Function at 0x448080
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x534cfd
mov eax, dword fs:[0]
push eax
sub esp, 0x538
push esi
push edi
push ecx
lea edi, [ebp - 0x544]
mov ecx, 0x14e
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov eax, dword [0x56eab8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
cmp dword [eax], 0
jne 0x4480d3
xor al, al
jmp 0x44a6b5
mov dword [ebp - 0x18], 0
push 0
mov ecx, dword [ebp - 0x14]
add ecx, 0xfc
call fcn.00450040
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x4481d7
push 0
mov ecx, dword [ebp - 0x14]
add ecx, 0xfc
call fcn.0044ff10
mov ecx, dword [ebp - 0x18]
cmp dword [ecx + 0x44], 0
je 0x448137
mov edx, dword [ebp - 0x18]
mov ecx, dword [edx + 0x44]
add ecx, 0x34
call fcn.00491ec0
movzx eax, al
test eax, eax
je 0x448137
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x18]
mov ecx, dword [edx + 0x44]
add ecx, 0x34
call fcn.004921a0
mov dword [ebp - 0x1c], 0
jmp 0x448149
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0xb4
call fcn.00450000
cmp dword [ebp - 0x1c], eax
jge 0x448195
mov ecx, dword [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0xb4
call fcn.00450080
mov dword [ebp - 0x528], eax
mov esi, esp
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x528]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x528]
mov eax, dword [edx]
call eax
cmp esi, esp
call fcn.004ad900
jmp 0x448140
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x510], ecx
mov edx, dword [ebp - 0x510]
mov dword [ebp - 0x50c], edx
cmp dword [ebp - 0x50c], 0
je 0x4481c8
push 1
mov ecx, dword [ebp - 0x50c]
call fcn.0044ee20
mov dword [ebp - 0x52c], eax
jmp 0x4481d2
mov dword [ebp - 0x52c], 0
jmp 0x4480da
mov dword [ebp - 0x20], 0
jmp 0x4481e9
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0xd8
call fcn.00450000
cmp dword [ebp - 0x20], eax
jge 0x44825f
mov byte [ebp - 0x25], 0
mov ecx, dword [ebp - 0x20]
push ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0xd8
call fcn.00450080
mov dword [ebp - 0x530], eax
mov esi, esp
lea edx, [ebp - 0x25]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x530]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x530]
mov eax, dword [edx]
call eax
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x30], eax
movzx ecx, byte [ebp - 0x25]
test ecx, ecx
je 0x44825d
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 0x30]
mov dword [edx], eax
mov al, 1
jmp 0x44a6b5
jmp 0x4481e0
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x534], ecx
cmp dword [ebp - 0x534], 0x111
ja 0x4482b7
cmp dword [ebp - 0x534], 0x111
je 0x44a511
mov edx, dword [ebp - 0x534]
sub edx, 5
mov dword [ebp - 0x534], edx
cmp dword [ebp - 0x534], 0xfd
ja case.default.0x448349
mov eax, dword [ebp - 0x534]
movzx ecx, byte [eax + 0x44a990]
jmp dword [ecx*4 + 0x44a960]
cmp dword [ebp - 0x534], 0x200
ja 0x448308
cmp dword [ebp - 0x534], 0x200
je 0x449563
cmp dword [ebp - 0x534], 0x113
je 0x4490ee
cmp dword [ebp - 0x534], 0x133
je 0x44a55b
cmp dword [ebp - 0x534], 0x138
je 0x44a55b
jmp case.default.0x448349
cmp dword [ebp - 0x534], 0x20a
ja 0x448350
cmp dword [ebp - 0x534], 0x20a
je 0x449f57
mov edx, dword [ebp - 0x534]
sub edx, 0x201
mov dword [ebp - 0x534], edx
cmp dword [ebp - 0x534], 3
ja case.default.0x448349
mov eax, dword [ebp - 0x534]
jmp dword [eax*4 + 0x44aa90]
cmp dword [ebp - 0x534], 0x318
ja 0x448391
cmp dword [ebp - 0x534], 0x318
je 0x448e3d
cmp dword [ebp - 0x534], 0x2a1
je 0x449227
cmp dword [ebp - 0x534], 0x2a3
je 0x4494fb
jmp case.default.0x448349
cmp dword [ebp - 0x534], 0x8001
je 0x4483a2
jmp case.default.0x448349
mov dword [ebp - 0x34], 0
jmp 0x4483b4
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0xf0
call fcn.00450000
cmp dword [ebp - 0x34], eax
jge 0x448425
mov edx, dword [ebp - 0x34]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0xf0
call fcn.00450080
mov dword [ebp - 0x518], eax
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x514], 0
je 0x448419
mov esi, esp
push 1
mov ecx, dword [ebp - 0x514]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x514]
mov eax, dword [edx]
call eax
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x538], eax
jmp 0x448423
mov dword [ebp - 0x538], 0
jmp 0x4483ab
mov ecx, dword [ebp - 0x14]
add ecx, 0xf0
call fcn.0044fc10
jmp case.default.0x448349
mov dword [ebp - 0x58], 0
xor ecx, ecx
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x60]
mov ecx, dword [edx + 0x64]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], ecx
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x50], eax
mov edx, dword [ebp - 0x14]
cmp dword [edx + 0x54], 0
je 0x4484b5
mov dword [ebp - 0x58], 0xa
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x54]
mov dword [ebp - 0x54], ecx
mov esi, esp
lea edx, [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x54]
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x54]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x58], 0
je 0x4484f1
mov dword [ebp - 0x58], 0xe
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x58]
mov dword [ebp - 0x54], eax
mov esi, esp
lea ecx, [ebp - 0x58]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x58]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0x58]
mov edx, dword [eax]
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
push 0
mov ecx, dword [ebp - 0x14]
call fcn.0044b3f0
mov esi, esp
push 4
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
push edx
call dword [sym.imp.USER32.dll_GetWindow]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
je 0x44852e
mov esi, esp
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
cmp esi, esp
call fcn.004ad900
jmp case.default.0x448349
mov ecx, dword [ebp + 0x14]
mov dword [ecx], 1
mov al, 1
jmp 0x44a6b5
mov dword [ebp - 0x74], 0
xor edx, edx
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x68], edx
mov esi, esp
push 0
lea eax, [ebp - 0x74]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
push edx
call dword [sym.imp.USER32.dll_GetUpdateRect]
cmp esi, esp
call fcn.004ad900
test eax, eax
jne 0x44857b
mov al, 1
jmp 0x44a6b5
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x4c], 0
jne 0x4485e0
mov dword [ebp - 0xbc], 0
push 0x3c
push 0
lea ecx, [ebp - 0xb8]
push ecx
call fcn.004b1690
add esp, 0xc
mov esi, esp
lea edx, [ebp - 0xbc]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.USER32.dll_BeginPaint]
cmp esi, esp
call fcn.004ad900
mov esi, esp
lea edx, [ebp - 0xbc]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.USER32.dll_EndPaint]
cmp esi, esp
call fcn.004ad900
mov al, 1
jmp 0x44a6b5
mov edx, dword [ebp - 0x14]
movzx eax, byte [edx + 0xad]
test eax, eax
je 0x448827
mov ecx, dword [ebp - 0x14]
mov byte [ecx + 0xad], 0
mov dword [ebp - 0xd4], 0
xor edx, edx
mov dword [ebp - 0xd0], edx
mov dword [ebp - 0xcc], edx
mov dword [ebp - 0xc8], edx
mov esi, esp
lea eax, [ebp - 0xd4]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
cmp esi, esp
call fcn.004ad900
mov esi, esp
lea eax, [ebp - 0xd4]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
cmp esi, esp
call fcn.004ad900
test eax, eax
jne 0x448827
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0x4c]
call fcn.0046d900
movzx edx, al
test edx, edx
je 0x448759
mov esi, esp
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xd4]
mov dword [eax], ecx
mov edx, dword [ebp - 0xd0]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xcc]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xc8]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x4c]
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x4c]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 8], 0
je 0x4486cf
mov esi, esp
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0xc], 0
je 0x4486ee
mov esi, esp
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x10], 0
je 0x44870d
mov esi, esp
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x10]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x14], 0
je 0x44872c
mov esi, esp
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x14]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 8], 0
mov edx, dword [ebp - 0x14]
mov dword [edx + 0xc], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x10], 0
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x14], 0
jmp 0x4487f5
mov dword [ebp - 0xdc], 0
mov esi, esp
push SysReAllocString
push 0
push 0x44eaf0
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x4c]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0x4c]
mov edx, dword [eax]
mov eax, dword [edx + 0xf4]
call eax
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
je 0x4487f5
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ecx]
mov esi, esp
mov ecx, dword [ebp - 0xdc]
mov eax, dword [edx + 0x30]
call eax
cmp esi, esp
call fcn.004ad900
mov esi, esp
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xdc]
mov eax, dword [edx + 0x34]
call eax
cmp esi, esp
call fcn.004ad900
jmp 0x448763
mov ecx, dword [ebp - 0x14]
movzx edx, byte [ecx + 0xac]
test edx, edx
je 0x448827
mov eax, dword [ebp - 0x14]
mov byte [eax + 0xac], 0
push 0
push 0
push 0
push str.windowinit
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x4c]
push edx
mov ecx, dword [ebp - 0x14]
call fcn.0044c3b0
mov eax, dword [ebp - 0x14]
movzx ecx, byte [eax + 0xae]
test ecx, ecx
je 0x44883f
push 1
mov ecx, dword [ebp - 0x14]
call fcn.0044bd80
mov edx, dword [ebp - 0x14]
movzx eax, byte [edx + 0xaf]
test eax, eax
je 0x44893e
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x10], 0
jne 0x44893e
mov dword [ebp - 0xf0], 0
xor edx, edx
mov dword [ebp - 0xec], edx
mov dword [ebp - 0xe8], edx
mov dword [ebp - 0xe4], edx
mov esi, esp
lea eax, [ebp - 0xf0]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
cmp esi, esp
call fcn.004ad900
mov esi, esp
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
cmp esi, esp
call fcn.004ad900
mov edx, dword [ebp - 0x14]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xe4]
sub eax, dword [ebp - 0xec]
mov esi, esp
push eax
mov ecx, dword [ebp - 0xe8]
sub ecx, dword [ebp - 0xf0]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x10], eax
mov edx, dword [ebp - 0x14]
cmp dword [edx + 8], 0
jne 0x448914
push str.m_hDcOffscreen
push 0
push 0x27e
push 0x54236c
push 2
call fcn.004b1fa0
add esp, 0x14
cmp eax, 1
jne 0x448914
int3
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x10], 0
jne 0x44893e
push str.m_hbmpOffscreen
push 0
push 0x27f
push 0x5423a8
push 2
call fcn.004b1fa0
add esp, 0x14
cmp eax, 1
jne 0x44893e
int3
mov dword [ebp - 0x138], 0
push 0x3c
push 0
lea eax, [ebp - 0x134]
push eax
call fcn.004b1690
add esp, 0xc
mov esi, esp
lea ecx, [ebp - 0x138]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_BeginPaint]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
movzx edx, byte [ecx + 0xaf]
test edx, edx
je 0x448d8d
mov esi, esp
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x140], eax
mov esi, esp
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 8]
push edx
call dword [sym.imp.GDI32.dll_SaveDC]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x14]
movzx ecx, byte [eax + 0xb0]
test ecx, ecx
je 0x448bb3
mov edx, dword [ebp - 0x14]
cmp dword [edx + 0x14], 0
jne 0x448b3e
mov dword [ebp - 0x158], 0
xor eax, eax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], eax
mov esi, esp
lea ecx, [ebp - 0x158]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
cmp esi, esp
call fcn.004ad900
mov esi, esp
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x14c]
sub edx, dword [ebp - 0x154]
mov esi, esp
push edx
mov eax, dword [ebp - 0x150]
sub eax, dword [ebp - 0x158]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x14], eax
mov edx, dword [ebp - 0x14]
cmp dword [edx + 0xc], 0
jne 0x448a9d
push str.m_hDcBackground
push 0
push 0x28e
push 0x5423e4
push 2
call fcn.004b1fa0
add esp, 0x14
cmp eax, 1
jne 0x448a9d
int3
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x14], 0
jne 0x448ac7
push str.m_hbmpBackground
push 0
push 0x28f
push 0x542424
push 2
call fcn.004b1fa0
add esp, 0x14
cmp eax, 1
jne 0x448ac7
int3
mov esi, esp
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.004ad900
mov esi, esp
push 0xcc0020
mov ecx, dword [ebp - 0x12c]
push ecx
mov edx, dword [ebp - 0x130]
push edx
mov eax, dword [ebp - 0x138]
push eax
mov ecx, dword [ebp - 0x124]
sub ecx, dword [ebp - 0x12c]
push ecx
mov edx, dword [ebp - 0x128]
sub edx, dword [ebp - 0x130]
push edx
mov eax, dword [ebp - 0x12c]
push eax
mov ecx, dword [ebp - 0x130]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xc]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
cmp esi, esp
call fcn.004ad900
jmp 0x448b5b
mov esi, esp
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x14]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.004ad900
mov esi, esp
push 0xcc0020
mov edx, dword [ebp - 0x12c]
push edx
mov eax, dword [ebp - 0x130]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp - 0x124]
sub eax, dword [ebp - 0x12c]
push eax
mov ecx, dword [ebp - 0x128]
sub ecx, dword [ebp - 0x130]
push ecx
mov edx, dword [ebp - 0x12c]
push edx
mov eax, dword [ebp - 0x130]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 8]
push edx
call dword [sym.imp.GDI32.dll_BitBlt]
cmp esi, esp
call fcn.004ad900
mov esi, esp
lea eax, [ebp - 0x130]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x4c]
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x4c]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x110]
call eax
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x160], 0
jmp 0x448bfd
mov ecx, dword [ebp - 0x160]
add ecx, 1
mov dword [ebp - 0x160], ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0xe4
call fcn.00450000
cmp dword [ebp - 0x160], eax
jge 0x448c5d
mov edx, dword [ebp - 0x160]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0xe4
call fcn.00450080
mov dword [ebp - 0x164], eax
mov esi, esp
lea eax, [ebp - 0x130]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x164]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x164]
mov eax, dword [edx + 0x128]
call eax
cmp esi, esp
call fcn.004ad900
jmp 0x448bee
mov esi, esp
mov ecx, dword [ebp - 0x144]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
push eax
call dword [sym.imp.GDI32.dll_RestoreDC]
cmp esi, esp
call fcn.004ad900
mov esi, esp
push 0xcc0020
mov ecx, dword [ebp - 0x12c]
push ecx
mov edx, dword [ebp - 0x130]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp - 0x124]
sub edx, dword [ebp - 0x12c]
push edx
mov eax, dword [ebp - 0x128]
sub eax, dword [ebp - 0x130]
push eax
mov ecx, dword [ebp - 0x12c]
push ecx
mov edx, dword [ebp - 0x130]
push edx
mov eax, dword [ebp - 0x138]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
cmp esi, esp
call fcn.004ad900
mov esi, esp
mov ecx, dword [ebp - 0x140]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
movzx edx, byte [ecx + 0x48]
test edx, edx
je 0x448d8b
mov esi, esp
mov eax, dword [0x5733c0]
push eax
mov ecx, dword [ebp - 0x138]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x168], eax
mov esi, esp
push 5
call dword [sym.imp.GDI32.dll_GetStockObject]
cmp esi, esp
call fcn.004ad900
mov esi, esp
push eax
mov edx, dword [ebp - 0x138]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.004ad900
mov esi, esp
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x6c]
push ecx
mov edx, dword [ebp - 0x70]
push edx
mov eax, dword [ebp - 0x74]
push eax
mov ecx, dword [ebp - 0x138]
push ecx
call dword [sym.imp.GDI32.dll_Rectangle]
cmp esi, esp
call fcn.004ad900
mov esi, esp
mov edx, dword [ebp - 0x168]
push edx
mov eax, dword [ebp - 0x138]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.004ad900
jmp 0x448df3
mov esi, esp
mov ecx, dword [ebp - 0x138]
push ecx
call dword [sym.imp.GDI32.dll_SaveDC]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x16c], eax
mov esi, esp
lea edx, [ebp - 0x130]
push edx
mov eax, dword [ebp - 0x138]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x4c]
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x4c]
mov edx, dword [edx]
mov eax, dword [edx + 0x110]
call eax
cmp esi, esp
call fcn.004ad900
mov esi, esp
mov ecx, dword [ebp - 0x16c]
push ecx
mov edx, dword [ebp - 0x138]
push edx
call dword [sym.imp.GDI32.dll_RestoreDC]
cmp esi, esp
call fcn.004ad900
mov esi, esp
lea eax, [ebp - 0x138]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
push edx
call dword [sym.imp.USER32.dll_EndPaint]
cmp esi, esp
call fcn.004ad900
mov eax, dword [ebp - 0x14]
movzx ecx, byte [eax + 0xad]
test ecx, ecx
je 0x448e36
mov esi, esp
push 0
push 0
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
cmp esi, esp
call fcn.004ad900
mov al, 1
jmp 0x44a6b5
mov esi, esp
lea ecx, [ebp - 0x180]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x188], ecx
mov esi, esp
mov edx, dword [ebp - 0x188]
push edx
call dword [sym.imp.GDI32.dll_SaveDC]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x18c], eax
mov esi, esp
lea eax, [ebp - 0x180]
push eax
mov ecx, dword [ebp - 0x188]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x4c]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0x4c]
mov edx, dword [eax]
mov eax, dword [edx + 0x110]
call eax
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp + 0x10]
and ecx, 0x10
je 0x448faf
mov esi, esp
push 5
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_GetWindow]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
je 0x448faf
mov dword [ebp - 0x1a4], 0
xor ecx, ecx
mov dword [ebp - 0x1a0], ecx
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x198], ecx
mov esi, esp
lea edx, [ebp - 0x1a4]
push edx
mov eax, dword [ebp - 0x190]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
cmp esi, esp
call fcn.004ad900
mov esi, esp
push 2
lea ecx, [ebp - 0x1a4]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
push eax
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
cmp esi, esp
call fcn.004ad900
mov esi, esp
push 0
mov ecx, dword [ebp - 0x1a0]
neg ecx
push ecx
mov edx, dword [ebp - 0x1a4]
neg edx
push edx
mov eax, dword [ebp - 0x188]
push eax
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp + 0x10]
or ecx, 2
mov esi, esp
push ecx
mov edx, dword [ebp + 0xc]
push edx
push 0x317
mov eax, dword [ebp - 0x190]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.004ad900
mov esi, esp
push 2
mov ecx, dword [ebp - 0x190]
push ecx
call dword [sym.imp.USER32.dll_GetWindow]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x190], eax
jmp 0x448ed4
mov esi, esp
mov edx, dword [ebp - 0x18c]
push edx
mov eax, dword [ebp - 0x188]
push eax
call dword [sym.imp.GDI32.dll_RestoreDC]
cmp esi, esp
call fcn.004ad900
jmp case.default.0x448349
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x1ac], ecx
mov edx, dword [ebp - 0x14]
cmp dword [edx + 0x68], 0
jle 0x448ff2
mov eax, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x68]
mov dword [eax + 0x18], edx
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x6c], 0
jle 0x44900a
mov ecx, dword [ebp - 0x1ac]
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x6c]
mov dword [ecx + 0x1c], eax
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x70], 0
jle 0x449022
mov edx, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x70]
mov dword [edx + 0x20], ecx
mov edx, dword [ebp - 0x14]
cmp dword [edx + 0x74], 0
jle 0x44903a
mov eax, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x74]
mov dword [eax + 0x24], edx
jmp case.default.0x448349
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x50], 0
je 0x4490d3
mov dword [ebp - 0x1d0], 0
xor ecx, ecx
mov dword [ebp - 0x1cc], ecx
mov dword [ebp - 0x1c8], ecx
mov dword [ebp - 0x1c4], ecx
mov dword [ebp - 0x1c0], ecx
mov dword [ebp - 0x1bc], ecx
mov dword [ebp - 0x1b8], ecx
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x1d0], 0x16
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x50]
mov dword [ebp - 0x1cc], eax
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x1c8], eax
mov esi, esp
lea ecx, [ebp - 0x1d0]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x50]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0x50]
mov edx, dword [eax]
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x4c], 0
je 0x4490e7
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + 0x4c]
call fcn.0046d920
mov al, 1
jmp 0x44a6b5
mov dword [ebp - 0x1d8], 0
jmp 0x449109
mov eax, dword [ebp - 0x1d8]
add eax, 1
mov dword [ebp - 0x1d8], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0xc0
call fcn.00450000
cmp dword [ebp - 0x1d8], eax
jge 0x449222
mov ecx, dword [ebp - 0x1d8]
push ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0xc0
call fcn.00450080
mov dword [ebp - 0x1dc], eax
mov edx, dword [ebp - 0x1dc]
mov eax, dword [ebp - 0x14]
mov ecx, dword [edx + 8]
cmp ecx, dword [eax]
jne 0x44921d
mov edx, dword [ebp + 0xc]
and edx, 0xffff
movzx eax, dx
mov ecx, dword [ebp - 0x1dc]
cmp dword [ecx + 0xc], eax
jne 0x44921d
mov edx, dword [ebp - 0x1dc]
movzx eax, byte [edx + 0x10]
test eax, eax
jne 0x44921d
mov dword [ebp - 0x200], 0
xor ecx, ecx
mov dword [ebp - 0x1fc], ecx
mov dword [ebp - 0x1f8], ecx
mov dword [ebp - 0x1f4], ecx
mov dword [ebp - 0x1f0], ecx
mov dword [ebp - 0x1ec], ecx
mov dword [ebp - 0x1e8], ecx
mov dword [ebp - 0x1e4], ecx
mov dword [ebp - 0x200], 0x18
mov edx, dword [ebp - 0x1dc]
mov eax, dword [edx]
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x1e8], edx
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x1f8], eax
mov esi, esp
lea eax, [ebp - 0x200]
push eax
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1dc]
mov ecx, dword [eax]
mov edx, dword [edx]
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
jmp 0x449222
jmp 0x4490fa
jmp case.default.0x448349
mov ecx, dword [ebp - 0x14]
mov byte [ecx + 0xb1], 0
mov edx, dword [ebp + 0x10]
and edx, 0xffff
movsx eax, dx
mov dword [ebp - 0x210], eax
mov ecx, dword [ebp + 0x10]
shr ecx, 0x10
and ecx, 0xffff
movsx edx, cx
mov dword [ebp - 0x20c], edx
mov eax, dword [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0x210]
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.0044e480
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0
jne 0x449282
jmp case.default.0x448349
mov edx, dword [ebp - 0x14]
cmp dword [edx + 0x54], 0
je 0x449330
mov dword [ebp - 0x23c], 0
xor eax, eax
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x220], eax
mov ecx, dword [ebp - 0x210]
mov dword [ebp - 0x230], ecx
mov edx, dword [ebp - 0x20c]
mov dword [ebp - 0x22c], edx
mov dword [ebp - 0x23c], 0xc
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x54]
mov dword [ebp - 0x238], ecx
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x234], eax
mov esi, esp
lea edx, [ebp - 0x23c]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x54]
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x54]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
mov esi, esp
lea ecx, [ebp - 0x288]
push ecx
mov edx, dword [ebp - 0x218]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x218]
mov edx, dword [eax + 0x98]
call edx
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x288]
call fcn.00450870
movzx eax, al
test eax, eax
je 0x449393
mov byte [ebp - 0x519], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x288]
call fcn.004505e0
mov al, byte [ebp - 0x519]
jmp 0x44a6b5
push 0x2c
push 0
mov ecx, dword [ebp - 0x14]
add ecx, 0x1c
push ecx
call fcn.004b1690
add esp, 0xc
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x1c], 0x2c
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x20], 1
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov dword [ecx + 0x24], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov dword [ecx + 0x28], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [0x5733c4]
mov dword [ecx + 0x3c], edx
lea ecx, [ebp - 0x288]
call fcn.00450650
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x40], eax
mov edx, dword [ebp - 0x218]
mov eax, dword [edx]
mov esi, esp
mov ecx, dword [ebp - 0x218]
mov edx, dword [eax + 0x30]
call edx
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
add ecx, 0x2c
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x18], 0
jne 0x44949a
mov esi, esp
push 0
mov edx, dword [0x5733c4]
push edx
push 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push ecx
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push reloc.WS2_32.dll_closesocket
push 0
push str.tooltips_class32
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
cmp esi, esp
call fcn.004ad900
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x18], eax
mov eax, dword [ebp - 0x14]
add eax, 0x1c
mov esi, esp
push eax
push 0
push 0x404
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x18]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.004ad900
mov eax, dword [ebp - 0x14]
add eax, 0x1c
mov esi, esp
push eax
push 0
push 0x409
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x18]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.004ad900
mov eax, dword [ebp - 0x14]
add eax, 0x1c
mov esi, esp
push eax
push 1
push 0x411
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x18]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x288]
call fcn.004505e0
mov al, 1
jmp 0x44a6b5
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0
je 0x449528
mov ecx, dword [ebp - 0x14]
add ecx, 0x1c
mov esi, esp
push ecx
push 0
push 0x411
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x18]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
movzx edx, byte [ecx + 0xb1]
test edx, edx
je 0x449554
mov esi, esp
push 0xffffffffffffffff
push 0
push 0x200
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.004ad900
mov edx, dword [ebp - 0x14]
mov byte [edx + 0xb1], 0
jmp case.default.0x448349
mov eax, dword [ebp - 0x14]
movzx ecx, byte [eax + 0xb1]
test ecx, ecx
jne 0x449618
mov dword [ebp - 0x2a0], 0
xor edx, edx
mov dword [ebp - 0x29c], edx
mov dword [ebp - 0x298], edx
mov dword [ebp - 0x294], edx
mov dword [ebp - 0x2a0], 0x10
mov dword [ebp - 0x29c], 3
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov dword [ebp - 0x298], ecx
mov edx, dword [ebp - 0x14]
cmp dword [edx + 0x18], 0
jne 0x4495c7
mov dword [ebp - 0x53c], 0x190
jmp 0x4495ec
mov esi, esp
push 0
push 3
push 0x415
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x18]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x53c], eax
mov edx, dword [ebp - 0x53c]
mov dword [ebp - 0x294], edx
mov esi, esp
lea eax, [ebp - 0x2a0]
push eax
call dword [sym.imp.COMCTL32.dll__TrackMouseEvent]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
mov byte [ecx + 0xb1], 1
mov edx, dword [ebp + 0x10]
and edx, 0xffff
movsx eax, dx
mov dword [ebp - 0x2b0], eax
mov ecx, dword [ebp + 0x10]
shr ecx, 0x10
and ecx, 0xffff
movsx edx, cx
mov dword [ebp - 0x2ac], edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2b0]
mov dword [eax + 0x60], ecx
mov edx, dword [ebp - 0x2ac]
mov dword [eax + 0x64], edx
mov eax, dword [ebp - 0x2ac]
push eax
mov ecx, dword [ebp - 0x2b0]
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.0044e480
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0
je 0x44969f
mov edx, dword [ebp - 0x2b8]
mov eax, dword [edx]
mov esi, esp
mov ecx, dword [ebp - 0x2b8]
mov edx, dword [eax + 0x1c]
call edx
cmp esi, esp
call fcn.004ad900
cmp eax, dword [ebp - 0x14]
je 0x44969f
jmp case.default.0x448349
mov dword [ebp - 0x2dc], 0
xor eax, eax
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2c0], eax
mov ecx, dword [ebp - 0x2b0]
mov dword [ebp - 0x2d0], ecx
mov edx, dword [ebp - 0x2ac]
mov dword [ebp - 0x2cc], edx
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2b8]
cmp ecx, dword [eax + 0x54]
je 0x44978e
mov edx, dword [ebp - 0x14]
cmp dword [edx + 0x54], 0
je 0x44978e
mov dword [ebp - 0x2dc], 0xa
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x54]
mov dword [ebp - 0x2d8], ecx
mov esi, esp
lea edx, [ebp - 0x2dc]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x54]
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x54]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x54], 0
mov edx, dword [ebp - 0x14]
cmp dword [edx + 0x18], 0
je 0x44978e
mov eax, dword [ebp - 0x14]
add eax, 0x1c
mov esi, esp
push eax
push 0
push 0x411
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x18]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.004ad900
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2b8]
cmp ecx, dword [eax + 0x54]
je 0x4497ed
cmp dword [ebp - 0x2b8], 0
je 0x4497ed
mov dword [ebp - 0x2dc], 0xb
mov edx, dword [ebp - 0x2b8]
mov dword [ebp - 0x2d8], edx
mov esi, esp
lea eax, [ebp - 0x2dc]
push eax
mov ecx, dword [ebp - 0x2b8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2b8]
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x2b8]
mov dword [ecx + 0x54], edx
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x58], 0
je 0x449834
mov dword [ebp - 0x2dc], 9
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x58]
mov dword [ebp - 0x2d8], edx
mov esi, esp
lea eax, [ebp - 0x2dc]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x58]
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x58]
mov edx, dword [edx]
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
jmp 0x449879
cmp dword [ebp - 0x2b8], 0
je 0x449879
mov dword [ebp - 0x2dc], 9
mov ecx, dword [ebp - 0x2b8]
mov dword [ebp - 0x2d8], ecx
mov esi, esp
lea edx, [ebp - 0x2dc]
push edx
mov eax, dword [ebp - 0x2b8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2b8]
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
jmp case.default.0x448349
mov esi, esp
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
push edx
call dword [sym.imp.USER32.dll_SetFocus]
cmp esi, esp
call fcn.004ad900
mov eax, dword [ebp + 0x10]
and eax, 0xffff
movsx ecx, ax
mov dword [ebp - 0x2ec], ecx
mov edx, dword [ebp + 0x10]
shr edx, 0x10
and edx, 0xffff
movsx eax, dx
mov dword [ebp - 0x2e8], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x2ec]
mov dword [ecx + 0x60], edx
mov eax, dword [ebp - 0x2e8]
mov dword [ecx + 0x64], eax
mov ecx, dword [ebp - 0x2e8]
push ecx
mov edx, dword [ebp - 0x2ec]
push edx
mov ecx, dword [ebp - 0x14]
call fcn.0044e480
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0
jne 0x4498f8
jmp case.default.0x448349
mov eax, dword [ebp - 0x2f4]
mov edx, dword [eax]
mov esi, esp
mov ecx, dword [ebp - 0x2f4]
mov eax, dword [edx + 0x1c]
call eax
cmp esi, esp
call fcn.004ad900
cmp eax, dword [ebp - 0x14]
je 0x44991e
jmp case.default.0x448349
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x2f4]
mov dword [ecx + 0x58], edx
mov eax, dword [ebp - 0x2f4]
mov edx, dword [eax]
mov esi, esp
mov ecx, dword [ebp - 0x2f4]
mov eax, dword [edx + 0xe8]
call eax
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
call fcn.0044bce0
mov dword [ebp - 0x318], 0
xor ecx, ecx
mov dword [ebp - 0x314], ecx
mov dword [ebp - 0x310], ecx
mov dword [ebp - 0x30c], ecx
mov dword [ebp - 0x308], ecx
mov dword [ebp - 0x304], ecx
mov dword [ebp - 0x300], ecx
mov dword [ebp - 0x2fc], ecx
mov dword [ebp - 0x318], 0xd
mov edx, dword [ebp - 0x2f4]
mov dword [ebp - 0x314], edx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x300], eax
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x2fc], ecx
mov edx, dword [ebp - 0x2ec]
mov dword [ebp - 0x30c], edx
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x308], eax
mov cx, word [ebp + 0xc]
mov word [ebp - 0x302], cx
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x310], eax
mov esi, esp
lea edx, [ebp - 0x318]
push edx
mov eax, dword [ebp - 0x2f4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2f4]
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
jmp case.default.0x448349
mov esi, esp
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
push edx
call dword [sym.imp.USER32.dll_SetFocus]
cmp esi, esp
call fcn.004ad900
mov eax, dword [ebp + 0x10]
and eax, 0xffff
movsx ecx, ax
mov dword [ebp - 0x328], ecx
mov edx, dword [ebp + 0x10]
shr edx, 0x10
and edx, 0xffff
movsx eax, dx
mov dword [ebp - 0x324], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x328]
mov dword [ecx + 0x60], edx
mov eax, dword [ebp - 0x324]
mov dword [ecx + 0x64], eax
mov ecx, dword [ebp - 0x324]
push ecx
mov edx, dword [ebp - 0x328]
push edx
mov ecx, dword [ebp - 0x14]
call fcn.0044e480
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0
jne 0x449a8c
jmp case.default.0x448349
mov eax, dword [ebp - 0x330]
mov edx, dword [eax]
mov esi, esp
mov ecx, dword [ebp - 0x330]
mov eax, dword [edx + 0x1c]
call eax
cmp esi, esp
call fcn.004ad900
cmp eax, dword [ebp - 0x14]
je 0x449ab2
jmp case.default.0x448349
mov ecx, dword [ebp - 0x14]
call fcn.0044bce0
mov dword [ebp - 0x354], 0
xor ecx, ecx
mov dword [ebp - 0x350], ecx
mov dword [ebp - 0x34c], ecx
mov dword [ebp - 0x348], ecx
mov dword [ebp - 0x344], ecx
mov dword [ebp - 0x340], ecx
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x338], ecx
mov dword [ebp - 0x354], 0x10
mov edx, dword [ebp - 0x330]
mov dword [ebp - 0x350], edx
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x348], eax
mov ecx, dword [ebp - 0x324]
mov dword [ebp - 0x344], ecx
mov dx, word [ebp + 0xc]
mov word [ebp - 0x33e], dx
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x34c], eax
mov esi, esp
lea eax, [ebp - 0x354]
push eax
mov ecx, dword [ebp - 0x330]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x330]
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x330]
mov dword [ecx + 0x58], edx
jmp case.default.0x448349
mov eax, dword [ebp + 0x10]
and eax, 0xffff
movsx ecx, ax
mov dword [ebp - 0x364], ecx
mov edx, dword [ebp + 0x10]
shr edx, 0x10
and edx, 0xffff
movsx eax, dx
mov dword [ebp - 0x360], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x364]
mov dword [ecx + 0x60], edx
mov eax, dword [ebp - 0x360]
mov dword [ecx + 0x64], eax
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x58], 0
jne 0x449bbe
jmp case.default.0x448349
mov ecx, dword [ebp - 0x14]
call fcn.0044bd20
mov dword [ebp - 0x38c], 0
xor edx, edx
mov dword [ebp - 0x388], edx
mov dword [ebp - 0x384], edx
mov dword [ebp - 0x380], edx
mov dword [ebp - 0x37c], edx
mov dword [ebp - 0x378], edx
mov dword [ebp - 0x374], edx
mov dword [ebp - 0x370], edx
mov dword [ebp - 0x38c], 0xe
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x58]
mov dword [ebp - 0x388], ecx
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x374], edx
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x370], eax
mov ecx, dword [ebp - 0x364]
mov dword [ebp - 0x380], ecx
mov edx, dword [ebp - 0x360]
mov dword [ebp - 0x37c], edx
mov ax, word [ebp + 0xc]
mov word [ebp - 0x376], ax
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x384], eax
mov esi, esp
lea ecx, [ebp - 0x38c]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x58]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0x58]
mov edx, dword [eax]
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x58], 0
jmp case.default.0x448349
mov esi, esp
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp + 0x10]
and ecx, 0xffff
movsx edx, cx
mov dword [ebp - 0x39c], edx
mov eax, dword [ebp + 0x10]
shr eax, 0x10
and eax, 0xffff
movsx ecx, ax
mov dword [ebp - 0x398], ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x39c]
mov dword [edx + 0x60], eax
mov ecx, dword [ebp - 0x398]
mov dword [edx + 0x64], ecx
mov edx, dword [ebp - 0x398]
push edx
mov eax, dword [ebp - 0x39c]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0044e480
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 0
jne 0x449d0b
jmp case.default.0x448349
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov esi, esp
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x1c]
call eax
cmp esi, esp
call fcn.004ad900
cmp eax, dword [ebp - 0x14]
je 0x449d31
jmp case.default.0x448349
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ecx]
mov esi, esp
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0xe8]
call eax
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
call fcn.0044bce0
mov dword [ebp - 0x3c8], 0
xor ecx, ecx
mov dword [ebp - 0x3c4], ecx
mov dword [ebp - 0x3c0], ecx
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x3b8], ecx
mov dword [ebp - 0x3b4], ecx
mov dword [ebp - 0x3b0], ecx
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 0x3c8], 0xf
mov edx, dword [ebp - 0x3a4]
mov dword [ebp - 0x3c4], edx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x3b0], eax
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x3ac], ecx
mov edx, dword [ebp - 0x39c]
mov dword [ebp - 0x3bc], edx
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x3b8], eax
mov cx, word [ebp + 0xc]
mov word [ebp - 0x3b2], cx
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x3c0], eax
mov esi, esp
lea edx, [ebp - 0x3c8]
push edx
mov eax, dword [ebp - 0x3a4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3a4]
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3a4]
mov dword [ecx + 0x58], edx
jmp case.default.0x448349
mov eax, dword [ebp + 0x10]
and eax, 0xffff
movsx ecx, ax
mov dword [ebp - 0x3d8], ecx
mov edx, dword [ebp + 0x10]
shr edx, 0x10
and edx, 0xffff
movsx eax, dx
mov dword [ebp - 0x3d4], eax
mov esi, esp
lea ecx, [ebp - 0x3d8]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3d8]
mov dword [ecx + 0x60], edx
mov eax, dword [ebp - 0x3d4]
mov dword [ecx + 0x64], eax
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x58], 0
jne 0x449e8a
jmp case.default.0x448349
mov ecx, dword [ebp - 0x14]
call fcn.0044bd20
mov dword [ebp - 0x400], 0
xor edx, edx
mov dword [ebp - 0x3fc], edx
mov dword [ebp - 0x3f8], edx
mov dword [ebp - 0x3f4], edx
mov dword [ebp - 0x3f0], edx
mov dword [ebp - 0x3ec], edx
mov dword [ebp - 0x3e8], edx
mov dword [ebp - 0x3e4], edx
mov dword [ebp - 0x400], 0x11
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x58]
mov dword [ebp - 0x3fc], ecx
mov edx, dword [ebp - 0x3d8]
mov dword [ebp - 0x3f4], edx
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x3f0], eax
mov cx, word [ebp + 0xc]
mov word [ebp - 0x3ea], cx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x58]
mov dword [ebp - 0x3e4], eax
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x3f8], eax
mov esi, esp
lea ecx, [ebp - 0x400]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x58]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0x58]
mov edx, dword [eax]
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x58], 0
jmp case.default.0x448349
mov edx, dword [ebp + 0x10]
and edx, 0xffff
movsx eax, dx
mov dword [ebp - 0x410], eax
mov ecx, dword [ebp + 0x10]
shr ecx, 0x10
and ecx, 0xffff
movsx edx, cx
mov dword [ebp - 0x40c], edx
mov esi, esp
lea eax, [ebp - 0x410]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
push edx
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp esi, esp
call fcn.004ad900
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x410]
mov dword [eax + 0x60], ecx
mov edx, dword [ebp - 0x40c]
mov dword [eax + 0x64], edx
mov eax, dword [ebp - 0x40c]
push eax
mov ecx, dword [ebp - 0x410]
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.0044e480
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 0
jne 0x449fd9
jmp case.default.0x448349
mov edx, dword [ebp - 0x418]
mov eax, dword [edx]
mov esi, esp
mov ecx, dword [ebp - 0x418]
mov edx, dword [eax + 0x1c]
call edx
cmp esi, esp
call fcn.004ad900
cmp eax, dword [ebp - 0x14]
je 0x449fff
jmp case.default.0x448349
mov eax, dword [ebp + 0xc]
shr eax, 0x10
and eax, 0xffff
movsx ecx, ax
mov dword [ebp - 0x41c], ecx
mov dword [ebp - 0x440], 0
xor edx, edx
mov dword [ebp - 0x43c], edx
mov dword [ebp - 0x438], edx
mov dword [ebp - 0x434], edx
mov dword [ebp - 0x430], edx
mov dword [ebp - 0x42c], edx
mov dword [ebp - 0x428], edx
mov dword [ebp - 0x424], edx
mov dword [ebp - 0x440], 0x12
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x43c], eax
xor ecx, ecx
cmp dword [ebp - 0x41c], 0
setl cl
and ecx, 0xffff
movzx edx, cx
mov dword [ebp - 0x428], edx
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x424], eax
call fcn.00447fb0
mov word [ebp - 0x42a], ax
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x438], eax
mov esi, esp
lea ecx, [ebp - 0x440]
push ecx
mov edx, dword [ebp - 0x418]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x418]
mov edx, dword [eax + 0x100]
call edx
cmp esi, esp
call fcn.004ad900
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x60]
and ecx, 0xffff
movzx edx, cx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x64]
and ecx, 0xffff
movzx eax, cx
shl eax, 0x10
or edx, eax
mov esi, esp
push edx
push 0
push 0x200
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.004ad900
jmp case.default.0x448349
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x50], 0
jne 0x44a11d
jmp case.default.0x448349
mov dword [ebp - 0x468], 0
xor ecx, ecx
mov dword [ebp - 0x464], ecx
mov dword [ebp - 0x460], ecx
mov dword [ebp - 0x45c], ecx
mov dword [ebp - 0x458], ecx
mov dword [ebp - 0x454], ecx
mov dword [ebp - 0x450], ecx
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0x468], 5
mov dl, byte [ebp + 0xc]
mov byte [ebp - 0x454], dl
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x60]
mov edx, dword [eax + 0x64]
mov dword [ebp - 0x45c], ecx
mov dword [ebp - 0x458], edx
call fcn.00447fb0
mov word [ebp - 0x452], ax
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x460], eax
mov esi, esp
lea eax, [ebp - 0x468]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x50]
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x50]
mov edx, dword [edx]
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
jmp case.default.0x448349
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x50], 0
jne 0x44a1d5
jmp case.default.0x448349
mov dword [ebp - 0x490], 0
xor edx, edx
mov dword [ebp - 0x48c], edx
mov dword [ebp - 0x488], edx
mov dword [ebp - 0x484], edx
mov dword [ebp - 0x480], edx
mov dword [ebp - 0x47c], edx
mov dword [ebp - 0x478], edx
mov dword [ebp - 0x474], edx
mov dword [ebp - 0x490], 3
mov al, byte [ebp + 0xc]
mov byte [ebp - 0x47c], al
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x60]
mov eax, dword [ecx + 0x64]
mov dword [ebp - 0x484], edx
mov dword [ebp - 0x480], eax
call fcn.00447fb0
mov word [ebp - 0x47a], ax
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x488], eax
mov esi, esp
lea ecx, [ebp - 0x490]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x50]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0x50]
mov edx, dword [eax]
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x50]
mov dword [ecx + 0x5c], eax
jmp case.default.0x448349
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x5c], 0
jne 0x44a299
jmp case.default.0x448349
mov dword [ebp - 0x4b8], 0
xor edx, edx
mov dword [ebp - 0x4b4], edx
mov dword [ebp - 0x4b0], edx
mov dword [ebp - 0x4ac], edx
mov dword [ebp - 0x4a8], edx
mov dword [ebp - 0x4a4], edx
mov dword [ebp - 0x4a0], edx
mov dword [ebp - 0x49c], edx
mov dword [ebp - 0x4b8], 4
mov al, byte [ebp + 0xc]
mov byte [ebp - 0x4a4], al
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x60]
mov eax, dword [ecx + 0x64]
mov dword [ebp - 0x4ac], edx
mov dword [ebp - 0x4a8], eax
call fcn.00447fb0
mov word [ebp - 0x4a2], ax
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x4b0], eax
mov esi, esp
lea ecx, [ebp - 0x4b8]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x5c]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0x5c]
mov edx, dword [eax]
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x5c], 0
jmp case.default.0x448349
mov edx, dword [ebp + 0x10]
and edx, 0xffff
movzx eax, dx
cmp eax, 1
je 0x44a363
jmp case.default.0x448349
mov ecx, dword [ebp - 0x14]
movzx edx, byte [ecx + 0xb2]
test edx, edx
je 0x44a378
mov al, 1
jmp 0x44a6b5
mov dword [ebp - 0x4c8], 0
xor eax, eax
mov dword [ebp - 0x4c4], eax
mov esi, esp
lea ecx, [ebp - 0x4c8]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
cmp esi, esp
call fcn.004ad900
mov esi, esp
lea edx, [ebp - 0x4c8]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp esi, esp
call fcn.004ad900
mov edx, dword [ebp - 0x4c4]
push edx
mov eax, dword [ebp - 0x4c8]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0044e480
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0
jne 0x44a3e6
jmp case.default.0x448349
mov ecx, dword [ebp - 0x4d0]
mov edx, dword [ecx]
mov esi, esp
mov ecx, dword [ebp - 0x4d0]
mov eax, dword [edx + 0x14]
call eax
cmp esi, esp
call fcn.004ad900
and eax, 2
jne 0x44a40c
jmp case.default.0x448349
mov dword [ebp - 0x4f4], 0
xor ecx, ecx
mov dword [ebp - 0x4f0], ecx
mov dword [ebp - 0x4ec], ecx
mov dword [ebp - 0x4e8], ecx
mov dword [ebp - 0x4e4], ecx
mov dword [ebp - 0x4e0], ecx
mov dword [ebp - 0x4dc], ecx
mov dword [ebp - 0x4d8], ecx
mov dword [ebp - 0x4f4], 0x17
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x4dc], edx
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4c8]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4c4]
mov dword [ebp - 0x4e4], edx
call fcn.00447fb0
mov word [ebp - 0x4de], ax
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp esi, esp
call fcn.004ad900
mov dword [ebp - 0x4ec], eax
mov esi, esp
lea eax, [ebp - 0x4f4]
push eax
mov ecx, dword [ebp - 0x4d0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4d0]
mov eax, dword [edx + 0x100]
call eax
cmp esi, esp
call fcn.004ad900
mov al, 1
jmp 0x44a6b5
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x4fc], ecx
cmp dword [ebp - 0x4fc], 0
je 0x44a505
mov esi, esp
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x2000
push ecx
mov edx, dword [ebp - 0x4fc]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
mov al, 1
jmp 0x44a6b5
cmp dword [ebp + 0x10], 0
jne 0x44a51c
jmp case.default.0x448349
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x500], edx
mov esi, esp
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x2000
push edx
mov eax, dword [ebp - 0x500]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
mov al, 1
jmp 0x44a6b5
cmp dword [ebp + 0x10], 0
jne 0x44a563
jmp case.default.0x448349
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x504], edx
mov esi, esp
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x2000
push edx
mov eax, dword [ebp - 0x504]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp esi, esp
call fcn.004ad900
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
mov al, 1
jmp 0x44a6b5
mov dword [ebp - 0x18], 0
push 0
mov ecx, dword [ebp - 0x14]
add ecx, 0xfc
call fcn.00450040
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x44a6b3
push 0
mov ecx, dword [ebp - 0x14]
add ecx, 0xfc
call fcn.0044ff10
mov edx, dword [ebp - 0x18]
cmp dword [edx + 0x44], 0
je 0x44a604
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x44]
add ecx, 0x34
call fcn.00491ec0
movzx ecx, al
test ecx, ecx
je 0x44a604
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x44]
add ecx, 0x34
call fcn.004921a0
mov dword [ebp - 0x508], 0
jmp 0x44a61f
mov ecx, dword [ebp - 0x508]
add ecx, 1
mov dword [ebp - 0x508], ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0xb4
call fcn.00450000
cmp dword [ebp - 0x508], eax
jge 0x44a671
mov edx, dword [ebp - 0x508]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0xb4
call fcn.00450080
mov dword [ebp - 0x540], eax
mov esi, esp
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x540]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x540]
mov eax, dword [edx]
call eax
cmp esi, esp
call fcn.004ad900
jmp 0x44a610
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x524], ecx
mov edx, dword [ebp - 0x524]
mov dword [ebp - 0x520], edx
cmp dword [ebp - 0x520], 0
je 0x44a6a4
push 1
mov ecx, dword [ebp - 0x520]
call fcn.0044ee20
mov dword [ebp - 0x544], eax
jmp 0x44a6ae
mov dword [ebp - 0x544], 0
jmp 0x44a5a7
xor al, al
push edx
mov ecx, ebp
push eax
lea edx, [0x44a6f0]
call fcn.004ad930
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004ad8f0
add esp, 0x544
cmp ebp, esp
call fcn.004ad900
mov esp, ebp
pop ebp
ret 0x10