Function at 0x43cc6c
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x884
mov eax, dword [0x6ffe74]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetTickCount64]
push ebx
push esi
push edi
mov ebx, ecx
mov dword [ebp - 0x884], eax
call eax
xor edi, edi
mov dword [ebx + 0x5bfcc], 1
push 2
push edi
mov dword [ebx + 0x5b878], edi
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov ecx, eax
test ecx, ecx
jne 0x43ccd3
cmp dword [0x700a20], edi
je 0x43ccd3
push edi
push edi
push edi
push 3
push edi
push edi
push edi
push 0xffffffffffffffff
push edi
mov dword [0x700a20], edi
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov ecx, eax
xor eax, eax
lea esi, [ebx + 0x5befc]
test ecx, ecx
push 0xb0
sete al
push edi
push esi
mov dword [ebx + 0x5b0a0], eax
call fcn.006390b0
add esp, 0xc
lea eax, [ebp - 0x880]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x9c], edi
mov word [ebp - 0x98], di
mov dword [ebp - 0x92], edi
mov word [ebp - 0x8e], di
mov dword [ebp - 0x88], edi
mov word [ebp - 0x84], di
mov dword [ebp - 0x7e], edi
mov word [ebp - 0x7a], di
mov dword [ebp - 0x74], edi
mov word [ebp - 0x70], di
mov dword [ebp - 0x6a], edi
mov word [ebp - 0x66], di
mov dword [ebp - 0x60], edi
mov word [ebp - 0x5c], di
mov dword [ebp - 0x56], edi
mov word [ebp - 0x52], di
mov dword [ebp - 0x4c], edi
mov word [ebp - 0x48], di
mov dword [ebp - 0x42], edi
mov word [ebp - 0x3e], di
mov dword [ebp - 0x38], edi
mov word [ebp - 0x34], di
mov dword [ebp - 0x2e], edi
mov word [ebp - 0x2a], di
lea edi, [ebp - 0x28]
mov dword [ebp - 0xa0], 0x6e614a
mov dword [ebp - 0x96], 0x626546
mov dword [ebp - 0x8c], 0x72614d
mov dword [ebp - 0x82], 0x727041
mov dword [ebp - 0x78], 0x79614d
mov dword [ebp - 0x6e], 0x6e754a
mov dword [ebp - 0x64], 0x6c754a
mov dword [ebp - 0x5a], 0x677541
mov dword [ebp - 0x50], 0x706553
mov dword [ebp - 0x46], 0x74634f
mov dword [ebp - 0x3c], 0x766f4e
mov dword [ebp - 0x32], 0x636544
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
movzx eax, word [ebp - 0x876]
push eax
movzx eax, word [ebp - 0x878]
push eax
movzx eax, word [ebp - 0x880]
push eax
movzx eax, word [ebp - 0x87e]
imul eax, eax, 0xa
lea eax, [ebp + eax - 0xaa]
push eax
movzx eax, word [ebp - 0x87a]
push eax
push str._.2d__s__.4d__.2d:_.2d
push 0x80
push esi
call fcn.00402e0a
add esp, 0x20
push 7
pop eax
mov dword [ebx + 0x5bcb0], eax
mov dword [ebx + 0x5bcac], eax
mov dword [ebx + 0x5bca8], eax
mov dword [ebx + 0x5bca4], eax
mov dword [ebx + 0x5bca0], eax
mov dword [ebx + 0x5bc9c], eax
mov dword [ebx + 0x5bc98], eax
mov edi, dword [ebx + 0x1ac]
push 0xb
pop ecx
mov dword [ebx + 0x5bc94], eax
mov dword [ebx + 0x5bc90], eax
mov dword [ebx + 0x5bc8c], eax
xor eax, eax
mov dword [ebx + 0x5bc88], ecx
mov dword [ebx + 0x5bcb8], 0x17
push 0xa
pop edx
test edi, edi
jne 0x43ce88
mov dword [ebx + 0x5bc8c], eax
mov ecx, edx
mov dword [ebx + 0x5bc88], edx
cmp dword [ebx + 0x1b0], eax
jne 0x43ce9d
dec ecx
mov dword [ebx + 0x5bc90], eax
mov dword [ebx + 0x5bc88], ecx
cmp dword [ebx + 0x1b4], eax
jne 0x43ceb2
dec ecx
mov dword [ebx + 0x5bc94], eax
mov dword [ebx + 0x5bc88], ecx
cmp dword [ebx + 0x1c0], eax
jne 0x43cec7
dec ecx
mov dword [ebx + 0x5bc9c], eax
mov dword [ebx + 0x5bc88], ecx
cmp dword [ebx + 0x1b8], eax
jne 0x43cedc
dec ecx
mov dword [ebx + 0x5bc98], eax
mov dword [ebx + 0x5bc88], ecx
cmp dword [ebx + 0x1bc], eax
jne 0x43cef1
dec ecx
mov dword [ebx + 0x5bca0], eax
mov dword [ebx + 0x5bc88], ecx
cmp dword [ebx + 0x1c8], eax
jne 0x43cf06
dec ecx
mov dword [ebx + 0x5bca4], eax
mov dword [ebx + 0x5bc88], ecx
cmp dword [ebx + 0x1cc], eax
jne 0x43cf1b
dec ecx
mov dword [ebx + 0x5bca8], eax
mov dword [ebx + 0x5bc88], ecx
cmp dword [ebx + 0x1d0], eax
jne 0x43cf30
dec ecx
mov dword [ebx + 0x5bcac], eax
mov dword [ebx + 0x5bc88], ecx
cmp dword [ebx + 0x1c4], eax
jne 0x43cf45
dec ecx
mov dword [ebx + 0x5bcb0], eax
mov dword [ebx + 0x5bc88], ecx
mov esi, dword [ebx + 0x1a8]
imul eax, ecx, 7
push 0x4d
pop edx
sub edx, eax
test esi, esi
jne 0x43cf60
add edx, 0x17
and dword [ebx + 0x5bcb8], esi
mov eax, edx
xor edx, edx
div ecx
mov edx, eax
mov eax, dword [ebx + 0x5bc8c]
test eax, eax
je 0x43cf7b
lea ecx, [eax + edx]
mov dword [ebx + 0x5bc8c], ecx
mov eax, dword [ebx + 0x5bc90]
test eax, eax
je 0x43cf8d
add eax, edx
mov dword [ebx + 0x5bc90], eax
mov eax, dword [ebx + 0x5bc94]
test eax, eax
je 0x43cf9f
add eax, edx
mov dword [ebx + 0x5bc94], eax
mov eax, dword [ebx + 0x5bc9c]
test eax, eax
je 0x43cfb1
add eax, edx
mov dword [ebx + 0x5bc9c], eax
mov eax, dword [ebx + 0x5bc98]
test eax, eax
je 0x43cfc3
add eax, edx
mov dword [ebx + 0x5bc98], eax
mov eax, dword [ebx + 0x5bca0]
test eax, eax
je 0x43cfd5
add eax, edx
mov dword [ebx + 0x5bca0], eax
mov eax, dword [ebx + 0x5bca4]
test eax, eax
je 0x43cfe7
add eax, edx
mov dword [ebx + 0x5bca4], eax
mov eax, dword [ebx + 0x5bcac]
test eax, eax
je 0x43cff9
add eax, edx
mov dword [ebx + 0x5bcac], eax
mov eax, dword [ebx + 0x5bca8]
test eax, eax
je 0x43d00b
add eax, edx
mov dword [ebx + 0x5bca8], eax
mov eax, dword [ebx + 0x5bcb0]
test eax, eax
je 0x43d01d
add eax, edx
mov dword [ebx + 0x5bcb0], eax
lea eax, [edx + 7]
mov dword [ebx + 0x5bcb4], eax
test esi, esi
je 0x43d040
push 0xa
pop ecx
cmp eax, ecx
jbe 0x43d040
add eax, 0xd
mov dword [ebx + 0x5bcb4], ecx
mov dword [ebx + 0x5bcb8], eax
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x64
pop ecx
test edi, edi
je 0x43d2d7
imul eax, dword [ebx + 0x5bc8c], 0xa
xor edx, edx
xor edi, edi
push edi
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_Email_Passwords__Outlook_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.004121d0
mov ecx, ebx
call fcn.0041226c
imul eax, dword [ebx + 0x5bc8c], 0x19
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_Email_Passwords__Thunderbird_
mov ecx, ebx
call fcn.0043e752
push 0xfd
mov ecx, ebx
call fcn.0040dd6e
push str.Recovering_Email_Passwords__IncrediMail_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.00416a1c
push str.Recovering_Email_Passwords__Mailbird_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.00418cb9
imul eax, dword [ebx + 0x5bc8c], 0x28
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_Email_Passwords__FoxMail_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0041897a
push str.Recovering_Email_Passwords__The_Bat__
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.004178b5
push str.Recovering_Email_Passwords__Windows_Mail_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.00414b35
imul eax, dword [ebx + 0x5bc8c], 0x3c
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_Email_Passwords__Windows_Live_Mail_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.00414b8e
push str.Recovering_Email_Passwords__Opera_Mail_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.00416c03
push str.Recovering_Email_Passwords__Postbox_
mov ecx, ebx
call fcn.0043e752
push 0x104
mov ecx, ebx
call fcn.0040dd6e
push str.Recovering_Email_Passwords__eM_Client_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0041a838
imul eax, dword [ebx + 0x5bc8c], 0x4b
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_Email_Passwords__Claws_Mail_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.00419662
mov ecx, ebx
call fcn.004164f5
push str.Recovering_Email_Passwords__FossaMail_
mov ecx, ebx
call fcn.0043e752
push 0x10b
mov ecx, ebx
call fcn.0040dd6e
imul eax, dword [ebx + 0x5bc8c], 0x5a
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push 0x6c5bb9
mov ecx, ebx
call fcn.00414c55
push 0x6c5bb9
mov ecx, ebx
call fcn.00415ca7
push 0x6c5bb9
mov ecx, ebx
call fcn.00415e82
push str.Recovering_Email_Passwords__Epyrus_Mail_
mov ecx, ebx
call fcn.0043e752
push 0x10e
mov ecx, ebx
call fcn.0040dd6e
push str.Recovering_Email_Passwords__Interlink_Mail_
mov ecx, ebx
call fcn.0043e752
push 0x10f
mov ecx, ebx
call fcn.0040dd6e
mov eax, dword [ebx + 0x5bc8c]
add dword [ebx + 0x5bc84], eax
push edi
push dword [ebx + 0x5bc84]
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push 0x64
pop ecx
jmp 0x43d2d9
xor edi, edi
cmp dword [ebx + 0x1b0], edi
je 0x43d8eb
imul eax, dword [ebx + 0x5bc90], 0xa
xor edx, edx
push edi
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_Browser_Passwords__Chrome_
mov ecx, ebx
call fcn.0043e752
push 1
mov ecx, ebx
call fcn.00442d16
imul eax, dword [ebx + 0x5bc90], 0xf
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_Browser_Passwords__Firefox_
mov ecx, ebx
call fcn.0043e752
push 3
mov ecx, ebx
call fcn.0040dd6e
imul eax, dword [ebx + 0x5bc90], 0x14
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_Browser_Passwords__Opera_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0040be5d
push str.Recovering_Browser_Passwords__Internet_Explorer_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0040d5a0
mov ecx, ebx
call fcn.0040d0d1
mov ecx, ebx
call fcn.0040d777
push edi
push 0xd
mov ecx, ebx
call fcn.0044248c
push str.Recovering_Browser_Passwords__Safari_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0040cd22
mov edi, str.Recovering_Browser_Passwords__Maxthon_
mov ecx, ebx
push edi
call fcn.0043e752
push 0
push 0x13
mov ecx, ebx
call fcn.0044248c
push str.Recovering_Browser_Passwords__CoolNovo_
mov ecx, ebx
call fcn.0043e752
push 0
push 7
mov ecx, ebx
call fcn.0044248c
push 0
push 6
mov ecx, ebx
call fcn.0044248c
push str.Recovering_Browser_Passwords__Comodo_Dragon_
mov ecx, ebx
call fcn.0043e752
push 0
push 9
mov ecx, ebx
call fcn.0044248c
imul eax, dword [ebx + 0x5bc90], 0x1e
xor edx, edx
push 0
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push 0
push 0xa
mov ecx, ebx
call fcn.0044248c
push str.Recovering_Browser_Passwords__Torch_
mov ecx, ebx
call fcn.0043e752
push 0
push 0xc
mov ecx, ebx
call fcn.0044248c
push 0
push 5
mov ecx, ebx
call fcn.0044248c
push str.Recovering_Browser_Passwords__Vivaldi_
mov ecx, ebx
call fcn.0043e752
push 0
push 0x10
mov ecx, ebx
call fcn.0044248c
push str.Recovering_Browser_Passwords__Orbitum_
mov ecx, ebx
call fcn.0043e752
push 0
push 0x15
mov ecx, ebx
call fcn.0044248c
push str.Recovering_Browser_Passwords__QQ_Browser_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0040bbcd
imul eax, dword [ebx + 0x5bc90], 0x28
xor edx, edx
push 0
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push 0
push 0x19
mov ecx, ebx
call fcn.0044248c
push 0
push 0x1a
mov ecx, ebx
call fcn.0044248c
push 0
push 0x1c
mov ecx, ebx
call fcn.0044248c
push 0
push 0x1d
mov ecx, ebx
call fcn.0044248c
push str.Recovering_Browser_Passwords__Chromium_
mov ecx, ebx
call fcn.0043e752
push 0
push 0x21
mov ecx, ebx
call fcn.0044248c
push str.Recovering_Browser_Passwords__Avast_Secure_
mov ecx, ebx
call fcn.0043e752
push 0
push 0x2c
mov ecx, ebx
call fcn.0044248c
push str.Recovering_Browser_Passwords__AVG_Secure_
mov ecx, ebx
call fcn.0043e752
push 0
push 0x2d
mov ecx, ebx
call fcn.0044248c
push 0
push 0x36
mov ecx, ebx
call fcn.0044248c
push 0
push 0x3b
mov ecx, ebx
call fcn.0044248c
imul eax, dword [ebx + 0x5bc90], 0x32
xor edx, edx
push 0
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_Browser_Passwords__Opera_Neon_
mov ecx, ebx
call fcn.0043e752
push 0
push 0x42
mov ecx, ebx
call fcn.0044248c
push 0
push 0x33
mov ecx, ebx
call fcn.0044248c
push 0
push 0x32
mov ecx, ebx
call fcn.0044248c
push 0
push 0x1f
mov ecx, ebx
call fcn.0044248c
push 0
push 0x27
mov ecx, ebx
call fcn.0044248c
push 0
push 0x38
mov ecx, ebx
call fcn.0044248c
push 0
push 0x31
mov ecx, ebx
call fcn.0044248c
push 0
push 0x3d
mov ecx, ebx
call fcn.0044248c
push 0
push 0x22
mov ecx, ebx
call fcn.0044248c
push 0
push 0x23
mov ecx, ebx
call fcn.0044248c
push 0
push 0x24
mov ecx, ebx
call fcn.0044248c
push 0
push 0x25
mov ecx, ebx
call fcn.0044248c
push 0
push 0x26
mov ecx, ebx
call fcn.0044248c
push 0
push 0x49
mov ecx, ebx
call fcn.0044248c
imul eax, dword [ebx + 0x5bc90], 0x3c
xor edx, edx
push 0
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push 0
push 0x3e
mov ecx, ebx
call fcn.0044248c
push 0
push 0x40
mov ecx, ebx
call fcn.0044248c
push 0
push 0x41
mov ecx, ebx
call fcn.0044248c
push 0x3f
mov ecx, ebx
call fcn.00442d16
push str.Recovering_Browser_Passwords__Brave_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0040bd92
mov ecx, ebx
call fcn.0040bc6b
push str.Recovering_Browser_Passwords__UC_Browser_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0040c15c
push str.Recovering_Browser_Passwords__Tor_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0040e214
push 0x6c5bb9
mov ecx, ebx
call fcn.00440b3a
imul eax, dword [ebx + 0x5bc90], 0x46
xor edx, edx
push 0
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_Browser_Passwords__Comodo_IceDragon_
mov ecx, ebx
call fcn.0043e752
push 0x1b
mov ecx, ebx
call fcn.0040dd6e
push 8
mov ecx, ebx
call fcn.0040dd6e
push str.Recovering_Browser_Passwords__Waterfox_
mov ecx, ebx
call fcn.0043e752
push 0x17
mov ecx, ebx
call fcn.0040dd6e
push 0x20
mov ecx, ebx
call fcn.0040dd6e
push 0x28
mov ecx, ebx
call fcn.0040dd6e
push str.Recovering_Browser_Passwords__Cyberfox_
mov ecx, ebx
call fcn.0043e752
push 0x29
mov ecx, ebx
call fcn.0040dd6e
push 0x2a
mov ecx, ebx
call fcn.0040dd6e
push 0x2b
mov ecx, ebx
call fcn.0040dd6e
push 0x3c
mov ecx, ebx
call fcn.0040dd6e
push 0x44
mov ecx, ebx
call fcn.0040dd6e
imul eax, dword [ebx + 0x5bc90], 0x50
xor edx, edx
push 0
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push 0x6c5bb9
mov ecx, ebx
call fcn.00441107
push edi
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.00441a77
push ecx
mov ecx, ebx
call fcn.0042da6d
xor edi, edi
mov ecx, ebx
push edi
push 0x50
call fcn.0044248c
push str.Recovering_Browser_Passwords__Opera_Crypto_
mov ecx, ebx
call fcn.0043e752
push edi
push 0x4f
mov ecx, ebx
call fcn.0044248c
push edi
push 0x4e
mov ecx, ebx
call fcn.0044248c
imul eax, dword [ebx + 0x5bc90], 0x5a
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push edi
push 0x4d
mov ecx, ebx
call fcn.0044248c
push edi
push 0x4b
mov ecx, ebx
call fcn.0044248c
push edi
push 0x53
mov ecx, ebx
call fcn.0044248c
push edi
push 0x54
mov ecx, ebx
call fcn.0044248c
push edi
push 0x55
mov ecx, ebx
call fcn.0044248c
push str.Recovering_Browser_Passwords__BitTube_
mov ecx, ebx
call fcn.0043e752
push 0x4c
mov ecx, ebx
call fcn.0040dd6e
push 0x4a
mov ecx, ebx
call fcn.0040dd6e
push edi
push 0x2f
mov ecx, ebx
call fcn.0044248c
push edi
push 0x56
mov ecx, ebx
call fcn.0044248c
push edi
push 0x57
mov ecx, ebx
call fcn.0044248c
push edi
push 0x58
mov ecx, ebx
call fcn.0044248c
push edi
push 0x59
mov ecx, ebx
call fcn.0044248c
push edi
push 0x5a
mov ecx, ebx
call fcn.0044248c
push edi
push 0x5b
mov ecx, ebx
call fcn.0044248c
push edi
push 0x5d
mov ecx, ebx
call fcn.0044248c
push str.Recovering_Browser_Passwords__360_Secure_Browser_
mov ecx, ebx
call fcn.0043e752
push edi
push 0x60
mov ecx, ebx
call fcn.0044248c
push 0x5c
mov ecx, ebx
call fcn.0040dd6e
push 0x5e
mov ecx, ebx
call fcn.0040dd6e
push 0x5f
mov ecx, ebx
call fcn.0040dd6e
mov eax, dword [ebx + 0x5bc90]
add dword [ebx + 0x5bc84], eax
push edi
push dword [ebx + 0x5bc84]
push 0x402
push dword [ebx + 0x5d8a0]
call esi
cmp dword [ebx + 0x1b4], edi
je 0x43da99
push str.Recovering_Messenger_Passwords__Google_Talk_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.00424acf
push str.Recovering_Messenger_Passwords__Trillian_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.004251a3
mov ecx, ebx
call fcn.0042806b
imul eax, dword [ebx + 0x5bc94], 0x19
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_Messenger_Passwords__Paltalk_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.00427184
push str.Recovering_Messenger_Passwords__Spark_IM_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.00428662
push str.Recovering_Messenger_Passwords__Windows_Live_Messenger_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.00427e59
mov ecx, ebx
call fcn.00425bb7
push str.Recovering_Messenger_Passwords__Miranda_IM_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.00426798
imul eax, dword [ebx + 0x5bc94], 0x32
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
mov ecx, ebx
call fcn.00427628
push str.Recovering_Messenger_Passwords__Digsby_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.00427adf
push str.Recovering_Messenger_Passwords__Pidgin_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.00425466
mov ecx, ebx
call fcn.00428180
imul eax, dword [ebx + 0x5bc94], 0x4b
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
mov ecx, ebx
call fcn.00428303
push str.Recovering_Messenger_Passwords__Instantbird_
mov ecx, ebx
call fcn.0043e752
push 0x74
mov ecx, ebx
call fcn.0040dd6e
push 0x6c5bb9
mov ecx, ebx
call fcn.00425816
push 0x6c5bb9
mov ecx, ebx
call fcn.0042a6b6
push str.Recovering_Messenger_Passwords__XFire_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0042aaf7
mov eax, dword [ebx + 0x5bc94]
add dword [ebx + 0x5bc84], eax
push edi
push dword [ebx + 0x5bc84]
push 0x402
push dword [ebx + 0x5d8a0]
call esi
cmp dword [ebx + 0x1c0], edi
je 0x43de5b
push str.Recovering_FTP_Passwords__FileZilla_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0041f216
push str.Recovering_FTP_Passwords__SmartFTP_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0041de7a
push str.Recovering_FTP_Passwords__Cyberduck_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0042453c
push str.Recovering_FTP_Passwords__WS_FTP_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.00420be0
push str.Recovering_FTP_Passwords__Core_FTP_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.004209f6
imul eax, dword [ebx + 0x5bc9c], 0x19
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push 0x6c5bb9
mov ecx, ebx
call fcn.0041f754
push str.Recovering_FTP_Passwords__FTPCommander_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0041fc7e
push str.Recovering_FTP_Passwords__WinSCP_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.00421b22
push 0x6c5bb9
mov ecx, ebx
call fcn.00421594
push str.Recovering_FTP_Passwords__SuperPuTTY_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.00420eb7
mov ecx, ebx
call fcn.004205b0
push 0x6c5bb9
mov ecx, ebx
call fcn.0041e10a
push str.Recovering_FTP_Passwords__sFTP_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.004220cb
push str.Recovering_FTP_Passwords__Classic_FTP_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.00421e35
imul eax, dword [ebx + 0x5bc9c], 0x28
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
mov ecx, ebx
call fcn.004225ba
push str.Recovering_FTP_Passwords__AutoFTP_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.00424366
push str.Recovering_FTP_Passwords__FFFTP_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.00422ba5
push str.Recovering_FTP_Passwords__BitKinex_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.00423cda
push str.Recovering_FTP_Passwords__FTPRush_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0041eb6a
push 0x6c5bb9
mov ecx, ebx
call fcn.0041e4f7
push str.Recovering_FTP_Passwords__CuteFTP_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.00423202
push 0x6c5bb9
mov ecx, ebx
call fcn.0042380b
push 0x6c5bb9
mov ecx, ebx
call fcn.00423359
mov ecx, ebx
call fcn.00433b7a
imul eax, dword [ebx + 0x5bc9c], 0x3c
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_FTP_Passwords__Frigate_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0043339b
mov ecx, ebx
call fcn.004330d2
push str.Recovering_FTP_Passwords__FTP_Control_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.00432d3d
push 0x6c5bb9
mov ecx, ebx
call fcn.004322d0
push 0x6c5bb9
mov ecx, ebx
call fcn.00431d66
push str.Recovering_FTP_Passwords__Total_Commander_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0043187f
push 0x6c5bb9
mov ecx, ebx
call fcn.0043119e
push str.Recovering_FTP_Passwords__ExpanDrive_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0042e272
push str.Recovering_FTP_Passwords__Putty_
mov ecx, ebx
call fcn.0043e752
push ecx
mov ecx, ebx
call fcn.0042d614
push 0x6c5bb9
mov ecx, ebx
call fcn.0042d093
push str.Recovering_FTP_Passwords__FileZilla_Server_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0042cc58
push 0x6c5bb9
mov ecx, ebx
call fcn.00430c31
push 0x6c5bb9
mov ecx, ebx
call fcn.00434bd0
imul eax, dword [ebx + 0x5bc9c], 0x50
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push 0x6c5bb9
mov ecx, ebx
call fcn.004346fa
mov ecx, ebx
call fcn.0043453b
push 0x6c5bb9
mov ecx, ebx
call fcn.00433ff3
push 0x6c5bb9
mov ecx, ebx
call fcn.00433c51
push 0x6c5bb9
mov ecx, ebx
call fcn.00436a04
push str.Recovering_FTP_Passwords__CoffeeCup_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.004365d2
mov ecx, ebx
call fcn.0043637f
push str.Recovering_FTP_Passwords__XFTP_
mov ecx, ebx
call fcn.0043e752
push 0x15d
mov ecx, ebx
call fcn.00435ad6
push 0x15e
mov ecx, ebx
call fcn.00435ad6
push 0x6c5bb9
mov ecx, ebx
call fcn.0043c404
mov ecx, ebx
call fcn.0043c855
mov eax, dword [ebx + 0x5bc9c]
add dword [ebx + 0x5bc84], eax
push edi
push dword [ebx + 0x5bc84]
push 0x402
push dword [ebx + 0x5d8a0]
call esi
cmp dword [ebx + 0x1d0], edi
je 0x43de96
push str.Recovering_Wi_Fi_Passwords...
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.00437628
mov eax, dword [ebx + 0x5bcac]
add dword [ebx + 0x5bc84], eax
push edi
push dword [ebx + 0x5bc84]
push 0x402
push dword [ebx + 0x5d8a0]
call esi
cmp dword [ebx + 0x1c8], edi
je 0x43ded1
push str.Recovering_Credential_Manager_Passwords...
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.004127a2
mov eax, dword [ebx + 0x5bca4]
add dword [ebx + 0x5bc84], eax
push edi
push dword [ebx + 0x5bc84]
push 0x402
push dword [ebx + 0x5d8a0]
call esi
cmp dword [ebx + 0x1b8], edi
je 0x43e064
push str.Recovering_Downoader_Passwords__Orbit_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0041b5f9
push str.Recovering_Downoader_Passwords__IDM_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0041cf8c
push 0x6c5bb9
mov ecx, ebx
call fcn.0041cafd
imul eax, dword [ebx + 0x5bc98], 0x19
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_Downoader_Passwords__DAP_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0041d28b
push str.Recovering_Downoader_Passwords__FDM_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0041bf15
push 0x6c5bb9
mov ecx, ebx
call fcn.0041c364
push str.Recovering_Downoader_Passwords__BitComet_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0041ba7d
imul eax, dword [ebx + 0x5bc98], 0x32
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_Downoader_Passwords__FlashGet_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0041d338
push 0x6c5bb9
mov ecx, ebx
call fcn.0041c422
push 0x6c5bb9
mov ecx, ebx
call fcn.0041ac5b
imul eax, dword [ebx + 0x5bc98], 0x4b
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_Downoader_Passwords__Mass_Downloader_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0041afd6
push str.Recovering_Downoader_Passwords__XDM_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0041b3e2
push str.Recovering_Downoader_Passwords__JDownloader_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0042ee3b
mov eax, dword [ebx + 0x5bc98]
add dword [ebx + 0x5bc84], eax
push edi
push dword [ebx + 0x5bc84]
push 0x402
push dword [ebx + 0x5d8a0]
call esi
cmp dword [ebx + 0x1bc], edi
je 0x43e15b
push str.Recovering_Database_Passwords__MySQL_Query_Browser_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.00428917
imul eax, dword [ebx + 0x5bca0], 0x14
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_Database_Passwords__MySQL_Maestro_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0042fa1d
imul eax, dword [ebx + 0x5bca0], 0x3c
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_Database_Passwords__FlameRobin_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
mov ecx, ebx
call fcn.0042fe9a
imul eax, dword [ebx + 0x5bca0], 0x50
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push 0x6c5bb9
mov ecx, ebx
call fcn.004305ba
push str.Recovering_Database_Passwords__Navicat_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0043a8a8
mov eax, dword [ebx + 0x5bca0]
add dword [ebx + 0x5bc84], eax
push edi
push dword [ebx + 0x5bc84]
push 0x402
push dword [ebx + 0x5d8a0]
call esi
cmp dword [ebx + 0x1cc], edi
je 0x43e2ad
push str.Recovering_Windows_System_Secrets__BitLocker_Keys_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0043bfad
imul eax, dword [ebx + 0x5bca8], 0x14
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
call fcn.0040a646
test eax, eax
je 0x43e2ad
lea ecx, [ebp - 0x488]
call fcn.004c72a4
test eax, eax
je 0x43e222
push 0xffffffffffffffff
mov ecx, 0x6c5bb9
lea eax, [ebp - 0x488]
push ecx
push eax
push ecx
push ecx
push ecx
push 0x1fa
push 0xc
mov ecx, ebx
call fcn.0043ee6b
lea ecx, [ebp - 0x488]
call fcn.004c758f
test eax, eax
je 0x43e222
push 0xffffffffffffffff
mov ecx, 0x6c5bb9
lea eax, [ebp - 0x488]
push ecx
push eax
push ecx
push ecx
push ecx
push 0x1fb
push 0xc
mov ecx, ebx
call fcn.0043ee6b
push str.Recovering_Windows_System_Secrets__Windows_User_Passwords_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0043abc5
mov ecx, ebx
call fcn.0043af84
imul eax, dword [ebx + 0x5bca8], 0x3c
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
lea ecx, [ebp - 0x488]
call fcn.004c7454
test eax, eax
je 0x43e287
push 0xffffffffffffffff
mov ecx, 0x6c5bb9
lea eax, [ebp - 0x488]
push ecx
push eax
push ecx
push ecx
push ecx
push 0x1fc
push 0xc
mov ecx, ebx
call fcn.0043ee6b
push str.Recovering_Windows_System_Secrets__LSA_Secrets_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0043b3a3
call dword [sym.imp.ADVAPI32.dll_RevertToSelf]
mov eax, dword [ebx + 0x5bca8]
add dword [ebx + 0x5bc84], eax
push edi
push dword [ebx + 0x5bc84]
push 0x402
push dword [ebx + 0x5d8a0]
call esi
cmp dword [ebx + 0x1c4], edi
je 0x43e457
push str.Recovering_Other_Apps_Passwords__VNC_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0042b31f
imul eax, dword [ebx + 0x5bcb0], 0x19
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push 0x6c5bb9
mov ecx, ebx
call fcn.00428de7
imul eax, dword [ebx + 0x5bcb0], 0x32
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
mov ecx, ebx
call fcn.00429a1e
push 0x6c5bb9
push 0x2d0
mov ecx, ebx
call fcn.0042a4c4
push str.Recovering_Other_Apps_Passwords__PokerStars_
mov ecx, ebx
call fcn.0043e752
push 0x6c5bb9
push 0x2d1
mov ecx, ebx
call fcn.0042a4c4
push str.Recovering_Other_Apps_Passwords__OpenVPN_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0042cb87
push str.Recovering_Windows_Auto_Logon_Passwords...
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0042c574
push str.Recovering_Windows_VPN__Dialup_Passwords...
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0042f43f
imul eax, dword [ebx + 0x5bcb0], 0x4b
xor edx, edx
push edi
push 0x64
pop ecx
div ecx
add eax, dword [ebx + 0x5bc84]
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
mov ecx, ebx
call fcn.004290a6
mov ecx, ebx
call fcn.00429498
mov ecx, ebx
call fcn.00429667
push str.Recovering_Other_Apps_Passwords__Teamviewer_
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.004389f9
push 0x6c5bb9
mov ecx, ebx
call fcn.0043922f
push 0x6c5bb9
mov ecx, ebx
call fcn.00439887
push 0x6c5bb9
mov ecx, ebx
call fcn.00439a7e
push 0x6c5bb9
mov ecx, ebx
call fcn.00439c75
push 0x6c5bb9
mov ecx, ebx
call fcn.00439e6c
push 0x6c5bb9
mov ecx, ebx
call fcn.0043a063
push 0x6c5bb9
mov ecx, ebx
call fcn.0043a2ab
push 0x6c5bb9
mov ecx, ebx
call fcn.0043c9a3
mov eax, dword [ebx + 0x5bcb0]
add dword [ebx + 0x5bc84], eax
push edi
push dword [ebx + 0x5bc84]
push 0x402
push dword [ebx + 0x5d8a0]
call esi
cmp dword [ebx + 0x1a8], edi
je 0x43e498
push str.Starting_Registry_Password_Scanning...
mov ecx, ebx
call fcn.0043e752
push dword [ebx + 0x5bcb8]
mov ecx, ebx
call fcn.0043864f
mov eax, dword [ebx + 0x5bcb8]
add dword [ebx + 0x5bc84], eax
push edi
push dword [ebx + 0x5bc84]
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push str.Recovering_Passwords_from_Custom_Profile_Locations...
mov ecx, ebx
call fcn.0043e752
mov ecx, ebx
call fcn.0040e485
mov eax, dword [ebx + 0x5bcb4]
add dword [ebx + 0x5bc84], eax
push edi
push dword [ebx + 0x5bc84]
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push edi
push 0x64
pop eax
push eax
push 0x402
push dword [ebx + 0x5d8a0]
call esi
push dword [ebx + 0x5bf7c]
mov esi, 0x3e8
lea eax, [ebp - 0x870]
push str.Password_Recovery_Completed._Found__d_Passwords.
push esi
push eax
call fcn.00402e0a
add esp, 0x10
lea eax, [ebp - 0x870]
mov ecx, ebx
push eax
call fcn.0043e752
call dword [ebp - 0x884]
mov eax, dword [ebx + 0x5bf7c]
cmp eax, 1
jb 0x43e55d
push eax
push str.Congratulations____Successfully_recovered__d_Passwords._n_nThis_trial_version_shows_only_first_2_characters_of_password.To_see_full_password__please_purchase_Full_version._n_nWould_you_like_to_check_out_Full_Version_now_
lea eax, [ebp - 0x870]
push esi
push eax
call fcn.00402e0a
add esp, 0x10
lea eax, [ebp - 0x870]
push 0x44
push ecx
push eax
mov ecx, ebx
call fcn.0040bba9
cmp eax, 6
jne 0x43e54f
mov ecx, ebx
call fcn.00409d8a
cmp dword [ebx + 0x5b0a0], edi
je 0x43e55d
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.006122f0
leave
ret