Function at 0x40b615
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4ca689
mov eax, dword fs:[0]
push eax
sub esp, 0x90
mov eax, dword [0x4f7f44]
xor eax, esp
mov dword [esp + 0x88], eax
push ebx
push esi
push edi
mov eax, dword [0x4f7f44]
xor eax, esp
push eax
lea eax, [esp + 0xa0]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov edi, ecx
push esi
lea eax, [edi + 0x354]
push eax
mov dword [esp + 0x2c], edi
call fcn.004014e8
xor eax, eax
xor ebx, ebx
inc eax
mov ecx, 0x113
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], eax
cmp esi, ecx
ja 0x40b79f
je 0x40b78c
mov ecx, esi
sub ecx, 6
je 0x40b774
dec ecx
dec ecx
je 0x40b766
sub ecx, 8
je 0x40b74d
sub ecx, 0x11
je 0x40b6f4
sub ecx, 0x29
je 0x40b6dd
sub ecx, 0xc8
jne 0x40b7c1
mov eax, dword [edi]
lea ecx, [esp + 0x14]
push ecx
push dword [ebp + 0x10]
mov ecx, edi
push dword [ebp + 0xc]
push 0x112
call dword [eax + 0x64]
mov dword [esp + 0x18], eax
jmp 0x40b944
push dword [ebp + 0x10]
mov dword [esp + 0x18], eax
call fcn.0040fc2f
push eax
call fcn.0040fe79
jmp 0x40b944
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
xor eax, eax
mov dword [esp + 0x1c], ebx
lea edi, [esp + 0x20]
stosd dword es:[edi], eax
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov esi, dword [esp + 0x24]
lea eax, [esp + 0x1c]
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ScreenToClient]
movzx eax, word [esp + 0x20]
movzx ecx, word [esp + 0x1c]
shl eax, 0x10
or eax, ecx
push eax
push 0
push 0x201
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ebx, ebx
mov edi, esi
jmp 0x40b944
mov eax, dword [edi]
lea ecx, [esp + 0x14]
push ecx
push dword [ebp + 0x10]
mov ecx, edi
push dword [ebp + 0xc]
push 0x10
call dword [eax + 0x38]
jmp 0x40b944
mov ecx, edi
push eax
push ebx
call fcn.004261a4
jmp 0x40b944
xor ecx, ecx
cmp cx, word [ebp + 0xc]
mov ecx, edi
je 0x40b768
push ebx
push ebx
push 0xf
call fcn.004265c6
jmp 0x40b944
mov eax, dword [ebp + 0xc]
lea ecx, [esp + 0x14]
mov esi, edi
call fcn.0040b97d
jmp 0x40b944
mov eax, esi
sub eax, 0x312
je 0x40b936
sub eax, 0xef
je 0x40b91e
dec eax
je 0x40b822
dec eax
dec eax
je 0x40b80b
dec eax
je 0x40b7fb
mov dword [esp + 0x14], ebx
push dword [ebp + 0x10]
mov ecx, edi
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00427b9a
mov ecx, dword [esp + 0xa0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x88]
xor ecx, esp
call fcn.004a79cb
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [edi + 0x384]
mov eax, dword [ecx]
call dword [eax + 0x20]
jmp 0x40b944
push 0x4e9264
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov esi, edi
call fcn.0040b15c
jmp 0x40b944
call fcn.0040aa0d
push eax
call fcn.004044af
xor eax, eax
push 0x4e922c
lea ecx, [esp + 0x2c]
mov dword [esp + 0x40], 7
mov dword [esp + 0x3c], ebx
mov word [esp + 0x2c], ax
call fcn.00402015
lea eax, [esp + 0x7c]
push 0x4f9ec8
push eax
mov dword [esp + 0xb0], ebx
call fcn.004045c6
mov ebx, eax
call fcn.00402b6c
mov esi, eax
lea eax, [esp + 0x60]
push 0x4f9e74
push eax
mov byte [esp + 0xb0], 1
call fcn.004045c6
mov ebx, eax
call fcn.00402b6c
mov byte [esp + 0xa8], 2
cmp dword [esi + 0x14], 8
jb 0x40b89b
mov esi, dword [esi]
cmp dword [eax + 0x14], 8
jb 0x40b8a3
mov eax, dword [eax]
push esi
push eax
lea eax, [esp + 0x4c]
push str.hQO_
push eax
call fcn.0041c030
add esp, 0x10
xor ebx, ebx
push ebx
push 1
lea ecx, [esp + 0x68]
call fcn.004020c1
push ebx
push 1
lea ecx, [esp + 0x84]
mov byte [esp + 0xb0], 5
call fcn.004020c1
call fcn.0040aa0d
mov esi, eax
lea eax, [esp + 0x44]
lea ecx, [esp + 0x28]
call fcn.00404352
call fcn.0040aa0d
mov esi, eax
call fcn.004043c3
push ebx
push 1
lea ecx, [esp + 0x4c]
call fcn.004020c1
or dword [esp + 0xa8], 0xffffffff
push ebx
push 1
lea ecx, [esp + 0x30]
call fcn.004020c1
jmp 0x40b944
mov eax, dword [ebp + 0x10]
sub eax, 0x201
je 0x40b92d
sub eax, 4
jne 0x40b94e
mov ecx, edi
call fcn.0040bbc9
jmp 0x40b944
lea eax, [esp + 0x14]
push eax
push dword [ebp + 0xc]
push edi
call fcn.0040b9ff
cmp dword [esp + 0x14], ebx
je 0x40b7c5
mov eax, dword [esp + 0x18]
jmp 0x40b7d5