Function at 0x401530
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x9c
mov eax, dword [esp + 0xa4]
push esi
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push ecx
push edx
call fcn.004019a0
add esp, 8
mov esi, eax
lea eax, [esp + 4]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp eax, dword [esp + 4]
je 0x401898
mov eax, dword [0x40795c]
cmp eax, esi
je 0x401898
test eax, eax
je 0x40158b
push 0
push eax
call fcn.004018a0
add esp, 8
push ebx
push ebp
push edi
push 1
push esi
call fcn.004018a0
add esp, 8
mov dword [0x40795c], esi
push esi
call dword [sym.imp.USER32.dll_GetParent]
mov edi, eax
test edi, edi
je 0x40160f
push edi
lea ecx, [esp + 0x30]
push str.0x_08X
push ecx
call fcn.00401de6
mov ebp, dword [esp + 0xbc]
mov ebx, dword [sym.imp.USER32.dll_SetDlgItemTextA]
add esp, 0xc
lea edx, [esp + 0x2c]
push edx
push 0x3f0
push ebp
call ebx
lea eax, [esp + 0x2c]
push 0x80
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea ecx, [esp + 0x2c]
push ecx
push 0x3f1
push ebp
call ebx
lea edx, [esp + 0x2c]
push 0x80
push edx
push edi
call dword [sym.imp.USER32.dll_GetClassNameA]
lea eax, [esp + 0x2c]
push eax
jmp 0x40163b
mov ebp, dword [esp + 0xb0]
mov ebx, dword [sym.imp.USER32.dll_SetDlgItemTextA]
push 0x4070b8
push 0x3f0
push ebp
call ebx
push 0x4070b8
push 0x3f1
push ebp
call ebx
push 0x4070b8
push 0x3f2
push ebp
call ebx
push esi
lea ecx, [esp + 0x30]
push str.0x_08X
push ecx
call fcn.00401de6
add esp, 0xc
lea edx, [esp + 0x2c]
push edx
push 0x3e8
push ebp
call ebx
mov edi, dword [sym.imp.USER32.dll_GetWindowLongA]
push 0xfffffffffffffff4
push esi
call edi
push eax
lea eax, [esp + 0x30]
push 0x4070b4
push eax
call fcn.00401de6
add esp, 0xc
lea ecx, [esp + 0x2c]
push ecx
push 0x3e9
push ebp
call ebx
push 0xfffffffffffffff0
push esi
call edi
push eax
lea edx, [esp + 0x30]
push str.0x_08X
push edx
mov dword [esp + 0x20], eax
call fcn.00401de6
add esp, 0xc
lea eax, [esp + 0x2c]
push eax
push 0x3ec
push ebp
call ebx
lea ecx, [esp + 0x1c]
push ecx
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov edx, eax
sub edx, ecx
push edx
mov edx, dword [esp + 0x28]
mov edi, edx
sub edi, dword [esp + 0x20]
push edi
push eax
mov eax, dword [esp + 0x28]
push edx
push ecx
push eax
lea ecx, [esp + 0x44]
push str.__d___d____d___d___dx_d
push ecx
call fcn.00401de6
add esp, 0x20
lea edx, [esp + 0x2c]
push edx
push 0x3ed
push ebp
call ebx
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x2c]
push eax
push str.0x_08X
push ecx
call fcn.00401de6
add esp, 0xc
lea edx, [esp + 0x2c]
push edx
push 0x3ee
push ebp
call ebx
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x2c]
push eax
push str.0x_08X
push ecx
call fcn.00401de6
add esp, 0xc
lea edx, [esp + 0x2c]
push edx
push 0x3ef
push ebp
call ebx
lea eax, [esp + 0x2c]
push 0x80
push eax
push esi
call dword [sym.imp.USER32.dll_GetClassNameA]
lea ecx, [esp + 0x2c]
push ecx
push 0x3eb
push ebp
call ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp eax, dword [esp + 0x10]
je 0x401888
lea edx, [esp + 0x2c]
push str.EDIT
push edx
call fcn.00401c78
add esp, 8
test eax, eax
je 0x4017e6
lea eax, [esp + 0x2c]
push str.TEDIT
push eax
call fcn.00401c78
add esp, 8
test eax, eax
je 0x4017e6
lea ecx, [esp + 0x2c]
push str.ThunderTextBox
push ecx
call fcn.00401c78
add esp, 8
test eax, eax
je 0x4017e6
lea edx, [esp + 0x2c]
push str.ThunderRT6TextBox
push edx
call fcn.00401c78
add esp, 8
test eax, eax
je 0x4017e6
lea eax, [esp + 0x2c]
push str.Iris.Password
push eax
call fcn.00401c78
add esp, 8
test eax, eax
jne 0x401861
test byte [esp + 0x14], 0x20
je 0x401861
mov ecx, dword [0x407960]
mov byte [0x407974], 1
push ecx
call dword [sym.imp.USER32.dll_SetCursor]
mov edx, dword [esp + 0x10]
push edx
push 0
push 0x43a
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
je 0x401839
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
lea eax, [esp + 0x2c]
push eax
push esi
push edi
call fcn.00401240
add esp, 0xc
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x401888
mov edi, 0x40797c
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x2c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x401888
lea ecx, [esp + 0x2c]
push ecx
push 0x80
push 0xd
push esi
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [0x407958]
mov byte [0x407974], 0
push edx
call dword [sym.imp.USER32.dll_SetCursor]
lea eax, [esp + 0x2c]
push eax
push 0x3ea
push ebp
call ebx
pop edi
pop ebp
pop ebx
pop esi
add esp, 0x9c
ret