Function at 0x417c40
Capabilities:
Hide graphical window
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x436584
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x178
push ebx
push ebp
push esi
mov esi, ecx
mov ecx, dword [esp + 0x1a8]
mov eax, 1
test ecx, ecx
push edi
mov dword [esp + 0x10], eax
jne 0x418d1e
mov ecx, dword [esp + 0x19c]
mov ebx, dword [esp + 0x1a8]
mov edi, dword [esp + 0x1a4]
mov ebp, dword [esp + 0x1a0]
cmp ecx, 0x110
jne 0x417cbf
mov dword [esp + 0x10], eax
lea eax, [esp + 0x10]
push eax
push edi
push ebp
push 0x110
mov ecx, esi
call fcn.00418d80
mov dword [ebx], eax
mov eax, dword [esp + 0x10]
jmp 0x4182a9
cmp ecx, 0x18
jne 0x417cd9
push edi
push ebp
mov ecx, esi
mov dword [esi + 0x64], 1
call fcn.0041d1d0
jmp 0x4182a0
cmp ecx, 5
jne 0x417cff
mov ecx, edi
mov dword [esi + 0x64], 1
shr ecx, 0x10
movsx ecx, cx
movsx eax, di
push ecx
push eax
push ebp
mov ecx, esi
call fcn.0041d1e0
jmp 0x4182a0
cmp ecx, 0x111
jne 0x417d3d
cmp bp, 0x3e8
jne 0x417f91
lea edx, [esp + 0x10]
mov eax, ebp
push edx
push edi
shr eax, 0x10
push 0x3e8
push eax
mov ecx, esi
mov dword [esp + 0x20], 1
call fcn.0041a600
mov dword [ebx], eax
mov eax, dword [esp + 0x10]
jmp 0x4182a9
cmp ecx, 0x4c8
jne 0x417d6b
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 1
push ecx
push edi
push ebp
push 0x4c8
mov ecx, esi
call fcn.0041d350
mov dword [ebx], eax
mov eax, dword [esp + 0x10]
jmp 0x4182a9
cmp ecx, 0x7ea
jne 0x417d95
lea edx, [esp + 0x10]
mov dword [esp + 0x10], 1
push edx
push edi
push ebp
push ecx
mov ecx, esi
call fcn.0041d650
mov dword [ebx], eax
mov eax, dword [esp + 0x10]
jmp 0x4182a9
cmp ecx, 0x7ec
jne 0x417dbf
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 1
push eax
push edi
push ebp
push ecx
mov ecx, esi
call fcn.0041da00
mov dword [ebx], eax
mov eax, dword [esp + 0x10]
jmp 0x4182a9
cmp ecx, 0x7ed
jne 0x417ded
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 1
push ecx
push edi
push ebp
push 0x7ed
mov ecx, esi
call fcn.0041da60
mov dword [ebx], eax
mov eax, dword [esp + 0x10]
jmp 0x4182a9
cmp ecx, 2
jne 0x417e05
mov ecx, esi
mov dword [esi + 0x64], 1
call fcn.0041a620
jmp 0x4182a0
cmp ecx, 0x113
jne 0x417e21
push ebp
mov ecx, esi
mov dword [esi + 0x64], 1
call fcn.0041ab60
jmp 0x4182a0
cmp ecx, 0x2c
jne 0x417e41
push edi
push ebp
mov ecx, esi
mov dword [esi + 0x64], 1
call fcn.0041abc0
mov dword [ebx], 1
jmp 0x4182a6
cmp ecx, 0x2b
jne 0x417e61
push edi
push ebp
mov ecx, esi
mov dword [esi + 0x64], 1
call fcn.0041abe0
mov dword [ebx], 1
jmp 0x4182a6
cmp ecx, 0x4e
jne 0x4181eb
cmp dword [edi + 8], 0xffffff9b
jne 0x417e9c
cmp dword [edi + 4], 0x3e9
jne 0x417e9c
push edi
mov ecx, esi
mov dword [esi + 0x64], 1
call fcn.0041ac00
mov dword [ebx], eax
mov eax, dword [esi + 0x64]
test eax, eax
jne 0x4182ad
mov ecx, dword [esp + 0x19c]
cmp dword [edi + 8], 0xffffff9c
jne 0x417ece
cmp dword [edi + 4], 0x3e9
jne 0x417ece
push edi
mov ecx, esi
mov dword [esi + 0x64], 1
call fcn.0041cb70
mov dword [ebx], eax
mov eax, dword [esi + 0x64]
test eax, eax
jne 0x4182ad
mov ecx, dword [esp + 0x19c]
cmp dword [edi + 8], 0xfffffffb
jne 0x417f00
cmp dword [edi + 4], 0x3e9
jne 0x417f00
push edi
mov ecx, esi
mov dword [esi + 0x64], 1
call fcn.0041ac90
mov dword [ebx], eax
mov eax, dword [esi + 0x64]
test eax, eax
jne 0x4182ad
mov ecx, dword [esp + 0x19c]
cmp dword [edi + 8], 0xfffffffe
jne 0x417f32
cmp dword [edi + 4], 0x3e9
jne 0x417f32
push edi
mov ecx, esi
mov dword [esi + 0x64], 1
call fcn.0041ac40
mov dword [ebx], eax
mov eax, dword [esi + 0x64]
test eax, eax
jne 0x4182ad
mov ecx, dword [esp + 0x19c]
cmp dword [edi + 8], 0xffffff94
jne 0x417f64
cmp dword [edi + 4], 0x3e9
jne 0x417f64
push edi
mov ecx, esi
mov dword [esi + 0x64], 1
call fcn.0041baa0
mov dword [ebx], eax
mov eax, dword [esi + 0x64]
test eax, eax
jne 0x4182ad
mov ecx, dword [esp + 0x19c]
cmp dword [edi + 8], 0xfffffffd
jne 0x4182be
cmp dword [edi + 4], 0x3e9
jne 0x4182be
push edi
mov ecx, esi
mov dword [esi + 0x64], 1
call fcn.0041c1f0
mov dword [ebx], eax
jmp 0x4182a6
cmp bp, 0x3ea
jne 0x417fbf
push ecx
mov edx, ebp
mov dword [esp + 0x18], esp
mov eax, esp
shr edx, 0x10
push 0x3ea
mov dword [esi + 0x64], 1
push edx
mov ecx, esi
mov dword [eax], edi
call fcn.0041ae20
jmp 0x4182a0
cmp bp, 0x405
jne 0x417fed
push ecx
mov dword [esi + 0x64], 1
mov eax, esp
mov dword [esp + 0x18], esp
push 0x405
mov ecx, esi
mov dword [eax], edi
mov eax, ebp
shr eax, 0x10
push eax
call fcn.0041cb80
jmp 0x4182a0
cmp bp, 0x3eb
jne 0x41801b
push ecx
mov ecx, ebp
mov dword [esp + 0x18], esp
mov eax, esp
shr ecx, 0x10
push 0x3eb
push ecx
mov dword [esi + 0x64], 1
mov ecx, esi
mov dword [eax], edi
call fcn.0041bda0
jmp 0x4182a0
cmp bp, 0x3ec
jne 0x418049
push ecx
mov edx, ebp
mov dword [esp + 0x18], esp
mov eax, esp
shr edx, 0x10
push 0x3ec
mov dword [esi + 0x64], 1
push edx
mov ecx, esi
mov dword [eax], edi
call fcn.0041c000
jmp 0x4182a0
cmp bp, 0x406
jne 0x418077
push ecx
mov dword [esi + 0x64], 1
mov eax, esp
mov dword [esp + 0x18], esp
push 0x406
mov ecx, esi
mov dword [eax], edi
mov eax, ebp
shr eax, 0x10
push eax
call fcn.0041cbe0
jmp 0x4182a0
cmp bp, 0x8006
jne 0x4180a5
push ecx
mov ecx, ebp
mov dword [esp + 0x18], esp
mov eax, esp
shr ecx, 0x10
push 0x8006
push ecx
mov dword [esi + 0x64], 1
mov ecx, esi
mov dword [eax], edi
call fcn.0041beb0
jmp 0x4182a0
cmp bp, 0x8005
jne 0x4180d3
push ecx
mov edx, ebp
mov dword [esp + 0x18], esp
mov eax, esp
shr edx, 0x10
push 0x8005
mov dword [esi + 0x64], 1
push edx
mov ecx, esi
mov dword [eax], edi
call fcn.0041bf30
jmp 0x4182a0
cmp bp, 0x8004
jne 0x418101
push ecx
mov dword [esi + 0x64], 1
mov eax, esp
mov dword [esp + 0x18], esp
push 0x8004
mov ecx, esi
mov dword [eax], edi
mov eax, ebp
shr eax, 0x10
push eax
call fcn.0041c000
jmp 0x4182a0
cmp bp, 0x8007
jne 0x41812f
push ecx
mov ecx, ebp
mov dword [esp + 0x18], esp
mov eax, esp
shr ecx, 0x10
push 0x8007
push ecx
mov dword [esi + 0x64], 1
mov ecx, esi
mov dword [eax], edi
call fcn.0041cbf0
jmp 0x4182a0
cmp bp, 0x8008
jne 0x41815d
push ecx
mov edx, ebp
mov dword [esp + 0x18], esp
mov eax, esp
shr edx, 0x10
push 0x8008
mov dword [esi + 0x64], 1
push edx
mov ecx, esi
mov dword [eax], edi
call fcn.0041cd00
jmp 0x4182a0
cmp bp, 0x407
jne 0x41818b
push ecx
mov dword [esi + 0x64], 1
mov eax, esp
mov dword [esp + 0x18], esp
push 0x407
mov ecx, esi
mov dword [eax], edi
mov eax, ebp
shr eax, 0x10
push eax
call fcn.0041d0e0
jmp 0x4182a0
cmp bp, 0x408
jne 0x4181b9
push ecx
mov ecx, ebp
mov dword [esp + 0x18], esp
mov eax, esp
shr ecx, 0x10
push 0x408
push ecx
mov dword [esi + 0x64], 1
mov ecx, esi
mov dword [eax], edi
call fcn.0041d0f0
jmp 0x4182a0
cmp bp, 0x409
jne 0x4182be
push ecx
mov edx, ebp
mov dword [esp + 0x18], esp
mov eax, esp
shr edx, 0x10
push 0x409
mov dword [esi + 0x64], 1
push edx
mov ecx, esi
mov dword [eax], edi
call fcn.0041d160
jmp 0x4182a0
cmp ecx, 0x85
jne 0x41820f
push ecx
mov dword [esi + 0x64], 1
mov eax, esp
mov ecx, esi
mov dword [esp + 0x18], esp
mov dword [eax], ebp
call fcn.00418d40
jmp 0x4182a0
cmp ecx, 0x81
jne 0x418222
mov dword [esi + 0x64], eax
mov dword [ebx], 0
jmp 0x41824a
cmp ecx, 0x83
jne 0x418235
mov dword [esi + 0x64], eax
mov dword [ebx], 0
jmp 0x41824a
cmp ecx, 0x84
je 0x418245
cmp ecx, 0x86
jne 0x418256
mov dword [esi + 0x64], eax
mov dword [ebx], eax
mov edx, dword [esi + 0x64]
test edx, edx
je 0x4182be
jmp 0x418d20
cmp ecx, 0x112
jne 0x41827c
mov ecx, edi
mov dword [esi + 0x64], 1
shr ecx, 0x10
movsx ecx, cx
movsx eax, di
push ecx
push eax
push ebp
mov ecx, esi
call fcn.0041d830
jmp 0x4182a0
cmp ecx, 0x203
jne 0x4182be
mov edx, edi
mov dword [esi + 0x64], 1
shr edx, 0x10
movsx ecx, dx
movsx eax, di
push ecx
push eax
push ebp
mov ecx, esi
call fcn.0041d8c0
mov dword [ebx], 0
mov eax, dword [esi + 0x64]
test eax, eax
je 0x4182b7
mov eax, 1
jmp 0x418d20
mov ecx, dword [esp + 0x19c]
cmp ecx, 5
lea eax, [esi + 0x44]
jne 0x418561
test eax, eax
je 0x4182d3
lea esi, [eax - 0x44]
jmp 0x4182d5
xor esi, esi
mov cl, byte [eax + 0x1c]
test cl, cl
je 0x41830a
mov eax, dword [esi + 4]
push 0xe801
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp ebp, 2
jne 0x4182fb
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x418313
test ebp, ebp
jne 0x41830a
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x418313
cmp ebp, 1
je 0x41857e
mov ecx, edi
xor ebp, ebp
shr ecx, 0x10
movsx edx, cx
movsx eax, di
add esi, 0x44
mov dword [esp + 0x28], edx
cmp esi, ebp
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], esi
je 0x418338
lea edi, [esi - 0x44]
jmp 0x41833a
xor edi, edi
mov ecx, dword [edi + 4]
push 0xfffffffffffffff0
push ecx
mov dword [esp + 0x20], edi
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, 0x40000000
je 0x418375
mov eax, dword [esi + 0x14]
cmp eax, 0xffffffff
je 0x418375
mov ecx, dword [esi + 0x18]
cmp ecx, 0xffffffff
je 0x418375
cmp dword [esp + 0x20], eax
jge 0x41836b
mov dword [esp + 0x20], eax
cmp dword [esp + 0x28], ecx
jge 0x418375
mov dword [esp + 0x28], ecx
mov edx, dword [edi + 4]
push edx
call dword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, ebp
mov dword [esp + 0x14], eax
je 0x418395
mov eax, dword [edi + 4]
push ebp
push ebp
push 0xb
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [esi + 4]
mov dword [esp + 0x24], ebp
cmp eax, ebp
jle 0x418523
jmp 0x4183a8
xor ebp, ebp
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
lea esi, [esi + esi*2]
shl esi, 3
mov dword [esp + 0xc4], esi
mov eax, dword [esi + edx + 4]
lea ecx, [esi + edx]
test ah, 0x10
je 0x4184ce
shr eax, 0x10
and eax, 0xff
mov edx, eax
lea eax, [ecx + 8]
cmp edx, 1
mov dword [esp + 0x70], edx
mov edi, dword [eax]
mov dword [esp + 0x94], edi
mov edi, dword [eax + 4]
mov dword [esp + 0x98], edi
mov ebp, dword [eax + 8]
mov dword [esp + 0x9c], ebp
mov edi, dword [eax + 0xc]
mov dword [esp + 0xa0], edi
jle 0x418474
lea eax, [ecx + 0x24]
lea ecx, [edx - 1]
mov dword [esp + 0x6c], ecx
mov ecx, dword [eax - 4]
mov esi, dword [esp + 0x94]
cmp esi, ecx
jl 0x41842b
mov dword [esp + 0x94], ecx
mov ecx, dword [eax]
mov esi, dword [esp + 0x98]
cmp esi, ecx
jl 0x41843f
mov dword [esp + 0x98], ecx
mov ecx, dword [eax + 4]
cmp ebp, ecx
jg 0x41844f
mov ebp, ecx
mov dword [esp + 0x9c], ebp
mov ecx, dword [eax + 8]
cmp edi, ecx
jg 0x41845f
mov edi, ecx
mov dword [esp + 0xa0], edi
mov ecx, dword [esp + 0x6c]
add eax, 0x18
dec ecx
mov dword [esp + 0x6c], ecx
jne 0x418416
mov esi, dword [esp + 0xc4]
xor edi, edi
test edx, edx
jle 0x4184c4
mov edx, dword [esp + 0x18]
lea ebp, [edx + 0x44]
xor eax, eax
test edi, edi
jle 0x418491
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
lea eax, [ecx + esi - 0x18]
mov edx, dword [esp + 0x1c]
push eax
push 1
lea ecx, [esp + 0x9c]
mov eax, dword [edx]
mov edx, dword [esp + 0x30]
add eax, esi
push eax
mov eax, dword [esp + 0x2c]
push ecx
push edx
push eax
mov ecx, ebp
call fcn.0041ee10
mov eax, dword [esp + 0x70]
inc edi
add esi, 0x18
cmp edi, eax
jl 0x418481
mov edx, eax
mov ecx, dword [esp + 0x24]
lea edx, [ecx + edx - 1]
jmp 0x41850f
mov eax, dword [esp + 0x28]
push ebp
push ebp
lea edx, [esp + 0xd0]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x28]
push eax
push ecx
lea ecx, [edx + 0x44]
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], ebp
mov dword [esp + 0xe8], ebp
mov dword [esp + 0xec], ebp
call fcn.0041ee10
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
inc edx
mov dword [esp + 0x24], edx
cmp edx, dword [eax + 4]
jl 0x4183a6
xor ebp, ebp
cmp dword [esp + 0x14], ebp
je 0x41853c
mov ecx, dword [esp + 0x18]
push ebp
push 1
push 0xb
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [esp + 0x18]
push 0x185
push ebp
push ebp
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_RedrawWindow]
mov dword [ebx], 0
mov eax, 1
jmp 0x418d20
cmp ecx, 0x24
jne 0x41858e
cmp dword [eax + 0x14], 0xffffffff
je 0x41857e
cmp dword [eax + 0x18], 0xffffffff
je 0x41857e
mov edx, dword [eax + 0x14]
mov dword [edi + 0x18], edx
mov eax, dword [eax + 0x18]
mov dword [edi + 0x1c], eax
mov dword [ebx], 0
mov eax, 1
jmp 0x418d20
mov edx, dword [esi + 0x2c]
cmp ecx, 0x201
mov dword [esp + 0x14], edx
jne 0x4185d0
mov eax, edi
mov dword [esi + 0x2c], 1
shr eax, 0x10
movsx eax, ax
cmp eax, 0x18
jge 0x418669
mov ecx, dword [esi + 4]
push 0x10001
push 2
push 0xa1
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x418662
cmp ecx, 0x203
jne 0x418680
mov edx, edi
mov dword [esi + 0x2c], 1
shr edx, 0x10
movsx eax, dx
mov edx, dword [esi + 0x40]
test edx, edx
je 0x418669
cmp eax, 0x18
jge 0x418669
mov eax, dword [esi + 4]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
je 0x41860d
mov ecx, dword [esi + 4]
push 9
push ecx
jmp 0x41865c
mov edx, dword [esi + 4]
push edx
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x418662
mov eax, dword [esi + 4]
push 0xfffffffffffffff0
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, eax
or ecx, 0xc00000
cmp eax, ecx
je 0x418656
push ecx
mov ecx, dword [esi + 4]
push 0xfffffffffffffff0
push ecx
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov edx, dword [esi + 4]
push 0x37
push 0
push 0
push 0
push 0
push 0
push edx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [esi + 4]
push 3
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esp + 0x19c]
mov dword [ebx], 0
mov eax, dword [esi + 0x2c]
test eax, eax
je 0x418680
mov eax, 1
jmp 0x418d0c
cmp ecx, 0x14
lea eax, [esi + 0x1c]
jne 0x418698
mov dword [ebx], 1
mov eax, 1
jmp 0x418d0c
cmp ecx, 0xf
jne 0x418958
test eax, eax
je 0x4186aa
lea edi, [eax - 0x1c]
jmp 0x4186ac
xor edi, edi
test ebp, ebp
je 0x418822
mov eax, dword [edi + 4]
xor ecx, ecx
mov dword [esp + 0xb8], ecx
lea edx, [esp + 0xb4]
mov dword [esp + 0xbc], ecx
push edx
push eax
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc8], ecx
call dword [sym.imp.USER32.dll_GetClientRect]
xor eax, eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x190], eax
mov dword [esp + 0x50], ebp
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0xb8]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x54], ecx
mov ecx, dword [esp + 0xc0]
push ebp
mov byte [esp + 0x194], 1
mov dword [esp + 0x5c], edx
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], ecx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov ebp, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x54]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x60]
sub ecx, edx
mov edx, dword [esp + 0x50]
sub eax, ebp
push eax
push ecx
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov ebp, dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x64], eax
push eax
mov eax, dword [esp + 0x50]
push eax
call ebp
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x54]
neg ecx
push 0
push ecx
neg edx
push edx
lea ecx, [esp + 0x58]
mov dword [esp + 0x74], eax
call fcn.004091d0
mov eax, dword [esp + 0x4c]
mov ecx, edi
push eax
mov dword [esp + 0x194], 2
call fcn.0041f250
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x4c]
push 0xcc0020
push eax
push ecx
push edx
mov edx, dword [esp + 0x70]
sub edx, eax
mov dword [esp + 0x1a0], 3
push edx
mov edx, dword [esp + 0x70]
sub edx, ecx
push edx
push eax
mov eax, dword [esp + 0x6c]
push ecx
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x4c]
push ecx
push edx
call ebp
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4187fe
lea ecx, [esp + 0x64]
call fcn.004014a0
lea ecx, [esp + 0x4c]
mov dword [esp + 0x190], 0xffffffff
call fcn.004091b0
mov dword [ebx], 0
mov eax, 1
jmp 0x418d0c
mov eax, dword [edi + 4]
lea ecx, [esp + 0xe0]
xor ebp, ebp
push ecx
push eax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], eax
call dword [sym.imp.USER32.dll_BeginPaint]
mov dword [esp + 0xd8], eax
mov dword [esp + 0x190], 4
mov dword [esp + 0x74], ebp
mov dword [esp + 0x78], eax
mov dword [esp + 0x8c], ebp
mov edx, dword [esp + 0xe8]
mov ecx, dword [esp + 0xec]
mov dword [esp + 0x7c], edx
mov edx, dword [esp + 0xf0]
mov dword [esp + 0x80], ecx
mov ecx, dword [esp + 0xf4]
push eax
mov byte [esp + 0x194], 6
mov dword [esp + 0x94], ebp
mov dword [esp + 0x88], edx
mov dword [esp + 0x8c], ecx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edx, dword [esp + 0x88]
mov ecx, dword [esp + 0x80]
sub edx, ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x84]
push edx
mov edx, dword [esp + 0x80]
sub eax, edx
push eax
push ecx
lea ecx, [esp + 0x98]
call fcn.004091f0
mov edx, dword [esp + 0x8c]
mov eax, dword [esp + 0x74]
push edx
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x7c]
neg ecx
push ebp
push ecx
neg edx
push edx
lea ecx, [esp + 0x80]
mov dword [esp + 0x9c], eax
call fcn.004091d0
mov eax, dword [esp + 0x74]
mov ecx, edi
push eax
mov byte [esp + 0x194], 7
call fcn.0041f250
lea ecx, [esp + 0x74]
mov byte [esp + 0x190], 4
call fcn.00409270
mov edx, dword [esp + 0xdc]
lea ecx, [esp + 0xe0]
push ecx
jmp 0x418b6e
cmp ecx, 0x318
jne 0x418b85
test eax, eax
je 0x41896d
lea edi, [eax - 0x1c]
jmp 0x41896f
xor edi, edi
test ebp, ebp
je 0x418ae9
mov edx, dword [edi + 4]
xor eax, eax
mov dword [esp + 0xa8], eax
lea ecx, [esp + 0xa4]
mov dword [esp + 0xac], eax
push ecx
push edx
mov dword [esp + 0xac], 0
mov dword [esp + 0xb8], eax
call dword [sym.imp.USER32.dll_GetClientRect]
xor eax, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x190], 8
mov dword [esp + 0x30], ebp
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0xac]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0xb0]
push ebp
mov byte [esp + 0x194], 9
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov ecx, dword [esp + 0x38]
mov ebp, dword [esp + 0x34]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x40]
sub eax, ecx
mov ecx, dword [esp + 0x3c]
sub ecx, ebp
push eax
push ecx
mov ecx, dword [esp + 0x38]
push ecx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov edx, dword [esp + 0x2c]
mov ebp, dword [sym.imp.GDI32.dll_SelectObject]
push eax
push edx
mov dword [esp + 0x4c], eax
call ebp
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x38]
push 0
neg eax
neg ecx
push eax
push ecx
lea ecx, [esp + 0x38]
call fcn.004091d0
mov edx, dword [esp + 0x2c]
mov ecx, edi
push edx
mov dword [esp + 0x194], 0xa
call fcn.0041f250
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
push 0xcc0020
push eax
push ecx
push edx
mov edx, dword [esp + 0x50]
sub edx, eax
mov dword [esp + 0x1a0], 0xb
push edx
mov edx, dword [esp + 0x50]
sub edx, ecx
push edx
push eax
mov eax, dword [esp + 0x4c]
push ecx
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x2c]
push ecx
push edx
call ebp
mov eax, dword [esp + 0x44]
test eax, eax
je 0x418ac5
lea ecx, [esp + 0x44]
call fcn.004014a0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x190], 0xffffffff
call fcn.004091b0
mov dword [ebx], 0
mov eax, 1
jmp 0x418d0c
mov eax, dword [edi + 4]
lea ecx, [esp + 0x128]
push ecx
push eax
mov dword [esp + 0x128], 0
mov dword [esp + 0x12c], eax
call dword [sym.imp.USER32.dll_BeginPaint]
mov dword [esp + 0x120], eax
lea edx, [esp + 0x130]
lea ecx, [esp + 0x168]
push edx
push eax
mov dword [esp + 0x198], 0xc
call fcn.0041be10
mov eax, dword [esp + 0x168]
mov ecx, edi
push eax
mov byte [esp + 0x194], 0xd
call fcn.0041f250
lea ecx, [esp + 0x168]
mov byte [esp + 0x190], 0xc
call fcn.00409270
mov edx, dword [esp + 0x124]
lea ecx, [esp + 0x128]
push ecx
push edx
call dword [sym.imp.USER32.dll_EndPaint]
mov dword [ebx], 0
mov eax, 1
jmp 0x418d0c
mov dl, byte [eax + 0xd]
test dl, 1
je 0x418bce
cmp ecx, 0x136
jne 0x418bce
test eax, eax
je 0x418bb4
push edi
push ebp
lea ecx, [eax - 0x1c]
push 0x136
call fcn.0041c3f0
mov dword [ebx], eax
mov eax, 1
jmp 0x418d0c
push edi
push ebp
xor ecx, ecx
push 0x136
call fcn.0041c3f0
mov dword [ebx], eax
mov eax, 1
jmp 0x418d0c
test dl, 2
je 0x418c14
cmp ecx, 0x138
jne 0x418c14
test eax, eax
je 0x418bfa
push edi
push ebp
lea ecx, [eax - 0x1c]
push 0x138
call fcn.0041c3f0
mov dword [ebx], eax
mov eax, 1
jmp 0x418d0c
push edi
push ebp
xor ecx, ecx
push 0x138
call fcn.0041c3f0
mov dword [ebx], eax
mov eax, 1
jmp 0x418d0c
test dl, 4
je 0x418c5a
cmp ecx, 0x133
jne 0x418c5a
test eax, eax
je 0x418c40
push edi
push ebp
lea ecx, [eax - 0x1c]
push 0x133
call fcn.0041c3f0
mov dword [ebx], eax
mov eax, 1
jmp 0x418d0c
push edi
push ebp
xor ecx, ecx
push 0x133
call fcn.0041c3f0
mov dword [ebx], eax
mov eax, 1
jmp 0x418d0c
test dl, 8
je 0x418c9d
cmp ecx, 0x135
jne 0x418c9d
test eax, eax
je 0x418c86
push edi
push ebp
lea ecx, [eax - 0x1c]
push 0x135
call fcn.0041c3f0
mov dword [ebx], eax
mov eax, 1
jmp 0x418d0c
push edi
push ebp
xor ecx, ecx
push 0x135
call fcn.0041c3f0
mov dword [ebx], eax
mov eax, 1
jmp 0x418d0c
test dl, 0x10
je 0x418cdd
cmp ecx, 0x134
jne 0x418cdd
test eax, eax
je 0x418cc6
push edi
push ebp
lea ecx, [eax - 0x1c]
push 0x134
call fcn.0041c3f0
mov dword [ebx], eax
mov eax, 1
jmp 0x418d0c
push edi
push ebp
xor ecx, ecx
push 0x134
call fcn.0041c3f0
mov dword [ebx], eax
mov eax, 1
jmp 0x418d0c
test dl, 0x20
je 0x418d0a
cmp ecx, 0x137
jne 0x418d0a
test eax, eax
je 0x418cf3
lea ecx, [eax - 0x1c]
jmp 0x418cf5
xor ecx, ecx
push edi
push ebp
push 0x137
call fcn.0041c3f0
mov dword [ebx], eax
mov eax, 1
jmp 0x418d0c
xor eax, eax
mov ecx, dword [esp + 0x14]
test eax, eax
mov dword [esi + 0x2c], ecx
je 0x418d1e
mov eax, 1
jmp 0x418d20
xor eax, eax
mov ecx, dword [esp + 0x188]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x184
ret 0x18