Function at 0x412af7
Capabilities:
Get graphical window text

Disassembly:
push ebx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call fcn.00436600
push 0xa
mov eax, str.VERDANA
push eax
push 1
call fcn.004359c3
push 0xc
mov eax, str.EBRIMA
push eax
push 2
call fcn.004359c3
push 0x100
push 0xe
mov eax, str.EBRIMA
push eax
push 3
call fcn.004358fa
push 0x100
push 0xd
mov eax, str.VERDANA
push eax
push 4
call fcn.004358fa
mov dword [esp], 0xcccccc
mov dword [esp + 4], 0xffffff
call fcn.0041b843
call fcn.0041a951
push 0xca0001
mov eax, str.IVANOVATION___LICENSE
push eax
push 0x154
push 0x1f4
push 0
push 0
push 0
call fcn.0042187c
push 0
push 0
push 0
push 0
call fcn.00421c5d
push eax
push 0
call fcn.00421cb2
push eax
push 0x154
push 0x1f4
push 0
call fcn.00421cc0
push eax
call fcn.0041ad9a
push 0x555555
push 0
call fcn.00421cdc
push dword [0xdef830]
push 0
push 0
push 0
push 0
push 2
call fcn.0042014c
push 0x41
push 0x1f4
push 0
push 0
push 0xb
call fcn.0042046a
push 1
mov eax, 0x48b02a
push eax
push 0x14
push 0x1f4
push 0
push 0
push 0xc
call fcn.00420603
push 4
call fcn.004359d9
push eax
push 0xc
call fcn.0041f815
push 0x444444
push 2
push 0xc
call fcn.0041f7ea
push 0x444444
push 2
push 0xb
call fcn.0041f7ea
call fcn.0042071c
push 0xffff0001
push 0xffff0001
push 0xb
call fcn.0041f791
mov ebx, eax
mov dword [esp - 4], ebx
fild dword [esp - 4]
fmul qword [0x4925d0]
sub esp, 8
fstp qword [esp]
push 0xc
call fcn.0041f791
fld qword [esp]
add esp, 8
mov dword [esp - 4], eax
fild dword [esp - 4]
fmul qword [0x4925d0]
fsubp st(1)
fadd qword [0x4925d8]
push eax
fistp dword [esp]
push 0xb
call fcn.0041f71f
mov ebx, eax
mov dword [esp - 4], ebx
fild dword [esp - 4]
fmul qword [0x4925d0]
sub esp, 8
fstp qword [esp]
push 0xc
call fcn.0041f71f
fld qword [esp]
add esp, 8
mov dword [esp - 4], eax
fild dword [esp - 4]
fmul qword [0x4925d0]
fsubp st(1)
fadd qword [0x4925d8]
push eax
fistp dword [esp]
push 0xc
call fcn.0042087d
push 0x70
push 0xe2
push 0xff
pop eax
call fcn.004191d0
push eax
push 1
push 0xc
call fcn.0041f7ea
push 1
push 0xb
call fcn.0041f884
push 1
push 0x64
push 0
push 0x2e
push 0x12c
push 0xff
push 0x64
push 0x11
call fcn.004208b6
push 0x18
push 0x2e
push 0x12c
push 0x11
call fcn.0042f05b
mov edx, str.loading_...
lea ecx, [0xdef88c]
call fcn.00419008
lea eax, [0x415e8f]
push eax
push 0xfffffffc
push 0x11
call fcn.0041f994
push eax
call sub.USER32.DLL_SetWindowLongW
push eax
mov eax, str.oldproc
push eax
push 0x11
call fcn.0041f994
push eax
call sub.USER32.DLL_SetPropW
push 0
push 0
push 0
push 0
push 0
push 0xffffffff
push 0
push 0
push 0x3fa66666
push 0
push 0xa
mov eax, str.VERDANA
push eax
push 0
push 0x555555
push 0x555555
push dword [esp + 0x3c]
mov eax, 0x48b02a
push eax
mov eax, 0x48b54c
push eax
push 0x14
push 0xc8
push 0x5a
push 0x64
push 3
call fcn.004029ee
push 1
push 3
call fcn.0041f884
push 0
push 0
push 0
push 0
push 0
push 0xffffffff
push 0
push 0
push 0x3f947ae1
push 0x100
push 0xa
mov eax, str.VERDANA
push eax
push 0
push 0x555555
push 0x555555
push dword [esp + 0x40]
mov eax, 0x48b02a
push eax
mov eax, 0x48b54c
push eax
push 0x14
push 0xc8
push 0x5a
push 0x64
push 4
call fcn.004029ee
push 1
push 4
call fcn.0041f884
push 0xd
mov eax, str.XXXX_XXXX_XXXX_XXXX
push eax
push 0x24
push 0x12c
push 0x6e
push 0x64
push 5
call fcn.00420d6d
push 1
push 5
call fcn.0041f884
push 3
call fcn.004359d9
push eax
push 5
call fcn.0041f815
push 5
call fcn.0040a3f0
push 0
push 0x13
push 0xc5
push 5
call fcn.0041f994
push eax
call sub.USER32.DLL_SendMessageW
push 0xcccccc
push 1
push 5
call fcn.0041f7ea
push 0xeeeeee
push 2
push 5
call fcn.0041f7ea
push 0
push 0
push 0
push 0
push 0
push 0xffffffff
push 0
push 0
push 0x3fa374bc
push 0
push 0xa
mov eax, str.VERDANA
push eax
push 0
push 0x555555
push 0x555555
push dword [esp + 0x3c]
mov eax, 0x48b02a
push eax
mov eax, str.EXPIRATION_DATE
push eax
push 0x14
push 0xc8
push 0x9b
push 0x64
push 6
call fcn.004029ee
push 1
push 6
call fcn.0041f884
push 0
push 0
push 0
push 0
push 0
push 0xffffffff
push 0
push 0
push 0x3f933333
push 0x100
push 0xa
mov eax, str.VERDANA
push eax
push 0
push 0x555555
push 0x555555
push dword [esp + 0x40]
mov eax, 0x48b02a
push eax
mov eax, str.EXPIRATION_DATE
push eax
push 0x14
push 0xc8
push 0x9b
push 0x64
push 7
call fcn.004029ee
push 1
push 7
call fcn.0041f884
push 0xd
mov eax, 0x4919de
push eax
push 0x24
push 0x46
push 0xaf
push 0x64
push 8
call fcn.00420d6d
push 1
push 8
call fcn.0041f884
push 2
call fcn.004359d9
push eax
push 8
call fcn.0041f815
push 8
call fcn.0040a3f0
push 0
push 2
push 0xc5
push 8
call fcn.0041f994
push eax
call sub.USER32.DLL_SendMessageW
push 0xaaaaaa
push 1
push 8
call fcn.0041f7ea
push 0xeeeeee
push 2
push 8
call fcn.0041f7ea
push 0xd
mov eax, 0x48bfd4
push eax
push 0x24
push 0x46
push 0xaf
push 0xb4
push 9
call fcn.00420d6d
push 1
push 9
call fcn.0041f884
push 2
call fcn.004359d9
push eax
push 9
call fcn.0041f815
push 9
call fcn.0040a3f0
push 0
push 2
push 0xc5
push 9
call fcn.0041f994
push eax
call sub.USER32.DLL_SendMessageW
push 0xaaaaaa
push 1
push 9
call fcn.0041f7ea
push 0xeeeeee
push 2
push 9
call fcn.0041f7ea
push 0xd
mov eax, str.YYYY
push eax
push 0x24
push 0x8c
push 0xaf
push 0x104
push 0xa
call fcn.00420d6d
push 1
push 0xa
call fcn.0041f884
push 2
call fcn.004359d9
push eax
push 0xa
call fcn.0041f815
push 0xa
call fcn.0040a3f0
push 0
push 4
push 0xc5
push 0xa
call fcn.0041f994
push eax
call sub.USER32.DLL_SendMessageW
push 0xaaaaaa
push 1
push 0xa
call fcn.0041f7ea
push 0xeeeeee
push 2
push 0xa
call fcn.0041f7ea
push 0x437f0000
push 0x41300000
push 0x43848000
push 0x41a00000
push 0x41a00000
push 0xf
push 0
push 0x14
push 0x3fa66666
push 0x100
push 0xc
mov eax, 0x48b3b4
push eax
push 0
push 0xe4
push 0xca
push 0xb4
pop eax
call fcn.004191d0
push eax
push 0xd1
push 0xa5
push pe_nt_image_headers32
pop eax
call fcn.004191d0
push eax
push 0xffffff
mov eax, str.button
push eax
mov eax, str.ACTIVATE
push eax
push 0x2e
push 0x12c
push 0xff
push 0x64
push 1
call fcn.004029ee
push 1
push 1
call fcn.0041f884
mov eax, str.Activate_Privacy_Manager_License
push eax
push 1
call fcn.00420eda
push 0
push 0
push 0
push 0
push 0
push 0xffffffff
push 0
push 4
push 0x3fa28f5c
push 0x100
push 0xc
mov eax, 0x48b3b4
push eax
push 0x555555
push 0x555555
push 0x555555
push 0xd8
push 0xff
push 0xd7
pop eax
call fcn.004191d0
push eax
mov eax, 0x48b02a
push eax
mov eax, str.LICENSE_HAS_BEEN_ACTIVATED
push eax
push 0x32
push 0x14a
push 0x9b
push 0x64
push 0x13
call fcn.004029ee
push 1
push 0x13
call fcn.0041f884
push 0
push 0
push 0
push 0
push 0
push 0xffffffff
push 0
push 0x50
push 0x3fc00000
push 0x100
push 0x12
mov eax, str.EBRIMA
push eax
push 0x555555
push 0x555555
push 0x555555
push 0x9c
push 0xff
push 0xa1
pop eax
call fcn.004191d0
push eax
mov eax, 0x48b02a
push eax
mov eax, str.SUCCESS
push eax
push 0x32
push 0x12c
push 0x6e
push 0x64
push 0x12
call fcn.004029ee
push 1
push 0x12
call fcn.0041f884
push 0x437f0000
push 0x41500000
push 0x43848000
push 0x41880000
push 0x41880000
push 0x10
push 0
push 0x14
push 0x3f99999a
push 0x100
push 0xb
mov eax, 0x48b3b4
push eax
push 0
push 0xe4
push 0xca
push 0xb4
pop eax
call fcn.004191d0
push eax
push 0xd1
push 0xa5
push pe_nt_image_headers32
pop eax
call fcn.004191d0
push eax
push 0xffffff
mov eax, str.button
push eax
mov eax, str.OPEN_VIRTUAL_MACHINE
push eax
push 0x2e
push 0x12c
push 0xff
push 0x64
push 0x15
call fcn.004029ee
push 1
push 0x15
call fcn.0041f884
push 0
push 0
push 0
push 0
push 0
push 0xffffffff
push 0
push 0x58
push 0x3fa66666
push 0x100
push 0xc
mov eax, 0x48b3b4
push eax
push 0x555555
push 0x555555
push 0x555555
push 0xffffff
mov eax, 0x48b02a
push eax
mov eax, str.PLEASE_WAIT
push eax
push 0x32
push 0x12c
push 0x87
push 0x64
push 0x16
call fcn.004029ee
push 1
push 0x16
call fcn.0041f884
mov dword [0xdef8a4], 0x1388
call fcn.0040e8c8
mov dword [0xdef800], 0
call fcn.0040f4ed
mov ebx, dword [0xdef864]
cmp ebx, 1
jne 0x413600
mov dword [0xdef864], 0
call fcn.00413c48
mov ebx, dword [0xdef800]
cmp ebx, 1
jne 0x41361a
mov dword [0xdef800], 2
call fcn.00403849
call fcn.00421e61
mov dword [esp + 0xc], eax
push dword [esp + 0xc]
mov ebx, 0x3338
cmp ebx, dword [esp]
jne 0x413645
push 1
push 2
call fcn.0040b78c
jmp 0x413a65
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x413a45
call fcn.004246b7
mov dword [esp + 0xc], eax
call fcn.004246c6
mov dword [esp + 0x14], eax
push dword [esp + 0xc]
mov ebx, 2
cmp ebx, dword [esp]
jne 0x413687
push 1
push 2
call fcn.0040b78c
jmp 0x413a42
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4136a8
push 0
push dword [esp + 0x1c]
push dword [esp + 0x18]
call fcn.00403461
jmp 0x413a42
mov ebx, 5
cmp ebx, dword [esp]
jne 0x413783
cmp dword [0xdef874], 0
je 0x41377e
mov ebx, dword [esp + 0x18]
cmp ebx, 0x36b0
jne 0x413758
push 0
push 5
call fcn.0040b78c
push 1
push 3
call fcn.0041f884
push 0
push 4
call fcn.0041f884
push 0xffffff
push 2
push 5
call fcn.0041f7ea
push edx
call fcn.00436460
pop edx
push eax
push edx
call fcn.00436460
pop edx
push eax
push 5
call fcn.0041f92c
call fcn.00436590
mov edx, str.XXXX_XXXX_XXXX_XXXX
pop ecx
push ecx
call fcn.00419230
mov ecx, eax
call fcn.00419240
je 0x413758
mov eax, 0x48b02a
push eax
push 5
call fcn.0041f79f
call fcn.004246c6
mov ebx, eax
cmp ebx, 0x300
jne 0x41377e
push edx
call fcn.00436460
pop edx
push eax
push 5
call fcn.0040c1e3
call fcn.00419280
jmp 0x413a42
mov ebx, 8
cmp ebx, dword [esp]
jne 0x413865
mov ebx, dword [esp + 0x18]
cmp ebx, 0x36b0
jne 0x41383a
push 0
push 8
call fcn.0040b78c
push 1
push 6
call fcn.0041f884
push 0
push 7
call fcn.0041f884
push 0xffffff
push 2
push 8
call fcn.0041f7ea
push edx
call fcn.00436460
pop edx
push eax
push edx
call fcn.00436460
pop edx
push eax
push 8
call fcn.0041f92c
call fcn.00436590
mov edx, 0x4919de
pop ecx
push ecx
call fcn.00419230
mov ecx, eax
call fcn.00419240
je 0x413826
mov eax, 0x48b02a
push eax
push 8
call fcn.0041f79f
push 0x777777
push 1
push 8
call fcn.0041f7ea
call fcn.004246c6
mov ebx, eax
cmp ebx, 0x300
jne 0x413860
push edx
call fcn.00436460
pop edx
push eax
push 8
call fcn.0040b486
call fcn.00419280
jmp 0x413a42
mov ebx, 9
cmp ebx, dword [esp]
jne 0x413947
mov ebx, dword [esp + 0x18]
cmp ebx, 0x36b0
jne 0x41391c
push 0
push 9
call fcn.0040b78c
push 1
push 6
call fcn.0041f884
push 0
push 7
call fcn.0041f884
push 0xffffff
push 2
push 9
call fcn.0041f7ea
push edx
call fcn.00436460
pop edx
push eax
push edx
call fcn.00436460
pop edx
push eax
push 9
call fcn.0041f92c
call fcn.00436590
mov edx, 0x48bfd4
pop ecx
push ecx
call fcn.00419230
mov ecx, eax
call fcn.00419240
je 0x413908
mov eax, 0x48b02a
push eax
push 9
call fcn.0041f79f
push 0x777777
push 1
push 9
call fcn.0041f7ea
call fcn.004246c6
mov ebx, eax
cmp ebx, 0x300
jne 0x413942
push edx
call fcn.00436460
pop edx
push eax
push 9
call fcn.0040b486
call fcn.00419280
jmp 0x413a42
mov ebx, 0xa
cmp ebx, dword [esp]
jne 0x413a26
mov ebx, dword [esp + 0x18]
cmp ebx, 0x36b0
jne 0x4139fe
push 0
push 0xa
call fcn.0040b78c
push 1
push 6
call fcn.0041f884
push 0
push 7
call fcn.0041f884
push 0xffffff
push 2
push 0xa
call fcn.0041f7ea
push edx
call fcn.00436460
pop edx
push eax
push edx
call fcn.00436460
pop edx
push eax
push 0xa
call fcn.0041f92c
call fcn.00436590
mov edx, str.YYYY
pop ecx
push ecx
call fcn.00419230
mov ecx, eax
call fcn.00419240
je 0x4139ea
mov eax, 0x48b02a
push eax
push 0xa
call fcn.0041f79f
push 0x777777
push 1
push 0xa
call fcn.0041f7ea
call fcn.004246c6
mov ebx, eax
cmp ebx, 0x300
jne 0x413a24
push edx
call fcn.00436460
pop edx
push eax
push 0xa
call fcn.0040b486
call fcn.00419280
jmp 0x413a42
mov ebx, 0x15
cmp ebx, dword [esp]
jne 0x413a42
push 1
push dword [esp + 0x1c]
push dword [esp + 0x18]
call fcn.00403461
pop eax
jmp 0x413a65
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x413a56
add esp, 4
jmp 0x413a76
mov ebx, 0x333c
cmp ebx, dword [esp]
jne 0x413a65
add esp, 4
jmp 0x413a76
pop eax
mov ebx, dword [esp + 0xc]
cmp ebx, 0x333c
jne 0x4135e6
mov dword [0xdef85c], 1
cmp dword [0xdef898], 0
je 0x413a8d
xor eax, eax
jmp 0x413a92
mov eax, 1
and eax, eax
je 0x413aa0
mov dword [0xdef848], 1
call fcn.00415995
xor eax, eax
add esp, 0x14
pop ebx
ret