Function at 0x100405c5
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006c8aa
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x118
movzx eax, byte [ebp + 8]
test eax, eax
je 0x1004077a
mov dword [ebp - 0x4c], 0x1bbb
cmp dword [ebp - 0x4c], 0xdea
jge 0x10040728
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x54]
push eax
push 0x100077c8
call fcn.100528eb
add esp, 0x10
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x8c]
call fcn.10022a3c
and dword [ebp - 4], 0
and dword [ebp - 0x30], 0
jmp 0x1004063b
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x54]
jge 0x10040673
lea eax, [ebp - 0x44]
push eax
push 0x1000775c
call fcn.100528eb
pop ecx
pop ecx
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x44]
cdq
idiv dword [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x8c]
call fcn.10022aa0
mov ecx, eax
call fcn.10022aeb
jmp 0x10040634
mov byte [ebp - 0xe], 0
and dword [ebp - 0x14], 0
jmp 0x10040684
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x2c]
jge 0x10040706
push dword [ebp - 0x14]
lea ecx, [ebp - 0x8c]
call fcn.10022aa0
mov ecx, eax
call fcn.100139a0
cmp eax, dword [ebp - 0x38]
jae 0x100406a8
jmp 0x1004067d
mov byte [ebp - 0xe], 1
push 0x10007c2c
call fcn.10052cc6
pop ecx
and dword [ebp - 0x28], 0
jmp 0x100406c4
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x38]
jge 0x100406f4
push dword [ebp - 0x28]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x8c]
call fcn.10022aa0
mov ecx, eax
call fcn.1000e623
push dword [eax]
push 0x100078cc
call fcn.10052b06
pop ecx
pop ecx
jmp 0x100406bd
push 0x100076c5
call fcn.10052cc6
pop ecx
jmp 0x10040706
movzx eax, byte [ebp - 0xe]
test eax, eax
jne 0x10040719
push 0x10007c30
call fcn.10052cc6
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8c]
call fcn.10022a9b
lea eax, [ebp + 0x14]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x74]
movzx eax, byte [eax]
test eax, eax
je 0x1004074d
push 0
push 0x2085
call dword [sym.imp.USER32.dll_ValidateRgn]
jmp 0x10040775
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
movzx eax, byte [eax]
test eax, eax
je 0x10040775
push 0xf6d
push 0
push 0x209c
call dword [sym.imp.USER32.dll_GetWindowTextW]
jmp 0x100409d4
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x78], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x7c], 0x1926
cmp dword [ebp - 0x7c], 0xc84
jge 0x10040997
lea ecx, [ebp - 0xa4]
call fcn.1000e016
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xbc]
call fcn.1000e016
mov byte [ebp - 4], 2
mov dword [ebp - 0x34], 1
jmp 0x100407d1
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
lea edx, [ebp - 0xa4]
mov ecx, 0x1065c150
call fcn.10023d94
lea edx, [ebp - 0xbc]
mov ecx, eax
call fcn.10023d94
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x3c]
add ecx, dword [eax + 4]
call fcn.1002b26b
movzx eax, al
test eax, eax
je 0x10040979
mov edx, 0x10007cb4
lea ecx, [ebp - 0xa4]
call fcn.1004bfe1
movzx eax, al
test eax, eax
je 0x10040979
mov edx, 0x10007cb4
lea ecx, [ebp - 0xbc]
call fcn.1004bfe1
movzx eax, al
test eax, eax
je 0x10040979
and dword [ebp - 0x24], 0
jmp 0x1004084f
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1a
jge 0x10040862
mov eax, dword [ebp - 0x24]
and dword [ebp + eax*4 - 0x124], 0
jmp 0x10040848
mov byte [ebp - 0xd], 1
and dword [ebp - 0x1c], 0
jmp 0x10040873
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0xa4]
call fcn.1000eb6c
cmp dword [ebp - 0x1c], eax
jae 0x100408ab
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xa4]
call fcn.100104b2
movsx eax, byte [eax]
lea eax, [ebp + eax*4 - 0x2a8]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x40]
mov dword [ecx], eax
jmp 0x1004086c
and dword [ebp - 0x20], 0
jmp 0x100408b8
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0xbc]
call fcn.1000eb6c
cmp dword [ebp - 0x20], eax
jae 0x100408f0
push dword [ebp - 0x20]
lea ecx, [ebp - 0xbc]
call fcn.100104b2
movsx eax, byte [eax]
lea eax, [ebp + eax*4 - 0x2a8]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x48]
mov dword [ecx], eax
jmp 0x100408b1
and dword [ebp - 0x18], 0
jmp 0x100408fd
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1a
jge 0x10040918
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x124], 0
je 0x10040916
mov byte [ebp - 0xd], 0
jmp 0x10040918
jmp 0x100408f6
push dword [ebp - 0x34]
mov edx, 0x10007cb8
mov ecx, 0x1065c098
call fcn.100128f2
mov ecx, eax
call fcn.1000e270
mov edx, 0x100076c8
mov ecx, eax
call fcn.100128f2
movzx eax, byte [ebp - 0xd]
test eax, eax
je 0x10040956
mov edx, 0x10007cc0
mov ecx, 0x1065c098
call fcn.100128f2
jmp 0x10040965
mov edx, 0x10007cc8
mov ecx, 0x1065c098
call fcn.100128f2
push fcn.10012c7f
mov ecx, 0x1065c098
call fcn.1000e264
jmp 0x100407ca
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xbc]
call fcn.1000e056
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.1000e056
mov eax, dword [ebp - 0x6c]
movzx eax, byte [eax]
test eax, eax
je 0x100409cc
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x68], eax
push 0
mov ecx, dword [ebp - 0x68]
call fcn.1000e623
mov ecx, dword [ebp - 0x70]
mov eax, dword [eax]
mov dword [ecx], eax
jmp 0x100409d4
push 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret