Function at 0x401bc0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x418e0d
mov eax, dword fs:[0]
push eax
sub esp, 0xf8
mov eax, dword [0x4210a0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
xor esi, esi
mov dword [ebp - 4], esi
mov ecx, dword [edi + 4]
lea eax, [ebp - 0xb4]
push eax
push ecx
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xa8], esi
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [ebp + 8]
lea edx, [ebp - 0xb4]
push edx
lea eax, [ebp - 0x104]
push eax
call fcn.00407700
mov byte [ebp - 4], 1
mov edx, dword [edi + 4]
lea ecx, [ebp - 0xa4]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [edi + 4]
push eax
call dword [sym.imp.USER32.dll_GetParent]
lea ecx, [ebp - 0xa4]
mov ebx, eax
push ecx
push ebx
call dword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x401c75
lea edx, [ebp - 0x9c]
push edx
push ebx
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0xa4]
push esi
mov esi, dword [sym.imp.GDI32.dll_SetViewportOrgEx]
neg eax
push eax
mov eax, dword [ebp - 0x104]
neg ecx
push ecx
push eax
call esi
mov ecx, dword [ebp - 0x104]
push 0
push ecx
push 0xf
push ebx
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [ebp - 0x104]
push 0
push 0
push 0
push edx
call esi
mov eax, dword [edi + 4]
mov bl, byte [edi + 0x24]
push eax
and bl, 1
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x401cd4
mov ecx, dword [edi + 0x64]
mov edx, dword [edi + 0x38]
jmp 0x401d05
mov eax, dword [edi + 0x44]
test al, 4
je 0x401cef
mov eax, dword [edi + 0x60]
mov ecx, dword [edi + 0x30]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc0], ecx
jmp 0x401d11
test bl, bl
jne 0x401ef3
test al, 2
jne 0x401efb
mov ecx, dword [edi + 0x58]
mov edx, dword [edi + 0x2c]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xc8], ecx
xor ebx, ebx
cmp dword [edi + 0x48], ebx
je 0x401fce
cmp dword [edi + 0x4c], ebx
je 0x401fce
cmp dword [edi + 0x50], ebx
je 0x401fce
mov ecx, dword [ebp - 0x104]
lea eax, [ebp - 0xb8]
push eax
push ecx
mov dword [ebp - 0xb8], ebx
call dword [sym.imp.gdiplus.dll_GdipCreateFromHDC]
mov edx, dword [ebp - 0xb8]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x9c], edx
mov byte [ebp - 4], 2
mov esi, dword [edi + 0x48]
mov ecx, dword [esi + 4]
lea eax, [ebp - 0xb8]
push eax
push ecx
mov dword [ebp - 0xb8], ebx
call dword [sym.imp.gdiplus.dll_GdipGetImageWidth]
cmp eax, ebx
je 0x401d7f
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xb8]
xor edx, edx
div dword [edi + 0x54]
mov ebx, dword [edi + 0x48]
lea edx, [ebp - 0xc4]
push edx
mov dword [ebp - 0xc4], 0
mov esi, eax
mov eax, dword [ebx + 4]
push eax
mov dword [ebp - 0xcc], esi
call dword [sym.imp.gdiplus.dll_GdipGetImageHeight]
test eax, eax
je 0x401db7
mov dword [ebx + 8], eax
mov ebx, dword [edi + 0x4c]
mov edx, dword [ebx + 4]
lea ecx, [ebp - 0xb8]
push ecx
push edx
mov dword [ebp - 0xb8], 0
call dword [sym.imp.gdiplus.dll_GdipGetImageWidth]
test eax, eax
je 0x401ddc
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0xb8]
xor edx, edx
div dword [edi + 0x54]
mov ebx, dword [edi + 0x4c]
mov ecx, dword [ebx + 4]
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0xbc]
push eax
push ecx
call dword [sym.imp.gdiplus.dll_GdipGetImageHeight]
test eax, eax
je 0x401e12
mov dword [ebx + 8], eax
mov ebx, dword [edi + 0x50]
mov eax, dword [ebx + 4]
lea edx, [ebp - 0xb8]
push edx
push eax
mov dword [ebp - 0xb8], 0
call dword [sym.imp.gdiplus.dll_GdipGetImageWidth]
test eax, eax
je 0x401e37
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0xb8]
xor edx, edx
div dword [edi + 0x54]
lea ecx, [ebp - 0xb8]
push ecx
mov dword [ebp - 0xb8], 0
mov ebx, eax
mov eax, dword [edi + 0x50]
mov edx, dword [eax + 4]
push edx
mov dword [ebp - 0xe4], eax
call dword [sym.imp.gdiplus.dll_GdipGetImageHeight]
xor ecx, ecx
cmp eax, ecx
je 0x401e77
mov edx, dword [ebp - 0xe4]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xa8]
sub eax, dword [ebp - 0xb0]
mov edx, dword [ebp - 0xc4]
push esi
mov dword [ebp - 0xd8], esi
imul esi, dword [ebp - 0xc0]
push ecx
mov dword [ebp - 0xe0], ecx
mov dword [ebp - 0xdc], ecx
mov ecx, dword [edi + 0x48]
mov dword [ebp - 0xd4], eax
push esi
lea eax, [ebp - 0xe0]
lea esi, [ebp - 0x9c]
call fcn.004011a0
mov eax, dword [ebp - 0xac]
sub eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xa8]
mov esi, dword [ebp - 0xcc]
mov edx, dword [edi + 0x4c]
sub ecx, dword [ebp - 0xb0]
sub eax, ebx
sub eax, esi
test edx, edx
je 0x401f12
mov edx, dword [edx + 4]
mov dword [ebp - 0xc4], edx
jmp 0x401f1c
test al, 1
je 0x401cff
mov edx, dword [edi + 0x5c]
mov eax, dword [edi + 0x34]
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0xc0], eax
jmp 0x401d11
mov dword [ebp - 0xc4], 0
mov edx, dword [ebp - 0xbc]
push 0
push 0
push 0
push 2
push edx
mov edx, dword [ebp - 0xd0]
imul edx, dword [ebp - 0xc0]
push 1
push 0
push edx
push ecx
mov ecx, dword [ebp - 0x9c]
push eax
mov eax, dword [ebp - 0xc4]
push 0
push esi
push eax
push ecx
call dword [sym.imp.gdiplus.dll_GdipDrawImageRectRectI]
test eax, eax
je 0x401f60
mov dword [ebp - 0x98], eax
mov edx, dword [ebp - 0xac]
sub edx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xa8]
sub eax, dword [ebp - 0xb0]
mov ecx, dword [edi + 0x50]
sub edx, ebx
push ebx
mov dword [ebp - 0xd8], ebx
imul ebx, dword [ebp - 0xc0]
push 0
mov dword [ebp - 0xe0], edx
mov edx, dword [ebp - 0xb8]
mov dword [ebp - 0xd4], eax
push ebx
lea eax, [ebp - 0xe0]
lea esi, [ebp - 0x9c]
mov dword [ebp - 0xdc], 0
call fcn.004011a0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x9c]
push eax
call dword [sym.imp.gdiplus.dll_GdipDeleteGraphics]
xor ebx, ebx
push 0x7e
lea edx, [ebp - 0x92]
xor ecx, ecx
push ebx
push edx
mov word [ebp - 0x94], cx
call fcn.0040c8a0
mov ecx, dword [edi + 4]
add esp, 0xc
push 0x40
lea eax, [ebp - 0x94]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextW]
cmp word [ebp - 0x94], bx
je 0x402172
mov edx, dword [ebp - 0xb4]
mov esi, dword [edi + 0x48]
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0xa4], edx
mov edx, dword [ebp - 0xa8]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x98], edx
cmp esi, ebx
je 0x4020ac
cmp dword [edi + 0x50], ebx
je 0x4020ac
mov ecx, dword [esi + 4]
lea eax, [ebp - 0xbc]
push eax
push ecx
mov dword [ebp - 0xbc], ebx
call dword [sym.imp.gdiplus.dll_GdipGetImageWidth]
cmp eax, ebx
je 0x402063
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xbc]
xor edx, edx
div dword [edi + 0x54]
mov esi, dword [edi + 0x50]
lea edx, [ebp - 0xbc]
push edx
mov dword [ebp - 0xbc], 0
mov ebx, eax
mov eax, dword [esi + 4]
push eax
call dword [sym.imp.gdiplus.dll_GdipGetImageWidth]
test eax, eax
je 0x402095
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xbc]
xor edx, edx
div dword [edi + 0x54]
add dword [ebp - 0xa4], ebx
sub dword [ebp - 0x9c], eax
test byte [edi + 0x44], 4
je 0x4020c3
push 1
push 1
lea ecx, [ebp - 0xa4]
push ecx
call dword [sym.imp.USER32.dll_OffsetRect]
mov edx, dword [ebp - 0x104]
mov esi, dword [sym.imp.GDI32.dll_SetBkMode]
push 1
push edx
call esi
push 0x11
mov edi, eax
call dword [sym.imp.GDI32.dll_GetStockObject]
mov ebx, dword [sym.imp.GDI32.dll_SelectObject]
push eax
mov eax, dword [ebp - 0x104]
push eax
call ebx
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ebp - 0x104]
push ecx
push edx
mov dword [ebp - 0xd0], eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 0xcc], eax
lea eax, [ebp - 0x94]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x402117
push 0x25
sub eax, edx
lea ecx, [ebp - 0xa4]
push ecx
sar eax, 1
push eax
mov eax, dword [ebp - 0x104]
lea edx, [ebp - 0x94]
push edx
push eax
call dword [sym.imp.USER32.dll_DrawTextW]
mov ecx, dword [ebp - 0x104]
push edi
push ecx
call esi
mov edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x104]
push edx
push eax
call ebx
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebp - 0x104]
push ecx
push edx
call dword [sym.imp.GDI32.dll_SetTextColor]
mov byte [ebp - 4], 0
lea eax, [ebp - 0x104]
push eax
call fcn.00407610
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040bbb3
mov esp, ebp
pop ebp
ret 4