Function at 0x411ac0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x210
mov eax, dword [0x48b088]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, ecx
mov dword [ebp - 0x208], 0x2f61b050
mov eax, dword [ebp - 0x208]
mov ecx, 0x2faa6a84
push esi
sub ecx, eax
mov esi, edx
push edi
mov edi, dword [ebp + 8]
push 0x100
mov eax, dword [ecx]
mov dword [ebp - 0x210], eax
lea eax, [ebp - 0x204]
push eax
push ebx
call dword [sym.imp.USER32.dll_GetClassNameW]
test eax, eax
jne 0x411b26
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00431ac5
mov esp, ebp
pop ebp
ret
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov dword [ebp - 0x20c], eax
lea ecx, [eax*2 + 2]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, eax
mov dword [ebp - 0x208], ecx
test ecx, ecx
je 0x411b13
mov eax, dword [ebp - 0x20c]
inc eax
push eax
push ecx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
jne 0x411b73
mov ecx, dword [ebp - 0x208]
mov word [ecx], ax
mov eax, dword [ebp - 0x210]
mov edx, 0x232166e6
add eax, eax
sub edx, eax
lea eax, [ebp - 0x204]
jmp 0x411b90
mov cx, word [eax]
cmp cx, word [edx]
mov ecx, dword [ebp - 0x208]
jne 0x411bcf
cmp word [eax], 0
je 0x411bcb
mov cx, word [eax + 2]
cmp cx, word [edx + 2]
mov word [ebp - 0x20a], cx
mov ecx, dword [ebp - 0x208]
jne 0x411bcf
add eax, 4
add edx, 4
cmp word [ebp - 0x20a], 0
jne 0x411b90
xor eax, eax
jmp 0x411bd4
sbb eax, eax
or eax, 1
push edi
push esi
test eax, eax
jne 0x412035
mov edx, ecx
mov ecx, ebx
call fcn.0040cc60
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.00410480
add esp, 8
test eax, eax
jne 0x412697
push edi
push esi
mov ecx, ebx
call fcn.0040ce70
add esp, 8
test eax, eax
jne 0x412697
push edi
push esi
mov ecx, ebx
call fcn.0040d4d0
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040d1a0
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.00410c50
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.00411850
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.00411960
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.00412d90
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.00412fc0
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.004130e0
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040d400
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.004103a0
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040d630
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.00411030
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040c6c0
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.004126f0
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040c580
add esp, 8
test eax, eax
jne 0x412697
push edi
push esi
mov ecx, ebx
call fcn.0040b4f0
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
push edi
push esi
call fcn.0040bb30
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040b5b0
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040ac10
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040a170
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040a530
add esp, 8
test eax, eax
jne 0x412697
push edi
push esi
mov ecx, ebx
call fcn.0040ae40
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040d820
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040de10
add esp, 8
test eax, eax
jne 0x412697
push edi
push esi
mov ecx, ebx
call fcn.0040aa30
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040a790
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040a6b0
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040a450
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040acb0
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
push edi
push esi
call fcn.0040abc0
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
push edi
push esi
call fcn.0040df80
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
push edi
push esi
call fcn.0040e000
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040e080
add esp, 8
test eax, eax
jne 0x412697
push edi
push esi
mov ecx, ebx
call fcn.0040e340
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040e850
add esp, 8
test eax, eax
jne 0x412697
push edi
push esi
mov ecx, ebx
call fcn.0040edb0
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040f660
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040f7b0
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040f840
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040f9b0
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.0040fc80
add esp, 8
test eax, eax
jne 0x412697
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push edi
push esi
call fcn.004105c0
add esp, 8
jmp 0x41268f
push ecx
lea edx, [ebp - 0x204]
call fcn.0040d380
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
call fcn.00410040
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.00411670
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040cad0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.00410bd0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.004100c0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.00411360
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
call fcn.00410320
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040d2b0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.00412a50
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040c3f0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
call fcn.0040c350
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
call fcn.0040c640
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.00412be0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040c130
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
call fcn.0040c4e0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040aac0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040a8c0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040b000
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040b160
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
call fcn.0040a3b0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
call fcn.0040a840
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
call fcn.0040b690
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040b340
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
call fcn.0040b8e0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040b200
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040b9d0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040b710
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040ad40
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
call fcn.0040af60
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040d6c0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040d930
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
call fcn.0040da20
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040daa0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040de80
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040e100
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040e1a0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040e240
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040e4a0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040e6b0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
call fcn.0040e790
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040ea00
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
call fcn.0040eb30
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040ec30
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
call fcn.0040ed20
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040ef10
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040f020
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040f180
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040f270
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
call fcn.0040f310
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
call fcn.0040f390
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040f430
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040f500
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
call fcn.0040f5e0
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push ecx
lea edx, [ebp - 0x204]
call fcn.0040f930
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040fa70
add esp, 0xc
test eax, eax
jne 0x412697
push edi
push esi
push dword [ebp - 0x208]
lea edx, [ebp - 0x204]
mov ecx, ebx
call fcn.0040fba0
add esp, 0xc
test eax, eax
jne 0x412697
xor edi, edi
jmp 0x4126bd
mov eax, dword [esi]
mov edi, 1
cmp eax, 0x1c
je 0x4126a8
cmp eax, 0x64
jne 0x4126bd
mov edx, dword [ebp - 0x208]
mov ecx, ebx
call fcn.00413160
neg eax
sbb eax, eax
not eax
and edi, eax
push dword [ebp - 0x208]
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00431ac5
mov esp, ebp
pop ebp
ret