Function at 0x428ca0
Capabilities:
Get graphical window text
Hide graphical window

Disassembly:
push 0xffffffffffffffff
push 0x4545db
mov eax, dword fs:[0]
push eax
sub esp, 0x84c
mov eax, dword [0x468d80]
xor eax, esp
mov dword [esp + 0x848], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x468d80]
xor eax, esp
push eax
lea eax, [esp + 0x860]
mov dword fs:[0], eax
xor ebx, ebx
mov esi, ecx
mov dword [esp + 0x18], ebx
mov eax, dword [esi + 0x10c]
xor ebp, ebp
cmp eax, ebp
je 0x428d07
mov ecx, dword [esi - 0x38]
mov edx, dword [eax]
push ebp
push 0x3e8
push ebp
push 0x3e8
push ecx
push eax
mov eax, dword [edx + 0x24]
call eax
mov ecx, dword [esi + 0xa8]
mov byte [esi - 3], bl
mov byte [esp + 0x16], 1
call fcn.0041e220
test al, al
je 0x428e15
mov eax, dword [esi - 0x38]
push 0x400
lea ecx, [esp + 0x60]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
push 0x1c
xor edx, edx
push str.Cannot_download_file_from:_r_n
lea ecx, [esp + 0x48]
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], ebp
mov word [esp + 0x4c], dx
call fcn.00408a00
mov dword [esp + 0x868], ebp
lea ecx, [esp + 0x40]
cmp dword [esi + 0x124], ebp
je 0x428d7d
push 0xffffffffffffffff
push ebp
lea eax, [esi + 0x110]
push eax
call fcn.004090f0
jmp 0x428d95
push str.Empty_URL
push ecx
lea edx, [esp + 0x2c]
push edx
call fcn.00410160
add esp, 0xc
mov ebx, 1
mov edi, 8
test bl, 1
je 0x428db2
cmp dword [esp + 0x3c], edi
jb 0x428db2
mov eax, dword [esp + 0x28]
push eax
call fcn.0043e5e6
add esp, 4
push 0x1b
push str._r_n_Do_you_want_to_continue_
lea ecx, [esp + 0x48]
call fcn.004095d0
mov ecx, dword [esp + 0x44]
cmp dword [esp + 0x58], edi
jae 0x428dd0
lea ecx, [esp + 0x44]
mov eax, dword [esi - 0x38]
push 4
lea edx, [esp + 0x60]
push edx
push ecx
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 7
jne 0x428deb
xor bl, bl
jmp 0x428def
mov bl, byte [esp + 0x16]
mov dword [esp + 0x868], 0xffffffff
cmp dword [esp + 0x58], edi
jb 0x428e0d
mov eax, dword [esp + 0x44]
push eax
call fcn.0043e5e6
add esp, 4
test bl, bl
je 0x429039
cmp byte [esi + 0x16f], 0
mov byte [esi + 0x16e], 1
jne 0x428ea9
mov eax, dword [esi - 0x38]
push ebp
mov ebp, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x37
push eax
call ebp
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call edi
mov eax, dword [esi - 0x38]
push 0
push 0x32
push eax
call ebp
push eax
call edi
mov eax, dword [esi - 0x38]
push 0
push 0x33
push eax
call ebp
push eax
call edi
mov eax, dword [esi - 0x38]
push 5
push 0x9a
push eax
call ebp
push eax
call edi
mov eax, dword [esi - 0x38]
push 5
push 0x99
push eax
call ebp
push eax
call edi
mov ecx, dword [esi - 0x38]
push 9
push ecx
call edi
mov edx, dword [esi - 0x38]
push edx
call dword [sym.imp.USER32.dll_UpdateWindow]
lea ecx, [esi - 0x40]
call fcn.00417d20
mov eax, dword [esi - 0x38]
push 0x1d20
push eax
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x429042
mov ebp, dword [esi + 0x1a4]
lea edi, [esi + 0x18c]
lea ecx, [edi + 4]
cmp ebp, 8
jb 0x428ec1
mov edx, dword [ecx]
jmp 0x428ec3
mov edx, ecx
mov eax, dword [edi + 0x14]
add eax, eax
lea ebx, [eax + edx]
mov dword [esp + 0x18], ebx
test ebx, ebx
je 0x428eef
cmp ebp, 8
jb 0x428edc
mov edx, dword [ecx]
jmp 0x428ede
mov edx, ecx
cmp edx, ebx
ja 0x428eef
cmp ebp, 8
jb 0x428ee9
mov ecx, dword [ecx]
add eax, ecx
cmp ebx, eax
jbe 0x428ef4
call fcn.0043ead4
mov edx, dword [edi + 0x18]
lea eax, [edi + 4]
cmp edx, 8
jb 0x428f03
mov ebx, dword [eax]
jmp 0x428f05
mov ebx, eax
test ebx, ebx
je 0x428f29
cmp edx, 8
jb 0x428f12
mov ecx, dword [eax]
jmp 0x428f14
mov ecx, eax
cmp ecx, ebx
ja 0x428f29
cmp edx, 8
jb 0x428f1f
mov eax, dword [eax]
mov ecx, dword [edi + 0x14]
lea edx, [eax + ecx*2]
cmp ebx, edx
jbe 0x428f2e
call fcn.0043ead4
mov edx, dword [edi + 0x18]
lea eax, [edi + 4]
cmp edx, 8
jb 0x428f3d
mov ebp, dword [eax]
jmp 0x428f3f
mov ebp, eax
test ebp, ebp
je 0x428f63
cmp edx, 8
jb 0x428f4c
mov ecx, dword [eax]
jmp 0x428f4e
mov ecx, eax
cmp ecx, ebp
ja 0x428f63
cmp edx, 8
jb 0x428f59
mov eax, dword [eax]
mov ecx, dword [edi + 0x14]
lea edx, [eax + ecx*2]
cmp ebp, edx
jbe 0x428f68
call fcn.0043ead4
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x18]
mov byte [esp + 0x20], 0
mov eax, dword [esp + 0x20]
push eax
push ecx
push fcn.00440912
push edx
push edi
push ebx
mov edx, ebp
lea ecx, [esp + 0x30]
call fcn.00428220
push edi
push str.openasfile
call fcn.00427f60
add esp, 8
test al, al
je 0x428fdd
cmp dword [esi + 0xa4], 8
jb 0x428fc3
mov eax, dword [esi + 0x90]
push 0
push eax
mov eax, dword [esi - 0x38]
push eax
lea ecx, [esp + 0x23]
call fcn.0040f7b0
push 1
jmp 0x42903a
push 0
lea eax, [esi + 0x90]
push eax
mov eax, dword [esi - 0x38]
push eax
lea ecx, [esp + 0x23]
call fcn.0040f7b0
push 1
jmp 0x42903a
cmp dword [esi + 0x188], 8
jb 0x428fee
mov ebx, dword [esi + 0x174]
jmp 0x428ff4
lea ebx, [esi + 0x174]
cmp dword [esi + 0xa4], 8
jb 0x429005
mov ebp, dword [esi + 0x90]
jmp 0x42900b
lea ebp, [esi + 0x90]
push 1
push 0
push str.alwaysrunas
push edi
call fcn.00420830
add esp, 8
test al, al
setne cl
movzx edx, cl
push edx
push 0
push 0
push 0
mov edx, ebx
mov ecx, ebp
call fcn.0040ccc0
push 1
jmp 0x42903a
push ebp
lea ecx, [esi - 0x40]
call fcn.004180f0
mov ecx, dword [esp + 0x860]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x848]
xor ecx, esp
call fcn.0043eed8
add esp, 0x858
ret 4