Function at 0x416997
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
push ebx
mov ebx, dword [0x4339ac]
mov eax, dword [ebx + 0x8a0]
push esi
xor esi, esi
cmp eax, esi
mov dword [ebp - 4], eax
je 0x417431
push edi
push esi
push esi
push 0xc67a
push dword [ebp + 8]
xor edi, edi
inc edi
push edi
push edi
push esi
push esi
push 0x50010800
push 0x42646b
push str.EDIT
push 0x200
call dword [sym.imp.USER32.dll_CreateWindowExA]
push edi
mov dword [ebx + 0x39f0], eax
push dword [ebx + 0x118]
push 0x30
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push esi
push esi
push 0xc67e
push dword [ebp + 8]
push edi
push edi
push esi
push esi
push 0x50010f00
push 0x42646b
push str.BUTTON
push esi
call dword [sym.imp.USER32.dll_CreateWindowExA]
push edi
mov dword [ebx + 0x3a00], eax
push dword [ebx + 0x118]
push 0x30
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x42d8fc
push esi
push 0xc
push dword [ebx + 0x3a00]
call dword [sym.imp.USER32.dll_SendMessageA]
push esi
push esi
push 0xc67d
push dword [ebp + 8]
push edi
push edi
push esi
push esi
push 0x50010f00
push 0x42646b
push str.BUTTON
push esi
call dword [sym.imp.USER32.dll_CreateWindowExA]
push edi
mov dword [ebx + 0x39fc], eax
push dword [ebx + 0x118]
push 0x30
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x42cc84
push esi
push 0xc
push dword [ebx + 0x39fc]
call dword [sym.imp.USER32.dll_SendMessageA]
push esi
push esi
push 0xc67c
push dword [ebp + 8]
push edi
push edi
push esi
push esi
push 0x50010f00
push 0x42646b
push str.BUTTON
push esi
call dword [sym.imp.USER32.dll_CreateWindowExA]
push edi
mov dword [ebx + 0x39f8], eax
push dword [ebx + 0x118]
push 0x30
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x42cc88
push esi
push 0xc
push dword [ebx + 0x39f8]
call dword [sym.imp.USER32.dll_SendMessageA]
push esi
push esi
push 0xc684
push dword [ebp + 8]
push edi
push edi
push esi
push esi
push 0x50010f02
push 0x42646b
push str.BUTTON
push esi
call dword [sym.imp.USER32.dll_CreateWindowExA]
push esi
push esi
push 0xc682
push dword [ebp + 8]
mov dword [ebx + 0x3a18], eax
push edi
push edi
push esi
push esi
push 0x50010f02
push 0x42646b
push str.BUTTON
push esi
call dword [sym.imp.USER32.dll_CreateWindowExA]
push esi
push esi
push 0xc681
push dword [ebp + 8]
mov dword [ebx + 0x3a10], eax
push edi
push edi
push esi
push esi
push 0x50010f02
push 0x42646b
push str.BUTTON
push esi
call dword [sym.imp.USER32.dll_CreateWindowExA]
push esi
push esi
push 0xc680
push dword [ebp + 8]
mov dword [ebx + 0x3a0c], eax
push edi
push edi
push esi
push esi
push 0x50010f02
push 0x42646b
push str.BUTTON
push esi
call dword [sym.imp.USER32.dll_CreateWindowExA]
push esi
push esi
push 0xc67f
push dword [ebp + 8]
mov dword [ebx + 0x3a08], eax
push edi
push edi
push esi
push esi
push 0x50010f02
push 0x42646b
push str.BUTTON
push esi
call dword [sym.imp.USER32.dll_CreateWindowExA]
push esi
push esi
push 0xc683
push dword [ebp + 8]
mov dword [ebx + 0x3a04], eax
push edi
push edi
push esi
push esi
push 0x50010f00
push 0x42646b
push str.BUTTON
push esi
call dword [sym.imp.USER32.dll_CreateWindowExA]
push edi
mov dword [ebx + 0x3a14], eax
push dword [ebx + 0x118]
push 0x30
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x42646b
push esi
push 0xc
push dword [ebx + 0x3a14]
call dword [sym.imp.USER32.dll_SendMessageA]
push esi
push esi
push 0xc67b
push dword [ebp + 8]
push edi
push edi
push esi
push esi
push 0x503010c4
push 0x42646b
push str.EDIT
push 0x200
call dword [sym.imp.USER32.dll_CreateWindowExA]
push edi
mov dword [ebx + 0x39f4], eax
push dword [ebx + 0x120]
push 0x30
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push esi
push esi
push 0xc5
push dword [ebx + 0x39f4]
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebx + 0x3a34], esi
mov dword [ebx + 0x3a30], esi
mov dword [ebx + 0x3a38], esi
mov dword [ebx + 0x3a20], esi
mov dword [ebx + 0x3a24], 5
mov dword [ebx + 0x3a4c], esi
mov dword [ebx + 0x3c5c], esi
mov dword [ebx + 0x3c58], esi
mov dword [ebx + 0x3a3c], esi
mov dword [ebx + 0x3a40], 6
call fcn.0041686d
mov eax, dword [ebp + 0xc]
push 2
mov dword [ebp - 0x18], eax
pop eax
push 3
pop ecx
push 4
lea edx, [ebp - 8]
push edx
lea edx, [ebp - 0x1c]
push edx
push ecx
push 0x50
push esi
push eax
push esi
push dword [ebp - 4]
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], ecx
call fcn.0041bbd0
lea eax, [ebp - 0x4c]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0x44]
add eax, 0xffffffc7
push 4
mov dword [ebp + 8], eax
mov dword [ebp - 0x3c], eax
add eax, 0x31
push esi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push esi
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebx + 0x39f0]
mov dword [ebp - 0x38], 0x33
push esi
push esi
push esi
push dword [ebp - 4]
mov dword [ebp - 0x30], 0x44
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 2
call fcn.0041aef0
mov eax, dword [ebp + 8]
sub eax, 0x34
push 4
mov dword [ebp + 8], eax
mov dword [ebp - 0x3c], eax
add eax, 0x31
push esi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push esi
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebx + 0x3a00]
mov dword [ebp - 0x38], 0x32
push esi
push esi
push esi
push dword [ebp - 4]
mov dword [ebp - 0x30], 0x45
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 2
call fcn.0041aef0
mov eax, dword [ebp + 8]
sub eax, 0x34
mov dword [ebp + 8], eax
mov dword [ebp - 0x3c], eax
push 4
add eax, 0x31
push esi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push esi
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebx + 0x39fc]
mov dword [ebp - 0x38], 0x32
push esi
push esi
push esi
push dword [ebp - 4]
mov dword [ebp - 0x30], 0x45
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 2
call fcn.0041aef0
mov eax, dword [ebp + 8]
sub eax, 0x34
push 4
mov dword [ebp + 8], eax
mov dword [ebp - 0x3c], eax
add eax, 0x31
push esi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push esi
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebx + 0x39f8]
mov dword [ebp - 0x38], 0x32
push esi
push esi
push esi
push dword [ebp - 4]
mov dword [ebp - 0x30], 0x45
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 2
call fcn.0041aef0
mov eax, dword [ebp + 8]
sub eax, 0xf
mov dword [ebp + 8], eax
mov dword [ebp - 0x3c], eax
add eax, 0xb
mov dword [ebp - 0x38], 0x35
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0x40
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov eax, dword [ebp + 0xc]
push 4
push esi
push esi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0xf0c0c0
mov dword [ebp - 0x10], eax
lea eax, [ebx + 0x3a2c]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push esi
push edi
push esi
push esi
push dword [ebp - 4]
mov dword [ebp - 0x14], 2
call fcn.0041aef0
mov eax, dword [ebp + 8]
sub eax, 0x1e
push 4
mov dword [ebp + 8], eax
mov dword [ebp - 0x3c], eax
add eax, 0x1d
push edi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0xc]
push 0x42d934
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0xf0c0c0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push esi
push edi
push esi
push esi
push dword [ebp - 4]
mov dword [ebp - 0x38], 0x32
mov dword [ebp - 0x30], 0x45
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 2
call fcn.0041aef0
mov eax, dword [ebp + 8]
sub eax, 0x10
mov dword [ebp + 8], eax
mov dword [ebp - 0x3c], eax
add eax, 0xd
push 4
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push esi
mov dword [ebp - 0x38], 0x32
mov dword [ebp - 0x30], 0x43
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 2
mov dword [ebp - 0x10], eax
push esi
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebx + 0x3a18]
push esi
push esi
push esi
push dword [ebp - 4]
call fcn.0041aef0
mov eax, dword [ebp + 8]
sub eax, 0x1e
push 4
mov dword [ebp + 8], eax
mov dword [ebp - 0x3c], eax
add eax, 0x1d
push edi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0xc]
push 0x42d930
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0xf0c0c0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push esi
push edi
push esi
push esi
push dword [ebp - 4]
mov dword [ebp - 0x38], 0x32
mov dword [ebp - 0x30], 0x45
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 2
call fcn.0041aef0
mov eax, dword [ebp + 8]
sub eax, 0x10
mov dword [ebp + 8], eax
mov dword [ebp - 0x3c], eax
add eax, 0xd
push 4
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push esi
mov dword [ebp - 0x10], eax
push esi
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebx + 0x3a10]
mov dword [ebp - 0x38], 0x32
mov dword [ebp - 0x30], 0x43
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 2
push esi
push esi
push esi
push dword [ebp - 4]
call fcn.0041aef0
mov eax, dword [ebp + 8]
sub eax, 0x1e
push 4
mov dword [ebp + 8], eax
mov dword [ebp - 0x3c], eax
add eax, 0x1d
push edi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0xc]
push 0x42d8f8
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0xf0c0c0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push esi
push edi
push esi
push esi
push dword [ebp - 4]
mov dword [ebp - 0x38], 0x32
mov dword [ebp - 0x30], 0x45
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 2
call fcn.0041aef0
mov eax, dword [ebp + 8]
sub eax, 0x10
push 4
mov dword [ebp + 8], eax
mov dword [ebp - 0x3c], eax
add eax, 0xd
push esi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push esi
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebx + 0x3a0c]
mov dword [ebp - 0x38], 0x32
push esi
push esi
push esi
push dword [ebp - 4]
mov dword [ebp - 0x30], 0x43
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 2
call fcn.0041aef0
mov eax, dword [ebp + 8]
sub eax, 0x1e
mov dword [ebp + 8], eax
mov dword [ebp - 0x3c], eax
push 4
add eax, 0x1d
push edi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0xc]
push 0x42d92c
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0xf0c0c0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push esi
push edi
push esi
push esi
push dword [ebp - 4]
mov dword [ebp - 0x38], 0x32
mov dword [ebp - 0x30], 0x45
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 2
call fcn.0041aef0
mov eax, dword [ebp + 8]
sub eax, 0x10
push 4
mov dword [ebp + 8], eax
mov dword [ebp - 0x3c], eax
add eax, 0xd
push esi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push esi
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebx + 0x3a08]
mov dword [ebp - 0x38], 0x32
push esi
push esi
push esi
push dword [ebp - 4]
mov dword [ebp - 0x30], 0x43
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 2
call fcn.0041aef0
mov eax, dword [ebp + 8]
sub eax, 0x1e
mov dword [ebp + 8], eax
mov dword [ebp - 0x3c], eax
add eax, 0x1d
mov dword [ebp - 0x38], 0x32
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0x45
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov eax, dword [ebp + 0xc]
push 4
push edi
push 0x42d8f4
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0xf0c0c0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push esi
push edi
push esi
push esi
push dword [ebp - 4]
mov dword [ebp - 0x14], 2
call fcn.0041aef0
mov eax, dword [ebp + 8]
sub eax, 0x10
push 4
mov dword [ebp + 8], eax
mov dword [ebp - 0x3c], eax
add eax, 0xd
push esi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push esi
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebx + 0x3a04]
mov dword [ebp - 0x38], 0x32
push esi
push esi
push esi
push dword [ebp - 4]
mov dword [ebp - 0x30], 0x43
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 2
call fcn.0041aef0
mov eax, dword [ebp + 8]
sub eax, 0x39
mov dword [ebp + 8], eax
mov dword [ebp - 0x3c], eax
add eax, 0x31
push 4
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push esi
mov dword [ebp - 0x38], 0x32
mov dword [ebp - 0x30], 0x45
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 2
mov dword [ebp - 0x10], eax
push esi
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebx + 0x3a14]
push esi
push esi
push esi
push dword [ebp - 4]
call fcn.0041aef0
mov eax, dword [ebp + 8]
add eax, 0xfffffff1
push 4
mov dword [ebp - 0x3c], eax
add eax, 0xb
push esi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0xf0c0c0
mov dword [ebp - 0x10], eax
lea eax, [ebx + 0x3a48]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push esi
push edi
push esi
push esi
push dword [ebp - 4]
mov dword [ebp - 0x38], 0x35
mov dword [ebp - 0x30], 0x40
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 2
call fcn.0041aef0
push 2
pop eax
push 4
push esi
mov ecx, dword [ebp - 8]
push esi
push esi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebx + 0x39f4]
mov dword [ebp - 0x3c], esi
push esi
push esi
push esi
push dword [ebp - 4]
mov dword [ebp - 0x38], 0x50
mov dword [ebp - 0x34], 9
mov dword [ebp - 0x30], 0x59
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x10], 3
call fcn.0041aef0
pop edi
pop esi
pop ebx
leave
ret 8