Function at 0x10009bf0
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x84
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x9c]
xor ebp, ebp
xor ebx, ebx
cmp edi, ebp
mov dword [esp + 0x10], ebp
jl 0x1000a1e8
cmp edi, 0x20
jge 0x1000a1e8
mov esi, dword [sym.imp.USER32.dll_FindWindowExA]
mov eax, dword [esp + 0x98]
push 0
push str.AfxWnd42
push ebx
push eax
call esi
mov ebx, eax
test ebx, ebx
je 0x10009ee7
push 0xfffffffffffffff0
push ebx
mov dword [esp + 0x18], 1
call dword [sym.imp.USER32.dll_GetWindowLongA]
cmp eax, 0x52000000
jne 0x10009c20
jmp 0x10009c5c
mov esi, dword [sym.imp.USER32.dll_FindWindowExA]
push 0
push str.Button
push ebp
push ebx
call esi
mov ebp, eax
test ebp, ebp
je 0x10009d96
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x15]
mov byte [esp + 0x14], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebp
stosb byte es:[edi], al
call dword [sym.imp.USER32.dll_IsWindowVisible]
lea ecx, [esp + 0x14]
push 0x20
push ecx
push ebp
mov edi, eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov esi, 0x1000f044
lea eax, [esp + 0x14]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x10009cca
test cl, cl
je 0x10009cc6
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x10009cca
add eax, 2
add esi, 2
test cl, cl
jne 0x10009ca6
xor eax, eax
jmp 0x10009ccf
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10009cdb
test edi, edi
jne 0x10009da2
mov esi, 0x1000f038
lea eax, [esp + 0x14]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x10009d08
test cl, cl
je 0x10009d04
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x10009d08
add eax, 2
add esi, 2
test cl, cl
jne 0x10009ce4
xor eax, eax
jmp 0x10009d0d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10009d19
test edi, edi
jne 0x10009df0
mov esi, 0x1000f030
lea eax, [esp + 0x14]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x10009d46
test cl, cl
je 0x10009d42
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x10009d46
add eax, 2
add esi, 2
test cl, cl
jne 0x10009d22
xor eax, eax
jmp 0x10009d4b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10009d89
mov esi, 0x1000f024
lea eax, [esp + 0x14]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x10009d7c
test cl, cl
je 0x10009d78
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x10009d7c
add eax, 2
add esi, 2
test cl, cl
jne 0x10009d58
xor eax, eax
jmp 0x10009d81
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10009c56
test edi, edi
jne 0x10009e3e
jmp 0x10009c56
mov edi, dword [esp + 0x9c]
jmp 0x10009c20
mov eax, dword [esp + 0x9c]
lea ecx, [eax + eax*2]
shl ecx, 4
sub ecx, eax
lea eax, [eax + ecx*8]
cmp dword [eax*8 + 0x1000f304], 1
je 0x1000a1f5
mov edx, dword [esp + 0x9c]
push 0
push 0
push 0
push 0xa
push edx
mov dword [eax*8 + 0x1000f304], 1
call fcn.100097c0
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x84
ret
mov eax, dword [esp + 0x9c]
lea ecx, [eax + eax*2]
shl ecx, 4
sub ecx, eax
lea eax, [eax + ecx*8]
cmp dword [eax*8 + 0x1000f304], 2
je 0x1000a1f5
mov edx, dword [esp + 0x9c]
push 0
push 0
push 0
push 0xb
push edx
mov dword [eax*8 + 0x1000f304], 2
call fcn.100097c0
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x84
ret
mov ebp, dword [esp + 0x9c]
mov esi, 3
lea eax, [ebp + ebp*2]
shl eax, 4
sub eax, ebp
lea edx, [ebp + eax*8]
cmp dword [edx*8 + 0x1000f304], esi
je 0x1000a1f5
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x75]
mov byte [esp + 0x74], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x55]
mov byte [esp + 0x54], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x35]
mov byte [esp + 0x34], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [edx*8 + 0x1000f304], esi
lea ecx, [esp + 0x34]
stosb byte es:[edi], al
lea edx, [esp + 0x54]
push ecx
lea eax, [esp + 0x78]
push edx
push eax
push ebx
call fcn.10009af0
lea ecx, [esp + 0x44]
lea edx, [esp + 0x64]
push ecx
lea eax, [esp + 0x88]
push edx
push eax
push 0xc
push ebp
call fcn.100097c0
add esp, 0x24
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x84
ret
mov eax, dword [esp + 0x10]
xor ebp, ebp
cmp eax, ebp
jne 0x1000a1c7
mov dword [esp + 0x10], ebp
xor ebx, ebx
mov ecx, dword [esp + 0x98]
push 0
push str.32770
push ebx
push ecx
call esi
mov ebx, eax
test ebx, ebx
je 0x1000a1c7
mov edx, dword [esp + 0x10]
push 0
push str.AfxWnd42
push edx
push ebx
call esi
test eax, eax
mov dword [esp + 0x10], eax
je 0x1000a082
push 0xfffffffffffffff0
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
cmp eax, 0x52000000
jne 0x10009f17
mov eax, dword [esp + 0x10]
mov esi, dword [sym.imp.USER32.dll_FindWindowExA]
push 0
push str.Button
push ebp
push eax
call esi
mov ebp, eax
test ebp, ebp
je 0x10009f17
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x15]
mov byte [esp + 0x14], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebp
stosb byte es:[edi], al
call dword [sym.imp.USER32.dll_IsWindowVisible]
lea ecx, [esp + 0x14]
push 0x20
push ecx
push ebp
mov edi, eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov esi, 0x1000f044
lea eax, [esp + 0x14]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x10009fb6
test cl, cl
je 0x10009fb2
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x10009fb6
add eax, 2
add esi, 2
test cl, cl
jne 0x10009f92
xor eax, eax
jmp 0x10009fbb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10009fc7
test edi, edi
jne 0x1000a08e
mov esi, 0x1000f038
lea eax, [esp + 0x14]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x10009ff4
test cl, cl
je 0x10009ff0
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x10009ff4
add eax, 2
add esi, 2
test cl, cl
jne 0x10009fd0
xor eax, eax
jmp 0x10009ff9
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1000a005
test edi, edi
jne 0x1000a0d5
mov esi, 0x1000f024
lea eax, [esp + 0x14]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x1000a032
test cl, cl
je 0x1000a02e
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x1000a032
add eax, 2
add esi, 2
test cl, cl
jne 0x1000a00e
xor eax, eax
jmp 0x1000a037
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1000a075
mov esi, 0x1000f030
lea eax, [esp + 0x14]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x1000a068
test cl, cl
je 0x1000a064
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x1000a068
add eax, 2
add esi, 2
test cl, cl
jne 0x1000a044
xor eax, eax
jmp 0x1000a06d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10009f42
test edi, edi
jne 0x1000a11c
jmp 0x10009f42
mov edi, dword [esp + 0x9c]
jmp 0x10009efb
mov ecx, dword [esp + 0x9c]
mov edx, 1
lea eax, [ecx + ecx*2]
shl eax, 4
sub eax, ecx
lea eax, [ecx + eax*8]
cmp dword [eax*8 + 0x1000f304], edx
je 0x1000a1f5
push 0
push 0
push 0
push 0xa
push ecx
mov dword [eax*8 + 0x1000f304], edx
call fcn.100097c0
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x84
ret
mov ecx, dword [esp + 0x9c]
lea edx, [ecx + ecx*2]
shl edx, 4
sub edx, ecx
lea eax, [ecx + edx*8]
mov edx, 2
cmp dword [eax*8 + 0x1000f304], edx
je 0x1000a1f5
push 0
push 0
push 0
push 0xb
push ecx
mov dword [eax*8 + 0x1000f304], edx
call fcn.100097c0
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x84
ret
mov ebx, dword [esp + 0x9c]
mov esi, 3
lea eax, [ebx + ebx*2]
shl eax, 4
sub eax, ebx
lea edx, [ebx + eax*8]
cmp dword [edx*8 + 0x1000f304], esi
je 0x1000a1f5
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x35]
mov byte [esp + 0x34], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x55]
mov byte [esp + 0x54], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x75]
mov byte [esp + 0x74], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [edx*8 + 0x1000f304], esi
lea ecx, [esp + 0x74]
stosb byte es:[edi], al
lea edx, [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x38]
push edx
push eax
push ecx
call fcn.10009af0
lea edx, [esp + 0x84]
lea eax, [esp + 0x64]
push edx
lea ecx, [esp + 0x48]
push eax
push ecx
push 0xc
push ebx
call fcn.100097c0
add esp, 0x24
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x84
ret
lea edx, [edi + edi*2]
shl edx, 4
sub edx, edi
lea eax, [edi + edx*8]
pop edi
pop esi
pop ebp
mov dword [eax*8 + 0x1000f304], 0
pop ebx
add esp, 0x84
ret
push 0x1000eb48
call fcn.10002c40
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x84
ret