Function at 0x4042ed
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xa30
mov eax, dword [ebx + 0x88]
push esi
xor esi, esi
push edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], esi
test al, 8
je 0x4043e2
push pe_nt_image_headers32
lea eax, [esp + 0x2c]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetClassNameW]
lea eax, [esp + 0x28]
push eax
call fcn.00455251
mov edi, eax
pop ecx
mov dword [esp + 8], esi
cmp edi, esi
je 0x404359
lea esi, [edi - 1]
jmp 0x404355
movzx eax, word [esp + esi*2 + 0x28]
push eax
call fcn.0045728c
dec esi
pop ecx
test eax, eax
je 0x404359
inc dword [esp + 8]
test esi, esi
jns 0x404340
mov eax, dword [ebx + 0x134]
cmp eax, edi
jle 0x4046b1
mov ecx, dword [ebx + 0x138]
cmp ecx, dword [esp + 8]
jle 0x4046b1
sub eax, ecx
add eax, dword [esp + 8]
cmp edi, eax
jne 0x4046b1
mov eax, dword [ebx + 0x9c]
push edi
lea ecx, [esp + 0x2c]
push ecx
push eax
call fcn.004572f2
add esp, 0xc
test eax, eax
jne 0x4046b1
inc dword [ebx + 0x130]
push dword [ebx + 0x130]
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x238]
push str._s_u
push eax
call fcn.0045732b
push dword [ebx + 0x9c]
lea eax, [esp + 0x244]
push eax
call fcn.004571cc
add esp, 0x18
test eax, eax
jmp 0x4046a2
test eax, 0x400
je 0x4044ad
push dword [ebp + 8]
mov esi, 0x202
lea edi, [ebx + 8]
push esi
call fcn.0040b8c6
mov dword [esp + 0xc], eax
test eax, eax
je 0x4044a5
lea ecx, [esp + 0x10]
push ecx
push 0x1388
push 2
push eax
push 0x101
push dword [ebx + 4]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
test eax, eax
je 0x40446c
cmp dword [esp + 0x10], 0
jbe 0x40446c
push esi
mov esi, dword [esp + 0x10]
lea eax, [esp + 0x2c]
push eax
mov eax, edi
call fcn.0040b953
push dword [ebx + 0xac]
xor eax, eax
mov word [esp + 0x22c], ax
lea eax, [esp + 0x2c]
push eax
call fcn.004571cc
pop ecx
pop ecx
test eax, eax
jne 0x40446c
mov dword [esp + 8], 1
xor eax, eax
lea ecx, [ebx + 0xc]
mov edx, dword [esp + 0xc]
cmp dword [ecx], edx
je 0x404484
inc eax
add ecx, 8
cmp eax, 0x10
jl 0x404471
jmp 0x4044a5
push 0x8000
lea esi, [edi + eax*8]
push 0
push dword [esi + 4]
push dword [esi]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [esi + 4], 0
mov dword [esp + 0xc], 1
test byte [ebx + 0x88], 0x10
mov edi, dword [sym.imp.USER32.dll_GetClassNameW]
je 0x404513
push 0x400
lea eax, [esp + 0x234]
push eax
push dword [ebp + 8]
call edi
lea eax, [esp + 0x230]
push eax
lea esi, [esp + 0x1c]
call fcn.00401983
lea esi, [ebx + 0xec]
push esi
lea eax, [esp + 0x1c]
call fcn.0040728a
mov eax, dword [esi + 4]
lea ecx, [esp + 0x18]
mov dword [esi + 0x28], eax
mov byte [esi + 0x10], 1
call fcn.00401a04
call fcn.004074a9
test al, al
je 0x40450f
inc dword [esp + 8]
inc dword [esp + 0xc]
mov eax, dword [ebx + 0x88]
test al, 0x20
je 0x40453e
mov esi, dword [ebp + 8]
push esi
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
cmp dword [ebx + 0xcc], eax
jne 0x4046b1
mov dword [ebx + 0xd8], esi
jmp 0x4046ad
mov esi, pe_nt_image_headers32
test al, 0xc0
jne 0x404552
test eax, 0x300
je 0x4045f6
lea eax, [esp + 0x18]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x10]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebx + 0x88]
test al, 0x40
je 0x4045a3
mov ecx, dword [ebx + 0xdc]
cmp ecx, dword [esp + 0x10]
jne 0x40459f
inc dword [esp + 8]
inc dword [esp + 0xc]
test al, al
jns 0x4045bb
mov ecx, dword [ebx + 0xe0]
cmp ecx, dword [esp + 0x14]
jne 0x4045b7
inc dword [esp + 8]
inc dword [esp + 0xc]
test esi, eax
je 0x4045d7
mov ecx, dword [esp + 0x20]
sub ecx, dword [esp + 0x18]
cmp dword [ebx + 0xe4], ecx
jne 0x4045d3
inc dword [esp + 8]
inc dword [esp + 0xc]
test eax, 0x200
je 0x4045f6
mov ecx, dword [esp + 0x24]
sub ecx, dword [esp + 0x1c]
cmp dword [ebx + 0xe8], ecx
jne 0x4045f2
inc dword [esp + 8]
inc dword [esp + 0xc]
test al, 1
je 0x40462a
push esi
lea eax, [esp + 0x234]
push eax
push dword [ebp + 8]
call edi
mov eax, dword [ebx + 0x8c]
lea ecx, [esp + 0x230]
push ecx
push eax
call fcn.004571cc
pop ecx
pop ecx
test eax, eax
jne 0x404626
inc dword [esp + 8]
inc dword [esp + 0xc]
test byte [ebx + 0x88], 4
je 0x40466b
push 0x400
lea eax, [esp + 0x234]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov eax, dword [ebx + 0xbc]
lea ecx, [esp + 0x230]
push ecx
push eax
call fcn.004571cc
pop ecx
pop ecx
test eax, eax
jne 0x404667
inc dword [esp + 8]
inc dword [esp + 0xc]
test byte [ebx + 0x88], 2
je 0x40469a
mov eax, dword [esp + 8]
cmp eax, dword [esp + 0xc]
jne 0x404696
inc dword [ebx + 0x130]
mov eax, dword [ebx + 0x130]
cmp eax, dword [ebx + 0xd0]
jne 0x404696
inc dword [esp + 8]
inc dword [esp + 0xc]
mov eax, dword [esp + 0xc]
cmp dword [esp + 8], eax
jne 0x4046b1
mov eax, dword [ebp + 8]
mov dword [ebx + 0xd8], eax
xor eax, eax
jmp 0x4046b4
xor eax, eax
inc eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4