Function at 0x403d29
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x21c
mov eax, dword [0x4055f0]
push ebx
push esi
push edi
xor esi, esi
push eax
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x1c], esi
call dword [sym.imp.USER32.dll_SetCursor]
mov eax, dword [section..data]
mov dword [0x40535c], esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
mov edi, eax
call dword [sym.imp.GDI32.dll_GetTextCharset]
push edi
mov dword [ebp - 0x18], eax
mov eax, dword [section..data]
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
call fcn.004049fb
mov ebx, eax
test ebx, ebx
jne 0x403d89
mov eax, 0xfffffffb
jmp 0x404419
cmp ebx, 0xffffffff
je 0x404414
push 8
push ebx
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0xa
mov dword [ebp - 4], eax
push ebx
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 8
mov dword [0x40533c], eax
push ebx
call dword [sym.imp.GDI32.dll_SetMapMode]
push 0
mov eax, dword [0x40533c]
push eax
push dword [ebp - 4]
push ebx
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
push 0
mov eax, dword [0x4057c4]
push dword [0x4057c8]
push eax
push ebx
mov esi, 0x4057dc
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
mov eax, 0x405370
push 2
mov edi, eax
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ebx
call dword [sym.imp.GDI32.dll_LPtoDP]
push 1
push ebx
call dword [sym.imp.GDI32.dll_SetMapMode]
push 1
push ebx
call dword [sym.imp.GDI32.dll_SetBkMode]
push 0x5a
push ebx
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov dword [ebp - 8], eax
lea eax, [ebp - 0x88]
push eax
push ebx
call dword [sym.imp.GDI32.dll_GetTextMetricsA]
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x14], ecx
mov dword [0x405340], eax
mov eax, dword [ebp - 0x78]
push 0x2d0
push dword [ebp - 8]
add eax, ecx
mov dword [0x405380], eax
mov eax, dword [ebp - 0x74]
shl eax, 3
mov dword [0x4052a8], eax
push dword [0x40500c]
mov esi, 0x405810
call dword [sym.imp.KERNEL32.dll_MulDiv]
lea edi, [ebp - 0xc4]
mov ecx, 0xf
neg eax
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xc0], 0
mov byte [ebp - 0xaa], 0
cmp dword [0x40502c], 0
mov dword [ebp - 0xc4], eax
je 0x403ebb
push 0x20
lea eax, [ebp - 0xe4]
push eax
push 0x39
push dword [0x405540]
call dword [sym.imp.USER32.dll_LoadStringA]
lea ecx, [ebp - 0xe4]
lea edx, [ebp - 0xa8]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0xc4]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
mov dword [ebp - 0xc], eax
test eax, eax
je 0x403ee8
push eax
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x1c], eax
push ecx
push ebx
call dword [sym.imp.GDI32.dll_GetTextMetricsA]
cmp dword [ebp - 0xc], 0
jne 0x403f22
mov byte [ebp - 0xa8], 0
lea eax, [ebp - 0xc4]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
mov dword [ebp - 0xc], eax
test eax, eax
je 0x403f14
push eax
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x88]
push eax
push ebx
call dword [sym.imp.GDI32.dll_GetTextMetricsA]
push 0x20
lea eax, [ebp - 0xe4]
push eax
push 0x39
push dword [0x405540]
call dword [sym.imp.USER32.dll_LoadStringA]
lea ecx, [ebp - 0xe4]
xor esi, esi
push ecx
push 0x31
push esi
push 0x20
push esi
push dword [ebp - 0x18]
push esi
push esi
push esi
push dword [ebp - 0x6c]
push esi
push esi
push esi
push dword [ebp - 0x14]
call dword [sym.imp.GDI32.dll_CreateFontA]
mov ecx, dword [ebp - 0x78]
mov dword [0x4052a4], eax
add ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x74]
mov dword [0x405354], ecx
mov dword [0x405338], eax
shl eax, 3
mov dword [0x40534c], eax
mov eax, dword [ebp - 8]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [0x405360], eax
mov eax, dword [0x40533c]
sub eax, dword [0x405374]
sub eax, dword [0x40537c]
cdq
idiv ecx
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
push ecx
push 1
push 0x401098
push ebx
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
mov eax, dword [0x405370]
cdq
idiv dword [ebp - 0x3c]
mov ecx, eax
mov eax, dword [0x405378]
cdq
idiv dword [ebp - 0x3c]
mov edi, eax
mov eax, dword [ebp - 4]
cdq
idiv dword [0x405338]
sub eax, edi
sub eax, ecx
mov dword [0x405364], eax
mov eax, dword [ebp - 4]
cdq
idiv dword [0x405340]
sub eax, edi
sub eax, ecx
cmp dword [ebp - 0x2c], esi
mov dword [0x405334], eax
jle 0x40440d
cmp dword [0x405364], esi
jle 0x40440d
push 0x403b76
push ebx
call dword [sym.imp.GDI32.dll_SetAbortProc]
push 0x136
lea eax, [ebp - 0x21c]
push eax
push dword [section..data]
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea ecx, [ebp - 0x21c]
mov dword [ebp - 0x48], esi
lea edx, [ebp - 0x50]
mov dword [ebp - 0x4c], ecx
push edx
mov dword [ebp - 0x44], esi
push ebx
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x50], 0x14
call dword [sym.imp.GDI32.dll_StartDocA]
mov dword [ebp - 4], eax
cmp eax, esi
jge 0x404076
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3f
jne 0x4043ac
mov dword [ebp - 4], 0xfffffffd
jmp 0x4043ac
xor esi, esi
mov eax, dword [section..data]
push esi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push esi
mov eax, dword [section..data]
push 0x403be1
push eax
push 0xc
push dword [0x405540]
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov dword [0x405348], eax
cmp eax, esi
je 0x4043a5
xor esi, esi
mov eax, dword [0x405004]
push esi
push esi
push 0xe
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea edi, [eax + 1]
push edi
push 0x42
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 8], eax
cmp eax, esi
je 0x4043a5
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_LocalLock]
test eax, eax
jne 0x4040f0
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x4043a5
push eax
push edi
push 0xd
push dword [0x405004]
call dword [sym.imp.USER32.dll_SendMessageA]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_LocalUnlock]
mov esi, dword [0x405354]
mov eax, dword [0x405334]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x14], 0
mov dword [0x405350], 1
add eax, 2
push eax
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0x1000
mov dword [0x4052a0], eax
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
cmp dword [0x4052a0], 0
mov dword [ebp - 0x10], eax
je 0x4043a5
test eax, eax
je 0x4043a5
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push dword [ebp - 8]
mov dword [ebp - 0x24], eax
call dword [sym.imp.KERNEL32.dll_LocalLock]
push 0
mov dword [ebp - 0x30], eax
push 0
mov eax, dword [0x405004]
push 0xba
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [0x40535c], 0
mov dword [ebp - 0x34], eax
jne 0x404300
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x34], eax
jle 0x404300
push 0
inc dword [ebp - 0x28]
push eax
push 0xbb
push dword [0x405004]
call dword [sym.imp.USER32.dll_SendMessageA]
mov edi, eax
push 0
push edi
mov eax, dword [0x405004]
push 0xc1
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push dword [0x405364]
push dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x30]
add eax, edi
push eax
call fcn.00404420
cmp eax, dword [0x405364]
mov edi, eax
mov dword [ebp - 0x20], 0
jle 0x404203
mov dword [ebp - 0x18], 1
cmp dword [ebp - 0x14], 0
jne 0x40422d
push ebx
call dword [sym.imp.GDI32.dll_StartPage]
mov dword [ebp - 4], eax
test eax, eax
jl 0x4043ac
push dword [ebp - 0xc]
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push 0
push ebx
call fcn.00403c67
mov eax, dword [0x405370]
cmp edi, dword [0x405364]
push eax
push 0x40534c
push 1
jle 0x404277
push dword [0x405364]
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x20]
push eax
mov eax, dword [0x405374]
sub eax, dword [0x405354]
add eax, esi
push eax
push dword [0x405370]
push ebx
call dword [sym.imp.USER32.dll_TabbedTextOutA]
mov ecx, dword [0x405364]
sub edi, ecx
add dword [ebp - 0x20], ecx
jmp 0x4042a1
push edi
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x20]
push eax
mov eax, dword [0x405374]
sub eax, dword [0x405354]
add eax, esi
push eax
push dword [0x405370]
push ebx
call dword [sym.imp.USER32.dll_TabbedTextOutA]
mov dword [ebp - 0x18], 0
add esi, dword [0x405354]
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x2c]
jl 0x4042e9
push 1
push ebx
call fcn.00403c67
push ebx
call dword [sym.imp.GDI32.dll_EndPage]
mov dword [ebp - 4], eax
test eax, eax
jl 0x4043ac
mov esi, dword [0x405354]
inc dword [0x405350]
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x18], 0
jne 0x404203
cmp dword [ebp - 0x18], 0
jne 0x40422d
cmp dword [0x40535c], 0
je 0x40419d
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_LocalUnlock]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_LocalFree]
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [ebp - 0x10], 0
cmp dword [ebp - 0x14], 0
je 0x404339
push 1
push ebx
call fcn.00403c67
cmp dword [0x40535c], 0
jne 0x40436b
cmp dword [ebp - 0x14], 0
jle 0x404356
push ebx
call dword [sym.imp.GDI32.dll_EndPage]
mov dword [ebp - 4], eax
test eax, eax
jl 0x4043ac
cmp dword [0x40535c], 0
jne 0x40436b
push ebx
call dword [sym.imp.GDI32.dll_EndDoc]
call fcn.004044f5
push ebx
call dword [sym.imp.GDI32.dll_DeleteDC]
push dword [ebp - 0xc]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [0x4052a4]
xor esi, esi
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [0x4052a0]
mov dword [0x4052a4], esi
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
xor eax, eax
mov dword [0x4052a0], esi
jmp 0x404419
mov dword [ebp - 4], 0xfffffffb
cmp dword [ebp - 0x1c], 0
je 0x4043bc
push dword [ebp - 0x1c]
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push ebx
call dword [sym.imp.GDI32.dll_AbortDoc]
push ebx
call dword [sym.imp.GDI32.dll_DeleteDC]
push dword [ebp - 0xc]
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [0x40535c], 0
jne 0x4043e1
call fcn.004044f5
mov eax, dword [0x4052a0]
xor esi, esi
test eax, eax
je 0x4043f9
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [0x4052a0], esi
cmp dword [ebp - 0x10], 0
je 0x404408
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [ebp - 4]
jmp 0x404419
push ebx
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret