Function at 0x40ee4c
Capabilities:
Get graphical window text
Hide graphical window

Disassembly:
push 0x2dc
mov eax, 0x46b6da
call fcn.0042a2ac
mov esi, ecx
and dword [ebp - 0x2e8], 0
lea edi, [esi + 8]
push 0
mov ecx, edi
call fcn.0040fa55
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.004094ee
test al, al
jne 0x40f35b
call fcn.00407b74
test al, al
je 0x40ee99
mov dl, 1
mov ecx, 0x479974
call fcn.00405132
cmp byte [esi + 0x1a4], 0
je 0x40eeb9
mov ecx, dword [esi + 0x1c4]
call fcn.004157e3
mov ecx, esi
call fcn.0040f3da
jmp 0x40f371
push 0x105
lea eax, [ebp - 0x224]
mov ecx, edi
push eax
push 0xa
call fcn.0040fa55
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov ecx, esi
call fcn.0040f426
test al, al
jne 0x40eef0
call fcn.00407b0d
test al, al
je 0x40ef24
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x284]
call fcn.00403e52
and dword [ebp - 4], 0
lea ecx, [ebp - 0x284]
call fcn.00408db0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x284]
push 0
push 1
call fcn.004041d3
lea eax, [esi + 0x54]
push eax
lea edx, [esi + 0x1a8]
lea ecx, [ebp - 0x254]
call fcn.00408771
pop ecx
mov dword [ebp - 4], 1
cmp dword [ebp - 0x244], 0
je 0x40efc4
lea ecx, [ebp - 0x254]
call fcn.004080c7
test al, al
je 0x40efc4
mov eax, dword [esi + 0x1c4]
cmp dword [eax], 0
je 0x40efc4
mov ebx, str..torrent
push ebx
call fcn.0040359e
pop ecx
push eax
push ecx
push ebx
lea ecx, [ebp - 0x254]
call fcn.004098d1
cmp eax, 0xffffffff
jne 0x40efc4
mov ebx, str..tor
push ebx
call fcn.0040359e
pop ecx
push eax
push ecx
push ebx
lea ecx, [ebp - 0x254]
call fcn.004098d1
cmp eax, 0xffffffff
jne 0x40efc4
call fcn.00407b0d
test al, al
jne 0x40efc4
cmp dword [ebp - 0x240], 8
lea ecx, [ebp - 0x254]
cmovae ecx, dword [ebp - 0x254]
call fcn.004088cb
mov ecx, dword [esi + 0x1c4]
call fcn.004157e3
call fcn.00407b74
test al, al
jne 0x40eff3
mov ecx, esi
call fcn.0040f3da
push 0
push 1
lea ecx, [ebp - 0x254]
call fcn.004041d3
jmp 0x40f378
call fcn.004094ee
test al, al
jne 0x40f346
call fcn.004094ee
test al, al
jne 0x40f346
and dword [ebp - 0x22c], 0
xor eax, eax
mov dword [ebp - 0x228], 7
mov word [ebp - 0x23c], ax
push 0xc
mov ecx, edi
mov byte [ebp - 4], 2
call fcn.0040fa55
mov ebx, dword [sym.imp.USER32.dll_IsDlgButtonChecked]
push eax
call ebx
test eax, eax
je 0x40f05d
push str._YAHOMEPAGEy_YAQSEARCHy
call fcn.0040359e
pop ecx
push eax
push str._YAHOMEPAGEy_YAQSEARCHy
lea ecx, [ebp - 0x23c]
call fcn.00405ac5
push 0xd
mov ecx, edi
call fcn.0040fa55
push eax
call ebx
test eax, eax
je 0x40f089
push str._YABROWSERy_YBDEFAULTy
call fcn.0040359e
pop ecx
push eax
push str._YABROWSERy_YBDEFAULTy
lea ecx, [ebp - 0x23c]
call fcn.00405ac5
push 0xe
mov ecx, edi
call fcn.0040fa55
push eax
call ebx
test eax, eax
je 0x40f0b2
mov edi, str._YABMy
push edi
call fcn.0040359e
pop ecx
push eax
push edi
lea ecx, [ebp - 0x23c]
call fcn.00405ac5
cmp dword [ebp - 0x22c], 0
je 0x40f337
cmp dword [ebp - 0x228], 8
lea eax, [ebp - 0x23c]
lea ecx, [ebp - 0x23c]
cmovae eax, dword [ebp - 0x23c]
cmovae ecx, dword [ebp - 0x23c]
test eax, eax
jne 0x40f0ea
xor ebx, ebx
mov eax, ebx
jmp 0x40f0f0
sub eax, ecx
sar eax, 1
xor ebx, ebx
xor edi, edi
lea ecx, [ebp - 0x23c]
inc edi
push edi
push eax
call fcn.00404b59
lea ecx, [ebp - 0x2e4]
call fcn.00407fdc
push eax
mov edx, str.__partner
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2cc]
call fcn.00405977
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x284]
mov edx, eax
mov dword [esp], str.___distr__passive__msicl__
call fcn.004059a7
pop ecx
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 5
push ecx
mov edx, eax
lea ecx, [ebp - 0x29c]
call fcn.0040f660
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2b4]
mov edx, eax
mov dword [esp], str._VID40_
call fcn.004059a7
pop ecx
push eax
lea ecx, [ebp - 0x23c]
call fcn.00409573
push ebx
push edi
lea ecx, [ebp - 0x2b4]
call fcn.004041d3
push ebx
push edi
lea ecx, [ebp - 0x29c]
call fcn.004041d3
push ebx
push edi
lea ecx, [ebp - 0x284]
call fcn.004041d3
push ebx
push edi
lea ecx, [ebp - 0x2cc]
call fcn.004041d3
push ebx
push edi
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 2
call fcn.004041d3
push ecx
lea ecx, [ebp - 0x26c]
call fcn.00408c61
mov byte [ebp - 4], 7
mov ecx, dword [esi + 0x1c0]
mov dword [esp], str.pp9b9
call fcn.004074fe
mov ecx, dword [esi + 0x1c0]
call fcn.00407594
push 0x477d20
lea ecx, [ebp - 0x2b4]
call fcn.00403e52
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x29c]
push str.http:__download.yandex.ru_yandex_pack_downloader_downloader.exe
mov dword [ebp - 0x2e8], edi
call fcn.00403e52
mov dword [ebp - 4], 9
mov dword [ebp - 0x2e8], 3
lea eax, [ebp - 0x2b4]
push eax
lea edx, [ebp - 0x26c]
lea ecx, [ebp - 0x29c]
call fcn.00413360
pop ecx
test al, al
je 0x40f25f
cmp dword [ebp - 0x258], 8
lea ecx, [ebp - 0x26c]
cmovae ecx, dword [ebp - 0x26c]
call fcn.00409435
test al, al
je 0x40f25f
mov bl, 1
push 0
push 1
lea ecx, [ebp - 0x29c]
call fcn.004041d3
push 0
push 1
lea ecx, [ebp - 0x2b4]
mov dword [ebp - 4], 7
call fcn.004041d3
test bl, bl
je 0x40f2f2
mov ecx, dword [esi + 0x1c0]
push str.dp9b9
call fcn.004074fe
mov ecx, dword [esi + 0x1c0]
call fcn.00407594
mov ecx, dword [esi + 0x1c0]
push str.rp9b9
call fcn.004074fe
mov ecx, dword [esi + 0x1c0]
call fcn.00407594
push 0x927c0
lea edx, [ebp - 0x23c]
lea ecx, [ebp - 0x26c]
call fcn.00409392
pop ecx
test al, al
jne 0x40f2e0
mov ecx, 0x479af0
jmp 0x40f2f7
mov ecx, dword [esi + 0x1c0]
push str.ip9b9
call fcn.004074fe
jmp 0x40f2fe
mov ecx, 0x479b00
mov dl, 1
call fcn.00405132
mov ecx, dword [esi + 0x1c0]
call fcn.00407594
and dword [ebp - 0x22c], 0
lea eax, [ebp - 0x23c]
cmp dword [ebp - 0x228], 8
cmovae eax, dword [ebp - 0x23c]
xor ecx, ecx
push ecx
push 1
mov word [eax], cx
lea ecx, [ebp - 0x26c]
call fcn.004041d3
push 0
push 1
lea ecx, [ebp - 0x23c]
call fcn.004041d3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x254]
push 0
push 1
call fcn.004041d3
jmp 0x40f371
mov ecx, dword [esi + 0x1c0]
call fcn.00407594
mov ecx, dword [esi + 0x1c4]
call fcn.004157e3
mov ecx, esi
call fcn.0040f3da
call fcn.0042a25b
ret