Function at 0x423de0
Capabilities:
Check for unmoving mouse cursor
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49793f
mov eax, dword fs:[0]
push eax
sub esp, 0x98
mov eax, dword [0x4c100c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov eax, dword [ebx]
call dword [eax + 0x78]
mov ecx, dword [ebx + 0x288]
mov eax, dword [ecx]
call dword [eax + 0x28]
push 0x1f4
push 0
mov ecx, 0x4c51a0
mov edi, eax
call fcn.0043f830
mov ecx, dword [edi + 0x48]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 0x70], eax
test ecx, ecx
je 0x423e4d
cmp ecx, eax
je 0x423e4d
push ecx
call esi
mov eax, dword [ebp - 0x70]
push 1
mov ecx, edi
mov dword [edi + 0x48], eax
call fcn.00457190
mov ecx, dword [ebx + 0x288]
mov eax, dword [ecx]
call dword [eax + 0x28]
push 0x1f5
push 0
mov ecx, 0x4c51a0
mov edi, eax
call fcn.0043f830
mov ecx, dword [edi + 0x4c]
mov dword [ebp - 0x70], eax
test ecx, ecx
je 0x423e8b
cmp ecx, eax
je 0x423e8b
push ecx
call esi
mov eax, dword [ebp - 0x70]
push 1
mov ecx, edi
mov dword [edi + 0x4c], eax
call fcn.00457190
mov ecx, dword [ebx + 0x288]
mov eax, dword [ecx]
call dword [eax + 0x28]
push 0x1f6
push 0
mov ecx, 0x4c51a0
mov edi, eax
call fcn.0043f830
mov ecx, dword [edi + 0x50]
mov dword [ebp - 0x70], eax
test ecx, ecx
je 0x423ec9
cmp ecx, eax
je 0x423ec9
push ecx
call esi
mov eax, dword [ebp - 0x70]
push 1
mov ecx, edi
mov dword [edi + 0x50], eax
call fcn.00457190
mov ecx, dword [ebx + 0x288]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp dword [eax + 0x40], 0xff00ff
je 0x423ef9
push 1
mov ecx, eax
mov dword [eax + 0x40], 0xff00ff
call fcn.00457190
push ecx
push 0x65
push 0x1b
push 0x1b
push 0
push 0x21e
push ebx
lea ecx, [ebx + 0x27c]
call fcn.0041efe0
mov ecx, dword [ebx + 0x3e8]
mov eax, dword [ecx]
call dword [eax + 0x28]
push 0x1f7
push 0
mov ecx, 0x4c51a0
mov edi, eax
call fcn.0043f830
mov ecx, dword [edi + 0x48]
mov dword [ebp - 0x70], eax
test ecx, ecx
je 0x423f45
cmp ecx, eax
je 0x423f45
push ecx
call esi
mov eax, dword [ebp - 0x70]
push 1
mov ecx, edi
mov dword [edi + 0x48], eax
call fcn.00457190
mov ecx, dword [ebx + 0x3e8]
mov eax, dword [ecx]
call dword [eax + 0x28]
push 0x1f8
push 0
mov ecx, 0x4c51a0
mov edi, eax
call fcn.0043f830
mov ecx, dword [edi + 0x4c]
mov dword [ebp - 0x70], eax
test ecx, ecx
je 0x423f83
cmp ecx, eax
je 0x423f83
push ecx
call esi
mov eax, dword [ebp - 0x70]
push 1
mov ecx, edi
mov dword [edi + 0x4c], eax
call fcn.00457190
mov ecx, dword [ebx + 0x3e8]
mov eax, dword [ecx]
call dword [eax + 0x28]
push 0x1f9
push 0
mov ecx, 0x4c51a0
mov edi, eax
call fcn.0043f830
mov ecx, dword [edi + 0x50]
mov dword [ebp - 0x70], eax
test ecx, ecx
je 0x423fc1
cmp ecx, eax
je 0x423fc1
push ecx
call esi
mov eax, dword [ebp - 0x70]
push 1
mov ecx, edi
mov dword [edi + 0x50], eax
call fcn.00457190
mov ecx, dword [ebx + 0x3e8]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp dword [eax + 0x40], 0xff00ff
je 0x423ff1
push 1
mov ecx, eax
mov dword [eax + 0x40], 0xff00ff
call fcn.00457190
push ecx
push 0x66
push 0x1b
push 0x1b
push 0
push 0x203
push ebx
lea ecx, [ebx + 0x3dc]
call fcn.0041efe0
mov ecx, dword [ebx + 0x548]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov edi, dword [sym.imp.USER32.dll_InvalidateRect]
cmp dword [eax + 0x38], 0xffffff
je 0x42403a
mov dword [eax + 0x38], 0xffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x42403a
push 1
push 0
push eax
call edi
mov ecx, dword [ebx + 0x548]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp dword [eax + 0x48], 0
je 0x424060
mov dword [eax + 0x48], 0
mov eax, dword [eax + 4]
test eax, eax
je 0x424060
push 1
push 0
push eax
call edi
mov ecx, dword [ebx + 0x548]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp dword [eax + 0x44], 0
je 0x424086
mov dword [eax + 0x44], 0
mov eax, dword [eax + 4]
test eax, eax
je 0x424086
push 1
push 0
push eax
call edi
mov ecx, dword [ebx + 0x548]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp dword [eax + 0x4c], 1
je 0x4240ac
mov dword [eax + 0x4c], 1
mov eax, dword [eax + 4]
test eax, eax
je 0x4240ac
push 1
push 0
push eax
call edi
mov ecx, dword [ebx + 0x548]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp dword [eax + 0x50], 1
je 0x4240d2
mov dword [eax + 0x50], 1
mov eax, dword [eax + 4]
test eax, eax
je 0x4240d2
push 1
push 0
push eax
call edi
mov ecx, dword [ebx + 0x548]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp dword [eax + 0x3c], 0xffffff
je 0x4240fb
mov dword [eax + 0x3c], 0xffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x4240fb
push 1
push 0
push eax
call edi
mov ecx, dword [ebx + 0x548]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp dword [eax + 0x40], 0xffffffff
je 0x424121
mov dword [eax + 0x40], 0xffffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x424121
push 1
push 0
push eax
call edi
push ecx
push 0x67
push 0x17c
push 0x130
push 0x2d
push 0x104
push ebx
lea ecx, [ebx + 0x53c]
call fcn.0041efe0
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4aaf20
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x98]
test eax, eax
jne 0x424188
cmp dword [ebp - 0x80], 0
mov eax, 0x4a49e4
cmovne eax, dword [ebp - 0x88]
lea edx, [ebp - 0x6c]
mov ecx, eax
call fcn.00444540
mov esi, dword [ebx + 0x6a0]
mov eax, dword [esi + 0x40]
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [esi + 0x40], eax
mov ecx, dword [ebx + 0x6a0]
mov ecx, dword [ecx + 0x44]
mov ecx, dword [ecx]
test ecx, ecx
je 0x4241c6
push 1
push eax
push 0x30
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x70]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
test eax, eax
je 0x4241d6
push eax
call esi
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
mov ecx, dword [ebx + 0x6a0]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [ebp - 0x70], eax
mov ecx, dword [eax + 4]
mov dword [eax + 0x40], 1
test ecx, ecx
je 0x424224
cmp dword [eax + 0x50], 0
je 0x42421d
push ecx
mov eax, esp
mov dword [eax], ecx
call fcn.004584c0
mov ecx, dword [ebp - 0x70]
add esp, 4
mov ecx, dword [ecx + 4]
push 0
push 0
push ecx
call edi
mov ecx, dword [ebx + 0x6a0]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [ebp - 0x70], eax
mov ecx, dword [eax + 4]
mov dword [eax + 0x38], 0xff
test ecx, ecx
je 0x424260
cmp dword [eax + 0x50], 0
je 0x424259
push ecx
mov eax, esp
mov dword [eax], ecx
call fcn.004584c0
mov ecx, dword [ebp - 0x70]
add esp, 4
mov ecx, dword [ecx + 4]
push 0
push 0
push ecx
call edi
push ecx
lea ecx, [ebx + 0x694]
call fcn.00435c40
push ecx
push 0x68
push 0x18
push 0x108
push 0x8c
push 0x1c
lea eax, [ebx + 0x53c]
push eax
lea ecx, [ebx + 0x694]
call fcn.0041efe0
mov ecx, dword [ebx + 0x800]
mov eax, dword [ecx]
call dword [eax + 0x28]
push 0x1fa
push 0
mov ecx, 0x4c51a0
mov dword [ebp - 0x70], eax
call fcn.0043f830
mov edx, eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x74], edx
mov ecx, dword [eax + 0x48]
test ecx, ecx
je 0x4242ca
cmp ecx, edx
je 0x4242ca
push ecx
call esi
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0x74]
mov dword [eax + 0x48], edx
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x4242f4
cmp dword [eax + 0x44], 0
je 0x4242ed
push ecx
mov eax, esp
mov dword [eax], ecx
call fcn.004584c0
mov eax, dword [ebp - 0x70]
add esp, 4
mov ecx, dword [eax + 4]
push 0
push 0
push ecx
call edi
push ecx
push 0x69
push 0x78
push 0x78
push 0
push 0x5c
lea eax, [ebx + 0x53c]
push eax
lea ecx, [ebx + 0x7f4]
call fcn.0041efe0
mov ecx, dword [ebx + 0x9d8]
mov eax, dword [ecx]
call dword [eax + 0x28]
push 0x1fb
push 0
mov ecx, 0x4c51a0
mov dword [ebp - 0x70], eax
call fcn.0043f830
mov edx, eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x74], edx
mov ecx, dword [eax + 0x48]
test ecx, ecx
je 0x42434c
cmp ecx, edx
je 0x42434c
push ecx
call esi
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0x74]
mov dword [eax + 0x48], edx
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x424376
cmp dword [eax + 0x44], 0
je 0x42436f
push ecx
mov eax, esp
mov dword [eax], ecx
call fcn.004584c0
mov eax, dword [ebp - 0x70]
add esp, 4
mov ecx, dword [eax + 4]
push 0
push 0
push ecx
call edi
mov ecx, dword [ebx + 0x9d8]
mov eax, dword [ecx + 0x44]
mov eax, dword [eax]
test eax, eax
je 0x424390
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x424397
and dword [ecx + 0x34], 0xefffffff
push ecx
push 0x6a
push 0x16
push 0x18
push 0xad
push 0x31
lea eax, [ebx + 0x53c]
push eax
lea ecx, [ebx + 0x9cc]
call fcn.0041efe0
push ecx
push 0x6b
push 2
push 0xc8
push 0xcc
push 0x34
lea eax, [ebx + 0x53c]
push eax
lea ecx, [ebx + 0xba4]
call fcn.0041efe0
mov ecx, dword [ebx + 0xd10]
mov eax, dword [ecx + 0x44]
mov eax, dword [eax]
test eax, eax
je 0x4243f4
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x4243fb
and dword [ecx + 0x34], 0xefffffff
push ecx
push 0x6c
push 2
push 0xc8
push 0xc5
push 0x34
lea eax, [ebx + 0x53c]
push eax
lea ecx, [ebx + 0xd04]
call fcn.0041efe0
mov ecx, dword [ebx + 0xe70]
mov eax, dword [ecx]
call dword [eax + 0x28]
push 0x1fc
push 0
mov ecx, 0x4c51a0
mov dword [ebp - 0x70], eax
call fcn.0043f830
mov edx, eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x74], edx
mov ecx, dword [eax + 0x48]
test ecx, ecx
je 0x424456
cmp ecx, edx
je 0x424456
push ecx
call esi
mov edx, dword [ebp - 0x74]
mov esi, dword [ebp - 0x70]
mov dword [esi + 0x48], edx
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x424480
cmp dword [esi + 0x44], 0
je 0x424479
push ecx
mov eax, esp
mov dword [eax], ecx
call fcn.004584c0
mov ecx, dword [esi + 4]
add esp, 4
push 0
push 0
push ecx
call edi
push ecx
push 0x6d
push 0x16
push 0x18
push 0xb5
push 0x31
lea eax, [ebx + 0x53c]
push eax
lea ecx, [ebx + 0xe64]
call fcn.0041efe0
push ecx
lea ecx, [ebx + 0x103c]
call fcn.00436130
mov ecx, dword [ebx + 0x1048]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x38], 0x808080
mov eax, dword [eax + 4]
test eax, eax
je 0x4244cc
push 1
push 0
push eax
call edi
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 3
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4aaf50
mov dword [ebp - 4], 4
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebx + 0x103c]
call fcn.00439cc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 6
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4aaf60
mov dword [ebp - 4], 7
mov eax, dword [ebp - 0x98]
test eax, eax
jne 0x424564
cmp dword [ebp - 0x80], 0
mov eax, 0x4a49e4
cmovne eax, dword [ebp - 0x88]
lea edx, [ebp - 0x6c]
mov ecx, eax
call fcn.00444540
mov esi, dword [ebx + 0x1048]
mov eax, dword [esi + 0x40]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [esi + 0x40], eax
mov ecx, dword [ebx + 0x1048]
mov ecx, dword [ecx + 0x44]
mov ecx, dword [ecx]
test ecx, ecx
je 0x4245a2
push 1
push eax
push 0x30
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x4245b0
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
push ecx
push 0x6e
push 0x18
push 0xb4
push 0xb3
push 0x49
lea eax, [ebx + 0x53c]
push eax
lea ecx, [ebx + 0x103c]
call fcn.0041efe0
push ecx
lea ecx, [ebx + 0x103c]
call fcn.00439dd0
mov ecx, dword [ebx + 0x11b8]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x64], 0
mov eax, dword [eax + 4]
test eax, eax
je 0x424611
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x11b8]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x68], 0xffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x424631
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x11b8]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x70], 0xffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x424651
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x11b8]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x78], 0xffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x424671
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x11b8]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x6c], 0x808000
mov eax, dword [eax + 4]
test eax, eax
je 0x424691
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x11b8]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x74], 0x808000
mov eax, dword [eax + 4]
test eax, eax
je 0x4246b1
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x11b8]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x7c], 0x808000
mov eax, dword [eax + 4]
test eax, eax
je 0x4246d1
push 0
push 0
push eax
call edi
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 9
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4aaf90
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0xa4]
push ecx
lea ecx, [ebx + 0x11ac]
call fcn.00439cc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4aaf98
mov dword [ebp - 4], 0xd
mov eax, dword [ebp - 0x98]
test eax, eax
jne 0x424769
cmp dword [ebp - 0x80], 0
mov eax, 0x4a49e4
cmovne eax, dword [ebp - 0x88]
lea edx, [ebp - 0x6c]
mov ecx, eax
call fcn.00444540
mov esi, dword [ebx + 0x11b8]
mov eax, dword [esi + 0x40]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [esi + 0x40], eax
mov ecx, dword [ebx + 0x11b8]
mov ecx, dword [ecx + 0x44]
mov ecx, dword [ecx]
test ecx, ecx
je 0x4247a7
push 1
push eax
push 0x30
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x4247b5
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
mov ecx, dword [ebx + 0x11b8]
mov eax, dword [ecx + 0x44]
mov eax, dword [eax]
test eax, eax
je 0x4247e1
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x4247e8
or dword [ecx + 0x34], 0x10000000
push ecx
push 0x6f
push 0x23
push 0xc8
push 0xd3
push 0x34
lea eax, [ebx + 0x53c]
push eax
lea ecx, [ebx + 0x11ac]
call fcn.0041efe0
mov ecx, dword [ebx + 0x1318]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov esi, eax
mov ecx, dword [esi + 4]
mov dword [esi + 0x3c], 0xffffff
test ecx, ecx
je 0x424843
cmp dword [esi + 0x50], 0
je 0x42483c
push ecx
mov eax, esp
mov dword [eax], ecx
call fcn.004584c0
mov ecx, dword [esi + 4]
add esp, 4
push 0
push 0
push ecx
call edi
mov ecx, dword [ebx + 0x1318]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov esi, eax
mov ecx, dword [esi + 4]
mov dword [esi + 0x48], 1
test ecx, ecx
je 0x42487b
cmp dword [esi + 0x50], 0
je 0x424874
push ecx
mov eax, esp
mov dword [eax], ecx
call fcn.004584c0
mov ecx, dword [esi + 4]
add esp, 4
push 0
push 0
push ecx
call edi
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4aafc8
mov dword [ebp - 4], 0x10
lea ecx, [ebp - 0xa4]
push ecx
lea ecx, [ebx + 0x130c]
call fcn.00439cc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
mov ecx, dword [ebx + 0x1318]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov esi, eax
mov ecx, dword [esi + 4]
mov dword [esi + 0x40], 1
test ecx, ecx
je 0x424904
cmp dword [esi + 0x50], 0
je 0x4248fd
push ecx
mov eax, esp
mov dword [eax], ecx
call fcn.004584c0
mov ecx, dword [esi + 4]
add esp, 4
push 0
push 0
push ecx
call edi
mov ecx, dword [ebx + 0x1318]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov esi, eax
mov ecx, dword [esi + 4]
mov dword [esi + 0x44], 1
test ecx, ecx
je 0x42493c
cmp dword [esi + 0x50], 0
je 0x424935
push ecx
mov eax, esp
mov dword [eax], ecx
call fcn.004584c0
mov ecx, dword [esi + 4]
add esp, 4
push 0
push 0
push ecx
call edi
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4aaf20
mov dword [ebp - 4], 0x13
mov eax, dword [ebp - 0x98]
test eax, eax
jne 0x424983
cmp dword [ebp - 0x80], 0
mov eax, 0x4a49e4
cmovne eax, dword [ebp - 0x88]
lea edx, [ebp - 0x6c]
mov ecx, eax
call fcn.00444540
mov esi, dword [ebx + 0x1318]
mov eax, dword [esi + 0x40]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [esi + 0x40], eax
mov ecx, dword [ebx + 0x1318]
mov ecx, dword [ecx + 0x44]
mov ecx, dword [ecx]
test ecx, ecx
je 0x4249c1
push 1
push eax
push 0x30
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x4249cf
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
push ecx
push 0x70
push 0x48
push 0xb0
push 0xfb
push 0x44
lea eax, [ebx + 0x53c]
push eax
lea ecx, [ebx + 0x130c]
call fcn.0041efe0
push ecx
lea ecx, [ebx + 0x146c]
call fcn.00436130
mov ecx, dword [ebx + 0x1478]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x38], 0x808080
mov eax, dword [eax + 4]
test eax, eax
je 0x424a30
push 1
push 0
push eax
call edi
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4ab030
mov dword [ebp - 4], 0x16
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebx + 0x146c]
call fcn.00439cc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x18
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4aaf60
mov dword [ebp - 4], 0x19
mov eax, dword [ebp - 0x98]
test eax, eax
jne 0x424ac8
cmp dword [ebp - 0x80], 0
mov eax, 0x4a49e4
cmovne eax, dword [ebp - 0x88]
lea edx, [ebp - 0x6c]
mov ecx, eax
call fcn.00444540
mov esi, dword [ebx + 0x1478]
mov eax, dword [esi + 0x40]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [esi + 0x40], eax
mov ecx, dword [ebx + 0x1478]
mov ecx, dword [ecx + 0x44]
mov ecx, dword [ecx]
test ecx, ecx
je 0x424b06
push 1
push eax
push 0x30
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x424b14
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
mov ecx, dword [ebx + 0x1478]
mov eax, dword [ecx + 0x44]
mov eax, dword [eax]
test eax, eax
je 0x424b40
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x424b47
and dword [ecx + 0x34], 0xefffffff
push ecx
push 0x71
push 0x18
push 0xb4
push 0xac
push 0x49
lea eax, [ebx + 0x53c]
push eax
lea ecx, [ebx + 0x146c]
call fcn.0041efe0
push ecx
lea ecx, [ebx + 0x146c]
call fcn.00439dd0
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4aaf20
mov dword [ebp - 4], 0x1c
mov eax, dword [ebp - 0x98]
test eax, eax
jne 0x424bbd
cmp dword [ebp - 0x80], 0
mov eax, 0x4a49e4
cmovne eax, dword [ebp - 0x88]
lea edx, [ebp - 0x6c]
mov ecx, eax
call fcn.00444540
mov esi, dword [ebx + 0x15e8]
mov eax, dword [esi + 0x40]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [esi + 0x40], eax
mov ecx, dword [ebx + 0x15e8]
mov ecx, dword [ecx + 0x44]
mov ecx, dword [ecx]
test ecx, ecx
je 0x424bfb
push 1
push eax
push 0x30
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x424c09
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
mov ecx, dword [ebx + 0x15e8]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov esi, eax
mov ecx, dword [esi + 4]
mov dword [esi + 0x40], 1
test ecx, ecx
je 0x424c53
cmp dword [esi + 0x50], 0
je 0x424c4c
push ecx
mov eax, esp
mov dword [eax], ecx
call fcn.004584c0
mov ecx, dword [esi + 4]
add esp, 4
push 0
push 0
push ecx
call edi
mov ecx, dword [ebx + 0x15e8]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov esi, eax
mov ecx, dword [esi + 4]
mov dword [esi + 0x38], 0xff
test ecx, ecx
je 0x424c8b
cmp dword [esi + 0x50], 0
je 0x424c84
push ecx
mov eax, esp
mov dword [eax], ecx
call fcn.004584c0
mov ecx, dword [esi + 4]
add esp, 4
push 0
push 0
push ecx
call edi
mov ecx, dword [ebx + 0x15e8]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov esi, eax
mov ecx, dword [esi + 4]
mov dword [esi + 0x3c], 0xffffff
test ecx, ecx
je 0x424cc3
cmp dword [esi + 0x50], 0
je 0x424cbc
push ecx
mov eax, esp
mov dword [eax], ecx
call fcn.004584c0
mov ecx, dword [esi + 4]
add esp, 4
push 0
push 0
push ecx
call edi
push ecx
push 0x72
push 0x18
push 0x12b
push 0x164
push 3
lea eax, [ebx + 0x53c]
push eax
lea ecx, [ebx + 0x15dc]
call fcn.0041efe0
mov ecx, dword [ebx + 0x1748]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0xe0], 0
mov dword [eax + 0x3c], 1
mov dword [eax + 0x38], 0
mov eax, dword [eax + 4]
test eax, eax
je 0x424d17
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x1748]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x64], 0
mov eax, dword [eax + 4]
test eax, eax
je 0x424d37
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x1748]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x68], 0xff8800
mov eax, dword [eax + 4]
test eax, eax
je 0x424d57
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x1748]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x70], 0xffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x424d77
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x1748]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x78], 0xc06000
mov eax, dword [eax + 4]
test eax, eax
je 0x424d97
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x1748]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x6c], 0xffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x424db7
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x1748]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x74], 0xff8080
mov eax, dword [eax + 4]
test eax, eax
je 0x424dd7
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x1748]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x7c], 0xffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x424df7
push 0
push 0
push eax
call edi
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4ab03c
mov dword [ebp - 4], 0x1f
lea eax, [ebp - 0xa4]
lea esi, [ebx + 0x173c]
push eax
mov ecx, esi
call fcn.00439cc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
push 0x7f89
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
mov ecx, dword [esi + 0xc]
mov dword [ecx + 0x3c], eax
test eax, eax
je 0x424e89
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x64]
test eax, eax
jne 0x424e73
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x5c]
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
call dword [sym.imp.USER32.dll_SetCursorPos]
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x21
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4ab054
mov dword [ebp - 4], 0x22
mov eax, dword [ebp - 0x98]
test eax, eax
jne 0x424ed0
cmp dword [ebp - 0x80], 0
mov eax, 0x4a49e4
cmovne eax, dword [ebp - 0x88]
lea edx, [ebp - 0x6c]
mov ecx, eax
call fcn.00444540
mov esi, dword [ebx + 0x1748]
mov eax, dword [esi + 0x40]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [esi + 0x40], eax
mov ecx, dword [ebx + 0x1748]
mov ecx, dword [ecx + 0x44]
mov ecx, dword [ecx]
test ecx, ecx
je 0x424f0e
push 1
push eax
push 0x30
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x74]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
test eax, eax
je 0x424f1e
push eax
call esi
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
push ecx
push 0x73
push 0x18
push 0xa8
push 0x143
push 0x4c
lea eax, [ebx + 0x53c]
push eax
lea ecx, [ebx + 0x173c]
call fcn.0041efe0
mov ecx, dword [ebx + 0x18a8]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp dword [eax + 0x38], 0xffffff
je 0x424f7c
mov dword [eax + 0x38], 0xffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x424f7c
push 1
push 0
push eax
call edi
mov ecx, dword [ebx + 0x18a8]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp dword [eax + 0x48], 0
je 0x424fa2
mov dword [eax + 0x48], 0
mov eax, dword [eax + 4]
test eax, eax
je 0x424fa2
push 1
push 0
push eax
call edi
mov ecx, dword [ebx + 0x18a8]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp dword [eax + 0x44], 0
je 0x424fc8
mov dword [eax + 0x44], 0
mov eax, dword [eax + 4]
test eax, eax
je 0x424fc8
push 1
push 0
push eax
call edi
mov ecx, dword [ebx + 0x18a8]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp dword [eax + 0x4c], 1
je 0x424fee
mov dword [eax + 0x4c], 1
mov eax, dword [eax + 4]
test eax, eax
je 0x424fee
push 1
push 0
push eax
call edi
mov ecx, dword [ebx + 0x18a8]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp dword [eax + 0x50], 1
je 0x425014
mov dword [eax + 0x50], 1
mov eax, dword [eax + 4]
test eax, eax
je 0x425014
push 1
push 0
push eax
call edi
mov ecx, dword [ebx + 0x18a8]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp dword [eax + 0x3c], 0xffffff
je 0x42503d
mov dword [eax + 0x3c], 0xffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x42503d
push 1
push 0
push eax
call edi
mov ecx, dword [ebx + 0x18a8]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp dword [eax + 0x40], 0xffffffff
je 0x425063
mov dword [eax + 0x40], 0xffffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x425063
push 1
push 0
push eax
call edi
push ecx
push 0x74
push 0x17c
push 0x130
push 0x2d
push 0x102
push ebx
lea ecx, [ebx + 0x189c]
call fcn.0041efe0
mov ecx, dword [ebx + 0x1a00]
mov eax, dword [ecx]
call dword [eax + 0x28]
push 0x1fa
push 0
mov ecx, 0x4c51a0
mov dword [ebp - 0x70], eax
call fcn.0043f830
mov edx, eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x74], edx
mov ecx, dword [eax + 0x48]
test ecx, ecx
je 0x4250be
cmp ecx, edx
je 0x4250be
push ecx
call esi
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0x74]
mov dword [eax + 0x48], edx
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x4250e8
cmp dword [eax + 0x44], 0
je 0x4250e1
push ecx
mov eax, esp
mov dword [eax], ecx
call fcn.004584c0
mov eax, dword [ebp - 0x70]
add esp, 4
mov ecx, dword [eax + 4]
push 0
push 0
push ecx
call edi
push ecx
push 0x75
push 0x78
push 0x78
push 0
push 0x5c
lea eax, [ebx + 0x189c]
push eax
lea ecx, [ebx + 0x19f4]
call fcn.0041efe0
push ecx
push 0x76
push 2
push 0xfa
push 0xbd
push 0x1e
lea eax, [ebx + 0x189c]
push eax
lea ecx, [ebx + 0x1bcc]
call fcn.0041efe0
mov ecx, dword [ebx + 0x1d38]
mov eax, dword [ecx]
call dword [eax + 0x28]
push 0x1fc
push 0
mov ecx, 0x4c51a0
mov dword [ebp - 0x70], eax
call fcn.0043f830
mov edx, eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x74], edx
mov ecx, dword [eax + 0x48]
test ecx, ecx
je 0x425160
cmp ecx, edx
je 0x425160
push ecx
call esi
mov edx, dword [ebp - 0x74]
mov esi, dword [ebp - 0x70]
mov dword [esi + 0x48], edx
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x42518a
cmp dword [esi + 0x44], 0
je 0x425183
push ecx
mov eax, esp
mov dword [eax], ecx
call fcn.004584c0
mov ecx, dword [esi + 4]
add esp, 4
push 0
push 0
push ecx
call edi
push ecx
push 0x77
push 0x16
push 0x18
push 0xa6
push 0x1b
lea eax, [ebx + 0x189c]
push eax
lea ecx, [ebx + 0x1d2c]
call fcn.0041efe0
push ecx
lea ecx, [ebx + 0x1f04]
call fcn.00436130
mov ecx, dword [ebx + 0x1f10]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x38], 0x808080
mov eax, dword [eax + 4]
test eax, eax
je 0x4251d6
push 1
push 0
push eax
call edi
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x24
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4aaf60
mov dword [ebp - 4], 0x25
mov eax, dword [ebp - 0x98]
test eax, eax
jne 0x42521d
cmp dword [ebp - 0x80], 0
mov eax, 0x4a49e4
cmovne eax, dword [ebp - 0x88]
lea edx, [ebp - 0x6c]
mov ecx, eax
call fcn.00444540
mov esi, dword [ebx + 0x1f10]
mov eax, dword [esi + 0x40]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [esi + 0x40], eax
mov ecx, dword [ebx + 0x1f10]
mov ecx, dword [ecx + 0x44]
mov ecx, dword [ecx]
test ecx, ecx
je 0x42525b
push 1
push eax
push 0x30
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x425269
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
mov ecx, dword [ebx + 0x1f10]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov esi, eax
mov eax, dword [esi + 4]
mov dword [esi + 0x4c], 0
test eax, eax
je 0x4252c9
push 0
push 0
push 0xcc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
cmp dword [esi + 0x4c], 1
push 0
sete al
push eax
push 0xcf
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
push 1
push 0
push dword [esi + 4]
call edi
push ecx
push 0x78
push 0x18
push 0xdd
push 0xa4
push 0x33
lea eax, [ebx + 0x189c]
push eax
lea ecx, [ebx + 0x1f04]
call fcn.0041efe0
push ecx
lea ecx, [ebx + 0x1f04]
call fcn.00439dd0
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x27
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4ab084
mov dword [ebp - 4], 0x28
mov ecx, dword [ebx + 0x1f10]
mov eax, dword [ecx + 0x44]
cmp dword [eax], 0
je 0x425367
mov eax, dword [ecx]
call dword [eax + 0x28]
test eax, eax
je 0x425367
mov ecx, dword [ebp - 0x98]
test ecx, ecx
jne 0x425356
cmp dword [ebp - 0x80], 0
mov ecx, 0x4a49e4
cmovne ecx, dword [ebp - 0x88]
push ecx
push 0
push 0x1501
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
mov ecx, dword [ebx + 0x2080]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0xe0], 0
mov dword [eax + 0x3c], 1
mov dword [eax + 0x38], 0
mov eax, dword [eax + 4]
test eax, eax
je 0x4253aa
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x2080]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x64], 0
mov eax, dword [eax + 4]
test eax, eax
je 0x4253ca
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x2080]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x68], 0xff8800
mov eax, dword [eax + 4]
test eax, eax
je 0x4253ea
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x2080]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x70], 0xffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x42540a
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x2080]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x78], 0xc06000
mov eax, dword [eax + 4]
test eax, eax
je 0x42542a
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x2080]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x6c], 0xffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x42544a
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x2080]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x74], 0xff8080
mov eax, dword [eax + 4]
test eax, eax
je 0x42546a
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x2080]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x7c], 0xffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x42548a
push 0
push 0
push eax
call edi
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4ab0a0
mov dword [ebp - 4], 0x2b
lea eax, [ebp - 0xa4]
lea esi, [ebx + 0x2074]
push eax
mov ecx, esi
call fcn.00439cc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
push 0x7f89
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
mov ecx, dword [esi + 0xc]
mov dword [ecx + 0x3c], eax
test eax, eax
je 0x42551c
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x64]
test eax, eax
jne 0x425506
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x5c]
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
call dword [sym.imp.USER32.dll_SetCursorPos]
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x2d
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4ab054
mov dword [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x98]
test ecx, ecx
jne 0x425562
cmp dword [ebp - 0x80], ecx
mov ecx, 0x4a49e4
cmovne ecx, dword [ebp - 0x88]
lea edx, [ebp - 0x6c]
call fcn.00444540
mov esi, dword [ebx + 0x2080]
mov eax, dword [esi + 0x40]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [esi + 0x40], eax
mov ecx, dword [ebx + 0x2080]
mov ecx, dword [ecx + 0x44]
mov ecx, dword [ecx]
test ecx, ecx
je 0x42559e
push 1
push eax
push 0x30
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x4255ac
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
push ecx
push 0x79
push 0x18
push 0x50
push 0x160
push 0x68
lea eax, [ebx + 0x189c]
push eax
lea ecx, [ebx + 0x2074]
call fcn.0041efe0
mov ecx, dword [ebx + 0x21e0]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x64], 0
mov eax, dword [eax + 4]
test eax, eax
je 0x4255fe
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x21e0]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x68], 0xffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x42561e
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x21e0]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x70], 0xffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x42563e
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x21e0]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x78], 0xffffff
mov eax, dword [eax + 4]
test eax, eax
je 0x42565e
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x21e0]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x6c], 0x808000
mov eax, dword [eax + 4]
test eax, eax
je 0x42567e
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x21e0]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x74], 0x808000
mov eax, dword [eax + 4]
test eax, eax
je 0x42569e
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x21e0]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x7c], 0x808000
mov eax, dword [eax + 4]
test eax, eax
je 0x4256be
push 0
push 0
push eax
call edi
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x30
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4ab0ac
mov dword [ebp - 4], 0x31
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebx + 0x21d4]
call fcn.00439cc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x33
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4aaf60
mov dword [ebp - 4], 0x34
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebx + 0x21d4]
call fcn.00439d50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
mov ecx, dword [ebx + 0x21e0]
mov eax, dword [ecx + 0x44]
mov eax, dword [eax]
test eax, eax
je 0x42577a
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x425781
or dword [ecx + 0x34], 0x10000000
push ecx
push 0x7a
push 0x23
push 0x98
push 0xcc
push 0x48
lea eax, [ebx + 0x189c]
push eax
lea ecx, [ebx + 0x21d4]
call fcn.0041efe0
mov ecx, dword [ebx + 0x2340]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x94], 0xff
mov eax, dword [eax + 4]
test eax, eax
je 0x4257c7
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x2340]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x9c], 0xff8800
mov eax, dword [eax + 4]
test eax, eax
je 0x4257ea
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x2340]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0xa0], 0xececec
mov eax, dword [eax + 4]
test eax, eax
je 0x42580d
push 0
push 0
push eax
call edi
mov ecx, dword [ebx + 0x2340]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov dword [eax + 0x38], 1
mov eax, dword [eax + 4]
test eax, eax
je 0x42582d
push 0
push 0
push eax
call edi
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x36
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4ab0b8
mov dword [ebp - 4], 0x37
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebx + 0x2334]
call fcn.00439cc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x39
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4ab0dc
mov dword [ebp - 4], 0x3a
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebx + 0x2334]
call fcn.00439d50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
push ecx
push 0x7b
push 0x20
push 0x108
push 0x138
push 0x10
lea eax, [ebx + 0x189c]
push eax
lea ecx, [ebx + 0x2334]
call fcn.0041efe0
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x3c
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4ab10c
mov dword [ebp - 4], 0x3d
lea eax, [ebp - 0xa4]
lea edi, [ebx + 0x2494]
push eax
mov ecx, edi
call fcn.00439cc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x3f
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4aaf60
mov dword [ebp - 4], 0x40
lea eax, [ebp - 0xa4]
push eax
mov ecx, edi
call fcn.00439d50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
push ecx
push 0x7c
push 0x40
push 0x108
push 0xf9
push 0x10
lea eax, [ebx + 0x189c]
mov ecx, edi
push eax
call fcn.0041efe0
push ecx
lea ecx, [ebx + 0x25ec]
call fcn.00436130
push ecx
push 0x7d
push 0x18
push 0xec
push 0x1c
push 0xa
push edi
lea ecx, [ebx + 0x25ec]
call fcn.0041efe0
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x42
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4ab11c
mov dword [ebp - 4], 0x43
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebx + 0x25ec]
call fcn.00436200
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
lea edi, [ebx + 0x275c]
push 0x1fd
mov ecx, edi
mov dword [ebp - 0x74], edi
call fcn.004344a0
mov ecx, dword [ebx + 0x2768]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov esi, eax
mov ecx, dword [esi + 4]
mov dword [esi + 0x3c], 3
test ecx, ecx
je 0x425a7d
cmp dword [esi + 0x44], 0
je 0x425a6e
push ecx
mov eax, esp
mov dword [eax], ecx
call fcn.004584c0
mov ecx, dword [esi + 4]
add esp, 4
mov esi, dword [sym.imp.USER32.dll_InvalidateRect]
push 0
push 0
push ecx
call esi
jmp 0x425a83
mov esi, dword [sym.imp.USER32.dll_InvalidateRect]
push ecx
push 0x7e
push 0x1b8
push 0xfc
push 0
push 0
push ebx
mov ecx, edi
call fcn.0041efe0
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x45
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4ab144
mov dword [ebp - 4], 0x46
lea ecx, [ebp - 0xa4]
push ecx
lea ecx, [ebx + 0x2934]
call fcn.00439cc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
mov ecx, dword [ebx + 0x2940]
mov eax, dword [ecx + 0x44]
mov eax, dword [eax]
test eax, eax
je 0x425b07
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x425b0e
and dword [ecx + 0x34], 0xefffffff
push ecx
push 0x7f
push 0x20
push 0x50
push 0x198
push 0xa8
push edi
lea ecx, [ebx + 0x2934]
call fcn.0041efe0
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x48
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4ab150
mov dword [ebp - 4], 0x49
lea eax, [ebp - 0xa4]
lea edi, [ebx + 0x2a94]
push eax
mov ecx, edi
call fcn.00439cc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
lea ecx, [ebp - 0xa4]
call fcn.00405e70
mov dword [ebp - 4], 0x4b
mov dword [ebp - 0xa4], vtable.CWConstString.0
mov dword [ebp - 0x98], 0x4ab174
mov dword [ebp - 4], 0x4c
lea eax, [ebp - 0xa4]
push eax
mov ecx, edi
call fcn.00439d50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00405340
mov ecx, dword [ebx + 0x2aa0]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov ebx, eax
mov ecx, dword [ebx + 4]
mov dword [ebx + 0x38], 0xc0c0c0
test ecx, ecx
je 0x425c03
cmp dword [ebx + 0x50], 0
je 0x425bfc
push ecx
mov eax, esp
mov dword [eax], ecx
call fcn.004584c0
mov ecx, dword [ebx + 4]
add esp, 4
push 0
push 0
push ecx
call esi
push ecx
mov ecx, edi
call fcn.00435c40
push ecx
push 0x80
push 0x18
push 0x6c
push 0x19e
push 4
push dword [ebp - 0x74]
mov ecx, edi
call fcn.0041efe0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00477369
mov esp, ebp
pop ebp
ret