Function at 0x4052a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x440f9b
mov eax, dword fs:[0]
push eax
sub esp, 0x484
mov eax, dword [0x452650]
xor eax, esp
mov dword [esp + 0x47c], eax
push ebp
push esi
push edi
mov eax, dword [0x452650]
xor eax, esp
push eax
lea eax, [esp + 0x494]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esi + 0x58]
shr eax, 2
test eax, eax
mov dword [esp + 0x14], esi
jle 0x405ad0
lea eax, [esp + 0x50]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov edx, dword [esi + 0x20]
lea ecx, [esp + 0x50]
push ecx
push edx
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [esi + 0x80]
test ecx, ecx
mov dword [esp + 0x34], ecx
lea edi, [esi + 0x54]
jl 0x40538f
mov eax, dword [edi + 4]
mov edx, eax
shr edx, 2
add edx, 0xffffffff
cmp ecx, edx
jg 0x40538f
add ecx, ecx
add ecx, ecx
js 0x405335
cmp ecx, eax
jg 0x405335
mov dword [edi + 8], ecx
mov esi, dword [edi + 8]
lea ecx, [esi + 4]
cmp ecx, eax
mov ebp, 4
jle 0x40534a
sub eax, esi
mov ebp, eax
js 0x405363
mov edx, dword [edi + 0xc]
push ebp
add edx, esi
push edx
lea eax, [esp + 0x24]
push eax
call fcn.00431200
add esp, 0xc
add esi, ebp
mov dword [edi + 8], esi
mov ebp, dword [esp + 0x1c]
lea esi, [ebp + 0x24]
mov ecx, 0xd
lea edi, [esp + 0x58]
rep movsd dword es:[edi], dword [esi]
call fcn.00416f1e
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x405397
push 0x80004005
call fcn.00402e80
xor ebp, ebp
mov dword [esp + 0x1c], ebp
jmp 0x405367
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x3c], eax
mov esi, dword [esp + 0x14]
mov dword [esp + 0x49c], 0
mov eax, dword [ebp + 0x14]
sub eax, dword [ebp + 0xc]
mov ecx, dword [ebp]
add eax, dword [ebp + 4]
mov edx, dword [ebp + 0x10]
sub eax, dword [esi + 0xbc]
push 0x3ff
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x91]
push 0
push eax
mov dword [esp + 0x38], ecx
mov dword [esp + 0x44], edx
mov byte [esp + 0x98], 0
call fcn.0042c580
mov eax, dword [esi + 0x58]
lea ecx, [esp + 0x98]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x40]
shr eax, 2
add esp, 0xc
cmp ecx, eax
mov edx, ecx
mov dword [esp + 0x30], edx
jge 0x405994
mov edi, dword [esp + 0x7c]
lea esi, [ecx*4]
mov dword [esp + 0x24], esi
jmp 0x405438
mov edx, dword [esp + 0x30]
mov esi, dword [esp + 0x24]
test edx, edx
jl 0x4054a3
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x58]
mov ecx, eax
shr ecx, 2
add ecx, 0xffffffff
cmp edx, ecx
jg 0x4054a3
test esi, esi
jl 0x40545e
cmp esi, eax
jg 0x40545e
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x5c], esi
mov edx, dword [esp + 0x14]
mov esi, dword [edx + 0x5c]
lea ecx, [esi + 4]
cmp ecx, eax
mov dword [esp + 0x18], 4
jle 0x40547c
sub eax, esi
mov dword [esp + 0x18], eax
js 0x4054a9
mov eax, dword [edx + 0x60]
mov ebp, dword [esp + 0x18]
push ebp
add eax, esi
push eax
lea ecx, [esp + 0x24]
push ecx
call fcn.00431200
mov edx, dword [esp + 0x20]
add esp, 0xc
add esi, ebp
mov ebp, dword [esp + 0x1c]
mov dword [edx + 0x5c], esi
jmp 0x4054a9
xor ebp, ebp
mov dword [esp + 0x1c], ebp
mov eax, dword [ebp + 4]
mov ecx, dword [esp + 0x14]
sub eax, dword [ecx + 0xbc]
mov edx, dword [esp + 0x4a4]
cmp eax, dword [edx + 0xc]
jg 0x405998
mov eax, dword [esp + 0x38]
cmp eax, dword [ebp + 0x10]
jne 0x405544
cmp edi, dword [ebp + 0x48]
jne 0x405544
mov ecx, dword [esp + 0x80]
cmp ecx, dword [ebp + 0x4c]
jne 0x405544
mov edx, dword [esp + 0x84]
cmp edx, dword [ebp + 0x50]
jne 0x405544
mov eax, dword [esp + 0x58]
cmp eax, dword [ebp + 0x24]
jne 0x405544
mov ecx, dword [esp + 0x88]
cmp ecx, dword [ebp + 0x54]
jne 0x405544
lea esi, [ebp + 0x28]
lea eax, [esp + 0x5c]
mov cl, byte [eax]
cmp cl, byte [esi]
jne 0x405528
test cl, cl
je 0x405524
mov cl, byte [eax + 1]
cmp cl, byte [esi + 1]
jne 0x405528
add eax, 2
add esi, 2
test cl, cl
jne 0x405508
xor eax, eax
jmp 0x40552d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x405544
cmp byte [ebp + 0x18], 0xff
jne 0x405867
cmp byte [ebp + 0x19], al
jle 0x40562e
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x80]
lea edx, [esp + 0x5c]
push edx
push 0x31
mov edx, dword [esp + 0x90]
push 0
push 0
push 0
push 0x86
push 0
push eax
neg edi
sbb edi, edi
push ecx
and edi, 0x12c
add edi, 0x190
push edi
push 0
push 0
push 0
push edx
call dword [sym.imp.GDI32.dll_CreateFontA]
mov edi, eax
push edi
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
mov esi, eax
mov eax, dword [esp + 0x58]
push eax
push ebx
call dword [sym.imp.GDI32.dll_SetTextColor]
lea eax, [esp + 0x8c]
lea ecx, [eax + 1]
nop
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x4055b0
mov edx, dword [esp + 0x28]
sub eax, ecx
push eax
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0x90]
push ecx
push edx
push eax
push ebx
call dword [sym.imp.GDI32.dll_TextOutA]
push esi
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
lea esi, [ebp + 0x24]
mov ecx, 0xd
lea edi, [esp + 0x58]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0x14]
sub eax, dword [ebp + 0xc]
mov edx, dword [ebp]
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x14]
sub eax, dword [ecx + 0xbc]
mov dword [esp + 0x2c], edx
add eax, dword [ebp + 4]
lea edx, [esp + 0x8c]
mov dword [esp + 0x28], eax
mov byte [esp + 0x8c], 0
mov dword [esp + 0x20], edx
cmp byte [ebp + 0x18], 0xff
jne 0x405867
mov al, byte [ebp + 0x19]
test al, al
jle 0x405867
cmp al, 1
jne 0x40566b
movzx eax, word [ebp + 0xc]
movzx ecx, word [ebp + 8]
mov edx, dword [esp + 0x28]
push 0
push eax
mov eax, dword [esp + 0x34]
push ecx
push edx
push eax
mov eax, dword [ebp + 0x1c]
push ebx
call fcn.00403b20
jmp 0x405821
cmp al, 2
jne 0x405710
mov edx, dword [ebp + 0x54]
mov edi, dword [ebp + 0x1c]
lea ecx, [ebp + 0x28]
push ecx
push 0x31
push 0
push 0
push 0
push 0x86
push 0
push 1
push 0
push 0x190
push 0
push 0
push 0
push edx
call dword [sym.imp.GDI32.dll_CreateFontA]
mov esi, eax
push esi
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
cmp dword [eax + 0xc4], ebp
jne 0x4056cc
cmp dword [eax + 0xc8], 0
jne 0x4056cc
push 0xff
jmp 0x4056d1
push 0xff0000
push ebx
call dword [sym.imp.GDI32.dll_SetTextColor]
mov eax, edi
lea ecx, [eax + 1]
lea ecx, [ecx]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x4056e0
sub eax, ecx
mov ecx, dword [esp + 0x2c]
push eax
mov eax, dword [esp + 0x2c]
push edi
push eax
push ecx
push ebx
call dword [sym.imp.GDI32.dll_TextOutA]
mov edx, dword [esp + 0x18]
push edx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push esi
jmp 0x40581b
cmp al, 3
jne 0x405825
mov edi, dword [esp + 0x14]
cmp dword [edi + 0xc4], ebp
mov dword [esp + 0x18], 0
jne 0x40573e
xor eax, eax
cmp dword [edi + 0xc8], eax
setne al
add eax, 1
mov dword [esp + 0x18], eax
movzx ecx, word [ebp + 8]
mov esi, dword [ebp + 0x1c]
mov edx, ecx
imul edx, dword [esp + 0x18]
push edx
movzx edx, word [ebp + 0xc]
push edx
mov edx, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x34]
push ecx
push edx
lea eax, [esi + 0x808]
push ebx
call fcn.00403b20
mov ecx, dword [ebp + 0x14]
mov eax, dword [ebp + 4]
sub ecx, dword [edi + 0xbc]
mov edi, dword [ebp]
lea edx, [eax + ecx]
sub eax, dword [ebp + 0xc]
mov dword [esp + 0x18], edx
mov edx, dword [ebp + 8]
add eax, ecx
lea ecx, [ebp + 0x28]
push ecx
push 0x31
push 0
push 0
push 0
push 0x86
push 0
push 0
push 0
push 0x190
push 0
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x44]
add edx, edi
push 0
mov dword [esp + 0x70], edi
mov dword [esp + 0x78], edx
mov dword [esp + 0x7c], eax
mov edx, dword [ebp + 0x54]
push 0
push edx
call dword [sym.imp.GDI32.dll_CreateFontA]
mov edi, eax
push edi
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push 1
push ebx
mov dword [esp + 0x20], eax
call dword [sym.imp.GDI32.dll_SetBkMode]
mov eax, dword [ebp + 0x24]
push eax
push ebx
call dword [sym.imp.GDI32.dll_SetTextColor]
mov eax, esi
lea ecx, [eax + 1]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x4057f0
push 0x8025
sub eax, ecx
lea ecx, [esp + 0x44]
push ecx
push eax
push esi
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
mov edx, dword [esp + 0x18]
push edx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edi, dword [esp + 0x7c]
mov ecx, dword [esp + 0x30]
add ecx, 1
js 0x405987
mov esi, dword [esp + 0x14]
lea edx, [esp + 0x34]
add esi, 0x54
call fcn.004038c0
mov eax, dword [esp + 0x34]
test eax, eax
je 0x405867
mov ecx, dword [eax]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x2c], ecx
mov ecx, dword [eax + 0x14]
sub ecx, dword [eax + 0xc]
add ecx, dword [eax + 4]
sub ecx, dword [edx + 0xbc]
mov dword [esp + 0x28], ecx
cmp byte [ebp + 0x18], 0xff
lea eax, [ebp + 0x18]
jne 0x405876
cmp byte [ebp + 0x19], 0
jg 0x4058a5
mov edx, dword [esp + 0x20]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
mov byte [eax + edx], cl
add eax, 1
test cl, cl
jne 0x405880
lea eax, [ebp + 0x18]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x405892
mov edi, dword [esp + 0x7c]
sub eax, edx
add dword [esp + 0x20], eax
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x58]
shr eax, 2
add eax, 0xffffffff
cmp dword [esp + 0x30], eax
jne 0x40595f
mov edx, dword [esp + 0x84]
mov eax, dword [esp + 0x80]
lea ecx, [esp + 0x5c]
push ecx
push 0x31
mov ecx, dword [esp + 0x90]
push 0
push 0
push 0
push 0x86
push 0
push edx
neg edi
sbb edi, edi
push eax
and edi, 0x12c
add edi, 0x190
push edi
push 0
push 0
push 0
push ecx
call dword [sym.imp.GDI32.dll_CreateFontA]
mov edi, eax
push edi
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [esp + 0x58]
push edx
push ebx
mov esi, eax
call dword [sym.imp.GDI32.dll_SetTextColor]
lea eax, [esp + 0x8c]
lea ecx, [eax + 1]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x405927
mov edx, dword [esp + 0x2c]
sub eax, ecx
mov ecx, dword [esp + 0x28]
push eax
lea eax, [esp + 0x90]
push eax
push ecx
push edx
push ebx
call dword [sym.imp.GDI32.dll_TextOutA]
push esi
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edi, dword [esp + 0x7c]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x30]
mov eax, dword [eax + 0x58]
add dword [esp + 0x24], 4
add ecx, 1
shr eax, 2
cmp ecx, eax
mov dword [esp + 0x30], ecx
jl 0x405430
mov edx, dword [esp + 0x14]
jmp 0x40599a
mov dword [esp + 0x34], 0
jmp 0x405867
mov edx, esi
jmp 0x40599a
mov edx, ecx
mov esi, dword [edx + 0x78]
cmp esi, dword [edx + 0x7c]
mov dword [esp + 0x24], esi
jg 0x405aa5
lea edi, [esi*4]
mov dword [esp + 0x20], edi
jmp 0x4059c8
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
test edi, edi
jl 0x405aa5
mov eax, dword [edx + 0x58]
shr eax, 2
cmp esi, eax
jge 0x405aa5
mov eax, dword [edx + 0x58]
mov ecx, eax
shr ecx, 2
add ecx, 0xffffffff
cmp esi, ecx
jg 0x405a30
cmp edi, eax
jg 0x4059f4
mov dword [edx + 0x5c], edi
mov esi, dword [edx + 0x5c]
lea ecx, [esi + 4]
cmp ecx, eax
mov edi, 4
jle 0x405a09
sub eax, esi
mov edi, eax
js 0x405a36
mov ebp, dword [esp + 0x14]
mov edx, dword [ebp + 0x60]
push edi
add edx, esi
push edx
lea eax, [esp + 0x24]
push eax
call fcn.00431200
mov edx, dword [esp + 0x20]
add esp, 0xc
add esi, edi
mov dword [ebp + 0x5c], esi
mov ebp, dword [esp + 0x1c]
jmp 0x405a36
xor ebp, ebp
mov dword [esp + 0x1c], ebp
cmp dword [ebp + 0x58], 0
je 0x405a8c
push 0xffffff
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov edi, eax
push edi
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 8]
push 0x5a0049
push ecx
mov ecx, dword [esp + 0x1c]
mov esi, eax
mov eax, dword [ebp + 4]
sub eax, dword [ecx + 0xbc]
push edx
mov edx, dword [ebp]
push eax
push edx
push ebx
call dword [sym.imp.GDI32.dll_PatBlt]
push esi
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
add dword [esp + 0x20], 4
add eax, 1
cmp eax, dword [edx + 0x7c]
mov dword [esp + 0x24], eax
jle 0x4059c0
mov dword [esp + 0x49c], 0xffffffff
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405ad0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x494]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x47c]
xor ecx, esp
call fcn.0042aa3b
add esp, 0x490
ret 4