Function at 0x4018c0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x61c
mov eax, dword [0x424040]
xor eax, esp
mov dword [esp + 0x618], eax
push ebx
push esi
push edi
call fcn.0040947d
cmp dword [eax], 4
je 0x401917
push 0
push str.Error
push str.Invalid_argument
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, 0x80004005
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x618]
xor ecx, esp
call fcn.0040279b
mov esp, ebp
pop ebp
ret 0x10
call fcn.00409483
mov eax, dword [eax]
push dword [eax + 4]
call fcn.0040a19d
add esp, 4
mov dword [0x425690], eax
push str.Exclude
call fcn.00401310
call fcn.00409483
mov eax, dword [eax]
push dword [eax + 8]
call fcn.0040a19d
add esp, 4
mov edi, eax
call fcn.00409483
mov ecx, dword [eax]
push dword [ecx + 0xc]
call fcn.0040a15e
add esp, 4
mov ebx, eax
push str.ExcludeCaptureDll32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [esp + 0x10], eax
test eax, eax
jne 0x40198e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Failed__d__to_LoadLibrary_n
push 3
call fcn.004011a0
add esp, 0xc
jmp 0x401c8f
push str.CallWndProc
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
jne 0x4019bb
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Failed__d__to_GetProcAddress_CallWndProc__n
push 3
call fcn.004011a0
add esp, 0xc
jmp 0x401c8f
push 0
push edi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push eax
push dword [esp + 0x14]
push esi
push 4
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
mov dword [esp + 0xc], eax
test eax, eax
jne 0x4019f5
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Failed__d__to_SetWindowsHookEx_n
push 3
call fcn.004011a0
add esp, 0xc
jmp 0x401c8f
mov ecx, str.IncludeCapture
test ebx, ebx
mov eax, str.ExcludeCapture
cmove eax, ecx
push eax
push edi
push str._p:__s..._n
push 1
call fcn.004011a0
add esp, 0x10
xor esi, esi
push ebx
push 0x1317e5f
push 0
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0xffffffff
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowDisplayAffinity]
test eax, eax
je 0x401a50
test ebx, ebx
je 0x401a49
cmp dword [esp + 0x10], 0x11
jmp 0x401a4e
cmp dword [esp + 0x10], 0
je 0x401a6e
push edi
push str._p:_..._n
push 1
call fcn.004011a0
add esp, 0xc
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
inc esi
cmp esi, 0xa
jb 0x401a17
push dword [esp + 0xc]
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0xffffffff
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowDisplayAffinity]
test eax, eax
jne 0x401aab
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Failed__d__to_GetWindowDisplayAffinity_n
push 3
call fcn.004011a0
add esp, 0xc
jmp 0x401c8f
test ebx, ebx
je 0x401b83
cmp dword [esp + 0x14], 0x11
jne 0x401acf
push edi
push str._p:_Success_to_Exclude_n
push 1
call fcn.004011a0
add esp, 0xc
jmp 0x401c8f
push 0x200
lea eax, [esp + 0x21c]
push 0
push eax
call fcn.004043f0
add esp, 0xc
lea eax, [esp + 0x18]
push 0x200
push 0
push eax
call fcn.004043f0
add esp, 0xc
lea eax, [esp + 0x418]
push 0x208
push 0
push eax
call fcn.004043f0
add esp, 0xc
lea eax, [esp + 0x218]
push pe_nt_image_headers32
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowTextW]
push pe_nt_image_headers32
lea eax, [esp + 0x1c]
push eax
push edi
call dword [sym.imp.USER32.dll_GetClassNameW]
lea edx, [esp + 0x418]
mov ecx, edi
call fcn.00401800
mov edx, edi
lea ecx, [esp + 0x10]
call fcn.004015e0
mov edx, edi
lea ecx, [esp + 0xc]
mov esi, dword [eax]
call fcn.00401360
lea ecx, [esp + 0x418]
push ecx
push esi
push dword [eax]
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x228]
push eax
push dword [esp + 0x28]
push edi
push str._p:_Failed_to_Exclude:__d__Text_ls__Class_ls__ExStyle_s__Style_s__ModuleFileName_ls_n
jmp 0x401c4e
cmp dword [esp + 0x14], 0
jne 0x401b9f
push edi
push str._p:_Success_to_Include_n
push 1
call fcn.004011a0
add esp, 0xc
jmp 0x401c8f
push 0x200
lea eax, [esp + 0x1c]
push 0
push eax
call fcn.004043f0
add esp, 0xc
lea eax, [esp + 0x218]
push 0x200
push 0
push eax
call fcn.004043f0
add esp, 0xc
lea eax, [esp + 0x418]
push 0x208
push 0
push eax
call fcn.004043f0
add esp, 0xc
lea eax, [esp + 0x18]
push pe_nt_image_headers32
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowTextW]
push pe_nt_image_headers32
lea eax, [esp + 0x21c]
push eax
push edi
call dword [sym.imp.USER32.dll_GetClassNameW]
lea edx, [esp + 0x418]
mov ecx, edi
call fcn.00401800
mov edx, edi
lea ecx, [esp + 0x10]
call fcn.004015e0
mov edx, edi
lea ecx, [esp + 0xc]
mov esi, dword [eax]
call fcn.00401360
lea ecx, [esp + 0x418]
push ecx
push esi
push dword [eax]
lea eax, [esp + 0x224]
push eax
lea eax, [esp + 0x28]
push eax
push dword [esp + 0x28]
push edi
push str._p:_Failed_to_Include:__d__Text_ls__Class_ls__ExStyle_s__Style_s__ModuleFileName_ls_n
push 3
call fcn.004011a0
mov edx, dword [esp + 0x30]
or esi, 0xffffffff
mov eax, esi
add edx, 0xfffffff0
add esp, 0x24
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x401c76
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [esp + 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x401c8f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [esp + 0x624]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0040279b
mov esp, ebp
pop ebp
ret 0x10