Function at 0x411eec
Capabilities:
Get graphical window text

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xfffffdf8
lea esi, [esp + 0x60]
mov ebp, 0x4177ac
lea eax, [esp + 0x1c]
xor ecx, ecx
mov edx, 0x42
call fcn.00402d8c
mov dword [esp + 0x1c], 0x42
mov eax, dword [0x4188d4]
mov dword [esp + 0x20], eax
mov eax, dword [0x4177c0]
mov dword [esp + 0x24], eax
mov eax, dword [0x4177c4]
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], pe_nt_image_headers32
lea eax, [esi + 0x28]
push eax
push 0
push 0x434
mov eax, dword [ebp]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [esi + 0x2c]
sub eax, dword [esi + 0x28]
cmp eax, 2
jge 0x411f5e
or dword [esp + 0x30], 4
mov word [esp + 0x34], 0xffff
mov word [esp + 0x36], 0xffff
mov word [esp + 0x3a], 0xffff
mov word [esp + 0x38], 1
mov word [esp + 0x3c], 1
lea eax, [esp + 0x1c]
push eax
call sub.comdlg32.dll_PrintDlgA
test eax, eax
je 0x412496
mov eax, dword [esp + 0x24]
mov dword [0x4177c0], eax
mov eax, dword [esp + 0x28]
mov dword [0x4177c4], eax
lea eax, [esp + 0x90]
xor ecx, ecx
mov edx, 0x14
call fcn.00402d8c
mov dword [esp + 0x90], 0x14
push 0x105
lea eax, [esp + 0xc8]
push eax
mov eax, dword [0x4188d4]
push eax
call sub.user32.dll_GetWindowTextA
lea eax, [esp + 0xc4]
mov dword [esp + 0x94], eax
test byte [esp + 0x30], 0x20
je 0x411ffc
mov eax, 0x4124a4
mov dword [esp + 0x98], eax
lea eax, [esp + 0x90]
push eax
mov eax, dword [esp + 0x30]
push eax
call sub.gdi32.dll_StartDocA
test eax, eax
jg 0x412021
mov eax, dword [esp + 0x2c]
push eax
call sub.gdi32.dll_DeleteDC
jmp 0x412496
push 0
mov eax, dword [0x4188d4]
push eax
call sub.user32.dll_EnableWindow
test byte [esp + 0x30], 0x10
je 0x412043
movzx edi, word [esp + 0x3c]
mov word [esp + 0x3c], 1
jmp 0x412048
mov edi, 1
test byte [esp + 0x30], 2
jne 0x412056
mov word [esp + 0x36], 0xffff
mov eax, esi
xor ecx, ecx
mov edx, 0x30
call fcn.00402d8c
mov eax, dword [esp + 0x2c]
mov dword [esi], eax
mov dword [esi + 4], eax
push 0
push 0
push 0xe
mov eax, dword [ebp]
push eax
call sub.user32.dll_SendMessageA
mov dword [esp + 4], eax
xor eax, eax
mov dword [esi + 0x18], eax
xor eax, eax
mov dword [esi + 0x1c], eax
push 0x58
mov eax, dword [esi]
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
push 0x5a0
push 0x6e
mov eax, dword [esi]
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
call sub.kernel32.dll_MulDiv
mov dword [esi + 0x20], eax
push 0x5a
mov eax, dword [esi]
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
push 0x5a0
push 0x6f
mov eax, dword [esi]
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
call sub.kernel32.dll_MulDiv
mov dword [esi + 0x24], eax
lea eax, [esi + 0x18]
push eax
lea eax, [esi + 8]
push eax
call sub.user32.dll_CopyRect
push 0x9c4
push 0x5a0
mov eax, dword [0x418938]
add eax, dword [0x418940]
push eax
call sub.kernel32.dll_MulDiv
add eax, 0x5a0
cmp eax, dword [esi + 0x20]
jge 0x412132
push 0x9c4
push 0x5a0
mov eax, dword [0x418938]
push eax
call sub.kernel32.dll_MulDiv
mov dword [esi + 8], eax
push 0x9c4
push 0x5a0
mov eax, dword [0x418940]
push eax
call sub.kernel32.dll_MulDiv
sub dword [esi + 0x10], eax
xor ebx, ebx
push 0x9c4
push 0x5a0
mov eax, dword [0x41893c]
add eax, dword [0x418944]
push eax
call sub.kernel32.dll_MulDiv
add eax, 0x5a0
cmp eax, dword [esi + 0x24]
jge 0x41224d
push 0x9c4
push 0x5a0
mov eax, dword [0x41893c]
push eax
call sub.kernel32.dll_MulDiv
mov dword [esi + 0xc], eax
push 0x9c4
push 0x5a0
mov eax, dword [0x418944]
push eax
call sub.kernel32.dll_MulDiv
sub dword [esi + 0x14], eax
cmp byte [0x4177e0], 0
je 0x41224d
push 0x40000000
push 0
push 0
push 0x200
push 0xff
mov eax, dword [0x4188d4]
push eax
push 0
mov eax, dword [0x41899c]
push eax
push 0
mov edx, 0x4124ac
xor ecx, ecx
xor eax, eax
call fcn.004057cc
mov ebx, eax
lea eax, [esp + 0x1cc]
xor ecx, ecx
mov edx, 0x3c
call fcn.00402d8c
mov dword [esp + 0x1cc], 0x3c
mov dword [esp + 0x1d0], 0xe8000003
lea eax, [esp + 0x1cc]
push eax
push 1
push 0x43a
mov eax, dword [ebp]
push eax
call sub.user32.dll_SendMessageA
xor eax, eax
mov dword [esp + 0x1d8], eax
push 5
call sub.user32.dll_GetSysColor
mov edx, eax
mov eax, 0x4124b8
call fcn.0040dbc8
push eax
push 0
push 0x443
push ebx
call sub.user32.dll_SendMessageA
lea eax, [esp + 0x1cc]
push eax
push 4
push 0x444
push ebx
call sub.user32.dll_SendMessageA
lea eax, [esi + 8]
push eax
lea eax, [esp + 0xa8]
push eax
call sub.user32.dll_CopyRect
test edi, edi
jle 0x412459
mov dword [esp + 0x18], edi
mov dword [esp], 1
xor eax, eax
mov dword [esi + 0x28], eax
mov eax, dword [esp + 4]
mov dword [esi + 0x2c], eax
test byte [esp + 0x30], 1
je 0x4122a4
lea eax, [esi + 0x28]
push eax
push 0
push 0x434
mov eax, dword [ebp]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [esi + 0x2c]
cmp eax, dword [esi + 0x28]
jl 0x4122a4
mov dword [esp + 4], eax
push 0
push 0
push 0x439
mov eax, dword [ebp]
push eax
call sub.user32.dll_SendMessageA
test ebx, ebx
je 0x412398
mov eax, dword [esi + 0x28]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x14], eax
push esp
push 0x4124bc
lea eax, [esp + 0xcc]
push eax
call sub.user32.dll_wvsprintfA
mov edi, eax
lea eax, [esp + 0xc4]
push eax
push ebx
call sub.user32.dll_SetWindowTextA
lea eax, [esp + 8]
push eax
push edi
lea eax, [esp + 0xcc]
push eax
mov eax, dword [esi]
push eax
call sub.gdi32.dll_GetTextExtentPoint32A
mov eax, dword [esi + 0x20]
sub eax, dword [esp + 8]
sar eax, 1
jns 0x412313
adc eax, 0
mov dword [esp + 0xb4], eax
mov eax, dword [esi + 0x10]
mov dword [esp + 0xbc], eax
mov eax, dword [esi + 0xc]
mov dword [esp + 0xc0], eax
sub eax, dword [esi + 0x1c]
sub eax, dword [esp + 0xc]
sar eax, 1
jns 0x41233c
adc eax, 0
mov dword [esp + 0xb8], eax
lea eax, [esp + 0xb4]
push eax
lea eax, [esi + 8]
push eax
call sub.user32.dll_CopyRect
xor eax, eax
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], edi
push 0
push 0
push 0x439
push ebx
call sub.user32.dll_SendMessageA
push esi
push 0
push 0x439
push ebx
call sub.user32.dll_SendMessageA
mov eax, dword [esp + 0x10]
mov dword [esi + 0x28], eax
mov eax, dword [esp + 0x14]
mov dword [esi + 0x2c], eax
lea eax, [esp + 0xa4]
push eax
lea eax, [esi + 8]
push eax
call sub.user32.dll_CopyRect
push esi
push 0
push 0x439
mov eax, dword [ebp]
push eax
call sub.user32.dll_SendMessageA
mov dword [esi + 0x28], eax
test byte [esp + 0x30], 2
je 0x4123bd
movzx eax, word [esp + 0x34]
cmp eax, dword [esp]
jg 0x412424
movzx edi, word [esp + 0x3c]
test edi, edi
jle 0x412424
mov eax, dword [esi]
push eax
call sub.gdi32.dll_StartPage
test ebx, ebx
je 0x412405
lea eax, [esp + 0xb4]
push eax
lea eax, [esi + 8]
push eax
call sub.user32.dll_CopyRect
lea eax, [esi + 8]
push eax
push 0
push 0x433
push ebx
call sub.user32.dll_SendMessageA
lea eax, [esp + 0xa4]
push eax
lea eax, [esi + 8]
push eax
call sub.user32.dll_CopyRect
lea eax, [esi + 8]
push eax
push 0
push 0x433
mov eax, dword [ebp]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [esi]
push eax
call sub.gdi32.dll_EndPage
dec edi
jne 0x4123c6
lea eax, [esp + 0xa4]
push eax
lea eax, [esi + 8]
push eax
call sub.user32.dll_CopyRect
inc dword [esp]
mov eax, dword [esi + 0x28]
cmp eax, dword [esp + 4]
jge 0x41244f
movzx eax, word [esp + 0x36]
cmp eax, dword [esp]
jge 0x4122b6
dec dword [esp + 0x18]
jne 0x41226a
mov eax, dword [esp + 0x2c]
push eax
call sub.gdi32.dll_EndDoc
mov eax, dword [esp + 0x2c]
push eax
call sub.gdi32.dll_DeleteDC
test ebx, ebx
je 0x412477
push ebx
call sub.user32.dll_DestroyWindow
push 0
push 0
push 0x439
mov eax, dword [ebp]
push eax
call sub.user32.dll_SendMessageA
push 0xffffffffffffffff
mov eax, dword [0x4188d4]
push eax
call sub.user32.dll_EnableWindow
add esp, 0x208
pop ebp
pop edi
pop esi
pop ebx
ret