Function at 0x4b5db0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe4
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov ebx, dword [sym.imp.USER32.dll_CreateWindowExW]
mov edi, ecx
push edi
mov edx, dword [esi + 4]
mov eax, dword [esi + 0xc]
mov ecx, dword [esi]
sub eax, edx
push 0
push 0
push 0
push eax
mov eax, dword [esi + 8]
sub eax, ecx
push eax
push edx
push ecx
push 0x96800000
push str.GSM
push 0x4e6f00
push 8
call ebx
push 0x4e6f20
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xfffffffffffffff0
mov dword [edi + 4], eax
call dword [sym.imp.GDI32.dll_CreateFontW]
mov dword [edi], eax
mov eax, dword [esi + 8]
sub eax, dword [esi]
add eax, 0xfffffffb
mov dword [ebp - 0xe0], 3
mov dword [ebp - 0xdc], eax
add eax, 0xffffffdd
push 0x7dc
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xd8], 0x1c
call fcn.004bf3e2
sub esp, 0x14
mov dword [ebp - 0xd4], eax
lea ecx, [ebp - 0xe4]
push ecx
push dword [edi + 4]
push ecx
mov ecx, eax
call fcn.004baed0
movaps xmm0, xmmword [0x4e7a90]
push 0x350
mov dword [edi + 8], eax
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
lea ecx, [ebp - 0xe4]
push 0xffffffffffffffff
push 0xffffffffffffffff
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41880000
push 0x4e6f7c
push ecx
push dword [edi + 4]
mov ecx, eax
push 2
call fcn.004be3c0
push 0
push 0
push 3
push dword [edi + 4]
mov dword [edi + 0xc], eax
push 0
push 0x5f
push 0x32
push 0x50
push 0x56200003
push 0
push 0x4e6f84
push 0
call ebx
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
mov esi, 1
mov dword [edi + 0x10], eax
nop dword [eax + eax]
push esi
push str.COM_d
lea eax, [ebp - 0xd0]
push 0x64
push eax
call fcn.004b5c10
add esp, 0x10
lea eax, [ebp - 0xd0]
push eax
push 0xffffffffffffffff
push 0x14a
push dword [edi + 0x10]
call ebx
inc esi
cmp esi, 0x100
jle 0x4b5f10
push 0
push 0
push 0x14e
push dword [edi + 0x10]
call ebx
push 0
push 8
push 0x1701
push dword [edi + 0x10]
call ebx
push 1
push dword [edi]
push 0x30
push dword [edi + 0x10]
call ebx
movaps xmm0, xmmword [0x4e7a80]
push 0x378
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
push 0xff7f7f7f
push 0xffdce6f0
push 0xc8dce6f0
push 0x96dce6f0
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41500000
push 0x4e6fa4
push ecx
lea ecx, [ebp - 0xe4]
push ecx
push dword [edi + 4]
mov ecx, eax
push 4
call fcn.004bc460
movaps xmm0, xmmword [0x4e7a60]
push 0x350
mov dword [edi + 0x14], eax
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
lea ecx, [ebp - 0xe4]
push 0xffffffffffffffff
push 0xffffffffffffffff
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41880000
push 0x4e6fac
push ecx
push dword [edi + 4]
mov ecx, eax
push 5
call fcn.004be3c0
movaps xmm0, xmmword [0x4e7a70]
push 0x350
mov dword [edi + 0x18], eax
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
push 0xffffffffffffffff
push 0xffffffffffffffff
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41880000
push 0x4e6fb8
lea ecx, [ebp - 0xe4]
push ecx
push dword [edi + 4]
mov ecx, eax
push 6
call fcn.004be3c0
movaps xmm0, xmmword [0x4e7a40]
push 0x378
mov dword [edi + 0x1c], eax
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
push 0xff7f7f7f
push 0xffdce6f0
push 0xc8dce6f0
push 0x96dce6f0
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41500000
push 0x4e6fbc
push ecx
lea ecx, [ebp - 0xe4]
push ecx
push dword [edi + 4]
mov ecx, eax
push 7
call fcn.004bc460
movaps xmm0, xmmword [0x4e7ab0]
push 0x350
mov dword [edi + 0x20], eax
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
lea ecx, [ebp - 0xe4]
push 0xffffffffffffffff
push 0xffffffffffffffff
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41880000
push str._g:g
push ecx
push dword [edi + 4]
mov ecx, eax
push 8
call fcn.004be3c0
movaps xmm0, xmmword [0x4e7ac0]
push 0x350
mov dword [edi + 0x24], eax
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
lea ecx, [ebp - 0xe4]
push 0xffffffffffffffff
push 0xff000000
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41880000
push 0x4e6efc
push ecx
push dword [edi + 4]
mov ecx, eax
push 9
call fcn.004be3c0
movaps xmm0, xmmword [0x4e7aa0]
mov dword [edi + 0x28], eax
push 0x378
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
push 0xff7f7f7f
push 0xffdce6f0
push 0xc8dce6f0
push 0x96dce6f0
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41500000
push 0x4e6fd0
push ecx
lea ecx, [ebp - 0xe4]
push ecx
push dword [edi + 4]
mov ecx, eax
push 0xa
call fcn.004bc460
movaps xmm0, xmmword [0x4e7ad0]
push 0x350
mov dword [edi + 0x2c], eax
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
lea ecx, [ebp - 0xe4]
push 0xffffffffffffffff
push 0xffffffffffffffff
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41880000
push 0x4e6fd8
push ecx
push dword [edi + 4]
mov ecx, eax
push 0xb
call fcn.004be3c0
push 0
push 0
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
push 0xc
push dword [edi + 4]
mov dword [edi + 0x30], eax
push 0x1a
push 0x6e
push 0xe1
push 0x71
push 0x56802000
push 0
push 0x4e6fe4
push 0
call esi
push 1
push 0xb
push 0xc5
push eax
mov dword [edi + 0x34], eax
call ebx
push 1
push dword [edi]
push 0x30
push dword [edi + 0x34]
call ebx
movaps xmm0, xmmword [0x4e7af0]
push 0x378
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
push 0xff7f7f7f
push 0xffdce6f0
push 0xc8dce6f0
push 0x96dce6f0
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0xc
mov dword [ebp - 0xd4], eax
mov dword [esp + 8], 0x3f800000
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41880000
push 0x4e6ff0
push ecx
lea ecx, [ebp - 0xe4]
push ecx
push dword [edi + 4]
mov ecx, eax
push 0xd
call fcn.004bc460
movaps xmm0, xmmword [0x4e7ae0]
push 0x350
mov dword [edi + 0x38], eax
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
lea ecx, [ebp - 0xe4]
push 0xffffffffffffffff
push 0xffffffffffffffff
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41880000
push str.eg5u_f:y:
push ecx
push dword [edi + 4]
mov ecx, eax
push 0xe
call fcn.004be3c0
movaps xmm0, xmmword [0x4e7b00]
push 0x350
mov dword [edi + 0x3c], eax
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
lea ecx, [ebp - 0xe4]
push 0xffffffffffffffff
push 0xff000000
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41880000
push 0x4e6efc
push ecx
push dword [edi + 4]
mov ecx, eax
push 0xf
call fcn.004be3c0
movaps xmm0, xmmword [0x4e7b10]
push 0x378
mov dword [edi + 0x40], eax
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
push 0xff7f7f7f
push 0xffdce6f0
push 0xc8dce6f0
push 0x96dce6f0
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41880000
push 0x4e7004
push ecx
lea ecx, [ebp - 0xe4]
push ecx
push dword [edi + 4]
mov ecx, eax
push 0x10
call fcn.004bc460
movaps xmm0, xmmword [0x4e7b50]
push 0x350
mov dword [edi + 0x44], eax
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
lea ecx, [ebp - 0xe4]
push 0xffffffffffffffff
push 0xffffffffffffffff
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41880000
push 0x4e700c
push ecx
push dword [edi + 4]
mov ecx, eax
push 0x11
call fcn.004be3c0
push 0
push 0
push 0x12
push dword [edi + 4]
mov dword [edi + 0x48], eax
push 0x1a
push 0x6e
push 0x122
push 0x7b
push 0x56802000
push 0
push 0x4e6fe4
push 0
call esi
push 1
push 0xb
push 0xc5
push eax
mov dword [edi + 0x4c], eax
call ebx
push 1
push dword [edi]
push 0x30
push dword [edi + 0x4c]
call ebx
movaps xmm0, xmmword [0x4e7b30]
push 0x378
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
push 0xff7f7f7f
push 0xffdce6f0
push 0xc8dce6f0
push 0x96dce6f0
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41500000
push 0x4e701c
push ecx
lea ecx, [ebp - 0xe4]
push ecx
push dword [edi + 4]
mov ecx, eax
push 0x13
call fcn.004bc460
movaps xmm0, xmmword [0x4e7b60]
push 0x350
mov dword [edi + 0x50], eax
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
lea ecx, [ebp - 0xe4]
push 0xffffffffffffffff
push 0xffffffffffffffff
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41880000
push 0x4e7024
push ecx
push dword [edi + 4]
mov ecx, eax
push 0x14
call fcn.004be3c0
push 0
push 0
push 0x15
push dword [edi + 4]
mov dword [edi + 0x54], eax
push 0x1a
push 0x6e
push 0x122
push 0x189
push 0x56802000
push 0
push 0x4e6fe4
push 0
call esi
push 1
push 0xb
push 0xc5
push eax
mov dword [edi + 0x58], eax
call ebx
push 1
push dword [edi]
push 0x30
push dword [edi + 0x58]
call ebx
movaps xmm0, xmmword [0x4e7b40]
push 0x378
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
push 0xff7f7f7f
push 0xffdce6f0
push 0xc8dce6f0
push 0x96dce6f0
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41500000
push 0x4e701c
push ecx
lea ecx, [ebp - 0xe4]
push ecx
push dword [edi + 4]
mov ecx, eax
push 0x16
call fcn.004bc460
movaps xmm0, xmmword [0x4e7b90]
push 0x350
mov dword [edi + 0x5c], eax
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
lea ecx, [ebp - 0xe4]
push 0xffffffffffffffff
push 0xffffffffffffffff
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41880000
push 0x4e7034
push ecx
push dword [edi + 4]
mov ecx, eax
push 0x17
call fcn.004be3c0
push 0
push 0
push 0x18
push dword [edi + 4]
mov dword [edi + 0x60], eax
push 0x1a
push 0x6e
push 0x15e
push 0x7b
push 0x56802000
push 0
push 0x4e6fe4
push 0
call esi
push 1
push 0xb
push 0xc5
push eax
mov dword [edi + 0x64], eax
call ebx
push 1
push dword [edi]
push 0x30
push dword [edi + 0x64]
call ebx
movaps xmm0, xmmword [0x4e7b70]
push 0x378
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
push 0xff7f7f7f
push 0xffdce6f0
push 0xc8dce6f0
push 0x96dce6f0
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41500000
push 0x4e701c
push ecx
lea ecx, [ebp - 0xe4]
push ecx
push dword [edi + 4]
push 0x19
mov ecx, eax
call fcn.004bc460
movaps xmm0, xmmword [0x4e7ba0]
push 0x350
mov dword [edi + 0x68], eax
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
lea ecx, [ebp - 0xe4]
push 0xffffffffffffffff
push 0xffffffffffffffff
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41880000
push 0x4e7044
push ecx
push dword [edi + 4]
mov ecx, eax
push 0x1a
call fcn.004be3c0
push 0
push 0
push 0x1b
push dword [edi + 4]
mov dword [edi + 0x6c], eax
push 0x1a
push 0x6e
push 0x15e
push 0x189
push 0x56802000
push 0
push 0x4e6fe4
push 0
call esi
push 1
push 0xb
push 0xc5
push eax
mov dword [edi + 0x70], eax
call ebx
push 1
push dword [edi]
push 0x30
push dword [edi + 0x70]
call ebx
movaps xmm0, xmmword [0x4e7b80]
push 0x378
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
push 0xff7f7f7f
push 0xffdce6f0
push 0xc8dce6f0
push 0x96dce6f0
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41500000
push 0x4e701c
push ecx
lea ecx, [ebp - 0xe4]
push ecx
push dword [edi + 4]
mov ecx, eax
push 0x1c
call fcn.004bc460
movaps xmm0, xmmword [0x4e7bd0]
mov dword [edi + 0x74], eax
movups xmmword [ebp - 0xe4], xmm0
push 0x378
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
push 0xff7f7f7f
push 0xffdce6f0
push 0xc8dce6f0
push 0x96dce6f0
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41c80000
push 0x4e7054
push ecx
lea ecx, [ebp - 0xe4]
push ecx
push dword [edi + 4]
mov ecx, eax
push 0x1d
call fcn.004bc460
movaps xmm0, xmmword [0x4e7be0]
push 0x378
mov dword [edi + 0x78], eax
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
push 0xff7f7f7f
push 0xffdce6f0
push 0xc8dce6f0
push 0x96dce6f0
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41c80000
push 0x4e7064
push ecx
lea ecx, [ebp - 0xe4]
push ecx
push dword [edi + 4]
mov ecx, eax
push 0x1e
call fcn.004bc460
movaps xmm0, xmmword [0x4e7bf0]
push 0x378
mov dword [edi + 0x7c], eax
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
push 0xff7f7f7f
push 0xffdce6f0
push 0xc8dce6f0
push 0x96dce6f0
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41c80000
push 0x4e7070
push ecx
lea ecx, [ebp - 0xe4]
push ecx
push dword [edi + 4]
mov ecx, eax
push 0x1f
call fcn.004bc460
movaps xmm0, xmmword [0x4e7c00]
push 0x378
mov dword [edi + 0x80], eax
movups xmmword [ebp - 0xe4], xmm0
call fcn.004bf3e2
add esp, 4
mov dword [ebp - 0xd4], eax
push 0xff7f7f7f
push 0xffdce6f0
push 0xc8dce6f0
push 0x96dce6f0
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0xc
mov dword [esp + 8], 0x3f800000
push 0xff000000
push 0xff000000
push 0xff000000
push 0xff000000
sub esp, 0x14
mov dword [esp + 0xc], 0x41c80000
push 0x4e7080
push ecx
lea ecx, [ebp - 0xe4]
push ecx
push dword [edi + 4]
mov ecx, eax
push 0x20
call fcn.004bc460
mov ecx, dword [ebp - 4]
mov dword [edi + 0x84], eax
xor ecx, ebp
mov eax, edi
pop edi
pop esi
pop ebx
call fcn.004bf1a3
mov esp, ebp
pop ebp
ret 8