Function at 0x43bf6184
Capabilities:
Create thread
Get graphical window text

Disassembly:
push 0xbc
mov eax, 0x43c1b5e8
call fcn.43bfae59
mov ebx, ecx
mov dword [ebp - 0xc0], ebx
lea esi, [ebx - 0x24]
mov eax, dword [esi]
push 0x263
mov dword [ebp - 0xc8], esi
mov dword [section..shared], eax
call fcn.43bd5790
pop ecx
push eax
push dword [esi]
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0
push 0xc
call edi
push eax
push 0xb
call edi
mov esi, dword [sym.imp.USER32.dll_LoadImageW]
push eax
push 1
mov eax, 0xc8
push eax
push dword [0x43c402b8]
call esi
push eax
push 1
push 0x80
push dword [ebx - 0x24]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0x32
call edi
push eax
push 0x31
call edi
push eax
push 1
push 0xc8
push dword [0x43c402b8]
call esi
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
lea esi, [ebx - 0x24]
push eax
push 0
push 0x80
push dword [esi]
call edi
call fcn.43bc7040
push 0
call fcn.43bc721c
pop ecx
push 1
push eax
push 0x30
push dword [esi]
call edi
push 0x88
call fcn.43bc1420
pop ecx
mov dword [ebp - 0xc4], eax
xor edi, edi
mov dword [ebp - 4], edi
test eax, eax
je 0x43bf6263
push dword [esi]
mov ecx, eax
call fcn.43bf5da2
jmp 0x43bf6265
mov eax, edi
or dword [ebp - 4], 0xffffffff
mov ecx, eax
push 1
push edi
mov dword [ebx + 0x644], eax
call fcn.43bc8704
push edi
push dword [ebx + 0x644]
mov ecx, ebx
call fcn.43bc8d82
push 0x94
call fcn.43bc1420
pop ecx
mov dword [ebp - 0xc4], eax
mov dword [ebp - 4], 1
test eax, eax
je 0x43bf62ae
push dword [esi]
mov ecx, eax
call fcn.43bcb655
jmp 0x43bf62b0
mov eax, edi
or dword [ebp - 4], 0xffffffff
mov ecx, ebx
push edi
push eax
mov dword [ebx + 0x668], eax
call fcn.43bc8d82
push 0x70
call fcn.43bc1420
pop ecx
mov dword [ebp - 0xc4], eax
mov dword [ebp - 4], 2
test eax, eax
je 0x43bf62e7
push dword [esi]
mov ecx, eax
call fcn.43bcd91b
jmp 0x43bf62e9
mov eax, edi
or dword [ebp - 4], 0xffffffff
mov ecx, eax
push 1
push edi
mov dword [ebx + 0x664], eax
call fcn.43bc8704
push edi
push dword [ebx + 0x664]
mov ecx, ebx
call fcn.43bc8d82
call fcn.43bf3a21
mov esi, eax
mov eax, dword [ebx + 0x670]
cmp eax, 4
je 0x43bf6326
cmp eax, 5
je 0x43bf6326
test esi, esi
jne 0x43bf632e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov esi, eax
call fcn.43bc5f4f
cmp eax, 7
mov edi, 0x11c
xorps xmm0, xmm0
setg al
test al, al
mov byte [ebp - 0xb9], al
lea eax, [ebp - 0x30]
lea ecx, [edi - 4]
push eax
cmovne edi, ecx
push esi
mov dword [ebp - 0xc4], edi
movdqu xmmword [ebp - 0x30], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
mov esi, dword [ebp - 0x28]
sub esi, dword [ebp - 0x30]
call fcn.43bc722b
push 0x60
push dword [eax]
push 0x1b7
call dword [sym.imp.KERNEL32.dll_MulDiv]
sub esi, eax
mov eax, esi
mov esi, dword [ebp - 0x24]
sub esi, dword [ebp - 0x2c]
cdq
sub eax, edx
mov ebx, eax
sar ebx, 1
add ebx, dword [ebp - 0x30]
call fcn.43bc722b
push 0x60
push dword [eax + 4]
push edi
call dword [sym.imp.KERNEL32.dll_MulDiv]
sub esi, eax
mov eax, esi
cdq
sub eax, edx
mov edi, eax
sar edi, 1
add edi, dword [ebp - 0x2c]
call fcn.43bc722b
push 0x60
push dword [eax + 4]
push dword [ebp - 0xc4]
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov esi, eax
call fcn.43bc722b
push 0x60
push dword [eax]
push 0x1b7
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 1
push esi
push eax
push edi
push ebx
mov ebx, dword [ebp - 0xc8]
push dword [ebx]
call dword [sym.imp.USER32.dll_MoveWindow]
lea eax, [ebp - 0x20]
xorps xmm0, xmm0
push eax
push dword [ebx]
movdqu xmmword [ebp - 0x20], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
mov edi, dword [ebp - 0xc0]
push dword [ebx]
lea ecx, [edi + 0xcc]
mov eax, dword [ecx]
call dword [eax + 4]
push 0xe3
push dword [ebx]
call dword [sym.imp.USER32.dll_GetDlgItem]
lea esi, [edi + 0x84]
push eax
mov ecx, esi
call fcn.43bcbddf
mov dword [edi + 0x250], 0xffffff
lea ecx, [ebp - 0x7c]
call fcn.43bcab9a
xor eax, eax
mov dword [ebp - 4], 3
mov edi, 0x43c2a1c0
mov dword [ebp - 0x34], 7
xor ebx, ebx
mov word [ebp - 0x48], ax
push edi
mov dword [ebp - 0x38], ebx
call fcn.43bfaa14
pop ecx
push eax
push edi
lea ecx, [ebp - 0x48]
call fcn.43bc2024
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 4
push eax
push 0xd3
push ebx
lea ecx, [ebp - 0x7c]
call fcn.43bcae26
push ebx
inc ebx
lea ecx, [ebp - 0x48]
push ebx
call fcn.43bc1f54
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0xb8]
call fcn.43bcb95a
mov dword [ebp - 0x84], 4
mov dword [ebp - 0x80], ebx
push ebx
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 5
push eax
mov ecx, esi
call fcn.43bcbf2f
mov ecx, dword [ebp - 0xb8]
mov byte [ebp - 4], 3
test ecx, ecx
je 0x43bf64d8
call fcn.43bca290
lea ecx, [ebp - 0x7c]
call fcn.43bcafbe
cdq
and edx, 3
lea esi, [edx + eax]
sar esi, 2
call fcn.43bc722b
push 0x60
push dword [eax + 4]
push esi
call dword [sym.imp.KERNEL32.dll_MulDiv]
lea ecx, [ebp - 0x7c]
mov ebx, eax
call fcn.43bcaf92
mov esi, eax
call fcn.43bc722b
push 0x60
push dword [eax]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_MulDiv]
call esi
mov edi, eax
call fcn.43bc722b
push 0x60
push dword [eax + 4]
push 2
call esi
mov esi, eax
call fcn.43bc722b
push 0x60
push dword [eax]
push 0x22
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
add edx, esi
push 1
push ebx
mov ebx, dword [ebp - 0xc0]
sub ecx, eax
push edi
push edx
push ecx
push dword [ebx + 0x88]
call dword [sym.imp.USER32.dll_MoveWindow]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
lea edi, [ebx - 0x24]
push 0xce
push dword [edi]
call esi
push eax
lea ecx, [ebx + 0x264]
call fcn.43bcbddf
push 0xd1
push dword [edi]
call esi
push eax
lea ecx, [ebx + 0x454]
call fcn.43bcbddf
call fcn.43bc722b
mov esi, dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x60
push dword [eax]
push 0x22
call esi
mov dword [ebp - 0xc4], eax
call fcn.43bc722b
push 0x60
push dword [eax + 4]
push 0xa
call esi
push 0xca
push dword [edi]
mov esi, eax
mov dword [ebp - 0xc8], esi
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebx + 0x648], eax
call fcn.43bc722b
push 0x60
push dword [eax + 4]
push 0x14
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov ebx, dword [ebp - 0x18]
mov edi, eax
sub ebx, dword [ebp - 0x20]
call fcn.43bc722b
push 0x60
push dword [eax + 4]
push esi
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov esi, eax
call fcn.43bc722b
push 0x60
push dword [eax]
push 0
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 1
push edi
mov edi, dword [ebp - 0xc0]
push ebx
push esi
push eax
push dword [edi + 0x648]
call dword [sym.imp.USER32.dll_MoveWindow]
push 2
call fcn.43bc721c
pop ecx
push 1
push eax
push 0x30
push dword [edi + 0x648]
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.43bc722b
mov ebx, dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x60
push dword [eax + 4]
push 0x20
call ebx
mov esi, dword [ebp - 0xc8]
push 0xd7
push dword [edi - 0x24]
add esi, eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [edi + 0x654], eax
call fcn.43bc722b
push 0x60
push dword [eax + 4]
push 0x14
call ebx
mov ebx, eax
call fcn.43bc722b
push 0x60
push dword [eax]
push 0x190
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edi, eax
call fcn.43bc722b
push 0x60
push dword [eax + 4]
push esi
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov esi, eax
call fcn.43bc722b
push 0x60
push dword [eax]
push dword [ebp - 0xc4]
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 1
push ebx
mov ebx, dword [ebp - 0xc0]
push edi
push esi
push eax
push dword [ebx + 0x654]
call dword [sym.imp.USER32.dll_MoveWindow]
push 0
call fcn.43bc721c
pop ecx
push 1
push eax
push 0x30
push dword [ebx + 0x654]
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.43bc722b
mov edi, dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x60
push dword [eax + 4]
push 0x47
call edi
push 0xd9
push dword [ebx - 0x24]
mov esi, eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebx + 0x65c], eax
call fcn.43bc722b
push 0x60
push dword [eax + 4]
lea eax, [esi + 0x37]
push eax
call edi
mov ebx, eax
call fcn.43bc722b
mov ecx, dword [ebp - 0xc4]
push 0x60
add ecx, 0x14
push dword [eax]
push ecx
call edi
mov edi, eax
call fcn.43bc722b
push 0x60
push dword [eax + 4]
push esi
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov esi, eax
call fcn.43bc722b
push 0x60
push dword [eax]
push dword [ebp - 0xc4]
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
sub edx, ebx
mov ebx, dword [ebp - 0xc0]
sub ecx, edi
push 1
push edx
push ecx
push esi
push eax
push dword [ebx + 0x65c]
call dword [sym.imp.USER32.dll_MoveWindow]
push 0
call fcn.43bc721c
pop ecx
push 1
push eax
push 0x30
push dword [ebx + 0x65c]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0xd2
push dword [ebx - 0x24]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebx + 0x650], eax
call fcn.43bc722b
mov esi, dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x60
push dword [eax + 4]
push 0x14
call esi
mov ebx, dword [ebp - 0x18]
mov edi, eax
sub ebx, dword [ebp - 0x20]
call fcn.43bc722b
push 0x60
push dword [eax + 4]
push 0xb3
call esi
mov esi, eax
call fcn.43bc722b
push 0x60
push dword [eax]
push 0
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 1
push edi
push ebx
mov ebx, dword [ebp - 0xc0]
push esi
push eax
push dword [ebx + 0x650]
call dword [sym.imp.USER32.dll_MoveWindow]
push 0xe
call fcn.43bc721c
pop ecx
push 1
push eax
push 0x30
push dword [ebx + 0x650]
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, 0xdc
push esi
push dword [ebx - 0x24]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebx + 0x660], eax
call fcn.43bc722b
cmp byte [ebp - 0xb9], 0
mov edi, dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x60
push dword [eax + 4]
push 0xd
pop eax
push 0xf
pop ecx
cmovne eax, ecx
push eax
call edi
mov ebx, eax
call fcn.43bc722b
push 0x60
push dword [eax]
push 0xbe
call edi
mov edi, eax
call fcn.43bc722b
cmp byte [ebp - 0xb9], 0
push 0x60
push dword [eax + 4]
lea eax, [esi - 0x14]
cmovne esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov esi, eax
call fcn.43bc722b
push 0x60
push dword [eax]
push 0x22
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 1
push ebx
mov ebx, dword [ebp - 0xc0]
push edi
push esi
push eax
push dword [ebx + 0x660]
call dword [sym.imp.USER32.dll_MoveWindow]
push 0
call fcn.43bc721c
pop ecx
push 1
push eax
push 0x30
push dword [ebx + 0x660]
call dword [sym.imp.USER32.dll_SendMessageW]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0xd0
push dword [ebx - 0x24]
call edi
push 0xde
push dword [ebx - 0x24]
mov dword [ebx + 0x64c], eax
call edi
mov dword [ebx + 0x658], eax
call fcn.43bc722b
mov esi, dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x60
push dword [eax + 4]
push 0x14
call esi
mov ebx, dword [ebp - 0x18]
mov edi, eax
sub ebx, dword [ebp - 0x20]
call fcn.43bc722b
push 0x60
push dword [eax + 4]
push 0xb4
call esi
mov esi, eax
call fcn.43bc722b
push 0x60
push dword [eax]
push 0
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 1
push edi
push ebx
mov ebx, dword [ebp - 0xc0]
push esi
push eax
push dword [ebx + 0x658]
call dword [sym.imp.USER32.dll_MoveWindow]
push 0xe
call fcn.43bc721c
pop ecx
push 1
push eax
push 0x30
push dword [ebx + 0x658]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebx + 0x670]
cmp eax, 3
je 0x43bf69ad
cmp eax, 4
je 0x43bf69ad
cmp eax, 5
je 0x43bf69ad
cmp eax, 1
je 0x43bf6990
cmp eax, 2
jne 0x43bf69de
push 0
push 0
push 0x20000
lea ecx, [ebx - 0x24]
call fcn.43bcd196
push 3
lea ecx, [ebx - 0x28]
call fcn.43bf7b08
jmp 0x43bf69de
lea esi, [ebx - 0x28]
xor edi, edi
push edi
mov ecx, esi
call fcn.43bf7b08
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push edi
push edi
push esi
push 0x43bf75ae
push edi
push edi
mov dword [ebx + 0x6f4], eax
call fcn.43bfd7ff
add esp, 0x18
mov dword [ebx + 0x6ec], eax
push dword [ebx - 0x24]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 1
push 0x2af8
push dword [ebx + 0x670]
call fcn.43bf3816
pop ecx
push eax
call fcn.43bf4724
or dword [ebp - 4], 0xffffffff
add esp, 0xc
mov ecx, dword [ebp - 0x7c]
test ecx, ecx
je 0x43bf6a13
call fcn.43bca290
xor al, al
call fcn.43bfae08
ret 8