Function at 0x426350
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x44c
mov eax, dword [0x4c0390]
xor eax, esp
mov dword [esp + 0x448], eax
mov eax, dword [esp + 0x450]
push ebx
push edi
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x45c]
push eax
mov edi, ecx
mov edx, dword [edi]
mov ecx, dword [esp + 0x464]
push 4
push 0x110a
push edx
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ebx, eax
xor eax, eax
mov dword [esp + 8], ebx
mov dword [esp + 0x1c], eax
test ebx, ebx
je 0x426560
push ebp
push esi
jmp 0x4263b6
mov ebx, dword [esp + 0x10]
mov edx, dword [edi]
lea ecx, [esp + 0x30]
push ecx
push 0
push 0x110c
lea eax, [esp + 0x64]
push edx
mov byte [esp + 0x68], 0
mov dword [esp + 0x40], 0xd
mov dword [esp + 0x44], ebx
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0x400
call dword [sym.imp.USER32.dll_SendMessageA]
mov esi, dword [esp + 0x54]
mov eax, dword [esp + 0x14]
mov ebp, dword [eax]
test esi, esi
je 0x426412
mov edx, dword [esi + 8]
lea ecx, [esp + 0x58]
push ecx
push edx
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListA]
test eax, eax
setne al
test al, al
je 0x426489
mov eax, dword [esp + 0x1c]
neg esi
sbb esi, esi
or ecx, 0xffffffff
and esi, ebp
xor edi, edi
or ebx, ecx
add eax, ebp
lea esi, [esp + esi + 0x58]
mov dword [esp + 0x2c], eax
lea ecx, [ecx]
mov al, byte [esi + edi]
mov edx, dword [esp + 0x2c]
mov dl, byte [edx + edi]
mov byte [esp + 0x28], al
mov byte [esp + 0x20], dl
test al, al
jne 0x426458
test dl, dl
je 0x42647f
cmp ecx, 0x5c
jne 0x426453
cmp ebx, ecx
jmp 0x426456
cmp dl, 0x5c
je 0x42647f
mov eax, dword [esp + 0x20]
push eax
call fcn.00464c20
mov ecx, dword [esp + 0x28]
push ecx
mov bl, al
call fcn.00464c20
cmp al, bl
jne 0x426481
movsx ecx, byte [esp + 0x28]
movsx ebx, byte [esp + 0x20]
inc edi
jmp 0x426430
add ebp, edi
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
cmp ebp, dword [eax]
jle 0x426499
mov dword [eax], ebp
mov dword [esp + 0x24], ebx
jmp 0x4264b1
test byte [esp + 0x38], 0x20
je 0x4264b1
mov edx, dword [edi]
push ebx
push 1
push 0x1102
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [edi]
push ebx
push 1
push 0x110a
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [esp + 0x10], eax
test eax, eax
jne 0x4263b2
mov esi, dword [esp + 0x24]
test esi, esi
je 0x42655c
mov ecx, dword [edi]
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
push esi
push 2
push 0x1102
push ecx
call ebp
mov eax, dword [edi]
xor edx, edx
cmp byte [esp + 0x46c], dl
push esi
setne dl
lea edx, [edx*4 + 5]
push edx
push 0x110b
push eax
call ebp
mov ecx, dword [edi]
push esi
push 0
push 0x1114
push ecx
call ebp
mov ebp, dword [esp + 0x14]
mov edx, dword [ebp]
mov ebx, dword [esp + 0x1c]
movsx eax, byte [edx + ebx]
push eax
call fcn.0044d340
test al, al
je 0x426546
inc dword [ebp]
mov ecx, dword [ebp]
movsx edx, byte [ecx + ebx]
push edx
call fcn.0044d340
test al, al
jne 0x426532
mov eax, dword [esp + 0x46c]
push eax
push ebp
push esi
push ebx
mov ecx, edi
call fcn.00426350
test eax, eax
jne 0x42655e
mov eax, esi
pop esi
pop ebp
mov ecx, dword [esp + 0x450]
pop edi
pop ebx
xor ecx, esp
call fcn.0049e0c6
add esp, 0x44c
ret 0x10