Function at 0x435f90
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x81c
push ebx
push ebp
push esi
push edi
push 0x400
mov edi, ecx
mov ecx, dword [edi + 0xb8]
lea eax, [esp + 0x30]
push eax
push ecx
call dword [sym.imp.user32.dll_GetWindowTextW]
mov eax, dword [edi + 0xb8]
lea edx, [esp + 0x10]
push edx
xor ebp, ebp
push eax
mov word [esp + 0x832], bp
call dword [sym.imp.user32.dll_GetClientRect]
mov ecx, dword [edi + 0x20]
cmp dword [ecx + 0x16c], ebp
mov ebx, dword [sym.imp.user32.dll_SendMessageW]
jne 0x43600e
mov esi, dword [esp + 0x830]
push ebp
mov eax, ecx
mov edx, dword [eax + 0x10]
push 1
push edx
lea ecx, [eax + 0xf0]
mov eax, dword [eax + 0xac]
push ecx
lea edx, [esp + 0x20]
push edx
push esi
push eax
call fcn.00412610
add esp, 0x1c
jmp 0x43602c
mov ecx, edi
call fcn.00418250
mov ecx, dword [edi + 0xb8]
mov esi, dword [esp + 0x830]
push ecx
push esi
push 0x1795
push eax
call ebx
mov edx, dword [edi + 0xb8]
push ebp
push ebp
push 0x31
push edx
call ebx
push eax
push esi
call dword [sym.imp.gdi32.dll_SelectObject]
mov dword [esp + 0x24], eax
mov eax, dword [edi + 0x20]
mov eax, dword [eax + 0xec]
push eax
push esi
call dword [sym.imp.gdi32.dll_SetTextColor]
push 1
push esi
mov dword [esp + 0x30], eax
call dword [sym.imp.gdi32.dll_SetBkMode]
mov ecx, dword [edi + 0xb8]
push 0xfffffffffffffff0
push ecx
mov dword [esp + 0x28], eax
call dword [sym.imp.user32.dll_GetWindowLongW]
mov ebx, eax
test bl, 2
je 0x436082
mov ebp, 2
test bl, 1
je 0x43608c
mov ebp, 1
test bh, 2
je 0x436094
or ebp, 0x24
mov edx, ebx
and edx, 0xc
cmp dl, 0xc
jne 0x4360a3
or ebp, 0x20
jmp 0x4360a6
or ebp, 0x10
test bl, bl
jns 0x4360b0
or ebp, 0x800
mov eax, ebx
and eax, 0xb
cmp al, 0xb
jne 0x4360bc
or ebp, 0x20
mov ecx, dword [edi + 0xb8]
push ecx
call fcn.004257d0
add esp, 4
test eax, eax
je 0x4360d5
or ebp, 0x20000
test bh, 0x20
je 0x43611d
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push edx
mov edx, dword [esp + 0x14]
push eax
push ecx
push edx
push esi
call dword [sym.imp.gdi32.dll_IntersectClipRect]
mov edi, dword [edi + 0x20]
or ebp, 0x2010
push ebp
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.kernel32.dll_lstrlenW]
push eax
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x1c]
push edx
add edi, 0x170
jmp 0x436177
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x14]
push ecx
push edx
push eax
push esi
call dword [sym.imp.gdi32.dll_IntersectClipRect]
mov ecx, dword [edi + 0xb8]
push ecx
call dword [sym.imp.user32.dll_IsWindowEnabled]
test eax, eax
mov edi, dword [edi + 0x20]
lea edx, [esp + 0x2c]
push ebp
push edx
je 0x436160
call dword [sym.imp.kernel32.dll_lstrlenW]
add edi, 0x170
jmp 0x43616c
call dword [sym.imp.kernel32.dll_lstrlenW]
add edi, 0x180
push eax
lea eax, [esp + 0x34]
lea ecx, [esp + 0x18]
push eax
push ecx
push edi
push esi
call fcn.00411840
mov edx, dword [esp + 0x40]
add esp, 0x18
push edx
push esi
call dword [sym.imp.gdi32.dll_SetTextColor]
mov eax, dword [esp + 0x24]
push eax
push esi
call dword [sym.imp.gdi32.dll_SelectObject]
mov ecx, dword [esp + 0x20]
push ecx
push esi
call dword [sym.imp.gdi32.dll_SetBkMode]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x81c
ret 4