Function at 0x1004b29
Capabilities:
Get graphical window text

Disassembly:
lea ecx, [esi + 0x844]
call fcn.01002fb3
jmp 0x1004d31
mov eax, dword [0x1054338]
test eax, eax
je 0x1004be1
mov eax, dword [eax + 8]
push dword [ebp - 0xd4]
mov eax, dword [eax + 4]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x1004bdc
mov eax, dword [0x1054338]
mov eax, dword [eax + 8]
push dword [ebp - 0xd4]
mov eax, dword [eax + 4]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x1004bdc
jmp 0x1026a1f
mov ecx, 0x139
cmp ax, cx
jb 0x100315c
add ecx, 0xa
cmp ax, cx
jbe 0x1004cb1
lea ecx, [eax - 0x2bc]
cmp cx, 0x3f
ja 0x1004d38
jmp 0x1004cb1
sub ecx, 0xad
je 0x1026902
dec ecx
je 0x10268eb
dec ecx
je 0x10268d1
dec ecx
jne 0x1004b92
jmp 0x10268b7
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xd8
mov eax, dword [0x1054064]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov esi, ecx
cmp byte [esi + 8], 0
push 3
mov byte [ebp - 0xcd], 0
pop edx
mov ebx, 0x111
jne 0x1004b92
movzx ecx, word [ebp + 0xc]
lea eax, [ebx - 0x65]
cmp ecx, eax
jg 0x1003171
je 0x10268a1
mov eax, ecx
sub eax, 0x77
je 0x1026836
sub eax, 0x24
je 0x10267fa
sub eax, 0xd
je 0x1026742
sub eax, edx
je 0x102672b
movzx eax, word [ebp + 0xc]
mov edi, dword [sym.imp.USER32.dll_PostMessageW]
mov dword [ebp - 0xd4], eax
sub eax, 0x41b
je 0x10269e5
dec eax
je 0x100cc58
sub eax, 3
je 0x102697d
dec eax
je 0x1026919
mov eax, dword [ebp + 0xc]
xor ecx, ecx
shr eax, 0x10
inc ecx
mov dword [ebp - 0xd8], eax
cmp cx, ax
je 0x10030f2
mov eax, dword [0x1054338]
cmp dword [esi + 0xf4], 0
je 0x100dd97
mov ecx, dword [ebp + 0xc]
mov edx, 0x9d
cmp cx, dx
je 0x1026a54
mov edx, 0x9e
cmp cx, dx
je 0x1026a8a
mov edx, 0x94
cmp cx, dx
je 0x102388c
mov edx, 0x99
cmp cx, dx
je 0x1026aca
mov edx, 0x41a
cmp cx, dx
je 0x1026ada
mov edx, 0xa0
cmp cx, dx
je 0x1026b13
mov edx, 0x9c
cmp cx, dx
je 0x1026b36
mov edx, 0x41d
cmp cx, dx
je 0x1026b5c
mov edx, 0x41e
cmp cx, dx
je 0x1026b6d
cmp dword [esi + 0xe0], 2
je 0x1026b89
cmp dword [esi + 0xf4], 2
je 0x101c363
cmp byte [ebp - 0xcd], 0
mov eax, dword [ebp + 0xc]
jne 0x1003146
cmp ax, 0x50
jb 0x1003146
mov ecx, 0x93
cmp ax, cx
ja 0x1003146
cmp byte [esi + 8], 0
jne 0x1026bf6
cmp ax, 0x51
je 0x1004ce8
cmp word [ebp + 0xc], 0x52
je 0x1004ce8
push dword [ebp - 0xd4]
mov eax, dword [esi + 0xf0]
push dword [eax + 0x1c]
mov ecx, dword [0x10540ac]
push dword [esi + 0xf4]
call fcn.01005079
push dword [ebp - 0xd4]
mov ecx, dword [esi + 0xf0]
call fcn.01004d6f
mov byte [esi + 8], 0
cmp word [ebp + 0xc], 0x79
je 0x1025562
cmp dword [ebp - 0xd4], 0x51
je 0x100dc3a
cmp dword [ebp - 0xd4], 0x79
je 0x102558a
lea eax, [ebp + 0xc]
push eax
lea ecx, [esi + 0x844]
call fcn.010050bc
mov byte [ebp - 0xcd], 1
mov al, byte [ebp - 0xcd]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01001e8f
leave
ret 0xc
cmp dword [esi + 0xf4], 3
je 0x10269c1
cmp byte [esi + 0xf8], 0
jne 0x10269ce
mov byte [ebp - 0xcd], 1
jmp 0x1004bc4
xor eax, eax
mov word [esi + 0x10], ax
jmp 0x1003007
xor ecx, ecx
inc ecx
cmp cx, word [ebp - 0xd8]
jne 0x1004bee
push 0x51
pop ecx
cmp cx, word [ebp + 0xc]
jne 0x1004bee
jmp 0x1026a26
mov eax, dword [ebp - 0xd4]
add eax, 0xfffffcfe
cmp eax, 2
ja 0x1004c89
jmp 0x1026bd1
push dword [ebp + 0xc]
mov ecx, esi
call fcn.010238b2
jmp 0x1004c6f
mov eax, dword [ebp + 0xc]
cmp ax, 0x52
je 0x1004cbb
jmp 0x1004cfd
push dword [0x1054330]
mov edi, dword [sym.imp.USER32.dll_SetFocus]
call edi
mov eax, dword [esi + 0x130]
push 0x96
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call edi
jmp 0x1004d08
mov eax, dword [esi + 0x130]
push 0x64
lea edi, [esi + 0x10]
push edi
push 0x96
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
push edi
call fcn.010021b6
mov ecx, eax
call fcn.01004218
test al, al
je 0x1003007
jmp 0x1026c05
push 1
mov ecx, esi
call fcn.01032406
mov eax, dword [0x10540ac]
or dword [eax + 0x28], 0x10
jmp 0x1004b92
mov eax, dword [esi + 0x394]
push 0x64
lea ecx, [ebp - 0xcc]
push ecx
push 0x96
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea eax, [ebp + eax*2 - 0xce]
cmp word [eax], 0x20
jne 0x1026776
xor ecx, ecx
mov word [eax], cx
push 0x64
lea eax, [ebp - 0xcc]
push eax
mov eax, dword [0x1054300]
mov ecx, dword [eax + 0x10]
call fcn.010039b1
lea edi, [esi + 0x390]
mov ecx, edi
call fcn.01033acd
mov edx, dword [eax]
lea ecx, [ebp - 0xcc]
push ecx
mov ecx, eax
call dword [edx + 8]
test al, al
je 0x1004b92
push 0x100247c
lea eax, [ebp - 0xcc]
push eax
mov eax, dword [esi + 0xf0]
mov ecx, dword [eax + 0x10]
call fcn.01030796
mov ecx, edi
call fcn.01033acd
mov ecx, eax
call fcn.01038965
cmp eax, 0x7d0
jg 0x1004b92
push dword [ebp + 0x10]
mov eax, dword [esi + 0x394]
push 0x51
push ebx
push eax
call dword [sym.imp.USER32.dll_GetParent]
jmp 0x1026895
cmp dword [esi + 0xf4], edx
jne 0x102680f
lea ecx, [esi + 0x390]
call fcn.01033acd
jmp 0x1026823
cmp byte [esi + 0xf8], 0
je 0x102682a
lea ecx, [esi + 0x358]
call fcn.01003340
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 4]
mov byte [ebp - 0xcd], 1
jmp 0x1004b92
mov eax, dword [esi + 0xf4]
cmp eax, edx
jne 0x102685c
mov edi, dword [esi + 0x128]
mov eax, dword [edi + 8]
mov eax, dword [eax + 4]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [edi + 0x16c]
jmp 0x102687e
test eax, eax
jne 0x1004b92
mov edi, dword [esi + 0x128]
mov eax, dword [edi + 8]
mov eax, dword [eax + 4]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [edi + 0x1e8]
cmp byte [ecx], 0
push 0
sete dl
mov byte [ecx], dl
xor ecx, ecx
test dl, dl
setne cl
push ecx
push 0xf1
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1004b92
push edx
mov ecx, esi
call fcn.01032406
mov eax, dword [0x10540ac]
or dword [eax + 0x28], 0x40
jmp 0x1004b92
push 5
mov ecx, esi
call fcn.01032406
mov eax, dword [0x10540ac]
or dword [eax + 0x28], 0x100
jmp 0x1004b92
push 4
mov ecx, esi
call fcn.01032406
mov eax, dword [0x10540ac]
or dword [eax + 0x28], 0x80
jmp 0x1004b92
push 2
mov ecx, esi
call fcn.01032406
mov eax, dword [0x10540ac]
or dword [eax + 0x28], 0x20
jmp 0x1004b92
push 0
mov ecx, esi
call fcn.01032406
mov eax, dword [0x10540ac]
or dword [eax + 0x28], 8
jmp 0x1004b92
lea ecx, [esi + 0x390]
call fcn.01033acd
mov ecx, eax
call fcn.01002757
test eax, eax
je 0x1026947
mov eax, dword [esi + 0x394]
push 0
push 0xa0
push ebx
push eax
call dword [sym.imp.USER32.dll_GetParent]
push eax
call edi
lea ecx, [esi + 0x390]
call fcn.01033acd
mov ecx, eax
call fcn.01038c58
push dword [ebp + 0x10]
mov eax, dword [esi + 0x394]
push 0x51
push ebx
push eax
call dword [sym.imp.USER32.dll_GetParent]
push eax
call edi
mov eax, dword [0x10540ac]
or dword [eax + 0x28], 2
jmp 0x1004bc4
lea ecx, [esi + 0x390]
call fcn.01033acd
mov ecx, eax
call fcn.01002757
lea ecx, [esi + 0x390]
test eax, eax
jne 0x10269a7
call fcn.01033acd
mov ecx, eax
call fcn.01038b99
jmp 0x10269b3
call fcn.01033acd
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x10]
mov eax, dword [0x10540ac]
or dword [eax + 0x28], 4
jmp 0x1004bc4
lea ecx, [esi + 0x390]
call fcn.01033acd
jmp 0x10269d9
lea ecx, [esi + 0x358]
call fcn.01003340
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x18]
jmp 0x100cc72
cmp dword [esi + 0xf4], 3
jne 0x10269fb
lea ecx, [esi + 0x390]
call fcn.01033acd
jmp 0x1026a13
cmp byte [esi + 0xf8], 0
je 0x100cc72
lea ecx, [esi + 0x358]
call fcn.01003340
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x14]
jmp 0x100cc72
xor al, al
jmp 0x1004d3e
mov ecx, dword [esi + 0x128]
cmp byte [ecx + 0x1e8], 0
je 0x1004c6f
mov eax, dword [eax + 8]
push 0
push 0x77
push ebx
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x1054338]
jmp 0x1004bee
mov ecx, 0x1054568
call fcn.01003340
mov ecx, eax
call fcn.01002757
test eax, eax
je 0x1026a75
push dword [0x105456c]
call dword [sym.imp.USER32.dll_SetFocus]
push 0
push 0x94
push ebx
push dword [0x105456c]
call edi
jmp 0x1004c6f
lea ecx, [esi + 0x390]
call fcn.01033acd
mov ecx, eax
call fcn.01002757
test eax, eax
jne 0x1026ab1
push dword [ebp + 0x10]
push 0x9b
push ebx
push dword [0x1054330]
jmp 0x1026a83
lea ecx, [esi + 0x390]
call fcn.01033acd
mov edx, dword [eax]
push 0x2b
mov ecx, eax
call dword [edx + 0xc]
jmp 0x1004c6f
mov ecx, dword [esi + 0xf0]
call fcn.010226f3
jmp 0x1004c6f
mov ecx, 0x1054568
call fcn.01003340
mov ecx, eax
call fcn.01002757
test eax, eax
je 0x1026b03
push 0
push 0x9c
push ebx
push dword [0x1054330]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esi + 0xf0]
call fcn.01035873
jmp 0x1004c6f
push dword [0x1054330]
call dword [sym.imp.USER32.dll_SetFocus]
lea ecx, [esi + 0x390]
call fcn.01033acd
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x10]
jmp 0x1004c6f
push dword [0x1054330]
call dword [sym.imp.USER32.dll_SetFocus]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [0x105456c]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1004c6f
cmp dword [0x1054304], 3
je 0x1004c6f
push 0
jmp 0x1026b7c
cmp dword [0x1054304], 3
je 0x1004c6f
push 1
mov ecx, dword [eax + 8]
call fcn.010330b2
jmp 0x1004c6f
mov eax, dword [ebp + 0xc]
lea ecx, [eax - 0x82]
cmp ecx, 0xf
ja 0x1026bae
add eax, 0xffffffae
movzx eax, ax
mov ecx, dword [esi + 0xe4]
push eax
call fcn.01033990
jmp 0x1004d31
cmp eax, 0x50
je 0x1026bc1
cmp eax, 0x54
jne 0x1004d38
push 0x2e
pop eax
jmp 0x1026b9d
mov ecx, dword [esi + 0xe4]
call fcn.010338e3
jmp 0x1004d31
push dword [ebp + 0x10]
mov eax, dword [esi + 0x128]
push dword [ebp + 0xc]
mov eax, dword [eax + 8]
push ebx
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov byte [ebp - 0xcd], 1
jmp 0x1004c89
cmp ax, 0x51
jne 0x102389b
jmp 0x1004ce8
xor eax, eax
mov word [edi], ax
jmp 0x1004d31