Function at 0x424224
Capabilities:
Check for time delay via gettickcount
Check for unmoving mouse cursor
Resolve function by parsing pe exports

Disassembly:
push 0x2d0
mov eax, 0x4c5a6c
call fcn.004a9047
mov eax, dword [ebp + 0x10]
and dword [ebp - 0x2c0], 0
mov esi, dword [ebp + 0xc]
mov ebx, ecx
cmp dword [ebx + 0xc], 0
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x2c8], eax
je 0x425a1c
lea ecx, [ebx + 0x110]
mov dword [ebp - 0x2bc], ecx
jmp 0x4242ff
mov ecx, dword [ebp - 0x2bc]
push 0
call fcn.00426a1e
mov eax, dword [edi + 0x108]
test eax, eax
je 0x4242a4
lea ecx, [eax + 0xbc]
call fcn.00433811
test al, al
je 0x4242a4
mov ecx, dword [edi + 0x108]
push edi
add ecx, 0xbc
call fcn.0043386e
and dword [ebp - 0x2b0], 0
lea ecx, [ebx + 0xc8]
call fcn.004a6c18
test eax, eax
jle 0x4242eb
push dword [ebp - 0x2b0]
lea ecx, [ebx + 0xc8]
call fcn.00426a9b
mov edx, dword [eax]
push edi
mov ecx, eax
call dword [edx]
inc dword [ebp - 0x2b0]
lea ecx, [ebx + 0xc8]
call fcn.004a6c18
cmp dword [ebp - 0x2b0], eax
jl 0x4242ba
mov ecx, edi
call fcn.00420dd0
push edi
call fcn.004a79c0
pop ecx
mov ecx, dword [ebp - 0x2bc]
push 0
call fcn.00426a7f
mov edi, eax
test edi, edi
jne 0x42426c
and dword [ebp - 0x2b0], eax
lea ecx, [ebx + 0xec]
call fcn.004a6c18
mov edi, dword [ebp + 8]
test eax, eax
jle 0x42437b
push dword [ebp - 0x2b0]
lea ecx, [ebx + 0xec]
mov byte [ebp - 0x2b5], 0
call fcn.00426a9b
mov edx, dword [eax]
lea ecx, [ebp - 0x2b5]
push ecx
push dword [ebp - 0x2ac]
mov ecx, eax
push esi
push edi
call dword [edx]
cmp byte [ebp - 0x2b5], 0
jne 0x42442c
inc dword [ebp - 0x2b0]
lea ecx, [ebx + 0xec]
call fcn.004a6c18
cmp dword [ebp - 0x2b0], eax
jl 0x424328
mov eax, 0x113
cmp edi, eax
ja 0x4250a9
je 0x425006
cmp edi, 0x4e
ja 0x424e23
je 0x424dfc
sub edi, 5
je 0x424db2
sub edi, 0xa
je 0x42459d
dec edi
je 0x424518
sub edi, 4
je 0x424507
sub edi, 0xc
je 0x42443b
sub edi, 4
jne 0x42597a
lea eax, [ebp - 0x2b4]
push eax
mov ecx, ebx
call fcn.0042312f
lea eax, [ebp - 0x2cc]
push eax
mov ecx, ebx
call fcn.00423151
mov ecx, dword [ebp - 0x2b4]
mov eax, dword [ebp - 0x2ac]
test ecx, ecx
jle 0x4243fc
mov dword [eax + 0x18], ecx
mov ecx, dword [ebp - 0x2b0]
test ecx, ecx
jle 0x424409
mov dword [eax + 0x1c], ecx
mov ecx, dword [ebp - 0x2cc]
test ecx, ecx
jle 0x424416
mov dword [eax + 0x20], ecx
mov ecx, dword [ebp - 0x2c8]
test ecx, ecx
jle 0x42597a
mov dword [eax + 0x24], ecx
jmp 0x42597a
mov ecx, dword [ebp - 0x2c8]
mov dword [ecx], eax
mov al, 1
jmp 0x425a1e
cmp word [ebp - 0x2ac], 1
jne 0x42597a
cmp byte [ebx + 0xc5], 0
jne 0x424434
and dword [ebp - 0x2c4], 0
xor eax, eax
lea edi, [ebp - 0x2c0]
stosd dword es:[edi], eax
lea eax, [ebp - 0x2c4]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x2c4]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_ScreenToClient]
push dword [ebp - 0x2c0]
mov ecx, ebx
push dword [ebp - 0x2c4]
call fcn.0042395c
mov dword [ebp - 0x2b0], eax
test eax, eax
je 0x42597a
mov ecx, eax
mov eax, dword [ecx]
call dword [eax + 0x1c]
test al, 2
je 0x42597a
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x6c]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x70], 0x17
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x60], eax
call fcn.00420d3e
mov word [ebp - 0x5a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x2b0]
lea edx, [ebp - 0x70]
mov dword [ebp - 0x68], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x130]
jmp 0x424434
mov eax, dword [ebp - 0x2c8]
mov dword [eax], 1
jmp 0x424434
and dword [ebp - 0x30], 0
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x74]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0x78]
mov dword [ebp - 0x20], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x68]
mov dword [ebp - 0x28], eax
test ecx, ecx
je 0x424558
lea edx, [ebp - 0x30]
mov dword [ebp - 0x30], 0xa
mov dword [ebp - 0x2c], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x130]
mov ecx, dword [ebx + 0x6c]
test ecx, ecx
je 0x424575
lea edx, [ebp - 0x30]
mov dword [ebp - 0x30], 0xe
mov dword [ebp - 0x2c], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x130]
push 0
mov ecx, ebx
call fcn.00423e7f
push 4
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetWindow]
test eax, eax
je 0x42597a
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x42597a
xor eax, eax
xor esi, esi
cmp byte [ebx + 0xc7], al
je 0x424849
mov dword [ebp - 0x40], esi
lea edi, [ebp - 0x3c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetClientRect]
push 0x3c
lea eax, [ebp - 0x2a4]
push esi
push eax
mov dword [ebp - 0x2a8], esi
call fcn.004a8b80
add esp, 0xc
lea eax, [ebp - 0x2a8]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_BeginPaint]
mov eax, dword [ebx + 0x1c]
cmp eax, esi
je 0x4245f9
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [ebx + 0x24]
mov edi, dword [sym.imp.GDI32.dll_DeleteObject]
cmp eax, esi
je 0x424609
push eax
call edi
cmp byte [ebx + 0xc1], 0
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x24], esi
je 0x42471f
lea eax, [ebp - 0x40]
push eax
mov byte [ebx + 0xc1], 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x42471f
mov ecx, dword [ebx + 0x60]
call fcn.0042bc21
test al, al
je 0x4246be
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x42464f
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [ebx + 0x24]
test eax, eax
je 0x424659
push eax
call edi
and dword [ebx + 0x1c], esi
and dword [ebx + 0x24], esi
mov ecx, dword [ebx + 0x60]
mov eax, dword [ecx]
push 1
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x40]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x50]
jmp 0x4246df
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x11c]
mov ecx, dword [ebp - 0x2ac]
test al, al
mov eax, dword [ecx]
mov dword [ebp - 0x2bc], eax
jne 0x424698
call dword [eax + 0x40]
jmp 0x4246a2
lea edx, [ebp - 0x8c]
push edx
call dword [eax + 0x44]
mov ecx, dword [ebp - 0x2ac]
push 1
sub esp, 0x10
mov esi, eax
mov eax, dword [ebp - 0x2bc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x50]
mov ecx, dword [ebx + 0x60]
mov eax, dword [ecx]
push reloc.WS2_32.dll_accept
push 0
push 0x4228c5
call dword [eax + 0x124]
mov dword [ebp - 0x2ac], eax
test eax, eax
jne 0x424677
cmp byte [ebx + 0xc0], 0
je 0x42471f
push 0xffffffffffffffec
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 0x80000
push eax
push 0xffffffffffffffec
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SetWindowLongW]
xor eax, eax
push eax
push eax
push eax
push str.windowinit
push dword [ebx + 0x60]
mov ecx, ebx
mov byte [ebx + 0xc0], 0
call fcn.0042330e
cmp byte [ebx + 8], 0
je 0x42472e
push 1
mov ecx, ebx
call fcn.00424004
xor esi, esi
cmp byte [ebx + 0xc2], 0
je 0x424792
cmp dword [ebx + 0x24], esi
jne 0x424792
push dword [ebx + 0x14]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0xa
mov dword [ebx + 0x1c], eax
pop ecx
xor eax, eax
lea edi, [ebp - 0x78]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x40]
push 0x20
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x7c], 0x28
mov dword [ebp - 0x74], eax
xor eax, eax
inc eax
mov word [ebp - 0x70], ax
pop eax
push esi
push esi
push esi
mov word [ebp - 0x6e], ax
push esi
lea eax, [ebp - 0x7c]
push eax
push dword [ebx + 0x14]
mov dword [ebp - 0x6c], esi
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov dword [ebx + 0x24], eax
push dword [ebx + 0x24]
push dword [ebx + 0x1c]
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebx + 0x60]
mov eax, dword [ecx]
lea edx, [ebp - 0x40]
push edx
push dword [ebx + 0x1c]
call dword [eax + 0x140]
xor eax, eax
mov dword [ebp - 0x20], esi
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x40]
push 2
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2cc], esi
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0x2b0]
push eax
push esi
lea eax, [ebp - 0x2cc]
push eax
push dword [ebx + 0x1c]
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x2d4]
push eax
push esi
push dword [ebx + 0xc]
mov dword [ebp - 0x2c8], esi
mov dword [ebp - 0x2b0], 0x1ff0000
call dword [sym.imp.USER32.dll_UpdateLayeredWindow]
lea eax, [ebp - 0x2a8]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x424434
mov dword [ebp - 0x50], esi
lea edi, [ebp - 0x4c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push esi
lea eax, [ebp - 0x50]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetUpdateRect]
test eax, eax
je 0x424434
cmp dword [ebx + 0x60], esi
jne 0x424897
push 0x3c
lea eax, [ebp - 0x2a4]
push esi
push eax
mov dword [ebp - 0x2a8], esi
call fcn.004a8b80
add esp, 0xc
lea eax, [ebp - 0x2a8]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_BeginPaint]
jmp 0x424834
cmp byte [ebx + 0xc1], 0
je 0x424a1d
and dword [ebp - 0x20], esi
xor eax, eax
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebx + 0xc]
mov byte [ebx + 0xc1], 0
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x424a1d
mov ecx, dword [ebx + 0x60]
call fcn.0042bc21
test al, al
je 0x424940
mov eax, dword [ebx + 0x18]
mov esi, dword [sym.imp.GDI32.dll_DeleteDC]
test eax, eax
je 0x4248f1
push eax
call esi
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x4248fb
push eax
call esi
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x424909
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebx + 0x24]
test eax, eax
je 0x424917
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [ebx + 0x60]
push 1
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor eax, eax
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x18], eax
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x24], eax
mov eax, dword [ecx]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x50]
jmp 0x4249eb
lea esi, [ebx + 0x11c]
mov ecx, esi
call fcn.004268e7
mov ecx, dword [ebx + 0x60]
mov eax, dword [ecx]
push reloc.WS2_32.dll_htons
push 0
push 0x4228c5
call dword [eax + 0x124]
and dword [ebp - 0x2bc], 0
mov ecx, esi
call fcn.004a6c18
test eax, eax
jle 0x4249eb
push dword [ebp - 0x2bc]
mov ecx, esi
call fcn.00426a9b
mov edx, dword [eax]
mov ecx, eax
mov dword [ebp - 0x2b0], eax
call dword [edx + 0x11c]
mov ecx, dword [ebp - 0x2b0]
test al, al
mov eax, dword [ecx]
mov dword [ebp - 0x2c8], eax
jne 0x4249aa
call dword [eax + 0x40]
jmp 0x4249b4
lea edx, [ebp - 0x9c]
push edx
call dword [eax + 0x44]
mov ecx, dword [ebp - 0x2b0]
push 1
sub esp, 0x10
mov esi, eax
mov eax, dword [ebp - 0x2c8]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x50]
inc dword [ebp - 0x2bc]
lea esi, [ebx + 0x11c]
mov ecx, esi
call fcn.004a6c18
cmp dword [ebp - 0x2bc], eax
jl 0x424976
cmp byte [ebx + 0xc0], 0
je 0x424a1d
xor eax, eax
push eax
push eax
push eax
push str.windowinit
push dword [ebx + 0x60]
mov ecx, ebx
mov byte [ebx + 0xc0], 0
call fcn.0042330e
push dword [ebx + 0xc]
lea ecx, [ebx + 0x250]
call fcn.0042e979
cmp byte [ebx + 8], 0
je 0x424a2c
push 1
mov ecx, ebx
call fcn.00424004
mov eax, dword [ebx + 0x20]
xor esi, esi
cmp eax, esi
je 0x424a3f
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebx + 0x20], esi
mov eax, dword [ebx + 0x18]
cmp eax, esi
je 0x424a50
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebx + 0x18], esi
cmp byte [ebx + 0xc2], 0
je 0x424aca
cmp dword [ebx + 0x20], esi
jne 0x424aca
xor eax, eax
mov dword [ebp - 0x40], esi
lea edi, [ebp - 0x3c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [ebx + 0x14]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0xa
mov dword [ebx + 0x18], eax
pop ecx
xor eax, eax
lea edi, [ebp - 0x78]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x40]
push 0x20
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x7c], 0x28
mov dword [ebp - 0x74], eax
xor eax, eax
inc eax
mov word [ebp - 0x70], ax
pop eax
push esi
push esi
push esi
mov word [ebp - 0x6e], ax
push esi
lea eax, [ebp - 0x7c]
push eax
push dword [ebx + 0x14]
mov dword [ebp - 0x6c], esi
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov dword [ebx + 0x20], eax
push 0x3c
lea eax, [ebp - 0x264]
push esi
push eax
mov dword [ebp - 0x268], esi
call fcn.004a8b80
add esp, 0xc
lea eax, [ebp - 0x268]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_BeginPaint]
cmp byte [ebx + 0xc2], 0
je 0x424d50
push dword [ebx + 0x20]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebx + 0x18]
call esi
push dword [ebx + 0x18]
mov dword [ebp - 0x2bc], eax
call dword [sym.imp.GDI32.dll_SaveDC]
cmp byte [ebx + 0xc3], 0
mov dword [ebp - 0x2c0], eax
je 0x424c3d
mov eax, dword [ebx + 0x24]
test eax, eax
jne 0x424bf4
and dword [ebp - 0x40], eax
lea edi, [ebp - 0x3c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [ebx + 0x14]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebx + 0x1c], eax
push 0xa
xor eax, eax
pop ecx
lea edi, [ebp - 0x78]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x40]
push 0x20
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x7c], 0x28
mov dword [ebp - 0x74], eax
xor eax, eax
inc eax
mov word [ebp - 0x70], ax
pop eax
mov word [ebp - 0x6e], ax
xor eax, eax
push eax
push eax
push eax
push eax
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x7c]
push eax
push dword [ebx + 0x14]
call dword [sym.imp.GDI32.dll_CreateDIBSection]
push eax
push dword [ebx + 0x1c]
mov dword [ebx + 0x24], eax
call esi
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x25c]
push 0xcc0020
push dword [ebp - 0x25c]
push dword [ebp - 0x260]
push dword [ebp - 0x268]
push eax
mov eax, dword [ebp - 0x258]
sub eax, dword [ebp - 0x260]
push eax
push dword [ebp - 0x25c]
push dword [ebp - 0x260]
push dword [ebx + 0x1c]
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x424bfa
push eax
push dword [ebx + 0x1c]
call esi
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x25c]
push 0xcc0020
push dword [ebp - 0x25c]
push dword [ebp - 0x260]
push dword [ebx + 0x1c]
push eax
mov eax, dword [ebp - 0x258]
sub eax, dword [ebp - 0x260]
push eax
push dword [ebp - 0x25c]
push dword [ebp - 0x260]
push dword [ebx + 0x18]
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [ebx + 0x60]
mov eax, dword [ecx]
lea edx, [ebp - 0x260]
push edx
push dword [ebx + 0x18]
call dword [eax + 0x140]
and dword [ebp - 0x2b0], 0
lea ecx, [ebx + 0xf8]
call fcn.004a6c18
test eax, eax
jle 0x424ca6
push dword [ebp - 0x2b0]
lea ecx, [ebx + 0xf8]
call fcn.00426a9b
mov edx, dword [eax]
lea ecx, [ebp - 0x260]
push ecx
push dword [ebx + 0x18]
mov ecx, eax
call dword [edx + 0x158]
inc dword [ebp - 0x2b0]
lea ecx, [ebx + 0xf8]
call fcn.004a6c18
cmp dword [ebp - 0x2b0], eax
jl 0x424c68
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x25c]
push 0xcc0020
push dword [ebp - 0x25c]
push dword [ebp - 0x260]
push dword [ebx + 0x18]
push eax
mov eax, dword [ebp - 0x258]
sub eax, dword [ebp - 0x260]
push eax
push dword [ebp - 0x25c]
push dword [ebp - 0x260]
push dword [ebp - 0x268]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x2c0]
push dword [ebx + 0x18]
call dword [sym.imp.GDI32.dll_RestoreDC]
push dword [ebp - 0x2bc]
push dword [ebx + 0x18]
call esi
cmp byte [ebx + 0x5c], 0
je 0x424d83
push dword [0x4faf00]
push dword [ebp - 0x268]
call esi
push 5
mov edi, eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebp - 0x268]
call esi
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x268]
call dword [sym.imp.GDI32.dll_Rectangle]
push edi
push dword [ebp - 0x268]
call esi
jmp 0x424d83
push dword [ebp - 0x268]
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x60]
lea edx, [ebp - 0x260]
push edx
push dword [ebp - 0x268]
mov esi, eax
mov eax, dword [ecx]
call dword [eax + 0x140]
push esi
push dword [ebp - 0x268]
call dword [sym.imp.GDI32.dll_RestoreDC]
lea eax, [ebp - 0x268]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_EndPaint]
cmp byte [ebx + 0xc1], 0
je 0x424434
push 0
push 0
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x424434
mov edx, dword [ebx + 0x64]
test edx, edx
je 0x424de5
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x30], 0x16
mov dword [ebp - 0x2c], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x64]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x130]
mov ebx, dword [ebx + 0x60]
test ebx, ebx
je 0x424434
mov ecx, ebx
call fcn.0042bc28
jmp 0x424434
cmp dword [ebp - 0x2ac], 0
je 0x424434
mov eax, dword [ebp - 0x2ac]
push eax
push esi
push 0x204e
push dword [eax]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x42442c
sub edi, 0x7b
je 0x424f69
sub edi, 0x26
je 0x424f5b
sub edi, 0x5f
je 0x424f04
dec edi
je 0x424eaf
dec edi
je 0x424e6d
sub edi, 0xf
jne 0x42597a
cmp dword [ebp - 0x2ac], edi
je 0x42597a
push dword [ebp - 0x2ac]
push esi
push 0x2111
push dword [ebp - 0x2ac]
jmp 0x424e18
cmp dword [ebx + 0x64], 0
je 0x42597a
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x74]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0x78]
mov dword [ebp - 0x30], 5
mov word [ebp - 0x1c], si
mov dword [ebp - 0x20], eax
call fcn.00420d3e
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x64]
jmp 0x425095
cmp dword [ebx + 0x70], 0
je 0x42597a
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x74]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0x78]
mov dword [ebp - 0x30], 4
mov word [ebp - 0x1c], si
mov dword [ebp - 0x20], eax
call fcn.00420d3e
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x70]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x130]
and dword [ebx + 0x70], 0
jmp 0x42597a
cmp dword [ebx + 0x64], 0
je 0x42597a
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x74]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0x78]
mov dword [ebp - 0x30], 3
mov word [ebp - 0x1c], si
mov dword [ebp - 0x20], eax
call fcn.00420d3e
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x64]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x130]
mov eax, dword [ebx + 0x64]
mov dword [ebx + 0x70], eax
jmp 0x42597a
push 0
mov ecx, ebx
call fcn.00423e7f
jmp 0x42597a
mov eax, dword [ebp - 0x2ac]
movsx ecx, ax
shr eax, 0x10
cwde
mov dword [ebp - 0x2b0], eax
lea eax, [ebp - 0x2b4]
push eax
push dword [ebx + 0xc]
mov dword [ebp - 0x2b4], ecx
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [ebx + 0x6c], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebx + 0x74], eax
mov eax, dword [ebp - 0x2b0]
mov dword [ebx + 0x78], eax
je 0x42597a
mov ecx, ebx
call fcn.00421928
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x2b4]
mov eax, dword [ebx + 0x6c]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x2b0]
mov dword [ebp - 0x30], 0x11
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20], ecx
mov word [ebp - 0x1a], si
mov dword [ebp - 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x6c]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x130]
and dword [ebx + 0x6c], 0
jmp 0x42597a
and dword [ebp - 0x2b0], 0
lea ecx, [ebx + 0xd4]
call fcn.004a6c18
test eax, eax
jle 0x42597a
push dword [ebp - 0x2b0]
lea ecx, [ebx + 0xd4]
call fcn.00426a9b
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2c0], eax
cmp ecx, dword [ebx + 0xc]
jne 0x42504d
movzx ecx, si
cmp dword [eax + 0xc], ecx
jne 0x42504d
cmp byte [eax + 0x10], 0
je 0x42506b
inc dword [ebp - 0x2b0]
lea ecx, [ebx + 0xd4]
call fcn.004a6c18
cmp dword [ebp - 0x2b0], eax
jl 0x425020
jmp 0x42597a
mov esi, dword [ebp - 0x2c0]
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov eax, dword [esi]
mov dword [ebp - 0x2c], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x30], 0x18
mov dword [ebp - 0x18], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi]
mov dword [ebp - 0x28], eax
mov eax, dword [ecx]
lea edx, [ebp - 0x30]
push edx
call dword [eax + 0x130]
jmp 0x42597a
mov eax, 0x204
cmp edi, eax
ja 0x425556
je 0x4254cb
mov eax, edi
sub eax, 0x133
je 0x4254ab
sub eax, 5
je 0x4254ab
sub eax, 0xc8
je 0x4252d5
dec eax
je 0x425217
dec eax
je 0x425196
dec eax
jne 0x42597a
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebp - 0x2ac]
movsx ecx, ax
shr eax, 0x10
cwde
push eax
mov dword [ebp - 0x2b4], ecx
mov dword [ebx + 0x74], ecx
push ecx
mov ecx, ebx
mov dword [ebp - 0x2b0], eax
mov dword [ebx + 0x78], eax
call fcn.0042395c
mov dword [ebp - 0x2c0], eax
test eax, eax
je 0x42597a
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x24]
cmp eax, ebx
jne 0x42597a
mov ecx, ebx
call fcn.00421913
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x30], 0x10
mov eax, dword [ebp - 0x2b4]
mov edi, dword [ebp - 0x2c0]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x20], eax
mov word [ebp - 0x1a], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x130]
mov dword [ebx + 0x6c], edi
jmp 0x42597a
mov ecx, dword [ebp - 0x2ac]
movsx eax, word [ebp - 0x2ac]
shr ecx, 0x10
cmp dword [ebx + 0x6c], 0
movsx ecx, cx
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2c0], ecx
mov dword [ebx + 0x74], eax
mov dword [ebx + 0x78], ecx
je 0x42597a
mov ecx, ebx
call fcn.00421928
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x6c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x30], 0xe
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x20], eax
mov word [ebp - 0x1a], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x6c]
and dword [ebx + 0x6c], 0
jmp 0x425095
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0x2ac]
movsx eax, word [ebp - 0x2ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x2c8], ecx
mov dword [ebx + 0x78], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x2cc], eax
mov dword [ebx + 0x74], eax
call fcn.0042395c
mov dword [ebp - 0x2b0], eax
test eax, eax
je 0x42597a
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x24]
cmp eax, ebx
jne 0x42597a
mov ecx, dword [ebp - 0x2b0]
mov dword [ebx + 0x6c], ecx
mov eax, dword [ecx]
call dword [eax + 0x118]
mov ecx, ebx
call fcn.00421913
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x2ac]
mov edi, dword [ebp - 0x2b0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x30], 0xd
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x20], eax
mov word [ebp - 0x1a], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
jmp 0x42509e
cmp byte [ebx + 0xc4], 0
jne 0x425312
xor eax, eax
lea edi, [ebp - 0x4c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x50], 0x10
mov dword [ebp - 0x4c], 3
mov dword [ebp - 0x44], 0x64
call dword [sym.imp.COMCTL32.dll__TrackMouseEvent]
mov byte [ebx + 0xc4], 1
mov eax, dword [ebp - 0x2ac]
movsx ecx, ax
shr eax, 0x10
cwde
push eax
mov dword [ebp - 0x2cc], ecx
mov dword [ebx + 0x74], ecx
push ecx
mov ecx, ebx
mov dword [ebp - 0x2c8], eax
mov dword [ebx + 0x78], eax
call fcn.0042395c
and dword [ebp - 0x2b0], 0
mov esi, eax
test esi, esi
je 0x425382
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x24]
cmp eax, ebx
jne 0x42597a
lea eax, [ebp - 0x1a4]
push eax
mov ecx, esi
call fcn.0042c6c8
xor edx, edx
inc edx
mov ecx, eax
mov dword [ebp - 4], edx
mov dword [ebp - 0x2c0], edx
call fcn.00426c11
mov byte [ebp - 0x2b5], 1
test al, al
je 0x425389
mov byte [ebp - 0x2b5], 0
or dword [ebp - 4], 0xffffffff
test byte [ebp - 0x2c0], 1
je 0x4253a1
lea ecx, [ebp - 0x1a4]
call fcn.00426ad2
cmp byte [ebp - 0x2b5], 0
je 0x4253e3
lea eax, [ebp - 0x228]
push eax
mov ecx, esi
call fcn.0042c6c8
mov ecx, eax
mov dword [ebp - 4], 2
call fcn.00426af4
push eax
mov ecx, ebx
call fcn.00422712
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x2b0], eax
call fcn.00426ad2
and dword [ebp - 0x30], 0
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x20], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x68]
mov dword [ebp - 0x28], eax
cmp esi, ecx
je 0x425452
test ecx, ecx
je 0x425452
cmp dword [ebp - 0x2b0], ecx
je 0x425452
lea edx, [ebp - 0x30]
mov dword [ebp - 0x30], 0xa
mov dword [ebp - 0x2c], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x130]
mov eax, dword [ebx + 0x28]
and dword [ebx + 0x68], 0
test eax, eax
je 0x425452
lea ecx, [ebx + 0x2c]
push ecx
push 0
push 0x411
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp esi, dword [ebx + 0x68]
je 0x425476
test esi, esi
je 0x425476
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], 0xb
mov dword [ebp - 0x2c], esi
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x130]
mov dword [ebx + 0x68], esi
mov ecx, dword [ebx + 0x6c]
test ecx, ecx
je 0x42548c
mov dword [ebp - 0x30], 9
mov dword [ebp - 0x2c], ecx
jmp 0x425098
test esi, esi
je 0x42597a
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], 9
mov dword [ebp - 0x2c], esi
mov eax, dword [esi]
push ecx
mov ecx, esi
jmp 0x42509e
cmp dword [ebp - 0x2ac], 0
je 0x42597a
push dword [ebp - 0x2ac]
add edi, 0x2000
push esi
push edi
jmp 0x424e65
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0x2ac]
movsx eax, word [ebp - 0x2ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x2b0], ecx
mov dword [ebx + 0x78], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x2b4], eax
mov dword [ebx + 0x74], eax
call fcn.0042395c
mov dword [ebp - 0x2c0], eax
test eax, eax
je 0x42597a
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x24]
cmp eax, ebx
jne 0x42597a
mov ecx, dword [ebp - 0x2c0]
mov eax, dword [ecx]
call dword [eax + 0x118]
mov ecx, ebx
call fcn.00421913
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x30], 0xf
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], eax
jmp 0x425158
sub edi, 0x20a
je 0x4258aa
sub edi, 0x97
je 0x42571e
dec edi
dec edi
je 0x4256b1
sub edi, 0x75
je 0x4255ce
sub edi, 0x7ce9
jne 0x42597a
lea ecx, [ebx + 0x104]
call fcn.004a6c18
test eax, eax
jle 0x4255be
push edi
lea ecx, [ebx + 0x104]
call fcn.00426a9b
test eax, eax
je 0x4255ae
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx]
lea ecx, [ebx + 0x104]
inc edi
call fcn.004a6c18
cmp edi, eax
jl 0x425596
lea ecx, [ebx + 0x104]
call fcn.004268e7
jmp 0x42597a
lea eax, [ebp - 0x20]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetClientRect]
push esi
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x60]
lea edx, [ebp - 0x20]
push edx
mov dword [ebp - 0x2c8], eax
mov eax, dword [ecx]
push esi
call dword [eax + 0x140]
test byte [ebp - 0x2ac], 0x10
je 0x42569f
push 5
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x2b0], eax
test eax, eax
je 0x42569f
mov eax, dword [ebp - 0x2ac]
or eax, 2
mov dword [ebp - 0x2c0], eax
and dword [ebp - 0x50], 0
xor eax, eax
lea edi, [ebp - 0x4c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x50]
push eax
push dword [ebp - 0x2b0]
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea eax, [ebp - 0x50]
push eax
push dword [ebx + 0xc]
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [ebp - 0x4c]
push 0
neg eax
push eax
mov eax, dword [ebp - 0x50]
neg eax
push eax
push esi
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
push dword [ebp - 0x2c0]
push esi
push 0x317
push dword [ebp - 0x2b0]
call dword [sym.imp.USER32.dll_SendMessageW]
push 2
push dword [ebp - 0x2b0]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x2b0], eax
test eax, eax
jne 0x42562d
push dword [ebp - 0x2c8]
push esi
call dword [sym.imp.GDI32.dll_RestoreDC]
jmp 0x42597a
mov eax, dword [ebx + 0x28]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x4256cc
lea ecx, [ebx + 0x2c]
push ecx
push 0
push 0x411
push eax
call esi
cmp byte [ebx + 0xc4], 0
je 0x425712
lea eax, [ebp - 0x2c4]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x2c4]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_ScreenToClient]
movzx eax, word [ebp - 0x2c0]
movzx ecx, word [ebp - 0x2c4]
shl eax, 0x10
or eax, ecx
push eax
push 0
push 0x200
push dword [ebx + 0xc]
call esi
mov byte [ebx + 0xc4], 0
jmp 0x42597a
mov eax, dword [ebp - 0x2ac]
movsx esi, ax
shr eax, 0x10
cwde
push eax
push esi
mov ecx, ebx
mov byte [ebx + 0xc4], 0
mov dword [ebp - 0x2d0], eax
call fcn.0042395c
mov dword [ebp - 0x2b0], eax
test eax, eax
je 0x42597a
mov edx, dword [ebx + 0x68]
test edx, edx
je 0x42578e
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], 0xc
mov dword [ebp - 0x2c], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x68]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x130]
mov ecx, dword [ebp - 0x2b0]
mov eax, dword [ecx]
lea edx, [ebp - 0x120]
push edx
call dword [eax + 0xb8]
and dword [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.00426c11
test al, al
je 0x4257ca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x120]
call fcn.00426ad2
jmp 0x424434
lea eax, [ebp - 0x120]
push eax
call fcn.0042384f
push 0x30
pop edi
push edi
lea esi, [ebx + 0x2c]
push 0
push esi
call fcn.004a8b80
mov eax, dword [ebx + 0xc]
mov dword [esi], edi
mov dword [ebx + 0x30], 1
mov dword [ebx + 0x34], eax
mov dword [ebx + 0x38], eax
mov eax, dword [0x4faf0c]
add esp, 0x10
lea ecx, [ebp - 0x120]
mov dword [ebx + 0x4c], eax
call fcn.00426af4
mov ecx, dword [ebp - 0x2b0]
mov dword [ebx + 0x50], eax
mov eax, dword [ecx]
call dword [eax + 0x40]
cmp dword [ebx + 0x28], 0
lea edi, [ebx + 0x3c]
mov esi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x42586a
xor edi, edi
push edi
push dword [0x4faf0c]
mov eax, closesocket
push edi
push dword [ebx + 0xc]
push eax
push eax
push eax
push eax
push reloc.WS2_32.dll_closesocket
push edi
push str.tooltips_class32
push edi
call dword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [ebx + 0x2c]
push ecx
push edi
push 0x432
push eax
mov dword [ebx + 0x28], eax
call esi
jmp 0x42586c
xor edi, edi
mov ecx, dword [ebp - 0x2b0]
mov eax, dword [ecx]
call dword [eax + 0xc4]
push eax
push edi
push 0x418
push dword [ebx + 0x28]
call esi
lea eax, [ebx + 0x2c]
push eax
push edi
push 0x436
push dword [ebx + 0x28]
call esi
lea eax, [ebx + 0x2c]
push eax
push 1
push 0x411
push dword [ebx + 0x28]
call esi
jmp 0x4257b6
movsx eax, word [ebp - 0x2ac]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x2ac]
shr eax, 0x10
cwde
mov dword [ebp - 0x2b0], eax
lea eax, [ebp - 0x2b4]
push eax
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x2b0]
mov eax, dword [ebp - 0x2b4]
push ecx
mov dword [ebx + 0x78], ecx
push eax
mov ecx, ebx
mov dword [ebx + 0x74], eax
call fcn.0042395c
mov dword [ebp - 0x2c0], eax
test eax, eax
je 0x42597a
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x24]
cmp eax, ebx
jne 0x42597a
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x2c], eax
xor eax, eax
shr esi, 0x10
test si, si
sets al
mov dword [ebp - 0x30], 0x12
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x14], eax
call fcn.00420d3e
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x2c0]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x130]
movzx eax, word [ebx + 0x78]
movzx ecx, word [ebx + 0x74]
shl eax, 0x10
or eax, ecx
push eax
push 0
push 0x200
push dword [ebx + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x2bc]
push 0
call fcn.00426a7f
mov edi, eax
test edi, edi
je 0x425a1c
add ebx, 0xc8
mov ecx, dword [ebp - 0x2bc]
push 0
call fcn.00426a1e
mov eax, dword [edi + 0x108]
test eax, eax
je 0x4259cf
lea ecx, [eax + 0xbc]
call fcn.00433811
test al, al
je 0x4259cf
mov ecx, dword [edi + 0x108]
push edi
add ecx, 0xbc
call fcn.0043386e
mov ecx, ebx
xor esi, esi
call fcn.004a6c18
test eax, eax
jle 0x4259f7
push esi
mov ecx, ebx
call fcn.00426a9b
mov edx, dword [eax]
push edi
mov ecx, eax
call dword [edx]
mov ecx, ebx
inc esi
call fcn.004a6c18
cmp esi, eax
jl 0x4259dc
mov ecx, edi
call fcn.00420dd0
push edi
call fcn.004a79c0
pop ecx
mov ecx, dword [ebp - 0x2bc]
push 0
call fcn.00426a7f
mov edi, eax
test edi, edi
jne 0x425997
xor al, al
call fcn.004a9091
ret 0x10