Function at 0x4023f0
Capabilities:
Get graphical window text
Terminate process

Disassembly:
sub esp, 0x124
mov eax, dword [0x411008]
xor eax, esp
mov dword [esp + 0x11c], eax
cmp byte [0x412bb0], 0x34
push ebx
push ebp
push esi
push edi
jne 0x40281d
cmp byte [0x412bb1], 0x78
jne 0x40281d
cmp byte [0x412bb2], 0x36
jne 0x40281d
cmp byte [0x412bb3], 0x37
jne 0x40281d
xor eax, eax
xor ebx, ebx
mov dword [0x412a68], eax
mov dword [0x412a6c], eax
mov dword [0x412a70], eax
mov dword [0x412a74], eax
mov dword [0x412a78], eax
mov dword [0x412a7c], eax
mov dword [0x412a80], eax
mov dword [0x412a84], eax
mov dword [0x412a88], eax
mov dword [0x412a8c], eax
mov dword [0x412a90], eax
mov dword [0x412a94], eax
mov dword [0x412a98], eax
mov dword [0x412a9c], eax
mov dword [0x412aa0], eax
or eax, 0xffffffff
push 0x40f5bc
push 0x4135c8
mov dword [0x412aa4], ebx
mov dword [0x412bac], ebx
mov dword [0x51382c], ebx
mov dword [0x412db4], ebx
mov dword [0x412dc0], ebx
mov dword [0x4136c8], ebx
mov dword [0x5137d0], eax
mov dword [0x5137d4], eax
mov dword [0x5137d8], eax
mov dword [0x5137dc], eax
mov dword [0x5137e0], eax
mov dword [0x5137e4], eax
mov dword [0x5137e8], eax
mov dword [0x5137ec], eax
mov dword [0x5137f0], eax
mov dword [0x5137f4], eax
mov dword [0x5137f8], eax
mov dword [0x5137fc], eax
mov dword [0x513800], eax
mov dword [0x513804], eax
mov dword [0x513808], eax
mov dword [0x513820], eax
mov dword [0x412dc4], eax
mov dword [0x412ba8], eax
call fcn.00402cb3
push 0x40f5c4
push 0x412aa8
call fcn.00402cb3
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
add esp, 0x10
push 0x40f5cc
push ebx
mov dword [0x412db8], ebx
mov dword [0x513828], ebx
mov dword [0x513824], ebx
xor edi, edi
call esi
mov dword [0x412aa4], eax
cmp eax, ebx
jne 0x40257e
mov ebp, dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, edi
inc edi
cmp edi, 0x32
je 0x4025c4
push 0xc8
call ebp
push 0x40f5cc
push ebx
call esi
mov dword [0x412aa4], eax
cmp eax, ebx
je 0x402560
mov edi, 0x412a64
mov dword [0x412a64], ebx
call fcn.00401db0
push ebx
test eax, eax
jne 0x402635
push 0x40f4e4
push 0x40f4ec
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [0x412a64]
cmp eax, ebx
jne 0x402616
call fcn.00401db0
cmp eax, 1
jne 0x40262f
mov ecx, dword [0x412a64]
push ecx
jmp 0x402617
cmp eax, ebx
jne 0x40257e
push ebx
push 0x40f4e4
push 0x40f4ec
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [0x412a64]
cmp eax, ebx
jne 0x4025f7
mov edi, 0x412a64
call fcn.00401db0
cmp eax, 1
jne 0x402610
mov eax, dword [0x412a64]
push eax
push ebx
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
cmp eax, ebx
je 0x402610
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push ebx
call fcn.00403959
push eax
push ebx
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
cmp eax, ebx
je 0x40262f
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push ebx
call fcn.00403959
mov edx, dword [0x412aa4]
mov edi, dword [sym.imp.USER32.dll_FindWindowExA]
push ebx
push ebx
push edx
call edi
push ebx
push ebx
push eax
mov eax, dword [0x412aa4]
push eax
call edi
mov dword [0x4136c8], eax
mov esi, 0xf
jmp 0x402660
mov ecx, dword [0x412aa4]
push ebx
push ebx
push eax
push ecx
call edi
sub esi, 1
jne 0x402660
mov esi, 0x412a68
mov edx, dword [0x412aa4]
push ebx
push ebx
push eax
push edx
call edi
mov dword [esi], eax
add esi, 4
cmp esi, 0x412aa4
jl 0x402676
push 0x100
lea eax, [esp + 0x2c]
push ebx
push eax
mov dword [esp + 0x20], ebx
call fcn.00405e50
add esp, 0xc
push ebx
push ebx
push ebx
push ebx
call edi
mov esi, eax
cmp esi, ebx
je 0x4027b0
mov ebp, dword [sym.imp.USER32.dll_GetWindowTextA]
lea esp, [esp]
lea ecx, [esp + 0x14]
push ecx
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [esp + 0x14]
cmp edx, dword [0x412a64]
jne 0x4027a0
cmp esi, dword [0x412aa4]
je 0x4027a0
lea eax, [esp + 0x18]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x4027a0
mov ecx, dword [esp + 0x24]
cmp ecx, ebx
je 0x4027a0
sub eax, dword [esp + 0x18]
test eax, eax
jle 0x402724
sub ecx, dword [esp + 0x1c]
test ecx, ecx
jle 0x402724
mov dword [0x412bac], esi
jmp 0x4027a0
push 0x100
lea ecx, [esp + 0x2c]
push ebx
push ecx
call fcn.00405e50
add esp, 0xc
push 0x100
lea edx, [esp + 0x2c]
push edx
push esi
call ebp
mov ecx, 0x40f5d0
lea eax, [esp + 0x28]
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x402770
cmp dl, bl
je 0x40276c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x402770
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x402750
xor eax, eax
jmp 0x402775
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x4027a0
push ebx
push ebx
push ebx
push esi
call edi
push ebx
push ebx
push eax
push esi
mov dword [0x412db4], eax
call edi
push ebx
push ebx
push eax
push esi
call edi
push ebx
push ebx
push eax
push esi
mov dword [0x412dc0], eax
call edi
mov dword [0x51382c], eax
push ebx
push ebx
push esi
push ebx
call edi
mov esi, eax
cmp esi, ebx
jne 0x4026c0
cmp dword [0x412bac], ebx
je 0x4027cf
cmp dword [0x51382c], ebx
je 0x4027cf
cmp dword [0x412db4], ebx
je 0x4027cf
mov eax, 1
jmp 0x40281f
push ebx
push 0x40f4e4
push 0x40f4ec
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [0x412a64]
cmp eax, ebx
jne 0x4027fe
mov edi, 0x412a64
call fcn.00401db0
cmp eax, 1
jne 0x402817
mov eax, dword [0x412a64]
push eax
push ebx
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
cmp eax, ebx
je 0x402817
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push ebx
call fcn.00403959
xor eax, eax
mov ecx, dword [esp + 0x12c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00402ca4
add esp, 0x124
ret