Function at 0x407b30
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x154
mov eax, dword [esp + 0x158]
push ebx
push ebp
mov ebp, dword [sym.imp.USER32.dll_GetDlgItem]
push esi
push edi
mov esi, ecx
push 0x194
push eax
mov dword [esi + 8], eax
call ebp
mov dword [esi + 0xc], eax
mov eax, dword [esi + 8]
push 0
push eax
call fcn.00419120
add esp, 8
push 1
push 0x1e
push 0xff
push 0x10
push 0x10
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov ecx, dword [esi]
mov ebx, dword [sym.imp.USER32.dll_LoadIconA]
push 0x45
push ecx
mov dword [esi + 0x10], eax
call ebx
mov edx, dword [esi + 0x10]
mov edi, dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push eax
push 0xffffffffffffffff
push edx
call edi
mov eax, dword [esi]
push 0x48
push eax
call ebx
mov ecx, dword [esi + 0x10]
push eax
push 0xffffffffffffffff
push ecx
call edi
mov edx, dword [esi]
push 0x40
push edx
call ebx
push eax
mov eax, dword [esi + 0x10]
push 0xffffffffffffffff
push eax
call edi
mov ecx, dword [esi]
push 0x8c
push ecx
call ebx
mov edx, dword [esi + 0x10]
push eax
push 0xffffffffffffffff
push edx
call edi
mov eax, dword [esi]
push 0x3f
push eax
call ebx
mov ecx, dword [esi + 0x10]
push eax
push 0xffffffffffffffff
push ecx
call edi
mov edx, dword [esi]
push 0x3e
push edx
call ebx
push eax
mov eax, dword [esi + 0x10]
push 0xffffffffffffffff
push eax
call edi
push 0x87
mov ecx, dword [esi]
push ecx
call ebx
mov edx, dword [esi + 0x10]
push eax
push 0xffffffffffffffff
push edx
call edi
mov eax, dword [esi]
push 0x97
push eax
call ebx
mov ecx, dword [esi + 0x10]
push eax
push 0xffffffffffffffff
push ecx
call edi
mov edx, dword [esi]
push 0x98
push edx
call ebx
push eax
mov eax, dword [esi + 0x10]
push 0xffffffffffffffff
push eax
call edi
mov ecx, dword [esi]
push 0x99
push ecx
call ebx
mov edx, dword [esi + 0x10]
push eax
push 0xffffffffffffffff
push edx
call edi
mov eax, dword [esi + 0x10]
mov edi, dword [sym.imp.COMCTL32.dll_ImageList_SetOverlayImage]
push 1
push 7
push eax
call edi
mov ecx, dword [esi + 0x10]
push 2
push 8
push ecx
call edi
mov edx, dword [esi + 0x10]
push 3
push 9
push edx
call edi
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
push eax
push 0
push 0x1109
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [esi]
mov edi, dword [sym.imp.USER32.dll_LoadImageA]
push 0x1000
push 0x10
push 0x10
push 1
push 0x9a
push edx
call edi
push 0x1000
push 0x10
mov dword [esi + 0x48], eax
mov eax, dword [esi]
push 0x10
push 1
push 0x9b
push eax
call edi
push 0x1000
push 0x10
push 0x10
mov dword [esi + 0x4c], eax
push 1
mov ecx, dword [esi]
push 0x9c
push ecx
call edi
mov edx, dword [esi + 0x48]
mov edi, dword [sym.imp.USER32.dll_SendDlgItemMessageA]
push edx
mov dword [esi + 0x50], eax
mov eax, dword [esi + 8]
push 1
push 0xf7
push 0x38
push eax
call edi
mov ecx, dword [esi + 0x4c]
mov edx, dword [esi + 8]
push ecx
push 1
push 0xf7
push 0x39
push edx
call edi
mov eax, dword [esi + 0x50]
mov ecx, dword [esi + 8]
push eax
push 1
push 0xf7
push 0x37
push ecx
call edi
mov dl, byte [0x426fec]
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x61]
mov byte [esp + 0x60], dl
push 0
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 8]
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [esi]
push eax
push 0
push ecx
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push 0x90000002
push 0
push str.tooltips_class32
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0x13
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push eax
mov dword [esi + 0x44], eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [esi + 8]
mov edx, dword [esi]
push 0x38
push eax
mov dword [esp + 0x2c], 0x2c
mov dword [esp + 0x30], 0x11
mov dword [esp + 0x34], eax
mov dword [esp + 0x4c], edx
call ebp
mov ecx, dword [esi + 8]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x60]
push 0x104
push eax
push 0x38
push ecx
call ebp
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ecx, dword [esi + 0x44]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
lea eax, [esp + 0x24]
lea edx, [esp + 0x60]
push eax
push 0
push 0x404
push ecx
mov dword [esp + 0x58], edx
call edi
mov edx, dword [esi + 8]
push 0x39
push edx
call ebp
mov ecx, dword [esi + 8]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x60]
push 0x104
push eax
push 0x39
push ecx
call ebp
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ecx, dword [esi + 0x44]
lea eax, [esp + 0x24]
push eax
push 0
lea edx, [esp + 0x68]
push 0x404
push ecx
mov dword [esp + 0x58], edx
call edi
mov edx, dword [esi + 8]
push 0x37
push edx
call ebp
mov ecx, dword [esi + 8]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x60]
push 0x104
push eax
push 0x37
push ecx
call ebp
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ecx, dword [esi + 0x44]
lea eax, [esp + 0x24]
push eax
push 0
lea edx, [esp + 0x68]
push 0x404
push ecx
mov dword [esp + 0x58], edx
call edi
mov edx, dword [esi + 8]
push 0x19b
push edx
call ebp
push 0xfffffffffffffff0
push eax
mov dword [esp + 0x18], eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
or ah, 0x80
push eax
mov eax, dword [esp + 0x14]
push 0xfffffffffffffff0
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov edx, dword [esi + 8]
lea ecx, [esp + 0x14]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [esi + 8]
lea eax, [esp + 0x50]
push eax
push 2
push ecx
call ebp
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x14]
push 6
mov ecx, dword [esi + 8]
lea eax, [edx + 0xa]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
sub eax, edx
push eax
mov eax, dword [esp + 0x24]
sub eax, ebp
push eax
push 0
push 0
push 0xffffffffffffffff
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov edx, dword [esi]
push 0xa
push edx
call ebx
push eax
mov eax, dword [esi + 8]
push 1
push 0x80
push eax
call edi
mov ecx, dword [esi + 8]
push 0
push 0
push 0x401
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x154
ret 0x10