Function at 0x442aa0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x63bf20
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xfd4
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
mov esi, ecx
push ebx
mov dword [ebp - 0x40], esi
mov dword [ebp - 4], ebx
call fcn.006234df
mov eax, dword [esi + 0x90]
cmp eax, ebx
jne 0x442ae4
lea eax, [esi + 0x94]
push eax
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], ebx
mov word [ebp - 0x18], bx
call fcn.00401f20
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 1
cmp eax, ebx
jne 0x442b05
lea eax, [ebp - 0x18]
push 0x3a
push eax
call fcn.0060a17b
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x442c3d
add edi, 2
push 0x3a
push edi
call fcn.0060a17b
add esp, 8
test eax, eax
je 0x442c3d
push edi
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], ebx
mov word [ebp - 0x2c], bx
call fcn.00401f20
mov esi, dword [ebp - 0x30]
mov byte [ebp - 4], 2
cmp esi, ebx
je 0x442b6e
push esi
call fcn.00609a4e
add esp, 4
lea eax, [esi + eax*2]
cmp esi, eax
jae 0x442b6e
cmp word [esi], 0x3a
jne 0x442b69
mov word [esi], 0x2d
add esi, 2
jmp 0x442b5a
mov word [edi], bx
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
jne 0x442b7b
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x34], ebx
mov word [ebp - 0x38], bx
call fcn.00401f20
mov edi, dword [ebp - 0x30]
mov byte [ebp - 4], 3
cmp edi, ebx
jne 0x442ba0
lea edi, [ebp - 0x2c]
cmp edi, ebx
je 0x442c19
push edi
call fcn.00609a4e
add esp, 4
test eax, eax
je 0x442c19
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
je 0x442bc1
push eax
call fcn.00609a4e
add esp, 4
mov esi, eax
jmp 0x442bc3
xor esi, esi
push edi
call fcn.00609a4e
add eax, esi
lea eax, [eax + eax + 2]
push eax
call fcn.00622acb
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x442c19
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
je 0x442bf8
push eax
push esi
call fcn.00609a95
push edi
push esi
call fcn.00609a6b
add esp, 0x10
jmp 0x442c02
push edi
push esi
call fcn.00609a95
add esp, 8
lea ecx, [ebp - 0x3c]
call fcn.00401070
push esi
mov dword [ebp - 0x3c], esi
call fcn.00609a4e
add esp, 4
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x1c]
call fcn.00401f20
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 2
call fcn.00401070
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00401070
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x442d6f
push eax
mov esi, eax
call fcn.00609a4e
add esp, 4
lea eax, [esi + eax*2]
cmp esi, eax
jae 0x442c6a
cmp word [esi], 0x2a
jne 0x442c65
mov word [esi], 0x2d
add esi, 2
jmp 0x442c56
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x442d6f
push eax
mov esi, eax
call fcn.00609a4e
add esp, 4
lea eax, [esi + eax*2]
cmp esi, eax
jae 0x442c97
cmp word [esi], 0x3f
jne 0x442c92
mov word [esi], 0x2d
add esi, 2
jmp 0x442c83
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x442d6f
push eax
mov esi, eax
call fcn.00609a4e
add esp, 4
lea eax, [esi + eax*2]
cmp esi, eax
jae 0x442cc4
cmp word [esi], 0x7c
jne 0x442cbf
mov word [esi], 0x2d
add esi, 2
jmp 0x442cb0
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x442d6f
push eax
mov esi, eax
call fcn.00609a4e
add esp, 4
lea eax, [esi + eax*2]
cmp esi, eax
jae 0x442cf1
cmp word [esi], 0x3c
jne 0x442cec
mov word [esi], 0x2d
add esi, 2
jmp 0x442cdd
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x442d6f
push eax
mov esi, eax
call fcn.00609a4e
add esp, 4
lea eax, [esi + eax*2]
cmp esi, eax
jae 0x442d1a
cmp word [esi], 0x3e
jne 0x442d15
mov word [esi], 0x2d
add esi, 2
jmp 0x442d06
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x442d6f
push eax
mov esi, eax
call fcn.00609a4e
add esp, 4
lea eax, [esi + eax*2]
cmp esi, eax
jae 0x442d43
cmp word [esi], 0x22
jne 0x442d3e
mov word [esi], 0x27
add esi, 2
jmp 0x442d2f
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x442d6f
push eax
mov esi, eax
call fcn.00609a4e
add esp, 4
lea eax, [esi + eax*2]
cmp esi, eax
jae 0x442d6c
cmp word [esi], 0x2f
jne 0x442d67
mov word [esi], 0x5c
add esi, 2
jmp 0x442d58
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x442d76
lea eax, [ebp - 0x18]
push 0x6cd7a4
push eax
call fcn.0060a3e0
add esp, 8
test eax, eax
je 0x442f5e
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x442d73
mov edx, 0x6cd7a4
test edx, edx
je 0x442d6f
mov ecx, 0x6c91c0
test ecx, ecx
je 0x442d6f
push ecx
push edx
call fcn.0060a1a4
add esp, 8
test eax, eax
je 0x442d6c
mov edx, dword [ebp - 0x1c]
push 0x6cd7a4
push edx
call fcn.0060a3e0
add esp, 8
mov esi, eax
xor edi, edi
test esi, esi
je 0x442dec
push 0x6cd7a4
inc edi
call fcn.00609a4e
lea eax, [esi + eax*2]
push 0x6cd7a4
push eax
call fcn.0060a3e0
add esp, 0xc
mov esi, eax
jmp 0x442dc8
test edi, edi
je 0x442d6c
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x30]
push eax
call fcn.00401ee0
push 0x6c91c0
mov byte [ebp - 4], 4
call fcn.00609a4e
push 0x6cd7a4
mov esi, eax
call fcn.00609a4e
add esp, 8
cmp esi, eax
jbe 0x442e7d
lea ecx, [ebp - 0x1c]
call fcn.00401070
mov esi, dword [ebp - 0x30]
test esi, esi
jne 0x442e33
lea esi, [ebp - 0x2c]
push 0x6c91c0
call fcn.00609a4e
push 0x6cd7a4
mov ebx, eax
call fcn.00609a4e
sub ebx, eax
push esi
imul ebx, edi
call fcn.00609a4e
add ebx, eax
lea ecx, [ebx + ebx + 2]
push ecx
call fcn.00622acb
mov ebx, eax
add esp, 0x10
test ebx, ebx
mov dword [ebp - 0x1c], ebx
jne 0x442e80
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00401070
jmp 0x442d6c
mov ebx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x30]
call fcn.00401f10
push 0x6cd7a4
push eax
mov dword [ebp - 0x20], eax
call fcn.0060a3e0
add esp, 8
test eax, eax
mov dword [ebp - 0x24], eax
je 0x442f10
mov esi, dword [ebp - 0x20]
mov edi, ebx
sub eax, esi
push 0x6c91c0
sar eax, 1
shl eax, 1
mov ecx, eax
add ebx, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.00609a4e
mov ecx, eax
mov esi, 0x6c91c0
shl ecx, 1
mov eax, ecx
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0x6c91c0
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.00609a4e
push 0x6cd7a4
lea ebx, [ebx + eax*2]
call fcn.00609a4e
mov ecx, dword [ebp - 0x24]
push 0x6cd7a4
lea eax, [ecx + eax*2]
push eax
mov dword [ebp - 0x20], eax
call fcn.0060a3e0
add esp, 0x14
jmp 0x442e99
mov esi, dword [ebp - 0x20]
push esi
call fcn.00609a4e
mov ecx, eax
mov edi, ebx
shl ecx, 1
mov edx, ecx
mov eax, dword [ebp - 0x20]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.00609a4e
lea ebx, [ebx + eax*2]
mov word [ebx], 0
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.00609a4e
add esp, 0xc
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 1
call fcn.00401070
jmp 0x442d6c
mov eax, dword [0x6fcadc]
test eax, eax
jne 0x4431f8
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x442f75
lea eax, [ebp - 0x18]
push 0x202a
push eax
call fcn.0060a17b
add esp, 8
test eax, eax
jne 0x442fa7
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x442f91
lea eax, [ebp - 0x18]
push 0x202d
push eax
call fcn.0060a17b
add esp, 8
test eax, eax
je 0x44319c
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x443178
mov edx, 0x6cd7a0
test edx, edx
je 0x443178
mov eax, 0x6fc41c
test eax, eax
je 0x443178
push eax
push edx
call fcn.0060a1a4
add esp, 8
test eax, eax
je 0x443178
mov ecx, dword [ebp - 0x1c]
push 0x6cd7a0
push ecx
call fcn.0060a3e0
add esp, 8
mov esi, eax
xor edi, edi
test esi, esi
je 0x443017
push 0x6cd7a0
inc edi
call fcn.00609a4e
lea esi, [esi + eax*2]
push 0x6cd7a0
push esi
call fcn.0060a3e0
add esp, 0xc
mov esi, eax
jmp 0x442ff3
test edi, edi
je 0x443178
mov edx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x30]
push edx
call fcn.00401ee0
push 0x6cd7a0
mov byte [ebp - 4], 5
call fcn.00609a4e
push 0x6fc41c
mov esi, eax
call fcn.00609a4e
add esp, 8
cmp eax, esi
jbe 0x44309c
lea ecx, [ebp - 0x1c]
call fcn.00401070
lea ecx, [ebp - 0x30]
call fcn.00401f10
push eax
call fcn.00609a4e
push 0x6cd7a0
mov esi, eax
call fcn.00609a4e
push 0x6fc41c
mov ebx, eax
call fcn.00609a4e
sub eax, ebx
imul eax, edi
add esi, eax
lea eax, [esi + esi + 2]
push eax
call fcn.00622acb
mov ebx, eax
add esp, 0x10
test ebx, ebx
mov dword [ebp - 0x1c], ebx
jne 0x44309f
jmp 0x44316c
mov ebx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x30]
call fcn.00401f10
push 0x6cd7a0
push eax
mov dword [ebp - 0x24], eax
call fcn.0060a3e0
add esp, 8
test eax, eax
mov dword [ebp - 0x20], eax
je 0x44312f
mov esi, dword [ebp - 0x24]
mov edi, ebx
sub eax, esi
push 0x6fc41c
sar eax, 1
shl eax, 1
mov ecx, eax
add ebx, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.00609a4e
mov ecx, eax
mov esi, 0x6fc41c
shl ecx, 1
mov eax, ecx
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0x6fc41c
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.00609a4e
push 0x6cd7a0
lea ebx, [ebx + eax*2]
call fcn.00609a4e
mov ecx, dword [ebp - 0x20]
push 0x6cd7a0
lea eax, [ecx + eax*2]
push eax
mov dword [ebp - 0x24], eax
call fcn.0060a3e0
add esp, 0x14
jmp 0x4430b8
mov esi, dword [ebp - 0x24]
push esi
call fcn.00609a4e
mov ecx, eax
mov edi, ebx
shl ecx, 1
mov edx, ecx
mov eax, dword [ebp - 0x24]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.00609a4e
lea ebx, [ebx + eax*2]
mov word [ebx], 0
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.00609a4e
add esp, 0xc
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00401070
push 0x6fc41c
push 0x6cd79c
lea ecx, [ebp - 0x1c]
call fcn.004434d0
push 0x6fc41c
push 0x6cd798
lea ecx, [ebp - 0x1c]
call fcn.004434d0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4431a6
lea eax, [ebp - 0x18]
push 0x200e
push eax
call fcn.0060a17b
add esp, 8
test eax, eax
je 0x4431ca
push 0x6fc41c
push 0x6cd794
lea ecx, [ebp - 0x1c]
call fcn.004434d0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4431d4
lea eax, [ebp - 0x18]
push 0x200f
push eax
call fcn.0060a17b
add esp, 8
test eax, eax
je 0x4431f8
push 0x6fc41c
push 0x6cd790
lea ecx, [ebp - 0x1c]
call fcn.004434d0
mov esi, dword [ebp - 0x40]
lea edx, [ebp - 0x1c]
push 0
push edx
mov eax, dword [esi + 0x70]
mov ecx, dword [esi + 0x68]
push eax
call fcn.00497960
cmp eax, 2
jne 0x443236
mov byte [esi + 0x4a4], 1
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call fcn.00401070
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [esi + 0x70]
mov edx, dword [ecx + 0x4a8]
mov eax, dword [ecx + 0x4ac]
or edx, eax
je 0x443270
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x443253
lea eax, [ebp - 0x18]
push eax
call fcn.005cf6b0
cmp eax, 2
jne 0x443270
push 5
mov ecx, esi
call fcn.006234df
mov byte [esi + 0x4a6], 1
jmp 0x443219
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x44327a
lea eax, [ebp - 0x18]
mov ecx, dword [esi + 0x70]
push eax
call fcn.005cfa80
mov eax, dword [esi + 0x4bc]
push 0x7d0
test eax, eax
je 0x443347
mov ecx, dword [esi + 0x4ac]
lea eax, [ebp - 0xfe0]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
je 0x44333b
mov edx, dword [0x6f7b78]
mov dword [ebp - 0x20], edx
mov ebx, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xfe0]
push 0xffffffffffffffff
push eax
push 0
push 0xfde9
mov byte [ebp - 4], 6
call ebx
mov edi, eax
test edi, edi
jle 0x443319
push edi
lea ecx, [ebp - 0x20]
call fcn.00623157
push 0
push 0
push edi
push eax
lea ecx, [ebp - 0xfe0]
push 0xffffffffffffffff
push ecx
push 0
push 0xfde9
call ebx
mov edx, dword [esi + 0x70]
mov byte [edx + 0x32a], 1
mov eax, dword [ebp - 0x20]
mov ecx, dword [esi + 0x70]
push eax
jmp 0x443328
mov ecx, dword [esi + 0x70]
mov eax, dword [ecx + 0x60]
test eax, eax
je 0x44332d
push 0x6fc418
call fcn.005c7130
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 1
call fcn.00622d8a
jmp 0x44337f
mov ecx, dword [esi + 0x70]
mov eax, dword [ecx + 0x60]
test eax, eax
je 0x44337f
jmp 0x443375
mov edx, dword [esi + 0x4ac]
lea ecx, [ebp - 0x810]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowTextA]
test eax, eax
je 0x44336b
mov ecx, dword [esi + 0x70]
lea eax, [ebp - 0x810]
push eax
jmp 0x44337a
mov ecx, dword [esi + 0x70]
mov eax, dword [ecx + 0x60]
test eax, eax
je 0x44337f
push 0x6fc418
call fcn.005c7130
mov ecx, dword [esi + 0x70]
mov eax, dword [ecx + 0x8fc]
test eax, eax
je 0x4433a7
cmp eax, 3
je 0x4433a7
mov edx, dword [esi + 0x6c]
push 0
push 0x2721
push 0x111
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [esi + 0x70]
mov ecx, dword [eax + 0x460]
test ecx, ecx
je 0x4433d2
mov al, byte [ecx + 8]
test al, al
je 0x4433d2
test ecx, ecx
je 0x4433c5
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [esi + 0x70]
mov dword [eax + 0x460], 0
mov ecx, dword [esi + 0x70]
mov edx, dword [ecx + 0x300]
push edx
call fcn.005c72c0
mov ecx, esi
call fcn.00445860
mov eax, dword [esi + 0x70]
mov ecx, dword [eax + 0x4a0]
push ecx
lea ecx, [eax + 0x20]
call fcn.005e1ad0
mov ecx, dword [esi + 0x70]
push 0
call fcn.005d24c0
mov ecx, dword [esi + 0x64]
test ecx, ecx
je 0x443444
mov edx, dword [esi + 0x70]
push 1
push 1
push edx
call fcn.004c6de0
mov eax, dword [esi + 0x6c]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x443444
mov ecx, dword [esi + 0x70]
mov eax, dword [esi + 0x6c]
mov edx, dword [ecx + 0x4a0]
push edx
push 0x144d
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [0x6fcc54]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x443476
mov edx, dword [esi + 0x70]
mov ecx, dword [0x6fcc54]
mov eax, dword [edx + 0x4a0]
push eax
push 0x1395
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
push 1
mov ecx, esi
call fcn.00443af0
mov eax, dword [esi + 0x60]
push 0
test eax, eax
je 0x44349e
mov edx, dword [esi + 0x1c]
push 0xc8
push 1
push edx
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x443219
mov ecx, esi
call fcn.00622825
jmp 0x443219