Function at 0x4198a5
Capabilities:
Get graphical window text

Disassembly:
mov eax, 0x42c108
call sub.MSVCRT.dll__EH_prolog
push ecx
mov eax, 0x1050
call fcn.00428dc0
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], edi
mov dword [eax + 4], edi
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov esi, eax
cmp esi, edi
jne 0x419902
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push str.FindActiveIE___d____Cannot_find_active_wnd___hBrowser_is_NULL_r_n
push dword [ebp - 0x24]
call fcn.00412a83
add esp, 0xc
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 4
mov word [ebp - 0x1060], di
mov ecx, 0x3ff
xor eax, eax
lea edi, [ebp - 0x105e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x1060]
push 0x7f8
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea eax, [ebp - 0x1060]
lea ecx, [ebp - 0x2c]
push eax
call fcn.004015c5
push str.__Windows_Internet_Explorer
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
call fcn.004015c5
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 2
call fcn.00408e7c
cmp eax, 0xffffffff
lea ecx, [ebp - 0x1c]
sete bl
mov byte [ebp - 4], 1
call fcn.0040180d
test bl, bl
je 0x4199d8
push str.__Microsoft_Internet_Explorer
lea ecx, [ebp - 0x1c]
call fcn.004015c5
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 3
call fcn.00408e7c
cmp eax, 0xffffffff
lea ecx, [ebp - 0x1c]
sete bl
mov byte [ebp - 4], 1
call fcn.0040180d
test bl, bl
je 0x4199d8
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4199b1
mov eax, dword [eax]
jmp 0x4199b3
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push str.FindActiveIE___d____Active_wnd_is_not_IE___Title_is__s_r_n
push dword [ebp - 0x24]
call fcn.00412a83
add esp, 0x10
lea ecx, [ebp - 0x2c]
call fcn.0040180d
jmp 0x4198f1
mov ecx, dword [ebp - 0x24]
push esi
call fcn.0041a5b4
mov ebx, eax
xor edi, edi
cmp ebx, edi
je 0x419c80
push ebx
mov ecx, 0x44dec0
call fcn.0040a640
mov esi, eax
test esi, esi
je 0x419b1f
lea edi, [esi + 4]
push 0
mov ecx, edi
call fcn.0041c6f5
test al, al
jne 0x419b1f
mov esi, dword [esi]
test esi, esi
je 0x419b1f
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x419b1f
cmp dword [edi], 0
jne 0x419a3e
push 0x80004003
call fcn.00428fe8
mov ecx, dword [edi]
lea eax, [ebp - 0x28]
push eax
call fcn.0041e045
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 4
call fcn.0041d936
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.0040ebef
push 0
lea ecx, [ebp - 0x14]
call fcn.0041c6f5
test al, al
jne 0x419b13
mov esi, dword [ebp + 8]
cmp dword [ebp - 0x14], 0
mov dword [esi + 4], ebx
jne 0x419a8a
push 0x80004003
call fcn.00428fe8
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x1c]
push eax
call fcn.0041c4db
push eax
lea ecx, [ebp + 8]
call fcn.00410997
lea eax, [ebp + 8]
lea ecx, [esi + 0x10]
push eax
call fcn.00401619
lea ecx, [ebp + 8]
call fcn.0040180d
lea ecx, [ebp - 0x1c]
call fcn.0040180d
cmp dword [ebp - 0x14], 0
jne 0x419acb
push 0x80004003
call fcn.00428fe8
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x1c]
push eax
call fcn.0041c467
push eax
lea ecx, [ebp + 8]
call fcn.00410997
lea eax, [ebp + 8]
lea ecx, [esi + 0x14]
push eax
call fcn.00401619
lea ecx, [ebp + 8]
call fcn.0040180d
lea ecx, [ebp - 0x1c]
call fcn.0040180d
push dword [edi]
lea ecx, [esi + 0x28]
call fcn.0041cc16
lea ecx, [ebp - 0x14]
call fcn.0040ebef
jmp 0x4199cb
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.0040ebef
mov ecx, dword [ebp - 0x24]
push ebx
call fcn.0041a536
mov ecx, dword [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0041975d
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.0041d9e6
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.0040ebef
xor edi, edi
lea ecx, [ebp - 0x18]
push edi
call fcn.0041c6f5
test al, al
jne 0x419c72
push ebx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x419c72
cmp dword [ebp - 0x18], edi
jne 0x419b7f
push 0x80004003
call fcn.00428fe8
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x1c]
push eax
call fcn.0041e045
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa
call fcn.0041d936
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xc
call fcn.0040ebef
push edi
lea ecx, [ebp - 0x14]
call fcn.0041c6f5
test al, al
jne 0x419c6a
mov esi, dword [ebp + 8]
cmp dword [ebp - 0x14], edi
mov dword [esi + 4], ebx
jne 0x419bca
push 0x80004003
call fcn.00428fe8
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x28]
push eax
call fcn.0041c4db
push eax
lea ecx, [ebp + 8]
call fcn.00410997
lea eax, [ebp + 8]
lea ecx, [esi + 0x10]
push eax
call fcn.00401619
lea ecx, [ebp + 8]
call fcn.0040180d
lea ecx, [ebp - 0x28]
call fcn.0040180d
cmp dword [ebp - 0x14], edi
jne 0x419c0a
push 0x80004003
call fcn.00428fe8
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x28]
push eax
call fcn.0041c467
push eax
lea ecx, [ebp + 8]
call fcn.00410997
lea eax, [ebp + 8]
lea ecx, [esi + 0x14]
push eax
call fcn.00401619
lea ecx, [ebp + 8]
call fcn.0040180d
lea ecx, [ebp - 0x28]
call fcn.0040180d
push dword [ebp - 0x18]
lea ecx, [esi + 0x28]
call fcn.0041cc16
push str.FindActiveIE___GetIWebBrowser2_found_the_active_Browser_r_n
push dword [ebp - 0x24]
call fcn.00412a83
pop ecx
pop ecx
lea ecx, [ebp - 0x14]
call fcn.0040ebef
lea ecx, [ebp - 0x18]
call fcn.0040ebef
jmp 0x4199cb
lea ecx, [ebp - 0x14]
call fcn.0040ebef
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.0040ebef
xor edi, edi
push str.FindActiveIE___GetIWebBrowser2_DID_NOT_find_the_active_Browser_r_n
push dword [ebp - 0x24]
call fcn.00412a83
pop ecx
mov dword [ebp - 0x30], edi
pop ecx
push 1
push edi
push 0x449ef0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xd
call fcn.0041ca90
cmp eax, edi
jl 0x41a155
mov ecx, dword [ebp - 0x30]
cmp ecx, edi
je 0x41a155
call fcn.0041e0a2
cmp eax, edi
mov dword [ebp - 0x5c], eax
jg 0x419cd6
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push str.FindActiveIE___d____ShellWindows_count_is_zero___hBrowser_is_NULL_r_n
jmp 0x41a161
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 0x1c], edi
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x5c]
jge 0x41a13d
push 3
push eax
lea ecx, [ebp - 0x54]
call fcn.0041dd0e
cmp dword [ebp - 0x30], edi
mov byte [ebp - 4], 0xe
mov esi, 0x80004003
jne 0x419d0a
push esi
call fcn.00428fe8
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0041e0c9
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x20]
push eax
mov byte [ebp - 4], 0xf
call fcn.0041d9e6
cmp dword [ebp - 0x20], edi
mov byte [ebp - 4], 0x10
jne 0x419d4c
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push str.FindActiveIE___d____Cannot_query_to_IWebBrowser2_so_not_IE___Looping_to_the_next_object_r_n
push dword [ebp - 0x24]
call fcn.00412a83
add esp, 0xc
jmp 0x419dbb
push dword [ebp - 0x20]
lea ecx, [ebp - 0x44]
call fcn.0041a1b3
cmp dword [ebp - 0x20], edi
mov byte [ebp - 4], 0x11
jne 0x419d66
push esi
call fcn.00428fe8
mov ecx, dword [ebp - 0x20]
lea eax, [ebp - 0x58]
push eax
call fcn.0041e045
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x12
call fcn.0041d936
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x14
call fcn.0040ebef
cmp dword [ebp - 0x18], edi
jne 0x419ddc
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push str.FindActiveIE___d____Cannot_query_to_IHTMLDocument2_so_not_IE___Looping_to_the_next_object_r_n
push dword [ebp - 0x24]
call fcn.00412a83
add esp, 0xc
lea ecx, [ebp - 0x18]
call fcn.0040ebef
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.0041a249
lea ecx, [ebp - 0x20]
call fcn.0040ebef
lea ecx, [ebp - 0x14]
call fcn.0040ebef
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0xd
push eax
call ebx
cmp eax, edi
jmp 0x419fea
xor edi, edi
cmp dword [ebp - 0x20], edi
mov dword [ebp - 0x38], edi
jne 0x419dec
push esi
call fcn.00428fe8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x38]
push edx
push 0x433b70
mov ecx, dword [eax]
push eax
call dword [ecx]
cmp eax, edi
jl 0x419e66
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x3c]
push edx
mov dword [ebp - 0x3c], edi
mov ecx, dword [eax]
push 0x433b60
push 0x433a90
push eax
call dword [ecx + 0xc]
cmp eax, edi
jl 0x419e59
mov eax, dword [ebp - 0x3c]
and dword [ebp - 0x28], 0
lea edx, [ebp - 0x28]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xc]
test eax, eax
jl 0x419e50
mov edi, dword [ebp - 0x28]
push edi
call dword [sym.imp.USER32.dll_GetParent]
mov esi, eax
test esi, esi
je 0x419e50
call dword [sym.imp.USER32.dll_GetDesktopWindow]
cmp eax, esi
je 0x419e50
mov edi, esi
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x38]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test edi, edi
jne 0x419e74
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push str.FindActiveIE___d____Cannot_get_the_hWndParent_wnd_handle___Looping_to_the_next_object_r_n
jmp 0x419e9c
call dword [sym.imp.USER32.dll_GetForegroundWindow]
test eax, eax
jne 0x419e8c
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push str.FindActiveIE___d____Active_wnd_is_unknown___Looping_to_the_next_object_r_n
jmp 0x419e9c
cmp eax, edi
je 0x419ed0
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push str.FindActiveIE___d____IE_is_not_the_active_wnd___Looping_to_the_next_object_r_n
push dword [ebp - 0x24]
call fcn.00412a83
add esp, 0xc
lea ecx, [ebp - 0x18]
call fcn.0040ebef
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.0041a249
lea ecx, [ebp - 0x20]
call fcn.0040ebef
lea ecx, [ebp - 0x14]
call fcn.0040ebef
jmp 0x419fde
mov eax, dword [ebp - 0x20]
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
mov dword [ecx], eax
call fcn.0041cc41
mov esi, dword [ebp - 0x24]
mov ecx, esi
call fcn.0041a327
test eax, eax
jge 0x419f49
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push str.FindActiveIE___d____IsIE7_failed_hr___d___hBrowser_is_NULL_r_n
push esi
call fcn.00412a83
add esp, 0x10
lea ecx, [ebp - 0x18]
call fcn.0040ebef
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.0041a249
lea ecx, [ebp - 0x20]
call fcn.0040ebef
lea ecx, [ebp - 0x14]
call fcn.0040ebef
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0xd
push eax
call ebx
test eax, eax
jge 0x419f3c
push eax
call fcn.00428fe8
lea ecx, [ebp - 0x30]
call fcn.0040ebef
jmp 0x4199cb
jne 0x419ffc
cmp dword [ebp - 0x18], 0
jne 0x419f5f
push 0x80004003
call fcn.00428fe8
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x34]
push eax
call fcn.0041c467
push eax
push edi
mov ecx, esi
mov byte [ebp - 4], 0x15
call fcn.0041a773
lea ecx, [ebp - 0x34]
mov edi, eax
mov byte [ebp - 4], 0x14
call fcn.0040180d
test edi, edi
jne 0x419ffc
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push str.FindActiveIE___d____GetIE7TabParentWnd_return_NULL___Looping_to_the_next_object_r_n
push esi
call fcn.00412a83
mov eax, dword [ebp - 0x18]
add esp, 0xc
test eax, eax
mov byte [ebp - 4], 0x11
je 0x419fb0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.0041a249
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 0xf
test eax, eax
je 0x419fcd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0xe
test eax, eax
je 0x419fde
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0xd
push eax
call ebx
test eax, eax
jge 0x419ff2
push eax
call fcn.00428fe8
inc dword [ebp - 0x1c]
xor edi, edi
jmp 0x419cdf
mov eax, dword [ebp + 8]
cmp dword [ebp - 0x18], 0
mov dword [eax + 4], edi
jne 0x41a012
push 0x80004003
call fcn.00428fe8
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x34]
push eax
call fcn.0041c4db
mov eax, dword [eax]
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
call fcn.0040877f
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x1c]
push eax
lea esi, [edi + 0x10]
mov ecx, esi
call fcn.00401619
lea ecx, [ebp - 0x1c]
call fcn.0040180d
lea ecx, [ebp - 0x34]
call fcn.0040180d
cmp dword [ebp - 0x18], 0
jne 0x41a05c
push 0x80004003
call fcn.00428fe8
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x34]
push eax
call fcn.0041c467
mov eax, dword [eax]
lea ecx, [ebp + 8]
mov dword [ebp + 8], eax
call fcn.0040877f
lea eax, [ebp + 8]
lea ecx, [edi + 0x14]
push eax
call fcn.00401619
lea ecx, [ebp + 8]
call fcn.0040180d
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x41a095
call fcn.0040172d
push dword [ebp - 0x20]
lea ecx, [edi + 0x28]
call fcn.0041cc16
mov eax, dword [esi]
test eax, eax
je 0x41a0aa
mov eax, dword [eax]
jmp 0x41a0ac
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push str.FindActiveIE___d____IE_Found___URL_is__s_r_n
push dword [ebp - 0x24]
call fcn.00412a83
mov eax, dword [ebp - 0x18]
add esp, 0x10
test eax, eax
mov byte [ebp - 4], 0x11
je 0x41a0d5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.0041a249
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 0xf
test eax, eax
je 0x41a0f2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0xe
test eax, eax
je 0x41a103
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0xd
push eax
call ebx
test eax, eax
jge 0x41a117
push eax
call fcn.00428fe8
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 1
test eax, eax
je 0x41a128
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x4198f1
call fcn.0040172d
jmp 0x4198f1
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 1
cmp eax, edi
je 0x41a14e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0x2c]
cmp ecx, edi
jmp 0x41a12d
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push str.FindActiveIE___d____Cannot_create_ShellWindows_instance___hBrowser_is_NULL_r_n
push dword [ebp - 0x24]
call fcn.00412a83
add esp, 0xc
jmp 0x419f3c