Function at 0x401280
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4166cb
mov eax, dword fs:[0]
push eax
sub esp, 0x254
mov eax, dword [0x420090]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, edx
lea eax, [ebx + 0x1c]
push eax
mov dword [ebp - 0x23c], eax
lea eax, [ebp - 0x228]
mov edi, ecx
push eax
mov dword [ebp - 0x238], edi
mov dword [ebp - 0x234], ebx
call dword [sym.imp.USER32.dll_CopyRect]
mov ecx, dword [edi + 4]
push ecx
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
mov dword [ebp - 0x244], esi
push esi
mov dword [ebp - 4], 0
call dword [sym.imp.GDI32.dll_SaveDC]
mov dword [ebp - 0x240], eax
mov eax, dword [ebx + 0x10]
mov ebx, dword [edi + 0x34]
mov ecx, eax
mov dl, al
shr ecx, 2
shr eax, 4
and cl, 1
and dl, 1
and al, 1
mov byte [edi + 0x2e], dl
mov byte [edi + 0x30], cl
mov byte [edi + 0x2f], al
test cl, cl
je 0x401325
mov eax, dword [edi + 0x44]
jmp 0x401340
test dl, dl
je 0x40132e
mov eax, dword [edi + 0x40]
jmp 0x401340
cmp byte [edi + 0x2c], 0
je 0x401339
mov eax, dword [edi + 0x38]
jmp 0x401340
test al, al
je 0x401346
mov eax, dword [edi + 0x3c]
test eax, eax
je 0x401346
mov ebx, eax
test ebx, ebx
je 0x401425
push esi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edx, dword [0x42136c]
mov dword [ebp - 0x230], eax
movzx eax, bx
push eax
push edx
call dword [sym.imp.USER32.dll_LoadBitmapW]
mov ebx, eax
lea eax, [ebp - 0x25c]
push eax
push 0x18
push ebx
call dword [sym.imp.GDI32.dll_GetObjectW]
mov ecx, dword [ebp - 0x230]
push ebx
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [ebp - 0x230]
mov ecx, dword [ebp - 0x258]
push 0xcc0020
push 0
push 0
push edx
mov edx, dword [ebp - 0x234]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x254]
push eax
mov eax, dword [edx + 0x20]
push ecx
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ecx]
push eax
push edx
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [ebp - 0x22c]
mov ecx, dword [ebp - 0x230]
push eax
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
test eax, eax
je 0x4013eb
xor ebx, ebx
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.GDI32.dll_DeleteDC]
test ebx, ebx
je 0x401403
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0x22c]
test eax, eax
je 0x401414
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0x230]
test eax, eax
je 0x401425
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov ecx, dword [edi + 4]
push 0x104
lea eax, [ebp - 0x218]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea edi, [ebp - 0x218]
lea ebx, [ebp - 0x234]
call fcn.00401ef0
mov ebx, dword [ebp - 0x234]
cmp dword [ebx - 8], 0
je 0x4014c6
mov edi, dword [ebp - 0x238]
cmp byte [edi + 0x2e], 0
je 0x40146b
push 0x875f00
jmp 0x40146d
push 0
push esi
call dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 0x22c], eax
mov eax, dword [edi + 0x24]
push eax
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
push 1
push esi
mov edi, eax
call dword [sym.imp.GDI32.dll_SetBkMode]
mov edx, dword [ebp - 0x23c]
mov eax, dword [ebx - 8]
push 0x25
push edx
push eax
push ebx
push esi
call dword [sym.imp.USER32.dll_DrawTextW]
mov ecx, dword [ebp - 0x22c]
push ecx
push esi
call dword [sym.imp.GDI32.dll_SetTextColor]
push edi
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
test edi, edi
je 0x4014c6
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edx, dword [ebp - 0x240]
push edx
push esi
call dword [sym.imp.GDI32.dll_RestoreDC]
mov eax, dword [ebp - 0x238]
mov ecx, dword [eax + 4]
push esi
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
lea edx, [ebx - 0xc]
cmp edx, 0x421050
je 0x401507
add ebx, 0xfffffff4
push ebx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x401507
push ebx
call fcn.0040d423
add esp, 4
test esi, esi
je 0x401512
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040d34e
mov esp, ebp
pop ebp
ret