Function at 0x1002cfd0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push edi
mov edi, eax
push esi
push ebx
mov ebx, edx
sub esp, 0x1b4
mov esi, dword [sym.imp.user32.dll_GetDlgItem]
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x19c], eax
mov dword [esp + 4], 0x403
mov dword [esp], eax
mov dword [ebp - 0x1a4], esi
call esi
sub esp, 8
mov dword [ebp - 0x198], eax
mov dword [esp], edi
lea edi, [ebp - 0x10c]
mov dword [esp + 4], 0x404
call esi
mov ecx, dword [ebp - 0x194]
mov dword [ebp - 0x1a0], eax
sub esp, 8
xor eax, eax
lea esi, [esi]
movzx edx, word [ebx + eax]
mov word [edi + eax], dx
add eax, 2
test dx, dx
jne 0x1002d038
cmp word [ebp - 0x10c], 0
mov edx, edi
je 0x1002d061
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x1002d058
xor eax, eax
mov esi, 0x2f
jmp 0x1002d077
movzx esi, word [eax + 0x100494b4]
mov word [edx + eax], si
add eax, 2
test si, si
jne 0x1002d070
cmp word [ebp - 0x10c], 0
mov edx, edi
je 0x1002d099
nop
add edx, 2
cmp word [edx], 0
jne 0x1002d090
xor eax, eax
lea esi, cs:[esi]
movzx esi, word [ecx + eax]
mov word [edx + eax], si
add eax, 2
test si, si
jne 0x1002d0a0
mov eax, dword [ebp + 8]
test eax, eax
jne 0x1002d240
mov esi, pe_nt_image_headers32
cmp word [ebp - 0x10c], 0
mov word [ebp - 0x18e], si
je 0x1002d368
mov eax, edi
lea esi, cs:[esi]
nop
add eax, 2
cmp word [eax], 0
jne 0x1002d0e0
sub eax, edi
add eax, 2
movzx eax, ax
lea edx, [ebp - 0x18e]
lea esi, [ebp - 0x18c]
mov dword [esp + 0x10], 0x13
mov dword [esp + 0xc], edx
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], edi
mov dword [ebp - 0x194], ecx
call sym._WNetGetCachedPassword_20
mov edx, eax
sub esp, 0x14
xor eax, eax
test edx, edx
je 0x1002d138
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 4], 0x3a
mov dword [esp], esi
call dword [sym.imp.ucrtbase.dll_wcschr]
mov ecx, dword [ebp - 0x194]
test eax, eax
mov edi, eax
je 0x1002d22c
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1a8], ecx
mov dword [esp + 4], 0xffffffeb
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetWindowLongW]
mov ecx, dword [ebp - 0x198]
sub esp, 8
mov dword [ebp - 0x194], eax
xor eax, eax
mov word [edi], ax
mov dword [esp + 4], esi
mov esi, dword [sym.imp.user32.dll_SetWindowTextW]
mov dword [esp], ecx
call esi
mov ecx, dword [ebp - 0x194]
sub esp, 8
mov eax, dword [ecx]
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [eax + 0x7c]
test edx, edx
jne 0x1002d218
lea edx, [edi + 2]
mov edi, dword [ebp - 0x1a0]
mov dword [esp + 4], edx
mov dword [esp], edi
call esi
mov eax, dword [ebp - 0x19c]
sub esp, 8
mov dword [esp], eax
mov eax, dword [ebp - 0x1a4]
mov dword [esp + 4], 0x405
call eax
sub esp, 8
test eax, eax
je 0x1002d22c
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0xf1
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
mov eax, 1
sub esp, 0x10
jmp 0x1002d12a
mov dword [esp], 1
mov eax, dword [ebp - 0x19c]
mov edx, ebx
call sym._WININET_GetSetPassword
lea esp, [ebp - 0xc]
mov eax, 1
pop ebx
pop esi
pop edi
pop ebp
ret
xor eax, eax
lea ebx, [ebp - 0x18c]
mov dword [esp + 8], 0x3f
mov esi, dword [sym.imp.user32.dll_GetWindowTextW]
mov word [ebp - 0x18c], ax
mov eax, dword [ebp - 0x198]
mov dword [esp + 4], ebx
mov dword [esp], eax
call esi
mov edx, ebx
sub esp, 0xc
cmp word [ebp - 0x18c], 0
je 0x1002d289
lea esi, cs:[esi]
add edx, 2
cmp word [edx], 0
jne 0x1002d280
xor eax, eax
mov ecx, 0x3a
jmp 0x1002d29f
movzx ecx, word [eax + 0x100494b8]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x1002d298
cmp word [ebp - 0x18c], 0
je 0x1002d372
mov eax, ebx
lea esi, cs:[esi]
add eax, 2
cmp word [eax], 0
jne 0x1002d2c0
mov ecx, eax
mov edx, 0x40
sub ecx, ebx
sar ecx, 1
sub edx, ecx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1a0]
mov dword [esp + 8], edx
mov dword [esp], eax
call esi
sub esp, 0xc
cmp word [ebp - 0x10c], 0
je 0x1002d385
mov eax, edi
lea esi, [esi]
add eax, 2
cmp word [eax], 0
jne 0x1002d300
sub eax, edi
add eax, 2
movzx eax, ax
cmp word [ebp - 0x18c], 0
je 0x1002d37e
mov edx, ebx
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x1002d320
sub edx, ebx
add edx, 2
movzx edx, dx
mov dword [esp + 8], ebx
mov dword [esp], edi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x13
mov dword [esp + 0xc], edx
mov dword [esp + 4], eax
call sym._WNetCachePassword_24
sub esp, 0x18
test eax, eax
sete al
lea esp, [ebp - 0xc]
pop ebx
movzx eax, al
pop esi
pop edi
pop ebp
ret
mov eax, 2
jmp 0x1002d0f1
mov edx, 0x40
mov eax, ebx
jmp 0x1002d2d6
mov edx, 2
jmp 0x1002d331
mov eax, 2
jmp 0x1002d311