Function at 0x413a43
Capabilities:
Get graphical window text

Disassembly:
push ebp
push ebx
xor eax, eax
push eax
push eax
call fcn.0045e790
mov ebp, dword [0x473554]
cmp dword [ebp + 0x34], 0
je 0x413ab4
mov ebp, dword [0x47354c]
cmp dword [ebp], 0
je 0x413a85
push dword [0x473548]
lea eax, [0x42bfd0]
push eax
call fcn.0044f1d0
push eax
mov ebp, dword [0x473558]
pop eax
mov dword [ebp + 0x7c], eax
jmp 0x413aa2
push dword [0x473548]
lea eax, [0x43c966]
push eax
call fcn.0044f1d0
push eax
mov ebp, dword [0x473558]
pop eax
mov dword [ebp + 0x7c], eax
mov ebp, dword [0x473554]
mov dword [ebp + 0x34], 0
jmp 0x4144a7
push 1
push 0
call fcn.004587f9
cmp dword [0x89386c], 0
je 0x413aea
push 0
push 0x122
push 0x1f4
push 1
call fcn.00407903
jmp 0x413f80
mov dword [0x89386c], 1
push 0
call fcn.004584dd
push eax
push 0xca0000
mov ebp, dword [0x893880]
push dword [ebp + 0x1d8]
push 0x122
push 0x1f4
push 1
call fcn.0042b613
mov ebp, dword [0x473568]
push dword [ebp + 4]
push 0
push pe_nt_image_headers32
push 1
call fcn.004584dd
push eax
call sub.user32.dll_SendMessageW
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x1dc]
push 0x14
push 0x64
push 0x14
push 0x14
push 0x74
call fcn.00417ea2
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x1e0]
push 0x14
push 0x64
push 0x28
push 0x14
push 0x75
call fcn.00417ea2
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x1e4]
push 0x14
push 0x64
push 0x3c
push 0x14
push 0x76
call fcn.00417ea2
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x1e8]
push 0x14
push 0x64
push 0x5d
push 0x14
push 0x77
call fcn.00417ea2
push 0xf
push 0xd
push 1
call fcn.004584f9
push 0x3ed
push 0x1b
push 1
call fcn.004584f9
push 0
mov ebp, dword [0x473548]
push dword [ebp + 4]
push 0x14
push 0x12c
push 0x14
push 0x78
push 0x78
call fcn.00417ea2
push 0
mov ebp, dword [0x473548]
push dword [ebp + 8]
push 0x14
push 0x12c
push 0x28
push 0x78
push 0x79
call fcn.00417ea2
push 0
mov ebp, dword [0x473548]
push dword [ebp + 0xc]
push 0x14
push 0x12c
push 0x3c
push 0x78
push 0x7a
call fcn.00417ea2
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x24c]
push 0x14
push 0x64
push 0x7d
push 0x14
push 0x81
call fcn.00417ea2
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x250]
push 0x14
push 0x15e
push 0x7a
push 0x78
push pe_nt_image_headers32
call fcn.0041deef
push 0
push 0
push 0x10
push 0x10
push 0xb9
push 0x1dd
push 0x86
call fcn.0041251a
push 0
mov eax, 0x46d598
push eax
push 0x14
push 0x5a
push 0xb9
push 0x14
push 0x7b
call fcn.00417ea2
push 0x100
mov ebp, dword [0x473564]
push dword [ebp + 9]
push 0x14
push 0x12c
push 0xb9
push 0x78
push 0x7d
call fcn.00417ea2
push 0xc00000
push 1
push 0x7d
call fcn.00455543
lea eax, [0x40f599]
push eax
push 0xfffffffc
push 0x7d
call fcn.00451677
push eax
call sub.user32.dll_SetWindowLongW
push eax
mov eax, str.oldproc
push eax
push 0x7d
call fcn.00451677
push eax
call sub.user32.dll_SetPropW
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x1f8]
push 0x14
push 0x64
push 0x9b
push 0x14
push 0x7c
call fcn.00417ea2
push 0x100
mov eax, str.RunAfter:
push eax
push 0x14
push 0x64
push 0xd7
push 0x14
push 0x7e
call fcn.00417ea2
lea eax, [0x40f599]
push eax
push 0xfffffffc
push 0x7e
call fcn.00451677
push eax
call sub.user32.dll_SetWindowLongW
push eax
mov eax, str.oldproc
push eax
push 0x7e
call fcn.00451677
push eax
call sub.user32.dll_SetPropW
push 0
mov ebp, dword [0x473548]
push dword [ebp + 0x48]
push 0x14
push 0x15e
push 0xd7
push 0x78
push 0x7f
call fcn.0040f80d
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x1fc]
push 0x14
push 0xfa
push 0x98
push 0x78
push 0x6f
call fcn.0041deef
push 0
push 0x14
push 0x12c
push 0x59
push 0x78
push 0x71
call fcn.00411346
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x1ec]
push 0
push 0x71
call fcn.004515af
push 0
push dword [ebp + 0x1f0]
push 1
push 0x71
call fcn.004515af
push 1
push dword [ebp + 0x200]
push 0x17
push 0x4b
push 0xfa
push 0x14
push 0x72
call fcn.00410862
push 0
mov ebp, dword [0x893880]
push dword [ebp + 0x204]
push 0x17
push 0x4b
push 0xfa
push 0x64
push 0x73
call fcn.00410862
push pe_nt_image_headers32
push 0x20053
push 1
call fcn.004584f9
mov ebp, dword [0x473548]
mov ebx, dword [ebp]
and ebx, ebx
jne 0x413f9e
push 0
push 0x71
call fcn.00451614
jmp 0x413fad
push 1
push 0x71
call fcn.00451614
mov ebp, dword [0x473564]
push dword [ebp + 9]
mov edx, 0x4691fe
pop ecx
call fcn.0044e300
je 0x41400a
push edx
call fcn.0045e620
pop edx
push eax
mov ebp, dword [0x473548]
mov edx, dword [ebp + 4]
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e6f0
mov edx, 0x4691fe
push edx
call fcn.0045e6f0
call fcn.0044e2d2
add dword [esp], edx
call fcn.0041a2ad
call fcn.0044e2f0
and eax, eax
je 0x41400a
mov eax, 1
jmp 0x41400c
xor eax, eax
and eax, eax
jne 0x414024
mov ebp, dword [0x473564]
push dword [ebp + 9]
call fcn.0041a2ad
and eax, eax
jne 0x414024
jmp 0x41402b
mov eax, 1
jmp 0x41402d
xor eax, eax
and eax, eax
je 0x414054
mov ebp, dword [0x473568]
push dword [ebp + 0x24]
push 1
push 0x172
push 0x86
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
mov ebp, dword [0x473548]
push dword [ebp + 4]
push 0x78
call fcn.00451564
mov ebp, dword [0x473548]
push dword [ebp + 8]
push 0x7d
call fcn.00451564
mov ebp, dword [0x473548]
push dword [ebp + 0xc]
push 0x7a
call fcn.00451564
mov ebp, dword [0x473564]
push dword [ebp + 9]
push 0x7d
call fcn.00451564
mov ebp, dword [0x473548]
push dword [ebp + 0x48]
push 0x7f
call fcn.00451564
mov ebp, dword [0x473548]
push dword [ebp + 0x44]
push pe_nt_image_headers32
call fcn.00451614
mov ebp, dword [0x473548]
push dword [ebp + 0x40]
push 0x6f
call fcn.00451614
push 0x71
call fcn.00451677
push eax
call sub.user32.dll_SetFocus
call fcn.0045872d
push eax
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x4141bb
call fcn.0045ccea
push eax
mov ebx, 0xf
cmp ebx, dword [esp]
jne 0x41412b
push 0
push 0x72
push 0
push 0x332c
call fcn.0045cd08
jmp 0x4141b5
mov ebx, 0x3ed
cmp ebx, dword [esp]
jne 0x414150
push 0
push 0x73
push 0
push 0x332c
call fcn.0045cd08
jmp 0x4141b5
mov ebx, pe_nt_image_headers32
cmp ebx, dword [esp]
jne 0x4141b5
call fcn.0040e68b
push edx
call fcn.0045e620
pop edx
push eax
push 0
mov eax, str.WinNTSetup.ini
push eax
push 0
mov eax, str.All_files__._.
push eax
mov ebp, dword [0x47356c]
push dword [ebp]
mov eax, 0x46105e
push eax
call fcn.0044d4c8
lea eax, [esp + 0xc]
push eax
call fcn.0045e660
push dword [esp + 8]
mov edx, 0x46105e
pop ecx
call fcn.0044e300
jne 0x4141b5
push dword [esp + 8]
call fcn.0041d04e
pop eax
jmp 0x41449f
mov ebx, 0x333c
cmp ebx, dword [esp]
jne 0x4141f0
push 0
push 0
call fcn.004587f9
push 1
push 1
call fcn.004587e7
add esp, 4
jmp 0x4144a5
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x41449f
call fcn.0045ccf9
mov dword [esp + 8], eax
push dword [esp + 8]
mov ebx, 0x73
cmp ebx, dword [esp]
jne 0x414245
call fcn.0040e68b
push 0
push 0
call fcn.004587f9
push 1
push 1
call fcn.004587e7
add esp, 8
jmp 0x4144a5
mov ebx, 0x7d
cmp ebx, dword [esp]
jne 0x41431a
push edx
call fcn.0045e620
pop edx
push eax
push 0x46105e
push 0
mov eax, 0x46d598
push eax
push 0
mov ebp, dword [0x473558]
push dword [ebp + 0x2c]
mov eax, 0x46d598
push eax
call fcn.0044d930
lea eax, [esp + 0xc]
push eax
call fcn.0045e660
mov edx, dword [esp + 8]
xor ecx, ecx
call fcn.0044e300
jne 0x414315
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push dword [esp + 0x10]
call fcn.0045b156
mov ebp, dword [0x473558]
lea eax, [ebp + 0x2c]
push eax
call fcn.0045e660
push dword [esp + 8]
push 0x7d
call fcn.00451564
mov edx, dword [esp + 8]
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e6f0
mov ebp, dword [0x473564]
lea eax, [ebp + 9]
push eax
call fcn.0045e660
mov ebp, dword [0x473568]
push dword [ebp + 0x24]
push 1
push 0x172
push 0x86
call fcn.00451677
push eax
call sub.user32.dll_SendMessageW
jmp 0x41449e
mov ebx, 0x7e
cmp ebx, dword [esp]
jne 0x414415
push edx
call fcn.0045e620
pop edx
push eax
push 0
push 0x46105e
push 0
mov eax, str.All_files__._.
push eax
mov ebp, dword [0x473558]
push dword [ebp + 0x34]
mov eax, 0x46105e
push eax
call fcn.0044d0d9
lea eax, [esp + 0xc]
push eax
call fcn.0045e660
mov edx, dword [esp + 8]
xor ecx, ecx
call fcn.0044e300
jne 0x414410
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e620
pop edx
push eax
push dword [esp + 0x10]
call fcn.0045b156
mov ebp, dword [0x473558]
lea eax, [ebp + 0x34]
push eax
call fcn.0045e660
mov eax, 0x461704
push eax
push dword [esp + 0xc]
call fcn.0044f710
and eax, eax
je 0x4143e1
push edx
call fcn.0045e620
pop edx
push eax
mov edx, 0x461740
push edx
call fcn.0045e6f0
mov edx, dword [esp + 0xc]
push edx
call fcn.0045e6f0
mov edx, 0x461740
push edx
call fcn.0045e6f0
lea eax, [esp + 0xc]
push eax
call fcn.0045e660
push dword [esp + 8]
push 0x7f
call fcn.00451564
mov edx, dword [esp + 8]
push edx
call fcn.0045e620
pop edx
push eax
push edx
call fcn.0045e6f0
mov ebp, dword [0x473548]
lea eax, [ebp + 0x48]
push eax
call fcn.0045e660
jmp 0x41449e
mov ebx, 0x72
cmp ebx, dword [esp]
jne 0x41449e
call fcn.0040e68b
push 0
push 0
call fcn.004587f9
push 0xf
push 1
call fcn.00458bc6
push 1
push 1
call fcn.004587e7
mov ebp, dword [0x47354c]
cmp dword [ebp], 0
je 0x41447c
push dword [0x473548]
lea eax, [0x42bfd0]
push eax
call fcn.0044f1d0
push eax
mov ebp, dword [0x473558]
pop eax
mov dword [ebp + 0x7c], eax
jmp 0x414499
push dword [0x473548]
lea eax, [0x43c966]
push eax
call fcn.0044f1d0
push eax
mov ebp, dword [0x473558]
pop eax
mov dword [ebp + 0x7c], eax
add esp, 8
jmp 0x4144a5
pop eax
pop eax
jmp 0x4140e9
xor eax, eax
push dword [esp]
call fcn.0045e7f0
add esp, 8
pop ebx
pop ebp
ret