Function at 0x410500
Capabilities:
Extract resource via kernel32 functions
Get common file path
Get keyboard layout
Link many functions at runtime
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xbc
call fcn.004d3c50
mov eax, dword [esp + 0xd0]
mov dword [0x522640], 0
mov dword [0x522654], 0
mov byte [0x522684], 0
mov dword [0x522630], 0
mov byte [0x522634], 0
mov dword [0x522644], eax
mov eax, dword [esp + 0xd4]
mov byte [0x52263c], 0
mov byte [0x52264c], 0
mov byte [0x522668], 0
mov dword [0x522638], 0
mov dword [0x5130f0], eax
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [0x513058], 0
mov dword [0x513054], 0
mov dword [0x513050], 0
mov dword [esp], 0
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call esi
sub esp, 4
mov ebx, dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [esp + 8], 8
mov dword [esp + 4], 0x168
mov dword [esp], eax
call ebx
sub esp, 0xc
test eax, eax
jne 0x411d94
mov eax, dword [0x4df010]
mov dword [esp + 4], str.__Loading_MobaFont:_ERROR_during_FindResource
mov dword [esp], 0x4df010
call dword [eax]
mov dword [esp], 0
call esi
sub esp, 4
mov dword [esp + 8], 8
mov dword [esp + 4], 0x166
mov dword [esp], eax
call ebx
sub esp, 0xc
test eax, eax
mov edi, eax
je 0x41063e
mov dword [esp + 4], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
sub esp, 8
test eax, eax
mov ebp, eax
jne 0x411cf0
mov dword [esp], 0
call esi
sub esp, 4
mov dword [esp + 8], 8
mov dword [esp + 4], 0x167
mov dword [esp], eax
call ebx
sub esp, 0xc
test eax, eax
mov ebx, eax
je 0x410686
mov dword [esp + 4], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
sub esp, 8
test eax, eax
mov esi, eax
jne 0x411d42
call fcn.004888a0
call fcn.0042eb30
call fcn.0042dc70
call fcn.004d5db0
mov eax, dword [0x522704]
cmp eax, 3
jbe 0x41081d
cmp eax, 4
je 0x410810
mov dword [esp], str.user32.dll
call fcn.004d4420
mov dword [esp], str.shcore.dll
mov ebx, eax
call fcn.004d4420
test ebx, ebx
mov edi, eax
je 0x410840
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 4], str.FlashWindowEx
mov dword [esp], ebx
call esi
sub esp, 8
mov dword [0x5130e8], eax
mov dword [esp + 4], str.ToUnicodeEx
mov dword [esp], ebx
call esi
sub esp, 8
mov dword [0x5130e4], eax
mov dword [esp + 4], str.GetMonitorInfoA
mov dword [esp], ebx
call esi
sub esp, 8
mov dword [0x513168], eax
mov dword [esp + 4], str.MonitorFromPoint
mov dword [esp], ebx
call esi
sub esp, 8
mov dword [0x513164], eax
mov dword [esp + 4], str.MonitorFromWindow
mov dword [esp], ebx
call esi
sub esp, 8
test edi, edi
mov dword [0x513160], eax
je 0x412b35
mov dword [esp + 4], str.GetDpiForMonitor
mov dword [esp], edi
call esi
sub esp, 8
mov dword [0x51315c], eax
mov dword [esp + 4], str.GetSystemMetricsForDpi
mov dword [esp], ebx
call esi
sub esp, 8
mov dword [0x513158], eax
mov dword [esp + 4], str.AdjustWindowRectExForDpi
mov dword [esp], ebx
call esi
sub esp, 8
mov dword [0x513154], eax
call fcn.004cab30
mov dword [0x522678], eax
call fcn.004135c0
mov dword [esp], 0
call dword [sym.imp.ole32.dll_CoInitialize]
sub esp, 4
cmp eax, 1
mov ebx, dword [0x4e49ac]
jbe 0x410895
mov dword [esp + 4], ebx
mov dword [esp], 0x4e015b
call fcn.004cc080
mov dword [esp + 0xc], 0x51030
mov ebx, eax
mov dword [esp + 8], eax
mov dword [esp + 4], str.Failed_to_initialize_COM_subsystem
mov dword [esp], 0
call dword [sym.imp.USER32.dll_MessageBoxA]
sub esp, 0x10
mov dword [esp], ebx
call fcn.004cd6d0
add esp, 0xbc
mov eax, 1
pop ebx
pop esi
pop edi
pop ebp
ret 0x10
cmp dword [0x52270c], 2
je 0x4106b1
mov dword [esp], str.MSWHEEL_ROLLMSG
call dword [sym.imp.USER32.dll_RegisterWindowMessageA]
sub esp, 4
mov dword [0x4df018], eax
jmp 0x4106b1
test eax, eax
mov dword [0x5130e8], 0
mov dword [0x5130e4], 0
mov dword [0x513168], 0
mov dword [0x513164], 0
mov dword [0x513160], 0
jne 0x412b18
mov dword [0x51315c], 0
mov dword [0x513158], 0
xor eax, eax
jmp 0x410786
mov eax, dword [esp + 0xd8]
mov dword [esp + 4], eax
mov eax, dword [0x522678]
mov dword [esp], eax
call fcn.00412d40
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov dword [esp], 0xe10
call fcn.004cd640
mov esi, eax
mov eax, dword [0x4df010]
mov dword [esp + 4], str.Welcome_to_MoTTY_0.81__2024_06_08_
mov dword [esp], 0x4df010
call dword [eax]
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov dword [esp + 4], esi
mov dword [esp], 0xe10
mov dword [esp + 0x3c], eax
call eax
sub esp, 8
cmp eax, 0xe10
mov edi, eax
jg 0x411dcf
mov dword [esp + 4], esi
mov dword [esp], edi
mov eax, dword [esp + 0x3c]
call eax
sub esp, 8
mov dword [esp + 4], esi
mov dword [esp], str.Current_working_directory:__s
lea ebp, [esp + 0x88]
call fcn.004cc080
mov dword [esp], esi
mov edi, eax
call fcn.004cd6d0
mov eax, dword [0x4df010]
mov dword [esp + 4], edi
mov dword [esp], 0x4df010
call dword [eax]
mov dword [esp], edi
call fcn.004cd6d0
mov eax, dword [0x522678]
mov dword [esp + 4], 0xd1
mov dword [esp], eax
call fcn.004cadc0
mov dword [0x522630], eax
mov eax, dword [0x522678]
mov dword [esp + 4], 0xd3
mov dword [esp], eax
call fcn.004cadc0
mov edx, 0x513780
mov dword [0x51304c], eax
mov ecx, 0x2c3
mov edi, edx
xor eax, eax
rep stosd dword es:[edi], eax
call fcn.00401590
mov eax, dword [0x522678]
mov dword [esp + 4], 0x7e
mov dword [0x5142b0], 0xa
mov dword [0x5142ac], 0x14
mov dword [0x5142b8], 0x19
mov dword [0x5142b4], 0x1c
mov dword [esp], eax
call fcn.004cadc0
imul eax, dword [0x5142b0]
mov dword [esp + 4], 0x7f
add eax, dword [0x5142b8]
mov edi, eax
mov eax, dword [0x522678]
mov dword [esp], eax
call fcn.004cadc0
imul eax, dword [0x5142ac]
add eax, dword [0x5142b4]
mov esi, eax
mov eax, ebp
call fcn.00404810
mov eax, dword [esp + 0x90]
sub eax, dword [esp + 0x88]
cmp eax, edi
cmovle edi, eax
mov eax, dword [esp + 0x94]
sub eax, dword [esp + 0x8c]
mov dword [esp + 0x44], edi
cmp eax, esi
cmovle esi, eax
mov eax, dword [0x4e49a0]
mov dword [esp + 0x40], esi
mov dword [esp], eax
call fcn.0047e940
xor edx, edx
test eax, eax
je 0x410a59
mov edx, dword [eax + 0x58]
and edx, 1
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov dword [esp], 0
mov byte [esp + 0x48], dl
call fcn.004cc1a0
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov esi, eax
mov dword [esp], 0
call fcn.004cc1a0
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [0x513114], eax
call fcn.004cc1a0
mov dword [0x513110], eax
mov eax, dword [0x522678]
mov dword [esp + 4], 0x78
mov dword [esp], eax
call fcn.004cad30
cmp al, 1
mov eax, dword [0x522678]
mov dword [esp + 4], 0x7a
sbb edi, edi
and edi, 0xffe00000
mov dword [esp], eax
add edi, 0xef0000
call fcn.004cadc0
cmp eax, 1
je 0x410af9
movzx edx, byte [esp + 0x48]
test dl, dl
je 0x410aff
and edi, 0xfffaffff
mov eax, dword [0x522678]
mov dword [esp + 4], 0x61
xor ebx, ebx
mov dword [esp], eax
call fcn.004cad30
test al, al
mov eax, dword [0x522678]
mov dword [esp + 4], 0x8a
setne bl
shl ebx, 3
mov dword [esp], eax
call fcn.004cad30
mov edx, ebx
mov dword [esp + 4], 0x10c
mov byte [0x513100], 1
or dh, 2
test al, al
mov eax, dword [sym.imp.USER32.dll_PeekMessageW]
cmovne ebx, edx
or ebx, 0x10
mov dword [0x5130fc], eax
mov eax, dword [sym.imp.USER32.dll_DispatchMessageW]
mov dword [0x5130f8], eax
mov eax, dword [sym.imp.USER32.dll_DefWindowProcW]
mov dword [0x5130f4], eax
mov eax, dword [0x522678]
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
jne 0x411ce0
mov eax, dword [0x522678]
mov dword [esp + 4], 0x111
mov dword [esp], eax
call fcn.004cadc0
call fcn.00409220
mov ecx, dword [esp + 0xd0]
mov dword [esp + 0x2c], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x14], 0x80000000
mov dword [esp + 0x10], 0x80000000
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0xc], edi
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ebx
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x18], ecx
call dword [sym.imp.USER32.dll_CreateWindowExW]
xor ecx, ecx
sub esp, 0x30
xor edx, edx
test eax, eax
mov dword [0x4df008], eax
je 0x411dea
mov dword [edx + 0x51313c], ecx
add edx, 4
cmp edx, 0x18
jb 0x410c08
mov eax, dword [0x522678]
mov dword [esp + 4], 0x10c
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
jne 0x4125c9
mov eax, dword [0x522630]
test eax, eax
jne 0x412787
mov dword [esp + 4], str.Getting_default_monitor_DPI_info
mov eax, dword [0x4df010]
mov dword [esp], 0x4df010
call dword [eax]
mov eax, dword [0x4df008]
call fcn.00403b10
mov dword [esp], esi
call fcn.004cd6d0
cmp byte [0x513100], 0
mov eax, dword [0x4df008]
mov dword [0x522680], eax
je 0x412219
mov eax, dword [0x4df010]
mov dword [esp + 4], str.Created_the_unicode_terminal_window
mov dword [esp], 0x4df010
call dword [eax]
mov eax, dword [0x522678]
mov dword [esp + 4], pe_nt_image_headers32
mov dword [esp], eax
call fcn.004cb2e0
mov eax, dword [eax]
mov dword [esp], str.Initializing_terminal_font___s_
mov dword [esp + 4], eax
call fcn.004cc080
mov ebx, eax
mov dword [esp + 4], eax
mov eax, dword [0x4df010]
mov dword [esp], 0x4df010
call dword [eax]
mov dword [esp], ebx
call fcn.004cd6d0
xor edx, edx
xor eax, eax
call fcn.00405060
call fcn.004017f0
mov eax, dword [0x522678]
mov dword [esp + 8], 0x513108
mov dword [esp + 4], 0x513780
mov dword [0x513108], 0x4e4220
mov dword [esp], eax
call fcn.00420070
mov edx, dword [0x522678]
mov dword [0x52262c], eax
call fcn.00401bd0
mov eax, dword [0x522678]
mov dword [esp], 0x4df010
mov dword [esp + 4], eax
call fcn.00436330
mov dword [esp + 4], eax
mov dword [0x522674], eax
mov eax, dword [0x52262c]
mov dword [esp], eax
call fcn.00427620
mov eax, dword [0x522678]
mov dword [esp + 4], 0x6b
mov dword [esp], eax
call fcn.004cadc0
mov esi, eax
mov eax, dword [0x522678]
mov dword [esp + 4], 0x7e
mov dword [esp], eax
call fcn.004cadc0
mov ebx, eax
mov eax, dword [0x522678]
mov dword [esp + 4], 0x7f
mov dword [esp], eax
call fcn.004cadc0
mov dword [esp + 4], eax
mov eax, dword [0x52262c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp], eax
call fcn.0041edf0
mov eax, dword [0x4df008]
mov dword [esp + 4], ebp
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
sub esp, 8
lea eax, [esp + 0x78]
mov dword [esp + 4], eax
mov eax, dword [0x4df008]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [0x522678]
sub esp, 8
mov dword [esp + 4], 0x8b
mov dword [esp], eax
call fcn.004cadc0
mov edx, dword [esp + 0x90]
lea ecx, [eax + eax]
mov dword [0x5142a0], eax
mov dword [0x5142a4], eax
sub edx, dword [esp + 0x88]
mov eax, dword [esp + 0x94]
sub eax, dword [esp + 0x8c]
sub edx, dword [esp + 0x80]
sub eax, dword [esp + 0x84]
add edx, dword [esp + 0x78]
add eax, dword [esp + 0x7c]
add edx, ecx
add eax, ecx
mov ecx, dword [0x52262c]
mov dword [0x5142b8], edx
mov dword [0x5142b4], eax
mov ebx, dword [ecx + 0x12c]
imul ebx, dword [0x5142b0]
add ebx, edx
mov edx, dword [ecx + 0x128]
mov dword [esp + 4], 0x10c
imul edx, dword [0x5142ac]
lea edi, [edx + eax]
mov eax, dword [0x522678]
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
jne 0x41231b
mov esi, dword [0x522630]
test esi, esi
je 0x412739
mov eax, dword [0x522678]
mov dword [esp + 4], 0x111
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
je 0x410eea
mov eax, dword [0x4df010]
mov dword [esp + 4], str.Force_Left_to_Right
mov dword [esp], 0x4df010
call dword [eax]
mov eax, dword [0x4df008]
mov dword [esp + 4], 0xffffffec
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
sub esp, 8
mov dword [esp + 8], eax
mov eax, dword [0x4df008]
mov dword [esp + 4], 0xffffffec
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
sub esp, 0xc
mov eax, dword [0x522678]
mov dword [esp + 4], 2
mov dword [esp], eax
call fcn.004cadc0
cmp eax, 1
je 0x412234
mov eax, dword [0x522678]
mov dword [esp + 4], 2
mov dword [esp], eax
call fcn.004cadc0
cmp eax, 1
je 0x41268d
mov eax, dword [0x522678]
mov dword [esp + 4], 2
mov dword [esp], eax
call fcn.004cadc0
cmp eax, 1
jne 0x41280e
mov eax, dword [0x4df010]
mov dword [esp + 4], 0x4e3d8c
mov dword [esp], 0x4df010
call dword [eax]
mov eax, dword [0x5142b0]
mov dword [esp + 8], 0
mov dword [esp + 4], 1
lea ebx, [eax + 0x1e]
add eax, 0xf
cmovns ebx, eax
sar ebx, 4
add ebx, ebx
imul ebx, dword [0x5142ac]
mov dword [esp], ebx
call fcn.004cd640
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov esi, eax
mov dword [esp], eax
call sub.msvcrt.dll_memset
mov eax, dword [0x5142ac]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], 1
mov dword [esp + 8], 1
mov dword [esp + 4], eax
mov eax, dword [0x5142b0]
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_CreateBitmap]
sub esp, 0x14
mov dword [0x513138], eax
mov dword [esp], esi
call fcn.004cd6d0
mov eax, dword [0x5142ac]
mov dword [esp + 0xc], eax
mov eax, dword [0x5142b0]
mov dword [esp + 8], eax
mov eax, dword [0x513138]
mov dword [esp + 4], eax
mov eax, dword [0x4df008]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_CreateCaret]
mov eax, dword [0x52262c]
sub esp, 0x10
mov dword [esp + 0x88], 0x1c
mov dword [esp + 0x8c], 0x1f
mov dword [esp + 0x90], 0
mov eax, dword [eax + 0x128]
mov dword [esp + 0x9c], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], ebp
mov dword [esp + 4], 1
lea edx, [eax - 1]
mov dword [esp + 0x98], eax
mov eax, dword [0x4df008]
mov dword [esp + 0x94], edx
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetScrollInfo]
mov dword [0x51312c], 0
sub esp, 0x10
mov dword [0x513128], 0
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
mov dword [0x513134], eax
mov eax, dword [0x4df008]
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov dword [0x513754], eax
mov eax, dword [sym.imp.USER32.dll_CreatePopupMenu]
sub esp, 8
mov dword [esp + 0x44], eax
call eax
mov ebx, dword [sym.imp.USER32.dll_AppendMenuA]
mov dword [0x513758], eax
mov dword [esp + 0x40], 0x513754
mov eax, dword [esp + 0x40]
mov edi, dword [eax]
mov eax, dword [0x522678]
mov dword [esp + 4], 0x11f
mov dword [esp], eax
mov dword [esp + 0x3c], edi
call fcn.004caf10
mov dword [esp], 0x4e3dcd
mov dword [esp + 4], eax
call fcn.004cc080
mov dword [esp + 0x5c], eax
mov esi, eax
mov eax, dword [0x522678]
mov dword [esp + 4], 0x120
mov dword [esp], eax
call fcn.004caf10
mov dword [esp], 0x4e3dd6
mov dword [esp + 4], eax
call fcn.004cc080
mov dword [esp + 0x48], eax
mov eax, dword [0x522678]
mov dword [esp + 4], 0x121
mov dword [esp], eax
call fcn.004caf10
mov dword [esp], 0x4e3de7
mov dword [esp + 4], eax
call fcn.004cc080
mov dword [esp + 0x4c], eax
mov eax, dword [0x522678]
mov dword [esp + 4], 0x122
mov dword [esp], eax
call fcn.004caf10
mov dword [esp], 0x4e3def
mov dword [esp + 4], eax
call fcn.004cc080
mov dword [esp + 0x50], eax
mov eax, dword [0x522678]
mov dword [esp + 4], 0x123
mov dword [esp], eax
call fcn.004caf10
mov dword [esp], 0x4e3dff
mov dword [esp + 4], eax
call fcn.004cc080
mov dword [esp + 0x54], eax
mov eax, dword [0x522678]
mov dword [esp + 4], 0x124
mov dword [esp], eax
call fcn.004caf10
mov dword [esp], 0x4e3e08
mov dword [esp + 4], eax
call fcn.004cc080
mov dword [esp + 0xc], 0x4e3e1f
mov dword [esp + 0x58], eax
mov dword [esp + 8], 0x190
mov dword [esp + 4], 0
mov dword [esp], edi
call ebx
sub esp, 0x10
mov dword [esp + 0xc], 0x4e3e24
mov dword [esp + 8], 0x170
mov dword [esp + 4], 0
mov dword [esp], edi
call ebx
sub esp, 0x10
mov dword [esp + 0xc], 0x4e3e2d
mov dword [esp + 8], 0x340
mov dword [esp + 4], 0
mov dword [esp], edi
call ebx
sub esp, 0x10
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0x1a0
mov dword [esp + 4], 0
mov dword [esp], edi
call ebx
mov eax, dword [0x522678]
sub esp, 0x10
mov dword [esp + 4], 0x10c
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
je 0x411f01
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], 0
mov edi, 0x4e23e6
mov dword [esp + 8], 0
mov dword [esp + 4], 0x800
mov dword [esp], eax
call ebx
sub esp, 0x10
mov eax, dword [esp + 0x44]
call eax
mov dword [0x51303c], eax
mov eax, dword [0x522678]
mov dword [esp + 4], pe_nt_image_headers32
mov dword [esp], eax
call fcn.004cb2e0
mov esi, dword [eax]
mov ecx, 9
repe cmpsb byte [esi], byte es:[edi]
mov dword [esp + 0xc], 0x4e3e47
mov dword [esp + 8], 0x1610
mov edi, 0x4e2452
seta al
sbb al, 0
test al, al
sete al
movzx eax, al
shl eax, 3
mov dword [esp + 4], eax
mov eax, dword [0x51303c]
mov dword [esp], eax
call ebx
mov eax, dword [0x522678]
sub esp, 0x10
mov dword [esp + 4], pe_nt_image_headers32
mov dword [esp], eax
call fcn.004cb2e0
mov esi, dword [eax]
mov ecx, 9
repe cmpsb byte [esi], byte es:[edi]
mov dword [esp + 0xc], 0x4e3e64
mov dword [esp + 8], 0x1630
mov edi, 0x4e241b
seta al
sbb al, 0
test al, al
sete al
movzx eax, al
shl eax, 3
mov dword [esp + 4], eax
mov eax, dword [0x51303c]
mov dword [esp], eax
call ebx
mov eax, dword [0x522678]
sub esp, 0x10
mov dword [esp + 4], pe_nt_image_headers32
mov dword [esp], eax
call fcn.004cb2e0
mov esi, dword [eax]
mov ecx, 0xa
repe cmpsb byte [esi], byte es:[edi]
mov dword [esp + 0xc], 0x4e3e81
mov dword [esp + 8], 0x1620
seta al
sbb al, 0
test al, al
sete al
movzx eax, al
shl eax, 3
mov dword [esp + 4], eax
mov eax, dword [0x51303c]
mov dword [esp], eax
call ebx
mov eax, dword [0x51303c]
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x800
mov dword [esp], eax
call ebx
mov eax, dword [0x522678]
sub esp, 0x10
mov dword [esp + 4], 0x12e
mov dword [esp], eax
call fcn.004cad30
test al, al
mov dword [esp + 0xc], 0x4e3e9f
mov dword [esp + 8], 0x1600
je 0x411e40
mov eax, dword [0x51303c]
mov dword [esp + 4], 8
mov dword [esp], eax
call ebx
mov byte [0x522695], 1
sub esp, 0x10
mov eax, dword [0x522678]
mov dword [esp + 4], 0x12f
mov dword [esp], eax
call fcn.004cad30
mov byte [0x522670], al
mov eax, dword [0x51303c]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x800
mov dword [esp], eax
call ebx
mov eax, dword [0x51303c]
sub esp, 0x10
mov dword [esp + 0xc], 0x4e3eb8
mov dword [esp + 8], 0x320
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov eax, dword [0x51303c]
sub esp, 0x10
mov dword [esp + 0xc], 0x4e3ee0
mov dword [esp + 8], 0x330
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov eax, dword [0x51303c]
sub esp, 0x10
mov dword [esp + 0xc], 0x4e3f08
mov dword [esp + 8], 0x360
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
sub esp, 0x10
mov eax, dword [0x51303c]
mov edi, dword [esp + 0x3c]
mov dword [esp + 0xc], 0x4e3f2a
mov dword [esp + 4], 0x10
mov dword [esp + 8], eax
mov dword [esp], edi
call ebx
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x800
mov dword [esp], edi
call ebx
sub esp, 0x10
mov eax, dword [esp + 0x44]
call eax
mov dword [esp + 0xc], 0x4e3f38
mov dword [0x513038], eax
mov dword [esp + 8], 0x70
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov eax, dword [0x513038]
sub esp, 0x10
mov dword [esp + 0xc], 0x4e3f4e
mov dword [esp + 8], 0x60
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov eax, dword [0x522678]
sub esp, 0x10
mov dword [esp + 4], 0x10c
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
je 0x411e72
mov eax, dword [0x513038]
mov dword [esp + 0xc], 0x4e3f7b
mov dword [esp + 8], 0x2b0
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov eax, dword [0x522678]
sub esp, 0x10
mov dword [esp + 4], 0x10c
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
je 0x411ed7
mov eax, dword [0x513038]
mov dword [esp + 0xc], 0x4e3f95
mov dword [esp + 8], 0x1380
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
sub esp, 0x10
mov eax, dword [0x513038]
mov esi, dword [esp + 0x3c]
mov dword [esp + 0xc], 0x4e3fa8
mov dword [esp + 4], 0x10
mov dword [esp + 8], eax
mov dword [esp], esi
call ebx
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x800
mov dword [esp], esi
call ebx
sub esp, 0x10
mov eax, dword [esp + 0x44]
call eax
mov dword [esp + 0xc], 0x4e3fb9
mov dword [0x513040], eax
mov dword [esp + 8], 0x1000
mov dword [esp + 4], 8
mov dword [esp], eax
call ebx
mov eax, dword [0x513040]
sub esp, 0x10
mov dword [esp + 0xc], 0x4e3fc4
mov dword [esp + 8], 0x1010
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov eax, dword [0x513040]
sub esp, 0x10
mov dword [esp + 0xc], str.Unix_shell
mov dword [esp + 8], 0x1020
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov eax, dword [0x513040]
sub esp, 0x10
mov dword [esp + 0xc], 0x4e3ff5
mov dword [esp + 8], 0x1030
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov eax, dword [0x513040]
sub esp, 0x10
mov dword [esp + 0xc], str.Perl
mov dword [esp + 8], 0x1040
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov eax, dword [0x513040]
sub esp, 0x10
mov dword [esp + 0xc], str.SQL
mov dword [esp + 8], 0x1050
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov eax, dword [0x522678]
sub esp, 0x10
mov dword [esp + 4], 0xf9
mov dword [esp], eax
call fcn.004caf10
cmp byte [eax], 0
jne 0x411e9c
mov eax, dword [0x522678]
mov dword [esp + 4], 0xfa
mov dword [esp], eax
call fcn.004caf10
cmp byte [eax], 0
jne 0x412168
mov eax, dword [0x522678]
mov dword [esp + 4], 0xfb
mov dword [esp], eax
call fcn.004caf10
cmp byte [eax], 0
jne 0x41212d
mov eax, dword [0x522678]
mov dword [esp + 4], 0xfc
mov dword [esp], eax
call fcn.004caf10
cmp byte [eax], 0
jne 0x4120f2
mov eax, dword [0x522678]
mov dword [esp + 4], 0xfd
mov dword [esp], eax
call fcn.004caf10
cmp byte [eax], 0
jne 0x4120b7
mov eax, dword [0x522678]
mov dword [esp + 4], 0xfe
mov dword [esp], eax
call fcn.004caf10
cmp byte [eax], 0
jne 0x4121de
mov eax, dword [0x522678]
mov dword [esp + 4], 0xff
mov dword [esp], eax
call fcn.004caf10
cmp byte [eax], 0
jne 0x4121a3
mov eax, dword [0x522678]
mov dword [esp + 4], 0x100
mov dword [esp], eax
call fcn.004caf10
cmp byte [eax], 0
jne 0x41207c
mov edi, dword [esp + 0x3c]
mov eax, dword [0x513040]
mov dword [esp + 0xc], 0x4e402a
mov dword [esp + 4], 0x10
mov dword [esp + 8], eax
mov dword [esp], edi
call ebx
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x800
mov dword [esp], edi
call ebx
mov eax, dword [0x522678]
sub esp, 0x10
mov dword [esp + 4], 0x10c
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
je 0x411fce
mov eax, dword [0x522678]
mov dword [esp + 4], 0x10c
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
je 0x411fa5
mov eax, dword [0x522678]
mov dword [esp + 4], 0x10c
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
je 0x411f7c
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x800
mov dword [esp], eax
call ebx
mov eax, dword [0x522678]
sub esp, 0x10
mov dword [esp + 4], 0x10c
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
je 0x411f53
mov eax, dword [0x522678]
mov dword [esp + 4], 0x10c
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
je 0x411f2a
mov esi, dword [esp + 0x3c]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x800
mov dword [esp], esi
call ebx
sub esp, 0x10
mov dword [esp + 0xc], 0x4e40a4
mov dword [esp + 8], 0x50
mov dword [esp + 4], 0
mov dword [esp], esi
call ebx
sub esp, 0x10
mov dword [esp + 0xc], 0x4e40c8
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0
mov dword [esp], esi
call ebx
sub esp, 0x10
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.004cd6d0
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.004cd6d0
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call fcn.004cd6d0
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.004cd6d0
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.004cd6d0
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.004cd6d0
add dword [esp + 0x40], 4
mov ecx, 0x51375c
mov eax, dword [esp + 0x40]
cmp ecx, eax
jne 0x4110d1
call fcn.004d5670
test al, al
je 0x4119c0
mov eax, dword [0x4df010]
mov dword [esp + 4], 0x4e40d4
mov dword [esp], 0x4df010
call dword [eax]
mov eax, dword [0x4df008]
mov dword [esp], eax
call fcn.0043f900
call fcn.00402960
mov eax, dword [0x522678]
mov dword [esp + 4], 0xef
mov dword [esp], eax
call fcn.004cadc0
call fcn.00402c70
mov dword [esp], 0
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
sub esp, 4
call fcn.00403ad0
mov eax, dword [0x522678]
mov dword [esp + 4], 0x10c
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
jne 0x41265e
mov ebx, dword [0x522630]
test ebx, ebx
je 0x412777
mov eax, dword [0x522678]
mov dword [esp + 4], 0x33
mov dword [esp], eax
call fcn.004cad30
test al, al
jne 0x41263c
mov eax, dword [0x522678]
mov dword [esp + 4], 0x118
mov dword [esp], eax
call fcn.004cad30
test al, al
jne 0x4125f5
mov edi, dword [sym.imp.USER32.dll_GetForegroundWindow]
call edi
cmp dword [0x4df008], eax
sete al
movzx eax, al
mov dword [esp + 4], eax
mov eax, dword [0x52262c]
mov dword [esp], eax
call fcn.00427630
mov ecx, dword [0x522630]
test ecx, ecx
je 0x411aae
mov eax, dword [0x522678]
mov dword [esp + 4], 0x10c
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
je 0x411abf
mov eax, dword [0x4df008]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_UpdateWindow]
sub esp, 4
mov eax, dword [0x514290]
mov dword [esp + 4], 0x4df00c
mov dword [esp + 8], eax
mov eax, dword [0x4df008]
mov dword [esp], eax
call fcn.004130f0
mov eax, dword [0x4df010]
mov dword [esp + 4], 0x4e4138
mov dword [esp], 0x4df010
call dword [eax]
call fcn.0043fbf0
test al, al
je 0x411c83
xor esi, esi
call fcn.004400b0
mov dword [esp + 0x10], 0x4ff
mov ebx, eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov eax, dword [eax + 0x100]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
sub esp, 0x14
cmp eax, dword [ebx + 0x100]
jb 0x411e61
mov dword [esp], ebx
call fcn.004401e0
mov esi, esi
lea edi, [edi]
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], ebp
call dword [0x5130fc]
sub esp, 0x14
test eax, eax
je 0x411c71
cmp dword [esp + 0x8c], 0x12
jne 0x411c1b
mov eax, dword [0x522678]
mov dword [esp + 4], 0x33
mov dword [esp], eax
call fcn.004cad30
test al, al
je 0x411e30
cmp byte [0x52263c], 0
je 0x411e30
xor ebx, ebx
jmp 0x411bde
mov dword [esp + 8], eax
mov eax, dword [0x522678]
mov ebx, 1
mov dword [esp + 4], 0xb1
mov dword [esp], eax
call fcn.004cb710
mov eax, dword [0x522678]
mov dword [esp + 8], 0
mov dword [esp + 4], 0xb1
mov dword [esp], eax
call fcn.004cb150
test eax, eax
jne 0x411bc0
cmp ebx, 1
jne 0x411c1b
mov eax, dword [0x514290]
mov ecx, dword [0x522678]
mov edx, dword [eax]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 8]
call fcn.0042dbd0
mov ebx, eax
mov dword [esp], eax
call dword [sym.imp.USER32.dll_IsWindow]
sub esp, 4
test eax, eax
jne 0x411e10
mov dword [esp], ebp
call dword [0x5130f8]
sub esp, 4
mov eax, dword [0x52262c]
mov dword [esp + 4], eax
mov eax, dword [0x514290]
mov dword [esp], eax
call fcn.004149b0
test eax, eax
jne 0x411b50
cmp dword [esp + 0x8c], 0x8005
je 0x411b50
call fcn.0043fb90
call fcn.0043fbf0
test al, al
jne 0x411b00
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], ebp
call dword [sym.imp.USER32.dll_PeekMessageA]
sub esp, 0x14
test eax, eax
jne 0x411b00
call edi
cmp dword [0x4df008], eax
mov esi, 0xffffffff
sete al
movzx eax, al
mov dword [esp + 4], eax
mov eax, dword [0x52262c]
mov dword [esp], eax
call fcn.00427630
jmp 0x411b02
and edi, 0xff30ffff
mov ebx, 0x80098
jmp 0x410b82
mov dword [esp + 4], edi
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
sub esp, 8
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LockResource]
sub esp, 4
test eax, eax
je 0x41063e
lea edx, [esp + 0x6c]
mov dword [esp + 8], 0
mov dword [esp + 4], ebp
mov dword [esp], eax
mov dword [esp + 0xc], edx
call dword [sym.imp.GDI32.dll_AddFontMemResourceEx]
sub esp, 0x10
mov dword [0x513058], eax
jmp 0x41063e
mov dword [esp + 4], ebx
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
sub esp, 8
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LockResource]
sub esp, 4
test eax, eax
je 0x410686
lea edx, [esp + 0x70]
mov dword [esp + 8], 0
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [esp + 0xc], edx
call dword [sym.imp.GDI32.dll_AddFontMemResourceEx]
sub esp, 0x10
mov dword [0x513054], eax
jmp 0x410686
mov edi, eax
mov dword [esp + 4], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
sub esp, 8
test eax, eax
mov ebp, eax
jne 0x412862
mov eax, dword [0x4df010]
mov dword [esp + 4], str.__Loading_MobaFont:_ERROR_during_SizeofResource
mov dword [esp], 0x4df010
call dword [eax]
jmp 0x4105f6
mov dword [esp], esi
mov dword [esp + 8], 1
mov dword [esp + 4], eax
call fcn.004cd680
mov esi, eax
jmp 0x410907
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp], eax
call fcn.004d5ed0
mov dword [esp], str.Unable_to_create_terminal_window:__s
mov dword [esp + 4], eax
call fcn.00410440
nop
lea esi, [esi]
mov dword [esp + 4], ebp
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_IsDialogMessageA]
sub esp, 8
test eax, eax
je 0x411c36
jmp 0x411c42
mov eax, dword [esp + 0x90]
mov dword [esp], eax
call fcn.00409500
nop
mov eax, dword [0x51303c]
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov byte [0x522695], 0
sub esp, 0x10
jmp 0x411405
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00440170
jmp 0x411b3f
mov eax, dword [0x513038]
mov dword [esp + 0xc], 0x4e3f68
mov dword [esp + 8], 0x300
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
sub esp, 0x10
jmp 0x411565
mov eax, dword [0x522678]
mov dword [esp + 4], 0xf9
mov dword [esp], eax
call fcn.004caf10
mov dword [esp + 0xc], eax
mov eax, dword [0x513040]
mov dword [esp + 8], 0x1110
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
sub esp, 0x10
jmp 0x411713
mov eax, dword [esp + 0x58]
mov dword [esp + 8], 0x180
mov dword [esp + 4], 0
mov dword [esp + 0xc], eax
mov eax, dword [0x513038]
mov dword [esp], eax
call ebx
sub esp, 0x10
jmp 0x4115a7
mov eax, dword [esp + 0x4c]
mov dword [esp + 8], 0x270
mov dword [esp + 4], 0
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call ebx
sub esp, 0x10
jmp 0x41126c
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], 0x4e408a
mov dword [esp + 8], 0x130
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
sub esp, 0x10
jmp 0x4118df
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], 0x4e406f
mov dword [esp + 8], 0x120
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
sub esp, 0x10
jmp 0x4118c2
mov eax, dword [esp + 0x54]
mov dword [esp + 8], 0x290
mov dword [esp + 4], 0
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call ebx
sub esp, 0x10
jmp 0x411881
mov eax, dword [esp + 0x50]
mov dword [esp + 8], 0x280
mov dword [esp + 4], 0
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call ebx
sub esp, 0x10
jmp 0x411864
mov esi, dword [esp + 0x3c]
mov eax, dword [esp + 0x48]
mov dword [esp + 8], 0x250
mov dword [esp + 4], 0
mov dword [esp + 0xc], eax
mov dword [esp], esi
call ebx
sub esp, 0x10
mov dword [esp + 0xc], 0x4e403e
mov dword [esp + 8], 0x260
mov dword [esp + 4], 0
mov dword [esp], esi
call ebx
mov eax, dword [0x522678]
sub esp, 0x10
mov dword [esp + 4], 0x10a
mov dword [esp], eax
call fcn.004cad30
test al, al
je 0x411847
mov eax, dword [0x522678]
mov dword [esp + 4], 0x83
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
mov dword [esp + 0xc], 0x4e4050
mov dword [esp + 8], 0x1390
je 0x4127c0
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], 8
mov dword [esp], eax
call ebx
mov byte [0x52268c], 0
sub esp, 0x10
jmp 0x411847
mov eax, dword [0x522678]
mov dword [esp + 4], 0x100
mov dword [esp], eax
call fcn.004caf10
mov dword [esp + 0xc], eax
mov eax, dword [0x513040]
mov dword [esp + 8], 0x1180
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
sub esp, 0x10
jmp 0x4117e5
mov eax, dword [0x522678]
mov dword [esp + 4], 0xfd
mov dword [esp], eax
call fcn.004caf10
mov dword [esp + 0xc], eax
mov eax, dword [0x513040]
mov dword [esp + 8], 0x1150
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
sub esp, 0x10
jmp 0x41178b
mov eax, dword [0x522678]
mov dword [esp + 4], 0xfc
mov dword [esp], eax
call fcn.004caf10
mov dword [esp + 0xc], eax
mov eax, dword [0x513040]
mov dword [esp + 8], 0x1140
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
sub esp, 0x10
jmp 0x41176d
mov eax, dword [0x522678]
mov dword [esp + 4], 0xfb
mov dword [esp], eax
call fcn.004caf10
mov dword [esp + 0xc], eax
mov eax, dword [0x513040]
mov dword [esp + 8], 0x1130
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
sub esp, 0x10
jmp 0x41174f
mov eax, dword [0x522678]
mov dword [esp + 4], 0xfa
mov dword [esp], eax
call fcn.004caf10
mov dword [esp + 0xc], eax
mov eax, dword [0x513040]
mov dword [esp + 8], 0x1120
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
sub esp, 0x10
jmp 0x411731
mov eax, dword [0x522678]
mov dword [esp + 4], 0xff
mov dword [esp], eax
call fcn.004caf10
mov dword [esp + 0xc], eax
mov eax, dword [0x513040]
mov dword [esp + 8], 0x1170
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
sub esp, 0x10
jmp 0x4117c7
mov eax, dword [0x522678]
mov dword [esp + 4], 0xfe
mov dword [esp], eax
call fcn.004caf10
mov dword [esp + 0xc], eax
mov eax, dword [0x513040]
mov dword [esp + 8], 0x1160
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
sub esp, 0x10
jmp 0x4117a9
mov eax, dword [0x4df010]
mov dword [esp + 4], str.Warning:_created_an_ANSI_terminal_window_
mov dword [esp], 0x4df010
call dword [eax]
jmp 0x410c95
mov eax, dword [0x522678]
mov dword [esp + 4], 0x12
mov dword [esp], eax
call fcn.004caf10
mov dword [esp + 4], 0x4e3cf4
mov dword [esp], eax
call sub.msvcrt.dll_strstr
test eax, eax
je 0x410f08
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov dword [esp], 0xe10
call fcn.004cd640
mov dword [esp], 0xe10
mov dword [esp + 4], eax
mov ebx, eax
mov eax, dword [esp + 0x3c]
call eax
sub esp, 8
cmp eax, 0xe10
mov esi, eax
jg 0x412847
mov dword [esp], esi
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x3c]
call eax
mov eax, dword [0x4df010]
sub esp, 8
mov dword [esp + 4], str.Protocol:_WSL
mov dword [esp], 0x4df010
call dword [eax]
mov dword [esp + 4], ebx
mov dword [esp], str._s_wsltermd
call fcn.004cc080
mov dword [esp + 4], 0x4e1e44
mov dword [esp], eax
mov esi, eax
call sub.msvcrt.dll_fopen
test eax, eax
jne 0x412935
mov eax, dword [0x4df010]
mov dword [esp + 4], str._wsltermd__not_found_in_current_directory
mov dword [esp], 0x4df010
call dword [eax]
mov dword [esp], ebx
call fcn.004cd6d0
mov dword [esp], esi
call fcn.004cd6d0
jmp 0x410f5a
mov eax, dword [0x522678]
mov dword [esp + 4], 0x10d
mov dword [esp], eax
call fcn.004cadc0
movzx eax, al
mov dword [esp + 0xc], 2
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov eax, dword [0x4df008]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov eax, dword [0x522678]
sub esp, 0x10
mov dword [esp + 4], 0x114
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
mov esi, eax
jne 0x412958
mov eax, dword [0x4df010]
mov dword [esp + 4], str.Getting_default_monitor_info
mov dword [esp], 0x4df010
call dword [eax]
mov eax, dword [0x4df008]
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [sym.imp.USER32.dll_MonitorFromWindow]
sub esp, 8
mov dword [esp + 0x88], 0x28
mov dword [esp + 4], ebp
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetMonitorInfoA]
mov eax, dword [0x522678]
sub esp, 8
mov dword [esp + 4], 0x10e
mov dword [esp], eax
call fcn.004cadc0
mov esi, eax
mov eax, dword [0x522678]
mov dword [esp + 4], 0x10f
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
je 0x4126d5
mov eax, dword [0x522678]
mov dword [esp + 4], 0x10f
mov dword [esp], eax
call fcn.004cadc0
cmp eax, 2
je 0x4126d5
mov eax, dword [0x522678]
mov dword [esp + 4], 0x10f
mov dword [esp], eax
call fcn.004cadc0
cmp eax, 1
je 0x4128a5
mov eax, dword [0x522678]
mov dword [esp + 4], 0x10f
mov dword [esp], eax
call fcn.004cadc0
cmp eax, 3
je 0x4128a5
xor esi, esi
xor ecx, ecx
mov dword [esp + 4], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], esi
mov dword [esp + 0x10], edi
mov dword [esp], str.Setting_popup_window_to_left:_d__top:_d__width:_d__height:_d
mov dword [esp + 0x44], ecx
call fcn.004cc080
mov edx, dword [0x4df010]
mov dword [esp + 4], eax
mov dword [esp + 0x40], eax
mov dword [esp], 0x4df010
call dword [edx]
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.004cd6d0
mov ecx, dword [esp + 0x44]
mov eax, dword [0x4df008]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x18], 0xc
mov dword [esp + 0x14], edi
mov dword [esp + 8], ecx
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [0x4df008]
sub esp, 0x1c
mov esi, dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [esp + 4], 0xfffffff0
mov dword [esp], eax
call esi
mov ebx, eax
mov eax, dword [0x522678]
sub esp, 8
mov dword [esp + 4], 0x110
mov dword [esp], eax
call fcn.004cadc0
mov edx, ebx
and ebx, 0xff3bffff
mov dword [esp + 4], 0xfffffff0
and edx, 0xff3fffff
or edx, 0x40000
cmp eax, 1
mov eax, edx
cmovne eax, ebx
mov ebx, dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [esp + 8], eax
mov eax, dword [0x4df008]
mov dword [esp], eax
call ebx
mov eax, dword [0x4df008]
sub esp, 0xc
mov dword [esp + 4], 0xffffffec
mov dword [esp], eax
call esi
and eax, 0xf7fbfcff
sub esp, 8
or al, 0x80
mov dword [esp + 4], 0xffffffec
mov dword [esp + 8], eax
mov eax, dword [0x4df008]
mov dword [esp], eax
call ebx
mov eax, dword [0x513114]
sub esp, 0xc
mov dword [esp], eax
call fcn.004cd6d0
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov dword [esp], 0xf
call fcn.004cd640
mov dword [esp + 4], 0x4e3cc2
mov dword [esp], eax
mov dword [0x513114], eax
call sub.msvcrt.dll_wcscpy
mov eax, dword [0x4df008]
mov dword [esp + 4], 0x4e1f10
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
sub esp, 8
jmp 0x410e85
mov eax, dword [0x522678]
mov dword [esp + 4], 0x114
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
mov ebx, eax
jne 0x41299b
mov dword [esp + 4], str.Popup_console_will_get_monitor_DPI_info
jmp 0x410c48
mov dword [esp], str.uxtheme.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
sub esp, 4
mov dword [esp + 4], str.SetWindowTheme
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [0x4df008]
sub esp, 8
mov dword [esp + 8], 0
mov dword [esp + 4], str.DarkMode_Explorer
mov dword [esp], edx
call eax
sub esp, 0xc
jmp 0x411a66
mov ebx, dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [esp], 2
call ebx
sub esp, 4
or eax, 2
mov dword [esp], eax
call ebx
sub esp, 4
jmp 0x411a49
mov dword [esp + 4], 5
mov eax, dword [0x4df008]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0x4df008]
sub esp, 8
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
sub esp, 4
jmp 0x411a2c
mov eax, dword [0x522678]
mov dword [esp + 4], 0x12
mov dword [esp], eax
call fcn.004caf10
mov dword [esp + 4], str.cygtermd
mov dword [esp], eax
call sub.msvcrt.dll_strstr
test eax, eax
je 0x410f26
mov eax, dword [0x4df010]
mov dword [esp + 4], 0x4e3d73
mov dword [esp], 0x4df010
call dword [eax]
jmp 0x410f5a
mov eax, dword [esp + 0xa4]
sub eax, dword [esp + 0x9c]
mov edx, 0x51eb851f
mov dword [esp + 4], 0x10f
imul esi, eax
mov eax, esi
sar esi, 0x1f
imul edx
mov eax, dword [esp + 0xa8]
sub eax, dword [esp + 0xa0]
sar edx, 5
mov edi, eax
mov eax, dword [0x522678]
sub edx, esi
mov ebx, edx
mov dword [esp], eax
call fcn.004cadc0
test eax, eax
mov ecx, dword [esp + 0x9c]
jne 0x4127e0
mov esi, dword [esp + 0xa0]
jmp 0x412453
mov eax, dword [0x4df008]
mov dword [esp + 0x18], 0xe
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SetWindowPos]
sub esp, 0x1c
jmp 0x410e85
mov eax, dword [esp + 0xdc]
mov dword [esp + 4], eax
jmp 0x412666
mov dword [esp], eax
call dword [sym.imp.USER32.dll_IsWindow]
sub esp, 4
test eax, eax
je 0x410c40
mov eax, dword [0x4df010]
mov dword [esp + 4], str.Sharing_DPI_info_with_MobaXterm_window
mov dword [esp], 0x4df010
call dword [eax]
mov eax, dword [0x522630]
call fcn.00403b10
jmp 0x410c60
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov byte [0x52268c], 1
sub esp, 0x10
jmp 0x411847
mov eax, dword [0x522678]
mov dword [esp + 4], 0x10f
mov dword [esp], eax
call fcn.004cadc0
xor ecx, ecx
cmp eax, 2
jne 0x41272d
mov ecx, dword [esp + 0xa4]
sub ecx, ebx
jmp 0x41272d
mov eax, dword [0x522678]
mov dword [esp + 4], 2
mov dword [esp], eax
call fcn.004cadc0
cmp eax, 3
jne 0x4129d1
mov eax, dword [0x4df010]
mov dword [esp + 4], 0x4e3d9d
mov dword [esp], 0x4df010
call dword [eax]
jmp 0x410f5a
mov dword [esp], ebx
mov dword [esp + 8], 1
mov dword [esp + 4], eax
call fcn.004cd680
mov ebx, eax
jmp 0x4122a0
mov dword [esp + 4], edi
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
sub esp, 8
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LockResource]
sub esp, 4
test eax, eax
jne 0x412a0a
mov eax, dword [0x4df010]
mov dword [esp + 4], str.__Loading_MobaFont:_ERROR_during_LockResource
mov dword [esp], 0x4df010
call dword [eax]
jmp 0x4105f6
mov eax, dword [esp + 0xa8]
sub eax, dword [esp + 0xa0]
mov edx, 0x51eb851f
mov ecx, dword [esp + 0x9c]
mov ebx, dword [esp + 0xa4]
mov dword [esp + 4], 0x10f
imul esi, eax
sub ebx, ecx
mov dword [esp + 0x40], ecx
mov eax, esi
sar esi, 0x1f
imul edx
mov eax, dword [0x522678]
sar edx, 5
mov dword [esp], eax
sub edx, esi
mov edi, edx
call fcn.004cadc0
cmp eax, 1
mov ecx, dword [esp + 0x40]
je 0x41272d
mov eax, dword [0x522678]
mov dword [esp + 4], 0x10f
xor esi, esi
mov dword [esp + 0x40], ecx
mov dword [esp], eax
call fcn.004cadc0
cmp eax, 3
mov ecx, dword [esp + 0x40]
jne 0x412453
mov esi, dword [esp + 0xa8]
sub esi, edi
jmp 0x412453
mov dword [esp], eax
call sub.msvcrt.dll_fclose
mov eax, dword [0x4df010]
mov dword [esp + 4], str._wsltermd__found_in_current_directory
mov dword [esp], 0x4df010
call dword [eax]
jmp 0x412306
mov dword [esp], eax
call dword [sym.imp.USER32.dll_IsWindow]
sub esp, 4
test eax, eax
je 0x412377
mov eax, dword [0x4df010]
mov dword [esp + 4], str.Getting_monitor_info_from_MobaXterm_window
mov dword [esp], 0x4df010
call dword [eax]
mov dword [esp + 4], 2
mov dword [esp], esi
call dword [sym.imp.USER32.dll_MonitorFromWindow]
sub esp, 8
jmp 0x4123a6
mov dword [esp], eax
call dword [sym.imp.USER32.dll_IsWindow]
sub esp, 4
test eax, eax
je 0x4125e8
mov eax, dword [0x4df010]
mov dword [esp + 4], str.Popup_console_will_share_DPI_info_with_MobaXterm_window
mov dword [esp], 0x4df010
call dword [eax]
mov eax, ebx
call fcn.00403b10
jmp 0x410c60
mov eax, dword [0x522678]
mov dword [esp + 4], 2
mov dword [esp], eax
call fcn.004cadc0
cmp eax, 5
jne 0x412b44
mov eax, dword [0x4df010]
mov dword [esp + 4], 0x4e3dab
mov dword [esp], 0x4df010
call dword [eax]
jmp 0x410f5a
lea edx, [esp + 0x74]
mov dword [esp + 8], 0
mov dword [esp + 4], ebp
mov dword [esp], eax
mov dword [esp + 0xc], edx
call dword [sym.imp.GDI32.dll_AddFontMemResourceEx]
sub esp, 0x10
test eax, eax
mov dword [0x513050], eax
jne 0x4105f6
mov eax, dword [0x4df010]
mov dword [esp + 4], 0x4e1f22
mov dword [esp], 0x4df010
call dword [eax]
mov eax, dword [0x4df010]
mov dword [esp + 4], 0x4e1f22
mov dword [esp], 0x4df010
call dword [eax]
mov eax, dword [0x4df010]
mov dword [esp + 4], 0x4e3860
mov dword [esp], 0x4df010
call dword [eax]
mov eax, dword [0x4df010]
mov dword [esp + 4], str.__WINDOWS_SYSTEM_CALL__AddFontMemResourceEx__PRODUCED_AN_ERROR.
mov dword [esp], 0x4df010
call dword [eax]
mov eax, dword [0x4df010]
mov dword [esp + 4], str.__MobaXterm_embedded_fonts_will_not_be_available_inside_this_terminal.
mov dword [esp], 0x4df010
call dword [eax]
mov eax, dword [0x4df010]
mov dword [esp + 4], str.__The_Windows__Block_Untrusted_Fonts__feature_may_be_activated.
mov dword [esp], 0x4df010
call dword [eax]
mov eax, dword [0x4df010]
mov dword [esp + 4], str.__More_info:_https:__docs.microsoft.com_en_us_troubleshoot_windows_client_shell_experience_feature_to_block_untrusted_fonts
mov dword [esp], 0x4df010
call dword [eax]
mov eax, dword [0x4df010]
mov dword [esp + 4], 0x4e3860
mov dword [esp], 0x4df010
call dword [eax]
mov eax, dword [0x4df010]
mov dword [esp + 4], 0x4e1f22
mov dword [esp], 0x4df010
call dword [eax]
mov eax, dword [0x4df010]
mov dword [esp + 4], 0x4e1f22
mov dword [esp], 0x4df010
call dword [eax]
jmp 0x4105f6
mov dword [esp + 4], str.GetDpiForMonitor
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x51315c], eax
push edx
push edx
jmp 0x410884
mov dword [0x51315c], 0
jmp 0x410761
mov eax, dword [0x522678]
mov dword [esp + 4], 2
mov dword [esp], eax
call fcn.004cadc0
cmp eax, 2
jne 0x410f5a
mov eax, dword [0x4df010]
mov dword [esp + 4], 0x4e3dbc
mov dword [esp], 0x4df010
call dword [eax]
jmp 0x410f5a