Function at 0x407f40
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x506062
mov eax, dword fs:[0]
push eax
sub esp, 0x90
mov eax, dword [0x54f018]
xor eax, esp
mov dword [esp + 0x88], eax
push ebx
push esi
push edi
mov eax, dword [0x54f018]
xor eax, esp
push eax
lea eax, [esp + 0xa0]
mov dword fs:[0], eax
mov ebx, ecx
call dword [sym.imp.mfc100.dll_Ordinal_9475]
mov dword [esp + 0x24], eax
call fcn.00493c40
lea edi, [esp + 0x60]
mov ecx, eax
call fcn.00494500
xor edi, edi
mov dword [esp + 0xa8], edi
mov edx, dword [eax + 0x10]
mov esi, 0x10
lea ecx, [ebx + 0x230]
cmp dword [eax + 0x14], esi
jb 0x407fba
mov eax, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x10]
push eax
push edi
call fcn.00404050
test eax, eax
setne byte [esp + 0x17]
mov dword [esp + 0xa8], 0xffffffff
cmp dword [esp + 0x74], esi
jb 0x407fec
mov ecx, dword [esp + 0x60]
push ecx
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
cmp byte [esp + 0x17], 0
je 0x40804f
call fcn.00493c40
push eax
lea edi, [esp + 0x64]
call fcn.00494af0
mov esi, eax
lea edi, [ebx + 0xb8]
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
call fcn.00493c40
lea edi, [esp + 0x60]
mov ecx, eax
call fcn.00494500
push eax
lea ecx, [ebx + 0x230]
mov dword [esp + 0xac], 1
call fcn.004013e0
cmp dword [esp + 0x74], 0x10
jb 0x40804d
mov edx, dword [esp + 0x60]
push edx
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
xor edi, edi
mov eax, dword [ebx + 0xb8]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push edi
push eax
mov eax, dword [ebx + 0xf4]
push 0xf1
push eax
call esi
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc100.dll_Ordinal_316]
mov dword [esp + 0xa8], 2
movzx ecx, word [ebx + 0xbc]
push ecx
lea edx, [esp + 0x24]
push 0x5216b4
push edx
call dword [sym.imp.mfc100.dll_Ordinal_4283]
mov eax, dword [esp + 0x2c]
add esp, 0xc
lea ecx, [ebx + 0x148]
push eax
call dword [sym.imp.mfc100.dll_Ordinal_12868]
push edi
cmp dword [ebx + 0xb8], edi
je 0x4080cc
mov ecx, dword [ebx + 0x1dc]
push edi
push 0xf1
push ecx
call esi
lea ecx, [ebx + 0x1bc]
jmp 0x4080fc
lea ecx, [ebx + 0x148]
call dword [sym.imp.mfc100.dll_Ordinal_3970]
mov eax, dword [ebx + 0xc0]
mov edx, dword [ebx + 0x1dc]
push edi
push eax
push 0xf1
push edx
call esi
cmp dword [ebx + 0xc0], edi
je 0x408103
lea ecx, [ebx + 0xd4]
push edi
call dword [sym.imp.mfc100.dll_Ordinal_3970]
lea eax, [esp + 0x60]
push edi
push eax
call fcn.004eac70
push str.UserCfgSetting.ini
push eax
lea ecx, [esp + 0x8c]
push ecx
mov byte [esp + 0xbc], 3
call fcn.004040e0
add esp, 0x14
mov byte [esp + 0xa8], 5
cmp dword [esp + 0x74], 0x10
jb 0x408149
mov edx, dword [esp + 0x60]
push edx
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
mov eax, 0xf
push 0xffffffffffffffff
mov dword [ecx + 0x14], eax
mov dword [esp + 0x94], eax
push edi
lea eax, [esp + 0xa0]
mov dword [ecx + 0x10], edi
push eax
mov dword [esp + 0x98], edi
mov byte [esp + 0x88], 0
mov byte [ecx], 0
call fcn.00401460
call fcn.004ea0b0
add esp, 0x1c
cmp eax, edi
je 0x408cb0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push edi
lea edx, [esp + 0xa0]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], edi
push edx
mov byte [ecx], 0
call fcn.00401460
lea ecx, [esp + 0x34]
call fcn.004e9900
push str.Enable
push edi
mov byte [esp + 0xb0], 6
mov eax, dword [ebx + 0x26c]
push 0x143
push eax
call esi
mov ecx, dword [ebx + 0x26c]
push str.Disable
push edi
push 0x143
push ecx
call esi
mov edx, dword [ebx + 0x26c]
push str.Fix_0
push edi
push 0x143
push edx
call esi
movzx eax, byte [ebx + 0xc8]
push edi
push eax
mov eax, dword [ebx + 0x26c]
push 0x14e
push eax
call esi
push 0xe
push str.EN_SMART_C3_UI
lea ecx, [esp + 0x4c]
mov dword [esp + 0x60], 0xf
mov dword [esp + 0x5c], edi
mov byte [esp + 0x4c], 0
call fcn.004016d0
mov byte [esp + 0xa8], 7
push 6
push str.OPTION
lea ecx, [esp + 0x30]
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x40], edi
mov byte [esp + 0x30], 0
call fcn.004016d0
push edi
push edi
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x34]
push edx
lea ecx, [esp + 0x28]
mov byte [esp + 0xb8], 8
call fcn.004e9760
cmp dword [esp + 0x3c], 0x10
mov dword [esp + 0x10], eax
jb 0x4082a0
mov eax, dword [esp + 0x28]
push eax
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
mov byte [esp + 0xa8], 6
cmp dword [esp + 0x58], 0x10
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], edi
mov byte [esp + 0x28], 0
jb 0x4082ce
mov ecx, dword [esp + 0x44]
push ecx
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
lea ecx, [ebx + 0x24c]
cmp dword [esp + 0x10], edi
jne 0x4082e4
push edi
call dword [sym.imp.mfc100.dll_Ordinal_12962]
push edi
jmp 0x4082ee
push 1
call dword [sym.imp.mfc100.dll_Ordinal_12962]
push 1
push 0x644
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_12962]
mov edx, dword [ebx + 0x2e0]
push str.Enable
push edi
push 0x143
push edx
call esi
mov eax, dword [ebx + 0x2e0]
push str.Disable
push edi
push 0x143
push eax
call esi
mov ecx, dword [ebx + 0x2e0]
push str.Fix_0
push edi
push 0x143
push ecx
call esi
movzx eax, byte [ebx + 0xc9]
mov edx, dword [ebx + 0x2e0]
push edi
push eax
push 0x14e
push edx
call esi
push 0xe
push str.EN_SMART_C4_UI
lea ecx, [esp + 0x4c]
mov dword [esp + 0x60], 0xf
mov dword [esp + 0x5c], edi
mov byte [esp + 0x4c], 0
call fcn.004016d0
mov byte [esp + 0xa8], 9
push 6
push str.OPTION
lea ecx, [esp + 0x30]
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x40], edi
mov byte [esp + 0x30], 0
call fcn.004016d0
push edi
push edi
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x28]
mov byte [esp + 0xb8], 0xa
call fcn.004e9760
cmp dword [esp + 0x3c], 0x10
mov dword [esp + 0x10], eax
jb 0x4083d6
mov edx, dword [esp + 0x28]
push edx
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
mov byte [esp + 0xa8], 6
cmp dword [esp + 0x58], 0x10
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], edi
mov byte [esp + 0x28], 0
jb 0x408404
mov eax, dword [esp + 0x44]
push eax
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
lea ecx, [ebx + 0x2c0]
cmp dword [esp + 0x10], edi
jne 0x40841a
push edi
call dword [sym.imp.mfc100.dll_Ordinal_12962]
push edi
jmp 0x408424
push 1
call dword [sym.imp.mfc100.dll_Ordinal_12962]
push 1
push 0x645
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_12962]
mov ecx, dword [ebx + 0x354]
push str.Enable
push edi
push 0x143
push ecx
call esi
mov edx, dword [ebx + 0x354]
push str.Disable
push edi
push 0x143
push edx
call esi
mov eax, dword [ebx + 0x354]
push str.Fix_0
push edi
push 0x143
push eax
call esi
movzx eax, byte [ebx + 0xca]
mov ecx, dword [ebx + 0x354]
push edi
push eax
push 0x14e
push ecx
call esi
push 0xe
push str.EN_SMART_C5_UI
lea ecx, [esp + 0x4c]
mov dword [esp + 0x60], 0xf
mov dword [esp + 0x5c], edi
mov byte [esp + 0x4c], 0
call fcn.004016d0
mov byte [esp + 0xa8], 0xb
push 6
push str.OPTION
lea ecx, [esp + 0x30]
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x40], edi
mov byte [esp + 0x30], 0
call fcn.004016d0
push edi
push edi
lea edx, [esp + 0x4c]
push edx
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xb8], 0xc
call fcn.004e9760
cmp dword [esp + 0x3c], 0x10
mov dword [esp + 0x10], eax
jb 0x40850c
mov ecx, dword [esp + 0x28]
push ecx
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
mov byte [esp + 0xa8], 6
cmp dword [esp + 0x58], 0x10
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], edi
mov byte [esp + 0x28], 0
jb 0x40853a
mov edx, dword [esp + 0x44]
push edx
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
lea ecx, [ebx + 0x334]
cmp dword [esp + 0x10], edi
jne 0x408550
push edi
call dword [sym.imp.mfc100.dll_Ordinal_12962]
push edi
jmp 0x40855a
push 1
call dword [sym.imp.mfc100.dll_Ordinal_12962]
push 1
push 0x646
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_12962]
mov eax, dword [ebx + 0x3c8]
push str.Enable
push edi
push 0x143
push eax
call esi
mov ecx, dword [ebx + 0x3c8]
push str.Disable
push edi
push 0x143
push ecx
call esi
mov edx, dword [ebx + 0x3c8]
push str.Fix_0
push edi
push 0x143
push edx
call esi
movzx eax, byte [ebx + 0xcb]
push edi
push eax
mov eax, dword [ebx + 0x3c8]
push 0x14e
push eax
call esi
push 0xe
push str.EN_SMART_C6_UI
lea ecx, [esp + 0x4c]
mov dword [esp + 0x60], 0xf
mov dword [esp + 0x5c], edi
mov byte [esp + 0x4c], 0
call fcn.004016d0
mov byte [esp + 0xa8], 0xd
push 6
push str.OPTION
lea ecx, [esp + 0x30]
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x40], edi
mov byte [esp + 0x30], 0
call fcn.004016d0
push edi
push edi
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x34]
push edx
lea ecx, [esp + 0x28]
mov byte [esp + 0xb8], 0xe
call fcn.004e9760
cmp dword [esp + 0x3c], 0x10
mov dword [esp + 0x10], eax
jb 0x408642
mov eax, dword [esp + 0x28]
push eax
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
mov byte [esp + 0xa8], 6
cmp dword [esp + 0x58], 0x10
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], edi
mov byte [esp + 0x28], 0
jb 0x408670
mov ecx, dword [esp + 0x44]
push ecx
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
lea ecx, [ebx + 0x3a8]
cmp dword [esp + 0x10], edi
jne 0x408686
push edi
call dword [sym.imp.mfc100.dll_Ordinal_12962]
push edi
jmp 0x408690
push 1
call dword [sym.imp.mfc100.dll_Ordinal_12962]
push 1
push 0x647
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_12962]
mov edx, dword [ebx + 0x43c]
push str.Enable
push edi
push 0x143
push edx
call esi
mov eax, dword [ebx + 0x43c]
push str.Disable
push edi
push 0x143
push eax
call esi
mov ecx, dword [ebx + 0x43c]
push str.Fix_0
push edi
push 0x143
push ecx
call esi
movzx eax, byte [ebx + 0xcc]
mov edx, dword [ebx + 0x43c]
push edi
push eax
push 0x14e
push edx
call esi
push 0xe
push str.EN_SMART_C7_UI
lea ecx, [esp + 0x4c]
mov dword [esp + 0x60], 0xf
mov dword [esp + 0x5c], edi
mov byte [esp + 0x4c], 0
call fcn.004016d0
mov byte [esp + 0xa8], 0xf
push 6
push str.OPTION
lea ecx, [esp + 0x30]
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x40], edi
mov byte [esp + 0x30], 0
call fcn.004016d0
push edi
push edi
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x28]
mov byte [esp + 0xb8], 0x10
call fcn.004e9760
cmp dword [esp + 0x3c], 0x10
mov dword [esp + 0x10], eax
jb 0x408778
mov edx, dword [esp + 0x28]
push edx
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
mov byte [esp + 0xa8], 6
cmp dword [esp + 0x58], 0x10
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], edi
mov byte [esp + 0x28], 0
jb 0x4087a6
mov eax, dword [esp + 0x44]
push eax
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
lea ecx, [ebx + 0x41c]
cmp dword [esp + 0x10], edi
jne 0x4087bc
push edi
call dword [sym.imp.mfc100.dll_Ordinal_12962]
push edi
jmp 0x4087c6
push 1
call dword [sym.imp.mfc100.dll_Ordinal_12962]
push 1
push 0x648
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_12962]
mov ecx, dword [ebx + 0x4b0]
push str.Enable
push edi
push 0x143
push ecx
call esi
mov edx, dword [ebx + 0x4b0]
push str.Disable
push edi
push 0x143
push edx
call esi
mov eax, dword [ebx + 0x4b0]
push str.Fix_0
push edi
push 0x143
push eax
call esi
movzx eax, byte [ebx + 0xcd]
mov ecx, dword [ebx + 0x4b0]
push edi
push eax
push 0x14e
push ecx
call esi
push 0xe
push str.EN_SMART_05_UI
lea ecx, [esp + 0x4c]
mov dword [esp + 0x60], 0xf
mov dword [esp + 0x5c], edi
mov byte [esp + 0x4c], 0
call fcn.004016d0
mov byte [esp + 0xa8], 0x11
push 6
push str.OPTION
lea ecx, [esp + 0x30]
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x40], edi
mov byte [esp + 0x30], 0
call fcn.004016d0
push edi
push edi
lea edx, [esp + 0x4c]
push edx
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xb8], 0x12
call fcn.004e9760
cmp dword [esp + 0x3c], 0x10
mov dword [esp + 0x10], eax
jb 0x4088ae
mov ecx, dword [esp + 0x28]
push ecx
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
mov byte [esp + 0xa8], 6
cmp dword [esp + 0x58], 0x10
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], edi
mov byte [esp + 0x28], 0
jb 0x4088dc
mov edx, dword [esp + 0x44]
push edx
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
lea ecx, [ebx + 0x490]
cmp dword [esp + 0x10], edi
jne 0x4088f2
push edi
call dword [sym.imp.mfc100.dll_Ordinal_12962]
push edi
jmp 0x4088fc
push 1
call dword [sym.imp.mfc100.dll_Ordinal_12962]
push 1
push 0x649
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_12962]
mov eax, dword [ebx + 0x524]
push str.Enable
push edi
push 0x143
push eax
call esi
mov ecx, dword [ebx + 0x524]
push str.Disable
push edi
push 0x143
push ecx
call esi
mov edx, dword [ebx + 0x524]
push str.Fix_0
push edi
push 0x143
push edx
call esi
movzx eax, byte [ebx + 0xce]
push edi
push eax
mov eax, dword [ebx + 0x524]
push 0x14e
push eax
call esi
push 0xe
push str.EN_SMART_A3_UI
lea ecx, [esp + 0x4c]
mov dword [esp + 0x60], 0xf
mov dword [esp + 0x5c], edi
mov byte [esp + 0x4c], 0
call fcn.004016d0
mov byte [esp + 0xa8], 0x13
push 6
push str.OPTION
lea ecx, [esp + 0x30]
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x40], edi
mov byte [esp + 0x30], 0
call fcn.004016d0
push edi
push edi
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x34]
push edx
lea ecx, [esp + 0x28]
mov byte [esp + 0xb8], 0x14
call fcn.004e9760
cmp dword [esp + 0x3c], 0x10
jb 0x4089e0
mov eax, dword [esp + 0x28]
push eax
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
mov byte [esp + 0xa8], 6
cmp dword [esp + 0x58], 0x10
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], edi
mov byte [esp + 0x28], 0
jb 0x408a0e
mov ecx, dword [esp + 0x44]
push ecx
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
lea ecx, [ebx + 0x504]
cmp dword [esp + 0x10], edi
jne 0x408a24
push edi
call dword [sym.imp.mfc100.dll_Ordinal_12962]
push edi
jmp 0x408a2e
push 1
call dword [sym.imp.mfc100.dll_Ordinal_12962]
push 1
push 0x649
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_12962]
mov edx, dword [ebx + 0x598]
push str.Enable
push edi
push 0x143
push edx
call esi
mov eax, dword [ebx + 0x598]
push str.Disable
push edi
push 0x143
push eax
call esi
mov ecx, dword [ebx + 0x598]
push str.Fix_0
push edi
push 0x143
push ecx
call esi
movzx eax, byte [ebx + 0xcf]
mov edx, dword [ebx + 0x598]
push edi
push eax
push 0x14e
push edx
call esi
push 0xe
push str.EN_SMART_B5_UI
lea ecx, [esp + 0x4c]
mov dword [esp + 0x60], 0xf
mov dword [esp + 0x5c], edi
mov byte [esp + 0x4c], 0
call fcn.004016d0
mov byte [esp + 0xa8], 0x15
push 6
push str.OPTION
lea ecx, [esp + 0x30]
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x40], edi
mov byte [esp + 0x30], 0
call fcn.004016d0
push edi
push edi
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x28]
mov byte [esp + 0xb8], 0x16
call fcn.004e9760
cmp dword [esp + 0x3c], 0x10
jb 0x408b12
mov edx, dword [esp + 0x28]
push edx
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
mov byte [esp + 0xa8], 6
cmp dword [esp + 0x58], 0x10
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], edi
mov byte [esp + 0x28], 0
jb 0x408b40
mov eax, dword [esp + 0x44]
push eax
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
lea ecx, [ebx + 0x578]
cmp dword [esp + 0x10], edi
jne 0x408b56
push edi
call dword [sym.imp.mfc100.dll_Ordinal_12962]
push edi
jmp 0x408b60
push 1
call dword [sym.imp.mfc100.dll_Ordinal_12962]
push 1
push 0x649
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_12962]
mov ecx, dword [ebx + 0x60c]
push str.Enable
push edi
push 0x143
push ecx
call esi
mov edx, dword [ebx + 0x60c]
push str.Disable
push edi
push 0x143
push edx
call esi
mov eax, dword [ebx + 0x60c]
push str.Fix_0
push edi
push 0x143
push eax
call esi
movzx eax, byte [ebx + 0xd0]
mov ecx, dword [ebx + 0x60c]
push edi
push eax
push 0x14e
push ecx
call esi
push 0xe
mov esi, 0xf
push str.EN_SMART_B6_UI
lea ecx, [esp + 0x4c]
mov dword [esp + 0x60], esi
mov dword [esp + 0x5c], edi
mov byte [esp + 0x4c], 0
call fcn.004016d0
mov byte [esp + 0xa8], 0x17
push 6
push str.OPTION
lea ecx, [esp + 0x30]
mov dword [esp + 0x44], esi
mov dword [esp + 0x40], edi
mov byte [esp + 0x30], 0
call fcn.004016d0
push edi
push edi
lea edx, [esp + 0x4c]
push edx
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xb8], 0x18
call fcn.004e9760
cmp dword [esp + 0x3c], 0x10
jb 0x408c41
mov ecx, dword [esp + 0x28]
push ecx
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
mov byte [esp + 0xa8], 6
cmp dword [esp + 0x58], 0x10
mov dword [esp + 0x3c], esi
mov dword [esp + 0x38], edi
mov byte [esp + 0x28], 0
jb 0x408c6b
mov edx, dword [esp + 0x44]
push edx
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
mov esi, dword [sym.imp.mfc100.dll_Ordinal_12962]
lea ecx, [ebx + 0x5ec]
cmp dword [esp + 0x10], edi
jne 0x408c83
push edi
call esi
push edi
jmp 0x408c89
push 1
call esi
push 1
push 0x649
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call esi
lea ecx, [esp + 0x18]
mov byte [esp + 0xa8], 5
call fcn.004e9710
jmp 0x408da9
mov esi, dword [sym.imp.mfc100.dll_Ordinal_12962]
push edi
lea ecx, [ebx + 0x24c]
call esi
push edi
push 0x644
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call esi
push edi
lea ecx, [ebx + 0x2c0]
call esi
push edi
push 0x645
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call esi
push edi
lea ecx, [ebx + 0x334]
call esi
push edi
push 0x646
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call esi
push edi
lea ecx, [ebx + 0x3a8]
call esi
push edi
push 0x647
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call esi
push edi
lea ecx, [ebx + 0x41c]
call esi
push edi
push 0x648
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call esi
push edi
lea ecx, [ebx + 0x490]
call esi
push edi
push 0x649
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call esi
push edi
lea ecx, [ebx + 0x504]
call esi
push edi
push 0x64b
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call esi
push edi
lea ecx, [ebx + 0x578]
call esi
push edi
push 0x64d
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call esi
push edi
lea ecx, [ebx + 0x5ec]
call esi
push edi
push 0x64f
mov ecx, ebx
call dword [sym.imp.mfc100.dll_Ordinal_4785]
mov ecx, eax
call esi
cmp dword [esp + 0x90], 0x10
jb 0x408dc1
mov eax, dword [esp + 0x7c]
push eax
call dword [sym.imp.mfc100.dll_Ordinal_1296]
add esp, 4
lea ecx, [esp + 0x20]
mov dword [esp + 0x90], 0xf
mov dword [esp + 0x8c], edi
mov byte [esp + 0x7c], 0
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0xa0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x88]
xor ecx, esp
call fcn.004e8d32
mov esp, ebp
pop ebp
ret