Function at 0x42f7f7
Capabilities:
Check for unmoving mouse cursor
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x604
push esi
push edi
mov dword [ebp - 0x5bc], ecx
xor eax, eax
mov al, byte [0x452918]
and eax, 1
test eax, eax
jne 0x42f83c
mov cl, byte [0x452918]
or cl, 1
mov byte [0x452918], cl
mov ecx, 0x4528f0
call fcn.0043f840
push 0x432a19
call fcn.0044343a
add esp, 4
cmp dword [0x452930], 0
jne 0x42f859
mov ecx, 0x4528f0
call fcn.00434920
mov dword [0x452930], 1
mov dword [ebp - 0xc], 0xfffffffe
push 0
lea edx, [ebp - 0x10]
push edx
push 0x454
mov eax, dword [ebp - 0x5bc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x5bc]
call dword [edx + 8]
cmp dword [ebp - 0x10], 0
je 0x42f88d
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x5c0], eax
jmp 0x42f899
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x5c0], edx
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
mov dword [ebp - 8], eax
mov dword [ebp - 0x18], 0
mov ecx, dword [ebp + 8]
cmp dword [ecx], 1
jne 0x430aa6
mov dword [ebp - 0x18], 1
mov dword [ebp - 0xc], 1
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x5c4], edx
cmp dword [ebp - 0x5c4], 0x100
ja 0x42f937
cmp dword [ebp - 0x5c4], 0x100
je 0x430a3b
mov eax, dword [ebp - 0x5c4]
sub eax, 2
mov dword [ebp - 0x5c4], eax
cmp dword [ebp - 0x5c4], 0xf1
ja case.0x42f930.11
mov edx, dword [ebp - 0x5c4]
xor ecx, ecx
mov cl, byte [edx + 0x43274b]
jmp dword [ecx*4 + 0x43271b]
cmp dword [ebp - 0x5c4], 0x201
ja 0x42f9dd
cmp dword [ebp - 0x5c4], 0x201
je 0x430431
cmp dword [ebp - 0x5c4], 0x106
ja 0x42f9a8
cmp dword [ebp - 0x5c4], 0x106
je 0x4308ef
cmp dword [ebp - 0x5c4], 0x101
je 0x4309b4
cmp dword [ebp - 0x5c4], 0x102
je 0x430934
cmp dword [ebp - 0x5c4], 0x105
je 0x4309b4
jmp case.0x42f930.11
cmp dword [ebp - 0x5c4], 0x132
jb case.0x42f930.11
cmp dword [ebp - 0x5c4], 0x138
jbe 0x430087
cmp dword [ebp - 0x5c4], 0x200
je 0x430a6b
jmp case.0x42f930.11
cmp dword [ebp - 0x5c4], 0x204
ja 0x42fa1e
cmp dword [ebp - 0x5c4], 0x204
je case.0x42f930.9
cmp dword [ebp - 0x5c4], 0x202
je 0x430a6b
cmp dword [ebp - 0x5c4], 0x203
je 0x430431
jmp case.0x42f930.11
cmp dword [ebp - 0x5c4], 0x206
je case.0x42f930.9
cmp dword [ebp - 0x5c4], 0x1634
je 0x42fa3f
jmp case.0x42f930.11
mov eax, dword [ebp - 8]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5bc]
add edx, dword [eax + 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ecx], edx
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x5bc]
add eax, dword [ecx + 0x2c]
mov edx, dword [ebp - 0x24]
mov dword [edx + 4], eax
jmp 0x430aa6
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0xb0]
and ecx, 0xb
cmp ecx, 0xb
jne 0x42faab
push 2
mov ecx, dword [ebp - 0x5bc]
call fcn.0041ae20
test eax, eax
jne 0x42faab
push 0x3e9
mov ecx, dword [ebp - 0x5bc]
call fcn.0041ae20
test eax, eax
je 0x42fab2
mov dword [ebp - 0x18], 0
jmp 0x430aa6
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0xb4]
push eax
push 0xfffffffffffffffc
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SetWindowLongA]
xor eax, eax
mov ax, word [0x45291c]
push eax
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_RemovePropA]
xor eax, eax
mov ax, word [0x45291a]
push eax
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_RemovePropA]
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0xb4]
push edx
call dword [sym.imp.USER32.dll_CallWindowProcA]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x5bc]
mov dword [eax + 0x1c], 0
mov ecx, dword [ebp - 0x5bc]
mov dx, word [ecx + 0x26]
and dx, 0xfbff
mov eax, dword [ebp - 0x5bc]
mov word [eax + 0x26], dx
jmp 0x430aa6
mov ecx, dword [ebp - 0x5bc]
cmp dword [ecx + 0x48], 0
jne 0x42fb9d
mov edx, dword [ebp - 0x5bc]
xor eax, eax
mov ax, word [edx + 0x22]
and eax, 4
test eax, eax
je 0x42fb9d
push 2
push 0
push 0xffffffffffffffee
lea ecx, [ebp - 0x340]
call fcn.0040abe5
push eax
mov ecx, dword [0x452438]
mov edx, dword [ecx]
mov ecx, dword [0x452438]
call dword [edx + 0x14]
jmp 0x42fbf3
mov eax, dword [ebp - 0x5bc]
cmp dword [eax + 0x48], 0
jne 0x42fbce
push 2
push 0
push 0xfffffffffffffff5
lea ecx, [ebp - 0x378]
call fcn.0040abe5
push eax
mov ecx, dword [0x452438]
mov edx, dword [ecx]
mov ecx, dword [0x452438]
call dword [edx + 0x14]
jmp 0x42fbf3
push 2
push 0
push 0xfffffe01
lea ecx, [ebp - 0x3b0]
call fcn.0040abe5
push eax
mov eax, dword [0x452438]
mov edx, dword [eax]
mov ecx, dword [0x452438]
call dword [edx + 0x14]
jmp 0x430aa6
call dword [sym.imp.KERNEL32.dll_GetVersion]
and eax, reloc.CTL3D32.dll_Ordinal_3
cmp eax, reloc.CTL3D32.dll_Ordinal_3
je 0x42fc38
mov eax, dword [ebp - 8]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x5bc]
add ecx, 0x38
call fcn.0041a3d0
mov ecx, dword [ebp - 0x28]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x5bc]
add ecx, 0x38
call fcn.0041a350
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x10], eax
jmp 0x430aa6
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x26]
and ecx, 0x1000
test ecx, ecx
je 0x42fdca
push 0x3e9
mov ecx, dword [ebp - 0x5bc]
call fcn.0041ae20
test eax, eax
jne 0x42fdca
mov edx, dword [ebp - 0x5bc]
xor eax, eax
mov ax, word [edx + 0x26]
and eax, 2
neg eax
sbb eax, eax
and al, 0xfe
add eax, 0xffffff36
mov dword [ebp - 0x2c], eax
push 0
lea ecx, [ebp - 0x3c]
push ecx
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_GetUpdateRect]
test eax, eax
jne 0x42fcc0
mov ecx, dword [ebp - 0x5bc]
xor edx, edx
mov dx, word [ecx + 0x26]
and edx, 0x400
test edx, edx
jne 0x42fdca
mov esi, dword [ebp + 8]
mov ecx, 0xe
lea edi, [ebp - 0x74]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [ebp - 0x3c]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x5bc]
mov eax, dword [ebp - 0x38]
add eax, dword [edx + 0x2c]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0x28]
mov eax, dword [ebp - 0x34]
lea ecx, [eax + edx + 1]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x2c]
mov ecx, dword [ebp - 0x30]
lea edx, [ecx + eax + 1]
mov dword [ebp - 0x40], edx
push 0
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x5bc]
call fcn.0041af86
mov ecx, dword [ebp - 0x5bc]
mov dword [ecx + 0x94], eax
push 0x452680
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_BeginPaint]
mov dword [0x4526d4], eax
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0x34]
push edx
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x30]
push ecx
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x2c]
push eax
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0x28]
push edx
push 0
mov eax, dword [0x452434]
mov edx, dword [eax]
mov ecx, dword [0x452434]
call dword [edx + 0x4c]
mov eax, dword [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x74]
push ecx
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5bc]
call dword [eax + 0xc]
push 0
mov ecx, dword [0x452434]
mov edx, dword [ecx]
mov ecx, dword [0x452434]
call dword [edx + 0x50]
push 0x452680
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_EndPaint]
xor eax, eax
jmp 0x432713
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0xb4]
push edx
call dword [sym.imp.USER32.dll_CallWindowProcA]
mov dword [ebp - 0xc], eax
jmp 0x430aa6
mov eax, dword [ebp - 8]
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x5bc]
cmp dword [ecx + 0x48], 0
je 0x42fe95
mov word [ebp - 0x7c], 0
push 0x3ef
lea edx, [ebp - 0x7c]
push edx
push 3
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x48]
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x48]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [ebp - 0x7c]
and eax, 0xffff
and eax, 0x20
cmp eax, 0x20
jne 0x42fe95
mov ecx, dword [ebp - 0x7c]
and ecx, 0xffff
and ecx, 2
test ecx, ecx
jne 0x42fe95
mov edx, dword [ebp - 0x78]
mov eax, dword [edx + 0x10]
and eax, 1
test eax, eax
je 0x42fe7c
mov ecx, dword [ebp - 0x5bc]
mov dx, word [ecx + 0x26]
or dl, 8
mov eax, dword [ebp - 0x5bc]
mov word [eax + 0x26], dx
jmp 0x42fe95
mov ecx, dword [ebp - 0x5bc]
mov dx, word [ecx + 0x26]
and dx, 0xfff7
mov eax, dword [ebp - 0x5bc]
mov word [eax + 0x26], dx
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx + 0x10]
and edx, 0x10
test edx, edx
je 0x42febb
mov eax, dword [ebp - 0x5bc]
mov cx, word [eax + 0x26]
or cl, 2
mov edx, dword [ebp - 0x5bc]
mov word [edx + 0x26], cx
jmp 0x42fed4
mov eax, dword [ebp - 0x5bc]
mov cx, word [eax + 0x26]
and cx, 0xfffd
mov edx, dword [ebp - 0x5bc]
mov word [edx + 0x26], cx
mov eax, dword [ebp - 0x78]
cmp dword [eax], 2
jne 0x42fefe
mov ecx, dword [ebp - 0x78]
cmp dword [ecx + 0xc], 4
jne 0x42fefe
mov edx, dword [ebp - 0x78]
add edx, 0x1c
push edx
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0x18]
push ecx
call dword [sym.imp.USER32.dll_DrawFocusRect]
jmp 0x430075
mov edx, dword [ebp - 0x78]
mov eax, dword [edx + 0x18]
mov dword [0x4526d4], eax
push 0x3e9
mov ecx, dword [ebp - 0x5bc]
mov ecx, dword [ecx + 0x48]
call fcn.0041ae20
test eax, eax
je 0x42ffb1
mov ecx, dword [ebp - 0x5bc]
add ecx, 0x38
call fcn.0041a350
sub eax, 1
mov dword [ebp - 0xbc], eax
mov edx, dword [ebp - 0x5bc]
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0x1c]
mov dword [edx + 0x28], ecx
mov edx, dword [ebp - 0x5bc]
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0x20]
mov dword [edx + 0x2c], ecx
mov edx, dword [ebp - 0x78]
mov eax, dword [edx + 0x24]
sub eax, 1
mov ecx, dword [ebp - 0x5bc]
mov dword [ecx + 0x30], eax
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x2c]
add eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x5bc]
mov dword [ecx + 0x34], eax
mov edx, dword [ebp - 0xbc]
push edx
mov ecx, dword [ebp - 0x5bc]
add ecx, 0x28
call fcn.0041a3d0
push eax
push 0
push 0
push 0
mov eax, dword [0x452434]
mov edx, dword [eax]
mov ecx, dword [0x452434]
call dword [edx + 0x4c]
jmp 0x42ffc8
mov eax, dword [ebp - 0x5bc]
add eax, 0x28
push eax
push 0
mov ecx, dword [0x452434]
call fcn.0041a310
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx + 0xc]
and edx, 4
test edx, edx
jne 0x42ffe1
mov dword [ebp - 0x5c8], 0xffffff36
jmp 0x42fffa
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0x10]
and ecx, 0x10
neg ecx
sbb ecx, ecx
and cl, 0x41
add ecx, 0xfffffff3
mov dword [ebp - 0x5c8], ecx
mov edx, dword [ebp - 0x5c8]
mov dword [ebp - 0xb8], edx
mov eax, dword [ebp - 0x5bc]
add eax, 0x28
push eax
push 0
mov ecx, dword [ebp - 0xb8]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0040ac56
push 0
mov edx, dword [ebp - 0xc]
push edx
mov ecx, dword [ebp - 0x5bc]
call fcn.0041af86
mov ecx, dword [ebp - 0x5bc]
mov dword [ecx + 0x94], eax
mov edx, dword [ebp - 0xb8]
push edx
lea eax, [ebp - 0xb4]
push eax
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5bc]
call dword [edx + 0xc]
mov dword [ebp - 0xc], eax
push 0
mov eax, dword [0x452434]
mov edx, dword [eax]
mov ecx, dword [0x452434]
call dword [edx + 0x50]
cmp dword [ebp - 0xc], 0
jne 0x430082
mov dword [ebp - 0x18], 0
jmp 0x430aa6
mov eax, dword [ebp - 8]
mov dword [ebp - 0xc0], eax
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc4], ecx
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0xc0]
cmp eax, dword [edx + 0xc]
jne 0x43036b
mov ecx, dword [ebp - 0x5bc]
xor edx, edx
mov dx, word [ecx + 0x26]
and edx, 0x1000
test edx, edx
je 0x4300e6
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [sym.imp.USER32.dll_DefWindowProcA]
push ecx
call dword [sym.imp.USER32.dll_CallWindowProcA]
mov dword [ebp - 0xc], eax
jmp 0x430369
mov dword [ebp - 0xc8], 0
mov edx, dword [ebp - 0x5bc]
mov dword [ebp - 0xc8], edx
jmp 0x43010d
mov eax, dword [ebp - 0xc8]
mov ecx, dword [eax + 0x48]
mov dword [ebp - 0xc8], ecx
cmp dword [ebp - 0xc8], 0
je 0x430145
push 1
push 0
push 0xffffff36
mov ecx, dword [ebp - 0xc8]
call fcn.0041af86
push eax
mov edx, dword [0x452434]
mov eax, dword [edx]
mov ecx, dword [0x452434]
call dword [eax + 0x28]
cmp eax, 0xff
jne 0x430145
jmp 0x4300fe
cmp dword [ebp - 0xc8], 0
jne 0x43015e
push 8
call dword [sym.imp.USER32.dll_GetSysColor]
mov dword [ebp - 0x5cc], eax
jmp 0x43018a
push 1
push 0
push 0xffffff36
mov ecx, dword [ebp - 0xc8]
call fcn.0041af86
push eax
mov ecx, dword [0x452434]
mov edx, dword [ecx]
mov ecx, dword [0x452434]
call dword [edx + 0x28]
mov dword [ebp - 0x5cc], eax
mov eax, dword [ebp - 0x5cc]
push eax
mov ecx, dword [ebp - 0xc4]
push ecx
call dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 0xcc], 0
mov edx, dword [ebp - 0x5bc]
mov dword [ebp - 0xcc], edx
jmp 0x4301c5
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax + 0x48]
mov dword [ebp - 0xcc], ecx
cmp dword [ebp - 0xcc], 0
je 0x4301fd
push 0
push 0
push 0xffffff36
mov ecx, dword [ebp - 0xcc]
call fcn.0041af86
push eax
mov edx, dword [0x452434]
mov eax, dword [edx]
mov ecx, dword [0x452434]
call dword [eax + 0x28]
cmp eax, 0xff
jne 0x4301fd
jmp 0x4301b6
cmp dword [ebp - 0xcc], 0
jne 0x430216
push 5
call dword [sym.imp.USER32.dll_GetSysColor]
mov dword [ebp - 0x5d0], eax
jmp 0x430242
push 0
push 0
push 0xffffff36
mov ecx, dword [ebp - 0xcc]
call fcn.0041af86
push eax
mov ecx, dword [0x452434]
mov edx, dword [ecx]
mov ecx, dword [0x452434]
call dword [edx + 0x28]
mov dword [ebp - 0x5d0], eax
mov eax, dword [ebp - 0x5d0]
push eax
mov ecx, dword [ebp - 0xc4]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
cmp dword [0x45292c], 0
je 0x4302a3
mov edx, dword [0x45292c]
push edx
mov eax, dword [ebp - 0xc4]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0xd0], eax
mov ecx, dword [ebp - 0xd0]
push ecx
mov edx, dword [ebp - 0xc4]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [0x45292c]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [0x45292c], 0
cmp dword [0x45292c], 0
jne 0x430361
cmp dword [ebp - 0xcc], 0
jne 0x4302c9
push 5
call dword [sym.imp.USER32.dll_GetSysColor]
mov dword [ebp - 0x5d4], eax
jmp 0x4302f5
push 0
push 0
push 0xffffff36
mov ecx, dword [ebp - 0xcc]
call fcn.0041af86
push eax
mov ecx, dword [0x452434]
mov edx, dword [ecx]
mov ecx, dword [0x452434]
call dword [edx + 0x28]
mov dword [ebp - 0x5d4], eax
mov eax, dword [ebp - 0x5d4]
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [0x45292c], eax
mov ecx, dword [0x45292c]
push ecx
call dword [sym.imp.GDI32.dll_UnrealizeObject]
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0
lea edx, [ebp - 0xd8]
push edx
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_ClientToScreen]
lea edx, [ebp - 0xe0]
push edx
mov eax, dword [ebp - 0xd4]
push eax
mov ecx, dword [ebp - 0xd8]
push ecx
mov edx, dword [ebp - 0xc4]
push edx
call dword [sym.imp.GDI32.dll_SetBrushOrgEx]
mov eax, dword [0x45292c]
mov dword [ebp - 0xc], eax
jmp 0x4303b3
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0xc0]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x4303b3
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0xb4]
push ecx
call dword [sym.imp.USER32.dll_CallWindowProcA]
mov dword [ebp - 0xc], eax
jmp 0x430aa6
mov edx, dword [ebp - 0x5bc]
xor eax, eax
mov ax, word [edx + 0x26]
and eax, 0x2000
test eax, eax
jne 0x4303fb
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0xb4]
push ecx
call dword [sym.imp.USER32.dll_CallWindowProcA]
mov dword [ebp - 0xc], eax
jmp 0x430aa6
mov edx, dword [ebp - 0x5bc]
cmp dword [edx + 0x48], 0
jne 0x430431
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
push 0xa1
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0xb4]
push edx
call dword [sym.imp.USER32.dll_CallWindowProcA]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x26]
and ecx, 0x2000
test ecx, ecx
je 0x43069d
lea ecx, [ebp - 0x140]
call fcn.0043f840
lea ecx, [ebp - 0x118]
call fcn.0040abb0
lea ecx, [ebp - 0x17c]
call fcn.0040abb0
mov esi, dword [ebp + 8]
mov ecx, 0xe
lea edi, [ebp - 0x17c]
rep movsd dword es:[edi], dword [esi]
cmp dword [ebp - 0x14], 0x200
jb 0x43048e
cmp dword [ebp - 0x14], 0x209
jbe 0x430509
mov edx, dword [ebp - 8]
mov dword [ebp - 0x188], edx
movsx eax, word [ebp - 0x188]
mov dword [ebp - 0x184], eax
movsx ecx, word [ebp - 0x186]
mov dword [ebp - 0x180], ecx
lea edx, [ebp - 0x184]
push edx
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_ScreenToClient]
mov edx, dword [ebp - 0x180]
shl edx, 0x10
mov eax, dword [ebp - 0x184]
or eax, edx
mov dword [ebp - 0x164], eax
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0x28]
add edx, dword [ebp - 0x184]
mov dword [ebp - 0x154], edx
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x2c]
add ecx, dword [ebp - 0x180]
mov dword [ebp - 0x150], ecx
push 0x4528f0
lea ecx, [ebp - 0x140]
call fcn.00434980
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0
jle 0x430536
mov edx, dword [ebp - 0x144]
mov dword [ebp - 0x5d8], edx
jmp 0x430544
mov eax, dword [ebp - 0x144]
neg eax
mov dword [ebp - 0x5d8], eax
mov ecx, dword [ebp - 0x5d8]
cmp ecx, dword [0x44dc00]
jge 0x4305a1
mov dword [ebp - 0x118], 0x1389
mov edx, dword [ebp - 0x5bc]
movsx eax, word [edx + 0x5c]
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp - 0x5bc]
mov dword [ebp - 0xf0], ecx
push 2
lea edx, [ebp - 0x118]
push edx
mov eax, dword [0x452438]
mov edx, dword [eax]
mov ecx, dword [0x452438]
call dword [edx + 0x14]
lea ecx, [ebp - 0x140]
call fcn.00434a10
jmp 0x430aa6
mov eax, dword [ebp - 0x5bc]
cmp dword [eax + 0x48], 0
je 0x4305dc
cmp dword [ebp - 4], 0
je 0x4305c8
call dword [sym.imp.USER32.dll_GetFocus]
cmp eax, dword [ebp - 4]
je 0x4305c8
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.USER32.dll_SetFocus]
lea edx, [ebp - 0x17c]
push edx
mov ecx, dword [ebp - 0x5bc]
call fcn.00433532
jmp 0x4305fb
mov eax, dword [ebp + 8]
cmp dword [eax + 0x10], 0x201
je 0x4305f4
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x10], 0x203
jne 0x4305fb
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x118], 0x1388
mov edx, dword [ebp - 0x5bc]
movsx eax, word [edx + 0x5c]
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp - 0x5bc]
mov dword [ebp - 0xf0], ecx
push 2
lea edx, [ebp - 0x118]
push edx
mov eax, dword [0x452438]
mov edx, dword [eax]
mov ecx, dword [0x452438]
call dword [edx + 0x14]
mov dword [ebp - 0x118], 0x138a
mov dword [ebp - 0x114], 0x1100
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0xec], ecx
push 2
lea edx, [ebp - 0x118]
push edx
mov eax, dword [0x452438]
mov edx, dword [eax]
mov ecx, dword [0x452438]
call dword [edx + 0x14]
lea eax, [ebp - 0x140]
push eax
mov ecx, 0x4528f0
call fcn.00434940
lea ecx, [ebp - 0x140]
call fcn.00434a10
jmp 0x4306cd
mov ecx, dword [ebp - 0x5bc]
xor edx, edx
mov dx, word [ecx + 0x20]
and edx, 0x400
test edx, edx
jne 0x4306cd
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x22]
and ecx, 2
test ecx, ecx
jne 0x4306cd
mov dword [ebp - 0x18], 0
jmp 0x430aa6
mov edx, dword [ebp - 0x5bc]
xor eax, eax
mov ax, word [edx + 0x26]
and eax, 0x2000
test eax, eax
je 0x43073a
lea ecx, [ebp - 0x1c0]
call fcn.0040abb0
mov dword [ebp - 0x1c0], 0x138a
mov dword [ebp - 0x1bc], 0x2200
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x28]
mov eax, dword [ecx + 0x2c]
mov dword [ebp - 0x198], edx
mov dword [ebp - 0x194], eax
push 2
lea ecx, [ebp - 0x1c0]
push ecx
mov edx, dword [0x452438]
mov eax, dword [edx]
mov ecx, dword [0x452438]
call dword [eax + 0x14]
jmp 0x430aa6
mov dword [ebp - 0x18], 0
jmp 0x430aa6
mov ecx, dword [ebp - 0x5bc]
xor edx, edx
mov dx, word [ecx + 0x20]
and edx, 0x400
test edx, edx
jne 0x43076f
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x22]
and ecx, 2
test ecx, ecx
je 0x430774
jmp 0x430aa6
mov edx, dword [ebp - 0x5bc]
xor eax, eax
mov ax, word [edx + 0x26]
and eax, 0x802
test eax, eax
jne 0x4307d7
mov ecx, dword [ebp - 0x5bc]
mov dx, word [ecx + 0x26]
or dh, 8
mov eax, dword [ebp - 0x5bc]
mov word [eax + 0x26], dx
push 0
push 0xfffffe70
lea ecx, [ebp - 0x3e8]
call fcn.0040abe5
push eax
mov ecx, dword [ebp - 0x5bc]
call fcn.0042f7f7
mov ecx, dword [ebp - 0x5bc]
mov dx, word [ecx + 0x26]
and dx, 0xf7ff
mov eax, dword [ebp - 0x5bc]
mov word [eax + 0x26], dx
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0xb4]
push eax
call dword [sym.imp.USER32.dll_CallWindowProcA]
mov dword [ebp - 0xc], eax
jmp 0x430aa6
mov ecx, dword [ebp - 0x5bc]
xor edx, edx
mov dx, word [ecx + 0x26]
and edx, 0x2000
test edx, edx
je 0x430841
mov eax, dword [ebp - 0x5bc]
cmp dword [eax + 0x48], 0
je 0x430841
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov dword [ebp - 0xc], 1
jmp 0x430869
mov ecx, dword [0x45243c]
cmp dword [ecx + 0x158], 0
je 0x430859
mov dword [ebp - 0xc], 1
jmp 0x430869
mov dword [ebp - 0x18], 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc]
mov dword [ebp - 4], eax
jmp 0x430aa6
mov ecx, dword [ebp - 0x5bc]
xor edx, edx
mov dx, word [ecx + 0x20]
and edx, 0x400
test edx, edx
jne 0x4308ea
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x22]
and ecx, 2
test ecx, ecx
jne 0x4308ea
mov edx, dword [ebp - 0x5bc]
cmp dword [edx + 0x1c], 0
je 0x4308e3
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x26]
and ecx, 0x1000
test ecx, ecx
je 0x4308e3
push 0x3e9
mov ecx, dword [ebp - 0x5bc]
call fcn.0041ae20
test eax, eax
jne 0x4308e3
push 0
push 0
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x4308ea
mov dword [ebp - 0x18], 0
jmp 0x430aa6
mov ecx, dword [ebp - 0x5bc]
cmp dword [ecx + 0x48], 0
je 0x430928
mov edx, dword [ebp + 8]
push edx
push 0
mov ecx, dword [ebp - 0x5bc]
call fcn.0041b771
mov dword [ebp - 0x5dc], eax
mov eax, dword [ebp - 0x5dc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x5dc]
call dword [edx + 0x10]
mov dword [ebp - 0xc], eax
jmp 0x43092f
mov dword [ebp - 0x18], 0
jmp 0x430aa6
cmp dword [ebp - 0x1c], 0x20
jb 0x4309a8
push 0xd
mov ecx, dword [ebp - 0x5bc]
call fcn.0041ae20
test eax, eax
jne 0x4309a8
mov eax, dword [ebp - 0x5bc]
cmp dword [eax + 0x48], 0
je 0x4309a8
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0x48]
xor eax, eax
mov ax, word [edx + 0x22]
and eax, 0x20
test eax, eax
je 0x4309a8
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
push 0x106
mov eax, dword [ebp - 4]
push eax
push 1
lea ecx, [ebp - 0x420]
call fcn.0042ae40
push eax
mov ecx, dword [ebp - 0x5bc]
mov ecx, dword [ecx + 0x48]
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x48]
mov edx, dword [eax]
call dword [edx + 0x10]
mov dword [ebp - 0xc], eax
jmp 0x4309af
mov dword [ebp - 0x18], 0
jmp 0x430aa6
mov eax, dword [0x45243c]
cmp dword [eax + 0x158], 0
je 0x4309e3
lea ecx, [ebp - 0x1c8]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov edx, dword [ebp - 0x1c4]
push edx
mov eax, dword [ebp - 0x1c8]
push eax
call dword [sym.imp.USER32.dll_SetCursorPos]
cmp dword [0x452444], 0
je 0x430a32
push 0x12
push 0x12
push 0x12
push 0x12
push 0x7d2
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x10]
push eax
call fcn.00434a80
add esp, 0x1c
cmp eax, 0x3f1
jne 0x430a32
push 0
mov ecx, dword [0x45243c]
push ecx
mov edx, dword [0x452444]
mov eax, dword [edx]
mov ecx, dword [0x452444]
call dword [eax + 4]
jmp 0x430a39
mov dword [ebp - 0x18], 0
jmp 0x430aa6
mov ecx, dword [0x45243c]
cmp dword [ecx + 0x158], 0
je 0x430a6b
lea edx, [ebp - 0x1d0]
push edx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [ebp - 0x1cc]
push eax
mov ecx, dword [ebp - 0x1d0]
push ecx
call dword [sym.imp.USER32.dll_SetCursorPos]
mov dword [ebp - 0x18], 0
jmp 0x430aa6
mov edx, dword [ebp - 0x5bc]
cmp dword [edx + 0x1c], 0
je 0x430aa6
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0xb4]
push edx
call dword [sym.imp.USER32.dll_CallWindowProcA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x18], 0
jne 0x432710
push 1
push 0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x5bc]
call fcn.0041ae90
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x5e0], ecx
cmp dword [ebp - 0x5e0], 0xfffffff7
jg 0x430b6d
cmp dword [ebp - 0x5e0], 0xfffffff7
je 0x430c64
cmp dword [ebp - 0x5e0], 0xffffff38
jg 0x430b3c
cmp dword [ebp - 0x5e0], 0xffffff38
je 0x430fb7
mov edx, dword [ebp - 0x5e0]
add edx, 0x19c
mov dword [ebp - 0x5e0], edx
cmp dword [ebp - 0x5e0], 0xd3
ja case.0x430c5d.4
mov ecx, dword [ebp - 0x5e0]
xor eax, eax
mov al, byte [ecx + 0x432861]
jmp dword [eax*4 + 0x43283d]
mov edx, dword [ebp - 0x5e0]
add edx, 0x1a
mov dword [ebp - 0x5e0], edx
cmp dword [ebp - 0x5e0], 0x10
ja case.0x430c5d.4
mov ecx, dword [ebp - 0x5e0]
xor eax, eax
mov al, byte [ecx + 0x432951]
jmp dword [eax*4 + 0x432935]
cmp dword [ebp - 0x5e0], 0x41f
jg 0x430c30
cmp dword [ebp - 0x5e0], 0x41e
jge 0x4325bf
cmp dword [ebp - 0x5e0], 0x3ec
jg 0x430bfc
cmp dword [ebp - 0x5e0], 0x3ec
je case.0x430c5d.2
cmp dword [ebp - 0x5e0], 0x3ea
jg 0x430be7
cmp dword [ebp - 0x5e0], 0x3ea
je 0x43242f
cmp dword [ebp - 0x5e0], 0xa
je 0x432695
cmp dword [ebp - 0x5e0], 0x3e9
je 0x43254c
jmp case.0x430c5d.4
cmp dword [ebp - 0x5e0], 0x3eb
je case.0x430c5d.1
jmp case.0x430c5d.4
mov edx, dword [ebp - 0x5e0]
sub edx, 0x3ed
mov dword [ebp - 0x5e0], edx
cmp dword [ebp - 0x5e0], 0x30
ja case.0x430c5d.4
mov ecx, dword [ebp - 0x5e0]
xor eax, eax
mov al, byte [ecx + 0x432972]
jmp dword [eax*4 + 0x432962]
mov edx, dword [ebp - 0x5e0]
sub edx, 0x422
mov dword [ebp - 0x5e0], edx
cmp dword [ebp - 0x5e0], 0x61
ja case.0x430c5d.4
mov ecx, dword [ebp - 0x5e0]
xor eax, eax
mov al, byte [ecx + 0x4329b7]
jmp dword [eax*4 + 0x4329a3]
mov edx, dword [ebp - 0x5bc]
xor eax, eax
mov ax, word [edx + 0x5e]
test eax, eax
jne 0x430d52
mov ecx, dword [ebp - 0x5bc]
cmp dword [ecx + 0x48], 0
je 0x430d52
push 0
mov ecx, dword [ebp - 0x5bc]
call fcn.0041b771
mov dword [ebp - 0x20], eax
push 0
mov ecx, dword [ebp - 0x20]
call fcn.0041b140
and eax, 0xffff
test eax, eax
je 0x430cc2
push 0
mov ecx, dword [ebp - 0x20]
call fcn.0041b140
and eax, 0xffff
mov dword [ebp - 0x5e4], eax
jmp 0x430ccc
mov dword [ebp - 0x5e4], 1
mov edx, dword [ebp - 0x5bc]
mov ax, word [ebp - 0x5e4]
mov word [edx + 0x5e], ax
mov ecx, dword [ebp - 0x5bc]
xor edx, edx
mov dx, word [ecx + 0x5e]
add edx, 1
push edx
mov ecx, dword [ebp - 0x20]
call fcn.0041b140
mov eax, dword [ebp - 0x5bc]
movsx ecx, byte [eax + 0x60]
test ecx, ecx
jne 0x430d52
mov edx, dword [str.FIELD_]
push edx
mov eax, dword [ebp - 0x5bc]
add eax, 0x60
push eax
call fcn.0041c899
add esp, 8
push 0
push 0xa
mov ecx, dword [ebp - 0x5bc]
add ecx, 0x60
push ecx
call fcn.0041c968
add esp, 4
mov edx, dword [ebp - 0x5bc]
lea eax, [edx + eax + 0x60]
push eax
mov ecx, dword [ebp - 0x5bc]
xor edx, edx
mov dx, word [ecx + 0x5e]
push edx
call fcn.0041cd5f
add esp, 0x10
mov eax, dword [ebp - 0x5bc]
mov dword [eax + 0xb0], 0
mov ecx, dword [ebp - 0x5bc]
xor edx, edx
mov dx, word [ecx + 0x20]
and edx, 4
test edx, edx
je 0x430da8
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x26]
and ecx, 0x1000
test ecx, ecx
jne 0x430da8
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0xb0]
or eax, 0x800000
mov ecx, dword [ebp - 0x5bc]
mov dword [ecx + 0xb0], eax
mov edx, dword [ebp - 0x5bc]
cmp dword [edx + 0x48], 0
je 0x430dd2
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0xb0]
or ecx, 0x50000000
mov edx, dword [ebp - 0x5bc]
mov dword [edx + 0xb0], ecx
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x20]
and ecx, 0x400
test ecx, ecx
je 0x430e05
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0xb0]
or eax, 0x8000000
mov ecx, dword [ebp - 0x5bc]
mov dword [ecx + 0xb0], eax
mov edx, dword [ebp - 0x5bc]
xor eax, eax
mov ax, word [edx + 0x22]
and eax, 0x4000
test eax, eax
jne 0x430e47
mov ecx, dword [ebp - 0x5bc]
cmp dword [ecx + 0x48], 0
je 0x430e47
mov edx, dword [ebp - 0x5bc]
xor eax, eax
mov ax, word [edx + 0x20]
and eax, 0x200
test eax, eax
jne 0x430e47
mov dword [ebp - 0x5e8], 0
jmp 0x430e51
mov dword [ebp - 0x5e8], 1
mov ecx, dword [ebp - 0x5e8]
push ecx
mov edx, dword [ebp - 0x5bc]
add edx, 0x38
push edx
mov ecx, dword [ebp - 0x5bc]
call fcn.0041b1d1
jmp 0x4326c6
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x26]
and ecx, 0x400
test ecx, ecx
jne 0x430e95
mov edx, dword [ebp - 0x5bc]
mov dword [edx + 0x1c], 0
jmp 0x4326c6
mov eax, dword [ebp - 0x5bc]
cmp dword [eax + 0x1c], 0
je 0x430eb6
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0xb0]
or ecx, 0xb
mov edx, dword [ebp - 0x5bc]
mov dword [edx + 0xb0], ecx
push 0
push 0
push 0x452920
push 0x44fa2c
push str.UI_WINDOW_OBJECT
mov ecx, dword [ebp - 0x5bc]
call fcn.00432a28
jmp 0x4326c6
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x26]
and ecx, 0x4000
test ecx, ecx
je 0x430f0f
jmp 0x4326c6
mov edx, dword [ebp - 0x5bc]
cmp dword [edx + 0x48], 0
je 0x430f9a
mov eax, dword [ebp - 0x5bc]
push eax
mov ecx, dword [ebp - 0x5bc]
mov ecx, dword [ecx + 0x48]
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x48]
mov edx, dword [eax]
call dword [edx + 0x14]
push 0x17
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x48]
call fcn.0041ae20
test eax, eax
je 0x430f98
mov ecx, dword [0x452434]
mov eax, dword [ecx + 0x1c]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov edx, dword [ebp - 0x5bc]
mov ecx, dword [edx + 0x2c]
sub ecx, eax
mov edx, dword [ebp - 0x5bc]
mov dword [edx + 0x2c], ecx
mov eax, dword [0x452434]
mov eax, dword [eax + 0x1c]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0x34]
sub edx, eax
mov eax, dword [ebp - 0x5bc]
mov dword [eax + 0x34], edx
jmp 0x430fb2
mov ecx, dword [ebp - 0x5bc]
push ecx
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5bc]
call dword [eax + 0x14]
jmp 0x4326c6
mov ecx, dword [ebp + 8]
add ecx, 0x28
mov edx, dword [ebp - 0x5bc]
add edx, 0x38
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x5bc]
cmp dword [edx + 0x48], 0
je 0x431067
mov eax, dword [ebp - 0x5bc]
push eax
mov ecx, dword [ebp - 0x5bc]
mov ecx, dword [ecx + 0x48]
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x48]
mov edx, dword [eax]
call dword [edx + 0x14]
push 0x17
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x48]
call fcn.0041ae20
test eax, eax
je 0x431065
mov ecx, dword [0x452434]
mov eax, dword [ecx + 0x1c]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov edx, dword [ebp - 0x5bc]
mov ecx, dword [edx + 0x2c]
sub ecx, eax
mov edx, dword [ebp - 0x5bc]
mov dword [edx + 0x2c], ecx
mov eax, dword [0x452434]
mov eax, dword [eax + 0x1c]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0x34]
sub edx, eax
mov eax, dword [ebp - 0x5bc]
mov dword [eax + 0x34], edx
jmp 0x43107f
mov ecx, dword [ebp - 0x5bc]
push ecx
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5bc]
call dword [eax + 0x14]
cmp dword [ebp - 0x10], 0
je 0x4310c3
push 1
mov ecx, dword [ebp - 0x5bc]
add ecx, 0x28
call fcn.0041a350
push eax
mov ecx, dword [ebp - 0x5bc]
add ecx, 0x28
call fcn.0041a3d0
push eax
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0x2c]
push edx
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.USER32.dll_MoveWindow]
jmp 0x4326c6
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x26]
and ecx, 0x4000
test ecx, ecx
je 0x431100
push 0
mov edx, dword [ebp - 0xc]
push edx
mov ecx, dword [ebp - 0x5bc]
call fcn.0041af86
mov ecx, dword [ebp - 0x5bc]
mov dword [ecx + 0x94], eax
jmp 0x4326c6
cmp dword [ebp - 0xc], 0xffffff34
jne 0x431121
mov edx, dword [ebp - 0x5bc]
mov ax, word [edx + 0x26]
or al, 2
mov ecx, dword [ebp - 0x5bc]
mov word [ecx + 0x26], ax
jmp 0x431139
mov edx, dword [ebp - 0x5bc]
mov ax, word [edx + 0x26]
and ax, 0xfffd
mov ecx, dword [ebp - 0x5bc]
mov word [ecx + 0x26], ax
push 0x14
mov ecx, dword [ebp - 0x5bc]
call fcn.0041ae20
test eax, eax
je case.0x430b35.6
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0
mov ecx, dword [ebp - 0xc]
push ecx
mov ecx, dword [ebp - 0x5bc]
call fcn.0041af86
mov edx, dword [ebp - 0x5bc]
mov dword [edx + 0x94], eax
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x26]
and ecx, 0x800
test ecx, ecx
jne 0x431199
mov edx, dword [ebp - 0x5bc]
cmp dword [edx + 0x1c], 0
jne 0x43119e
jmp 0x4314bd
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x26]
and ecx, 0x400
test ecx, ecx
jne 0x431226
mov edx, dword [ebp - 0x5bc]
xor eax, eax
mov ax, word [edx + 0x26]
and eax, 0x1000
test eax, eax
je 0x431221
mov ecx, dword [ebp - 0x5bc]
cmp dword [ecx + 0x48], 0
je 0x431205
push 0x3e9
mov edx, dword [ebp - 0x5bc]
mov ecx, dword [edx + 0x48]
call fcn.0041ae20
test eax, eax
jne 0x431221
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x48]
xor edx, edx
mov dx, word [ecx + 0x26]
and edx, 0x1000
test edx, edx
je 0x431221
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5bc]
call dword [eax + 0xc]
mov dword [ebp - 0xc], eax
jmp 0x4314bd
cmp dword [ebp - 0xc], 0xffffff34
jne 0x4313bc
mov dword [ebp - 0x1d4], 0
mov ecx, dword [ebp - 0x5bc]
mov dword [ebp - 0x1d4], ecx
jmp 0x43125a
mov edx, dword [ebp - 0x1d4]
mov eax, dword [edx + 0x48]
mov dword [ebp - 0x1d4], eax
mov ecx, dword [ebp - 0x1d4]
cmp dword [ecx + 0x48], 0
je 0x43127d
mov edx, dword [ebp - 0x1d4]
xor eax, eax
mov ax, word [edx + 0x22]
and eax, 4
test eax, eax
je 0x43127b
jmp 0x43127d
jmp 0x43124b
mov ecx, dword [0x45243c]
call fcn.004119d0
cmp dword [ebp - 0x1d4], eax
je 0x431295
jmp 0x4326c6
mov ecx, dword [ebp - 0x5bc]
cmp dword [ecx + 0x48], 0
jne 0x43133e
mov edx, dword [ebp - 0x5bc]
mov ax, word [edx + 0x26]
or ah, 8
mov ecx, dword [ebp - 0x5bc]
mov word [ecx + 0x26], ax
push 0
push 1
push 6
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x20]
and ecx, 0x800
test ecx, ecx
je 0x431314
push 0xffffffffffffffff
push 0
push 0xb1
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0xb7
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_SetFocus]
mov edx, dword [ebp - 0x5bc]
mov ax, word [edx + 0x26]
and ax, 0xf7ff
mov ecx, dword [ebp - 0x5bc]
mov word [ecx + 0x26], ax
jmp 0x4313b7
mov edx, dword [ebp - 0x5bc]
xor eax, eax
mov ax, word [edx + 0x20]
and eax, 0x800
test eax, eax
je 0x4313b7
push 0x3f0
mov ecx, dword [ebp - 0x5bc]
call fcn.0041ae20
test eax, eax
je 0x431385
push 0x7fff0000
push 0
push 0x142
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x4313b7
push 0xffffffffffffffff
push 0
push 0xb1
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0xb7
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x4314bd
cmp dword [ebp - 0xc], 0xffffff36
je 0x4313d2
cmp dword [ebp - 0xc], 0xffffff35
jne 0x4314bd
mov ecx, dword [ebp - 0x5bc]
add ecx, 0x28
push ecx
mov ecx, dword [ebp + 8]
add ecx, 0x28
call fcn.004349b0
test eax, eax
je 0x431458
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0
mov ecx, dword [ebp + 8]
add ecx, 0x28
call fcn.0041a3d0
add eax, 1
mov dword [ebp - 0x1dc], eax
mov ecx, dword [ebp + 8]
add ecx, 0x28
call fcn.0041a350
add eax, 1
mov dword [ebp - 0x1d8], eax
push 0
push 1
push 0xb
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
lea ecx, [ebp - 0x1e4]
push ecx
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x4314bd
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x28]
mov dword [ebp - 0x1f4], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x1f0], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x30]
add eax, 1
mov dword [ebp - 0x1ec], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x34]
add edx, 1
mov dword [ebp - 0x1e8], edx
push 0
push 1
push 0xb
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
push 1
lea edx, [ebp - 0x1f4]
push edx
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov edx, dword [ebp - 0x5bc]
xor eax, eax
mov ax, word [edx + 0x26]
and eax, 0x4000
test eax, eax
jne 0x4314e1
cmp dword [ebp - 0xc], 0xffffff34
je 0x4314e6
cmp dword [ebp - 0xc], 0xfffffff3
je 0x4314e6
jmp 0x4326c6
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x5bc]
call fcn.0041b859
mov dword [ebp - 0xc], eax
jmp 0x4326c6
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x26]
and ecx, 0x800
test ecx, ecx
je 0x4315a2
push 0
mov edx, dword [ebp - 0xc]
push edx
lea ecx, [ebp - 0x22c]
call fcn.0040abe5
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x5bc]
cmp dword [ecx + 0x48], 0
je 0x431555
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x48]
mov dword [ebp - 0x5ec], eax
jmp 0x431561
mov ecx, dword [0x45243c]
mov dword [ebp - 0x5ec], ecx
mov edx, dword [ebp - 0x5ec]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
mov cx, word [eax + 0x26]
or ch, 8
mov edx, dword [ebp - 0x20]
mov word [edx + 0x26], cx
lea eax, [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x20]
call dword [edx + 0x10]
mov eax, dword [ebp - 0x20]
mov cx, word [eax + 0x26]
and cx, 0xf7ff
mov edx, dword [ebp - 0x20]
mov word [edx + 0x26], cx
jmp 0x4315c9
mov eax, dword [ebp - 0x5bc]
cmp dword [eax + 0x48], 0
je 0x4315c9
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x5bc]
mov ecx, dword [edx + 0x48]
mov eax, dword [ebp - 0x5bc]
mov edx, dword [eax + 0x48]
mov eax, dword [edx]
call dword [eax + 0x10]
jmp 0x4326c6
mov ecx, dword [ebp - 0x5bc]
cmp dword [ecx + 0x1c], 0
je 0x431658
mov edx, dword [ebp - 0x5bc]
cmp dword [edx + 0x48], 0
je 0x431658
push 0x3e9
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x48]
call fcn.0041ae20
test eax, eax
je 0x431658
lea ecx, [ebp - 0x23c]
push ecx
mov ecx, dword [ebp - 0x5bc]
call fcn.0040f41f
push eax
push 0x198
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x23c]
push ecx
mov ecx, dword [ebp - 0x5bc]
add ecx, 0x28
call fcn.00411980
push 1
lea edx, [ebp - 0x23c]
push edx
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x43178e
mov edx, dword [ebp - 0x5bc]
xor eax, eax
mov ax, word [edx + 0x26]
and eax, 0x400
test eax, eax
jne 0x431672
jmp 0x4326c6
mov ecx, dword [ebp - 0x5bc]
cmp dword [ecx + 0x1c], 0
je 0x431749
mov edx, dword [ebp - 0x5bc]
mov ax, word [edx + 0x26]
or ah, 1
mov ecx, dword [ebp - 0x5bc]
mov word [ecx + 0x26], ax
push 0
push 1
push 0xb
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 1
push 0
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov edx, dword [ebp - 0x5bc]
cmp dword [edx + 0x48], 0
jne 0x431747
mov eax, dword [ebp - 0x5bc]
cmp dword [eax + 8], 0
je 0x431747
mov ecx, dword [ebp - 0x5bc]
call fcn.0040b590
cmp dword [eax + 0x1c], 0
je 0x431747
mov dword [ebp - 0x240], 0
mov ecx, dword [ebp - 0x5bc]
cmp dword [ecx + 4], 0
je 0x43172c
push 0
lea edx, [ebp - 0x240]
push edx
push 0x454
mov ecx, dword [ebp - 0x5bc]
call fcn.0041a2a0
mov dword [ebp - 0x5f0], eax
mov eax, dword [ebp - 0x5f0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x5f0]
call dword [edx + 8]
push 0x1b
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x240]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x43178e
mov edx, dword [ebp - 0x5bc]
cmp dword [edx + 0x48], 0
je 0x43178e
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x48]
xor edx, edx
mov dx, word [ecx + 0x26]
and edx, 0x4000
test edx, edx
jne 0x43178e
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x5bc]
mov ecx, dword [ecx + 0x48]
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x48]
mov edx, dword [eax]
call dword [edx + 0x10]
jmp 0x432713
jmp 0x4326c6
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0xc]
je 0x4317c3
push 2
push 0
mov edx, dword [ebp - 0xc]
push edx
lea ecx, [ebp - 0x458]
call fcn.0040abe5
push eax
mov eax, dword [0x452438]
mov edx, dword [eax]
mov ecx, dword [0x452438]
call dword [edx + 0x14]
jmp 0x4317ca
mov dword [ebp - 0xc], 0xfffffffe
jmp 0x4326c6
mov dword [ebp - 0xc], 0xfffffe6d
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x22]
and ecx, 0x1000
test ecx, ecx
jne 0x431817
mov edx, dword [0x45243c]
mov eax, dword [edx + 0x158]
cmp eax, dword [ebp - 0x5bc]
je 0x431817
push 0xfffffb47
push 0x1e
mov ecx, dword [0x452438]
call fcn.0040afe1
jmp 0x431904
push 0x3e9
mov ecx, dword [0x45243c]
mov ecx, dword [ecx + 0x158]
call fcn.0041ae20
test eax, eax
je 0x4318e4
mov dword [ebp - 0x244], 0
push 0
lea edx, [ebp - 0x248]
push edx
push 0x10
mov eax, dword [0x45243c]
mov ecx, dword [eax + 0x158]
mov edx, dword [0x45243c]
mov eax, dword [edx + 0x158]
mov edx, dword [eax]
call dword [edx + 8]
jmp 0x431879
mov ecx, dword [ebp - 0x248]
call fcn.0040b590
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0
je 0x4318a6
mov eax, dword [ebp - 0x248]
xor ecx, ecx
mov cx, word [eax + 0x26]
and ecx, 8
test ecx, ecx
je 0x4318a4
mov edx, dword [ebp - 0x244]
add edx, 1
mov dword [ebp - 0x244], edx
jmp 0x431868
cmp dword [ebp - 0x244], 1
jne 0x4318d0
xor eax, eax
cmp dword [ebp - 0xc], 0xfffffe6d
sete al
add eax, 0xfffffb45
push eax
push 0x1e
mov ecx, dword [0x452438]
call fcn.0040afe1
jmp 0x4318e2
push 0xfffffb47
push 0x1e
mov ecx, dword [0x452438]
call fcn.0040afe1
jmp 0x431904
xor ecx, ecx
cmp dword [ebp - 0xc], 0xfffffe6d
sete cl
add ecx, 0xfffffb45
push ecx
push 0x1e
mov ecx, dword [0x452438]
call fcn.0040afe1
jmp 0x4326c6
mov dword [ebp - 0xc], 0xfffffe6b
mov dword [ebp - 0x24c], 0
cmp dword [ebp - 0xc], 0xfffffe6b
jne 0x431ac9
push 0x3e9
mov edx, dword [0x45243c]
mov ecx, dword [edx + 0x158]
call fcn.0041ae20
test eax, eax
je 0x431ac9
mov dword [ebp - 0x28c], 0
push 0
lea eax, [ebp - 0x290]
push eax
push 0x10
mov ecx, dword [0x45243c]
mov ecx, dword [ecx + 0x158]
mov edx, dword [0x45243c]
mov eax, dword [edx + 0x158]
mov edx, dword [eax]
call dword [edx + 8]
jmp 0x43198a
mov ecx, dword [ebp - 0x290]
call fcn.0040b590
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0
je 0x4319c3
mov eax, dword [ebp - 0x290]
xor ecx, ecx
mov cx, word [eax + 0x26]
and ecx, 8
test ecx, ecx
je 0x4319c1
mov edx, dword [ebp - 0x290]
mov dword [ebp - 0x250], edx
mov eax, dword [ebp - 0x28c]
add eax, 1
mov dword [ebp - 0x28c], eax
jmp 0x431979
cmp dword [ebp - 0x28c], 1
je 0x4319d1
jmp 0x4326c6
push 0
push 0xfffffe6f
lea ecx, [ebp - 0x288]
call fcn.0040abe5
mov ecx, dword [ebp - 0x250]
mov dword [ebp - 0x260], ecx
lea edx, [ebp - 0x288]
push edx
mov eax, dword [0x45243c]
mov ecx, dword [eax + 0x158]
mov edx, dword [0x45243c]
mov eax, dword [edx + 0x158]
mov edx, dword [eax]
call dword [edx + 0x10]
push 0
push 0xffffffffffffffef
lea ecx, [ebp - 0x490]
call fcn.0040abe5
push eax
mov eax, dword [0x45243c]
mov ecx, dword [eax + 0x158]
mov edx, dword [0x45243c]
mov eax, dword [edx + 0x158]
mov edx, dword [eax]
call dword [edx + 0x10]
push 0
lea eax, [ebp - 0x24c]
push eax
push 0xb
mov ecx, dword [ebp - 0x250]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x250]
call dword [edx + 8]
cmp dword [ebp - 0x24c], 0
je 0x431a7f
push 0
mov eax, dword [ebp - 0x24c]
push eax
push 0xc
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5bc]
call dword [edx + 8]
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x498], eax
mov ecx, dword [ebp - 0x498]
mov dword [ebp - 0x494], ecx
cmp dword [ebp - 0x494], 0
je 0x431aba
push 1
mov edx, dword [ebp - 0x494]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x494]
call dword [eax]
mov dword [ebp - 0x5f4], eax
jmp 0x431ac4
mov dword [ebp - 0x5f4], 0
jmp 0x431c92
cmp dword [ebp - 0xc], 0xfffffe6b
jne 0x431c17
mov ecx, dword [0x45243c]
mov edx, dword [ecx + 0x158]
cmp dword [edx + 0x48], 0
je 0x431c17
push 0x3e9
mov eax, dword [0x45243c]
mov ecx, dword [eax + 0x158]
mov ecx, dword [ecx + 0x48]
call fcn.0041ae20
test eax, eax
je 0x431c17
mov edx, dword [0x45243c]
mov eax, dword [edx + 0x158]
mov ecx, dword [eax + 0x48]
mov dword [ebp - 0x2cc], ecx
push 0
push 0xfffffe6f
lea ecx, [ebp - 0x2c8]
call fcn.0040abe5
mov edx, dword [0x45243c]
mov eax, dword [edx + 0x158]
mov dword [ebp - 0x2a0], eax
lea ecx, [ebp - 0x2c8]
push ecx
mov edx, dword [ebp - 0x2cc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2cc]
call dword [eax + 0x10]
push 0
push 0xffffffffffffffef
lea ecx, [ebp - 0x4d0]
call fcn.0040abe5
push eax
mov ecx, dword [ebp - 0x2cc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2cc]
call dword [edx + 0x10]
push 0
lea eax, [ebp - 0x24c]
push eax
push 0xb
mov ecx, dword [0x45243c]
mov ecx, dword [ecx + 0x158]
mov edx, dword [0x45243c]
mov eax, dword [edx + 0x158]
mov edx, dword [eax]
call dword [edx + 8]
cmp dword [ebp - 0x24c], 0
je 0x431bcb
push 0
mov eax, dword [ebp - 0x24c]
push eax
push 0xc
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5bc]
call dword [edx + 8]
mov eax, dword [0x45243c]
mov ecx, dword [eax + 0x158]
mov dword [ebp - 0x4d8], ecx
mov edx, dword [ebp - 0x4d8]
mov dword [ebp - 0x4d4], edx
cmp dword [ebp - 0x4d4], 0
je 0x431c0b
push 1
mov eax, dword [ebp - 0x4d4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x4d4]
call dword [edx]
mov dword [ebp - 0x5f8], eax
jmp 0x431c15
mov dword [ebp - 0x5f8], 0
jmp 0x431c92
push 0
lea eax, [ebp - 0x24c]
push eax
push 0xb
mov ecx, dword [0x45243c]
mov ecx, dword [ecx + 0x158]
mov edx, dword [0x45243c]
mov eax, dword [edx + 0x158]
mov edx, dword [eax]
call dword [edx + 8]
cmp dword [ebp - 0x24c], 0
je 0x431c64
push 0
mov eax, dword [ebp - 0x24c]
push eax
push 0xc
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5bc]
call dword [edx + 8]
cmp dword [ebp - 0xc], 0xfffffe6b
jne 0x431c92
push 0
push 0x452724
push 0xc
mov eax, dword [0x45243c]
mov ecx, dword [eax + 0x158]
mov edx, dword [0x45243c]
mov eax, dword [edx + 0x158]
mov edx, dword [eax]
call dword [edx + 8]
jmp 0x4326c6
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x26]
and ecx, 0x400
test ecx, ecx
je 0x431cd0
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0xb4]
push ecx
call dword [sym.imp.USER32.dll_CallWindowProcA]
mov edx, dword [ebp - 0x5bc]
xor eax, eax
mov ax, word [edx + 0x22]
and eax, 0x2400
test eax, eax
je 0x431d8b
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_SetCapture]
cmp dword [ebp - 0xc], 0x3eb
jne 0x431d09
mov dword [ebp - 0xc], 0x47e
mov eax, dword [0x45243c]
mov ecx, dword [ebp - 0x5bc]
mov dword [eax + 0x158], ecx
mov edx, dword [ebp - 0x5bc]
xor eax, eax
mov ax, word [edx + 0x22]
and eax, 0x2400
cmp eax, 0x2400
jne 0x431d4c
xor ecx, ecx
cmp dword [ebp - 0xc], 0x481
setne cl
add ecx, 0xfffffb45
mov dword [ebp - 0x2d0], ecx
jmp 0x431d77
mov edx, dword [ebp - 0x5bc]
xor eax, eax
mov ax, word [edx + 0x22]
and eax, 0x2000
test eax, eax
je 0x431d6d
mov dword [ebp - 0x2d0], 0xfffffb46
jmp 0x431d77
mov dword [ebp - 0x2d0], 0xfffffb45
mov ecx, dword [ebp - 0x2d0]
push ecx
push 0x1e
mov ecx, dword [0x452438]
call fcn.0040afe1
jmp 0x4326c6
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0xb4]
push ecx
call dword [sym.imp.USER32.dll_CallWindowProcA]
mov edx, dword [0x45243c]
cmp dword [edx + 0x158], 0
je 0x4320c9
mov eax, dword [ebp - 8]
and eax, 0xffff
mov dword [ebp - 0x2d8], eax
mov ecx, dword [ebp - 8]
shr ecx, 0x10
and ecx, 0xffff
and ecx, 0xffff
mov dword [ebp - 0x2d4], ecx
lea edx, [ebp - 0x2d8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
call dword [sym.imp.USER32.dll_ClientToScreen]
mov edx, dword [ebp - 0x2d4]
push edx
mov eax, dword [ebp - 0x2d8]
push eax
call dword [sym.imp.USER32.dll_WindowFromPoint]
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x2e0], 0
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0x48]
mov dword [ebp - 0x2e0], edx
jmp 0x431e44
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x48]
mov dword [ebp - 0x2e0], ecx
cmp dword [ebp - 0x2e0], 0
je 0x431e60
push 0x17
mov ecx, dword [ebp - 0x2e0]
call fcn.0041ae20
test eax, eax
je 0x431e60
jmp 0x431e35
cmp dword [ebp - 0x2dc], 0
je 0x431e93
call dword [sym.imp.USER32.dll_GetDesktopWindow]
cmp dword [ebp - 0x2dc], eax
je 0x431e93
mov edx, dword [ebp - 0x2dc]
cmp edx, dword [ebp - 0x10]
jne 0x431eaa
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [ebp - 0x2dc]
cmp ecx, dword [eax + 0x1c]
je 0x431eaa
push 0xfffffb47
push 0x1e
mov ecx, dword [0x452438]
call fcn.0040afe1
jmp 0x4320c9
mov edx, dword [ebp - 0x5bc]
mov eax, dword [ebp - 0x2dc]
cmp eax, dword [edx + 0x1c]
je 0x431ef5
mov ecx, dword [0x45243c]
mov edx, dword [ecx + 0x158]
cmp edx, dword [ebp - 0x5bc]
je 0x432030
cmp dword [ebp - 0x2e0], 0
je 0x432030
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [ebp - 0x2dc]
cmp ecx, dword [eax + 0x1c]
jne 0x432030
mov edx, dword [ebp - 0x5bc]
xor eax, eax
mov ax, word [edx + 0x22]
and eax, 0x1000
test eax, eax
jne 0x431f22
mov ecx, dword [0x45243c]
mov edx, dword [ecx + 0x158]
cmp edx, dword [ebp - 0x5bc]
jne 0x432019
mov eax, dword [0x45243c]
mov ecx, dword [eax + 0x158]
xor edx, edx
mov dx, word [ecx + 0x22]
and edx, 0x2400
cmp edx, 0x2400
jne 0x431f7d
cmp dword [ebp - 0xc], 0x47f
jne 0x431f56
mov dword [ebp - 0x5fc], 0xfffffe6d
jmp 0x431f6f
mov eax, dword [ebp - 0xc]
sub eax, 0x482
neg eax
sbb eax, eax
and al, 0xf9
add eax, 0xfffffe6c
mov dword [ebp - 0x5fc], eax
mov ecx, dword [ebp - 0x5fc]
mov dword [ebp - 0x2e4], ecx
jmp 0x431faf
mov edx, dword [0x45243c]
mov eax, dword [edx + 0x158]
xor ecx, ecx
mov cx, word [eax + 0x22]
and ecx, 0x2000
test ecx, ecx
je 0x431fa5
mov dword [ebp - 0x2e4], 0xfffffe6d
jmp 0x431faf
mov dword [ebp - 0x2e4], 0xfffffe6c
mov edx, dword [0x45243c]
mov eax, dword [edx + 0x158]
cmp eax, dword [ebp - 0x5bc]
je 0x431fea
mov ecx, dword [ebp - 0x5bc]
cmp dword [ecx + 0x58], 0
je 0x431fea
mov edx, dword [ebp - 0x2e4]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x5bc]
call fcn.0041b859
cmp eax, 0xfffffffe
jne 0x432017
mov ecx, dword [ebp + 8]
add ecx, 0x28
push ecx
push 0
mov edx, dword [ebp - 0x2e4]
push edx
lea ecx, [ebp - 0x510]
call fcn.0040aca0
push eax
mov eax, dword [ebp - 0x5bc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x5bc]
call dword [edx + 0x10]
jmp 0x43202b
push 0xfffffb47
push 0x1e
mov ecx, dword [0x452438]
call fcn.0040afe1
jmp 0x4320c9
push 0
mov eax, dword [ebp - 0x2dc]
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov esi, eax
push 0
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp esi, eax
jne 0x4320b7
mov eax, dword [ebp - 0x2dc]
push eax
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x4320b7
lea ecx, [ebp - 0x2d8]
push ecx
mov edx, dword [ebp - 0x2dc]
push edx
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x2d4]
shl eax, 0x10
mov ecx, dword [ebp - 0x2d8]
or ecx, eax
mov dword [ebp - 0x2e8], ecx
mov edx, dword [ebp - 0x2e8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x14]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 0x2dc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x4320c9
push 0xfffffb47
push 0x1e
mov ecx, dword [0x452438]
call fcn.0040afe1
jmp 0x4326c6
mov edx, dword [0x45243c]
cmp dword [edx + 0x158], 0
je 0x4323f6
mov eax, dword [ebp - 8]
mov dword [ebp - 0x2f8], eax
movsx ecx, word [ebp - 0x2f8]
mov dword [ebp - 0x2f0], ecx
movsx edx, word [ebp - 0x2f6]
mov dword [ebp - 0x2ec], edx
lea eax, [ebp - 0x2f0]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
push edx
call dword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [ebp - 0x2ec]
push eax
mov ecx, dword [ebp - 0x2f0]
push ecx
call dword [sym.imp.USER32.dll_WindowFromPoint]
mov dword [ebp - 0x2f4], eax
call dword [sym.imp.USER32.dll_GetCapture]
mov edx, dword [ebp - 0x5bc]
cmp eax, dword [edx + 0x1c]
jne 0x4321ab
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0xb4]
push edx
call dword [sym.imp.USER32.dll_CallWindowProcA]
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [ebp - 0x2f4]
cmp ecx, dword [eax + 0x1c]
jne 0x4321ab
mov dword [ebp - 0xc], 0x3ed
mov edx, dword [0x45243c]
mov dword [edx + 0x158], 0
push 0xfffffb50
push 0x1e
mov ecx, dword [0x452438]
call fcn.0040afe1
jmp 0x4326c6
mov dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x48]
mov dword [ebp - 0x2fc], ecx
jmp 0x4321d5
mov edx, dword [ebp - 0x2fc]
mov eax, dword [edx + 0x48]
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0
je 0x4321f1
push 0x17
mov ecx, dword [ebp - 0x2fc]
call fcn.0041ae20
test eax, eax
je 0x4321f1
jmp 0x4321c6
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ebp - 0x2f4]
cmp edx, dword [ecx + 0x1c]
je 0x43223b
mov eax, dword [0x45243c]
mov ecx, dword [eax + 0x158]
cmp ecx, dword [ebp - 0x5bc]
je 0x43233b
cmp dword [ebp - 0x2fc], 0
je 0x43233b
mov edx, dword [ebp - 0x2fc]
mov eax, dword [ebp - 0x2f4]
cmp eax, dword [edx + 0x1c]
jne 0x43233b
mov ecx, dword [ebp - 0x5bc]
xor edx, edx
mov dx, word [ecx + 0x22]
and edx, 0x1000
test edx, edx
je 0x432336
mov eax, dword [0x45243c]
mov ecx, dword [eax + 0x158]
xor edx, edx
mov dx, word [ecx + 0x22]
and edx, 0x2400
cmp edx, 0x2400
jne 0x4322b0
cmp dword [ebp - 0xc], 0x480
jne 0x432289
mov dword [ebp - 0x600], 0xfffffe6b
jmp 0x4322a2
mov eax, dword [ebp - 0xc]
sub eax, 0x483
neg eax
sbb eax, eax
and al, 0xfa
add eax, 0xfffffe6a
mov dword [ebp - 0x600], eax
mov ecx, dword [ebp - 0x600]
mov dword [ebp - 0x300], ecx
jmp 0x4322e2
mov edx, dword [0x45243c]
mov eax, dword [edx + 0x158]
xor ecx, ecx
mov cx, word [eax + 0x22]
and ecx, 0x2000
test ecx, ecx
je 0x4322d8
mov dword [ebp - 0x300], 0xfffffe6b
jmp 0x4322e2
mov dword [ebp - 0x300], 0xfffffe6a
mov edx, dword [ebp - 0x5bc]
cmp dword [edx + 0x58], 0
je 0x432309
mov eax, dword [ebp - 0x300]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x5bc]
call fcn.0041b859
cmp eax, 0xfffffffe
jne 0x432336
mov edx, dword [ebp + 8]
add edx, 0x28
push edx
push 0
mov eax, dword [ebp - 0x300]
push eax
lea ecx, [ebp - 0x548]
call fcn.0040aca0
push eax
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5bc]
call dword [edx + 0x10]
jmp 0x4323d0
mov eax, dword [ebp - 0x2f4]
cmp eax, dword [ebp - 0x10]
jne 0x43234b
jmp 0x4323d0
push 0
mov ecx, dword [ebp - 0x2f4]
push ecx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov esi, eax
push 0
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp esi, eax
jne 0x4323d0
mov ecx, dword [ebp - 0x2f4]
push ecx
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x4323d0
lea edx, [ebp - 0x2f0]
push edx
mov eax, dword [ebp - 0x2f4]
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x2ec]
shl ecx, 0x10
mov edx, dword [ebp - 0x2f0]
or edx, ecx
mov dword [ebp - 0x304], edx
mov eax, dword [ebp - 0x304]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x14]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 0x2f4]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x45243c]
mov dword [eax + 0x158], 0
push 0xfffffb50
push 0x1e
mov ecx, dword [0x452438]
call fcn.0040afe1
jmp 0x4326c6
mov ecx, dword [ebp - 0x5bc]
xor edx, edx
mov dx, word [ecx + 0x26]
and edx, 0x400
test edx, edx
je 0x43242f
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx + 0xb4]
push edx
call dword [sym.imp.USER32.dll_CallWindowProcA]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x308], eax
mov ecx, dword [ebp + 8]
cmp dword [ecx], 1
jne 0x432452
cmp dword [ebp - 0xc], 0x3ed
jne 0x432452
mov dword [ebp - 0xc], 0xfffffffe
jmp 0x4324c1
push 0x3ea
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x5bc]
call fcn.0041b859
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x5bc]
cmp dword [eax + 0x1c], 0
je 0x4324c1
push 0x3f4
mov ecx, dword [ebp - 0x5bc]
call fcn.0041ae20
test eax, eax
je 0x4324c1
mov ecx, dword [ebp - 0x5bc]
call fcn.0040f41f
push eax
mov ecx, dword [ebp - 0x5bc]
xor edx, edx
mov dx, word [ecx + 0x26]
and edx, 8
push edx
push 0x185
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0xc], 0xffffffff
cmp dword [ebp - 0x308], 0x3ea
jne 0x43250d
mov edx, dword [ebp - 0x5bc]
cmp dword [edx + 0x48], 0
je 0x43250d
push 0x3f6
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0x48]
call fcn.0041ae20
test eax, eax
je 0x43250d
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x5bc]
mov ecx, dword [edx + 0x48]
mov eax, dword [ebp - 0x5bc]
mov edx, dword [eax + 0x48]
mov eax, dword [edx]
call dword [eax + 0x10]
jmp 0x432547
cmp dword [ebp - 0x308], 0x3ea
jne 0x432547
cmp dword [ebp - 0xc], 0xffffffff
je 0x432547
mov ecx, dword [ebp + 8]
push ecx
push 1
mov ecx, dword [ebp - 0x5bc]
call fcn.0041b771
mov dword [ebp - 0x604], eax
mov edx, dword [ebp - 0x604]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x604]
call dword [eax + 0x10]
jmp 0x4326c6
mov ecx, dword [0x45243c]
mov dword [ecx + 0x158], 0
mov dword [ebp - 0xc], 0xfffffffe
jmp 0x4326c6
mov edx, dword [ebp - 0x5bc]
cmp dword [edx + 0x48], 0
je 0x43258e
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x4c]
test ecx, ecx
jne 0x43258e
mov eax, 0xfffffffe
jmp 0x432713
cmp dword [0x452444], 0
je 0x4325ba
mov edx, dword [ebp - 0x5bc]
mov ax, word [edx + 0x4c]
push eax
mov ecx, dword [0x45243c]
push ecx
mov edx, dword [0x452444]
mov eax, dword [edx]
mov ecx, dword [0x452444]
call dword [eax + 4]
jmp 0x4326c6
mov ecx, dword [ebp + 8]
cmp dword [ecx], 1
jne 0x4325ed
push 2
push 0
mov edx, dword [ebp - 0xc]
push edx
lea ecx, [ebp - 0x580]
call fcn.0040abe5
push eax
mov eax, dword [0x452438]
mov edx, dword [eax]
mov ecx, dword [0x452438]
call dword [edx + 0x14]
jmp 0x4325f4
mov dword [ebp - 0xc], 0xfffffffe
jmp 0x4326c6
mov eax, dword [ebp - 0x5bc]
cmp dword [eax + 0x48], 0
je case.0x430c29.2
push 0x3f6
mov ecx, dword [ebp - 0x5bc]
mov ecx, dword [ecx + 0x48]
call fcn.0041ae20
test eax, eax
jne case.0x430c29.2
push 0x3f5
mov edx, dword [ebp - 0x5bc]
mov ecx, dword [edx + 0x48]
call fcn.0041ae20
test eax, eax
jne case.0x430c29.2
mov dword [ebp - 0xc], 0xfffffffe
jmp 0x4326c6
mov eax, dword [ebp - 0x5bc]
cmp dword [eax + 0x48], 0
je 0x43268c
mov ecx, dword [ebp - 0x5bc]
xor edx, edx
mov dx, word [ecx + 0x26]
and edx, 0x800
test edx, edx
jne 0x43268c
push 0
mov eax, dword [ebp - 0xc]
push eax
lea ecx, [ebp - 0x5b8]
call fcn.0040abe5
push eax
mov ecx, dword [ebp - 0x5bc]
mov ecx, dword [ecx + 0x48]
mov edx, dword [ebp - 0x5bc]
mov eax, dword [edx + 0x48]
mov edx, dword [eax]
call dword [edx + 0x10]
jmp 0x432693
mov dword [ebp - 0xc], 0xfffffffe
jmp 0x4326c6
push 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
push ecx
push 0x102
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0xb4]
push ecx
call dword [sym.imp.USER32.dll_CallWindowProcA]
mov dword [ebp - 0xc], eax
jmp 0x4326c6
mov dword [ebp - 0xc], 0xfffffffe
cmp dword [ebp - 0xc], 0xfffffffe
jne 0x432710
mov edx, dword [ebp + 8]
cmp dword [edx], 1
jne 0x432710
mov eax, dword [ebp - 0x5bc]
xor ecx, ecx
mov cx, word [eax + 0x26]
and ecx, 0x400
test ecx, ecx
je 0x432710
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax + 0xb4]
push ecx
call dword [sym.imp.USER32.dll_CallWindowProcA]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4