Function at 0x4be470
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x542644
mov eax, dword fs:[0]
push eax
sub esp, 0x258
mov eax, dword [0x5d3b14]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x238], ecx
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x250], eax
call dword [0x555380]
mov ecx, dword [eax + 0x27ac]
add eax, 0x27a8
mov edi, dword [ecx + 0xc]
add edi, eax
mov eax, dword [edi + 4]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x55604c]
lea ecx, [edi + 4]
call esi
mov al, byte [eax]
test al, al
je 0x4be85a
mov edi, dword [ebp - 0x238]
cmp dword [edi + 0x1458], 4
je 0x4be85a
mov eax, dword [edi + 4]
xorps xmm0, xmm0
movlpd qword [ebp - 0x25c], xmm0
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x25c], 0
mov dword [ebp - 4], 0
push eax
mov dword [ebp - 0x258], eax
call dword [sym.imp.USER32.dll_GetWindowDC]
mov esi, eax
mov dword [ebp - 0x23c], esi
mov dword [ebp - 0x25c], esi
mov dword [ebp - 4], 1
lea eax, [ebp - 0x2c]
push eax
push dword [edi + 4]
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
neg ecx
neg eax
push ecx
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x24c], 0
mov byte [ebp - 4], 2
mov ecx, dword [0x555c90]
call dword [0x5556a4]
mov ecx, dword [edi + 0x158c]
push eax
add ecx, ecx
push ecx
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
mov edi, eax
push edi
push esi
mov dword [ebp - 0x24c], edi
call dword [sym.imp.GDI32.dll_SelectObject]
push 5
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push esi
call dword [sym.imp.GDI32.dll_Rectangle]
mov ecx, dword [0x5556b4]
mov esi, dword [ebp - 0x238]
call dword [0x5556a4]
push eax
lea eax, [esi + 0x1590]
push eax
lea ecx, [ebp - 0x25c]
call fcn.004b9040
push dword [esi + 0x157c]
push 0x31
call dword [0x555650]
push dword [esi + 0x157c]
mov dword [ebp - 0x248], eax
push 0x31
call dword [0x555650]
push 0
push eax
push dword [ebp - 0x248]
mov dword [ebp - 0x240], eax
push 1
push dword [0x5dee28]
call fcn.0050b7a0
add esp, 0x24
mov ecx, dword [ebp - 0x238]
mov esi, eax
push 3
push 0
push 0
mov eax, dword [ecx + 0x1580]
sub eax, dword [ebp - 0x240]
push dword [ebp - 0x240]
cdq
push dword [ebp - 0x248]
sub eax, edx
mov edx, dword [ecx + 0x1594]
mov ecx, dword [ecx + 0x1590]
sar eax, 1
push esi
add edx, eax
add ecx, eax
push edx
push ecx
push dword [ebp - 0x23c]
call dword [sym.imp.USER32.dll_DrawIconEx]
push esi
call dword [sym.imp.USER32.dll_DestroyIcon]
mov esi, dword [ebp - 0x238]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
lea ecx, [ebp - 0x241]
mov dword [ebp - 0x14], 0
push ecx
inc eax
lea ecx, [ebp - 0x1c]
xorps xmm0, xmm0
push eax
movq qword [ebp - 0x1c], xmm0
call fcn.00455260
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
sub ecx, eax
sar ecx, 1
push ecx
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov esi, dword [ebp - 0x23c]
push 1
push esi
call dword [sym.imp.GDI32.dll_SetBkMode]
mov eax, dword [ebp - 0x238]
mov ecx, dword [0x5556cc]
cmp byte [eax + 0x15d5], 0
jne 0x4be6f5
mov ecx, dword [0x5556d0]
call dword [0x5556a4]
push eax
push esi
call dword [sym.imp.GDI32.dll_SetTextColor]
mov eax, dword [ebp - 0x238]
push dword [eax + 4]
call fcn.004193b0
push eax
mov dword [ebp - 0x254], eax
lea eax, [ebp - 0x234]
push eax
call dword [0x5556f4]
add esp, 0xc
test eax, eax
je 0x4be885
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x240], 0
mov byte [ebp - 4], 4
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov esi, eax
push esi
push dword [ebp - 0x23c]
mov dword [ebp - 0x240], esi
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x238]
push 0x60
push dword [ebp - 0x254]
movups xmm0, xmmword [eax + 0x1590]
push 0xa
movups xmmword [ebp - 0x3c], xmm0
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x60
push dword [ebp - 0x254]
mov dword [ebp - 0x260], eax
push 0xa
call dword [sym.imp.KERNEL32.dll_MulDiv]
add eax, dword [ebp - 0x260]
add eax, dword [ebp - 0x248]
add dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push 0x24
push eax
push 0xffffffffffffffff
push dword [ebp - 0x1c]
push dword [ebp - 0x23c]
call dword [sym.imp.USER32.dll_DrawTextW]
push dword [ebp - 0x264]
push dword [ebp - 0x23c]
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebp - 0x238]
call fcn.004b8b60
mov byte [ebp - 4], 3
test esi, esi
je 0x4be806
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
xor ecx, ecx
test eax, eax
cmovne esi, ecx
mov dword [ebp - 0x240], esi
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.00431480
mov byte [ebp - 4], 1
test edi, edi
je 0x4be82e
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
xor ecx, ecx
test eax, eax
cmovne edi, ecx
mov dword [ebp - 0x24c], edi
mov dword [ebp - 4], 5
push dword [ebp - 0x23c]
mov dword [ebp - 0x25c], 0
push dword [ebp - 0x250]
call dword [sym.imp.USER32.dll_ReleaseDC]
mov dword [ebp - 4], 0xffffffff
jmp 0x4be866
mov eax, dword [ebp - 0x250]
mov dword [eax], 0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005150f0
mov esp, ebp
pop ebp
ret 0x10
push 0x16bc
push str.bora_apps_vmuiWin32_vmuiFrame.cpp
push str.VERIFY__s:_d_n
call fcn.005167b3
int3