Function at 0x478b60
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x6c
push esi
push 0
push 1
mov esi, ecx
push 0x109d
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x60
lea eax, [esp + 0x14]
push 0
push eax
call fcn.004dce30
add esp, 0xc
mov dword [esp + 0x10], 0x60
lea eax, [esp + 0x10]
mov dword [esp + 0x14], 0x1d
mov dword [esp + 0x34], 1
mov dword [esp + 0x30], 8
push eax
push 0x7fffffff
push 0x1091
push esi
mov dword [esp + 0x38], 0
mov dword [esp + 0x28], 0x529ab4
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x60
lea eax, [esp + 0x14]
push 0
push eax
call fcn.004dce30
add esp, 0xc
mov dword [esp + 0x10], 0x60
lea eax, [esp + 0x10]
mov dword [esp + 0x14], 0x1d
mov dword [esp + 0x34], 1
mov dword [esp + 0x30], 8
push eax
push 0x7fffffff
push 0x1091
push esi
mov dword [esp + 0x38], 1
mov dword [esp + 0x28], 0x52fe08
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x60
lea eax, [esp + 0x14]
push 0
push eax
call fcn.004dce30
add esp, 0xc
mov dword [esp + 0x10], 0x60
lea eax, [esp + 0x10]
mov dword [esp + 0x14], 0x1d
mov dword [esp + 0x34], 1
mov dword [esp + 0x30], 8
push eax
push 0x7fffffff
push 0x1091
push esi
mov dword [esp + 0x38], 2
mov dword [esp + 0x28], 0x529af8
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x60
lea eax, [esp + 0x14]
push 0
push eax
call fcn.004dce30
add esp, 0xc
mov dword [esp + 0x10], 0x60
lea eax, [esp + 0x10]
mov dword [esp + 0x14], 0x1d
mov dword [esp + 0x34], 1
mov dword [esp + 0x30], 8
push eax
push 0x7fffffff
push 0x1091
push esi
mov dword [esp + 0x38], 3
mov dword [esp + 0x28], 0x52af7c
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x60
push 0
lea eax, [esp + 0x18]
push eax
call fcn.004dce30
add esp, 0xc
mov dword [esp + 0x10], 0x60
lea eax, [esp + 0x10]
mov dword [esp + 0x14], 0x1d
mov dword [esp + 0x34], 1
mov dword [esp + 0x30], 8
push eax
push 0x7fffffff
push 0x1091
push esi
mov dword [esp + 0x38], 4
mov dword [esp + 0x28], str.Extension
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], 0x52a418
mov dword [esp + 0x48], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 1
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], str.Cycles
mov dword [esp + 0x48], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 2
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], 0x52fe2c
mov dword [esp + 0x48], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 3
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], 0x52fe44
mov dword [esp + 0x48], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 4
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], str.Total_time
mov dword [esp + 0x48], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
mov dword [esp + 0x20], 5
mov dword [esp + 0x24], 0
mov dword [esp + 0x30], 0x529be4
mov dword [esp + 0x44], 1
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 6
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], str.Peak_private_bytes
mov dword [esp + 0x48], 1
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 7
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], 0x52e954
mov dword [esp + 0x48], 1
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 8
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], str.Peak_virtual_size
mov dword [esp + 0x48], 1
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 9
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], 0x52e994
mov dword [esp + 0x48], 1
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0xa
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], 0x529c1c
mov dword [esp + 0x48], 1
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0xb
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], str.Peak_working_set
mov dword [esp + 0x48], 1
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0xc
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], str.Private_WS
mov dword [esp + 0x48], 1
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esp + 0x10], 0x101
mov dword [esp + 0x14], 0xd
mov dword [esp + 0x18], 0
lea eax, [esp + 0x10]
mov dword [esp + 0x24], str.Shareable_WS
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x48], 1
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0xe
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], str.Shared_WS
mov dword [esp + 0x48], 1
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], 0x52ea8c
mov dword [esp + 0x48], 1
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0x10
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], 0x52fe70
mov dword [esp + 0x48], 2
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0x11
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], 0x52fe7c
mov dword [esp + 0x48], 2
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0x12
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], 0x52fe94
mov dword [esp + 0x48], 2
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0x13
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], 0x52fea4
mov dword [esp + 0x48], 2
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
mov dword [esp + 0x14], 0x14
mov dword [esp + 0x18], 0
mov dword [esp + 0x24], 0x52af7c
mov dword [esp + 0x38], 2
push eax
push 0
push 0x104d
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0x15
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], 0x52febc
mov dword [esp + 0x48], 2
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0x16
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], 0x52ea70
mov dword [esp + 0x48], 2
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0x17
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], 0x526b34
mov dword [esp + 0x48], 3
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0x18
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], str.Peak_handles
mov dword [esp + 0x48], 3
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0x19
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], 0x52e9e0
mov dword [esp + 0x48], 3
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0x1a
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], str.USER_handles
mov dword [esp + 0x48], 3
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [sym.ProcessHacker.exe_WindowsVersion], 0x68
jb 0x4794e5
cmp byte [0x54aeda], 0
jne 0x4793b1
push 0
push 4
lea eax, [esp + 0x10]
push eax
push 0x1a
push 0xffffffffffffffff
call dword [sym.imp.ntdll.dll_NtQueryInformationProcess]
test eax, eax
js 0x4793a1
cmp dword [esp + 8], 0
setne byte [0x54aed9]
xor ecx, ecx
lea eax, [esp + 0xc]
lock or dword [eax], ecx
mov byte [0x54aeda], 1
cmp byte [0x54aed9], 0
jne 0x4794e5
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0x1b
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], str.ContextSwitches
mov dword [esp + 0x48], 4
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0x1c
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], str.BytesRead
mov dword [esp + 0x48], 4
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0x1d
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], str.BytesWritten
mov dword [esp + 0x48], 4
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0x1e
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], str.NetworkTxRxBytes
mov dword [esp + 0x48], 4
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x101
push eax
push 0
push 0x104d
push esi
mov dword [esp + 0x24], 0x1f
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], str.MBBTxRxBytes
mov dword [esp + 0x48], 4
call dword [sym.imp.USER32.dll_SendMessageW]
pop esi
mov esp, ebp
pop ebp
ret