Function at 0x470ac0
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x10
push ebx
mov ebx, dword [esp + 0x20]
mov ecx, dword [ebx + 8]
test ecx, ecx
push ebp
push esi
jne 0x470b2f
mov esi, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx]
push 0x63
push esi
push eax
mov eax, dword [esp + 0x2c]
push ebx
push edx
push eax
call fcn.00515c10
mov ebp, 1
add esp, 0x18
cmp eax, ebp
jne 0x47141b
mov ecx, dword [ebx + 8]
cmp ecx, ebp
je 0x47141b
cmp ecx, 2
je 0x47141b
cmp ecx, 3
je 0x47141b
push 6
push esi
push ebx
call fcn.0048abf0
add esp, 0xc
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
mov eax, dword [ebx + 0x40]
test eax, eax
je 0x470b51
cmp ecx, 2
jl 0x470b42
mov edx, dword [eax + 0x40]
test edx, edx
je 0x470b51
cmp ecx, 3
jne 0x470b5d
mov edx, dword [eax + 0x40]
mov esi, dword [edx + 0x40]
test esi, esi
jne 0x470b5d
pop esi
pop ebp
mov eax, 2
pop ebx
add esp, 0x10
ret
mov edx, dword [eax + 0x1c]
mov ebp, 1
cmp edx, ebp
jne 0x470b86
cmp ecx, 2
jl 0x470b76
mov edx, dword [eax + 0x40]
cmp dword [edx + 0x1c], ebp
jne 0x470b86
cmp ecx, 3
jne 0x470b8f
mov edx, dword [eax + 0x40]
mov edx, dword [edx + 0x40]
cmp dword [edx + 0x1c], ebp
je 0x470b8f
pop esi
mov eax, ebp
pop ebp
pop ebx
add esp, 0x10
ret
mov edx, dword [eax + 0xc]
test edx, edx
push edi
jne 0x4713e5
cmp ecx, 2
jl 0x470bae
mov edx, dword [eax + 0x40]
mov esi, dword [edx + 0xc]
test esi, esi
jne 0x4713e5
cmp ecx, 3
jne 0x470bc4
mov edx, dword [eax + 0x40]
mov edx, dword [edx + 0x40]
mov esi, dword [edx + 0xc]
test esi, esi
jne 0x4713e5
cmp ecx, ebp
jne 0x471111
mov eax, dword [eax]
push eax
call fcn.005157e0
add esp, 4
test eax, eax
je 0x470c9e
mov ecx, dword [ebx + 0x40]
mov edx, dword [ecx]
push edx
call fcn.005cbe51
mov edi, eax
add esp, 4
cmp edi, 0x270e
jle 0x470ca8
mov edi, 0x270e
mov esi, dword [0x613894]
test esi, esi
je 0x4713e5
mov edi, edi
cmp edi, 0x270f
jne 0x470cd1
mov ecx, dword [ebx + 0x40]
mov edx, dword [ecx]
push esi
push edx
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x470cda
test esi, esi
je 0x4713e5
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x4710fa
mov eax, dword [ebx]
push 0x2e
push eax
call fcn.005ccc30
mov edi, eax
add esp, 8
test edi, edi
je 0x4710fa
push 0x5e74a4
push edi
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x470ced
mov edx, dword [esi + 0xc8]
lea ecx, [esp + 0x10]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x30]
push eax
push 0x5e6a4c
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x4713e5
mov edi, 0x270f
jmp 0x470c00
test edi, edi
jg 0x470c00
mov eax, dword [0x613894]
xor ecx, ecx
test eax, eax
je 0x470ccb
jmp 0x470cc0
mov eax, dword [eax + 0x13ac]
inc ecx
test eax, eax
jne 0x470cc0
push ecx
jmp 0x4710e2
dec edi
test edi, edi
jle 0x470c33
mov esi, dword [esi + 0x13ac]
test esi, esi
jne 0x470c10
jmp 0x4713e5
push 0x5e74a0
push edi
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x470d2e
mov eax, dword [esi + 0xc8]
lea edx, [esp + 0x10]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x30]
push ecx
push 0x5e6a4c
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x4713e5
push 0x5e749c
push edi
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x470d5f
mov ecx, dword [esi + 0xc8]
lea eax, [esp + 0x10]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [esp + 0x18]
sub edx, dword [esp + 0x10]
jmp 0x4710e1
push 0x5e7498
push edi
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x470da6
mov edx, dword [esi + 0xc8]
lea ecx, [esp + 0x10]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x30]
sub eax, ebp
push eax
push 0x5e6a4c
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x4713e5
push 0x5ea1cc
push edi
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x470ded
mov eax, dword [esi + 0xc8]
lea edx, [esp + 0x10]
push edx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x30]
sub ecx, edi
push ecx
push 0x5e6a4c
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x4713e5
push 0x5ea1c4
push edi
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x470e1e
mov ecx, dword [esi + 0xc8]
lea eax, [esp + 0x10]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [esp + 0x1c]
sub edx, dword [esp + 0x14]
jmp 0x4710e1
push str..title
push edi
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x470e4c
mov ecx, dword [esp + 0x30]
mov edx, dword [esi + 0xc8]
push 0x180
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowTextA]
jmp 0x4713e5
push str..modal
push edi
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x470e75
mov eax, dword [esi + 0x158]
test eax, eax
mov eax, dword [esp + 0x30]
je 0x47104f
jmp 0x471033
push str..table
push edi
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x470e9f
mov edx, dword [esp + 0x30]
lea eax, [esi + 0x64]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x470e90
jmp 0x4713e5
push 0x5ea1a4
push edi
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x470ee6
mov esi, dword [esi + 0xe0]
test esi, esi
je 0x4713e5
lea eax, [esi - 0x1770]
test eax, eax
jle 0x4713e5
mov edx, dword [esp + 0x30]
push eax
push 0x5e6a4c
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x4713e5
push str..cancel
push edi
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x470f1a
mov esi, dword [esi + 0xe4]
test esi, esi
je 0x4713e5
lea eax, [esi - 0x1770]
test eax, eax
jle 0x4713e5
push eax
jmp 0x4710e2
push str..result
push edi
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x470f61
mov esi, dword [esi + 0xe8]
test esi, esi
je 0x4713e5
lea eax, [esi - 0x1770]
test eax, eax
jle 0x4713e5
mov ecx, dword [esp + 0x30]
push eax
push 0x5e6a4c
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x4713e5
push str..focus
push edi
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x470feb
call fcn.004676a0
mov edi, eax
test edi, edi
je 0x4713e5
push edi
call dword [sym.imp.USER32.dll_GetParent]
cmp eax, dword [esi + 0xc8]
jne 0x4713e5
push edi
mov edi, dword [sym.imp.USER32.dll_GetDlgCtrlID]
call edi
test eax, eax
je 0x4713e5
mov ecx, dword [esi + 0x1a8]
test ecx, ecx
je 0x470fcd
cmp eax, 0x65
jne 0x470fcd
mov edx, dword [esi + 0x1370]
imul edx, edx, 0x5c
mov eax, dword [edx + esi + 0x1a8]
push eax
call edi
jmp 0x4710a7
mov edx, dword [esp + 0x30]
add eax, 0xffffe890
push eax
push 0x5e6a4c
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x4713e5
push str..active
push edi
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x471070
call fcn.004676a0
mov edi, eax
test edi, edi
je 0x47101d
mov ebp, dword [esi + 0xc8]
push edi
call dword [sym.imp.USER32.dll_GetParent]
cmp eax, ebp
je 0x47102f
cmp edi, ebp
je 0x47102f
call dword [sym.imp.USER32.dll_GetActiveWindow]
test eax, eax
je 0x47104b
cmp eax, dword [esi + 0xc8]
jne 0x47104b
mov eax, dword [esp + 0x30]
mov ecx, dword [str._true]
mov dword [eax], ecx
mov dx, word [0x5e6a28]
mov word [eax + 4], dx
jmp 0x4713e5
mov eax, dword [esp + 0x30]
mov ecx, dword [str._false]
mov dword [eax], ecx
mov dx, word [0x5e6a18]
mov word [eax + 4], dx
mov cl, byte [0x5e6a1a]
mov byte [eax + 6], cl
jmp 0x4713e5
push str..tab
push edi
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x4710c5
mov eax, dword [esi + 0x1a8]
test eax, eax
je 0x4713e5
mov edx, dword [esi + 0x1370]
imul edx, edx, 0x5c
mov eax, dword [edx + esi + 0x1a8]
push eax
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
mov ecx, dword [esp + 0x30]
sub eax, 0x1770
push eax
push 0x5e6a4c
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x4713e5
push str..hwnd
push edi
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x4713e5
mov edx, dword [esi + 0xc8]
push edx
mov eax, dword [esp + 0x34]
push 0x5e6a4c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x4713e5
mov edx, dword [esp + 0x30]
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x471102
jmp 0x4713e5
mov ecx, dword [esp + 0x3c]
test ecx, ecx
je 0x471145
push 0x615410
push 0x67f
call fcn.00421db0
push 6
push 0
push 0x615410
push 0
call fcn.0048a440
add esp, 0x18
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x10
ret
mov edx, dword [eax]
mov eax, edx
lea esi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x471150
sub eax, esi
cmp eax, 0x5a
jbe 0x471161
mov byte [edx + 0x5a], cl
mov ecx, dword [ebx + 0x40]
mov edx, dword [ecx]
push edx
call fcn.005157e0
add esp, 4
test eax, eax
je 0x4711b1
mov eax, dword [ebx + 0x40]
mov ecx, dword [eax]
push ecx
push 0
push 0x680
call fcn.00421db0
add esp, 8
push eax
push 0x615410
call dword [sym.imp.USER32.dll_wsprintfA]
push 6
push 0
push 0x615410
push 0
call fcn.0048a440
add esp, 0x1c
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x10
ret
mov edx, dword [ebx + 0x40]
mov eax, dword [edx]
push eax
call fcn.00465ed0
add esp, 4
test eax, eax
je 0x471201
mov ecx, dword [ebx + 0x40]
mov edx, dword [ecx]
push edx
push 0
push 0x681
call fcn.00421db0
add esp, 8
push eax
push 0x615410
call dword [sym.imp.USER32.dll_wsprintfA]
push 6
push 0
push 0x615410
push 0
call fcn.0048a440
add esp, 0x1c
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x10
ret
call fcn.00465d10
mov edi, eax
test edi, edi
jne 0x471224
mov eax, dword [esp + 0x38]
push 8
push eax
push ebx
call fcn.0048abf0
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
mov eax, dword [ebx + 8]
cmp eax, ebp
jne 0x471250
mov ecx, dword [ebx + 0x40]
mov ecx, dword [ecx]
mov edx, edi
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x471232
mov edx, dword [ebx + 0x40]
mov ecx, dword [edx]
lea edx, [edi + 0x64]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x471244
jmp 0x47129d
cmp eax, 2
jl 0x47129d
mov eax, dword [ebx + 0x40]
mov ecx, dword [eax]
mov edx, edi
lea esp, [esp]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x471260
mov ecx, dword [ebx + 0x40]
mov edx, dword [ecx + 0x40]
mov edx, dword [edx]
mov eax, edx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x471277
sub eax, esi
cmp eax, 0x5a
jbe 0x471288
mov byte [edx + 0x5a], cl
mov eax, dword [ebx + 0x40]
mov ecx, dword [eax + 0x40]
mov ecx, dword [ecx]
lea edx, [edi + 0x64]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x471293
mov edx, dword [esp + 0x40]
mov esi, dword [esp + 0x44]
push edi
mov dword [edi + 0xc8], 0
mov dword [edi + 0x1390], edx
mov dword [edi + 0x1398], esi
call fcn.004679d0
add esp, 4
test eax, eax
jne 0x4712f6
push edi
call fcn.0046ead0
mov al, byte [0x615410]
add esp, 4
test al, al
jne 0x47113b
mov eax, dword [esp + 0x38]
push 6
push eax
push ebx
call fcn.0048abf0
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
cmp dword [ebx + 8], 3
jne 0x47136c
mov ecx, dword [ebx + 0x40]
mov edx, dword [ecx + 0x40]
mov eax, dword [edx + 0x40]
mov ecx, dword [eax]
push ecx
call fcn.005cbe51
add esp, 4
cmp eax, 0xffffffff
jne 0x47131d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
jmp 0x471370
cmp eax, 0xfffffffe
jne 0x471329
mov eax, dword [0x645324]
jmp 0x471370
cmp eax, 0xfffffffd
jne 0x47133e
mov eax, dword [0x645330]
test eax, eax
jne 0x471370
mov eax, dword [0x645324]
jmp 0x471370
cmp eax, 0xfffffffc
jne 0x47134f
call dword [sym.imp.USER32.dll_GetActiveWindow]
test eax, eax
jne 0x471370
jmp 0x47132e
mov edx, dword [ebx + 0x40]
mov eax, dword [edx + 0x40]
mov ecx, dword [eax + 0x40]
mov edx, dword [ecx]
push esi
push edx
call fcn.00503170
add esp, 8
test eax, eax
je 0x47136c
mov eax, dword [eax]
jmp 0x471370
mov eax, dword [esp + 0x24]
mov dword [edi + 0xcc], eax
mov eax, dword [esp + 0x30]
push edi
mov dword [edi + 0xec], eax
call fcn.00470050
add esp, 4
test eax, eax
push edi
jg 0x4713dd
call fcn.0046ead0
mov al, byte [0x615410]
add esp, 4
test al, al
jne 0x4713d3
mov ecx, dword [ebx + 0x40]
mov edx, dword [ecx]
push edx
push 0
push 0x682
call fcn.00421db0
add esp, 8
push eax
push 0x615410
call dword [sym.imp.USER32.dll_wsprintfA]
push 6
push 0
push 0x615410
push 0
call fcn.0048a440
add esp, 0x1c
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x10
ret
call fcn.0046ead0
add esp, 4
mov eax, dword [ebx + 8]
test eax, eax
jle 0x47140e
mov esi, dword [esp + 0x28]
mov eax, dword [ebx + 0x40]
mov ecx, dword [esi]
push eax
push ecx
call fcn.004e3140
mov dword [esi], eax
mov ecx, dword [ebx + 8]
add esp, 8
dec ecx
mov eax, ecx
test eax, eax
mov dword [ebx + 8], ecx
jg 0x4713f0
mov dword [ebx + 8], 0
mov eax, 2
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret