Function at 0x426e8c
Capabilities:
Check for unmoving mouse cursor
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x23
push 0
push 0
dec ecx
jne 0x426e94
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x427d17
push dword fs:[eax]
mov dword fs:[eax], esp
cmp ebx, 0x201
jne 0x426f30
push 1
push 0
push 0
push 0
push 0x42cd28
call sub.user32.dll_PeekMessageA
lea eax, [ebp - 0x88]
push eax
mov ecx, 0x427d28
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e8e0
mov eax, dword [ebp - 0x88]
mov edx, 0x427d48
call fcn.00404668
je 0x427cec
lea eax, [ebp - 0x8c]
push eax
mov ecx, 0x427d4c
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e8e0
mov eax, dword [ebp - 0x8c]
mov edx, 0x427d48
call fcn.00404668
jne 0x426f30
call fcn.00425554
jmp 0x427cec
lea eax, [ebp - 0x90]
push eax
mov ecx, 0x427d54
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e8e0
mov eax, dword [ebp - 0x90]
mov edx, 0x427d48
call fcn.00404668
jne 0x4270a2
cmp ebx, 0x201
jne 0x427cec
push 0x427d30
push 0x427d5c
call sub.user32.dll_FindWindowA
mov esi, eax
test esi, esi
jne 0x426fb5
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x427d68
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e8e0
cmp dword [ebp - 0x1c], 0
je 0x426fb5
mov eax, dword [ebp - 0x1c]
call fcn.0040471c
push eax
push 0x427d5c
call sub.user32.dll_FindWindowA
mov esi, eax
test esi, esi
je 0x427cec
call sub.user32.dll_GetForegroundWindow
xor edx, edx
push edx
push eax
mov eax, esi
cdq
cmp edx, dword [esp + 4]
jne 0x426fd2
cmp eax, dword [esp]
pop edx
pop eax
jne 0x427cec
lea eax, [ebp - 8]
push eax
call sub.user32.dll_GetCursorPos
mov dword [ebp - 0x84], 0x181
mov dword [ebp - 0x80], 0x1ca
mov dword [ebp - 0x7c], 0x1ae
mov dword [ebp - 0x78], 0x1de
push dword [ebp - 4]
push dword [ebp - 8]
lea eax, [ebp - 0x84]
push eax
call sub.user32.dll_PtInRect
test eax, eax
je 0x42703e
lea eax, [ebp - 0x94]
call fcn.00426c44
mov eax, dword [ebp - 0x94]
mov edx, 0x427d7c
call fcn.0040db58
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
call fcn.00424e64
mov dword [ebp - 0x84], 0x17e
mov dword [ebp - 0x80], 0x224
mov dword [ebp - 0x7c], 0x1b0
mov dword [ebp - 0x78], 0x238
push dword [ebp - 4]
push dword [ebp - 8]
lea eax, [ebp - 0x84]
push eax
call sub.user32.dll_PtInRect
test eax, eax
je 0x427cec
lea eax, [ebp - 0x98]
call fcn.00426c44
mov eax, dword [ebp - 0x98]
mov edx, 0x427d7c
call fcn.0040db58
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
call fcn.00424e64
jmp 0x427cec
cmp ebx, 0x201
jne 0x427cec
xor eax, eax
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x18], eax
mov ebx, 0x13
lea eax, [ebp - 0x74]
xor edx, edx
mov dword [eax], edx
add eax, 4
dec ebx
jne 0x4270ca
push 0x427d80
push 0x427d5c
call sub.user32.dll_FindWindowA
push 0
push 0x427d8c
push 0
push eax
call sub.user32.dll_FindWindowExA
push 0x42cd44
push pe_nt_image_headers32
push 0xd
push eax
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0x9c]
push eax
mov ecx, 0x427d98
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e8e0
mov eax, dword [ebp - 0x9c]
push eax
lea eax, [ebp - 0xa0]
mov edx, 0x42cd44
mov ecx, pe_nt_image_headers32
call fcn.004044d4
mov edx, dword [ebp - 0xa0]
pop eax
call fcn.00404668
je 0x427164
push 0x42cd44
push 1
mov ecx, 0x427d98
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e68c
push 0x427d30
push 0x427d5c
call sub.user32.dll_FindWindowA
mov esi, eax
test esi, esi
jne 0x4271ac
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x427d68
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e8e0
cmp dword [ebp - 0x1c], 0
je 0x4271ac
mov eax, dword [ebp - 0x1c]
call fcn.0040471c
push eax
push 0x427d5c
call sub.user32.dll_FindWindowA
mov esi, eax
test esi, esi
je 0x427cec
call sub.user32.dll_GetForegroundWindow
xor edx, edx
push edx
push eax
mov eax, esi
cdq
cmp edx, dword [esp + 4]
jne 0x4271c9
cmp eax, dword [esp]
pop edx
pop eax
jne 0x427cec
mov ebx, 0x13
lea edi, [ebp - 0x74]
push 0
push 0x427da0
mov eax, dword [ebp - 0xc]
push eax
push esi
call sub.user32.dll_FindWindowExA
mov dword [edi], eax
mov eax, dword [edi]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x427210
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x42720a
inc dword [ebp - 0x10]
add edi, 4
dec ebx
jne 0x4271d9
lea eax, [ebp - 8]
push eax
call sub.user32.dll_GetCursorPos
mov dword [ebp - 0x84], 0x1a9
mov dword [ebp - 0x80], 0x151
mov dword [ebp - 0x7c], 0x1ef
mov dword [ebp - 0x78], 0x16d
cmp dword [ebp - 0x10], 2
jne 0x4272d6
push dword [ebp - 4]
push dword [ebp - 8]
lea eax, [ebp - 0x84]
push eax
call sub.user32.dll_PtInRect
test eax, eax
je 0x4272d6
mov edi, dword [ebp - 0x14]
test edi, edi
jle 0x4272d6
lea esi, [ebp - 0x74]
mov ebx, 0x42ce44
cmp dword [esi], 0
je 0x4272ca
mov eax, dword [esi]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x4272ca
mov eax, ebx
push eax
push pe_nt_image_headers32
push 0xd
mov eax, dword [esi]
push eax
call sub.user32.dll_SendMessageA
cmp dword [ebp - 0x18], 0
jne 0x4272b0
push ebx
push 1
mov ecx, 0x427da8
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e68c
mov eax, dword [esi]
mov dword [0x42e144], eax
jmp 0x4272c7
push ebx
push 1
mov ecx, 0x427dac
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e68c
inc dword [ebp - 0x18]
add ebx, 0x100
add esi, 4
dec edi
jne 0x427267
mov dword [ebp - 0x84], 0x134
mov dword [ebp - 0x80], 0x8d
mov dword [ebp - 0x7c], 0x1dc
mov dword [ebp - 0x78], 0x1dd
cmp dword [ebp - 0x10], 0
jne 0x427588
cmp dword [ebp - 0x14], 2
jl 0x427588
push dword [ebp - 4]
push dword [ebp - 8]
lea eax, [ebp - 0x84]
push eax
call sub.user32.dll_PtInRect
test eax, eax
je 0x427588
lea eax, [ebp - 0xa4]
push eax
mov ecx, 0x427db0
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e8e0
mov eax, dword [ebp - 0xa4]
mov edx, 0x427d48
call fcn.00404668
jne 0x427355
call fcn.00426cd4
mov ecx, 0x427dac
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e954
test al, al
je 0x427556
mov ecx, 0x427da8
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e954
test al, al
je 0x427556
push 0x427db8
push 1
mov ecx, 0x427d54
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e68c
lea eax, [ebp - 0xa8]
mov edx, 0x42cd44
mov ecx, pe_nt_image_headers32
call fcn.004044d4
cmp dword [ebp - 0xa8], 0
je 0x4273e3
push 0x42cd44
push 1
mov ecx, 0x427dbc
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e68c
jmp 0x427420
lea eax, [ebp - 0xac]
push eax
mov ecx, 0x427d98
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e8e0
mov eax, dword [ebp - 0xac]
call fcn.0040471c
push eax
push 1
mov ecx, 0x427dbc
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e68c
xor eax, eax
push ebp
push 0x427467
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xb0]
push eax
mov ecx, 0x427dc4
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e8e0
mov eax, dword [ebp - 0xb0]
call fcn.0040c610
mov ebx, eax
mov eax, ebx
call fcn.00426d1c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x427471
mov eax, dword [0x42e150]
call fcn.00405594
mov edi, eax
test edi, edi
jl 0x4274ea
inc edi
xor ebx, ebx
mov edx, dword [0x42e150]
mov edx, dword [edx + ebx*8]
mov eax, dword [ebp - 4]
cmp edx, eax
jge 0x4274e6
mov edx, dword [0x42e150]
cmp eax, dword [edx + ebx*8 + 4]
jge 0x4274e6
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0xb8]
lea eax, [ebx + 1]
call fcn.0040c670
mov ecx, dword [ebp - 0xb8]
lea eax, [ebp - 0xb4]
mov edx, 0x427ddc
call fcn.00404570
mov eax, dword [ebp - 0xb4]
call fcn.0040471c
mov ecx, eax
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e8e0
jmp 0x4274ea
inc ebx
dec edi
jne 0x427484
push dword [ebp - 0x20]
push 0x427df0
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 8]
call fcn.0040c670
push dword [ebp - 0xc0]
push 0x427dfc
lea edx, [ebp - 0xc4]
mov eax, dword [ebp - 4]
call fcn.0040c670
push dword [ebp - 0xc4]
push 0x427e08
lea eax, [ebp - 0xbc]
mov edx, 6
call fcn.004045e4
mov eax, dword [ebp - 0xbc]
call fcn.0040471c
push eax
push 1
mov ecx, 0x427e0c
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e68c
lea eax, [ebp - 0xc8]
push eax
mov ecx, 0x427db0
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e8e0
mov eax, dword [ebp - 0xc8]
mov edx, 0x427d48
call fcn.00404668
jne 0x427588
call fcn.00426cd4
mov dword [ebp - 0x84], 0x1e9
mov dword [ebp - 0x80], 0x66
mov dword [ebp - 0x7c], 0x1f9
mov dword [ebp - 0x78], 0x7f
cmp dword [ebp - 0x10], 0
jne 0x427869
cmp dword [ebp - 0x14], 2
jl 0x427869
push dword [ebp - 4]
push dword [ebp - 8]
lea eax, [ebp - 0x84]
push eax
call sub.user32.dll_PtInRect
test eax, eax
je 0x427869
call fcn.00426cd4
mov ebx, 1
lea eax, [ebp - 0x1c]
call fcn.0040426c
cmp ebx, 0x63
jg 0x42762b
lea edx, [ebp - 0xcc]
mov eax, ebx
call fcn.0040c670
mov eax, dword [ebp - 0xcc]
call fcn.0040471c
mov ecx, eax
mov edx, 0x427e10
mov eax, 0x80000000
call fcn.0040e98c
test al, al
jne 0x427625
lea edx, [ebp - 0x1c]
mov eax, ebx
call fcn.0040c670
jmp 0x42762b
inc ebx
cmp ebx, 0x63
jle 0x4275ec
mov ecx, 0x427dac
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e954
test al, al
je 0x427837
mov ecx, 0x427da8
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e954
test al, al
je 0x427837
lea eax, [ebp - 0xd0]
mov edx, 0x42cd44
mov ecx, pe_nt_image_headers32
call fcn.004044d4
cmp dword [ebp - 0xd0], 0
je 0x42769e
push 0x42cd44
push 1
mov ecx, 0x427dbc
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e68c
jmp 0x4276db
lea eax, [ebp - 0xd4]
push eax
mov ecx, 0x427d98
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e8e0
mov eax, dword [ebp - 0xd4]
call fcn.0040471c
push eax
push 1
mov ecx, 0x427dbc
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e68c
lea eax, [ebp - 0xd8]
push eax
mov ecx, 0x427dac
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e8e0
mov eax, dword [ebp - 0xd8]
call fcn.0040471c
push eax
push 1
lea eax, [ebp - 0xdc]
mov ecx, dword [ebp - 0x1c]
mov edx, 0x427e30
call fcn.00404570
mov eax, dword [ebp - 0xdc]
call fcn.0040471c
mov edx, eax
mov ecx, 0x427dac
mov eax, 0x80000000
call fcn.0040e68c
lea eax, [ebp - 0xe0]
push eax
mov ecx, 0x427da8
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e8e0
mov eax, dword [ebp - 0xe0]
call fcn.0040471c
push eax
push 1
lea eax, [ebp - 0xe4]
mov ecx, dword [ebp - 0x1c]
mov edx, 0x427e30
call fcn.00404570
mov eax, dword [ebp - 0xe4]
call fcn.0040471c
mov edx, eax
mov ecx, 0x427da8
mov eax, 0x80000000
call fcn.0040e68c
push 0x427e50
lea edx, [ebp - 0xec]
mov eax, dword [ebp - 8]
call fcn.0040c670
push dword [ebp - 0xec]
push 0x427dfc
lea edx, [ebp - 0xf0]
mov eax, dword [ebp - 4]
call fcn.0040c670
push dword [ebp - 0xf0]
push 0x427e08
lea eax, [ebp - 0xe8]
mov edx, 5
call fcn.004045e4
mov eax, dword [ebp - 0xe8]
call fcn.0040471c
push eax
push 1
lea eax, [ebp - 0xf4]
mov ecx, dword [ebp - 0x1c]
mov edx, 0x427e30
call fcn.00404570
mov eax, dword [ebp - 0xf4]
call fcn.0040471c
mov edx, eax
mov ecx, 0x427e0c
mov eax, 0x80000000
call fcn.0040e68c
mov ecx, 0x427dac
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e704
mov ecx, 0x427da8
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e704
lea eax, [ebp - 0xf8]
push eax
mov ecx, 0x427db0
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e8e0
mov eax, dword [ebp - 0xf8]
mov edx, 0x427d48
call fcn.00404668
jne 0x427869
call fcn.00426cd4
mov dword [ebp - 0x84], 0x174
mov dword [ebp - 0x80], 0x194
mov dword [ebp - 0x7c], 0x1bd
mov dword [ebp - 0x78], 0x1b0
cmp dword [ebp - 0x10], 4
jne 0x427a4f
push dword [ebp - 4]
push dword [ebp - 8]
lea eax, [ebp - 0x84]
push eax
call sub.user32.dll_PtInRect
test eax, eax
je 0x427a4f
mov ebx, 1
lea eax, [ebp - 0x1c]
call fcn.0040426c
cmp ebx, 0x63
jg 0x4278fd
lea edx, [ebp - 0xfc]
mov eax, ebx
call fcn.0040c670
mov eax, dword [ebp - 0xfc]
call fcn.0040471c
mov ecx, eax
mov edx, 0x427e58
mov eax, 0x80000000
call fcn.0040e98c
test al, al
jne 0x4278f7
lea edx, [ebp - 0x1c]
mov eax, ebx
call fcn.0040c670
jmp 0x4278fd
inc ebx
cmp ebx, 0x63
jle 0x4278be
mov dword [ebp - 0x28], 1
lea eax, [ebp - 0x100]
mov edx, 0x42cd44
mov ecx, pe_nt_image_headers32
call fcn.004044d4
cmp dword [ebp - 0x100], 0
je 0x42793f
push 0x42cd44
push 1
mov ecx, 0x427dbc
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e68c
jmp 0x42797c
lea eax, [ebp - 0x104]
push eax
mov ecx, 0x427d98
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e8e0
mov eax, dword [ebp - 0x104]
call fcn.0040471c
push eax
push 1
mov ecx, 0x427dbc
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e68c
mov edi, dword [ebp - 0x14]
test edi, edi
jle 0x427a4f
lea esi, [ebp - 0x74]
mov ebx, 0x42ce44
cmp dword [esi], 0
je 0x427a3f
mov eax, dword [esi]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x427a3f
mov eax, dword [ebp - 0x28]
dec eax
je 0x4279b9
dec eax
je 0x4279c8
dec eax
je 0x4279d7
dec eax
je 0x4279e6
jmp 0x4279f3
lea eax, [ebp - 0x24]
mov edx, 0x427e80
call fcn.00404304
jmp 0x4279f3
lea eax, [ebp - 0x24]
mov edx, 0x427e8c
call fcn.00404304
jmp 0x4279f3
lea eax, [ebp - 0x24]
mov edx, 0x427e98
call fcn.00404304
jmp 0x4279f3
lea eax, [ebp - 0x24]
mov edx, 0x427ea4
call fcn.00404304
mov eax, ebx
push eax
push pe_nt_image_headers32
push 0xd
mov eax, dword [esi]
push eax
call sub.user32.dll_SendMessageA
push ebx
push 1
mov eax, dword [ebp - 0x24]
call fcn.0040471c
push eax
lea eax, [ebp - 0x108]
mov ecx, dword [ebp - 0x1c]
mov edx, 0x427eb0
call fcn.00404570
mov eax, dword [ebp - 0x108]
call fcn.0040471c
mov edx, eax
mov eax, 0x80000000
pop ecx
call fcn.0040e68c
inc dword [ebp - 0x28]
add ebx, 0x100
add esi, 4
dec edi
jne 0x42798f
mov dword [ebp - 0x84], 0xf0
mov dword [ebp - 0x80], 0x1e0
mov dword [ebp - 0x7c], 0x139
mov dword [ebp - 0x78], 0x1fd
cmp dword [ebp - 0x10], 0xc
jne 0x427cec
push dword [ebp - 4]
push dword [ebp - 8]
lea eax, [ebp - 0x84]
push eax
call sub.user32.dll_PtInRect
test eax, eax
je 0x427cec
mov ebx, 1
lea eax, [ebp - 0x1c]
call fcn.0040426c
cmp ebx, 0x63
jg 0x427ae3
lea edx, [ebp - 0x10c]
mov eax, ebx
call fcn.0040c670
mov eax, dword [ebp - 0x10c]
call fcn.0040471c
mov ecx, eax
mov edx, 0x427ed0
mov eax, 0x80000000
call fcn.0040e98c
test al, al
jne 0x427add
lea edx, [ebp - 0x1c]
mov eax, ebx
call fcn.0040c670
jmp 0x427ae3
inc ebx
cmp ebx, 0x63
jle 0x427aa4
mov dword [ebp - 0x28], 1
lea eax, [ebp - 0x110]
mov edx, 0x42cd44
mov ecx, pe_nt_image_headers32
call fcn.004044d4
cmp dword [ebp - 0x110], 0
je 0x427b25
push 0x42cd44
push 1
mov ecx, 0x427dbc
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e68c
jmp 0x427b62
lea eax, [ebp - 0x114]
push eax
mov ecx, 0x427d98
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e8e0
mov eax, dword [ebp - 0x114]
call fcn.0040471c
push eax
push 1
mov ecx, 0x427dbc
mov edx, 0x427d30
mov eax, 0x80000000
call fcn.0040e68c
mov edi, dword [ebp - 0x14]
test edi, edi
jle 0x427cec
lea ebx, [ebp - 0x74]
mov esi, 0x42ce44
cmp dword [ebx], 0
je 0x427cdc
mov eax, dword [ebx]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x427cdc
mov eax, dword [ebp - 0x28]
cmp eax, 0xc
ja case.0x427b9a.0
jmp dword [eax*4 + 0x427ba1]
lea eax, [ebp - 0x24]
mov edx, 0x427ef0
call fcn.00404304
jmp case.0x427b9a.0
lea eax, [ebp - 0x24]
mov edx, 0x427efc
call fcn.00404304
jmp case.0x427b9a.0
lea eax, [ebp - 0x24]
mov edx, 0x427f08
call fcn.00404304
jmp case.0x427b9a.0
lea eax, [ebp - 0x24]
mov edx, 0x427f14
call fcn.00404304
jmp case.0x427b9a.0
lea eax, [ebp - 0x24]
mov edx, 0x427f20
call fcn.00404304
jmp case.0x427b9a.0
lea eax, [ebp - 0x24]
mov edx, 0x427f2c
call fcn.00404304
jmp case.0x427b9a.0
lea eax, [ebp - 0x24]
mov edx, 0x427f38
call fcn.00404304
jmp case.0x427b9a.0
lea eax, [ebp - 0x24]
mov edx, 0x427f44
call fcn.00404304
jmp case.0x427b9a.0
lea eax, [ebp - 0x24]
mov edx, 0x427f50
call fcn.00404304
jmp case.0x427b9a.0
lea eax, [ebp - 0x24]
mov edx, 0x427e80
call fcn.00404304
jmp case.0x427b9a.0
lea eax, [ebp - 0x24]
mov edx, 0x427f5c
call fcn.00404304
jmp case.0x427b9a.0
lea eax, [ebp - 0x24]
mov edx, 0x427ea4
call fcn.00404304
mov eax, esi
push eax
push pe_nt_image_headers32
push 0xd
mov eax, dword [ebx]
push eax
call sub.user32.dll_SendMessageA
push esi
push 1
mov eax, dword [ebp - 0x24]
call fcn.0040471c
push eax
lea eax, [ebp - 0x118]
mov ecx, dword [ebp - 0x1c]
mov edx, 0x427f68
call fcn.00404570
mov eax, dword [ebp - 0x118]
call fcn.0040471c
mov edx, eax
mov eax, 0x80000000
pop ecx
call fcn.0040e68c
inc dword [ebp - 0x28]
add esi, 0x100
add ebx, 4
dec edi
jne 0x427b75
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x427d1e
lea eax, [ebp - 0x118]
mov edx, 0x25
call fcn.00404290
lea eax, [ebp - 0x24]
mov edx, 3
call fcn.00404290
ret