Function at 0x41e37f
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffdc8
push esi
push edi
mov edi, dword [ebp + 8]
push dword [edi + 0x11d]
pop dword [ebp - 0x5c]
push dword [ebp - 0x5c]
call fcn.0041bdaf
mov esi, eax
push dword [esi + 4]
pop dword [ebp - 0x60]
push dword [edi + 0x14]
pop dword [ebp - 0x10]
or dword [ebp - 0x10], 0x56000000
cmp dword [ebp - 0x5c], 0
jne 0x41e3dc
and dword [ebp - 0x10], 0x46ffffff
mov eax, dword [edi + 0xc]
mov dword [ebp - 0x80], eax
mov edx, edi
sub edx, 0x90
push edx
call fcn.0041defc
mov dword [ebp - 0x1bc], eax
jmp 0x41e42d
and dword [ebp - 0x10], 0x56ffffff
mov eax, dword [edi + 0xc]
push 0xffffffffffffffeb
push eax
call sub.user32.dll_GetWindowLongA
mov edx, eax
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x80], eax
sub edx, 0x90
mov eax, dword [edx + 0x88]
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x5c], 2
jne 0x41e417
or dword [ebp - 0x10], 0x100
jmp 0x41e42d
cmp dword [ebp - 0x5c], 0xe
jne 0x41e423
or dword [ebp - 0x10], 0x40
jmp 0x41e42d
cmp dword [ebp - 0x5c], 0x10
jne 0x41e42d
and dword [ebp - 0x10], 0xffffffef
lea eax, [edi + 0x2c]
push eax
lea eax, [ebp - 0x180]
push eax
call fcn.0041dfcb
mov eax, dword [edi + 0x18]
and eax, 0x777fd
and eax, 0xffffffbf
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x5c]
or eax, eax
jne 0x41e484
push 0
push dword [0x453904]
push 0
push dword [edi + 0xc]
push 0
push 0
push 0
push 0
push dword [ebp - 0x10]
lea eax, [ebp - 0x180]
push eax
push dword [ebp - 0x60]
push dword [ebp - 0x14]
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 4], eax
jmp 0x41ebbd
cmp eax, 1
jne 0x41e4d3
push 0
push dword [0x453904]
push 0
push dword [edi + 0xc]
push dword [edi + 0x28]
push dword [edi + 0x24]
push dword [edi + 0x20]
push dword [edi + 0x1c]
push dword [ebp - 0x10]
lea eax, [ebp - 0x180]
push eax
push dword [ebp - 0x60]
push dword [ebp - 0x14]
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 4], eax
push 3
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 4]
call sub.user32.dll_SetWindowPos
jmp 0x41ebbd
cmp eax, 3
jne 0x41e552
push 0
push dword [0x453904]
push 0
push dword [edi + 0xc]
push dword [edi + 0x28]
push dword [edi + 0x24]
push dword [edi + 0x20]
push dword [edi + 0x1c]
push 0x54000100
push 0
push str.Static
push 0
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 4], eax
push 3
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 4]
call sub.user32.dll_SetWindowPos
push 0
push dword [0x453904]
push 0
push dword [ebp - 4]
push dword [edi + 0x28]
push dword [edi + 0x24]
push 0
push 0
push dword [ebp - 0x10]
lea eax, [ebp - 0x180]
push eax
push dword [ebp - 0x60]
push dword [ebp - 0x14]
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 8], eax
mov dword [edi + 0x10], eax
jmp 0x41ebbd
cmp eax, 0xb
jne 0x41e5e1
push 0
push dword [0x453904]
push 0
push dword [edi + 0xc]
push dword [edi + 0x28]
push dword [edi + 0x24]
push dword [edi + 0x20]
push dword [edi + 0x1c]
push 0x54000100
push 0
push str.Static
push 0
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 4], eax
push 3
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 4]
call sub.user32.dll_SetWindowPos
or dword [ebp - 0x10], 0x8000000
push 0
push dword [0x453904]
push 0
push dword [ebp - 4]
push dword [edi + 0x28]
push dword [edi + 0x24]
push 0
push 0
push dword [ebp - 0x10]
lea eax, [edi + 0x2c]
push eax
push dword [ebp - 0x60]
push dword [ebp - 0x14]
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 8], eax
mov dword [edi + 0x10], eax
mov eax, dword [edi + 0x14]
and eax, 0x80
jmp 0x41ebbd
cmp eax, 0x11
jne 0x41e7cc
mov edx, dword [ebp - 0x10]
and edx, 0x801000
or edx, 0x54000100
push 0
push dword [0x453904]
push 0
push dword [edi + 0xc]
push dword [edi + 0x28]
push dword [edi + 0x24]
push dword [edi + 0x20]
push dword [edi + 0x1c]
push edx
push 0
push str.Static
push dword [ebp - 0x14]
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 4], eax
lea eax, [ebp - 0x190]
push eax
push dword [ebp - 4]
call sub.user32.dll_GetWindowRect
mov eax, dword [ebp - 0x188]
sub eax, dword [ebp - 0x190]
push eax
lea eax, [ebp - 0x190]
push eax
push dword [ebp - 4]
call sub.user32.dll_GetClientRect
pop eax
sub eax, dword [ebp - 0x188]
mov dword [ebp - 0x194], eax
push 0x45de5e
lea eax, [ebp - 0x180]
push eax
call fcn.004010a7
lea eax, [edi + 0x2c]
push eax
lea eax, [ebp - 0x180]
push eax
call fcn.004010c5
lea eax, [edi + 0x2c]
push eax
call fcn.00428ce6
cmp eax, 0x1e
je 0x41e691
cmp eax, 0x1f
jne 0x41e6e7
cmp eax, 0x1e
jne 0x41e6b3
mov edx, 0
push edx
push 0x10
push 0
push 0
push edx
lea eax, [ebp - 0x180]
push eax
push 0
call sub.user32.dll_LoadImageA
jmp 0x41e6ce
mov edx, 1
push edx
push 0x50
push 0
push 0
push edx
lea eax, [ebp - 0x180]
push eax
push 0
call sub.user32.dll_LoadImageA
mov dword [edi + 0x151], eax
or eax, eax
je 0x41e6df
mov edx, 0
jmp 0x41e6ec
pop edx
mov edx, str.100
jmp 0x41e6ec
mov edx, str.100
mov ecx, dword [ebp - 0x10]
and ecx, 0xff7feeff
or ecx, 0x6000000
push 0
push dword [0x453904]
push 0
push dword [ebp - 4]
push dword [edi + 0x28]
push dword [edi + 0x24]
push 0
push 0
push ecx
push edx
push dword [ebp - 0x60]
push 0
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 8], eax
mov dword [edi + 0x10], eax
cmp dword [edi + 0x151], 0
je 0x41e742
pop edx
push dword [edi + 0x151]
push edx
push 0x172
push dword [ebp - 8]
call sub.user32.dll_SendMessageA
mov eax, dword [edi + 0x14]
and eax, 0x200
or eax, eax
jne 0x41e7a7
lea eax, [ebp - 0x190]
push eax
push dword [ebp - 8]
call sub.user32.dll_GetWindowRect
mov eax, dword [ebp - 0x188]
sub eax, dword [ebp - 0x190]
mov edx, dword [ebp - 0x184]
sub edx, dword [ebp - 0x18c]
or eax, eax
je 0x41e7b3
or edx, edx
je 0x41e7b3
add eax, dword [ebp - 0x194]
add edx, dword [ebp - 0x194]
mov dword [edi + 0x24], eax
mov dword [edi + 0x28], edx
push 1
push dword [edi + 0x28]
push dword [edi + 0x24]
push dword [edi + 0x20]
push dword [edi + 0x1c]
push dword [ebp - 4]
call sub.user32.dll_MoveWindow
jmp 0x41e7b3
push 1
push 0
push dword [ebp - 4]
call sub.user32.dll_InvalidateRect
push 3
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 4]
call sub.user32.dll_SetWindowPos
jmp 0x41ebbd
cmp eax, 0x17
jne 0x41e828
and dword [ebp - 0x10], 0xffff0000
or dword [ebp - 0x10], 0x100
push 0
push dword [0x453904]
push 0
push dword [edi + 0xc]
push dword [edi + 0x28]
push dword [edi + 0x24]
push dword [edi + 0x20]
push dword [edi + 0x1c]
push dword [ebp - 0x10]
lea eax, [edi + 0x2c]
push eax
push str.Static
push dword [ebp - 0x14]
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 4], eax
push 3
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 4]
call sub.user32.dll_SetWindowPos
jmp 0x41ebbd
cmp eax, 0x19
jne 0x41e8a9
and dword [ebp - 0x10], 0xfffffeff
push 0
push dword [0x453904]
push 0
push dword [edi + 0xc]
push dword [edi + 0x28]
push dword [edi + 0x24]
push dword [edi + 0x20]
push dword [edi + 0x1c]
push 0x54000100
push 0
push str.Static
push 0
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 4], eax
push 3
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 4]
call sub.user32.dll_SetWindowPos
push 0
push dword [0x453904]
push 0
push dword [ebp - 4]
push dword [edi + 0x28]
push dword [edi + 0x24]
push 0
push 0
push dword [ebp - 0x10]
push 0
push dword [ebp - 0x60]
push dword [ebp - 0x14]
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 8], eax
mov dword [edi + 0x10], eax
jmp 0x41ebbd
cmp eax, 0x1a
jne 0x41e92a
or dword [ebp - 0x10], 0x8000000
push 0
push dword [0x453904]
push 0
push dword [edi + 0xc]
push dword [edi + 0x28]
push dword [edi + 0x24]
push dword [edi + 0x20]
push dword [edi + 0x1c]
push 0x54000100
push 0
push str.Static
push 0
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 4], eax
push 3
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 4]
call sub.user32.dll_SetWindowPos
push 0
push dword [0x453904]
push 0
push dword [ebp - 4]
push dword [edi + 0x28]
push dword [edi + 0x24]
push 0
push 0
push dword [ebp - 0x10]
push 0
push dword [ebp - 0x60]
push dword [ebp - 0x14]
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 8], eax
mov dword [edi + 0x10], eax
jmp 0x41ebbd
cmp eax, 0x1b
jne 0x41e9a4
push 0
push dword [0x453904]
push 0
push dword [edi + 0xc]
push dword [edi + 0x28]
push dword [edi + 0x24]
push dword [edi + 0x20]
push dword [edi + 0x1c]
push 0x54000100
push 0
push str.Static
push 0
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 4], eax
push 3
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 4]
call sub.user32.dll_SetWindowPos
push 0
push dword [0x453904]
push 0
push dword [ebp - 4]
push dword [edi + 0x28]
push dword [edi + 0x24]
push 0
push 0
push dword [ebp - 0x10]
push 0
push dword [ebp - 0x60]
push dword [ebp - 0x14]
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 8], eax
mov dword [edi + 0x10], eax
jmp 0x41ebbd
cmp eax, 0x1d
je 0x41e9ae
cmp eax, 0x1e
jne 0x41ea0e
push 0
push dword [0x453904]
push 0
push dword [edi + 0xc]
push dword [edi + 0x28]
push dword [edi + 0x24]
push dword [edi + 0x20]
push dword [edi + 0x1c]
push 0x54000100
push 0
push str.Static
push 0
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 4], eax
push 0
push dword [0x453904]
push 0
push dword [ebp - 4]
push dword [edi + 0x28]
push dword [edi + 0x24]
push 0
push 0
push dword [ebp - 0x10]
lea eax, [edi + 0x2c]
push eax
push dword [ebp - 0x60]
push dword [ebp - 0x14]
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 8], eax
jmp 0x41ebbd
cmp eax, 0x1f
jne 0x41eaf6
or dword [ebp - 0x10], 4
push 0
push dword [0x453904]
push 0
push dword [edi + 0xc]
push dword [edi + 0x28]
push dword [edi + 0x24]
push dword [edi + 0x20]
push dword [edi + 0x1c]
push dword [ebp - 0x10]
lea eax, [edi + 0x2c]
push eax
push dword [ebp - 0x60]
push dword [ebp - 0x14]
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 4], eax
mov dword [ebp - 0x20c], 0x50
mov dword [ebp - 0x208], 0x71
mov dword [ebp - 0x204], 0x84
push 0
push dword [0x453904]
push 0
push dword [ebp - 4]
push dword [edi + 0x28]
push dword [edi + 0x24]
push 0
push 0
push 0x54000000
lea eax, [edi + 0x12d]
push eax
push str.Static
push 0
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 0x1ec], eax
push 0
push dword [ebp - 0x1bc]
push 0x30
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [edi + 0x24]
mov dword [ebp - 0x1e0], eax
mov eax, dword [edi + 0x24]
mov dword [ebp - 0x1e8], eax
mov eax, dword [edi + 0x28]
mov dword [ebp - 0x1e4], eax
lea eax, [ebp - 0x20c]
push eax
push 0
push 0x401
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
push 3
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 4]
call sub.user32.dll_SetWindowPos
jmp 0x41ebbd
cmp eax, 0x21
jne 0x41eb78
push 0
push dword [0x453904]
push 0
push dword [edi + 0xc]
push dword [edi + 0x28]
push dword [edi + 0x24]
push dword [edi + 0x20]
push dword [edi + 0x1c]
push 0x54000100
push 0
push str.Static
push 0
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 4], eax
push 3
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 4]
call sub.user32.dll_SetWindowPos
mov eax, dword [ebp - 0x10]
or eax, 0x8000000
push 0
push dword [0x453904]
push 0
push dword [ebp - 4]
push dword [edi + 0x28]
push dword [edi + 0x24]
push 0
push 0
push eax
lea eax, [ebp - 0x180]
push eax
push dword [ebp - 0x60]
push dword [ebp - 0x14]
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 8], eax
mov dword [edi + 0x10], eax
jmp 0x41ebbd
push 0
push dword [0x453904]
push 0
push dword [edi + 0xc]
push dword [edi + 0x28]
push dword [edi + 0x24]
push dword [edi + 0x20]
push dword [edi + 0x1c]
push dword [ebp - 0x10]
lea eax, [ebp - 0x180]
push eax
push dword [ebp - 0x60]
push dword [ebp - 0x14]
call sub.user32.dll_CreateWindowExA
mov dword [ebp - 4], eax
push 3
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 4]
call sub.user32.dll_SetWindowPos
push dword [ebp - 4]
pop dword [edi]
push edi
push 0xffffffffffffffeb
push dword [ebp - 4]
call sub.user32.dll_SetWindowLongA
push 0x41d127
push 0xfffffffffffffffc
push dword [ebp - 4]
call sub.user32.dll_SetWindowLongA
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x5c]
or eax, eax
jne 0x41ec09
push 0x40
push dword [edi + 0x28]
push dword [edi + 0x24]
push dword [0x450156]
push dword [0x450152]
push 0
push dword [ebp - 4]
call sub.user32.dll_SetWindowPos
jmp 0x41f291
cmp eax, 7
jne 0x41ec49
lea eax, [edi + 0x12d]
push eax
push 0
push 0x143
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
push 0
push 0
push 0x14e
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
push 0
push 0x41deb4
push dword [ebp - 4]
call sub.user32.dll_EnumChildWindows
jmp 0x41f291
cmp eax, 8
jne 0x41ec7f
lea eax, [edi + 0x12d]
push eax
push 0
push 0x180
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
lea eax, [edi + 0x12d]
push eax
push 0
push 0x180
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
jmp 0x41f291
cmp eax, 0xb
jne 0x41ecc6
mov dword [ebp - 0x30], 1
lea eax, [edi + 0x12d]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 6
lea eax, [ebp - 0x30]
push eax
push 0
push 0x1307
push dword [ebp - 8]
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0x30]
push eax
push 1
push 0x1307
push dword [ebp - 8]
call sub.user32.dll_SendMessageA
jmp 0x41f291
cmp eax, 0xc
jne 0x41ed03
push 0
push 0
push 0x405
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
push 0
push 0
push 0x405
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
push 0
push 0
push 0x405
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
jmp 0x41f291
cmp eax, 0xd
jne 0x41ed9d
push dword [0x453968]
push 0
push 0x1109
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
push 0
push 0x2e
push 0x2e
lea eax, [edi + 0x12d]
push eax
push 0
push 0xffff0000
push dword [ebp - 4]
call fcn.0042abd8
mov dword [ebp - 0xc], eax
push 1
push 0x2f
push 0x2f
lea eax, [edi + 0x12d]
push eax
push 0
push dword [ebp - 0xc]
push dword [ebp - 4]
call fcn.0042abd8
mov edx, eax
push eax
push 2
push 0x30
push 0x30
lea eax, [edi + 0x12d]
push eax
push 0
push edx
push dword [ebp - 4]
call fcn.0042abd8
pop eax
push eax
push 2
push 0x1102
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
push dword [ebp - 0xc]
push 2
push 0x1102
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
jmp 0x41f291
cmp eax, 0xe
jne 0x41ee52
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x101e
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
push dword [0x453968]
push 1
push 0x1003
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x58], 3
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
lea eax, [edi + 0x12d]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], 0xd
mov dword [ebp - 0x3c], 0x2e
lea eax, [ebp - 0x58]
push eax
push 0
push 0x1007
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x3c], 0x2f
lea eax, [ebp - 0x58]
push eax
push 0
push 0x1007
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x54], 2
mov dword [ebp - 0x3c], 0x30
lea eax, [ebp - 0x58]
push eax
push 0
push 0x1007
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
jmp 0x41f291
cmp eax, 0x12
jne 0x41f00c
push 0
push 0x14
push 0x41e
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
push 0x100010
push 0
push 0x41f
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
push 0x100010
push 0
push 0x420
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x78], 0
lea eax, [ebp - 0x7c]
push eax
push 0xc
push 0x413
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
mov byte [ebp - 0x6c], 4
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
mov byte [ebp - 0x6b], 1
lea eax, [ebp - 0x74]
push eax
push 1
push 0x414
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 1
mov byte [ebp - 0x6b], 0
lea eax, [ebp - 0x74]
push eax
push 1
push 0x414
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x70], 2
mov byte [ebp - 0x6b], 0
lea eax, [ebp - 0x74]
push eax
push 1
push 0x414
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x74], 2
mov dword [ebp - 0x70], 3
mov byte [ebp - 0x6b], 0
lea eax, [ebp - 0x74]
push eax
push 1
push 0x414
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
mov byte [ebp - 0x6b], 1
lea eax, [ebp - 0x74]
push eax
push 1
push 0x414
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x74], 3
mov dword [ebp - 0x70], 4
mov byte [ebp - 0x6b], 0
lea eax, [ebp - 0x74]
push eax
push 1
push 0x414
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x74], 4
mov dword [ebp - 0x70], 5
mov byte [ebp - 0x6b], 0
lea eax, [ebp - 0x74]
push eax
push 1
push 0x414
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
mov byte [ebp - 0x6b], 1
lea eax, [ebp - 0x74]
push eax
push 1
push 0x414
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
push 4
push dword [ebp - 0x80]
call sub.user32.dll_GetWindowLongA
or eax, eax
je 0x41f291
push dword [ebp - 4]
pop dword [eax + 0x7c]
jmp 0x41f291
cmp eax, 0x13
jne 0x41f031
push 4
push dword [ebp - 0x80]
call sub.user32.dll_GetWindowLongA
or eax, eax
je 0x41f291
push dword [ebp - 4]
pop dword [eax + 0x80]
jmp 0x41f291
cmp eax, 0x14
jne 0x41f04a
push 0
push 0x41deb4
push dword [ebp - 4]
call sub.user32.dll_EnumChildWindows
jmp 0x41f291
cmp eax, 0x18
jne 0x41f115
push dword [0x453968]
push 0
push 0x402
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x1b8], 7
mov dword [ebp - 0x1b4], 0
lea eax, [edi + 0x12d]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], 0x20
mov dword [ebp - 0x1a8], 0x2e
mov dword [ebp - 0x1a4], 0x2e
lea eax, [ebp - 0x1b8]
push eax
push 0
push 0x401
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
mov dword [ebp - 0x1b4], 1
mov dword [ebp - 0x1a8], 0x2f
mov dword [ebp - 0x1a4], 0x2f
lea eax, [ebp - 0x1b8]
push eax
push 0
push 0x401
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
push 0
push 0
push 0x14e
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
push 1
push 0x41deb4
push dword [ebp - 4]
call sub.user32.dll_EnumChildWindows
jmp 0x41f291
cmp eax, 0x1a
jne 0x41f133
push 0x80818283
push 0
push 0x465
push dword [edi + 0x10]
call sub.user32.dll_SendMessageA
jmp 0x41f291
cmp eax, 0x1b
jne 0x41f17f
mov al, byte [edi + 0x2c]
or al, al
je 0x41f291
push 0x45de5e
lea eax, [ebp - 0x180]
push eax
call fcn.004010a7
lea eax, [edi + 0x2c]
push eax
lea eax, [ebp - 0x180]
push eax
call fcn.004010c5
lea eax, [ebp - 0x180]
push eax
push 0
push 0x464
push dword [edi + 0x10]
call sub.user32.dll_SendMessageA
jmp 0x41f291
cmp eax, 0x1c
jne 0x41f19d
push 0
push 0x241
push 0x401
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
jmp 0x41f291
cmp eax, 0x1d
je 0x41f1ab
cmp eax, 0x1e
jne 0x41f22f
push 0
push dword [0x453904]
push 0
push dword [ebp - 8]
push dword [edi + 0x28]
push dword [edi + 0x24]
push 0
push 0
push 0x54000000
lea eax, [edi + 0x12d]
push eax
push str.Static
push 0
call sub.user32.dll_CreateWindowExA
push eax
push 0
push dword [ebp - 0x1bc]
push 0x30
push eax
call sub.user32.dll_SendMessageA
pop eax
push eax
push 0
push 0x1401
push dword [ebp - 8]
call sub.user32.dll_SendMessageA
push 0xa
push 0
push 0x140a
push dword [ebp - 8]
call sub.user32.dll_SendMessageA
push 1
push 0
push 0x1408
push dword [ebp - 8]
call sub.user32.dll_SendMessageA
push 1
push 0x41deb4
push dword [ebp - 4]
call sub.user32.dll_EnumChildWindows
jmp 0x41f291
cmp dword [ebp - 0x5c], 0x20
jne 0x41f277
mov dword [ebp - 0x238], 7
mov dword [ebp - 0x234], 0x64
lea eax, [edi + 0x12d]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x224], 0x4000
lea eax, [ebp - 0x238]
push eax
push 0
push 0x1201
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
jmp 0x41f291
cmp eax, 0x22
jb 0x41f291
call fcn.0041f2bd
push edi
push 0
push 0x2b0f
push dword [ebp - 4]
call sub.user32.dll_SendMessageA
mov eax, dword [edi + 0x10]
or eax, eax
jne 0x41f29a
mov eax, dword [edi]
push 0
push dword [ebp - 0x1bc]
push 0x30
push eax
call sub.user32.dll_SendMessageA
push dword [ebp - 0x80]
push 1
call fcn.0041bdc7
mov eax, dword [ebp - 4]
pop edi
pop esi
leave
ret 4