Function at 0x448520
Capabilities:
Create process on windows
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x62a760
mov eax, dword fs:[0]
push eax
sub esp, 0x1c4
mov eax, dword [0x6c5580]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
xor edi, edi
xor esi, esi
push edi
push esi
call dword [sym.imp.USER32.dll_WindowFromPoint]
push 0xe1
lea ecx, [ebp - 0x110]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x110]
push str.wpe_pro
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.musicinstructor
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Python_Modules
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.LevelBot
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Level_Bot
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.3_Saniye_i
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push 0x670390
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.M2_PVP_:_Yard
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.LAG_YAP
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Ultmate_x
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push 0x6703cc
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push 0x6703d8
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.wpe_pro.spt
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.wpepro
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.AutoIt
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.timer_inject
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.c_injectClick
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.prodamage
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.cmd.exe
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.CMD.exe
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Module_loaded_
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Process
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Kernel_Module
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Kernel_Module
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Okcu_Hilesi
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push 0x670480
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Sald
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Hareket_H
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push 0x670480
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Level_Bot
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push 0x6704ac
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Auto_Damage
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Auto_Damage_on_Attack
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.PC_Hunter_32_B
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.PC_Hunter_64_B
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Chestille_Metin2_PvP_Bot
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Spambot
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Wallhack
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Zoom_hack
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.Metin2_Hack_v128
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.IrcRest_Python_Loader
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.M2Bob
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.m2bob
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.M2BOB
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.M2_BOB
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.m2_bob
push eax
call fcn.005c8490
add esp, 8
test eax, eax
jne 0x448a7f
lea eax, [ebp - 0x110]
push str.M2_Bob
push eax
call fcn.005c8490
add esp, 8
test eax, eax
je 0x448a98
push 0x670548
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call ebx
cmp byte [eax + 6], 0xea
jne 0x448ad2
add esi, 0x14
cmp esi, 0x7d0
jl 0x448558
add edi, 0x14
cmp edi, 0x7d0
jl 0x448556
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0058cfb3
mov esp, ebp
pop ebp
ret
push ecx
lea ecx, [ebp - 0x1d0]
call fcn.0043ff80
sub esp, 0xc
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1d0]
call fcn.0043fe80
lea eax, [ebp - 0x1c0]
push str._________________________________________________________________
push eax
call fcn.00442900
add esp, 4
mov ecx, eax
call fcn.00440990
push 0x670564
push ecx
lea eax, [ebp - 0x110]
push eax
push ecx
lea eax, [ebp - 0x1c0]
push str.__Revision2_HackShield__:
push eax
call fcn.00442900
add esp, 0xc
push eax
call fcn.00442900
add esp, 0xc
push eax
call fcn.00442900
add esp, 4
mov ecx, eax
call fcn.00440990
push str.___Revision2_bez
push ecx
lea eax, [ebp - 0x1c0]
push str.__Revision2_HackShield__:
push eax
call fcn.00442900
add esp, 0xc
push eax
call fcn.00442900
add esp, 4
mov ecx, eax
call fcn.00440990
push 1
push 0
push 0
push str.r2hackshield.txt
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
call fcn.005d9e74
int3