Function at 0x40c291
Capabilities:
Get graphical window text

Disassembly:
push 0x134
mov eax, 0x414ea4
call fcn.00411c50
mov edi, ecx
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
xor eax, eax
mov dword [ebp - 0x14], 7
push eax
push 0x104
mov word [ebp - 0x28], ax
call fcn.004025bc
and dword [ebp - 4], 0
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 8
jb 0x40c2d1
mov eax, dword [ebp - 0x28]
push dword [ebp - 0x18]
mov esi, dword [sym.imp.USER32.dll_GetWindowTextW]
push eax
push dword [edi + 0x30]
call esi
lea ecx, [ebp - 0x28]
cmp eax, dword [ebp - 0x18]
ja 0x40c2fc
cmp dword [ebp - 0x14], 8
jb 0x40c2f1
mov ecx, dword [ebp - 0x28]
xor edx, edx
mov dword [ebp - 0x18], eax
mov word [ecx + eax*2], dx
jmp 0x40c307
sub eax, dword [ebp - 0x18]
push 0
push eax
call fcn.00402561
xor eax, eax
push eax
push eax
push 0xf0
push dword [edi + 0x34]
mov byte [ebp - 0xa9], al
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
jne 0x40c32a
mov byte [ebp - 0xa9], al
and dword [ebp - 0x50], 0
lea ecx, [ebp - 0x60]
xor eax, eax
mov dword [ebp - 0x4c], 7
push eax
push 0x104
mov word [ebp - 0x60], ax
call fcn.004025bc
cmp dword [ebp - 0x4c], 8
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 1
jb 0x40c359
mov eax, dword [ebp - 0x60]
push dword [ebp - 0x50]
push eax
push dword [edi + 0x38]
call esi
lea ecx, [ebp - 0x60]
cmp eax, dword [ebp - 0x50]
ja 0x40c37e
cmp dword [ebp - 0x4c], 8
jb 0x40c373
mov ecx, dword [ebp - 0x60]
xor edx, edx
mov dword [ebp - 0x50], eax
mov word [ecx + eax*2], dx
jmp 0x40c389
sub eax, dword [ebp - 0x50]
push 0
push eax
call fcn.00402561
cmp dword [ebp - 0x4c], 8
lea eax, [ebp - 0x60]
jb 0x40c395
mov eax, dword [ebp - 0x60]
push eax
push 0x416364
call sub.msvcrt.dll__wcsicmp
pop ecx
pop ecx
test eax, eax
jne 0x40c3fb
sub esp, 0x18
mov ecx, esp
push dword [0x41e01c]
call fcn.00407aa6
lea eax, [ebp - 0x90]
mov ecx, 0x41e860
push eax
call fcn.0040986a
cmp dword [ebp - 0x7c], 8
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 2
jb 0x40c3dd
mov eax, dword [ebp - 0x90]
push eax
mov eax, dword [0x41e8b0]
push dword [edi + 4]
push dword [eax]
call fcn.0040b92b
add esp, 0xc
lea ecx, [ebp - 0x90]
jmp 0x40c8ce
and dword [ebp - 0x68], 0
lea ecx, [ebp - 0x78]
xor eax, eax
mov dword [ebp - 0x64], 7
push str.NSudo__ShowWindowModeHide
mov word [ebp - 0x78], ax
call fcn.00402607
cmp dword [ebp - 0x14], 8
lea esi, [ebp - 0x28]
mov byte [ebp - 4], 3
jb 0x40c429
mov esi, dword [ebp - 0x28]
sub esp, 0x18
mov ecx, esp
push 2
and dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x416d58
mov byte [ecx], 0
call fcn.0040dd49
lea eax, [ebp - 0x48]
mov ecx, 0x41e860
push eax
call fcn.0040986a
cmp dword [eax + 0x14], 8
jb 0x40c45e
mov eax, dword [eax]
push esi
push eax
call sub.msvcrt.dll__wcsicmp
pop ecx
pop ecx
lea ecx, [ebp - 0x48]
mov esi, eax
call fcn.004024e1
test esi, esi
jne 0x40c47f
push str.__U:T
jmp 0x40c59d
cmp dword [ebp - 0x14], 8
lea esi, [ebp - 0x28]
jb 0x40c48b
mov esi, dword [ebp - 0x28]
sub esp, 0x18
mov ecx, esp
push 6
and dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.System
mov byte [ecx], 0
call fcn.0040dd49
lea eax, [ebp - 0x48]
mov ecx, 0x41e860
push eax
call fcn.0040986a
cmp dword [eax + 0x14], 8
jb 0x40c4c0
mov eax, dword [eax]
push esi
push eax
call sub.msvcrt.dll__wcsicmp
pop ecx
pop ecx
lea ecx, [ebp - 0x48]
mov esi, eax
call fcn.004024e1
test esi, esi
jne 0x40c4e1
push str.__U:S
jmp 0x40c59d
cmp dword [ebp - 0x14], 8
lea esi, [ebp - 0x28]
jb 0x40c4ed
mov esi, dword [ebp - 0x28]
sub esp, 0x18
mov ecx, esp
push 0xe
and dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.CurrentProcess
mov byte [ecx], 0
call fcn.0040dd49
lea eax, [ebp - 0x48]
mov ecx, 0x41e860
push eax
call fcn.0040986a
cmp dword [eax + 0x14], 8
jb 0x40c522
mov eax, dword [eax]
push esi
push eax
call sub.msvcrt.dll__wcsicmp
pop ecx
pop ecx
lea ecx, [ebp - 0x48]
mov esi, eax
call fcn.004024e1
test esi, esi
jne 0x40c540
push str.__U:P
jmp 0x40c59d
cmp dword [ebp - 0x14], 8
lea esi, [ebp - 0x28]
jb 0x40c54c
mov esi, dword [ebp - 0x28]
sub esp, 0x18
mov ecx, esp
push 0xb
and dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.CurrentUser
mov byte [ecx], 0
call fcn.0040dd49
lea eax, [ebp - 0x48]
mov ecx, 0x41e860
push eax
call fcn.0040986a
cmp dword [eax + 0x14], 8
jb 0x40c581
mov eax, dword [eax]
push esi
push eax
call sub.msvcrt.dll__wcsicmp
pop ecx
pop ecx
lea ecx, [ebp - 0x48]
mov esi, eax
call fcn.004024e1
test esi, esi
jne 0x40c5a5
push str.__U:C
lea ecx, [ebp - 0x78]
call fcn.0040dca3
cmp byte [ebp - 0xa9], 0
je 0x40c5bb
push str.__P:E
lea ecx, [ebp - 0x78]
call fcn.0040dca3
push 0x416368
lea ecx, [ebp - 0x78]
call fcn.0040dca3
cmp dword [ebp - 0x4c], 8
lea eax, [ebp - 0x60]
jb 0x40c5d4
mov eax, dword [ebp - 0x60]
push dword [ebp - 0x50]
lea ecx, [ebp - 0x78]
push eax
call fcn.0040dcca
xor ecx, ecx
mov dword [ebp - 0x7c], 7
xor eax, eax
mov dword [ebp - 0x80], ecx
mov word [ebp - 0x90], ax
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.0040ce88
mov dword [ebp - 0x30], eax
push 7
xor esi, esi
xor eax, eax
pop ecx
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x94], ecx
mov word [ebp - 0xa8], ax
mov dword [ebp - 0xe4], ecx
lea ecx, [ebp - 0xf8]
push 0x416df4
mov byte [ebp - 4], 6
mov dword [ebp - 0xe8], esi
mov word [ebp - 0xf8], ax
call fcn.00402607
xor eax, eax
mov byte [ebp - 4], 7
push 0x416cc8
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], ax
call fcn.00402607
push dword [ebp - 0xb0]
xor eax, eax
mov byte [ebp - 4], 8
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.0040492e
xor eax, eax
mov byte [ebp - 4], 9
push 0x416df8
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x130], esi
mov dword [ebp - 0x12c], 7
mov word [ebp - 0x140], ax
call fcn.00402607
xor eax, eax
mov byte [ebp - 4], 0xa
push 0x416dfc
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x118], esi
mov dword [ebp - 0x114], 7
mov word [ebp - 0x128], ax
call fcn.00402607
xor eax, eax
mov byte [ebp - 4], 0xb
push 0x416e00
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x100], esi
mov dword [ebp - 0xfc], 7
mov word [ebp - 0x110], ax
call fcn.00402607
push dword [ebp - 0xb0]
xor eax, eax
mov byte [ebp - 4], 0xc
mov dword [ebp - 0xbc], eax
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.0040492e
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.00401f28
add esp, 0x18
lea ecx, [ebp - 0xbc]
call fcn.00402467
mov esi, 0x401a95
mov byte [ebp - 4], 9
push esi
push 3
push 0x18
lea eax, [ebp - 0x140]
push eax
call fcn.00411d10
lea ecx, [ebp - 0x3c]
call fcn.00402467
push esi
push 2
push 0x18
lea eax, [ebp - 0xf8]
mov byte [ebp - 4], 6
push eax
call fcn.00411d10
lea eax, [ebp - 0xa8]
push eax
push dword [0x41e8bc]
lea eax, [ebp - 0xc8]
push eax
call fcn.0040cc70
add esp, 0xc
push str.cmd__c_start__NSudo.Launcher_
push 0
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.0040effc
xor ecx, ecx
mov byte [ebp - 0xb0], cl
push dword [ebp - 0xb0]
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x48]
push eax
call fcn.0040213e
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0xa8]
call fcn.00408b60
lea ecx, [ebp - 0x48]
call fcn.004024e1
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 6
call fcn.004024e1
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x90]
push eax
push 1
push 1
call fcn.0040a571
add esp, 0x14
test eax, eax
je 0x40c8ad
sub esp, 0x18
mov ecx, esp
push dword [eax*4 + 0x41e010]
call fcn.00407aa6
lea eax, [ebp - 0x48]
mov ecx, 0x41e860
push eax
call fcn.0040986a
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0xf
jb 0x40c892
mov eax, dword [ebp - 0x48]
push eax
mov eax, dword [0x41e8b0]
push dword [edi + 4]
push dword [eax]
call fcn.0040b92b
add esp, 0xc
lea ecx, [ebp - 0x48]
call fcn.004024e1
lea ecx, [ebp - 0xa8]
call fcn.004024e1
lea ecx, [ebp - 0x30]
call fcn.004085c6
lea ecx, [ebp - 0x90]
call fcn.004024e1
lea ecx, [ebp - 0x78]
call fcn.004024e1
lea ecx, [ebp - 0x60]
call fcn.004024e1
lea ecx, [ebp - 0x28]
call fcn.004024e1
xor eax, eax
call fcn.00411bd0
ret 0x10