Function at 0x405ac8
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x420
mov eax, dword [ebx + 8]
and dword [ebp - 4], 0
and dword [ebp - 8], 0
test al, 0x40
je 0x405ae9
xor ecx, ecx
inc ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 8], ecx
test al, 8
push esi
mov esi, 0x400
je 0x405b23
push esi
lea eax, [ebp - 0x420]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetClassNameA]
mov eax, dword [ebx + 0x84]
lea ecx, [ebp - 0x420]
push ecx
push eax
call fcn.004514b0
test eax, eax
pop ecx
pop ecx
jne 0x405b20
inc dword [ebp - 4]
inc dword [ebp - 8]
test byte [ebx + 8], 1
push edi
mov edi, dword [sym.imp.USER32.dll_GetWindowTextA]
je 0x405bf3
push esi
lea eax, [ebp - 0x420]
push eax
push dword [ebp + 8]
call edi
cmp byte [ebx + 0xc], 0
jne 0x405b62
lea eax, [ebp - 0x420]
push eax
call fcn.00451750
pop ecx
push eax
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.USER32.dll_CharUpperBuffA]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebx + 0x10]
dec eax
je 0x405b9e
dec eax
je 0x405b87
dec eax
jne 0x405bbc
push dword [ebx + 0x14]
lea eax, [ebp - 0x420]
push eax
call fcn.004514b0
pop ecx
pop ecx
jmp 0x405bb5
push dword [ebx + 0x14]
lea eax, [ebp - 0x420]
push eax
call fcn.00451920
test eax, eax
pop ecx
pop ecx
je 0x405bbc
jmp 0x405bb9
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x14]
push eax
lea eax, [ebp - 0x420]
push eax
push ecx
call fcn.004517db
add esp, 0xc
test eax, eax
jne 0x405bbc
inc dword [ebp - 4]
test byte [ebx + 8], 8
jne 0x405bf0
push esi
lea eax, [ebp - 0x420]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetClassNameA]
lea eax, [ebp - 0x420]
push eax
push str.ThumbnailClass
call fcn.004514b0
test eax, eax
pop ecx
pop ecx
jne 0x405bf0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
inc dword [ebp - 8]
test byte [ebx + 8], 2
je 0x405c6f
push esi
lea eax, [ebp - 0x420]
push eax
push dword [ebp + 8]
call edi
lea eax, [ebp - 0x420]
push eax
lea esi, [ebp - 0x14]
call fcn.0040fd2f
lea esi, [ebx + 0x2c]
lea edi, [ebp - 0x14]
call fcn.00407849
push dword [ebp - 0x14]
call fcn.0044f520
pop ecx
call fcn.0040787a
test al, al
je 0x405c67
test byte [ebx + 8], 8
jne 0x405c64
push 0x400
lea eax, [ebp - 0x420]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetClassNameA]
lea eax, [ebp - 0x420]
push eax
push str.ThumbnailClass
call fcn.004514b0
test eax, eax
pop ecx
pop ecx
je 0x405c67
inc dword [ebp - 4]
inc dword [ebp - 8]
mov esi, 0x400
test byte [ebx + 8], 0x10
je 0x405cbd
push esi
lea eax, [ebp - 0x420]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetClassNameA]
lea eax, [ebp - 0x420]
push eax
lea esi, [ebp - 0x14]
call fcn.0040fd2f
lea esi, [ebx + 0x58]
lea edi, [ebp - 0x14]
call fcn.00407849
push dword [ebp - 0x14]
call fcn.0044f520
pop ecx
call fcn.0040787a
test al, al
je 0x405cb5
inc dword [ebp - 4]
inc dword [ebp - 8]
mov esi, 0x400
test byte [ebx + 8], 4
je 0x405cdf
mov eax, dword [ebp - 8]
cmp dword [ebp - 4], eax
jne 0x405cdc
push dword [ebp + 8]
mov edi, ebx
call fcn.00405da8
test al, al
je 0x405cdc
inc dword [ebp - 4]
inc dword [ebp - 8]
mov eax, dword [ebx + 8]
test ax, 0x780
je 0x405d54
lea eax, [ebp - 0x18]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebx + 8]
test al, al
mov edx, dword [ebp - 0x18]
jns 0x405d0d
cmp dword [ebx + 0x98], edx
jne 0x405d0a
inc dword [ebp - 4]
inc dword [ebp - 8]
test ax, 0x100
mov ecx, dword [ebp - 0x14]
je 0x405d24
cmp dword [ebx + 0x9c], ecx
jne 0x405d21
inc dword [ebp - 4]
inc dword [ebp - 8]
test ax, 0x200
je 0x405d3d
mov edi, dword [ebp - 0x10]
sub edi, edx
cmp dword [ebx + 0xa0], edi
jne 0x405d3a
inc dword [ebp - 4]
inc dword [ebp - 8]
test esi, eax
je 0x405d54
mov edx, dword [ebp - 0xc]
sub edx, ecx
cmp dword [ebx + 0x9c], edx
jne 0x405d51
inc dword [ebp - 4]
inc dword [ebp - 8]
test al, 0x20
pop edi
je 0x405d79
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 8]
jne 0x405d76
lea eax, [ebx + 0x94]
inc dword [eax]
mov eax, dword [eax]
cmp eax, dword [ebx + 0x90]
jne 0x405d76
inc dword [ebp - 4]
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
cmp dword [ebp - 4], eax
jne 0x405da0
lea eax, [ebp + 8]
push eax
lea esi, [ebx + 0xb0]
call fcn.004076dd
inc dword [ebx + 0xa8]
xor eax, eax
cmp byte [ebx + 4], al
sete al
jmp 0x405da3
xor eax, eax
inc eax
pop esi
leave
ret 4