Function at 0x404ba0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x544858
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x5ae5e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [0x5ca914], 0
mov eax, dword [esi + 0x1838]
push 0
push esi
lea ecx, [esi + 0x1838]
mov dword [esi + 0x12d4], 0
call dword [eax + 0x160]
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x404c44
push 0
push 0
push str.You_can_also_drag_and_drop_Dictionary_File_here
lea eax, [esi + 0x16dc]
push eax
lea ecx, [esi + 0x1838]
call fcn.00418abf
push 0
push 0
push str._enter_md5_sha1_sha256_sha384_sha512_hash_text_
lea eax, [esi + 0x1750]
push eax
lea ecx, [esi + 0x1838]
call fcn.00418abf
push 0
push 1
push 0x401
push dword [esi + 0x1858]
call ebx
push 0
push 0x208
push 0xc5
push dword [esi + 0x16fc]
call ebx
push 0x640001
push 0
push 0x401
push dword [esi + 0x17e4]
call ebx
push str.MS_Shell_Dlg
push 0
push 4
push 0
push 0
push 0
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0xd
lea edi, [esi + 0xa0]
call dword [sym.imp.GDI32.dll_CreateFontA]
push eax
mov ecx, edi
call fcn.0040bee4
test edi, edi
jne 0x404caa
xor eax, eax
jmp 0x404cad
mov eax, dword [edi + 4]
push 1
push eax
push 0x30
push dword [esi + 0x12f8]
call ebx
test edi, edi
jne 0x404cc2
xor eax, eax
jmp 0x404cc5
mov eax, dword [edi + 4]
push 1
push eax
push 0x30
push dword [esi + 0x1428]
call ebx
push 1
lea ecx, [esi + 0x1408]
call fcn.00406ce0
push ecx
mov ecx, esp
push str.http:__www.securityxploded.com_hash_kracker.php
call fcn.004029a0
lea ecx, [esi + 0x12d8]
call fcn.00406d20
push 1
lea ecx, [esi + 0x12d8]
call fcn.004068a0
push str.Get_more_help_on_HashKracker
lea ecx, [esi + 0x12d8]
call fcn.00406d90
push str.MS_Shell_Dlg
push 0
push 4
push 0
push 0
push 0
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0xe
lea edi, [esi + 0xa8]
call dword [sym.imp.GDI32.dll_CreateFontA]
push eax
mov ecx, edi
call fcn.0040bee4
test edi, edi
jne 0x404d52
xor eax, eax
jmp 0x404d55
mov eax, dword [edi + 4]
push 1
push eax
push 0x30
push dword [esi + 0x1558]
call ebx
push ecx
mov ecx, esp
push str.http:__www.securityxploded.com_hash_kracker.php
call fcn.004029a0
lea ecx, [esi + 0x1538]
call fcn.00406d20
push 1
lea ecx, [esi + 0x1538]
call fcn.004068a0
push 0xffffff
lea ecx, [esi + 0x1538]
call fcn.00406d10
push str.Download_New_Version_of_HashKracker
lea ecx, [esi + 0x1538]
call fcn.00406d90
lea eax, [esi + 0xa8]
test eax, eax
je 0x404db4
mov eax, dword [eax + 4]
push 1
push eax
push 0x30
push dword [esi + 0x1ba0]
call ebx
push ecx
mov ecx, esp
push str.http:__securityxploded.com_download.php
call fcn.004029a0
lea ecx, [esi + 0x1b80]
call fcn.00406d20
push 1
lea ecx, [esi + 0x1b80]
call fcn.004068a0
push 0
lea ecx, [esi + 0x1b80]
call fcn.00406d10
push 0xff
lea ecx, [esi + 0x1b80]
call fcn.00406d00
push str.Click_here_to_download_more_Free_Password_Tools_from_SecurityXploded
lea ecx, [esi + 0x1b80]
call fcn.00406d90
push 0
push 0
push 0x258
push 0x10
push ecx
mov ecx, esp
push str.MS_Shell_Dlg
call fcn.004029a0
lea ecx, [esi + 0xb0c]
call fcn.00408250
push ecx
mov ecx, esp
mov dword [ebp - 0x10], esp
push 0x555e38
call fcn.004029a0
push ecx
mov ecx, esp
push str.Click_here_to_start_the_Password_Cracking_operation
mov dword [ebp - 4], 0
call fcn.004029a0
lea ecx, [esi + 0xb0c]
mov dword [ebp - 4], 0xffffffff
call fcn.00408b30
push 0
push 5
push 0x14
push 8
push 4
lea ecx, [esi + 0xb0c]
call fcn.00408600
push 0xff
push 0
lea ecx, [esi + 0xb0c]
call fcn.00408b10
push 8
push 0x90
push 0xa0
push pe_nt_image_headers32
push 0x8d
lea ecx, [esi + 0xb0c]
call fcn.00408330
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x555e38
call fcn.004029a0
push ecx
mov ecx, esp
push str.Select_a_password_dictionary_file
mov dword [ebp - 4], 1
call fcn.004029a0
lea ecx, [esi + 0xda4]
mov dword [ebp - 4], 0xffffffff
call fcn.00408b30
push 0
push 5
push 0x14
push 8
push 4
lea ecx, [esi + 0xda4]
call fcn.00408600
push 0xff
push 0
lea ecx, [esi + 0xda4]
call fcn.00408b10
push 0
push 0x9a
push 0x9f
push 0x300
push 0x95
lea ecx, [esi + 0xda4]
call fcn.00408330
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x555e38
call fcn.004029a0
push ecx
mov ecx, esp
push str.Generate_the_Hash_Password_Cracking_Report_in_HTML_XML_TEXT_file
mov dword [ebp - 4], 2
call fcn.004029a0
lea ecx, [esi + 0x103c]
mov dword [ebp - 4], 0xffffffff
call fcn.00408b30
push 0xff0000
push 5
push 0x14
push 8
push 4
lea ecx, [esi + 0x103c]
call fcn.00408600
push 0xff
push 0
lea ecx, [esi + 0x103c]
call fcn.00408b10
push 6
push 0x8f
push 0x9d
push pe_nt_image_headers32
push 0x8e
lea ecx, [esi + 0x103c]
call fcn.00408330
push 0
lea ecx, [esi + 0x103c]
call fcn.0041354c
mov edi, 0x5a91f8
push edi
push 0
push 0x143
push dword [esi + 0x1b2c]
call ebx
add edi, 0x100
cmp edi, 0x5a96f8
jl 0x404fc5
push 0x46
push 0x96
push 0x12e
push 0
push 0
push 0x5d8c68
lea ecx, [esi + 0x1b0c]
call fcn.00413ec8
push 0
push 0
push 0x14e
push dword [esi + 0x1b2c]
call ebx
push str._enter_md5_sha1_sha256_sha384_sha512_hash_text_
lea ecx, [esi + 0x1750]
call fcn.00413f04
push str._drag__drop_your_dictionary_file_here_
lea ecx, [esi + 0x16dc]
call fcn.00413f04
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret