Function at 0x403eb0
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x188
push ebx
push ebp
push esi
push edi
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [esp + 0x14], eax
xor ebx, ebx
mov edx, 5
mov eax, 4
mov edi, 1
mov ecx, 6
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], 0xfa6
mov byte [esp + 0x38], al
mov byte [esp + 0x39], bl
mov byte [esp + 0x3a], bl
mov byte [esp + 0x3b], bl
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], 2
mov dword [esp + 0x48], 0xfac
mov byte [esp + 0x4c], al
mov byte [esp + 0x4d], bl
mov byte [esp + 0x4e], bl
mov byte [esp + 0x4f], bl
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], 0xf
mov dword [esp + 0x5c], 0xfb1
mov byte [esp + 0x60], al
mov byte [esp + 0x61], bl
mov byte [esp + 0x62], bl
mov byte [esp + 0x63], bl
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], edi
mov dword [esp + 0x70], 0xfae
mov byte [esp + 0x74], al
mov byte [esp + 0x75], bl
mov byte [esp + 0x76], bl
mov byte [esp + 0x77], bl
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], 0x10
mov dword [esp + 0x84], 0xfb6
mov byte [esp + 0x88], al
mov byte [esp + 0x89], bl
mov byte [esp + 0x8a], bl
mov byte [esp + 0x8b], bl
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], 0x11
mov dword [esp + 0x98], 0xfb7
mov byte [esp + 0x9c], al
mov byte [esp + 0x9d], bl
mov byte [esp + 0x9e], bl
mov byte [esp + 0x9f], bl
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], ebx
mov byte [esp + 0xb0], al
mov byte [esp + 0xb1], 1
mov byte [esp + 0xb2], bl
mov byte [esp + 0xb3], bl
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], 0xfab
mov byte [esp + 0xc4], al
mov byte [esp + 0xc5], cl
mov byte [esp + 0xc6], bl
mov byte [esp + 0xc7], bl
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], ebx
mov dword [esp + 0xd0], edx
mov dword [esp + 0xd4], 0xfa5
mov byte [esp + 0xd8], dl
mov byte [esp + 0xd9], cl
mov byte [esp + 0xda], bl
push 0x14
push 0xf
push 0x10
push 0xf
push 0x10
mov byte [esp + 0xef], bl
mov dword [esp + 0xf0], ebx
mov dword [esp + 0xf4], ebx
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xfc], 0xfa7
mov byte [esp + 0x100], al
mov byte [esp + 0x101], cl
mov byte [esp + 0x102], bl
mov byte [esp + 0x103], bl
mov dword [esp + 0x104], ebx
mov dword [esp + 0x108], ebx
mov dword [esp + 0x10c], 7
mov dword [esp + 0x110], 0xfa2
mov byte [esp + 0x114], al
mov byte [esp + 0x115], cl
mov byte [esp + 0x116], bl
mov byte [esp + 0x117], bl
mov dword [esp + 0x118], ebx
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x120], 8
mov dword [esp + 0x124], 0xfaf
mov byte [esp + 0x128], al
mov byte [esp + 0x129], cl
mov byte [esp + 0x12a], bl
mov byte [esp + 0x12b], bl
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x130], ebx
mov dword [esp + 0x134], 9
mov dword [esp + 0x138], 0xfa1
mov byte [esp + 0x13c], al
mov byte [esp + 0x13d], cl
mov byte [esp + 0x13e], bl
mov byte [esp + 0x13f], bl
mov dword [esp + 0x140], ebx
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], 0xa
mov dword [esp + 0x14c], 0xfa3
mov byte [esp + 0x150], al
mov byte [esp + 0x151], cl
mov byte [esp + 0x152], bl
mov byte [esp + 0x153], bl
mov dword [esp + 0x154], ebx
mov dword [esp + 0x158], ebx
mov dword [esp + 0x15c], 0xb
mov dword [esp + 0x160], 0xfaa
mov byte [esp + 0x164], al
mov byte [esp + 0x165], cl
mov byte [esp + 0x166], bl
mov byte [esp + 0x167], bl
mov dword [esp + 0x168], ebx
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x170], 0xc
mov dword [esp + 0x174], 0xfa9
mov byte [esp + 0x178], al
mov byte [esp + 0x179], cl
mov byte [esp + 0x17a], bl
mov byte [esp + 0x17b], bl
mov dword [esp + 0x17c], ebx
mov dword [esp + 0x180], ebx
mov dword [esp + 0x184], 0xd
mov dword [esp + 0x188], 0xfb0
mov byte [esp + 0x18c], al
mov byte [esp + 0x18d], cl
mov byte [esp + 0x18e], bl
mov byte [esp + 0x18f], bl
mov dword [esp + 0x190], ebx
mov dword [esp + 0x194], ebx
mov dword [esp + 0x198], ebx
mov dword [esp + 0x19c], ebx
mov byte [esp + 0x1a0], al
mov byte [esp + 0x1a1], 1
mov byte [esp + 0x1a2], bl
mov byte [esp + 0x1a3], bl
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1a8], ebx
push 0x12
mov ecx, dword [0x4111b4]
mov edx, dword [esp + 0x1b4]
lea eax, [esp + 0x48]
push eax
push 0x67
push ecx
push 0xe
push 0x68
push 0x50802941
push edx
call dword [sym.imp.COMCTL32.dll_CreateToolbarEx]
mov esi, eax
push 0xfffffffffffffffc
push esi
mov dword [0x411404], edi
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov edi, dword [sym.imp.USER32.dll_SetWindowLongA]
push eax
push 0xffffffffffffffeb
push esi
call edi
push 0x403d50
push 0xfffffffffffffffc
push esi
call edi
lea eax, [esp + 0x20]
push eax
push ebx
push 0x41d
push esi
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x2c]
sub eax, ecx
lea edx, [ecx + 2]
lea eax, [eax + eax*2]
mov dword [esp + 0x1c], edx
lea ebp, [eax + eax*4]
lea eax, [esp + 0x20]
push eax
push 0x11
push 0x41d
push esi
shl ebp, 1
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x4111b4]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x28]
push ebx
push ecx
push 0x69
push esi
push ebp
push 0x78
push edx
push eax
push 0x50200302
push ebx
push str.ComboBox
push ebx
mov dword [esp + 0x48], eax
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, 5
mov dword [0x4113f4], eax
push ecx
push ecx
push eax
call dword [sym.imp.USER32.dll_ChildWindowFromPoint]
cmp eax, ebx
mov dword [esp + 0x10], eax
je 0x4043ee
cmp eax, dword [0x4113f4]
je 0x4043ee
push 0xfffffffffffffffc
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
push eax
mov eax, dword [esp + 0x14]
push 0xffffffffffffffeb
push eax
call edi
mov ecx, dword [esp + 0x10]
push 0x4036e0
push 0xfffffffffffffffc
push ecx
call edi
mov edx, dword [esp + 0x10]
push ebx
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [esp + 0x14]
mov ecx, dword [0x4113f4]
push 1
push eax
push 0x30
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [0x4113f4]
push 0xfffffffffffffffc
push edx
call dword [sym.imp.USER32.dll_GetWindowLongA]
push eax
mov eax, dword [0x4113f4]
push 0xffffffffffffffeb
push eax
call edi
mov ecx, dword [0x4113f4]
push 0x403980
push 0xfffffffffffffffc
push ecx
call edi
mov edx, dword [0x4111b4]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
push ebx
push edx
push 0x6a
push esi
push ebp
add eax, 0x80
push 0x30
push ecx
push eax
push 0x50200202
push ebx
push str.ComboBox
push ebx
mov dword [esp + 0x48], eax
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, 5
mov dword [0x4113f8], eax
push ecx
push ecx
push eax
call dword [sym.imp.USER32.dll_ChildWindowFromPoint]
cmp eax, ebx
mov dword [esp + 0x10], eax
je 0x4044b1
cmp eax, dword [0x4113f8]
je 0x4044b1
push 0xfffffffffffffffc
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, dword [esp + 0x10]
push eax
push 0xffffffffffffffeb
push edx
call edi
mov eax, dword [esp + 0x10]
push 0x4036e0
push 0xfffffffffffffffc
push eax
call edi
mov ecx, dword [esp + 0x10]
push ebx
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [esp + 0x14]
mov eax, dword [0x4113f8]
push 1
push edx
push 0x30
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x4113f8]
push 0xfffffffffffffffc
push ecx
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, dword [0x4113f8]
push eax
push 0xffffffffffffffeb
push edx
call edi
mov eax, dword [0x4113f8]
push 0x403980
push 0xfffffffffffffffc
push eax
call edi
mov ecx, dword [0x4111b4]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
push ebx
push ecx
push 0x6b
push esi
push ebp
add eax, 0x38
push 0x40
push edx
push eax
push 0x50200012
push ebx
push str.ComboBox
push ebx
mov dword [esp + 0x48], eax
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, 5
mov dword [0x4113fc], eax
push ecx
push ecx
push eax
call dword [sym.imp.USER32.dll_ChildWindowFromPoint]
mov ebp, eax
cmp ebp, ebx
je 0x404563
cmp ebp, dword [0x4113fc]
je 0x404563
push 0xfffffffffffffffc
push ebp
call dword [sym.imp.USER32.dll_GetWindowLongA]
push eax
push 0xffffffffffffffeb
push ebp
call edi
push 0x4036e0
push 0xfffffffffffffffc
push ebp
call edi
push ebx
push ebp
call dword [sym.imp.USER32.dll_ShowWindow]
mov ebp, dword [esp + 0x14]
mov eax, dword [0x4113fc]
push 1
push ebp
push 0x30
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x4113fc]
push 0xfffffffffffffffc
push ecx
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, dword [0x4113fc]
push eax
push 0xffffffffffffffeb
push edx
call edi
mov eax, dword [0x4113fc]
push 0x403980
push 0xfffffffffffffffc
push eax
call edi
lea ecx, [esp + 0x20]
push ecx
push esi
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x28]
add ecx, 0x48
sub eax, ecx
cmp eax, 1
mov dword [esp + 0x14], eax
jg 0x4045cc
mov dword [esp + 0x14], 1
mov edx, dword [0x4111b4]
mov eax, dword [esp + 0x2c]
push ebx
push edx
mov edx, dword [esp + 0x2c]
push 0x6c
sub eax, edx
push esi
push eax
mov eax, dword [esp + 0x28]
push eax
push edx
push ecx
push 0x50000002
push 0x41154c
push str.STATIC
push ebx
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 1
push ebp
push 0x30
push eax
mov dword [0x411400], eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x411400]
push 0xfffffffffffffffc
push ecx
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, dword [0x411400]
push eax
push 0xffffffffffffffeb
push edx
call edi
mov eax, dword [0x411400]
push 0x403a40
push 0xfffffffffffffffc
push eax
call edi
mov ecx, dword [0x4113f4]
push ecx
call fcn.004033d0
mov edx, dword [0x4113fc]
push edx
call fcn.00403490
add esp, 8
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x188
ret