Function at 0x41ae70
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
push ebx
push esi
push edi
mov edi, ecx
mov eax, dword [edi + 4]
push 0x3f0
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
xor esi, esi
push str.Dump_Type
push esi
push 0x1057
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
push eax
mov dword [edi + 0x24], eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], str.Dump_Type
call ebx
lea edx, [ebp - 0x2c]
push edx
add eax, 0xf
push esi
mov dword [ebp - 0x24], eax
mov eax, dword [edi + 0x24]
push 0x1061
push eax
mov dword [ebp - 0x18], esi
call ebx
mov ecx, dword [edi + 0x24]
push pe_nt_image_headers32
push esi
push 0x101e
push ecx
call ebx
mov edx, dword [edi + 0x24]
push 4
push 4
push 0x1036
push edx
call ebx
push 0x38
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00424440
push 0x38
lea ecx, [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x64], str.Normal
call fcn.00424440
mov eax, dword [edi + 0x24]
add esp, 0x18
lea edx, [ebp - 0x78]
push edx
push esi
push 0x104d
push eax
mov dword [ebp - 0x3c], 4
call ebx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov edx, dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
push ecx
push esi
push 0x104c
push edx
call ebx
push 0x38
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00424440
push 0x38
mov eax, 1
lea ecx, [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x64], str.WithDataSegs
call fcn.00424440
mov eax, dword [edi + 0x24]
add esp, 0x18
lea edx, [ebp - 0x78]
push edx
push esi
push 0x104d
push eax
mov dword [ebp - 0x3c], 4
call ebx
mov edx, dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
push ecx
push esi
push 0x104c
push edx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 1
call ebx
push 0x38
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00424440
push 0x38
lea ecx, [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x74], 2
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x64], str.WithFullMemory
call fcn.00424440
mov eax, dword [edi + 0x24]
add esp, 0x18
lea edx, [ebp - 0x78]
push edx
push esi
push 0x104d
push eax
mov dword [ebp - 0x3c], 4
call ebx
mov edx, dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
push ecx
push esi
push 0x104c
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 2
push edx
call ebx
push 0x38
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00424440
push 0x38
lea ecx, [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x74], 3
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x64], str.WithHandleData
call fcn.00424440
mov eax, dword [edi + 0x24]
add esp, 0x18
lea edx, [ebp - 0x78]
push edx
push esi
push 0x104d
push eax
mov dword [ebp - 0x3c], 4
call ebx
mov edx, dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
push ecx
push esi
push 0x104c
push edx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 4
call ebx
push 0x38
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00424440
push 0x38
lea ecx, [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x74], 4
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x64], str.FilterMemory
call fcn.00424440
mov eax, dword [edi + 0x24]
add esp, 0x18
lea edx, [ebp - 0x78]
push edx
push esi
push 0x104d
push eax
mov dword [ebp - 0x3c], 4
call ebx
mov edx, dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
push ecx
push esi
push 0x104c
push edx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 8
call ebx
push 0x38
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00424440
mov dword [ebp - 0x78], 1
push 0x38
lea ecx, [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x74], 5
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x64], str.ScanMemory
call fcn.00424440
mov eax, dword [edi + 0x24]
add esp, 0x18
lea edx, [ebp - 0x78]
push edx
push esi
push 0x104d
push eax
mov dword [ebp - 0x3c], 4
call ebx
mov edx, dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
push ecx
push esi
push 0x104c
push edx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 0x10
call ebx
push 0x38
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00424440
push 0x38
lea ecx, [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x74], 6
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x64], str.WithUnloadedModules
call fcn.00424440
mov eax, dword [edi + 0x24]
add esp, 0x18
lea edx, [ebp - 0x78]
push edx
push esi
push 0x104d
push eax
mov dword [ebp - 0x3c], 4
call ebx
mov edx, dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
push ecx
push esi
push 0x104c
push edx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 0x20
call ebx
push 0x38
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00424440
push 0x38
push esi
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x74], 7
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x64], str.WithIndirectlyReferencedMemory
push ecx
call fcn.00424440
mov eax, dword [edi + 0x24]
add esp, 0x18
lea edx, [ebp - 0x78]
push edx
push esi
push 0x104d
push eax
mov dword [ebp - 0x3c], 4
call ebx
mov edx, dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
push ecx
push esi
push 0x104c
push edx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 0x40
call ebx
push 0x38
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00424440
push 0x38
lea ecx, [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x74], 8
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x64], str.FilterModulePaths
call fcn.00424440
mov eax, dword [edi + 0x24]
add esp, 0x18
lea edx, [ebp - 0x78]
push edx
push esi
push 0x104d
push eax
mov dword [ebp - 0x3c], 4
call ebx
mov edx, dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
push ecx
push esi
push 0x104c
push edx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 0x80
call ebx
push 0x38
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00424440
push 0x38
lea ecx, [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x74], 9
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x64], str.WithProcessThreadData
call fcn.00424440
add esp, 0x18
lea edx, [ebp - 0x78]
push edx
push esi
mov dword [ebp - 0x3c], 4
push 0x104d
mov eax, dword [edi + 0x24]
push eax
call ebx
mov edx, dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
push ecx
push esi
push 0x104c
push edx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 0x100
call ebx
push 0x38
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00424440
push 0x38
lea ecx, [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x74], 0xa
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x64], str.WithPrivateReadWriteMemory
call fcn.00424440
mov eax, dword [edi + 0x24]
add esp, 0x18
lea edx, [ebp - 0x78]
push edx
push esi
push 0x104d
push eax
mov dword [ebp - 0x3c], 4
call ebx
mov edx, dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
push ecx
push esi
push 0x104c
push edx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 0x200
call ebx
push 0x38
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00424440
push 0x38
lea ecx, [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x74], 0xb
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x64], str.WithoutOptionalData
call fcn.00424440
mov eax, dword [edi + 0x24]
add esp, 0x18
lea edx, [ebp - 0x78]
push edx
push esi
push 0x104d
push eax
mov dword [ebp - 0x3c], 4
call ebx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov edx, dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
push ecx
push esi
push 0x104c
push edx
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 0x400
call ebx
push 0x38
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00424440
push 0x38
lea ecx, [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x74], 0xc
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x64], str.WithFullMemoryInfo
call fcn.00424440
mov eax, dword [edi + 0x24]
add esp, 0x18
lea edx, [ebp - 0x78]
push edx
push esi
push 0x104d
push eax
mov dword [ebp - 0x3c], 4
call ebx
mov edx, dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
push ecx
push esi
push 0x104c
push edx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 0x800
call ebx
push 0x38
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00424440
push 0x38
lea ecx, [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x74], 0xd
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x64], str.WithThreadInfo
call fcn.00424440
mov eax, dword [edi + 0x24]
add esp, 0x18
lea edx, [ebp - 0x78]
push edx
push esi
push 0x104d
push eax
mov dword [ebp - 0x3c], 4
call ebx
lea ecx, [ebp - 0x3c]
push ecx
push esi
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 0x1000
push 0x104c
mov edx, dword [edi + 0x24]
push edx
call ebx
push 0x38
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00424440
push 0x38
lea ecx, [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x74], 0xe
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x64], str.WithCodeSegs
call fcn.00424440
mov eax, dword [edi + 0x24]
add esp, 0x18
lea edx, [ebp - 0x78]
push edx
push esi
push 0x104d
push eax
mov dword [ebp - 0x3c], 4
call ebx
mov edx, dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
push ecx
push esi
push 0x104c
push edx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 0x2000
call ebx
push 0x38
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00424440
push 0x38
lea ecx, [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x74], 0xf
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x64], str.WithoutManagedState
call fcn.00424440
mov eax, dword [edi + 0x24]
add esp, 0x18
lea edx, [ebp - 0x78]
push edx
push esi
push 0x104d
push eax
mov dword [ebp - 0x3c], 4
call ebx
mov edx, dword [edi + 0x24]
lea ecx, [ebp - 0x3c]
push ecx
push esi
push 0x104c
push edx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 0x4000
call ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret