Function at 0x4181a0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9e0
mov eax, dword [0x44e134]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov dword [ebp - 0x9e0], ecx
cmp dword [ebp + 0x10], 0
je 0x4181e8
push 0
push 0
push 0x4d8b
push 0
mov eax, dword [ebp - 0x9e0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x9e0]
mov eax, dword [edx + 8]
call eax
mov eax, 1
jmp 0x41884d
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0
jne 0x418204
xor eax, eax
jmp 0x41884d
xor ecx, ecx
mov word [ebp - 0x210], cx
push 0x206
push 0
lea edx, [ebp - 0x20e]
push edx
call fcn.0041c290
add esp, 0xc
push 0x104
lea eax, [ebp - 0x210]
push eax
push 0x26c3
call fcn.0040127b
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x508], cx
push 0x9e
push 0
lea edx, [ebp - 0x506]
push edx
call fcn.0041c290
add esp, 0xc
mov eax, dword [ebp - 0x9e0]
mov ecx, dword [eax + 0x2c0]
mov edx, dword [ecx + 0x274]
add edx, 1
push edx
lea eax, [ebp - 0x210]
push eax
push str._s__d
lea ecx, [ebp - 0x508]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
xor edx, edx
mov word [ebp - 0x2b8], dx
push 0x9e
push 0
lea eax, [ebp - 0x2b6]
push eax
call fcn.0041c290
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x2b8]
push ecx
push 0x26c1
call fcn.0040127b
add esp, 0xc
xor edx, edx
mov word [ebp - 0x710], dx
push 0x206
push 0
lea eax, [ebp - 0x70e]
push eax
call fcn.0041c290
add esp, 0xc
lea ecx, [ebp - 0x508]
push ecx
mov edx, dword [ebp - 0x9e0]
mov eax, dword [edx + 0x2c4]
mov ecx, dword [ebp - 0x9e0]
mov edx, dword [ecx + 0xd0bc]
imul edx, edx, 0x50
lea eax, [eax + edx + 0x44]
push eax
lea ecx, [ebp - 0x2b8]
push ecx
push str._s__s___s_
lea edx, [ebp - 0x710]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
mov eax, dword [ebp - 0x9e0]
mov ecx, dword [eax + 0x2c4]
mov edx, dword [ebp - 0x9e0]
mov eax, dword [edx + 0xd0bc]
mov edx, dword [ebp - 0x9e0]
mov edx, dword [edx + 0x2c4]
mov esi, dword [ebp - 0x9e0]
mov esi, dword [esi + 0x2c0]
mov esi, dword [esi + 0x274]
mov eax, dword [ecx + eax*4 + 0xa44]
xor ecx, ecx
cmp eax, dword [edx + esi*4 + 0xac4]
sete cl
mov dword [ebp - 0x214], ecx
mov dword [ebp - 0x468], 0
push 0x18c
push 0
lea edx, [ebp - 0x464]
push edx
call fcn.0041c290
add esp, 0xc
mov dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x9e0]
mov ecx, dword [eax + 0x2c4]
mov edx, dword [ebp - 0x9e0]
mov eax, dword [ecx + 0x40]
xor ecx, ecx
cmp eax, dword [edx + 0xd0bc]
sete cl
push ecx
push 0x10
push 0x10
mov edx, dword [ebp - 0x9e0]
mov eax, dword [edx + 0xd0bc]
push eax
mov ecx, dword [ebp - 0x9e0]
mov ecx, dword [ecx + 0x2c4]
call fcn.0040108c
mov edx, dword [ebp - 0x718]
mov dword [ebp + edx*4 - 0x468], eax
mov eax, dword [ebp - 0x214]
neg eax
sbb eax, eax
and eax, 3
push eax
mov ecx, dword [ebp - 0x718]
push ecx
mov edx, dword [ebp - 0x718]
imul edx, edx, 0x208
mov eax, dword [ebp - 0x9e0]
lea ecx, [eax + edx + 0x59c]
push ecx
mov edx, dword [ebp - 0x718]
mov eax, dword [ebp + edx*4 - 0x468]
push eax
lea ecx, [ebp - 0x710]
push ecx
push 0xffffffffffffffff
push 0x4d8b
mov edx, dword [ebp - 0x2bc]
push edx
mov eax, dword [ebp - 0x9e0]
mov ecx, dword [eax + 0x2c0]
call fcn.004010eb
mov ecx, dword [ebp - 0x718]
add ecx, 1
mov dword [ebp - 0x718], ecx
mov edx, dword [ebp - 0x9e0]
mov eax, dword [edx + 0x2c4]
mov ecx, dword [ebp - 0x9e0]
mov edx, dword [ecx + 0xd0bc]
mov eax, dword [eax + edx*4 + 0x7e84]
mov dword [ebp - 0x2d4], eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x2bc]
push ecx
mov edx, dword [ebp - 0x9e0]
mov ecx, dword [edx + 0x2c0]
call fcn.004011fe
mov dword [ebp - 0x714], 0
mov dword [ebp - 0x71c], 0
jmp 0x4184c6
mov eax, dword [ebp - 0x71c]
add eax, 1
mov dword [ebp - 0x71c], eax
mov ecx, dword [ebp - 0x71c]
cmp ecx, dword [ebp - 0x2d4]
jae 0x418651
mov edx, dword [ebp - 0x9e0]
mov eax, dword [edx + 0x2c4]
mov ecx, dword [ebp - 0x9e0]
mov edx, dword [ecx + 0xd0bc]
imul edx, edx, 0x190
lea eax, [eax + edx + 0x4c84]
mov ecx, dword [ebp - 0x71c]
mov edx, dword [eax + ecx*4]
mov dword [ebp - 0x92c], edx
cmp dword [ebp - 0x92c], 0
jne 0x418517
jmp 0x4184b7
mov eax, dword [ebp - 0x92c]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x41852a
jmp 0x4184b7
mov ecx, dword [ebp - 0x9e0]
mov esi, dword [ecx + 0x2c0]
mov edx, dword [ebp - 0x92c]
push edx
mov eax, dword [ebp - 0x9e0]
mov ecx, dword [eax + 0x2c4]
call fcn.00401339
cmp dword [esi + 0x274], eax
je 0x41855b
jmp 0x4184b7
xor ecx, ecx
mov word [ebp - 0x928], cx
push 0x206
push 0
lea edx, [ebp - 0x926]
push edx
call fcn.0041c290
add esp, 0xc
push 0x104
lea eax, [ebp - 0x928]
push eax
mov ecx, dword [ebp - 0x92c]
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea edx, [ebp - 0x928]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 1
jge 0x4185aa
jmp 0x4184b7
mov eax, dword [ebp - 0x92c]
push eax
mov ecx, dword [ebp - 0x9e0]
mov ecx, dword [ecx + 0x2c4]
call fcn.0040132f
mov edx, dword [ebp - 0x718]
mov dword [ebp + edx*4 - 0x468], eax
push 0
mov eax, dword [ebp - 0x718]
push eax
mov ecx, dword [ebp - 0x718]
imul ecx, ecx, 0x208
mov edx, dword [ebp - 0x9e0]
lea eax, [edx + ecx + 0x59c]
push eax
mov ecx, dword [ebp - 0x718]
mov edx, dword [ebp + ecx*4 - 0x468]
push edx
lea eax, [ebp - 0x928]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x71c]
add ecx, 0x4e20
push ecx
mov edx, dword [ebp - 0x2bc]
push edx
mov eax, dword [ebp - 0x9e0]
mov ecx, dword [eax + 0x2c0]
call fcn.004010eb
mov ecx, dword [ebp - 0x718]
add ecx, 1
mov dword [ebp - 0x718], ecx
mov edx, dword [ebp - 0x714]
add edx, 1
mov dword [ebp - 0x714], edx
jmp 0x4184b7
cmp dword [ebp - 0x714], 1
jae 0x4186f3
xor eax, eax
mov word [ebp - 0x9d0], ax
push 0x9e
push 0
lea ecx, [ebp - 0x9ce]
push ecx
call fcn.0041c290
add esp, 0xc
push 0x50
lea edx, [ebp - 0x9d0]
push edx
push 0x5eb
mov eax, dword [ebp - 0x9e0]
mov ecx, dword [eax + 0x2c4]
call fcn.004013d4
push 3
mov ecx, dword [ebp - 0x718]
push ecx
mov edx, dword [ebp - 0x718]
imul edx, edx, 0x208
mov eax, dword [ebp - 0x9e0]
lea ecx, [eax + edx + 0x59c]
push ecx
push 0
lea edx, [ebp - 0x9d0]
push edx
push 0xffffffffffffffff
push 0
mov eax, dword [ebp - 0x2bc]
push eax
mov ecx, dword [ebp - 0x9e0]
mov ecx, dword [ecx + 0x2c0]
call fcn.004010eb
mov edx, dword [ebp - 0x718]
add edx, 1
mov dword [ebp - 0x718], edx
lea eax, [ebp + 8]
push eax
mov ecx, dword [ebp - 0x9e0]
mov edx, dword [ecx + 0x18]
push edx
call dword [sym.imp.USER32.dll_ClientToScreen]
push 0
push 0
push 0x1f
mov eax, dword [ebp - 0x9e0]
mov ecx, dword [eax + 0x18]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x2d0], 0
xor edx, edx
mov dword [ebp - 0x2cc], edx
mov dword [ebp - 0x2c8], edx
mov dword [ebp - 0x2c4], edx
mov dword [ebp - 0x2c0], edx
mov dword [ebp - 0x2d0], 0x14
mov eax, dword [ebp - 0x9e0]
mov ecx, dword [eax + 0xd0bc]
shl ecx, 4
mov edx, dword [ebp - 0x9e0]
lea eax, [edx + ecx + 0x310]
mov ecx, dword [eax]
mov dword [ebp - 0x2cc], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x2c8], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2c4], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x2c0], edx
lea eax, [ebp - 0x2cc]
push eax
mov ecx, dword [ebp - 0x9e0]
mov edx, dword [ecx + 0x18]
push edx
call fcn.004014e2
add esp, 8
lea eax, [ebp - 0x2d0]
push eax
mov ecx, dword [ebp - 0x9e0]
mov edx, dword [ecx + 0x2c0]
mov eax, dword [edx + 0x228]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
push 2
mov eax, dword [ebp - 0x2bc]
push eax
call dword [sym.imp.USER32.dll_TrackPopupMenuEx]
mov dword [ebp - 0x9d4], 0
jmp 0x4187ef
mov ecx, dword [ebp - 0x9d4]
add ecx, 1
mov dword [ebp - 0x9d4], ecx
cmp dword [ebp - 0x9d4], 0x64
jae 0x418831
mov edx, dword [ebp - 0x9d4]
cmp dword [ebp + edx*4 - 0x468], 0
jne 0x41880a
jmp 0x4187e0
mov eax, dword [ebp - 0x9d4]
mov ecx, dword [ebp + eax*4 - 0x468]
push ecx
call dword [sym.imp.USER32.dll_DestroyIcon]
mov edx, dword [ebp - 0x9d4]
mov dword [ebp + edx*4 - 0x468], 0
jmp 0x4187e0
mov eax, dword [ebp - 0x2bc]
push eax
call dword [sym.imp.USER32.dll_DestroyMenu]
mov dword [ebp - 0x2bc], 0
mov eax, 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041c275
mov esp, ebp
pop ebp
ret 0xc