Function at 0x403560
Capabilities:
Get graphical window text

Disassembly:
push 0xffffffffffffffff
push 0x486dc8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
push ebx
push ebp
mov ebp, ecx
push esi
push edi
mov eax, dword [ebp + 0x1c]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call fcn.0047f70e
mov ecx, dword [eax + 8]
push 0x5a
push ecx
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x48
push eax
push 0x48
call dword [sym.imp.KERNEL32.dll_MulDiv]
xor ebx, ebx
mov dword [ebp + 0x12c0], eax
mov dword [ebp + 0x12c4], ebx
mov dword [ebp + 0x12c8], ebx
mov dword [ebp + 0x12cc], ebx
mov dword [ebp + 0x12d0], 0x2bc
mov byte [ebp + 0x12d4], bl
mov byte [ebp + 0x12d5], bl
mov byte [ebp + 0x12d6], bl
mov byte [ebp + 0x12d7], 1
mov byte [ebp + 0x12d8], 2
mov byte [ebp + 0x12d9], 1
mov byte [ebp + 0x12da], bl
mov byte [ebp + 0x12db], bl
mov edx, dword [0x4b20c8]
mov dword [esp + 0x10], edx
push 0x4b61a0
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x38], ebx
call fcn.00480d27
mov edi, dword [esp + 0x10]
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp + 0x12dc]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push ebx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [ebp + 0x12c0]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp + 0x12fc]
mov ecx, edi
call fcn.00481893
push 0x530
mov ecx, ebp
call fcn.0047b58f
cmp edi, ebx
jne 0x40366b
xor ecx, ecx
jmp 0x40366e
mov ecx, dword [edi + 4]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 1
push ecx
mov ecx, dword [eax + 0x1c]
push 0x30
push ecx
call esi
push 0x531
mov ecx, ebp
call fcn.0047b58f
cmp edi, ebx
jne 0x403693
xor ecx, ecx
jmp 0x403696
mov ecx, dword [edi + 4]
mov edx, dword [eax + 0x1c]
push 1
push ecx
push 0x30
push edx
call esi
push 0x57c
mov ecx, ebp
call fcn.0047b58f
cmp edi, ebx
jne 0x4036b5
xor ecx, ecx
jmp 0x4036b8
mov ecx, dword [edi + 4]
mov eax, dword [eax + 0x1c]
push 1
push ecx
push 0x30
push eax
call esi
push 1
push 0xb
push 0x9b
push 0x3a
push 0x41
push 0x57c
mov ecx, ebp
call fcn.0047b58f
mov ecx, eax
call fcn.0047b777
push 1
push 0xb
push 0x87
push 0x104
push 0x41
push 0x530
mov ecx, ebp
call fcn.0047b58f
mov ecx, eax
call fcn.0047b777
push 1
push 0xb
push 0x9b
push 0x186
push 0x4b
push 0x531
mov ecx, ebp
call fcn.0047b58f
mov ecx, eax
call fcn.0047b777
push 1
push 0xd
push 0xbf
push 0x124
push 0x43
push 0x56b
mov ecx, ebp
call fcn.0047b58f
mov ecx, eax
call fcn.0047b777
push 1
push 0xd
push 0x6a
push 0x124
push 0xfe
push 0x56e
mov ecx, ebp
call fcn.0047b58f
mov ecx, eax
call fcn.0047b777
push 1
push 0xd
push 0x6e
push 0x13b
push 0x43
push 0x56f
mov ecx, ebp
call fcn.0047b58f
mov ecx, eax
call fcn.0047b777
push 1
push 0xd
push 0x72
push 0x13b
push 0xfe
push 0x570
mov ecx, ebp
call fcn.0047b58f
mov ecx, eax
call fcn.0047b777
push 1
push 0xd
push 0x72
push 0x152
push 0x43
push 0x578
mov ecx, ebp
call fcn.0047b58f
mov ecx, eax
call fcn.0047b777
push 1
push 0xd
push 0x72
push 0x152
push 0xfe
push 0x579
mov ecx, ebp
call fcn.0047b58f
mov ecx, eax
call fcn.0047b777
push 1
push 0x13
push 0x44
push 0x1ab
push 0x43
push 0x538
mov ecx, ebp
call fcn.0047b58f
mov ecx, eax
call fcn.0047b777
push 1
push 0x13
push 0x44
push 0x1c6
push 0x43
push 0x539
mov ecx, ebp
call fcn.0047b58f
mov ecx, eax
call fcn.0047b777
push 1
push 0x13
push 0xa8
push 0x1e0
push 0x43
push 0x53a
mov ecx, ebp
call fcn.0047b58f
mov ecx, eax
call fcn.0047b777
push 1
push 0x13
push 0xa
push 0x1e0
push 0xd8
push 0x57d
mov ecx, ebp
call fcn.0047b58f
mov ecx, eax
call fcn.0047b777
push 1
push 0x14
push 0x6d
push 0x1a6
push 0x84
push 0x401
mov ecx, ebp
call fcn.0047b58f
mov ecx, eax
call fcn.0047b777
push 1
push 0x13
push 0x92
push 0x1c1
push 0x84
push 0x4ce
mov ecx, ebp
call fcn.0047b58f
mov ecx, eax
call fcn.0047b777
push 1
push 0x14
push 0x51
push 0x1db
push 0x84
push 0x53c
mov ecx, ebp
call fcn.0047b58f
mov ecx, eax
call fcn.0047b777
push 1
push 0x14
push 0x61
push 0x1db
push 0xe5
push 0x53d
mov ecx, ebp
call fcn.0047b58f
mov ecx, eax
call fcn.0047b777
push ebx
mov ecx, ebp
call fcn.0047acaf
push ebx
lea ecx, [esp + 0x18]
push ebp
lea edi, [ebp + 0x21c]
push ecx
push 0x50000000
push ebx
mov ecx, edi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x184
mov ecx, edi
call fcn.0045a680
mov ecx, edi
call fcn.0045a5b0
push ebx
lea edx, [esp + 0x18]
push ebp
lea edi, [ebp + 0x66c]
push edx
push 0x50000000
push ebx
mov ecx, edi
mov dword [esp + 0x28], 0x4e
mov dword [esp + 0x2c], 0x226
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0xbf
mov ecx, edi
call fcn.0045a680
mov ecx, edi
call fcn.0045a5b0
push ebx
lea eax, [esp + 0x18]
push ebp
lea edi, [ebp + 0x2d4]
push eax
push 0x50000000
push ebx
mov ecx, edi
mov dword [esp + 0x28], 0x32
mov dword [esp + 0x2c], 0x14
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x185
mov ecx, edi
call fcn.0045a680
mov ecx, edi
call fcn.0045a5b0
push ebx
mov dword [esp + 0x18], 0x44
mov dword [esp + 0x1c], 0x59
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
lea edi, [ebp + 0x724]
push ebp
lea ecx, [esp + 0x1c]
push ecx
push 0x50000000
push ebx
mov ecx, edi
call fcn.00481548
push 0x4ad198
push 0x25b
mov ecx, edi
call fcn.0045a680
mov ecx, edi
call fcn.0045a5b0
push ebx
lea edx, [esp + 0x18]
push ebp
lea edi, [ebp + 0x7dc]
push edx
push 0x50000000
push ebx
mov ecx, edi
mov dword [esp + 0x28], 0x67
mov dword [esp + 0x2c], 0x227
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x25a
mov ecx, edi
call fcn.0045a680
mov ecx, edi
call fcn.0045a5b0
push ebx
lea eax, [esp + 0x18]
push ebp
lea edi, [ebp + 0x894]
push eax
push 0x50000000
push ebx
mov ecx, edi
mov dword [esp + 0x28], 0xcf
mov dword [esp + 0x2c], 0x5b
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x25c
mov ecx, edi
call fcn.0045a680
mov ecx, edi
call fcn.0045a5b0
push ebx
lea ecx, [esp + 0x18]
push ebp
lea edi, [ebp + 0xa04]
push ecx
push 0x50000000
push ebx
mov ecx, edi
mov dword [esp + 0x28], 0x5f
mov dword [esp + 0x2c], 0x264
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0x25e
mov ecx, edi
call fcn.0045a680
mov ecx, edi
call fcn.0045a5b0
push ebx
lea edx, [esp + 0x18]
push ebp
lea edi, [ebp + 0xabc]
push edx
push 0x50000000
mov dword [esp + 0x24], 0xf3
mov dword [esp + 0x28], 0x1ab
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
push ebx
mov ecx, edi
call fcn.00481548
push 0x4ad198
push 0x261
mov ecx, edi
call fcn.0045a680
mov ecx, edi
call fcn.0045a5b0
push ebx
lea eax, [esp + 0x18]
push ebp
lea edi, [ebp + 0x38c]
push eax
push 0x50000000
push ebx
mov ecx, edi
mov dword [esp + 0x28], 0x36
mov dword [esp + 0x2c], 0x3d
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0xb8
mov ecx, edi
call fcn.0045a680
mov ecx, edi
call fcn.0045a5b0
push ebx
lea ecx, [esp + 0x18]
push ebp
lea edi, [ebp + 0x444]
push ecx
push 0x50000000
push ebx
mov ecx, edi
mov dword [esp + 0x28], 0x36
mov dword [esp + 0x2c], pe_nt_image_headers32
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0xb8
mov ecx, edi
call fcn.0045a680
mov ecx, edi
call fcn.0045a5b0
push ebx
lea edx, [esp + 0x18]
push ebp
lea edi, [ebp + 0x4fc]
push edx
push 0x50000000
push ebx
mov ecx, edi
mov dword [esp + 0x28], 0x3f
mov dword [esp + 0x2c], 0x18a
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00481548
push 0x4ad198
push 0xb8
mov ecx, edi
call fcn.0045a680
mov ecx, edi
call fcn.0045a5b0
push 1
push 0x19
lea edi, [ebp + 0xce8]
push 0x49
push 0x1f9
push 0x84
mov ecx, edi
call fcn.0047b777
push 0x187
push 0x187
push 0x187
push 0x187
mov ecx, edi
call fcn.00459400
push 1
lea edi, [ebp + 0xe5c]
push 0x14
push 0x44
push 0x1fe
push 0xd1
mov ecx, edi
call fcn.0047b777
push 0x188
push 0x188
push 0x188
push 0x188
mov ecx, edi
call fcn.00459400
push 1
push 9
lea edi, [ebp + 0xb74]
push 0xa
push 6
push 0x17f
mov ecx, edi
call fcn.0047b777
push 0x186
push 0x186
push 0x186
push 0x186
mov ecx, edi
call fcn.00459400
push 1
push 0x1a
lea edi, [ebp + 0x1144]
push 0x92
push 0x9f
push 0xd6
mov ecx, edi
call fcn.0047b777
push 0x260
push 0x25f
push 0x260
push 0x260
mov ecx, edi
call fcn.00459400
mov eax, dword [ebp + 0x1f0]
push 0x4ad18c
push ebx
push 0x143
push eax
call esi
mov ecx, dword [ebp + 0x1f0]
push 0x4ad180
push ebx
push 0x143
push ecx
call esi
mov edx, dword [ebp + 0x1f0]
push str.__ARS
push ebx
push 0x143
push edx
call esi
mov eax, dword [ebp + 0x1f0]
push 0x4ad168
push ebx
push 0x143
push eax
call esi
mov ecx, dword [ebp + 0x1f0]
push 0x4ad158
push ebx
push 0x143
push ecx
call esi
mov edx, dword [ebp + 0x1f0]
push 0x4ad144
push ebx
push 0x143
push edx
call esi
or edi, 0xffffffff
push ebx
mov dword [ebp + 0x1310], edi
mov eax, dword [ebp + 0x1f0]
push ebx
push 0x14e
push eax
call esi
mov ecx, ebp
call fcn.00404ca0
lea ecx, [esp + 0x10]
mov dword [esp + 0x2c], edi
call fcn.0047c0f3
mov ecx, dword [esp + 0x24]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x20
ret