Function at 0x41e742
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor esi, esi
mov dword [ebp - 4], esi
call fcn.0041e6f5
mov edi, dword [ebp + 0xc]
mov dword [ebp + 8], eax
call fcn.0041e6f5
mov edi, dword [ebp + 0x10]
mov dword [ebp + 0xc], eax
call fcn.0041e6f5
cmp dword [0x4ddbc4], esi
mov dword [ebp + 0x10], eax
jne 0x41e786
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [0x4ddbc4], eax
mov eax, dword [0x4dd854]
push 0x7f00
push esi
mov dword [ebp - 0x60], 0x30
mov dword [ebp - 0x5c], 3
mov dword [ebp - 0x58], 0x41e645
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], esi
call dword [sym.imp.USER32.dll_LoadCursorA]
mov dword [ebp - 0x44], eax
mov eax, dword [0x4dc08c]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x40], 0x10
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x34], esi
call dword [sym.imp.USER32.dll_RegisterClassExA]
xor edi, edi
inc edi
push edi
mov dword [0x4ddbb8], esi
call fcn.0041edb9
call fcn.0041ee11
cmp eax, esi
mov dword [0x4ddbb4], eax
je 0x41e817
push eax
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x41e817
push esi
push dword [0x4ddbb4]
call dword [sym.imp.USER32.dll_EnableWindow]
mov dword [0x4ddbbc], edi
jmp 0x41e81d
mov dword [0x4ddbbc], esi
push esi
push dword [0x4dd854]
push esi
call fcn.0041ee11
push eax
push 0x82
push 0x12c
push edi
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
call edi
cdq
sub eax, edx
sar eax, 1
sub eax, 0x41
push eax
push esi
call edi
mov edi, dword [sym.imp.USER32.dll_CreateWindowExA]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x96
push eax
push 0x10c00000
push dword [ebp + 8]
push dword [0x4dc08c]
push esi
call edi
mov ebx, eax
cmp ebx, esi
mov dword [ebp - 8], ebx
je 0x41ea36
lea eax, [ebp - 4]
push eax
push 0xffffffffffffffeb
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
push esi
push dword [0x4dd854]
push esi
push ebx
push 0x16
push 0x118
push 0xa
push 0xa
push 0x5000000b
push dword [ebp + 0xc]
push 0x42b0ac
push esi
call edi
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
push 1
push dword [0x4ddbc4]
mov dword [0x4ddbac], eax
push 0x30
push eax
call ebx
push esi
push dword [0x4dd854]
push 0xa
push dword [ebp - 8]
push 0x15
push 0x113
push 0x20
push 0xa
push 0x50010080
push esi
push 0x42b0a4
push 0x200
call edi
push 1
push dword [0x4ddbc4]
mov dword [0x4ddbb0], eax
push 0x30
push eax
call ebx
push dword [0x4ddbb0]
call dword [sym.imp.USER32.dll_SetFocus]
cmp dword [ebp + 0x10], esi
je 0x41e93d
push dword [ebp + 0x10]
push esi
push 0xc
push dword [0x4ddbb0]
call ebx
push dword [ebp + 0x10]
call sub.MSVCRT.dll_strlen
pop ecx
push eax
push dword [ebp + 0x10]
call sub.MSVCRT.dll_strlen
pop ecx
push eax
push 0xb1
push dword [0x4ddbb0]
call ebx
push esi
push dword [0x4dd854]
push 0x3e8
push dword [ebp - 8]
push 0x19
push 0x50
push 0x43
push 0x6e
push 0x50010001
push 0x42b0a0
push 0x42b098
push esi
call edi
push 1
push dword [0x4ddbc4]
mov dword [0x4ddbc0], eax
push 0x30
push eax
call ebx
push 2
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 1
mov word [ebp - 0x12], 0xd
mov word [ebp - 0x10], 0x3e8
mov byte [ebp - 0xe], 1
mov word [ebp - 0xc], 0x1b
mov word [ebp - 0xa], 0x3e9
call dword [sym.imp.USER32.dll_CreateAcceleratorTableA]
push dword [ebp - 8]
mov edi, eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push dword [ebp - 8]
call dword [sym.imp.USER32.dll_BringWindowToTop]
jmp 0x41e9f1
push esi
push esi
push esi
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x41e9f9
lea eax, [ebp - 0x30]
push eax
push edi
push dword [ebp - 8]
call dword [sym.imp.USER32.dll_TranslateAcceleratorA]
test eax, eax
jne 0x41e9f1
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [0x4ddbb8], esi
je 0x41e9ba
cmp edi, esi
je 0x41ea04
push edi
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
cmp dword [ebp - 4], esi
je 0x41ea3b
push dword [ebp - 4]
call sub.MSVCRT.dll_strlen
pop ecx
push dword [ebp + 0x14]
push eax
call fcn.00429730
push dword [ebp - 4]
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
push dword [ebp - 4]
push esi
push dword [0x4dd850]
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [ebp - 4], esi
jne 0x41ea43
push dword [ebp + 0x14]
call fcn.00429900
push dword [ebp + 8]
call fcn.0041e728
push dword [ebp + 0xc]
call fcn.0041e728
push dword [ebp + 0x10]
call fcn.0041e728
add esp, 0xc
pop edi
pop esi
pop ebx
leave
ret 0x10