Function at 0x409863
Capabilities:
Get graphical window text

Disassembly:
push ebp
push ebx
xor eax, eax
push eax
push eax
call fcn.0045e790
cmp dword [0x89383c], 0
je 0x409895
push 0
push 0x1c2
push 0x280
push 3
call fcn.00407903
jmp 0x40a776
push edx
call fcn.0045e620
pop edx
push eax
push 0
call fcn.004584dd
push eax
push 0xca0000
mov ebp, dword [0x893880]
mov edx, dword [ebp + 0x208]
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e6f0
mov edx, str.___WinNTSetup__
push edx
call fcn.0045e6f0
push edx
call fcn.0045e620
pop edx
push eax
mov eax, 0x462b5a
push eax
mov ebp, dword [0x47356c]
push dword [ebp + 4]
call fcn.00427c26
pop eax
mov edx, 0x4618f4
push edx
call fcn.0045e6f0
call fcn.0045e850
push 0x1c2
push 0x280
push 3
call fcn.0044e2d2
add dword [esp + 0xc], edx
call fcn.0042b613
call fcn.0044e2f0
mov ebp, dword [0x473568]
push dword [ebp + 8]
push 0
push pe_nt_image_headers32
push 3
call fcn.004584dd
push eax
call sub.user32.dll_SendMessageW
push edx
call fcn.0045e620
pop edx
push eax
push 0
push edx
call fcn.0045e620
pop edx
push eax
mov edx, 0x46103a
push edx
call fcn.0045e6f0
mov ebp, dword [0x893880]
mov edx, dword [ebp + 0x210]
push edx
call fcn.0045e6f0
call fcn.0045e850
push 0xfe
push 0x276
push 0xa
push 5
push 0xffffffff
call fcn.0044e2d2
add dword [esp + 0x14], edx
call fcn.0041334e
call fcn.0044e2f0
mov dword [0x893850], eax
push edx
call fcn.0045e620
pop edx
push eax
push 0
push edx
call fcn.0045e620
pop edx
push eax
mov edx, 0x46103a
push edx
call fcn.0045e6f0
mov ebp, dword [0x893880]
mov edx, dword [ebp + 0x214]
push edx
call fcn.0045e6f0
call fcn.0045e850
push 0x64
push 0x276
push 0x122
push 5
push 0xffffffff
call fcn.0044e2d2
add dword [esp + 0x14], edx
call fcn.0041334e
call fcn.0044e2f0
mov dword [0x893854], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x2cc]
push 0x14
push 0x11d
push 0x1e
push 0xa
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x2d0]
push 0x14
push 0x11d
push 0x32
push 0xa
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
add eax, eax
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x2d4]
push 0x14
push 0x11d
push 0x46
push 0xa
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 3
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x2d8]
push 0x14
push 0x11d
push 0x5a
push 0xa
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
shl eax, 2
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x2dc]
push 0x14
push 0x11d
push 0x6e
push 0xa
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 5
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x2e0]
push 0x14
push 0x11d
push 0x82
push 0xa
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 6
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x2e4]
push 0x14
push 0x11d
push 0x96
push 0xa
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 7
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x2e8]
push 0x14
push 0x11d
push 0xaa
push 0xa
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
shl eax, 3
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x2ec]
push 0x14
push 0x14a
push 0x1e
push 0x12c
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 9
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x2f0]
push 0x14
push 0x14a
push 0x32
push 0x12c
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 0xa
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x2f4]
push 0x14
push 0x14a
push 0x46
push 0x12c
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 0xb
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x2f8]
push 0x14
push 0x14a
push 0x5a
push 0x12c
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 0xc
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x2fc]
push 0x14
push 0x11d
push 0xbe
push 0xa
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 0xd
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x300]
push 0x14
push 0x11d
push 0xd2
push 0xa
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 0xe
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x304]
push 0x14
push 0x11d
push 0x148
push 0xa
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 0xf
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x308]
push 0x14
push 0x14a
push 0x148
push 0x12c
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
shl eax, 4
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x30c]
push 0x14
push 0x11d
push 0x15c
push 0xa
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 0x11
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x310]
push 0x14
push 0x14a
push 0x15c
push 0x12c
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 0x12
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x314]
push 0x14
push 0x14a
push 0x134
push 0x12c
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 0x13
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x318]
push 0x14
push 0x11d
push 0x134
push 0xa
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 0x14
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x31c]
push 0x14
push 0x14a
push 0x6e
push 0x12c
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 0x15
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x320]
push 0x14
push 0x14a
push 0x82
push 0x12c
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 0x16
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x324]
push 0x14
push 0x14a
push 0x96
push 0x12c
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 0x17
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x42c]
push 0x14
push 0x14a
push 0xaa
push 0x12c
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 0x18
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x4d0]
push 0x14
push 0x14a
push 0xbe
push 0x12c
push 0xffffffff
call fcn.0041deef
push eax
mov eax, dword [0x8938a0]
imul eax, eax, 0x19
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x464]
push 0x14
push 0x82
push 0x18f
push 0xa
push 0xffffffff
call fcn.00417ea2
mov dword [0x893840], eax
push 0
mov ebp, dword [0x47355c]
push dword [ebp + 0x28]
push 0x14
push 0x16d
push 0x18d
push 0x91
push 0xffffffff
call fcn.0040f80d
mov dword [0x893844], eax
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x14]
push 0x17
push 0x4b
push 0x18b
push 0x22b
push 0xffffffff
call fcn.00410862
mov dword [0x893848], eax
mov ebp, dword [0x473558]
cmp dword [ebp + 0xa8], 0
je 0x40a6b6
mov ebp, dword [0x893880]
push dword [ebp + 0x4d4]
mov eax, dword [0x8938a0]
imul eax, eax, 0x19
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x3d4]
mov eax, dword [0x8938a0]
imul eax, eax, 0x18
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x3d0]
mov eax, dword [0x8938a0]
imul eax, eax, 0x17
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x3cc]
mov eax, dword [0x8938a0]
imul eax, eax, 0x16
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x3c8]
mov eax, dword [0x8938a0]
imul eax, eax, 0x15
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x3c4]
mov eax, dword [0x8938a0]
imul eax, eax, 0x14
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x3c0]
mov eax, dword [0x8938a0]
imul eax, eax, 0x13
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x3bc]
mov eax, dword [0x8938a0]
imul eax, eax, 0x12
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x3b8]
mov eax, dword [0x8938a0]
imul eax, eax, 0x11
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x3b4]
mov eax, dword [0x8938a0]
shl eax, 4
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x3b0]
mov eax, dword [0x8938a0]
imul eax, eax, 0xf
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x3ac]
mov eax, dword [0x8938a0]
imul eax, eax, 0xe
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x3a8]
mov eax, dword [0x8938a0]
imul eax, eax, 0xd
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x3a4]
mov eax, dword [0x8938a0]
imul eax, eax, 0xc
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x3a0]
mov eax, dword [0x8938a0]
imul eax, eax, 0xb
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x39c]
mov eax, dword [0x8938a0]
imul eax, eax, 0xa
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x398]
mov eax, dword [0x8938a0]
imul eax, eax, 9
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x394]
mov eax, dword [0x8938a0]
shl eax, 3
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x390]
mov eax, dword [0x8938a0]
imul eax, eax, 7
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x38c]
mov eax, dword [0x8938a0]
imul eax, eax, 6
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x388]
mov eax, dword [0x8938a0]
imul eax, eax, 5
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x384]
mov eax, dword [0x8938a0]
shl eax, 2
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x380]
mov eax, dword [0x8938a0]
imul eax, eax, 3
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x37c]
mov eax, dword [0x8938a0]
add eax, eax
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x378]
mov eax, dword [0x8938a0]
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451693
mov ebp, dword [0x893880]
push dword [ebp + 0x468]
push dword [0x893840]
call fcn.00451693
push 0
push 0
push 0x10
push 0x10
push 0xa
push 0xa
push 0xffffffff
call fcn.0041251a
mov dword [0x893858], eax
mov ebp, dword [0x473568]
push dword [ebp + 0x54]
push 1
push 0x172
push dword [0x893858]
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
push 0
push 0
push 0x10
push 0x10
push 0x122
push 0xa
push 0xffffffff
call fcn.0041251a
mov dword [0x89384c], eax
mov ebp, dword [0x473568]
push dword [ebp + 0x30]
push 1
push 0x172
push dword [0x89384c]
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
push 0x3ed
push 0x1b
push 3
call fcn.004584f9
mov dword [0x89383c], 1
mov ebp, dword [0x47355c]
mov ebx, dword [ebp + 0x40]
and ebx, ebx
jle 0x40a852
mov ebp, dword [0x47355c]
mov ebx, dword [ebp + 0x40]
cmp ebx, 0x23f0
jge 0x40a7e4
push 1
mov eax, dword [0x8938a0]
imul eax, eax, 0x16
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.004525a9
push 1
mov eax, dword [0x8938a0]
imul eax, eax, 0x17
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.004525a9
mov ebp, dword [0x47355c]
mov ebx, dword [ebp + 0x40]
cmp ebx, 0x2580
jge 0x40a81b
push 1
mov eax, dword [0x8938a0]
imul eax, eax, 0x18
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.004525a9
mov ebp, dword [0x47355c]
mov ebx, dword [ebp + 0x40]
cmp ebx, 0x25e4
jge 0x40a852
push 1
mov eax, dword [0x8938a0]
imul eax, eax, 0x19
mov ebp, eax
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.004525a9
mov ebp, dword [0x47355c]
push dword [ebp + 0x28]
push dword [0x893844]
call fcn.00451564
mov dword [esp], 1
jmp 0x40a86f
mov eax, 0x19
cmp eax, dword [esp]
jl 0x40a8cd
mov edx, dword [0x8938a0]
imul edx, dword [esp]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
mov ebx, dword [ebp]
cmp ebx, 1
jne 0x40a8c8
push 1
mov edx, dword [0x8938a0]
imul edx, dword [esp + 4]
mov ebp, edx
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451614
inc dword [esp]
jno 0x40a86f
call fcn.0045872d
push eax
mov ebx, 0x333c
cmp ebx, dword [esp]
jne 0x40a8ea
add esp, 4
jmp 0x40abd6
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x40abb2
call fcn.0045ccf9
push eax
mov ebx, dword [0x893848]
cmp ebx, dword [esp]
jne 0x40a9b5
push edx
call fcn.0045e620
pop edx
push eax
push 0x46105e
push 0
push 0x46105e
push 0
mov ebp, dword [0x473558]
push dword [ebp + 0x40]
mov eax, str.RegTweaks
push eax
call fcn.0044d930
lea eax, [esp + 0x10]
push eax
call fcn.0045e660
push dword [esp + 0xc]
mov edx, 0x46105e
pop ecx
call fcn.0044e300
jne 0x40a9b0
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push dword [esp + 0x14]
call fcn.0045b156
mov ebp, dword [0x473558]
lea eax, [ebp + 0x40]
push eax
call fcn.0045e660
push dword [esp + 0xc]
push dword [0x893844]
call fcn.00451564
mov edx, dword [esp + 0xc]
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e6f0
mov ebp, dword [0x47355c]
lea eax, [ebp + 0x28]
push eax
call fcn.0045e660
jmp 0x40abaf
mov ebx, dword [0x893858]
cmp ebx, dword [esp]
jne 0x40aafe
call fcn.0045cd6c
push eax
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x40aa62
mov dword [esp + 0xc], 1
jmp 0x40a9df
mov eax, 0xe
cmp eax, dword [esp + 0xc]
jl 0x40aa19
push 1
mov edx, dword [0x8938a0]
imul edx, dword [esp + 0x10]
mov ebp, edx
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451614
inc dword [esp + 0xc]
jno 0x40a9df
mov dword [esp + 0xc], 0x15
jmp 0x40aa23
mov eax, 0x19
cmp eax, dword [esp + 0xc]
jl 0x40aa5d
push 1
mov edx, dword [0x8938a0]
imul edx, dword [esp + 0x10]
mov ebp, edx
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451614
inc dword [esp + 0xc]
jno 0x40aa23
jmp 0x40aaf8
mov ebx, 1
cmp ebx, dword [esp]
jne 0x40aaf8
mov dword [esp + 0xc], 1
jmp 0x40aa7a
mov eax, 0xe
cmp eax, dword [esp + 0xc]
jl 0x40aab4
push 0
mov edx, dword [0x8938a0]
imul edx, dword [esp + 0x10]
mov ebp, edx
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451614
inc dword [esp + 0xc]
jno 0x40aa7a
mov dword [esp + 0xc], 0x15
jmp 0x40aabe
mov eax, 0x19
cmp eax, dword [esp + 0xc]
jl 0x40aaf8
push 0
mov edx, dword [0x8938a0]
imul edx, dword [esp + 0x10]
mov ebp, edx
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451614
inc dword [esp + 0xc]
jno 0x40aabe
pop eax
jmp 0x40abaf
mov ebx, dword [0x89384c]
cmp ebx, dword [esp]
jne 0x40abaf
call fcn.0045cd6c
push eax
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x40ab60
mov dword [esp + 0xc], 0xf
jmp 0x40ab24
mov eax, 0x14
cmp eax, dword [esp + 0xc]
jl 0x40ab5e
push 1
mov edx, dword [0x8938a0]
imul edx, dword [esp + 0x10]
mov ebp, edx
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451614
inc dword [esp + 0xc]
jno 0x40ab24
jmp 0x40abae
mov ebx, 1
cmp ebx, dword [esp]
jne 0x40abae
mov dword [esp + 0xc], 0xf
jmp 0x40ab74
mov eax, 0x14
cmp eax, dword [esp + 0xc]
jl 0x40abae
push 0
mov edx, dword [0x8938a0]
imul edx, dword [esp + 0x10]
mov ebp, edx
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.00451614
inc dword [esp + 0xc]
jno 0x40ab74
pop eax
pop eax
jmp 0x40abd0
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x40abd0
call fcn.0045ccea
mov ebx, eax
cmp ebx, 0x3ed
jne 0x40abd0
add esp, 4
jmp 0x40abd6
pop eax
jmp 0x40a8cd
mov dword [esp], 1
jmp 0x40abdf
mov eax, 0x19
cmp eax, dword [esp]
jl 0x40ac35
mov edx, dword [0x8938a0]
imul edx, dword [esp]
mov ebp, edx
push ebp
xor eax, eax
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
push dword [ebp]
call fcn.004514cf
push eax
mov edx, dword [0x8938a0]
imul edx, dword [esp + 4]
mov ebp, edx
push ebp
mov eax, 1
pop ebp
add ebp, eax
shl ebp, 2
add ebp, dword [0x89389c]
pop eax
mov dword [ebp], eax
inc dword [esp]
jno 0x40abdf
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push dword [0x893844]
call fcn.004514fc
mov ebp, dword [0x47355c]
lea eax, [ebp + 0x28]
push eax
call fcn.0045e660
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
mov ebp, dword [0x47355c]
push dword [ebp + 0x28]
call fcn.0045b156
mov ebp, dword [0x473558]
lea eax, [ebp + 0x40]
push eax
call fcn.0045e660
push 0
push 0
call fcn.004587f9
push 1
push 3
call fcn.004587e7
xor eax, eax
push dword [esp + 4]
call fcn.0045e7f0
add esp, 8
pop ebx
pop ebp
ret