Function at 0x11135490
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1118c17b
mov eax, dword fs:[0]
push eax
sub esp, 0x270
mov eax, dword [0x111ec774]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call dword [sym.imp.uSEr32.dll_GetForegroundWindow]
mov edi, eax
xor ebx, ebx
cmp edi, ebx
je 0x111356df
push 0x100
lea eax, [ebp - 0x150]
push eax
push edi
mov byte [ebp - 0x150], bl
call dword [sym.imp.uSEr32.dll_GetWindowTextA]
push 0xffffffffffffffec
push edi
call dword [sym.imp.uSEr32.dll_GetWindowLongA]
push pe_nt_image_headers32
lea ecx, [ebp - 0x50]
push ecx
push edi
mov esi, eax
mov byte [ebp - 0x50], bl
call dword [sym.imp.uSEr32.dll_GetClassNameA]
test eax, eax
je 0x111356df
mov ecx, 0x111b881c
lea eax, [ebp - 0x50]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x11135534
cmp dl, bl
je 0x11135530
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x11135534
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x11135514
xor eax, eax
jmp 0x11135539
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x11135571
mov ecx, 0x111b8810
lea eax, [ebp - 0x150]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x11135568
cmp dl, bl
je 0x11135564
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x11135568
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x11135548
xor eax, eax
jmp 0x1113556d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x111355ed
mov ecx, 0x111bbf10
lea eax, [ebp - 0x50]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x111355a0
cmp dl, bl
je 0x1113559c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x111355a0
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x11135580
xor eax, eax
jmp 0x111355a5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x111355b1
test esi, 0x200000
jne 0x111355ed
mov ecx, 0x111bbefc
lea eax, [ebp - 0x50]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x111355e0
cmp dl, bl
je 0x111355dc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x111355e0
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x111355c0
xor eax, eax
jmp 0x111355e5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x111356df
lea edx, [ebp - 0x258]
push edx
push edi
call dword [sym.imp.uSEr32.dll_GetWindowThreadProcessId]
mov eax, dword [ebp - 0x258]
push eax
push ebx
push 0x410
call dword [sym.imp.KeRneL32.DLl_OpenProcess]
mov esi, eax
cmp esi, ebx
je 0x111356df
push 0x11199e24
call dword [sym.imp.KeRneL32.DLl_LoadLibraryA]
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x278], ebx
mov dword [ebp - 0x274], ebx
mov dword [ebp - 0x270], ebx
mov dword [ebp - 0x26c], ebx
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x264], ebx
mov dword [ebp - 0x260], ebx
mov dword [ebp - 0x25c], ebx
push 0x104
lea ecx, [ebp - 0x254]
push ecx
push esi
lea ecx, [ebp - 0x27c]
mov dword [ebp - 4], ebx
call fcn.110262f0
test eax, eax
je 0x111356ce
lea edx, [ebp - 0x254]
push 0x5c
push edx
call fcn.11081e00
add esp, 8
cmp eax, ebx
je 0x111356ce
inc eax
push 0x111a9078
push eax
call fcn.11081e70
add esp, 8
test eax, eax
jne 0x111356ce
push 0x111bbee8
call fcn.11147060
mov ecx, dword [0x111ee308]
mov eax, dword [ecx]
mov edx, dword [eax + 0x64]
add esp, 4
push 1
call edx
mov ecx, dword [0x111ee308]
mov eax, dword [ecx]
mov edx, dword [eax + 0x64]
push 0x81
call edx
mov eax, dword [ebp - 0x27c]
cmp eax, ebx
je 0x111356df
push eax
call dword [sym.imp.KeRneL32.DLl_FreeLibrary]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret