Function at 0x4387d4
Capabilities:
Check for time delay via gettickcount
Check for unmoving mouse cursor

Disassembly:
push 0x1e4
mov eax, 0x4863f1
call fcn.0041ca69
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov ebx, ecx
cmp dword [ebx + 0xac], 0
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1b0], esi
mov dword [ebp - 0x1c0], eax
je 0x43b03e
and dword [ebp - 0x1c4], 0
lea ecx, [ebx + 0x4b8]
call fcn.00430771
mov edi, dword [ebp + 8]
test eax, eax
jle 0x438875
push dword [ebp - 0x1c4]
lea ecx, [ebx + 0x4b8]
mov byte [ebp - 0x1b5], 0
call fcn.004311cd
mov edx, dword [eax]
lea ecx, [ebp - 0x1b5]
push ecx
push dword [ebp - 0x1ac]
mov ecx, eax
push esi
push edi
call dword [edx]
cmp byte [ebp - 0x1b5], 0
jne 0x4388c4
inc dword [ebp - 0x1c4]
lea ecx, [ebx + 0x4b8]
call fcn.00430771
cmp dword [ebp - 0x1c4], eax
jl 0x438826
cmp byte [ebx + 0x171], 0
push 2
pop ecx
je 0x438954
mov eax, edi
sub eax, 0x83
je 0x438949
sub eax, ecx
je 0x438949
dec eax
jne 0x438954
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x4399d9
test esi, esi
sete al
mov ecx, dword [ebp - 0x1c0]
mov dword [ecx], eax
jmp 0x43892d
mov ecx, dword [ebp - 0x1c0]
mov dword [ecx], eax
cmp edi, 0x7b
je 0x4388e9
cmp edi, 0x1ff
jbe 0x43892d
cmp edi, 0x203
jbe 0x438934
cmp edi, 0x20a
jne 0x43892d
mov eax, dword [ebp - 0x1ac]
movsx ecx, ax
shr eax, 0x10
cwde
mov dword [ebp - 0x1b0], eax
lea eax, [ebp - 0x1b4]
push eax
push dword [ebx + 0xac]
mov dword [ebp - 0x1b4], ecx
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x1b4]
mov dword [ebx + 0x120], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebx + 0x124], eax
mov al, 1
jmp 0x43b040
mov eax, dword [ebp - 0x1ac]
movsx ecx, ax
shr eax, 0x10
cwde
mov dword [ebx + 0x120], ecx
jmp 0x438927
mov eax, dword [ebp - 0x1c0]
and dword [eax], 0
jmp 0x43892d
mov eax, 0x133
cmp edi, eax
ja 0x439e07
je 0x43a83e
cmp edi, 0x24
ja 0x4399d9
je 0x439923
sub edi, 5
je 0x4398c1
sub edi, ecx
je 0x43987c
dec edi
je 0x439863
sub edi, 7
je 0x438b9b
dec edi
je 0x438ab8
sub edi, 4
je 0x438aa7
sub edi, 0xc
jne 0x43b03e
cmp dword [ebx + 0x108], edi
je 0x43b03e
cmp word [ebp - 0x1ac], 1
jne 0x43b03e
cmp byte [ebx + 0x481], 0
jne 0x43892d
and dword [ebp - 0x1b4], edi
xor eax, eax
lea edi, [ebp - 0x1b0]
stosd dword es:[edi], eax
lea eax, [ebp - 0x1b4]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x1b4]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_ScreenToClient]
push dword [ebp - 0x1b0]
mov ecx, ebx
push dword [ebp - 0x1b4]
call fcn.00437d29
mov ebx, eax
test ebx, ebx
je 0x43b03e
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x14]
test al, 2
je 0x43b03e
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x138], 0x1a
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], eax
call fcn.0043444a
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ebx]
push ecx
mov ecx, ebx
call dword [eax + 0x140]
jmp 0x43892d
mov eax, dword [ebp - 0x1c0]
mov dword [eax], 1
jmp 0x43892d
xor eax, eax
push 7
xor esi, esi
pop ecx
mov dword [ebp - 0x138], esi
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x120]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebx + 0x124]
mov dword [ebp - 0x128], eax
call fcn.0043444a
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x110]
mov dword [ebp - 0x130], eax
cmp ecx, esi
je 0x438b26
lea edx, [ebp - 0x138]
mov dword [ebp - 0x138], 0xa
mov dword [ebp - 0x134], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
mov ecx, dword [ebx + 0x114]
cmp ecx, esi
je 0x438b4f
lea edx, [ebp - 0x138]
mov dword [ebp - 0x138], 0xe
mov dword [ebp - 0x134], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
push esi
mov ecx, ebx
call fcn.0043833c
mov edi, dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetActiveWindow]
cmp eax, edi
jne 0x438b7b
push 4
push edi
call dword [sym.imp.USER32.dll_GetWindow]
cmp eax, esi
je 0x438b7b
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebx + 0xcc]
cmp eax, esi
je 0x43b03e
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [ebx + 0xcc], esi
jmp 0x43b03e
cmp dword [ebx + 0x108], 0
jne 0x438c03
and dword [ebp - 0x158], 0
push 0x3c
lea eax, [ebp - 0x154]
push 0
push eax
call fcn.00420c90
add esp, 0xc
lea eax, [ebp - 0x158]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_BeginPaint]
push 0xff000000
lea eax, [ebp - 0x150]
push eax
push dword [ebx + 0xb0]
call fcn.0044ffbc
add esp, 0xc
lea eax, [ebp - 0x158]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x43892d
xor eax, eax
xor esi, esi
mov dword [ebp - 0x40], esi
lea edi, [ebp - 0x3c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x40]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetClientRect]
xor eax, eax
mov dword [ebp - 0x30], esi
lea edi, [ebp - 0x2c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push esi
lea eax, [ebp - 0x30]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetUpdateRect]
test eax, eax
je 0x43892d
cmp byte [ebx + 0x16e], 0
je 0x438c56
push 1
mov ecx, ebx
call fcn.00438509
push 1
mov ecx, ebx
call fcn.00434d3d
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x40]
push 1
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
mov byte [ebp - 0x1b5], 0
mov dword [ebp - 0x1c8], eax
call fcn.00434d3d
cmp byte [ebx + 0x16d], 0
je 0x438e9e
lea eax, [ebp - 0x40]
push eax
mov byte [ebx + 0x16d], 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x438f21
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x438f21
mov ecx, dword [ebx + 0x108]
call fcn.0043c164
test al, al
je 0x438d84
mov eax, dword [ebx + 0xb4]
lea esi, [ebp - 0x40]
lea edi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
test eax, eax
je 0x438ced
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [ebx + 0xb8]
test eax, eax
je 0x438cfe
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [ebx + 0xbc]
test eax, eax
je 0x438d0f
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebx + 0xc4]
test eax, eax
je 0x438d20
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
xor eax, eax
mov dword [ebx + 0xb4], eax
mov dword [ebx + 0xb8], eax
mov dword [ebx + 0xbc], eax
mov dword [ebx + 0xc4], eax
cmp byte [ebx + 0x171], al
je 0x438d66
mov eax, dword [ebx + 0x174]
add dword [ebp - 0x20], eax
mov eax, dword [ebx + 0x178]
add dword [ebp - 0x1c], eax
mov eax, dword [ebx + 0x17c]
sub dword [ebp - 0x18], eax
mov eax, dword [ebx + 0x180]
sub dword [ebp - 0x14], eax
mov ecx, dword [ebx + 0x108]
mov eax, dword [ecx]
push 1
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x5c]
jmp 0x438e30
lea edi, [ebx + 0x500]
mov ecx, edi
call fcn.00430ff8
mov ecx, dword [ebx + 0x108]
mov eax, dword [ecx]
push reloc.OLEAUT32.dll_VariantCopy
push esi
push 0x435dac
call dword [eax + 0x134]
mov ecx, edi
mov dword [ebp - 0x1c0], esi
call fcn.00430771
test eax, eax
jle 0x438e30
push dword [ebp - 0x1c0]
mov ecx, edi
call fcn.004311cd
mov edx, dword [eax]
mov ecx, eax
mov dword [ebp - 0x1c4], eax
call dword [edx + 0x12c]
mov ecx, dword [ebp - 0x1c4]
test al, al
mov eax, dword [ecx]
mov dword [ebp - 0x1bc], eax
jne 0x438def
call dword [eax + 0x58]
jmp 0x438df9
lea edx, [ebp - 0x94]
push edx
call dword [eax + 0x50]
mov ecx, dword [ebp - 0x1c4]
push 1
sub esp, 0x10
mov esi, eax
mov eax, dword [ebp - 0x1bc]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x5c]
inc dword [ebp - 0x1c0]
lea edi, [ebx + 0x500]
mov ecx, edi
call fcn.00430771
cmp dword [ebp - 0x1c0], eax
jl 0x438dbb
cmp byte [ebx + 0x16c], 0
mov byte [ebp - 0x1b5], 1
je 0x438f21
xor esi, esi
push esi
push esi
push esi
push str.windowinit
push dword [ebx + 0x108]
mov ecx, ebx
mov byte [ebx + 0x16c], 0
call fcn.0043829c
cmp byte [ebx + 0x171], 0
je 0x438e88
cmp byte [ebx + 0x184], 0
je 0x438e88
mov ecx, ebx
call fcn.00434871
push esi
mov ecx, ebx
call fcn.00434d3d
jmp 0x43892d
push dword [ebx + 0xac]
lea ecx, [ebx + 0x668]
call fcn.00454b6b
jmp 0x438f21
cmp byte [ebx + 0x171], 0
je 0x438f8f
cmp byte [ebx + 0x184], 0
je 0x438f21
mov eax, dword [ebx + 0xc0]
lea esi, [ebp - 0x40]
lea edi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
test eax, eax
je 0x438ee4
mov ecx, dword [ebp - 0x1c8]
imul ecx, dword [ebp - 0x1ac]
shl ecx, 2
push ecx
push 0
push eax
call fcn.00420c90
add esp, 0xc
mov eax, dword [ebx + 0x174]
add dword [ebp - 0x20], eax
mov eax, dword [ebx + 0x178]
add dword [ebp - 0x1c], eax
mov eax, dword [ebx + 0x17c]
sub dword [ebp - 0x18], eax
mov eax, dword [ebx + 0x180]
sub dword [ebp - 0x14], eax
mov ecx, dword [ebx + 0x108]
mov eax, dword [ecx]
push 1
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x5c]
cmp byte [ebx + 0x171], 0
je 0x438f8f
push 0xffffffffffffffec
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, eax
or ecx, 0x80000
cmp eax, ecx
je 0x438f53
push ecx
push 0xffffffffffffffec
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SetWindowLongW]
lea esi, [ebx + 0x188]
push esi
lea eax, [ebp - 0x30]
push eax
push eax
mov byte [ebx + 0x16f], 1
call dword [sym.imp.USER32.dll_UnionRect]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x28], eax
jle 0x438f77
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x24], eax
jle 0x438f82
mov dword [ebp - 0x24], eax
push 0x10
push 0
push esi
call fcn.00420c90
add esp, 0xc
cmp byte [ebx + 0x16f], 0
je 0x438fda
cmp dword [ebx + 0xbc], 0
jne 0x438fda
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebx + 0xb4], eax
lea eax, [ebx + 0xc0]
push eax
push dword [ebp - 0x1c8]
push dword [ebp - 0x1ac]
push dword [ebx + 0xb0]
call fcn.0044ee5f
add esp, 0x10
mov dword [ebx + 0xbc], eax
xor edi, edi
push 0x3c
lea eax, [ebp - 0x1a4]
push edi
push eax
mov dword [ebp - 0x1a8], edi
call fcn.00420c90
add esp, 0xc
lea eax, [ebp - 0x1a8]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_BeginPaint]
cmp byte [ebx + 0x16f], 0
je 0x43978d
push dword [ebx + 0xbc]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebx + 0xb4]
call esi
push dword [ebx + 0xb4]
mov dword [ebp - 0x1b0], eax
call dword [sym.imp.GDI32.dll_SaveDC]
cmp byte [ebx + 0x171], 0
mov dword [ebp - 0x1dc], eax
je 0x4390a4
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
sub edx, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
cmp edx, eax
jge 0x4390a4
mov ecx, edx
imul ecx, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1bc], eax
cmp eax, dword [ebp - 0x28]
jge 0x439093
add eax, ecx
shl eax, 2
mov edi, dword [ebx + 0xc0]
and dword [eax + edi], 0
inc dword [ebp - 0x1bc]
mov edi, dword [ebp - 0x1bc]
add eax, 4
cmp edi, dword [ebp - 0x28]
jl 0x439075
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x1ac]
inc edx
cmp edx, eax
jl 0x439062
mov ecx, dword [ebx + 0x108]
mov eax, dword [ecx]
push 0
lea edx, [ebp - 0x30]
push edx
push dword [ebx + 0xb4]
call dword [eax + 0x150]
cmp byte [ebx + 0x171], 0
je 0x4392f7
and dword [ebp - 0x1c0], 0
lea edi, [ebx + 0x4d0]
mov ecx, edi
call fcn.00430771
test eax, eax
jle 0x4392f7
push dword [ebp - 0x1c0]
mov ecx, edi
call fcn.004311cd
push eax
mov dword [ebp - 0x1bc], eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x439128
push dword [ebp - 0x1c0]
mov ecx, edi
call fcn.00431150
push dword [ebp - 0x1c0]
lea ecx, [ebx + 0x4dc]
call fcn.00431150
jmp 0x4392de
push dword [ebp - 0x1bc]
inc dword [ebp - 0x1c0]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4392de
push dword [ebp - 0x1bc]
lea eax, [ebp - 0x168]
push eax
mov ecx, ebx
call fcn.00434eea
and dword [ebp - 0x58], 0
xor eax, eax
lea edi, [ebp - 0x54]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x4392de
push dword [ebx + 0xb4]
and dword [ebp - 0x1d4], 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edi, eax
lea eax, [ebp - 0x1d4]
push eax
mov eax, dword [ebp - 0x15c]
sub eax, dword [ebp - 0x164]
push eax
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0x168]
push eax
push edi
call fcn.0044ee5f
mov ecx, dword [ebp - 0x15c]
sub ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0x168]
imul eax, ecx
shl eax, 2
push eax
push 0
push dword [ebp - 0x1d4]
call fcn.00420c90
add esp, 0x1c
push dword [ebp - 0x1d8]
push edi
call esi
push 0x35
push edi
push 0x317
push dword [ebp - 0x1bc]
mov dword [ebp - 0x1cc], eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x15c]
and dword [ebp - 0x1c4], 0
mov ecx, eax
sub ecx, dword [ebp - 0x164]
test ecx, ecx
jle 0x43928c
mov ecx, dword [ebp - 0x160]
sub ecx, dword [ebp - 0x168]
xor edx, edx
test ecx, ecx
jle 0x439276
mov eax, dword [ebp - 0x1c4]
imul eax, ecx
mov ecx, dword [ebp - 0x1d4]
add eax, edx
lea ecx, [ecx + eax*4]
mov eax, dword [ecx]
test eax, eax
je 0x43925f
or eax, 0xff000000
mov dword [ecx], eax
mov ecx, dword [ebp - 0x160]
sub ecx, dword [ebp - 0x168]
inc edx
cmp edx, ecx
jl 0x43923e
mov eax, dword [ebp - 0x15c]
inc dword [ebp - 0x1c4]
mov ecx, eax
sub ecx, dword [ebp - 0x164]
cmp dword [ebp - 0x1c4], ecx
jl 0x43922c
mov ecx, dword [ebp - 0x160]
sub eax, dword [ebp - 0x164]
sub ecx, dword [ebp - 0x168]
push 0xcc0020
push 0
push 0
push edi
push eax
push ecx
push dword [ebp - 0x164]
push dword [ebp - 0x168]
push dword [ebx + 0xb4]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x1cc]
push edi
call esi
push dword [ebp - 0x1d8]
call dword [sym.imp.GDI32.dll_DeleteObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
lea edi, [ebx + 0x4d0]
mov ecx, edi
call fcn.00430771
cmp dword [ebp - 0x1c0], eax
jl 0x4390e7
and dword [ebp - 0x1c4], 0
lea ecx, [ebx + 0x4c4]
call fcn.00430771
test eax, eax
jle 0x43934b
push dword [ebp - 0x1c4]
lea ecx, [ebx + 0x4c4]
call fcn.004311cd
mov edx, dword [eax]
lea ecx, [ebp - 0x30]
push ecx
push dword [ebx + 0xb4]
mov ecx, eax
call dword [edx + 0x174]
inc dword [ebp - 0x1c4]
lea ecx, [ebx + 0x4c4]
call fcn.00430771
cmp dword [ebp - 0x1c4], eax
jl 0x43930d
push dword [ebp - 0x1dc]
push dword [ebx + 0xb4]
call dword [sym.imp.GDI32.dll_RestoreDC]
cmp byte [ebx + 0x171], 0
je 0x4396f0
and dword [ebp - 0x58], 0
xor eax, eax
lea edi, [ebp - 0x54]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [ebx + 0x198]
call fcn.00431314
test al, al
jne 0x4395f6
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x40]
lea esi, [ebp - 0x40]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
lea edi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebx + 0x174]
add eax, dword [ebp - 0x40]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x20], eax
mov eax, dword [ebx + 0x178]
add dword [ebp - 0x1c], eax
mov eax, dword [ebx + 0x17c]
sub dword [ebp - 0x18], eax
mov eax, dword [ebx + 0x180]
sub dword [ebp - 0x14], eax
lea ecx, [ebx + 0x198]
call fcn.00431314
test al, al
jne 0x43965d
cmp dword [ebx + 0xc4], 0
jne 0x439469
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
lea edi, [ebx + 0xc8]
push edi
push dword [ebp - 0x1d4]
mov dword [ebx + 0xb8], eax
push dword [ebp - 0x1c0]
push dword [ebx + 0xb0]
call fcn.0044ee5f
mov dword [ebx + 0xc4], eax
mov eax, dword [ebp - 0x1d4]
imul eax, dword [ebp - 0x1c0]
shl eax, 2
push eax
push 0
push dword [edi]
call fcn.00420c90
add esp, 0x1c
push dword [ebx + 0xc4]
push dword [ebx + 0xb8]
call dword [sym.imp.GDI32.dll_SelectObject]
and dword [ebp - 4], 0
jmp 0x43949a
cmp byte [ebx + 0x184], 0
je 0x4394e4
mov eax, dword [ebp - 0x1d4]
imul eax, dword [ebp - 0x1c0]
shl eax, 2
push eax
push 0
push dword [ebx + 0xc8]
call fcn.00420c90
add esp, 0xc
mov dword [ebp - 4], 1
lea eax, [ebp - 0x134]
push eax
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
lea esi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0044aa7c
push 0
lea eax, [ebx + 0x198]
push eax
lea eax, [ebp - 0x20]
push eax
push eax
push ebx
push dword [ebx + 0xb8]
call fcn.0044fe12
or dword [ebp - 4], 0xffffffff
add esp, 0x30
lea ecx, [ebp - 0x134]
call fcn.0044aa59
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
sub eax, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1cc], eax
cmp eax, ecx
jge 0x43965d
mov ecx, eax
imul ecx, dword [ebp - 0x1c0]
mov dword [ebp - 0x1d8], ecx
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x1c4], edx
cmp edx, dword [ebp - 0x28]
jge 0x4395d3
lea esi, [ecx + edx]
shl esi, 2
mov dword [ebp - 0x1dc], esi
add ecx, dword [ebp - 0x1c4]
mov eax, dword [ebx + 0xc8]
mov al, byte [eax + esi + 3]
add ecx, dword [ebx + 0xc0]
movzx edi, al
mov esi, dword [ecx]
mov eax, esi
shr eax, 0x10
movzx eax, al
imul eax, edi
cdq
mov dword [ebp - 0x1d4], edi
mov edi, 0xff
idiv edi
movzx edi, al
mov eax, esi
shr eax, 8
movzx eax, al
imul eax, dword [ebp - 0x1d4]
cdq
mov esi, 0xff
idiv esi
shl edi, 8
movzx eax, al
or edi, eax
movzx eax, byte [ecx]
imul eax, dword [ebp - 0x1d4]
cdq
idiv esi
mov esi, dword [ebp - 0x1dc]
shl edi, 8
add esi, 4
mov dword [ebp - 0x1dc], esi
movzx eax, al
or edi, eax
mov eax, dword [ebp - 0x1d4]
shl eax, 0x18
add edi, eax
inc dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x1c4]
mov dword [ecx], edi
mov ecx, dword [ebp - 0x1d8]
cmp eax, dword [ebp - 0x28]
jl 0x43952b
mov eax, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x1c0]
sub edx, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1d8], ecx
cmp eax, edx
jl 0x43950d
jmp 0x43965d
mov esi, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
sub esi, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
cmp esi, eax
jge 0x43965d
mov edi, dword [ebp - 0x30]
mov edx, esi
imul edx, dword [ebp - 0x1ac]
cmp edi, dword [ebp - 0x28]
jge 0x43964c
lea ecx, [edx + edi]
shl ecx, 2
mov eax, dword [ebx + 0xc0]
add eax, ecx
cmp byte [eax + 3], 0
jne 0x439640
cmp byte [eax], 0
jne 0x43963c
cmp byte [eax + 1], 0
jne 0x43963c
cmp byte [eax + 2], 0
je 0x439640
mov byte [eax + 3], 0xff
inc edi
add ecx, 4
cmp edi, dword [ebp - 0x28]
jl 0x43961d
mov edi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x2c]
add edx, dword [ebp - 0x1ac]
inc esi
cmp esi, eax
jl 0x439612
mov al, byte [ebx + 0x170]
mov byte [ebp - 0x1ba], al
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x1ac]
push 2
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x1e0], eax
xor eax, eax
lea ecx, [ebp - 0x1bc]
push ecx
push eax
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], eax
lea eax, [ebp - 0x1f0]
push eax
push dword [ebx + 0xb4]
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x160]
push eax
push dword [ebx + 0xb0]
mov word [ebp - 0x1bc], 0
push dword [ebx + 0xac]
mov byte [ebp - 0x1b9], 1
call dword [0x4b0e00]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
jmp 0x439721
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
push 0xcc0020
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push dword [ebx + 0xb4]
push eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
push eax
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x1b0]
push dword [ebx + 0xb4]
call esi
cmp byte [ebx + 0x105], 0
je 0x439809
cmp byte [ebx + 0x171], 0
jne 0x439809
push dword [0x4b0e04]
push dword [ebx + 0xb0]
call esi
push 5
mov edi, eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebx + 0xb0]
call esi
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_Rectangle]
push edi
push dword [ebx + 0xb0]
call esi
jmp 0x439809
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x108]
push edi
lea edx, [ebp - 0x30]
push edx
push dword [ebx + 0xb0]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ecx]
call dword [eax + 0x150]
lea ecx, [ebx + 0x4c4]
call fcn.00430771
test eax, eax
jle 0x4397f7
push edi
lea ecx, [ebx + 0x4c4]
call fcn.004311cd
mov edx, dword [eax]
lea ecx, [ebp - 0x30]
push ecx
push dword [ebx + 0xb0]
mov ecx, eax
call dword [edx + 0x174]
lea ecx, [ebx + 0x4c4]
inc edi
call fcn.00430771
cmp edi, eax
jl 0x4397c7
push dword [ebp - 0x1b0]
push dword [ebx + 0xb0]
call dword [sym.imp.GDI32.dll_RestoreDC]
lea eax, [ebp - 0x1a8]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_EndPaint]
xor esi, esi
push esi
mov ecx, ebx
call fcn.00434d3d
cmp byte [ebx + 0x16d], 0
mov byte [ebx + 0x184], 0
je 0x43983b
call fcn.00434871
cmp byte [ebp - 0x1b5], 0
je 0x43892d
push 1
push esi
push esi
push str.windowsize
push dword [ebx + 0x108]
mov ecx, ebx
call fcn.0043829c
jmp 0x43892d
mov ecx, ebx
call fcn.00434d36
test al, al
je 0x43b03e
call fcn.00434d1d
jmp 0x43b03e
mov edx, dword [ebx + 0x10c]
test edx, edx
je 0x43b03e
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x78]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x7c], 0x18
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x78], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, dword [ebx + 0x10c]
mov dword [ebp - 0x74], eax
lea ecx, [ebp - 0x7c]
jmp 0x43b033
mov edx, dword [ebx + 0x10c]
test edx, edx
je 0x439909
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x138], 0x19
mov dword [ebp - 0x134], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x10c]
lea edx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
mov ebx, dword [ebx + 0x108]
test ebx, ebx
je 0x43892d
mov ecx, ebx
call fcn.0043c16b
jmp 0x43892d
push 0xa
pop ecx
xor eax, eax
lea edi, [ebp - 0x84]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x84]
push eax
push 1
push dword [ebx + 0xac]
mov dword [ebp - 0x84], 0x28
call dword [sym.imp.USER32.dll_MonitorFromWindow]
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
cmp dword [ebp - 0x60], 1
lea esi, [ebp - 0x70]
lea edi, [ebp - 0x58]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
je 0x43997c
mov eax, dword [ebp - 0x6c]
neg eax
push eax
mov eax, dword [ebp - 0x70]
neg eax
push eax
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov eax, dword [ebx + 0x128]
mov edx, dword [ebp - 0x1ac]
test eax, eax
jle 0x43998f
mov dword [edx + 0x18], eax
mov eax, dword [ebx + 0x12c]
test eax, eax
jle 0x43999c
mov dword [edx + 0x1c], eax
mov ecx, dword [ebx + 0x130]
test ecx, ecx
jle 0x4399a9
mov dword [edx + 0x20], ecx
mov ecx, dword [ebx + 0x134]
test ecx, ecx
jle 0x4399b6
mov dword [edx + 0x24], ecx
mov eax, dword [ebx + 0x130]
test eax, eax
jle 0x4399c3
mov dword [edx + 8], eax
mov ebx, dword [ebx + 0x134]
test ebx, ebx
jle 0x43b03e
mov dword [edx + 0xc], ebx
jmp 0x43b03e
sub edi, 0x4e
je 0x439de0
sub edi, 0x2d
je 0x439d00
sub edi, 0x85
je 0x439c59
dec edi
je 0x439bb7
dec edi
je 0x439b31
sub edi, 0xf
je 0x439af7
dec edi
dec edi
jne 0x43b03e
and dword [ebp - 0x1bc], edi
lea ecx, [ebx + 0x494]
call fcn.00430771
test eax, eax
jle 0x43b03e
push dword [ebp - 0x1bc]
lea ecx, [ebx + 0x494]
call fcn.004311cd
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1b0], eax
cmp ecx, dword [ebx + 0xac]
jne 0x439a5f
movzx ecx, si
cmp dword [eax + 0xc], ecx
jne 0x439a5f
cmp byte [eax + 0x10], 0
je 0x439a7d
inc dword [ebp - 0x1bc]
lea ecx, [ebx + 0x494]
call fcn.00430771
cmp dword [ebp - 0x1bc], eax
jl 0x439a2f
jmp 0x43b03e
mov esi, dword [ebp - 0x1b0]
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [esi]
mov dword [ebp - 0x138], 0x1b
mov dword [ebp - 0x134], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x130], eax
mov eax, dword [ebx + 0x120]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebx + 0x124]
mov dword [ebp - 0x128], eax
call fcn.0043444a
mov ecx, dword [esi]
mov word [ebp - 0x122], ax
mov eax, dword [esi + 4]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ecx]
lea edx, [ebp - 0x138]
push edx
jmp 0x43b038
cmp dword [ebp - 0x1ac], 0
je 0x43b03e
push dword [ebp - 0x1ac]
push esi
push 0x2111
push dword [ebp - 0x1ac]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x1c0]
mov dword [ecx], eax
test eax, eax
je 0x43b03e
jmp 0x43892d
cmp dword [ebx + 0x108], 0
je 0x43b03e
mov edx, dword [ebx + 0x10c]
test edx, edx
je 0x43b03e
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebx + 0x120]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebx + 0x124]
mov dword [ebp - 0x138], 5
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x120], esi
mov word [ebp - 0x124], si
mov dword [ebp - 0x128], eax
call fcn.0043444a
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, dword [ebx + 0x10c]
jmp 0x43b027
cmp dword [ebx + 0x108], 0
je 0x43b03e
mov edx, dword [ebx + 0x118]
test edx, edx
je 0x43b03e
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebx + 0x120]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebx + 0x124]
mov dword [ebp - 0x138], 4
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x120], esi
mov word [ebp - 0x124], si
mov dword [ebp - 0x128], eax
call fcn.0043444a
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x118]
lea edx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
and dword [ebx + 0x118], 0
jmp 0x43b03e
cmp dword [ebx + 0x108], 0
je 0x43b03e
mov edx, dword [ebx + 0x10c]
test edx, edx
je 0x43b03e
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebx + 0x120]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebx + 0x124]
mov dword [ebp - 0x138], 3
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x120], esi
mov word [ebp - 0x124], si
mov dword [ebp - 0x128], eax
call fcn.0043444a
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x10c]
lea edx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
mov eax, dword [ebx + 0x10c]
mov dword [ebx + 0x118], eax
jmp 0x43b03e
cmp dword [ebx + 0x108], 0
je 0x43b03e
mov eax, dword [ebp - 0x1ac]
movsx ecx, ax
shr eax, 0x10
cwde
mov dword [ebp - 0x1b0], eax
lea eax, [ebp - 0x1b4]
push eax
push dword [ebx + 0xac]
mov dword [ebp - 0x1b4], ecx
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [ebx + 0x114], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebx + 0x120], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebx + 0x124], eax
je 0x43b03e
mov ecx, ebx
call fcn.00434d1d
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x1b4]
mov eax, dword [ebx + 0x114]
mov dword [ebp - 0x12c], ecx
mov ecx, dword [ebp - 0x1b0]
mov dword [ebp - 0x138], 0x14
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], ecx
mov word [ebp - 0x122], si
mov dword [ebp - 0x11c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x114]
lea edx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
and dword [ebx + 0x114], 0
jmp 0x43b03e
cmp dword [ebp - 0x1ac], 0
je 0x43b03e
mov eax, dword [ebp - 0x1ac]
push eax
push esi
push 0x204e
push dword [eax]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4388ba
mov eax, 0x207
cmp edi, eax
ja 0x43a8f5
je 0x43a85e
mov eax, edi
sub eax, 0x138
je 0x43a83e
sub eax, 0xc8
je 0x43a2b6
dec eax
je 0x43a150
dec eax
je 0x43a09f
dec eax
je 0x439fb7
dec eax
je 0x439ec0
dec eax
jne 0x43b03e
cmp byte [ebx + 0x481], al
je 0x439e60
mov ecx, ebx
call fcn.00434d1d
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1b0], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1b4], eax
mov dword [ebx + 0x120], eax
call fcn.00437d29
mov edx, eax
mov dword [ebx + 0x114], edx
test edx, edx
je 0x43b03e
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x138], 0x10
jmp 0x43afe4
cmp byte [ebx + 0x104], 0
jne 0x439ed5
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1b0], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1b4], eax
mov dword [ebx + 0x120], eax
call fcn.00437d29
mov dword [ebp - 0x1cc], eax
test eax, eax
je 0x43b03e
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x43b03e
mov ecx, dword [ebp - 0x1cc]
mov eax, dword [ecx]
call dword [eax + 0x128]
mov ecx, ebx
call fcn.00434d05
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x138], 0xf
mov eax, dword [ebp - 0x1ac]
mov edi, dword [ebp - 0x1cc]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], eax
mov word [ebp - 0x122], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x140]
mov dword [ebx + 0x114], edi
jmp 0x43b03e
cmp byte [ebx + 0x104], 0
jne 0x439fcc
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1b0], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1b4], eax
mov dword [ebx + 0x120], eax
call fcn.00437d29
mov dword [ebp - 0x1cc], eax
test eax, eax
je 0x43b03e
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x43b03e
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x138], 0x13
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x11c], eax
mov word [ebp - 0x122], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, dword [ebp - 0x1cc]
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x140]
mov dword [ebx + 0x114], esi
jmp 0x43b03e
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
cmp dword [ebx + 0x114], 0
movsx ecx, cx
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], ecx
mov dword [ebx + 0x120], eax
mov dword [ebx + 0x124], ecx
je 0x43b03e
mov ecx, ebx
call fcn.00434d1d
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebx + 0x114]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x138], 0xe
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], eax
mov word [ebp - 0x122], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x114]
and dword [ebx + 0x114], 0
mov dword [ebp - 0x130], eax
jmp 0x439ae9
cmp byte [ebx + 0x104], 0
jne 0x43a165
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SetFocus]
cmp dword [ebx + 0x108], 0
je 0x43b03e
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1cc], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1d0], eax
mov dword [ebx + 0x120], eax
call fcn.00437d29
mov edi, eax
mov dword [ebp - 0x1bc], edi
test edi, edi
je 0x43b03e
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x1c]
cmp eax, ebx
jne 0x43b03e
cmp byte [ebx + 0x738], 0
je 0x43a22b
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x38]
test al, al
je 0x43a22b
mov eax, dword [ebx + 0x73c]
mov byte [ebx + 0x739], 1
test eax, eax
je 0x43a1f8
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
and dword [ebx + 0x73c], 0
mov ecx, dword [ebp - 0x1bc]
mov eax, dword [ecx]
call dword [eax + 0x58]
push 0
sub esp, 0x10
mov edi, esp
push dword [ebp - 0x1bc]
mov esi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ebx
movsd dword es:[edi], dword [esi]
call fcn.004505bc
mov esi, dword [ebp - 0x1b0]
add esp, 0x1c
mov dword [ebx + 0x73c], eax
mov ecx, ebx
call fcn.00434d05
mov ecx, dword [ebp - 0x1bc]
mov dword [ebx + 0x114], ecx
mov eax, dword [ecx]
call dword [eax + 0x128]
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov edi, dword [ebp - 0x1bc]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x138], 0xd
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], eax
mov word [ebp - 0x122], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x130], eax
mov eax, dword [edi]
lea ecx, [ebp - 0x138]
push ecx
mov ecx, edi
jmp 0x43b038
cmp byte [ebx + 0x480], 0
jne 0x43a314
xor eax, eax
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebx + 0xac]
mov dword [ebp - 0x18], eax
mov eax, dword [ebx + 0xcc]
mov dword [ebp - 0x20], 0x10
mov dword [ebp - 0x1c], 3
test eax, eax
jne 0x43a2f0
mov eax, dword [ebx + 0x100]
jmp 0x43a300
push 0
push 3
push 0x415
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.COMCTL32.dll__TrackMouseEvent]
mov byte [ebx + 0x480], 1
mov eax, dword [ebp - 0x1ac]
movsx ecx, word [ebp - 0x1ac]
shr eax, 0x10
movsx edx, ax
mov dword [ebp - 0x1d0], ecx
mov dword [ebp - 0x1cc], edx
mov byte [ebp - 0x1b5], 1
cmp dword [ebx + 0x120], ecx
jne 0x43a351
cmp dword [ebx + 0x124], edx
jne 0x43a351
mov byte [ebp - 0x1b5], 0
push edx
mov dword [ebx + 0x120], ecx
push ecx
mov ecx, ebx
mov dword [ebx + 0x124], edx
call fcn.00437d29
mov dword [ebp - 0x1b0], eax
test eax, eax
je 0x43a37f
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x43b03e
cmp byte [ebp - 0x1b5], 0
je 0x43a62a
cmp byte [ebx + 0x739], 0
je 0x43a62a
cmp esi, 1
jne 0x43a62a
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov ecx, dword [ebx + 0x740]
test ecx, ecx
je 0x43a3cc
push dword [ebx + 0x114]
mov eax, dword [ecx]
call dword [eax]
test al, al
je 0x43a3cc
mov byte [ebx + 0x739], 0
jmp 0x43b03e
push 0xc
call fcn.0041ad51
pop ecx
test eax, eax
je 0x43a3e8
and dword [eax + 4], 0
mov dword [eax], vtable.DuiLib::CIDropSource.0
mov byte [eax + 8], 0
jmp 0x43a3ea
xor eax, eax
mov dword [ebp - 0x1c0], eax
test eax, eax
je 0x43b03e
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
push 0x2c
call fcn.0041ad51
pop ecx
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x43a428
push dword [ebp - 0x1c0]
mov ecx, eax
call fcn.004562bc
mov esi, eax
jmp 0x43a42a
xor esi, esi
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x43b03e
mov eax, dword [esi]
push esi
call dword [eax + 4]
and dword [ebp - 0x1e8], 0
xor eax, eax
lea edi, [ebp - 0x58]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
or dword [ebp - 0x50], 0xffffffff
xor eax, eax
lea edi, [ebp - 0x1e4]
stosd dword es:[edi], eax
push 2
stosd dword es:[edi], eax
pop eax
push 0
push eax
push dword [ebx + 0x73c]
mov dword [ebp - 0x54], 1
mov word [ebp - 0x5c], ax
mov dword [ebp - 0x4c], 0x10
call dword [sym.imp.ole32.dll_OleDuplicateData]
push 0
lea ecx, [ebp - 0x1e8]
push ecx
mov edi, eax
lea ecx, [ebp - 0x5c]
push ecx
mov dword [ebp - 0x1e4], edi
mov eax, dword [esi]
push esi
mov dword [ebp - 0x1dc], edi
call dword [eax + 0x1c]
lea eax, [ebp - 0x48]
push eax
push 0x18
push edi
call dword [sym.imp.GDI32.dll_GetObjectW]
mov eax, dword [ebp - 0x44]
and dword [ebp - 0x20], 0
and dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x40]
push 0xe
mov dword [ebp - 0x14], eax
pop eax
mov word [ebp - 0x5c], ax
xor eax, eax
push eax
push eax
push eax
push dword [ebx + 0xb0]
mov dword [ebp - 0x4c], 0x40
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
push dword [ebx + 0xb0]
mov dword [ebp - 0x1cc], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push edi
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
push eax
mov dword [ebp - 0x1c8], eax
call edi
push 0xcc0020
mov dword [ebp - 0x1b0], eax
xor eax, eax
push eax
push eax
push dword [ebp - 0x1c8]
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push eax
push eax
push dword [ebp - 0x1cc]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x1b0]
push dword [ebp - 0x1c8]
call edi
push dword [ebp - 0x1cc]
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
push dword [ebp - 0x1c8]
mov dword [ebp - 0x1e4], eax
call dword [sym.imp.GDI32.dll_DeleteDC]
push 1
lea ecx, [ebp - 0x1e8]
push ecx
lea ecx, [ebp - 0x5c]
push ecx
mov dword [ebp - 0x1e8], 0x40
mov eax, dword [esi]
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x160]
call fcn.004362bc
xor eax, eax
lea edi, [ebp - 0x1b0]
stosd dword es:[edi], eax
mov eax, dword [ebp - 0x44]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x40]
cdq
sub eax, edx
sar eax, 1
push 5
mov dword [ebp - 4], 4
mov dword [ebp - 0x1b0], eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push esi
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1b4]
push eax
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0x160]
call fcn.00436300
lea eax, [ebp - 0x1d8]
push eax
push 3
push dword [ebp - 0x1c0]
push esi
call dword [sym.imp.ole32.dll_DoDragDrop]
cmp dword [ebp - 0x1d8], 0
je 0x43a5fd
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x43a609
push dword [ebp - 0x1c0]
call fcn.0041a981
pop ecx
mov eax, dword [esi]
push esi
call dword [eax + 8]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x160]
mov byte [ebx + 0x739], 0
call fcn.004362e4
jmp 0x43b03e
and dword [ebp - 0x138], 0
xor eax, eax
push 7
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x11c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x130], eax
call fcn.0043444a
mov ecx, ebx
mov word [ebp - 0x122], ax
call fcn.00434d36
test al, al
jne 0x43a7fc
push dword [ebp - 0x1cc]
push dword [ebp - 0x1d0]
call fcn.00437d29
mov edi, eax
test edi, edi
je 0x43a6b5
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x1c]
cmp eax, ebx
jne 0x43b03e
mov eax, dword [ebx + 0x110]
cmp edi, eax
je 0x43a7c7
test eax, eax
je 0x43a7c7
lea ecx, [ebx + 0x518]
mov dword [ebp - 0x138], 0xa
mov dword [ebp - 0x134], eax
call fcn.00430771
push eax
lea ecx, [ebp - 0x164]
call fcn.00430fc0
lea ecx, [ebx + 0x518]
mov dword [ebp - 4], 5
call fcn.00430771
push eax
lea ecx, [ebp - 0x164]
call fcn.00431015
lea ecx, [ebx + 0x518]
call fcn.00430771
shl eax, 2
push eax
lea ecx, [ebx + 0x518]
call fcn.0043133d
push eax
lea ecx, [ebp - 0x164]
call fcn.0043133d
push eax
call fcn.0041c260
add esp, 0xc
lea ecx, [ebp - 0x164]
xor esi, esi
call fcn.00430771
test eax, eax
jle 0x43a77d
push esi
lea ecx, [ebp - 0x164]
call fcn.004311cd
mov edx, dword [eax]
lea ecx, [ebp - 0x138]
push ecx
mov ecx, eax
call dword [edx + 0x140]
lea ecx, [ebp - 0x164]
inc esi
call fcn.00430771
cmp esi, eax
jl 0x43a750
mov ecx, dword [ebx + 0x110]
mov eax, dword [ecx]
lea edx, [ebp - 0x138]
push edx
call dword [eax + 0x140]
mov eax, dword [ebx + 0xcc]
and dword [ebx + 0x110], 0
test eax, eax
je 0x43a7b8
lea ecx, [ebx + 0xd0]
push ecx
push 0
push 0x411
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x164]
call fcn.00430fea
cmp edi, dword [ebx + 0x110]
je 0x43a802
test edi, edi
je 0x43a802
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x138], 0xb
mov dword [ebp - 0x134], edi
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x140]
mov dword [ebx + 0x110], edi
jmp 0x43a802
mov edi, dword [ebp - 0x1b0]
mov ebx, dword [ebx + 0x114]
test ebx, ebx
je 0x43a821
mov dword [ebp - 0x138], 9
mov dword [ebp - 0x134], ebx
jmp 0x43b02d
test edi, edi
je 0x43b03e
mov dword [ebp - 0x138], 9
mov dword [ebp - 0x134], edi
jmp 0x43a2a6
cmp dword [ebp - 0x1ac], 0
je 0x43b03e
push dword [ebp - 0x1ac]
add edi, 0x2000
push esi
push edi
jmp 0x439b10
cmp byte [ebx + 0x104], 0
jne 0x43a873
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1b0], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1b4], eax
mov dword [ebx + 0x120], eax
call fcn.00437d29
mov dword [ebp - 0x1cc], eax
test eax, eax
je 0x43b03e
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x43b03e
mov ecx, dword [ebp - 0x1cc]
mov eax, dword [ecx]
call dword [eax + 0x128]
mov ecx, ebx
call fcn.00434d05
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x138], 0x11
jmp 0x439f52
sub edi, 0x208
je 0x43af7d
sub edi, ecx
je 0x43ae47
sub edi, 0x97
je 0x43ac32
sub edi, ecx
je 0x43ab22
sub edi, 0x75
je 0x43aa24
sub edi, 0x7ce9
jne 0x43b03e
lea ecx, [ebx + 0x4e8]
call fcn.00430771
test eax, eax
jle 0x43a969
push edi
lea ecx, [ebx + 0x4e8]
call fcn.004311cd
test eax, eax
je 0x43a959
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx]
lea ecx, [ebx + 0x4e8]
inc edi
call fcn.00430771
cmp edi, eax
jl 0x43a941
lea ecx, [ebx + 0x4e8]
call fcn.00430ff8
lea edi, [ebx + 0x4f4]
push 0
mov ecx, edi
mov byte [ebx + 0x484], 0
call fcn.004311b1
mov esi, eax
test esi, esi
je 0x43b03e
add ebx, 0x488
mov dword [ebp - 0x1c8], ebx
push 0
mov ecx, edi
call fcn.00431150
mov eax, dword [esi + 0x108]
test eax, eax
je 0x43a9ce
lea ecx, [eax + 0x38]
call fcn.0045a60e
test al, al
je 0x43a9ce
mov ecx, dword [esi + 0x108]
push esi
add ecx, 0x38
call fcn.0045a66b
mov ecx, dword [ebp - 0x1c8]
xor ebx, ebx
call fcn.00430771
test eax, eax
jle 0x43aa02
mov ecx, dword [ebp - 0x1c8]
push ebx
call fcn.004311cd
mov edx, dword [eax]
push esi
mov ecx, eax
call dword [edx]
mov ecx, dword [ebp - 0x1c8]
inc ebx
call fcn.00430771
cmp ebx, eax
jl 0x43a9df
mov ecx, esi
call fcn.00430552
push esi
call fcn.0041a981
pop ecx
push 0
mov ecx, edi
call fcn.004311b1
mov esi, eax
test esi, esi
jne 0x43a9a0
jmp 0x43b03e
cmp dword [ebx + 0x108], 0
je 0x43b03e
lea eax, [ebp - 0x58]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetClientRect]
push esi
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [ebx + 0x108]
push 0
lea edx, [ebp - 0x58]
push edx
mov dword [ebp - 0x1cc], eax
mov eax, dword [ecx]
push esi
call dword [eax + 0x150]
test byte [ebp - 0x1ac], 0x10
je 0x43ab10
push 5
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x1bc], eax
test eax, eax
je 0x43ab10
mov eax, dword [ebp - 0x1ac]
or eax, 2
mov dword [ebp - 0x1b0], eax
and dword [ebp - 0x20], 0
xor eax, eax
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x1bc]
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea eax, [ebp - 0x20]
push eax
push dword [ebx + 0xac]
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [ebp - 0x1c]
push 0
neg eax
push eax
mov eax, dword [ebp - 0x20]
neg eax
push eax
push esi
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
push dword [ebp - 0x1b0]
push esi
push 0x317
push dword [ebp - 0x1bc]
call dword [sym.imp.USER32.dll_SendMessageW]
push 2
push dword [ebp - 0x1bc]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x1bc], eax
test eax, eax
jne 0x43aa9b
push dword [ebp - 0x1cc]
push esi
call dword [sym.imp.GDI32.dll_RestoreDC]
jmp 0x43b03e
mov eax, dword [ebx + 0xcc]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x43ab43
lea ecx, [ebx + 0xd0]
push ecx
push 0
push 0x411
push eax
call esi
cmp byte [ebx + 0x480], 0
je 0x43ac26
and dword [ebp - 0x1b4], 0
xor eax, eax
and dword [ebp - 0x58], eax
lea edi, [ebp - 0x1b0]
stosd dword es:[edi], eax
lea edi, [ebp - 0x54]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x1b4]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x58]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_GetWindowRect]
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x43ac15
call dword [sym.imp.USER32.dll_GetActiveWindow]
cmp eax, dword [ebx + 0xac]
jne 0x43ac15
push dword [ebp - 0x1b0]
lea eax, [ebp - 0x58]
push dword [ebp - 0x1b4]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x43ac15
movzx eax, word [ebp - 0x1b0]
movzx ecx, word [ebp - 0x1b4]
shl eax, 0x10
or eax, ecx
push eax
xor edi, edi
push edi
push 0x84
push dword [ebx + 0xac]
call esi
cmp eax, 1
jne 0x43ac11
lea eax, [ebp - 0x1b4]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_ScreenToClient]
movzx eax, word [ebp - 0x1b0]
movzx ecx, word [ebp - 0x1b4]
shl eax, 0x10
or eax, ecx
push eax
push edi
jmp 0x43ac19
push 0xffffffffffffffff
jmp 0x43ac0e
push 0xffffffffffffffff
push 0
push 0x200
push dword [ebx + 0xac]
call esi
mov byte [ebx + 0x480], 0
jmp 0x43b03e
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1b0], ecx
push eax
mov ecx, ebx
mov byte [ebx + 0x480], 0
mov dword [ebp - 0x1b4], eax
call fcn.00437d29
mov dword [ebp - 0x1c8], eax
test eax, eax
je 0x43b03e
mov edx, dword [ebx + 0x110]
test edx, edx
je 0x43aced
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x138], 0xc
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x11c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x128], eax
call fcn.0043444a
mov ecx, dword [ebx + 0x110]
lea edx, [ebp - 0x138]
mov word [ebp - 0x122], ax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
mov ecx, dword [ebp - 0x1c8]
mov eax, dword [ecx]
lea edx, [ebp - 0x118]
push edx
call dword [eax + 0xc8]
lea ecx, [ebp - 0x118]
mov dword [ebp - 4], 2
call fcn.00431314
test al, al
je 0x43ad2c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x118]
call fcn.004311e9
jmp 0x43892d
push 0x30
pop edi
push edi
lea esi, [ebx + 0xd0]
push 0
push esi
call fcn.00420c90
mov eax, dword [ebx + 0xac]
mov dword [esi], edi
mov dword [ebx + 0xd4], 1
mov dword [ebx + 0xd8], eax
mov dword [ebx + 0xdc], eax
mov eax, dword [0x4b0e10]
add esp, 0xc
lea ecx, [ebp - 0x118]
mov dword [ebx + 0xf0], eax
call fcn.0043133d
mov ecx, dword [ebp - 0x1c8]
mov dword [ebx + 0xf4], eax
mov eax, dword [ecx]
call dword [eax + 0x58]
cmp dword [ebx + 0xcc], 0
lea edi, [ebx + 0xe0]
mov esi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x43ae01
xor edi, edi
push edi
push dword [0x4b0e10]
mov eax, SysReAllocString
push edi
push dword [ebx + 0xac]
push eax
push eax
push eax
push eax
push SysStringLen
push edi
push str.tooltips_class32
push edi
call dword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [ebx + 0xd0]
push ecx
push edi
push 0x432
push eax
mov dword [ebx + 0xcc], eax
call esi
mov ecx, dword [ebp - 0x1c8]
mov eax, dword [ecx]
call dword [eax + 0xd4]
push eax
push edi
push 0x418
push dword [ebx + 0xcc]
call esi
jmp 0x43ae03
xor edi, edi
push dword [ebx + 0xcc]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x43ad18
lea eax, [ebx + 0xd0]
push eax
push edi
push 0x436
push dword [ebx + 0xcc]
call esi
lea eax, [ebx + 0xd0]
push eax
push 1
push 0x411
push dword [ebx + 0xcc]
call esi
jmp 0x43ad18
cmp dword [ebx + 0x108], 0
je 0x43b03e
movsx eax, word [ebp - 0x1ac]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1ac]
shr eax, 0x10
cwde
mov dword [ebp - 0x1b0], eax
lea eax, [ebp - 0x1b4]
push eax
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x1b4]
push ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebx + 0x120], eax
call fcn.00437d29
mov dword [ebp - 0x1cc], eax
test eax, eax
je 0x43b03e
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x1c]
cmp eax, ebx
jne 0x43b03e
xor eax, eax
push 7
shr esi, 0x10
pop ecx
movsx edx, si
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x134], eax
movzx eax, dx
shl eax, 0x10
xor ecx, ecx
test edx, edx
sets cl
mov dword [ebp - 0x138], 0x15
or eax, ecx
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x128], eax
call fcn.0043444a
mov word [ebp - 0x122], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x1cc]
lea edx, [ebp - 0x138]
mov dword [ebp - 0x130], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
movzx eax, word [ebx + 0x124]
movzx ecx, word [ebx + 0x120]
shl eax, 0x10
or eax, ecx
push eax
push 0
push 0x200
push dword [ebx + 0xac]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x43b03e
cmp byte [ebx + 0x481], 0
je 0x43af8d
mov ecx, ebx
call fcn.00434d1d
mov ecx, dword [ebp - 0x1ac]
movsx eax, word [ebp - 0x1ac]
shr ecx, 0x10
movsx ecx, cx
push ecx
mov dword [ebp - 0x1b0], ecx
mov dword [ebx + 0x124], ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x1b4], eax
mov dword [ebx + 0x120], eax
call fcn.00437d29
mov edx, eax
mov dword [ebx + 0x114], edx
test edx, edx
je 0x43b03e
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x138], 0x12
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], eax
mov word [ebp - 0x122], si
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, dword [ebx + 0x114]
mov dword [ebp - 0x130], eax
lea ecx, [ebp - 0x138]
mov eax, dword [ebx]
push ecx
mov ecx, ebx
call dword [eax + 0x140]
xor al, al
call fcn.0041cab3
ret 0x10