Function at 0x40897c
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
push 0x1c
call fcn.0040a7ca
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
add ebx, 0x10
push ebx
push 0xe
call fcn.0040a7ca
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x44b72c
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 6
rep stosb byte es:[edi], al
push 0x18
call fcn.0040a7ca
add esp, 4
mov dword [ebp - 0x20], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 6
rep stosd dword es:[edi], eax
add ebx, 0x10
push ebx
push 0x10
call fcn.0040a7ca
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x44b734
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x10
call fcn.0040a7ca
add esp, 4
mov dword [ebp - 0x24], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0x34
call fcn.0040a7ca
add esp, 4
mov dword [ebp - 0x28], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 0xd
rep stosd dword es:[edi], eax
add ebx, 0x18
push ebx
push 0x88
call fcn.0040a7ca
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x44b73c
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x20
rep stosd dword es:[edi], eax
add ebx, 0xc
push ebx
push 0x108
call fcn.0040a7ca
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x44b744
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x40
rep stosd dword es:[edi], eax
add ebx, 8
push ebx
push 0x48
call fcn.0040a7ca
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x44b74c
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x10
rep stosd dword es:[edi], eax
push 0
push 0
push 0x418
push dword [ebp + 8]
xor eax, eax
call dword [sym.imp.USER32.dll_SendMessageA]
nop
nop
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jle 0x40928f
lea eax, [ebp - 8]
push eax
push dword [ebp + 8]
xor eax, eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
nop
nop
cmp dword [ebp - 8], 0
jle 0x40928f
push dword [ebp - 8]
push 0
push 0x1f0fff
xor eax, eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
nop
nop
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x40928f
push 4
push 0x1000
mov eax, 0x1000
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
nop
nop
mov dword [ebp - 0x10], eax
push 0x80000301
push 0
push 0x400
push 1
mov ebx, 0x1bc
call fcn.0040ba30
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x408bbe
push ebx
call fcn.0040a7d0
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
fild dword [ebp - 4]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fsub qword [0x44b576]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.0040113f
push eax
lea eax, [ebp - 0x18]
mov ebx, eax
pop ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 0
jl 0x40902f
push dword [ebp - 0x10]
push dword [ebp - 0x18]
push 0x417
push dword [ebp + 8]
xor eax, eax
call dword [sym.imp.USER32.dll_SendMessageA]
nop
nop
mov eax, 0
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 0x18
mov eax, dword [ebp - 0x1c]
push eax
push 0x18
call fcn.0040a7ca
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov byte [edi], al
inc edi
mov eax, dword [ebx]
add ebx, 4
mov byte [edi], al
inc edi
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 6
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push dword [ebp - 0x10]
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
nop
push eax
mov ebx, dword [ebp - 0x30]
push ebx
mov edi, dword [ebp - 0x34]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov al, byte [ebx]
inc ebx
mov dword [edi], eax
add edi, 4
mov al, byte [ebx]
inc ebx
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.0040ac80
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x408ced
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x408ceb
imul eax, dword [edi]
jmp 0x408ce0
mov ecx, eax
cmp ecx, 6
jle 0x408cf7
mov ecx, 6
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 6
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.0040a7d0
add esp, 4
pop eax
mov ebx, dword [ebp - 0x1c]
add ebx, 0x14
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
cmp dword [ebx], 0xffffffff
je 0x409027
mov ebx, dword [ebp - 0x1c]
add ebx, 0x14
mov dword [ebp - 0x2c], ebx
mov eax, 0
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x400
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x408d59
add eax, 8
push eax
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
nop
mov ebx, dword [ebp - 0x1c]
add ebx, 0x14
mov dword [ebp - 0x2c], ebx
mov eax, 0
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x18
mov eax, dword [ebp - 0x20]
push eax
push 0x1c
call fcn.0040a7ca
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 2
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
nop
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 4
mov eax, 2
call fcn.0040ac80
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x408e5a
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x408e58
imul eax, dword [edi]
jmp 0x408e4d
mov ecx, eax
cmp ecx, 2
jle 0x408e64
mov ecx, 2
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
pop edi
pop ebx
add edi, 4
add ebx, 8
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.0040a7d0
add esp, 4
pop eax
mov ebx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x2c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
push dword [ebx]
xor eax, eax
call dword [sym.imp.USER32.dll_IsWindow]
nop
nop
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jne 0x408ed5
push 1
push dword [ebp - 0x18]
push 0x416
push dword [ebp + 8]
xor eax, eax
call dword [sym.imp.USER32.dll_SendMessageA]
nop
nop
mov ebx, dword [ebp - 0x24]
add ebx, 4
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x1c]
add ebx, 4
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x2c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x24]
add ebx, 8
mov dword [ebp - 0x2c], ebx
fild dword [0x44bbff]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
fadd qword [0x44b71c]
fstp qword [ebp - 0x3c]
push 0x80000301
push 0
push 0x208
fld qword [ebp - 0x3c]
call fcn.0040113f
push 0x80000301
push 0
push eax
push VariantCopy
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x408f3e
mov eax, 0x4282b0
push eax
push 3
mov ebx, 0x1a8
call fcn.0040c150
add esp, 0x28
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
call fcn.00403cb8
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x408f70
push ebx
call fcn.0040a7d0
add esp, 4
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x2c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x408f86
push ebx
call fcn.0040a7d0
add esp, 4
pop eax
mov ebx, dword [ebp - 0x2c]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x24]
add ebx, 0xc
mov dword [ebp - 0x2c], ebx
fild dword [0x44bbff]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
fadd qword [0x44b724]
fstp qword [ebp - 0x3c]
push 0x80000301
push 0
push 0x104
fld qword [ebp - 0x3c]
call fcn.0040113f
push 0x80000301
push 0
push eax
push VariantCopy
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x408fd9
mov eax, 0x4282b0
push eax
push 3
mov ebx, 0x1a8
call fcn.0040c150
add esp, 0x28
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
call fcn.00403cb8
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x40900b
push ebx
call fcn.0040a7d0
add esp, 4
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x2c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x409021
push ebx
call fcn.0040a7d0
add esp, 4
pop eax
mov ebx, dword [ebp - 0x2c]
mov dword [ebx], eax
pop ebx
pop ecx
dec ecx
jmp 0x408be3
add esp, 8
push 0x8000
mov eax, 0x1000
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x10]
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
nop
nop
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
mov ebx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x2c]
mov dword [ebx], 0x1e8
mov eax, dword [ebp - 0x28]
push eax
push 0x1e8
call fcn.0040a7ca
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x80
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x40
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push 2
xor eax, eax
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
nop
nop
push eax
mov ebx, dword [ebp - 0x2c]
push ebx
mov edi, dword [ebp - 0x30]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.0040ac80
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x4091b2
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x4091b0
imul eax, dword [edi]
jmp 0x4091a5
mov ecx, eax
cmp ecx, 0x80
jle 0x4091bf
mov ecx, 0x80
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x80
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.0040ac80
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x409211
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x40920f
imul eax, dword [edi]
jmp 0x409204
mov ecx, eax
cmp ecx, 0x100
jle 0x40921e
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.0040ac80
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x409266
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x409264
imul eax, dword [edi]
jmp 0x409259
mov ecx, eax
cmp ecx, 0x40
jle 0x409270
mov ecx, 0x40
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x40
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.0040a7d0
add esp, 4
pop eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40929f
push ebx
call fcn.0040a7d0
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
add ebx, 0x10
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.0040a7d0
add esp, 4
pop ebx
call fcn.0040a7d0
add esp, 4
mov ebx, dword [ebp - 0x20]
push ebx
add ebx, 0x10
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.0040a7d0
add esp, 4
pop ebx
call fcn.0040a7d0
add esp, 4
mov ebx, dword [ebp - 0x24]
push ebx
add ebx, 8
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4092ee
push ebx
call fcn.0040a7d0
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x409302
push ebx
call fcn.0040a7d0
add esp, 4
pop ebx
call fcn.0040a7d0
add esp, 4
mov ebx, dword [ebp - 0x28]
push ebx
add ebx, 0x18
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.0040a7d0
add esp, 4
pop ebx
add ebx, 0xc
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.0040a7d0
add esp, 4
pop ebx
add ebx, 8
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.0040a7d0
add esp, 4
pop ebx
call fcn.0040a7d0
add esp, 4
mov esp, ebp
pop ebp
ret 4