Function at 0x40e210
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x448aa0
mov eax, dword fs:[0]
push eax
sub esp, 0x148
mov eax, dword [0x45701c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x402
push dword [0x45979c]
mov byte [0x4597a4], 1
call edi
push 0xd
xor eax, eax
mov dword [ebp - 0x5c], 0
push 0x452454
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
call fcn.0040b020
lea edx, [ebp - 0x5c]
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x124]
call fcn.00404390
mov esi, eax
mov dl, 1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10c]
call fcn.00408a90
push 1
push 0x4523a4
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.0040a3c0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x74], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x64], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 3
xor eax, eax
mov dword [ebp - 0x44], ecx
push 0x32
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x44]
push str._PgXz:__s.ELdRb_SDLgXim.YL__vH_EMfUgf_QjOpnca.C_t
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.0040b020
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x94], esp
mov dword [eax], vtable.std::_Func_impl_no_alloc_class__lambda_a20486f568adbb2bbcb1a6c2f24ad972___long_int__unsigned_long_int__unsigned_long_int_.0
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x78], esp
lea eax, [ebp - 0x74]
mov dword [ebp - 0x2c], ecx
push esi
push eax
push dword [ebp - 0x2c]
call fcn.0040fef0
sub esp, 0x18
mov byte [ebp - 4], 6
lea edx, [ebp - 0x44]
mov ecx, esp
call fcn.00404390
mov byte [ebp - 4], 4
call fcn.00409320
mov byte [ebp - 4], 3
add esp, 0x58
mov edx, dword [ebp - 0x30]
mov byte [0x4597a3], al
cmp edx, 8
jb 0x40e399
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e38f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f184
push edx
push ecx
call fcn.0041382e
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x60]
cmp edx, 8
jb 0x40e3d7
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e3cd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f184
push edx
push ecx
call fcn.0041382e
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xf8]
cmp edx, 8
jb 0x40e41b
mov ecx, dword [ebp - 0x10c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e411
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f184
push edx
push ecx
call fcn.0041382e
add esp, 8
xor eax, eax
mov dword [ebp - 0xfc], 0
mov byte [ebp - 4], al
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0xf8], 7
mov word [ebp - 0x10c], ax
cmp edx, 8
jb 0x40e47b
mov ecx, dword [ebp - 0x124]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e471
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f184
push edx
push ecx
call fcn.0041382e
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 7
mov word [ebp - 0x124], ax
cmp edx, 8
jb 0x40e4d9
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e4cf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f184
push edx
push ecx
call fcn.0041382e
add esp, 8
cmp byte [0x4597a3], 0
je 0x40e776
push 0
push 0
push 0x402
push dword [0x45979c]
call edi
push 0xb
xor eax, eax
mov dword [ebp - 0x44], 0
push str.hYmekUE.Dbx
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.0040b020
lea edx, [ebp - 0x44]
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x154]
call fcn.00404390
mov esi, eax
mov dl, 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x13c]
call fcn.00408a90
push 1
push 0x4523a4
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.0040a3c0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x74], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x64], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0xa
xor eax, eax
mov dword [ebp - 0x5c], ecx
push 0x30
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0x5c]
push str._PgXz:__s.ELdRb_SDLgXim.YL__vH__gaLVTfWDKOr.ekQ
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
call fcn.0040b020
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x2c], esp
mov dword [eax], vtable.std::_Func_impl_no_alloc_class__lambda_0ccd0bc2ed21479f61dadd036d5e54ef___long_int__unsigned_long_int__unsigned_long_int_.0
mov dword [eax + 0x24], eax
sub esp, 0x18
mov byte [ebp - 4], 0xc
mov ecx, esp
mov dword [ebp - 0x78], esp
lea eax, [ebp - 0x74]
mov dword [ebp - 0x94], ecx
push esi
push eax
push dword [ebp - 0x2c]
call fcn.0040fef0
sub esp, 0x18
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0x5c]
mov ecx, esp
call fcn.00404390
mov byte [ebp - 4], 0xb
call fcn.00409320
mov byte [ebp - 4], 0xa
add esp, 0x58
mov edx, dword [ebp - 0x48]
mov byte [0x4597a3], al
cmp edx, 8
jb 0x40e635
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e62b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f189
push edx
push ecx
call fcn.0041382e
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
cmp edx, 8
jb 0x40e673
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e669
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f189
push edx
push ecx
call fcn.0041382e
add esp, 8
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x128]
cmp edx, 8
jb 0x40e6b7
mov ecx, dword [ebp - 0x13c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e6ad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f189
push edx
push ecx
call fcn.0041382e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x140]
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], 7
mov word [ebp - 0x13c], ax
cmp edx, 8
jb 0x40e718
mov ecx, dword [ebp - 0x154]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e70e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f189
push edx
push ecx
call fcn.0041382e
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x140], 7
mov word [ebp - 0x154], ax
cmp edx, 8
jb 0x40e776
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e76c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f189
push edx
push ecx
call fcn.0041382e
add esp, 8
cmp byte [0x4597a3], 0
mov byte [0x4597a4], 0
je 0x40f155
cmp byte [0x4597a0], 0
je 0x40e7ad
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
nop dword [eax]
push 0x64
call esi
cmp byte [0x4597a0], 0
jne 0x40e7a0
push 0
push 0x3f1
push 0x111
push dword [0x459798]
call edi
push 0
push 0x14
push 0x402
push dword [0x45979c]
call edi
push 0x10
xor eax, eax
mov dword [ebp - 0x90], 0
push str.____f_HXhf_YrJJb
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 7
mov word [ebp - 0x90], ax
call fcn.0040b020
lea edx, [ebp - 0x90]
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0xdc]
call fcn.00404390
mov edi, eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x5c]
push 0xd
xor eax, eax
mov dword [ebp - 0x5c], 0
push 0x452454
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
call fcn.0040b020
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xc4]
call fcn.00404390
mov esi, eax
mov dl, 1
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xac]
call fcn.00408a90
push 1
push 0x452578
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x12
call fcn.0040cc30
mov dword [ebp - 0x44], 0
xor ecx, ecx
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x44], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x34], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 1
push 0x4523a4
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x13
call fcn.0040a3c0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x74], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x64], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0x14
push esi
lea eax, [ebp - 0x74]
push eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xf4]
call fcn.0040fef0
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
lea eax, [ebp - 0xf4]
mov dword [ebp - 0x2c], ecx
push edi
push eax
push dword [ebp - 0x2c]
call fcn.0040fef0
mov cl, 1
call fcn.004094e0
mov byte [ebp - 4], 0x14
add esp, 0x18
mov edx, dword [ebp - 0xe0]
cmp edx, 8
jb 0x40e976
mov ecx, dword [ebp - 0xf4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e96c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f18e
push edx
push ecx
call fcn.0041382e
add esp, 8
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x60]
cmp edx, 8
jb 0x40e9b4
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e9aa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f18e
push edx
push ecx
call fcn.0041382e
add esp, 8
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x30]
cmp edx, 8
jb 0x40e9f2
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e9e8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f18e
push edx
push ecx
call fcn.0041382e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
cmp edx, 8
jb 0x40ea4a
mov ecx, dword [ebp - 0xac]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ea40
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f18e
push edx
push ecx
call fcn.0041382e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 7
mov word [ebp - 0xac], ax
cmp edx, 8
jb 0x40eaab
mov ecx, dword [ebp - 0xc4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40eaa1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f18e
push edx
push ecx
call fcn.0041382e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 7
mov word [ebp - 0xc4], ax
cmp edx, 8
jb 0x40eb06
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40eafc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f18e
push edx
push ecx
call fcn.0041382e
add esp, 8
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0xc8]
cmp edx, 8
jb 0x40eb4a
mov ecx, dword [ebp - 0xdc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40eb40
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f18e
push edx
push ecx
call fcn.0041382e
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 7
mov word [ebp - 0xdc], ax
cmp edx, 8
jb 0x40ebab
mov ecx, dword [ebp - 0x90]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40eba1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f18e
push edx
push ecx
call fcn.0041382e
add esp, 8
push 0
push 0x3c
push 0x402
push dword [0x45979c]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0xb
xor eax, eax
mov dword [ebp - 0x90], 0
push str.hYmekUE.Dbx
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 7
mov word [ebp - 0x90], ax
call fcn.0040b020
lea edx, [ebp - 0x90]
mov dword [ebp - 4], 0x16
lea ecx, [ebp - 0xac]
call fcn.00404390
mov edi, eax
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x17
call fcn.00408250
mov esi, eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x18
call fcn.00408d60
push 1
push 0x4523a4
mov ecx, eax
mov byte [ebp - 4], 0x19
call fcn.0040a3c0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x44], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x34], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push esi
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x1a
push eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x5c]
call fcn.0040fef0
push 1
push 0x4523a4
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x1b
call fcn.0040a3c0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x74], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x64], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push edi
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x1c
push eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x28]
call fcn.0040fef0
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x60]
cmp edx, 8
jb 0x40ed00
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ecf6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f193
push edx
push ecx
call fcn.0041382e
add esp, 8
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x48]
cmp edx, 8
jb 0x40ed3e
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ed34
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f193
push edx
push ecx
call fcn.0041382e
add esp, 8
xor eax, eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x30]
cmp edx, 8
jb 0x40ed90
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ed86
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f193
push edx
push ecx
call fcn.0041382e
add esp, 8
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0xc8]
cmp edx, 8
jb 0x40edd4
mov ecx, dword [ebp - 0xdc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40edca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f193
push edx
push ecx
call fcn.0041382e
add esp, 8
xor eax, eax
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 7
mov word [ebp - 0xdc], ax
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0xb0]
cmp edx, 8
jb 0x40ee35
mov ecx, dword [ebp - 0xc4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ee2b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f193
push edx
push ecx
call fcn.0041382e
add esp, 8
xor eax, eax
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 7
mov word [ebp - 0xc4], ax
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x98]
cmp edx, 8
jb 0x40ee96
mov ecx, dword [ebp - 0xac]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ee8c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f193
push edx
push ecx
call fcn.0041382e
add esp, 8
xor eax, eax
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 7
mov word [ebp - 0xac], ax
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x7c]
cmp edx, 8
jb 0x40eef4
mov ecx, dword [ebp - 0x90]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40eeea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f193
push edx
push ecx
call fcn.0041382e
add esp, 8
push 0xb
xor eax, eax
mov dword [ebp - 0x90], 0
push str.hYmekUE.Dbx
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 7
mov word [ebp - 0x90], ax
call fcn.0040b020
lea edx, [ebp - 0x90]
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x74]
call fcn.00404390
mov esi, eax
mov dl, 1
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x44]
call fcn.00408a90
push 1
push 0x4523a4
mov ecx, eax
mov byte [ebp - 4], 0x27
call fcn.0040a3c0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xf4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xe4], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
sub esp, 0x18
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], esp
mov ecx, esp
push eax
call fcn.0040a6b0
sub esp, 0x18
mov byte [ebp - 4], 0x29
mov ecx, esp
lea eax, [ebp - 0xf4]
mov dword [ebp - 0x78], ecx
push esi
push eax
push dword [ebp - 0x2c]
call fcn.0040fef0
mov byte [ebp - 4], 0x28
call fcn.00409760
mov byte [ebp - 4], 0x27
add esp, 0x30
mov edx, dword [ebp - 0xe0]
cmp edx, 8
jb 0x40f006
mov ecx, dword [ebp - 0xf4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40effc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f198
push edx
push ecx
call fcn.0041382e
add esp, 8
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x30]
cmp edx, 8
jb 0x40f044
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40f03a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f198
push edx
push ecx
call fcn.0041382e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
cmp edx, 8
jb 0x40f096
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40f08c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f198
push edx
push ecx
call fcn.0041382e
add esp, 8
xor eax, eax
mov dword [ebp - 0x64], 0
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
mov byte [ebp - 4], 0x24
call fcn.004044d0
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0x50
push 0x402
push dword [0x45979c]
call edi
cmp byte [0x4597a1], 0
lea ecx, [ebp - 0x74]
mov eax, 0x452130
mov esi, 0x45257c
cmove esi, eax
mov edx, 0x452578
lea eax, [ebp - 0x28]
push eax
call fcn.0040be10
push 0x452584
mov edx, eax
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xf4]
call fcn.0040f8d0
sub esp, 0x10
mov byte [ebp - 4], 0x2b
mov ecx, esp
mov edx, eax
push esi
call fcn.0040f8d0
add esp, 4
xor cl, cl
call fcn.004094e0
add esp, 0x18
lea ecx, [ebp - 0xf4]
call fcn.004044d0
lea ecx, [ebp - 0x74]
call fcn.004044d0
push 0
push 0x64
push 0x402
push dword [0x45979c]
call edi
lea ecx, [ebp - 0x28]
call fcn.004044d0
push 0
push 0x3f0
push 0x111
push dword [0x459798]
call edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00413245
mov esp, ebp
pop ebp
ret
call fcn.0041df19
call fcn.0041df19
call fcn.0041df19
call fcn.0041df19
call fcn.0041df19
int3