Function at 0x41a990
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe4
call fcn.0040fc00
mov dword [ebp - 0x94], eax
push 0
push 5
mov eax, dword [ebp - 0x94]
add eax, 0xff7
push eax
mov ecx, dword [ebp - 0x94]
mov edx, dword [ecx + 0xffc]
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0x1000
push 0
mov eax, dword [ebp - 0x94]
push eax
call fcn.00474100
add esp, 0xc
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041b380
add esp, 4
call fcn.0041b390
call fcn.0041c2b0
call fcn.0041c610
xor edx, edx
cmp dword [0x56e3f8], 0
setne dl
push edx
push 0x3ea
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_CheckDlgButton]
xor ecx, ecx
cmp dword [0x56e3fc], 0
setne cl
push ecx
push 0x3eb
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_CheckDlgButton]
mov eax, dword [0x56e3f8]
push eax
push 0x3eb
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 1
mov edx, dword [0x56e400]
push edx
push 0x3ec
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemInt]
cmp dword [0x56e3f8], 0
je 0x41aa89
cmp dword [0x56e3fc], 0
je 0x41aa89
mov dword [ebp - 0xc8], 1
jmp 0x41aa93
mov dword [ebp - 0xc8], 0
mov ecx, dword [ebp - 0xc8]
push ecx
push 0x3ec
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 1
mov eax, dword [0x56e404]
push eax
push 0x3ed
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_SetDlgItemInt]
cmp dword [0x56e3f8], 0
je 0x41aae5
cmp dword [0x56e3fc], 0
je 0x41aae5
mov dword [ebp - 0xcc], 1
jmp 0x41aaef
mov dword [ebp - 0xcc], 0
mov edx, dword [ebp - 0xcc]
push edx
push 0x3ed
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 1
mov ecx, dword [0x909a64]
push ecx
push 0x3ee
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_SetDlgItemInt]
mov eax, dword [0x56e3f8]
push eax
push 0x3ee
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
xor edx, edx
cmp dword [0xa0f6a0], 0
setne dl
push edx
push 0x3ef
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_CheckDlgButton]
mov ecx, dword [0x56e3f8]
push ecx
push 0x3ef
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 1
mov eax, dword [0x56e408]
push eax
push 0x3f0
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_SetDlgItemInt]
mov edx, dword [0x56e3f8]
push edx
push 0x3f0
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov dword [ebp - 0x90], 0x61
push 0x3f1
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0x98], eax
mov edx, dword [ebp - 0x90]
push edx
mov eax, dword [ebp - 0x90]
push eax
push 0x1036
mov ecx, dword [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x8c], 0x48c1b0
mov dword [ebp - 0x88], 0x48c1b8
mov dword [ebp - 0x84], 0x48c1c0
mov dword [ebp - 0x80], 0x48c1c8
mov dword [ebp - 0x7c], 0x48c1d0
mov dword [ebp - 0x78], 0x48c1d8
mov dword [ebp - 0x74], 0x48c1e0
mov dword [ebp - 0x70], 0x48c1e8
mov dword [ebp - 0x6c], 0x48c1f0
mov dword [ebp - 0x68], 0x48c1f8
mov dword [ebp - 0x64], 0x48c200
mov dword [ebp - 0x60], 0x48c208
mov dword [ebp - 0x5c], 0x48c210
mov dword [ebp - 0x58], 0x24
mov dword [ebp - 0x54], 0x50
mov dword [ebp - 0x50], 0x3c
mov dword [ebp - 0x4c], 0x3c
mov dword [ebp - 0x48], 0x50
mov dword [ebp - 0x44], 0x4b
mov dword [ebp - 0x40], 0x3c
mov dword [ebp - 0x3c], 0x88
mov dword [ebp - 0x38], 0x24
mov dword [ebp - 0x34], 0x50
mov dword [ebp - 0x30], 0x24
mov dword [ebp - 0x2c], 0x24
mov dword [ebp - 0x28], 0x24
mov dword [ebp - 0x9c], 0
jmp 0x41acc6
mov edx, dword [ebp - 0x9c]
add edx, 1
mov dword [ebp - 0x9c], edx
cmp dword [ebp - 0x9c], 0xd
jae 0x41ad34
mov dword [ebp - 0xbc], 0xf
mov dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp + eax*4 - 0x58]
mov dword [ebp - 0xb4], ecx
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp + edx*4 - 0x8c]
mov dword [ebp - 0xb0], eax
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0xa8], ecx
lea edx, [ebp - 0xbc]
push edx
mov eax, dword [ebp - 0x9c]
push eax
push 0x1061
mov ecx, dword [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x41acb7
mov dword [ebp - 0xc0], 0
jmp 0x41ad4f
mov edx, dword [ebp - 0xc0]
add edx, 1
mov dword [ebp - 0xc0], edx
mov eax, dword [ebp - 0xc0]
cmp eax, dword [0x8c99e4]
jge 0x41ae13
mov ecx, dword [ebp - 0xc0]
push ecx
mov edx, dword [ebp - 0x98]
push edx
call fcn.0041b870
add esp, 8
push 0x48c218
mov eax, dword [ebp - 0xc0]
push eax
mov ecx, dword [ebp - 0x98]
push ecx
call fcn.0041b8d0
add esp, 0xc
push 0
push 0
mov edx, dword [ebp - 0xc0]
push edx
call fcn.004110f0
add esp, 0xc
push 0
mov eax, dword [ebp - 0xc0]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041a1d0
add esp, 0xc
push 0
mov edx, dword [ebp - 0xc0]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0041a270
add esp, 0xc
push 0
mov ecx, dword [ebp - 0xc0]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0041a310
add esp, 0xc
push 0
mov eax, dword [ebp - 0xc0]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00410d50
add esp, 0xc
push 0
mov edx, dword [ebp - 0xc0]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00411880
add esp, 0xc
jmp 0x41ad40
call fcn.0041bb10
cmp dword [0x8c99e4], 0
jle 0x41ae37
mov ecx, dword [0x90995c]
push ecx
mov edx, dword [ebp - 0x98]
push edx
call fcn.00410fe0
add esp, 8
mov eax, dword [0x56e3f8]
push eax
mov ecx, dword [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_EnableWindow]
cmp dword [0x8c99e4], 0
jle 0x41ae6d
mov edx, dword [0x90995c]
imul edx, edx, 0x208
add edx, 0x888c38
mov dword [ebp - 0xd0], edx
jmp 0x41ae77
mov dword [ebp - 0xd0], 0x48c21c
mov eax, dword [ebp - 0xd0]
push eax
push 0x3f2
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov edx, dword [0x56e3f8]
push edx
push 0x3f2
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
cmp dword [0x8c99e4], 0
jle 0x41aecd
mov ecx, dword [0x90995c]
imul ecx, ecx, 0x208
add ecx, 0x90aa48
mov dword [ebp - 0xd4], ecx
jmp 0x41aed7
mov dword [ebp - 0xd4], 0x48c220
mov edx, dword [ebp - 0xd4]
push edx
push 0x3f3
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov ecx, dword [0x56e3f8]
push ecx
push 0x3f3
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
cmp dword [0x8c99e4], 0
jle 0x41af2b
mov eax, dword [0x90995c]
imul eax, eax, 0x208
add eax, 0xa0f6a8
mov dword [ebp - 0xd8], eax
jmp 0x41af35
mov dword [ebp - 0xd8], 0x48c224
mov ecx, dword [ebp - 0xd8]
push ecx
push 0x3f4
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [0x56e3f8]
push eax
push 0x3f4
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
cmp dword [0x8c99e4], 0
jle 0x41af8a
mov edx, dword [0x90995c]
imul edx, edx, 0x208
add edx, 0x94add8
mov dword [ebp - 0xdc], edx
jmp 0x41af94
mov dword [ebp - 0xdc], 0x48c228
mov eax, dword [ebp - 0xdc]
push eax
push 0x3f5
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov edx, dword [0x56e3f8]
push edx
push 0x3f5
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
cmp dword [0x8c99e4], 0
jle 0x41afea
mov ecx, dword [0x90995c]
imul ecx, ecx, 0x208
add ecx, 0x9cd3d0
mov dword [ebp - 0xe0], ecx
jmp 0x41aff4
mov dword [ebp - 0xe0], 0x48c22c
mov edx, dword [ebp - 0xe0]
push edx
push 0x3f6
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov ecx, dword [0x56e3f8]
push ecx
push 0x3f6
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 0x3f7
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xc4], 0
jmp 0x41b054
mov ecx, dword [ebp - 0xc4]
add ecx, 1
mov dword [ebp - 0xc4], ecx
cmp dword [ebp - 0xc4], 0xd
jae 0x41b07e
mov edx, dword [ebp - 0xc4]
mov eax, dword [edx*4 + 0x56e40c]
push eax
push 0
push 0x143
mov ecx, dword [ebp - 0x24]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x41b045
cmp dword [0x8c99e4], 0
jle 0x41b09c
mov edx, dword [0x90995c]
mov eax, dword [edx*4 + 0xa50008]
mov dword [ebp - 0xe4], eax
jmp 0x41b0a6
mov dword [ebp - 0xe4], 6
push 0
mov ecx, dword [ebp - 0xe4]
push ecx
push 0x14e
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x56e3f8]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
call dword [sym.imp.USER32.dll_EnableWindow]
mov edx, dword [0x56e3f8]
push edx
push 0x3f8
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov ecx, dword [0x56e3f8]
push ecx
push 0x3f9
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov eax, dword [0x56e3f8]
push eax
push 0x3fa
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov edx, dword [0x56e3f8]
push edx
push 0x3fb
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov ecx, dword [0x56e3f8]
push ecx
push 0x3fc
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov eax, dword [0x56e3f8]
push eax
push 0x3fd
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
xor edx, edx
cmp dword [0xa0f6a4], 0
setne dl
push edx
push 0x3fe
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_CheckDlgButton]
push 0xa0cb78
push 0x3ff
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov edx, dword [0xa0f6a4]
push edx
push 0x3ff
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
xor ecx, ecx
cmp dword [0x90aa44], 0
setne cl
push ecx
push 0x401
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_CheckDlgButton]
push 0x94a9c8
push 0x402
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov ecx, dword [0x90aa44]
push ecx
push 0x402
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
xor eax, eax
cmp dword [0x98ebcc], 0
setne al
push eax
push 0x403
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_CheckDlgButton]
push 1
mov edx, dword [0xa4f830]
push edx
push 0x404
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemInt]
mov ecx, dword [0x98ebcc]
push ecx
push 0x404
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 0xa0e500
push 0x405
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov ecx, dword [0x98ebcc]
push ecx
push 0x405
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 0x94abd8
push 0x406
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov ecx, dword [0x98ebcc]
push ecx
push 0x406
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov eax, 0x49
mov word [ebp - 0x20], ax
mov ecx, 0x4e
mov word [ebp - 0x1e], cx
mov edx, 0x53
mov word [ebp - 0x1c], dx
mov eax, 0x45
mov word [ebp - 0x1a], ax
mov ecx, 0x52
mov word [ebp - 0x18], cx
mov edx, 0x54
mov word [ebp - 0x16], dx
mov eax, 9
mov word [ebp - 0x14], ax
mov ecx, 0x81ea
mov word [ebp - 0x12], cx
mov edx, 0x52a8
mov word [ebp - 0x10], dx
mov eax, 0x2f
mov word [ebp - 0xe], ax
mov ecx, 0x624b
mov word [ebp - 0xc], cx
mov edx, 0x52a8
mov word [ebp - 0xa], dx
mov eax, 0xd
mov word [ebp - 8], ax
mov ecx, 0xa
mov word [ebp - 6], cx
xor edx, edx
mov word [ebp - 4], dx
lea eax, [ebp - 0x20]
push eax
push 0x3e9
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push 0x2d
push 0
push 1
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_RegisterHotKey]
mov eax, 1
mov esp, ebp
pop ebp
ret