Function at 0x42b73f
Capabilities:
Contain obfuscated stackstrings
Get graphical window text

Disassembly:
push 0x19c
mov eax, 0x47589a
call fcn.00461bf0
mov edi, ecx
xor esi, esi
mov dword [ebp - 0xd8], esi
mov dword [ebp - 0xd4], esi
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xcc], 4
mov dword [ebp - 0xdc], vtable.CRecordVector_unsigned_int_.0
lea eax, [ebp - 0xdc]
push eax
mov dword [ebp - 4], esi
call fcn.00428b04
push 3
pop ebx
push ebx
lea ecx, [ebp - 0x13c]
mov dword [ebp - 0x13c], esi
mov dword [ebp - 0x138], esi
mov dword [ebp - 0x134], esi
call fcn.0040ce36
push ebx
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 1
mov dword [ebp - 0x124], esi
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x11c], esi
call fcn.0040ce36
push ebx
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 2
mov dword [ebp - 0x10c], esi
mov dword [ebp - 0x108], esi
mov dword [ebp - 0x104], esi
call fcn.0040ce36
push ebx
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], bl
mov dword [ebp - 0x130], esi
mov dword [ebp - 0x12c], esi
mov dword [ebp - 0x128], esi
call fcn.0040ce36
push ebx
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 4
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], esi
mov dword [ebp - 0xe8], esi
mov dword [ebp - 0xe4], esi
mov dword [ebp - 0xe0], esi
call fcn.0040ce36
push ebx
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 5
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x48], esi
call fcn.0040ce36
push ebx
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 6
mov dword [ebp - 0xf4], esi
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xec], esi
call fcn.0040ce36
push ebx
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 7
mov dword [ebp - 0x100], esi
mov dword [ebp - 0xfc], esi
mov dword [ebp - 0xf8], esi
call fcn.0040ce36
push ebx
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 8
mov dword [ebp - 0x118], esi
mov dword [ebp - 0x114], esi
mov dword [ebp - 0x110], esi
call fcn.0040ce36
push ebx
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 9
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], esi
call fcn.0040ce36
push ebx
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x8c], esi
call fcn.0040ce36
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x98], esi
call fcn.0040ce36
push ebx
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0xb8], esi
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xb0], esi
call fcn.0040ce36
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0xd
call fcn.00417017
push ebx
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xa4], esi
call fcn.0040ce36
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0xf
call fcn.00440517
push eax
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x10
call fcn.0040d2a6
push dword [ebp - 0x88]
mov byte [ebp - 4], 0xf
call fcn.0044c2e3
pop ecx
push ebx
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x74], esi
call fcn.0040ce36
push 0x47ce68
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 0x11
push eax
call fcn.00416c6c
test al, al
je 0x42bb00
push ebx
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x54], esi
call fcn.0040ce36
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x12
call fcn.00440000
push str.BianYaThemes_
push eax
lea eax, [ebp - 0x88]
push eax
mov byte [ebp - 4], 0x13
call fcn.0040d606
push eax
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x14
call fcn.0040d2a6
push dword [ebp - 0x88]
call fcn.0044c2e3
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x12
call fcn.0044c2e3
pop ecx
pop ecx
push 0x47e500
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0040d606
lea ecx, [ebp - 0xac]
push ecx
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x15
call fcn.0040d5c6
push eax
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x16
call fcn.0040d2a6
push dword [ebp - 0x18]
call fcn.0044c2e3
push dword [ebp - 0x88]
mov byte [ebp - 4], 0x12
call fcn.0044c2e3
pop ecx
pop ecx
push str.drive.ico
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040d606
mov eax, dword [eax]
push 0x2010
push esi
push esi
push 1
push eax
push dword [0x4a1398]
call dword [sym.imp.USER32.dll_LoadImageW]
push dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
call fcn.0044c2e3
mov dword [esp], str.key.ico
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040d606
mov eax, dword [eax]
push 0x2010
push esi
push esi
push 1
push eax
push dword [0x4a1398]
call dword [sym.imp.USER32.dll_LoadImageW]
push dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
call fcn.0044c2e3
push dword [ebp - 0x5c]
call fcn.0044c2e3
pop ecx
jmp 0x42bb75
lea eax, [ebp - 0x7c]
push eax
call fcn.0044a55a
push str.icondrive.ico
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040d606
mov eax, dword [eax]
push 0x2010
push esi
push esi
push 1
push eax
push dword [0x4a1398]
call dword [sym.imp.USER32.dll_LoadImageW]
push dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
call fcn.0044c2e3
mov dword [esp], str.iconkey.ico
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040d606
mov eax, dword [eax]
push 0x2010
push esi
push esi
push 1
push eax
push dword [0x4a1398]
call dword [sym.imp.USER32.dll_LoadImageW]
push dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
call fcn.0044c2e3
pop ecx
push 1
call fcn.0041b2d0
mov dword [ebp - 0x14c], esi
mov dword [ebp - 0x148], esi
mov dword [ebp - 0x144], esi
mov dword [ebp - 0x140], 4
mov dword [ebp - method.CObjectVector_class_CStringBase_wchar_t__.virtual_0], vtable.CObjectVector_class_CStringBase_wchar_t__.0
push esi
push 0x47f7d8
mov byte [ebp - 4], 0x17
call fcn.0042af9c
push 0x47ce68
push esi
push 0x40b
push dword [edi + 0x108]
call dword [sym.imp.USER32.dll_SendMessageA]
push dword [ebp - 0x24]
push esi
push 0x40f
push dword [edi + 0x108]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [ebp - 0x28]
push 1
push 0x40f
push dword [edi + 0x108]
call dword [sym.imp.USER32.dll_SendMessageW]
push ebx
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x80], esi
call fcn.0040ce36
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0xd4], esi
jle 0x42bc92
mov dword [ebp - 0x24], esi
xor eax, eax
mov word [ebp - 0x1c], ax
mov word [ebp - 0x1a], ax
mov edx, dword [ebp - 0x24]
mov eax, dword [edi + 0x194]
mov eax, dword [eax]
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0xd0]
push 6
push dword [ecx + edx*4]
mov byte [ebp - 4], 0x19
push dword [edi + 0x194]
call dword [eax + 0x14]
cmp word [ebp - 0x14], si
je 0x42bc5a
inc dword [ebp - 0x38]
jmp 0x42bc78
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x24]
inc dword [ebp - 0x20]
lea eax, [eax + ecx*4]
push dword [eax]
mov ecx, edi
call fcn.00428c7b
add dword [ebp - 0x40], eax
adc dword [ebp - 0x3c], edx
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x18
call fcn.00435fe3
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0xd4]
jl 0x42bc1e
push dword [ebp - 0x3c]
lea eax, [ebp - 0x18]
push dword [ebp - 0x40]
push eax
call fcn.0042b054
push eax
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x1a
call fcn.0040d2a6
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x18
call fcn.0044c2e3
pop ecx
push esi
push dword [ebp - 0x20]
lea eax, [ebp - 0x18]
push eax
call fcn.0042b054
push eax
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x1b
call fcn.0040d2a6
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x18
call fcn.0044c2e3
pop ecx
push esi
push dword [ebp - 0x38]
lea eax, [ebp - 0x18]
push eax
call fcn.0042b054
push eax
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x1c
call fcn.0040d2a6
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x18
call fcn.0044c2e3
pop ecx
cmp dword [ebp - 0x38], esi
je 0x42bd6e
cmp dword [ebp - 0x20], esi
jne 0x42bdfc
push 0x4000450
lea eax, [ebp - 0x18]
push eax
call fcn.00449f35
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x1d
call fcn.0040d2a6
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x18
call fcn.0044c2e3
pop ecx
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x34]
call fcn.0040d2e0
push 0x4000451
lea eax, [ebp - 0x18]
push eax
call fcn.00449f35
mov byte [ebp - 4], 0x1e
jmp 0x42beb3
cmp dword [ebp - 0x20], esi
je 0x42bdfc
push 0x4000450
lea eax, [ebp - 0x18]
push eax
call fcn.00449f35
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x1f
call fcn.0040d2a6
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x18
call fcn.0044c2e3
pop ecx
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x34]
call fcn.0040d2e0
push 0x4000452
lea eax, [ebp - 0x18]
push eax
call fcn.00449f35
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x20
call fcn.0040d2e0
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x18
call fcn.0044c2e3
pop ecx
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x34]
call fcn.0040d2e0
push 0x4000453
lea eax, [ebp - 0x18]
push eax
call fcn.00449f35
mov byte [ebp - 4], 0x21
jmp 0x42beb3
push 0x4000450
lea eax, [ebp - 0x18]
push eax
call fcn.00449f35
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x22
call fcn.0040d2a6
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x18
call fcn.0044c2e3
pop ecx
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x34]
call fcn.0040d2e0
push 0x4000454
lea eax, [ebp - 0x18]
push eax
call fcn.00449f35
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x23
call fcn.0040d2e0
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x18
call fcn.0044c2e3
pop ecx
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x34]
call fcn.0040d2e0
push 0x4000452
lea eax, [ebp - 0x18]
push eax
call fcn.00449f35
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x24
call fcn.0040d2e0
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x18
call fcn.0044c2e3
pop ecx
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x34]
call fcn.0040d2e0
push 0x4000453
lea eax, [ebp - 0x18]
push eax
call fcn.00449f35
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x34]
call fcn.0040d2e0
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x18
call fcn.0044c2e3
pop ecx
push 1
push 0xffffffffffffffff
push 0x100c
push dword [edi + 0xa4]
call dword [sym.imp.USER32.dll_SendMessageA]
push ebx
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x3c], esi
call fcn.0040ce36
push ebx
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x26
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x54], esi
call fcn.0040ce36
mov byte [ebp - 4], 0x27
cmp dword [ebp - 0x28], esi
jl 0x42bfd8
push esi
push esi
push 0x1032
push dword [edi + 0xa4]
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x42bfd8
push dword [ebp - 0x28]
mov ecx, edi
call fcn.00415e7b
mov dword [ebp - 0x28], eax
cmp eax, 0xffffffff
je 0x42bfd8
push eax
mov ecx, edi
call fcn.00428c7b
push edx
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0042b054
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x28
call fcn.0040d2a6
push dword [ebp - 0x18]
call fcn.0044c2e3
xor eax, eax
pop ecx
mov word [ebp - 0xc8], ax
mov word [ebp - 0xc6], ax
mov eax, dword [edi + 0x194]
mov ecx, dword [eax]
lea edx, [ebp - 0xc8]
push edx
push 0xc
push dword [ebp - 0x28]
mov byte [ebp - 4], 0x29
push eax
call dword [ecx + 0x14]
test eax, eax
jne 0x42bfc9
push esi
push 0xc
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00452a6d
push eax
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x2a
call fcn.0040d2a6
push dword [ebp - 0x18]
call fcn.0044c2e3
pop ecx
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x27
call fcn.00435fe3
mov dword [ebp - 0x20], esi
cmp dword [edi + 0x12c], esi
jbe 0x42c051
xor eax, eax
mov word [ebp - 0xc8], ax
mov word [ebp - 0xc6], ax
mov eax, dword [edi + 0x194]
mov ecx, dword [eax]
lea edx, [ebp - 0xc8]
push edx
push 6
push dword [ebp - 0x20]
mov byte [ebp - 4], 0x2b
push eax
call dword [ecx + 0x14]
cmp word [ebp - 0xc0], si
je 0x42c01d
inc dword [ebp - 0x68]
jmp 0x42c034
add dword [ebp - 0x64], 1
push dword [ebp - 0x20]
mov ecx, edi
adc dword [ebp - 0x60], esi
call fcn.00428c7b
add dword [ebp - 0x70], eax
adc dword [ebp - 0x6c], edx
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x27
call fcn.00435fe3
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, dword [edi + 0x12c]
jb 0x42bfe3
push dword [ebp - 0x60]
lea eax, [ebp - 0x18]
push dword [ebp - 0x64]
push eax
call fcn.0042b054
push eax
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x2c
call fcn.0040d2a6
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x27
call fcn.0044c2e3
pop ecx
push dword [ebp - 0x6c]
lea eax, [ebp - 0x18]
push dword [ebp - 0x70]
push eax
call fcn.0042b054
push eax
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0x2d
call fcn.0040d2a6
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x27
call fcn.0044c2e3
pop ecx
push esi
push dword [ebp - 0x68]
lea eax, [ebp - 0x18]
push eax
call fcn.0042b054
push eax
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x2e
call fcn.0040d2a6
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x27
call fcn.0044c2e3
lea eax, [ebp - 0x18]
mov dword [esp], 0x4000455
push eax
call fcn.00449f35
push eax
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x2f
call fcn.0040d2a6
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x27
call fcn.0044c2e3
pop ecx
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x50]
call fcn.0040d2e0
push 0x4000451
lea eax, [ebp - 0x18]
push eax
call fcn.00449f35
push eax
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x30
call fcn.0040d2e0
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x27
call fcn.0044c2e3
lea eax, [ebp - 0x18]
mov dword [esp], 0x4000456
push eax
call fcn.00449f35
push eax
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x31
call fcn.0040d2e0
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x27
call fcn.0044c2e3
pop ecx
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x50]
call fcn.0040d2e0
push 0x4000452
lea eax, [ebp - 0x18]
push eax
call fcn.00449f35
push eax
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x32
call fcn.0040d2e0
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x27
call fcn.0044c2e3
pop ecx
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x50]
call fcn.0040d2e0
push 0x4000453
lea eax, [ebp - 0x18]
push eax
call fcn.00449f35
push eax
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x33
call fcn.0040d2e0
push dword [ebp - 0x18]
call fcn.0044c2e3
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
pop ecx
push dword [ebp - 0x34]
push 2
push 0x40b
push dword [edi + 0x108]
call esi
push dword [ebp - 0x50]
push ebx
push 0x40b
push dword [edi + 0x108]
call esi
push dword [ebp - 0x5c]
call fcn.0044c2e3
push dword [ebp - 0x44]
call fcn.0044c2e3
push dword [ebp - 0x88]
call fcn.0044c2e3
add esp, 0xc
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x11
call fcn.0040d3a9
push dword [ebp - 0x7c]
call fcn.0044c2e3
push dword [ebp - 0xac]
call fcn.0044c2e3
pop ecx
pop ecx
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0xd
call fcn.0041708a
push dword [ebp - 0xb8]
call fcn.0044c2e3
push dword [ebp - 0xa0]
call fcn.0044c2e3
push dword [ebp - 0x94]
call fcn.0044c2e3
push dword [ebp - 0x34]
call fcn.0044c2e3
push dword [ebp - 0x118]
call fcn.0044c2e3
push dword [ebp - 0x100]
call fcn.0044c2e3
push dword [ebp - 0xf4]
call fcn.0044c2e3
push dword [ebp - 0x50]
call fcn.0044c2e3
push dword [ebp - 0xe8]
call fcn.0044c2e3
push dword [ebp - 0x130]
call fcn.0044c2e3
push dword [ebp - 0x10c]
call fcn.0044c2e3
push dword [ebp - 0x124]
call fcn.0044c2e3
push dword [ebp - 0x13c]
call fcn.0044c2e3
or dword [ebp - 4], 0xffffffff
add esp, 0x34
lea ecx, [ebp - 0xdc]
call fcn.0044c2ad
call fcn.00461cc8
ret