Function at 0x111a5b70
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x494
mov eax, dword [0x11279148]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edi, eax
mov dword [ebp - 0x494], edi
test edi, edi
je 0x111a5d63
push 0x100
lea ecx, [ebp - 0x284]
push ecx
xor eax, eax
push edi
mov word [ebp - 0x284], ax
call dword [sym.imp.USER32.dll_GetWindowTextW]
push 0xffffffffffffffec
push edi
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov esi, eax
push 0x40
lea eax, [ebp - 0x84]
push eax
xor edx, edx
push edi
mov word [ebp - 0x84], dx
call dword [sym.imp.USER32.dll_GetClassNameW]
test eax, eax
je 0x111a5d63
mov ecx, str.NativeHWNDHost
lea eax, [ebp - 0x84]
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x111a5c16
test dx, dx
je 0x111a5c12
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x111a5c16
add eax, 4
add ecx, 4
test dx, dx
jne 0x111a5bf0
xor eax, eax
jmp 0x111a5c1b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x111a5c63
mov ecx, str.Charm_Bar
lea eax, [ebp - 0x284]
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x111a5c56
test dx, dx
je 0x111a5c52
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x111a5c56
add eax, 4
add ecx, 4
test dx, dx
jne 0x111a5c30
xor eax, eax
jmp 0x111a5c5b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x111a5ce5
mov ecx, str.SearchPane
lea eax, [ebp - 0x84]
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x111a5c96
test dx, dx
je 0x111a5c92
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x111a5c96
add eax, 4
add ecx, 4
test dx, dx
jne 0x111a5c70
xor eax, eax
jmp 0x111a5c9b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x111a5ca7
test esi, 0x200000
jne 0x111a5ce5
mov ecx, str.Shell_CharmWindow
lea eax, [ebp - 0x84]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x111a5cd8
test dx, dx
je 0x111a5cd4
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x111a5cd8
add eax, 4
add ecx, 4
test dx, dx
jne 0x111a5cb2
xor eax, eax
jmp 0x111a5cdd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x111a5d63
lea ecx, [ebp - 0x490]
push ecx
push edi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [ebp - 0x490]
push 0x104
lea edx, [ebp - 0x48c]
push edx
push eax
call fcn.111a5b10
add esp, 0xc
test eax, eax
je 0x111a5d63
push str.explorer.exe
push eax
call dword [sym.imp.MSVCR100.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x111a5d63
push str.UI_DismissCharm_n
call fcn.111bd7b0
mov ecx, dword [0x1127b21c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x64]
add esp, 4
push 1
call eax
mov ecx, dword [0x1127b21c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x64]
push 0x81
call eax
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.111d9022
mov esp, ebp
pop ebp
ret
push 0
push 0
push 0xa
call fcn.111bb9f0
add esp, 0xc
test eax, eax
je 0x111a5e78
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ebx, dword [sym.imp.USER32.dll_GetWindow]
push 5
push eax
call ebx
mov esi, eax
test esi, esi
je 0x111a5e77
push 0x40
lea ecx, [ebp - 0x84]
push ecx
push esi
call dword [sym.imp.USER32.dll_GetClassNameW]
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
test al, 8
je 0x111a5e77
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, 0x10000000
je 0x111a5e21
lea edx, [ebp - 0x490]
push edx
push edi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [ebp - 0x490]
push 0x104
lea eax, [ebp - 0x48c]
push eax
push ecx
call fcn.111a5b10
mov edi, eax
add esp, 0xc
test edi, edi
je 0x111a5e1b
push str.explorer.exe
push edi
call dword [sym.imp.MSVCR100.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x111a5e41
push str.ShellExperienceHost.exe
push edi
call dword [sym.imp.MSVCR100.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x111a5e41
mov edi, dword [ebp - 0x494]
push 2
push esi
call ebx
mov esi, eax
test esi, esi
jne 0x111a5d95
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.111d9022
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x84]
push edx
push edi
push str.UI_DismissTopMost__s___s__n
call fcn.111bd7b0
mov ecx, dword [0x1127b21c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x64]
add esp, 0xc
push 1
call edx
mov ecx, dword [0x1127b21c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x64]
push 0x81
call edx
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.111d9022
mov esp, ebp
pop ebp
ret