Function at 0x4a0620
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xac
mov eax, dword [0x53f4a0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov esi, ecx
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x44]
push ecx
xor edi, edi
push eax
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x48], eax
call dword [sym.imp.USER32.dll_BeginPaint]
push eax
mov dword [ebp - 0x4c], eax
call dword [sym.imp.GDI32.dll_SaveDC]
lea edx, [ebp - 0x78]
mov dword [ebp - 0x7c], eax
mov eax, dword [esi + 4]
push edx
push eax
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], edi
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [ebp - 0x78]
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x70]
mov ebx, dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x60], ecx
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], ecx
cmp dword [esi + 0x28], edi
je 0x4a0817
call fcn.0049fe50
test al, al
je 0x4a0817
mov eax, dword [esi + 0x38]
push eax
push 1
push edi
mov edi, dword [sym.imp.GDI32.dll_CreatePen]
call edi
push 0xa0a0a1
lea edx, [ebp - 0x60]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x4c]
push edx
push eax
call dword [sym.imp.USER32.dll_FillRect]
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
push ecx
push edx
call ebx
push 5
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
mov eax, dword [ebp - 0x4c]
push eax
call ebx
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x5c]
push 5
push 5
push ecx
mov ecx, dword [ebp - 0x60]
push edx
mov edx, dword [ebp - 0x4c]
push eax
push ecx
push edx
call dword [sym.imp.GDI32.dll_RoundRect]
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.USER32.dll_InflateRect]
mov eax, dword [esi + 0x3c]
push eax
push 1
push 0
call edi
mov ecx, dword [ebp - 0x4c]
mov edi, eax
push edi
push ecx
call ebx
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x5c]
push 2
push 2
push edx
mov edx, dword [ebp - 0x60]
push eax
mov eax, dword [ebp - 0x4c]
push ecx
push edx
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [ebp - 0x60]
push ecx
call dword [sym.imp.USER32.dll_InflateRect]
mov edx, dword [ebp - 0x60]
movzx ecx, byte [esi + 0x40]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x9c], edx
movzx edx, byte [esi + 0x41]
shl cx, 8
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 1
mov dword [ebp - 0x98], eax
mov word [ebp - 0x94], cx
shl dx, 8
movzx eax, byte [esi + 0x42]
mov word [ebp - 0x92], dx
mov edx, dword [ebp - 0x58]
shl ax, 8
xor ecx, ecx
mov word [ebp - 0x90], ax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x8c], edx
movzx edx, byte [esi + 0x45]
mov word [ebp - 0x8e], cx
movzx ecx, byte [esi + 0x44]
mov dword [ebp - 0x88], eax
movzx eax, byte [esi + 0x46]
push 1
shl dx, 8
push 1
shl cx, 8
mov word [ebp - 0x82], dx
shl ax, 8
lea edx, [ebp - 0x68]
push edx
mov word [ebp - 0x84], cx
xor ecx, ecx
mov word [ebp - 0x80], ax
push 2
lea eax, [ebp - 0x9c]
mov word [ebp - 0x7e], cx
mov ecx, dword [ebp - 0x4c]
push eax
push ecx
call dword [sym.imp.MSIMG32.dll_GradientFill]
test edi, edi
je 0x4a0810
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0x50]
test eax, eax
jmp 0x4a0865
mov edx, dword [esi + 0x30]
mov eax, dword [ebp - 0x4c]
push edx
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x60]
push edi
push edi
push 0x52a4dc
lea ecx, [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x4c]
push 2
push edx
push eax
push ecx
call dword [sym.imp.GDI32.dll_ExtTextOutW]
mov eax, dword [esi + 0x34]
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push eax
lea edx, [ebp - 0x60]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x4c]
push edx
push eax
call dword [sym.imp.USER32.dll_FrameRect]
mov eax, dword [ebp - 0x64]
cmp eax, edi
je 0x4a086e
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [esi + 4]
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov edx, dword [0x5427f0]
inc eax
mov dword [ebp - 0x64], eax
mov eax, dword [edx + 0xc]
mov ecx, 0x5427f0
call eax
mov edi, eax
mov edx, dword [edi + 8]
mov eax, dword [ebp - 0x64]
add edi, 0x10
mov ecx, 1
sub ecx, dword [edi - 4]
sub edx, eax
or ecx, edx
mov dword [ebp - 0x50], edi
jge 0x4a08b7
push eax
lea ecx, [ebp - 0x50]
call fcn.00462660
mov edi, dword [ebp - 0x50]
mov eax, dword [ebp - 0x64]
push eax
mov eax, dword [esi + 4]
push edi
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov eax, dword [edi - 8]
push eax
push edi
call fcn.004eb0bf
add esp, 8
test eax, eax
jl 0x4a09a9
cmp eax, dword [edi - 8]
jg 0x4a09a9
mov dword [edi - 0xc], eax
xor ecx, ecx
mov word [edi + eax*2], cx
mov edx, dword [esi + 0x48]
mov eax, dword [ebp - 0x4c]
push edx
push eax
call ebx
mov ecx, dword [esi + 0x34]
mov edx, dword [ebp - 0x4c]
push ecx
push edx
call dword [sym.imp.GDI32.dll_SetTextColor]
mov eax, dword [ebp - 0x4c]
push 1
push eax
call dword [sym.imp.GDI32.dll_SetBkMode]
mov edx, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x70]
push 0
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0xac], ecx
mov ecx, dword [ebp - 0x6c]
push 4
lea edx, [ebp - 0xac]
push edx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], ecx
call dword [sym.imp.USER32.dll_OffsetRect]
mov ecx, dword [edi - 0xc]
mov edx, dword [ebp - 0x4c]
push 0x824
lea eax, [ebp - 0xac]
push eax
push ecx
push edi
push edx
call dword [sym.imp.USER32.dll_DrawTextW]
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x4c]
push eax
push ecx
call dword [sym.imp.GDI32.dll_RestoreDC]
lea eax, [edi - 0x10]
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
pop edi
pop esi
pop ebx
test ecx, ecx
jg 0x4a098b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [ebp - 0x48]
lea ecx, [ebp - 0x44]
push ecx
push edx
call dword [sym.imp.USER32.dll_EndPaint]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ea5a8
mov esp, ebp
pop ebp
ret 4
push 0x80070057
call fcn.0045f890
int3