Function at 0x428100
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x80
mov eax, dword [0x56d380]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov esi, ecx
mov edx, dword [esi + 4]
xor eax, eax
push 8
lea ecx, [ebp - 0x14]
push ecx
push edx
mov word [ebp - 0x14], ax
mov dword [ebp - 0x12], eax
mov dword [ebp - 0xe], eax
mov dword [ebp - 0xa], eax
mov word [ebp - 6], ax
call dword [sym.imp.USER32.dll_GetClassNameW]
test eax, eax
je 0x4281bb
push 0x53ce44
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x4281bb
mov ecx, dword [esi + 4]
mov edi, dword [sym.imp.USER32.dll_GetWindowLongW]
push 0xfffffffffffffff0
push ecx
call edi
mov ecx, eax
or ecx, 0x100
cmp eax, ecx
je 0x428178
mov edx, dword [esi + 4]
push ecx
push 0xfffffffffffffff0
push edx
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov eax, dword [esi + 4]
push 0xfffffffffffffff0
push eax
call edi
and eax, 0xff
cmp eax, 3
je 0x4281b7
cmp eax, 4
je 0x4281b7
cmp eax, 5
je 0x4281b7
cmp eax, 6
je 0x4281b7
cmp eax, 7
je 0x4281b7
cmp eax, 8
je 0x4281b7
cmp eax, 9
je 0x4281b7
cmp eax, 0xd
je 0x4281b7
cmp eax, 0xe
je 0x4281b7
cmp eax, 0xf
jne 0x4281bb
and byte [esi + 0x58], 0xfe
push 0x7f89
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
test byte [esi + 0x58], 1
mov dword [esi + 0x2c], eax
je 0x42821c
cmp dword [esi + 0x34], 0
jne 0x42820f
push 0x58
lea ecx, [ebp - 0x6c]
push 0
push ecx
mov dword [ebp - 0x70], 0
call fcn.00500080
add esp, 0xc
push 0
lea edx, [ebp - 0x70]
push edx
push 0x5c
push 0x1f
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
lea eax, [ebp - 0x70]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
or byte [esi + 0x58], 0x10
mov dword [esi + 0x34], eax
cmp dword [esi + 0x30], 0
jne 0x42821c
mov ecx, esi
call fcn.004276d0
mov ecx, dword [0x570980]
mov eax, dword [esi + 4]
mov edx, dword [0x56b00c]
push 0
push ecx
mov ecx, dword [section..data]
push 0
push eax
mov eax, dword [0x56b004]
sub edx, eax
push edx
mov edx, dword [0x56b008]
sub edx, ecx
push edx
push eax
push ecx
push 0
push 0
push 0x53cce8
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [esi + 0x48], eax
cmp dword [esi + 0x24], 0
jne 0x4282a3
mov eax, dword [esi + 4]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
test eax, eax
jle 0x4282a3
lea edi, [eax + 1]
xor ecx, ecx
mov eax, edi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0047c0b3
add esp, 4
mov dword [esi + 0x24], eax
test eax, eax
je 0x4282a3
push edi
push eax
mov eax, dword [esi + 4]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov ecx, esi
call fcn.00427c60
cmp dword [esi + 0x28], 0
jne 0x4282cc
mov ecx, dword [esi + 0x54]
shr ecx, 2
test cl, 1
jne 0x4282cc
mov eax, dword [esi + 0x24]
test eax, eax
je 0x42830c
push eax
mov ecx, esi
call fcn.00427f00
jmp 0x42830c
mov edx, dword [esi + 0x48]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 1
push 0x401
push edx
call edi
mov eax, dword [esi + 0x28]
mov ecx, dword [esi + 4]
push 0
push eax
lea eax, [esi + 0x38]
push eax
push 1
push ecx
push 0
lea ecx, [ebp - 0x44]
call fcn.00424e70
mov eax, dword [esi + 0x48]
lea edx, [ebp - 0x44]
push edx
push 0
push 0x432
push eax
call edi
test byte [esi + 0x58], 1
je 0x4283c8
push 0x2001f
xor edi, edi
push str.SoftwareMicrosoftInternet_ExplorerSettings
push closesocket
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x78], edi
call fcn.00420530
test eax, eax
jne 0x4283ba
lea edx, [ebp - 0x74]
mov dword [ebp - 0x2a], eax
mov dword [ebp - 0x26], eax
mov dword [ebp - 0x22], eax
mov dword [ebp - 0x1e], eax
mov dword [ebp - 0x1a], eax
mov word [ebp - 0x16], ax
push edx
xor ecx, ecx
lea eax, [ebp - 0x2c]
push eax
mov word [ebp - 0x2c], cx
mov edi, 0xc
push str.Anchor_Color
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x74], edi
call fcn.00426a70
test eax, eax
jne 0x42838a
lea ecx, [ebp - 0x2c]
push ecx
call fcn.00426fa0
add esp, 4
cmp eax, 0xffffffff
je 0x42838a
mov dword [esi + 0x4c], eax
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x2c]
push eax
push str.Anchor_Color_Visited
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x74], edi
call fcn.00426a70
test eax, eax
jne 0x4283ba
lea ecx, [ebp - 0x2c]
push ecx
call fcn.00426fa0
add esp, 4
cmp eax, 0xffffffff
je 0x4283ba
mov dword [esi + 0x50], eax
mov eax, dword [ebp - 0x80]
test eax, eax
je 0x4283c8
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.00500397
mov esp, ebp
pop ebp
ret