Function at 0x403ddd
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x21c
mov eax, dword [0x4065e0]
push ebx
push esi
push edi
xor esi, esi
push eax
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x1c], esi
call dword [sym.imp.USER32.dll_SetCursor]
mov eax, dword [section..data]
mov dword [0x406354], esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
mov edi, eax
call dword [sym.imp.GDI32.dll_GetTextCharset]
push edi
mov dword [ebp - 0x10], eax
mov eax, dword [section..data]
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
call fcn.00404b1b
mov ebx, eax
test ebx, ebx
jne 0x403e3d
mov eax, 0xfffffffb
jmp 0x404539
cmp ebx, 0xffffffff
je 0x404534
push 8
push ebx
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0xa
mov dword [ebp - 4], eax
push ebx
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 8
mov dword [0x406334], eax
push ebx
call dword [sym.imp.GDI32.dll_SetMapMode]
push 0
mov eax, dword [0x406334]
push eax
push dword [ebp - 4]
push ebx
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
push 0
mov eax, dword [0x4067b4]
push dword [0x4067b8]
push eax
push ebx
mov esi, 0x4067cc
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
mov eax, 0x406360
push 2
mov edi, eax
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ebx
call dword [sym.imp.GDI32.dll_LPtoDP]
push 1
push ebx
call dword [sym.imp.GDI32.dll_SetMapMode]
push 1
push ebx
call dword [sym.imp.GDI32.dll_SetBkMode]
push 0x5a
push ebx
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov dword [ebp - 8], eax
lea eax, [ebp - 0x88]
push eax
push ebx
call dword [sym.imp.GDI32.dll_GetTextMetricsA]
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x18], ecx
mov dword [0x406338], eax
mov eax, dword [ebp - 0x78]
push 0x2d0
push dword [ebp - 8]
add eax, ecx
mov dword [0x406370], eax
mov eax, dword [ebp - 0x74]
shl eax, 3
mov dword [0x4062a0], eax
push dword [0x40600c]
mov esi, 0x406800
call dword [sym.imp.KERNEL32.dll_MulDiv]
lea edi, [ebp - 0xe4]
mov ecx, 0xf
neg eax
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xe0], 0
mov byte [ebp - 0xca], 0
cmp dword [0x40602c], 0
mov dword [ebp - 0xe4], eax
je 0x403f6f
push 0x20
lea eax, [ebp - 0xa8]
push eax
push 0x39
push dword [0x406530]
call dword [sym.imp.USER32.dll_LoadStringA]
lea ecx, [ebp - 0xa8]
lea edx, [ebp - 0xc8]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0xe4]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
mov dword [ebp - 0xc], eax
test eax, eax
je 0x403f9c
push eax
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x1c], eax
push ecx
push ebx
call dword [sym.imp.GDI32.dll_GetTextMetricsA]
xor esi, esi
cmp dword [ebp - 0xc], esi
jne 0x403fe2
push esi
push 0x31
push esi
push 0x20
push esi
push dword [ebp - 0x10]
push esi
push esi
push esi
push dword [ebp - 0x6c]
push esi
push esi
push esi
push dword [ebp - 0x88]
call dword [sym.imp.GDI32.dll_CreateFontA]
mov dword [ebp - 0xc], eax
cmp eax, esi
je 0x403fd4
push eax
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x88]
push eax
push ebx
call dword [sym.imp.GDI32.dll_GetTextMetricsA]
push 0x20
lea eax, [ebp - 0xa8]
push eax
push 0x39
push dword [0x406530]
call dword [sym.imp.USER32.dll_LoadStringA]
lea ecx, [ebp - 0xa8]
xor esi, esi
push ecx
push 0x31
push esi
push 0x20
push esi
push dword [ebp - 0x10]
push esi
push esi
push esi
push dword [ebp - 0x6c]
push esi
push esi
push esi
push dword [ebp - 0x18]
call dword [sym.imp.GDI32.dll_CreateFontA]
mov ecx, dword [ebp - 0x78]
mov dword [0x40629c], eax
add ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x74]
mov dword [0x40634c], ecx
mov dword [0x406330], eax
shl eax, 3
mov dword [0x406344], eax
mov eax, dword [ebp - 8]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [0x406358], eax
mov eax, dword [0x406334]
sub eax, dword [0x406364]
sub eax, dword [0x40636c]
cdq
idiv ecx
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
push ecx
push 1
push 0x401098
push ebx
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
mov eax, dword [0x406360]
cdq
idiv dword [ebp - 0x3c]
mov ecx, eax
mov eax, dword [0x406368]
cdq
idiv dword [ebp - 0x3c]
mov edi, eax
mov eax, dword [ebp - 4]
cdq
idiv dword [0x406330]
sub eax, edi
sub eax, ecx
mov dword [0x40635c], eax
mov eax, dword [ebp - 4]
cdq
idiv dword [0x406338]
sub eax, edi
sub eax, ecx
cmp dword [ebp - 0x2c], esi
mov dword [0x40632c], eax
jle 0x40452d
cmp dword [0x40635c], esi
jle 0x40452d
push 0x403be3
push ebx
call dword [sym.imp.GDI32.dll_SetAbortProc]
push 0x136
lea eax, [ebp - 0x21c]
push eax
push dword [section..data]
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea ecx, [ebp - 0x21c]
mov dword [ebp - 0x48], esi
lea edx, [ebp - 0x50]
mov dword [ebp - 0x4c], ecx
push edx
mov dword [ebp - 0x44], esi
push ebx
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x50], 0x14
call dword [sym.imp.GDI32.dll_StartDocA]
mov dword [ebp - 4], eax
cmp eax, esi
jge 0x404136
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3f
jne 0x4044cc
mov dword [ebp - 4], 0xfffffffd
jmp 0x4044cc
xor esi, esi
mov eax, dword [section..data]
push esi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push esi
mov eax, dword [section..data]
push 0x403c4e
push eax
push 0xc
push dword [0x406530]
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov dword [0x406340], eax
cmp eax, esi
je 0x4044c5
xor esi, esi
mov eax, dword [0x406004]
push esi
push esi
push 0xe
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea edi, [eax + 1]
push edi
push 0x42
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 8], eax
cmp eax, esi
je 0x4044c5
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_LocalLock]
test eax, eax
jne 0x4041b0
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x4044c5
push eax
push edi
push 0xd
push dword [0x406004]
call dword [sym.imp.USER32.dll_SendMessageA]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_LocalUnlock]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x10], 0
mov dword [0x406348], 1
mov eax, dword [0x40634c]
mov dword [ebp - 0x18], eax
mov eax, dword [0x40632c]
add eax, 2
push eax
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0x1000
mov dword [0x406298], eax
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
cmp dword [0x406298], 0
mov dword [ebp - 0x14], eax
je 0x4044c5
test eax, eax
je 0x4044c5
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push dword [ebp - 8]
mov dword [ebp - 0x20], eax
call dword [sym.imp.KERNEL32.dll_LocalLock]
push 0
mov dword [ebp - 0x30], eax
push 0
mov eax, dword [0x406004]
push 0xba
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [0x406354], 0
mov dword [ebp - 0x34], eax
jne 0x404420
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x34], eax
jle 0x404420
push 0
inc dword [ebp - 0x28]
push eax
push 0xbb
push dword [0x406004]
call dword [sym.imp.USER32.dll_SendMessageA]
mov esi, eax
push 0
push esi
mov eax, dword [0x406004]
push 0xc1
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push dword [0x40635c]
push dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x30]
xor edi, edi
add eax, esi
push eax
call fcn.00404540
cmp dword [0x40635c], eax
mov esi, eax
jge 0x4042c0
mov dword [ebp - 0x24], 1
cmp dword [ebp - 0x10], 0
jne 0x4042ea
push ebx
call dword [sym.imp.GDI32.dll_StartPage]
mov dword [ebp - 4], eax
test eax, eax
jl 0x4044cc
push dword [ebp - 0xc]
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push 0
push ebx
call fcn.00403cd4
cmp dword [0x40635c], esi
jge 0x404385
mov eax, dword [ebp - 0x20]
add eax, edi
mov dword [ebp - 4], eax
mov eax, dword [0x40635c]
add eax, dword [ebp - 0x20]
add eax, edi
push eax
push dword [ebp - 4]
call fcn.00403d96
mov ecx, dword [0x40634c]
test eax, eax
push dword [0x406360]
push 0x406344
mov eax, dword [0x40635c]
push 1
je 0x40435a
dec eax
push eax
mov eax, dword [ebp - 0x18]
push dword [ebp - 4]
sub eax, ecx
add eax, dword [0x406364]
push eax
push dword [0x406360]
push ebx
call dword [sym.imp.USER32.dll_TabbedTextOutA]
mov ecx, dword [0x40635c]
sub esi, ecx
lea edi, [ecx + edi - 1]
inc esi
jmp 0x4043bd
push eax
mov eax, dword [ebp - 0x18]
push dword [ebp - 4]
sub eax, ecx
add eax, dword [0x406364]
push eax
push dword [0x406360]
push ebx
call dword [sym.imp.USER32.dll_TabbedTextOutA]
add edi, dword [0x40635c]
sub esi, dword [0x40635c]
jmp 0x4043bd
mov eax, dword [0x406360]
push eax
push 0x406344
push 1
mov eax, dword [ebp - 0x20]
push esi
add eax, edi
push eax
mov eax, dword [ebp - 0x18]
sub eax, dword [0x40634c]
add eax, dword [0x406364]
push eax
push dword [0x406360]
push ebx
call dword [sym.imp.USER32.dll_TabbedTextOutA]
mov dword [ebp - 0x24], 0
mov eax, dword [0x40634c]
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
add dword [ebp - 0x18], eax
cmp dword [ebp - 0x2c], ecx
jg 0x404409
push 1
push ebx
call fcn.00403cd4
push ebx
call dword [sym.imp.GDI32.dll_EndPage]
mov dword [ebp - 4], eax
test eax, eax
jl 0x4044cc
mov eax, dword [0x40634c]
inc dword [0x406348]
mov dword [ebp - 0x10], 0
cmp dword [ebp - 0x24], 0
mov dword [ebp - 0x18], eax
jne 0x4042c0
cmp dword [ebp - 0x24], 0
jne 0x4042ea
cmp dword [0x406354], 0
je 0x40425f
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_LocalUnlock]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_LocalFree]
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x10], 0
je 0x404459
push 1
push ebx
call fcn.00403cd4
xor esi, esi
cmp dword [0x406354], esi
jne 0x404476
cmp dword [ebp - 0x10], esi
jle 0x404476
push ebx
call dword [sym.imp.GDI32.dll_EndPage]
mov dword [ebp - 4], eax
cmp eax, esi
jl 0x4044cc
cmp dword [0x406354], 0
jne 0x40448b
push ebx
call dword [sym.imp.GDI32.dll_EndDoc]
call fcn.00404615
push ebx
call dword [sym.imp.GDI32.dll_DeleteDC]
push dword [ebp - 0xc]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [0x40629c]
xor esi, esi
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [0x406298]
mov dword [0x40629c], esi
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
xor eax, eax
mov dword [0x406298], esi
jmp 0x404539
mov dword [ebp - 4], 0xfffffffb
cmp dword [ebp - 0x1c], 0
je 0x4044dc
push dword [ebp - 0x1c]
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push ebx
call dword [sym.imp.GDI32.dll_AbortDoc]
push ebx
call dword [sym.imp.GDI32.dll_DeleteDC]
push dword [ebp - 0xc]
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [0x406354], 0
jne 0x404501
call fcn.00404615
mov eax, dword [0x406298]
xor esi, esi
test eax, eax
je 0x404519
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [0x406298], esi
cmp dword [ebp - 0x14], 0
je 0x404528
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [ebp - 4]
jmp 0x404539
push ebx
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret