Function at 0xcf73e8
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov esi, dword [eax + 0x10]
mov ecx, esi
mov ebx, dword [eax + 0x18]
and ecx, 0x10
mov edi, dword [sym.imp.USER32.dll_GetSysColor]
and esi, 6
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x14], esi
je 0xcf7414
push 0xe
jmp 0xcf7421
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x4c]
cmp eax, 0xffffffff
jne 0xcf7423
push 0x12
call edi
push eax
push ebx
call dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x48]
cmp eax, 0xffffffff
jne 0xcf744a
push 0xf
call dword [sym.imp.USER32.dll_GetSysColorBrush]
push 0xf
mov dword [ebp - 4], eax
call edi
jmp 0xcf745a
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0xc], eax
test esi, esi
je 0xcf7467
push 0x11
call edi
jmp 0xcf746c
mov eax, 0x743c00
push eax
push 1
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push eax
push ebx
mov dword [ebp - 0x24], eax
call esi
push dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
push ebx
call dword [sym.imp.GDI32.dll_SetBkColor]
push dword [ebp - 4]
mov dword [ebp - 0x28], eax
push ebx
call esi
mov dword [ebp - 0x1c], eax
lea edi, [ebp - 0x38]
mov eax, dword [ebp + 8]
add eax, 0x1c
mov esi, eax
mov dword [ebp - 0xc], eax
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0x38]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.USER32.dll_InflateRect]
push 5
push 5
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push ebx
call dword [sym.imp.GDI32.dll_RoundRect]
mov edi, dword [ebp + 0xc]
push 0xfffffffffffffff0
push dword [edi]
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov esi, eax
mov edx, 0x300
shr esi, 8
mov ecx, eax
not esi
and ecx, edx
and esi, 0x20
or esi, 0x104
mov dword [ebp + 8], esi
cmp ecx, edx
jne 0xcf7507
or esi, 1
mov dword [ebp + 8], esi
push 2
pop ecx
test eax, 0x200
je 0xcf7515
or esi, ecx
jmp 0xcf751f
test eax, 0x100
jne 0xcf7522
or esi, 1
mov dword [ebp + 8], esi
push 0
push 0
push 0xe
push dword [edi]
call dword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
push 2
pop edx
lea edi, [eax + 1]
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00c7fe0b
pop ecx
push edi
push eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0xc]
push dword [eax]
call dword [sym.imp.USER32.dll_GetWindowTextW]
cmp dword [ebp - 0x10], 0
je 0xcf7586
mov esi, dword [ebp - 0xc]
lea edi, [ebp - 0x38]
push 0xfffffffffffffffd
push 0xfffffffffffffffd
lea eax, [ebp - 0x38]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.USER32.dll_InflateRect]
lea eax, [ebp - 0x38]
push eax
push ebx
call dword [sym.imp.USER32.dll_DrawFocusRect]
mov esi, dword [ebp + 8]
cmp dword [ebp - 0x14], 0
je 0xcf759c
push 0x11
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push ebx
call dword [sym.imp.GDI32.dll_SetTextColor]
push esi
mov esi, dword [ebp - 0x18]
lea eax, [ebp - 0x38]
push eax
push 0xffffffffffffffff
push esi
push ebx
call dword [sym.imp.USER32.dll_DrawTextW]
push esi
call fcn.00c7fe14
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
pop ecx
push dword [ebp - 0x1c]
push ebx
call edi
push dword [ebp - 4]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
call esi
push dword [ebp - 0x20]
push ebx
call edi
push dword [ebp - 0x24]
call esi
push dword [ebp - 8]
push ebx
call dword [sym.imp.GDI32.dll_SetTextColor]
push dword [ebp - 0x28]
push ebx
call dword [sym.imp.GDI32.dll_SetBkColor]
pop edi
xor eax, eax
pop esi
inc eax
pop ebx
leave
ret 8