Function at 0x42e2a0
Capabilities:
Get graphical window text

Disassembly:
push 0xffffffffffffffff
push 0x4cd329
mov eax, dword fs:[0]
push eax
sub esp, 0x170
mov eax, dword [0x500770]
xor eax, esp
mov dword [esp + 0x16c], eax
push ebx
push ebp
push edi
mov eax, dword [0x500770]
xor eax, esp
push eax
lea eax, [esp + 0x180]
mov dword fs:[0], eax
xor ebp, ebp
mov dword [esp + 0x188], ebp
mov ebx, ecx
mov edi, edx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x3c], esi
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], ebp
call fcn.00491248
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x42e311
push 0x80004005
call fcn.00401ee0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x54], eax
push ebp
lea ecx, [esp + 0x44]
push ecx
push edi
mov dword [esp + 0x194], 1
call fcn.0042e170
mov edi, eax
push edi
call dword [sym.imp.USER32.dll_GetParent]
mov dword [esp + 0x18], eax
call fcn.00491248
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x42e35f
push 0x80004005
call fcn.00401ee0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x10], eax
mov byte [esp + 0x188], 2
call fcn.00491248
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x42e391
push 0x80004005
call fcn.00401ee0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x30], eax
mov bl, 3
push str._table_
mov ecx, esi
mov byte [esp + 0x18c], bl
call fcn.00401f00
push 0x3a
push str._tr__td__font_colordarkblue_Window__font__table_border1_
mov ecx, esi
mov dword [esp + 0x3c], 1
call fcn.00406ad0
push 0x80
lea ecx, [esp + 0x80]
push ecx
push edi
call dword [sym.imp.USER32.dll_GetClassNameW]
lea edx, [esp + 0x7c]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Class_name
call fcn.00401f00
lea eax, [esp + 0x1c]
push eax
call fcn.0042eca0
mov byte [esp + 0x188], 4
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, esi
call fcn.00406ad0
mov byte [esp + 0x188], bl
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42e43d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x80
lea ecx, [esp + 0x80]
push ecx
push edi
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea edx, [esp + 0x7c]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Title
call fcn.00401f00
lea eax, [esp + 0x1c]
push eax
call fcn.0042eca0
mov byte [esp + 0x188], 5
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, esi
call fcn.00406ad0
mov byte [esp + 0x188], bl
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42e4ae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push edi
lea ecx, [esp + 0x14]
push 0x4dd418
push ecx
call fcn.00406c50
mov edx, dword [esp + 0x1c]
add esp, 0xc
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Handle
call fcn.00401f00
lea eax, [esp + 0x1c]
push eax
call fcn.0042eca0
mov byte [esp + 0x188], 6
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, esi
call fcn.00406ad0
mov byte [esp + 0x188], bl
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42e51e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ebp, dword [sym.imp.USER32.dll_GetWindowLongW]
push 0xfffffffffffffff4
push edi
call ebp
push eax
lea ecx, [esp + 0x14]
push 0x4d97f4
push ecx
call fcn.00406c50
mov edx, dword [esp + 0x1c]
add esp, 0xc
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Control_ID
call fcn.00401f00
lea eax, [esp + 0x1c]
push eax
call fcn.0042eca0
mov byte [esp + 0x188], 7
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, esi
call fcn.00406ad0
mov byte [esp + 0x188], bl
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42e599
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0xfffffffffffffff0
push edi
call ebp
push eax
lea ecx, [esp + 0x14]
push 0x4dd418
push ecx
call fcn.00406c50
mov edx, dword [esp + 0x1c]
add esp, 0xc
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Styles
call fcn.00401f00
lea eax, [esp + 0x1c]
push eax
call fcn.0042eca0
mov byte [esp + 0x188], 8
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, esi
call fcn.00406ad0
mov byte [esp + 0x188], bl
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42e60e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x20]
push ecx
push edi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x24]
push eax
push ecx
push edx
lea eax, [esp + 0x20]
push str.__d___d____d___d_
push eax
call fcn.00406c50
mov ecx, dword [esp + 0x28]
add esp, 0x18
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.RECT
call fcn.00401f00
lea edx, [esp + 0x1c]
push edx
call fcn.0042eca0
mov byte [esp + 0x188], 9
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, esi
call fcn.00406ad0
mov byte [esp + 0x188], bl
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42e69d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x28]
sub ecx, dword [esp + 0x20]
lea edx, [esp + 0x10]
push ecx
push 0x4d97f4
push edx
call fcn.00406c50
mov eax, dword [esp + 0x1c]
add esp, 0xc
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Width
call fcn.00401f00
lea ecx, [esp + 0x1c]
push ecx
call fcn.0042eca0
mov byte [esp + 0x188], 0xa
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, esi
call fcn.00406ad0
mov byte [esp + 0x188], bl
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x42e715
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x2c]
sub ecx, dword [esp + 0x24]
lea edx, [esp + 0x10]
push ecx
push 0x4d97f4
push edx
call fcn.00406c50
mov eax, dword [esp + 0x1c]
add esp, 0xc
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Height
call fcn.00401f00
lea ecx, [esp + 0x1c]
push ecx
call fcn.0042eca0
mov byte [esp + 0x188], 0xb
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, esi
call fcn.00406ad0
mov byte [esp + 0x188], bl
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x42e78d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ebp, dword [esp + 0x38]
mov ebx, dword [esp + 0x1c]
push 1
lea ecx, [esp + 0x44]
push ecx
push ebp
call fcn.0042e170
test eax, eax
mov edx, 0x4dd570
jne 0x42e7b0
mov edx, 0x4dd578
mov eax, edx
lea edi, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x42e7b5
sub eax, edi
sar eax, 1
push eax
push edx
lea ecx, [esp + 0x18]
call fcn.00402310
mov edx, dword [esp + 0x10]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Has_Tooltip
call fcn.00401f00
lea eax, [esp + 0x24]
push eax
call fcn.0042eca0
mov byte [esp + 0x188], 0xc
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, esi
call fcn.00406ad0
mov byte [esp + 0x188], 3
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42e82d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ebx, 0xd
push ebx
push str.__table___td_
mov ecx, esi
call fcn.00406ad0
push 0x3c
push str._td__font_colordarkblue_Window_Owner__font__table_border1_
mov ecx, esi
call fcn.00406ad0
mov edi, dword [esp + 0x18]
test edi, edi
je 0x42e8f2
push 0x80
lea ecx, [esp + 0x80]
push ecx
push edi
call dword [sym.imp.USER32.dll_GetClassNameW]
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x20]
call fcn.00401f00
mov byte [esp + 0x188], bl
mov eax, dword [eax]
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.0042ed90
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x18c], 0xe
call fcn.00406e20
mov byte [esp + 0x188], bl
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42e8c8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x188], 3
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42e902
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x42e902
push 3
push 0x4dd634
lea ecx, [esp + 0x18]
call fcn.00402310
mov ecx, dword [esp + 0x10]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Class_name
call fcn.00401f00
lea edx, [esp + 0x20]
push edx
call fcn.0042eca0
mov byte [esp + 0x188], 0xf
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, esi
call fcn.00406ad0
mov byte [esp + 0x188], 3
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42e960
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test edi, edi
je 0x42ea03
push 0x80
lea ecx, [esp + 0x80]
push ecx
push edi
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x20]
call fcn.00401f00
mov bl, 0x10
mov byte [esp + 0x188], bl
mov eax, dword [eax]
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.0042ed90
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x18c], 0x11
call fcn.00406e20
mov byte [esp + 0x188], bl
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42e9d9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x188], 3
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42ea13
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x42ea13
push 3
push 0x4dd634
lea ecx, [esp + 0x18]
call fcn.00402310
mov ecx, dword [esp + 0x10]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Title
call fcn.00401f00
lea edx, [esp + 0x20]
push edx
call fcn.0042eca0
mov byte [esp + 0x188], 0x12
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, esi
call fcn.00406ad0
mov byte [esp + 0x188], 3
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42ea71
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push edi
lea ecx, [esp + 0x14]
push 0x4dd418
push ecx
call fcn.00406c50
mov edx, dword [esp + 0x1c]
add esp, 0xc
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Handle
call fcn.00401f00
lea eax, [esp + 0x20]
push eax
call fcn.0042eca0
mov byte [esp + 0x188], 0x13
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, esi
call fcn.00406ad0
mov byte [esp + 0x188], 3
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42eae2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 8
push str.__table_
mov ecx, esi
call fcn.00406ad0
push 0x3c
push str._br__font_colordarkblue_Mouse_Cursor__font__table_border1_
mov ecx, esi
call fcn.00406ad0
mov ecx, dword [ebp]
push ecx
lea edx, [esp + 0x14]
push 0x4d97f4
push edx
call fcn.00406c50
mov eax, dword [esp + 0x1c]
add esp, 0xc
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x4dd6cc
call fcn.00401f00
lea ecx, [esp + 0x20]
push ecx
call fcn.0042eca0
mov byte [esp + 0x188], 0x14
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, esi
call fcn.00406ad0
mov byte [esp + 0x188], 3
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x42eb72
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp + 4]
push ecx
lea edx, [esp + 0x14]
push 0x4d97f4
push edx
call fcn.00406c50
mov edi, dword [esp + 0x1c]
add esp, 0xc
push edi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x4dd6d0
call fcn.00401f00
lea eax, [esp + 0x20]
push eax
call fcn.0042eca0
mov byte [esp + 0x188], 0x15
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, esi
call fcn.00406ad0
mov byte [esp + 0x188], 3
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42ebe6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x1a
push 0x4dd6d4
mov ecx, esi
call fcn.00406ad0
mov byte [esp + 0x188], 2
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42ec1c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [edi - 0x10]
mov byte [esp + 0x188], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42ec40
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x188], 0
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42ec68
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [esp + 0x180]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebp
pop ebx
mov ecx, dword [esp + 0x16c]
xor ecx, esp
call fcn.004a74b2
add esp, 0x17c
ret