Function at 0x426410
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x44c
mov eax, dword [0x4c0390]
xor eax, esp
mov dword [esp + 0x448], eax
mov eax, dword [esp + 0x450]
push ebx
push edi
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x45c]
push eax
mov edi, ecx
mov edx, dword [edi]
mov ecx, dword [esp + 0x464]
push 4
push 0x110a
push edx
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ebx, eax
xor eax, eax
mov dword [esp + 8], ebx
mov dword [esp + 0x1c], eax
test ebx, ebx
je 0x426620
push ebp
push esi
jmp 0x426476
mov ebx, dword [esp + 0x10]
mov edx, dword [edi]
lea ecx, [esp + 0x30]
push ecx
push 0
push 0x110c
lea eax, [esp + 0x64]
push edx
mov byte [esp + 0x68], 0
mov dword [esp + 0x40], 0xd
mov dword [esp + 0x44], ebx
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0x400
call dword [sym.imp.USER32.dll_SendMessageA]
mov esi, dword [esp + 0x54]
mov eax, dword [esp + 0x14]
mov ebp, dword [eax]
test esi, esi
je 0x4264d2
mov edx, dword [esi + 8]
lea ecx, [esp + 0x58]
push ecx
push edx
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListA]
test eax, eax
setne al
test al, al
je 0x426549
mov eax, dword [esp + 0x1c]
neg esi
sbb esi, esi
or ecx, 0xffffffff
and esi, ebp
xor edi, edi
or ebx, ecx
add eax, ebp
lea esi, [esp + esi + 0x58]
mov dword [esp + 0x2c], eax
lea ecx, [ecx]
mov al, byte [esi + edi]
mov edx, dword [esp + 0x2c]
mov dl, byte [edx + edi]
mov byte [esp + 0x28], al
mov byte [esp + 0x20], dl
test al, al
jne 0x426518
test dl, dl
je 0x42653f
cmp ecx, 0x5c
jne 0x426513
cmp ebx, ecx
jmp 0x426516
cmp dl, 0x5c
je 0x42653f
mov eax, dword [esp + 0x20]
push eax
call fcn.004650e0
mov ecx, dword [esp + 0x28]
push ecx
mov bl, al
call fcn.004650e0
cmp al, bl
jne 0x426541
movsx ecx, byte [esp + 0x28]
movsx ebx, byte [esp + 0x20]
inc edi
jmp 0x4264f0
add ebp, edi
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
cmp ebp, dword [eax]
jle 0x426559
mov dword [eax], ebp
mov dword [esp + 0x24], ebx
jmp 0x426571
test byte [esp + 0x38], 0x20
je 0x426571
mov edx, dword [edi]
push ebx
push 1
push 0x1102
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [edi]
push ebx
push 1
push 0x110a
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [esp + 0x10], eax
test eax, eax
jne 0x426472
mov esi, dword [esp + 0x24]
test esi, esi
je 0x42661c
mov ecx, dword [edi]
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
push esi
push 2
push 0x1102
push ecx
call ebp
mov eax, dword [edi]
xor edx, edx
cmp byte [esp + 0x46c], dl
push esi
setne dl
lea edx, [edx*4 + 5]
push edx
push 0x110b
push eax
call ebp
mov ecx, dword [edi]
push esi
push 0
push 0x1114
push ecx
call ebp
mov ebp, dword [esp + 0x14]
mov edx, dword [ebp]
mov ebx, dword [esp + 0x1c]
movsx eax, byte [edx + ebx]
push eax
call fcn.0044d940
test al, al
je 0x426606
inc dword [ebp]
mov ecx, dword [ebp]
movsx edx, byte [ecx + ebx]
push edx
call fcn.0044d940
test al, al
jne 0x4265f2
mov eax, dword [esp + 0x46c]
push eax
push ebp
push esi
push ebx
mov ecx, edi
call fcn.00426410
test eax, eax
jne 0x42661e
mov eax, esi
pop esi
pop ebp
mov ecx, dword [esp + 0x450]
pop edi
pop ebx
xor ecx, esp
call fcn.0049dea6
add esp, 0x44c
ret 0x10