Function at 0x5858f4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffc64
push ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0xc]
call fcn.004042a4
mov eax, dword [ebp + 8]
call fcn.004042a4
xor eax, eax
push ebp
push 0x5872fe
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x58]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 4]
test byte [eax + 0x52], 0x20
je 0x585975
mov eax, dword [ebp - 0x68]
test byte [eax + 0x10], 1
je 0x585975
mov eax, dword [ebp - 4]
cmp dword [eax + 0x3c], 0x8000000e
jne 0x58596a
push 0xe
call sub.USER32.DLL_GetSysColor
mov dword [ebp - 0x48], eax
jmp 0x58597a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x48], eax
jmp 0x58597a
xor eax, eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 4]
test byte [eax + 0x52], 0x40
je 0x585997
mov eax, dword [ebp - 0x68]
test byte [eax + 0x10], 1
je 0x585997
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x44], eax
jmp 0x58599c
xor eax, eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 4]
test byte [eax + 0x52], 8
je 0x5859ba
mov eax, dword [ebp - 0x68]
test byte [eax + 0x10], 1
je 0x5859ba
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
cmp byte [eax + 0x2d], 0
je 0x5859d8
mov eax, dword [ebp - 4]
test byte [eax + 0x52], 0x10
je 0x5859de
mov eax, dword [ebp - 0x68]
test byte [eax + 0x10], 1
je 0x5859de
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
cmp byte [eax + 0x2d], 0
je 0x5859de
mov eax, dword [ebp - 0x68]
dec dword [eax + 0x10]
mov dl, 1
mov eax, dword [0x4190bc]
call fcn.0041ada4
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 0x58]
call fcn.0041b94c
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_GetBkColor
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
cmp byte [eax + 0x2e], 0
je 0x585a3f
mov eax, dword [0x949fc4]
call fcn.0041a738
mov byte [ebp - 0x59], al
mov eax, dword [0x949fc4]
call fcn.0041a738
mov edx, eax
or dl, byte [0x58730c]
mov eax, dword [0x949fc4]
call fcn.0041a744
mov eax, dword [0x949fc4]
call fcn.0041a498
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_SelectObject
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x36], 1
mov byte [ebp - 0x35], 1
mov dword [ebp - 0x50], 0x1fffffff
xor eax, eax
push ebp
push 0x5872d9
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x26c]
mov edx, dword [ebp - 0xc]
call fcn.0040a094
mov eax, dword [ebp - 4]
cmp dword [eax + 0x78], 0
je 0x585aa3
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x78]
lea eax, [ebp - 0x16c]
call fcn.0040a094
cmp dword [ebp + 8], 0
je 0x585ab7
lea eax, [ebp - 0x36c]
mov edx, dword [ebp + 8]
call fcn.0040a094
mov eax, dword [ebp - 4]
cmp dword [eax + 0x58], 0
je 0x585ae6
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x48]
mov edx, dword [eax]
call dword [edx + 0x1c]
test al, al
jne 0x585ae6
mov eax, dword [ebp - 4]
test byte [eax + 0x51], 0x10
je 0x585ae6
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x48]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x50]
dec al
je 0x585b97
dec al
je 0x585b0d
dec al
je 0x585d1a
dec al
je 0x585c15
jmp 0x585dbb
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0x20]
sar eax, 1
jns 0x585b1a
adc eax, 0
mov edx, dword [ebp - 0x64]
mov edx, dword [edx + 0x18]
sar edx, 1
jns 0x585b27
adc edx, 0
sub eax, edx
mov edx, dword [ebp - 0x68]
add eax, dword [edx + 0x1c]
add eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x64]
mov dword [edx], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x6c]
movzx edx, byte [edx + 0x25]
add eax, edx
mov edx, dword [ebp - 0x64]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0x20]
sar eax, 1
jns 0x585b59
adc eax, 0
mov edx, dword [ebp - 0x64]
mov edx, dword [edx + 0x10]
sar edx, 1
jns 0x585b66
adc edx, 0
sub eax, edx
mov edx, dword [ebp - 0x68]
add eax, dword [edx + 0x1c]
add eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x64]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x64]
add eax, dword [edx + 0x18]
mov edx, dword [ebp - 0x6c]
movzx edx, byte [edx + 0x25]
add eax, edx
mov edx, dword [ebp - 0x64]
mov dword [edx + 0xc], eax
jmp 0x585dbb
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0x20]
sar eax, 1
jns 0x585ba4
adc eax, 0
mov edx, dword [ebp - 0x64]
mov edx, dword [edx + 0x10]
sar edx, 1
jns 0x585bb1
adc edx, 0
sub eax, edx
add eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x64]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x6c]
movzx edx, byte [edx + 0x25]
add eax, edx
mov edx, dword [ebp - 0x64]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0x20]
sar eax, 1
jns 0x585bde
adc eax, 0
mov edx, dword [ebp - 0x64]
mov edx, dword [edx + 0x18]
sar edx, 1
jns 0x585beb
adc edx, 0
sub eax, edx
add eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x64]
mov dword [edx], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x64]
add eax, dword [edx + 0x18]
mov edx, dword [ebp - 0x6c]
movzx edx, byte [edx + 0x25]
add eax, edx
mov edx, dword [ebp - 0x64]
mov dword [edx + 4], eax
jmp 0x585dbb
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x6c]
movzx edx, byte [edx + 0x25]
add eax, edx
mov edx, dword [ebp - 0x64]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x1c]
mov edx, dword [ebp - 0x6c]
movzx edx, byte [edx + 0x24]
add eax, edx
add eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x64]
mov dword [edx], eax
mov eax, dword [ebp - 4]
test byte [eax + 0x53], 1
jne 0x585c66
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
add eax, dword [edx + 0x5c]
mov edx, dword [ebp - 0x6c]
movzx edx, byte [edx + 0x24]
add eax, edx
mov edx, dword [ebp - 0x64]
mov dword [edx + 8], eax
jmp 0x585cc1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x48]
call fcn.0042f688
cmp ebx, eax
jne 0x585cb0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
mov edx, dword [0x42e910]
call fcn.004033ac
test al, al
jne 0x585cb0
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov edx, dword [ebp - 0x6c]
movzx edx, byte [edx + 0x24]
add eax, edx
mov edx, dword [ebp - 0x64]
mov dword [edx + 8], eax
jmp 0x585cc1
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov edx, dword [ebp - 0x64]
add eax, dword [edx + 0x28]
mov edx, dword [ebp - 0x64]
mov dword [edx + 8], eax
mov eax, dword [ebp - 4]
test byte [eax + 0x51], 8
je 0x585d09
mov eax, dword [ebp - 0xc]
mov edx, 0x587318
call fcn.00404200
je 0x585d09
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x64]
mov edx, dword [edx + 0x1c]
sar edx, 1
jns 0x585cec
adc edx, 0
add eax, edx
mov edx, dword [ebp - 0x64]
mov edx, dword [edx + 0x14]
sar edx, 1
jns 0x585cfb
adc edx, 0
sub eax, edx
dec eax
mov edx, dword [ebp - 0x64]
mov dword [edx + 0xc], eax
jmp 0x585dbb
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x64]
mov dword [edx + 0xc], eax
jmp 0x585dbb
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x1c]
mov edx, dword [ebp - 0x6c]
movzx edx, byte [edx + 0x24]
add eax, edx
add eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x64]
mov dword [edx + 8], eax
mov eax, dword [ebp - 4]
test byte [eax + 0x51], 8
je 0x585d77
mov eax, dword [ebp - 0xc]
mov edx, 0x587318
call fcn.00404200
je 0x585d77
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x64]
mov edx, dword [edx + 0x1c]
sar edx, 1
jns 0x585d5d
adc edx, 0
add eax, edx
mov edx, dword [ebp - 0x64]
mov edx, dword [edx + 0x14]
sar edx, 1
jns 0x585d6c
adc edx, 0
sub eax, edx
dec eax
mov edx, dword [ebp - 0x64]
mov dword [edx + 0xc], eax
jmp 0x585d8c
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x6c]
movzx edx, byte [edx + 0x25]
add eax, edx
mov edx, dword [ebp - 0x64]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x6c]
add eax, dword [edx + 0x2c]
mov edx, dword [ebp - 0x6c]
movzx edx, byte [edx + 0x24]
add eax, edx
mov edx, dword [ebp - 0x64]
mov dword [edx], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x6c]
movzx edx, byte [edx + 0x25]
add eax, edx
mov edx, dword [ebp - 0x64]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x68]
test byte [eax + 0x10], 1
je 0x5861b6
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x38]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
call fcn.0041ac54
mov eax, dword [ebp - 4]
cmp dword [eax + 0x3c], 0x8000000e
jne 0x585dfe
push 0xe
call sub.USER32.DLL_GetSysColor
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_SetTextColor
mov dword [ebp - 0x50], eax
jmp 0x585e14
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_SetTextColor
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x58], 0
je 0x585f44
mov eax, dword [ebp - 4]
test byte [eax + 0x51], 0x20
je 0x585f44
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x40]
mov edx, dword [eax]
call dword [edx + 0x1c]
test al, al
jne 0x585f44
mov eax, dword [ebp - 4]
test byte [eax + 0x51], 0x80
jne 0x585f44
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_CreateCompatibleDC
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x40]
mov edx, dword [eax]
call dword [edx + 0x60]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call sub.GDI32.DLL_SelectObject
mov dword [ebp - 0x20], eax
xor eax, eax
push ebp
push 0x585efb
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x330008
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x20]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x1c]
add eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x28]
mov edx, dword [ebp - 0x68]
sub eax, dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x24]
mov edx, dword [ebp - 0x68]
sub eax, dword [edx + 0x1c]
sub eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x20]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x1c]
add eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_BitBlt
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x585f02
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call sub.GDI32.DLL_SelectObject
mov eax, dword [ebp - 0x1c]
push eax
call sub.GDI32.DLL_DeleteDC
ret
mov eax, dword [ebp - 4]
cmp dword [eax + 0x58], 0
je 0x5860d0
mov eax, dword [ebp - 4]
test byte [eax + 0x51], 0x40
je 0x5860d0
mov eax, dword [ebp - 4]
test byte [eax + 0x52], 1
je 0x5860d0
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x1c]
test al, al
jne 0x5860d0
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x1c]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x2c], eax
jmp 0x5860bc
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_CreateCompatibleDC
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x60]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call sub.GDI32.DLL_SelectObject
mov dword [ebp - 0x20], eax
xor eax, eax
push ebp
push 0x58607e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x20]
add eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x68]
cmp eax, dword [edx + 0x28]
jge 0x586023
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_BitBlt
jmp 0x58605a
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x28]
sub eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_BitBlt
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x586085
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call sub.GDI32.DLL_SelectObject
mov eax, dword [ebp - 0x1c]
push eax
call sub.GDI32.DLL_DeleteDC
ret
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x24]
cmp eax, dword [ebp - 0x28]
jg 0x585f9d
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x1c]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x20]
add dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x28]
cmp eax, dword [ebp - 0x2c]
jg 0x586093
mov byte [ebp - 0x36], 0
jmp 0x586472
mov eax, dword [ebp - 4]
test byte [eax + 0x51], 0x40
je 0x5861ad
mov eax, dword [ebp - 4]
test byte [eax + 0x52], 1
jne 0x5861ad
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x1c]
test al, al
jne 0x5861ad
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_CreateCompatibleDC
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x44]
mov edx, dword [eax]
call dword [edx + 0x60]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call sub.GDI32.DLL_SelectObject
mov dword [ebp - 0x20], eax
xor eax, eax
push ebp
push 0x58619d
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x28]
mov edx, dword [ebp - 0x68]
sub eax, dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x24]
mov edx, dword [ebp - 0x68]
sub eax, dword [edx + 0x1c]
sub eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x20]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x1c]
add eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_BitBlt
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5861a4
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call sub.GDI32.DLL_SelectObject
mov eax, dword [ebp - 0x1c]
push eax
call sub.GDI32.DLL_DeleteDC
ret
mov byte [ebp - 0x35], 1
jmp 0x586472
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x40]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
call fcn.0041ac54
mov eax, dword [ebp - 4]
cmp dword [eax + 0x58], 0
je 0x586418
mov eax, dword [ebp - 4]
test byte [eax + 0x51], 0x20
je 0x586418
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x40]
mov edx, dword [eax]
call dword [edx + 0x1c]
test al, al
jne 0x586418
mov eax, dword [ebp - 4]
test byte [eax + 0x51], 0x80
jne 0x5862be
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_CreateCompatibleDC
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x40]
mov edx, dword [eax]
call dword [edx + 0x60]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call sub.GDI32.DLL_SelectObject
mov dword [ebp - 0x20], eax
xor eax, eax
push ebp
push 0x5862ae
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xcc0020
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x20]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x1c]
add eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x28]
mov edx, dword [ebp - 0x68]
sub eax, dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x24]
mov edx, dword [ebp - 0x68]
sub eax, dword [edx + 0x1c]
sub eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x20]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x1c]
add eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_BitBlt
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5862b5
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call sub.GDI32.DLL_SelectObject
mov eax, dword [ebp - 0x1c]
push eax
call sub.GDI32.DLL_DeleteDC
ret
mov eax, dword [ebp - 4]
test byte [eax + 0x51], 0x80
je 0x586418
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x1c]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x2c], eax
jmp 0x586409
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_CreateCompatibleDC
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x40]
mov edx, dword [eax]
call dword [edx + 0x60]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call sub.GDI32.DLL_SelectObject
mov dword [ebp - 0x20], eax
xor eax, eax
push ebp
push 0x5863cb
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x40]
mov edx, dword [eax]
call dword [edx + 0x20]
add eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x68]
cmp eax, dword [edx + 0x28]
jge 0x586370
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x40]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x40]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_BitBlt
jmp 0x5863a7
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x28]
sub eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x40]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_BitBlt
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5863d2
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call sub.GDI32.DLL_SelectObject
mov eax, dword [ebp - 0x1c]
push eax
call sub.GDI32.DLL_DeleteDC
ret
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x24]
cmp eax, dword [ebp - 0x28]
jg 0x5862ea
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x1c]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x40]
mov edx, dword [eax]
call dword [edx + 0x20]
add dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x28]
cmp eax, dword [ebp - 0x2c]
jg 0x5863e0
mov byte [ebp - 0x36], 0
mov eax, dword [ebp - 4]
test byte [eax + 0x51], 2
je 0x586434
push 7
call sub.USER32.DLL_GetSysColor
mov edx, eax
mov eax, dword [0x949fc4]
call fcn.0041a484
mov eax, dword [ebp - 4]
test byte [eax + 0x51], 1
jne 0x586455
mov eax, dword [0x949fc4]
mov eax, dword [eax + 0x14]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_SetTextColor
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x48], 0
je 0x58646e
mov eax, dword [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_SetTextColor
mov dword [ebp - 0x50], eax
mov byte [ebp - 0x35], 0
cmp byte [ebp - 0x36], 0
je 0x5866d6
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2c], 0
je 0x58648e
mov eax, dword [ebp - 4]
test byte [eax + 0x52], 4
jne 0x5864b8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2c], 0
jne 0x586688
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
cmp byte [eax + 0x2c], 0
je 0x586688
mov eax, dword [ebp - 4]
test byte [eax + 0x52], 4
je 0x586688
mov eax, dword [ebp - 4]
cmp byte [eax + 0x50], 4
jne 0x5864cd
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 8]
dec eax
mov dword [ebp - 0x30], eax
jmp 0x5864f7
mov eax, dword [ebp - 4]
cmp byte [eax + 0x50], 3
jne 0x5864e1
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
dec eax
mov dword [ebp - 0x30], eax
jmp 0x5864f7
mov ecx, 0x587324
mov dl, 1
mov eax, dword [0x408390]
call fcn.0040d0bc
call fcn.004038cc
mov eax, dword [ebp - 4]
cmp byte [eax + 0x74], 0
jne 0x58650d
mov eax, dword [ebp - 4]
cmp byte [eax + 0x75], 0
je 0x5865e1
mov eax, dword [ebp - 4]
cmp byte [eax + 0x76], 1
jne 0x5865e1
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
call fcn.0041ac4c
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x40]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
call fcn.0041ac54
mov eax, dword [ebp - 4]
cmp byte [eax + 0x50], 4
jne 0x58658c
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
call fcn.0041ac88
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x28]
inc eax
push eax
lea eax, [ebp - 0x39c]
push eax
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + 0x20]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x1c]
add eax, dword [ebp - 0x24]
call fcn.00410ed8
lea eax, [ebp - 0x39c]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.USER32.DLL_FillRect
jmp 0x5865ce
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
call fcn.0041ac88
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x28]
inc eax
push eax
lea eax, [ebp - 0x39c]
push eax
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + 0x20]
mov eax, dword [ebp - 0x30]
call fcn.00410ed8
lea eax, [ebp - 0x39c]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.USER32.DLL_FillRect
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x54]
call fcn.0041ac54
jmp 0x586694
mov eax, dword [ebp - 4]
cmp byte [eax + 0x74], 0
jne 0x5865f7
mov eax, dword [ebp - 4]
cmp byte [eax + 0x75], 0
je 0x586694
mov eax, dword [ebp - 4]
cmp byte [eax + 0x76], 0
jne 0x586694
mov eax, dword [ebp - 4]
test byte [eax + 0x52], 4
je 0x586694
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
call fcn.0041ac4c
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x40]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
call fcn.0041ac54
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
call fcn.0041ac88
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x28]
inc eax
push eax
lea eax, [ebp - 0x39c]
push eax
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + 0x20]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x1c]
add eax, dword [ebp - 0x24]
call fcn.00410ed8
lea eax, [ebp - 0x39c]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.USER32.DLL_FillRect
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x54]
call fcn.0041ac54
jmp 0x586694
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x1c]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
call fcn.0041ac88
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x28]
inc eax
push eax
lea eax, [ebp - 0x39c]
push eax
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + 0x20]
mov eax, dword [ebp - 0x30]
call fcn.00410ed8
lea eax, [ebp - 0x39c]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.USER32.DLL_FillRect
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
cmp byte [eax + 0x2d], 0
je 0x5866f4
mov eax, dword [ebp - 4]
test byte [eax + 0x52], 2
je 0x5866f4
mov eax, dword [ebp - 0x68]
test byte [eax + 0x10], 1
jne 0x58671a
mov eax, dword [ebp - 4]
test byte [eax + 0x52], 2
jne 0x58694f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x24]
mov edx, 0x587318
call fcn.00404200
je 0x58694f
mov eax, dword [ebp - 4]
cmp byte [eax + 0x76], 0
je 0x586738
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2c], 0
jne 0x586766
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
cmp byte [eax + 0x2c], 0
jne 0x586766
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x28]
push eax
lea eax, [ebp - 0x38c]
push eax
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + 0x20]
inc edx
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x1c]
add eax, dword [ebp - 0x24]
call fcn.00410ed8
jmp 0x586875
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x76]
dec al
je 0x586779
dec al
je 0x5867c9
jmp 0x586875
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x64]
add eax, dword [edx + 0x18]
push eax
lea eax, [ebp - 0x38c]
push eax
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
mov eax, dword [ebp - 4]
add ecx, dword [eax + 0x5c]
mov eax, dword [ebp - 0x64]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
call fcn.00410ed8
mov eax, dword [ebp - 0x6c]
movzx eax, byte [eax + 0x25]
push eax
mov eax, dword [ebp - 0x6c]
movzx eax, byte [eax + 0x25]
push eax
lea eax, [ebp - 0x38c]
push eax
call sub.USER32.DLL_InflateRect
jmp 0x586875
mov eax, dword [ebp - 4]
cmp byte [eax + 0x50], 4
jne 0x586801
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x28]
push eax
lea eax, [ebp - 0x38c]
push eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov edx, dword [ebp - 0x64]
add eax, dword [edx + 0x18]
add eax, 4
mov edx, dword [ebp - 0x68]
mov ecx, dword [edx + 0x24]
mov edx, dword [ebp - 0x68]
mov edx, dword [edx + 0x20]
call fcn.00410ed8
jmp 0x586875
mov eax, dword [ebp - 4]
cmp byte [eax + 0x50], 3
jne 0x586830
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x28]
push eax
lea eax, [ebp - 0x38c]
push eax
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + 0x20]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x1c]
call fcn.00410ed8
jmp 0x586875
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0xc]
inc eax
mov edx, dword [ebp - 0x64]
add eax, dword [edx + 0x18]
push eax
lea eax, [ebp - 0x38c]
push eax
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x6c]
movzx eax, byte [eax + 0x24]
add ecx, eax
mov eax, dword [ebp - 0x64]
add ecx, dword [eax + 0x10]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x6c]
movzx edx, byte [edx + 0x24]
sub eax, edx
mov edx, dword [ebp - 0x64]
mov edx, dword [edx + 0xc]
dec edx
call fcn.00410ed8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x77], 0
jne 0x5868b5
push 0xf
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x74]
mov eax, dword [eax*4 + 0x80f16c]
mov edx, dword [ebp - 4]
movzx edx, byte [edx + 0x75]
or eax, dword [edx*4 + 0x80f178]
push eax
lea eax, [ebp - 0x38c]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.USER32.DLL_DrawEdge
jmp 0x58694f
mov eax, dword [ebp - 4]
test byte [eax + 0x52], 0x10
je 0x58690a
mov eax, dword [ebp - 4]
test byte [eax + 0x52], 0x40
je 0x58690a
cmp dword [ebp - 0x44], 0
je 0x58690a
push 0x80000010
push 0x80000014
push 0x12
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x74]
mov eax, dword [eax*4 + 0x80f16c]
push eax
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x75]
mov eax, dword [eax*4 + 0x80f178]
push eax
mov ecx, dword [ebp - 0x44]
lea edx, [ebp - 0x38c]
mov eax, dword [ebp - 0x58]
call fcn.00584a14
jmp 0x58694f
push 0x80000010
push 0x80000014
push 0x12
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x74]
mov eax, dword [eax*4 + 0x80f16c]
push eax
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x75]
mov eax, dword [eax*4 + 0x80f178]
push eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
call fcn.0041ac4c
mov ecx, eax
lea edx, [ebp - 0x38c]
mov eax, dword [ebp - 0x58]
call fcn.00584a14
mov eax, dword [ebp - 0xc]
mov edx, 0x587318
call fcn.00404200
jne 0x586b88
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x10]
mov edx, 0x808080
call fcn.0041a958
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0x1c]
sar eax, 1
jns 0x586985
adc eax, 0
add ecx, eax
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + 0x1c]
add edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x58]
call fcn.0041b458
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0x1c]
sar eax, 1
jns 0x5869ab
adc eax, 0
add ecx, eax
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + 0x24]
mov eax, dword [ebp - 0x58]
call fcn.0041b3f8
push 0x14
call sub.USER32.DLL_GetSysColor
mov edx, eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x10]
call fcn.0041a958
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0x1c]
sar eax, 1
jns 0x5869e2
adc eax, 0
add ecx, eax
inc ecx
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + 0x1c]
add edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x58]
call fcn.0041b458
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0x1c]
sar eax, 1
jns 0x586a09
adc eax, 0
add ecx, eax
inc ecx
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + 0x24]
mov eax, dword [ebp - 0x58]
call fcn.0041b3f8
mov eax, dword [ebp - 4]
cmp dword [eax + 0x78], 0
je 0x586d28
push 0x587364
push 0x22
push 2
push 0
push 4
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0xa
push 0xa
call sub.GDI32.DLL_CreateFontA
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x58]
call fcn.0041b8cc
push eax
call sub.GDI32.DLL_SelectObject
mov dword [ebp - 0x14], eax
xor eax, eax
push ebp
push 0x586b81
push dword fs:[eax]
mov dword fs:[eax], esp
push 2
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_SetBkMode
mov eax, dword [ebp - 4]
cmp dword [eax + 0x40], 0x80000004
jne 0x586aa4
push 4
call sub.USER32.DLL_GetSysColor
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_SetBkColor
jmp 0x586ab7
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_SetBkColor
mov eax, dword [ebp - 4]
test byte [eax + 0x51], 1
jne 0x586ae0
mov eax, dword [ebp - 4]
test byte [eax + 0x51], 2
jne 0x586ae0
mov eax, dword [0x949fc4]
mov eax, dword [eax + 0x14]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_SetTextColor
jmp 0x586af4
push 7
call sub.USER32.DLL_GetSysColor
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_SetTextColor
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0xc]
add eax, 8
push eax
lea eax, [ebp - 0x38c]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x78]
mov eax, dword [ebp - 0x58]
call fcn.0041b708
mov ecx, eax
mov eax, dword [ebp - 0x64]
add ecx, dword [eax + 8]
mov eax, dword [ebp - 0x64]
mov edx, dword [eax + 0xc]
dec edx
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 8]
call fcn.00410ed8
push pe_nt_image_headers32
lea eax, [ebp - 0x38c]
push eax
lea eax, [ebp - 0x16c]
call fcn.00409fa4
push eax
lea eax, [ebp - 0x16c]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.USER32.DLL_DrawTextA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x586d28
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x58]
call fcn.0041b8cc
push eax
call sub.GDI32.DLL_SelectObject
mov eax, dword [ebp - 0x18]
push eax
call sub.GDI32.DLL_DeleteObject
ret
push 1
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_SetBkMode
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x64]
add eax, dword [edx + 0x18]
push eax
lea eax, [ebp - 0x38c]
push eax
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x64]
add ecx, dword [eax + 0x10]
mov eax, dword [ebp - 0x64]
mov edx, dword [eax + 0xc]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 8]
call fcn.00410ed8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
cmp byte [eax + 0x2d], 0
je 0x586c09
lea eax, [ebp - 0x38c]
push eax
push pe_nt_image_headers32
mov eax, dword [ebp - 0x68]
test byte [eax + 0x10], 1
setne al
push eax
lea ecx, [ebp - 0x26c]
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
call fcn.00584d04
jmp 0x586c89
push 0x11
call sub.USER32.DLL_GetSysColor
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.GDI32.DLL_SetTextColor
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x68]
test byte [eax + 0x10], 1
je 0x586c32
mov eax, dword [ebp - 4]
test byte [eax + 0x52], 8
je 0x586c3b
mov dword [ebp - 0x3c], 0x20
jmp 0x586c57
push 4
call sub.USER32.DLL_GetSysColor
cmp eax, 0xc0c0c0
je 0x586c52
mov dword [ebp - 0x3c], 0x10
jmp 0x586c57
xor eax, eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
or eax, 2
push eax
push 0
push 0
mov eax, dword [ebp - 0x388]
push eax
mov eax, dword [ebp - 0x38c]
push eax
push 0
lea eax, [ebp - 0x26c]
push eax
push 0
push 0
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.USER32.DLL_DrawStateA
cmp dword [ebp + 8], 0
je 0x586d28
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x24]
mov edx, dword [ebp - 0x64]
sub eax, dword [edx + 0x24]
mov edx, dword [ebp - 0x64]
sub eax, dword [edx + 0x28]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
cmp byte [eax + 0x2d], 0
je 0x586cf6
lea eax, [ebp - 0x38c]
push eax
push pe_nt_image_headers32
mov eax, dword [ebp - 0x68]
test byte [eax + 0x10], 1
setne al
push eax
lea ecx, [ebp - 0x36c]
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
call fcn.00584d04
jmp 0x586d28
mov eax, dword [ebp - 0x3c]
or eax, 2
push eax
push 0
push 0
mov eax, dword [ebp - 0x388]
push eax
mov eax, dword [ebp - 0x38c]
push eax
push 0
lea eax, [ebp - 0x36c]
push eax
push 0
push 0
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.USER32.DLL_DrawStateA
mov eax, dword [ebp - 4]
cmp dword [eax + 0x58], 0
je 0x586dd8
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x48]
mov edx, dword [eax]
call dword [edx + 0x1c]
test al, al
jne 0x586dd8
mov eax, dword [ebp - 4]
test byte [eax + 0x51], 0x10
je 0x586dd8
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x68]
add eax, dword [edx + 0x28]
add eax, 0xa
push eax
lea eax, [ebp - 0x38c]
push eax
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + 0x1c]
add ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + 0x20]
sub edx, 0xa
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x1c]
call fcn.00410ed8
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
call fcn.0041ac4c
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
call fcn.0041ac54
lea eax, [ebp - 0x38c]
push eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x48]
call fcn.004202f0
mov ecx, eax
lea edx, [ebp - 0x38c]
mov eax, dword [ebp - 0x58]
call fcn.0041b1d0
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x54]
call fcn.0041ac54
mov eax, dword [ebp - 4]
test byte [eax + 0x52], 4
je 0x586df5
push 4
call sub.USER32.DLL_GetSysColor
mov edx, eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
call fcn.0041ac54
mov eax, dword [ebp - 0x6c]
test byte [eax + 0x20], 0x10
je 0x5870bb
mov dl, 1
mov eax, dword [0x419310]
call fcn.0041d718
mov dword [ebp - 0x60], eax
xor eax, eax
push ebp
push 0x5870b4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
cmp byte [eax + 0x2d], 0
je 0x586ea1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x60]
call fcn.0041d85c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
cmp byte [eax + 0x2c], 0
je 0x586f68
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x24]
mov edx, 0x587318
call fcn.00404200
je 0x586f68
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
cmp byte [eax + 0x2f], 0
jne 0x586e92
push 0x587370
mov eax, dword [0x841528]
mov eax, dword [eax]
push eax
call sub.USER32.DLL_LoadBitmapA
push eax
mov eax, dword [ebp - 0x60]
call fcn.0041d814
pop edx
call fcn.00420ee0
mov eax, dword [ebp - 4]
mov dword [eax + 0x44], 0x80
jmp 0x586f68
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
cmp dword [eax + 4], 0
je 0x586f68
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x60]
call fcn.0041d85c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
cmp byte [eax + 0x2c], 0
je 0x586f05
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
cmp byte [eax + 0x2f], 0
jne 0x586efb
push 0x587370
mov eax, dword [0x841528]
mov eax, dword [eax]
push eax
call sub.USER32.DLL_LoadBitmapA
push eax
mov eax, dword [ebp - 0x60]
call fcn.0041d814
pop edx
call fcn.00420ee0
mov eax, dword [ebp - 4]
mov dword [eax + 0x44], 0x80
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 4]
mov edx, dword [0x4194e8]
call fcn.004033ac
test al, al
je 0x586f30
mov ecx, 0x587384
mov dl, 1
mov eax, dword [0x408390]
call fcn.0040d0bc
call fcn.004038cc
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x68]
test byte [eax + 0x10], 1
je 0x586f5d
mov eax, dword [ebp - 4]
test byte [eax + 0x52], 8
jne 0x586f5d
mov eax, dword [ebp - 4]
test byte [eax + 0x52], 4
jne 0x586f5d
mov dword [ebp - 0x40], 0x808080
jmp 0x586f68
mov dword [ebp - 0x40], 0x80000010
and dword [ebp - 0x34], 0xfffffffe
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 4]
mov edx, dword [0x419734]
call fcn.004033ac
test al, al
je 0x586fc0
push 3
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x14]
call fcn.0041ac88
push eax
push 0
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0x18]
push eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0x18]
push eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 4]
call fcn.00421944
push eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 4]
push eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x18]
push eax
call sub.USER32.DLL_DrawIconEx
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 4]
mov edx, dword [0x41960c]
call fcn.004033ac
test al, al
jne 0x586fee
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 4]
mov edx, dword [0x4194e8]
call fcn.004033ac
test al, al
je 0x58709e
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x64]
add eax, dword [edx + 0x18]
push eax
lea eax, [ebp - 0x38c]
push eax
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x64]
add ecx, dword [eax + 0x18]
mov eax, dword [ebp - 0x64]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
call fcn.00410ed8
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 4]
mov edx, dword [0x41960c]
call fcn.004033ac
test al, al
je 0x587060
mov eax, dword [ebp - 4]
cmp dword [eax + 0x44], 0x1fffffff
je 0x587060
mov eax, dword [ebp - 0x60]
call fcn.0041d814
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x44]
call fcn.004213d0
mov eax, dword [ebp - 0x60]
call fcn.0041d814
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 4]
push eax
mov ecx, dword [ebp - 0x388]
mov edx, dword [ebp - 0x38c]
mov eax, dword [ebp - 0x58]
call fcn.0041b258
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 4]
mov edx, dword [0x4194e8]
call fcn.004033ac
test al, al
je 0x58709e
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 4]
mov edx, dword [eax]
call dword [edx + 0x44]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x587274
mov eax, dword [ebp - 0x60]
call fcn.004032dc
ret
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x24]
mov edx, 0x587318
call fcn.00404200
jne 0x5870da
call fcn.0040396c
jmp 0x5872e0
mov eax, dword [ebp - 4]
cmp dword [eax + 0x28], 0xffffffff
jne 0x5870ed
call fcn.0040396c
jmp 0x5872e0
mov dl, 1
mov eax, dword [0x419310]
call fcn.0041d718
mov dword [ebp - 0x60], eax
xor eax, eax
push ebp
push 0x58726d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x60]
call fcn.0041d814
mov ecx, eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x28]
mov eax, dword [0x949fc8]
call fcn.0043aabc
mov eax, dword [ebp - 0x60]
call fcn.0041d814
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x5c]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [ebp - 0x60]
call fcn.0041d814
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64]
cmp byte [eax + 0x2c], 0
je 0x5871ac
push 0x587370
mov eax, dword [0x841528]
mov eax, dword [eax]
push eax
call sub.USER32.DLL_LoadBitmapA
push eax
mov eax, dword [ebp - 0x60]
call fcn.0041d814
pop edx
call fcn.00420ee0
mov eax, dword [ebp - 4]
mov dword [eax + 0x44], 0x80
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 4]
add eax, 0x10
push eax
lea eax, [ebp - 0x38c]
push eax
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
add ecx, 0x10
mov eax, dword [ebp - 0x64]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
call fcn.00410ed8
jmp 0x5871db
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x64]
add eax, dword [edx + 0x18]
push eax
lea eax, [ebp - 0x38c]
push eax
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
mov eax, dword [ebp - 4]
add ecx, dword [eax + 0x5c]
mov eax, dword [ebp - 0x64]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
call fcn.00410ed8
mov eax, dword [ebp - 0x60]
call fcn.0041d814
push eax
mov ecx, dword [ebp - 0x388]
mov edx, dword [ebp - 0x38c]
mov eax, dword [ebp - 0x58]
call fcn.0041b258
mov eax, dword [ebp - 4]
cmp dword [eax + 0x44], 0x1fffffff
je 0x587257
mov eax, dword [ebp - 0x60]
call fcn.0041d814
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
lea eax, [ebp - 0x37c]
push eax
mov eax, dword [ebp - 0x60]
call fcn.0041d814
mov edx, dword [eax]
call dword [edx + 0x2c]
mov ecx, eax
xor edx, edx
xor eax, eax
call fcn.00410ed8
lea eax, [ebp - 0x37c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
push eax
mov eax, dword [ebp - 0x60]
call fcn.0041d814
mov ecx, eax
lea edx, [ebp - 0x38c]
mov eax, dword [ebp - 0x58]
call fcn.0041af10
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x587274
mov eax, dword [ebp - 0x60]
call fcn.004032dc
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x587305
lea eax, [ebp - 0xc]
call fcn.00403e74
lea eax, [ebp + 8]
call fcn.00403e74
ret