Function at 0x435829
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x3c
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x50]
mov ebp, dword [edi + 0x10]
mov esi, dword [edi + 0x18]
mov ecx, ebp
and ecx, 0x10
and ebp, 6
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], ebp
je 0x435862
push 0xe
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push esi
call dword [sym.imp.GDI32.dll_SetTextColor]
mov ebx, dword [esp + 0x54]
jmp 0x43587e
mov ebx, dword [esp + 0x54]
mov eax, dword [ebx + 0x48]
cmp eax, 0xffffffff
jne 0x435876
push 0x12
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push esi
call dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [esp + 0x14], eax
mov eax, dword [ebx + 0x44]
cmp eax, 0xffffffff
jne 0x4358a0
push 0xf
call dword [sym.imp.USER32.dll_GetSysColorBrush]
push 0xf
mov dword [esp + 0x54], eax
call dword [sym.imp.USER32.dll_GetSysColor]
jmp 0x4358ae
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [esp + 0x50], eax
mov eax, dword [ebx + 0x44]
mov dword [esp + 0x18], eax
test ebp, ebp
je 0x4358c0
push 0x11
call dword [sym.imp.USER32.dll_GetSysColor]
jmp 0x4358c5
mov eax, 0x743c00
push eax
push 1
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
mov ebp, dword [sym.imp.GDI32.dll_SelectObject]
mov ebx, eax
push ebx
push esi
call ebp
mov ecx, dword [esp + 0x18]
push ecx
push esi
mov dword [esp + 0x38], eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov edx, dword [esp + 0x50]
push edx
push esi
mov dword [esp + 0x3c], eax
call ebp
mov ecx, dword [edi + 0x20]
mov edx, dword [edi + 0x24]
mov dword [esp + 0x2c], eax
mov eax, dword [edi + 0x1c]
push 0xffffffffffffffff
mov dword [esp + 0x40], ecx
mov dword [esp + 0x3c], eax
mov eax, dword [edi + 0x28]
push 0xffffffffffffffff
lea ecx, [esp + 0x40]
push ecx
mov dword [esp + 0x4c], edx
mov dword [esp + 0x50], eax
call dword [sym.imp.USER32.dll_InflateRect]
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
push 5
push 5
push edx
mov edx, dword [esp + 0x44]
push eax
push ecx
push edx
push esi
call dword [sym.imp.GDI32.dll_RoundRect]
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
push 0xfffffffffffffff0
push ecx
mov dword [esp + 0x20], 0x105
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, 0x2000
jne 0x43596c
mov dword [esp + 0x18], 0x125
mov edx, dword [esp + 0x54]
mov eax, dword [edx]
push 0
push 0
push 0xe
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
xor ecx, ecx
mov dword [esp + 0x1c], eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00412288
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x58]
add esp, 4
push ecx
push eax
mov dword [esp + 0x30], eax
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
cmp dword [esp + 0x20], 0
je 0x4359f2
mov edx, dword [edi + 0x20]
mov ecx, dword [edi + 0x1c]
mov eax, dword [edi + 0x24]
push 0xfffffffffffffffd
mov dword [esp + 0x40], edx
mov dword [esp + 0x3c], ecx
mov ecx, dword [edi + 0x28]
push 0xfffffffffffffffd
lea edx, [esp + 0x40]
push edx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
call dword [sym.imp.USER32.dll_InflateRect]
lea eax, [esp + 0x38]
push eax
push esi
call dword [sym.imp.USER32.dll_DrawFocusRect]
cmp dword [esp + 0x24], 0
je 0x435a09
push 0x11
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push esi
call dword [sym.imp.GDI32.dll_SetTextColor]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x28]
push ecx
lea edx, [esp + 0x3c]
push edx
push 0xffffffffffffffff
push edi
push esi
call dword [sym.imp.USER32.dll_DrawTextW]
push edi
call fcn.00412949
mov eax, dword [esp + 0x30]
add esp, 4
push eax
push esi
call ebp
mov ecx, dword [esp + 0x50]
mov edi, dword [sym.imp.GDI32.dll_DeleteObject]
push ecx
call edi
mov edx, dword [esp + 0x30]
push edx
push esi
call ebp
push ebx
call edi
mov eax, dword [esp + 0x14]
push eax
push esi
call dword [sym.imp.GDI32.dll_SetTextColor]
mov ecx, dword [esp + 0x34]
push ecx
push esi
call dword [sym.imp.GDI32.dll_SetBkColor]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x3c
ret 8