Function at 0x401540
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x184
push ebx
push esi
push edi
xor esi, esi
push ebp
mov ecx, 3
mov ebp, 1
mov edi, dword [esp + 0x198]
mov dword [esp + 0x94], esi
mov eax, dword [edi + 0x33c]
mov dword [esp + 0x98], 2
mov edx, dword [edi + 0x338]
mov dword [esp + 0x9c], ebp
and edx, 0x10
mov dword [esp + 0xa0], ecx
shr edx, 2
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], 0xd
lea eax, [edx + eax*8]
mov dword [esp + 0x30], ecx
lea edx, [esp + 0x94]
mov dword [esp + 0x34], esi
mov ebx, dword [esp + eax + 0x94]
push 0x100
mov dword [0x4110a0], ebx
mov dword [esp + 0x28], edx
mov eax, dword [edi + 0x338]
mov dword [esp + 0x50], ebx
and eax, 0x80
mov dword [esp + 0x48], edx
lea edx, [esp + 0x98]
mov dword [esp + 0x3c], esi
push edx
mov ecx, dword [edi]
cmp eax, ebp
sbb eax, eax
and eax, 0xffffffe8
add eax, 0x273d
push eax
push ecx
call dword [sym.imp.USER32.dll_LoadStringA]
lea ecx, [esp + 0x18]
mov edx, dword [edi + 8]
push ecx
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
mov dword [esp + 0x30], esi
push esi
push 0x101b
push edx
call ebx
push 0xfffe
mov eax, dword [edi + 8]
push esi
push 0x101e
push eax
call ebx
test dword [edi + 0x338], ebp
je 0x4016c2
mov esi, section..rdata
test byte [edi + 0x338], 2
jne 0x401646
cmp dword [esi], 0x272a
je 0x4016b3
lea eax, [esp + 0x94]
push 0x100
push eax
mov ecx, dword [esi]
push ecx
mov edx, dword [edi]
push edx
call dword [sym.imp.USER32.dll_LoadStringA]
test byte [edi + 0x338], 0x80
je 0x401680
lea eax, [esp + 0x30]
mov ecx, dword [edi + 8]
push eax
push 0
push 0x1007
push ecx
call ebx
inc dword [esp + 0x34]
jmp 0x4016b3
lea eax, [esp + 0x18]
mov edx, dword [edi + 8]
mov dword [esp + 0x2c], ebp
push eax
mov dword [esp + 0x14], ebp
inc ebp
mov ecx, dword [esp + 0x14]
push ecx
push 0x101b
push edx
call ebx
mov ecx, dword [esp + 0x10]
push 0xfffe
push ecx
mov eax, dword [edi + 8]
push 0x101e
push eax
call ebx
add esi, 4
cmp esi, 0x40f014
jb 0x401635
lea eax, [esp + 0x54]
push 0x1e
push eax
mov ecx, dword [edi]
push 0x272b
push ecx
call dword [sym.imp.USER32.dll_LoadStringA]
lea ecx, [esp + 0x74]
push 0x1e
push ecx
mov edx, dword [edi]
push 0x272c
push edx
call dword [sym.imp.USER32.dll_LoadStringA]
mov ecx, dword [edi + 0x344]
mov edx, dword [ecx + 8]
mov dword [esp + 0x14], edx
test edx, edx
je 0x401816
call fcn.004054c0
mov esi, eax
test byte [edi + 0x338], 4
je 0x401784
lea eax, [esp + 0x54]
lea ecx, [esi + 4]
lea edx, [esp + 0x94]
push eax
push ecx
push str._s__s
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
test byte [edi + 0x338], 0x80
je 0x401751
lea eax, [esp + 0x30]
mov ecx, dword [edi + 8]
push eax
push 0
push 0x1007
push ecx
call ebx
inc dword [esp + 0x34]
jmp 0x401784
lea eax, [esp + 0x18]
mov edx, dword [edi + 8]
mov dword [esp + 0x2c], ebp
push eax
mov dword [esp + 0x14], ebp
inc ebp
mov ecx, dword [esp + 0x14]
push ecx
push 0x101b
push edx
call ebx
mov ecx, dword [esp + 0x10]
push 0xfffe
push ecx
mov eax, dword [edi + 8]
push 0x101e
push eax
call ebx
test byte [edi + 0x338], 8
je 0x4017f6
lea eax, [esp + 0x74]
add esi, 4
lea ecx, [esp + 0x94]
push eax
push esi
push str._s__s
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
test byte [edi + 0x338], 0x80
je 0x4017cd
lea eax, [esp + 0x30]
mov ecx, dword [edi + 8]
push eax
push 0
push 0x1007
push ecx
call ebx
inc dword [esp + 0x34]
jmp 0x4017f6
mov esi, ebp
lea eax, [esp + 0x18]
push eax
mov ecx, dword [edi + 8]
mov dword [esp + 0x30], ebp
push esi
push 0x101b
inc ebp
push ecx
call ebx
push 0xfffe
mov ecx, dword [edi + 8]
push esi
push 0x101e
push ecx
call ebx
dec dword [esp + 0x14]
cmp dword [esp + 0x14], 0
jle 0x401816
mov ecx, dword [edi + 0x344]
call fcn.004054d0
mov esi, eax
test esi, esi
jne 0x401708
test byte [edi + 0x338], 0x80
je 0x401831
push 0xffff
mov eax, dword [edi + 8]
push 0
push 0x101e
push eax
jmp 0x401874
lea eax, [esp + 0x94]
push 0
push 0
push 0
push 0
push str._02u:_02u:_02u._03u
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [esp + 0xac]
add esp, 0x18
mov esi, dword [edi + 8]
push eax
push 0
push 0x1011
push esi
call ebx
add ax, 0x20
movzx ecx, ax
push ecx
push 0
push 0x101e
push esi
call ebx
cmp dword [0x410030], 0
je 0x40188f
mov eax, dword [edi + 0x14]
mov ecx, dword [0x410030]
mov ebx, dword [eax]
push ecx
push eax
call dword [ebx + 0x14]
test byte [edi + 0x338], 0x80
je 0x40189c
mov ebp, dword [esp + 0x34]
lea ecx, [ebp*4 + 4]
inc ebp
mov eax, dword [edi + 0x14]
push ecx
push eax
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp*4]
mov edi, eax
shr ecx, 2
pop ebp
mov dword [0x410030], eax
xor eax, eax
rep stosd dword es:[edi], eax
pop edi
pop esi
pop ebx
add esp, 0x184
ret