Function at 0x40c3e4
Capabilities:
Get graphical window text

Disassembly:
push 0x394
mov eax, 0x43a764
call fcn.00438b4c
mov esi, ecx
xor ebx, ebx
push ebx
mov dword [ebp - 0x394], ebx
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.004074bf
test al, al
jne 0x40cbea
lea ecx, [ebp - 0x280]
call fcn.00411a4d
mov edx, eax
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x3a0]
call fcn.004112dd
push ebx
push 1
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 2
call fcn.004040a2
mov eax, dword [ebp - 0x39c]
lea ecx, [ebp - 0x2b0]
mov edx, dword [ebp - 0x3a0]
sub eax, edx
push ebx
push eax
call fcn.0040f0e4
pop ecx
pop ecx
lea ecx, [ebp - 0x390]
mov dword [ebp - 0x390], ebx
mov dword [ebp - 0x38c], ebx
call fcn.00414388
push ecx
mov byte [ebp - 4], 4
lea eax, [ebp - 0x2b0]
cmp dword [ebp - 0x29c], 0x10
push ecx
push dword [ebp - 0x2a0]
cmovae eax, dword [ebp - 0x2b0]
lea ecx, [ebp - 0x390]
push eax
lea eax, [ebp - 0x22c]
push eax
call fcn.00414450
cmp dword [ebp - 0x22c], ebx
jne 0x40c54d
push ecx
push ecx
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x390]
call fcn.00418854
cmp dword [eax + 4], ebx
je 0x40c4d1
mov eax, ebx
jmp 0x40c4d3
mov eax, dword [eax]
lea ecx, [ebp - 0x394]
mov dword [ebp - 0x394], eax
call fcn.0041434d
test eax, eax
je 0x40c4ef
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x40c4f4
mov eax, 0x447b78
push eax
lea ecx, [ebp - 0x250]
call fcn.00404073
lea edx, [ebp - 0x250]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x280]
call fcn.0040566e
mov ecx, 0x453954
mov byte [ebp - 4], 6
cmp eax, ecx
je 0x40c52b
push 0xffffffffffffffff
push ebx
push eax
call fcn.004046a9
push ebx
push 1
lea ecx, [ebp - 0x280]
call fcn.004040a2
push ebx
push 1
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.004041c8
jmp 0x40c559
mov dl, 1
mov ecx, 0x448f7c
call fcn.004051eb
cmp byte [esi + 0x154], 0
je 0x40c5a2
lea ecx, [ebp - 0x280]
call fcn.00411ffc
push 0
push 1
lea ecx, [ebp - 0x280]
cmp dword [eax + 0x10], ebx
sete al
test al, al
sete bl
call fcn.004040a2
test bl, bl
je 0x40c596
mov ecx, dword [esi + 0x13c]
call fcn.00412d9a
mov ecx, esi
call fcn.0040cdae
jmp 0x40cbbf
push 0x105
lea eax, [ebp - 0x220]
push eax
push 0xa
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov ecx, esi
call fcn.0040cdee
test al, al
jne 0x40c5d4
call fcn.00405f6e
test al, al
je 0x40c607
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x250]
call fcn.00404015
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 7
call fcn.00406ec9
push ebx
push 1
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.004040a2
lea eax, [esi + 0x48]
push eax
lea edx, [esi + 0x158]
lea ecx, [ebp - 0x268]
call fcn.00406830
pop ecx
mov byte [ebp - 4], 8
cmp dword [ebp - 0x258], 0
sete al
test al, al
jne 0x40c6a8
lea ecx, [ebp - 0x268]
call fcn.004061b9
test al, al
je 0x40c6a8
mov eax, dword [esi + 0x13c]
cmp dword [eax], ebx
je 0x40c6a8
mov edi, str..torrent
push edi
call fcn.00403808
pop ecx
push eax
push ecx
push edi
lea ecx, [ebp - 0x268]
call fcn.004075ad
cmp eax, 0xffffffff
jne 0x40c6a8
mov edi, str..tor
push edi
call fcn.00403808
pop ecx
push eax
push ecx
push edi
lea ecx, [ebp - 0x268]
call fcn.004075ad
cmp eax, 0xffffffff
jne 0x40c6a8
call fcn.00405f6e
test al, al
jne 0x40c6a8
cmp dword [ebp - 0x254], 8
lea ecx, [ebp - 0x268]
cmovae ecx, dword [ebp - 0x268]
call fcn.00406990
mov ecx, dword [esi + 0x13c]
call fcn.00412d9a
lea ecx, [ebp - 0x280]
call fcn.00411ffc
lea ecx, [ebp - 0x280]
cmp dword [eax + 0x10], ebx
sete bl
xor edi, edi
push edi
push 1
call fcn.004040a2
test bl, bl
je 0x40c716
mov ecx, esi
call fcn.0040cdae
push edi
push 1
lea ecx, [ebp - 0x268]
call fcn.004040a2
lea ecx, [ebp - 0x390]
call fcn.004143f8
push edi
push 1
lea ecx, [ebp - 0x2b0]
call fcn.004041c8
lea ecx, [ebp - 0x3a0]
call fcn.0040cf44
jmp 0x40cc07
call fcn.004074bf
test al, al
jne 0x40cbb0
call fcn.004074bf
test al, al
jne 0x40cbb0
xor eax, eax
mov dword [ebp - 0x224], 7
mov dword [ebp - 0x228], edi
mov word [ebp - 0x238], ax
mov byte [ebp - 4], 9
mov edi, dword [sym.imp.USER32.dll_IsDlgButtonChecked]
push 0xc
push dword [esi + 4]
call edi
test eax, eax
je 0x40c777
mov ebx, str._YAHOMEPAGEy_YAQSEARCHy
push ebx
call fcn.00403808
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x238]
call fcn.00405422
push 0xd
push dword [esi + 4]
call edi
test eax, eax
je 0x40c79b
mov ebx, str._YABROWSERy_YBDEFAULTy
push ebx
call fcn.00403808
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x238]
call fcn.00405422
push 0xe
push dword [esi + 4]
call edi
test eax, eax
je 0x40c7bf
mov ebx, str._YABMy
push ebx
call fcn.00403808
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x238]
call fcn.00405422
cmp dword [ebp - 0x228], 0
sete al
test al, al
jne 0x40c9e4
cmp dword [ebp - 0x224], 8
lea ecx, [ebp - 0x238]
lea eax, [ebp - 0x238]
cmovae ecx, dword [ebp - 0x238]
cmovae eax, dword [ebp - 0x238]
xor ebx, ebx
sub ecx, eax
inc ebx
sar ecx, 1
push ebx
push ecx
lea ecx, [ebp - 0x238]
call fcn.004049d1
lea eax, [ebp - 0x238]
mov edx, str.__partner_350760___distr__passive__msicl__
push eax
lea ecx, [ebp - 0x298]
call fcn.0040764b
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x280]
mov edx, eax
mov dword [esp], str._VID40_
call fcn.0040531a
pop ecx
push eax
lea ecx, [ebp - 0x238]
call fcn.00403f9f
push 0
push ebx
lea ecx, [ebp - 0x280]
call fcn.004040a2
push 0
push ebx
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 9
call fcn.004040a2
push ecx
xor edx, edx
lea ecx, [ebp - 0x250]
call fcn.00406d6e
mov byte [ebp - 4], 0xb
mov ecx, dword [esi + 0x140]
mov dword [esp], str.pp9b9
call fcn.00405a91
mov ecx, dword [esi + 0x140]
call fcn.00405b27
push 0x447490
lea ecx, [ebp - 0x298]
call fcn.00404015
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2c8]
push str.http:__download.yandex.ru_yandex_pack_downloader_downloader.exe
mov dword [ebp - 0x394], ebx
call fcn.00404015
lea eax, [ebp - 0x298]
mov dword [ebp - 4], 0xd
push eax
lea edx, [ebp - 0x250]
mov dword [ebp - 0x394], 3
lea ecx, [ebp - 0x2c8]
call fcn.004113b7
pop ecx
test al, al
je 0x40c906
cmp dword [ebp - 0x23c], 8
lea ecx, [ebp - 0x250]
cmovae ecx, dword [ebp - 0x250]
call fcn.00407406
test al, al
jne 0x40c908
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0x2c8]
call fcn.004040a2
push 0
push 1
lea ecx, [ebp - 0x298]
mov dword [ebp - 4], 0xb
call fcn.004040a2
test bl, bl
je 0x40c99b
mov ecx, dword [esi + 0x140]
push str.dp9b9
call fcn.00405a91
mov ecx, dword [esi + 0x140]
call fcn.00405b27
mov ecx, dword [esi + 0x140]
push str.rp9b9
call fcn.00405a91
mov ecx, dword [esi + 0x140]
call fcn.00405b27
push 0x927c0
lea edx, [ebp - 0x238]
lea ecx, [ebp - 0x250]
call fcn.00407363
pop ecx
test al, al
jne 0x40c989
mov ecx, 0x449100
jmp 0x40c9a0
mov ecx, dword [esi + 0x140]
push str.ip9b9
call fcn.00405a91
jmp 0x40c9a7
mov ecx, 0x449110
mov dl, 1
call fcn.004051eb
mov ecx, dword [esi + 0x140]
call fcn.00405b27
and dword [ebp - 0x228], 0
lea eax, [ebp - 0x238]
cmp dword [ebp - 0x224], 8
cmovae eax, dword [ebp - 0x238]
xor ecx, ecx
push ecx
push 1
mov byte [ebp - 4], 9
mov word [eax], cx
lea ecx, [ebp - 0x250]
call fcn.004040a2
push 0xf
push dword [esi + 4]
call edi
test eax, eax
je 0x40ca08
mov edi, str._S__av360
push edi
call fcn.00403808
pop ecx
push eax
push edi
lea ecx, [ebp - 0x238]
call fcn.00405422
cmp dword [ebp - 0x228], 0
sete al
test al, al
jne 0x40cba1
xor edx, edx
push ecx
inc edx
lea ecx, [ebp - 0x250]
call fcn.00406d6e
mov byte [ebp - 4], 0xe
mov ecx, dword [esi + 0x140]
mov dword [esp], str.pp13b13
call fcn.00405a91
mov ecx, dword [esi + 0x140]
call fcn.00405b27
push 0x447490
lea ecx, [ebp - 0x2c8]
call fcn.00404015
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x298]
push str.http:__int.down.360safe.com_totalsecurity_360TS_Setup_RU_ITORRENT_001_8.6.0.1158.exe
mov dword [ebp - 0x394], 4
call fcn.00404015
lea eax, [ebp - 0x2c8]
mov dword [ebp - 4], 0x10
push eax
lea edx, [ebp - 0x250]
mov dword [ebp - 0x394], 0xc
lea ecx, [ebp - 0x298]
call fcn.004113b7
pop ecx
test al, al
je 0x40cac7
cmp dword [ebp - 0x23c], 8
lea ecx, [ebp - 0x250]
cmovae ecx, dword [ebp - 0x250]
call fcn.00407406
test al, al
je 0x40cac7
mov bl, 1
jmp 0x40cac9
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0x298]
call fcn.004040a2
push 0
push 1
lea ecx, [ebp - 0x2c8]
mov dword [ebp - 4], 0xe
call fcn.004040a2
test bl, bl
je 0x40cb5c
mov ecx, dword [esi + 0x140]
push str.dp13b13
call fcn.00405a91
mov ecx, dword [esi + 0x140]
call fcn.00405b27
mov ecx, dword [esi + 0x140]
push str.rp13b13
call fcn.00405a91
mov ecx, dword [esi + 0x140]
call fcn.00405b27
push 0x927c0
lea edx, [ebp - 0x238]
lea ecx, [ebp - 0x250]
call fcn.00407363
pop ecx
test al, al
jne 0x40cb4a
mov ecx, 0x449100
jmp 0x40cb61
mov ecx, dword [esi + 0x140]
push str.ip13b13
call fcn.00405a91
jmp 0x40cb68
mov ecx, 0x449110
mov dl, 1
call fcn.004051eb
mov ecx, dword [esi + 0x140]
call fcn.00405b27
and dword [ebp - 0x228], 0
lea eax, [ebp - 0x238]
cmp dword [ebp - 0x224], 8
cmovae eax, dword [ebp - 0x238]
xor ecx, ecx
push ecx
push 1
mov word [eax], cx
lea ecx, [ebp - 0x250]
call fcn.004040a2
push 0
push 1
lea ecx, [ebp - 0x238]
call fcn.004040a2
push 0
push 1
lea ecx, [ebp - 0x268]
call fcn.004040a2
lea ecx, [ebp - 0x390]
call fcn.004143f8
push 0
push 1
lea ecx, [ebp - 0x2b0]
call fcn.004041c8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a0]
call fcn.0040cf44
jmp 0x40cc00
mov ecx, dword [esi + 0x140]
call fcn.00405b27
mov ecx, dword [esi + 0x13c]
call fcn.00412d9a
mov ecx, esi
call fcn.0040cdae
call fcn.00438b07
ret