Function at 0x429e10
Capabilities:
Hide graphical window
Inspect load icon resource

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xac
mov eax, dword [0x43a00c]
xor eax, esp
mov dword [esp + 0xa8], eax
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push edi
push 0x65
push 0
call esi
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
push 0
mov dword [0x43a800], eax
mov dword [esp + 0x6c], 0x30
mov dword [esp + 0x70], 0x40
mov dword [esp + 0x74], 0x42a720
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
call esi
mov dword [esp + 0x7c], eax
mov eax, dword [0x43a800]
mov dword [esp + 0x80], eax
lea eax, [esp + 0x68]
push eax
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], str.D11_1NJ3CT0R
mov dword [esp + 0x98], 0
call dword [sym.imp.USER32.dll_RegisterClassExA]
push 0
push dword [esp + 0x80]
push 0
push 0
push 0xff
push 0x1b2
push 0x80000000
push 0x80000000
push 0xcf0000
push str.Mages_Injector
push dword [esp + 0xb8]
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov ebx, eax
mov ecx, ebx
mov dword [esp + 0x10], ebx
call fcn.0042a630
test al, al
jne 0x429f40
call fcn.0042a6c0
push dword [esp + 0x7c]
push dword [esp + 0x94]
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xa8]
xor ecx, esp
call fcn.0042ea9e
mov esp, ebp
pop ebp
ret 0x10
push 0xa
push ebx
call dword [sym.imp.USER32.dll_ShowWindow]
push ebx
call dword [sym.imp.USER32.dll_UpdateWindow]
call fcn.00405cc0
call fcn.00405df0
mov dword [eax + 0x18], 0
call fcn.00429800
mov ecx, ebx
call fcn.00420640
call fcn.004203a0
mov byte [esp + 0xd], 1
mov byte [esp + 0xe], 1
mov byte [esp + 0xf], 1
call fcn.004293c0
push 0x12c4
mov dword [esp + 0x1c], 0
call fcn.0042f0d7
add esp, 4
test eax, eax
je 0x429fc5
push fcn.0042ad40
push fcn.0042aea0
push 0xc8
lea ecx, [eax + 4]
mov dword [eax], 0xc8
push 0x18
push ecx
mov dword [esp + 0x28], ecx
call fcn.0042eba4
jmp 0x429fcb
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov edi, dword [sym.imp.USER32.dll_PeekMessageA]
xor bl, bl
mov esi, dword [sym.imp.USER32.dll_TranslateMessage]
nop dword [eax]
push 1
push 0
push 0
push 0
lea eax, [esp + 0xa8]
push eax
call edi
test eax, eax
je 0x42a036
lea eax, [esp + 0x98]
push eax
call esi
lea eax, [esp + 0x98]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [esp + 0x9c], 0x12
mov eax, 1
push eax
push 0
push 0
movzx ebx, bl
cmove ebx, eax
lea eax, [esp + 0xa4]
push 0
push eax
call edi
test eax, eax
jne 0x429ff6
test bl, bl
jne 0x42a568
call fcn.00420620
call fcn.00420d10
call fcn.00406cd0
push 6
lea edx, [esp + 0x13]
mov ecx, str.MAGES_D11_1NJ3CT0R
call fcn.0040a7f0
movss xmm3, dword [0x435f18]
add esp, 4
cmp byte [esp + 0xd], bl
je 0x42a0a8
xorps xmm2, xmm2
lea ecx, [esp + 0x28]
movaps xmm1, xmm3
call fcn.00401580
mov ecx, eax
call fcn.0040c5e0
movss xmm2, dword [0x435ecc]
lea ecx, [esp + 0x30]
movss xmm1, dword [0x435ee8]
call fcn.00401580
mov ecx, eax
call fcn.0040c6b0
mov byte [esp + 0xd], bl
movss xmm0, dword [0x435ec4]
movaps xmm1, xmm3
call fcn.0040ccf0
mov edx, 0x43a7ba
mov ecx, str.Show_Processes
call fcn.00424480
movss xmm1, dword [0x435f18]
movss xmm0, dword [0x435ed0]
call fcn.0040ccf0
mov edx, 0x43a7b8
mov ecx, str.Dark_Mode
call fcn.00424480
movss xmm1, dword [0x435f18]
movss xmm0, dword [0x435e60]
call fcn.0040ccf0
push str.Load_DLL
call fcn.00423200
movss xmm0, dword [0x435ed8]
add esp, 4
call fcn.0040cda0
sub esp, 8
mov edx, 0x43aa28
mov ecx, 0x435c44
push 0x4000
call fcn.00421340
movss xmm1, dword [0x435f18]
add esp, 0xc
xorps xmm0, xmm0
call fcn.0040ccf0
xorps xmm2, xmm2
lea ecx, [esp + 0x38]
xorps xmm1, xmm1
call fcn.00401580
mov edx, eax
mov ecx, str.X1
call fcn.004239f0
push str.Choose_Running_Application__.exe_
mov byte [0x43a77e], al
call fcn.00423200
push ecx
push 0x4000
mov edx, 0x43aa60
mov ecx, 0x435c74
call fcn.00421340
movss xmm1, dword [0x435f18]
add esp, 0xc
xorps xmm0, xmm0
call fcn.0040ccf0
xorps xmm2, xmm2
lea ecx, [esp + 0x40]
xorps xmm1, xmm1
call fcn.00401580
mov edx, eax
mov ecx, str.X2
call fcn.004239f0
push 0x4316b8
mov byte [0x43a7b9], al
call fcn.00423200
add esp, 4
push str.DLL:
call fcn.00423200
movss xmm1, dword [0x435f18]
add esp, 4
xorps xmm0, xmm0
call fcn.0040ccf0
mov ecx, 0x43a9c0
call fcn.004213c0
push eax
push 0x43aa08
call fcn.00423270
push str.EXE:
call fcn.00423200
movss xmm1, dword [0x435f18]
add esp, 0xc
xorps xmm0, xmm0
call fcn.0040ccf0
mov ecx, 0x43a9f0
call fcn.004213c0
push eax
push 0x43aa40
call fcn.00423270
movss xmm1, dword [0x435f18]
xorps xmm0, xmm0
call fcn.0040ccf0
push str.PID:
call fcn.00423200
movss xmm1, dword [0x435f18]
add esp, 0xc
xorps xmm0, xmm0
call fcn.0040ccf0
mov ecx, 0x43a9d8
call fcn.004213c0
push eax
push 0x43a9b0
call fcn.00423270
movss xmm1, dword [0x435f18]
xorps xmm0, xmm0
call fcn.0040ccf0
push str.Status:
call fcn.00423200
movss xmm1, dword [0x435f18]
add esp, 0xc
xorps xmm0, xmm0
call fcn.0040ccf0
mov ecx, 0x43aa78
call fcn.004213c0
push eax
push 0x43aa18
call fcn.00423270
push 0x4316b8
call fcn.00423200
movss xmm2, dword [0x435e98]
lea ecx, [esp + 0x54]
movss xmm1, dword [0x435ee0]
add esp, 0xc
call fcn.00401580
mov edx, eax
mov ecx, str.INJECT
call fcn.004239f0
mov byte [0x43a7fe], al
call fcn.0040c040
cmp byte [0x43a7fc], 0
je 0x42a40d
push 0
mov edx, 0x43a7fc
mov ecx, str.Process_List
call fcn.0040a7f0
add esp, 4
cmp byte [esp + 0xe], 0
je 0x42a347
movss xmm1, dword [0x435ee4]
lea ecx, [esp + 0x50]
xorps xmm2, xmm2
call fcn.00401580
mov ecx, eax
call fcn.0040c6b0
movss xmm1, dword [0x435e1c]
lea ecx, [esp + 0x58]
call fcn.00401580
mov ecx, eax
call fcn.0040c5e0
mov byte [esp + 0xe], 0
movss xmm0, dword [0x435ed4]
call fcn.0040cda0
mov esi, dword [esp + 0x14]
sub esp, 8
mov edx, esi
mov ecx, 0x431526
push 0
call fcn.00421340
add esp, 0xc
test al, al
je 0x42a39d
push 0x43aa90
mov ecx, 0x43aa9c
call fcn.0042a9c0
push ecx
mov edx, esi
lea ecx, [esp + 0x20]
call fcn.00429120
add esp, 4
push eax
call fcn.0042ac60
lea ecx, [esp + 0x1c]
call fcn.0042ab80
movss xmm1, dword [0x435f18]
xorps xmm0, xmm0
call fcn.0040ccf0
xorps xmm2, xmm2
lea ecx, [esp + 0x60]
xorps xmm1, xmm1
call fcn.00401580
mov edx, eax
mov ecx, str.Refresh
call fcn.004239f0
movss xmm0, dword [0x435ee0]
mov byte [0x43a7bb], al
call fcn.0040cda0
push ecx
lea edx, [esp + 0x1c]
call fcn.004290e0
add esp, 4
test al, al
je 0x42a408
push dword [esp + 0x18]
call fcn.0042a8e0
push eax
mov ecx, 0x43a9f0
call fcn.0042ad20
mov ecx, dword [esp + 0x10]
call fcn.00429210
call fcn.0040c040
call fcn.00429620
mov ecx, dword [esp + 0x10]
call fcn.00429d30
cmp byte [esp + 0xf], 0
mov ecx, 1
movzx ebx, bl
cmove ebx, ecx
call fcn.00407b10
mov eax, dword [0x43a7f4]
push 0
push 7
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x43a7f4]
push 0
push 0x1b
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x43a7f4]
push 0
push 0xae
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
movss xmm1, dword [0x43aa5c]
movss xmm0, dword [0x43aa50]
movss xmm2, dword [0x435ec8]
mulss xmm0, xmm1
push 0
push ecx
mov edx, dword [0x43a7f4]
mulss xmm0, xmm2
mov dword [esp], 0x3f800000
mov esi, dword [edx]
cvttss2si eax, xmm0
movaps xmm0, xmm1
mulss xmm0, xmm2
movzx ecx, al
cvttss2si eax, xmm0
movss xmm0, dword [0x43aa54]
mulss xmm0, xmm1
shl eax, 8
or ecx, eax
shl ecx, 8
mulss xmm0, xmm2
cvttss2si eax, xmm0
movss xmm0, dword [0x43aa58]
mulss xmm0, xmm1
movzx eax, al
or ecx, eax
shl ecx, 8
mulss xmm0, xmm2
cvttss2si eax, xmm0
movzx eax, al
or ecx, eax
push ecx
push 3
push 0
push 0
push edx
call dword [esi + 0xac]
mov eax, dword [0x43a7f4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x42a529
call fcn.00407d50
call fcn.00405e00
mov ecx, eax
call fcn.0041fea0
mov eax, dword [0x43a7f4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov eax, dword [0x43a7f4]
push 0
push 0
push 0
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x44]
cmp eax, 0x88760868
jne 0x42a55a
mov eax, dword [0x43a7f4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x42a55a
call fcn.0042a700
mov esi, dword [sym.imp.USER32.dll_TranslateMessage]
test bl, bl
je 0x429fe0
call fcn.004203d0
call fcn.004207b0
call fcn.00405d60
call fcn.0042a6c0
push dword [esp + 0x10]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [esp + 0x7c]
push dword [esp + 0x94]
call dword [sym.imp.USER32.dll_UnregisterClassA]
call fcn.00429a50
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x42a5aa
push ecx
call fcn.0042a5d0
mov ecx, dword [esp + 0xb4]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0042ea9e
mov esp, ebp
pop ebp
ret 0x10