Function at 0x440ff0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x60ffb8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x760
push ebx
push esi
push edi
mov edi, ecx
xor ebx, ebx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x20], edi
mov dword [ebp - 4], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x30], ebx
mov word [ebp - 0x34], bx
mov eax, dword [edi + 0x90]
mov byte [ebp - 4], 1
cmp eax, ebx
jne 0x44103c
lea eax, [edi + 0x94]
push 0x5c
push eax
call fcn.005de073
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x4410ee
cmp dword [ebp - 0x38], ebx
je 0x4410a9
push esi
call fcn.005de123
add esp, 4
test eax, eax
je 0x4410a9
mov eax, dword [ebp - 0x38]
cmp eax, esi
ja 0x4410a9
push eax
call fcn.005de123
mov ecx, dword [ebp - 0x38]
add esp, 4
lea edx, [ecx + eax*2]
cmp edx, esi
jb 0x4410a9
push esi
lea ecx, [ebp - 0x44]
call fcn.0040e020
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 2
call fcn.004023d0
push eax
lea ecx, [ebp - 0x38]
call fcn.004023e0
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00401070
jmp 0x4410ee
lea ecx, [ebp - 0x38]
call fcn.00401070
push esi
call fcn.005de123
add esp, 4
test eax, eax
je 0x4410ee
push esi
call fcn.005de123
lea eax, [eax + eax + 2]
push eax
call fcn.005f6c5c
add esp, 8
cmp eax, ebx
mov dword [ebp - 0x38], eax
je 0x4410ee
push esi
call fcn.005de123
mov ecx, dword [ebp - 0x38]
push esi
push ecx
mov dword [ebp - 0x30], eax
call fcn.005de2e9
add esp, 0xc
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], ebx
mov word [ebp - 0x18], bx
mov eax, dword [edi + 0x534]
mov byte [ebp - 4], 3
cmp eax, ebx
je 0x44115d
mov eax, dword [edi + 0x520]
lea edx, [ebp - 0x76c]
push 0x30c
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
jne 0x44114c
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
call fcn.00401070
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0
call fcn.00401070
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x76c]
push ecx
lea ecx, [ebp - 0x1c]
call fcn.004023e0
jmp 0x44118a
mov eax, dword [edi + 0x520]
lea edx, [ebp - 0x154]
push 0x104
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
test eax, eax
je 0x441123
lea ecx, [ebp - 0x154]
push ebx
push ecx
lea ecx, [ebp - 0x1c]
call fcn.00402d00
cmp dword [0x6ec7a4], ebx
je 0x4412f4
mov eax, dword [0x6ec618]
cmp eax, ebx
jne 0x4411a4
mov eax, 0x6ec61c
mov esi, dword [ebp - 0x1c]
cmp esi, ebx
je 0x4411af
mov ecx, esi
jmp 0x4411b5
lea ecx, [ebp - 0x18]
lea esi, [ebp - 0x18]
push eax
push ecx
call fcn.005de985
add esp, 8
cmp eax, esi
jne 0x4412f4
mov esi, dword [ebp - 0x1c]
cmp esi, ebx
jne 0x4411d1
lea esi, [ebp - 0x18]
mov eax, dword [0x6ec618]
cmp eax, ebx
jne 0x4411df
mov eax, 0x6ec61c
push eax
call fcn.005de123
lea edi, [esi + eax*2]
mov eax, dword [0x6ec628]
add esp, 4
cmp eax, ebx
mov esi, eax
jne 0x4411fb
mov esi, 0x6ec62c
mov edx, 0x6bc11c
test edx, edx
je 0x4412f4
cmp esi, ebx
je 0x4412f4
cmp edi, ebx
je 0x4412f4
push edx
lea ecx, [ebp - 0x44]
call fcn.00402350
push esi
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 4
call fcn.0040e020
mov bl, 5
push edi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.0040e020
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 6
call fcn.00401070
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
call fcn.004023d0
push eax
call fcn.005de123
add esp, 4
lea ecx, [ebp - 0x50]
mov edi, eax
call fcn.004023d0
push eax
call fcn.005de123
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.005f6c5c
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x1c], edx
je 0x4412cf
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x2c]
call fcn.004023d0
push eax
lea ecx, [ebp - 0x50]
call fcn.004023d0
push eax
lea ecx, [ebp - 0x44]
call fcn.004023d0
push eax
mov eax, dword [ebp - 0x1c]
push esi
push eax
call fcn.005de0b3
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.005de123
add esp, 0x18
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 4
call fcn.00401070
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 3
call fcn.00401070
xor ebx, ebx
cmp dword [0x6ec7a8], ebx
je 0x44145c
mov eax, dword [0x6ec5f8]
test eax, eax
jne 0x44130e
mov eax, 0x6ec5fc
mov esi, dword [ebp - 0x1c]
test esi, esi
je 0x441319
mov ecx, esi
jmp 0x44131f
lea ecx, [ebp - 0x18]
lea esi, [ebp - 0x18]
push eax
push ecx
call fcn.005de985
add esp, 8
cmp eax, esi
jne 0x44145c
mov esi, dword [ebp - 0x1c]
test esi, esi
jne 0x44133b
lea esi, [ebp - 0x18]
mov eax, dword [0x6ec5f8]
test eax, eax
jne 0x441349
mov eax, 0x6ec5fc
push eax
call fcn.005de123
lea edi, [esi + eax*2]
mov eax, dword [0x6ec608]
add esp, 4
mov esi, eax
test eax, eax
jne 0x441365
mov esi, 0x6ec60c
mov edx, 0x6bc11c
test edx, edx
je 0x44145c
test esi, esi
je 0x44145c
test edi, edi
je 0x44145c
push edx
lea ecx, [ebp - 0x2c]
call fcn.00402350
push esi
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 7
call fcn.0040e020
mov bl, 8
push edi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], bl
call fcn.0040e020
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 9
call fcn.00401070
mov esi, dword [ebp - 0x24]
lea ecx, [ebp - 0x44]
call fcn.004023d0
push eax
call fcn.005de123
add esp, 4
lea ecx, [ebp - 0x50]
mov edi, eax
call fcn.004023d0
push eax
call fcn.005de123
add esi, edi
lea esi, [eax + esi + 3]
lea edi, [esi + esi]
push edi
call fcn.005f6c5c
mov edx, eax
add esp, 8
test edx, edx
mov dword [ebp - 0x1c], edx
je 0x441439
mov ecx, edi
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
lea ecx, [ebp - 0x44]
call fcn.004023d0
push eax
lea ecx, [ebp - 0x50]
call fcn.004023d0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004023d0
push eax
mov eax, dword [ebp - 0x1c]
push esi
push eax
call fcn.005de0b3
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.005de123
add esp, 0x18
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], bl
call fcn.00401070
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 7
call fcn.00401070
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00401070
mov eax, dword [ebp - 0x1c]
xor edi, edi
cmp eax, edi
jne 0x441468
lea eax, [ebp - 0x18]
push 0x6bddf0
push eax
call fcn.005de985
add esp, 8
test eax, eax
jne 0x441533
mov esi, dword [ebp - 0x1c]
cmp esi, edi
je 0x441489
mov eax, esi
jmp 0x44148f
lea eax, [ebp - 0x18]
lea esi, [ebp - 0x18]
push 0x6c01a0
push eax
call fcn.005de985
add esp, 8
cmp eax, esi
je 0x441533
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x24], edi
mov word [ebp - 0x28], di
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
push edx
call fcn.00446d00
add esp, 4
lea ecx, [ebp - 0x2c]
call fcn.004023d0
push eax
call fcn.005de123
add esp, 4
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.004023d0
cmp word [eax + esi*2 - 2], 0x5c
mov esi, 0x6bc14c
jne 0x4414ec
mov esi, 0x6ec0cc
lea ecx, [ebp - 0x1c]
call fcn.004023d0
push eax
push esi
lea ecx, [ebp - 0x2c]
call fcn.004023d0
mov ebx, dword [ebp - 0x20]
push eax
push 0x6bcc34
lea edi, [ebx + 0x90]
mov ecx, edi
call fcn.00441620
push 0x6bc14c
push 0x6c01a0
mov ecx, edi
call fcn.0043dbb0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00401070
jmp 0x44154c
lea ecx, [ebp - 0x1c]
call fcn.004023d0
mov ebx, dword [ebp - 0x20]
push eax
lea edi, [ebx + 0x90]
mov ecx, edi
call fcn.004023e0
mov eax, dword [ebx + 0x70]
mov cl, byte [eax + 0x32f]
test cl, cl
jne 0x4415a8
push 0x2e
lea ecx, [ebp - 0x1c]
call fcn.004023d0
push eax
call fcn.005de073
mov ecx, dword [0x6e7b6c]
add esp, 8
mov dword [ebp - 0x20], ecx
test eax, eax
mov byte [ebp - 4], 0xb
je 0x441586
push eax
lea ecx, [ebp - 0x20]
call fcn.005faa09
mov esi, dword [ebp - 0x20]
push 0
lea ecx, [ebp - 0x1c]
call fcn.004023d0
push eax
push esi
mov ecx, ebx
call fcn.00440cc0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 3
call fcn.005fa859
mov al, byte [ebx + 0x51d]
test al, al
jne 0x441123
push 0
mov ecx, ebx
call fcn.0043ecf0
push 0x5c
mov ecx, edi
call fcn.004023d0
push eax
call fcn.005de073
mov esi, eax
add esp, 8
test esi, esi
je 0x4415fc
lea ecx, [ebp - 0x38]
call fcn.004023d0
push eax
push esi
call fcn.005e07bc
add esp, 8
test eax, eax
je 0x4415fc
mov edx, dword [ebx + 0x70]
mov byte [edx + 0x18a], 1
jmp 0x441123
mov eax, dword [ebx + 0x70]
mov byte [eax + 0x18a], 0
jmp 0x441123