Function at 0x406d90
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x94
push esi
push edi
lea edi, [ebp - 0x94]
mov ecx, 0x25
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x401324]
xor eax, ebp
mov dword [ebp - 4], eax
mov esi, esp
push 0xffffffffffffffeb
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
cmp esi, esp
call fcn.0040a650
movzx ecx, byte [eax + 0x28]
and ecx, 2
mov dword [ebp - 8], ecx
movzx edx, byte [ebp + 0x14]
test edx, edx
je 0x406de7
mov dword [ebp - 0x80], 0xee967b
jmp 0x406dee
mov dword [ebp - 0x80], 0xffb79c
mov esi, esp
mov eax, dword [ebp - 0x80]
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
cmp esi, esp
call fcn.0040a650
mov dword [ebp - 0xc], eax
mov esi, esp
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.USER32.dll_FillRect]
cmp esi, esp
call fcn.0040a650
mov esi, esp
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0040a650
movzx edx, byte [ebp + 0x14]
test edx, edx
je 0x406e54
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x406e54
cmp dword [ebp - 8], 0
jne 0x406e54
mov dword [ebp - 0x84], 0x5c8de6
jmp 0x406e5e
mov dword [ebp - 0x84], 0xa5866b
mov esi, esp
mov ecx, dword [ebp - 0x84]
push ecx
push 1
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
cmp esi, esp
call fcn.0040a650
mov dword [ebp - 0x10], eax
movzx edx, byte [ebp + 0x14]
test edx, edx
je 0x406e8f
mov dword [ebp - 0x88], 0xcebdae
jmp 0x406e99
mov dword [ebp - 0x88], 0xe3dbd3
mov esi, esp
mov eax, dword [ebp - 0x88]
push eax
push 1
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
cmp esi, esp
call fcn.0040a650
mov dword [ebp - 0x14], eax
mov esi, esp
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0040a650
mov dword [ebp - 0x18], eax
mov esi, esp
push 5
call dword [sym.imp.GDI32.dll_GetStockObject]
cmp esi, esp
call fcn.0040a650
mov esi, esp
push eax
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0040a650
mov dword [ebp - 0x1c], eax
mov esi, esp
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
cmp esi, esp
call fcn.0040a650
mov esi, esp
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0040a650
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0xc]
sub ecx, 1
mov esi, esp
push ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 8]
sub eax, 1
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 4]
add edx, 1
push edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
add ecx, 1
push ecx
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.GDI32.dll_Rectangle]
cmp esi, esp
call fcn.0040a650
mov dword [ebp - 0x30], 0
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x48], 0
xor ecx, ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x60], 0
xor edx, edx
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x54], edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x30]
push edx
push 0
push 0
push 0
push 0
mov eax, dword [ebp + 8]
push eax
call fcn.00406450
call fcn.00403170
mov dword [ebp - 0x68], eax
mov esi, esp
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0040a650
mov dword [ebp - 0x6c], eax
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x407020
movzx ecx, byte [ebp + 0x18]
test ecx, ecx
je 0x407008
mov dword [ebp - 0x8c], 0x5ff0ff
jmp 0x407012
mov dword [ebp - 0x8c], 0xffffff
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x90], edx
jmp 0x40702a
mov dword [ebp - 0x90], 0xf0ece6
mov esi, esp
mov eax, dword [ebp - 0x90]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SetTextColor]
cmp esi, esp
call fcn.0040a650
mov esi, esp
push 1
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.GDI32.dll_SetBkMode]
cmp esi, esp
call fcn.0040a650
mov dword [ebp - 0x70], 0
mov esi, esp
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
cmp esi, esp
call fcn.0040a650
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x74]
add ecx, 1
mov dword [ebp - 0x74], ecx
mov eax, dword fs:[0x30]
mov eax, dword ds:[eax + 0x18]
mov dword [ebp - 0x78], eax
mov edx, dword [ebp - 0x74]
shl edx, 1
mov esi, esp
push edx
push 0xc
mov eax, dword [ebp - 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
cmp esi, esp
call fcn.0040a650
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x4070f1
mov esi, esp
mov ecx, dword [ebp - 0x74]
push ecx
mov edx, dword [ebp - 0x70]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
cmp esi, esp
call fcn.0040a650
test eax, eax
je 0x4070f1
mov esi, esp
push 0x8024
lea ecx, [ebp - 0x48]
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0x70]
push edx
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.USER32.dll_DrawTextW]
cmp esi, esp
call fcn.0040a650
cmp dword [ebp - 0x70], 0
je 0x40711d
mov eax, dword fs:[0x30]
mov eax, dword ds:[eax + 0x18]
mov dword [ebp - 0x7c], eax
mov esi, esp
mov ecx, dword [ebp - 0x70]
push ecx
push 0
mov edx, dword [ebp - 0x7c]
push edx
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp esi, esp
call fcn.0040a650
mov esi, esp
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0040a650
mov esi, esp
mov edx, dword [ebp - 0x68]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0040a650
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x40715b
mov dword [ebp - 0x94], 1
jmp 0x407165
mov dword [ebp - 0x94], 0
mov esi, esp
push 0
mov ecx, dword [ebp - 0x2c]
push ecx
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x94]
push ecx
mov edi, esp
push 0x4017f0
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetPropW]
cmp edi, esp
call fcn.0040a650
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Draw]
cmp esi, esp
call fcn.0040a650
mov eax, dword [ebp - 8]
push eax
movzx ecx, byte [ebp + 0x14]
push ecx
lea edx, [ebp - 0x60]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00406750
mov esi, esp
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0040a650
mov esi, esp
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, esp
call fcn.0040a650
mov esi, esp
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0040a650
mov esi, esp
mov ecx, dword [ebp - 0x14]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp esi, esp
call fcn.0040a650
push edx
mov ecx, ebp
push eax
lea edx, [0x407240]
call fcn.0040a5f0
pop eax
pop edx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040a680
add esp, 0x94
cmp ebp, esp
call fcn.0040a650
mov esp, ebp
pop ebp
ret 0x14