Function at 0x40f7a0
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x50
mov eax, dword [0x445030]
xor eax, esp
mov dword [esp + 0x4c], eax
push ebx
push ebp
mov ebp, dword [esp + 0x5c]
push esi
push edi
mov eax, ebp
call fcn.00412630
mov bl, al
mov eax, dword [ebp + 0x24]
push 0xfffffffffffffff0
push eax
mov byte [esp + 0x1f], bl
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 0x400
push eax
mov eax, dword [ebp + 0x24]
push 0xfffffffffffffff0
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov eax, dword [ebp + 0x24]
test eax, eax
je 0x40f7f9
lea esi, [ebp + 0xb8]
mov ebx, eax
call fcn.004097a0
mov bl, byte [esp + 0x17]
mov edi, dword [sym.imp.COMCTL32.dll_ImageList_Create]
push 0x14
push 0x14
push 0x19
push 0x10
push 0x10
call edi
mov dword [ebp + 0x13c], eax
mov dword [ebp + 0x4c], 0x19
test bl, bl
je 0x40fb7c
mov eax, dword [ebp + 4]
push 0x5600194c
xor esi, esi
push 0xcb
push eax
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], 0x3e8
mov dword [esp + 0x50], 0x1a
call fcn.00405a10
add esp, 0xc
push 0x28
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp + 0xb4], eax
mov ecx, dword [ebp + 0x24]
push 0x1331
push ecx
call esi
mov edx, dword [ebp + 0xb4]
push 1
push 0
push 0x454
push edx
call esi
mov eax, dword [0x4487c8]
push 0xe6
push eax
call dword [sym.imp.USER32.dll_LoadBitmapW]
push 8
push 8
push 0xff
push 0x10
push 0x10
mov ebx, eax
call edi
mov dword [ebp + 0x14c], eax
test eax, eax
je 0x40fa7f
push 0xffffff
push ebx
mov ecx, eax
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
mov edx, dword [ebp + 0x14c]
mov eax, dword [ebp + 0xb4]
push edx
push 0
push 0x430
push eax
call esi
xor eax, eax
lea edx, [esp + 0x18]
push edx
push 0x7d01
mov dword [esp + 0x52], eax
mov dword [esp + 0x56], eax
mov dword [esp + 0x5a], eax
mov dword [esp + 0x5e], eax
mov word [esp + 0x62], ax
mov eax, dword [ebp + 0xb4]
push 0x440
xor ecx, ecx
push eax
mov word [esp + 0x58], cx
mov dword [esp + 0x28], 0x20
mov dword [esp + 0x2c], 0xd
mov byte [esp + 0x39], 0x18
mov byte [esp + 0x38], 4
mov dword [esp + 0x34], 9
call esi
mov edx, dword [ebp + 0xb4]
lea ecx, [esp + 0x18]
push ecx
push 0x8039
push 0x440
push edx
mov dword [esp + 0x34], 0x13
call esi
mov ecx, dword [ebp + 0xb4]
lea eax, [esp + 0x18]
push eax
push 0x104
push 0x440
push ecx
mov dword [esp + 0x34], 5
call esi
mov eax, dword [ebp + 0xb4]
lea edx, [esp + 0x18]
push edx
push 0x8005
push 0x440
push eax
mov dword [esp + 0x34], 2
mov byte [esp + 0x38], 0
call esi
mov edx, dword [ebp + 0xb4]
lea ecx, [esp + 0x18]
push ecx
push 0xe146
push 0x440
push edx
mov dword [esp + 0x34], 8
mov byte [esp + 0x38], 4
mov byte [esp + 0x39], 0x90
call esi
lea eax, [esp + 0x48]
mov dword [esp + 0x30], eax
mov dword [esp + 0x1c], 0xb
mov byte [esp + 0x29], 0xd0
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x34], 0xa
xor eax, eax
movzx ecx, word [eax + 0x43f36c]
mov word [esp + eax + 0x48], cx
add eax, 2
test cx, cx
jne 0x40f9e0
mov edx, dword [ebp + 0xb4]
lea ecx, [esp + 0x18]
push ecx
push 0x803b
push 0x440
push edx
call esi
mov edx, dword [esp + 0x30]
mov ecx, 0x43f37c
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x40fa15
mov ecx, dword [ebp + 0xb4]
lea eax, [esp + 0x18]
push eax
push 0x803c
push 0x440
push ecx
call esi
mov edx, dword [esp + 0x30]
mov ecx, 0x43f38c
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x40fa47
mov eax, dword [ebp + 0xb4]
lea edx, [esp + 0x18]
push edx
push 0x803d
push 0x440
push eax
call esi
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
test eax, eax
je 0x40fa95
xor ebx, ebx
jmp 0x40fa95
mov ecx, dword [ebp + 4]
push 0x10
push 0x43f39c
push 0x43f3a4
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, dword [ebp + 0x84]
mov edi, dword [sym.imp.USER32.dll_IsWindow]
push edx
call edi
test eax, eax
je 0x40fb3d
mov ecx, dword [ebp + 0x84]
lea eax, [esp + 0x38]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp + 0x24]
push eax
call edi
test eax, eax
je 0x40fb17
mov edx, dword [esp + 0x40]
sub edx, dword [esp + 0x38]
mov eax, dword [ebp + 0x24]
sub edx, dword [ebp + 0x144]
push 4
push 0x19
add edx, 0x64
push edx
push 1
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, dword [esp + 0x40]
sub ecx, dword [esp + 0x38]
mov edi, dword [ebp + 0x24]
sub ecx, dword [ebp + 0x144]
push 0x1c
add ecx, 0x64
push ecx
lea edx, [ebp + 0x80]
push edx
call fcn.00431fa0
mov edi, dword [sym.imp.USER32.dll_IsWindow]
mov eax, dword [ebp + 0xb4]
push eax
call edi
test eax, eax
je 0x40fb3d
mov edi, dword [ebp + 0xb4]
push 0x1a
push 0x320
lea eax, [ebp + 0x80]
push eax
call fcn.00431fa0
mov ecx, dword [ebp + 0x24]
push 0
push 0
push 0x132d
push ecx
call esi
push 0
push 0
push 0x418
push eax
call esi
test ebx, ebx
je 0x40fb63
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov al, byte [esp + 0x17]
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x4c]
xor ecx, esp
call fcn.0041b3f1
add esp, 0x50
ret 4
mov ecx, dword [esp + 0x5c]
pop edi
pop esi
pop ebp
mov al, bl
pop ebx
xor ecx, esp
call fcn.0041b3f1
add esp, 0x50
ret 4