Function at 0x1004963a
Capabilities:
Get graphical window text

Disassembly:
push 0x40
mov eax, 0x1013b6e4
call fcn.101018b2
mov ebx, ecx
mov esi, dword [ebp + 8]
mov dword [ebp - 0x14], esi
xor edi, edi
test byte [ebx + 0x34], 4
mov dword [ebp - 4], edi
je 0x10049705
cmp dword [ebx + 0x2c], edi
je 0x10049705
lea eax, [ebp - 0x2c]
push eax
push dword [ebx + 4]
mov dword [ebx + 0x2c], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], edi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x2c]
push dword [ebx + 4]
mov esi, dword [sym.imp.USER32.dll_GetParent]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x18], eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x1c]
mov ecx, eax
sub ecx, dword [ebp - 0x2c]
add eax, 0xfffffffe
add dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x28]
add dword [ebp - 0x24], 2
add dword [ebp - 0x20], ecx
add dword [ebp - 0x20], 2
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x18]
push edi
push dword [ebx + 4]
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
add eax, 0xfffffffe
mov dword [ebp - 0x28], eax
call edi
push dword [ebx + 4]
call esi
push 1
lea ecx, [ebp - 0x2c]
push ecx
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
push dword [ebx + 4]
call esi
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
push 5
push dword [ebx + 4]
call edi
jmp 0x10049881
lea eax, [ebp - 0x4c]
push eax
push dword [ebx + 4]
mov dword [ebx + 0x2c], 1
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x40], edi
call dword [sym.imp.USER32.dll_GetClientRect]
test byte [ebx + 0x34], 4
jne 0x1004973a
push dword [ebx + 0x40]
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x14]
call fcn.10048ef0
push esi
call dword [sym.imp.GDI32.dll_SaveDC]
mov eax, dword [0x1019a028]
mov dword [ebp - 0x10], eax
mov esi, 0x400
push esi
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.10001a82
push esi
push eax
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetWindowTextW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
call fcn.10001c5b
mov eax, dword [ebp - 0x10]
cmp dword [eax - 8], edi
je 0x10049879
test byte [ebx + 0x34], 1
je 0x1004978d
push dword [ebx + 0x30]
call fcn.10048dcd
pop ecx
jmp 0x10049790
mov eax, dword [ebx + 0x30]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push eax
push dword [ebp + 8]
mov dword [ebp - 0x18], eax
call esi
test byte [ebx + 0x34], 4
je 0x100497b2
push 1
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_SetBkMode]
jmp 0x100497be
push dword [ebx + 0x3c]
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_SetBkColor]
push 5
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebp + 8]
call esi
cmp dword [ebx + 0x4c], edi
je 0x100497d6
push dword [ebx + 0x38]
jmp 0x100497df
push 0x10
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_SetTextColor]
mov esi, dword [sym.imp.USER32.dll_DrawTextW]
push 0x420
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x30], edi
mov edi, dword [ebp - 0x10]
lea eax, [ebp - 0x3c]
push eax
push dword [edi - 8]
push edi
push dword [ebp + 8]
call esi
push 0x20
lea eax, [ebp - 0x3c]
push eax
push dword [edi - 8]
push edi
push dword [ebp + 8]
call esi
test byte [ebx + 0x34], 2
je 0x1004985f
mov eax, dword [ebx + 0x44]
add eax, dword [ebp - 0x30]
mov ecx, dword [ebx + 0x48]
lea esi, [ebp - 0x3c]
lea edi, [ebp - 0x2c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add ecx, eax
cmp dword [ebx + 0x4c], 0
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x20], ecx
je 0x1004984a
push dword [ebx + 0x38]
jmp 0x10049853
push 0x10
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x14]
call fcn.10048ef0
test byte [ebx + 0x34], 1
je 0x1004986e
push dword [ebp - 0x18]
call dword [sym.imp.GDI32.dll_DeleteObject]
push 0xffffffffffffffff
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_RestoreDC]
lea ecx, [ebp - 0x10]
call fcn.100015d9
call fcn.1010198a
ret 4