Function at 0x601920
Capabilities:
Get graphical window text

Disassembly:
push ebp
lea ebp, [esp - 0x34c]
sub esp, 0x34c
push 0xffffffffffffffff
push 0x618224
mov eax, dword fs:[0]
push eax
sub esp, 0x100
mov eax, dword [0x68ce74]
xor eax, ebp
mov dword [ebp + 0x348], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x14], ebx
lea ecx, [ebx + 0xa8]
call fcn.00603f00
push dword [ebx + 0xac]
lea ecx, [ebx + 0x160]
call fcn.00417269
push 0x3e8
mov ecx, ebx
call fcn.004165eb
mov edi, eax
mov ecx, edi
call fcn.00416c8e
movzx ecx, byte [ebx + 0xa8]
neg eax
sbb eax, eax
neg eax
cmp eax, ecx
je 0x6019ab
push ecx
mov ecx, edi
call fcn.0041645e
push 0x3e9
mov ecx, ebx
call fcn.004165eb
mov esi, eax
mov ecx, esi
call fcn.00416c8e
movzx ecx, byte [ebx + 0xa9]
neg eax
sbb eax, eax
neg eax
cmp eax, ecx
je 0x6019d9
push ecx
mov ecx, esi
call fcn.0041645e
call fcn.0040ddd2
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x6019f5
push 0x80004005
call fcn.004054b0
mov eax, dword [edx]
mov esi, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x601a0a
lock inc dword [edx + 0x14]
lea eax, [edx + 8]
jmp 0x601a0e
mov ecx, edx
call esi
lea esi, [eax + 0x10]
mov dword [ebp - 0x2c], esi
lea ecx, [ebx + 0xb4]
mov dword [ebp - 4], 0
call fcn.006045e0
test al, al
je 0x602bc3
push dword [ebx + 0xb4]
lea ecx, [ebp - 0x2c]
call fcn.00404a20
mov esi, dword [ebp - 0x14]
push 0x66121d
lea eax, [esi + 0x260]
mov ecx, eax
mov dword [ebp - 0x30], eax
call fcn.00417269
call fcn.0040ddd2
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x601a70
push 0x80004005
call fcn.004054b0
mov eax, dword [edx]
mov edi, dword [eax + 0xc]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x601a85
lock inc dword [edx + 0x14]
lea eax, [edx + 8]
jmp 0x601a89
mov ecx, edx
call edi
lea ebx, [eax + 0x10]
mov dword [ebp - 0x18], ebx
mov byte [ebp - 4], 1
mov edi, dword [esi + 0xb8]
mov edi, dword [edi]
cmp edi, dword [esi + 0xb8]
je 0x602036
mov ecx, dword [edi + 0x10]
xor eax, eax
test ecx, ecx
setne al
test eax, eax
je 0x6019eb
mov eax, ebx
nop dword [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x601ae6
test dx, dx
je 0x601ae2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x601ae6
add eax, 4
add ecx, 4
test dx, dx
jne 0x601ac0
xor eax, eax
jmp 0x601aeb
sbb eax, eax
or eax, 1
test eax, eax
setne al
test al, al
jne 0x601b02
mov eax, dword [esi + 0xb8]
cmp edi, dword [eax]
jne 0x601f10
mov edx, dword [edi + 0x10]
lea esi, [ebx - 0x10]
lea ecx, [edx - 0x10]
cmp ecx, esi
je 0x601b9a
cmp dword [esi + 0xc], 0
lea ebx, [esi + 0xc]
jl 0x601b8b
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x601b8b
push ecx
call fcn.004030e0
add esp, 4
mov dword [ebp - 0x10], eax
or ecx, 0xffffffff
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x601b80
mov edx, dword [esi]
push esi
mov ecx, dword [edx]
mov eax, dword [ecx + 4]
cmp ecx, vtable.ATL::CAtlStringMgr.0
jne 0x601b7c
mov ecx, dword [edx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x601b6f
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ebx, dword [ebp - 0x10]
add ebx, 0x10
mov dword [ebp - 0x18], ebx
jmp 0x601b9a
call edx
mov ebx, dword [ebp - 0x10]
add ebx, 0x10
mov dword [ebp - 0x18], ebx
jmp 0x601b9a
mov ecx, edx
call eax
mov ebx, dword [ebp - 0x10]
add ebx, 0x10
mov dword [ebp - 0x18], ebx
jmp 0x601b9a
push dword [edx - 0xc]
lea ecx, [ebp - 0x18]
push edx
call fcn.00403160
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
mov eax, dword [esi + 0xb8]
cmp edi, dword [eax]
je 0x601c62
push 0x6610e8
lea ecx, [ebp - 0x1c]
call fcn.00402b00
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x1c]
push 0
mov ecx, dword [eax - 0xc]
add ecx, ecx
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.0041c09b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x94], 0x601900
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x9c]
push eax
push 0x8011
push 0x449
push dword [esi + 0x280]
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x5c]
call fcn.0041c0f7
mov byte [ebp - 4], 1
or eax, 0xffffffff
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x601c62
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov esi, dword [eax + 4]
mov dword [ebp - 0x10], esi
mov esi, dword [ebp - 0x14]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x601c5d
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov esi, dword [eax + 4]
mov dword [ebp - 0x10], esi
mov esi, dword [ebp - 0x14]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x601c56
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x601c62
mov ecx, edx
call dword [ebp - 0x10]
jmp 0x601c62
mov ecx, edx
call dword [ebp - 0x10]
cmp dword [ebx - 0xc], 0
push 0x3c
push 0
jne 0x601d97
lea eax, [ebp + 0x258]
push eax
call fcn.005bc8f0
add esp, 0xc
mov dword [ebp + 0x258], 0x3c
lea eax, [ebp + 0x258]
mov dword [ebp + 0x25c], 1
lea ecx, [esi + 0x260]
mov dword [ebp + 0x260], 1
push eax
call fcn.0041bfff
push str.Not_Reserved
lea ecx, [ebp - 0x20]
call fcn.00402b00
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x20]
push 0
mov ecx, dword [eax - 0xc]
add ecx, ecx
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.0041c09b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x88], 0x601900
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
push eax
push 0x8011
push 0x449
push dword [esi + 0x280]
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x5c]
call fcn.0041c0f7
mov byte [ebp - 4], 1
or eax, 0xffffffff
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x601d52
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x601d4e
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x601d4e
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x601d52
mov ecx, edx
call esi
push 0x3c
lea eax, [ebp + 0x294]
push 0
push eax
call fcn.005bc8f0
mov ecx, dword [ebp - 0x30]
lea eax, [ebp + 0x294]
add esp, 0xc
mov dword [ebp + 0x294], 0x3c
mov dword [ebp + 0x298], 1
mov dword [ebp + 0x29c], 0
push eax
call fcn.0041bfff
jmp 0x601f10
lea eax, [ebp + 0x2d0]
push eax
call fcn.005bc8f0
add esp, 0xc
mov dword [ebp + 0x2d0], 0x3c
lea eax, [ebp + 0x2d0]
mov dword [ebp + 0x2d4], 1
lea ecx, [esi + 0x260]
mov dword [ebp + 0x2d8], 1
push eax
call fcn.0041bfff
push str.Reserved_Group
lea ecx, [ebp - 0x24]
call fcn.00402b00
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x24]
push 0
mov ecx, dword [eax - 0xc]
add ecx, ecx
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.0041c09b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x7c], 0x601900
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x84]
push eax
push 0x8011
push 0x449
push dword [esi + 0x280]
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x5c]
call fcn.0041c0f7
mov byte [ebp - 4], 1
or eax, 0xffffffff
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x601e8a
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov esi, dword [eax + 4]
mov dword [ebp - 0x10], esi
mov esi, dword [ebp - 0x14]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x601e85
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov esi, dword [eax + 4]
mov dword [ebp - 0x10], esi
mov esi, dword [ebp - 0x14]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x601e7e
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x601e8a
mov ecx, edx
call dword [ebp - 0x10]
jmp 0x601e8a
mov ecx, edx
call dword [ebp - 0x10]
push 0x3c
lea eax, [ebp + 0x30c]
push 0
push eax
call fcn.005bc8f0
add esp, 0xc
mov dword [ebp + 0x30c], 0x3c
lea eax, [ebp + 0x30c]
mov dword [ebp + 0x310], 1
lea ecx, [esi + 0x260]
mov dword [ebp + 0x314], 0
push eax
call fcn.0041bfff
mov ecx, dword [edi + 0x10]
push 0
mov eax, dword [ecx - 0xc]
add eax, eax
push eax
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0041c09b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x70], 0x601900
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
push 0x8011
push 0x449
push dword [esi + 0x280]
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x5c]
call fcn.0041c0f7
call fcn.0040ddd2
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x6019eb
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
cmp ecx, vtable.ATL::CAtlStringMgr.0
jne 0x601f3a
lock inc dword [eax + 0x14]
add eax, 8
jmp 0x601f3e
mov ecx, eax
call edx
add eax, 0x10
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 5
lea eax, [ebp - 0x28]
push dword [edi + 0x18]
push dword [edi + 0x14]
push str._n_s___d_
push eax
call fcn.00403ff0
mov esi, dword [ebp - 0x28]
lea ecx, [ebp - 0x5c]
add esp, 0x10
mov eax, dword [esi - 0xc]
push 0
add eax, eax
push eax
push esi
call fcn.0041c09b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x64], 0x601900
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x14]
push 0x8011
push 0x449
push dword [eax + 0x280]
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x5c]
call fcn.0041c0f7
mov byte [ebp - 4], 1
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x601fe6
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x601fe4
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x601fe4
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x601fe6
call edx
cmp byte [edi + 0xd], 0
jne 0x602027
mov eax, dword [edi + 8]
cmp byte [eax + 0xd], 0
jne 0x60200c
mov edi, eax
mov eax, dword [edi]
cmp byte [eax + 0xd], 0
jne 0x602027
nop
mov edi, eax
mov eax, dword [edi]
cmp byte [eax + 0xd], 0
je 0x602000
jmp 0x602027
mov eax, dword [edi + 4]
cmp byte [eax + 0xd], 0
jne 0x602025
cmp edi, dword [eax + 8]
jne 0x602025
mov edi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x602015
mov edi, eax
mov esi, dword [ebp - 0x14]
cmp edi, dword [esi + 0xb8]
jne 0x601aa7
push 0
push 0
lea ecx, [esi + 0x260]
call fcn.0041bfb3
mov byte [ebp - 4], 0
add ebx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x602086
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x602084
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x602084
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x602086
call edx
lea eax, [esi + 0x2e0]
push 0x66121d
mov ecx, eax
mov dword [ebp - 0xa0], eax
call fcn.00417269
mov ebx, dword [esi + 0xc0]
mov ebx, dword [ebx]
cmp ebx, dword [esi + 0xc0]
je 0x602bae
mov eax, dword [esi + 0xc0]
cmp ebx, dword [eax]
je 0x60215c
push 0x6610e8
lea ecx, [ebp - 0x28]
call fcn.00402b00
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x28]
push 0
mov ecx, dword [eax - 0xc]
add ecx, ecx
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.0041c09b
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
push 0x8011
push 0x449
push dword [esi + 0x300]
mov dword [ebp - 0x64], 0x601900
call edi
lea ecx, [ebp - 0x5c]
call fcn.0041c0f7
mov byte [ebp - 4], 0
or eax, 0xffffffff
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x602162
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x602158
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x602158
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x60215c
mov ecx, edx
call edi
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebx + 0x20]
push 0x3c
push 0
cmp dword [eax - 0xc], 0
jne 0x6026ef
lea eax, [ebp + 0x30c]
push eax
call fcn.005bc8f0
add esp, 0xc
mov dword [ebp + 0x30c], 0x3c
lea eax, [ebp + 0x30c]
mov dword [ebp + 0x310], 1
lea ecx, [esi + 0x2e0]
mov dword [ebp + 0x314], 1
push eax
call fcn.0041bfff
push str.Computer
lea ecx, [ebp - 0x24]
call fcn.00402b00
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x24]
push 0
mov ecx, dword [eax - 0xc]
add ecx, ecx
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.0041c09b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x70], 0x601900
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push eax
push 0x8011
push 0x449
push dword [esi + 0x300]
call edi
lea ecx, [ebp - 0x5c]
call fcn.0041c0f7
mov byte [ebp - 4], 0
or eax, 0xffffffff
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x602248
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x602244
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x602244
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x602248
mov ecx, edx
call edi
push 0x3c
lea eax, [ebp + 0x2d0]
push 0
push eax
call fcn.005bc8f0
add esp, 0xc
mov dword [ebp + 0x2d0], 0x3c
lea eax, [ebp + 0x2d0]
mov dword [ebp + 0x2d4], 1
lea ecx, [esi + 0x2e0]
mov dword [ebp + 0x2d8], 0
push eax
call fcn.0041bfff
mov ecx, dword [ebx + 0x10]
push 0
mov eax, dword [ecx - 0xc]
add eax, eax
push eax
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0041c09b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x7c], 0x601900
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x84]
push eax
push 0x8011
push 0x449
push dword [esi + 0x300]
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x5c]
call fcn.0041c0f7
push 0x3c
lea eax, [ebp + 0x294]
push 0
push eax
call fcn.005bc8f0
add esp, 0xc
mov dword [ebp + 0x294], 0x3c
lea eax, [ebp + 0x294]
mov dword [ebp + 0x298], 1
lea ecx, [esi + 0x2e0]
mov dword [ebp + 0x29c], 1
push eax
call fcn.0041bfff
push str._nUser
lea ecx, [ebp - 0x20]
call fcn.00402b00
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x20]
push 0
mov ecx, dword [eax - 0xc]
add ecx, ecx
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.0041c09b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x88], 0x601900
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
push eax
push 0x8011
push 0x449
push dword [esi + 0x300]
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x5c]
call fcn.0041c0f7
mov byte [ebp - 4], 0
or eax, 0xffffffff
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x6023ba
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x6023b6
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x6023b6
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x6023ba
mov ecx, edx
call edi
push 0x3c
lea eax, [ebp + 0x1e0]
push 0
push eax
call fcn.005bc8f0
add esp, 0xc
mov dword [ebp + 0x1e0], 0x3c
lea eax, [ebp + 0x1e0]
mov dword [ebp + 0x1e4], 1
lea ecx, [esi + 0x2e0]
mov dword [ebp + 0x1e8], 0
push eax
call fcn.0041bfff
mov ecx, dword [ebx + 0x14]
push 0
mov eax, dword [ecx - 0xc]
add eax, eax
push eax
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0041c09b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x94], 0x601900
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x9c]
push eax
push 0x8011
push 0x449
push dword [esi + 0x300]
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x5c]
call fcn.0041c0f7
push 0x3c
lea eax, [ebp]
push 0
push eax
call fcn.005bc8f0
add esp, 0xc
mov dword [ebp], 0x3c
lea eax, [ebp]
mov dword [ebp + 4], 1
lea ecx, [esi + 0x2e0]
mov dword [ebp + 8], 1
push eax
call fcn.0041bfff
push str._nLibrary
lea ecx, [ebp - 0x1c]
call fcn.00402b00
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x1c]
push 0
mov ecx, dword [eax - 0xc]
add ecx, ecx
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.0041c09b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0xf8], 0x601900
mov dword [ebp - 0x100], eax
lea eax, [ebp - 0x100]
push eax
push 0x8011
push 0x449
push dword [esi + 0x300]
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x5c]
call fcn.0041c0f7
mov byte [ebp - 4], 0
or eax, 0xffffffff
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x602520
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x60251c
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x60251c
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x602520
mov ecx, edx
call edi
push 0x3c
lea eax, [ebp + 0x3c]
push 0
push eax
call fcn.005bc8f0
add esp, 0xc
mov dword [ebp + 0x3c], 0x3c
lea eax, [ebp + 0x3c]
mov dword [ebp + 0x40], 1
lea ecx, [esi + 0x2e0]
mov dword [ebp + 0x44], 0
push eax
call fcn.0041bfff
mov ecx, dword [ebx + 0x18]
push 0
mov eax, dword [ecx - 0xc]
add eax, eax
push eax
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0041c09b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0xec], 0x601900
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0xf4]
push eax
push 0x8011
push 0x449
push dword [esi + 0x300]
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x5c]
call fcn.0041c0f7
push 0x3c
lea eax, [ebp + 0x78]
push 0
push eax
call fcn.005bc8f0
add esp, 0xc
mov dword [ebp + 0x78], 0x3c
lea eax, [ebp + 0x78]
mov dword [ebp + 0x7c], 1
lea ecx, [esi + 0x2e0]
mov dword [ebp + 0x80], 1
push eax
call fcn.0041bfff
push str._nProcess
lea ecx, [ebp - 0x18]
call fcn.00402b00
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x18]
push 0
mov ecx, dword [eax - 0xc]
add ecx, ecx
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.0041c09b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0xe0], 0x601900
mov dword [ebp - 0xe8], eax
lea eax, [ebp - 0xe8]
push eax
push 0x8011
push 0x449
push dword [esi + 0x300]
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x5c]
call fcn.0041c0f7
mov byte [ebp - 4], 0
or eax, 0xffffffff
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x60267a
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x602676
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x602676
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x60267a
mov ecx, edx
call edi
push 0x3c
lea eax, [ebp + 0xb4]
push 0
push eax
call fcn.005bc8f0
add esp, 0xc
mov dword [ebp + 0xb4], 0x3c
lea eax, [ebp + 0xb4]
mov dword [ebp + 0xb8], 1
lea ecx, [esi + 0x2e0]
mov dword [ebp + 0xbc], 0
push eax
call fcn.0041bfff
mov ecx, dword [ebx + 0x1c]
push 0
mov eax, dword [ecx - 0xc]
add eax, eax
push eax
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0041c09b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0xd4], 0x601900
mov dword [ebp - 0xdc], eax
lea eax, [ebp - 0xdc]
jmp 0x6029b6
lea eax, [ebp + 0xf0]
push eax
call fcn.005bc8f0
add esp, 0xc
mov dword [ebp + 0xf0], 0x3c
lea eax, [ebp + 0xf0]
mov dword [ebp + 0xf4], 1
lea ecx, [esi + 0x2e0]
mov dword [ebp + 0xf8], 1
push eax
call fcn.0041bfff
push str.Ticket_nUser
lea ecx, [ebp - 0x60]
call fcn.00402b00
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x60]
push 0
mov ecx, dword [eax - 0xc]
add ecx, ecx
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.0041c09b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x104], 0x601900
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0x10c]
push eax
push 0x8011
push 0x449
push dword [esi + 0x300]
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x5c]
call fcn.0041c0f7
mov byte [ebp - 4], 0
or eax, 0xffffffff
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x6027d1
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x6027cd
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x6027cd
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x6027d1
mov ecx, edx
call edi
push 0x3c
lea eax, [ebp + 0x12c]
push 0
push eax
call fcn.005bc8f0
add esp, 0xc
mov dword [ebp + 0x12c], 0x3c
lea eax, [ebp + 0x12c]
mov dword [ebp + 0x130], 1
lea ecx, [esi + 0x2e0]
mov dword [ebp + 0x134], 0
push eax
call fcn.0041bfff
mov ecx, dword [ebx + 0x14]
push 0
mov eax, dword [ecx - 0xc]
add eax, eax
push eax
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0041c09b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0xa4], 0x601900
mov dword [ebp - 0xac], eax
lea eax, [ebp - 0xac]
push eax
push 0x8011
push 0x449
push dword [esi + 0x300]
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x5c]
call fcn.0041c0f7
push 0x3c
lea eax, [ebp + 0x168]
push 0
push eax
call fcn.005bc8f0
add esp, 0xc
mov dword [ebp + 0x168], 0x3c
lea eax, [ebp + 0x168]
mov dword [ebp + 0x16c], 1
lea ecx, [esi + 0x2e0]
mov dword [ebp + 0x170], 1
push eax
call fcn.0041bfff
push str._nExpiry
lea ecx, [ebp - 0x30]
call fcn.00402b00
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x30]
push 0
mov ecx, dword [eax - 0xc]
add ecx, ecx
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.0041c09b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0xb0], 0x601900
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0xb8]
push eax
push 0x8011
push 0x449
push dword [esi + 0x300]
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x5c]
call fcn.0041c0f7
mov byte [ebp - 4], 0
or eax, 0xffffffff
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x602946
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x602942
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x602942
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x602946
mov ecx, edx
call edi
push 0x3c
lea eax, [ebp + 0x1a4]
push 0
push eax
call fcn.005bc8f0
add esp, 0xc
mov dword [ebp + 0x1a4], 0x3c
lea eax, [ebp + 0x1a4]
mov dword [ebp + 0x1a8], 1
lea ecx, [esi + 0x2e0]
mov dword [ebp + 0x1ac], 0
push eax
call fcn.0041bfff
mov ecx, dword [ebx + 0x20]
push 0
mov eax, dword [ecx - 0xc]
add eax, eax
push eax
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0041c09b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0xbc], 0x601900
mov dword [ebp - 0xc4], eax
lea eax, [ebp - 0xc4]
push eax
push 0x8011
push 0x449
push dword [esi + 0x300]
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x5c]
call fcn.0041c0f7
push 0x3c
lea eax, [ebp + 0x21c]
push 0
push eax
call fcn.005bc8f0
add esp, 0xc
mov dword [ebp + 0x21c], 0x3c
lea eax, [ebp + 0x21c]
mov dword [ebp + 0x220], 1
lea ecx, [esi + 0x2e0]
mov dword [ebp + 0x224], 0
push eax
call fcn.0041bfff
mov edi, dword [ebx + 0x24]
mov edi, dword [edi]
cmp edi, dword [ebx + 0x24]
je 0x602b5e
call fcn.0040ddd2
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x6019eb
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
cmp ecx, vtable.ATL::CAtlStringMgr.0
jne 0x602a50
lock inc dword [eax + 0x14]
add eax, 8
jmp 0x602a54
mov ecx, eax
call edx
add eax, 0x10
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x10]
push dword [edi + 0x18]
push dword [edi + 0x14]
push str._n_s___d_
push eax
call fcn.00403ff0
mov esi, dword [ebp - 0x10]
lea ecx, [ebp + 0x268]
add esp, 0x10
mov eax, dword [esi - 0xc]
push 0
add eax, eax
push eax
push esi
call fcn.0041c09b
lea eax, [ebp + 0x268]
mov dword [ebp - 0xc8], 0x601900
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0xd0]
push eax
mov eax, dword [ebp - 0x14]
push 0x8011
push 0x449
push dword [eax + 0x300]
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp + 0x268]
call fcn.0041c0f7
mov byte [ebp - 4], 0
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x602b0e
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x602b0c
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x602b0c
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x602b0e
call edx
cmp byte [edi + 0xd], 0
jne 0x602b52
mov eax, dword [edi + 8]
cmp byte [eax + 0xd], 0
jne 0x602b33
mov edi, eax
mov eax, dword [edi]
cmp byte [eax + 0xd], 0
jne 0x602b52
mov edi, eax
mov eax, dword [edi]
cmp byte [eax + 0xd], 0
je 0x602b27
jmp 0x602b52
mov eax, dword [edi + 4]
cmp byte [eax + 0xd], 0
jne 0x602b50
nop dword [eax]
cmp edi, dword [eax + 8]
jne 0x602b50
mov edi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x602b40
mov edi, eax
cmp edi, dword [ebx + 0x24]
jne 0x602a26
mov esi, dword [ebp - 0x14]
cmp byte [ebx + 0xd], 0
jne 0x602ba2
mov eax, dword [ebx + 8]
cmp byte [eax + 0xd], 0
jne 0x602b83
mov ebx, eax
mov eax, dword [ebx]
cmp byte [eax + 0xd], 0
jne 0x602ba2
mov ebx, eax
mov eax, dword [ebx]
cmp byte [eax + 0xd], 0
je 0x602b77
jmp 0x602ba2
mov eax, dword [ebx + 4]
cmp byte [eax + 0xd], 0
jne 0x602ba0
nop dword [eax]
cmp ebx, dword [eax + 8]
jne 0x602ba0
mov ebx, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x602b90
mov ebx, eax
cmp ebx, dword [esi + 0xc0]
jne 0x6020b2
mov ecx, dword [ebp - 0xa0]
push 0
push 0
call fcn.0041bfb3
mov esi, dword [ebp - 0x2c]
mov ebx, dword [ebp - 0x14]
cmp byte [ebx + 0xa9], 0
jne 0x602bde
push 0x57
push str.The_licence_server_service_is_not_running:_The_details_below_are_the_last_known_status.
lea ecx, [ebp - 0x2c]
call fcn.00404c60
mov esi, dword [ebp - 0x2c]
cmp dword [esi - 0xc], 0
je 0x602bf0
push esi
lea ecx, [ebx + 0x1e0]
call fcn.00417269
lea ecx, [ebx + 0x260]
call fcn.00416c8e
movzx ecx, byte [ebx + 0xa9]
neg eax
sbb eax, eax
neg eax
cmp eax, ecx
je 0x602c18
push ecx
lea ecx, [ebx + 0x260]
call fcn.0041645e
lea ecx, [ebx + 0x2e0]
call fcn.00416c8e
movzx ecx, byte [ebx + 0xa9]
neg eax
sbb eax, eax
neg eax
cmp eax, ecx
je 0x602c40
push ecx
lea ecx, [ebx + 0x2e0]
call fcn.0041645e
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x602c84
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x602c82
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x602c82
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x602c84
call edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x348]
xor ecx, ebp
call fcn.005b75e6
lea esp, [ebp + 0x34c]
pop ebp
ret