Function at 0x4dc1a0
Capabilities:
Get graphical window text

Disassembly:
mov eax, dword [esp + 4]
sub esp, 0xd4
push ebx
push esi
push edi
push ebp
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4dc50e
lea eax, [esp + 0x30]
mov ecx, dword [esp + 0xe8]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [esp + 0x20]
mov eax, dword [esp + 0xe8]
push ecx
push eax
call fcn.004dcb00
lea ecx, [esp + 0x48]
mov edx, dword [esp + 0xf0]
add esp, 8
push ecx
push edx
call fcn.004dcb60
mov ecx, dword [esp + 0xf0]
add esp, 8
push str.Active
push ecx
call dword [sym.imp.USER32.dll_GetPropA]
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0x18], eax
push ecx
call dword [sym.imp.USER32.dll_GetWindowDC]
mov ebx, eax
push 0
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
push ecx
mov ebp, dword [sym.imp.GDI32.dll_SetWindowOrgEx]
push eax
push ebx
call ebp
push 0xdedeef
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov esi, eax
test esi, esi
je 0x4dc2f1
mov eax, dword [esp + 0xe8]
push 0xfffffffffffffff0
push eax
mov ebp, dword [sym.imp.USER32.dll_GetWindowLongA]
call ebp
test eax, 0x40000
je 0x4dc2a9
push 0x20
mov ebp, dword [sym.imp.USER32.dll_GetSystemMetrics]
call ebp
mov edi, eax
push 0x21
call ebp
mov ebp, eax
lea ecx, [esp + 0x30]
mov eax, dword [esp + 0x18]
push eax
push esi
push ecx
push ebx
call fcn.004dc740
add esp, 0x10
mov eax, 1
sub eax, ebp
lea ecx, [esp + 0x30]
push eax
mov eax, 1
sub eax, edi
mov edi, dword [sym.imp.USER32.dll_InflateRect]
push eax
push ecx
call edi
jmp 0x4dc2af
mov edi, dword [sym.imp.USER32.dll_InflateRect]
lea eax, [esp + 0x30]
push esi
push eax
mov ebp, dword [sym.imp.USER32.dll_FrameRect]
push ebx
call ebp
lea ecx, [esp + 0x20]
push esi
push ecx
push ebx
call ebp
lea eax, [esp + 0x40]
push 1
push 1
push eax
call edi
lea eax, [esp + 0x40]
push esi
push eax
push ebx
call ebp
lea eax, [esp + 0x40]
push 0xffffffffffffffff
push 0xffffffffffffffff
push eax
call edi
push esi
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
call esi
jmp 0x4dc2fd
mov edi, dword [sym.imp.USER32.dll_InflateRect]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
lea eax, [esp + 0x40]
push 0
push eax
push ebx
call fcn.004dc520
lea eax, [esp + 0x2c]
add esp, 0xc
push 0xffffffffffffffff
push 0xffffffffffffffff
push eax
call edi
call fcn.004dbb60
dec eax
add dword [esp + 0x20], eax
mov eax, 3
cmp dword [esp + 0x18], 1
adc eax, 0xffffffff
push eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov edi, eax
test edi, edi
je 0x4dc355
lea eax, [esp + 0x20]
push edi
push eax
mov ebp, dword [sym.imp.USER32.dll_FillRect]
push ebx
call ebp
push edi
call esi
lea eax, [esp + 0x88]
push 0x40
mov ecx, dword [esp + 0xec]
push eax
push ecx
mov ebp, dword [sym.imp.USER32.dll_GetWindowTextA]
call ebp
mov ebp, eax
test ebp, ebp
je 0x4dc4ff
lea eax, [esp + 0x50]
push 8
push ebx
push eax
call fcn.004689a0
lea edi, [esp + 0x78]
add esp, 0xc
mov esi, eax
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
lea esi, [esp + 0x6c]
lea edi, [esp + 0xc8]
mov ecx, 7
push 0
rep movsd dword es:[edi], dword [esi]
push ebx
call dword [sym.imp.GDI32.dll_SetTextAlign]
lea eax, [esp + 0x88]
push ebp
push eax
push ebx
call fcn.0046a200
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x34]
sub eax, dword [esp + 0x2c]
add esp, 0xc
sub eax, 2
mov dword [esp + 0x1c], eax
cmp eax, dword [esp + 0x14]
jge 0x4dc491
mov eax, dword [0x50982c]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov word [esp + 0x12], ax
lea ecx, [esp + ebp + 0x88]
mov esi, ecx
mov dword [esp + 0x50], ecx
cmp dword [0x50928c], 0
jne 0x4dc42b
mov eax, esi
lea ecx, [esp + 0x88]
sub eax, ecx
cmp eax, 1
jle 0x4dc422
dec esi
jmp 0x4dc43c
lea esi, [esp + 0x88]
jmp 0x4dc43c
lea eax, [esp + 0x88]
push esi
push eax
call dword [sym.imp.USER32.dll_CharPrevA]
mov esi, eax
lea eax, [esp + 0x88]
cmp esi, eax
jbe 0x4dc491
movsx edi, word [esp + 0x12]
mov eax, dword [esp + 0x50]
sub eax, esi
cmp eax, edi
jle 0x4dc406
push eax
lea eax, [esp + 0x70]
push eax
push esi
call fcn.004c6fe0
lea eax, [esp + 0x94]
add esp, 0xc
sub edi, eax
lea eax, [esp + 0x88]
lea ebp, [edi + esi]
push ebp
push eax
push ebx
call fcn.0046a200
mov dword [esp + 0x20], eax
add esp, 0xc
cmp dword [esp + 0x1c], eax
jl 0x4dc406
cmp dword [esp + 0x18], 1
sbb eax, eax
and eax, 0xa
add eax, 9
push eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push ebx
call dword [sym.imp.GDI32.dll_SetTextColor]
cmp byte [0x509290], 0x4a
mov ecx, dword [esp + 0x24]
jne 0x4dc4be
inc cx
jmp 0x4dc4c0
dec cx
lea eax, [esp + 0x88]
push ebp
movsx ecx, cx
push eax
push ecx
mov eax, dword [esp + 0x34]
sub eax, dword [esp + 0x20]
mov ebp, dword [sym.imp.GDI32.dll_TextOutA]
add eax, dword [esp + 0x2c]
cdq
sub eax, edx
sar eax, 1
push eax
push ebx
call ebp
lea ecx, [esp + 0xc8]
lea eax, [esp + 0x50]
push ecx
push ebx
push eax
call fcn.004698f0
add esp, 0xc
mov eax, dword [esp + 0xe8]
push ebx
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0xd4
ret