Function at 0x27612c9c
Capabilities:
Get graphical window text
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x120
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov esi, dword [ebx + 0x3c]
xor edi, edi
cmp dword [ebx + 0x24], edi
lea eax, [ebp - 0x120]
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], eax
mov dword [ebp - 8], pe_nt_image_headers32
mov dword [ebp - 0x10], edi
jle 0x27612d00
cmp dword [esi + 0x34], edi
je 0x27612e8e
push dword [ebp - 8]
push dword [esi + 0x30]
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
sub dword [ebp - 8], eax
add dword [ebp - 4], eax
inc dword [ebp - 0x10]
add esi, 0x38
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebx + 0x24]
jl 0x27612ccb
lea esi, [ebx + 0xc]
lea edi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebx]
movsd dword es:[edi], dword [esi]
push dword [eax]
mov esi, dword [sym.imp.USER32.dll_ClientToScreen]
call esi
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebx]
push dword [eax]
call esi
mov eax, dword [ebx]
xor esi, esi
push esi
push dword [0x2762de44]
push esi
push dword [eax]
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
push eax
push 2
push 2
lea eax, [ebp - 0x120]
push 0x40000080
push eax
push 0x276336f0
push esi
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov edi, eax
cmp edi, esi
mov dword [ebp + 8], edi
je 0x27612e84
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push pe_nt_image_headers32
push 0xc5
push edi
call esi
push 0
push dword [ebx + 8]
push 0x30
push edi
call esi
push edi
call dword [sym.imp.USER32.dll_SetFocus]
mov ebx, 0x7d00
mov edi, 0xb1
push ebx
push ebx
push edi
push dword [ebp + 8]
call esi
push ebx
xor ebx, ebx
push ebx
push edi
mov edi, dword [ebp + 8]
push edi
call esi
push 1
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
mov esi, 0x100
push ebx
push ebx
lea eax, [ebp - 0x3c]
push ebx
push eax
call dword [sym.imp.USER32.dll_GetMessageA]
mov dword [ebp + 8], eax
mov eax, dword [ebp - 0x38]
cmp eax, 0x201
je 0x27612def
cmp eax, 0xa1
je 0x27612def
cmp eax, 0x204
je 0x27612def
cmp eax, 0xa4
je 0x27612def
cmp eax, 0x203
jne 0x27612e0a
push dword [ebp - 0x24]
lea eax, [ebp - 0x20]
push dword [ebp - 0x28]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x27612f2e
mov eax, dword [ebp - 0x38]
cmp eax, 8
je 0x27612f2e
cmp eax, esi
jne 0x27612e21
cmp dword [ebp - 0x34], 0xd
je 0x27612f2e
cmp eax, 0x112
je 0x27612e6b
cmp eax, 0x106
je 0x27612e6b
cmp eax, 0x107
je 0x27612e6b
cmp eax, 0x103
je 0x27612e6b
cmp eax, 0x104
je 0x27612e6b
cmp eax, esi
jne 0x27612e4e
cmp dword [ebp - 0x34], 0x1b
je 0x27612e6b
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [ebp + 8], ebx
jne 0x27612db9
cmp dword [ebp - 0xc], ebx
je 0x27612e7d
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push edi
call dword [sym.imp.USER32.dll_GetWindowTextA]
push edi
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
leave
ret 0xc
mov eax, dword [esi]
cmp eax, 4
jge 0x27612eb3
push dword [ebp - 8]
lea eax, [ebx + 0x28]
push dword [ebp - 4]
push dword [esi + 0x30]
push eax
push edi
push 0x400
call dword [sym.imp.KERNEL32.dll_GetDateFormatA]
jmp 0x27612ce3
cmp eax, 9
je 0x27612ed6
push dword [ebp - 8]
lea eax, [ebx + 0x28]
push dword [ebp - 4]
push dword [esi + 0x30]
push eax
push edi
push 0x400
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
jmp 0x27612ce3
push 0x18
mov dword [ebp - 0xa0], edi
pop ecx
xor eax, eax
lea edi, [ebp - 0x9c]
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x30]
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x90]
push eax
push ebx
call fcn.27612c58
lea eax, [ebp - 0x7c]
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0xa0]
push eax
push 0xfffffd0c
push dword [ebx]
call fcn.27582d58
push dword [ebp - 8]
push dword [ebp - 0x80]
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
xor edi, edi
jmp 0x27612ce3
mov dword [ebp - 0xc], 1
jmp 0x27612e6b