Function at 0x110a72a0
Capabilities:
Capture screenshot
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1118539c
mov eax, dword fs:[0]
push eax
sub esp, 0x408
mov eax, dword [0x111ec774]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov eax, dword [ebx + 0x1c]
push eax
lea ecx, [ebp - 0x3b4]
call fcn.110cdd80
xor eax, eax
mov dword [ebp - 0x3b4], 0x11197b2c
mov dword [ebp - 0x344], eax
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], eax
mov byte [ebp - 0x33c], al
push 1
push 0x4c5
lea ecx, [ebp - 0x3b4]
mov dword [ebp - 4], eax
call fcn.110ce820
cmp eax, 1
jne 0x110a77c8
push 0x100
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x3bc]
push ecx
lea edx, [ebp - 0x3dc]
push edx
lea ecx, [ebp - 0x3b4]
call fcn.11016370
mov eax, dword [ebp - 0x3bc]
push eax
mov byte [ebp - 0x3b5], 0
call dword [sym.imp.uSEr32.dll_IsIconic]
test eax, eax
je 0x110a737a
mov ecx, dword [ebp - 0x3bc]
push 9
push ecx
call dword [sym.imp.uSEr32.dll_ShowWindow]
mov byte [ebp - 0x3b5], 1
mov eax, dword [ebp - 0x3bc]
lea edx, [ebp - 0x224]
push edx
push eax
call dword [sym.imp.uSEr32.dll_GetWindowRect]
mov eax, dword [ebp - 0x21c]
sub eax, dword [ebp - 0x224]
mov esi, dword [ebp - 0x218]
sub esi, dword [ebp - 0x220]
mov edi, dword [sym.imp.uSEr32.dll_GetWindow]
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x3cc], esi
jmp 0x110a73c6
mov eax, dword [ebp - 0x3d0]
push 3
push eax
call edi
mov dword [ebp - 0x3d0], eax
test eax, eax
je 0x110a73e0
push eax
call dword [sym.imp.uSEr32.dll_IsWindowVisible]
test eax, eax
je 0x110a73c0
lea ecx, [ebp - 0x234]
push ecx
call fcn.11095990
mov eax, dword [ebp - 0x220]
lea edx, [eax + esi]
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x228]
add esp, 4
cmp edx, eax
jle 0x110a7410
sub eax, esi
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x3c0], eax
jge 0x110a7424
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x224]
mov ecx, dword [ebp - 0x3c8]
mov edi, eax
lea edx, [eax + ecx]
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x3c4], edi
cmp edx, eax
jle 0x110a744f
sub eax, ecx
mov dword [ebp - 0x3c4], eax
mov edi, eax
mov eax, dword [ebp - 0x234]
cmp edi, eax
jge 0x110a7461
mov dword [ebp - 0x3c4], eax
mov edi, eax
mov eax, dword [ebp - 0x3dc]
push eax
push 0
push 0x410
mov byte [ebp - 0x3b6], 0
call dword [sym.imp.KeRneL32.DLl_OpenProcess]
mov esi, eax
test esi, esi
je 0x110a754f
push 0x11199e24
call dword [sym.imp.KeRneL32.DLl_LoadLibraryA]
mov dword [ebp - 0x404], eax
xor eax, eax
mov dword [ebp - 0x400], eax
mov dword [ebp - 0x3fc], eax
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x3f4], eax
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x3ec], eax
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3e4], eax
push 0x104
lea ecx, [ebp - 0x114]
push ecx
push esi
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 1
call fcn.110262f0
test eax, eax
je 0x110a7518
lea edx, [ebp - 0x114]
push 0x5c
push edx
call fcn.11081e00
add esp, 8
test eax, eax
je 0x110a7518
inc eax
push 0x111a7bd4
push eax
call fcn.11081e70
add esp, 8
test eax, eax
jne 0x110a7518
mov byte [ebp - 0x3b6], 1
mov eax, dword [ebp - 0x404]
mov byte [ebp - 4], 0
test eax, eax
je 0x110a752d
push eax
call dword [sym.imp.KeRneL32.DLl_FreeLibrary]
cmp byte [ebp - 0x3b6], 0
je 0x110a754f
mov eax, dword [ebp - 0x3c0]
mov ecx, dword [ebp - 0x3bc]
push 0x61
push 0
push 0
push eax
push edi
push 0
push ecx
jmp 0x110a7566
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0x3bc]
push 0x61
push 0
push 0
push edx
push edi
push 0xffffffffffffffff
push eax
call dword [sym.imp.uSEr32.dll_SetWindowPos]
mov ecx, dword [ebx + 0x1d4]
push 0
push 0x2ee
push 0x111a7bc4
push 0x111a0f84
call fcn.1105e820
push eax
call dword [sym.imp.KeRneL32.DLl_Sleep]
push 0
call dword [sym.imp.uSEr32.dll_GetDC]
mov esi, eax
push esi
call dword [sym.imp.Gdi32.Dll_CreateCompatibleDC]
mov ecx, dword [ebp - 0x3cc]
mov edx, dword [ebp - 0x3c8]
push ecx
push edx
push esi
mov edi, eax
call dword [sym.imp.Gdi32.Dll_CreateCompatibleBitmap]
push eax
push edi
mov dword [ebp - 0x3e0], eax
call dword [sym.imp.Gdi32.Dll_SelectObject]
push 0x111a7bb8
mov dword [ebp - 0x3d4], eax
call dword [sym.imp.KeRneL32.DLl_LoadLibraryA]
mov dword [ebp - 0x3d8], eax
push 0x111a7bac
push eax
mov byte [ebp - 4], 2
call dword [sym.imp.KeRneL32.DLl_GetProcAddress]
mov eax, dword [ebp - 0x3c0]
mov ecx, dword [ebp - 0x3c4]
mov edx, dword [ebp - 0x3cc]
push 0xcc0020
push eax
mov eax, dword [ebp - 0x3c8]
push ecx
push esi
push edx
push eax
push 0
push 0
push edi
call dword [sym.imp.Gdi32.Dll_BitBlt]
mov ecx, dword [ebp - 0x3d4]
push ecx
push edi
call dword [sym.imp.Gdi32.Dll_SelectObject]
push edi
call dword [sym.imp.Gdi32.Dll_DeleteDC]
push esi
push 0
call dword [sym.imp.uSEr32.dll_ReleaseDC]
mov esi, dword [ebp - 0x3e0]
push esi
mov ecx, ebx
call fcn.110a6a70
mov eax, dword [ebx + 0x1b4]
test eax, eax
je 0x110a7656
push eax
call dword [sym.imp.Gdi32.Dll_DeleteObject]
mov edx, dword [ebp - 0x220]
mov eax, dword [ebp - 0x224]
mov ecx, dword [ebp - 0x3bc]
push 0x11
push 0
push 0
push edx
push eax
push 1
mov dword [ebx + 0x1b4], esi
mov esi, dword [sym.imp.uSEr32.dll_SetWindowPos]
push ecx
call esi
mov edx, dword [ebp - 0x220]
mov eax, dword [ebp - 0x224]
mov ecx, dword [ebp - 0x3d0]
push 0x11
push 0
push 0
push edx
mov edx, dword [ebp - 0x3bc]
push eax
push ecx
push edx
call esi
cmp dword [ebx + 8], 0
jne 0x110a76c2
push 0x149
push 0x11195124
push 0x1119511c
call fcn.11029a70
add esp, 0xc
mov eax, dword [ebx + 8]
push 3
push 0
push 0
push 0
push 0
push 0
push eax
call esi
cmp byte [ebp - 0x3b5], 0
je 0x110a76ec
mov ecx, dword [ebp - 0x3bc]
push 6
push ecx
call dword [sym.imp.uSEr32.dll_ShowWindow]
lea ecx, [ebp - 0x414]
call fcn.110d1930
lea edx, [ebp - 0x414]
push edx
push 0x17e2
mov ecx, ebx
mov byte [ebp - 4], 3
call fcn.110cc940
mov eax, dword [ebx]
mov edx, dword [eax + 4]
push 0
push 0
push 0xe
push 0x17e2
mov ecx, ebx
call edx
test eax, eax
je 0x110a773c
lea eax, [ebx + 0x208]
push eax
lea ecx, [ebp - 0x414]
call fcn.110cffe0
test al, al
je 0x110a7797
mov ecx, dword [ebp - 0x3bc]
push 0
push 0
push 0xe
push ecx
call dword [sym.imp.uSEr32.dll_SendMessageA]
test eax, eax
jle 0x110a7797
lea edi, [eax + 1]
push edi
call fcn.11110230
mov edx, dword [ebp - 0x3bc]
add esp, 4
mov esi, eax
push esi
push edi
push 0xd
push edx
call dword [sym.imp.uSEr32.dll_SendMessageA]
mov eax, dword [ebx + 8]
push esi
push 0x17e2
push eax
call dword [sym.imp.uSEr32.dll_SetDlgItemTextA]
push esi
lea ecx, [ebx + 0x208]
call fcn.110d16d0
push esi
call fcn.11162777
add esp, 4
mov ecx, ebx
mov dword [ebx + 0x1d8], 0xffffffff
call fcn.110a7100
lea ecx, [ebp - 0x414]
mov byte [ebp - 4], 2
call fcn.110d0a10
mov eax, dword [ebp - 0x3d8]
test eax, eax
je 0x110a77c8
push eax
call dword [sym.imp.KeRneL32.DLl_FreeLibrary]
lea ecx, [ebp - 0x3b4]
mov dword [ebp - 4], 0xffffffff
call fcn.11016230
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret