Function at 0x401030
Capabilities:
Get graphical window text

Disassembly:
mov eax, dword [0x406074]
sub esp, 0x104
cdq
push ebx
push ebp
sub eax, edx
push esi
push edi
mov edi, dword [sym.imp.USER32.dll_GetActiveWindow]
sar eax, 1
mov dword [0x406074], eax
call edi
mov eax, dword [0x406770]
mov ecx, dword [0x406538]
mov esi, dword [sym.imp.USER32.dll_SetWindowPos]
push 0x6f
push 0x557b
push 0x272
push 0x3037
push 0x11f7
push eax
push ecx
call esi
push 0x16
lea edx, [esp + 0x14]
push 0x406f94
push edx
call fcn.004034c0
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
add esp, 0xc
push 9
push 8
call ebx
mov ebp, dword [sym.imp.KERNEL32.dll_HeapAlloc]
push eax
call ebp
mov ecx, dword [str.Gx_h]
mov dword [0x40c79c], eax
mov dword [eax], ecx
mov eax, dword [0x40c79c]
mov edx, dword [0x406f8c]
push 8
mov dword [eax + 4], edx
mov ecx, dword [0x406008]
mov eax, 0x6bb36e7
imul ecx
sar edx, 6
mov ecx, edx
lea eax, [esp + 0x14]
shr ecx, 0x1f
add edx, ecx
mov dword [0x4060a8], edx
mov edx, dword [0x40c79c]
push edx
push eax
call fcn.004035c0
mov ecx, dword [0x4060d0]
mov eax, 0xb30f6353
imul ecx
add edx, ecx
mov eax, 0xf2b9d649
sar edx, 7
mov ecx, edx
add esp, 0xc
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [0x406048]
mov dword [0x4060d0], edx
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [0x406048], edx
call edi
mov ecx, dword [0x40608c]
mov edx, dword [0x406624]
add ecx, 0x6297
push edx
mov dword [0x4060b8], ecx
mov eax, dword [0x40675c]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x40617c]
mov eax, 0x6f74ae27
imul ecx
sar edx, 6
mov ecx, edx
push 0xe
shr ecx, 0x1f
add edx, ecx
push 0x406f78
mov dword [0x40617c], edx
lea edx, [esp + 0x18]
push edx
call fcn.004034c0
add esp, 0xc
push 6
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406f70]
mov dword [0x40c794], eax
mov dword [eax], ecx
mov dl, byte [0x406f74]
push 0x72
push 0x48b5
mov byte [eax + 4], dl
mov eax, dword [0x40651c]
mov ecx, dword [0x4064dc]
push 0x2fbe
push 0x4e9c
push 0x2e6c
push eax
push ecx
call esi
mov edx, dword [0x40c794]
push 5
lea eax, [esp + 0x14]
push edx
push eax
call fcn.004035c0
mov ecx, dword [0x406628]
add esp, 0xc
mov dword [0x406190], 0x1d19
push 0x3605
push 0x439b
push 0x1d04
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x4060a0]
mov ecx, 0x64af
cdq
idiv ecx
mov eax, dword [0x4064d0]
push 0x16
push 0x680f
push 0x4351
push 0x31f9
push 0x7527
mov dword [0x406204], edx
mov edx, dword [0x40656c]
push edx
push eax
call esi
push 0xe
lea ecx, [esp + 0x14]
push 0x406f60
push ecx
call fcn.004034c0
add esp, 0xc
push 0x10
push 8
call ebx
push eax
call ebp
mov edx, dword [0x406f5c]
mov dword [0x40c78c], eax
mov dword [eax], edx
mov ecx, dword [0x406f60]
mov dword [eax + 4], ecx
mov edx, dword [0x406f64]
mov dword [eax + 8], edx
mov cx, word [0x406f68]
mov word [eax + 0xc], cx
mov dl, byte [0x406f6a]
mov byte [eax + 0xe], dl
mov eax, dword [0x406014]
mov ecx, dword [0x40c78c]
push 3
lea edx, [esp + 0x14]
add eax, 0xffffd05f
push ecx
push edx
mov dword [0x4060c4], eax
call fcn.004035c0
add esp, 0xc
call edi
mov eax, dword [0x406654]
mov ecx, dword [0x406548]
mov edi, dword [sym.imp.USER32.dll_KillTimer]
push eax
push ecx
call edi
mov ecx, dword [0x406100]
mov eax, 0x67b23a55
imul ecx
mov ecx, dword [0x4065f8]
push 0x680c
sar edx, 6
mov eax, edx
push 0x5668
shr eax, 0x1f
add edx, eax
push 0xcdc
push ecx
mov dword [0x406100], edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x406154]
mov eax, 0xb30f6353
imul ecx
add edx, ecx
mov ecx, dword [0x406010]
sar edx, 7
mov eax, edx
push 0x12
shr eax, 0x1f
add edx, eax
mov eax, 0x17ad2209
mov dword [0x406154], edx
imul ecx
sar edx, 4
mov ecx, edx
push 0x406f48
shr ecx, 0x1f
add edx, ecx
mov dword [0x406010], edx
lea edx, [esp + 0x18]
push edx
call fcn.004034c0
add esp, 0xc
push 0xf
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406f38]
mov dword [0x40c780], eax
mov dword [eax], ecx
mov edx, dword [0x406f3c]
mov dword [eax + 4], edx
mov ecx, dword [0x406f40]
mov dword [eax + 8], ecx
mov dx, word [0x406f44]
push 0xc8
push 0x15b2
push 0x56d5
mov word [eax + 0xc], dx
mov eax, dword [0x406790]
push 0x10b4
push 0x5c73
mov ecx, dword [0x4066d4]
push eax
push ecx
call esi
mov edx, dword [0x40c780]
push 0xe
lea eax, [esp + 0x14]
push edx
push eax
call fcn.004035c0
mov ecx, dword [0x4065c0]
mov edx, dword [0x40652c]
add esp, 0xc
push ecx
push edx
call edi
mov ecx, dword [str.V_]
mov eax, 0x8dda5203
imul ecx
add edx, ecx
mov ecx, dword [0x4067ac]
sar edx, 7
mov eax, edx
push 0x39
shr eax, 0x1f
add edx, eax
push 0x671d
push 0x6307
mov dword [str.V_], edx
mov edx, dword [0x4066fc]
push 0x71a6
push 0xe80
push ecx
push edx
call esi
mov eax, dword [str.X9_nO__iIm]
mov ecx, 0x50a8
cdq
idiv ecx
push 0xc
lea eax, [esp + 0x14]
push 0x406f28
push eax
mov dword [0x4060b4], edx
mov edx, dword [0x40612c]
add edx, 0xaaf
mov dword [0x406144], edx
call fcn.004034c0
add esp, 0xc
push 0x15
push 8
call ebx
push eax
call ebp
mov ecx, 5
mov esi, 0x406f10
mov edi, eax
mov dword [0x40c7a4], eax
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x4060e4]
push 0x14
lea ecx, [eax + eax*4]
shl ecx, 4
sub ecx, eax
lea edx, [eax + ecx*8]
lea ecx, [esp + 0x14]
shl edx, 4
add edx, eax
mov eax, dword [0x40c7a4]
push eax
push ecx
mov dword [0x406008], edx
call fcn.004035c0
mov esi, dword [sym.imp.USER32.dll_GetActiveWindow]
add esp, 0xc
call esi
call esi
mov edx, dword [0x4067c8]
mov eax, dword [0x4067b0]
push edx
push eax
mov edi, dword [sym.imp.USER32.dll_KillTimer]
call edi
mov eax, dword [0x4061fc]
push 0x12
cdq
and edx, 7
lea ecx, [esp + 0x14]
add eax, edx
push 0x406efc
sar eax, 3
push ecx
mov dword [0x406150], 0x7e8e
mov dword [0x4061fc], eax
call fcn.004034c0
add esp, 0xc
push 0xf
push 8
call ebx
push eax
call ebp
mov edx, dword [0x406eec]
mov dword [0x40c7a0], eax
mov dword [eax], edx
mov ecx, dword [0x406ef0]
mov dword [eax + 4], ecx
mov edx, dword [0x406ef4]
mov dword [eax + 8], edx
mov cx, word [0x406ef8]
mov word [eax + 0xc], cx
mov edx, dword [0x40c7a0]
push 0xe
lea eax, [esp + 0x14]
push edx
push eax
mov dword [0x406204], 0x7875
call fcn.004035c0
mov ecx, dword [0x4060e8]
mov eax, 0x17ad2209
imul ecx
sar edx, 4
mov ecx, edx
add esp, 0xc
shr ecx, 0x1f
add edx, ecx
mov dword [0x4060e8], edx
call esi
mov edx, dword [0x406234]
mov eax, dword [0x40603c]
push 9
lea ecx, [esp + 0x14]
add edx, 0x1a56
add eax, 0x4624
push 0x406ee0
push ecx
mov dword [0x406044], edx
mov dword [0x406094], eax
call fcn.004034c0
add esp, 0xc
push 0x13
push 8
call ebx
push eax
call ebp
mov edx, dword [0x406ed4]
mov dword [0x40c798], eax
mov dword [eax], edx
mov ecx, dword [0x406ed8]
mov dword [eax + 4], ecx
mov edx, dword [0x406edc]
mov dword [eax + 8], edx
mov ecx, dword [0x406ee0]
mov dword [eax + 0xc], ecx
mov dx, word [0x406ee4]
mov word [eax + 0x10], dx
mov ecx, dword [0x4060d0]
mov eax, 0x43b3d5b
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ecx, dword [0x40c798]
mov dword [0x4060d0], edx
push 0xb
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.004035c0
mov ecx, dword [0x40610c]
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [0x406534]
add esp, 0xc
sar edx, 3
mov eax, edx
push 0x3316
shr eax, 0x1f
push 0x7d39
add edx, eax
push 0x7077
push ecx
mov dword [0x40610c], edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [0x406690]
mov eax, dword [0x40668c]
push edx
push eax
call edi
push 0x16
lea ecx, [esp + 0x14]
push 0x406ebc
push ecx
call fcn.004034c0
add esp, 0xc
push 0x11
push 8
call ebx
push eax
call ebp
mov edx, dword [0x406ea8]
mov dword [0x40c790], eax
mov dword [eax], edx
mov ecx, dword [0x406eac]
mov dword [eax + 4], ecx
mov edx, dword [str.8kL]
mov dword [eax + 8], edx
mov ecx, dword [0x406eb4]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x4061b0]
mov eax, 0x2fa0be83
push 0x10
imul ecx
sar edx, 4
mov ecx, dword [0x40c790]
mov eax, edx
shr eax, 0x1f
add edx, eax
push ecx
mov dword [0x4061b0], edx
lea edx, [esp + 0x18]
push edx
mov dword [0x40621c], 0x264
call fcn.004035c0
add esp, 0xc
call esi
mov eax, dword [0x406234]
mov ecx, dword [0x406088]
add eax, 0x60e8
add ecx, 0xffffc6c7
mov dword [str.V_], eax
mov dword [0x406048], ecx
call esi
mov edx, dword [0x4067d0]
mov eax, dword [0x406568]
mov edi, dword [sym.imp.USER32.dll_SetWindowPos]
push 0x35
push 0x461a
push 0x5f54
push 0x1df
push 0x3bfe
push edx
push eax
call edi
push 0xd
lea ecx, [esp + 0x14]
push 0x406e98
push ecx
mov dword [0x406088], 0x678e
call fcn.004034c0
add esp, 0xc
push 0x11
push 8
call ebx
push eax
call ebp
mov edx, dword [0x406e84]
mov dword [0x40c788], eax
mov dword [eax], edx
mov ecx, dword [0x406e88]
mov dword [eax + 4], ecx
mov edx, dword [0x406e8c]
mov dword [eax + 8], edx
mov ecx, dword [0x406e90]
mov dword [eax + 0xc], ecx
call esi
mov edx, dword [0x40c788]
push 0x10
lea eax, [esp + 0x14]
push edx
push eax
call fcn.004035c0
mov ecx, dword [0x4061e0]
mov eax, 0xae4c415d
imul ecx
add edx, ecx
mov eax, dword [0x406678]
sar edx, 6
mov ecx, edx
add esp, 0xc
shr ecx, 0x1f
add edx, ecx
push 0x6f
push 0x6ea0
mov dword [0x4061e0], edx
mov edx, dword [0x4067ec]
push 0x319e
push 0x7e7a
push 0x4f7e
push edx
push eax
call edi
mov ecx, dword [0x4061cc]
mov eax, 0x66666667
add ecx, 0xfffff602
push 0x26
mov dword [0x406274], ecx
mov ecx, dword [0x4061d4]
imul ecx
sar edx, 5
mov ecx, dword [0x4066ac]
mov eax, edx
shr eax, 0x1f
add edx, eax
push 0x2d00
push 0x398b
mov dword [0x4061d4], edx
mov edx, dword [0x406560]
push 0x6ff6
push 0x15a
push ecx
push edx
call edi
push 0xc
lea eax, [esp + 0x14]
push 0x406e74
push eax
call fcn.004034c0
add esp, 0xc
push 0xd
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406e64]
mov dword [0x40c77c], eax
mov dword [eax], ecx
mov edx, dword [0x406e68]
mov dword [eax + 4], edx
mov ecx, dword [0x406e6c]
push 0xe6
push 0x3a73
mov dword [eax + 8], ecx
mov edx, dword [0x406630]
mov eax, dword [0x4066a4]
push 0x2e86
push 0x2945
push 0x1254
push edx
push eax
call edi
mov ecx, dword [0x40c77c]
push 0xc
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.004035c0
mov eax, dword [0x40655c]
mov ecx, dword [0x40660c]
add esp, 0xc
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [0x40615c], 0x5391
call esi
mov eax, dword [0x4060bc]
push 0x11
push 0x406e50
mov dword [0x406290], 0x1141
lea ecx, [eax + eax*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
lea edx, [ecx + ecx*8]
mov ecx, 0x6b46
shl edx, 2
sub edx, eax
mov eax, dword [0x4061fc]
mov dword [0x406094], edx
cdq
idiv ecx
mov dword [0x406270], edx
lea edx, [esp + 0x18]
push edx
call fcn.004034c0
add esp, 0xc
push 0xe
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406e40]
mov dword [0x40c774], eax
mov dword [eax], ecx
mov edx, dword [0x406e44]
mov dword [eax + 4], edx
mov ecx, dword [0x406e48]
mov dword [eax + 8], ecx
mov dl, byte [0x406e4c]
push 0xeb
push 0x4623
mov byte [eax + 0xc], dl
mov eax, dword [0x406834]
mov ecx, dword [0x406680]
push 0x32ae
push 0x26d4
push 0x5a10
push eax
push ecx
call edi
call esi
mov edx, dword [0x40c774]
push 0xd
push edx
lea eax, [esp + 0x18]
push eax
call fcn.004035c0
add esp, 0xc
mov dword [0x4061c0], 0x74cd
call esi
mov ecx, dword [0x406164]
mov eax, 0xdd67c8a7
imul ecx
add edx, ecx
push 0x1f76
sar edx, 6
mov ecx, edx
push 0x2ec
shr ecx, 0x1f
add edx, ecx
push 0x3c5c
mov dword [0x406164], edx
mov edx, dword [0x4065e0]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0xc
lea eax, [esp + 0x14]
push 0x406e30
push eax
call fcn.004034c0
add esp, 0xc
push 0xf
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406e20]
mov dword [0x40c76c], eax
mov dword [eax], ecx
mov edx, dword [0x406e24]
mov dword [eax + 4], edx
mov ecx, dword [0x406e28]
mov dword [eax + 8], ecx
mov dx, word [0x406e2c]
mov word [eax + 0xc], dx
mov eax, dword [0x40c76c]
push 0xe
lea ecx, [esp + 0x14]
push eax
push ecx
mov dword [0x4062a0], 0x68de
call fcn.004035c0
mov ecx, dword [0x4060d8]
mov eax, 0x44d72045
imul ecx
sar edx, 5
mov eax, edx
add esp, 0xc
shr eax, 0x1f
add edx, eax
mov dword [0x4060d8], edx
call esi
mov ecx, dword [0x406028]
mov eax, 0x151d07eb
imul ecx
sar edx, 4
mov ecx, edx
push 0x30df
shr ecx, 0x1f
add edx, ecx
push 0x5889
mov dword [0x406028], edx
mov edx, dword [0x406564]
push 0x3117
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x10
lea eax, [esp + 0x14]
push 0x406e0c
push eax
call fcn.004034c0
add esp, 0xc
push 0xd
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406dfc]
mov dword [0x40c764], eax
mov dword [eax], ecx
mov edx, dword [0x406e00]
mov dword [eax + 4], edx
mov ecx, dword [0x406e04]
mov dword [eax + 8], ecx
mov edx, dword [0x40680c]
push 0x41d4
push 0x2e17
push 0x1445
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x40c764]
push 0xc
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.004035c0
mov edx, dword [0x406748]
add esp, 0xc
push 0xc27
push 0x3015
push 0x4dc7
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x406144]
mov eax, 0x78787879
imul ecx
sar edx, 5
mov eax, edx
push 0x12
shr eax, 0x1f
lea ecx, [esp + 0x14]
add edx, eax
push 0x406de8
push ecx
mov dword [0x4061fc], 0x7aba
mov dword [0x406144], edx
call fcn.004034c0
add esp, 0xc
push 0xd
push 8
call ebx
push eax
call ebp
mov edx, dword [0x406dd8]
mov dword [0x40c758], eax
mov dword [eax], edx
mov ecx, dword [0x406ddc]
mov dword [eax + 4], ecx
mov edx, dword [0x406de0]
mov dword [eax + 8], edx
mov eax, dword [0x40c758]
push 0xc
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.004035c0
mov ecx, dword [0x4061fc]
mov eax, 0x10fef011
imul ecx
sar edx, 4
mov ecx, dword [0x406814]
mov eax, edx
shr eax, 0x1f
add edx, eax
add esp, 0xc
mov dword [0x4061fc], edx
mov edx, dword [0x406578]
push ecx
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x4060d8]
mov ecx, 0x312c
cdq
idiv ecx
push 0xb
push 0x406dcc
mov dword [0x406184], edx
lea edx, [esp + 0x18]
push edx
call fcn.004034c0
add esp, 0xc
push 0xf
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406dbc]
mov dword [0x40c784], eax
mov dword [eax], ecx
mov edx, dword [0x406dc0]
mov dword [eax + 4], edx
mov ecx, dword [0x406dc4]
mov dword [eax + 8], ecx
mov dx, word [0x406dc8]
mov word [eax + 0xc], dx
mov eax, dword [0x40c784]
push 0xe
lea ecx, [esp + 0x14]
push eax
push ecx
mov dword [0x4061b0], 0x1a33
call fcn.004035c0
mov edx, dword [0x4065bc]
mov eax, dword [0x40660c]
add esp, 0xc
push 0x4b
push 0x4420
push 0x28e4
push 0x19f0
push 0x2ca9
push edx
push eax
call edi
mov ecx, dword [0x4065e8]
push 0x6aba
push 0x1d4c
push 0x3379
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [0x406658]
mov eax, dword [0x406730]
push edx
push eax
mov dword [0x4061d0], 0x7999
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x4061dc]
push 0x15
push 0x406da4
lea ecx, [eax + eax*4]
lea edx, [eax + ecx*8]
lea ecx, [eax + edx*2]
shl ecx, 4
add ecx, eax
lea edx, [eax + ecx*8]
lea eax, [esp + 0x18]
push eax
mov dword [0x406284], edx
call fcn.004034c0
add esp, 0xc
push 0xa
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406d98]
mov dword [0x40c778], eax
mov dword [eax], ecx
mov edx, dword [0x406d9c]
mov dword [eax + 4], edx
mov cl, byte [0x406da0]
mov byte [eax + 8], cl
call esi
mov edx, dword [0x40c778]
push 9
mov dword [0x406068], 0x6b55
mov dword [0x406008], 0x1a51
push edx
lea eax, [esp + 0x18]
push eax
call fcn.004035c0
mov ecx, dword [0x40607c]
mov eax, 0x342da7f3
imul ecx
sar edx, 5
mov ecx, edx
add esp, 0xc
shr ecx, 0x1f
add edx, ecx
mov dword [0x40621c], 0x6dbc
mov dword [0x40607c], edx
call esi
push 0x15
lea edx, [esp + 0x14]
push 0x406d80
push edx
call fcn.004034c0
add esp, 0xc
push 9
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406d74]
mov dword [0x40c770], eax
mov dword [eax], ecx
mov eax, dword [0x40c770]
mov edx, dword [0x406d78]
push 8
mov dword [eax + 4], edx
mov ecx, dword [0x4061c4]
mov eax, 0x4d4873ed
mov dword [0x406160], 0x6f2d
imul ecx
sar edx, 4
mov ecx, edx
lea eax, [esp + 0x14]
shr ecx, 0x1f
add edx, ecx
mov dword [0x406044], 0x43ee
mov dword [0x4061c4], edx
mov edx, dword [0x40c770]
push edx
push eax
call fcn.004035c0
add esp, 0xc
call esi
mov ecx, dword [0x406754]
mov edx, dword [0x40671c]
push 0xd
push 0x4752
push 0x6491
push 0x52e7
push 0x1177
push ecx
push edx
call edi
call esi
mov eax, dword [0x40616c]
push 0xb
lea ecx, [esp + 0x14]
add eax, 0xffff9873
push 0x406d68
push ecx
mov dword [0x4062ec], eax
mov dword [0x4062c8], 0x384
call fcn.004034c0
add esp, 0xc
push 0x13
push 8
call ebx
push eax
call ebp
mov edx, dword [0x406d54]
mov dword [0x40c768], eax
mov dword [eax], edx
mov ecx, dword [0x406d58]
mov dword [eax + 4], ecx
mov edx, dword [str.K_Cd4y._v]
mov dword [eax + 8], edx
mov ecx, dword [0x406d60]
mov dword [eax + 0xc], ecx
mov dx, word [0x406d64]
mov word [eax + 0x10], dx
call esi
mov eax, dword [0x40c768]
push 0x12
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.004035c0
mov edx, dword [0x4065d8]
add esp, 0xc
push 0x1b6
push 0x472e
push 0x123e
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x406520]
mov ecx, dword [0x406604]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [0x406294]
mov eax, dword [0x4065b8]
imul edx, edx, 0x6820
push 0x2639
push 0x67ee
push 0x3b5
push eax
mov dword [0x406270], edx
mov dword [0x4060f0], 0x2052
call dword [sym.imp.USER32.dll_SendMessageA]
push 9
lea ecx, [esp + 0x14]
push 0x406d48
push ecx
call fcn.004034c0
add esp, 0xc
push 0xa
push 8
call ebx
push eax
call ebp
mov edx, dword [0x406d3c]
mov dword [0x40c760], eax
mov dword [eax], edx
mov ecx, dword [0x406d40]
mov dword [eax + 4], ecx
mov dl, byte [0x406d44]
mov byte [eax + 8], dl
mov ecx, dword [0x406298]
mov eax, 0x4da637d
push 9
imul ecx
sar edx, 2
mov ecx, dword [0x40c760]
mov eax, edx
shr eax, 0x1f
add edx, eax
push ecx
mov dword [0x406298], edx
lea edx, [esp + 0x18]
push edx
call fcn.004035c0
mov eax, dword [0x40614c]
mov ecx, 0x2a12
cdq
add esp, 0xc
mov dword [0x406028], 0x6a69
idiv ecx
mov eax, dword [0x4066c4]
push 0xbb
push 0x4d92
push 0x12cd
push 0x4656
push 0x44e8
mov dword [0x406214], edx
mov edx, dword [0x406808]
push edx
push eax
call edi
mov ecx, dword [0x406568]
mov edx, dword [0x406864]
push ecx
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [str.eGz8_U_a]
push 0xe
lea ecx, [esp + 0x14]
add eax, 0x4a71
push 0x406d2c
push ecx
mov dword [0x4061d8], eax
call fcn.004034c0
add esp, 0xc
push 4
push 8
call ebx
push eax
call ebp
mov dx, word [0x406d28]
mov dword [0x40c754], eax
mov word [eax], dx
mov cl, byte [0x406d2a]
mov byte [eax + 2], cl
mov edx, dword [0x4062c8]
mov eax, dword [0x40c754]
push 3
lea ecx, [esp + 0x14]
add edx, 0x1209
push eax
push ecx
mov dword [0x4061e4], edx
call fcn.004035c0
mov ecx, dword [0x406264]
mov eax, 0x9c09c09d
imul ecx
add edx, ecx
mov ecx, dword [0x4067ac]
sar edx, 6
add esp, 0xc
mov eax, edx
shr eax, 0x1f
push 0x6d20
push 0x4d35
add edx, eax
push 0x49b1
push ecx
mov dword [0x406264], edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x4060c4]
mov eax, 0x30c30c31
imul ecx
sar edx, 5
mov eax, edx
push 0x16
shr eax, 0x1f
lea ecx, [esp + 0x14]
add edx, eax
push 0x406d10
push ecx
mov dword [0x4060c4], edx
mov dword [0x4062cc], 0xe17
mov dword [0x4061f4], 0x5f17
mov dword [0x406338], 0x291e
call fcn.004034c0
add esp, 0xc
push 9
push 8
call ebx
push eax
call ebp
mov edx, dword [0x406d04]
mov dword [0x40c74c], eax
mov dword [eax], edx
mov ecx, dword [0x40c74c]
mov eax, dword [0x406d08]
mov dword [ecx + 4], eax
mov edx, dword [0x40672c]
mov dword [0x406260], 0x32c
push edx
mov eax, dword [0x406650]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x40c74c]
push 8
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.004035c0
mov eax, dword [str.eGz8_U_a]
mov ecx, dword [0x406650]
mov edx, dword [0x4067b0]
add esp, 0xc
add eax, 0xffffd19b
mov dword [0x4061c0], 0x3ace
push 0xb5
push 0x99
push 0x117b
push 0x1329
push 0xe56
push ecx
push edx
mov dword [0x40624c], eax
call edi
push 0xf
lea eax, [esp + 0x14]
push 0x406cf4
push eax
call fcn.004034c0
add esp, 0xc
push 6
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406cec]
mov dword [0x40c744], eax
mov dword [eax], ecx
mov dl, byte [0x406cf0]
push 0x51
push 0x2ba2
mov byte [eax + 4], dl
mov eax, dword [0x406850]
mov ecx, dword [0x4064d4]
push 0x237c
push 0x6392
push 0x78b4
push eax
push ecx
mov dword [0x4061d8], 0x207b
call edi
mov edx, dword [0x40c744]
push 5
lea eax, [esp + 0x14]
push edx
push eax
call fcn.004035c0
mov ecx, dword [0x406860]
add esp, 0xc
push 0x7a9a
push 0x72e7
push 0x3b4d
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [0x406628]
mov eax, dword [0x406880]
push 0x1c
push 0xad2
push 0x2860
push 0x13a9
push 0x64a3
push edx
push eax
call edi
mov eax, dword [0x406260]
lea ecx, [eax + eax*2]
shl ecx, 4
sub ecx, eax
shl ecx, 7
sub ecx, eax
shl ecx, 1
mov edx, dword [0x40674c]
mov eax, dword [0x4066ec]
push edx
push eax
mov dword [0x406330], ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x406364]
mov eax, 0x30c30c31
imul ecx
sar edx, 5
mov ecx, edx
push 0xb
shr ecx, 0x1f
add edx, ecx
push 0x406ce0
mov dword [0x406364], edx
lea edx, [esp + 0x18]
push edx
mov dword [0x406340], 0x89a
call fcn.004034c0
add esp, 0xc
push 9
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406cd4]
mov dword [0x40c73c], eax
mov dword [eax], ecx
mov eax, dword [0x40c73c]
mov edx, dword [0x406cd8]
push 8
mov dword [eax + 4], edx
mov ecx, dword [0x40603c]
mov eax, ecx
mov dword [0x40616c], 0x6fef
shl eax, 6
sub eax, ecx
lea eax, [eax + eax*4]
lea eax, [eax + eax*8]
lea ecx, [eax + eax*8]
mov eax, 0xd60f8581
mov dword [0x4062f0], ecx
mov ecx, dword [0x4062e0]
imul ecx
add edx, ecx
mov ecx, dword [0x40c73c]
sar edx, 0xd
mov eax, edx
push ecx
shr eax, 0x1f
add edx, eax
mov dword [str.OjmB_], edx
lea edx, [esp + 0x18]
push edx
call fcn.004035c0
mov ecx, dword [0x406254]
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov ecx, dword [0x40677c]
mov eax, edx
shr eax, 0x1f
add edx, eax
add esp, 0xc
mov dword [0x406254], edx
mov edx, dword [0x406638]
push ecx
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x406590]
mov ecx, dword [0x4067d8]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [0x406168]
push 0xa
add edx, 0xffffbfcd
mov dword [0x406010], 0x26e5
mov dword [0x4060c8], edx
push 0x406cc8
lea eax, [esp + 0x18]
push eax
call fcn.004034c0
add esp, 0xc
push 6
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406cc0]
mov dword [0x40c730], eax
mov dword [eax], ecx
mov dl, byte [0x406cc4]
mov byte [eax + 4], dl
mov eax, dword [0x40686c]
push 0x565c
push 0x614b
push 0x6a53
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x40c730]
push 5
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.004035c0
add esp, 0xc
call esi
call esi
mov eax, dword [0x406568]
mov ecx, dword [0x4068d0]
push 0xb6
push 0x7193
push 0x1fe
push 0x1bd9
push 0x314b
push eax
push ecx
mov dword [0x40609c], 0x2d4a
call edi
push 0xa
lea edx, [esp + 0x14]
push 0x406cb4
push edx
call fcn.004034c0
add esp, 0xc
push 0x10
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406ca4]
mov dword [0x40c75c], eax
mov dword [eax], ecx
mov edx, dword [0x406ca8]
mov dword [eax + 4], edx
mov ecx, dword [0x406cac]
mov dword [eax + 8], ecx
mov dx, word [0x406cb0]
mov word [eax + 0xc], dx
mov cl, byte [0x406cb2]
mov byte [eax + 0xe], cl
mov edx, dword [0x406860]
mov eax, dword [0x406738]
push edx
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x40c75c]
push 0xf
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.004035c0
mov eax, dword [0x406574]
add esp, 0xc
push 0x10
push 0x33b9
push 0x7744
push 0x6841
push GetProcAddress
push eax
mov ecx, dword [0x406758]
push ecx
call edi
mov ecx, dword [0x406244]
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 6
mov eax, edx
mov ecx, 0x2208
shr eax, 0x1f
add edx, eax
mov eax, dword [0x406290]
mov dword [0x406244], edx
cdq
idiv ecx
mov eax, dword [0x40611c]
lea ecx, [eax + eax*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
mov dword [0x406334], edx
lea edx, [ecx + ecx*4]
shl edx, 5
sub edx, eax
shl edx, 1
mov dword [0x4062cc], edx
call esi
push 0x14
lea eax, [esp + 0x14]
push 0x406c8c
push eax
mov dword [str.X9_nO__iIm], 0x6adf
call fcn.004034c0
add esp, 0xc
push 0xf
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406c7c]
mov dword [0x40c750], eax
mov dword [eax], ecx
mov edx, dword [0x406c80]
mov dword [eax + 4], edx
mov ecx, dword [0x406c84]
mov dword [eax + 8], ecx
mov dx, word [0x406c88]
mov word [eax + 0xc], dx
call esi
mov eax, dword [0x406658]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x6db3
push 0x5d27
push 0x278e
push eax
call edi
mov ecx, dword [0x406254]
mov edx, dword [0x40c750]
imul ecx, ecx, 0x14d
push 0xd
lea eax, [esp + 0x14]
push edx
push eax
mov dword [0x4062b4], ecx
call fcn.004035c0
mov ecx, dword [0x4068a0]
add esp, 0xc
push 0x41f0
push 0x14b9
push 0x5479
push ecx
call edi
call esi
mov edx, dword [0x406640]
mov eax, dword [0x4066dc]
push edx
push eax
call dword [sym.imp.USER32.dll_KillTimer]
call esi
push 0x13
push 0x406c68
lea ecx, [esp + 0x18]
push ecx
call fcn.004034c0
add esp, 0xc
push 0x15
push 8
call ebx
push eax
call ebp
mov ecx, 5
mov esi, 0x406c50
mov edi, eax
push 0xce
mov dword [0x40c748], eax
push 0x6c67
rep movsd dword es:[edi], dword [esi]
mov edx, dword [0x4068d4]
mov eax, dword [0x406600]
mov edi, dword [sym.imp.USER32.dll_SetWindowPos]
push 0x3d16
push 0x6f55
push 0x79b6
push edx
push eax
call edi
mov ecx, dword [0x40c748]
push 0x14
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.004035c0
mov esi, dword [sym.imp.USER32.dll_GetActiveWindow]
add esp, 0xc
call esi
mov eax, dword [0x406738]
push 0xb31
push 0x7670
push 0x52cf
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x4063a8]
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 4
mov ecx, edx
push 0xf
shr ecx, 0x1f
add edx, ecx
push 0x406c40
mov dword [0x4063a8], edx
lea edx, [esp + 0x18]
push edx
call fcn.004034c0
add esp, 0xc
push 0xf
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406c30]
mov dword [0x40c740], eax
mov dword [eax], ecx
mov edx, dword [0x406c34]
mov dword [eax + 4], edx
mov ecx, dword [0x406c38]
mov dword [eax + 8], ecx
mov dx, word [0x406c3c]
push 0xe8
push 0x186
mov word [eax + 0xc], dx
mov eax, dword [0x4061c4]
mov ecx, dword [0x406638]
mov edx, dword [0x406548]
push 0x2ca
push 0x74a9
push 0x4708
add eax, 0xffffdaaa
push ecx
push edx
mov dword [0x406280], eax
call edi
mov eax, dword [0x40688c]
mov ecx, dword [0x406788]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [0x40c740]
push 0xe
lea eax, [esp + 0x14]
push edx
push eax
call fcn.004035c0
mov ecx, dword [0x4061fc]
mov eax, 0xae4c415d
imul ecx
add edx, ecx
mov eax, 0x2f149903
sar edx, 6
mov ecx, edx
add esp, 0xc
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [0x406110]
mov dword [0x4061fc], edx
imul ecx
sar edx, 4
mov ecx, dword [0x4067e4]
mov eax, edx
shr eax, 0x1f
add edx, eax
push ecx
mov dword [0x406110], edx
mov edx, dword [0x406524]
push edx
mov dword [str.:p3M], 0x1ab0
call dword [sym.imp.USER32.dll_KillTimer]
push 9
lea eax, [esp + 0x14]
push 0x406c24
push eax
mov dword [str.OjmB_], 0x36
call fcn.004034c0
add esp, 0xc
push 0x13
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406c10]
mov dword [0x40c738], eax
mov dword [eax], ecx
mov edx, dword [0x406c14]
mov dword [eax + 4], edx
mov ecx, dword [0x406c18]
mov dword [eax + 8], ecx
mov edx, dword [0x406c1c]
mov dword [eax + 0xc], edx
mov cx, word [0x406c20]
mov word [eax + 0x10], cx
mov edx, dword [0x406308]
imul edx, edx, 0x19f6
mov eax, dword [0x406274]
mov ecx, dword [0x40c738]
mov dword [0x4061d0], edx
push 0x12
lea edx, [esp + 0x14]
add eax, 0xffff94b7
push ecx
push edx
mov dword [0x40619c], eax
call fcn.004035c0
add esp, 0xc
call esi
call esi
mov eax, dword [0x406524]
push 0x256b
push 0x4dc8
push 0x6445
push eax
mov dword [0x406080], 0xa6a
call dword [sym.imp.USER32.dll_SendMessageA]
push 0xe
push 0x406c00
lea ecx, [esp + 0x18]
push ecx
call fcn.004034c0
add esp, 0xc
push 0x11
push 8
call ebx
push eax
call ebp
mov edx, dword [0x406bec]
mov dword [0x40c72c], eax
mov dword [eax], edx
mov ecx, dword [0x406bf0]
mov dword [eax + 4], ecx
mov edx, dword [0x406bf4]
mov dword [eax + 8], edx
mov ecx, dword [0x406bf8]
mov dword [eax + 0xc], ecx
mov edx, dword [0x406648]
push 0x3fcd
push 0x1ec1
push 0x1af8
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x40c72c]
push 0x10
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.004035c0
mov ecx, dword [0x406134]
mov eax, 0xb40b40b5
imul ecx
add edx, ecx
mov ecx, dword [0x4060fc]
sar edx, 6
mov eax, edx
add esp, 0xc
shr eax, 0x1f
add edx, eax
mov eax, 0x2fa0be83
mov dword [0x406134], edx
imul ecx
sar edx, 4
mov ecx, edx
push 0x1d11
shr ecx, 0x1f
add edx, ecx
push 0x6ac9
mov dword [0x4060fc], edx
mov edx, dword [0x4067ec]
push 0x58ce
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x12
lea eax, [esp + 0x14]
push str.f_fX_
push eax
mov dword [0x406014], 0x433f
call fcn.004034c0
add esp, 0xc
push 0x11
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406bc4]
mov dword [0x40c724], eax
mov dword [eax], ecx
mov edx, dword [0x406bc8]
mov dword [eax + 4], edx
mov ecx, dword [0x406bcc]
mov dword [eax + 8], ecx
mov edx, dword [0x406bd0]
mov dword [eax + 0xc], edx
mov ecx, dword [0x406090]
mov eax, 0x86d90545
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
mov ecx, dword [0x40c724]
push 0x10
shr eax, 0x1f
add edx, eax
push ecx
mov dword [0x406090], edx
lea edx, [esp + 0x18]
push edx
call fcn.004035c0
mov ecx, dword [0x406108]
mov eax, 0x84210843
imul ecx
add edx, ecx
mov ecx, dword [0x4066a8]
sar edx, 5
mov eax, edx
add esp, 0xc
shr eax, 0x1f
add edx, eax
push ecx
mov dword [0x406108], edx
mov edx, dword [0x406924]
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x4061b0]
mov eax, 0x2e8ba2e9
imul ecx
mov ecx, dword [0x4063c8]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [ecx + ecx*8]
shl eax, 4
add eax, ecx
mov dword [0x4061b0], edx
lea eax, [eax + eax*4]
lea edx, [eax + eax*4]
lea eax, [ecx + edx*2]
mov dword [0x406134], eax
call esi
push 8
lea ecx, [esp + 0x14]
push 0x406bb8
push ecx
call fcn.004034c0
add esp, 0xc
push 0xd
push 8
call ebx
push eax
call ebp
mov edx, dword [0x406ba8]
mov dword [0x40c71c], eax
mov dword [eax], edx
mov ecx, dword [0x406bac]
mov dword [eax + 4], ecx
mov edx, dword [0x406bb0]
mov dword [eax + 8], edx
call esi
mov eax, dword [0x40c71c]
push 0xc
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.004035c0
mov edx, dword [0x4067d4]
mov eax, dword [0x4065dc]
add esp, 0xc
push 0xe1
push 0x4f5c
push 0x45ac
push 0x3d69
push 0xb07
push edx
push eax
call edi
mov ecx, dword [0x4067a0]
mov edx, dword [0x406870]
push ecx
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x4062bc]
mov ecx, 0x7be3
cdq
idiv ecx
mov ecx, dword [0x4061f4]
mov eax, 0xea0ea0eb
push 0x6bc
push 0x1eb6
push 0x5a93
mov dword [0x406144], edx
imul ecx
add edx, ecx
mov ecx, dword [0x406648]
sar edx, 6
mov eax, edx
push ecx
shr eax, 0x1f
add edx, eax
mov dword [0x4061f4], edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x17
lea edx, [esp + 0x14]
push 0x406b90
push edx
call fcn.004034c0
add esp, 0xc
push 0xe
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406b80]
mov dword [0x40c714], eax
mov dword [eax], ecx
mov edx, dword [0x406b84]
mov dword [eax + 4], edx
mov ecx, dword [0x406b88]
mov dword [eax + 8], ecx
mov dl, byte [0x406b8c]
mov byte [eax + 0xc], dl
mov eax, dword [0x406510]
push 0x6fb9
push 0x4116
push 0x6c1
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x40c714]
push 0xd
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.004035c0
mov eax, dword [0x4065fc]
mov ecx, dword [0x40677c]
add esp, 0xc
mov dword [0x4060b8], 0x1011
push 0xd3
push 0x2d1f
push 0x34d9
push 0xa84
push 0x285b
push eax
push ecx
call edi
mov eax, dword [0x406214]
mov ecx, 0xa93
cdq
idiv ecx
push 0x4c36
push 0x3bfa
push 0x4956
mov dword [0x406300], edx
mov edx, dword [0x4067b8]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x406630]
mov ecx, dword [0x4067d0]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
push 0x17
lea edx, [esp + 0x14]
push 0x406b68
push edx
call fcn.004034c0
add esp, 0xc
push 0xf
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406b58]
mov dword [0x40c708], eax
mov dword [eax], ecx
mov edx, dword [0x406b5c]
mov dword [eax + 4], edx
mov ecx, dword [0x406b60]
mov dword [eax + 8], ecx
mov dx, word [0x406b64]
mov word [eax + 0xc], dx
mov eax, dword [0x40c708]
push 0xe
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.004035c0
mov edx, dword [0x4062f8]
mov eax, dword [0x40674c]
mov ecx, dword [0x406644]
add esp, 0xc
add edx, 0x20e0
push 0x29
push 0x6cc
push 0x196d
push 0x5c55
push 0x5c5c
push eax
push ecx
mov dword [0x40625c], edx
call edi
call esi
mov edx, dword [0x4068bc]
mov eax, dword [0x4068c0]
push 0xb4
push 0x5c81
push 0x1889
push 0x5af7
push 0x1ad9
push edx
push eax
call edi
mov ecx, dword [0x406610]
mov edx, dword [0x406874]
push ecx
push edx
call dword [sym.imp.USER32.dll_KillTimer]
push 0x10
lea eax, [esp + 0x14]
push 0x406b44
push eax
call fcn.004034c0
add esp, 0xc
push 0xd
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406b34]
mov dword [0x40c734], eax
mov dword [eax], ecx
mov edx, dword [0x406b38]
mov dword [eax + 4], edx
mov ecx, dword [0x406b3c]
mov dword [eax + 8], ecx
mov edx, dword [0x4065dc]
push 0x5e67
push 0x5a53
push 0x5d6c
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0xc
mov eax, dword [0x40c734]
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.004035c0
add esp, 0xc
mov dword [0x406390], 0x5756
call esi
mov edx, dword [0x406558]
mov eax, dword [0x4064d4]
push 0x29
push 0x512f
push 0x7b81
push 0x7087
push 0x7091
push edx
push eax
call edi
push 0x14
lea ecx, [esp + 0x14]
push 0x406b1c
push ecx
call fcn.004034c0
add esp, 0xc
push 0xd
push 8
call ebx
push eax
call ebp
mov edx, dword [0x406b0c]
mov dword [0x40c728], eax
mov dword [eax], edx
mov ecx, dword [0x406b10]
mov dword [eax + 4], ecx
mov edx, dword [0x406b14]
mov dword [eax + 8], edx
mov eax, dword [0x406550]
push 0x2a35
push 0xe38
push 0x6487
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x406914]
mov edx, dword [0x4065ac]
push ecx
push edx
mov dword [0x40623c], 0x171d
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x40c728]
push 0xc
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.004035c0
mov edx, dword [0x4060e8]
mov ecx, dword [str.pD._vB_n]
add edx, 0xffffb8c4
mov eax, 0xd4432941
mov dword [0x406258], edx
imul ecx
add edx, ecx
mov ecx, dword [0x40689c]
sar edx, 0xa
add esp, 0xc
mov eax, edx
shr eax, 0x1f
push 0x4a35
push 0x1065
add edx, eax
push 0xf
push ecx
mov dword [0x4061ec], 0x55bb
mov dword [0x406344], edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0xe
lea edx, [esp + 0x14]
push 0x406afc
push edx
call fcn.004034c0
add esp, 0xc
push 0xf
push 8
call ebx
push eax
call ebp
mov ecx, dword [str.kq_vT]
mov dword [0x40c720], eax
mov dword [eax], ecx
mov edx, dword [0x406af0]
mov dword [eax + 4], edx
mov ecx, dword [0x406af4]
mov dword [eax + 8], ecx
mov dx, word [0x406af8]
mov word [eax + 0xc], dx
mov ecx, dword [0x406304]
mov eax, 0x4c346405
mov dword [0x40620c], 0xe32
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [0x406304], edx
call esi
mov ecx, dword [0x40c720]
push 0xe
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.004035c0
mov ecx, dword [0x4062ac]
mov eax, 0x43b3d5b
imul ecx
mov ecx, dword [0x40638c]
add esp, 0xc
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0x885b14d7
mov dword [0x4062ac], edx
imul ecx
add edx, ecx
mov eax, dword [0x406810]
sar edx, 0xb
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov dword [0x406184], edx
mov edx, dword [0x4064d8]
push edx
push eax
call dword [sym.imp.USER32.dll_KillTimer]
call esi
mov eax, dword [0x4061f4]
mov ecx, 0x1c24
cdq
idiv ecx
push 0xc
push 0x406adc
mov dword [str.j__z_f__aQe__a], edx
lea edx, [esp + 0x18]
push edx
call fcn.004034c0
add esp, 0xc
push 0xa
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406ad0]
mov dword [0x40c718], eax
mov dword [eax], ecx
mov edx, dword [0x406ad4]
mov dword [eax + 4], edx
mov cl, byte [0x406ad8]
mov byte [eax + 8], cl
mov ecx, dword [0x4062a8]
mov eax, 0x9c09c09d
imul ecx
add edx, ecx
sar edx, 6
mov ecx, dword [0x4066a8]
mov eax, edx
shr eax, 0x1f
add edx, eax
push ecx
mov dword [0x4062a8], edx
mov edx, dword [0x406878]
push edx
mov dword [0x406134], 0x228a
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x40c718]
push 9
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.004035c0
mov edx, dword [0x406164]
push 0xd
lea eax, [esp + 0x20]
add edx, 0xffff9b4c
push 0x406ac0
push eax
mov dword [0x406444], edx
mov dword [0x4063c0], 0x4df1
mov dword [0x406134], 0x3214
call fcn.004034c0
add esp, 0x18
push 9
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406ab4]
mov dword [0x40c710], eax
mov dword [eax], ecx
mov eax, dword [0x40c710]
mov edx, dword [0x406ab8]
mov dword [eax + 4], edx
mov ecx, dword [0x406474]
mov eax, 0x2fa0be83
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov dword [0x406474], edx
call esi
mov eax, dword [0x40604c]
mov ecx, dword [0x40c710]
mov edx, eax
push 8
shl edx, 7
add edx, eax
push ecx
lea eax, [eax + edx*2]
lea edx, [esp + 0x18]
push edx
lea eax, [eax + eax*8]
shl eax, 1
mov dword [0x4063a8], eax
call fcn.004035c0
mov eax, dword [0x406788]
mov ecx, dword [0x406550]
add esp, 0xc
push 0xea
push 0x32ec
push 0x4045
push 0x1af6
push 0x4cc7
push eax
push ecx
call edi
call esi
mov ecx, dword [0x406148]
lea eax, [ecx + ecx*8]
shl eax, 6
add eax, ecx
shl eax, 3
sub eax, ecx
lea edx, [eax + eax*2]
shl edx, 1
mov ecx, dword [0x406010]
mov eax, 0x63e7063f
mov dword [0x4063b0], edx
imul ecx
sar edx, 5
mov ecx, dword [0x406974]
mov eax, edx
shr eax, 0x1f
add edx, eax
push ecx
mov dword [0x406010], edx
mov edx, dword [0x4066c8]
push edx
call dword [sym.imp.USER32.dll_KillTimer]
push 9
lea eax, [esp + 0x14]
push 0x406aa8
push eax
call fcn.004034c0
add esp, 0xc
push 0x13
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406a94]
mov dword [0x40c704], eax
mov dword [eax], ecx
mov edx, dword [0x406a98]
mov dword [eax + 4], edx
mov ecx, dword [0x406a9c]
mov dword [eax + 8], ecx
mov edx, dword [0x406aa0]
mov dword [eax + 0xc], edx
mov cx, word [0x406aa4]
mov word [eax + 0x10], cx
call esi
mov ecx, dword [0x406090]
mov eax, 0x4e9c1b41
imul ecx
sar edx, 0xd
mov ecx, dword [0x40c704]
mov eax, edx
shr eax, 0x1f
add edx, eax
push 0x12
mov dword [0x406270], edx
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.004035c0
mov eax, dword [0x406610]
add esp, 0xc
mov dword [0x406450], 0x7668
push 0x1d5
push 0x3994
push 0x7c48
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
call esi
push 0xf
lea ecx, [esp + 0x14]
push 0x406a84
push ecx
call fcn.004034c0
add esp, 0xc
push 0xa
push 8
call ebx
push eax
call ebp
mov edx, dword [0x406a78]
mov dword [0x40c700], eax
mov dword [eax], edx
mov ecx, dword [0x406a7c]
mov dword [eax + 4], ecx
mov dl, byte [0x406a80]
mov byte [eax + 8], dl
mov eax, dword [0x40c700]
mov dword [0x406370], 0x6cae
push 9
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.004035c0
mov edx, dword [0x406980]
add esp, 0xc
push 0x4dad
push 0x63fa
push 0x3c77
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x406900]
push 0x7cc1
push 0x4f3f
push 0x585b
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x406544]
mov edx, dword [0x4065dc]
push 0xc4
push 0x1597
push 0x2f87
push 0x4e4d
push 0x201b
push ecx
push edx
call edi
mov eax, dword [0x406954]
push 0x5db9
push 0x4e91
push 0x22a5
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [0x4063ac], 0x19f1
call esi
push 9
lea ecx, [esp + 0x14]
push 0x406a6c
push ecx
mov dword [0x406220], 0x71ff
call fcn.004034c0
add esp, 0xc
push 4
push 8
call ebx
push eax
call ebp
mov dx, word [0x406a68]
mov dword [0x40c6fc], eax
mov word [eax], dx
mov cl, byte [0x406a6a]
mov byte [eax + 2], cl
mov edx, dword [0x40c6fc]
push 3
lea eax, [esp + 0x14]
push edx
push eax
mov dword [0x406270], 0x78e4
call fcn.004035c0
mov ecx, dword [0x4066e0]
mov edx, dword [0x4064f0]
add esp, 0xc
push 0xdb
push 0x50ff
push 0x5d79
push 0x20b4
push 0x5ac
push ecx
push edx
call edi
mov eax, dword [0x4067b4]
mov ecx, dword [0x4066a8]
push 0xee
push 0x2bb0
push 0x400a
push 0x35a7
push 0xee1
push eax
push ecx
call edi
push 0x15
lea edx, [esp + 0x14]
push 0x406a50
push edx
call fcn.004034c0
add esp, 0xc
push 5
push 8
call ebx
push eax
call ebp
mov ecx, dword [0x406a48]
mov dword [0x40c6f8], eax
mov dword [eax], ecx
mov edx, dword [0x40c6f8]
push 4
lea eax, [esp + 0x14]
push edx
push eax
mov dword [0x40631c], 0x71f8
mov dword [0x406090], 0x6f94
call fcn.004035c0
mov ecx, dword [0x406830]
mov edx, dword [0x40691c]
add esp, 0xc
push 0x6f
push 0x7251
push 0x383d
push 0x1db1
push 0x66d2
push ecx
push edx
call edi
mov eax, dword [0x4065bc]
mov ecx, dword [0x4069e0]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [0x406908]
mov eax, dword [0x40689c]
push 0x11
push 0x18f0
push 0x5b65
push 0x561
push 0xe6e
push edx
push eax
call edi
call esi
push 0xe
lea ecx, [esp + 0x14]
push 0x406a38
push ecx
call fcn.004034c0
add esp, 0xc
push 6
push 8
call ebx
push eax
call ebp
mov edx, dword [0x406a30]
mov dword [0x40c6f4], eax
mov dword [eax], edx
mov cl, byte [0x406a34]
push 0xe8
push 0x63f0
mov byte [eax + 4], cl
mov edx, dword [0x4067d0]
mov eax, dword [0x406540]
push 0x74ae
push 0x16eb
push 0x5c5a
push edx
push eax
call edi
mov ecx, dword [0x40c6f4]
push 5
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.004035c0
add esp, 0xc
mov eax, dword [0x40677c]
mov ecx, dword [0x406750]
push 0x81
push 0x4f53
push 0x54ae
push 0x4e82
push 0x4f02
push eax
push ecx
call edi
call esi
call esi
mov edx, dword [0x406270]
mov ecx, dword [0x4060a4]
add edx, 0x12a7
mov eax, 0xb21642c9
mov dword [0x4060a0], edx
imul ecx
add edx, ecx
push 8
sar edx, 5
mov eax, edx
lea ecx, [esp + 0x14]
shr eax, 0x1f
add edx, eax
push 0x406a24
push ecx
mov dword [0x4060a4], edx
call fcn.004034c0
add esp, 0xc
push 4
push 8
call ebx
push eax
call ebp
mov dx, word [0x406a20]
mov dword [0x40c70c], eax
mov word [eax], dx
mov cl, byte [0x406a22]
mov byte [eax + 2], cl
call esi
mov edx, dword [0x4064f0]
mov eax, dword [0x406580]
mov esi, dword [sym.imp.USER32.dll_KillTimer]
push edx
push eax
call esi
mov ecx, dword [0x40687c]
push 0x18d0
push 0x518e
push 0x6b2
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [0x40c70c]
push 3
lea eax, [esp + 0x14]
push edx
push eax
call fcn.004035c0
mov ecx, dword [0x4069e0]
mov edx, dword [0x4065f0]
add esp, 0xc
push ecx
push edx
call esi
mov eax, dword [0x4067f8]
mov ecx, dword [0x406564]
push eax
push ecx
call esi
pop edi
pop esi
pop ebp
mov eax, 3
pop ebx
add esp, 0x104
ret