Function at 0x440dc4
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
sub esp, 0x104
lea ebp, [esp - 4]
mov eax, dword [0x551bd0]
xor eax, ebp
mov dword [ebp + 0x104], eax
push 0x5c
mov eax, 0x5090e1
call fcn.0049dfed
mov eax, dword [ebp + 0x118]
mov esi, dword [ebp + 0x114]
mov ebx, ecx
cmp dword [ebx], 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0x11c]
mov dword [ebp - 0x3c], eax
jne 0x440e0e
xor al, al
jmp 0x442024
lea eax, [ebx + 0x240]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea edi, [ebx + 0x104]
push 0
mov ecx, edi
call fcn.00442e53
push 0
mov ecx, edi
mov dword [ebp - 0x44], eax
call fcn.00442df8
lea eax, [ebx + 0x240]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [ebp - 0x44], 0
je 0x440ebe
mov edi, dword [ebp - 0x44]
add edi, 0x108
mov eax, dword [edi]
test eax, eax
je 0x440e71
lea ecx, [eax + 0x38]
call fcn.00449897
test al, al
je 0x440e71
mov ecx, dword [edi]
push dword [ebp - 0x44]
add ecx, 0x38
call fcn.004498f3
and dword [ebp - 0x10], 0
lea edi, [ebx + 0xbc]
mov ecx, edi
call fcn.0045a40c
test eax, eax
jle 0x440ea8
push dword [ebp - 0x10]
mov ecx, edi
call fcn.00442e6c
push dword [ebp - 0x44]
mov edx, dword [eax]
mov ecx, eax
call dword [edx]
inc dword [ebp - 0x10]
mov ecx, edi
call fcn.0045a40c
cmp dword [ebp - 0x10], eax
jl 0x440e86
mov ecx, dword [ebp - 0x44]
call fcn.0043edbf
push dword [ebp - 0x44]
call fcn.0049a490
pop ecx
jmp 0x440e0e
and dword [ebp - 0x10], 0
lea ecx, [ebx + 0xe0]
call fcn.0045a40c
mov edi, dword [ebp + 0x110]
test eax, eax
jle 0x440f15
push dword [ebp - 0x10]
lea ecx, [ebx + 0xe0]
mov byte [ebp - 0x45], 0
call fcn.00442e6c
mov edx, dword [eax]
lea ecx, [ebp - 0x45]
push ecx
push dword [ebp - 0x18]
mov ecx, eax
push esi
push edi
call dword [edx]
cmp byte [ebp - 0x45], 0
jne 0x44161a
inc dword [ebp - 0x10]
lea ecx, [ebx + 0xe0]
call fcn.0045a40c
cmp dword [ebp - 0x10], eax
jl 0x440ed7
mov eax, 0x133
cmp edi, eax
ja 0x44184e
je 0x441bee
cmp edi, 0x4e
ja 0x441624
je 0x441600
sub edi, 5
je 0x4415b6
sub edi, 0xa
je 0x44110f
dec edi
je 0x44108b
sub edi, 4
je 0x441061
sub edi, 0xc
je 0x440f9b
sub edi, 4
jne 0x441e50
mov eax, dword [ebx + 0x6c]
mov ecx, dword [ebp - 0x18]
test eax, eax
jle 0x440f74
mov dword [ecx + 0x18], eax
mov eax, dword [ebx + 0x70]
test eax, eax
jle 0x440f7e
mov dword [ecx + 0x1c], eax
mov eax, dword [ebx + 0x74]
test eax, eax
jle 0x440f88
mov dword [ecx + 0x20], eax
mov eax, dword [ebx + 0x78]
test eax, eax
jle 0x441e50
mov dword [ecx + 0x24], eax
jmp 0x441e50
cmp word [ebp - 0x18], 1
jne 0x441e50
cmp byte [ebx + 0xb7], 0
jne 0x442022
and dword [ebp - 0x50], 0
xor eax, eax
lea edi, [ebp - 0x4c]
stosd dword es:[edi], eax
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x50]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_ScreenToClient]
push dword [ebp - 0x4c]
mov ecx, ebx
push dword [ebp - 0x50]
call fcn.004406f9
mov dword [ebp - 0x10], eax
test eax, eax
je 0x441e50
mov ecx, eax
mov eax, dword [ecx]
call dword [eax + 0x14]
test al, 2
je 0x441e50
xor eax, eax
push 7
pop ecx
lea edi, [ebp + 0xa8]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp + 0xc0], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp + 0xb0], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 0xa4], 0x17
mov dword [ebp + 0xbc], esi
mov dword [ebp + 0xb4], eax
call fcn.0043ed6c
mov word [ebp + 0xba], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x10]
lea edx, [ebp + 0xa4]
mov dword [ebp + 0xac], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x120]
jmp 0x442022
cmp dword [ebx + 0x23c], 0
jne 0x44107d
push 0
push 0
push dword [ebx]
mov byte [ebx + 0xb1], 1
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [ebp - 0x3c]
mov dword [eax], 1
jmp 0x442022
and dword [ebp - 0x38], 0
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x34]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x64]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebx + 0x68]
mov dword [ebp - 0x28], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x58]
mov dword [ebp - 0x30], eax
test ecx, ecx
je 0x4410cb
lea edx, [ebp - 0x38]
mov dword [ebp - 0x38], 0xa
mov dword [ebp - 0x34], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x120]
mov ecx, dword [ebx + 0x5c]
test ecx, ecx
je 0x4410e8
lea edx, [ebp - 0x38]
mov dword [ebp - 0x38], 0xe
mov dword [ebp - 0x34], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x120]
push 0
mov ecx, ebx
call fcn.0044096c
push 4
push dword [ebx]
call dword [sym.imp.USER32.dll_GetWindow]
test eax, eax
je 0x441e50
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x441e50
xor eax, eax
xor esi, esi
mov dword [ebp - 0x68], esi
lea edi, [ebp - 0x64]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push esi
lea eax, [ebp - 0x68]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_GetUpdateRect]
test eax, eax
je 0x442022
cmp dword [ebx + 0x50], esi
jne 0x441171
push 0x3c
lea eax, [ebp + 0x88]
push esi
push eax
mov dword [ebp + 0x84], esi
call fcn.0049d740
add esp, 0xc
lea eax, [ebp + 0x84]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_BeginPaint]
lea eax, [ebp + 0x84]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x442022
cmp byte [ebx + 0xb1], 0
je 0x44129a
xor eax, eax
mov dword [ebp - 0x28], esi
lea edi, [ebp - 0x24]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebx]
mov byte [ebx + 0xb1], 0
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x44129a
mov ecx, dword [ebx + 0x50]
call fcn.00448281
mov ecx, dword [ebx + 0x50]
test al, al
mov eax, dword [ecx]
je 0x441212
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x28]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x34]
mov eax, dword [ebx + 0xc]
mov esi, dword [sym.imp.GDI32.dll_DeleteDC]
test eax, eax
je 0x4411de
push eax
call esi
mov eax, dword [ebx + 0x10]
xor edi, edi
cmp eax, edi
je 0x4411ea
push eax
call esi
mov eax, dword [ebx + 0x14]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
cmp eax, edi
je 0x4411fa
push eax
call esi
mov eax, dword [ebx + 0x18]
cmp eax, edi
je 0x441204
push eax
call esi
mov dword [ebx + 0xc], edi
mov dword [ebx + 0x10], edi
mov dword [ebx + 0x14], edi
mov dword [ebx + 0x18], edi
jmp 0x441264
push reloc.WS2_32.dll_accept
push esi
push 0x43fdeb
call dword [eax + 0x114]
cmp eax, esi
jmp 0x44125f
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
mov dword [ebp - 0x3c], eax
call dword [eax + 0x30]
mov ecx, dword [ebp - 0x10]
sub esp, 0x10
mov esi, eax
mov eax, dword [ebp - 0x3c]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x34]
mov ecx, dword [ebx + 0x50]
mov eax, dword [ecx]
push reloc.WS2_32.dll_accept
push 0
push 0x43fdeb
call dword [eax + 0x114]
test eax, eax
mov dword [ebp - 0x10], eax
jne 0x441227
lea eax, [ebx + 0xb0]
xor esi, esi
cmp byte [eax], 0
je 0x441286
push esi
push esi
push esi
push str.windowinit
push dword [ebx + 0x50]
mov ecx, ebx
mov byte [eax], 0
call fcn.0044039e
push esi
push esi
push esi
push str.windowresized
push dword [ebx + 0x50]
mov ecx, ebx
call fcn.0044039e
xor esi, esi
cmp byte [ebx + 0xb2], 0
je 0x4412ac
push 1
mov ecx, ebx
call fcn.00440b02
cmp byte [ebx + 0xb3], 0
je 0x4412f7
cmp dword [ebx + 0x14], esi
jne 0x4412f7
xor eax, eax
mov dword [ebp - 0x58], esi
lea edi, [ebp - 0x54]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x58]
push eax
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebx + 0x14], eax
push 0x3c
lea eax, [ebp + 0xc8]
push esi
push eax
mov dword [ebp + 0xc4], esi
call fcn.0049d740
add esp, 0xc
lea eax, [ebp + 0xc4]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_BeginPaint]
cmp byte [ebx + 0xb3], 0
je 0x441556
push dword [ebx + 0x14]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebx + 0xc]
call esi
push dword [ebx + 0xc]
mov dword [ebp - 0x44], eax
call dword [sym.imp.GDI32.dll_SaveDC]
cmp byte [ebx + 0xb4], 0
mov dword [ebp - 0x3c], eax
mov edi, 0xcc0020
je 0x441459
cmp byte [ebx + 0xb5], 0
je 0x44137b
push edi
push dword [ebp + 0xd0]
push dword [ebp + 0xcc]
push dword [ebp + 0xc4]
jmp 0x44142a
mov eax, dword [ebx + 0x18]
test eax, eax
jne 0x441414
and dword [ebp - 0x58], eax
lea edi, [ebp - 0x54]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebx + 0x10], eax
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x58]
push eax
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
push dword [ebx + 0x10]
mov dword [ebx + 0x18], eax
call esi
mov eax, dword [ebp + 0xd8]
sub eax, dword [ebp + 0xd0]
push 0xcc0020
push dword [ebp + 0xd0]
push dword [ebp + 0xcc]
push dword [ebp + 0xc4]
push eax
mov eax, dword [ebp + 0xd4]
sub eax, dword [ebp + 0xcc]
push eax
push dword [ebp + 0xd0]
push dword [ebp + 0xcc]
push dword [ebx + 0x10]
call dword [sym.imp.GDI32.dll_BitBlt]
mov edi, 0xcc0020
jmp 0x44141a
push eax
push dword [ebx + 0x10]
call esi
push edi
push dword [ebp + 0xd0]
push dword [ebp + 0xcc]
push dword [ebx + 0x10]
mov eax, dword [ebp + 0xd8]
sub eax, dword [ebp + 0xd0]
push eax
mov eax, dword [ebp + 0xd4]
sub eax, dword [ebp + 0xcc]
push eax
push dword [ebp + 0xd0]
push dword [ebp + 0xcc]
push dword [ebx + 0xc]
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [ebx + 0x50]
mov eax, dword [ecx]
lea edx, [ebp + 0xcc]
push edx
push dword [ebx + 0xc]
call dword [eax + 0x130]
and dword [ebp - 0x10], 0
lea ecx, [ebx + 0xec]
call fcn.0045a40c
test eax, eax
jle 0x4414b6
push dword [ebp - 0x10]
lea ecx, [ebx + 0xec]
call fcn.00442e6c
mov edx, dword [eax]
lea ecx, [ebp + 0xcc]
push ecx
push dword [ebx + 0xc]
mov ecx, eax
call dword [edx + 0x148]
inc dword [ebp - 0x10]
lea ecx, [ebx + 0xec]
call fcn.0045a40c
cmp dword [ebp - 0x10], eax
jl 0x441481
push dword [ebp - 0x3c]
push dword [ebx + 0xc]
call dword [sym.imp.GDI32.dll_RestoreDC]
mov eax, dword [ebp + 0xd8]
sub eax, dword [ebp + 0xd0]
push edi
push dword [ebp + 0xd0]
push dword [ebp + 0xcc]
push dword [ebx + 0xc]
push eax
mov eax, dword [ebp + 0xd4]
sub eax, dword [ebp + 0xcc]
push eax
push dword [ebp + 0xd0]
push dword [ebp + 0xcc]
push dword [ebp + 0xc4]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x44]
push dword [ebx + 0xc]
call esi
cmp byte [ebx + 0x4c], 0
je 0x441589
push dword [0x558980]
push dword [ebp + 0xc4]
call esi
push 5
mov edi, eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebp + 0xc4]
call esi
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push dword [ebp + 0xc4]
call dword [sym.imp.GDI32.dll_Rectangle]
push edi
push dword [ebp + 0xc4]
call esi
jmp 0x441589
push dword [ebp + 0xc4]
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x50]
lea edx, [ebp + 0xcc]
push edx
push dword [ebp + 0xc4]
mov esi, eax
mov eax, dword [ecx]
call dword [eax + 0x130]
push esi
push dword [ebp + 0xc4]
call dword [sym.imp.GDI32.dll_RestoreDC]
lea eax, [ebp + 0xc4]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_EndPaint]
cmp byte [ebx + 0xb1], 0
je 0x442022
push 0
push 0
push dword [ebx]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x442022
mov edx, dword [ebx + 0x54]
test edx, edx
je 0x4415e9
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x34]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x38], 0x16
mov dword [ebp - 0x34], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x54]
lea edx, [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x120]
mov ebx, dword [ebx + 0x50]
test ebx, ebx
je 0x442022
mov ecx, ebx
call fcn.00448288
jmp 0x442022
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x442022
push eax
push esi
push 0x204e
push dword [eax]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
jmp 0x442022
sub edi, 0x7b
je 0x4417ea
sub edi, 0x85
je 0x441793
dec edi
je 0x44173e
dec edi
je 0x4416ff
sub edi, 0xf
je 0x4416e4
dec edi
dec edi
jne 0x441e50
and dword [ebp - 0x10], edi
lea edi, [ebx + 0xc8]
mov ecx, edi
call fcn.0045a40c
test eax, eax
jle 0x441e50
push dword [ebp - 0x10]
mov ecx, edi
call fcn.00442e6c
mov ecx, dword [eax + 8]
mov dword [ebp - 0x3c], eax
cmp ecx, dword [ebx]
jne 0x441692
movzx ecx, si
cmp dword [eax + 0xc], ecx
jne 0x441692
cmp byte [eax + 0x10], 0
je 0x4416a6
inc dword [ebp - 0x10]
mov ecx, edi
call fcn.0045a40c
cmp dword [ebp - 0x10], eax
jl 0x441670
jmp 0x441e50
mov esi, dword [ebp - 0x3c]
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x34]
rep stosd dword es:[edi], eax
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [ebp - 0x38], 0x18
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi]
mov dword [ebp - 0x30], eax
mov eax, dword [ecx]
lea edx, [ebp - 0x38]
push edx
call dword [eax + 0x120]
jmp 0x441e50
cmp dword [ebp - 0x18], 0
je 0x441e50
push dword [ebp - 0x18]
push esi
push 0x2111
push dword [ebp - 0x18]
jmp 0x441614
cmp dword [ebx + 0x54], 0
je 0x441e50
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x34]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x64]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebx + 0x68]
mov dword [ebp - 0x38], 5
mov word [ebp - 0x24], si
mov dword [ebp - 0x28], eax
call fcn.0043ed6c
mov word [ebp - 0x22], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x54]
jmp 0x4416d0
cmp dword [ebx + 0x60], 0
je 0x441e50
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x34]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x64]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebx + 0x68]
mov dword [ebp - 0x38], 4
mov word [ebp - 0x24], si
mov dword [ebp - 0x28], eax
call fcn.0043ed6c
mov word [ebp - 0x22], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x60]
lea edx, [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x120]
and dword [ebx + 0x60], 0
jmp 0x441e50
cmp dword [ebx + 0x54], 0
je 0x441e50
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x34]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x64]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebx + 0x68]
mov dword [ebp - 0x38], 3
mov word [ebp - 0x24], si
mov dword [ebp - 0x28], eax
call fcn.0043ed6c
mov word [ebp - 0x22], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x54]
lea edx, [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x120]
mov eax, dword [ebx + 0x54]
mov dword [ebx + 0x60], eax
jmp 0x441e50
mov eax, dword [ebp - 0x18]
movsx ecx, ax
shr eax, 0x10
cwde
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x14]
push eax
push dword [ebx]
mov dword [ebp - 0x14], ecx
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [ebx + 0x5c], 0
mov eax, dword [ebp - 0x14]
mov dword [ebx + 0x64], eax
mov eax, dword [ebp - 0x10]
mov dword [ebx + 0x68], eax
je 0x441e50
mov ecx, ebx
call fcn.0043f4ee
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x34]
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x5c]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x38], 0x11
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x1c], eax
jmp 0x4419e7
mov eax, 0x20a
cmp edi, eax
ja 0x441cc2
je 0x441c08
mov eax, edi
sub eax, 0x138
je 0x441bee
sub eax, 0xc8
je 0x441aab
dec eax
je 0x441a0c
dec eax
je 0x441991
dec eax
je 0x441903
dec eax
jne 0x441e50
push dword [ebx]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0x18]
movsx eax, word [ebp - 0x18]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebx + 0x68], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x40], eax
mov dword [ebx + 0x64], eax
call fcn.004406f9
mov dword [ebp - 0x10], eax
test eax, eax
je 0x441e50
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x441e50
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x104]
mov ecx, ebx
call fcn.0043f4da
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x34]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], 0xf
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], eax
jmp 0x44195c
push dword [ebx]
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebp - 0x18]
movsx ecx, ax
shr eax, 0x10
cwde
push eax
mov dword [ebp - 0x40], ecx
mov dword [ebx + 0x64], ecx
push ecx
mov ecx, ebx
mov dword [ebp - 0x3c], eax
mov dword [ebx + 0x68], eax
call fcn.004406f9
mov dword [ebp - 0x10], eax
test eax, eax
je 0x441e50
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x441e50
mov ecx, ebx
call fcn.0043f4da
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x34]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x38], 0x10
mov eax, dword [ebp - 0x40]
mov edi, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x28], eax
mov word [ebp - 0x22], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x120]
mov dword [ebx + 0x5c], edi
jmp 0x441e50
mov ecx, dword [ebp - 0x18]
movsx eax, word [ebp - 0x18]
shr ecx, 0x10
cmp dword [ebx + 0x5c], 0
movsx ecx, cx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebx + 0x64], eax
mov dword [ebx + 0x68], ecx
je 0x441e50
mov ecx, ebx
call fcn.0043f4ee
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x34]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x5c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x38], 0xe
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x28], eax
mov word [ebp - 0x22], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x5c]
lea edx, [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x120]
and dword [ebx + 0x5c], 0
jmp 0x441e50
push dword [ebx]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0x18]
movsx eax, word [ebp - 0x18]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebx + 0x68], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x40], eax
mov dword [ebx + 0x64], eax
call fcn.004406f9
mov dword [ebp - 0x10], eax
test eax, eax
je 0x441e50
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x441e50
mov ecx, dword [ebp - 0x10]
mov dword [ebx + 0x5c], ecx
mov eax, dword [ecx]
call dword [eax + 0x104]
mov ecx, ebx
call fcn.0043f4da
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x34]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x18]
mov edi, dword [ebp - 0x10]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x38], 0xd
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x28], eax
mov word [ebp - 0x22], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
jmp 0x4416d9
cmp byte [ebx + 0xb6], 0
jne 0x441b01
xor eax, eax
lea edi, [ebp - 0x64]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebx]
push 3
mov dword [ebp - 0x60], eax
mov eax, dword [ebx + 0x1c]
pop ecx
mov dword [ebp - 0x68], 0x10
mov dword [ebp - 0x64], ecx
test eax, eax
jne 0x441ade
mov dword [ebp - 0x5c], 0x190
jmp 0x441af0
push 0
push ecx
push 0x415
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.COMCTL32.dll__TrackMouseEvent]
mov byte [ebx + 0xb6], 1
mov eax, dword [ebp - 0x18]
movsx esi, ax
shr eax, 0x10
cwde
push eax
push esi
mov ecx, ebx
mov dword [ebp - 0x3c], eax
mov dword [ebx + 0x64], esi
mov dword [ebx + 0x68], eax
call fcn.004406f9
mov dword [ebp - 0x10], eax
test eax, eax
je 0x441b33
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x441e50
and dword [ebp - 0x38], 0
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x34]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x58]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x10], ecx
je 0x441b92
test ecx, ecx
je 0x441b92
lea edx, [ebp - 0x38]
mov dword [ebp - 0x38], 0xa
mov dword [ebp - 0x34], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x120]
mov eax, dword [ebx + 0x1c]
and dword [ebx + 0x58], 0
test eax, eax
je 0x441b92
lea ecx, [ebx + 0x20]
push ecx
push 0
push 0x411
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, dword [ebp - 0x10]
cmp esi, dword [ebx + 0x58]
je 0x441bb9
test esi, esi
je 0x441bb9
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], 0xb
mov dword [ebp - 0x34], esi
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x120]
mov dword [ebx + 0x58], esi
mov ecx, dword [ebx + 0x5c]
test ecx, ecx
je 0x441bcf
mov dword [ebp - 0x38], 9
mov dword [ebp - 0x34], ecx
jmp 0x4416d3
test esi, esi
je 0x441e50
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], 9
mov dword [ebp - 0x34], esi
mov eax, dword [esi]
push ecx
mov ecx, esi
jmp 0x4416d9
cmp dword [ebp - 0x18], 0
je 0x441e50
push dword [ebp - 0x18]
add edi, 0x2000
push esi
push edi
jmp 0x4416f7
movsx eax, word [ebp - 0x18]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x18]
shr eax, 0x10
cwde
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
push ecx
mov dword [ebx + 0x68], ecx
push eax
mov ecx, ebx
mov dword [ebx + 0x64], eax
call fcn.004406f9
mov dword [ebp - 0x10], eax
test eax, eax
je 0x441e50
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x441e50
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x34]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x34], eax
xor eax, eax
shr esi, 0x10
test si, si
setl al
mov dword [ebp - 0x38], 0x12
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
call fcn.0043ed6c
mov word [ebp - 0x22], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x10]
lea edx, [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x120]
movzx eax, word [ebx + 0x68]
movzx ecx, word [ebx + 0x64]
shl eax, 0x10
or eax, ecx
push eax
push 0
push 0x200
push dword [ebx]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x441e50
sub edi, 0x2a1
je 0x441e26
dec edi
dec edi
je 0x441dee
sub edi, 0x75
je 0x441d3a
sub edi, 6
je 0x441d29
sub edi, 0x7ce3
jne 0x441e50
lea esi, [ebx + 0xf8]
mov ecx, esi
call fcn.0045a40c
test eax, eax
jle 0x441d1d
push edi
mov ecx, esi
call fcn.00442e6c
test eax, eax
je 0x441d11
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx]
mov ecx, esi
inc edi
call fcn.0045a40c
cmp edi, eax
jl 0x441cfd
mov ecx, esi
call fcn.00442cc6
jmp 0x441e50
lea eax, [ebx + 0x23c]
push eax
call fcn.0043fe9a
jmp 0x441eef
lea eax, [ebp - 0x28]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_GetClientRect]
push esi
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x50]
lea edx, [ebp - 0x28]
push edx
mov dword [ebp - 0x44], eax
mov eax, dword [ecx]
push esi
call dword [eax + 0x130]
test byte [ebp - 0x18], 0x10
je 0x441de2
push 5
push dword [ebx]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x10], eax
test eax, eax
je 0x441de2
mov eax, dword [ebp - 0x18]
or eax, 2
mov dword [ebp - 0x3c], eax
and dword [ebp - 0x68], 0
xor eax, eax
lea edi, [ebp - 0x64]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x68]
push eax
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea eax, [ebp - 0x68]
push eax
push dword [ebx]
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [ebp - 0x64]
push 0
neg eax
push eax
mov eax, dword [ebp - 0x68]
neg eax
push eax
push esi
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
push dword [ebp - 0x3c]
push esi
push 0x317
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_SendMessageW]
push 2
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x441d80
push dword [ebp - 0x44]
push esi
call dword [sym.imp.GDI32.dll_RestoreDC]
jmp 0x441e50
mov eax, dword [ebx + 0x1c]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x441e09
lea ecx, [ebx + 0x20]
push ecx
push 0
push 0x411
push eax
call esi
lea edi, [ebx + 0xb6]
cmp byte [edi], 0
je 0x441e21
push 0xffffffffffffffff
push 0
push 0x200
push dword [ebx]
call esi
mov byte [edi], 0
jmp 0x441e50
mov eax, dword [ebp - 0x18]
movsx ecx, ax
shr eax, 0x10
cwde
push eax
mov dword [ebp - 0x14], ecx
push ecx
mov ecx, ebx
mov byte [ebx + 0xb6], 0
mov dword [ebp - 0x10], eax
call fcn.004406f9
mov esi, eax
test esi, esi
jne 0x441ef5
lea edi, [ebx + 0x240]
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea esi, [ebx + 0x104]
push 0
mov ecx, esi
call fcn.00442e53
push 0
mov ecx, esi
mov dword [ebp - 0x44], eax
call fcn.00442df8
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edi, dword [ebp - 0x44]
test edi, edi
je 0x440e07
lea esi, [edi + 0x108]
mov eax, dword [esi]
test eax, eax
je 0x441ead
lea ecx, [eax + 0x38]
call fcn.00449897
test al, al
je 0x441ead
mov ecx, dword [esi]
push edi
add ecx, 0x38
call fcn.004498f3
and dword [ebp - 0x10], 0
lea esi, [ebx + 0xbc]
mov ecx, esi
call fcn.0045a40c
test eax, eax
jle 0x441ee2
push dword [ebp - 0x10]
mov ecx, esi
call fcn.00442e6c
mov edx, dword [eax]
push edi
mov ecx, eax
call dword [edx]
inc dword [ebp - 0x10]
mov ecx, esi
call fcn.0045a40c
cmp dword [ebp - 0x10], eax
jl 0x441ec2
mov ecx, edi
call fcn.0043edbf
push edi
call fcn.0049a490
pop ecx
jmp 0x441e50
mov edx, dword [ebx + 0x58]
test edx, edx
je 0x441f34
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x34]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x38], 0xc
mov dword [ebp - 0x34], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x58]
lea edx, [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x120]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0xac]
test al, al
je 0x442022
mov eax, dword [esi]
lea ecx, [ebp]
push ecx
mov ecx, esi
call dword [eax + 0xa8]
and dword [ebp - 4], 0
lea ecx, [ebp]
call fcn.00442fbc
test al, al
jne 0x442016
push 0x2c
lea edi, [ebx + 0x20]
push 0
push edi
call fcn.0049d740
mov eax, dword [ebx]
mov dword [edi], 0x2c
mov dword [ebx + 0x24], 1
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], eax
mov eax, dword [0x558984]
add esp, 0xc
lea ecx, [ebp]
mov dword [ebx + 0x40], eax
call fcn.00442fe7
mov dword [ebx + 0x44], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x30]
cmp dword [ebx + 0x1c], 0
lea edi, [ebx + 0x30]
mov esi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x441ff5
xor edi, edi
push edi
push dword [0x558984]
mov eax, connect
push edi
push dword [ebx]
push eax
push eax
push eax
push eax
push reloc.WS2_32.dll_closesocket
push edi
push str.tooltips_class32
push edi
call dword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [ebx + 0x20]
push ecx
push edi
push 0x432
push eax
mov dword [ebx + 0x1c], eax
call esi
jmp 0x441ff7
xor edi, edi
lea eax, [ebx + 0x20]
push eax
push edi
push 0x436
push dword [ebx + 0x1c]
call esi
lea eax, [ebx + 0x20]
push eax
push 1
push 0x411
push dword [ebx + 0x1c]
call esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp]
call fcn.00442e9d
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x104]
xor ecx, ebp
call fcn.0049a49b
add ebp, 0x108
leave
ret 0x10