Function at 0x277ebcaf
Capabilities:
Get graphical window text
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x120
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov esi, dword [ebx + 0x3c]
xor edi, edi
cmp dword [ebx + 0x24], edi
lea eax, [ebp - 0x120]
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], eax
mov dword [ebp - 8], pe_nt_image_headers32
mov dword [ebp - 0x10], edi
jle 0x277ebd13
cmp dword [esi + 0x34], edi
je 0x277ebea1
push dword [ebp - 8]
push dword [esi + 0x30]
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
sub dword [ebp - 8], eax
add dword [ebp - 4], eax
inc dword [ebp - 0x10]
add esi, 0x38
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebx + 0x24]
jl 0x277ebcde
lea esi, [ebx + 0xc]
lea edi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebx]
movsd dword es:[edi], dword [esi]
push dword [eax]
mov esi, dword [sym.imp.USER32.dll_ClientToScreen]
call esi
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebx]
push dword [eax]
call esi
mov eax, dword [ebx]
xor esi, esi
push esi
push dword [0x27827354]
push esi
push dword [eax]
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
push eax
push 2
push 2
lea eax, [ebp - 0x120]
push 0x40000080
push eax
push 0x2782a3e8
push esi
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov edi, eax
cmp edi, esi
mov dword [ebp + 8], edi
je 0x277ebe97
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push pe_nt_image_headers32
push 0xc5
push edi
call esi
push 0
push dword [ebx + 8]
push 0x30
push edi
call esi
push edi
call dword [sym.imp.USER32.dll_SetFocus]
mov ebx, 0x7d00
mov edi, 0xb1
push ebx
push ebx
push edi
push dword [ebp + 8]
call esi
push ebx
xor ebx, ebx
push ebx
push edi
mov edi, dword [ebp + 8]
push edi
call esi
push 1
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
mov esi, 0x100
push ebx
push ebx
lea eax, [ebp - 0x3c]
push ebx
push eax
call dword [sym.imp.USER32.dll_GetMessageA]
mov dword [ebp + 8], eax
mov eax, dword [ebp - 0x38]
cmp eax, 0x201
je 0x277ebe02
cmp eax, 0xa1
je 0x277ebe02
cmp eax, 0x204
je 0x277ebe02
cmp eax, 0xa4
je 0x277ebe02
cmp eax, 0x203
jne 0x277ebe1d
push dword [ebp - 0x24]
lea eax, [ebp - 0x20]
push dword [ebp - 0x28]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x277ebf41
mov eax, dword [ebp - 0x38]
cmp eax, 8
je 0x277ebf41
cmp eax, esi
jne 0x277ebe34
cmp dword [ebp - 0x34], 0xd
je 0x277ebf41
cmp eax, 0x112
je 0x277ebe7e
cmp eax, 0x106
je 0x277ebe7e
cmp eax, 0x107
je 0x277ebe7e
cmp eax, 0x103
je 0x277ebe7e
cmp eax, 0x104
je 0x277ebe7e
cmp eax, esi
jne 0x277ebe61
cmp dword [ebp - 0x34], 0x1b
je 0x277ebe7e
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [ebp + 8], ebx
jne 0x277ebdcc
cmp dword [ebp - 0xc], ebx
je 0x277ebe90
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push edi
call dword [sym.imp.USER32.dll_GetWindowTextA]
push edi
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
leave
ret 0xc
mov eax, dword [esi]
cmp eax, 4
jge 0x277ebec6
push dword [ebp - 8]
lea eax, [ebx + 0x28]
push dword [ebp - 4]
push dword [esi + 0x30]
push eax
push edi
push 0x400
call dword [sym.imp.KERNEL32.dll_GetDateFormatA]
jmp 0x277ebcf6
cmp eax, 9
je 0x277ebee9
push dword [ebp - 8]
lea eax, [ebx + 0x28]
push dword [ebp - 4]
push dword [esi + 0x30]
push eax
push edi
push 0x400
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
jmp 0x277ebcf6
push 0x18
mov dword [ebp - 0xa0], edi
pop ecx
xor eax, eax
lea edi, [ebp - 0x9c]
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x30]
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x90]
push eax
push ebx
call fcn.277ebc6b
lea eax, [ebp - 0x7c]
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0xa0]
push eax
push 0xfffffd0c
push dword [ebx]
call fcn.277b9878
push dword [ebp - 8]
push dword [ebp - 0x80]
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
xor edi, edi
jmp 0x277ebcf6
mov dword [ebp - 0xc], 1
jmp 0x277ebe7e