000]
push eax
push ecx
jmp 0x4363c9
push dword [ebx]
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebp - 0x1a4]
movsx ecx, ax
shr eax, 0x10
cwde
push eax
mov dword [ebp - 0x198], ecx
mov dword [ebx + 0x64], ecx
push ecx
mov ecx, ebx
mov dword [ebp - 0x1a0], eax
mov dword [ebx + 0x68], eax
call fcn.00438113
mov esi, eax
test esi, esi
je 0x436dd8
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x436dd8
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0xf0]
mov ecx, ebx
call fcn.0043753c
push 7
xor eax, eax
lea edi, [ebp - 0x2c]
pop ecx
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x198]
mov eax, dword [ebp - 0x1b4]
mov edi, dword [ebp - 0x1a4]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x1a0]
mov dword [ebp - 0x30], 0xf
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x20], ecx
jmp 0x4366df
sub esi, 0x20a
je 0x436d19
sub esi, 0x97
je 0x436b9a
dec esi
sub esi, 1
je 0x436b5c
sub esi, 0x75
je 0x436aa8
sub esi, 0x7ce9
jne 0x436dd8
lea esi, [ebx + 0xfc]
xor edi, edi
mov ecx, esi
call fcn.00439635
test eax, eax
jle 0x436a9c
push edi
mov ecx, esi
call fcn.0043a4d8
test eax, eax
je 0x436a90
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
mov ecx, esi
inc edi
call fcn.00439635
cmp edi, eax
jl 0x436a7c
mov ecx, esi
call fcn.0043a32b
jmp 0x436dd8
lea eax, [ebp - 0x20]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_GetClientRect]
push edi
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x50]
mov dword [ebp - 0x198], eax
lea eax, [ebp - 0x20]
push eax
push edi
mov edx, dword [ecx]
call dword [edx + 0x118]
test byte [ebp - 0x1a4], 0x10
je 0x436b4a
push 5
push dword [ebx]
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, eax
test esi, esi
je 0x436b4a
or dword [ebp - 0x1a4], 2
lea eax, [ebp - 0x50]
xorps xmm0, xmm0
push eax
push esi
movups xmmword [ebp - 0x50], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea eax, [ebp - 0x50]
push eax
push dword [ebx]
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [ebp - 0x4c]
push 0
neg eax
push eax
mov eax, dword [ebp - 0x50]
neg eax
push eax
push edi
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
push dword [ebp - 0x1a4]
push edi
push 0x317
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push 2
push esi
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, eax
test esi, esi
jne 0x436af1
push dword [ebp - 0x198]
push edi
call dword [sym.imp.GDI32.dll_RestoreDC]
jmp 0x436dd8
cmp dword [ebx + 0x1c], 0
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
je 0x436b78
lea eax, [ebx + 0x20]
push eax
push 0
push 0x411
push dword [ebx + 0x1c]
call esi
cmp byte [ebx + 0xb5], 0
je 0x436b8e
push 0xffffffffffffffff
push 0
push 0x200
push dword [ebx]
call esi
mov byte [ebx + 0xb5], 0
jmp 0x436dd8
mov eax, dword [ebp - 0x1a4]
movsx ecx, ax
shr eax, 0x10
cwde
push eax
mov dword [ebp - 0x198], ecx
push ecx
mov ecx, ebx
mov byte [ebx + 0xb5], 0
mov dword [ebp - 0x1a0], eax
call fcn.00438113
mov esi, eax
mov dword [ebp - 0x1ac], esi
test esi, esi
je 0x436dd8
mov edx, dword [ebx + 0x58]
test edx, edx
je 0x436c18
push 7
xor eax, eax
lea edi, [ebp - 0x2c]
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], 0xc
mov dword [ebp - 0x2c], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x58]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov eax, dword [esi]
lea ecx, [ebp - 0xd4]
push ecx
mov ecx, esi
call dword [eax + 0x98]
and dword [ebp - 4], 0
lea ecx, [ebp - 0xd4]
call fcn.0043a677
test al, al
je 0x436c4c
lea ecx, [ebp - 0xd4]
call fcn.0043a552
jmp 0x4358a8
push 0x2c
lea edi, [ebx + 0x20]
push 0
push edi
call fcn.0047e1d0
mov eax, dword [ebx]
lea ecx, [ebp - 0xd4]
add esp, 0xc
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], eax
mov eax, dword [0x4d1c78]
mov dword [edi], 0x2c
mov dword [ebx + 0x24], 1
mov dword [ebx + 0x40], eax
call fcn.004353bf
mov dword [ebx + 0x44], eax
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0x30]
mov esi, eax
lea edi, [ebx + 0x30]
xor ecx, ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebx + 0x1c], ecx
jne 0x436cdc
push ecx
push dword [0x4d1c78]
mov eax, SysReAllocString
push ecx
push dword [ebx]
push eax
push eax
push eax
push eax
push SysStringLen
push ecx
push str.tooltips_class32
push ecx
call dword [sym.imp.USER32.dll_CreateWindowExW]
lea edi, [ebx + 0x20]
mov dword [ebx + 0x1c], eax
push edi
push 0
push 0x432
push eax
call esi
jmp 0x436cdf
lea edi, [ebx + 0x20]
mov ecx, dword [ebp - 0x1ac]
mov eax, dword [ecx]
call dword [eax + 0xa4]
push eax
push 0
push 0x418
push dword [ebx + 0x1c]
call esi
push edi
push 0
push 0x436
push dword [ebx + 0x1c]
call esi
push edi
push 1
push 0x411
push dword [ebx + 0x1c]
call esi
jmp 0x436c3c
mov ecx, dword [ebp - 0x1a4]
movsx eax, cx
mov dword [ebp - 0x19c], eax
mov eax, ecx
shr eax, 0x10
cwde
mov dword [ebp - 0x198], eax
lea eax, [ebp - 0x19c]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x19c]
push eax
mov dword [ebx + 0x64], ecx
push ecx
mov ecx, ebx
mov dword [ebx + 0x68], eax
call fcn.00438113
mov esi, eax
test esi, esi
je 0x436dd8
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x436dd8
xor eax, eax
lea edi, [ebp - 0x2c]
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1b4]
shr eax, 0x10
shr eax, 0xf
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x30], 0x12
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x14], eax
call fcn.00434c2d
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x30]
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x108]
movzx ecx, word [ebx + 0x68]
movzx eax, word [ebx + 0x64]
shl ecx, 0x10
or ecx, eax
push ecx
push 0
push 0x200
push dword [ebx]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
lea ecx, [ebx + 0x108]
call fcn.0043a4bc
mov esi, eax
test esi, esi
je 0x436e57
add ebx, 0xc0
push 0
call fcn.0043a458
mov eax, dword [esi + 0x108]
test eax, eax
je 0x436e14
lea ecx, [eax + 0x34]
call fcn.00444afa
test al, al
je 0x436e14
push esi
call fcn.00444b55
mov ecx, ebx
xor edi, edi
call fcn.00439635
test eax, eax
jle 0x436e3c
push edi
mov ecx, ebx
call fcn.0043a4d8
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
mov ecx, ebx
inc edi
call fcn.00439635
cmp edi, eax
jl 0x436e21
push ecx
mov ecx, esi
call fcn.00435134
mov ecx, dword [ebp - 0x1bc]
push 0
call fcn.0043a4bc
mov esi, eax
test esi, esi
jne 0x436df1
xor al, al
call fcn.004659e4
ret 0x10