Function at 0x409bf0
Capabilities:
Capture screenshot
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1024
call fcn.0041ef90
push ebx
push esi
push edi
lea edi, [ebp - 0xba4]
mov ecx, 0x2e9
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x45e034]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, 0xae703a
call fcn.0041ea00
mov esi, esp
mov eax, dword [0x45ed18]
push eax
call dword [sym.imp.USER32.dll_GetDC]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0x46
mov dword [ebp - 0x18], 0x1e
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x34], 0x18
mov dword [ebp - 0x30], 0x19
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0x48
mov dword [ebp - 0x48], 0x18
mov esi, esp
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x60], eax
mov esi, esp
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x6c], eax
mov esi, esp
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x78], eax
mov esi, esp
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x84], eax
mov esi, esp
mov eax, dword [ebp - 0x84]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x90], eax
mov esi, esp
push 0x200
lea eax, [ebp - 0x4b0]
push eax
push 0x46d
mov ecx, dword [0x45eb70]
push ecx
call dword [sym.imp.USER32.dll_LoadStringW]
cmp esi, esp
call fcn.0041e9d0
test eax, eax
jne 0x409d5d
mov esi, esp
push 0x10
push 0x44c3bc
push str.Error_loading_resource
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp esi, esp
call fcn.0041e9d0
lea eax, [ebp - 0x4b0]
push eax
call fcn.00425f60
add esp, 4
mov dword [ebp - 0x4bc], eax
cmp dword [0xae53ec], 1
jne 0x40a4e1
mov esi, esp
push str.StartPanel
mov eax, dword [0x45ed18]
push eax
call dword [sym.imp.UxTheme.dll_OpenThemeData]
cmp esi, esp
call fcn.0041e9d0
mov dword [0x45e8a4], eax
cmp dword [0x45e918], 0
je 0x40a044
mov esi, esp
push 0xd
call dword [sym.imp.USER32.dll_GetSysColor]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0xa8], eax
mov esi, esp
mov eax, dword [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.USER32.dll_FillRect]
cmp esi, esp
call fcn.0041e9d0
test eax, eax
jne 0x409e11
mov esi, esp
push 0x10
push 0x44c3bc
push str.Log_Off_Button_Paint_Failed.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x4c8], 0
mov esi, esp
push 0
lea eax, [ebp - 0x54]
push eax
push 2
push 9
mov ecx, dword [ebp - 0x60]
push ecx
mov edx, dword [0x45e8a4]
push edx
call dword [sym.imp.UxTheme.dll_DrawThemeBackground]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
lea eax, [ebp - 0x90]
push eax
push 4
mov ecx, dword [ebp - 0x4c8]
push ecx
call dword [sym.imp.GDI32.dll_GetObjectW]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x4c8]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x9c], eax
mov esi, esp
push 0
push 0x18
push 0x18
push 0
push 0x18
mov eax, dword [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x38]
push ecx
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x3c]
push edx
mov eax, dword [ebp - 0x3c]
add eax, 3
push eax
mov ecx, dword [ebp - 0x38]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.MSIMG32.dll_TransparentBlt]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0xa8]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x4c8]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x84]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x90]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x4c8]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x84]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x4c8]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x78]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x6c]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [0x45ed18]
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x60]
push eax
mov ecx, dword [0x45ed18]
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x78]
push eax
mov ecx, dword [0x45ed18]
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp esi, esp
call fcn.0041e9d0
jmp 0x40a403
mov dword [ebp - 0x4e0], 0
mov dword [ebp - 0x4dc], 0x50
mov dword [ebp - 0x4d8], 0x190
mov dword [ebp - 0x4d4], 0x190
mov esi, esp
mov eax, dword [ebp - 0x4d4]
push eax
mov ecx, dword [ebp - 0x4d8]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x4ec], eax
mov esi, esp
mov eax, dword [ebp - 0x4ec]
push eax
mov ecx, dword [ebp - 0x78]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x4f8], eax
mov dword [ebp - 0x504], 0
mov esi, esp
push 0
lea eax, [ebp - 0x4e0]
push eax
push 0
push 8
mov ecx, dword [ebp - 0x78]
push ecx
mov edx, dword [0x45e8a4]
push edx
call dword [sym.imp.UxTheme.dll_DrawThemeBackground]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
lea eax, [ebp - 0x4f8]
push eax
push 4
mov ecx, dword [ebp - 0x504]
push ecx
call dword [sym.imp.GDI32.dll_GetObjectW]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x504]
push eax
mov ecx, dword [ebp - 0x78]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x9c], eax
mov esi, esp
push 0xcc0020
push 0x168
push 0xaa
mov eax, dword [ebp - 0x78]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
push 0
push 0
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x510], 0
mov esi, esp
push 0
lea eax, [ebp - 0x54]
push eax
push 1
push 9
mov ecx, dword [ebp - 0x60]
push ecx
mov edx, dword [0x45e8a4]
push edx
call dword [sym.imp.UxTheme.dll_DrawThemeBackground]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
lea eax, [ebp - 0x90]
push eax
push 4
mov ecx, dword [ebp - 0x510]
push ecx
call dword [sym.imp.GDI32.dll_GetObjectW]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x510]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x9c], eax
mov esi, esp
push 0
push 0x18
push 0x18
push 0
push 0x18
mov eax, dword [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x38]
push ecx
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x3c]
push edx
mov eax, dword [ebp - 0x3c]
add eax, 3
push eax
mov ecx, dword [ebp - 0x38]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.MSIMG32.dll_TransparentBlt]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x510]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x504]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x84]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x90]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x4ec]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x4f8]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x84]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x510]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x4f8]
push eax
mov ecx, dword [ebp - 0x78]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x504]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x4ec]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x78]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x6c]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [0x45ed18]
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x60]
push eax
mov ecx, dword [0x45ed18]
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x78]
push eax
mov ecx, dword [0x45ed18]
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push 1
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.GDI32.dll_SetBkMode]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push 0xe
call dword [sym.imp.USER32.dll_GetSysColor]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
cmp esi, esp
call fcn.0041e9d0
call fcn.0041cab0
mov dword [ebp - 0x51c], eax
mov esi, esp
mov eax, dword [ebp - 0x51c]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x4bc]
push eax
lea ecx, [ebp - 0x4b0]
push ecx
push 8
push 0x1c
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.GDI32.dll_TextOutW]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x51c]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x51c]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [0x45e8a4]
push eax
call dword [sym.imp.UxTheme.dll_CloseThemeData]
cmp esi, esp
call fcn.0041e9d0
jmp 0x40ab08
mov dword [ebp - 0x528], 0
mov dword [ebp - 0x540], 0
mov dword [ebp - 0x54c], 1
push 0x208
push 0
lea eax, [ebp - 0x75c]
push eax
call fcn.00420f80
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0x96c]
push eax
call fcn.00420f80
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0xb7c]
push eax
call fcn.00420f80
add esp, 0xc
mov esi, esp
push 0x104
lea eax, [ebp - 0x75c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
cmp esi, esp
call fcn.0041e9d0
test eax, eax
jne 0x40a587
mov esi, esp
push 0x10
push 0x44c3bc
push str.Cannot_locate_OS_installation_directory
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x54c], 0
push str.ReactOS
lea eax, [ebp - 0x75c]
push eax
call fcn.0041e0a0
add esp, 8
mov dword [ebp - 0xb88], eax
cmp dword [ebp - 0xb88], 0
je 0x40a5b4
mov dword [ebp - 0x528], 1
push str.System32_shell32.dll
push 0x104
lea eax, [ebp - 0x96c]
push eax
call fcn.00425800
add esp, 0xc
lea eax, [ebp - 0x75c]
push eax
push 0x104
lea ecx, [ebp - 0xb7c]
push ecx
call fcn.004254c0
add esp, 0xc
lea eax, [ebp - 0x96c]
push eax
push 0x104
lea ecx, [ebp - 0xb7c]
push ecx
call fcn.004254c0
add esp, 0xc
lea eax, [ebp - 0xb7c]
push eax
call fcn.0041dfa0
add esp, 4
test eax, eax
jne 0x40a63d
mov esi, esp
push 0x10
push 0x44c3bc
push str.File_not_found:_shell32.dll_.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x54c], 0
cmp dword [0x45e918], 0
je 0x40a8ba
mov esi, esp
push 0x1d
call dword [sym.imp.USER32.dll_GetSysColor]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0xa8], eax
mov esi, esp
mov eax, dword [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.USER32.dll_FillRect]
cmp esi, esp
call fcn.0041e9d0
test eax, eax
jne 0x40a6b0
mov esi, esp
push 0x10
push 0x44c3bc
push str.Log_Off_Button_Paint_Failed.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp esi, esp
call fcn.0041e9d0
cmp dword [ebp - 0x54c], 1
jne 0x40a7db
cmp dword [ebp - 0x528], 1
jne 0x40a755
mov esi, esp
push 0xce
lea eax, [ebp - 0xb7c]
push eax
mov ecx, dword [0x45e89c]
push ecx
call dword [sym.imp.SHELL32.dll_ExtractIconW]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x534], eax
mov esi, esp
mov eax, dword [ebp - 0x534]
push eax
push 0
push 0
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.USER32.dll_DrawIcon]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x534]
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x534]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
jmp 0x40a7db
mov esi, esp
push 0xd3
lea eax, [ebp - 0xb7c]
push eax
mov ecx, dword [0x45e89c]
push ecx
call dword [sym.imp.SHELL32.dll_ExtractIconW]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x534], eax
mov esi, esp
mov eax, dword [ebp - 0x534]
push eax
push 0
push 0
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.USER32.dll_DrawIcon]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x534]
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x534]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push 1
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.GDI32.dll_SetBkMode]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push 0xe
call dword [sym.imp.USER32.dll_GetSysColor]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
cmp esi, esp
call fcn.0041e9d0
call fcn.0041cab0
mov dword [ebp - 0xb94], eax
mov esi, esp
mov eax, dword [ebp - 0xb94]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x4bc]
push eax
lea ecx, [ebp - 0x4b0]
push ecx
push 8
push 0x1e
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.GDI32.dll_TextOutW]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0xb94]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0xb94]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0xa8]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
jmp 0x40ab08
mov dword [ebp - 0xa8], 5
mov esi, esp
mov eax, dword [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.USER32.dll_FillRect]
cmp esi, esp
call fcn.0041e9d0
test eax, eax
jne 0x40a903
mov esi, esp
push 0x10
push 0x44c3bc
push str.Log_Off_Button_Paint_Failed.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp esi, esp
call fcn.0041e9d0
cmp dword [ebp - 0x54c], 1
jne 0x40aa2e
cmp dword [ebp - 0x528], 1
jne 0x40a9a8
mov esi, esp
push 0xce
lea eax, [ebp - 0xb7c]
push eax
mov ecx, dword [0x45e89c]
push ecx
call dword [sym.imp.SHELL32.dll_ExtractIconW]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x534], eax
mov esi, esp
mov eax, dword [ebp - 0x534]
push eax
push 0
push 0
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.USER32.dll_DrawIcon]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x534]
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x534]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
jmp 0x40aa2e
mov esi, esp
push 0xd3
lea eax, [ebp - 0xb7c]
push eax
mov ecx, dword [0x45e89c]
push ecx
call dword [sym.imp.SHELL32.dll_ExtractIconW]
cmp esi, esp
call fcn.0041e9d0
mov dword [ebp - 0x534], eax
mov esi, esp
mov eax, dword [ebp - 0x534]
push eax
push 0
push 0
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.USER32.dll_DrawIcon]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x534]
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x534]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push 1
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.GDI32.dll_SetBkMode]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push 0x1a
call dword [sym.imp.USER32.dll_GetSysColor]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
cmp esi, esp
call fcn.0041e9d0
call fcn.0041cab0
mov dword [ebp - 0xba0], eax
mov esi, esp
mov eax, dword [ebp - 0xba0]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x4bc]
push eax
lea ecx, [ebp - 0x4b0]
push ecx
push 8
push 0x1e
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.GDI32.dll_TextOutW]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0xba0]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0xba0]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0xa8]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x84]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x90]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x84]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x78]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x6c]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x60]
push eax
mov ecx, dword [0x45ed18]
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [0x45ed18]
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0x78]
push eax
mov ecx, dword [0x45ed18]
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp esi, esp
call fcn.0041e9d0
mov esi, esp
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [0x45ed18]
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp esi, esp
call fcn.0041e9d0
push edx
mov ecx, ebp
push eax
lea edx, [0x40ac6c]
call fcn.0041e970
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041ea40
add esp, 0x1024
cmp ebp, esp
call fcn.0041e9d0
mov esp, ebp
pop ebp
ret