Function at 0x4359ee
Capabilities:
Get graphical window text

Disassembly:
push ebp
push ebx
xor eax, eax
push eax
push eax
push eax
call fcn.0045e790
mov ebp, dword [0x473554]
cmp dword [ebp + 0x34], 0
je 0x435a38
push dword [0x47355c]
lea eax, [0x43e340]
push eax
call fcn.0044f1d0
push eax
mov ebp, dword [0x473558]
pop eax
mov dword [ebp + 0x80], eax
mov ebp, dword [0x473554]
mov dword [ebp + 0x34], 0
jmp 0x43684f
push 1
push 0
call fcn.004587f9
cmp dword [0x893870], 0
je 0x435a6e
push 0
push 0x140
push 0x1f4
push 1
call fcn.00407903
jmp 0x436044
mov dword [0x893870], 1
push 0
call fcn.004584dd
push eax
push 0xca0000
mov ebp, dword [0x893880]
push dword [ebp + 0x1d8]
push 0x140
push 0x1f4
push 1
call fcn.0042b613
mov ebp, dword [0x473568]
push dword [ebp + 8]
push 0
push pe_nt_image_headers32
push 1
call fcn.004584dd
push eax
call sub.user32.dll_SendMessageW
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x1dc]
push 0x14
push 0x64
push 0x14
push 0x14
push 0x74
call fcn.00417ea2
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x1e0]
push 0x14
push 0x64
push 0x28
push 0x14
push 0x75
call fcn.00417ea2
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x1e4]
push 0x14
push 0x64
push 0x3c
push 0x14
push 0x76
call fcn.00417ea2
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x1e8]
push 0x14
push 0x64
push 0x5d
push 0x14
push 0x77
call fcn.00417ea2
push 0xf
push 0xd
push 1
call fcn.004584f9
push 0x3ed
push 0x1b
push 1
call fcn.004584f9
push 0
mov ebp, dword [0x47355c]
push dword [ebp + 4]
push 0x14
push 0x12c
push 0x14
push 0x78
push 0x78
call fcn.00417ea2
push 0
mov ebp, dword [0x47355c]
push dword [ebp + 8]
push 0x14
push 0x12c
push 0x28
push 0x78
push 0x79
call fcn.00417ea2
push 0
mov ebp, dword [0x47355c]
push dword [ebp + 0xc]
push 0x14
push 0x12c
push 0x3c
push 0x78
push 0x7a
call fcn.00417ea2
push 0
push 0x15
push 0xfa
push 0x59
push 0x78
push 0x71
call fcn.00411346
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x1ec]
push 0
push 0x71
call fcn.004515af
push 0
push dword [ebp + 0x1f0]
push 1
push 0x71
call fcn.004515af
push 0
push 0x15
push 0x50
push 0x59
push 0x186
push 0x70
call fcn.00411346
push 0
mov eax, str.UEFI
push eax
push 0
push 0x70
call fcn.004515af
push 0
mov eax, str.BIOS
push eax
push 0
push 0x70
call fcn.004515af
push 0
mov eax, 0x46a6be
push eax
push 0
push 0x70
call fcn.004515af
push 0
mov eax, str.NONE
push eax
push 0
push 0x70
call fcn.004515af
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x24c]
push 0x14
push 0x64
push 0x7d
push 0x14
push 0x81
call fcn.00417ea2
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x250]
push 0x14
push 0x15e
push 0x7a
push 0x78
push pe_nt_image_headers32
call fcn.0041deef
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x1f8]
push 0x14
push 0x64
push 0x9b
push 0x14
push 0x7c
call fcn.00417ea2
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x1fc]
push 0x14
push 0x15e
push 0x98
push 0x78
push 0x6f
call fcn.0041deef
push 0
push 0
push 0x10
push 0x10
push 0xb9
push 0x1dd
push 0x86
call fcn.0041251a
push 0
push 0
push 0x10
push 0x10
push 0x12a
push 0x1dd
push 0x87
call fcn.0041251a
push 0
mov eax, 0x46d598
push eax
push 0x14
push 0x64
push 0xb9
push 0x14
push 0x7b
call fcn.00417ea2
push 0x100
mov ebp, dword [0x473564]
push dword [ebp + 0xd]
push 0x14
push 0x15e
push 0xb9
push 0x78
push 0x7d
call fcn.00417ea2
push 0xc00000
push 1
push 0x7d
call fcn.00455543
lea eax, [0x40f599]
push eax
push 0xfffffffc
push 0x7d
call fcn.00451677
push eax
call sub.user32.dll_SetWindowLongW
push eax
mov eax, str.oldproc
push eax
push 0x7d
call fcn.00451677
push eax
call sub.user32.dll_SetPropW
push 0x100
mov eax, str.RunAfter:
push eax
push 0x14
push 0x64
push 0xd7
push 0x14
push 0x7e
call fcn.00417ea2
lea eax, [0x40f599]
push eax
push 0xfffffffc
push 0x7e
call fcn.00451677
push eax
call sub.user32.dll_SetWindowLongW
push eax
mov eax, str.oldproc
push eax
push 0x7e
call fcn.00451677
push eax
call sub.user32.dll_SetPropW
push 0
mov ebp, dword [0x47355c]
push dword [ebp + 0x38]
push 0x14
push 0x15e
push 0xd7
push 0x78
push 0x7f
call fcn.0040f80d
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x254]
push 0x14
push 0x64
push 0xf5
push 0x14
push 0x83
call fcn.00417ea2
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x258]
push 0x14
push 0x15e
push 0xf5
push 0x78
push 0x82
call fcn.0041deef
push 2
mov eax, 0x46105e
push eax
push 0x17
push 0x8c
push 0x12c
push 0x14a
push 0x84
call fcn.00417ea2
push 1
mov ebp, dword [0x893880]
push dword [ebp + 0x200]
push 0x17
push 0x4b
push 0x122
push 0x14
push 0x72
call fcn.00410862
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x204]
push 0x17
push 0x4b
push 0x122
push 0x64
push 0x73
call fcn.00410862
push pe_nt_image_headers32
push 0x20053
push 1
call fcn.004584f9
mov dword [esp + 4], 0
mov ebp, dword [0x473558]
mov ebx, dword [ebp + 0x54]
and ebx, ebx
jle 0x436158
mov ebp, dword [0x473558]
mov ebx, dword [ebp + 0x54]
cmp ebx, 1
jle 0x4360b1
mov ebp, dword [0x893880]
push dword [ebp + 0x4c0]
push 0x84
call fcn.00451564
mov ebp, dword [0x473568]
push dword [ebp + 0x24]
push 1
push 0x172
push 0x87
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
mov dword [esp + 4], 1
jmp 0x436156
mov ebp, dword [0x473550]
push ebp
mov ebp, dword [0x47355c]
mov eax, dword [ebp + 0x3c]
shl eax, 6
pop ebp
add ebp, eax
mov ebx, dword [ebp + 0x1c]
cmp ebx, 0x251c
jle 0x436115
mov ebp, dword [0x893880]
push dword [ebp + 0x4b8]
push 0x84
call fcn.00451564
mov ebp, dword [0x473568]
push dword [ebp + 0x28]
push 1
push 0x172
push 0x87
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
mov dword [esp + 4], 0
jmp 0x436156
mov ebp, dword [0x893880]
push dword [ebp + 0x4c4]
push 0x84
call fcn.00451564
mov ebp, dword [0x473568]
push dword [ebp + 0x24]
push 1
push 0x172
push 0x87
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
mov dword [esp + 4], 1
jmp 0x4361ba
mov ebp, dword [0x473550]
push ebp
mov ebp, dword [0x47355c]
mov eax, dword [ebp + 0x3c]
shl eax, 6
pop ebp
add ebp, eax
mov ebx, dword [ebp + 0x1c]
cmp ebx, 0x1f40
jle 0x4361ba
mov ebp, dword [0x893880]
push dword [ebp + 0x4bc]
push 0x84
call fcn.00451564
mov ebp, dword [0x473568]
push dword [ebp + 0x28]
push 1
push 0x172
push 0x87
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
mov dword [esp + 4], 0
cmp dword [esp + 4], 0
je 0x4361c5
xor eax, eax
jmp 0x4361ca
mov eax, 1
and eax, eax
je 0x4361f6
mov ebp, dword [0x473550]
push ebp
mov ebp, dword [0x47355c]
mov eax, dword [ebp + 0x3c]
shl eax, 6
pop ebp
add ebp, eax
mov ebx, dword [ebp + 0x1c]
cmp ebx, 0x1f40
jle 0x4361f6
mov eax, 1
jmp 0x4361f8
xor eax, eax
and eax, eax
je 0x436221
push 0x10
push 0x10
mov ebp, dword [0x473568]
push dword [ebp + 0x2c]
push 0x72
call fcn.00451677
push eax
call fcn.00445435
jmp 0x436231
push 0x72
call fcn.00451677
push eax
call fcn.004049a5
mov ebp, dword [0x47355c]
push dword [ebp + 4]
push 0x78
call fcn.00451564
mov ebp, dword [0x47355c]
push dword [ebp + 8]
push 0x79
call fcn.00451564
mov ebp, dword [0x47355c]
push dword [ebp + 0xc]
push 0x7a
call fcn.00451564
mov ebp, dword [0x473564]
push dword [ebp + 0xd]
push 0x7d
call fcn.00451564
mov ebp, dword [0x47355c]
push dword [ebp + 0x38]
push 0x7f
call fcn.00451564
mov ebp, dword [0x47355c]
push dword [ebp + 0x6c]
push 0x70
call fcn.00451614
mov ebp, dword [0x47355c]
push dword [ebp + 0x64]
push 0x6f
call fcn.00451614
mov ebp, dword [0x47355c]
push dword [ebp + 0x70]
push pe_nt_image_headers32
call fcn.00451614
mov ebp, dword [0x47355c]
mov ebx, dword [ebp]
and ebx, ebx
jne 0x4362e7
push 0
push 0x71
call fcn.00451614
jmp 0x4362f6
push 1
push 0x71
call fcn.00451614
mov ebp, dword [0x473564]
push dword [ebp + 0xd]
mov edx, str._sources_OEM_
pop ecx
call fcn.0044e300
je 0x43635a
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
mov ebp, dword [0x47355c]
push dword [ebp + 4]
call fcn.0045b156
mov edx, 0x46d598
push edx
call fcn.0045e6f0
call fcn.0044e2d2
add dword [esp], edx
call fcn.0041a2ad
call fcn.0044e2f0
and eax, eax
je 0x43635a
mov eax, 1
jmp 0x43635c
xor eax, eax
and eax, eax
jne 0x43639e
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
mov ebp, dword [0x473564]
push dword [ebp + 0xd]
call fcn.0045b156
call fcn.0044e2d2
add dword [esp], edx
call fcn.0041a2ad
call fcn.0044e2f0
and eax, eax
jne 0x43639e
jmp 0x4363a5
mov eax, 1
jmp 0x4363a7
xor eax, eax
and eax, eax
je 0x4363ce
mov ebp, dword [0x473568]
push dword [ebp + 0x24]
push 1
push 0x172
push 0x86
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
mov ebp, dword [0x473550]
push ebp
mov ebp, dword [0x47355c]
mov eax, dword [ebp + 0x3c]
shl eax, 6
pop ebp
add ebp, eax
mov ebx, dword [ebp + 0x1c]
cmp ebx, 0x1b58
jl 0x436412
mov ebp, dword [0x473550]
push ebp
mov ebp, dword [0x47355c]
mov eax, dword [ebp + 0x3c]
shl eax, 6
pop ebp
add ebp, eax
mov ebx, dword [ebp + 0x1c]
cmp ebx, 0x1f40
jg 0x436412
jmp 0x436419
mov eax, 1
jmp 0x43641b
xor eax, eax
and eax, eax
je 0x43643f
push 1
push 0x83
call fcn.004525a9
push 1
push 0x82
call fcn.004525a9
jmp 0x436480
push 0
mov ebp, dword [0x47355c]
push dword [ebp + 8]
call fcn.00417340
and eax, eax
jne 0x436464
mov ebp, dword [0x47355c]
cmp dword [ebp + 0x60], 0
jne 0x436464
jmp 0x43646b
mov eax, 1
jmp 0x43646d
xor eax, eax
and eax, eax
je 0x436480
push 1
push 0x82
call fcn.00451614
push 0x71
call fcn.00451677
push eax
call sub.user32.dll_SetFocus
mov ebp, dword [0x473554]
cmp dword [ebp + 0x34], 0
je 0x4364b5
push 0
push 0x72
push 0
push 0x332c
call fcn.0045cd08
call fcn.0045872d
push eax
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x43658e
call fcn.0045ccea
push eax
mov ebx, 0xf
cmp ebx, dword [esp]
jne 0x4364fe
cmp dword [esp + 0xc], 0
je 0x4364f9
push 0
push 0x72
push 0
push 0x332c
call fcn.0045cd08
jmp 0x436588
mov ebx, 0x3ed
cmp ebx, dword [esp]
jne 0x436523
push 0
push 0x73
push 0
push 0x332c
call fcn.0045cd08
jmp 0x436588
mov ebx, pe_nt_image_headers32
cmp ebx, dword [esp]
jne 0x436588
call fcn.00401cd6
push edx
call fcn.0045e620
pop edx
push eax
push 0
mov eax, str.WinNTSetup.ini
push eax
push 0
mov eax, str.All_files__._.
push eax
mov ebp, dword [0x47356c]
push dword [ebp]
mov eax, 0x46105e
push eax
call fcn.0044d4c8
lea eax, [esp + 0xc]
push eax
call fcn.0045e660
push dword [esp + 8]
mov edx, 0x46105e
pop ecx
call fcn.0044e300
jne 0x436588
push dword [esp + 8]
call fcn.0041d04e
pop eax
jmp 0x436847
mov ebx, 0x333c
cmp ebx, dword [esp]
jne 0x4365c3
push 0
push 0
call fcn.004587f9
push 1
push 1
call fcn.004587e7
add esp, 4
jmp 0x43684d
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x436847
call fcn.0045ccf9
mov dword [esp + 0xc], eax
push dword [esp + 0xc]
mov ebx, 0x73
cmp ebx, dword [esp]
jne 0x436618
push 0
push 0
call fcn.004587f9
call fcn.00401cd6
push 1
push 1
call fcn.004587e7
add esp, 8
jmp 0x43684d
mov ebx, 0x7d
cmp ebx, dword [esp]
jne 0x4366ed
push edx
call fcn.0045e620
pop edx
push eax
push 0x46105e
push 0
mov eax, 0x46d598
push eax
push 0
mov ebp, dword [0x473558]
push dword [ebp + 0x30]
mov eax, 0x46d598
push eax
call fcn.0044d930
lea eax, [esp + 0xc]
push eax
call fcn.0045e660
mov edx, dword [esp + 8]
xor ecx, ecx
call fcn.0044e300
jne 0x4366e8
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push dword [esp + 0x10]
call fcn.0045b156
mov ebp, dword [0x473558]
lea eax, [ebp + 0x30]
push eax
call fcn.0045e660
push dword [esp + 8]
push 0x7d
call fcn.00451564
mov edx, dword [esp + 8]
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e6f0
mov ebp, dword [0x473564]
lea eax, [ebp + 0xd]
push eax
call fcn.0045e660
mov ebp, dword [0x473568]
push dword [ebp + 0x24]
push 1
push 0x172
push 0x86
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
jmp 0x436846
mov ebx, 0x7e
cmp ebx, dword [esp]
jne 0x4367e5
push edx
call fcn.0045e620
pop edx
push eax
push 0
push 0x46105e
push 0
mov eax, str.All_files__._.
push eax
mov ebp, dword [0x473558]
push dword [ebp + 0x38]
mov eax, 0x46105e
push eax
call fcn.0044d0d9
lea eax, [esp + 0xc]
push eax
call fcn.0045e660
mov edx, dword [esp + 8]
xor ecx, ecx
call fcn.0044e300
jne 0x4367e3
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push dword [esp + 0x10]
call fcn.0045b156
mov ebp, dword [0x473558]
lea eax, [ebp + 0x38]
push eax
call fcn.0045e660
mov eax, 0x461704
push eax
push dword [esp + 0xc]
call fcn.0044f710
and eax, eax
je 0x4367b4
push edx
call fcn.0045e620
pop edx
push eax
mov edx, 0x461740
push edx
call fcn.0045e6f0
mov edx, dword [esp + 0xc]
push edx
call fcn.0045e6f0
mov edx, 0x461740
push edx
call fcn.0045e6f0
lea eax, [esp + 0xc]
push eax
call fcn.0045e660
push dword [esp + 8]
push 0x7f
call fcn.00451564
mov edx, dword [esp + 8]
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e6f0
mov ebp, dword [0x47355c]
lea eax, [ebp + 0x38]
push eax
call fcn.0045e660
jmp 0x436846
mov ebx, 0x72
cmp ebx, dword [esp]
jne 0x436846
call fcn.00401cd6
push 0
push 0
call fcn.004587f9
push 0xf
push 1
call fcn.00458bc6
push 1
push 1
call fcn.004587e7
push dword [0x47355c]
lea eax, [0x43e340]
push eax
call fcn.0044f1d0
push eax
mov ebp, dword [0x473558]
pop eax
mov dword [ebp + 0x80], eax
add esp, 8
jmp 0x43684d
pop eax
pop eax
jmp 0x4364b5
xor eax, eax
push dword [esp]
call fcn.0045e7f0
add esp, 0xc
pop ebx
pop ebp
ret