Function at 0x4080e0
Capabilities:
Get graphical window text
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x442fac
mov eax, dword fs:[0]
push eax
mov eax, 0x2128
call fcn.00425cd0
mov eax, dword [0x45a024]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor ecx, ecx
push 0xffe
push ecx
lea edx, [ebp - 0x1012]
push edx
mov dword [ebp - 0x2120], eax
mov word [ebp - 0x1014], cx
call fcn.004212c0
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 0xc
mov dword [ebp - 0x2124], 0
mov eax, dword [ebp - 0x2124]
mov ecx, eax
inc eax
mov dword [ebp - 0x2124], eax
cmp ecx, 0xa
jge 0x408645
push 0x64
call esi
mov eax, dword [ebp - 0x2120]
mov ecx, dword [eax]
lea edx, [ebp - 0x1014]
push edx
push 0x800
push 0xd
push ecx
call edi
lea edx, [ebp - 0x1014]
push edx
call ebx
test eax, eax
je 0x408155
lea eax, [ebp - 0x2128]
push eax
push 1
xor ebx, ebx
push ebx
push str.SoftwareMicrosoftInternet_ExplorerMain
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea ecx, [ebp - 0x2130]
push ecx
mov ecx, dword [ebp - 0x2128]
lea edx, [ebp - 0x2014]
push edx
lea eax, [ebp - 0x212c]
push eax
push ebx
push str.Start_Page
push ecx
mov dword [ebp - 0x212c], 1
mov dword [ebp - 0x2130], 0x1000
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edx, dword [ebp - 0x2128]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, 7
xor eax, eax
mov dword [ebp - 0x2084], edi
mov dword [ebp - 0x2088], ebx
mov word [ebp - 0x2098], ax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x207c], ebx
mov dword [ebp - 0x2078], ebx
mov dword [ebp - 0x2074], ebx
lea eax, [ebp - 0x2014]
mov byte [ebp - 4], 1
lea edx, [eax + 2]
jmp 0x408240
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x408240
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x2014]
lea esi, [ebp - 0x2098]
call fcn.00404070
push 0x44f581
lea ecx, [ebp - 0x2040]
push ecx
mov dword [ebp - 4], 2
call fcn.00407690
xor edx, edx
mov dword [ebp - 0x2058], edi
mov dword [ebp - 0x205c], ebx
mov word [ebp - 0x206c], dx
mov dword [ebp - 0x2050], ebx
mov dword [ebp - 0x204c], ebx
mov dword [ebp - 0x2048], ebx
lea eax, [ebp - 0x1014]
mov byte [ebp - 4], 5
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4082b0
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x1014]
lea esi, [ebp - 0x206c]
call fcn.00404070
mov byte [ebp - 4], 6
cmp dword [ebp - 0x2084], 8
mov ecx, dword [ebp - 0x2098]
jae 0x4082ea
lea ecx, [ebp - 0x2098]
mov eax, dword [ebp - 0x206c]
mov esi, 8
cmp dword [ebp - 0x2058], esi
jae 0x408303
lea eax, [ebp - 0x206c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x408329
cmp dx, bx
je 0x408325
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x408329
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x408303
xor eax, eax
jmp 0x40832e
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x408652
mov edx, dword [ebp - 0x2098]
cmp dword [ebp - 0x2084], esi
jae 0x40834a
lea edx, [ebp - 0x2098]
mov eax, edx
lea esi, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x408350
sub eax, esi
sar eax, 1
push eax
push edx
lea eax, [ebp - 0x206c]
push eax
xor eax, eax
call fcn.004071d0
cmp eax, 0xffffffff
jne 0x40864d
xor ecx, ecx
mov dword [ebp - 0x20b0], edi
mov dword [ebp - 0x20b4], ebx
mov word [ebp - 0x20c4], cx
mov dword [ebp - 0x20a8], ebx
mov dword [ebp - 0x20a4], ebx
mov dword [ebp - 0x20a0], ebx
mov byte [ebp - 4], 7
mov esi, dword [ebp - 0x202c]
mov edi, dword [ebp - 0x2040]
nop
mov eax, edi
cmp esi, 8
jae 0x4083bd
lea eax, [ebp - 0x2040]
mov ecx, eax
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x4083c2
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [ebp - 0x20c4]
call fcn.00404070
lea edx, [ebp - 0x2040]
push edx
mov ecx, 0x44f581
call fcn.00407830
lea eax, [ebp - 0x2040]
push eax
sub esp, 0x2c
mov esi, esp
xor ecx, ecx
mov dword [ebp - 0x2120], esp
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], ebx
mov dword [ebp - 0x2120], esi
mov word [esi], cx
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], ebx
mov byte [ebp - 4], 9
cmp dword [ebp - 0x2084], 8
mov eax, dword [ebp - 0x2098]
jae 0x408437
lea eax, [ebp - 0x2098]
mov ecx, eax
lea edi, [ecx + 2]
lea esp, [esp]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x408440
sub ecx, edi
sar ecx, 1
push ecx
call fcn.00404070
mov byte [ebp - 4], 7
call fcn.00407c50
add esp, 0x30
cmp dword [ebp - 0x2030], ebx
je 0x4084ca
cmp dword [ebp - 0x20b0], 8
mov ecx, dword [ebp - 0x20c4]
jae 0x40847e
lea ecx, [ebp - 0x20c4]
mov esi, dword [ebp - 0x202c]
mov edi, dword [ebp - 0x2040]
mov eax, edi
cmp esi, 8
jae 0x408497
lea eax, [ebp - 0x2040]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4084bd
cmp dx, bx
je 0x4084b9
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4084bd
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x408497
xor eax, eax
jmp 0x4084c2
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x4083b0
mov eax, dword [ebp - 0x20c4]
mov edi, 8
cmp dword [ebp - 0x20b0], edi
jae 0x4084e3
lea eax, [ebp - 0x20c4]
mov ecx, eax
lea esi, [ecx + 2]
jmp 0x4084f0
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x4084f0
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [ebp - 0x2040]
call fcn.00404070
lea edx, [ebp - 0x2014]
push edx
lea eax, [ebp - 0x211c]
push eax
call fcn.00407780
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x2040]
cmp dword [ebp - 0x202c], edi
jae 0x408532
mov ecx, esi
lea eax, [ebp - 0x206c]
call fcn.00407930
test al, al
jne 0x4085a9
push 1
push 0x44f8ec
lea ecx, [ebp - 0x206c]
push ecx
xor eax, eax
call fcn.004071d0
cmp eax, 0xffffffff
je 0x40860e
dec eax
push eax
push ebx
lea edx, [ebp - 0x206c]
push edx
lea edi, [ebp - 0x20f0]
call fcn.00407ae0
mov esi, dword [ebp - 0x20dc]
mov edi, dword [ebp - 0x20f0]
mov edx, edi
cmp esi, 8
jae 0x40858d
lea edx, [ebp - 0x20f0]
lea eax, [ebp - 0x211c]
push eax
call fcn.00407980
cmp eax, 0xffffffff
je 0x4085e5
lea esi, [ebp - 0x20f0]
call fcn.004013a0
lea esi, [ebp - 0x211c]
call fcn.004013a0
lea esi, [ebp - 0x20c4]
call fcn.004013a0
lea esi, [ebp - 0x206c]
call fcn.004013a0
lea esi, [ebp - 0x2040]
call fcn.004013a0
lea esi, [ebp - 0x2098]
call fcn.004013a0
jmp 0x408730
mov edx, edi
cmp esi, 8
jae 0x4085f2
lea edx, [ebp - 0x20f0]
lea ecx, [ebp - 0x2040]
push ecx
call fcn.00407980
lea esi, [ebp - 0x20f0]
cmp eax, 0xffffffff
jne 0x4085a4
call fcn.004013a0
lea esi, [ebp - 0x211c]
call fcn.004013a0
lea esi, [ebp - 0x20c4]
call fcn.004013a0
lea esi, [ebp - 0x206c]
call fcn.004013a0
lea esi, [ebp - 0x2040]
call fcn.004013a0
lea esi, [ebp - 0x2098]
call fcn.004013a0
or eax, 0xffffffff
jmp 0x408732
mov esi, 8
mov eax, dword [ebp - 0x2050]
cmp eax, ebx
je 0x408665
push eax
call fcn.0041afda
add esp, 4
mov dword [ebp - 0x2050], ebx
mov dword [ebp - 0x204c], ebx
mov dword [ebp - 0x2048], ebx
cmp dword [ebp - 0x2058], esi
jb 0x40868e
mov edx, dword [ebp - 0x206c]
push edx
call fcn.0041afda
add esp, 4
xor eax, eax
mov word [ebp - 0x206c], ax
mov eax, dword [ebp - 0x2024]
mov dword [ebp - 0x2058], edi
mov dword [ebp - 0x205c], ebx
cmp eax, ebx
je 0x4086b6
push eax
call fcn.0041afda
add esp, 4
mov dword [ebp - 0x2024], ebx
mov dword [ebp - 0x2020], ebx
mov dword [ebp - 0x201c], ebx
cmp dword [ebp - 0x202c], esi
jb 0x4086df
mov ecx, dword [ebp - 0x2040]
push ecx
call fcn.0041afda
add esp, 4
mov eax, dword [ebp - 0x207c]
xor edx, edx
mov dword [ebp - 0x202c], edi
mov dword [ebp - 0x2030], ebx
mov word [ebp - 0x2040], dx
cmp eax, ebx
je 0x408707
push eax
call fcn.0041afda
add esp, 4
mov dword [ebp - 0x207c], ebx
mov dword [ebp - 0x2078], ebx
mov dword [ebp - 0x2074], ebx
cmp dword [ebp - 0x2084], esi
jb 0x408730
mov eax, dword [ebp - 0x2098]
push eax
call fcn.0041afda
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041af7a
mov esp, ebp
pop ebp
ret