Function at 0x1000ae70
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x84
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x9c]
xor ebp, ebp
xor ebx, ebx
cmp edi, ebp
mov dword [esp + 0x10], ebp
jl 0x1000b476
cmp edi, 0x20
jge 0x1000b476
mov esi, dword [sym.imp.USER32.dll_FindWindowExA]
mov eax, dword [esp + 0x98]
push 0
push str.AfxWnd42
push ebx
push eax
call esi
mov ebx, eax
test ebx, ebx
je 0x1000b16b
push 0xfffffffffffffff0
push ebx
mov dword [esp + 0x18], 1
call dword [sym.imp.USER32.dll_GetWindowLongA]
cmp eax, 0x52000000
jne 0x1000aea0
jmp 0x1000aedc
mov esi, dword [sym.imp.USER32.dll_FindWindowExA]
push 0
push str.Button
push ebp
push ebx
call esi
mov ebp, eax
test ebp, ebp
je 0x1000b016
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x15]
mov byte [esp + 0x14], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebp
stosb byte es:[edi], al
call dword [sym.imp.USER32.dll_IsWindowVisible]
lea ecx, [esp + 0x14]
push 0x20
push ecx
push ebp
mov edi, eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov esi, 0x1001148c
lea eax, [esp + 0x14]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x1000af4a
test cl, cl
je 0x1000af46
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x1000af4a
add eax, 2
add esi, 2
test cl, cl
jne 0x1000af26
xor eax, eax
jmp 0x1000af4f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1000af5b
test edi, edi
jne 0x1000b022
mov esi, 0x10011480
lea eax, [esp + 0x14]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x1000af88
test cl, cl
je 0x1000af84
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x1000af88
add eax, 2
add esi, 2
test cl, cl
jne 0x1000af64
xor eax, eax
jmp 0x1000af8d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1000af99
test edi, edi
jne 0x1000b072
mov esi, 0x10011478
lea eax, [esp + 0x14]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x1000afc6
test cl, cl
je 0x1000afc2
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x1000afc6
add eax, 2
add esi, 2
test cl, cl
jne 0x1000afa2
xor eax, eax
jmp 0x1000afcb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1000b009
mov esi, 0x1001146c
lea eax, [esp + 0x14]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x1000affc
test cl, cl
je 0x1000aff8
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x1000affc
add eax, 2
add esi, 2
test cl, cl
jne 0x1000afd8
xor eax, eax
jmp 0x1000b001
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1000aed6
test edi, edi
jne 0x1000b0c2
jmp 0x1000aed6
mov edi, dword [esp + 0x9c]
jmp 0x1000aea0
mov eax, dword [esp + 0x9c]
lea ecx, [eax + eax*2]
shl ecx, 4
sub ecx, eax
shl ecx, 7
lea eax, [ecx + 0x10011964]
mov ecx, dword [ecx + 0x10011964]
cmp ecx, 1
je 0x1000b483
mov edx, dword [esp + 0x9c]
push 0
push 0
push 0
push 0xa
push edx
mov dword [eax], 1
call fcn.1000aa50
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x84
ret
mov eax, dword [esp + 0x9c]
lea ecx, [eax + eax*2]
shl ecx, 4
sub ecx, eax
shl ecx, 7
lea eax, [ecx + 0x10011964]
mov ecx, dword [ecx + 0x10011964]
cmp ecx, 2
je 0x1000b483
mov edx, dword [esp + 0x9c]
push 0
push 0
push 0
push 0xb
push edx
mov dword [eax], 2
call fcn.1000aa50
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x84
ret
mov esi, dword [esp + 0x9c]
lea eax, [esi + esi*2]
shl eax, 4
sub eax, esi
shl eax, 7
lea edx, [eax + 0x10011964]
mov eax, dword [eax + 0x10011964]
cmp eax, 3
je 0x1000b483
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x75]
mov byte [esp + 0x74], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x55]
mov byte [esp + 0x54], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x35]
mov byte [esp + 0x34], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [edx], 3
lea ecx, [esp + 0x34]
stosb byte es:[edi], al
lea edx, [esp + 0x54]
push ecx
lea eax, [esp + 0x78]
push edx
push eax
push ebx
call fcn.1000ad70
lea ecx, [esp + 0x44]
lea edx, [esp + 0x64]
push ecx
lea eax, [esp + 0x88]
push edx
push eax
push 0xc
push esi
call fcn.1000aa50
add esp, 0x24
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x84
ret
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x1000b456
xor ebx, ebx
xor eax, eax
xor ebp, ebp
mov ecx, dword [esp + 0x98]
push 0
push str.32770
push eax
push ecx
call esi
mov edi, eax
test edi, edi
mov dword [esp + 0x10], edi
je 0x1000b44f
push 0
push str.AfxWnd42
push ebx
push edi
call esi
mov ebx, eax
test ebx, ebx
je 0x1000b30b
push 0xfffffffffffffff0
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongA]
cmp eax, 0x52000000
jne 0x1000b19d
mov esi, dword [sym.imp.USER32.dll_FindWindowExA]
push 0
push str.Button
push ebp
push ebx
call esi
mov ebp, eax
test ebp, ebp
je 0x1000b302
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x15]
mov byte [esp + 0x14], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebp
stosb byte es:[edi], al
call dword [sym.imp.USER32.dll_IsWindowVisible]
lea edx, [esp + 0x14]
push 0x20
push edx
push ebp
mov edi, eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov esi, 0x1001148c
lea eax, [esp + 0x14]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x1000b236
test cl, cl
je 0x1000b232
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x1000b236
add eax, 2
add esi, 2
test cl, cl
jne 0x1000b212
xor eax, eax
jmp 0x1000b23b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1000b247
test edi, edi
jne 0x1000b314
mov esi, 0x10011480
lea eax, [esp + 0x14]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x1000b274
test cl, cl
je 0x1000b270
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x1000b274
add eax, 2
add esi, 2
test cl, cl
jne 0x1000b250
xor eax, eax
jmp 0x1000b279
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1000b285
test edi, edi
jne 0x1000b35d
mov esi, 0x1001146c
lea eax, [esp + 0x14]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x1000b2b2
test cl, cl
je 0x1000b2ae
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x1000b2b2
add eax, 2
add esi, 2
test cl, cl
jne 0x1000b28e
xor eax, eax
jmp 0x1000b2b7
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1000b2f5
mov esi, 0x10011478
lea eax, [esp + 0x14]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x1000b2e8
test cl, cl
je 0x1000b2e4
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x1000b2e8
add eax, 2
add esi, 2
test cl, cl
jne 0x1000b2c4
xor eax, eax
jmp 0x1000b2ed
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1000b1c2
test edi, edi
jne 0x1000b3a6
jmp 0x1000b1c2
mov edi, dword [esp + 0x10]
jmp 0x1000b19d
mov eax, dword [esp + 0x10]
jmp 0x1000b17d
mov ecx, dword [esp + 0x9c]
lea eax, [ecx + ecx*2]
shl eax, 4
sub eax, ecx
shl eax, 7
mov edx, dword [eax + 0x10011964]
lea eax, [eax + 0x10011964]
cmp edx, 1
je 0x1000b483
push 0
push 0
push 0
push 0xa
push ecx
mov dword [eax], 1
call fcn.1000aa50
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x84
ret
mov ecx, dword [esp + 0x9c]
lea edx, [ecx + ecx*2]
shl edx, 4
sub edx, ecx
shl edx, 7
lea eax, [edx + 0x10011964]
mov edx, dword [edx + 0x10011964]
cmp edx, 2
je 0x1000b483
push 0
push 0
push 0
push 0xb
push ecx
mov dword [eax], 2
call fcn.1000aa50
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x84
ret
mov esi, dword [esp + 0x9c]
lea eax, [esi + esi*2]
shl eax, 4
sub eax, esi
shl eax, 7
lea edx, [eax + 0x10011964]
mov eax, dword [eax + 0x10011964]
cmp eax, 3
je 0x1000b483
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x35]
mov byte [esp + 0x34], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x55]
mov byte [esp + 0x54], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x75]
mov byte [esp + 0x74], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [edx], 3
lea ecx, [esp + 0x74]
stosb byte es:[edi], al
lea edx, [esp + 0x54]
push ecx
lea eax, [esp + 0x38]
push edx
push eax
push ebx
call fcn.1000ad70
lea ecx, [esp + 0x84]
lea edx, [esp + 0x64]
push ecx
lea eax, [esp + 0x48]
push edx
push eax
push 0xc
push esi
call fcn.1000aa50
add esp, 0x24
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x84
ret
mov edi, dword [esp + 0x9c]
lea ecx, [edi + edi*2]
shl ecx, 4
sub ecx, edi
pop edi
shl ecx, 7
pop esi
pop ebp
mov dword [ecx + 0x10011964], 0
pop ebx
add esp, 0x84
ret
push 0x10010da4
call fcn.10003300
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x84
ret