Function at 0x40fb30
Capabilities:
Get graphical window text

Disassembly:
push 0xffffffffffffffff
push 0x423e48
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x50
push ebx
push ebp
push esi
mov ebp, ecx
push edi
push ecx
mov eax, esp
mov dword [esp + 0x38], esp
push eax
call fcn.0041da40
xor ebx, ebx
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x431a04
mov dword [esp + 0x74], ebx
call sub.MFC42u.DLL_CString::CString_1
push ecx
mov byte [esp + 0x74], 1
mov ecx, esp
mov dword [esp + 0x48], esp
push 0x4317d8
call sub.MFC42u.DLL_CString::CString_1
lea ecx, [esp + 0x3c]
mov dword [esp + 0x74], 0xffffffff
push ecx
call fcn.0041d8c0
add esp, 0xc
mov dword [esp + 0x6c], 2
mov edx, esp
mov dword [esp + 0x40], esp
push edx
call fcn.0041da40
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x4319f4
mov byte [esp + 0x74], 3
call sub.MFC42u.DLL_CString::CString_1
push ecx
mov byte [esp + 0x74], 4
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x4317d8
call sub.MFC42u.DLL_CString::CString_1
lea eax, [esp + 0x38]
mov byte [esp + 0x74], 2
push eax
call fcn.0041d8c0
add esp, 0xc
mov byte [esp + 0x6c], 5
mov ecx, esp
mov dword [esp + 0x40], esp
push ecx
call fcn.0041da40
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x4319e4
mov byte [esp + 0x74], 6
call sub.MFC42u.DLL_CString::CString_1
push ecx
mov byte [esp + 0x74], 7
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x4317d8
call sub.MFC42u.DLL_CString::CString_1
lea edx, [esp + 0x34]
mov byte [esp + 0x74], 5
push edx
call fcn.0041d8c0
add esp, 0xc
mov byte [esp + 0x6c], 8
mov eax, esp
mov dword [esp + 0x40], esp
push eax
call fcn.0041da40
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x4319d8
mov byte [esp + 0x74], 9
call sub.MFC42u.DLL_CString::CString_1
push ecx
mov byte [esp + 0x74], 0xa
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x4317d8
call sub.MFC42u.DLL_CString::CString_1
lea ecx, [esp + 0x30]
mov byte [esp + 0x74], 8
push ecx
call fcn.0041d8c0
add esp, 0xc
mov byte [esp + 0x6c], 0xb
mov edx, esp
mov dword [esp + 0x40], esp
push edx
call fcn.0041da40
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x4319cc
mov byte [esp + 0x74], 0xc
call sub.MFC42u.DLL_CString::CString_1
push ecx
mov byte [esp + 0x74], 0xd
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x4317d8
call sub.MFC42u.DLL_CString::CString_1
lea eax, [esp + 0x2c]
mov byte [esp + 0x74], 0xb
push eax
call fcn.0041d8c0
add esp, 0x10
mov edi, str.Fixedsys
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x40]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [esp + 0x18], 0xc
mov eax, ecx
mov esi, edi
mov edi, edx
mov dword [esp + 0x1c], ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov dword [esp + 0x14], ebx
and ecx, 3
mov byte [esp + 0x68], 0xe
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x4349f4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x30]
mov eax, dword [ecx - 8]
cmp eax, ebx
jle 0x40fd3b
push ebx
push ebx
lea edx, [esp + 0x48]
push 0x20
push edx
push 0xffffffffffffffff
push ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, dword [esp + 0x2c]
mov esi, dword [sym.imp.MSVCRT.dll_swscanf]
mov eax, dword [ecx - 8]
cmp eax, ebx
jle 0x40fd5c
lea eax, [esp + 0x18]
push eax
push 0x431050
push ecx
call esi
add esp, 0xc
mov eax, dword [esp + 0x28]
cmp dword [eax - 8], ebx
jle 0x40fd75
lea ecx, [esp + 0x1c]
push ecx
push 0x431050
push eax
call esi
add esp, 0xc
mov eax, dword [esp + 0x24]
cmp dword [eax - 8], ebx
jle 0x40fda6
lea edx, [esp + 0x10]
push edx
push 0x431050
push eax
call esi
mov eax, dword [esp + 0x1c]
mov ecx, dword [0x432520]
add esp, 0xc
cmp eax, ecx
jl 0x40fda6
mov ecx, dword [0x4349f4]
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0x20]
cmp dword [eax - 8], ebx
jle 0x40fdcc
lea edx, [esp + 0x14]
push edx
push 0x431050
push eax
call esi
mov eax, dword [esp + 0x20]
add esp, 0xc
cmp eax, 2
jb 0x40fdcc
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x18]
mov ecx, dword [ebp + 0x20]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 0x20
push 0x807
push ecx
call esi
mov eax, dword [ebp + 0x20]
lea edx, [esp + 0x40]
push edx
push 0x20
push 0x808
push eax
call esi
mov eax, dword [esp + 0x10]
mov edx, dword [ebp + 0x20]
lea ecx, [eax*8]
sub ecx, eax
mov eax, dword [ecx*8 + 0x43247c]
push eax
push 0x21
lea edi, [ecx*8 + 0x432478]
push 0x804
push edx
call esi
mov eax, dword [edi + 8]
push eax
mov eax, dword [ebp + 0x20]
push 0x21
push 0x803
push eax
call esi
mov eax, dword [edi + 4]
mov ecx, dword [ebp + 0x20]
push eax
push 1
push 0x8f2
push ecx
call esi
mov eax, dword [edi + 4]
mov edx, dword [ebp + 0x20]
push eax
push 1
push 0x8f3
push edx
call esi
mov eax, dword [edi + 4]
push eax
mov eax, dword [ebp + 0x20]
push 0x1f
push 0x7f9
push eax
call esi
mov eax, dword [edi + 4]
mov ecx, dword [ebp + 0x20]
push eax
push 0x1e
push 0x7f9
push ecx
call esi
mov eax, dword [edi + 4]
mov edx, dword [ebp + 0x20]
push eax
push 0x1d
push 0x7f9
push edx
call esi
mov eax, dword [edi + 4]
push eax
mov eax, dword [ebp + 0x20]
push 0x1c
push 0x7f9
push eax
call esi
mov eax, dword [edi + 4]
mov ecx, dword [ebp + 0x20]
push eax
push 0x19
push 0x7f9
push ecx
call esi
mov eax, dword [edi + 4]
mov edx, dword [ebp + 0x20]
push eax
push 0x1a
push 0x7f9
push edx
call esi
mov eax, dword [edi + 4]
push eax
mov eax, dword [ebp + 0x20]
push 0x1b
push 0x7f9
push eax
call esi
mov eax, dword [edi + 8]
mov ecx, dword [ebp + 0x20]
push eax
push 0x1f
push 0x7fa
push ecx
call esi
mov eax, dword [edi + 8]
mov edx, dword [ebp + 0x20]
push eax
push 0x1e
push 0x7fa
push edx
call esi
mov eax, dword [edi + 8]
push eax
mov eax, dword [ebp + 0x20]
push 0x1d
push 0x7fa
push eax
call esi
mov eax, dword [edi + 8]
mov ecx, dword [ebp + 0x20]
push eax
push 0x1c
push 0x7fa
push ecx
call esi
mov eax, dword [edi + 8]
mov edx, dword [ebp + 0x20]
push eax
push 0x19
push 0x7fa
push edx
call esi
mov eax, dword [edi + 8]
push eax
mov eax, dword [ebp + 0x20]
push 0x1a
push 0x7fa
push eax
call esi
mov eax, dword [edi + 8]
mov ecx, dword [ebp + 0x20]
push eax
push 0x1b
push 0x7fa
push ecx
call esi
mov eax, dword [edi + 0x14]
mov edx, dword [ebp + 0x20]
push eax
push 1
push 0x814
push edx
call esi
mov eax, dword [edi + 0x18]
push eax
mov eax, dword [ebp + 0x20]
push 1
push 0x813
push eax
call esi
push ebx
push 1
push 0x830
mov ecx, dword [ebp + 0x20]
push ecx
call esi
mov eax, dword [edi + 0x1c]
mov edx, dword [ebp + 0x20]
push ebx
push eax
push 0x832
push edx
call esi
mov eax, dword [edi + 0x20]
push ebx
push eax
mov eax, dword [ebp + 0x20]
push 0x9a6
push eax
call esi
mov eax, dword [edi + 0x10]
mov ecx, dword [ebp + 0x20]
push eax
push 0x20
push 0x803
push ecx
call esi
mov edx, dword [ebp + 0x20]
push ebx
push ebx
push 0x824
push edx
call esi
mov eax, dword [edi + 0xc]
push eax
mov eax, dword [ebp + 0x20]
push 0x20
push 0x804
push eax
call esi
mov ecx, dword [ebp + 0x20]
push ebx
push ebx
push 0x825
push ecx
call esi
mov eax, dword [edi + 0xc]
mov edx, dword [ebp + 0x20]
push eax
push ebx
push 0x804
push edx
call esi
inc ebx
cmp ebx, 0x13
jl 0x40ffcc
mov eax, dword [edi + 0x24]
push eax
mov eax, dword [ebp + 0x20]
push 3
push 0x803
push eax
call esi
mov ecx, dword [ebp + 0x20]
push 1
push 3
push 0x805
push ecx
call esi
mov eax, dword [edi + 0x24]
mov edx, dword [ebp + 0x20]
push eax
push 0xa
push 0x803
push edx
call esi
mov eax, dword [ebp + 0x20]
push 1
push 0xa
push 0x805
push eax
call esi
mov eax, dword [edi + 0x24]
mov ecx, dword [ebp + 0x20]
push eax
push 0xb
push 0x803
push ecx
call esi
mov edx, dword [ebp + 0x20]
push 1
push 0xb
push 0x805
push edx
call esi
mov eax, dword [edi + 0x24]
push eax
mov eax, dword [ebp + 0x20]
push 0xc
push 0x803
push eax
call esi
mov ecx, dword [ebp + 0x20]
push 1
push 0xc
push 0x805
push ecx
call esi
mov eax, dword [edi + 0x10]
mov edx, dword [ebp + 0x20]
push eax
push 7
push 0x803
push edx
call esi
mov eax, dword [edi + 0x10]
push 0
push eax
mov eax, dword [ebp + 0x20]
push 0x815
push eax
call esi
mov eax, dword [edi + 0x28]
mov ecx, dword [ebp + 0x20]
push eax
push 1
push 0x803
push ecx
call esi
mov eax, dword [edi + 0x30]
mov edx, dword [ebp + 0x20]
push eax
push 9
push 0x803
push edx
call esi
mov eax, dword [edi + 0x30]
push eax
mov eax, dword [ebp + 0x20]
push 4
push 0x803
push eax
call esi
mov eax, dword [edi + 0x2c]
mov ecx, dword [ebp + 0x20]
push eax
push 2
push 0x803
push ecx
call esi
mov eax, dword [edi + 0x2c]
mov edx, dword [ebp + 0x20]
push eax
push 8
push 0x803
push edx
call esi
mov eax, dword [edi + 0x2c]
push eax
mov eax, dword [ebp + 0x20]
push 0xd
push 0x803
push eax
call esi
mov edi, dword [edi + 0x34]
mov ecx, dword [ebp + 0x20]
push edi
push 6
push 0x803
push ecx
call esi
mov edx, dword [esp + 0x1c]
mov ecx, ebp
push edx
call fcn.004102c0
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x410178
mov eax, dword [ebp + 0x20]
push 0xe
push 0x1f
push 0x7f8
push eax
call esi
mov ecx, dword [ebp + 0x20]
push 0xc
push 0x1e
push 0x7f8
push ecx
call esi
mov edx, dword [ebp + 0x20]
push 9
push 0x1d
push 0x7f8
push edx
call esi
mov eax, dword [ebp + 0x20]
push 0xa
push 0x1c
push 0x7f8
push eax
call esi
mov ecx, dword [ebp + 0x20]
push 0xd
push 0x19
push 0x7f8
push ecx
call esi
mov edx, dword [ebp + 0x20]
push 0xf
push 0x1a
push 0x7f8
push edx
call esi
mov eax, dword [ebp + 0x20]
push 0xb
push 0x1b
push 0x7f8
push eax
jmp 0x4101df
mov ecx, dword [ebp + 0x20]
push 0x14
push 0x1f
push 0x7f8
push ecx
call esi
mov edx, dword [ebp + 0x20]
push 0x12
push 0x1e
push 0x7f8
push edx
call esi
mov eax, dword [ebp + 0x20]
push 9
push 0x1d
push 0x7f8
push eax
call esi
mov ecx, dword [ebp + 0x20]
push 0x10
push 0x1c
push 0x7f8
push ecx
call esi
mov edx, dword [ebp + 0x20]
push 0x13
push 0x19
push 0x7f8
push edx
call esi
mov eax, dword [ebp + 0x20]
push 0x15
push 0x1a
push 0x7f8
push eax
call esi
mov ecx, dword [ebp + 0x20]
push 0x11
push 0x1b
push 0x7f8
push ecx
call esi
lea ecx, [esp + 0x20]
mov byte [esp + 0x68], 0xb
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x24]
mov byte [esp + 0x68], 8
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x28]
mov byte [esp + 0x68], 5
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov byte [esp + 0x68], 2
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x30]
mov dword [esp + 0x68], 0xffffffff
call sub.MFC42u.DLL_CString::CString
mov ecx, dword [esp + 0x60]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x5c
ret