Function at 0x433c8e
Capabilities:
Get graphical window text

Disassembly:
mov eax, 0x4833f0
call fcn.0047e070
sub esp, 0x60
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov esi, ecx
xor ebx, ebx
cmp eax, 0x10
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x24], esi
mov dword [ebp - 4], ebx
ja 0x433d20
je 0x433d17
dec eax
dec eax
je 0x433cfc
sub eax, 3
je 0x433cf3
dec eax
je 0x433ce0
dec eax
jne 0x43405c
mov ecx, dword [0x4b3ce8]
mov eax, dword [ebp + 8]
mov dword [ecx + 4], eax
push dword [esi + 0x6a4]
call dword [sym.imp.USER32.dll_SetFocus]
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x10
mov ecx, esi
call fcn.00432869
jmp 0x433ce0
push dword [esi + 0xc90]
push dword [esi + 0x6a4]
call dword [sym.imp.USER32.dll_ChangeClipboardChain]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x433ce0
mov ecx, esi
call fcn.004333f5
jmp 0x433ce0
cmp eax, 0x4e
je 0x434097
cmp eax, 0x110
jbe 0x43405c
cmp eax, 0x112
jbe 0x433d7b
cmp eax, 0x113
je 0x433d6c
cmp eax, 0x402
jne 0x43405c
push ebx
push 0x1f4
push 3
push dword [esi + 0x69c]
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [esi + 0xc9c], eax
jmp 0x433ce0
push dword [ebp + 0x10]
mov ecx, esi
call fcn.00433b04
jmp 0x433ce0
movzx eax, word [ebp + 0x10]
mov edi, 0x9f
cmp eax, edi
jg 0x433f33
je 0x433ef4
cmp eax, 0x6a
jg 0x433e6f
je 0x433e5d
sub eax, 0x65
je 0x433e54
dec eax
je 0x433e36
dec eax
je 0x433e23
dec eax
jne 0x43405c
cmp byte [esi + 0xab1], bl
je 0x433ce0
push ebx
push 1
push 0xa2
mov ecx, esi
call fcn.004350f5
push ebx
add edi, 5
push 1
push edi
mov ecx, esi
call fcn.004350f5
push ebx
push 1
push 0x2e
mov ecx, esi
call fcn.004350f5
push ebx
push ebx
push 0x2e
mov ecx, esi
call fcn.004350f5
push ebx
push ebx
push edi
mov ecx, esi
call fcn.004350f5
push ebx
push ebx
push 0xa2
mov ecx, esi
call fcn.004350f5
push 1
push ebx
push ebx
mov ecx, esi
call fcn.00436003
jmp 0x433ce0
push 0xa4
push 0x67
mov ecx, esi
call fcn.00433b3f
jmp 0x433ce0
cmp byte [esi + 0xab1], bl
je 0x433ce0
push ebx
push 1
push 0x5b
mov ecx, esi
call fcn.004350f5
push ebx
push ebx
push 0x5b
jmp 0x433e0c
push 0xa2
push 0x65
jmp 0x433e2a
cmp byte [esi + 0xc64], bl
je 0x433ce0
mov byte [ebp + 0xb], 0x33
jmp 0x433ee7
sub eax, 0x6d
je 0x433ed7
sub eax, 3
je 0x433eb9
dec eax
je 0x433ea0
dec eax
jne 0x43405c
lea ecx, [esi + 0x6b0]
lea eax, [ecx + 0x400]
cmp byte [eax], bl
sete dl
mov byte [eax], dl
call fcn.00441cfc
jmp 0x433ce0
cmp byte [esi + 0xf1c], bl
je 0x433ce0
mov ecx, esi
call fcn.00432f27
mov byte [ebp + 0xb], 0x2b
jmp 0x433ee7
cmp dword [ebp + 0x14], 0x10000
push 1
mov ecx, esi
sete al
mov byte [ebp + 8], al
push dword [ebp + 8]
call fcn.00437459
jmp 0x433ce0
cmp byte [esi + 0xc64], bl
je 0x433ce0
mov byte [ebp + 0xb], 0x32
push 1
lea eax, [ebp + 0xb]
push 1
push eax
jmp 0x433e17
push ebx
push edi
push dword [esi + 0x698]
call dword [sym.imp.USER32.dll_GetMenuState]
test al, 1
je 0x433f0a
xor al, al
jmp 0x433f0f
shr eax, 3
and al, 1
neg al
sbb eax, eax
and al, 0xf8
add eax, 8
push eax
push edi
push dword [esi + 0x698]
call dword [sym.imp.USER32.dll_CheckMenuItem]
push ebx
mov ecx, esi
call fcn.00432656
jmp 0x433ce0
mov ecx, 0x3f5
cmp eax, ecx
jg 0x434030
je 0x434024
sub eax, 0xa0
je 0x434012
dec eax
je 0x434006
dec eax
je 0x433f72
sub eax, 0x352
jne 0x43405c
mov ecx, esi
call fcn.00434784
jmp 0x433ce0
cmp byte [esi + 0xc64], bl
jne 0x433ce0
lea ecx, [esi + 0x228]
call fcn.0042f61b
push eax
lea ecx, [ebp + 8]
call fcn.0042ef62
lea eax, [esi + 0xb80]
lea ecx, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0xc
call fcn.004114d4
push ebx
lea edi, [esi + 0x69c]
push 0xf020
push 0x112
push dword [edi]
mov byte [ebp - 4], 0xd
call dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
push 0x10
push dword [edi]
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x4b3294]
lea eax, [ebp - 0x30]
push eax
add esi, 0x22c
push 0x64
lea eax, [ebp + 8]
push esi
push eax
call fcn.00414574
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call fcn.0042eea2
lea ecx, [ebp + 8]
mov byte [ebp - 4], bl
call fcn.0042eea2
jmp 0x433ce0
mov ecx, esi
call fcn.004345a2
jmp 0x433ce0
push ebx
push ebx
push 0x10
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x433ce0
mov ecx, esi
call fcn.00434a0b
jmp 0x433ce0
cmp eax, 0x3f6
je 0x43408b
cmp eax, 0x9c4a
je 0x43407f
cmp eax, 0xf020
je 0x434073
cmp eax, 0xf120
jne 0x43405c
cmp byte [esi + 0xc64], bl
je 0x43405c
push ebx
mov ecx, esi
call fcn.00435f1c
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_DefWindowProcW]
jmp 0x433ce2
cmp byte [esi + 0xc64], bl
je 0x43405c
push 1
jmp 0x434055
mov ecx, esi
call fcn.004346f3
jmp 0x433ce0
mov ecx, esi
call fcn.0043449b
jmp 0x433ce0
mov edi, dword [ebp + 0x14]
mov eax, dword [edi + 8]
cmp eax, 0xfffffd3a
jne 0x434271
mov eax, dword [edi + 0x2c]
push 1
mov dword [ebp - 0x30], eax
mov eax, dword [edi + 0x38]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x30]
push eax
push ebx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapWindowPoints]
push 0x4a51a0
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], ebx
call fcn.0040b193
lea eax, [ebp - 0x3c]
push 4
push eax
mov byte [ebp - 4], 1
call fcn.00433bc0
pop ecx
mov dword [ebp + 0xc], eax
pop ecx
mov dword [ebp + 0x10], ebx
mov byte [ebp - 4], 3
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov dword [ebp + 0x10], eax
lea eax, [ebp - 0x14]
mov edi, 0x4b33b8
push 0x7d
push eax
mov ecx, edi
call fcn.00420d2d
push ebx
push eax
push 0x6a
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 4
call fcn.004343f8
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 3
call fcn.0042eea2
lea eax, [ebp - 0x18]
push 0x7e
push eax
mov ecx, edi
call fcn.00420d2d
push ebx
push eax
push 0x72
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 5
call fcn.004343f8
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 3
call fcn.0042eea2
push ebx
push ebx
push 0x800
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_AppendMenuA]
push 0xb
xor eax, eax
pop ecx
lea edi, [ebp - 0x68]
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 0xc]
push 0x68
mov dword [ebp - 0x40], eax
pop edi
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x6c], 0x30
push eax
mov dword [ebp - 0x68], 0xc2
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x48], str.CtrlAltDel
push ebx
push edi
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_InsertMenuItemA]
lea eax, [ebp - 0x1c]
push 0x7f
push eax
mov ecx, 0x4b33b8
call fcn.00420d2d
push ebx
push eax
push 0x6d
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 6
call fcn.004343f8
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
call fcn.0042eea2
cmp byte [esi + 0xf1c], bl
je 0x4341dd
mov eax, dword [esi + 0xc38]
mov byte [ebp + 0x14], 1
shr eax, 1
test al, 1
jne 0x4341e0
mov byte [ebp + 0x14], bl
push ebx
lea ecx, [ebp + 0x10]
push dword [ebp + 0x14]
push 0x6a
call fcn.00434446
push ebx
lea ecx, [ebp + 0x10]
push dword [ebp + 0x14]
push edi
call fcn.00434446
push ebx
lea ecx, [ebp + 0x10]
push dword [ebp + 0x14]
push 0x6d
call fcn.00434446
mov al, byte [esi + 0xab0]
cmp al, bl
mov byte [ebp - 0x20], al
je 0x43421a
mov byte [ebp + 0x14], 1
push dword [ebp - 0x20]
lea ecx, [ebp + 0x10]
push dword [ebp + 0x14]
push 0x72
call fcn.00434446
push ebx
push dword [ebp + 8]
push ebx
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push ebx
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_TrackPopupMenu]
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 2
call fcn.004343c4
cmp dword [ebp + 0xc], ebx
je 0x434259
push dword [ebp + 0xc]
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [ebp - 0x3c], ebx
je 0x433ce0
push dword [ebp - 0x3c]
call dword [sym.imp.MSVCRT.dll_free]
pop ecx
jmp 0x433ce0
cmp eax, 0xfffffdee
jne 0x433ce0
mov eax, dword [edi + 4]
cmp eax, 0x71
ja 0x43431b
je 0x434302
sub eax, 0x65
je 0x4342f6
dec eax
je 0x4342ea
dec eax
je 0x4342de
dec eax
dec eax
je 0x4342d2
sub eax, 7
jne 0x433ce0
lea eax, [ebp + 8]
push 0x79
push eax
mov ecx, 0x4b33b8
call fcn.00420d2d
mov byte [ebp - 4], 7
mov ecx, eax
call fcn.0042f61b
lea ecx, [ebp + 8]
mov esi, eax
mov byte [ebp - 4], bl
call fcn.0042eea2
mov dword [edi + 0xc], esi
jmp 0x433ce0
mov dword [edi + 0xc], str.Actions_with_remote_computer
jmp 0x433ce0
mov dword [edi + 0xc], 0x4a9e98
jmp 0x433ce0
mov dword [edi + 0xc], str.WinKey
jmp 0x433ce0
mov dword [edi + 0xc], str.Ctrl
jmp 0x433ce0
lea eax, [ebp + 8]
push 0x80
push eax
mov ecx, 0x4b33b8
call fcn.00420d2d
mov byte [ebp - 4], 8
jmp 0x4342b6
sub eax, 0xa1
je 0x434387
dec eax
je 0x43436b
sub eax, 0x352
je 0x43435f
dec eax
je 0x434353
sub eax, 0x9855
jne 0x433ce0
lea eax, [ebp + 8]
push 0x12
push eax
mov ecx, 0x4b33b8
call fcn.00420d2d
mov byte [ebp - 4], 0xb
jmp 0x4342b6
mov dword [edi + 0xc], str.Encoder_settings
jmp 0x433ce0
mov dword [edi + 0xc], str.Connection_settings
jmp 0x433ce0
lea eax, [ebp + 8]
push 0x81
push eax
mov ecx, 0x4b33b8
call fcn.00420d2d
mov byte [ebp - 4], 9
jmp 0x4342b6
lea eax, [ebp + 8]
push 0x13
push eax
mov ecx, 0x4b33b8
call fcn.00420d2d
mov byte [ebp - 4], 0xa
jmp 0x4342b6