Function at 0x43f43c
Capabilities:
Check for time delay via gettickcount
Check for unmoving mouse cursor

Disassembly:
push 0x1e4
mov eax, 0x4ff4ce
call fcn.004d998f
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov ebx, ecx
cmp dword [ebx + 0xac], 0
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1b0], esi
mov dword [ebp - 0x1c0], eax
je 0x441c41
and dword [ebp - 0x1c4], 0
lea ecx, [ebx + 0x4b8]
call fcn.004857bc
mov edi, dword [ebp + 8]
test eax, eax
jle 0x43f4dd
push dword [ebp - 0x1c4]
lea ecx, [ebx + 0x4b8]
mov byte [ebp - 0x1b5], 0
call fcn.0043a466
mov edx, dword [eax]
lea ecx, [ebp - 0x1b5]
push ecx
push dword [ebp - 0x1ac]
mov ecx, eax
push esi
push edi
call dword [edx]
cmp byte [ebp - 0x1b5], 0
jne 0x43f52c
inc dword [ebp - 0x1c4]
lea ecx, [ebx + 0x4b8]
call fcn.004857bc
cmp dword [ebp - 0x1c4], eax
jl 0x43f48e
cmp byte [ebx + 0x171], 0
push 2
pop ecx
je 0x43f5bc
mov eax, edi
sub eax, 0x83
je 0x43f5b1
sub eax, ecx
je 0x43f5b1
dec eax
jne 0x43f5bc
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x440641
test esi, esi
sete al
mov ecx, dword [ebp - 0x1c0]
mov dword [ecx], eax
jmp 0x43f595
mov ecx, dword [ebp - 0x1c0]
mov dword [ecx], eax
cmp edi, 0x7b
je 0x43f551
cmp edi, 0x1ff
jbe 0x43f595
cmp edi, 0x203
jbe 0x43f59c
cmp edi, 0x20a
jne 0x43f595
mov eax, dword [ebp - 0x1ac]
movsx ecx, ax
shr eax, 0x10
cwde
mov dword [ebp - 0x1b0], eax
lea eax, [ebp - 0x1b4]
push eax
push dword [ebx + 0xac]
mov dword [ebp - 0x1b4], ecx
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x1b4]
mov dword [ebx + 0x120], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebx + 0x124], eax
mov al, 1
jmp 0x441c43
mov eax, dword [ebp - 0x1ac]
movsx ecx, ax
shr eax, 0x10
cwde
mov dword [ebx + 0x120], ecx
jmp 0x43f58f
mov eax, dword [ebp - 0x1c0]
and dword [eax], 0
jmp 0x43f595
mov eax, 0x133
cmp edi, eax
ja 0x440a6f
je 0x441446
cmp edi, 0x24
ja 0x440641
je 0x44058b
sub edi, 5
je 0x440529
sub edi, ecx
je 0x4404e4
dec edi
je 0x4404cb
sub edi, 7
je 0x43f803
dec edi
je 0x43f720
sub edi, 4
je 0x43f70f
sub edi, 0xc
jne 0x441c41
cmp dword [ebx + 0x108], edi
je 0x441c41
cmp word [ebp - 0x1ac], 1
jne 0x441c41
cmp byte [ebx + 0x481], 0
jne 0x43f595
and dword [ebp - 0x1b4], edi
xor eax, eax
lea edi, [ebp - 0x1b0]
stosd dword es:[edi], eax
lea eax, [ebp - 0x1b4]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x1b4]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_ScreenToClient]
push dword [ebp - 0x1b0]
mov ecx, ebx
push dword [ebp - 0x1b4]
call fcn.0043e991
mov ebx, eax
test ebx, ebx
je 0x441c41
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x14]
test al, 2
je 0x441c41
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x138], 0x1a
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], eax
call fcn.0043afda
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ebx]
push ecx
mov ecx, ebx
call dword [eax + 0x140]
jmp 0x43f595
mov eax, dword [ebp - 0x1c0]
mov dword [eax], 1
jmp 0x43f595
xor eax, eax
push 7
xor esi, esi
pop ecx
mov dword [ebp - 0x138], esi
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x120]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebx + 0x124]
mov dword [ebp - 0x128], eax
call fcn.0043afda
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x110]
mov dword [ebp - 0x130], eax
cmp ecx, esi
je 0x43f78e
lea edx, [ebp - 0x138]
mov dword [ebp - 0x138], 0xa
mov dword [ebp - 0x134], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
mov ecx, dword [ebx + 0x114]
cmp ecx, esi
je 0x43f7b7
lea edx, [ebp - 0x138]
mov dword [ebp - 0x138], 0xe
mov dword [ebp - 0x134], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
push esi
mov ecx, ebx
call fcn.0043efa4
mov edi, dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetActiveWindow]
cmp eax, edi
jne 0x43f7e3
push 4
push edi
call dword [sym.imp.USER32.dll_GetWindow]
cmp eax, esi
je 0x43f7e3
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebx + 0xcc]
cmp eax, esi
je 0x441c41
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [ebx + 0xcc], esi
jmp 0x441c41
cmp dword [ebx + 0x108], 0
jne 0x43f86b
and dword [ebp - 0x158], 0
push 0x3c
lea eax, [ebp - 0x154]
push 0
push eax
call fcn.004d8c50
add esp, 0xc
lea eax, [ebp - 0x158]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_BeginPaint]
push 0xff000000
lea eax, [ebp - 0x150]
push eax
push dword [ebx + 0xb0]
call fcn.0045ecdb
add esp, 0xc
lea eax, [ebp - 0x158]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x43f595
xor eax, eax
xor esi, esi
mov dword [ebp - 0x40], esi
lea edi, [ebp - 0x3c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetClientRect]
xor eax, eax
mov dword [ebp - 0x30], esi
lea edi, [ebp - 0x2c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push esi
lea eax, [ebp - 0x30]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetUpdateRect]
test eax, eax
je 0x43f595
cmp byte [ebx + 0x16e], 0
je 0x43f8be
push 1
mov ecx, ebx
call fcn.0043f171
push 1
mov ecx, ebx
call fcn.0043ba3a
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x40]
push 1
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
mov byte [ebp - 0x1b5], 0
mov dword [ebp - 0x1d0], eax
call fcn.0043ba3a
cmp byte [ebx + 0x16d], 0
je 0x43fb06
lea eax, [ebp - 0x40]
push eax
mov byte [ebx + 0x16d], 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x43fb89
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x43fb89
mov ecx, dword [ebx + 0x108]
call fcn.004465ea
test al, al
je 0x43f9ec
mov eax, dword [ebx + 0xb4]
lea esi, [ebp - 0x40]
lea edi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
test eax, eax
je 0x43f955
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [ebx + 0xb8]
test eax, eax
je 0x43f966
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [ebx + 0xbc]
test eax, eax
je 0x43f977
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebx + 0xc4]
test eax, eax
je 0x43f988
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
xor eax, eax
mov dword [ebx + 0xb4], eax
mov dword [ebx + 0xb8], eax
mov dword [ebx + 0xbc], eax
mov dword [ebx + 0xc4], eax
cmp byte [ebx + 0x171], al
je 0x43f9ce
mov eax, dword [ebx + 0x174]
add dword [ebp - 0x20], eax
mov eax, dword [ebx + 0x178]
add dword [ebp - 0x1c], eax
mov eax, dword [ebx + 0x17c]
sub dword [ebp - 0x18], eax
mov eax, dword [ebx + 0x180]
sub dword [ebp - 0x14], eax
mov ecx, dword [ebx + 0x108]
mov eax, dword [ecx]
push 1
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x5c]
jmp 0x43fa98
lea edi, [ebx + 0x500]
mov ecx, edi
call fcn.0043a291
mov ecx, dword [ebx + 0x108]
mov eax, dword [ecx]
push reloc.OLEAUT32.dll_VariantCopy
push esi
push 0x43caa2
call dword [eax + 0x134]
mov ecx, edi
mov dword [ebp - 0x1c0], esi
call fcn.004857bc
test eax, eax
jle 0x43fa98
push dword [ebp - 0x1c0]
mov ecx, edi
call fcn.0043a466
mov edx, dword [eax]
mov ecx, eax
mov dword [ebp - 0x1c4], eax
call dword [edx + 0x12c]
mov ecx, dword [ebp - 0x1c4]
test al, al
mov eax, dword [ecx]
mov dword [ebp - 0x1bc], eax
jne 0x43fa57
call dword [eax + 0x58]
jmp 0x43fa61
lea edx, [ebp - 0x94]
push edx
call dword [eax + 0x50]
mov ecx, dword [ebp - 0x1c4]
push 1
sub esp, 0x10
mov esi, eax
mov eax, dword [ebp - 0x1bc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x5c]
inc dword [ebp - 0x1c0]
lea edi, [ebx + 0x500]
mov ecx, edi
call fcn.004857bc
cmp dword [ebp - 0x1c0], eax
jl 0x43fa23
cmp byte [ebx + 0x16c], 0
mov byte [ebp - 0x1b5], 1
je 0x43fb89
xor esi, esi
push esi
push esi
push esi
push str.windowinit
push dword [ebx + 0x108]
mov ecx, ebx
mov byte [ebx + 0x16c], 0
call fcn.0043ef04
cmp byte [ebx + 0x171], 0
je 0x43faf0
cmp byte [ebx + 0x184], 0
je 0x43faf0
mov ecx, ebx
call fcn.0043b56e
push esi
mov ecx, ebx
call fcn.0043ba3a
jmp 0x43f595
push dword [ebx + 0xac]
lea ecx, [ebx + 0x668]
call fcn.00461231
jmp 0x43fb89
cmp byte [ebx + 0x171], 0
je 0x43fbf7
cmp byte [ebx + 0x184], 0
je 0x43fb89
mov eax, dword [ebx + 0xc0]
lea esi, [ebp - 0x40]
lea edi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
test eax, eax
je 0x43fb4c
mov ecx, dword [ebp - 0x1d0]
imul ecx, dword [ebp - 0x1ac]
shl ecx, 2
push ecx
push 0
push eax
call fcn.004d8c50
add esp, 0xc
mov eax, dword [ebx + 0x174]
add dword [ebp - 0x20], eax
mov eax, dword [ebx + 0x178]
add dword [ebp - 0x1c], eax
mov eax, dword [ebx + 0x17c]
sub dword [ebp - 0x18], eax
mov eax, dword [ebx + 0x180]
sub dword [ebp - 0x14], eax
mov ecx, dword [ebx + 0x108]
mov eax, dword [ecx]
push 1
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x5c]
cmp byte [ebx + 0x171], 0
je 0x43fbf7
push 0xffffffffffffffec
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, eax
or ecx, 0x80000
cmp eax, ecx
je 0x43fbbb
push ecx
push 0xffffffffffffffec
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SetWindowLongW]
lea esi, [ebx + 0x188]
push esi
lea eax, [ebp - 0x30]
push eax
push eax
mov byte [ebx + 0x16f], 1
call dword [sym.imp.USER32.dll_UnionRect]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x28], eax
jle 0x43fbdf
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x24], eax
jle 0x43fbea
mov dword [ebp - 0x24], eax
push 0x10
push 0
push esi
call fcn.004d8c50
add esp, 0xc
cmp byte [ebx + 0x16f], 0
je 0x43fc42
cmp dword [ebx + 0xbc], 0
jne 0x43fc42
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebx + 0xb4], eax
lea eax, [ebx + 0xc0]
push eax
push dword [ebp - 0x1d0]
push dword [ebp - 0x1ac]
push dword [ebx + 0xb0]
call fcn.0045dbd5
add esp, 0x10
mov dword [ebx + 0xbc], eax
xor edi, edi
push 0x3c
lea eax, [ebp - 0x1a4]
push edi
push eax
mov dword [ebp - 0x1a8], edi
call fcn.004d8c50
add esp, 0xc
lea eax, [ebp - 0x1a8]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_BeginPaint]
cmp byte [ebx + 0x16f], 0
je 0x4403f5
push dword [ebx + 0xbc]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebx + 0xb4]
call esi
push dword [ebx + 0xb4]
mov dword [ebp - 0x1b0], eax
call dword [sym.imp.GDI32.dll_SaveDC]
cmp byte [ebx + 0x171], 0
mov dword [ebp - 0x1dc], eax
je 0x43fd0c
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
sub edx, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
cmp edx, eax
jge 0x43fd0c
mov ecx, edx
imul ecx, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1bc], eax
cmp eax, dword [ebp - 0x28]
jge 0x43fcfb
add eax, ecx
shl eax, 2
mov edi, dword [ebx + 0xc0]
and dword [eax + edi], 0
inc dword [ebp - 0x1bc]
mov edi, dword [ebp - 0x1bc]
add eax, 4
cmp edi, dword [ebp - 0x28]
jl 0x43fcdd
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x1ac]
inc edx
cmp edx, eax
jl 0x43fcca
mov ecx, dword [ebx + 0x108]
mov eax, dword [ecx]
push 0
lea edx, [ebp - 0x30]
push edx
push dword [ebx + 0xb4]
call dword [eax + 0x150]
cmp byte [ebx + 0x171], 0
je 0x43ff5f
and dword [ebp - 0x1c0], 0
lea edi, [ebx + 0x4d0]
mov ecx, edi
call fcn.004857bc
test eax, eax
jle 0x43ff5f
push dword [ebp - 0x1c0]
mov ecx, edi
call fcn.0043a466
push eax
mov dword [ebp - 0x1bc], eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x43fd90
push dword [ebp - 0x1c0]
mov ecx, edi
call fcn.0043a3e9
push dword [ebp - 0x1c0]
lea ecx, [ebx + 0x4dc]
call fcn.0043a3e9
jmp 0x43ff46
push dword [ebp - 0x1bc]
inc dword [ebp - 0x1c0]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x43ff46
push dword [ebp - 0x1bc]
lea eax, [ebp - 0x168]
push eax
mov ecx, ebx
call fcn.0043bbe7
and dword [ebp - 0x58], 0
xor eax, eax
lea edi, [ebp - 0x54]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x43ff46
push dword [ebx + 0xb4]
and dword [ebp - 0x1d4], 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edi, eax
lea eax, [ebp - 0x1d4]
push eax
mov eax, dword [ebp - 0x15c]
sub eax, dword [ebp - 0x164]
push eax
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0x168]
push eax
push edi
call fcn.0045dbd5
mov ecx, dword [ebp - 0x15c]
sub ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0x168]
imul eax, ecx
shl eax, 2
push eax
push 0
push dword [ebp - 0x1d4]
call fcn.004d8c50
add esp, 0x1c
push dword [ebp - 0x1d8]
push edi
call esi
push 0x35
push edi
push 0x317
push dword [ebp - 0x1bc]
mov dword [ebp - 0x1c8], eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x15c]
and dword [ebp - 0x1c4], 0
mov ecx, eax
sub ecx, dword [ebp - 0x164]
test ecx, ecx
jle 0x43fef4
mov ecx, dword [ebp - 0x160]
sub ecx, dword [ebp - 0x168]
xor edx, edx
test ecx, ecx
jle 0x43fede
mov eax, dword [ebp - 0x1c4]
imul eax, ecx
mov ecx, dword [ebp - 0x1d4]
add eax, edx
lea ecx, [ecx + eax*4]
mov eax, dword [ecx]
test eax, eax
je 0x43fec7
or eax, 0xff000000
mov dword [ecx], eax
mov ecx, dword [ebp - 0x160]
sub ecx, dword [ebp - 0x168]
inc edx
cmp edx, ecx
jl 0x43fea6
mov eax, dword [ebp - 0x15c]
inc dword [ebp - 0x1c4]
mov ecx, eax
sub ecx, dword [ebp - 0x164]
cmp dword [ebp - 0x1c4], ecx
jl 0x43fe94
mov ecx, dword [ebp - 0x160]
sub eax, dword [ebp - 0x164]
sub ecx, dword [ebp - 0x168]
push 0xcc0020
push 0
push 0
push edi
push eax
push ecx
push dword [ebp - 0x164]
push dword [ebp - 0x168]
push dword [ebx + 0xb4]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x1c8]
push edi
call esi
push dword [ebp - 0x1d8]
call dword [sym.imp.GDI32.dll_DeleteObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
lea edi, [ebx + 0x4d0]
mov ecx, edi
call fcn.004857bc
cmp dword [ebp - 0x1c0], eax
jl 0x43fd4f
and dword [ebp - 0x1c4], 0
lea ecx, [ebx + 0x4c4]
call fcn.004857bc
test eax, eax
jle 0x43ffb3
push dword [ebp - 0x1c4]
lea ecx, [ebx + 0x4c4]
call fcn.0043a466
mov edx, dword [eax]
lea ecx, [ebp - 0x30]
push ecx
push dword [ebx + 0xb4]
mov ecx, eax
call dword [edx + 0x174]
inc dword [ebp - 0x1c4]
lea ecx, [ebx + 0x4c4]
call fcn.004857bc
cmp dword [ebp - 0x1c4], eax
jl 0x43ff75
push dword [ebp - 0x1dc]
push dword [ebx + 0xb4]
call dword [sym.imp.GDI32.dll_RestoreDC]
cmp byte [ebx + 0x171], 0
je 0x440358
and dword [ebp - 0x58], 0
xor eax, eax
lea edi, [ebp - 0x54]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [ebx + 0x198]
call fcn.0043a5cb
test al, al
jne 0x44025e
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x40]
lea esi, [ebp - 0x40]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
lea edi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebx + 0x174]
add eax, dword [ebp - 0x40]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x20], eax
mov eax, dword [ebx + 0x178]
add dword [ebp - 0x1c], eax
mov eax, dword [ebx + 0x17c]
sub dword [ebp - 0x18], eax
mov eax, dword [ebx + 0x180]
sub dword [ebp - 0x14], eax
lea ecx, [ebx + 0x198]
call fcn.0043a5cb
test al, al
jne 0x4402c5
cmp dword [ebx + 0xc4], 0
jne 0x4400d1
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
lea edi, [ebx + 0xc8]
push edi
push dword [ebp - 0x1d4]
mov dword [ebx + 0xb8], eax
push dword [ebp - 0x1c0]
push dword [ebx + 0xb0]
call fcn.0045dbd5
mov dword [ebx + 0xc4], eax
mov eax, dword [ebp - 0x1d4]
imul eax, dword [ebp - 0x1c0]
shl eax, 2
push eax
push 0
push dword [edi]
call fcn.004d8c50
add esp, 0x1c
push dword [ebx + 0xc4]
push dword [ebx + 0xb8]
call dword [sym.imp.GDI32.dll_SelectObject]
and dword [ebp - 4], 0
jmp 0x440102
cmp byte [ebx + 0x184], 0
je 0x44014c
mov eax, dword [ebp - 0x1d4]
imul eax, dword [ebp - 0x1c0]
shl eax, 2
push eax
push 0
push dword [ebx + 0xc8]
call fcn.004d8c50
add esp, 0xc
mov dword [ebp - 4], 1
lea eax, [ebp - 0x134]
push eax
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
lea esi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004597f1
push 0
lea eax, [ebx + 0x198]
push eax
lea eax, [ebp - 0x20]
push eax
push eax
push ebx
push dword [ebx + 0xb8]
call fcn.0045eb31
or dword [ebp - 4], 0xffffffff
add esp, 0x30
lea ecx, [ebp - 0x134]
call fcn.004597ce
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
sub eax, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c8], eax
cmp eax, ecx
jge 0x4402c5
mov ecx, eax
imul ecx, dword [ebp - 0x1c0]
mov dword [ebp - 0x1d8], ecx
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x1c4], edx
cmp edx, dword [ebp - 0x28]
jge 0x44023b
lea esi, [ecx + edx]
shl esi, 2
mov dword [ebp - 0x1dc], esi
add ecx, dword [ebp - 0x1c4]
mov eax, dword [ebx + 0xc8]
mov al, byte [eax + esi + 3]
add ecx, dword [ebx + 0xc0]
movzx edi, al
mov esi, dword [ecx]
mov eax, esi
shr eax, 0x10
movzx eax, al
imul eax, edi
cdq
mov dword [ebp - 0x1d4], edi
mov edi, 0xff
idiv edi
movzx edi, al
mov eax, esi
shr eax, 8
movzx eax, al
imul eax, dword [ebp - 0x1d4]
cdq
mov esi, 0xff
idiv esi
shl edi, 8
movzx eax, al
or edi, eax
movzx eax, byte [ecx]
imul eax, dword [ebp - 0x1d4]
cdq
idiv esi
mov esi, dword [ebp - 0x1dc]
shl edi, 8
add esi, 4
mov dword [ebp - 0x1dc], esi
movzx eax, al
or edi, eax
mov eax, dword [ebp - 0x1d4]
shl eax, 0x18
add edi, eax
inc dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x1c4]
mov dword [ecx], edi
mov ecx, dword [ebp - 0x1d8]
cmp eax, dword [ebp - 0x28]
jl 0x440193
mov eax, dword [ebp - 0x1c8]
mov edx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x1c0]
sub edx, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1d8], ecx
cmp eax, edx
jl 0x440175
jmp 0x4402c5
mov esi, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
sub esi, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
cmp esi, eax
jge 0x4402c5
mov edi, dword [ebp - 0x30]
mov edx, esi
imul edx, dword [ebp - 0x1ac]
cmp edi, dword [ebp - 0x28]
jge 0x4402b4
lea ecx, [edx + edi]
shl ecx, 2
mov eax, dword [ebx + 0xc0]
add eax, ecx
cmp byte [eax + 3], 0
jne 0x4402a8
cmp byte [eax], 0
jne 0x4402a4
cmp byte [eax + 1], 0
jne 0x4402a4
cmp byte [eax + 2], 0
je 0x4402a8
mov byte [eax + 3], 0xff
inc edi
add ecx, 4
cmp edi, dword [ebp - 0x28]
jl 0x440285
mov edi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x2c]
add edx, dword [ebp - 0x1ac]
inc esi
cmp esi, eax
jl 0x44027a
mov al, byte [ebx + 0x170]
mov byte [ebp - 0x1ba], al
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x1ac]
push 2
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x1e0], eax
xor eax, eax
lea ecx, [ebp - 0x1bc]
push ecx
push eax
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], eax
lea eax, [ebp - 0x1f0]
push eax
push dword [ebx + 0xb4]
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x160]
push eax
push dword [ebx + 0xb0]
mov word [ebp - 0x1bc], 0
push dword [ebx + 0xac]
mov byte [ebp - 0x1b9], 1
call dword [0x54e620]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
jmp 0x440389
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
push 0xcc0020
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push dword [ebx + 0xb4]
push eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
push eax
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x1b0]
push dword [ebx + 0xb4]
call esi
cmp byte [ebx + 0x105], 0
je 0x440471
cmp byte [ebx + 0x171], 0
jne 0x440471
push dword [0x54e624]
push dword [ebx + 0xb0]
call esi
push 5
mov edi, eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebx + 0xb0]
call esi
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_Rectangle]
push edi
push dword [ebx + 0xb0]
call esi
jmp 0x440471
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x108]
push edi
lea edx, [ebp - 0x30]
push edx
push dword [ebx + 0xb0]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ecx]
call dword [eax + 0x150]
lea ecx, [ebx + 0x4c4]
call fcn.004857bc
test eax, eax
jle 0x44045f
push edi
lea ecx, [ebx + 0x4c4]
call fcn.0043a466
mov edx, dword [eax]
lea ecx, [ebp - 0x30]
push ecx
push dword [ebx + 0xb0]
mov ecx, eax
call dword [edx + 0x174]
lea ecx, [ebx + 0x4c4]
inc edi
call fcn.004857bc
cmp edi, eax
jl 0x44042f
push dword [ebp - 0x1b0]
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_RestoreDC]
lea eax, [ebp - 0x1a8]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_EndPaint]
xor esi, esi
push esi
mov ecx, ebx
call fcn.0043ba3a
cmp byte [ebx + 0x16d], 0
mov byte [ebx + 0x184], 0
je 0x4404a3
call fcn.0043b56e
cmp byte [ebp - 0x1b5], 0
je 0x43f595
push 1
push esi
push esi
push str.windowsize
push dword [ebx + 0x108]
mov ecx, ebx
call fcn.0043ef04
jmp 0x43f595
mov ecx, ebx
call fcn.0043ba33
test al, al
je 0x441c41
call fcn.0043ba1a
jmp 0x441c41
mov edx, dword [ebx + 0x10c]
test edx, edx
je 0x441c41
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x78]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x7c], 0x18
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x78], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, dword [ebx + 0x10c]
mov dword [ebp - 0x74], eax
lea ecx, [ebp - 0x7c]
jmp 0x441c36
mov edx, dword [ebx + 0x10c]
test edx, edx
je 0x440571
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x138], 0x19
mov dword [ebp - 0x134], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x10c]
lea edx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
mov ebx, dword [ebx + 0x108]
test ebx, ebx
je 0x43f595
mov ecx, ebx
call fcn.004465f1
jmp 0x43f595
push 0xa
pop ecx
xor eax, eax
lea edi, [ebp - 0x84]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x84]
push eax
push 1
push dword [ebx + 0xac]
mov dword [ebp - 0x84], 0x28
call dword [sym.imp.USER32.dll_MonitorFromWindow]
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
cmp dword [ebp - 0x60], 1
lea esi, [ebp - 0x70]
lea edi, [ebp - 0x58]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
je 0x4405e4
mov eax, dword [ebp - 0x6c]
neg eax
push eax
mov eax, dword [ebp - 0x70]
neg eax
push eax
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov eax, dword [ebx + 0x128]
mov edx, dword [ebp - 0x1ac]
test eax, eax
jle 0x4405f7
mov dword [edx + 0x18], eax
mov eax, dword [ebx + 0x12c]
test eax, eax
jle 0x440604
mov dword [edx + 0x1c], eax
mov ecx, dword [ebx + 0x130]
test ecx, ecx
jle 0x440611
mov dword [edx + 0x20], ecx
mov ecx, dword [ebx + 0x134]
test ecx, ecx
jle 0x44061e
mov dword [edx + 0x24], ecx
mov eax, dword [ebx + 0x130]
test eax, eax
jle 0x44062b
mov dword [edx + 8], eax
mov ebx, dword [ebx + 0x134]
test ebx, ebx
jle 0x441c41
mov dword [edx + 0xc], ebx
jmp 0x441c41
sub edi, 0x4e
je 0x440a48
sub edi, 0x2d
je 0x440968
sub edi, 0x85
je 0x4408c1
dec edi
je 0x44081f
dec edi
je 0x440799
sub edi, 0xf
je 0x44075f
dec edi
dec edi
jne 0x441c41
and dword [ebp - 0x1bc], edi
lea ecx, [ebx + 0x494]
call fcn.004857bc
test eax, eax
jle 0x441c41
push dword [ebp - 0x1bc]
lea ecx, [ebx + 0x494]
call fcn.0043a466
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1b0], eax
cmp ecx, dword [ebx + 0xac]
jne 0x4406c7
movzx ecx, si
cmp dword [eax + 0xc], ecx
jne 0x4406c7
cmp byte [eax + 0x10], 0
je 0x4406e5
inc dword [ebp - 0x1bc]
lea ecx, [ebx + 0x494]
call fcn.004857bc
cmp dword [ebp - 0x1bc], eax
jl 0x440697
jmp 0x441c41
mov esi, dword [ebp - 0x1b0]
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [esi]
mov dword [ebp - 0x138], 0x1b
mov dword [ebp - 0x134], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x130], eax
mov eax, dword [ebx + 0x120]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebx + 0x124]
mov dword [ebp - 0x128], eax
call fcn.0043afda
mov ecx, dword [esi]
mov word [ebp - 0x122], ax
mov eax, dword [esi + 4]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ecx]
lea edx, [ebp - 0x138]
push edx
jmp 0x441c3b
cmp dword [ebp - 0x1ac], 0
je 0x441c41
push dword [ebp - 0x1ac]
push esi
push 0x2111
push dword [ebp - 0x1ac]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x1c0]
mov dword [ecx], eax
test eax, eax
je 0x441c41
jmp 0x43f595
cmp dword [ebx + 0x108], 0
je 0x441c41
mov edx, dword [ebx + 0x10c]
test edx, edx
je 0x441c41
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebx + 0x120]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebx + 0x124]
mov dword [ebp - 0x138], 5
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x120], esi
mov word [ebp - 0x124], si
mov dword [ebp - 0x128], eax
call fcn.0043afda
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, dword [ebx + 0x10c]
jmp 0x441c2a
cmp dword [ebx + 0x108], 0
je 0x441c41
mov edx, dword [ebx + 0x118]
test edx, edx
je 0x441c41
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebx + 0x120]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebx + 0x124]
mov dword [ebp - 0x138], 4
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x120], esi
mov word [ebp - 0x124], si
mov dword [ebp - 0x128], eax
call fcn.0043afda
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x118]
lea edx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
and dword [ebx + 0x118], 0
jmp 0x441c41
cmp dword [ebx + 0x108], 0
je 0x441c41
mov edx, dword [ebx + 0x10c]
test edx, edx
je 0x441c41
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebx + 0x120]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebx + 0x124]
mov dword [ebp - 0x138], 3
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x120], esi
mov word [ebp - 0x124], si
mov dword [ebp - 0x128], eax
call fcn.0043afda
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x10c]
lea edx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
mov eax, dword [ebx + 0x10c]
mov dword [ebx + 0x118], eax
jmp 0x441c41
cmp dword [ebx + 0x108], 0
je 0x441c41
mov eax, dword [ebp - 0x1ac]
movsx ecx, ax
shr eax, 0x10
cwde
mov dword [ebp - 0x1b0], eax
lea eax, [ebp - 0x1b4]
push eax
push dword [ebx + 0xac]
mov dword [ebp - 0x1b4], ecx
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [ebx + 0x114], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebx + 0x120], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebx + 0x124], eax
je 0x441c41
mov ecx, ebx
call fcn.0043ba1a
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x1b4]
mov eax, dword [ebx + 0x114]
mov dword [ebp - 0x12c], ecx
mov ecx, dword [ebp - 0x1b0]
mov dword [ebp - 0x138], 0x14
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], ecx
mov word [ebp - 0x122], si
mov dword [ebp - 0x11c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x114]
lea edx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
and dword [ebx + 0x114], 0
jmp 0x441c41
cmp dword [ebp - 0x1ac], 0
je 0x441c41
mov eax, dword [ebp - 0x1ac]
push eax
push esi
push 0x204e
push dword [eax]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x43f522
mov eax, 0x207
cmp edi, eax
ja 0x4414fd
je 0x441466
mov eax, edi
sub eax, 0x138
je 0x441446
sub eax, 0xc8
je 0x440edf
dec eax
je 0x440d79
dec eax
je 0x440cc8
dec eax
je 0x440bdf
dec eax
je 0x440b1e
dec eax
jne 0x441c41
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1b0], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1b4], eax
mov dword [ebx + 0x120], eax
call fcn.0043e991
mov dword [ebx + 0x114], eax
test eax, eax
je 0x441c41
mov ecx, ebx
call fcn.0043ba1a
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x138], 0x10
jmp 0x441be1
cmp byte [ebx + 0x104], 0
jne 0x440b33
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1b0], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1b4], eax
mov dword [ebx + 0x120], eax
call fcn.0043e991
mov dword [ebp - 0x1c8], eax
test eax, eax
je 0x441c41
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x441c41
mov ecx, dword [ebp - 0x1c8]
mov eax, dword [ecx]
call dword [eax + 0x128]
mov ecx, ebx
call fcn.0043ba02
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x138], 0xf
mov eax, dword [ebp - 0x1ac]
mov edi, dword [ebp - 0x1c8]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x128], eax
jmp 0x440c8d
cmp byte [ebx + 0x104], 0
jne 0x440bf4
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1c8], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1cc], eax
mov dword [ebx + 0x120], eax
call fcn.0043e991
mov dword [ebp - 0x1b0], eax
test eax, eax
je 0x441c41
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x441c41
mov ecx, ebx
call fcn.0043ba02
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1cc]
mov edi, dword [ebp - 0x1b0]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x138], 0x13
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x120], esi
mov word [ebp - 0x122], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x140]
mov dword [ebx + 0x114], edi
jmp 0x441c41
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
cmp dword [ebx + 0x114], 0
movsx ecx, cx
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], ecx
mov dword [ebx + 0x120], eax
mov dword [ebx + 0x124], ecx
je 0x441c41
mov ecx, ebx
call fcn.0043ba1a
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x114]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x138], 0xe
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], eax
mov word [ebp - 0x122], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x114]
and dword [ebx + 0x114], 0
mov dword [ebp - 0x130], eax
jmp 0x440751
cmp byte [ebx + 0x104], 0
jne 0x440d8e
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SetFocus]
cmp dword [ebx + 0x108], 0
je 0x441c41
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1c8], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1cc], eax
mov dword [ebx + 0x120], eax
call fcn.0043e991
mov edi, eax
mov dword [ebp - 0x1bc], edi
test edi, edi
je 0x441c41
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x1c]
cmp eax, ebx
jne 0x441c41
cmp byte [ebx + 0x738], 0
je 0x440e54
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x38]
test al, al
je 0x440e54
mov eax, dword [ebx + 0x73c]
mov byte [ebx + 0x739], 1
test eax, eax
je 0x440e21
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
and dword [ebx + 0x73c], 0
mov ecx, dword [ebp - 0x1bc]
mov eax, dword [ecx]
call dword [eax + 0x58]
push 0
sub esp, 0x10
mov edi, esp
push dword [ebp - 0x1bc]
mov esi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ebx
movsd dword es:[edi], dword [esi]
call fcn.0045f2db
mov esi, dword [ebp - 0x1b0]
add esp, 0x1c
mov dword [ebx + 0x73c], eax
mov ecx, ebx
call fcn.0043ba02
mov ecx, dword [ebp - 0x1bc]
mov dword [ebx + 0x114], ecx
mov eax, dword [ecx]
call dword [eax + 0x128]
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov edi, dword [ebp - 0x1bc]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x138], 0xd
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], eax
mov word [ebp - 0x122], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x130], eax
mov eax, dword [edi]
lea ecx, [ebp - 0x138]
push ecx
mov ecx, edi
jmp 0x441c3b
cmp byte [ebx + 0x480], 0
jne 0x440f3d
xor eax, eax
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebx + 0xac]
mov dword [ebp - 0x18], eax
mov eax, dword [ebx + 0xcc]
mov dword [ebp - 0x20], 0x10
mov dword [ebp - 0x1c], 3
test eax, eax
jne 0x440f19
mov eax, dword [ebx + 0x100]
jmp 0x440f29
push 0
push 3
push 0x415
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.COMCTL32.dll__TrackMouseEvent]
mov byte [ebx + 0x480], 1
mov eax, dword [ebp - 0x1ac]
movsx ecx, word [ebp - 0x1ac]
shr eax, 0x10
movsx edx, ax
mov dword [ebp - 0x1cc], ecx
mov dword [ebp - 0x1c8], edx
mov byte [ebp - 0x1b5], 1
cmp dword [ebx + 0x120], ecx
jne 0x440f7a
cmp dword [ebx + 0x124], edx
jne 0x440f7a
mov byte [ebp - 0x1b5], 0
push edx
mov dword [ebx + 0x120], ecx
push ecx
mov ecx, ebx
mov dword [ebx + 0x124], edx
call fcn.0043e991
mov dword [ebp - 0x1b0], eax
test eax, eax
je 0x440fa8
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x441c41
cmp byte [ebp - 0x1b5], 0
je 0x441232
cmp byte [ebx + 0x739], 0
je 0x441232
cmp esi, 1
jne 0x441232
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0xc
call fcn.004d5f1a
pop ecx
test eax, eax
je 0x440fed
and dword [eax + 4], 0
mov dword [eax], vtable.DuiLib::CIDropSource.0
mov byte [eax + 8], 0
jmp 0x440fef
xor eax, eax
mov dword [ebp - 0x1c0], eax
test eax, eax
je 0x441c41
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
push 0x2c
call fcn.004d5f1a
pop ecx
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x44102d
push dword [ebp - 0x1c0]
mov ecx, eax
call fcn.0046297e
mov esi, eax
jmp 0x44102f
xor esi, esi
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x441c41
mov eax, dword [esi]
push esi
call dword [eax + 4]
xor eax, eax
lea edi, [ebp - 0x58]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
or dword [ebp - 0x50], 0xffffffff
xor eax, eax
push 2
lea edi, [ebp - 0x1e4]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
pop eax
push 0x10
mov word [ebp - 0x5c], ax
pop eax
xor edi, edi
push edi
push 2
push dword [ebx + 0x73c]
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x1e8], eax
call dword [sym.imp.ole32.dll_OleDuplicateData]
push edi
lea ecx, [ebp - 0x1e8]
push ecx
lea ecx, [ebp - 0x5c]
push ecx
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1e4], eax
mov eax, dword [esi]
push esi
call dword [eax + 0x1c]
lea eax, [ebp - 0x48]
push eax
push 0x18
push dword [ebp - 0x1d8]
call dword [sym.imp.GDI32.dll_GetObjectW]
mov eax, dword [ebp - 0x44]
push 0xe
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x14], eax
pop eax
push edi
push edi
push edi
push dword [ebx + 0xb0]
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], edi
mov word [ebp - 0x5c], ax
mov dword [ebp - 0x4c], 0x40
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
push dword [ebx + 0xb0]
mov dword [ebp - 0x1c8], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push dword [ebp - 0x1d8]
mov dword [ebp - 0x1d0], eax
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
push 0xcc0020
push edi
push edi
push dword [ebp - 0x1d0]
mov dword [ebp - 0x1b0], eax
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push edi
push edi
push dword [ebp - 0x1c8]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x1b0]
push dword [ebp - 0x1d0]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp - 0x1c8]
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
mov dword [ebp - 0x1e4], eax
push dword [ebp - 0x1d0]
call dword [sym.imp.GDI32.dll_DeleteDC]
push 1
lea ecx, [ebp - 0x1e8]
push ecx
lea ecx, [ebp - 0x5c]
push ecx
mov dword [ebp - 0x1e8], 0x40
mov eax, dword [esi]
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x160]
call fcn.0043cfb2
xor eax, eax
lea edi, [ebp - 0x1b0]
stosd dword es:[edi], eax
mov eax, dword [ebp - 0x44]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x40]
cdq
sub eax, edx
sar eax, 1
push 5
mov dword [ebp - 4], 4
mov dword [ebp - 0x1b0], eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push esi
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1b4]
push eax
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0x160]
call fcn.0043cff6
lea eax, [ebp - 0x1dc]
push eax
push 3
push dword [ebp - 0x1c0]
push esi
call dword [sym.imp.ole32.dll_DoDragDrop]
cmp dword [ebp - 0x1dc], 0
je 0x441205
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x441211
push dword [ebp - 0x1c0]
call fcn.004d5740
pop ecx
mov eax, dword [esi]
push esi
call dword [eax + 8]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x160]
mov byte [ebx + 0x739], 0
call fcn.0043cfda
jmp 0x441c41
and dword [ebp - 0x138], 0
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x11c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x130], eax
call fcn.0043afda
mov ecx, ebx
mov word [ebp - 0x122], ax
call fcn.0043ba33
test al, al
jne 0x441404
push dword [ebp - 0x1c8]
push dword [ebp - 0x1cc]
call fcn.0043e991
mov edi, eax
test edi, edi
je 0x4412bd
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x1c]
cmp eax, ebx
jne 0x441c41
mov eax, dword [ebx + 0x110]
cmp edi, eax
je 0x4413cf
test eax, eax
je 0x4413cf
lea ecx, [ebx + 0x518]
mov dword [ebp - 0x138], 0xa
mov dword [ebp - 0x134], eax
call fcn.004857bc
push eax
lea ecx, [ebp - 0x164]
call fcn.0043a259
lea ecx, [ebx + 0x518]
mov dword [ebp - 4], 5
call fcn.004857bc
push eax
lea ecx, [ebp - 0x164]
call fcn.0043a2ae
lea ecx, [ebx + 0x518]
call fcn.004857bc
shl eax, 2
push eax
lea ecx, [ebx + 0x518]
call fcn.0043a4b7
push eax
lea ecx, [ebp - 0x164]
call fcn.0043a4b7
push eax
call fcn.004d8d80
add esp, 0xc
lea ecx, [ebp - 0x164]
xor esi, esi
call fcn.004857bc
test eax, eax
jle 0x441385
push esi
lea ecx, [ebp - 0x164]
call fcn.0043a466
mov edx, dword [eax]
lea ecx, [ebp - 0x138]
push ecx
mov ecx, eax
call dword [edx + 0x140]
lea ecx, [ebp - 0x164]
inc esi
call fcn.004857bc
cmp esi, eax
jl 0x441358
mov ecx, dword [ebx + 0x110]
mov eax, dword [ecx]
lea edx, [ebp - 0x138]
push edx
call dword [eax + 0x140]
mov eax, dword [ebx + 0xcc]
and dword [ebx + 0x110], 0
test eax, eax
je 0x4413c0
lea ecx, [ebx + 0xd0]
push ecx
push 0
push 0x411
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x164]
call fcn.0043a283
cmp edi, dword [ebx + 0x110]
je 0x44140a
test edi, edi
je 0x44140a
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x138], 0xb
mov dword [ebp - 0x134], edi
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x140]
mov dword [ebx + 0x110], edi
jmp 0x44140a
mov edi, dword [ebp - 0x1b0]
mov ebx, dword [ebx + 0x114]
test ebx, ebx
je 0x441429
mov dword [ebp - 0x138], 9
mov dword [ebp - 0x134], ebx
jmp 0x441c30
test edi, edi
je 0x441c41
mov dword [ebp - 0x138], 9
mov dword [ebp - 0x134], edi
jmp 0x440ecf
cmp dword [ebp - 0x1ac], 0
je 0x441c41
push dword [ebp - 0x1ac]
add edi, 0x2000
push esi
push edi
jmp 0x440778
cmp byte [ebx + 0x104], 0
jne 0x44147b
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1b0], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1b4], eax
mov dword [ebx + 0x120], eax
call fcn.0043e991
mov dword [ebp - 0x1c8], eax
test eax, eax
je 0x441c41
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x441c41
mov ecx, dword [ebp - 0x1c8]
mov eax, dword [ecx]
call dword [eax + 0x128]
mov ecx, ebx
call fcn.0043ba02
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x138], 0x11
jmp 0x440bb0
sub edi, 0x208
je 0x441b85
sub edi, ecx
je 0x441a4f
sub edi, 0x97
je 0x44183a
sub edi, ecx
je 0x44172a
sub edi, 0x75
je 0x44162c
sub edi, 0x7ce9
jne 0x441c41
lea ecx, [ebx + 0x4e8]
call fcn.004857bc
test eax, eax
jle 0x441571
push edi
lea ecx, [ebx + 0x4e8]
call fcn.0043a466
test eax, eax
je 0x441561
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx]
lea ecx, [ebx + 0x4e8]
inc edi
call fcn.004857bc
cmp edi, eax
jl 0x441549
lea ecx, [ebx + 0x4e8]
call fcn.0043a291
lea edi, [ebx + 0x4f4]
push 0
mov ecx, edi
mov byte [ebx + 0x484], 0
call fcn.0043a44a
mov esi, eax
test esi, esi
je 0x441c41
add ebx, 0x488
mov dword [ebp - 0x1d0], ebx
push 0
mov ecx, edi
call fcn.0043a3e9
mov eax, dword [esi + 0x108]
test eax, eax
je 0x4415d6
lea ecx, [eax + 0x38]
call fcn.00466d1c
test al, al
je 0x4415d6
mov ecx, dword [esi + 0x108]
push esi
add ecx, 0x38
call fcn.00466d79
mov ecx, dword [ebp - 0x1d0]
xor ebx, ebx
call fcn.004857bc
test eax, eax
jle 0x44160a
mov ecx, dword [ebp - 0x1d0]
push ebx
call fcn.0043a466
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx]
mov ecx, dword [ebp - 0x1d0]
inc ebx
call fcn.004857bc
cmp ebx, eax
jl 0x4415e7
mov ecx, esi
call fcn.0043b121
push esi
call fcn.004d5740
pop ecx
push 0
mov ecx, edi
call fcn.0043a44a
mov esi, eax
test esi, esi
jne 0x4415a8
jmp 0x441c41
cmp dword [ebx + 0x108], 0
je 0x441c41
lea eax, [ebp - 0x58]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetClientRect]
push esi
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x108]
push 0
lea edx, [ebp - 0x58]
push edx
mov dword [ebp - 0x1c8], eax
mov eax, dword [ecx]
push esi
call dword [eax + 0x150]
test byte [ebp - 0x1ac], 0x10
je 0x441718
push 5
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x1bc], eax
test eax, eax
je 0x441718
mov eax, dword [ebp - 0x1ac]
or eax, 2
mov dword [ebp - 0x1b0], eax
and dword [ebp - 0x20], 0
xor eax, eax
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x1bc]
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea eax, [ebp - 0x20]
push eax
push dword [ebx + 0xac]
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [ebp - 0x1c]
push 0
neg eax
push eax
mov eax, dword [ebp - 0x20]
neg eax
push eax
push esi
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
push dword [ebp - 0x1b0]
push esi
push 0x317
push dword [ebp - 0x1bc]
call dword [sym.imp.USER32.dll_SendMessageW]
push 2
push dword [ebp - 0x1bc]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x1bc], eax
test eax, eax
jne 0x4416a3
push dword [ebp - 0x1c8]
push esi
call dword [sym.imp.GDI32.dll_RestoreDC]
jmp 0x441c41
mov eax, dword [ebx + 0xcc]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x44174b
lea ecx, [ebx + 0xd0]
push ecx
push 0
push 0x411
push eax
call esi
cmp byte [ebx + 0x480], 0
je 0x44182e
and dword [ebp - 0x1b4], 0
xor eax, eax
and dword [ebp - 0x58], eax
lea edi, [ebp - 0x1b0]
stosd dword es:[edi], eax
lea edi, [ebp - 0x54]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x1b4]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x58]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetWindowRect]
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x44181d
call dword [sym.imp.USER32.dll_GetActiveWindow]
cmp eax, dword [ebx + 0xac]
jne 0x44181d
push dword [ebp - 0x1b0]
lea eax, [ebp - 0x58]
push dword [ebp - 0x1b4]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x44181d
movzx eax, word [ebp - 0x1b0]
movzx ecx, word [ebp - 0x1b4]
shl eax, 0x10
or eax, ecx
push eax
xor edi, edi
push edi
push 0x84
push dword [ebx + 0xac]
call esi
cmp eax, 1
jne 0x441819
lea eax, [ebp - 0x1b4]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_ScreenToClient]
movzx eax, word [ebp - 0x1b0]
movzx ecx, word [ebp - 0x1b4]
shl eax, 0x10
or eax, ecx
push eax
push edi
jmp 0x441821
push 0xffffffffffffffff
jmp 0x441816
push 0xffffffffffffffff
push 0
push 0x200
push dword [ebx + 0xac]
call esi
mov byte [ebx + 0x480], 0
jmp 0x441c41
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1b0], ecx
push eax
mov ecx, ebx
mov byte [ebx + 0x480], 0
mov dword [ebp - 0x1b4], eax
call fcn.0043e991
mov dword [ebp - 0x1d0], eax
test eax, eax
je 0x441c41
mov edx, dword [ebx + 0x110]
test edx, edx
je 0x4418f5
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x138], 0xc
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x11c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x128], eax
call fcn.0043afda
mov ecx, dword [ebx + 0x110]
lea edx, [ebp - 0x138]
mov word [ebp - 0x122], ax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
mov ecx, dword [ebp - 0x1d0]
mov eax, dword [ecx]
lea edx, [ebp - 0x118]
push edx
call dword [eax + 0xc8]
lea ecx, [ebp - 0x118]
mov dword [ebp - 4], 2
call fcn.0043a5cb
test al, al
je 0x441934
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x118]
call fcn.0043a49d
jmp 0x43f595
push 0x30
pop edi
push edi
lea esi, [ebx + 0xd0]
push 0
push esi
call fcn.004d8c50
mov eax, dword [ebx + 0xac]
mov dword [esi], edi
mov dword [ebx + 0xd4], 1
mov dword [ebx + 0xd8], eax
mov dword [ebx + 0xdc], eax
mov eax, dword [0x54e630]
add esp, 0xc
lea ecx, [ebp - 0x118]
mov dword [ebx + 0xf0], eax
call fcn.0043a4b7
mov ecx, dword [ebp - 0x1d0]
mov dword [ebx + 0xf4], eax
mov eax, dword [ecx]
call dword [eax + 0x58]
cmp dword [ebx + 0xcc], 0
lea edi, [ebx + 0xe0]
mov esi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x441a09
xor edi, edi
push edi
push dword [0x54e630]
mov eax, SysReAllocString
push edi
push dword [ebx + 0xac]
push eax
push eax
push eax
push eax
push reloc.WS2_32.dll_closesocket
push edi
push str.tooltips_class32
push edi
call dword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [ebx + 0xd0]
push ecx
push edi
push 0x432
push eax
mov dword [ebx + 0xcc], eax
call esi
mov ecx, dword [ebp - 0x1d0]
mov eax, dword [ecx]
call dword [eax + 0xd4]
push eax
push edi
push 0x418
push dword [ebx + 0xcc]
call esi
jmp 0x441a0b
xor edi, edi
push dword [ebx + 0xcc]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x441920
lea eax, [ebx + 0xd0]
push eax
push edi
push 0x436
push dword [ebx + 0xcc]
call esi
lea eax, [ebx + 0xd0]
push eax
push 1
push 0x411
push dword [ebx + 0xcc]
call esi
jmp 0x441920
cmp dword [ebx + 0x108], 0
je 0x441c41
movsx eax, word [ebp - 0x1ac]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1ac]
shr eax, 0x10
cwde
mov dword [ebp - 0x1b0], eax
lea eax, [ebp - 0x1b4]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x1b4]
push ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebx + 0x120], eax
call fcn.0043e991
mov dword [ebp - 0x1c8], eax
test eax, eax
je 0x441c41
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x441c41
xor eax, eax
push 7
shr esi, 0x10
pop ecx
movsx edx, si
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x134], eax
movzx eax, dx
shl eax, 0x10
xor ecx, ecx
test edx, edx
sets cl
mov dword [ebp - 0x138], 0x15
or eax, ecx
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x128], eax
call fcn.0043afda
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x1c8]
lea edx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
movzx eax, word [ebx + 0x124]
movzx ecx, word [ebx + 0x120]
shl eax, 0x10
or eax, ecx
push eax
push 0
push 0x200
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x441c41
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1b0], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1b4], eax
mov dword [ebx + 0x120], eax
call fcn.0043e991
mov dword [ebx + 0x114], eax
test eax, eax
je 0x441c41
mov ecx, ebx
call fcn.0043ba1a
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x138], 0x12
mov eax, dword [ebx + 0x114]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], eax
mov word [ebp - 0x122], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, dword [ebx + 0x114]
mov dword [ebp - 0x130], eax
lea ecx, [ebp - 0x138]
mov eax, dword [ebx]
push ecx
mov ecx, ebx
call dword [eax + 0x140]
xor al, al
call fcn.004d9a12
ret 0x10