Function at 0x448a80
Capabilities:
Check for time delay via gettickcount
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x499d5f
mov eax, dword fs:[0]
push eax
sub esp, 0x158
mov eax, dword [0x4c7650]
xor eax, esp
mov dword [esp + 0x150], eax
push ebx
push esi
push edi
mov eax, dword [0x4c7650]
xor eax, esp
push eax
lea eax, [esp + 0x168]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp + 8]
cmp dword [ebx], 0
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x18], edx
mov dword [esp + 0xb4], eax
je 0x449db1
lea ecx, [ebx + 0x104]
xor eax, eax
mov dword [esp + 0x20], ecx
call fcn.0044c691
mov esi, eax
test esi, esi
je 0x448b71
mov ecx, dword [esp + 0x20]
xor edx, edx
call fcn.0044c633
mov eax, dword [esi + 0x108]
test eax, eax
je 0x448b22
lea edx, [eax + 0x34]
mov eax, edx
call fcn.0045a9d5
test al, al
je 0x448b22
push esi
push edx
call fcn.0045aa32
lea eax, [ebx + 0xbc]
xor edi, edi
call fcn.0044c68a
test eax, eax
jle 0x448b57
mov ecx, edi
lea eax, [ebx + 0xbc]
call fcn.0044c6a3
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx]
lea eax, [ebx + 0xbc]
inc edi
call fcn.0044c68a
cmp edi, eax
jl 0x448b33
call fcn.0044866e
mov ecx, dword [esp + 0x20]
xor eax, eax
call fcn.0044c691
mov esi, eax
test esi, esi
jne 0x448af8
mov edx, dword [esp + 0x18]
and dword [esp + 0x24], 0
lea eax, [ebx + 0xe0]
call fcn.0044c68a
test eax, eax
jle 0x448bd0
mov ecx, dword [esp + 0x24]
lea eax, [ebx + 0xe0]
mov byte [esp + 0x1f], 0
call fcn.0044c6a3
mov edi, dword [eax]
lea ecx, [esp + 0x1f]
push ecx
push edx
push dword [esp + 0x1c]
mov ecx, eax
push dword [ebp + 0xc]
call dword [edi]
cmp byte [esp + 0x1f], 0
jne 0x448c5a
inc dword [esp + 0x24]
lea eax, [ebx + 0xe0]
call fcn.0044c68a
mov edx, dword [esp + 0x18]
cmp dword [esp + 0x24], eax
jl 0x448b85
mov ecx, dword [ebp + 0xc]
mov eax, 0x113
cmp ecx, eax
ja 0x4494f9
je 0x44946d
cmp ecx, 0x4e
ja 0x449293
je 0x449274
mov eax, ecx
sub eax, 5
je 0x449225
push 0xa
pop esi
sub eax, esi
je 0x448dd0
dec eax
je 0x448d45
sub eax, 4
je 0x448d33
sub eax, 0xc
je 0x448c6a
sub eax, 4
jne 0x449d31
mov eax, dword [ebx + 0x6c]
test eax, eax
jle 0x448c33
mov dword [edx + 0x18], eax
mov eax, dword [ebx + 0x70]
test eax, eax
jle 0x448c3d
mov dword [edx + 0x1c], eax
mov eax, dword [ebx + 0x74]
test eax, eax
jle 0x448c47
mov dword [edx + 0x20], eax
mov eax, dword [ebx + 0x78]
test eax, eax
jle 0x449d31
mov dword [edx + 0x24], eax
jmp 0x449d31
mov ecx, dword [esp + 0xb4]
mov dword [ecx], eax
mov al, 1
jmp 0x449db3
cmp dx, 1
jne 0x449d31
cmp byte [ebx + 0xb6], 0
jne 0x448c63
and dword [esp + 0x24], 0
xor eax, eax
lea edi, [esp + 0x28]
stosd dword es:[edi], eax
lea eax, [esp + 0x24]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [esp + 0x24]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_ScreenToClient]
push dword [esp + 0x28]
mov eax, ebx
push dword [esp + 0x28]
call fcn.0044b04b
mov esi, eax
test esi, esi
je 0x449d31
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
test al, 2
je 0x449d31
xor eax, eax
push 7
pop ecx
lea edi, [esp + 0x78]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x74], 0x17
mov dword [esp + 0x84], eax
call fcn.0044819c
mov word [esp + 0x8a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [esp + 0x74]
mov dword [esp + 0x7c], eax
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + pe_nt_image_headers32]
jmp 0x448c63
mov eax, dword [esp + 0xb4]
mov dword [eax], 1
jmp 0x448c63
and dword [esp + 0x34], 0
push 7
xor eax, eax
pop ecx
lea edi, [esp + 0x38]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x64]
mov dword [esp + 0x40], eax
mov eax, dword [ebx + 0x68]
mov dword [esp + 0x44], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x58]
mov dword [esp + 0x3c], eax
test ecx, ecx
je 0x448d89
lea edx, [esp + 0x34]
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], ecx
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
mov ecx, dword [ebx + 0x5c]
test ecx, ecx
je 0x448da9
lea edx, [esp + 0x34]
mov dword [esp + 0x34], 0xe
mov dword [esp + 0x38], ecx
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
push 0
mov esi, ebx
call fcn.0044a0ca
push 4
push dword [ebx]
call dword [sym.imp.USER32.dll_GetWindow]
test eax, eax
je 0x449d31
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x449d31
xor eax, eax
xor esi, esi
mov dword [esp + 0xc4], esi
lea edi, [esp + 0xc8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push esi
lea eax, [esp + 0xc8]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_GetUpdateRect]
test eax, eax
je 0x448c63
cmp dword [ebx + 0x50], esi
jne 0x448e39
push 0x3c
lea eax, [esp + 0x7c]
push esi
push eax
mov dword [esp + 0x80], esi
call fcn.0047d070
add esp, 0xc
lea eax, [esp + 0x74]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_BeginPaint]
lea eax, [esp + 0x74]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x448c63
cmp byte [ebx + 0xb1], 0
je 0x448f52
and dword [esp + 0xb4], esi
xor eax, eax
lea edi, [esp + 0xb8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [esp + 0xb4]
push eax
push dword [ebx]
mov byte [ebx + 0xb1], 0
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [esp + 0xb4]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x448f52
mov ecx, dword [ebx + 0x50]
mov eax, ecx
call fcn.0044dc6e
test al, al
mov eax, dword [ecx]
je 0x448f15
sub esp, 0x10
mov edi, esp
lea esi, [esp + 0xc4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x34]
mov eax, dword [ebx + 0xc]
mov esi, dword [sym.imp.GDI32.dll_DeleteDC]
test eax, eax
je 0x448eb9
push eax
call esi
mov eax, dword [ebx + 0x10]
xor edi, edi
cmp eax, edi
je 0x448ec5
push eax
call esi
mov eax, dword [ebx + 0x14]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
cmp eax, edi
je 0x448ed5
push eax
call esi
mov eax, dword [ebx + 0x18]
cmp eax, edi
je 0x448edf
push eax
call esi
mov dword [ebx + 0xc], edi
mov dword [ebx + 0x10], edi
mov dword [ebx + 0x14], edi
mov dword [ebx + 0x18], edi
jmp 0x448f2f
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx]
mov dword [esp + 0x20], eax
call dword [eax + 0x30]
mov ecx, dword [esp + 0x24]
sub esp, 0x10
mov esi, eax
mov eax, dword [esp + 0x30]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x34]
mov ecx, dword [ebx + 0x50]
mov eax, dword [ecx]
push connect
push 0
push 0x44b159
call dword [eax + 0xf4]
mov dword [esp + 0x24], eax
test eax, eax
jne 0x448eed
cmp byte [ebx + 0xb0], 0
je 0x448f52
mov ecx, dword [ebx + 0x50]
push 0
push 0
push str.windowinit
mov edi, ebx
mov byte [ebx + 0xb0], 0
call fcn.0044a6f2
cmp byte [ebx + 0xb2], 0
je 0x448f62
mov eax, ebx
call fcn.0044a4d2
cmp byte [ebx + 0xb3], 0
je 0x448fb6
cmp dword [ebx + 0x14], 0
jne 0x448fb6
and dword [esp + 0x24], 0
xor eax, eax
lea edi, [esp + 0x28]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [esp + 0x24]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebx + 0xc], eax
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x28]
push eax
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebx + 0x14], eax
and dword [esp + 0x34], 0
push 0x3c
lea eax, [esp + 0x3c]
push 0
push eax
call fcn.0047d070
add esp, 0xc
lea eax, [esp + 0x34]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_BeginPaint]
cmp byte [ebx + 0xb3], 0
je 0x4491cf
push dword [ebx + 0x14]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebx + 0xc]
call esi
push dword [ebx + 0xc]
mov dword [esp + 0xb8], eax
call dword [sym.imp.GDI32.dll_SaveDC]
cmp byte [ebx + 0xb4], 0
mov dword [esp + 0x20], eax
je 0x4490d3
mov eax, dword [ebx + 0x18]
test eax, eax
jne 0x44909a
and dword [esp + 0x24], eax
lea edi, [esp + 0x28]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [esp + 0x24]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebx + 0x10], eax
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x28]
push eax
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x28]
push eax
push dword [ebx + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
push dword [ebx + 0x10]
mov dword [ebx + 0x18], eax
call esi
mov eax, dword [esp + 0x48]
sub eax, dword [esp + 0x40]
push 0xcc0020
push dword [esp + 0x44]
push dword [esp + 0x44]
push dword [esp + 0x40]
push eax
mov eax, dword [esp + 0x58]
sub eax, dword [esp + 0x50]
push eax
push dword [esp + 0x58]
push dword [esp + 0x58]
push dword [ebx + 0x10]
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x4490a0
push eax
push dword [ebx + 0x10]
call esi
mov eax, dword [esp + 0x48]
sub eax, dword [esp + 0x40]
push 0xcc0020
push dword [esp + 0x44]
push dword [esp + 0x44]
push dword [ebx + 0x10]
push eax
mov eax, dword [esp + 0x58]
sub eax, dword [esp + 0x50]
push eax
push dword [esp + 0x58]
push dword [esp + 0x58]
push dword [ebx + 0xc]
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [ebx + 0x50]
mov eax, dword [ecx]
lea edx, [esp + 0x3c]
push edx
push dword [ebx + 0xc]
call dword [eax + 0x110]
and dword [esp + 0x24], 0
lea eax, [ebx + 0xec]
call fcn.0044c68a
test eax, eax
jle 0x449130
mov ecx, dword [esp + 0x24]
lea eax, [ebx + 0xec]
call fcn.0044c6a3
mov edx, dword [eax]
lea ecx, [esp + 0x3c]
push ecx
push dword [ebx + 0xc]
mov ecx, eax
call dword [edx + 0x128]
inc dword [esp + 0x24]
lea eax, [ebx + 0xec]
call fcn.0044c68a
cmp dword [esp + 0x24], eax
jl 0x4490fa
push dword [esp + 0x20]
push dword [ebx + 0xc]
call dword [sym.imp.GDI32.dll_RestoreDC]
mov eax, dword [esp + 0x48]
sub eax, dword [esp + 0x40]
push 0xcc0020
push dword [esp + 0x44]
push dword [esp + 0x44]
push dword [ebx + 0xc]
push eax
mov eax, dword [esp + 0x58]
sub eax, dword [esp + 0x50]
push eax
push dword [esp + 0x58]
push dword [esp + 0x58]
push dword [esp + 0x54]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [esp + 0xb4]
push dword [ebx + 0xc]
call esi
cmp byte [ebx + 0x4c], 0
je 0x4491fa
push dword [0x4e2aa0]
push dword [esp + 0x38]
call esi
push 5
mov edi, eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [esp + 0x38]
call esi
push dword [esp + 0xd0]
push dword [esp + 0xd0]
push dword [esp + 0xd0]
push dword [esp + 0xd0]
push dword [esp + 0x44]
call dword [sym.imp.GDI32.dll_Rectangle]
push edi
push dword [esp + 0x38]
call esi
jmp 0x4491fa
push dword [esp + 0x34]
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x50]
lea edx, [esp + 0x3c]
push edx
push dword [esp + 0x38]
mov esi, eax
mov eax, dword [ecx]
call dword [eax + 0x110]
push esi
push dword [esp + 0x38]
call dword [sym.imp.GDI32.dll_RestoreDC]
lea eax, [esp + 0x34]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_EndPaint]
cmp byte [ebx + 0xb1], 0
je 0x448c63
push 0
push 0
push dword [ebx]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x448c63
mov edx, dword [ebx + 0x54]
test edx, edx
je 0x44925d
push 7
pop ecx
xor eax, eax
lea edi, [esp + 0x38]
rep stosd dword es:[edi], eax
mov dword [esp + 0x34], 0x16
mov dword [esp + 0x38], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x54]
lea edx, [esp + 0x34]
mov dword [esp + 0x3c], eax
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
mov ebx, dword [ebx + 0x50]
test ebx, ebx
je 0x448c63
mov esi, ebx
call fcn.0044dc75
jmp 0x448c63
test edx, edx
je 0x448c63
push edx
push dword [esp + 0x18]
push 0x204e
push dword [edx]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x448c5a
sub ecx, 0x7b
je 0x4493df
sub ecx, 0x85
je 0x44937b
dec ecx
je 0x449319
dec ecx
je 0x4492cc
sub ecx, 0xf
jne 0x449d31
test edx, edx
je 0x449d31
push edx
push dword [esp + 0x18]
push 0x2111
push edx
jmp 0x449288
cmp dword [ebx + 0x54], 0
je 0x449d31
xor eax, eax
push 7
pop ecx
lea edi, [esp + 0x38]
rep stosd dword es:[edi], eax
mov ax, word [esp + 0x14]
mov word [esp + 0x48], ax
mov eax, dword [ebx + 0x64]
mov dword [esp + 0x40], eax
mov eax, dword [ebx + 0x68]
mov dword [esp + 0x34], 5
mov dword [esp + 0x44], eax
call fcn.0044819c
mov word [esp + 0x4a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x54]
jmp 0x4494e3
cmp dword [ebx + 0x60], 0
je 0x449d31
xor eax, eax
push 7
pop ecx
lea edi, [esp + 0x38]
rep stosd dword es:[edi], eax
mov ax, word [esp + 0x14]
mov word [esp + 0x48], ax
mov eax, dword [ebx + 0x64]
mov dword [esp + 0x40], eax
mov eax, dword [ebx + 0x68]
mov dword [esp + 0x34], 4
mov dword [esp + 0x44], eax
call fcn.0044819c
mov word [esp + 0x4a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x60]
lea edx, [esp + 0x34]
mov dword [esp + 0x3c], eax
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
and dword [ebx + 0x60], 0
jmp 0x449d31
cmp dword [ebx + 0x54], 0
je 0x449d31
xor eax, eax
push 7
pop ecx
lea edi, [esp + 0x38]
rep stosd dword es:[edi], eax
mov ax, word [esp + 0x14]
mov word [esp + 0x48], ax
mov eax, dword [ebx + 0x64]
mov dword [esp + 0x40], eax
mov eax, dword [ebx + 0x68]
mov dword [esp + 0x34], 3
mov dword [esp + 0x44], eax
call fcn.0044819c
mov word [esp + 0x4a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x54]
lea edx, [esp + 0x34]
mov dword [esp + 0x3c], eax
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
mov eax, dword [ebx + 0x54]
mov dword [ebx + 0x60], eax
jmp 0x449d31
movsx eax, dx
mov dword [esp + 0xb4], eax
shr edx, 0x10
movsx eax, dx
mov dword [esp + 0xb8], eax
lea eax, [esp + 0xb4]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [ebx + 0x5c], 0
mov eax, dword [esp + 0xb4]
mov dword [ebx + 0x64], eax
mov eax, dword [esp + 0xb8]
mov dword [ebx + 0x68], eax
je 0x449d31
push ebx
call fcn.0044a4b4
push 7
xor eax, eax
pop ecx
lea edi, [esp + 0x38]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0xb4]
mov eax, dword [ebx + 0x5c]
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x44], ecx
mov cx, word [esp + 0x14]
mov dword [esp + 0x34], 0x11
mov dword [esp + 0x38], eax
mov word [esp + 0x4a], cx
mov dword [esp + 0x50], eax
jmp 0x44964e
lea eax, [ebx + 0xc8]
xor ecx, ecx
call fcn.0044c68a
test eax, eax
jle 0x449d31
mov edi, dword [ebx]
lea eax, [ebx + 0xc8]
call fcn.0044c6a3
mov esi, eax
cmp dword [esi + 8], edi
jne 0x4494a6
movzx eax, word [esp + 0x14]
cmp dword [esi + 0xc], eax
jne 0x4494a6
cmp byte [esi + 0x10], 0
je 0x4494bb
lea eax, [ebx + 0xc8]
inc ecx
call fcn.0044c68a
cmp ecx, eax
jl 0x449484
jmp 0x449d31
push 7
xor eax, eax
pop ecx
lea edi, [esp + 0x38]
rep stosd dword es:[edi], eax
mov eax, dword [esi]
mov dword [esp + 0x38], eax
mov eax, dword [esi + 4]
mov dword [esp + 0x34], 0x18
mov dword [esp + 0x4c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi]
mov dword [esp + 0x3c], eax
mov eax, dword [ecx]
lea edx, [esp + 0x34]
push edx
call dword [eax + pe_nt_image_headers32]
jmp 0x449d31
mov eax, 0x204
cmp ecx, eax
ja 0x449961
je 0x4498c1
mov eax, ecx
sub eax, 0x133
je 0x4498a8
sub eax, 5
je 0x4498a8
sub eax, 0xc8
je 0x44972b
dec eax
je 0x449671
dec eax
je 0x4495f0
dec eax
jne 0x449d31
push dword [ebx]
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [esp + 0x18]
movsx ecx, ax
shr eax, 0x10
cwde
push eax
mov dword [esp + 0xbc], eax
mov dword [ebx + 0x68], eax
push ecx
mov eax, ebx
mov dword [esp + 0xbc], ecx
mov dword [ebx + 0x64], ecx
call fcn.0044b04b
mov dword [esp + 0x24], eax
test eax, eax
je 0x449d31
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x449d31
mov esi, ebx
call fcn.0044a4a4
xor eax, eax
push 7
pop ecx
lea edi, [esp + 0x38]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x44], eax
mov ax, word [esp + 0x14]
mov dword [esp + 0x34], 0x10
mov esi, dword [esp + 0x24]
mov dword [esp + 0x38], esi
mov word [esp + 0x4a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [esp + 0x34]
mov dword [esp + 0x3c], eax
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + pe_nt_image_headers32]
mov dword [ebx + 0x5c], esi
jmp 0x449d31
movsx esi, dx
shr edx, 0x10
cmp dword [ebx + 0x5c], 0
movsx eax, dx
mov dword [esp + 0x28], eax
mov dword [ebx + 0x64], esi
mov dword [ebx + 0x68], eax
je 0x449d31
push ebx
call fcn.0044a4b4
push 7
xor eax, eax
pop ecx
lea edi, [esp + 0x38]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x5c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x34], 0xe
mov dword [esp + 0x4c], eax
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], ecx
mov word [esp + 0x4a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x5c]
lea edx, [esp + 0x34]
mov dword [esp + 0x3c], eax
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
and dword [ebx + 0x5c], 0
jmp 0x449d31
push dword [ebx]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [esp + 0x18]
movsx eax, word [esp + 0x18]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [esp + 0xb8], eax
mov dword [ebx + 0x64], eax
push eax
mov eax, ebx
mov dword [esp + 0xc0], ecx
mov dword [ebx + 0x68], ecx
call fcn.0044b04b
mov dword [esp + 0x24], eax
test eax, eax
je 0x449d31
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x449d31
mov ecx, dword [esp + 0x24]
mov dword [ebx + 0x5c], ecx
mov eax, dword [ecx]
call dword [eax + 0xe8]
mov esi, ebx
call fcn.0044a4a4
mov esi, dword [esp + 0x24]
push 7
xor eax, eax
pop ecx
lea edi, [esp + 0x38]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x34], 0xd
mov dword [esp + 0x38], esi
mov dword [esp + 0x4c], eax
mov dword [esp + 0x44], ecx
mov word [esp + 0x4a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x3c], eax
jmp 0x44989a
cmp byte [ebx + 0xb5], 0
jne 0x4497a1
xor eax, eax
lea edi, [esp + 0xc8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebx]
push 3
mov dword [esp + 0xd0], eax
mov eax, dword [ebx + 0x1c]
pop ecx
mov dword [esp + 0xc4], 0x10
mov dword [esp + 0xc8], ecx
test eax, eax
jne 0x449772
mov dword [esp + 0xd0], 0x190
jmp 0x449788
push 0
push ecx
push 0x415
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esp + 0xd0], eax
lea eax, [esp + 0xc4]
push eax
call dword [sym.imp.COMCTL32.dll__TrackMouseEvent]
mov edx, dword [esp + 0x18]
mov byte [ebx + 0xb5], 1
movsx esi, dx
shr edx, 0x10
movsx eax, dx
push eax
mov dword [esp + 0xbc], eax
mov dword [ebx + 0x68], eax
push esi
mov eax, ebx
mov dword [ebx + 0x64], esi
call fcn.0044b04b
mov dword [esp + 0x24], eax
test eax, eax
je 0x4497d7
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x449d31
and dword [esp + 0x34], 0
push 7
xor eax, eax
pop ecx
lea edi, [esp + 0x38]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x58]
mov dword [esp + 0x3c], eax
cmp dword [esp + 0x24], ecx
je 0x449843
test ecx, ecx
je 0x449843
lea edx, [esp + 0x34]
mov dword [esp + 0x34], 0xa
mov dword [esp + 0x38], ecx
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
mov eax, dword [ebx + 0x1c]
and dword [ebx + 0x58], 0
test eax, eax
je 0x449843
lea ecx, [ebx + 0x20]
push ecx
push 0
push 0x411
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, dword [esp + 0x24]
cmp esi, dword [ebx + 0x58]
je 0x44986e
test esi, esi
je 0x44986e
lea ecx, [esp + 0x34]
mov dword [esp + 0x34], 0xb
mov dword [esp + 0x38], esi
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + pe_nt_image_headers32]
mov dword [ebx + 0x58], esi
mov ecx, dword [ebx + 0x5c]
test ecx, ecx
je 0x449886
mov dword [esp + 0x34], 9
mov dword [esp + 0x38], ecx
jmp 0x4494e7
test esi, esi
je 0x449d31
mov dword [esp + 0x34], 9
mov dword [esp + 0x38], esi
mov eax, dword [esi]
lea ecx, [esp + 0x34]
push ecx
mov ecx, esi
jmp 0x4494ee
test edx, edx
je 0x449d31
push edx
push dword [esp + 0x18]
add ecx, 0x2000
push ecx
jmp 0x4492c9
push dword [ebx]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [esp + 0x18]
movsx eax, word [esp + 0x18]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [esp + 0xb8], eax
mov dword [ebx + 0x64], eax
push eax
mov eax, ebx
mov dword [esp + 0xc0], ecx
mov dword [ebx + 0x68], ecx
call fcn.0044b04b
mov dword [esp + 0x24], eax
test eax, eax
je 0x449d31
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x449d31
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx]
call dword [eax + 0xe8]
mov esi, ebx
call fcn.0044a4a4
push 7
xor eax, eax
pop ecx
lea edi, [esp + 0x38]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x4c], eax
mov dword [esp + 0x44], ecx
jmp 0x4495c2
sub ecx, 0x20a
je 0x449c6a
sub ecx, 0x97
je 0x449af9
dec ecx
dec ecx
je 0x449abc
sub ecx, 0x75
je 0x4499d0
sub ecx, 0x7ce9
jne 0x449d31
lea esi, [ebx + 0xf8]
mov eax, esi
xor edi, edi
call fcn.0044c68a
test eax, eax
jle 0x4499c6
mov ecx, edi
mov eax, esi
call fcn.0044c6a3
test eax, eax
je 0x4499ba
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx]
mov eax, esi
inc edi
call fcn.0044c68a
cmp edi, eax
jl 0x4499a5
call fcn.0044c50f
jmp 0x449d31
lea eax, [esp + 0x34]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [esp + 0x14]
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x50]
lea edx, [esp + 0x34]
push edx
push dword [esp + 0x18]
mov dword [esp + 0xbc], eax
mov eax, dword [ecx]
call dword [eax + 0x110]
test byte [esp + 0x18], 0x10
je 0x449aa6
push 5
push dword [ebx]
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, eax
test esi, esi
je 0x449aa6
mov eax, dword [esp + 0x18]
or eax, 2
mov dword [esp + 0x24], eax
and dword [esp + 0xc4], 0
xor eax, eax
lea edi, [esp + 0xc8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [esp + 0xc4]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea eax, [esp + 0xc8]
push eax
push dword [ebx]
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [esp + 0xc8]
push 0
neg eax
push eax
mov eax, dword [esp + 0xcc]
neg eax
push eax
push dword [esp + 0x20]
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
push dword [esp + 0x24]
push dword [esp + 0x18]
push 0x317
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push 2
push esi
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, eax
test esi, esi
jne 0x449a2c
push dword [esp + 0xb4]
push dword [esp + 0x18]
call dword [sym.imp.GDI32.dll_RestoreDC]
jmp 0x449d31
mov eax, dword [ebx + 0x1c]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x449ad7
lea ecx, [ebx + 0x20]
push ecx
push 0
push 0x411
push eax
call esi
cmp byte [ebx + 0xb5], 0
je 0x449aed
push 0xffffffffffffffff
push 0
push 0x200
push dword [ebx]
call esi
mov byte [ebx + 0xb5], 0
jmp 0x449d31
movsx eax, dx
shr edx, 0x10
movsx ecx, dx
push ecx
mov dword [esp + 0xb8], eax
push eax
mov eax, ebx
mov byte [ebx + 0xb5], 0
mov dword [esp + 0xc0], ecx
call fcn.0044b04b
mov esi, eax
test esi, esi
je 0x449d31
mov edx, dword [ebx + 0x58]
test edx, edx
je 0x449b78
push 7
xor eax, eax
pop ecx
lea edi, [esp + 0x38]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x44], eax
mov dword [esp + 0x34], 0xc
mov dword [esp + 0x38], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x58]
lea edx, [esp + 0x34]
mov dword [esp + 0x3c], eax
mov eax, dword [ecx]
push edx
call dword [eax + pe_nt_image_headers32]
mov eax, dword [esi]
lea ecx, [esp + 0xd4]
push ecx
mov ecx, esi
call dword [eax + 0x98]
and dword [esp + 0x170], 0
lea eax, [esp + 0xd4]
call fcn.0044c82f
test al, al
je 0x449bb3
lea ecx, [esp + 0xd4]
call fcn.0044c70c
jmp 0x448c63
push 0x2c
lea edi, [ebx + 0x20]
push 0
push edi
call fcn.0047d070
mov eax, dword [ebx]
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], eax
mov eax, dword [0x4e2aa4]
mov dword [ebx + 0x40], eax
add esp, 0xc
lea eax, [esp + 0xd4]
mov dword [edi], 0x2c
mov dword [ebx + 0x24], 1
call fcn.0044c68e
mov dword [ebx + 0x44], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x30]
cmp dword [ebx + 0x1c], 0
lea edi, [ebx + 0x30]
mov esi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x449c44
xor edi, edi
push edi
push dword [0x4e2aa4]
mov eax, connect
push edi
push dword [ebx]
push eax
push eax
push eax
push eax
push reloc.WSOCK32.dll_closesocket
push edi
push str.tooltips_class32
push edi
call dword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [ebx + 0x20]
push ecx
push edi
push 0x432
push eax
mov dword [ebx + 0x1c], eax
call esi
jmp 0x449c46
xor edi, edi
lea eax, [ebx + 0x20]
push eax
push edi
push 0x436
push dword [ebx + 0x1c]
call esi
lea eax, [ebx + 0x20]
push eax
push 1
push 0x411
push dword [ebx + 0x1c]
call esi
jmp 0x449ba2
movsx eax, dx
mov dword [esp + 0xb4], eax
shr edx, 0x10
movsx eax, dx
mov dword [esp + 0xb8], eax
lea eax, [esp + 0xb4]
push eax
push dword [ebx]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [esp + 0xb8]
mov eax, dword [esp + 0xb4]
push ecx
mov dword [ebx + 0x64], eax
push eax
mov eax, ebx
mov dword [ebx + 0x68], ecx
call fcn.0044b04b
mov esi, eax
test esi, esi
je 0x449d31
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
cmp eax, ebx
jne 0x449d31
xor eax, eax
push 7
pop ecx
lea edi, [esp + 0x38]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x14]
shr eax, 0x10
xor ecx, ecx
test ax, ax
mov eax, dword [esp + 0x18]
sets cl
mov dword [esp + 0x34], 0x12
mov dword [esp + 0x38], esi
mov dword [esp + 0x50], eax
mov dword [esp + 0x4c], ecx
call fcn.0044819c
mov word [esp + 0x4a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [esp + 0x34]
mov dword [esp + 0x3c], eax
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + pe_nt_image_headers32]
movzx eax, word [ebx + 0x68]
movzx ecx, word [ebx + 0x64]
shl eax, 0x10
or eax, ecx
push eax
push 0
push 0x200
push dword [ebx]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0x20]
xor eax, eax
call fcn.0044c691
mov esi, eax
test esi, esi
je 0x449db1
add ebx, 0xbc
mov ecx, dword [esp + 0x20]
xor edx, edx
call fcn.0044c633
mov eax, dword [esi + 0x108]
test eax, eax
je 0x449d72
lea edx, [eax + 0x34]
mov eax, edx
call fcn.0045a9d5
test al, al
je 0x449d72
push esi
push edx
call fcn.0045aa32
mov eax, ebx
xor edi, edi
call fcn.0044c68a
test eax, eax
jle 0x449d9b
mov ecx, edi
mov eax, ebx
call fcn.0044c6a3
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx]
mov eax, ebx
inc edi
call fcn.0044c68a
cmp edi, eax
jl 0x449d7f
call fcn.0044866e
mov ecx, dword [esp + 0x20]
xor eax, eax
call fcn.0044c691
mov esi, eax
test esi, esi
jne 0x449d48
xor al, al
mov ecx, dword [esp + 0x168]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x150]
xor ecx, esp
call fcn.004799e1
mov esp, ebp
pop ebp
ret 0x10