Function at 0x430e6a
Capabilities:
Get graphical window text

Disassembly:
mov eax, 0x480bc4
call fcn.0047bf90
sub esp, 0x60
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov esi, ecx
xor edi, edi
cmp eax, 0x10
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x24], esi
mov dword [ebp - 4], edi
ja 0x430f45
je 0x430f39
dec eax
dec eax
je 0x430f1b
sub eax, 3
je 0x430f12
dec eax
je 0x430ee1
dec eax
je 0x430ec7
dec eax
jne 0x43129d
call fcn.0042e99a
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x10
mov ecx, dword [0x4aedc0]
mov eax, dword [ebp + 8]
mov dword [ecx + 4], eax
push dword [esi + 0x694]
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x430eb4
mov eax, dword [ebp + 0x10]
shr eax, 0x10
cmp word [ebp + 0x10], di
jne 0x430ef9
cmp byte [esi + 0x6a0], 0
je 0x430eb4
push edi
jmp 0x430f09
cmp ax, di
jne 0x430eb4
cmp byte [esi + 0x6a0], 0
je 0x430eb4
push 1
mov ecx, esi
call fcn.0042e033
jmp 0x430eb4
mov ecx, esi
call fcn.0042faaf
jmp 0x430eb4
push dword [esi + 0x87c]
push dword [esi + 0x694]
call dword [sym.imp.USER32.dll_ChangeClipboardChain]
push edi
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x430eb4
mov ecx, esi
call fcn.004305c3
jmp 0x430eb4
cmp eax, 0x4e
je 0x4312d9
cmp eax, 0x110
jbe 0x43129d
mov ebx, 0x112
cmp eax, ebx
jbe 0x430fa2
cmp eax, 0x113
je 0x430f93
cmp eax, 0x402
jne 0x43129d
push edi
push 0x1f4
push 3
push dword [esi + 0x68c]
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [esi + 0x888], eax
jmp 0x430eb4
push dword [ebp + 0x10]
mov ecx, esi
call fcn.00430cd6
jmp 0x430eb4
movzx eax, word [ebp + 0x10]
mov edi, 0x9f
cmp eax, edi
jg 0x431168
je 0x431127
cmp eax, 0x6a
jg 0x4310a9
je 0x431096
sub eax, 0x65
je 0x43108d
dec eax
je 0x431060
dec eax
je 0x43104d
dec eax
jne 0x43129d
cmp byte [esi + 0xb04], 0
je 0x430eb4
push 1
push 0xffe3
mov ecx, esi
call fcn.00432467
mov ebx, 0xffe5
push 1
push ebx
mov ecx, esi
call fcn.00432467
mov edi, 0xffff
push 1
push edi
mov ecx, esi
call fcn.00432467
push 0
push edi
mov ecx, esi
call fcn.00432467
xor edi, edi
mov ecx, esi
push edi
push ebx
call fcn.00432467
push edi
push 0xffe3
mov ecx, esi
call fcn.00432467
push 1
push edi
push edi
mov ecx, esi
call fcn.0043331f
jmp 0x430eb4
push 0xffe5
push 0x67
mov ecx, esi
call fcn.00430d11
jmp 0x430eb4
cmp byte [esi + 0xb04], 0
je 0x430eb4
mov edi, 0xffeb
push 1
push edi
mov ecx, esi
call fcn.00432467
xor ebx, ebx
mov ecx, esi
push ebx
push edi
call fcn.00432467
push 1
push ebx
push ebx
jmp 0x431041
push 0xffe3
push 0x65
jmp 0x431054
cmp byte [esi + 0x850], 0
je 0x430eb4
mov byte [ebp + 0x13], 0x33
jmp 0x43111a
sub eax, 0x6d
je 0x431109
sub eax, 3
je 0x4310eb
dec eax
je 0x4310d1
dec eax
jne 0x43129d
lea eax, [esi + 0x6a0]
cmp byte [eax], 0
sete cl
mov byte [eax], cl
push ecx
jmp 0x430f09
cmp byte [esi + 0xb04], 0
je 0x430eb4
mov ecx, esi
call fcn.00430189
mov byte [ebp + 0x13], 0x2b
jmp 0x43111a
cmp dword [ebp + 0x14], 0x10000
push 1
mov ecx, esi
sete al
mov byte [ebp + 0x10], al
push dword [ebp + 0x10]
call fcn.00434901
jmp 0x430eb4
cmp byte [esi + 0x850], 0
je 0x430eb4
mov byte [ebp + 0x13], 0x32
push 1
lea eax, [ebp + 0x13]
push 1
push eax
jmp 0x431041
push 0
push edi
push dword [esi + 0x688]
call dword [sym.imp.USER32.dll_GetMenuState]
test al, 1
je 0x43113e
xor al, al
jmp 0x431143
shr eax, 3
and al, 1
neg al
sbb eax, eax
and al, 0xf8
add eax, 8
push eax
push edi
push dword [esi + 0x688]
call dword [sym.imp.USER32.dll_CheckMenuItem]
push 0
mov ecx, esi
call fcn.0042f89c
jmp 0x430eb4
mov ecx, 0x3f5
cmp eax, ecx
jg 0x43126f
je 0x431263
sub eax, 0xa0
je 0x43124f
dec eax
je 0x431243
dec eax
je 0x4311a7
sub eax, 0x352
jne 0x43129d
mov ecx, esi
call fcn.004319c3
jmp 0x430eb4
cmp byte [esi + 0x850], 0
jne 0x430eb4
lea ecx, [esi + 0x228]
call fcn.0042b153
push eax
lea ecx, [ebp + 0x10]
call fcn.0042c02c
lea eax, [esi + 0x76c]
lea ecx, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0xc
call fcn.00410eb2
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
add esi, 0x68c
push 0xf020
push ebx
mov byte [ebp - 4], 0xd
push dword [esi]
call edi
push 0
push 0
push 0x10
push dword [esi]
call edi
lea eax, [ebp - 0x30]
push eax
push 0x64
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push 0x4ae3c0
call fcn.0042c02c
mov ecx, dword [0x4ae518]
lea eax, [ebp + 0x10]
push eax
call fcn.00413d30
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
call fcn.0042bf6c
and byte [ebp - 4], 0
lea ecx, [ebp + 0x10]
call fcn.0042bf6c
jmp 0x430eb4
mov ecx, esi
call fcn.004317e1
jmp 0x430eb4
push 0
push 0
push 0x10
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x430eb4
mov ecx, esi
call fcn.00431c3f
jmp 0x430eb4
cmp eax, 0x3f6
je 0x4312cd
cmp eax, 0x9c4a
je 0x4312c1
cmp eax, 0xf020
je 0x4312b4
cmp eax, 0xf120
jne 0x43129d
cmp byte [esi + 0x850], 0
je 0x43129d
push 0
mov ecx, esi
call fcn.00433238
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_DefWindowProcW]
jmp 0x430eb6
cmp byte [esi + 0x850], 0
je 0x43129d
push 1
jmp 0x431296
mov ecx, esi
call fcn.00431932
jmp 0x430eb4
mov ecx, esi
call fcn.004316e5
jmp 0x430eb4
mov edi, dword [ebp + 0x14]
mov eax, dword [edi + 8]
cmp eax, 0xfffffd3a
jne 0x4314ba
mov eax, dword [edi + 0x2c]
push 1
mov dword [ebp - 0x30], eax
mov eax, dword [edi + 0x38]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x30]
push eax
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapWindowPoints]
and dword [ebp - 0x3c], 0
push 0x4a0070
lea ecx, [ebp - 0x3c]
call fcn.0040ab96
lea eax, [ebp - 0x3c]
push 4
push eax
mov byte [ebp - 4], 1
call fcn.00430d9c
pop ecx
mov dword [ebp + 0xc], eax
pop ecx
xor edi, edi
mov dword [ebp + 0x10], edi
mov byte [ebp - 4], 3
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov dword [ebp + 0x10], eax
lea eax, [ebp - 0x14]
mov ebx, 0x4ae530
push 0x7d
push eax
mov ecx, ebx
call fcn.0041eac3
push edi
push eax
push 0x6a
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 4
call fcn.00431642
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 3
call fcn.0042bf6c
lea eax, [ebp - 0x18]
push 0x7e
push eax
mov ecx, ebx
call fcn.0041eac3
push edi
push eax
push 0x72
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 5
call fcn.00431642
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 3
call fcn.0042bf6c
push edi
push edi
push 0x800
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_AppendMenuA]
push 0xb
xor eax, eax
pop ecx
lea edi, [ebp - 0x68]
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 0xc]
push 0x68
mov dword [ebp - 0x40], eax
pop edi
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x6c], 0x30
mov dword [ebp - 0x68], 0xc2
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x48], str.CtrlAltDel
push eax
push 0
push edi
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_InsertMenuItemA]
lea eax, [ebp - 0x1c]
push 0x7f
push eax
mov ecx, ebx
call fcn.0041eac3
xor ebx, ebx
lea ecx, [ebp + 0x10]
push ebx
push eax
push 0x6d
mov byte [ebp - 4], 6
call fcn.00431642
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
call fcn.0042bf6c
cmp byte [esi + 0xb04], bl
je 0x431425
mov eax, dword [esi + 0x824]
shr eax, 1
test al, 1
je 0x431425
mov byte [ebp + 0x14], 1
jmp 0x431429
and byte [ebp + 0x14], 0
push ebx
lea ecx, [ebp + 0x10]
push dword [ebp + 0x14]
push 0x6a
call fcn.00431690
push ebx
lea ecx, [ebp + 0x10]
push dword [ebp + 0x14]
push edi
call fcn.00431690
push ebx
lea ecx, [ebp + 0x10]
push dword [ebp + 0x14]
push 0x6d
call fcn.00431690
mov al, byte [esi + 0x6a0]
test al, al
mov byte [ebp - 0x20], al
je 0x431463
mov byte [ebp + 0x14], 1
push dword [ebp - 0x20]
lea ecx, [ebp + 0x10]
push dword [ebp + 0x14]
push 0x72
call fcn.00431690
push ebx
push dword [ebp + 8]
push ebx
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push ebx
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_TrackPopupMenu]
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 2
call fcn.0043160e
cmp dword [ebp + 0xc], ebx
je 0x4314a2
push dword [ebp + 0xc]
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [ebp - 0x3c], ebx
je 0x430eb4
push dword [ebp - 0x3c]
call dword [sym.imp.MSVCRT.dll_free]
pop ecx
jmp 0x430eb4
cmp eax, 0xfffffdee
jne 0x430eb4
mov eax, dword [edi + 4]
cmp eax, 0x71
ja 0x431565
je 0x43154c
sub eax, 0x65
je 0x431540
dec eax
je 0x431534
dec eax
je 0x431528
dec eax
dec eax
je 0x43151c
sub eax, 7
jne 0x430eb4
lea eax, [ebp + 0x10]
push 0x79
push eax
mov ecx, 0x4ae530
call fcn.0041eac3
mov byte [ebp - 4], 7
mov ecx, eax
call fcn.0042b153
and byte [ebp - 4], 0
lea ecx, [ebp + 0x10]
mov esi, eax
call fcn.0042bf6c
mov dword [edi + 0xc], esi
jmp 0x430eb4
mov dword [edi + 0xc], str.Actions_with_remote_computer
jmp 0x430eb4
mov dword [edi + 0xc], 0x4a4b48
jmp 0x430eb4
mov dword [edi + 0xc], str.WinKey
jmp 0x430eb4
mov dword [edi + 0xc], str.Ctrl
jmp 0x430eb4
lea eax, [ebp + 0x10]
push 0x80
push eax
mov ecx, 0x4ae530
call fcn.0041eac3
mov byte [ebp - 4], 8
jmp 0x4314ff
sub eax, 0xa1
je 0x4315d1
dec eax
je 0x4315b5
sub eax, 0x352
je 0x4315a9
dec eax
je 0x43159d
sub eax, 0x9855
jne 0x430eb4
lea eax, [ebp + 0x10]
push 0x12
push eax
mov ecx, 0x4ae530
call fcn.0041eac3
mov byte [ebp - 4], 0xb
jmp 0x4314ff
mov dword [edi + 0xc], str.Encoder_settings
jmp 0x430eb4
mov dword [edi + 0xc], str.Connection_settings
jmp 0x430eb4
lea eax, [ebp + 0x10]
push 0x81
push eax
mov ecx, 0x4ae530
call fcn.0041eac3
mov byte [ebp - 4], 9
jmp 0x4314ff
lea eax, [ebp + 0x10]
push 0x13
push eax
mov ecx, 0x4ae530
call fcn.0041eac3
mov byte [ebp - 4], 0xa
jmp 0x4314ff