Function at 0x10023cb
Capabilities:
Get graphical window text

Disassembly:
push 0xd8
push 0x10048a0
call fcn.01004228
mov eax, dword [ebp + 8]
mov dword [ebp - 0xac], eax
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0xa4], ebx
xor esi, esi
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xe8], esi
push 0x38
push esi
lea eax, [ebp - 0xe4]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [ebp - 4], esi
push 0x104
mov esi, 0x1006190
push esi
push ebx
call dword [sym.imp.USER32.dll_GetClassNameW]
test eax, eax
je 0x1002452
push dword [section..data]
push esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpW]
call edi
test eax, eax
je 0x100263d
push 0x1001418
push esi
call edi
test eax, eax
je 0x100263d
mov dword [ebp - 0xe8], 0x3c
lea eax, [ebp - 0xe8]
push eax
push ebx
call dword [sym.imp.USER32.dll_GetWindowInfo]
test eax, eax
je 0x100248e
test dword [ebp - 0xc4], 0x10000000
je 0x100263d
test dword [ebp - 0xc0], 0x8000000
jne 0x100263d
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov ebx, eax
test ebx, ebx
jl 0x10024a3
cmp ebx, 0x400
jl 0x10024a8
mov ebx, 0x3ff
lea edi, [ebx + ebx]
lea eax, [edi + 2]
push eax
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0xa0], eax
test eax, eax
je 0x10024e7
inc ebx
push ebx
push eax
push dword [ebp - 0xa4]
call dword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
je 0x10024e7
xor eax, eax
mov ecx, dword [ebp - 0xa0]
mov word [edi + ecx], ax
lea eax, [ebp - 0xa8]
push eax
push dword [ebp - 0xa4]
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
xor ebx, ebx
cmp dword [ebp - 0xa8], ebx
jne 0x100252d
push 0x1001360
push dword [ebp - 0xa0]
push dword [ebp - 0xa4]
call fcn.0100219f
test eax, eax
je 0x100263d
and dword [ebp - 0xa0], ebx
jmp 0x100263d
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [ebp - 0xa8], eax
jne 0x100257f
cmp dword [0x1006070], ebx
je 0x100263d
mov eax, dword [0x10063dc]
test eax, eax
je 0x100263d
push 0x3f1
push 0
mov edi, 0x46c
push edi
push eax
mov esi, dword [sym.imp.USER32.dll_PostMessageW]
call esi
push 0x3f0
push 3
push edi
push dword [0x10063dc]
call esi
jmp 0x100263d
push dword [ebp - 0xa8]
push ebx
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
cmp edi, ebx
je 0x10025fb
push edi
push dword [ebp - 0xa4]
call fcn.01001ab5
push 0x104
push esi
push eax
push edi
call sub.KERNEL32.dll_K32GetModuleFileNameExW
test eax, eax
jne 0x10025bc
mov word [0x1006190], ax
jmp 0x10025f2
xor eax, eax
mov word [ebp - 0x9c], ax
push 0x7e
push ebx
lea eax, [ebp - 0x9a]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
push 0x40
lea eax, [ebp - 0x9c]
push eax
push esi
call fcn.01001f4d
lea eax, [ebp - 0x9c]
push eax
call fcn.01001ca4
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1002603
xor eax, eax
mov word [0x1006190], ax
push esi
push dword [ebp - 0xa0]
push dword [ebp - 0xa4]
call fcn.0100219f
test eax, eax
je 0x100263d
xor esi, esi
cmp dword [ebp - 0xac], esi
je 0x1002637
push esi
push 4
push 0x113
push dword [ebp - 0xac]
call dword [sym.imp.USER32.dll_PostMessageW]
mov dword [ebp - 0xa0], esi
mov dword [ebp - 4], 0xfffffffe
call fcn.01002653
xor eax, eax
call fcn.01004270
ret 8