Function at 0x40139c
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x446cc4
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1c84
call fcn.0042a390
mov eax, dword [0x45a400]
xor eax, ebp
mov dword [ebp - 0x18], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c3c], eax
add eax, 4
push dword [eax]
mov dword [ebp - 0x1c40], eax
call dword [sym.imp.USER32.dll_GetParent]
lea esi, [ebp - 0x1c90]
mov dword [ebp - 0x1c5c], eax
call fcn.00416b80
and dword [ebp - 4], 0
mov esi, dword [ebp - 0x1c3c]
mov byte [ebp - 4], 1
mov eax, dword [esi + 0x1d8]
mov ecx, dword [eax + 0x18]
mov eax, dword [eax + 0x20]
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0x70
push 0
mov dword [ebp - 0x1c2c], ecx
mov dword [ebp - 0x1c24], eax
call edi
mov ebx, dword [sym.imp.USER32.dll_LoadBitmapA]
push eax
call ebx
push 0x71
push 0
mov dword [esi + 0x1a4], eax
call edi
push eax
call ebx
push 0x72
push 0
mov dword [esi + 0x1a8], eax
call edi
push eax
call ebx
push 0x73
push 0
mov dword [esi + 0x1ac], eax
call edi
push eax
call ebx
push 0x74
push 0
mov dword [esi + 0x1b0], eax
call edi
push eax
call ebx
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [esi + 0x1b8], eax
mov eax, dword [ebp - 0x1c40]
push 0x3fa
push dword [eax]
call edi
add esi, 0x198
push 0
push esi
push 0xc
mov dword [ebp - 0x1c7c], esi
pop ebx
lea esi, [ebp - 0x1c44]
mov dword [ebp - 0x1c44], eax
call fcn.004065e0
mov eax, dword [ebp - 0x1c40]
pop ecx
pop ecx
push 0x3f2
push dword [eax]
call edi
mov dword [ebp - 0x1c50], eax
mov eax, dword [ebp - 0x1c3c]
add eax, 0x19c
push 0
push eax
push 0xa
pop ebx
lea esi, [ebp - 0x1c50]
mov dword [ebp - 0x1c6c], eax
call fcn.004065e0
pop ecx
mov esi, dword [ebp - 0x1c40]
pop ecx
push 0x3f8
push dword [esi]
call edi
push 0x3f9
push dword [esi]
mov dword [ebp - 0x1c58], eax
call edi
push 0x3f7
push dword [esi]
mov dword [ebp - 0x1c64], eax
call edi
mov ebx, dword [ebp - 0x1c3c]
push 0x3023
push dword [ebp - 0x1c5c]
mov dword [ebx + 0x190], eax
call edi
push 0x3f5
push dword [esi]
mov dword [ebx + 0x194], eax
call edi
push 0x3f6
push dword [esi]
mov dword [ebp - 0x1c48], eax
mov dword [ebp - 0x1c78], eax
call edi
push 0x3f7
push dword [esi]
mov dword [ebp - 0x1c4c], eax
mov dword [ebp - 0x1c68], eax
call edi
lea edi, [ebx + 0x1cc]
lea ecx, [ebp - 0x1c48]
mov dword [ebp - 0x1c54], eax
mov dword [ebp - 0x1c74], eax
mov dword [ebp - 0x1c60], edi
call fcn.00408270
mov eax, dword [edi]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 1
push eax
push 0x30
push dword [ebp - 0x1c48]
call esi
mov eax, dword [edi]
push 1
push eax
push 0x30
push dword [ebp - 0x1c4c]
call esi
mov edi, dword [edi]
push 1
push edi
push 0x30
push dword [ebp - 0x1c54]
call esi
mov edi, dword [ebp - 0x1c40]
mov ecx, ebx
mov eax, dword [ecx + 0x1c4]
sub eax, dword [ecx + 0x1bc]
mov ebx, 0xc8
sub eax, dword [ebp - 0x1c24]
lea ecx, [ebp - 0x1c4c]
add eax, dword [ebp - 0x1c2c]
cdq
sub eax, edx
sar eax, 1
sub ebx, eax
lea eax, [ebp - 0x1c48]
push eax
call fcn.004081d9
pop ecx
mov edx, edi
lea ecx, [ebx + 0x14]
lea edi, [ebp - 0x1c44]
mov dword [ebp - 0x1c70], eax
call fcn.004080a2
mov edx, dword [ebp - 0x1c40]
lea ecx, [ebx + 0x14]
lea edi, [ebp - 0x1c50]
call fcn.004080a2
mov edx, dword [ebp - 0x1c40]
lea ecx, [ebx + 0x14]
lea edi, [ebp - 0x1c48]
call fcn.004080a2
mov edx, dword [ebp - 0x1c40]
lea ecx, [ebx + 0x14]
lea edi, [ebp - 0x1c58]
call fcn.004080a2
mov eax, dword [ebp - 0x1c70]
mov edx, dword [ebp - 0x1c40]
lea ebx, [eax + ebx + 0x14]
mov ecx, ebx
lea edi, [ebp - 0x1c4c]
call fcn.004080a2
mov edx, dword [ebp - 0x1c40]
mov ecx, ebx
lea edi, [ebp - 0x1c54]
call fcn.004080a2
mov edi, dword [ebp - 0x1c3c]
lea eax, [ebp - 0x1c44]
push eax
mov ecx, edi
call fcn.00402de8
lea eax, [ebp - 0x1c50]
push eax
mov ecx, edi
call fcn.00402de8
lea eax, [ebp - 0x1c48]
push eax
mov ecx, edi
call fcn.00402de8
lea eax, [ebp - 0x1c4c]
push eax
mov ecx, edi
call fcn.00402de8
lea eax, [ebp - 0x1c54]
push eax
mov ecx, edi
call fcn.00402de8
mov eax, dword [edi + 0x58]
mov eax, dword [eax + 4]
mov eax, dword [eax + 8]
lea ebx, [eax + 4]
mov ecx, ebx
mov dword [ebp - 0x1c40], ebx
call fcn.004199e0
mov ecx, ebx
mov byte [edi + 0x1b4], al
mov byte [edi + 0x1b5], al
mov byte [edi + 0x1b6], al
call fcn.004199e0
xor ecx, ecx
xor ebx, ebx
cmp al, bl
setne cl
push ebx
mov edi, 0xf1
mov eax, ecx
push eax
push edi
push dword [ebp - 0x1c78]
call esi
mov ecx, dword [ebp - 0x1c40]
call fcn.004199e0
xor ecx, ecx
cmp al, bl
setne cl
push ebx
mov eax, ecx
push eax
push edi
push dword [ebp - 0x1c68]
call esi
mov ecx, dword [ebp - 0x1c40]
call fcn.004199e0
xor ecx, ecx
cmp al, bl
setne cl
push ebx
mov eax, ecx
push eax
push edi
push dword [ebp - 0x1c74]
call esi
mov esi, dword [ebp - 0x1c3c]
call fcn.00401d3d
push 0x3ff
lea eax, [ebp - 0x1c1b]
push ebx
push eax
mov byte [ebp - 0x1c1c], bl
call fcn.0042a4a0
add esp, 0xc
push 0x400
lea eax, [ebp - 0x1c1c]
push eax
push dword [ebp - 0x1c44]
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x1c1c]
mov dword [ebp - 0x1c24], 0xf
mov dword [ebp - 0x1c28], ebx
mov byte [ebp - 0x1c38], bl
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4017b7
sub eax, esi
push eax
lea eax, [ebp - 0x1c1c]
push eax
lea ecx, [ebp - 0x1c38]
call fcn.0040366e
mov edi, dword [ebp - 0x1c7c]
mov ecx, dword [ebp - 0x1c3c]
lea eax, [ebp - 0x1c38]
push eax
lea esi, [ebp - 0x1c44]
mov byte [ebp - 4], 2
call fcn.00402d1d
push ebx
push 1
lea ecx, [ebp - 0x1c38]
mov byte [ebp - 4], 1
call fcn.00403a1b
lea eax, [ebp - 0x1c90]
push eax
push dword [ebp - 0x1c3c]
call fcn.00401fc6
mov ecx, dword [ebp - 0x1c3c]
call fcn.004012ca
mov esi, dword [ebp - 0x1c3c]
call fcn.0040123f
mov esi, 0x3ff
push esi
lea eax, [ebp - 0x181b]
push ebx
push eax
mov dword [ebp - 0x1c44], ebx
mov byte [ebp - 0x181c], bl
call fcn.0042a4a0
add esp, 0xc
push esi
lea eax, [ebp - 0x141b]
push ebx
push eax
mov byte [ebp - 0x141c], bl
call fcn.0042a4a0
mov edi, dword [sym.imp.USER32.dll_GetWindowTextA]
add esp, 0xc
push 0x400
lea eax, [ebp - 0x181c]
push eax
push dword [ebp - 0x1c58]
call edi
push 0x400
lea eax, [ebp - 0x141c]
push eax
push dword [ebp - 0x1c64]
call edi
lea eax, [ebp - 0x181c]
mov dword [ebp - 0x1c24], 0xf
mov dword [ebp - 0x1c28], ebx
mov byte [ebp - 0x1c38], bl
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4018b5
sub eax, esi
push eax
lea eax, [ebp - 0x181c]
push eax
lea ecx, [ebp - 0x1c38]
call fcn.0040366e
mov ecx, dword [ebp - 0x1c3c]
lea eax, [ebp - 0x1c38]
push eax
lea edx, [ebp - 0x1c44]
lea esi, [ebp - 0x1c58]
mov byte [ebp - 4], 3
call fcn.00402c4e
push ebx
push 1
lea ecx, [ebp - 0x1c38]
mov byte [ebp - 4], 1
call fcn.00403a1b
mov esi, dword [ebp - 0x1c3c]
mov ecx, esi
call fcn.00402599
lea eax, [esi + 0x78]
cmp eax, ebx
je 0x40191e
add esi, 0x7c
jmp 0x401920
xor esi, esi
mov ecx, dword [ebp - 0x1c3c]
lea eax, [ebp - 0x1c44]
push eax
lea eax, [ecx + 0xb0]
push eax
lea eax, [ebp - 0x1c58]
push eax
call fcn.00402b4f
lea eax, [ebp - 0x141c]
mov dword [ebp - 0x1c24], 0xf
mov dword [ebp - 0x1c28], ebx
mov byte [ebp - 0x1c38], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40195f
sub eax, edx
push eax
lea eax, [ebp - 0x141c]
push eax
lea ecx, [ebp - 0x1c38]
call fcn.0040366e
mov eax, dword [ebp - 0x1c3c]
lea ecx, [eax + 0x78]
mov byte [ebp - 4], 4
cmp ecx, ebx
je 0x401991
add eax, 0x7c
jmp 0x401993
xor eax, eax
lea ecx, [ebp - 0x1c44]
push ecx
lea ecx, [ebp - 0x1c38]
push ecx
mov ecx, dword [ebp - 0x1c3c]
push eax
lea esi, [ebp - 0x1c64]
call fcn.00402b4f
push ebx
push 1
lea ecx, [ebp - 0x1c38]
mov byte [ebp - 4], 1
call fcn.00403a1b
mov esi, 0x3ff
push esi
lea eax, [ebp - 0x81b]
push ebx
push eax
mov byte [ebp - 0x81c], bl
call fcn.0042a4a0
add esp, 0xc
push esi
lea eax, [ebp - 0x41b]
push ebx
push eax
mov byte [ebp - 0x41c], bl
call fcn.0042a4a0
add esp, 0xc
push esi
lea eax, [ebp - 0xc1b]
push ebx
push eax
mov byte [ebp - 0xc1c], bl
call fcn.0042a4a0
add esp, 0xc
push esi
lea eax, [ebp - 0x101b]
push ebx
push eax
mov byte [ebp - 0x101c], bl
call fcn.0042a4a0
add esp, 0xc
inc esi
push esi
lea eax, [ebp - 0x81c]
push eax
push dword [ebp - 0x1c48]
call edi
push esi
lea eax, [ebp - 0x41c]
push eax
push dword [ebp - 0x1c4c]
call edi
push esi
lea eax, [ebp - 0xc1c]
push eax
push dword [ebp - 0x1c54]
call edi
push esi
lea eax, [ebp - 0x101c]
push eax
push dword [ebp - 0x1c50]
call edi
lea eax, [ebp - 0x101c]
mov dword [ebp - 0x1c24], 0xf
mov dword [ebp - 0x1c28], ebx
mov byte [ebp - 0x1c38], bl
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x401a86
sub eax, esi
push eax
lea eax, [ebp - 0x101c]
push eax
lea ecx, [ebp - 0x1c38]
call fcn.0040366e
mov edi, dword [ebp - 0x1c6c]
mov ecx, dword [ebp - 0x1c3c]
lea eax, [ebp - 0x1c38]
push eax
lea esi, [ebp - 0x1c50]
mov byte [ebp - 4], 5
call fcn.00402d1d
push ebx
push 1
lea ecx, [ebp - 0x1c38]
mov byte [ebp - 4], 1
call fcn.00403a1b
push 0xf
pop esi
lea eax, [ebp - 0x81c]
mov dword [ebp - 0x1c24], esi
mov dword [ebp - 0x1c28], ebx
mov byte [ebp - 0x1c38], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x401af4
sub eax, edi
push eax
lea eax, [ebp - 0x81c]
push eax
lea ecx, [ebp - 0x1c38]
call fcn.0040366e
push dword [ebp - 0x1c60]
mov ecx, dword [ebp - 0x1c3c]
lea eax, [ebp - 0x1c38]
push eax
push esi
lea eax, [ebp - 0x1c50]
push eax
lea edi, [ebp - 0x1c48]
mov byte [ebp - 4], 6
call fcn.00402a3e
push ebx
push 1
lea ecx, [ebp - 0x1c38]
mov byte [ebp - 4], 1
call fcn.00403a1b
lea eax, [ebp - 0x41c]
mov dword [ebp - 0x1c24], esi
mov dword [ebp - 0x1c28], ebx
mov byte [ebp - 0x1c38], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x401b67
sub eax, edi
push eax
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x1c38]
call fcn.0040366e
push dword [ebp - 0x1c60]
mov ecx, dword [ebp - 0x1c3c]
lea eax, [ebp - 0x1c38]
push eax
push 3
lea eax, [ebp - 0x1c48]
push eax
lea edi, [ebp - 0x1c4c]
mov byte [ebp - 4], 7
call fcn.00402a3e
push ebx
push 1
lea ecx, [ebp - 0x1c38]
mov byte [ebp - 4], 1
call fcn.00403a1b
lea eax, [ebp - 0xc1c]
mov dword [ebp - 0x1c24], esi
mov dword [ebp - 0x1c28], ebx
mov byte [ebp - 0x1c38], bl
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x401bdb
sub eax, esi
push eax
lea eax, [ebp - 0xc1c]
push eax
lea ecx, [ebp - 0x1c38]
call fcn.0040366e
push dword [ebp - 0x1c60]
mov ecx, dword [ebp - 0x1c3c]
lea eax, [ebp - 0x1c38]
push eax
push 3
lea eax, [ebp - 0x1c4c]
push eax
lea edi, [ebp - 0x1c54]
mov byte [ebp - 4], 8
call fcn.00402a3e
push ebx
push 1
lea ecx, [ebp - 0x1c38]
call fcn.00403a1b
lea ecx, [ebp - 0x1c90]
call fcn.00416c10
xor eax, eax
inc eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.00428263
leave
ret 4