Function at 0x414f20
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x21c
mov eax, dword [0x46e3d0]
xor eax, esp
mov dword [esp + 0x218], eax
push ebx
push ebp
mov ebp, dword [esp + 0x228]
push edi
lea eax, [esp + 0x10]
push eax
push ebp
mov ebx, ecx
call dword [sym.imp.USER32.dll_GetClientRect]
push ebp
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
mov edi, eax
cmp edi, 8
je 0x415304
cmp edi, 0x3f5
je 0x4152dd
cmp ebx, 4
ja case.0x414f73.1
jmp dword [ebx*4 + 0x415370]
call fcn.00406b20
cmp edi, 0x3f7
jne 0x414fb6
mov ebx, dword [eax + 0x80]
call fcn.00406b20
push 0x14
push 4
push 0x38
push 0xc2
push 2
push 0
push ebx
push esi
mov ecx, 6
push eax
lea edx, [ecx + 0x12]
call fcn.00438e40
jmp 0x4151a8
mov ebx, dword [eax + 0x84]
call fcn.00406b20
push 2
push 2
jmp 0x4151a0
cmp edi, 6
je 0x415037
cmp edi, 7
je 0x415037
cmp edi, 0x3fa
je 0x415037
cmp edi, 0x3fb
je 0x415037
cmp edi, 3
je 0x415037
cmp edi, 4
je 0x415037
cmp edi, 5
je 0x415037
cmp edi, 0x3f6
je 0x415037
cmp edi, 2
je 0x415037
call fcn.00406b20
cmp edi, 0x411
jne 0x415018
mov ebx, dword [eax + 0x9c]
jmp 0x415197
cmp edi, 0x3f7
mov ebx, dword [eax + 0x78]
jne 0x415197
call fcn.00406b20
push 0x18
push 4
push 0x38
jmp 0x415171
call fcn.00406b20
mov ebx, dword [eax + 0x90]
jmp 0x415197
cmp edi, 6
je 0x41509d
cmp edi, 7
je 0x41509d
cmp edi, 0x3fa
je 0x41509d
cmp edi, 0x3fb
je 0x41509d
cmp edi, 3
je 0x41509d
cmp edi, 4
je 0x41509d
cmp edi, 5
je 0x41509d
cmp edi, 0x3f6
je 0x41509d
cmp edi, 2
je 0x41509d
call fcn.00406b20
cmp edi, 0x411
jne 0x415095
mov ebx, dword [eax + 0xa0]
jmp 0x415197
mov ebx, dword [eax + 0x7c]
jmp 0x41515e
call fcn.00406b20
mov ebx, dword [eax + 0x94]
jmp 0x415197
cmp edi, 6
je 0x4150fd
cmp edi, 7
je 0x4150fd
cmp edi, 0x3fa
je 0x4150fd
cmp edi, 0x3fb
je 0x4150fd
cmp edi, 3
je 0x4150fd
cmp edi, 4
je 0x4150fd
cmp edi, 5
je 0x4150fd
cmp edi, 0x3f6
je 0x4150fd
cmp edi, 2
je 0x4150fd
call fcn.00406b20
cmp edi, 0x3f7
jne 0x4150f5
mov ebx, dword [eax + 0x7c]
jmp 0x415166
mov ebx, dword [eax + 0x74]
jmp 0x415197
call fcn.00406b20
mov ebx, dword [eax + 0x8c]
jmp 0x415197
cmp edi, 6
je 0x41518c
cmp edi, 7
je 0x41518c
cmp edi, 0x3fa
je 0x41518c
cmp edi, 0x3fb
je 0x41518c
cmp edi, 3
je 0x41518c
cmp edi, 4
je 0x41518c
cmp edi, 5
je 0x41518c
cmp edi, 0x3f6
je 0x41518c
cmp edi, 2
je 0x41518c
call fcn.00406b20
cmp edi, 0x411
jne 0x415158
mov ebx, dword [eax + 0xa4]
jmp 0x415197
mov ebx, dword [eax + 0x80]
cmp edi, 0x3f7
jne 0x415197
call fcn.00406b20
push 0x18
push 4
push 0x3a
push 0xc2
push 0
push 0
push ebx
push esi
mov ecx, 6
push eax
lea edx, [ecx + 0x16]
call fcn.00438e40
jmp 0x4151a8
call fcn.00406b20
mov ebx, dword [eax + 0x98]
call fcn.00406b20
push 0
push 0
push esi
mov ecx, ebx
call fcn.00439690
push 0x1fe
lea ecx, [esp + 0x26]
push 0
push ecx
mov word [esp + 0x2c], 0
call fcn.00443e10
add esp, 0xc
push pe_nt_image_headers32
lea edx, [esp + 0x24]
push edx
push ebp
call dword [sym.imp.USER32.dll_GetWindowTextW]
push 1
push esi
call dword [sym.imp.GDI32.dll_SetBkMode]
push 0xfffffffffffffff0
push ebp
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, 0x8000000
je 0x41523b
push 0x565656
push esi
call dword [sym.imp.GDI32.dll_SetTextColor]
lea eax, [esp + 0x20]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x415200
push 0x25
sub eax, edx
lea ecx, [esp + 0x14]
push ecx
sar eax, 1
push eax
lea edx, [esp + 0x2c]
push edx
push esi
call dword [sym.imp.USER32.dll_DrawTextW]
pop edi
pop ebp
pop ebx
mov ecx, dword [esp + 0x218]
xor ecx, esp
call fcn.0043ef12
add esp, 0x21c
ret
cmp edi, 0x3f9
mov ebx, dword [sym.imp.USER32.dll_DrawTextW]
je 0x415267
cmp edi, 0x3f7
je 0x415267
cmp edi, 0x3f8
je 0x415267
push 0xaf6c15
push esi
call dword [sym.imp.GDI32.dll_SetTextColor]
jmp 0x41529f
push 0xaf6c15
push esi
call dword [sym.imp.GDI32.dll_SetTextColor]
lea eax, [esp + 0x20]
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x415280
push 0x25
sub eax, edx
lea ecx, [esp + 0x14]
push ecx
sar eax, 1
push eax
lea edx, [esp + 0x2c]
push edx
push esi
call ebx
lea eax, [esp + 0x20]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4152a6
push 0x25
sub eax, edx
lea ecx, [esp + 0x14]
push ecx
sar eax, 1
push eax
lea edx, [esp + 0x2c]
push edx
push esi
call ebx
pop edi
pop ebp
pop ebx
mov ecx, dword [esp + 0x218]
xor ecx, esp
call fcn.0043ef12
add esp, 0x21c
ret
call fcn.00406b20
sub ebx, 2
je 0x4152fc
sub ebx, 1
je 0x4152f4
mov edi, dword [eax + 0xcc]
jmp 0x415347
mov edi, dword [eax + 0xc4]
jmp 0x415347
mov edi, dword [eax + 0xc8]
jmp 0x415347
mov eax, ebx
sub eax, 2
je 0x41533c
sub eax, 1
je 0x41532f
sub eax, 1
je 0x415322
call fcn.00406b20
mov edi, dword [eax + 0xbc]
jmp 0x415347
call fcn.00406b20
mov edi, dword [eax + 0xc0]
jmp 0x415347
call fcn.00406b20
mov edi, dword [eax + 0xb4]
jmp 0x415347
call fcn.00406b20
mov edi, dword [eax + 0xb8]
call fcn.00406b20
push 0
push 0
push esi
mov ecx, edi
call fcn.00439690
mov ecx, dword [esp + 0x224]
pop edi
pop ebp
pop ebx
xor ecx, esp
call fcn.0043ef12
add esp, 0x21c
ret