Function at 0x435710
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x180
push ebx
push edi
push esi
lea eax, [ebp - 4]
push eax
lea eax, [ebp + 8]
push dword [eax]
call dword [sym.imp.USER32.DLL_GetParent]
mov edx, eax
pop esi
mov dword [esi], edx
mov eax, dword [ebp + 0xc]
add eax, 4
mov ebx, 0xffff
push eax
push ebx
xor ecx, ecx
push ecx
xor ecx, ecx
push ecx
mov ecx, 0x400
push ecx
lea ecx, [ebp - 4]
push dword [ecx]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov esi, eax
pop ebx
pop eax
mov ecx, esi
mov edx, ecx
mov esi, ebx
and edx, esi
mov ebx, edx
mov esi, ebx
mov edi, dword [eax]
cmp esi, edi
sete dl
and edx, 0xff
mov eax, edx
test eax, eax
je 0x4357a1
mov eax, dword [ebp + 0xc]
add eax, 0x10
push eax
mov eax, 0x20
mov ebx, dword [ebp + 0xc]
add ebx, 0x10
mov edx, dword [ebx]
mov esi, eax
or edx, esi
mov eax, edx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp + 0xc]
add eax, 0x18
mov edx, eax
pop esi
mov edi, dword [edx]
mov dword [esi], edi
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp + 0xc]
add eax, 0x10
mov edx, eax
pop esi
mov edi, dword [edx]
mov dword [esi], edi
lea eax, [ebp - 0x18]
push eax
mov eax, 5
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x14]
push eax
mov eax, 4
mov ebx, 1
mov edx, ebx
mov esi, eax
or edx, esi
mov eax, edx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x70]
push eax
mov eax, dword [ebp + 0xc]
add eax, 0x1c
mov edx, eax
pop esi
push 0x10
push edx
push esi
call dword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
lea eax, [ebp - 0x60]
push eax
mov eax, dword [ebp + 0xc]
add eax, 0x1c
mov edx, eax
pop esi
push 0x10
push edx
push esi
call dword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x60]
mov edx, eax
pop esi
push 0x10
push edx
push esi
call dword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
lea eax, [ebp - 0x70]
push eax
mov eax, 4
lea ebx, [ebp - 0x70]
mov ebx, dword [ebx]
add eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x70]
add eax, 8
push eax
mov eax, 4
lea ebx, [ebp - 0x70]
add ebx, 8
mov ebx, dword [ebx]
sub ebx, eax
mov eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x70]
add eax, 4
push eax
mov eax, 4
lea ebx, [ebp - 0x70]
add ebx, 4
mov ebx, dword [ebx]
add eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x70]
add eax, 0xc
push eax
mov eax, 4
lea ebx, [ebp - 0x70]
add ebx, 0xc
mov ebx, dword [ebx]
sub ebx, eax
mov eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
mov eax, 0xff
push eax
lea eax, [ebp - 0x180]
mov edx, eax
push edx
lea eax, [ebp + 8]
push dword [eax]
call dword [sym.imp.USER32.DLL_GetWindowTextA]
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x50]
mov edx, eax
pop esi
push 0x10
push edx
push esi
call dword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
mov eax, 0x2000
mov ebx, 0x2000
push eax
push ebx
mov ecx, 0xfffffff0
push ecx
lea ecx, [ebp + 8]
push dword [ecx]
call dword [sym.imp.USER32.DLL_GetWindowLongA]
mov esi, eax
pop ebx
pop eax
mov ecx, esi
mov edx, ecx
mov esi, ebx
and edx, esi
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
mov eax, edx
test eax, eax
je 0x4359fa
lea eax, [ebp - 0x40]
push eax
mov eax, 2
push eax
mov ebx, 0x2d
push ebx
call dword [sym.imp.USER32.DLL_GetSystemMetrics]
mov esi, eax
pop eax
mov ebx, esi
imul eax, ebx
lea ebx, [ebp - 0x40]
mov ebx, dword [ebx]
add eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x40]
add eax, 8
push eax
mov eax, 2
push eax
mov ebx, 0x2d
push ebx
call dword [sym.imp.USER32.DLL_GetSystemMetrics]
mov esi, eax
pop eax
mov ebx, esi
imul eax, ebx
lea ebx, [ebp - 0x40]
add ebx, 8
mov ebx, dword [ebx]
sub ebx, eax
mov eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x40]
add eax, 4
push eax
mov eax, 2
push eax
mov ebx, 0x2e
push ebx
call dword [sym.imp.USER32.DLL_GetSystemMetrics]
mov esi, eax
pop eax
mov ebx, esi
imul eax, ebx
lea ebx, [ebp - 0x40]
add ebx, 4
mov ebx, dword [ebx]
add eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x40]
add eax, 0xc
push eax
mov eax, 2
push eax
mov ebx, 0x2e
push ebx
call dword [sym.imp.USER32.DLL_GetSystemMetrics]
mov esi, eax
pop eax
mov ebx, esi
imul eax, ebx
lea ebx, [ebp - 0x40]
add ebx, 0xc
mov ebx, dword [ebx]
sub ebx, eax
mov eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
mov eax, 1
lea ebx, [ebp - 0x1c]
mov edx, dword [ebx]
mov esi, eax
and edx, esi
mov eax, edx
test eax, eax
je 0x435a87
lea eax, [ebp - 0x40]
push eax
mov eax, 1
lea ebx, [ebp - 0x40]
mov ebx, dword [ebx]
add eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x40]
add eax, 8
push eax
mov eax, 1
lea ebx, [ebp - 0x40]
add ebx, 8
mov ebx, dword [ebx]
add eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x40]
add eax, 4
push eax
mov eax, 1
lea ebx, [ebp - 0x40]
add ebx, 4
mov ebx, dword [ebx]
add eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x40]
add eax, 0xc
push eax
mov eax, 1
lea ebx, [ebp - 0x40]
add ebx, 0xc
mov ebx, dword [ebx]
add eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
mov eax, 0x10
lea ebx, [ebp - 0x1c]
mov edx, dword [ebx]
mov esi, eax
and edx, esi
mov eax, edx
mov ebx, 0x20
lea ecx, [ebp - 0x1c]
mov edx, dword [ecx]
mov esi, ebx
and edx, esi
mov ebx, edx
mov edx, ebx
mov esi, eax
or edx, esi
mov eax, edx
test eax, eax
je 0x435b48
lea eax, [ebp - 0x60]
add eax, 4
push eax
mov eax, 1
xor edx, edx
sub edx, eax
mov eax, edx
lea ebx, [ebp - 0x60]
add ebx, 4
mov ebx, dword [ebx]
sub ebx, eax
mov eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x60]
add eax, 0xc
push eax
mov eax, 1
xor edx, edx
sub edx, eax
mov eax, edx
lea ebx, [ebp - 0x60]
add ebx, 0xc
mov ebx, dword [ebx]
add eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x60]
push eax
mov eax, 1
xor edx, edx
sub edx, eax
mov eax, edx
lea ebx, [ebp - 0x60]
mov ebx, dword [ebx]
sub ebx, eax
mov eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x60]
add eax, 8
push eax
mov eax, 1
xor edx, edx
sub edx, eax
mov eax, edx
lea ebx, [ebp - 0x60]
add ebx, 8
mov ebx, dword [ebx]
add eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
mov eax, 0x8000
mov ebx, 0x8000
push eax
push ebx
mov ecx, 0xfffffff0
push ecx
lea ecx, [ebp + 8]
push dword [ecx]
call dword [sym.imp.USER32.DLL_GetWindowLongA]
mov esi, eax
pop ebx
pop eax
mov ecx, esi
mov edx, ecx
mov esi, ebx
and edx, esi
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
mov eax, edx
test eax, eax
je 0x435c81
lea eax, [ebp - 0x10]
push eax
mov eax, 5
push eax
call dword [sym.imp.GDI32.DLL_GetStockObject]
push eax
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.GDI32.DLL_SelectObject]
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x60]
add eax, 0xc
push dword [eax]
lea eax, [ebp - 0x60]
add eax, 8
push dword [eax]
lea eax, [ebp - 0x60]
add eax, 4
push dword [eax]
lea eax, [ebp - 0x60]
push dword [eax]
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.GDI32.DLL_Rectangle]
lea eax, [ebp - 0x10]
push dword [eax]
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.GDI32.DLL_SelectObject]
lea eax, [ebp - 0x60]
add eax, 4
push eax
mov eax, 1
xor edx, edx
sub edx, eax
mov eax, edx
lea ebx, [ebp - 0x60]
add ebx, 4
mov ebx, dword [ebx]
sub ebx, eax
mov eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x60]
add eax, 0xc
push eax
mov eax, 1
xor edx, edx
sub edx, eax
mov eax, edx
lea ebx, [ebp - 0x60]
add ebx, 0xc
mov ebx, dword [ebx]
add eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x60]
push eax
mov eax, 1
xor edx, edx
sub edx, eax
mov eax, edx
lea ebx, [ebp - 0x60]
mov ebx, dword [ebx]
sub ebx, eax
mov eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x60]
add eax, 8
push eax
mov eax, 1
xor edx, edx
sub edx, eax
mov eax, edx
lea ebx, [ebp - 0x60]
add ebx, 8
mov ebx, dword [ebx]
add eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x435cfb
mov eax, 1
lea ebx, [ebp - 0x1c]
mov edx, dword [ebx]
mov esi, eax
and edx, esi
mov eax, edx
test eax, eax
je 0x435cd3
mov eax, 0x2000
mov ebx, 0x200
mov ecx, 0x10
mov edx, ecx
mov esi, ebx
or edx, esi
mov ebx, edx
mov edx, ebx
mov esi, eax
or edx, esi
mov eax, edx
push eax
mov eax, 4
push eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.USER32.DLL_DrawFrameControl]
jmp 0x435cfb
mov eax, 0x2000
mov ebx, 0x10
mov edx, ebx
mov esi, eax
or edx, esi
mov eax, edx
push eax
mov eax, 4
push eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.USER32.DLL_DrawFrameControl]
mov eax, str.BGRND
mov edx, eax
push edx
lea eax, [ebp + 8]
push dword [eax]
call dword [sym.imp.USER32.DLL_GetPropA]
push eax
lea eax, [ebp - 0x60]
add eax, 4
lea ebx, [ebp - 0x60]
add ebx, 0xc
mov ebx, dword [ebx]
mov eax, dword [eax]
sub ebx, eax
mov eax, ebx
push eax
lea eax, [ebp - 0x60]
lea ebx, [ebp - 0x60]
add ebx, 8
mov ebx, dword [ebx]
mov eax, dword [eax]
sub ebx, eax
mov eax, ebx
push eax
lea eax, [ebp - 0x60]
add eax, 4
push dword [eax]
lea eax, [ebp - 0x60]
push dword [eax]
lea eax, [ebp - 0x20]
push dword [eax]
call fcn.00417720
mov eax, 0x10
lea ebx, [ebp - 0x1c]
mov edx, dword [ebx]
mov esi, eax
and edx, esi
mov eax, edx
mov ebx, 0x20
lea ecx, [ebp - 0x1c]
mov edx, dword [ecx]
mov esi, ebx
and edx, esi
mov ebx, edx
mov edx, ebx
mov esi, eax
or edx, esi
mov eax, edx
test eax, eax
je 0x435dfa
lea eax, [ebp - 0x10]
push eax
mov eax, 5
push eax
call dword [sym.imp.GDI32.DLL_GetStockObject]
push eax
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.GDI32.DLL_SelectObject]
mov edx, eax
pop esi
mov dword [esi], edx
mov eax, dword [ebp + 0xc]
add eax, 0x1c
add eax, 0xc
push dword [eax]
mov eax, dword [ebp + 0xc]
add eax, 0x1c
add eax, 8
push dword [eax]
mov eax, dword [ebp + 0xc]
add eax, 0x1c
add eax, 4
push dword [eax]
mov eax, dword [ebp + 0xc]
add eax, 0x1c
push dword [eax]
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.GDI32.DLL_Rectangle]
lea eax, [ebp - 0x10]
push dword [eax]
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.GDI32.DLL_SelectObject]
xor eax, eax
lea ebx, [ebp - 0x180]
mov edx, ebx
push eax
push edx
call fcn.004194b7
mov edx, eax
pop eax
mov ebx, edx
cmp ebx, eax
setne dl
movzx eax, dl
test eax, eax
je 0x436264
lea eax, [ebp - 8]
push eax
mov eax, 1
push eax
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.GDI32.DLL_SetBkMode]
mov edx, eax
pop esi
mov dword [esi], edx
mov eax, 0x2000
mov ebx, 0x2000
push eax
push ebx
mov ecx, 0xfffffff0
push ecx
lea ecx, [ebp + 8]
push dword [ecx]
call dword [sym.imp.USER32.DLL_GetWindowLongA]
mov esi, eax
pop ebx
pop eax
mov ecx, esi
mov edx, ecx
mov esi, ebx
and edx, esi
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
mov eax, edx
test eax, eax
je 0x435f89
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x40]
mov edx, eax
pop esi
push 0x10
push edx
push esi
call dword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
lea eax, [ebp - 0x14]
push eax
mov eax, 0x10
lea ebx, [ebp - 0x14]
mov edx, dword [ebx]
mov esi, eax
or edx, esi
mov eax, edx
mov edx, eax
pop esi
mov dword [esi], edx
mov eax, 0x400
lea ebx, [ebp - 0x14]
mov edx, dword [ebx]
mov esi, eax
or edx, esi
mov eax, edx
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x180]
mov edx, eax
push edx
call fcn.004194b7
mov edx, eax
mov eax, edx
push eax
lea eax, [ebp - 0x180]
mov edx, eax
push edx
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.USER32.DLL_DrawTextA]
lea eax, [ebp - 0x40]
add eax, 4
push eax
mov eax, 2
lea ebx, [ebp - 0x30]
add ebx, 4
lea ecx, [ebp - 0x30]
add ecx, 0xc
mov ecx, dword [ecx]
mov ebx, dword [ebx]
sub ecx, ebx
mov ebx, ecx
mov esi, eax
mov edi, ebx
mov eax, edi
cdq
idiv esi
mov ebx, 2
lea ecx, [ebp - 0x40]
add ecx, 4
push eax
lea eax, [ebp - 0x40]
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
add dword [esp], 0xc
mov edx, dword [esp]
add esp, 4
push edx
mov esi, dword [esp]
mov esi, dword [esi]
mov dword [esp], esi
mov ecx, dword [ecx]
sub dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov ecx, edx
mov esi, ebx
mov edi, ecx
push eax
mov eax, edi
cdq
idiv esi
mov edx, eax
pop eax
mov ebx, edx
sub ebx, eax
mov eax, ebx
lea ebx, [ebp - 0x40]
add ebx, 4
mov ebx, dword [ebx]
add eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x435fa2
lea eax, [ebp - 0x14]
push eax
mov eax, 0x20
lea ebx, [ebp - 0x14]
mov edx, dword [ebx]
mov esi, eax
or edx, esi
mov eax, edx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x180]
mov edx, eax
push edx
call fcn.004194b7
mov edx, eax
mov eax, edx
push eax
lea eax, [ebp - 0x180]
mov edx, eax
push edx
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.GDI32.DLL_GetTextExtentPoint32A]
lea eax, [ebp - 0x80]
push eax
mov eax, 2
lea ebx, [ebp - 0x78]
mov esi, eax
mov edi, dword [ebx]
mov eax, edi
cdq
idiv esi
mov ebx, 2
lea ecx, [ebp - 0x40]
add ecx, 8
push eax
lea eax, [ebp - 0x40]
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov edx, dword [esp]
add esp, 4
push edx
mov esi, dword [esp]
mov esi, dword [esi]
mov dword [esp], esi
mov ecx, dword [ecx]
add dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov ecx, edx
mov esi, ebx
mov edi, ecx
push eax
mov eax, edi
cdq
idiv esi
mov edx, eax
pop eax
mov ebx, edx
sub ebx, eax
mov eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x80]
add eax, 4
push eax
mov eax, 2
lea ebx, [ebp - 0x78]
add ebx, 4
mov esi, eax
mov edi, dword [ebx]
mov eax, edi
cdq
idiv esi
mov ebx, 2
lea ecx, [ebp - 0x40]
add ecx, 0xc
push eax
lea eax, [ebp - 0x40]
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
add dword [esp], 4
mov edx, dword [esp]
add esp, 4
push edx
mov esi, dword [esp]
mov esi, dword [esi]
mov dword [esp], esi
mov ecx, dword [ecx]
add dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov ecx, edx
mov esi, ebx
mov edi, ecx
push eax
mov eax, edi
cdq
idiv esi
mov edx, eax
pop eax
mov ebx, edx
sub ebx, eax
mov eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
mov eax, 4
lea ebx, [ebp - 0x1c]
mov edx, dword [ebx]
mov esi, eax
and edx, esi
mov eax, edx
test eax, eax
je 0x4361ec
lea eax, [ebp - 0x80]
add eax, 4
push eax
mov eax, 1
lea ebx, [ebp - 0x80]
add ebx, 4
mov ebx, dword [ebx]
sub ebx, eax
mov eax, ebx
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0xc]
push eax
mov eax, 0x11
push eax
call dword [sym.imp.USER32.DLL_GetSysColor]
push eax
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.GDI32.DLL_SetTextColor]
mov edx, eax
pop esi
mov dword [esi], edx
mov eax, 0x2000
mov ebx, 0x2000
push eax
push ebx
mov ecx, 0xfffffff0
push ecx
lea ecx, [ebp + 8]
push dword [ecx]
call dword [sym.imp.USER32.DLL_GetWindowLongA]
mov esi, eax
pop ebx
pop eax
mov ecx, esi
mov edx, ecx
mov esi, ebx
and edx, esi
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
mov eax, edx
test eax, eax
je 0x436187
lea eax, [ebp - 0x14]
push dword [eax]
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x180]
mov edx, eax
push edx
call fcn.004194b7
mov edx, eax
mov eax, edx
push eax
lea eax, [ebp - 0x180]
mov edx, eax
push edx
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.USER32.DLL_DrawTextA]
jmp 0x4361e7
mov eax, 0x20
mov ebx, 1
mov edx, ebx
mov esi, eax
or edx, esi
mov eax, edx
push eax
lea eax, [ebp - 0x78]
add eax, 4
push dword [eax]
lea eax, [ebp - 0x78]
push dword [eax]
lea eax, [ebp - 0x80]
add eax, 4
push dword [eax]
lea eax, [ebp - 0x80]
push dword [eax]
lea eax, [ebp - 0x180]
mov edx, eax
push edx
call fcn.004194b7
mov edx, eax
mov eax, edx
push eax
lea eax, [ebp - 0x180]
mov edx, eax
push edx
xor eax, eax
mov edx, eax
push edx
xor eax, eax
push eax
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.USER32.DLL_DrawStateA]
jmp 0x436244
lea eax, [ebp - 0xc]
push eax
mov eax, str.FGRND
mov edx, eax
push edx
lea eax, [ebp + 8]
push dword [eax]
call dword [sym.imp.USER32.DLL_GetPropA]
push eax
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.GDI32.DLL_SetTextColor]
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x14]
push dword [eax]
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x180]
mov edx, eax
push edx
call fcn.004194b7
mov edx, eax
mov eax, edx
push eax
lea eax, [ebp - 0x180]
mov edx, eax
push edx
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.USER32.DLL_DrawTextA]
lea eax, [ebp - 8]
push dword [eax]
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.GDI32.DLL_SetBkMode]
lea eax, [ebp - 0xc]
push dword [eax]
lea eax, [ebp - 0x20]
push dword [eax]
call dword [sym.imp.GDI32.DLL_SetTextColor]
mov eax, 0
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 8