Function at 0x40fdcc
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x844
push ebx
push esi
mov esi, ecx
push edi
mov bl, byte [esi + 0x20]
push dword [esi + 4]
and bl, 1
mov byte [ebp - 1], bl
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x40fe00
push 0x11
call dword [sym.imp.USER32.dll_GetSysColor]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x34]
jmp 0x40fe37
mov eax, dword [esi + 0x40]
mov ecx, eax
and ecx, 4
cmp cl, 4
jne 0x40fe19
mov eax, dword [esi + 0x2c]
mov dword [ebp - 8], 0x3f2f00
jmp 0x40fe37
test bl, bl
jne 0x40fe26
and eax, 2
cmp al, 2
je 0x40fe2d
jmp 0x40fe3f
and eax, 1
cmp al, 1
jne 0x40fe3f
mov eax, dword [esi + 0x30]
mov dword [ebp - 8], 0x835800
cmp eax, 0xffffffff
mov dword [ebp - 0xc], eax
jne 0x40fe4c
mov eax, dword [esi + 0x28]
mov dword [ebp - 8], 0x3a3320
mov dword [ebp - 0xc], eax
mov eax, dword [esi + 0x40]
xor ebx, ebx
and eax, 4
cmp al, 4
jne 0x40fe67
test byte [esi + 0x20], 6
je 0x40fe67
cmp dword [esi + 0x2c], 0xffffffff
jne 0x40fe67
push 1
pop ebx
lea eax, [ebp - 0x10]
and dword [ebp - 0x14], 0
and dword [ebp - 0x10], 0
push eax
lea eax, [ebp - 0x14]
push eax
push dword [esi + 0x24]
call dword [sym.imp.COMCTL32.dll_ImageList_GetIconSize]
xor eax, eax
lea edi, [ebp - 0x20]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebp - 0x14]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
push 2
push edi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], eax
call dword [sym.imp.GDI32.dll_GetCurrentObject]
push eax
lea eax, [ebp - 0x24]
push eax
push edi
call dword [sym.imp.USER32.dll_FillRect]
push 0
push ebx
push ebx
push edi
push dword [ebp - 0xc]
push dword [esi + 0x24]
call dword [sym.imp.COMCTL32.dll_ImageList_Draw]
test byte [esi + 0x20], 6
mov ebx, dword [sym.imp.USER32.dll_GetClientRect]
je 0x40ff60
lea eax, [ebp - 0x34]
push eax
push dword [esi + 4]
call ebx
mov eax, dword [esi + 0x40]
mov ecx, eax
and ecx, 4
cmp cl, 4
jne 0x40fefa
mov eax, dword [esi + 0x20]
push 0xf
not eax
and eax, 2
shl eax, 2
or al, 2
jmp 0x40ff15
cmp byte [ebp - 1], 0
je 0x40ff07
and eax, 1
cmp al, 1
jne 0x40ff21
mov eax, dword [esi + 0x20]
push 0xf
not eax
and eax, 2
or al, 8
shr eax, 1
push eax
lea eax, [ebp - 0x34]
push eax
push edi
call dword [sym.imp.USER32.dll_DrawEdge]
cmp byte [ebp - 1], 0
jne 0x40ff60
mov eax, dword [esi + 0x40]
and eax, 2
cmp al, 2
jne 0x40ff60
push 0x2e
call dword [sym.imp.USER32.dll_GetSystemMetrics]
neg eax
shl eax, 1
push eax
push 0x2d
call dword [sym.imp.USER32.dll_GetSystemMetrics]
neg eax
shl eax, 1
push eax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_InflateRect]
lea eax, [ebp - 0x34]
push eax
push edi
call dword [sym.imp.USER32.dll_DrawFocusRect]
lea eax, [ebp - 0x44]
push eax
push dword [esi + 4]
call ebx
and word [ebp - 0x844], 0
push dword [ebp - 8]
mov ecx, 0x1ff
xor eax, eax
push dword [ebp + 8]
lea edi, [ebp - 0x842]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
call dword [sym.imp.GDI32.dll_SetTextColor]
lea eax, [ebp - 0x844]
push 0x400
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
jle 0x410035
push 1
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_SetBkMode]
push 0
push 0
push 0x31
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ebx, dword [sym.imp.GDI32.dll_SelectObject]
push eax
push dword [ebp + 8]
call ebx
push 1
mov dword [ebp - 8], eax
pop edi
push 0xfffffffffffffff0
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetWindowLongW]
test ah, 3
je 0x40ffea
push edi
jmp 0x40fffa
test ah, 1
je 0x40fff3
xor edi, edi
jmp 0x40fffb
test ah, 2
je 0x40fffb
push 2
pop edi
mov eax, dword [esi + 0x40]
and eax, 4
cmp al, 4
jne 0x410013
push 1
lea eax, [ebp - 0x44]
push 1
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
or edi, 0x24
lea eax, [ebp - 0x44]
push edi
push eax
lea eax, [ebp - 0x844]
push 0xffffffffffffffff
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_DrawTextW]
push dword [ebp - 8]
push dword [ebp + 8]
call ebx
pop edi
pop esi
pop ebx
leave
ret 4