Function at 0x4029a1
Capabilities:
Get graphical window text
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x168
mov eax, dword [ebp + 0xc]
push ebx
push esi
sub eax, 0xf
push edi
je 0x402cce
sub eax, 0x101
je 0x402aef
dec eax
je 0x402a10
dec eax
dec eax
jne 0x402fe2
cmp dword [ebp + 0x10], 0x19
jne 0x402fe2
inc dword [0x413060]
cmp dword [0x413060], 0x19
jle 0x4029f2
mov dword [0x413060], 1
push 0
push 0x416b30
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_InvalidateRect]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_UpdateWindow]
jmp 0x402fe2
mov eax, dword [ebp + 0x10]
cmp eax, 2
jne 0x402a7a
mov esi, dword [ebp + 8]
xor edi, edi
cmp dword [0x416b4c], edi
je 0x402a2e
push 0x19
push esi
call dword [sym.imp.USER32.dll_KillTimer]
push 4
push dword [0x416b5c]
push dword [0x416830]
push esi
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x402a5b
push 2
push esi
mov dword [0x4167f0], 1
call dword [sym.imp.USER32.dll_EndDialog]
cmp dword [0x416b4c], edi
je 0x402a72
push edi
push 0x96
push 0x19
push esi
call dword [sym.imp.USER32.dll_SetTimer]
push 1
pop eax
jmp 0x402fe4
push 1
pop esi
cmp eax, esi
jne 0x402aaf
cmp byte [0x416b20], 0xb
jne 0x402a95
mov dword [0x416774], esi
jmp 0x402fe2
push dword [ebp + 8]
call fcn.0040310e
push esi
call fcn.00402feb
pop ecx
pop ecx
call fcn.0040331c
jmp 0x402fe2
cmp eax, 5
jne 0x402ac0
push dword [ebp + 8]
call fcn.0040310e
push 0
jmp 0x402a9e
cmp eax, 3
jne 0x402aca
push 0xffffffffffffffff
push esi
jmp 0x402ad7
cmp eax, 4
jne 0x402fe2
push 0xffffffffffffffff
push 0
push 0x185
push 0x3eb
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
jmp 0x402fe2
mov ebx, dword [ebp + 8]
push ebx
call fcn.0040ab3f
mov esi, 0x100
lea eax, [ebp - 0x128]
push esi
push eax
push 0x2f
push dword [0x416b50]
call fcn.0040acf0
mov edi, dword [sym.imp.USER32.dll_SetDlgItemTextA]
add esp, 0x14
lea eax, [ebp - 0x128]
push eax
push 5
push ebx
call edi
lea eax, [ebp - 0x128]
push esi
push eax
push 0x30
push dword [0x416b50]
call fcn.0040acf0
add esp, 0x10
lea eax, [ebp - 0x128]
push eax
push 2
push ebx
call edi
lea eax, [ebp - 0x128]
push esi
push eax
push 0x31
push dword [0x416b50]
call fcn.0040acf0
add esp, 0x10
lea eax, [ebp - 0x128]
push eax
push 3
push ebx
call edi
lea eax, [ebp - 0x128]
push esi
push eax
push 0x32
push dword [0x416b50]
call fcn.0040acf0
add esp, 0x10
lea eax, [ebp - 0x128]
push eax
push 4
push ebx
call edi
lea eax, [ebp - 0x128]
push esi
push eax
push dword [0x416760]
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x128]
push eax
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea eax, [ebp - 0x18]
push eax
push ebx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [ebp - 0xc]
mov eax, dword [0x416870]
sub edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x18]
push 0
sub eax, edx
push edx
cdq
sub eax, edx
push ecx
sar eax, 1
push eax
mov eax, dword [0x41686c]
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
push eax
push ebx
call dword [sym.imp.USER32.dll_MoveWindow]
cmp byte [0x416b20], 0xb
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [0x416758], ebx
jne 0x402c2e
cmp dword [0x416bc4], 0
je 0x402c2e
push 0
push 1
push ebx
call esi
push eax
call edi
push 0
push 5
push dword [0x416758]
call esi
push eax
call edi
call fcn.0040331c
push 0
push 0xef6
push dword [0x416758]
call esi
push eax
call edi
push 0xef6
push ebx
call esi
test eax, eax
mov dword [ebp + 8], eax
je 0x402c9b
lea ecx, [ebp - 0x18]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x18]
push 0x416880
inc eax
push ebx
mov dword [0x416880], eax
mov eax, dword [ebp - 0x14]
inc eax
mov dword [0x416884], eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x10]
push 0x416750
dec eax
push ebx
mov dword [0x416750], eax
mov eax, dword [ebp - 0xc]
dec eax
mov dword [0x416754], eax
call dword [sym.imp.USER32.dll_ScreenToClient]
xor eax, eax
cmp dword [0x41684c], eax
jne 0x402a72
cmp dword [ebp + 8], eax
je 0x402cb4
push eax
push dword [ebp + 8]
call edi
push 0x3f0
push ebx
call esi
test eax, eax
je 0x402a72
push 0
push eax
call edi
jmp 0x402a72
cmp dword [0x416594], 0
jne 0x402cf3
push 0
push 0x96
push 0x19
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [0x416594], 1
lea eax, [ebp - 0x168]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_BeginPaint]
mov ebx, eax
push ebx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push dword [0x416b80]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
mov edi, eax
push edi
call esi
push 0xcc0020
push 0
push 0
push edi
push 0x106
push 0x7a
push 0xc
push 0xc
push ebx
mov dword [ebp + 0x10], eax
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp + 0x10]
push edi
call esi
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp dword [0x41684c], 0
mov edi, dword [sym.imp.GDI32.dll_LineTo]
jne 0x402e3c
push 0x3f0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x402e3c
lea ecx, [ebp - 0x18]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x18]
and dword [ebp - 0x1c], 0
inc eax
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x20], eax
lea eax, [ebp - 8]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_ScreenToClient]
lea eax, [ebp - 0x20]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_ScreenToClient]
push 0x10
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push 1
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
push eax
push ebx
mov dword [ebp + 0xc], eax
call esi
push 0
mov dword [ebp + 0x10], eax
push dword [ebp - 4]
push dword [ebp - 8]
push ebx
call dword [sym.imp.GDI32.dll_MoveToEx]
push dword [ebp - 4]
push dword [ebp - 0x20]
push ebx
call edi
push dword [ebp + 0x10]
push ebx
call esi
push dword [ebp + 0xc]
call dword [sym.imp.GDI32.dll_DeleteObject]
push 5
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push 1
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
push eax
push ebx
mov dword [ebp + 0xc], eax
call esi
mov dword [ebp + 0x10], eax
mov eax, dword [ebp - 4]
inc eax
push 0
push eax
push dword [ebp - 8]
push ebx
call dword [sym.imp.GDI32.dll_MoveToEx]
mov eax, dword [ebp - 4]
inc eax
push eax
push dword [ebp - 0x20]
push ebx
call edi
push dword [ebp + 0x10]
push ebx
call esi
push dword [ebp + 0xc]
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [0x416b4c], 0
je 0x402fd2
push dword [ebp + 8]
push ebx
call fcn.0040b9b7
mov eax, dword [0x416754]
pop ecx
sub eax, dword [0x416884]
pop ecx
push 3
movzx eax, ax
shl eax, 1
cdq
pop ecx
idiv ecx
push 0x7f0000
push ebx
mov dword [ebp + 0xc], eax
mov eax, dword [0x416750]
sub eax, dword [0x416880]
movzx eax, ax
imul eax, dword [0x4167c4]
cdq
idiv dword [0x416bb8]
movzx eax, ax
mov dword [ebp - 4], eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov eax, dword [0x416884]
and dword [ebp + 0x10], 0
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [0x416754]
dec eax
cmp dword [ebp - 4], 0
mov dword [ebp - 0xc], eax
mov eax, dword [0x416880]
mov dword [ebp - 0x18], eax
jle 0x402ef7
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x18]
push 0
push 0
lea ecx, [ecx + eax - 3]
push 0x416590
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x18]
push ecx
push 6
push dword [ebp - 0x14]
push eax
push ebx
call dword [sym.imp.GDI32.dll_ExtTextOutA]
mov eax, dword [ebp + 0xc]
add dword [ebp + 0x10], eax
add dword [ebp - 0x18], eax
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebp - 4]
jl 0x402ebf
cmp dword [0x41684c], 0
jne 0x402fd2
mov eax, dword [0x416754]
inc eax
push eax
mov eax, dword [0x416750]
inc eax
push eax
mov eax, dword [0x416884]
dec eax
push eax
mov eax, dword [0x416880]
dec eax
push eax
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.USER32.dll_SetRect]
push 0x10
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push 1
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
push eax
push ebx
mov dword [ebp + 0xc], eax
call esi
mov dword [ebp + 0x10], eax
mov eax, dword [ebp - 0x1c]
dec eax
push 0
push eax
push dword [ebp - 0x28]
push ebx
call dword [sym.imp.GDI32.dll_MoveToEx]
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push ebx
call edi
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x24]
dec eax
push eax
push ebx
call edi
push dword [ebp + 0x10]
push ebx
call esi
push dword [ebp + 0xc]
call dword [sym.imp.GDI32.dll_DeleteObject]
push 5
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push 1
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
push eax
push ebx
mov dword [ebp + 0xc], eax
call esi
mov dword [ebp + 0x10], eax
mov eax, dword [ebp - 0x20]
push 0
dec eax
push dword [ebp - 0x24]
push eax
push ebx
call dword [sym.imp.GDI32.dll_MoveToEx]
mov eax, dword [ebp - 0x1c]
dec eax
push eax
mov eax, dword [ebp - 0x20]
dec eax
push eax
push ebx
call edi
mov eax, dword [ebp - 0x1c]
dec eax
push eax
mov eax, dword [ebp - 0x28]
dec eax
push eax
push ebx
call edi
push dword [ebp + 0x10]
push ebx
call esi
push dword [ebp + 0xc]
call dword [sym.imp.GDI32.dll_DeleteObject]
lea eax, [ebp - 0x168]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_EndPaint]
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 0x10