Function at 0x412bd0
Capabilities:
Get graphical window text
Hide graphical window

Disassembly:
push 0xffffffffffffffff
push 0x44aa2b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x218
push ebx
push ebp
push esi
mov esi, ecx
lea edx, [esp + 0x14]
push edi
mov eax, dword [esi + 0x70]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov ebp, dword [esp + 0x24]
mov ebx, dword [esp + 0x18]
mov edi, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov eax, dword [esi + 0x70]
sub ebp, 0x69
mov dword [esp + 0x24], ebp
lea ebp, [esi + 0x20c]
add ebx, 0xc
sub edi, 0x10
add edx, 0x15
push eax
mov ecx, ebp
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], edx
call fcn.00424450
mov eax, dword [0x455ff0]
mov edi, dword [esi + 4]
test eax, eax
lea ebx, [esi + 0x248]
jne 0x412c58
mov dword [0x455ff0], 0
lea ecx, [ebx + 0x1c]
push ecx
push 0x455fc0
push 0x45b378
call fcn.004135c0
push 0
push eax
push 0
push 0
push 0x40000000
lea edx, [esp + 0x2c]
push 0
push edx
push edi
mov ecx, ebx
call fcn.00414140
mov eax, dword [esi + 0x24c]
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [esi + 0x24c]
mov ecx, dword [esi + 0x1c]
lea ebx, [esi + 0x1c]
push edx
push ebx
call dword [ecx + 8]
push 0x4558ec
push 0xe6
mov ecx, ebp
call fcn.00424e90
mov eax, dword [0x455050]
mov dword [esp + 0x14], eax
mov ecx, dword [0x45b330]
lea edx, [esp + 0x28]
push pe_nt_image_headers32
push edx
mov eax, dword [ecx + 8]
xor edi, edi
push 0x8c
push eax
mov dword [esp + 0x240], edi
call dword [sym.imp.USER32.dll_LoadStringW]
cmp eax, edi
jne 0x412cf1
mov word [esp + 0x28], di
mov ecx, pe_nt_image_headers32
sub ecx, eax
cmp ecx, 1
jle 0x412d0d
lea edx, [esp + 0x28]
lea ecx, [esp + 0x14]
push edx
call fcn.00403e20
jmp 0x412d5b
push 0x1ff
lea ecx, [esp + 0x18]
mov ebp, 0x200
call fcn.004048a0
cmp eax, edi
je 0x412d50
push ebp
push eax
push 0x8c
call fcn.00404ba0
mov ecx, ebp
sub ecx, eax
cmp ecx, 1
jg 0x412d50
add ebp, 0x100
lea ecx, [esp + 0x14]
lea edx, [ebp - 1]
push edx
call fcn.004048a0
cmp eax, edi
jne 0x412d24
push 0xffffffffffffffff
lea ecx, [esp + 0x18]
call fcn.00404960
lea ebp, [esi + 0xa4]
push edi
mov ecx, ebp
call fcn.0041db90
mov eax, dword [esi + 0x70]
mov ecx, ebp
push eax
call fcn.00424450
mov ecx, dword [esi + 4]
push 0x3f2
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edx, dword [esi + 0xe0]
lea edi, [esi + 0xe0]
push edi
mov ecx, edi
mov dword [esp + 0x14], eax
call dword [edx + 4]
push eax
lea ecx, [edi + 8]
call fcn.0040a4a0
lea eax, [edi + 8]
push eax
mov eax, dword [esp + 0x14]
push 0xfffffffffffffffc
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
je 0x412dc1
mov ecx, dword [esp + 0x10]
mov dword [edi + 0x1c], eax
mov dword [edi + 4], ecx
push 3
push 0x4558ec
push 0xde
mov ecx, ebp
call fcn.0041d4b0
mov edx, dword [esp + 0x14]
mov ecx, ebp
push edx
call fcn.0041dfb0
mov eax, dword [esi + 0x70]
lea edi, [esi + 0x2c8]
push eax
mov ecx, edi
call fcn.00424450
push 0x4558ec
push 0xd1
mov ecx, edi
call fcn.0041e810
push 0x4558ec
push 0xd4
mov ecx, edi
call fcn.0041e850
push 0x4558ec
push 0xd3
mov ecx, edi
call fcn.0041e830
mov ecx, dword [esi + 4]
push 0x3f5
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edx, dword [esi + 0x304]
lea edi, [esi + 0x304]
push edi
mov ecx, edi
mov dword [esp + 0x14], eax
lea ebp, [edi + 8]
call dword [edx + 4]
push eax
mov ecx, ebp
call fcn.0040a4a0
push ebp
mov ebp, dword [esp + 0x14]
push 0xfffffffffffffffc
push ebp
call dword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
je 0x412e6c
mov dword [edi + 0x1c], eax
mov dword [edi + 4], ebp
mov eax, dword [esi + 0x308]
push 0x640000
push 0
push 0x401
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esi + 0x70]
push ecx
lea ecx, [esi + 0x418]
call fcn.00424450
mov edx, dword [esi + 4]
push 0x3f7
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ebp, [esi + 0x454]
mov dword [esp + 0x10], eax
mov ecx, ebp
mov eax, dword [ebp]
call dword [eax + 4]
lea edi, [ebp + 8]
push 0xd
sub eax, edi
push edi
sub eax, 0xd
mov dword [edi], 0x42444c7
mov dword [edi + 4], ebp
mov byte [edi + 8], 0xe9
mov dword [edi + 9], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
push edi
mov edi, dword [esp + 0x14]
push 0xfffffffffffffffc
push edi
call dword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
je 0x412ef5
mov dword [ebp + 0x1c], eax
mov dword [ebp + 4], edi
mov edx, dword [esi + 0x458]
mov ecx, dword [ebx]
push edx
push ebx
call dword [ecx + 8]
mov eax, dword [esi + 0x70]
lea edi, [esi + 0x488]
push eax
mov ecx, edi
call fcn.00424450
push 2
mov ecx, edi
call fcn.0041f260
mov ecx, dword [esi + 4]
push 0x3f8
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edx, dword [esi + 0x4c4]
lea ebp, [esi + 0x4c4]
mov ecx, ebp
mov dword [esp + 0x10], eax
call dword [edx + 4]
lea edi, [ebp + 8]
push 0xd
sub eax, edi
push edi
sub eax, 0xd
mov dword [edi], 0x42444c7
mov dword [edi + 4], ebp
mov byte [edi + 8], 0xe9
mov dword [edi + 9], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
push edi
mov edi, dword [esp + 0x14]
push 0xfffffffffffffffc
push edi
call dword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
je 0x412f80
mov dword [ebp + 0x1c], eax
mov dword [ebp + 4], edi
mov ecx, dword [esi + 0x4c8]
mov eax, dword [ebx]
push ecx
push ebx
call dword [eax + 8]
lea edi, [esi + 0x158]
push 2
mov ecx, edi
call fcn.0041db90
mov edx, dword [esi + 0x70]
mov ecx, edi
push edx
call fcn.00424450
mov eax, dword [esi + 4]
push 0x3f6
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edx, dword [esi + 0x194]
lea edi, [esi + 0x194]
push edi
mov ecx, edi
mov dword [esp + 0x14], eax
lea ebp, [edi + 8]
call dword [edx + 4]
push eax
mov ecx, ebp
call fcn.0040a4a0
push ebp
mov ebp, dword [esp + 0x14]
push 0xfffffffffffffffc
push ebp
call dword [sym.imp.USER32.dll_SetWindowLongW]
test eax, eax
je 0x412fef
mov dword [edi + 0x1c], eax
mov dword [edi + 4], ebp
mov ecx, dword [esi + 0x198]
mov eax, dword [ebx]
push ecx
push ebx
call dword [eax + 8]
mov eax, dword [esp + 0x14]
mov ecx, dword [0x455054]
pop edi
pop esi
lea edx, [eax - 0xc]
pop ebp
cmp edx, ecx
pop ebx
je 0x41302f
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x41302f
mov eax, dword [esp + 4]
add eax, 0xfffffff4
push eax
call fcn.0042ac06
add esp, 4
mov ecx, dword [esp + 0x218]
mov dword fs:[0], ecx
add esp, 0x224
ret