Function at 0x403d9a
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x21c
mov eax, dword [0x4055f0]
push ebx
push esi
push edi
xor esi, esi
push eax
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x1c], esi
call dword [sym.imp.user32.dll_SetCursor]
mov eax, dword [section..data]
mov dword [0x40535c], esi
push eax
call dword [sym.imp.user32.dll_GetDC]
push eax
mov edi, eax
call dword [sym.imp.gdi32.dll_GetTextCharset]
push edi
mov dword [ebp - 0x18], eax
mov eax, dword [section..data]
push eax
call dword [sym.imp.user32.dll_ReleaseDC]
call fcn.00404ace
mov ebx, eax
test ebx, ebx
jne 0x403dfa
mov eax, 0xfffffffb
jmp 0x4044ea
cmp ebx, 0xffffffff
je 0x4044e5
push 8
push ebx
call dword [sym.imp.gdi32.dll_GetDeviceCaps]
push 0xa
mov dword [ebp - 4], eax
push ebx
call dword [sym.imp.gdi32.dll_GetDeviceCaps]
push 8
mov dword [0x40533c], eax
push ebx
call dword [sym.imp.gdi32.dll_SetMapMode]
push 0
mov eax, dword [0x40533c]
push eax
push dword [ebp - 4]
push ebx
call dword [sym.imp.gdi32.dll_SetViewportExtEx]
push 0
mov eax, dword [0x4057c4]
push dword [0x4057c8]
push eax
push ebx
mov esi, 0x4057dc
call dword [sym.imp.gdi32.dll_SetWindowExtEx]
mov eax, 0x405370
push 2
mov edi, eax
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ebx
call dword [sym.imp.gdi32.dll_LPtoDP]
push 1
push ebx
call dword [sym.imp.gdi32.dll_SetMapMode]
push 1
push ebx
call dword [sym.imp.gdi32.dll_SetBkMode]
push 0x5a
push ebx
call dword [sym.imp.gdi32.dll_GetDeviceCaps]
mov dword [ebp - 8], eax
lea eax, [ebp - 0x88]
push eax
push ebx
call dword [sym.imp.gdi32.dll_GetTextMetricsA]
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x14], ecx
mov dword [0x405340], eax
mov eax, dword [ebp - 0x78]
push 0x2d0
push dword [ebp - 8]
add eax, ecx
mov dword [0x405380], eax
mov eax, dword [ebp - 0x74]
shl eax, 3
mov dword [0x4052a8], eax
push dword [0x40500c]
mov esi, 0x405810
call dword [sym.imp.kernel32.dll_MulDiv]
lea edi, [ebp - 0xc4]
mov ecx, 0xf
neg eax
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xc0], 0
mov byte [ebp - 0xaa], 0
cmp dword [0x40502c], 0
mov dword [ebp - 0xc4], eax
je 0x403f2c
push 0x20
lea eax, [ebp - 0xe4]
push eax
push 0x39
push dword [0x405540]
call dword [sym.imp.user32.dll_LoadStringA]
lea ecx, [ebp - 0xe4]
lea edx, [ebp - 0xa8]
push ecx
push edx
call dword [sym.imp.kernel32.dll_lstrcpy]
lea eax, [ebp - 0xc4]
push eax
call dword [sym.imp.gdi32.dll_CreateFontIndirectA]
mov dword [ebp - 0xc], eax
test eax, eax
je 0x403f59
push eax
push ebx
call dword [sym.imp.gdi32.dll_SelectObject]
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x1c], eax
push ecx
push ebx
call dword [sym.imp.gdi32.dll_GetTextMetricsA]
cmp dword [ebp - 0xc], 0
jne 0x403f93
mov byte [ebp - 0xa8], 0
lea eax, [ebp - 0xc4]
push eax
call dword [sym.imp.gdi32.dll_CreateFontIndirectA]
mov dword [ebp - 0xc], eax
test eax, eax
je 0x403f85
push eax
push ebx
call dword [sym.imp.gdi32.dll_SelectObject]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x88]
push eax
push ebx
call dword [sym.imp.gdi32.dll_GetTextMetricsA]
push 0x20
lea eax, [ebp - 0xe4]
push eax
push 0x39
push dword [0x405540]
call dword [sym.imp.user32.dll_LoadStringA]
lea ecx, [ebp - 0xe4]
xor esi, esi
push ecx
push 0x31
push esi
push 0x20
push esi
push dword [ebp - 0x18]
push esi
push esi
push esi
push dword [ebp - 0x6c]
push esi
push esi
push esi
push dword [ebp - 0x14]
call dword [sym.imp.gdi32.dll_CreateFontA]
mov ecx, dword [ebp - 0x78]
mov dword [0x4052a4], eax
add ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x74]
mov dword [0x405354], ecx
mov dword [0x405338], eax
shl eax, 3
mov dword [0x40534c], eax
mov eax, dword [ebp - 8]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [0x405360], eax
mov eax, dword [0x40533c]
sub eax, dword [0x405374]
sub eax, dword [0x40537c]
cdq
idiv ecx
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
push ecx
push 1
push 0x401098
push ebx
call dword [sym.imp.gdi32.dll_GetTextExtentPointA]
mov eax, dword [0x405370]
cdq
idiv dword [ebp - 0x3c]
mov ecx, eax
mov eax, dword [0x405378]
cdq
idiv dword [ebp - 0x3c]
mov edi, eax
mov eax, dword [ebp - 4]
cdq
idiv dword [0x405338]
sub eax, edi
sub eax, ecx
mov dword [0x405364], eax
mov eax, dword [ebp - 4]
cdq
idiv dword [0x405340]
sub eax, edi
sub eax, ecx
cmp dword [ebp - 0x2c], esi
mov dword [0x405334], eax
jle 0x4044de
cmp dword [0x405364], esi
jle 0x4044de
push 0x403ba6
push ebx
call dword [sym.imp.gdi32.dll_SetAbortProc]
push 0x136
lea eax, [ebp - 0x21c]
push eax
push dword [section..data]
call dword [sym.imp.user32.dll_GetWindowTextA]
lea ecx, [ebp - 0x21c]
mov dword [ebp - 0x48], esi
lea edx, [ebp - 0x50]
mov dword [ebp - 0x4c], ecx
push edx
mov dword [ebp - 0x44], esi
push ebx
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x50], 0x14
call dword [sym.imp.gdi32.dll_StartDocA]
mov dword [ebp - 4], eax
cmp eax, esi
jge 0x4040e7
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x3f
jne 0x40447d
mov dword [ebp - 4], 0xfffffffd
jmp 0x40447d
xor esi, esi
mov eax, dword [section..data]
push esi
push eax
call dword [sym.imp.user32.dll_EnableWindow]
push esi
mov eax, dword [section..data]
push 0x403c11
push eax
push 0xc
push dword [0x405540]
call dword [sym.imp.user32.dll_CreateDialogParamA]
mov dword [0x405348], eax
cmp eax, esi
je 0x404476
xor esi, esi
mov eax, dword [0x405004]
push esi
push esi
push 0xe
push eax
call dword [sym.imp.user32.dll_SendMessageA]
lea edi, [eax + 1]
push edi
push 0x42
call dword [sym.imp.kernel32.dll_LocalAlloc]
mov dword [ebp - 8], eax
cmp eax, esi
je 0x404476
push dword [ebp - 8]
call dword [sym.imp.kernel32.dll_LocalLock]
test eax, eax
jne 0x404161
push dword [ebp - 8]
call dword [sym.imp.kernel32.dll_LocalFree]
jmp 0x404476
push eax
push edi
push 0xd
push dword [0x405004]
call dword [sym.imp.user32.dll_SendMessageA]
push dword [ebp - 8]
call dword [sym.imp.kernel32.dll_LocalUnlock]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x14], 0
mov dword [0x405350], 1
mov eax, dword [0x405354]
mov dword [ebp - 0x18], eax
mov eax, dword [0x405334]
add eax, 2
push eax
push 0x42
call dword [sym.imp.kernel32.dll_GlobalAlloc]
push 0x1000
mov dword [0x4052a0], eax
push 0x42
call dword [sym.imp.kernel32.dll_GlobalAlloc]
cmp dword [0x4052a0], 0
mov dword [ebp - 0x10], eax
je 0x404476
test eax, eax
je 0x404476
push eax
call dword [sym.imp.kernel32.dll_GlobalLock]
push dword [ebp - 8]
mov dword [ebp - 0x20], eax
call dword [sym.imp.kernel32.dll_LocalLock]
push 0
mov dword [ebp - 0x30], eax
push 0
mov eax, dword [0x405004]
push 0xba
push eax
call dword [sym.imp.user32.dll_SendMessageA]
cmp dword [0x40535c], 0
mov dword [ebp - 0x34], eax
jne 0x4043d1
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x34]
jge 0x4043d1
push 0
inc dword [ebp - 0x28]
push eax
push 0xbb
push dword [0x405004]
call dword [sym.imp.user32.dll_SendMessageA]
mov esi, eax
push 0
push esi
mov eax, dword [0x405004]
push 0xc1
push eax
call dword [sym.imp.user32.dll_SendMessageA]
push dword [0x405364]
push dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x30]
xor edi, edi
add eax, esi
push eax
call fcn.004044f1
cmp eax, dword [0x405364]
mov esi, eax
jle 0x404271
mov dword [ebp - 0x24], 1
cmp dword [ebp - 0x14], 0
jne 0x40429b
push ebx
call dword [sym.imp.gdi32.dll_StartPage]
mov dword [ebp - 4], eax
test eax, eax
jl 0x40447d
push dword [ebp - 0xc]
push ebx
call dword [sym.imp.gdi32.dll_SelectObject]
push 0
push ebx
call fcn.00403c97
cmp esi, dword [0x405364]
jle 0x404336
mov eax, dword [ebp - 0x20]
add eax, edi
mov dword [ebp - 4], eax
mov eax, dword [0x405364]
add eax, dword [ebp - 0x20]
add eax, edi
push eax
push dword [ebp - 4]
call fcn.00403d53
mov ecx, dword [0x405354]
test eax, eax
push dword [0x405370]
push 0x40534c
mov eax, dword [0x405364]
push 1
je 0x40430b
dec eax
push eax
mov eax, dword [ebp - 0x18]
push dword [ebp - 4]
sub eax, ecx
add eax, dword [0x405374]
push eax
push dword [0x405370]
push ebx
call dword [sym.imp.user32.dll_TabbedTextOutA]
mov ecx, dword [0x405364]
sub esi, ecx
lea edi, [ecx + edi - 1]
inc esi
jmp 0x40436e
push eax
mov eax, dword [ebp - 0x18]
push dword [ebp - 4]
sub eax, ecx
add eax, dword [0x405374]
push eax
push dword [0x405370]
push ebx
call dword [sym.imp.user32.dll_TabbedTextOutA]
add edi, dword [0x405364]
sub esi, dword [0x405364]
jmp 0x40436e
mov eax, dword [0x405370]
push eax
push 0x40534c
push 1
mov eax, dword [ebp - 0x20]
push esi
add eax, edi
push eax
mov eax, dword [ebp - 0x18]
sub eax, dword [0x405354]
add eax, dword [0x405374]
push eax
push dword [0x405370]
push ebx
call dword [sym.imp.user32.dll_TabbedTextOutA]
mov dword [ebp - 0x24], 0
mov eax, dword [0x405354]
inc dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
add dword [ebp - 0x18], eax
cmp ecx, dword [ebp - 0x2c]
jl 0x4043ba
push 1
push ebx
call fcn.00403c97
push ebx
call dword [sym.imp.gdi32.dll_EndPage]
mov dword [ebp - 4], eax
test eax, eax
jl 0x40447d
mov eax, dword [0x405354]
inc dword [0x405350]
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x24], 0
mov dword [ebp - 0x18], eax
jne 0x404271
cmp dword [ebp - 0x24], 0
jne 0x40429b
cmp dword [0x40535c], 0
je 0x404210
push dword [ebp - 8]
call dword [sym.imp.kernel32.dll_LocalUnlock]
push dword [ebp - 8]
call dword [sym.imp.kernel32.dll_LocalFree]
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GlobalUnlock]
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GlobalFree]
mov dword [ebp - 0x10], 0
cmp dword [ebp - 0x14], 0
je 0x40440a
push 1
push ebx
call fcn.00403c97
xor esi, esi
cmp dword [0x40535c], esi
jne 0x404427
cmp dword [ebp - 0x14], esi
jle 0x404427
push ebx
call dword [sym.imp.gdi32.dll_EndPage]
mov dword [ebp - 4], eax
cmp eax, esi
jl 0x40447d
cmp dword [0x40535c], 0
jne 0x40443c
push ebx
call dword [sym.imp.gdi32.dll_EndDoc]
call fcn.004045c6
push ebx
call dword [sym.imp.gdi32.dll_DeleteDC]
push dword [ebp - 0xc]
call dword [sym.imp.gdi32.dll_DeleteObject]
mov eax, dword [0x4052a4]
xor esi, esi
push eax
call dword [sym.imp.gdi32.dll_DeleteObject]
mov eax, dword [0x4052a0]
mov dword [0x4052a4], esi
push eax
call dword [sym.imp.kernel32.dll_GlobalFree]
xor eax, eax
mov dword [0x4052a0], esi
jmp 0x4044ea
mov dword [ebp - 4], 0xfffffffb
cmp dword [ebp - 0x1c], 0
je 0x40448d
push dword [ebp - 0x1c]
push ebx
call dword [sym.imp.gdi32.dll_SelectObject]
push ebx
call dword [sym.imp.gdi32.dll_AbortDoc]
push ebx
call dword [sym.imp.gdi32.dll_DeleteDC]
push dword [ebp - 0xc]
call dword [sym.imp.gdi32.dll_DeleteObject]
cmp dword [0x40535c], 0
jne 0x4044b2
call fcn.004045c6
mov eax, dword [0x4052a0]
xor esi, esi
test eax, eax
je 0x4044ca
push eax
call dword [sym.imp.kernel32.dll_GlobalFree]
mov dword [0x4052a0], esi
cmp dword [ebp - 0x10], 0
je 0x4044d9
push dword [ebp - 0x10]
call dword [sym.imp.kernel32.dll_GlobalFree]
mov eax, dword [ebp - 4]
jmp 0x4044ea
push ebx
call dword [sym.imp.gdi32.dll_DeleteDC]
mov eax, 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret