Function at 0x4041e5
Capabilities:
Get graphical window text
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x434bf8
mov eax, dword fs:[0]
push eax
sub esp, 0x4f0
mov eax, dword [0x4412c4]
xor eax, esp
mov dword [esp + 0x4e8], eax
push ebx
push esi
push edi
mov eax, dword [0x4412c4]
xor eax, esp
push eax
lea eax, [esp + 0x500]
mov dword fs:[0], eax
xor ebx, ebx
push 0x410
mov esi, ecx
lea eax, [esp + 0xe2]
push ebx
push eax
mov dword [esp + 0x20], esi
mov byte [esi + 0x10c], bl
mov word [esp + 0xe8], bx
call fcn.004180a0
add esp, 0xc
push 0x41a
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0x104
lea ecx, [esp + 0xe0]
push ecx
push eax
mov dword [esp + 0x1c], eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea eax, [esp + 0xdc]
lea ecx, [esp + 0x18]
call fcn.0040102d
mov dword [esp + 0x508], ebx
cmp dword [esp + 0x2c], ebx
jne 0x4042a6
push 0x26
lea ecx, [esp + 0x1c]
call fcn.00402e87
cmp dword [esp + 0x30], ebx
pop ecx
je 0x4042c9
mov edi, dword [esp + 0x2c]
dec edi
lea eax, [esp + 0x18]
call fcn.0040b36a
cmp word [eax], 0x5c
je 0x4042c9
push 0x438a58
lea eax, [esp + 0x1c]
push eax
call fcn.00401053
lea eax, [esp + 0x18]
push eax
call fcn.0040c673
test al, al
pop ecx
jne 0x4042e1
lea ecx, [esp + 0x18]
call fcn.0040c791
lea eax, [esp + 0x18]
push eax
call fcn.0040c673
test al, al
pop ecx
jne 0x404337
push ebx
push 0x438ae8
push 0x438c84
push dword [esi + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
push dword [esp + 0x10]
call dword [sym.imp.USER32.dll_SetFocus]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0xffffffffffffffff
push ebx
push 0xb1
push dword [esp + 0x1c]
call esi
push ebx
push ebx
push 0xb7
push dword [esp + 0x1c]
call esi
push ebx
push 1
jmp 0x4047f1
lea eax, [esi + 0x110]
push 0xffffffffffffffff
mov dword [esp + 0x14], eax
push eax
xor ebx, ebx
lea eax, [esp + 0x20]
call fcn.004011e7
mov ebx, dword [esp + 0x14]
mov esi, ebx
call fcn.00403fdd
push 7
xor esi, esi
pop edi
mov dword [esp + 0x84], edi
mov dword [esp + 0x80], esi
mov word [esp + 0x70], si
push 0x10
lea ecx, [esp + 0x70]
mov byte [esp + 0x50c], 1
call fcn.00402e87
pop ecx
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], esi
mov word [esp + 0x38], si
lea eax, [esp + 0x34]
lea edi, [ebx + 0x190]
push eax
mov byte [esp + 0x50c], 2
call fcn.0040c4ad
mov eax, dword [esp + 0x4c]
cmp eax, esi
pop ecx
je 0x4043d5
lea edi, [eax - 1]
lea eax, [esp + 0x34]
call fcn.0040b36a
cmp word [eax], 0x5c
je 0x4043d5
push 0x438a58
lea eax, [esp + 0x38]
push eax
call fcn.00401053
mov eax, dword [esp + 0x80]
cmp eax, esi
je 0x404401
lea edi, [eax - 1]
lea eax, [esp + 0x6c]
call fcn.0040b36a
cmp word [eax], 0x5c
je 0x404401
push 0x438a58
lea eax, [esp + 0x70]
push eax
call fcn.00401053
lea esi, [esp + 0x34]
call fcn.0040b0fe
lea esi, [esp + 0x6c]
call fcn.0040b0fe
lea ecx, [esp + 0x34]
mov eax, esi
call fcn.00402b35
test al, al
jne 0x404733
mov eax, dword [esp + 0x10]
lea esi, [esp + 0x50]
call fcn.00401680
and dword [esp + 0x9c], 0
and word [esp + 0x8c], 0
mov dword [esp + 0xa0], 7
push 0x26
lea ecx, [esp + 0x8c]
mov byte [esp + 0x50c], 4
call fcn.00402e87
pop ecx
mov eax, esi
push eax
call fcn.0040b0a3
pop ecx
lea eax, [esp + 0x88]
push eax
call fcn.0040b0a3
pop ecx
mov esi, 0x438ae0
push esi
lea eax, [esp + 0x54]
call fcn.0040b034
pop ecx
push esi
lea eax, [esp + 0x8c]
call fcn.0040b034
pop ecx
lea eax, [esp + 0x50]
push eax
call fcn.0040b0a3
pop ecx
lea eax, [esp + 0x88]
push eax
call fcn.0040b0a3
pop ecx
lea eax, [esp + 0x50]
lea ecx, [esp + 0x88]
call fcn.0040aec4
test al, al
je 0x4044d1
lea eax, [esp + 0x50]
call fcn.00405142
lea eax, [ebx + 0x190]
cmp dword [eax + 0x18], 8
jb 0x4044e2
mov eax, dword [eax + 4]
jmp 0x4044e5
add eax, 4
cmp dword [esp + 0x68], 8
mov ecx, dword [esp + 0x54]
jae 0x4044f4
lea ecx, [esp + 0x54]
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push eax
push ecx
push 0x438b7c
mov edi, str.Config
push edi
call esi
test eax, eax
je 0x40470b
cmp byte [ebx + 0x22], 0
mov ecx, 0x438b98
jne 0x404521
mov ecx, 0x438bb0
lea eax, [ebx + 0x190]
cmp dword [eax + 0x18], 8
jb 0x404532
mov eax, dword [eax + 4]
jmp 0x404535
add eax, 4
push eax
push ecx
push 0x438b9c
push edi
call esi
cmp byte [ebx + 0x21], 0
mov ecx, 0x438b98
jne 0x40454f
mov ecx, 0x438bb0
lea eax, [ebx + 0x190]
cmp dword [eax + 0x18], 8
jb 0x404560
mov eax, dword [eax + 4]
jmp 0x404563
add eax, 4
push eax
push ecx
push 0x438bb4
push edi
call esi
cmp byte [ebx + 0x25], 0
mov ecx, 0x438b98
jne 0x40457d
mov ecx, 0x438bb0
lea eax, [ebx + 0x190]
cmp dword [eax + 0x18], 8
jb 0x40458e
mov eax, dword [eax + 4]
jmp 0x404591
add eax, 4
push eax
push ecx
push 0x438bc4
push edi
call esi
cmp byte [ebx + 0x26], 0
mov ecx, 0x438b98
jne 0x4045ab
mov ecx, 0x438bb0
lea eax, [ebx + 0x190]
cmp dword [eax + 0x18], 8
jb 0x4045bc
mov eax, dword [eax + 4]
jmp 0x4045bf
add eax, 4
push eax
push ecx
push str.Safe
push edi
call esi
cmp byte [ebx + 0x23], 0
mov ecx, 0x438b98
jne 0x4045d9
mov ecx, 0x438bb0
lea eax, [ebx + 0x190]
cmp dword [eax + 0x18], 8
jb 0x4045ea
mov eax, dword [eax + 4]
jmp 0x4045ed
add eax, 4
push eax
push ecx
push str.Desk
push edi
call esi
cmp byte [ebx + 0x24], 0
mov ecx, 0x438b98
jne 0x404607
mov ecx, 0x438bb0
lea eax, [ebx + 0x190]
cmp dword [eax + 0x18], 8
jb 0x404618
mov eax, dword [eax + 4]
jmp 0x40461b
add eax, 4
push eax
push ecx
push str.Movie
push edi
call esi
cmp byte [ebx + 0x27], 0
mov ecx, 0x438b98
jne 0x404635
mov ecx, 0x438bb0
lea eax, [ebx + 0x190]
cmp dword [eax + 0x18], 8
jb 0x404646
mov eax, dword [eax + 4]
jmp 0x404649
add eax, 4
push eax
push ecx
push str.IEHome
push edi
call esi
cmp byte [ebx + 0x28], 0
mov ecx, 0x438b98
jne 0x404663
mov ecx, 0x438bb0
lea eax, [ebx + 0x190]
cmp dword [eax + 0x18], 8
jb 0x404674
mov eax, dword [eax + 4]
jmp 0x404677
add eax, 4
push eax
push ecx
push str.AsDefault
push edi
call esi
cmp byte [ebx + 0x29], 0
mov ecx, 0x438b98
jne 0x404691
mov ecx, 0x438bb0
lea eax, [ebx + 0x190]
cmp dword [eax + 0x18], 8
jb 0x4046a2
mov eax, dword [eax + 4]
jmp 0x4046a5
add eax, 4
push eax
push ecx
push str.IEFav
push edi
call esi
cmp byte [ebx + 0x2a], 0
mov ecx, 0x438b98
jne 0x4046bf
mov ecx, 0x438bb0
lea eax, [ebx + 0x190]
cmp dword [eax + 0x18], 8
jb 0x4046d0
mov eax, dword [eax + 4]
jmp 0x4046d3
add eax, 4
push eax
push ecx
push str.PCMgr
push edi
call esi
cmp byte [ebx + 0x20], 0
mov ecx, 0x438bb0
jne 0x4046ed
mov ecx, 0x438b98
lea eax, [ebx + 0x190]
cmp dword [eax + 0x18], 8
jb 0x4046fe
mov eax, dword [eax + 4]
jmp 0x404701
add eax, 4
push eax
push ecx
push str.HideProgress
push edi
call esi
push 0
push 1
lea esi, [esp + 0x90]
call fcn.00401108
xor edi, edi
push edi
push 1
lea esi, [esp + 0x58]
mov byte [esp + 0x510], 2
call fcn.00401108
jmp 0x404735
xor edi, edi
mov eax, str.http:__www.2345.com_
lea ecx, [esp + 0xc0]
call fcn.0040102d
mov byte [esp + 0x508], 5
cmp dword [ebx + 0x78], edi
je 0x404777
push 0x438cd4
lea eax, [esp + 0xc4]
push eax
call fcn.00401053
push 0xffffffffffffffff
push edi
lea eax, [ebx + 0x64]
lea esi, [esp + 0xc8]
call fcn.00401286
mov dword [esp + 0xbc], 7
mov dword [esp + 0xb8], edi
mov word [esp + 0xa8], di
push 6
lea ecx, [esp + 0xa8]
mov byte [esp + 0x50c], 6
call fcn.00402e87
movzx eax, word [ebp + 8]
pop ecx
push eax
push dword [ebx + 4]
mov byte [ebx + 0x29], 0
call dword [sym.imp.USER32.dll_EndDialog]
xor ebx, ebx
push edi
inc ebx
push ebx
lea esi, [esp + 0xac]
call fcn.00401108
push edi
push ebx
lea esi, [esp + 0xc8]
call fcn.00401108
push edi
push ebx
lea esi, [esp + 0x3c]
call fcn.00401108
push edi
push ebx
lea esi, [esp + 0x74]
call fcn.00401108
push edi
push ebx
lea esi, [esp + 0x20]
call fcn.00401108
xor eax, eax
mov ecx, dword [esp + 0x500]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x4e8]
xor ecx, esp
call fcn.00417afe
mov esp, ebp
pop ebp
ret 4