Function at 0x4100c0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e4b36
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push esi
mov dword [ebp - 0x18], 0
mov esi, ecx
mov ebx, dword [ebp + 8]
mov ecx, ebx
push edi
call dword [sym.imp.mfc140.dll_Ordinal_316]
push 0
push 0
mov dword [ebp - 4], 0
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x190
push dword [esi + 0xd0]
mov dword [ebp - 0x18], 1
call edi
test eax, eax
jle 0x4101bd
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140.dll_Ordinal_316]
xor ebx, ebx
mov dword [ebp - 4], 1
push ebx
push ebx
push 0x18b
push dword [esi + 0xd0]
mov dword [ebp - 0x10], 0
call edi
test eax, eax
jle 0x410183
nop dword [eax + eax]
push 0
push ebx
push 0x187
push dword [esi + 0xd0]
call edi
test eax, eax
je 0x41016d
mov eax, dword [ebp - 0x10]
bts eax, ebx
mov dword [ebp - 0x10], eax
push 0
push 0
push 0x18b
push dword [esi + 0xd0]
inc ebx
call edi
cmp ebx, eax
jl 0x410150
push 0
push 0
push dword [ebp - 0x10]
lea eax, [ebp - 0x14]
push str.tvweekdayhours
push str._and____s_p1__d__p2__d__p3__d___
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x14]
add esp, 0x18
mov ecx, ebx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1692]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
push 0
push 0x190
push dword [esi + 0x150]
call edi
test eax, eax
jle 0x41026f
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_316]
xor ebx, ebx
mov dword [ebp - 4], 2
push ebx
push ebx
push 0x18b
push dword [esi + 0x150]
mov dword [ebp - 0x14], 0
call edi
test eax, eax
jle 0x410235
push 0
push ebx
push 0x187
push dword [esi + 0x150]
call edi
test eax, eax
je 0x41021f
mov eax, dword [ebp - 0x14]
bts eax, ebx
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x18b
push dword [esi + 0x150]
inc ebx
call edi
cmp ebx, eax
jl 0x410202
push 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push str.tvweekendhours
push str._and____s_p1__d__p2__d__p3__d___
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x10]
add esp, 0x18
mov ecx, ebx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1692]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
push 0
push 0x190
push dword [esi + 0x1d0]
call edi
test eax, eax
jle 0x410321
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_316]
xor ebx, ebx
mov dword [ebp - 4], 3
push ebx
push ebx
push 0x18b
push dword [esi + 0x1d0]
mov dword [ebp - 0x14], 0
call edi
test eax, eax
jle 0x4102e7
push 0
push ebx
push 0x187
push dword [esi + 0x1d0]
call edi
test eax, eax
je 0x4102d1
mov eax, dword [ebp - 0x14]
bts eax, ebx
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x18b
push dword [esi + 0x1d0]
inc ebx
call edi
cmp ebx, eax
jl 0x4102b4
push 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push str.tvdays
push str._and____s_p1__d__p2__d__p3__d___
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x10]
add esp, 0x18
mov ecx, ebx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1692]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
push 0
push 0x190
push dword [esi + 0x250]
call edi
test eax, eax
jle 0x4103d3
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_316]
xor ebx, ebx
mov dword [ebp - 4], 4
push ebx
push ebx
push 0x18b
push dword [esi + 0x250]
mov dword [ebp - 0x14], 0
call edi
test eax, eax
jle 0x410399
push 0
push ebx
push 0x187
push dword [esi + 0x250]
call edi
test eax, eax
je 0x410383
mov eax, dword [ebp - 0x14]
bts eax, ebx
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x18b
push dword [esi + 0x250]
inc ebx
call edi
cmp ebx, eax
jl 0x410366
push 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push str.owntv
push str._and____s_p1__d__p2__d__p3__d___
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x10]
add esp, 0x18
mov ecx, ebx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1692]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
push 0
push 0x190
push dword [esi + 0x2d0]
call edi
test eax, eax
jle 0x410485
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_316]
xor ebx, ebx
mov dword [ebp - 4], 5
push ebx
push ebx
push 0x18b
push dword [esi + 0x2d0]
mov dword [ebp - 0x14], 0
call edi
test eax, eax
jle 0x41044b
push 0
push ebx
push 0x187
push dword [esi + 0x2d0]
call edi
test eax, eax
je 0x410435
mov eax, dword [ebp - 0x14]
bts eax, ebx
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x18b
push dword [esi + 0x2d0]
inc ebx
call edi
cmp ebx, eax
jl 0x410418
push 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push str.freqlistenedtv
push str._and____s_p1__d__p2__d__p3__d___
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x10]
add esp, 0x18
mov ecx, ebx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1692]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
push 0
push 0x190
push dword [esi + 0x350]
call edi
test eax, eax
jle 0x41053d
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_316]
xor ebx, ebx
mov dword [ebp - 4], 6
push ebx
push ebx
push 0x18b
push dword [esi + 0x350]
mov dword [ebp - 0x14], 0
call edi
test eax, eax
jle 0x410503
nop word [eax + eax]
push 0
push ebx
push 0x187
push dword [esi + 0x350]
call edi
test eax, eax
je 0x4104ed
mov eax, dword [ebp - 0x14]
bts eax, ebx
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x18b
push dword [esi + 0x350]
inc ebx
call edi
cmp ebx, eax
jl 0x4104d0
push 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push str.wovalltv
push str._and____s_p1__d__p2__d__p3__d___
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x10]
add esp, 0x18
mov ecx, ebx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1692]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
push 0
push 0x190
push dword [esi + 0x3d0]
call edi
test eax, eax
jle 0x4105ef
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_316]
xor ebx, ebx
mov dword [ebp - 4], 7
push ebx
push ebx
push 0x18b
push dword [esi + 0x3d0]
mov dword [ebp - 0x14], 0
call edi
test eax, eax
jle 0x4105b5
push 0
push ebx
push 0x187
push dword [esi + 0x3d0]
call edi
test eax, eax
je 0x41059f
mov eax, dword [ebp - 0x14]
bts eax, ebx
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x18b
push dword [esi + 0x3d0]
inc ebx
call edi
cmp ebx, eax
jl 0x410582
push 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push str.freqlistenedradio
push str._and____s_p1__d__p2__d__p3__d___
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x10]
add esp, 0x18
mov ecx, ebx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1692]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
push 0
push 0x190
push dword [esi + 0x450]
call edi
test eax, eax
jle 0x4106a1
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_316]
xor ebx, ebx
mov dword [ebp - 4], 8
push ebx
push ebx
push 0x18b
push dword [esi + 0x450]
mov dword [ebp - 0x14], 0
call edi
test eax, eax
jle 0x410667
push 0
push ebx
push 0x187
push dword [esi + 0x450]
call edi
test eax, eax
je 0x410651
mov eax, dword [ebp - 0x14]
bts eax, ebx
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x18b
push dword [esi + 0x450]
inc ebx
call edi
cmp ebx, eax
jl 0x410634
push 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push str.mobilelistenfrequency
push str._and____s_p1__d__p2__d__p3__d___
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x10]
add esp, 0x18
mov ecx, ebx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1692]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
push 0
push 0x190
push dword [esi + 0x4d0]
call edi
test eax, eax
jle 0x410753
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_316]
xor ebx, ebx
mov dword [ebp - 4], 9
push ebx
push ebx
push 0x18b
push dword [esi + 0x4d0]
mov dword [ebp - 0x14], 0
call edi
test eax, eax
jle 0x410719
push 0
push ebx
push 0x187
push dword [esi + 0x4d0]
call edi
test eax, eax
je 0x410703
mov eax, dword [ebp - 0x14]
bts eax, ebx
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x18b
push dword [esi + 0x4d0]
inc ebx
call edi
cmp ebx, eax
jl 0x4106e6
push 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push str.laptophomelistenfreq
push str._and____s_p1__d__p2__d__p3__d___
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x10]
add esp, 0x18
mov ecx, ebx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1692]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
push 0
push 0x190
push dword [esi + 0x550]
call edi
test eax, eax
jle 0x410805
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_316]
xor ebx, ebx
mov dword [ebp - 4], 0xa
push ebx
push ebx
push 0x18b
push dword [esi + 0x550]
mov dword [ebp - 0x14], 0
call edi
test eax, eax
jle 0x4107cb
push 0
push ebx
push 0x187
push dword [esi + 0x550]
call edi
test eax, eax
je 0x4107b5
mov eax, dword [ebp - 0x14]
bts eax, ebx
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x18b
push dword [esi + 0x550]
inc ebx
call edi
cmp ebx, eax
jl 0x410798
push 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push str.laptopworklistenfreq
push str._and____s_p1__d__p2__d__p3__d___
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x10]
add esp, 0x18
mov ecx, ebx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1692]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
push 0
push 0x190
push dword [esi + 0x5d0]
call edi
test eax, eax
jle 0x4108bd
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_316]
xor ebx, ebx
mov dword [ebp - 4], 0xb
push ebx
push ebx
push 0x18b
push dword [esi + 0x5d0]
mov dword [ebp - 0x14], 0
call edi
test eax, eax
jle 0x410883
nop word [eax + eax]
push 0
push ebx
push 0x187
push dword [esi + 0x5d0]
call edi
test eax, eax
je 0x41086d
mov eax, dword [ebp - 0x14]
bts eax, ebx
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x18b
push dword [esi + 0x5d0]
inc ebx
call edi
cmp ebx, eax
jl 0x410850
push 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push str.tabletlistenfreq
push str._and____s_p1__d__p2__d__p3__d___
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x10]
add esp, 0x18
mov ecx, ebx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1692]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
push 0
push 0x190
push dword [esi + 0x6d0]
call edi
test eax, eax
jle 0x41096f
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_316]
xor ebx, ebx
mov dword [ebp - 4], 0xc
push ebx
push ebx
push 0x18b
push dword [esi + 0x6d0]
mov dword [ebp - 0x14], 0
call edi
test eax, eax
jle 0x410935
push 0
push ebx
push 0x187
push dword [esi + 0x6d0]
call edi
test eax, eax
je 0x41091f
mov eax, dword [ebp - 0x14]
bts eax, ebx
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x18b
push dword [esi + 0x6d0]
inc ebx
call edi
cmp ebx, eax
jl 0x410902
push 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push str.owndab
push str._and____s_p1__d__p2__d__p3__d___
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x10]
add esp, 0x18
mov ecx, ebx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1692]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
push 0
push 0x190
push dword [esi + 0x7d8]
call edi
test eax, eax
jle 0x410a21
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_316]
xor ebx, ebx
mov dword [ebp - 4], 0xd
push ebx
push ebx
push 0x18b
push dword [esi + 0x7d8]
mov dword [ebp - 0x14], 0
call edi
test eax, eax
jle 0x4109e7
push 0
push ebx
push 0x187
push dword [esi + 0x7d8]
call edi
test eax, eax
je 0x4109d1
mov eax, dword [ebp - 0x14]
bts eax, ebx
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x18b
push dword [esi + 0x7d8]
inc ebx
call edi
cmp ebx, eax
jl 0x4109b4
push 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push str.ownmobile
push str._and____s_p1__d__p2__d__p3__d___
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x10]
add esp, 0x18
mov ecx, ebx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1692]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
push 0
push 0x190
push dword [esi + 0x858]
call edi
test eax, eax
jle 0x410ad3
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_316]
xor ebx, ebx
mov dword [ebp - 4], 0xe
push ebx
push ebx
push 0x18b
push dword [esi + 0x858]
mov dword [ebp - 0x14], 0
call edi
test eax, eax
jle 0x410a99
push 0
push ebx
push 0x187
push dword [esi + 0x858]
call edi
test eax, eax
je 0x410a83
mov eax, dword [ebp - 0x14]
bts eax, ebx
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x18b
push dword [esi + 0x858]
inc ebx
call edi
cmp ebx, eax
jl 0x410a66
push 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push str.ownsmartphone
push str._and____s_p1__d__p2__d__p3__d___
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x10]
add esp, 0x18
mov ecx, ebx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1692]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
push 0
push 0x147
push dword [esi + 0x750]
call edi
cmp eax, 0xffffffff
je 0x410b66
push 0
push 0
push 0x147
push dword [esi + 0x750]
call edi
push 0
push eax
push 0x150
push dword [esi + 0x750]
call edi
mov edi, eax
test edi, edi
je 0x410b66
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140.dll_Ordinal_316]
mov dword [ebp - 4], 0xf
mov ecx, dword [esi + 0x7b0]
neg ecx
sbb ecx, ecx
xor eax, eax
and ecx, 0xf4240
cmp dword [esi + 0x7b4], eax
setne al
add ecx, eax
lea eax, [ebp - 0x14]
push ecx
push edi
push str._and___stationawareness_p1__ld__p2__ld___
push eax
call dword [sym.imp.mfc140.dll_Ordinal_4807]
add esp, 0x10
lea eax, [ebp - 0x14]
mov ecx, ebx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1692]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov ecx, dword [ebp - 0xc]
mov eax, ebx
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4