Function at 0x433a95
Capabilities:
Delete file
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x4c], edx
inc edi
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x10], edi
xor ebx, ebx
mov dword [ebp - 0x18], 0x383c67ee
mov dword [ebp - 4], ebx
jmp 0x433ac9
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x5c], 9
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x433abb
mov dword [ebp - 4], ebx
jmp 0x433ae2
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x60], 0x8d3a18e4
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x433ad4
mov ecx, dword [ebp - 0x5c]
xor edx, edx
mov dword [ebp - 0x60], ecx
mov eax, dword [ebp - 0x58]
cmp eax, ecx
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x58]
setge dl
add eax, edx
xor edx, edx
cmp eax, 0x3358
mov eax, dword [ebp - 0x10]
setge dl
sub ecx, edx
xor edx, edx
add ecx, eax
mov dword [ebp - 0x58], ecx
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x10]
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, 7
setl al
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], ebx
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x433b42
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x433b5b
push 0x12a8
push ebx
push 0x20d0
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov dword [ebp - 0x1c], ebx
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x822e6e7f
mov dword [ebp - 0x14], 0x971867b8
push 2
pop esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 8], 0xcc2fdcba
mov dword [ebp - 0x14], 0x7c9d5fac
mov dword [ebp - 0x20], 0xfffffffd
mov dword [ebp - 0x14], 0x391cb4e7
mov dword [ebp - 0x10], 0xfffffffe
mov dword [ebp - 0x24], 0xdade
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x24], 0xc1d10227
mov dword [ebp - 0x24], 0xf72b5725
mov dword [ebp - 0x18], 0x9694d2b5
mov dword [ebp - 0x10], 0xadb82134
mov dword [ebp - 0x18], 0x41ce3cb5
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x18], 0x932e3ca3
mov dword [ebp - 0x18], 0xfffffff6
mov dword [ebp - 0x10], 0xdb39523d
mov dword [ebp - 0x18], 0x40a98cee
mov dword [ebp - 0x18], 0xb32e2659
mov dword [ebp - 0x10], 0xee91b76
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x10], 0xc9bf5e4d
push esi
call fcn.00421789
mov dword [ebp - 0x10], 0x1f6657ee
mov dword [ebp - 0x10], 0xd402
mov dword [ebp - 0x10], 0x70105c65
mov dword [ebp - 4], ebx
jmp 0x433c31
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xf4], ebx
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x433c24
mov dword [ebp - 4], ebx
jmp 0x433c4b
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x30]
mov dword [eax + ecx*4], 0x25fc1c57
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x433c3b
mov dword [ebp - 4], ebx
jmp 0x433c63
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x48], 0xfffffff7
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x433c55
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], ebx
je 0x433c77
mov esi, edi
cmp dword [ebp - 0x18], ebx
jne 0x433c79
mov esi, ebx
inc dword [ebp - 0x48]
xor edx, edx
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x1c]
cmp eax, 0x558bac04
setl dl
xor eax, eax
cmp ecx, esi
setg al
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setg cl
sub eax, ecx
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], ebx
jmp 0x433d84
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], edi
cmp dword [ebp - 8], ebx
jl 0x433d81
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], edi
cmp dword [ebp - 0x10], ebx
jl 0x433ce2
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x30]
mov dword [eax + ecx*4], 0xfffffffe
dec dword [ebp - 0x10]
jns 0x433cd0
mov esi, dword [ebp - 4]
xor ecx, ecx
imul eax, dword [ebp - 0x20], 0x4440
mov edx, dword [ebp - 0x30]
cmp eax, dword [edx + esi*4]
setl cl
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 8]
mov esi, dword [ebp - 4]
mov edi, dword [ebp - 4]
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x10]
add edx, dword [eax + ecx*4]
xor ecx, ecx
mov eax, dword [ebp - 0x30]
imul edx, dword [eax + esi*4]
cmp edx, 0xd92
setl cl
add ecx, dword [eax + edi*4]
cmp ecx, dword [ebp - 0x24]
jl 0x433d32
cmp dword [ebp - 0x18], ebx
jne 0x433d32
xor edi, edi
mov esi, ebx
inc edi
jmp 0x433d37
xor edi, edi
inc edi
mov esi, edi
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ecx + eax*4]
imul eax, esi
sub eax, 5
neg eax
sbb eax, eax
inc eax
sub eax, dword [ecx + edx*4]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
neg eax
cmp dword [ecx + edx*4], eax
jne 0x433d70
mov eax, edi
cmp dword [ebp - 0x14], ebx
jne 0x433d72
mov eax, ebx
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 4], eax
dec dword [ebp - 8]
jns 0x433cc8
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jle 0x433caa
lea ecx, [ebp - 0x30]
call fcn.00421a31
mov dword [ebp - 8], ebx
mov dword [ebp - 8], ebx
jmp 0x433dbe
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x433dbb
push ebx
push 0x2037
push 0x213b
push 0x1f33
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jg 0x433d9d
mov eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov dword [ebp - 4], 0xfffffff8
mov dword [ebp - 0x18], 0x26fbd10c
mov dword [ebp - 0x14], ebx
mov dword [ebp - 8], ebx
jmp 0x433df1
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xec], 0x841b3c69
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x433de0
mov edi, dword [sym.imp.GDI32.dll_CreateDIBitmap]
push 3
mov dword [ebp - 4], ebx
pop esi
jmp 0x433e98
mov dword [ebp - 8], 0x4392f209
mov dword [ebp - 0x1c], 1
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0xec], ebx
je 0x433e38
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x18], 0xdd5d
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 4]
xor edx, edx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp + eax*4 - 0xec]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setle dl
sub edx, 0xc28c
add edx, dword [ebp - 0x1c]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 8], esi
cmp dword [ebp - 8], ebx
jl 0x433e95
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x433e90
push 0x10bb
push ebx
push ebx
push 0x197d
push ebx
push 0x8e6
call edi
dec dword [ebp - 8]
jns 0x433e74
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jle 0x433e08
push 4
lea ecx, [ebp - 0x84]
call fcn.00421789
push 2
mov dword [ebp - 0x10], 0xa1e94870
pop edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 4], ebx
jmp 0x433ece
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x6c], 1
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x433ec0
mov dword [ebp - 4], ebx
jmp 0x433eeb
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x84]
mov dword [eax + ecx*4], 0xca4f833f
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x433ed8
mov esi, dword [ebp - 0x84]
mov dword [esi + 0xc], edx
mov eax, dword [esi + 0xc]
mov ecx, dword [ebp + eax*4 - 0x6c]
mov eax, dword [esi + 0xc]
mov dword [ebp + eax*4 - 0x6c], ecx
mov eax, dword [ebp - 0x10]
dec dword [esi + 0xc]
jns 0x433efa
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x6c], 1
jae 0x433f23
cmp dword [ebp - 0x18], ebx
je 0x433f23
xor ecx, ecx
inc ecx
jmp 0x433f25
mov ecx, ebx
mov eax, dword [ebp - 0x10]
imul eax, ecx
add eax, 0x11082d9a
jne 0x433f3b
cmp dword [esi + 0xc], ebx
jne 0x433f3b
mov ecx, ebx
jmp 0x433f3e
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x10]
sub eax, ecx
xor ecx, ecx
cmp eax, 0xdfbc43c
mov eax, dword [ebp - 0x84]
setg cl
xor edx, edx
cmp dword [eax], ecx
sete dl
mov dword [esi + 0xc], edx
test edx, edx
je 0x433fef
mov dword [ebp - 8], 0xba1d
xor ebx, ebx
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x14], 0xfffffff7
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
cmp eax, 0x23782ecc
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 8]
setne bl
xor edx, edx
mov dword [esi + 0xc], ebx
cmp ecx, eax
setg dl
xor ecx, ecx
imul edx, dword [ebp - 0x68]
mov eax, dword [ebp - 8]
cmp ebx, edx
mov edx, dword [ebp - 0x18]
setg cl
sub edx, eax
mov eax, dword [ebp - 8]
imul edx, ecx
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0x1f230b56
setge al
xor ecx, ecx
cmp eax, 0x5ee8
setne cl
xor edx, edx
cmp ecx, 0xffffffff
setne dl
xor eax, eax
cmp edx, 0x86ae
setne al
xor ebx, ebx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
jmp 0x433ffd
mov dword [ebp - 0x14], 9
mov dword [ebp - 0x14], 0xfffffffe
lea ecx, [ebp - 0x84]
call fcn.00421a31
mov dword [ebp - 4], 0xfffffff8
mov dword [ebp - 0x18], 0x26fbd10c
mov dword [ebp - 0x14], ebx
mov dword [ebp - 8], ebx
jmp 0x43402f
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xdc], 0x841b3c69
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x43401e
push 3
mov dword [ebp - 4], ebx
pop esi
jmp 0x4340d1
mov dword [ebp - 8], 0x4392f209
mov dword [ebp - 0x1c], 1
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0xdc], ebx
je 0x434070
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x18], 0xdd5d
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 4]
xor edx, edx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp + eax*4 - 0xdc]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setle dl
sub edx, 0xc28c
add edx, dword [ebp - 0x1c]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 8], esi
cmp dword [ebp - 8], ebx
jl 0x4340ce
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x4340c9
push 0x10bb
push ebx
push ebx
push 0x197d
push ebx
push 0x8e6
call edi
dec dword [ebp - 8]
jns 0x4340ac
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jle 0x434040
xor edi, edi
mov dword [ebp - 4], 5
inc edi
lea ecx, [ebp - 0xb8]
push edi
call fcn.00421789
push esi
lea ecx, [ebp - 0x90]
call fcn.00421789
mov dword [ebp - 4], ebx
jmp 0x43410e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xbc], edi
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x434101
mov dword [ebp - 4], ebx
jmp 0x43412b
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0xb8]
mov dword [eax + ecx*4], 0x121f90ef
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x434118
mov dword [ebp - 4], ebx
jmp 0x434148
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x90]
mov dword [eax + ecx*4], 0x1c946b43
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x434135
mov dword [ebp - 4], ebx
jmp 0x4341a6
mov dword [ebp - 8], 0xfffffff6
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], 0xcd49598a
mov dword [ebp - 8], ebx
jmp 0x434179
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x100], 0x534bf8f0
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x434168
mov dword [ebp - 8], ebx
jmp 0x43419e
mov dword [ebp - 0x14], 5
mov dword [ebp - 0x14], 8
mov dword [ebp - 0x14], 0xfffffffe
inc dword [ebp - 0x18]
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jle 0x434183
inc dword [ebp - 4]
cmp dword [ebp - 4], ebx
jle 0x434152
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x90]
inc dword [eax]
call fcn.00421a31
lea ecx, [ebp - 0xb8]
call fcn.00421a31
mov eax, 0xcea5d6c0
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], 0xffffffe5
jmp 0x43422d
push edi
lea ecx, [ebp - 0x78]
call fcn.00421789
mov dword [ebp - 8], ebx
jmp 0x434201
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x78]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x4341f1
mov eax, dword [ebp - 0x78]
cmp dword [eax], ebx
jne 0x434235
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x434222
push ebx
push 0x24b9
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
lea ecx, [ebp - 0x78]
call fcn.00421a31
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xffffffe6
jg 0x4341e3
jmp 0x43423d
lea ecx, [ebp - 0x78]
call fcn.00421a31
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x434250
push edi
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
mov dword [ebp - 8], 0xd95e17ca
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x1c], 0xdfba22e9
mov dword [ebp - 0x18], 0xe3e4
mov dword [ebp - 0x10], edi
push 0xfffffffffffffff9
pop eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x14], 0xfffffffb
mov dword [ebp - 0x14], 0x3e73
mov dword [ebp - 0x14], eax
mov eax, 0xcb69acb3
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x14], 0xbab
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], 0xdcec
mov dword [ebp - 0x14], 0x497ea9b9
mov dword [ebp - 0x14], 0xe48f
mov dword [ebp - 0x14], 5
mov dword [ebp - 0x14], 2
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x20], esi
push edi
call fcn.00421789
mov dword [ebp - 4], ebx
jmp 0x43430d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x110], 0xfffffffd
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x4342fc
mov dword [ebp - 4], ebx
jmp 0x434327
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0xac]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x434318
mov eax, dword [ebp - 8]
mov edx, 0xffffac1f
mov eax, dword [ebp - 8]
xor ecx, ecx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x18]
sub edx, eax
add edx, dword [ebp - 8]
mov eax, dword [ebp - 0x1c]
cmp eax, edx
setle cl
xor edx, edx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 8]
setle dl
sub eax, edx
je 0x434370
mov ecx, edi
cmp dword [ebp - 0x18], ebx
jne 0x434372
mov ecx, ebx
xor eax, eax
cmp ecx, 0x3b0a6d08
setle al
cmp eax, 0xb0ca
jl 0x43438b
mov ecx, ebx
cmp dword [ebp - 0x10], ebx
je 0x43438d
mov ecx, edi
mov eax, dword [ebp - 8]
imul eax, ecx
lea ecx, [ebp - 0xac]
imul eax, eax, 0xde6b
mov dword [ebp - 0x14], eax
dec dword [ebp - 0x20]
call fcn.00421a31
mov esi, dword [ebp - 0x4c]
xor edx, edx
mov eax, dword [esi]
dec dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov eax, dword [ebp + 0x18]
mov ecx, dword [eax]
mov eax, dword [ebp + 0x1c]
mov eax, dword [eax]
cmp ecx, eax
mov eax, dword [ebp + 0x10]
setge dl
mov dword [eax], edx
cmp dword [eax], ebx
je 0x4343d7
mov ebx, edi
mov eax, dword [ebp + 0xc]
xor ecx, ecx
pop edi
mov eax, dword [eax]
cmp eax, ebx
mov eax, dword [esi]
setg cl
pop esi
pop ebx
cmp dword [eax], ecx
jle 0x4343f1
mov eax, dword [ebp + 0x20]
mov eax, dword [eax]
mov eax, dword [ebp + 0x24]
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
mov eax, dword [ebp + 0x28]
setne cl
mov eax, dword [eax]
mov eax, dword [eax]
add eax, ecx
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
mov esp, ebp
pop ebp
ret