Function at 0x100178f6
Capabilities:
Get graphical window text

Disassembly:
jae 0x10017600
jmp 0x100175fb
call fcn.10017602
jae 0x100175fb
add esp, 4
jmp 0x10017607
dec dword [esp]
jno 0x1001760c
jns 0x100175f7
jp 0x10017610
add esp, 4
popf
jmp 0x10017617
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x91
xor edx, eax
add eax, edx
sub edx, 0x91
push eax
pop edx
xor edx, 0x1b3
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x91
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x1001766b
jmp 0x1001766d
je 0x10017668
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10017687
jne 0x10017686
call 0x9305670e
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10017695
jne 0x10017695
call 0xd08736cc
xor eax, eax
test eax, eax
je 0x1001769e
jne 0x1001769d
call 0x93056725
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
invalid
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100176ac
jmp 0x100176ae
je 0x100176a9
clc
jae 0x100176b3
xchg esi, eax
invalid
xor eax, 0x92
xor edx, eax
add eax, edx
sub edx, 0x92
push eax
pop edx
xor edx, 0x1b6
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x92
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x100176fb
jmp 0x100176f6
call 0x100176fd
jae 0x100176f6
add esp, 4
jmp 0x10017702
dec dword [esp]
jno 0x10017707
jns 0x100176f2
jp 0x1001770b
add esp, 4
popf
jmp 0x10017712
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001772b
jne 0x1001772b
call 0x1fc1aa7f
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov eax, 0x53
mov word [ebp - 0x20], ax
mov ecx, 0x54
mov word [ebp - 0x1e], cx
mov edx, 0x41
mov word [ebp - 0x1c], dx
mov eax, 0x54
mov word [ebp - 0x1a], ax
mov ecx, 0x49
mov word [ebp - 0x18], cx
mov edx, 0x43
mov word [ebp - 0x16], dx
xor eax, eax
mov word [ebp - 0x14], ax
mov ecx, 0x42
mov word [ebp - 0x48], cx
mov edx, 0x55
mov word [ebp - 0x46], dx
mov eax, 0x54
mov word [ebp - 0x44], ax
mov ecx, 0x54
mov word [ebp - 0x42], cx
mov edx, 0x4f
mov word [ebp - 0x40], dx
mov eax, 0x4e
mov word [ebp - 0x3e], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
mov edx, 0x45
mov word [ebp - 0x2c], dx
mov eax, 0x44
mov word [ebp - 0x2a], ax
mov ecx, 0x49
mov word [ebp - 0x28], cx
mov edx, 0x54
mov word [ebp - 0x26], dx
xor eax, eax
mov word [ebp - 0x24], ax
xor ecx, ecx
mov word [ebp - 0x14c], cx
clc
jae 0x100177ec
mov bh, 0xdc
pushf
push 0xa
jae 0x100177f9
jmp 0x100177f4
call 0x100177fb
jae 0x100177f4
add esp, 4
jmp 0x10017800
dec dword [esp]
jno 0x10017805
jns 0x100177f0
jp 0x10017809
add esp, 4
popf
jmp 0x10017810
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x97
xor edx, eax
add eax, edx
sub edx, 0x97
push eax
pop edx
xor edx, 0x1c5
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x97
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x10017864
jmp 0x10017866
je 0x10017861
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10017880
jne 0x1001787f
call 0x93056907
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001788e
jne 0x1001788e
call 0xd08738c5
xor eax, eax
test eax, eax
je 0x10017897
jne 0x10017896
call 0x9305691e
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
inc edx
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100178a5
jmp 0x100178a7
je 0x100178a2
clc
jae 0x100178ac
mov word [edx + 0x35], es
cwde
add byte [eax], al
add byte [ebx], dh
rol byte [ebx], 1
ret 0xea81
xor eax, 0x98
xor edx, eax
add eax, edx
sub edx, 0x98
push eax
pop edx
xor edx, 0x1c8
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x98
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x100178f4
jmp 0x100178ef
call 0x100178f6
jae 0x100178ef
add esp, 4
jmp 0x100178fb
dec dword [esp]
jno 0x10017900
jns 0x100178eb
jp 0x10017904
add esp, 4
popf
jmp 0x1001790b
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10017924
jne 0x10017924
call 0x1fc1ac78
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x15c], edx
cmp dword [ebp - 0x15c], 0x113
ja 0x10017991
cmp dword [ebp - 0x15c], 0x113
je 0x10017ea1
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x154], eax
sub dword [ebp - 0x154], 1
je 0x100179bf
sub dword [ebp - 0x154], 1
je 0x10017ede
sub dword [ebp - 0x154], 0x10f
je 0x10017d91
jmp 0x10017f2a
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x158], ecx
sub dword [ebp - 0x158], 0x133
je 0x10017cfd
sub dword [ebp - 0x158], 5
je 0x10017cfd
jmp 0x10017f2a
mov edx, 0x41
mov word [ebp - 0x38], dx
mov eax, 0x52
mov word [ebp - 0x36], ax
mov ecx, 0x49
mov word [ebp - 0x34], cx
mov edx, 0x41
mov word [ebp - 0x32], dx
mov eax, 0x4c
mov word [ebp - 0x30], ax
xor ecx, ecx
mov word [ebp - 0x2e], cx
mov edx, 0x50
mov word [ebp - 0x184], dx
mov eax, 0x41
mov word [ebp - 0x182], ax
mov ecx, 0x4c
mov word [ebp - 0x180], cx
mov edx, 0x41
mov word [ebp - 0x17e], dx
mov eax, 0x54
mov word [ebp - 0x17c], ax
mov ecx, 0x49
mov word [ebp - 0x17a], cx
mov edx, 0x4e
mov word [ebp - 0x178], dx
mov eax, 0x4f
mov word [ebp - 0x176], ax
xor ecx, ecx
mov word [ebp - 0x174], cx
push 0
push 0
push 0
mov edx, dword [ebp + 8]
push edx
push 0x47
push 0x19f
push 0
push 0
push 0x5000000e
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x20]
push ecx
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x1044bf28], eax
push 0x15aaa
push 0x1008e0b0
call fcn.10018980
add esp, 8
mov dword [0x1044bf38], eax
mov edx, dword [0x1044bf38]
push edx
push 0
push 0x172
mov eax, dword [0x1044bf28]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0
mov ecx, dword [ebp + 8]
push ecx
push 0x1a
push 0x32
push 0x50
push 0xa
push 0x50800001
lea edx, [ebp - 0x14c]
push edx
lea eax, [ebp - 0x20]
push eax
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x1044bf1c], eax
push 0
push 0
push 0
mov ecx, dword [ebp + 8]
push ecx
push 0x1a
push 0xc8
push 0x50
push 0x46
push 0x50800001
lea edx, [ebp - 0x14c]
push edx
lea eax, [ebp - 0x20]
push eax
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x1044bf18], eax
push 0
push 0
push 0
mov ecx, dword [ebp + 8]
push ecx
push 0x1a
push 0x32
push 0x73
push 0xa
push 0x50800001
lea edx, [ebp - 0x14c]
push edx
lea eax, [ebp - 0x20]
push eax
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x1044bf20], eax
push 0
push 0
push 0
mov ecx, dword [ebp + 8]
push ecx
push 0x1a
push 0xc8
push 0x73
push 0x46
push 0x50800001
lea edx, [ebp - 0x14c]
push edx
lea eax, [ebp - 0x2c]
push eax
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x1044bf14], eax
push 0
push 0
push 1
mov ecx, dword [ebp + 8]
push ecx
push 0x41
push 0x41
push 0x4e
push 0x113
push 0x50000080
lea edx, [ebp - 0x14c]
push edx
lea eax, [ebp - 0x48]
push eax
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x1044bf24], eax
push 0x324e
push str.BMN2
call fcn.10018980
add esp, 8
mov dword [0x1044bf3c], eax
mov ecx, dword [0x1044bf3c]
push ecx
push 0
push 0xf7
mov edx, dword [0x1044bf24]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x3e06e
push 0x100a6db0
call fcn.100189c0
add esp, 8
mov dword [0x1044bf40], eax
mov eax, dword [0x1044bf40]
push eax
push 0
push 0x80
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [0x1044bf40]
push edx
push 1
push 0x80
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x38]
push ecx
push 0x20
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0x15
call dword [sym.imp.GDI32.dll_CreateFontW]
mov dword [ebp - 0x160], eax
push 1
mov edx, dword [ebp - 0x160]
push edx
push 0x30
mov eax, dword [0x1044bf14]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 1
mov ecx, dword [ebp - 0x160]
push ecx
push 0x30
mov edx, dword [0x1044bf20]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 1
mov eax, dword [ebp - 0x160]
push eax
push 0x30
mov ecx, dword [0x1044bf18]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
push 1
mov edx, dword [ebp - 0x160]
push edx
push 0x30
mov eax, dword [0x1044bf1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [ebp + 8]
push ecx
call fcn.10018040
add esp, 4
mov edx, dword [ebp + 8]
push edx
call fcn.100189f0
add esp, 4
mov eax, dword [ebp + 8]
push eax
call fcn.10019550
add esp, 4
mov ecx, dword [ebp + 8]
push ecx
call fcn.10019650
add esp, 4
push 0
push 0x3e8
push 1
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x10017f42
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x164], eax
push 0
mov ecx, dword [ebp - 0x164]
push ecx
call dword [sym.imp.GDI32.dll_SetBkColor]
push 0xc0c0c0
mov edx, dword [ebp - 0x164]
push edx
call dword [sym.imp.GDI32.dll_SetTextColor]
push 0xffffff
mov eax, dword [ebp - 0x164]
push eax
call dword [sym.imp.GDI32.dll_SetDCBrushColor]
mov ecx, dword [0x1044c64c]
mov edx, dword fs:[0x2c]
mov eax, dword [edx + ecx*4]
mov ecx, dword [0x1044bf48]
cmp ecx, dword [eax + 4]
jle 0x10017d87
push 0x1044bf48
call fcn.1004d356
add esp, 4
cmp dword [0x1044bf48], 0xffffffff
jne 0x10017d87
push 0
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [0x1044bf44], eax
push 0x1044bf48
call fcn.1004d30c
add esp, 4
mov eax, dword [0x1044bf44]
jmp 0x10017f44
mov edx, dword [ebp + 0x10]
and edx, 0xffff
movzx eax, dx
cmp eax, 1
jne 0x10017e9c
push 0x100
lea ecx, [ebp - 0x148]
push ecx
mov edx, dword [0x1044bf14]
push edx
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov dword [ebp - 0x150], 0
lea eax, [ebp - 0x150]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetWindowDisplayAffinity]
test eax, eax
je 0x10017e37
cmp dword [ebp - 0x150], 0
jne 0x10017e37
mov edx, 0xedef1473
push edx
lea ecx, [ebp - 0x1a8]
call fcn.10015dd0
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x16c]
push ecx
call fcn.10041dc0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a8]
call fcn.10016630
call fcn.10023ce0
lea edx, [ebp - 0x148]
push edx
call fcn.10056a2b
add esp, 4
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
push eax
call fcn.100199d0
add esp, 4
movzx ecx, al
test ecx, ecx
je 0x10017e75
mov byte [0x1044bf2c], 1
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x10017e9c
mov eax, dword [0x1044bf34]
sub eax, 1
mov dword [0x1044bf34], eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.10019650
add esp, 4
cmp dword [0x1044bf34], 0
jg 0x10017e9c
call fcn.10018030
jmp 0x10017f42
cmp dword [ebp + 0x10], 1
jne 0x10017edc
mov edx, dword [ebp + 8]
push edx
call fcn.10017f70
add esp, 4
mov eax, dword [0x1044bf30]
sub eax, 1
mov dword [0x1044bf30], eax
cmp dword [0x1044bf30], 0
jg 0x10017ed0
call fcn.10018030
jmp 0x10017edc
mov ecx, dword [ebp + 8]
push ecx
call fcn.10019550
add esp, 4
jmp 0x10017f42
movzx edx, byte [0x1044bf2c]
test edx, edx
jne 0x10017eee
call fcn.10018030
mov eax, dword [0x1044bf38]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [0x1044bf3c]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edx, dword [0x1044bf40]
push edx
call dword [sym.imp.USER32.dll_DestroyIcon]
push 1
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x10017f42
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x10017f44
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1004ce42
mov esp, ebp
pop ebp
ret 0x10