Function at 0x518914
Capabilities:
Get graphical window text
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x89
push 0
push 0
dec ecx
jne 0x51891d
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
mov esi, edx
lea edi, [ebp - 4]
xor eax, eax
push ebp
push 0x518efc
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xff
lea eax, [ebp - 0x214]
push eax
push esi
call sub.user32.dll_GetWindowTextW
lea eax, [ebp - 0x14]
push eax
push esi
call sub.user32.dll_GetWindowRect
lea eax, [ebp - 0x41c]
lea edx, [ebp - 0x214]
mov ecx, pe_nt_image_headers32
call fcn.00406f7c
mov ecx, dword [ebp - 0x41c]
lea eax, [ebp - 0x418]
mov edx, 0x518f18
call fcn.00407250
mov edx, dword [ebp - 0x418]
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x424]
mov eax, dword [ebp - 0x10]
call fcn.00413304
mov ecx, dword [ebp - 0x424]
lea eax, [ebp - 0x420]
mov edx, 0x518f3c
call fcn.00407250
mov edx, dword [ebp - 0x420]
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x42c]
mov eax, dword [ebp - 0x14]
call fcn.00413304
mov ecx, dword [ebp - 0x42c]
lea eax, [ebp - 0x428]
mov edx, 0x518f58
call fcn.00407250
mov edx, dword [ebp - 0x428]
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x434]
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
call fcn.00413304
mov ecx, dword [ebp - 0x434]
lea eax, [ebp - 0x430]
mov edx, 0x518f74
call fcn.00407250
mov edx, dword [ebp - 0x430]
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x43c]
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x10]
call fcn.00413304
mov ecx, dword [ebp - 0x43c]
lea eax, [ebp - 0x438]
mov edx, 0x518f94
call fcn.00407250
mov edx, dword [ebp - 0x438]
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor edx, edx
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0xff
lea eax, [ebp - 0x414]
push eax
push esi
call sub.user32.dll_GetClassNameW
lea eax, [ebp - 0x444]
lea edx, [ebp - 0x414]
mov ecx, pe_nt_image_headers32
call fcn.00406f7c
mov ecx, dword [ebp - 0x444]
lea eax, [ebp - 0x440]
mov edx, 0x518fb4
call fcn.00407250
mov edx, dword [ebp - 0x440]
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0xffffffffffffffeb
push esi
call sub.user32.dll_GetWindowLongW
mov ebx, eax
lea edx, [ebp - 0x44c]
mov eax, ebx
call fcn.00413304
mov ecx, dword [ebp - 0x44c]
lea eax, [ebp - 0x448]
mov edx, 0x518fdc
call fcn.00407250
mov edx, dword [ebp - 0x448]
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor edx, edx
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0xfffffffffffffff0
push esi
call sub.user32.dll_GetWindowLongW
mov ebx, eax
push 0xffffffffffffffec
push esi
call sub.user32.dll_GetWindowLongW
mov esi, eax
mov edx, 0x519004
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push ebp
mov ecx, 0x519020
mov edx, 0xcf0000
mov eax, ebx
call fcn.005188b0
pop ecx
test al, al
jne 0x518b89
push ebp
mov ecx, 0x519054
xor edx, edx
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x51907c
mov edx, 0xc00000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5190a0
mov edx, 0x40000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5190c8
mov edx, 0x20000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5190f4
mov edx, 0x10000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x519120
mov edx, 0x80880000
mov eax, ebx
call fcn.005188b0
pop ecx
test al, al
jne 0x518bc6
push ebp
mov ecx, 0x51914c
mov edx, 0x80000000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x51916c
mov edx, 0x800000
mov eax, ebx
call fcn.005188b0
pop ecx
mov eax, ebx
and eax, 0x80000
cmp eax, 0x80000
jne 0x518c00
mov edx, 0x519020
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0x518c00
mov edx, 0x519120
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0x518c00
mov edx, 0x51918c
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push ebp
mov ecx, 0x5191b0
mov edx, 0x40000000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5191d0
mov edx, 0x20000000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5191f4
mov edx, 0x10000000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x519218
mov edx, 0x8000000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x51923c
mov edx, 0x4000000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x519268
mov edx, 0x2000000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x519294
mov edx, 0x1000000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x51907c
mov edx, 0xc00000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x51916c
mov edx, 0x800000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5192b8
mov edx, 0x400000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5192dc
mov edx, 0x200000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x519300
mov edx, 0x100000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x51918c
mov edx, 0x80000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5190a0
mov edx, 0x40000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x519324
mov edx, 0x20000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x519344
mov edx, 0x10000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5190c8
mov edx, 0x20000
mov eax, ebx
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5190f4
mov edx, 0x10000
mov eax, ebx
call fcn.005188b0
pop ecx
xor edx, edx
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x519368
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push ebp
mov ecx, 0x519388
mov edx, 0x10
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5193b8
mov edx, 0x200
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5193e8
mov edx, 0x400
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x519418
mov edx, 0x10000
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x51944c
mov edx, 1
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x519480
xor edx, edx
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5194a4
mov edx, 0x4000
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5194d8
xor edx, edx
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x519508
mov edx, 0x40
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x519534
mov edx, 4
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x51956c
mov edx, 0x300
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5195a8
mov edx, 0x188
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5195dc
mov edx, 0x1000
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x519600
xor edx, edx
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x519638
mov edx, 0x2000
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x519668
mov edx, 0x20000
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x519698
mov edx, 0x80
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5196c8
mov edx, 8
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x5196f0
mov edx, 0x20
mov eax, esi
call fcn.005188b0
pop ecx
push ebp
mov ecx, 0x519720
mov edx, pe_nt_image_headers32
mov eax, esi
call fcn.005188b0
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x518f03
lea eax, [ebp - 0x44c]
mov edx, 0xe
call fcn.00406d8c
ret