Function at 0x438922
Capabilities:
Check for time delay via gettickcount
Check for unmoving mouse cursor

Disassembly:
push 0x1e4
mov eax, 0x486654
call fcn.0041cc69
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov ebx, ecx
cmp dword [ebx + 0xac], 0
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1b0], esi
mov dword [ebp - 0x1c0], eax
je 0x43b18c
and dword [ebp - 0x1c4], 0
lea ecx, [ebx + 0x4b8]
call fcn.00430971
mov edi, dword [ebp + 8]
test eax, eax
jle 0x4389c3
push dword [ebp - 0x1c4]
lea ecx, [ebx + 0x4b8]
mov byte [ebp - 0x1b5], 0
call fcn.004313cd
mov edx, dword [eax]
lea ecx, [ebp - 0x1b5]
push ecx
push dword [ebp - 0x1ac]
mov ecx, eax
push esi
push edi
call dword [edx]
cmp byte [ebp - 0x1b5], 0
jne 0x438a12
inc dword [ebp - 0x1c4]
lea ecx, [ebx + 0x4b8]
call fcn.00430971
cmp dword [ebp - 0x1c4], eax
jl 0x438974
cmp byte [ebx + 0x171], 0
push 2
pop ecx
je 0x438aa2
mov eax, edi
sub eax, 0x83
je 0x438a97
sub eax, ecx
je 0x438a97
dec eax
jne 0x438aa2
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x439b27
test esi, esi
sete al
mov ecx, dword [ebp - 0x1c0]
mov dword [ecx], eax
jmp 0x438a7b
mov ecx, dword [ebp - 0x1c0]
mov dword [ecx], eax
cmp edi, 0x7b
je 0x438a37
cmp edi, 0x1ff
jbe 0x438a7b
cmp edi, 0x203
jbe 0x438a82
cmp edi, 0x20a
jne 0x438a7b
mov eax, dword [ebp - 0x1ac]
movsx ecx, ax
shr eax, 0x10
cwde
mov dword [ebp - 0x1b0], eax
lea eax, [ebp - 0x1b4]
push eax
push dword [ebx + 0xac]
mov dword [ebp - 0x1b4], ecx
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x1b4]
mov dword [ebx + 0x120], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebx + 0x124], eax
mov al, 1
jmp 0x43b18e
mov eax, dword [ebp - 0x1ac]
movsx ecx, ax
shr eax, 0x10
cwde
mov dword [ebx + 0x120], ecx
jmp 0x438a75
mov eax, dword [ebp - 0x1c0]
and dword [eax], 0
jmp 0x438a7b
mov eax, 0x133
cmp edi, eax
ja 0x439f55
je 0x43a98c
cmp edi, 0x24
ja 0x439b27
je 0x439a71
sub edi, 5
je 0x439a0f
sub edi, ecx
je 0x4399ca
dec edi
je 0x4399b1
sub edi, 7
je 0x438ce9
dec edi
je 0x438c06
sub edi, 4
je 0x438bf5
sub edi, 0xc
jne 0x43b18c
cmp dword [ebx + 0x108], edi
je 0x43b18c
cmp word [ebp - 0x1ac], 1
jne 0x43b18c
cmp byte [ebx + 0x481], 0
jne 0x438a7b
and dword [ebp - 0x1b4], edi
xor eax, eax
lea edi, [ebp - 0x1b0]
stosd dword es:[edi], eax
lea eax, [ebp - 0x1b4]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x1b4]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_ScreenToClient]
push dword [ebp - 0x1b0]
mov ecx, ebx
push dword [ebp - 0x1b4]
call fcn.00437e77
mov ebx, eax
test ebx, ebx
je 0x43b18c
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x14]
test al, 2
je 0x43b18c
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x138], 0x1a
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], eax
call fcn.00434598
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ebx]
push ecx
mov ecx, ebx
call dword [eax + 0x140]
jmp 0x438a7b
mov eax, dword [ebp - 0x1c0]
mov dword [eax], 1
jmp 0x438a7b
xor eax, eax
push 7
xor esi, esi
pop ecx
mov dword [ebp - 0x138], esi
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x120]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebx + 0x124]
mov dword [ebp - 0x128], eax
call fcn.00434598
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x110]
mov dword [ebp - 0x130], eax
cmp ecx, esi
je 0x438c74
lea edx, [ebp - 0x138]
mov dword [ebp - 0x138], 0xa
mov dword [ebp - 0x134], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
mov ecx, dword [ebx + 0x114]
cmp ecx, esi
je 0x438c9d
lea edx, [ebp - 0x138]
mov dword [ebp - 0x138], 0xe
mov dword [ebp - 0x134], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
push esi
mov ecx, ebx
call fcn.0043848a
mov edi, dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetActiveWindow]
cmp eax, edi
jne 0x438cc9
push 4
push edi
call dword [sym.imp.USER32.dll_GetWindow]
cmp eax, esi
je 0x438cc9
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebx + 0xcc]
cmp eax, esi
je 0x43b18c
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [ebx + 0xcc], esi
jmp 0x43b18c
cmp dword [ebx + 0x108], 0
jne 0x438d51
and dword [ebp - 0x158], 0
push 0x3c
lea eax, [ebp - 0x154]
push 0
push eax
call fcn.00420e90
add esp, 0xc
lea eax, [ebp - 0x158]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_BeginPaint]
push 0xff000000
lea eax, [ebp - 0x150]
push eax
push dword [ebx + 0xb0]
call fcn.0045010a
add esp, 0xc
lea eax, [ebp - 0x158]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x438a7b
xor eax, eax
xor esi, esi
mov dword [ebp - 0x40], esi
lea edi, [ebp - 0x3c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetClientRect]
xor eax, eax
mov dword [ebp - 0x30], esi
lea edi, [ebp - 0x2c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push esi
lea eax, [ebp - 0x30]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetUpdateRect]
test eax, eax
je 0x438a7b
cmp byte [ebx + 0x16e], 0
je 0x438da4
push 1
mov ecx, ebx
call fcn.00438657
push 1
mov ecx, ebx
call fcn.00434e8b
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x40]
push 1
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
mov byte [ebp - 0x1b5], 0
mov dword [ebp - 0x1c8], eax
call fcn.00434e8b
cmp byte [ebx + 0x16d], 0
je 0x438fec
lea eax, [ebp - 0x40]
push eax
mov byte [ebx + 0x16d], 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x43906f
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x43906f
mov ecx, dword [ebx + 0x108]
call fcn.0043c2b2
test al, al
je 0x438ed2
mov eax, dword [ebx + 0xb4]
lea esi, [ebp - 0x40]
lea edi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
test eax, eax
je 0x438e3b
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [ebx + 0xb8]
test eax, eax
je 0x438e4c
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [ebx + 0xbc]
test eax, eax
je 0x438e5d
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebx + 0xc4]
test eax, eax
je 0x438e6e
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
xor eax, eax
mov dword [ebx + 0xb4], eax
mov dword [ebx + 0xb8], eax
mov dword [ebx + 0xbc], eax
mov dword [ebx + 0xc4], eax
cmp byte [ebx + 0x171], al
je 0x438eb4
mov eax, dword [ebx + 0x174]
add dword [ebp - 0x20], eax
mov eax, dword [ebx + 0x178]
add dword [ebp - 0x1c], eax
mov eax, dword [ebx + 0x17c]
sub dword [ebp - 0x18], eax
mov eax, dword [ebx + 0x180]
sub dword [ebp - 0x14], eax
mov ecx, dword [ebx + 0x108]
mov eax, dword [ecx]
push 1
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x5c]
jmp 0x438f7e
lea edi, [ebx + 0x500]
mov ecx, edi
call fcn.004311f8
mov ecx, dword [ebx + 0x108]
mov eax, dword [ecx]
push reloc.OLEAUT32.dll_VariantCopy
push esi
push 0x435efa
call dword [eax + 0x134]
mov ecx, edi
mov dword [ebp - 0x1c0], esi
call fcn.00430971
test eax, eax
jle 0x438f7e
push dword [ebp - 0x1c0]
mov ecx, edi
call fcn.004313cd
mov edx, dword [eax]
mov ecx, eax
mov dword [ebp - 0x1c4], eax
call dword [edx + 0x12c]
mov ecx, dword [ebp - 0x1c4]
test al, al
mov eax, dword [ecx]
mov dword [ebp - 0x1bc], eax
jne 0x438f3d
call dword [eax + 0x58]
jmp 0x438f47
lea edx, [ebp - 0x94]
push edx
call dword [eax + 0x50]
mov ecx, dword [ebp - 0x1c4]
push 1
sub esp, 0x10
mov esi, eax
mov eax, dword [ebp - 0x1bc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x5c]
inc dword [ebp - 0x1c0]
lea edi, [ebx + 0x500]
mov ecx, edi
call fcn.00430971
cmp dword [ebp - 0x1c0], eax
jl 0x438f09
cmp byte [ebx + 0x16c], 0
mov byte [ebp - 0x1b5], 1
je 0x43906f
xor esi, esi
push esi
push esi
push esi
push str.windowinit
push dword [ebx + 0x108]
mov ecx, ebx
mov byte [ebx + 0x16c], 0
call fcn.004383ea
cmp byte [ebx + 0x171], 0
je 0x438fd6
cmp byte [ebx + 0x184], 0
je 0x438fd6
mov ecx, ebx
call fcn.004349bf
push esi
mov ecx, ebx
call fcn.00434e8b
jmp 0x438a7b
push dword [ebx + 0xac]
lea ecx, [ebx + 0x668]
call fcn.00454cb9
jmp 0x43906f
cmp byte [ebx + 0x171], 0
je 0x4390dd
cmp byte [ebx + 0x184], 0
je 0x43906f
mov eax, dword [ebx + 0xc0]
lea esi, [ebp - 0x40]
lea edi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
test eax, eax
je 0x439032
mov ecx, dword [ebp - 0x1c8]
imul ecx, dword [ebp - 0x1ac]
shl ecx, 2
push ecx
push 0
push eax
call fcn.00420e90
add esp, 0xc
mov eax, dword [ebx + 0x174]
add dword [ebp - 0x20], eax
mov eax, dword [ebx + 0x178]
add dword [ebp - 0x1c], eax
mov eax, dword [ebx + 0x17c]
sub dword [ebp - 0x18], eax
mov eax, dword [ebx + 0x180]
sub dword [ebp - 0x14], eax
mov ecx, dword [ebx + 0x108]
mov eax, dword [ecx]
push 1
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x5c]
cmp byte [ebx + 0x171], 0
je 0x4390dd
push 0xffffffffffffffec
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, eax
or ecx, 0x80000
cmp eax, ecx
je 0x4390a1
push ecx
push 0xffffffffffffffec
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SetWindowLongW]
lea esi, [ebx + 0x188]
push esi
lea eax, [ebp - 0x30]
push eax
push eax
mov byte [ebx + 0x16f], 1
call dword [sym.imp.USER32.dll_UnionRect]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x28], eax
jle 0x4390c5
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x24], eax
jle 0x4390d0
mov dword [ebp - 0x24], eax
push 0x10
push 0
push esi
call fcn.00420e90
add esp, 0xc
cmp byte [ebx + 0x16f], 0
je 0x439128
cmp dword [ebx + 0xbc], 0
jne 0x439128
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebx + 0xb4], eax
lea eax, [ebx + 0xc0]
push eax
push dword [ebp - 0x1c8]
push dword [ebp - 0x1ac]
push dword [ebx + 0xb0]
call fcn.0044efad
add esp, 0x10
mov dword [ebx + 0xbc], eax
xor edi, edi
push 0x3c
lea eax, [ebp - 0x1a4]
push edi
push eax
mov dword [ebp - 0x1a8], edi
call fcn.00420e90
add esp, 0xc
lea eax, [ebp - 0x1a8]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_BeginPaint]
cmp byte [ebx + 0x16f], 0
je 0x4398db
push dword [ebx + 0xbc]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebx + 0xb4]
call esi
push dword [ebx + 0xb4]
mov dword [ebp - 0x1b0], eax
call dword [sym.imp.GDI32.dll_SaveDC]
cmp byte [ebx + 0x171], 0
mov dword [ebp - 0x1dc], eax
je 0x4391f2
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
sub edx, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
cmp edx, eax
jge 0x4391f2
mov ecx, edx
imul ecx, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1bc], eax
cmp eax, dword [ebp - 0x28]
jge 0x4391e1
add eax, ecx
shl eax, 2
mov edi, dword [ebx + 0xc0]
and dword [eax + edi], 0
inc dword [ebp - 0x1bc]
mov edi, dword [ebp - 0x1bc]
add eax, 4
cmp edi, dword [ebp - 0x28]
jl 0x4391c3
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x1ac]
inc edx
cmp edx, eax
jl 0x4391b0
mov ecx, dword [ebx + 0x108]
mov eax, dword [ecx]
push 0
lea edx, [ebp - 0x30]
push edx
push dword [ebx + 0xb4]
call dword [eax + 0x150]
cmp byte [ebx + 0x171], 0
je 0x439445
and dword [ebp - 0x1c0], 0
lea edi, [ebx + 0x4d0]
mov ecx, edi
call fcn.00430971
test eax, eax
jle 0x439445
push dword [ebp - 0x1c0]
mov ecx, edi
call fcn.004313cd
push eax
mov dword [ebp - 0x1bc], eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x439276
push dword [ebp - 0x1c0]
mov ecx, edi
call fcn.00431350
push dword [ebp - 0x1c0]
lea ecx, [ebx + 0x4dc]
call fcn.00431350
jmp 0x43942c
push dword [ebp - 0x1bc]
inc dword [ebp - 0x1c0]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x43942c
push dword [ebp - 0x1bc]
lea eax, [ebp - 0x168]
push eax
mov ecx, ebx
call fcn.00435038
and dword [ebp - 0x58], 0
xor eax, eax
lea edi, [ebp - 0x54]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x43942c
push dword [ebx + 0xb4]
and dword [ebp - 0x1d4], 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edi, eax
lea eax, [ebp - 0x1d4]
push eax
mov eax, dword [ebp - 0x15c]
sub eax, dword [ebp - 0x164]
push eax
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0x168]
push eax
push edi
call fcn.0044efad
mov ecx, dword [ebp - 0x15c]
sub ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0x168]
imul eax, ecx
shl eax, 2
push eax
push 0
push dword [ebp - 0x1d4]
call fcn.00420e90
add esp, 0x1c
push dword [ebp - 0x1d8]
push edi
call esi
push 0x35
push edi
push 0x317
push dword [ebp - 0x1bc]
mov dword [ebp - 0x1cc], eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x15c]
and dword [ebp - 0x1c4], 0
mov ecx, eax
sub ecx, dword [ebp - 0x164]
test ecx, ecx
jle 0x4393da
mov ecx, dword [ebp - 0x160]
sub ecx, dword [ebp - 0x168]
xor edx, edx
test ecx, ecx
jle 0x4393c4
mov eax, dword [ebp - 0x1c4]
imul eax, ecx
mov ecx, dword [ebp - 0x1d4]
add eax, edx
lea ecx, [ecx + eax*4]
mov eax, dword [ecx]
test eax, eax
je 0x4393ad
or eax, 0xff000000
mov dword [ecx], eax
mov ecx, dword [ebp - 0x160]
sub ecx, dword [ebp - 0x168]
inc edx
cmp edx, ecx
jl 0x43938c
mov eax, dword [ebp - 0x15c]
inc dword [ebp - 0x1c4]
mov ecx, eax
sub ecx, dword [ebp - 0x164]
cmp dword [ebp - 0x1c4], ecx
jl 0x43937a
mov ecx, dword [ebp - 0x160]
sub eax, dword [ebp - 0x164]
sub ecx, dword [ebp - 0x168]
push 0xcc0020
push 0
push 0
push edi
push eax
push ecx
push dword [ebp - 0x164]
push dword [ebp - 0x168]
push dword [ebx + 0xb4]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x1cc]
push edi
call esi
push dword [ebp - 0x1d8]
call dword [sym.imp.GDI32.dll_DeleteObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
lea edi, [ebx + 0x4d0]
mov ecx, edi
call fcn.00430971
cmp dword [ebp - 0x1c0], eax
jl 0x439235
and dword [ebp - 0x1c4], 0
lea ecx, [ebx + 0x4c4]
call fcn.00430971
test eax, eax
jle 0x439499
push dword [ebp - 0x1c4]
lea ecx, [ebx + 0x4c4]
call fcn.004313cd
mov edx, dword [eax]
lea ecx, [ebp - 0x30]
push ecx
push dword [ebx + 0xb4]
mov ecx, eax
call dword [edx + 0x174]
inc dword [ebp - 0x1c4]
lea ecx, [ebx + 0x4c4]
call fcn.00430971
cmp dword [ebp - 0x1c4], eax
jl 0x43945b
push dword [ebp - 0x1dc]
push dword [ebx + 0xb4]
call dword [sym.imp.GDI32.dll_RestoreDC]
cmp byte [ebx + 0x171], 0
je 0x43983e
and dword [ebp - 0x58], 0
xor eax, eax
lea edi, [ebp - 0x54]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [ebx + 0x198]
call fcn.00431514
test al, al
jne 0x439744
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x40]
lea esi, [ebp - 0x40]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
lea edi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebx + 0x174]
add eax, dword [ebp - 0x40]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x20], eax
mov eax, dword [ebx + 0x178]
add dword [ebp - 0x1c], eax
mov eax, dword [ebx + 0x17c]
sub dword [ebp - 0x18], eax
mov eax, dword [ebx + 0x180]
sub dword [ebp - 0x14], eax
lea ecx, [ebx + 0x198]
call fcn.00431514
test al, al
jne 0x4397ab
cmp dword [ebx + 0xc4], 0
jne 0x4395b7
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
lea edi, [ebx + 0xc8]
push edi
push dword [ebp - 0x1d4]
mov dword [ebx + 0xb8], eax
push dword [ebp - 0x1c0]
push dword [ebx + 0xb0]
call fcn.0044efad
mov dword [ebx + 0xc4], eax
mov eax, dword [ebp - 0x1d4]
imul eax, dword [ebp - 0x1c0]
shl eax, 2
push eax
push 0
push dword [edi]
call fcn.00420e90
add esp, 0x1c
push dword [ebx + 0xc4]
push dword [ebx + 0xb8]
call dword [sym.imp.GDI32.dll_SelectObject]
and dword [ebp - 4], 0
jmp 0x4395e8
cmp byte [ebx + 0x184], 0
je 0x439632
mov eax, dword [ebp - 0x1d4]
imul eax, dword [ebp - 0x1c0]
shl eax, 2
push eax
push 0
push dword [ebx + 0xc8]
call fcn.00420e90
add esp, 0xc
mov dword [ebp - 4], 1
lea eax, [ebp - 0x134]
push eax
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
lea esi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0044abca
push 0
lea eax, [ebx + 0x198]
push eax
lea eax, [ebp - 0x20]
push eax
push eax
push ebx
push dword [ebx + 0xb8]
call fcn.0044ff60
or dword [ebp - 4], 0xffffffff
add esp, 0x30
lea ecx, [ebp - 0x134]
call fcn.0044aba7
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
sub eax, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1cc], eax
cmp eax, ecx
jge 0x4397ab
mov ecx, eax
imul ecx, dword [ebp - 0x1c0]
mov dword [ebp - 0x1d8], ecx
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x1c4], edx
cmp edx, dword [ebp - 0x28]
jge 0x439721
lea esi, [ecx + edx]
shl esi, 2
mov dword [ebp - 0x1dc], esi
add ecx, dword [ebp - 0x1c4]
mov eax, dword [ebx + 0xc8]
mov al, byte [eax + esi + 3]
add ecx, dword [ebx + 0xc0]
movzx edi, al
mov esi, dword [ecx]
mov eax, esi
shr eax, 0x10
movzx eax, al
imul eax, edi
cdq
mov dword [ebp - 0x1d4], edi
mov edi, 0xff
idiv edi
movzx edi, al
mov eax, esi
shr eax, 8
movzx eax, al
imul eax, dword [ebp - 0x1d4]
cdq
mov esi, 0xff
idiv esi
shl edi, 8
movzx eax, al
or edi, eax
movzx eax, byte [ecx]
imul eax, dword [ebp - 0x1d4]
cdq
idiv esi
mov esi, dword [ebp - 0x1dc]
shl edi, 8
add esi, 4
mov dword [ebp - 0x1dc], esi
movzx eax, al
or edi, eax
mov eax, dword [ebp - 0x1d4]
shl eax, 0x18
add edi, eax
inc dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x1c4]
mov dword [ecx], edi
mov ecx, dword [ebp - 0x1d8]
cmp eax, dword [ebp - 0x28]
jl 0x439679
mov eax, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x1c0]
sub edx, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1d8], ecx
cmp eax, edx
jl 0x43965b
jmp 0x4397ab
mov esi, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
sub esi, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
cmp esi, eax
jge 0x4397ab
mov edi, dword [ebp - 0x30]
mov edx, esi
imul edx, dword [ebp - 0x1ac]
cmp edi, dword [ebp - 0x28]
jge 0x43979a
lea ecx, [edx + edi]
shl ecx, 2
mov eax, dword [ebx + 0xc0]
add eax, ecx
cmp byte [eax + 3], 0
jne 0x43978e
cmp byte [eax], 0
jne 0x43978a
cmp byte [eax + 1], 0
jne 0x43978a
cmp byte [eax + 2], 0
je 0x43978e
mov byte [eax + 3], 0xff
inc edi
add ecx, 4
cmp edi, dword [ebp - 0x28]
jl 0x43976b
mov edi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x2c]
add edx, dword [ebp - 0x1ac]
inc esi
cmp esi, eax
jl 0x439760
mov al, byte [ebx + 0x170]
mov byte [ebp - 0x1ba], al
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x1ac]
push 2
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x1e0], eax
xor eax, eax
lea ecx, [ebp - 0x1bc]
push ecx
push eax
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], eax
lea eax, [ebp - 0x1f0]
push eax
push dword [ebx + 0xb4]
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x160]
push eax
push dword [ebx + 0xb0]
mov word [ebp - 0x1bc], 0
push dword [ebx + 0xac]
mov byte [ebp - 0x1b9], 1
call dword [0x4b1e00]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
jmp 0x43986f
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
push 0xcc0020
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push dword [ebx + 0xb4]
push eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
push eax
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x1b0]
push dword [ebx + 0xb4]
call esi
cmp byte [ebx + 0x105], 0
je 0x439957
cmp byte [ebx + 0x171], 0
jne 0x439957
push dword [0x4b1e04]
push dword [ebx + 0xb0]
call esi
push 5
mov edi, eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebx + 0xb0]
call esi
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_Rectangle]
push edi
push dword [ebx + 0xb0]
call esi
jmp 0x439957
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x108]
push edi
lea edx, [ebp - 0x30]
push edx
push dword [ebx + 0xb0]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ecx]
call dword [eax + 0x150]
lea ecx, [ebx + 0x4c4]
call fcn.00430971
test eax, eax
jle 0x439945
push edi
lea ecx, [ebx + 0x4c4]
call fcn.004313cd
mov edx, dword [eax]
lea ecx, [ebp - 0x30]
push ecx
push dword [ebx + 0xb0]
mov ecx, eax
call dword [edx + 0x174]
lea ecx, [ebx + 0x4c4]
inc edi
call fcn.00430971
cmp edi, eax
jl 0x439915
push dword [ebp - 0x1b0]
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_RestoreDC]
lea eax, [ebp - 0x1a8]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_EndPaint]
xor esi, esi
push esi
mov ecx, ebx
call fcn.00434e8b
cmp byte [ebx + 0x16d], 0
mov byte [ebx + 0x184], 0
je 0x439989
call fcn.004349bf
cmp byte [ebp - 0x1b5], 0
je 0x438a7b
push 1
push esi
push esi
push str.windowsize
push dword [ebx + 0x108]
mov ecx, ebx
call fcn.004383ea
jmp 0x438a7b
mov ecx, ebx
call fcn.00434e84
test al, al
je 0x43b18c
call fcn.00434e6b
jmp 0x43b18c
mov edx, dword [ebx + 0x10c]
test edx, edx
je 0x43b18c
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x78]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x7c], 0x18
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x78], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, dword [ebx + 0x10c]
mov dword [ebp - 0x74], eax
lea ecx, [ebp - 0x7c]
jmp 0x43b181
mov edx, dword [ebx + 0x10c]
test edx, edx
je 0x439a57
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x138], 0x19
mov dword [ebp - 0x134], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x10c]
lea edx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
mov ebx, dword [ebx + 0x108]
test ebx, ebx
je 0x438a7b
mov ecx, ebx
call fcn.0043c2b9
jmp 0x438a7b
push 0xa
pop ecx
xor eax, eax
lea edi, [ebp - 0x84]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x84]
push eax
push 1
push dword [ebx + 0xac]
mov dword [ebp - 0x84], 0x28
call dword [sym.imp.USER32.dll_MonitorFromWindow]
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
cmp dword [ebp - 0x60], 1
lea esi, [ebp - 0x70]
lea edi, [ebp - 0x58]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
je 0x439aca
mov eax, dword [ebp - 0x6c]
neg eax
push eax
mov eax, dword [ebp - 0x70]
neg eax
push eax
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov eax, dword [ebx + 0x128]
mov edx, dword [ebp - 0x1ac]
test eax, eax
jle 0x439add
mov dword [edx + 0x18], eax
mov eax, dword [ebx + 0x12c]
test eax, eax
jle 0x439aea
mov dword [edx + 0x1c], eax
mov ecx, dword [ebx + 0x130]
test ecx, ecx
jle 0x439af7
mov dword [edx + 0x20], ecx
mov ecx, dword [ebx + 0x134]
test ecx, ecx
jle 0x439b04
mov dword [edx + 0x24], ecx
mov eax, dword [ebx + 0x130]
test eax, eax
jle 0x439b11
mov dword [edx + 8], eax
mov ebx, dword [ebx + 0x134]
test ebx, ebx
jle 0x43b18c
mov dword [edx + 0xc], ebx
jmp 0x43b18c
sub edi, 0x4e
je 0x439f2e
sub edi, 0x2d
je 0x439e4e
sub edi, 0x85
je 0x439da7
dec edi
je 0x439d05
dec edi
je 0x439c7f
sub edi, 0xf
je 0x439c45
dec edi
dec edi
jne 0x43b18c
and dword [ebp - 0x1bc], edi
lea ecx, [ebx + 0x494]
call fcn.00430971
test eax, eax
jle 0x43b18c
push dword [ebp - 0x1bc]
lea ecx, [ebx + 0x494]
call fcn.004313cd
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1b0], eax
cmp ecx, dword [ebx + 0xac]
jne 0x439bad
movzx ecx, si
cmp dword [eax + 0xc], ecx
jne 0x439bad
cmp byte [eax + 0x10], 0
je 0x439bcb
inc dword [ebp - 0x1bc]
lea ecx, [ebx + 0x494]
call fcn.00430971
cmp dword [ebp - 0x1bc], eax
jl 0x439b7d
jmp 0x43b18c
mov esi, dword [ebp - 0x1b0]
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [esi]
mov dword [ebp - 0x138], 0x1b
mov dword [ebp - 0x134], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x130], eax
mov eax, dword [ebx + 0x120]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebx + 0x124]
mov dword [ebp - 0x128], eax
call fcn.00434598
mov ecx, dword [esi]
mov word [ebp - 0x122], ax
mov eax, dword [esi + 4]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ecx]
lea edx, [ebp - 0x138]
push edx
jmp 0x43b186
cmp dword [ebp - 0x1ac], 0
je 0x43b18c
push dword [ebp - 0x1ac]
push esi
push 0x2111
push dword [ebp - 0x1ac]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x1c0]
mov dword [ecx], eax
test eax, eax
je 0x43b18c
jmp 0x438a7b
cmp dword [ebx + 0x108], 0
je 0x43b18c
mov edx, dword [ebx + 0x10c]
test edx, edx
je 0x43b18c
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebx + 0x120]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebx + 0x124]
mov dword [ebp - 0x138], 5
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x120], esi
mov word [ebp - 0x124], si
mov dword [ebp - 0x128], eax
call fcn.00434598
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, dword [ebx + 0x10c]
jmp 0x43b175
cmp dword [ebx + 0x108], 0
je 0x43b18c
mov edx, dword [ebx + 0x118]
test edx, edx
je 0x43b18c
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebx + 0x120]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebx + 0x124]
mov dword [ebp - 0x138], 4
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x120], esi
mov word [ebp - 0x124], si
mov dword [ebp - 0x128], eax
call fcn.00434598
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x118]
lea edx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
and dword [ebx + 0x118], 0
jmp 0x43b18c
cmp dword [ebx + 0x108], 0
je 0x43b18c
mov edx, dword [ebx + 0x10c]
test edx, edx
je 0x43b18c
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebx + 0x120]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebx + 0x124]
mov dword [ebp - 0x138], 3
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x120], esi
mov word [ebp - 0x124], si
mov dword [ebp - 0x128], eax
call fcn.00434598
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x10c]
lea edx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
mov eax, dword [ebx + 0x10c]
mov dword [ebx + 0x118], eax
jmp 0x43b18c
cmp dword [ebx + 0x108], 0
je 0x43b18c
mov eax, dword [ebp - 0x1ac]
movsx ecx, ax
shr eax, 0x10
cwde
mov dword [ebp - 0x1b0], eax
lea eax, [ebp - 0x1b4]
push eax
push dword [ebx + 0xac]
mov dword [ebp - 0x1b4], ecx
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [ebx + 0x114], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebx + 0x120], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebx + 0x124], eax
je 0x43b18c
mov ecx, ebx
call fcn.00434e6b
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x1b4]
mov eax, dword [ebx + 0x114]
mov dword [ebp - 0x12c], ecx
mov ecx, dword [ebp - 0x1b0]
mov dword [ebp - 0x138], 0x14
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], ecx
mov word [ebp - 0x122], si
mov dword [ebp - 0x11c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x114]
lea edx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
and dword [ebx + 0x114], 0
jmp 0x43b18c
cmp dword [ebp - 0x1ac], 0
je 0x43b18c
mov eax, dword [ebp - 0x1ac]
push eax
push esi
push 0x204e
push dword [eax]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x438a08
mov eax, 0x207
cmp edi, eax
ja 0x43aa43
je 0x43a9ac
mov eax, edi
sub eax, 0x138
je 0x43a98c
sub eax, 0xc8
je 0x43a404
dec eax
je 0x43a29e
dec eax
je 0x43a1ed
dec eax
je 0x43a105
dec eax
je 0x43a00e
dec eax
jne 0x43b18c
cmp byte [ebx + 0x481], al
je 0x439fae
mov ecx, ebx
call fcn.00434e6b
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1b0], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1b4], eax
mov dword [ebx + 0x120], eax
call fcn.00437e77
mov edx, eax
mov dword [ebx + 0x114], edx
test edx, edx
je 0x43b18c
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x138], 0x10
jmp 0x43b132
cmp byte [ebx + 0x104], 0
jne 0x43a023
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1b0], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1b4], eax
mov dword [ebx + 0x120], eax
call fcn.00437e77
mov dword [ebp - 0x1cc], eax
test eax, eax
je 0x43b18c
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x43b18c
mov ecx, dword [ebp - 0x1cc]
mov eax, dword [ecx]
call dword [eax + 0x128]
mov ecx, ebx
call fcn.00434e53
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x138], 0xf
mov eax, dword [ebp - 0x1ac]
mov edi, dword [ebp - 0x1cc]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], eax
mov word [ebp - 0x122], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x140]
mov dword [ebx + 0x114], edi
jmp 0x43b18c
cmp byte [ebx + 0x104], 0
jne 0x43a11a
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1b0], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1b4], eax
mov dword [ebx + 0x120], eax
call fcn.00437e77
mov dword [ebp - 0x1cc], eax
test eax, eax
je 0x43b18c
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x43b18c
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x138], 0x13
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x11c], eax
mov word [ebp - 0x122], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, dword [ebp - 0x1cc]
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x140]
mov dword [ebx + 0x114], esi
jmp 0x43b18c
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
cmp dword [ebx + 0x114], 0
movsx ecx, cx
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], ecx
mov dword [ebx + 0x120], eax
mov dword [ebx + 0x124], ecx
je 0x43b18c
mov ecx, ebx
call fcn.00434e6b
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x114]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x138], 0xe
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], eax
mov word [ebp - 0x122], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x114]
and dword [ebx + 0x114], 0
mov dword [ebp - 0x130], eax
jmp 0x439c37
cmp byte [ebx + 0x104], 0
jne 0x43a2b3
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SetFocus]
cmp dword [ebx + 0x108], 0
je 0x43b18c
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1cc], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1d0], eax
mov dword [ebx + 0x120], eax
call fcn.00437e77
mov edi, eax
mov dword [ebp - 0x1bc], edi
test edi, edi
je 0x43b18c
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x1c]
cmp eax, ebx
jne 0x43b18c
cmp byte [ebx + 0x738], 0
je 0x43a379
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x38]
test al, al
je 0x43a379
mov eax, dword [ebx + 0x73c]
mov byte [ebx + 0x739], 1
test eax, eax
je 0x43a346
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
and dword [ebx + 0x73c], 0
mov ecx, dword [ebp - 0x1bc]
mov eax, dword [ecx]
call dword [eax + 0x58]
push 0
sub esp, 0x10
mov edi, esp
push dword [ebp - 0x1bc]
mov esi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ebx
movsd dword es:[edi], dword [esi]
call fcn.0045070a
mov esi, dword [ebp - 0x1b0]
add esp, 0x1c
mov dword [ebx + 0x73c], eax
mov ecx, ebx
call fcn.00434e53
mov ecx, dword [ebp - 0x1bc]
mov dword [ebx + 0x114], ecx
mov eax, dword [ecx]
call dword [eax + 0x128]
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov edi, dword [ebp - 0x1bc]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x138], 0xd
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], eax
mov word [ebp - 0x122], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x130], eax
mov eax, dword [edi]
lea ecx, [ebp - 0x138]
push ecx
mov ecx, edi
jmp 0x43b186
cmp byte [ebx + 0x480], 0
jne 0x43a462
xor eax, eax
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebx + 0xac]
mov dword [ebp - 0x18], eax
mov eax, dword [ebx + 0xcc]
mov dword [ebp - 0x20], 0x10
mov dword [ebp - 0x1c], 3
test eax, eax
jne 0x43a43e
mov eax, dword [ebx + 0x100]
jmp 0x43a44e
push 0
push 3
push 0x415
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.COMCTL32.dll__TrackMouseEvent]
mov byte [ebx + 0x480], 1
mov eax, dword [ebp - 0x1ac]
movsx ecx, word [ebp - 0x1ac]
shr eax, 0x10
movsx edx, ax
mov dword [ebp - 0x1d0], ecx
mov dword [ebp - 0x1cc], edx
mov byte [ebp - 0x1b5], 1
cmp dword [ebx + 0x120], ecx
jne 0x43a49f
cmp dword [ebx + 0x124], edx
jne 0x43a49f
mov byte [ebp - 0x1b5], 0
push edx
mov dword [ebx + 0x120], ecx
push ecx
mov ecx, ebx
mov dword [ebx + 0x124], edx
call fcn.00437e77
mov dword [ebp - 0x1b0], eax
test eax, eax
je 0x43a4cd
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x43b18c
cmp byte [ebp - 0x1b5], 0
je 0x43a778
cmp byte [ebx + 0x739], 0
je 0x43a778
cmp esi, 1
jne 0x43a778
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov ecx, dword [ebx + 0x740]
test ecx, ecx
je 0x43a51a
push dword [ebx + 0x114]
mov eax, dword [ecx]
call dword [eax]
test al, al
je 0x43a51a
mov byte [ebx + 0x739], 0
jmp 0x43b18c
push 0xc
call fcn.0041af51
pop ecx
test eax, eax
je 0x43a536
and dword [eax + 4], 0
mov dword [eax], vtable.DuiLib::CIDropSource.0
mov byte [eax + 8], 0
jmp 0x43a538
xor eax, eax
mov dword [ebp - 0x1c0], eax
test eax, eax
je 0x43b18c
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
push 0x2c
call fcn.0041af51
pop ecx
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x43a576
push dword [ebp - 0x1c0]
mov ecx, eax
call fcn.0045640a
mov esi, eax
jmp 0x43a578
xor esi, esi
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x43b18c
mov eax, dword [esi]
push esi
call dword [eax + 4]
and dword [ebp - 0x1e8], 0
xor eax, eax
lea edi, [ebp - 0x58]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
or dword [ebp - 0x50], 0xffffffff
xor eax, eax
lea edi, [ebp - 0x1e4]
stosd dword es:[edi], eax
push 2
stosd dword es:[edi], eax
pop eax
push 0
push eax
push dword [ebx + 0x73c]
mov dword [ebp - 0x54], 1
mov word [ebp - 0x5c], ax
mov dword [ebp - 0x4c], 0x10
call dword [sym.imp.ole32.dll_OleDuplicateData]
push 0
lea ecx, [ebp - 0x1e8]
push ecx
mov edi, eax
lea ecx, [ebp - 0x5c]
push ecx
mov dword [ebp - 0x1e4], edi
mov eax, dword [esi]
push esi
mov dword [ebp - 0x1dc], edi
call dword [eax + 0x1c]
lea eax, [ebp - 0x48]
push eax
push 0x18
push edi
call dword [sym.imp.GDI32.dll_GetObjectW]
mov eax, dword [ebp - 0x44]
and dword [ebp - 0x20], 0
and dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x40]
push 0xe
mov dword [ebp - 0x14], eax
pop eax
mov word [ebp - 0x5c], ax
xor eax, eax
push eax
push eax
push eax
push dword [ebx + 0xb0]
mov dword [ebp - 0x4c], 0x40
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
push dword [ebx + 0xb0]
mov dword [ebp - 0x1cc], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push edi
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
push eax
mov dword [ebp - 0x1c8], eax
call edi
push 0xcc0020
mov dword [ebp - 0x1b0], eax
xor eax, eax
push eax
push eax
push dword [ebp - 0x1c8]
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push eax
push eax
push dword [ebp - 0x1cc]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x1b0]
push dword [ebp - 0x1c8]
call edi
push dword [ebp - 0x1cc]
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
push dword [ebp - 0x1c8]
mov dword [ebp - 0x1e4], eax
call dword [sym.imp.GDI32.dll_DeleteDC]
push 1
lea ecx, [ebp - 0x1e8]
push ecx
lea ecx, [ebp - 0x5c]
push ecx
mov dword [ebp - 0x1e8], 0x40
mov eax, dword [esi]
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x160]
call fcn.0043640a
xor eax, eax
lea edi, [ebp - 0x1b0]
stosd dword es:[edi], eax
mov eax, dword [ebp - 0x44]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x40]
cdq
sub eax, edx
sar eax, 1
push 5
mov dword [ebp - 4], 4
mov dword [ebp - 0x1b0], eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push esi
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1b4]
push eax
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0x160]
call fcn.0043644e
lea eax, [ebp - 0x1d8]
push eax
push 3
push dword [ebp - 0x1c0]
push esi
call dword [sym.imp.ole32.dll_DoDragDrop]
cmp dword [ebp - 0x1d8], 0
je 0x43a74b
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x43a757
push dword [ebp - 0x1c0]
call fcn.0041ab81
pop ecx
mov eax, dword [esi]
push esi
call dword [eax + 8]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x160]
mov byte [ebx + 0x739], 0
call fcn.00436432
jmp 0x43b18c
and dword [ebp - 0x138], 0
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x11c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x130], eax
call fcn.00434598
mov ecx, ebx
mov word [ebp - 0x122], ax
call fcn.00434e84
test al, al
jne 0x43a94a
push dword [ebp - 0x1cc]
push dword [ebp - 0x1d0]
call fcn.00437e77
mov edi, eax
test edi, edi
je 0x43a803
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x1c]
cmp eax, ebx
jne 0x43b18c
mov eax, dword [ebx + 0x110]
cmp edi, eax
je 0x43a915
test eax, eax
je 0x43a915
lea ecx, [ebx + 0x518]
mov dword [ebp - 0x138], 0xa
mov dword [ebp - 0x134], eax
call fcn.00430971
push eax
lea ecx, [ebp - 0x164]
call fcn.004311c0
lea ecx, [ebx + 0x518]
mov dword [ebp - 4], 5
call fcn.00430971
push eax
lea ecx, [ebp - 0x164]
call fcn.00431215
lea ecx, [ebx + 0x518]
call fcn.00430971
shl eax, 2
push eax
lea ecx, [ebx + 0x518]
call fcn.0043153d
push eax
lea ecx, [ebp - 0x164]
call fcn.0043153d
push eax
call fcn.0041c460
add esp, 0xc
lea ecx, [ebp - 0x164]
xor esi, esi
call fcn.00430971
test eax, eax
jle 0x43a8cb
push esi
lea ecx, [ebp - 0x164]
call fcn.004313cd
mov edx, dword [eax]
lea ecx, [ebp - 0x138]
push ecx
mov ecx, eax
call dword [edx + 0x140]
lea ecx, [ebp - 0x164]
inc esi
call fcn.00430971
cmp esi, eax
jl 0x43a89e
mov ecx, dword [ebx + 0x110]
mov eax, dword [ecx]
lea edx, [ebp - 0x138]
push edx
call dword [eax + 0x140]
mov eax, dword [ebx + 0xcc]
and dword [ebx + 0x110], 0
test eax, eax
je 0x43a906
lea ecx, [ebx + 0xd0]
push ecx
push 0
push 0x411
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x164]
call fcn.004311ea
cmp edi, dword [ebx + 0x110]
je 0x43a950
test edi, edi
je 0x43a950
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x138], 0xb
mov dword [ebp - 0x134], edi
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x140]
mov dword [ebx + 0x110], edi
jmp 0x43a950
mov edi, dword [ebp - 0x1b0]
mov ebx, dword [ebx + 0x114]
test ebx, ebx
je 0x43a96f
mov dword [ebp - 0x138], 9
mov dword [ebp - 0x134], ebx
jmp 0x43b17b
test edi, edi
je 0x43b18c
mov dword [ebp - 0x138], 9
mov dword [ebp - 0x134], edi
jmp 0x43a3f4
cmp dword [ebp - 0x1ac], 0
je 0x43b18c
push dword [ebp - 0x1ac]
add edi, 0x2000
push esi
push edi
jmp 0x439c5e
cmp byte [ebx + 0x104], 0
jne 0x43a9c1
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1b0], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1b4], eax
mov dword [ebx + 0x120], eax
call fcn.00437e77
mov dword [ebp - 0x1cc], eax
test eax, eax
je 0x43b18c
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x43b18c
mov ecx, dword [ebp - 0x1cc]
mov eax, dword [ecx]
call dword [eax + 0x128]
mov ecx, ebx
call fcn.00434e53
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x138], 0x11
jmp 0x43a0a0
sub edi, 0x208
je 0x43b0cb
sub edi, ecx
je 0x43af95
sub edi, 0x97
je 0x43ad80
sub edi, ecx
je 0x43ac70
sub edi, 0x75
je 0x43ab72
sub edi, 0x7ce9
jne 0x43b18c
lea ecx, [ebx + 0x4e8]
call fcn.00430971
test eax, eax
jle 0x43aab7
push edi
lea ecx, [ebx + 0x4e8]
call fcn.004313cd
test eax, eax
je 0x43aaa7
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx]
lea ecx, [ebx + 0x4e8]
inc edi
call fcn.00430971
cmp edi, eax
jl 0x43aa8f
lea ecx, [ebx + 0x4e8]
call fcn.004311f8
lea edi, [ebx + 0x4f4]
push 0
mov ecx, edi
mov byte [ebx + 0x484], 0
call fcn.004313b1
mov esi, eax
test esi, esi
je 0x43b18c
add ebx, 0x488
mov dword [ebp - 0x1c8], ebx
push 0
mov ecx, edi
call fcn.00431350
mov eax, dword [esi + 0x108]
test eax, eax
je 0x43ab1c
lea ecx, [eax + 0x38]
call fcn.0045a75c
test al, al
je 0x43ab1c
mov ecx, dword [esi + 0x108]
push esi
add ecx, 0x38
call fcn.0045a7b9
mov ecx, dword [ebp - 0x1c8]
xor ebx, ebx
call fcn.00430971
test eax, eax
jle 0x43ab50
mov ecx, dword [ebp - 0x1c8]
push ebx
call fcn.004313cd
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx]
mov ecx, dword [ebp - 0x1c8]
inc ebx
call fcn.00430971
cmp ebx, eax
jl 0x43ab2d
mov ecx, esi
call fcn.00430752
push esi
call fcn.0041ab81
pop ecx
push 0
mov ecx, edi
call fcn.004313b1
mov esi, eax
test esi, esi
jne 0x43aaee
jmp 0x43b18c
cmp dword [ebx + 0x108], 0
je 0x43b18c
lea eax, [ebp - 0x58]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetClientRect]
push esi
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x108]
push 0
lea edx, [ebp - 0x58]
push edx
mov dword [ebp - 0x1cc], eax
mov eax, dword [ecx]
push esi
call dword [eax + 0x150]
test byte [ebp - 0x1ac], 0x10
je 0x43ac5e
push 5
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x1bc], eax
test eax, eax
je 0x43ac5e
mov eax, dword [ebp - 0x1ac]
or eax, 2
mov dword [ebp - 0x1b0], eax
and dword [ebp - 0x20], 0
xor eax, eax
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x1bc]
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea eax, [ebp - 0x20]
push eax
push dword [ebx + 0xac]
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [ebp - 0x1c]
push 0
neg eax
push eax
mov eax, dword [ebp - 0x20]
neg eax
push eax
push esi
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
push dword [ebp - 0x1b0]
push esi
push 0x317
push dword [ebp - 0x1bc]
call dword [sym.imp.USER32.dll_SendMessageW]
push 2
push dword [ebp - 0x1bc]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x1bc], eax
test eax, eax
jne 0x43abe9
push dword [ebp - 0x1cc]
push esi
call dword [sym.imp.GDI32.dll_RestoreDC]
jmp 0x43b18c
mov eax, dword [ebx + 0xcc]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x43ac91
lea ecx, [ebx + 0xd0]
push ecx
push 0
push 0x411
push eax
call esi
cmp byte [ebx + 0x480], 0
je 0x43ad74
and dword [ebp - 0x1b4], 0
xor eax, eax
and dword [ebp - 0x58], eax
lea edi, [ebp - 0x1b0]
stosd dword es:[edi], eax
lea edi, [ebp - 0x54]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x1b4]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x58]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetWindowRect]
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x43ad63
call dword [sym.imp.USER32.dll_GetActiveWindow]
cmp eax, dword [ebx + 0xac]
jne 0x43ad63
push dword [ebp - 0x1b0]
lea eax, [ebp - 0x58]
push dword [ebp - 0x1b4]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x43ad63
movzx eax, word [ebp - 0x1b0]
movzx ecx, word [ebp - 0x1b4]
shl eax, 0x10
or eax, ecx
push eax
xor edi, edi
push edi
push 0x84
push dword [ebx + 0xac]
call esi
cmp eax, 1
jne 0x43ad5f
lea eax, [ebp - 0x1b4]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_ScreenToClient]
movzx eax, word [ebp - 0x1b0]
movzx ecx, word [ebp - 0x1b4]
shl eax, 0x10
or eax, ecx
push eax
push edi
jmp 0x43ad67
push 0xffffffffffffffff
jmp 0x43ad5c
push 0xffffffffffffffff
push 0
push 0x200
push dword [ebx + 0xac]
call esi
mov byte [ebx + 0x480], 0
jmp 0x43b18c
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1b0], ecx
push eax
mov ecx, ebx
mov byte [ebx + 0x480], 0
mov dword [ebp - 0x1b4], eax
call fcn.00437e77
mov dword [ebp - 0x1c8], eax
test eax, eax
je 0x43b18c
mov edx, dword [ebx + 0x110]
test edx, edx
je 0x43ae3b
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x138], 0xc
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x11c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x128], eax
call fcn.00434598
mov ecx, dword [ebx + 0x110]
lea edx, [ebp - 0x138]
mov word [ebp - 0x122], ax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
mov ecx, dword [ebp - 0x1c8]
mov eax, dword [ecx]
lea edx, [ebp - 0x118]
push edx
call dword [eax + 0xc8]
lea ecx, [ebp - 0x118]
mov dword [ebp - 4], 2
call fcn.00431514
test al, al
je 0x43ae7a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x118]
call fcn.004313e9
jmp 0x438a7b
push 0x30
pop edi
push edi
lea esi, [ebx + 0xd0]
push 0
push esi
call fcn.00420e90
mov eax, dword [ebx + 0xac]
mov dword [esi], edi
mov dword [ebx + 0xd4], 1
mov dword [ebx + 0xd8], eax
mov dword [ebx + 0xdc], eax
mov eax, dword [0x4b1e10]
add esp, 0xc
lea ecx, [ebp - 0x118]
mov dword [ebx + 0xf0], eax
call fcn.0043153d
mov ecx, dword [ebp - 0x1c8]
mov dword [ebx + 0xf4], eax
mov eax, dword [ecx]
call dword [eax + 0x58]
cmp dword [ebx + 0xcc], 0
lea edi, [ebx + 0xe0]
mov esi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x43af4f
xor edi, edi
push edi
push dword [0x4b1e10]
mov eax, SysReAllocString
push edi
push dword [ebx + 0xac]
push eax
push eax
push eax
push eax
push SysStringLen
push edi
push str.tooltips_class32
push edi
call dword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [ebx + 0xd0]
push ecx
push edi
push 0x432
push eax
mov dword [ebx + 0xcc], eax
call esi
mov ecx, dword [ebp - 0x1c8]
mov eax, dword [ecx]
call dword [eax + 0xd4]
push eax
push edi
push 0x418
push dword [ebx + 0xcc]
call esi
jmp 0x43af51
xor edi, edi
push dword [ebx + 0xcc]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x43ae66
lea eax, [ebx + 0xd0]
push eax
push edi
push 0x436
push dword [ebx + 0xcc]
call esi
lea eax, [ebx + 0xd0]
push eax
push 1
push 0x411
push dword [ebx + 0xcc]
call esi
jmp 0x43ae66
cmp dword [ebx + 0x108], 0
je 0x43b18c
movsx eax, word [ebp - 0x1ac]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1ac]
shr eax, 0x10
cwde
mov dword [ebp - 0x1b0], eax
lea eax, [ebp - 0x1b4]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x1b4]
push ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebx + 0x120], eax
call fcn.00437e77
mov dword [ebp - 0x1cc], eax
test eax, eax
je 0x43b18c
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x43b18c
xor eax, eax
push 7
shr esi, 0x10
pop ecx
movsx edx, si
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x134], eax
movzx eax, dx
shl eax, 0x10
xor ecx, ecx
test edx, edx
sets cl
mov dword [ebp - 0x138], 0x15
or eax, ecx
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x128], eax
call fcn.00434598
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x1cc]
lea edx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
movzx eax, word [ebx + 0x124]
movzx ecx, word [ebx + 0x120]
shl eax, 0x10
or eax, ecx
push eax
push 0
push 0x200
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x43b18c
cmp byte [ebx + 0x481], 0
je 0x43b0db
mov ecx, ebx
call fcn.00434e6b
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1b0], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1b4], eax
mov dword [ebx + 0x120], eax
call fcn.00437e77
mov edx, eax
mov dword [ebx + 0x114], edx
test edx, edx
je 0x43b18c
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x138], 0x12
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], eax
mov word [ebp - 0x122], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, dword [ebx + 0x114]
mov dword [ebp - 0x130], eax
lea ecx, [ebp - 0x138]
mov eax, dword [ebx]
push ecx
mov ecx, ebx
call dword [eax + 0x140]
xor al, al
call fcn.0041ccb3
ret 0x10