Function at 0x4b06f4
Capabilities:
Check for time delay via gettickcount
Resolve function by parsing pe exports

Disassembly:
push 0x168
mov eax, 0x661f49
call fcn.0065df0b
mov ebx, ecx
mov dword [ebp - 0x34], ebx
cmp dword [ebx + 8], 0
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x148], eax
je 0x4b1c77
lea eax, [ebx + 0x11c]
push 0
mov ecx, eax
mov dword [ebp - 0x150], eax
call fcn.004b4ec9
mov esi, eax
test esi, esi
je 0x4b07dc
lea eax, [ebx + 0xd4]
mov ebx, eax
mov ecx, dword [ebp - 0x150]
push 0
call fcn.004b522b
mov ecx, dword [esi + 0x108]
test ecx, ecx
je 0x4b0783
add ecx, 0x38
call fcn.004c2353
test al, al
je 0x4b0783
mov ecx, dword [esi + 0x108]
push esi
add ecx, 0x38
call fcn.004c2369
mov ecx, ebx
xor edi, edi
call fcn.0064a060
test eax, eax
jle 0x4b07ab
push edi
mov ecx, ebx
call fcn.004b48d0
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
mov ecx, ebx
inc edi
call fcn.0064a060
cmp edi, eax
jl 0x4b0790
mov ecx, esi
call fcn.004fb2f4
push 0x120
push esi
call fcn.004aab65
pop ecx
pop ecx
mov ecx, dword [ebp - 0x150]
push 0
call fcn.004b4ec9
mov esi, eax
test esi, esi
jne 0x4b0751
mov ebx, dword [ebp - 0x34]
mov edi, dword [ebp - 0x40]
and dword [ebp - 0x138], 0
lea ecx, [ebx + 0xf8]
call fcn.0064a060
mov esi, dword [ebp + 8]
test eax, eax
jle 0x4b084b
mov ecx, dword [ebp - 0x138]
push ecx
lea ecx, [ebx + 0xf8]
mov byte [ebp - 0x141], 0
call fcn.004b48d0
lea ecx, [ebp - 0x141]
push ecx
push edi
push dword [ebp - 0x13c]
mov edx, dword [eax]
mov ecx, eax
push esi
call dword [edx]
cmp byte [ebp - 0x141], 0
jne 0x4b09ae
inc dword [ebp - 0x138]
lea ecx, [ebx + 0xf8]
call fcn.0064a060
mov ecx, dword [ebp - 0x138]
cmp ecx, eax
jl 0x4b07fb
mov eax, 0x111
cmp esi, eax
ja 0x4b1177
je 0x4b1160
cmp esi, 0x24
ja 0x4b0f20
je 0x4b0ee3
sub esi, 5
je 0x4b0dcb
dec esi
sub esi, 1
je 0x4b0da5
sub esi, 1
je 0x4b0d97
sub esi, 7
je 0x4b0a58
sub esi, 1
je 0x4b09cd
sub esi, 4
je 0x4b09bd
sub esi, 0xc
jne 0x4b1bd9
xor eax, eax
inc eax
cmp di, ax
jne 0x4b1bd9
cmp byte [ebx + 0xd1], 0
jne 0x4b1c79
and dword [ebp - 0x14c], esi
lea eax, [ebp - 0x14c]
and dword [ebp - 0x148], esi
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x14c]
push eax
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_ScreenToClient]
push dword [ebp - 0x148]
mov ecx, ebx
push dword [ebp - 0x14c]
call fcn.004af137
mov esi, eax
test esi, esi
je 0x4b1bd9
mov ecx, esi
call fcn.004bddab
test al, al
je 0x4b0930
mov edx, dword [esi]
lea eax, [ebp - 0x14c]
push eax
mov ecx, esi
call dword [edx + 0x150]
test al, al
jne 0x4b09b6
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
test al, 2
je 0x4b1bd9
xor eax, eax
lea edi, [ebp - 0x170]
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x174], 0x17
mov dword [ebp - 0x164], eax
call fcn.004b06a8
mov word [ebp - 0x15e], ax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov dword [ebp - 0x16c], eax
lea ecx, [ebp - 0x174]
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x108]
jmp 0x4b09b6
mov ecx, dword [ebp - 0x148]
mov dword [ecx], eax
mov al, 1
jmp 0x4b1c79
mov ecx, dword [ebp - 0x148]
xor eax, eax
inc eax
mov dword [ecx], eax
jmp 0x4b1c79
and dword [ebp - 0x30], 0
lea edi, [ebp - 0x2c]
push 7
xor eax, eax
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x80]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0x84]
mov dword [ebp - 0x20], eax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [ebx + 0x74]
mov dword [ebp - 0x28], eax
test ecx, ecx
je 0x4b0a13
mov dword [ebp - 0x30], 0xa
lea edx, [ebp - 0x30]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x108]
mov ecx, dword [ebx + 0x78]
test ecx, ecx
je 0x4b0a30
mov dword [ebp - 0x30], 0xe
lea edx, [ebp - 0x30]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x108]
push 0
mov ecx, ebx
call fcn.004b37db
push 4
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_GetWindow]
test eax, eax
je 0x4b1bd9
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x4b1bd9
push 0x40
xorps xmm0, xmm0
lea eax, [ebp - 0x134]
push 0
push eax
movups xmmword [ebp - 0x5c], xmm0
movups xmmword [ebp - 0x70], xmm0
call fcn.005f46f0
add esp, 0xc
lea eax, [ebp - 0x5c]
xor esi, esi
push eax
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_GetClientRect]
cmp dword [ebx + 0x6c], esi
je 0x4b0aa5
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x4b0aa5
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
je 0x4b0aa8
xor esi, esi
inc esi
lea eax, [ebp - 0x5c]
mov ecx, ebx
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.004aff2c
test al, al
push 1
pop eax
cmove esi, eax
test esi, esi
je 0x4b0acf
mov ecx, ebx
call fcn.004aefa2
jmp 0x4b09b6
cmp byte [ebx + 0xcd], 0
je 0x4b0b0a
mov ecx, dword [ebx + 0x6c]
mov byte [ebx + 0xcd], 0
call fcn.004bdda4
test al, al
je 0x4b0aff
cmp byte [ebx + 0x2f5], 0
je 0x4b0aff
lea eax, [ebx + 0x24]
mov ecx, ebx
push eax
call fcn.004b2432
lea eax, [ebp - 0x5c]
mov ecx, ebx
push eax
call fcn.004b4146
lea eax, [ebp - 0x134]
push eax
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_BeginPaint]
cmp byte [ebx + 0xcf], 0
je 0x4b0cf4
mov edi, dword [ebp - 0x54]
lea esi, [ebx + 0x10]
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x58]
sub edi, dword [ebp - 0x5c]
cmp dword [esi], 0
mov dword [ebp - 0x34], eax
je 0x4b0b48
cmp dword [ebx + 0x1c], edi
jne 0x4b0b48
cmp dword [ebx + 0x20], eax
je 0x4b0b67
push esi
mov ecx, ebx
call fcn.004b2432
push esi
push dword [ebp - 0x34]
mov ecx, ebx
push edi
push dword [ebx + 0xc]
call fcn.004aee8e
test al, al
je 0x4b0d23
cmp byte [ebx + 0x2f5], 0
je 0x4b0bbd
lea ecx, [ebx + 0x270]
call fcn.004b50ee
test al, al
jne 0x4b0bbd
lea ecx, [ebx + 0x24]
cmp dword [ecx], 0
je 0x4b0b94
cmp dword [ebx + 0x30], edi
jne 0x4b0b94
mov eax, dword [ebp - 0x34]
cmp dword [ebx + 0x34], eax
je 0x4b0bbd
push ecx
mov ecx, ebx
call fcn.004b2432
lea eax, [ebx + 0x24]
mov ecx, ebx
push eax
push dword [ebp - 0x34]
push edi
push dword [ebx + 0xc]
call fcn.004aee8e
test al, al
je 0x4b0d23
mov byte [ebx + 0x2f4], 1
push dword [esi]
call dword [sym.imp.GDI32.dll_SaveDC]
cmp byte [ebx + 0x2f5], 0
mov dword [ebp - 0x150], eax
je 0x4b0bf7
movzx ecx, byte [ebx + 0x2f4]
lea eax, [ebp - 0x5c]
push ecx
push eax
lea eax, [ebp - 0x70]
mov ecx, ebx
push eax
lea eax, [ebx + 0x24]
push eax
push esi
call fcn.004aeffe
mov byte [ebx + 0x2f4], 0
sub esp, 0x10
lea esi, [ebp - 0x70]
mov edi, esp
mov ecx, ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebx + 0x10]
push dword [esi]
call fcn.004b1e78
cmp byte [ebx + 0x2f5], 0
je 0x4b0cc0
lea eax, [ebp - 0x5c]
mov ecx, ebx
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebx + 0x24]
push eax
push esi
call fcn.004aed03
cmp byte [ebx + 0x2f5], 0
je 0x4b0cc0
lea eax, [ebp - 0x20]
xorps xmm0, xmm0
push eax
push dword [ebx + 8]
movups xmmword [ebp - 0x20], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
mov al, byte [ebx + 0x26c]
xor ecx, ecx
mov byte [ebp - 0x136], al
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x5c]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x58]
push 2
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x138]
push eax
push ecx
lea eax, [ebp - 0x38]
mov word [ebp - 0x138], cx
push eax
push dword [esi]
lea eax, [ebp - 0x44]
mov byte [ebp - 0x135], 1
push eax
lea eax, [ebp - 0x140]
mov dword [ebp - 0x38], ecx
push eax
push dword [ebx + 0xc]
mov dword [ebp - 0x34], ecx
push dword [ebx + 8]
call dword [0x7286ac]
jmp 0x4b0cea
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x6c]
push 0xcc0020
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push dword [esi]
push eax
mov eax, dword [ebp - 0x68]
sub eax, dword [ebp - 0x70]
push eax
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push dword [ebx + 0xc]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x150]
push dword [esi]
jmp 0x4b0d1d
push dword [ebx + 0xc]
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebp - 0x34]
lea esi, [ebp - 0x70]
sub esp, 0x10
mov ebx, eax
mov edi, esp
push dword [ecx + 0xc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004b1e78
push ebx
mov ebx, dword [ebp - 0x34]
push dword [ebx + 0xc]
call dword [sym.imp.GDI32.dll_RestoreDC]
cmp byte [ebx + 0x68], 0
je 0x4b0d6e
cmp byte [ebx + 0x2f5], 0
jne 0x4b0d6e
push dword [0x7286b0]
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebx + 0xc]
call edi
push 5
mov esi, eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebx + 0xc]
call edi
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push dword [ebx + 0xc]
call dword [sym.imp.GDI32.dll_Rectangle]
push esi
push dword [ebx + 0xc]
call edi
lea eax, [ebp - 0x134]
push eax
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_EndPaint]
cmp byte [ebx + 0xcd], 0
je 0x4b09b6
mov ecx, ebx
call fcn.004b01bb
jmp 0x4b09b6
push 0
mov ecx, ebx
call fcn.004b32a7
jmp 0x4b1bd9
mov ecx, ebx
call fcn.004b00c4
mov esi, eax
test esi, esi
je 0x4b1bd9
mov ecx, esi
call fcn.004620e0
push eax
push ebx
mov ecx, esi
call fcn.004cbf85
jmp 0x4b1bd9
xor eax, eax
inc eax
cmp dword [ebp - 0x13c], eax
je 0x4b0ed6
mov ecx, ebx
call fcn.004af543
test eax, eax
je 0x4b0e84
mov ecx, eax
call fcn.004c93ad
push eax
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
call fcn.004af4f2
cmp dword [ebp - 0x38], 0
mov esi, dword [ebp - 0x34]
jne 0x4b0e09
test esi, esi
je 0x4b0e84
lea eax, [ebp - 0x154]
mov ecx, ebx
push eax
call fcn.004afd85
cmp dword [ebp - 0x38], 0
je 0x4b0e28
mov edx, dword [ebp - 0x154]
add edx, dword [ebp - 0x38]
jmp 0x4b0e2b
movsx edx, di
mov dword [ebp - 0x154], edx
test esi, esi
je 0x4b0e3f
mov ecx, dword [ebp - 0x150]
add ecx, esi
jmp 0x4b0e47
mov eax, edi
shr eax, 0x10
movsx ecx, ax
movsx eax, di
mov dword [ebp - 0x150], ecx
cmp edx, eax
jne 0x4b0e5e
shr edi, 0x10
movsx eax, di
cmp ecx, eax
je 0x4b0e84
push 0x416
push ecx
push edx
xor eax, eax
push eax
push eax
push eax
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, dword [ebp - 0x148]
mov dword [ecx], 1
jmp 0x4b1c77
mov edx, dword [ebx + 0x70]
test edx, edx
je 0x4b0eb7
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x30], 0x16
mov dword [ebp - 0x2c], edx
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [ebx + 0x70]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov ecx, dword [ebx + 0x6c]
test ecx, ecx
je 0x4b0ec3
call fcn.004bde0b
cmp byte [ebx + 0x2f5], 0
je 0x4b0ed3
mov ecx, ebx
call fcn.004b01bb
xor eax, eax
inc eax
mov ecx, dword [ebp - 0x148]
mov dword [ecx], eax
jmp 0x4b1c77
mov eax, dword [ebx + 0x88]
test eax, eax
jle 0x4b0ef0
mov dword [edi + 0x18], eax
mov eax, dword [ebx + 0x8c]
test eax, eax
jle 0x4b0efd
mov dword [edi + 0x1c], eax
mov eax, dword [ebx + 0x90]
test eax, eax
jle 0x4b0f0a
mov dword [edi + 0x20], eax
mov eax, dword [ebx + 0x94]
test eax, eax
jle 0x4b1bd9
mov dword [edi + 0x24], eax
jmp 0x4b1bd9
sub esi, 0x3d
je 0x4b113a
sub esi, 0x11
je 0x4b1119
sub esi, 0x2d
je 0x4b1079
push 3
pop edx
sub esi, edx
je 0x4b106d
sub esi, 0x82
je 0x4b100e
sub esi, 1
je 0x4b0fad
sub esi, 1
jne 0x4b1bd9
cmp dword [ebx + 0x70], esi
je 0x4b1bd9
xor eax, eax
lea edi, [ebp - 0x2c]
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x13c]
mov word [ebp - 0x1c], ax
mov eax, dword [ebx + 0x80]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0x84]
mov dword [ebp - 0x30], 5
mov dword [ebp - 0x20], eax
call fcn.004b06a8
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [ebx + 0x70]
jmp 0x4b12e2
cmp dword [ebx + 0x7c], 0
je 0x4b1bd9
xor eax, eax
lea edi, [ebp - 0x2c]
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x13c]
mov word [ebp - 0x1c], ax
mov eax, dword [ebx + 0x80]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0x84]
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x20], eax
call fcn.004b06a8
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [ebx + 0x7c]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
and dword [ebx + 0x7c], 0
jmp 0x4b1bd9
cmp dword [ebx + 0x70], 0
je 0x4b1bd9
xor eax, eax
lea edi, [ebp - 0x2c]
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x13c]
mov word [ebp - 0x1c], ax
mov eax, dword [ebx + 0x80]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0x84]
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x20], eax
call fcn.004b06a8
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [ebx + 0x70]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov eax, dword [ebx + 0x70]
mov dword [ebx + 0x7c], eax
jmp 0x4b1bd9
mov ecx, ebx
call fcn.004b01bb
jmp 0x4b1bd9
mov ecx, ebx
call fcn.004b2420
movsx eax, di
mov dword [ebp - 0x38], eax
shr edi, 0x10
movsx eax, di
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x38]
push eax
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [ebx + 0x78], 0
mov edx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov dword [ebx + 0x80], edx
mov dword [ebx + 0x84], esi
jne 0x4b10ce
push esi
push edx
mov ecx, ebx
call fcn.004af137
mov dword [ebx + 0x78], eax
test eax, eax
je 0x4b1bd9
mov esi, dword [ebp - 0x34]
mov edx, dword [ebp - 0x38]
push 7
xor eax, eax
lea edi, [ebp - 0x2c]
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x78]
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x30], 0x11
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x20], esi
mov word [ebp - 0x1a], cx
mov dword [ebp - 0x14], eax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [ebx + 0x78]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
and dword [ebx + 0x78], 0
jmp 0x4b1bd9
test edi, edi
je 0x4b09b6
push edi
push dword [ebp - 0x13c]
push 0x204e
push dword [edi]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4b09ae
cmp edi, 0xfffffffc
jne 0x4b1bd9
mov ecx, ebx
call fcn.004af2b4
push eax
push dword [ebp - 0x13c]
push 0x6cdcfc
call sub.OLEACC.dll_LresultFromObject
jmp 0x4b09ae
test edi, edi
je 0x4b1bd9
push edi
push dword [ebp - 0x13c]
push 0x2111
push edi
jmp 0x4b112f
mov eax, 0x204
cmp esi, eax
ja 0x4b1725
je 0x4b168c
mov eax, esi
sub eax, 0x113
je 0x4b1533
sub eax, 0x20
je 0x4b1518
sub eax, 5
je 0x4b1518
sub eax, 0xc8
je 0x4b13ae
sub eax, 1
je 0x4b12f0
sub eax, 1
je 0x4b1272
sub eax, 1
jne 0x4b1bd9
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_SetFocus]
movsx eax, di
shr edi, 0x10
movsx ecx, di
push ecx
mov dword [ebp - 0x138], ecx
mov dword [ebx + 0x84], ecx
mov ecx, ebx
push eax
mov dword [ebp - 0x34], eax
mov dword [ebx + 0x80], eax
call fcn.004af137
mov esi, eax
test esi, esi
je 0x4b1bd9
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x4b1bd9
mov ecx, ebx
call fcn.004aee43
mov ecx, ebx
call fcn.004b336a
xor eax, eax
lea edi, [ebp - 0x2c]
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x30], 0x10
mov word [ebp - 0x1a], ax
mov dword [ebp - 0x2c], esi
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x30]
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x108]
mov dword [ebx + 0x78], esi
jmp 0x4b1bd9
mov ecx, ebx
call fcn.004b2420
mov eax, edi
movsx esi, di
shr eax, 0x10
cmp dword [ebx + 0x78], 0
cwde
mov dword [ebp - 0x34], eax
mov dword [ebx + 0x80], esi
mov dword [ebx + 0x84], eax
je 0x4b1bd9
mov ecx, ebx
call fcn.004aee43
xor eax, eax
lea edi, [ebp - 0x2c]
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x78]
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x30], 0xe
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], eax
mov word [ebp - 0x1a], cx
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [ebx + 0x78]
and dword [ebx + 0x78], 0
mov dword [ebp - 0x28], eax
mov eax, dword [ecx]
lea edx, [ebp - 0x30]
push edx
jmp 0x4b150d
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, edi
movsx ecx, di
shr eax, 0x10
cwde
push eax
mov dword [ebp - 0x34], ecx
mov dword [ebx + 0x80], ecx
push ecx
mov ecx, ebx
mov dword [ebp - 0x138], eax
mov dword [ebx + 0x84], eax
call fcn.004af137
mov esi, eax
test esi, esi
je 0x4b1bd9
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x4b1bd9
mov dword [ebx + 0x78], esi
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0xf0]
mov ecx, ebx
call fcn.004aee43
mov ecx, ebx
call fcn.004b336a
xor eax, eax
lea edi, [ebp - 0x2c]
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x30], 0xd
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x20], eax
mov word [ebp - 0x1a], cx
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x30]
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x108]
push esi
mov ecx, ebx
call fcn.004b32df
jmp 0x4b1bd9
cmp byte [ebx + 0xd0], 0
jne 0x4b1409
xor eax, eax
lea edi, [ebp - 0x58]
cmp dword [ebx + 0x38], 0
stosd dword es:[edi], eax
push 3
pop edx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x5c], 0x10
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x54], eax
jne 0x4b13e1
mov dword [ebp - 0x50], 0x190
jmp 0x4b13f5
push 0
push edx
push 0x415
push dword [ebx + 0x38]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.COMCTL32.dll__TrackMouseEvent]
mov edi, dword [ebp - 0x40]
mov byte [ebx + 0xd0], 1
mov eax, edi
movsx ecx, di
shr eax, 0x10
cwde
push eax
mov dword [ebp - 0x34], ecx
mov dword [ebx + 0x80], ecx
push ecx
mov ecx, ebx
mov dword [ebp - 0x138], eax
mov dword [ebx + 0x84], eax
call fcn.004af137
mov esi, eax
test esi, esi
je 0x4b1445
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x4b1bd9
and dword [ebp - 0x30], 0
lea edi, [ebp - 0x2c]
xor eax, eax
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x18], eax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [ebx + 0x74]
mov dword [ebp - 0x28], eax
cmp esi, ecx
je 0x4b14b9
test ecx, ecx
je 0x4b14b9
mov dword [ebp - 0x30], 0xa
lea edx, [ebp - 0x30]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x108]
and dword [ebx + 0x74], 0
cmp dword [ebx + 0x38], 0
je 0x4b14b9
lea eax, [ebx + 0x3c]
push eax
push 0
push 0x411
push dword [ebx + 0x38]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp esi, dword [ebx + 0x74]
je 0x4b14dd
test esi, esi
je 0x4b14dd
mov dword [ebp - 0x30], 0xb
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x2c], esi
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x108]
mov dword [ebx + 0x74], esi
mov ecx, dword [ebx + 0x78]
test ecx, ecx
je 0x4b14f3
mov dword [ebp - 0x30], 9
mov dword [ebp - 0x2c], ecx
jmp 0x4b12e5
test esi, esi
je 0x4b1bd9
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], 9
mov dword [ebp - 0x2c], esi
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x108]
jmp 0x4b1bd9
test edi, edi
je 0x4b1bd9
push edi
push dword [ebp - 0x13c]
lea eax, [esi + 0x2000]
push eax
jmp 0x4b1174
mov esi, dword [ebp - 0x13c]
mov eax, 0x2000
cmp si, ax
jne 0x4b1590
cmp byte [ebx + 0x2f5], 0
je 0x4b1590
lea edi, [ebx + 0x2f8]
push edi
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x4b1590
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x4b1bd9
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4b1bd9
push 1
push edi
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x4b1bd9
lea ecx, [ebx + 0xe0]
xor edi, edi
call fcn.0064a060
test eax, eax
jle 0x4b1610
push edi
lea ecx, [ebx + 0xe0]
call fcn.004b48d0
mov edx, eax
mov dword [ebp - 0x34], edx
mov ecx, dword [edx + 8]
cmp ecx, dword [ebx + 8]
jne 0x4b15c8
movzx ecx, si
cmp dword [edx + 0xc], ecx
jne 0x4b15c8
cmp byte [edx + 0x10], 0
je 0x4b15da
lea ecx, [ebx + 0xe0]
inc edi
call fcn.0064a060
cmp edi, eax
jl 0x4b15a1
jmp 0x4b1610
push 7
xor eax, eax
lea edi, [ebp - 0x2c]
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [edx]
mov dword [ebp - 0x2c], eax
mov eax, dword [edx + 4]
mov dword [ebp - 0x30], 0x18
mov dword [ebp - 0x18], eax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [ebp - 0x34]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
push edx
mov ecx, dword [ecx]
mov eax, dword [ecx]
call dword [eax + 0x108]
mov edi, 0xfff0
cmp esi, edi
jne 0x4b1bd9
mov ecx, dword [ebx + 0x340]
test ecx, ecx
je 0x4b1bd9
mov eax, dword [ecx]
cmp eax, dword [ebx + 8]
jne 0x4b1bd9
movzx eax, byte [ecx + 4]
mov ecx, ebx
push eax
call fcn.004aefee
mov eax, dword [ebx + 0x340]
mov ecx, ebx
push dword [eax + 8]
call fcn.004b32df
mov eax, dword [ebx + 0x340]
mov ecx, ebx
push dword [eax + 8]
call fcn.004b32a7
mov eax, dword [ebx + 0x340]
push edi
push dword [eax]
call dword [sym.imp.USER32.dll_KillTimer]
push 0xc
push dword [ebx + 0x340]
call fcn.004aab65
and dword [ebx + 0x340], 0
pop ecx
pop ecx
jmp 0x4b1bd9
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, edi
movsx ecx, di
shr eax, 0x10
cwde
push eax
mov dword [ebp - 0x34], ecx
mov dword [ebx + 0x80], ecx
push ecx
mov ecx, ebx
mov dword [ebp - 0x138], eax
mov dword [ebx + 0x84], eax
call fcn.004af137
mov esi, eax
test esi, esi
je 0x4b1bd9
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x4b1bd9
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0xf0]
mov ecx, ebx
call fcn.004aee43
mov ecx, ebx
call fcn.004b336a
xor eax, eax
lea edi, [ebp - 0x2c]
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x30], 0xf
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x20], eax
mov word [ebp - 0x1a], cx
jmp 0x4b1250
sub esi, 0x20a
je 0x4b1b24
sub esi, 0x97
je 0x4b19a9
dec esi
sub esi, 1
je 0x4b196a
sub esi, 0x3d
je 0x4b1908
sub esi, 0x38
je 0x4b17a3
sub esi, 0x7ce9
jne 0x4b1bd9
lea esi, [ebx + 0x110]
xor edi, edi
mov ecx, esi
call fcn.0064a060
test eax, eax
jle 0x4b1797
push edi
mov ecx, esi
call fcn.004b48d0
test eax, eax
je 0x4b1788
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
mov ecx, esi
inc edi
call fcn.0064a060
cmp edi, eax
jl 0x4b1774
mov ebx, dword [ebp - 0x34]
mov ecx, esi
call fcn.004b4cb7
jmp 0x4b1bd9
and dword [ebp - 0x24], 0
lea edi, [ebp - 0x20]
and dword [ebp - 0x60], 0
xor eax, eax
stosd dword es:[edi], eax
xorps xmm0, xmm0
movups xmmword [ebp - 0x4c], xmm0
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0x5c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x4c]
push eax
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x4b09b6
cmp byte [ebx + 0xcd], al
je 0x4b17f6
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.004b4146
mov esi, dword [ebp - 0x13c]
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x40]
mov ecx, ebx
sub eax, dword [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x4c]
push eax
push esi
call fcn.004aee8e
test al, al
je 0x4b18ed
cmp byte [ebx + 0x2f5], 0
je 0x4b1858
lea ecx, [ebx + 0x270]
call fcn.004b50ee
test al, al
jne 0x4b1858
lea eax, [ebp - 0x60]
mov ecx, ebx
push eax
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x4c]
push eax
push esi
call fcn.004aee8e
test al, al
je 0x4b18ed
push esi
call dword [sym.imp.GDI32.dll_SaveDC]
cmp byte [ebx + 0x2f5], 0
mov dword [ebp - 0x34], eax
je 0x4b1881
push 1
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
push eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.004aeffe
sub esp, 0x10
lea esi, [ebp - 0x4c]
mov edi, esp
mov ecx, ebx
push dword [ebp - 0x24]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004b1e78
cmp byte [ebx + 0x2f5], 0
je 0x4b18b4
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
push eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.004aed03
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x48]
mov esi, dword [ebp - 0x13c]
push 0xcc0020
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x4c]
push eax
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x34]
push esi
call dword [sym.imp.GDI32.dll_RestoreDC]
lea eax, [ebp - 0x24]
mov ecx, ebx
push eax
call fcn.004b2432
lea eax, [ebp - 0x60]
mov ecx, ebx
push eax
call fcn.004b2432
jmp 0x4b1bd9
mov esi, dword [ebp - 0x13c]
mov ecx, ebx
mov eax, esi
shr eax, 0x10
mov dword [ebp - 0x150], eax
call fcn.004af543
mov ecx, eax
call fcn.004c900c
cmp eax, dword [ebp - 0x150]
je 0x4b195c
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x2e0
push eax
push 0x4b4274
push dword [ebx + 8]
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], edi
call dword [sym.imp.USER32.dll_EnumChildWindows]
push edi
push dword [ebp - 0x150]
mov ecx, ebx
call fcn.004b338d
mov ecx, dword [ebp - 0x148]
and dword [ecx], 0
jmp 0x4b09b6
cmp dword [ebx + 0x38], 0
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
je 0x4b1986
lea eax, [ebx + 0x3c]
push eax
push 0
push 0x411
push dword [ebx + 0x38]
call esi
cmp byte [ebx + 0xd0], 0
je 0x4b199d
push 0xffffffffffffffff
push 0
push 0x200
push dword [ebx + 8]
call esi
mov byte [ebx + 0xd0], 0
jmp 0x4b1bd9
movsx eax, di
shr edi, 0x10
movsx ecx, di
push ecx
mov dword [ebp - 0x138], ecx
mov ecx, ebx
push eax
mov byte [ebx + 0xd0], 0
mov dword [ebp - 0x34], eax
call fcn.004af137
mov esi, eax
mov dword [ebp - 0x40], esi
test esi, esi
je 0x4b1bd9
mov edx, dword [ebx + 0x74]
test edx, edx
je 0x4b1a1a
push 7
xor eax, eax
lea edi, [ebp - 0x2c]
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], 0xc
mov dword [ebp - 0x2c], edx
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [ebx + 0x74]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
cmp byte [ebx + 4], 0
je 0x4b1bd9
mov eax, dword [esi]
lea ecx, [ebp - 0xf4]
push ecx
mov ecx, esi
call dword [eax + 0x98]
and dword [ebp - 4], 0
lea ecx, [ebp - 0xf4]
call fcn.004b50ee
test al, al
je 0x4b1a58
lea ecx, [ebp - 0xf4]
call fcn.004b474b
jmp 0x4b09b6
push 0x2c
lea edi, [ebx + 0x3c]
push 0
push edi
call fcn.005f46f0
mov eax, dword [ebx + 8]
lea ecx, [ebp - 0xf4]
add esp, 0xc
mov dword [edi], 0x2c
mov dword [ebx + 0x40], 1
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x48], eax
mov eax, dword [0x728690]
mov dword [ebx + 0x5c], eax
call fcn.0041fc50
mov dword [ebx + 0x60], eax
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0x30]
mov esi, eax
lea edi, [ebx + 0x4c]
xor ecx, ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebx + 0x38], ecx
jne 0x4b1aea
push ecx
push dword [0x728690]
mov eax, accept
push ecx
push dword [ebx + 8]
push eax
push eax
push eax
push eax
push reloc.WS2_32.dll_closesocket
push ecx
push str.tooltips_class32
push ecx
call dword [sym.imp.USER32.dll_CreateWindowExW]
lea edi, [ebx + 0x3c]
mov dword [ebx + 0x38], eax
push edi
push 0
push 0x432
push eax
call esi
jmp 0x4b1aed
lea edi, [ebx + 0x3c]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx]
call dword [eax + 0xa4]
push eax
push 0
push 0x418
push dword [ebx + 0x38]
call esi
push edi
push 0
push 0x436
push dword [ebx + 0x38]
call esi
push edi
push 1
push 0x411
push dword [ebx + 0x38]
call esi
jmp 0x4b1a48
movsx eax, di
mov dword [ebp - 0x38], eax
mov eax, edi
shr eax, 0x10
cwde
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x38]
push eax
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
push eax
mov dword [ebx + 0x80], ecx
push ecx
mov ecx, ebx
mov dword [ebx + 0x84], eax
call fcn.004af137
mov esi, eax
test esi, esi
je 0x4b1bd9
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x4b1bd9
xor eax, eax
lea edi, [ebp - 0x2c]
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x13c]
shr eax, 0x10
shr eax, 0xf
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x30], 0x12
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x14], eax
call fcn.004b06a8
mov word [ebp - 0x1a], ax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x30]
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x108]
movzx ecx, word [ebx + 0x84]
movzx eax, word [ebx + 0x80]
shl ecx, 0x10
or ecx, eax
push ecx
push 0
push 0x200
push dword [ebx + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
lea edi, [ebx + 0x11c]
push 0
mov ecx, edi
call fcn.004b4ec9
mov esi, eax
test esi, esi
je 0x4b1c77
add ebx, 0xd4
push 0
mov ecx, edi
call fcn.004b522b
mov ecx, dword [esi + 0x108]
test ecx, ecx
je 0x4b1c26
add ecx, 0x38
call fcn.004c2353
test al, al
je 0x4b1c26
mov ecx, dword [esi + 0x108]
push esi
add ecx, 0x38
call fcn.004c2369
mov ecx, ebx
xor edi, edi
call fcn.0064a060
test eax, eax
jle 0x4b1c4e
push edi
mov ecx, ebx
call fcn.004b48d0
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
mov ecx, ebx
inc edi
call fcn.0064a060
cmp edi, eax
jl 0x4b1c33
mov ecx, esi
call fcn.004fb2f4
push 0x120
push esi
call fcn.004aab65
mov edi, dword [ebp - 0x150]
pop ecx
pop ecx
push 0
mov ecx, edi
call fcn.004b4ec9
mov esi, eax
test esi, esi
jne 0x4b1bf8
xor al, al
call fcn.0065deb5
ret 0x10