Function at 0x419280
Capabilities:
Hide graphical window
Identify system language via api
Inspect load icon resource
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x558108
mov eax, dword fs:[0]
push eax
sub esp, 0x68
mov eax, dword [0x5b3680]
xor eax, esp
mov dword [esp + 0x60], eax
push ebx
push esi
push edi
mov eax, dword [0x5b3680]
xor eax, esp
push eax
lea eax, [esp + 0x78]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x1c], ebx
push dword [ebx + 4]
lea edi, [ebx + 4]
call dword [sym.imp.USER32.dll_GetParent]
push eax
mov ecx, edi
call fcn.0041c2d0
push 0
push dword [edi]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x66
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadIconW]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x3eb
push dword [edi]
mov dword [ebx + 0x7c], eax
call esi
push 0x3ec
push dword [edi]
call esi
push 0x3ed
push dword [edi]
call esi
push 0x581a44
lea ecx, [esp + 0x18]
call fcn.004031c0
mov dword [esp + 0x80], 0
lea eax, [esp + 0x1b]
push eax
push 0x20a
lea ecx, [esp + 0x28]
mov byte [esp + 0x23], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
call fcn.0041a930
mov byte [esp + 0x80], 1
mov esi, dword [esp + 0x20]
push 0x105
push esi
push dword [0x5b8bf4]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x41945c
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov byte [esp + 0x80], 2
lea ecx, [esp + 0x58]
push esi
call fcn.00413bd0
mov byte [esp + 0x80], 3
lea edx, [esp + 0x48]
lea ecx, [esp + 0x58]
call fcn.004fbe20
mov bl, al
mov byte [esp + 0x80], 2
cmp dword [esp + 0x6c], 8
jb 0x4193db
push dword [esp + 0x58]
call fcn.005295dd
add esp, 4
xor eax, eax
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], 0
mov word [esp + 0x58], ax
test bl, bl
je 0x419447
mov edx, dword [esp + 0x48]
add edx, 0x10c
cmp dword [edx + 0x14], 8
jb 0x419408
mov edx, dword [edx]
test edx, edx
jne 0x419410
xor ecx, ecx
jmp 0x419424
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x419415
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [esp + 0x1c]
call fcn.00402600
push 0x20
lea ecx, [esp + 0x18]
call fcn.00419b90
push 0x2e
push 0x2c
lea ecx, [esp + 0x1c]
call fcn.00419ad0
mov byte [esp + 0x80], 1
lea ecx, [esp + 0x48]
call fcn.0041a310
mov ebx, dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movzx eax, ax
or esi, 0xffffffff
cmp eax, 0x280a
jg 0x419659
je 0x41978b
cmp eax, 0x100a
jg 0x419628
je 0x41978b
cmp eax, 0x419
jg 0x419613
je 0x419561
sub eax, 0x40a
je 0x41978b
sub eax, 0xb
jne 0x4196cc
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextW]
push 0x589f2c
push 0x3eb
push dword [edi]
call esi
push str.Wersja:
lea ecx, [esp + 0x44]
call fcn.004031c0
mov byte [esp + 0x80], 0xa
lea ecx, [esp + 0x14]
push ecx
mov edx, eax
lea ecx, [esp + 0x48]
call fcn.0041c210
add esp, 4
mov byte [esp + 0x80], 0xb
push dword [eax]
push 0x3ec
push dword [edi]
call esi
mov byte [esp + 0x80], 0xa
lea ecx, [esp + 0x44]
call fcn.00402750
mov byte [esp + 0x80], 1
lea ecx, [esp + 0x40]
call fcn.00402750
push 0x58a008
push 0x3ed
push dword [edi]
call esi
push str.O_Agenta_StaffCop
push dword [edi]
call dword [sym.imp.USER32.dll_SetWindowTextW]
add ebx, 0x20
push 0x58a0e4
mov ecx, ebx
call fcn.00419dd0
push str.www.staffcop.com
push 0x3ef
push dword [edi]
call esi
or esi, 0xffffffff
jmp 0x419865
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextW]
push str.StaffCop
push 0x3eb
push dword [edi]
call esi
push 0x589e74
lea ecx, [esp + 0x30]
call fcn.004031c0
mov byte [esp + 0x80], 8
lea ecx, [esp + 0x14]
push ecx
mov edx, eax
lea ecx, [esp + 0x38]
call fcn.0041c210
add esp, 4
mov byte [esp + 0x80], 9
push dword [eax]
push 0x3ec
push dword [edi]
call esi
mov byte [esp + 0x80], 8
lea ecx, [esp + 0x34]
call fcn.00402750
mov byte [esp + 0x80], 1
lea ecx, [esp + 0x2c]
call fcn.00402750
push 0x589e88
push 0x3ed
push dword [edi]
call esi
push 0x589e1c
push dword [edi]
call dword [sym.imp.USER32.dll_SetWindowTextW]
add ebx, 0x20
push str.http:__www.staffcop.ru
mov ecx, ebx
call fcn.00419dd0
push str.www.staffcop.ru
push 0x3ef
push dword [edi]
call esi
or esi, 0xffffffff
jmp 0x419865
cmp eax, 0x80a
je 0x41978b
cmp eax, 0xc0a
jmp 0x4196c6
cmp eax, 0x1c0a
jg 0x419647
je 0x41978b
cmp eax, 0x140a
je 0x41978b
cmp eax, 0x180a
jmp 0x4196c6
cmp eax, 0x200a
je 0x41978b
cmp eax, 0x240a
jmp 0x4196c6
cmp eax, 0x400a
jg 0x419697
je 0x41978b
cmp eax, 0x340a
jg 0x419685
je 0x41978b
cmp eax, 0x2c0a
je 0x41978b
cmp eax, 0x300a
jmp 0x4196c6
cmp eax, 0x380a
je 0x41978b
cmp eax, 0x3c0a
jmp 0x4196c6
cmp eax, 0x4c0a
jg 0x4196b6
je 0x41978b
cmp eax, 0x440a
je 0x41978b
cmp eax, 0x480a
jmp 0x4196c6
cmp eax, 0x500a
je 0x41978b
cmp eax, 0x540a
je 0x41978b
mov ebx, dword [sym.imp.USER32.dll_SetDlgItemTextW]
push 0x589f2c
push 0x3eb
push dword [edi]
call ebx
push str.Version:
lea ecx, [esp + 0x58]
call fcn.004031c0
mov byte [esp + 0x80], 0xc
lea ecx, [esp + 0x14]
push ecx
mov edx, eax
lea ecx, [esp + 0x40]
call fcn.0041c210
add esp, 4
mov byte [esp + 0x80], 0xd
push dword [eax]
push 0x3ec
push dword [edi]
call ebx
mov byte [esp + 0x80], 0xc
mov ecx, esi
mov edx, dword [esp + 0x3c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x419741
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 1
mov ecx, esi
mov edx, dword [esp + 0x54]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x419766
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x589f50
push 0x3ed
push dword [edi]
call ebx
push 0x589f00
push dword [edi]
call dword [sym.imp.USER32.dll_SetWindowTextW]
push 0x58a0e4
jmp 0x419845
mov ebx, dword [sym.imp.USER32.dll_SetDlgItemTextW]
push str.Agente_de_StaffCop
push 0x3eb
push dword [edi]
call ebx
push str.Version:
lea ecx, [esp + 0x3c]
call fcn.004031c0
mov byte [esp + 0x80], 4
lea ecx, [esp + 0x14]
push ecx
mov edx, eax
lea ecx, [esp + 0x34]
call fcn.0041c210
add esp, 4
mov byte [esp + 0x80], 5
push dword [eax]
push 0x3ec
push dword [edi]
call ebx
mov byte [esp + 0x80], 4
mov ecx, esi
mov edx, dword [esp + 0x30]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x419800
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 1
mov ecx, esi
mov edx, dword [esp + 0x38]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x419825
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x589d88
push 0x3ed
push dword [edi]
call ebx
push str.Acerca_del_agente_de_StaffCop
push dword [edi]
call dword [sym.imp.USER32.dll_SetWindowTextW]
push str.http:__www.staffcop.ru
mov ebx, dword [esp + 0x20]
add ebx, 0x20
mov ecx, ebx
call fcn.00419dd0
push str.www.staffcop.com
push 0x3ef
push dword [edi]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [ebx + 4], 0
jne 0x419897
test ebx, ebx
je 0x419874
lea eax, [ebx - 0x20]
jmp 0x419876
xor eax, eax
push 0x3ef
push dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
mov ecx, ebx
call fcn.0041baf0
test eax, eax
je 0x419897
mov ecx, ebx
call fcn.0041ac70
mov ecx, dword [esp + 0x1c]
call fcn.00419940
push 0
push dword [edi]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [edi]
push dword [0x5b9c64]
mov dword [0x5b9c6c], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [0x5b9c70], 0
mov byte [esp + 0x80], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4198f8
push eax
call fcn.005295dd
add esp, 4
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x80], 0xffffffff
mov edx, dword [esp + 0x14]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], esi
dec esi
test esi, esi
jg 0x41991e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor eax, eax
mov ecx, dword [esp + 0x78]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.005295e2
mov esp, ebp
pop ebp
ret 0x10