Function at 0x48ce70
Capabilities:
Get graphical window text

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x49a21b
push eax
mov eax, dword [esp + 0x34]
mov dword fs:[0], esp
sub esp, 0x204
test eax, eax
push ebx
mov ebx, dword [esp + 0x21c]
push ebp
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
push esi
push edi
mov esi, ecx
jne 0x48cecc
push 1
push 0xf
call dword [sym.imp.USER32.dll_GetSysColor]
mov edi, dword [esp + 0x228]
push eax
push ebx
lea eax, [esp + 0x244]
push eax
push edi
call fcn.00448470
add esp, 0x14
jmp 0x48ceea
mov ecx, dword [esi + 0xb8]
mov edi, dword [esp + 0x224]
push ecx
push edi
push 0x1795
mov ecx, esi
call fcn.00451280
push eax
call ebp
mov edx, dword [ebx + 0x44]
mov eax, dword [esp + 0x238]
mov ecx, dword [esp + 0x23c]
add eax, edx
mov edx, dword [ebx + 0x50]
mov dword [esp + 0x238], eax
mov eax, dword [ebx + 0x48]
add ecx, eax
mov eax, dword [esp + 0x240]
mov dword [esp + 0x23c], ecx
mov ecx, dword [ebx + 0x4c]
mov ebx, dword [esp + 0x244]
push 0
sub eax, ecx
push 0
mov dword [esp + 0x248], eax
mov eax, dword [esi + 0xb8]
push 0x31
sub ebx, edx
push eax
mov dword [esp + 0x254], ebx
call ebp
push eax
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov ebx, dword [esp + 0x238]
lea ecx, [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x240]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x248]
lea edx, [esp + 0x14]
push edx
mov edx, eax
sub edx, ecx
push edx
sub esp, 0x10
mov edx, esp
mov dword [edx], ebx
mov ebx, dword [esp + 0x248]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x25c]
mov dword [edx + 8], ecx
push ebx
mov ecx, esi
mov dword [edx + 0xc], eax
call fcn.0048c490
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x10]
sub edx, ecx
push edx
sub eax, ebp
push eax
push edi
lea ecx, [esp + 0x50]
call fcn.0045c860
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
sub ecx, eax
push ecx
mov ecx, dword [esp + 0x14]
xor ebp, ebp
sub edx, ecx
push edx
push ebp
lea eax, [esp + 0x80]
push ebp
push eax
mov dword [esp + 0x230], ebp
call fcn.00446630
mov ecx, dword [eax]
mov dword [esp + 0x48], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x4c], edx
mov ecx, dword [eax + 8]
mov dword [esp + 0x50], ecx
mov edx, dword [eax + 0xc]
mov eax, dword [esi + 0x10c]
push 1
push eax
push ebx
lea ecx, [esp + 0x54]
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0x68]
push ecx
push edx
call fcn.004469e0
add esp, 0x28
push edi
call dword [sym.imp.GDI32.dll_GetLayout]
mov ebx, eax
and ebx, 1
je 0x48d052
push 8
push edi
call dword [sym.imp.GDI32.dll_SetLayout]
mov eax, dword [esp + 0x240]
mov edx, dword [esp + 0x10]
mov ecx, eax
sub ecx, edx
sub ecx, dword [esp + 0x18]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x18], eax
mov edx, dword [esi + 0x10c]
mov ecx, dword [esp + 0x4c]
push edx
lea eax, [esp + 0x14]
push eax
push ecx
push edi
call fcn.00447310
add esp, 0x10
cmp ebx, ebp
je 0x48d079
push 1
push edi
call dword [sym.imp.GDI32.dll_SetLayout]
mov eax, dword [esi + 0xb8]
push 0xc8
lea edx, [esp + 0x88]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov word [esp + 0x212], bp
mov ebp, dword [esp + 0x230]
lea ecx, [ebp + 4]
push ecx
call fcn.004472f0
add esp, 4
push eax
push edi
call dword [sym.imp.GDI32.dll_SetTextColor]
push 1
push edi
mov dword [esp + 0x30], eax
call dword [sym.imp.GDI32.dll_SetBkMode]
lea edx, [esp + 0x2c]
mov dword [esp + 0x20], eax
push edx
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x8c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
lea edx, [esp + 0x90]
push edx
push edi
mov ecx, esi
call fcn.0048c820
mov eax, dword [esi + 0xb8]
mov ebx, dword [sym.imp.USER32.dll_GetWindowLongW]
push 0xfffffffffffffff0
push eax
call ebx
mov edx, dword [esp + 0x30]
push eax
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0x68]
push ecx
push edx
push eax
lea ecx, [esp + 0x64]
push ecx
mov ecx, esi
call fcn.0048c5e0
mov edx, dword [esi + 0xb8]
push 0xfffffffffffffff0
push edx
call ebx
and eax, 0x2000
xor ebx, ebx
cmp eax, 0x2000
setne bl
mov ecx, esi
dec ebx
and ebx, 0x2010
call fcn.00451380
test eax, eax
je 0x48d14f
or ebx, 0x20000
push ebx
lea eax, [esp + 0x88]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x70]
push edx
push ebp
push edi
call fcn.00447f10
mov eax, dword [esp + 0x40]
add esp, 0x18
push eax
push edi
call dword [sym.imp.GDI32.dll_SetTextColor]
mov ecx, dword [esp + 0x24]
push ecx
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [esp + 0x20]
push edx
push edi
call dword [sym.imp.GDI32.dll_SetBkMode]
lea ecx, [esp + 0x44]
mov dword [esp + 0x21c], 0xffffffff
call fcn.0045c8b0
mov ecx, dword [esp + 0x214]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x210
ret 0x28