Function at 0x4ba68c
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
cmp dword [eax + 4], 0
je 0x4bb577
cmp dword [eax + 8], 0
je 0x4bb577
cmp dword [eax + 0xc], 0
je 0x4bb577
xor edx, edx
mov dword [ebp - 4], edx
mov edi, 1
xor eax, eax
mov dword [ebp - 8], eax
xor edx, edx
mov dword [ebx + 0x404], edx
mov ecx, dword [ebx]
push dword [ecx + 0xc]
call fcn.0045b4f8
test eax, eax
je 0x4ba6e6
mov dword [ebp - 0xc], 1
jmp 0x4ba6eb
xor eax, eax
mov dword [ebp - 0xc], eax
push dword [ebx + 0xef0]
push 0
push 1
push 0
push 0
mov edx, dword [ebx]
push dword [edx]
call fcn.004d7186
push ebx
call fcn.0048a8b4
test eax, eax
jne 0x4bb577
mov ecx, dword [ebx + 0xef0]
test byte [ecx + 0x1a08], 0x20
je 0x4ba7f2
mov eax, dword [ebx]
mov esi, dword [eax + 0xc]
cmp byte [esi], 0x28
jne 0x4ba79e
cmp byte [esi + 1], 0x23
jne 0x4ba79e
cmp byte [esi + 2], 0x47
jne 0x4ba79e
push 0x29
mov eax, dword [ebx]
push dword [eax + 0xc]
call fcn.0054c230
add esp, 8
mov esi, eax
test esi, esi
je 0x4ba79e
mov byte [esi], 0
mov eax, dword [ebx]
push dword [eax + 0xc]
call fcn.0054c2d0
pop ecx
cmp eax, 0xb
jb 0x4ba797
lea edx, [esi + 1]
mov dword [ebp - 0x10], edx
mov ecx, dword [ebp - 0x10]
cmp byte [ecx], 0
je 0x4ba772
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp byte [eax], 0
je 0x4ba797
push dword [ebp - 0x10]
call fcn.0054c2d0
pop ecx
inc eax
push eax
push dword [ebp - 0x10]
mov edx, dword [ebx]
push dword [edx + 0xc]
call fcn.0054c104
add esp, 0xc
xor esi, esi
test esi, esi
je 0x4ba79e
mov byte [esi], 0x29
push dword [ebx + 0xef0]
mov eax, dword [ebx]
push dword [eax]
call fcn.004ed8a9
test al, al
je 0x4ba7f2
mov eax, dword [ebx + 0xef0]
imul edx, dword [eax + 0xb84], 0x64
add edx, eax
add edx, 0xa58
push edx
mov ecx, dword [ebx]
push dword [ecx + 8]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x4ba7f2
mov eax, dword [ebx]
push dword [eax]
push 0x104
lea esi, [ebx + 0x518]
push esi
call fcn.0042e322
mov eax, dword [ebx]
mov dword [eax + 8], esi
cmp dword [0x55e384], 0
je 0x4ba80f
mov edx, dword [ebx]
mov ecx, dword [edx + 0xc]
cmp byte [ecx], 0
je 0x4ba80f
mov eax, dword [ebx]
push dword [eax + 0xc]
call fcn.004273f8
mov edx, dword [ebx]
mov ecx, dword [edx + 0xc]
cmp byte [ecx], 0
je 0x4ba87d
cmp dword [0x566120], 0
je 0x4ba845
push 0x567a8f
push ebx
call fcn.004be1c1
test eax, eax
je 0x4ba845
push 0xf
mov eax, dword [ebx]
push dword [eax + 0xc]
call fcn.0050cc40
mov dword [ebx + 0x410], eax
jmp 0x4ba87d
mov eax, dword [ebx + 0xef0]
imul edx, dword [eax + 0xb84], 0x64
add edx, eax
add edx, 0xa58
push edx
mov ecx, dword [ebx]
push dword [ecx]
call fcn.0054c494
add esp, 8
test eax, eax
je 0x4ba87d
push 0xffffffffffffffff
mov eax, dword [ebx]
push dword [eax + 0xc]
call fcn.0050cc40
mov dword [ebx + 0x410], eax
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx + 8]
call fcn.004ed8a9
test al, al
jne 0x4ba8a7
mov ecx, dword [ebx]
mov eax, dword [ecx + 8]
cmp byte [eax], 0x40
jne 0x4ba8a7
add dword [ebx + 0x404], 2
mov edx, dword [ebx]
inc dword [edx + 8]
push dword [ebx + 0xef0]
mov ecx, dword [ebx]
push dword [ecx + 8]
call fcn.004ed8a9
test al, al
jne 0x4ba8d1
mov eax, dword [ebx]
mov edx, dword [eax + 8]
cmp byte [edx], 0x2b
jne 0x4ba8d1
add dword [ebx + 0x404], 4
mov ecx, dword [ebx]
inc dword [ecx + 8]
mov eax, dword [ebx]
mov eax, dword [eax + 8]
cmp byte [eax], 0
je 0x4bb577
push dword [ebx + 0xef0]
push eax
call fcn.004ed8a9
test al, al
je 0x4ba9a0
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx + 8]
call fcn.00412db7
mov esi, eax
test esi, esi
je 0x4baa10
push 0
push 2
push esi
mov eax, dword [ebx]
push dword [eax]
call fcn.004d4a82
test eax, eax
je 0x4ba93d
push dword [ebx + 0xef0]
push 0
lea edx, [ebx + 0xb07]
push edx
push dword [ebx + 0x3f8]
mov ecx, dword [ebx]
push dword [ecx]
call fcn.00495a58
cmp dword [0x566120], 0
je 0x4ba959
push 0x567a96
push ebx
call fcn.004be1c1
test eax, eax
jne 0x4bb577
cmp dword [0x56c198], 0
je 0x4baa10
push 0x3e7
lea eax, [ebx + 0xb07]
push eax
call fcn.0042e3f0
push dword [ebx]
lea edx, [ebx + 0xb07]
push edx
push 3
call fcn.004e45c5
push dword [ebx + 0xef0]
lea ecx, [ebx + 0xb07]
push ecx
mov eax, dword [ebx]
push dword [eax]
push esi
call fcn.0050c23f
jmp 0x4baa10
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx]
call fcn.004bdc8f
test eax, eax
je 0x4ba9d1
push dword [ebx + 0xef0]
push 0
lea ecx, [ebx + 0xb07]
push ecx
push dword [ebx + 0x3f8]
mov eax, dword [ebx]
push dword [eax]
call fcn.00495a58
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx]
call fcn.00412db7
mov esi, eax
cmp dword [ebp - 0xc], 0
je 0x4baa09
push 7
push 0x567a9f
mov eax, dword [ebx]
push dword [eax + 0xc]
call fcn.0054c52c
add esp, 0xc
test eax, eax
jne 0x4baa10
mov dword [ebp - 4], 1
jmp 0x4baa10
mov dword [ebp - 4], 1
push ebx
push esi
call fcn.004bcf81
cmp dword [ebp - 0xc], 0
je 0x4baafe
push 7
push 0x567aa8
mov edx, dword [ebx]
push dword [edx + 0xc]
call fcn.0054c52c
add esp, 0xc
test eax, eax
jne 0x4baa8b
test esi, esi
jne 0x4baa6d
cmp dword [0x566120], 0
je 0x4baa6d
push dword [ebx + 0xef0]
mov ecx, dword [ebx]
push dword [ecx + 8]
call fcn.004ed8a9
test al, al
jne 0x4baa6d
push 0x567ab1
push ebx
call fcn.004be1c1
test eax, eax
jne 0x4bb577
test esi, esi
jne 0x4baadd
push dword [ebx + 0xef0]
mov eax, dword [ebx]
push dword [eax + 8]
call fcn.004ed8a9
test al, al
jne 0x4bb577
jmp 0x4baadd
push 4
push str.DCC
mov edx, dword [ebx]
push dword [edx + 0xc]
call fcn.0054c52c
add esp, 0xc
test eax, eax
jne 0x4baac1
cmp dword [0x566120], 0
je 0x4baadd
push 0x567ac0
push ebx
call fcn.004be1c1
test eax, eax
jne 0x4bb577
jmp 0x4baadd
cmp dword [0x566120], 0
je 0x4baadd
push 0x567ac5
push ebx
call fcn.004be1c1
test eax, eax
jne 0x4bb577
cmp dword [ebp - 4], 0
je 0x4baaf2
push dword [ebx + 0xef0]
mov ecx, dword [ebx]
push dword [ecx]
call fcn.0050e218
push esi
push ebx
call fcn.0045c3b1
jmp 0x4bb577
cmp dword [ebp - 4], 0
je 0x4bab13
push dword [ebx + 0xef0]
mov eax, dword [ebx]
push dword [eax]
call fcn.0050e218
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx + 8]
call fcn.004ed8a9
test al, al
je 0x4bad12
test esi, esi
je 0x4bab3c
test esi, esi
je 0x4bab58
cmp dword [esi + 0x6bc], 1
je 0x4bab58
push 0x2e
mov ecx, dword [ebx]
push dword [ecx + 8]
call fcn.0054c230
add esp, 8
test eax, eax
jne 0x4bad20
jmp 0x4bb577
cmp dword [0x55c5e4], 0
je 0x4bab7d
push 1
push esi
call fcn.00409764
test eax, eax
je 0x4bab7d
push 0
push dword [ebx + 0xef0]
push 1
push ebx
call fcn.00409a7e
cmp dword [0x56acb4], 0
je 0x4baba5
push 0
lea eax, [ebp - 8]
push eax
push 1
push 0x41
push 0x567acb
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fd2f4
mov edi, eax
test edi, edi
je 0x4bace3
xor eax, eax
mov dword [0x56ac00], eax
mov dword [0x56ac04], 2
mov dword [0x56ac08], 1
mov dword [0x56ac0c], 1
mov dword [0x56ac10], 1
mov dword [0x56ac14], 1
cmp dword [ebx + 0x404], 0
je 0x4bac83
mov edi, dword [0x55f8a8]
push dword [ebx + 0xef0]
mov eax, dword [ebx]
push dword [eax]
push 1
push esi
call fcn.0043fa52
push eax
push str._s:
lea edx, [ebx + 0x720]
push edx
call sub.USER32.dll_wsprintfA
add esp, 0xc
test byte [ebx + 0x404], 2
je 0x4bac3d
push 0x567ad7
lea ecx, [ebx + 0x720]
push ecx
call fcn.0054c1f4
add esp, 8
test byte [ebx + 0x404], 4
je 0x4bac5a
push 0x567ada
lea eax, [ebx + 0x720]
push eax
call fcn.0054c1f4
add esp, 8
mov edx, dword [ebx]
push dword [edx + 8]
push 0x567add
lea ecx, [ebx + 0x720]
push ecx
call fcn.0054c2d0
pop ecx
add eax, ebx
add eax, 0x720
push eax
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x4bacb0
mov edi, dword [0x55f8a4]
push dword [ebx + 0xef0]
mov eax, dword [ebx]
push dword [eax]
push 1
push esi
call fcn.0043fa52
push eax
push 0x567ae3
lea edx, [ebx + 0x720]
push edx
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebx]
lea ecx, [ebx + 0x720]
push ecx
push 3
call fcn.004e45c5
mov dword [0x56ac24], 1
mov eax, dword [ebx]
mov edx, dword [eax]
mov dword [0x56457c], edx
push edi
lea ecx, [ebx + 0x720]
push ecx
push dword [esi]
call fcn.004ee447
cmp dword [0x56acb4], 0
je 0x4bb577
push 0
lea eax, [ebp - 8]
push eax
push 0
push 0x41
push 0x567aea
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fd2f4
jmp 0x4bb577
mov edx, dword [ebx]
mov ecx, dword [edx + 8]
cmp byte [ecx], 0x24
jne 0x4bae0c
cmp dword [0x55c61c], 0
je 0x4bad42
cmp dword [0x55c5a0], 0
je 0x4bad42
push 0
push dword [ebx + 0xef0]
push 6
push ebx
call fcn.00409a7e
cmp dword [0x56acb4], 0
je 0x4bad6a
push 0
lea eax, [ebp - 8]
push eax
push 1
push 0x41
push 0x567af0
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fd2f4
mov edi, eax
test edi, edi
je 0x4baddd
xor eax, eax
mov dword [0x56ac00], eax
mov dword [0x56ac04], 2
mov dword [0x56ac08], 1
mov dword [0x56ac10], 1
mov edx, dword [ebx]
push dword [edx]
push 0x567af6
lea esi, [ebx + 0x720]
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebx]
push esi
push 3
call fcn.004e45c5
mov dword [0x56ac24], 1
mov eax, dword [ebx]
mov edx, dword [eax]
mov dword [0x56457c], edx
push dword [0x55f8a8]
push esi
mov ecx, dword [ebx + 0xef0]
push dword [ecx]
call fcn.004ef100
cmp dword [0x56acb4], 0
je 0x4bb577
push 0
lea eax, [ebp - 8]
push eax
push 0
push 0x41
push 0x567afe
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fd2f4
jmp 0x4bb577
test esi, esi
jne 0x4bae2c
cmp dword [0x566120], 0
je 0x4bae2c
push str.private
push ebx
call fcn.004be1c1
test eax, eax
jne 0x4bb577
cmp dword [0x56c198], 0
je 0x4bae79
push 0x3e7
lea edx, [ebx + 0xb07]
push edx
call fcn.0042e3f0
push dword [ebx]
lea ecx, [ebx + 0xb07]
push ecx
push 3
call fcn.004e45c5
push dword [ebx + 0xef0]
lea eax, [ebx + 0xb07]
push eax
mov edx, dword [ebx]
push dword [edx]
push esi
call fcn.0050c23f
test eax, eax
je 0x4bae79
test esi, esi
je 0x4bb577
test byte [0x5685e4], 0x20
jne 0x4bb577
test esi, esi
je 0x4bafad
cmp dword [0x55c608], 0
je 0x4baeb3
push 2
push esi
call fcn.00409764
test eax, eax
je 0x4baeb3
push 0
push dword [ebx + 0xef0]
push 3
push ebx
call fcn.00409a7e
cmp dword [0x56acb4], 0
je 0x4baedb
push 0
lea ecx, [ebp - 8]
push ecx
push 1
push 0x41
push 0x567b0d
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fd2f4
mov edi, eax
test edi, edi
je 0x4baf7e
push esi
call fcn.0051df69
test eax, eax
je 0x4baf7e
xor eax, eax
mov dword [0x56ac00], eax
mov dword [0x56ac04], 2
mov dword [0x56ac08], 1
mov dword [0x56ac0c], 1
mov dword [0x56ac10], 1
mov dword [0x56ac14], 1
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx]
push 1
push 0
call fcn.0043fa52
push eax
push 0x567b13
lea edi, [ebx + 0x720]
push edi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebx]
push edi
push 3
call fcn.004e45c5
mov dword [0x56ac24], 1
mov eax, dword [ebx]
mov edx, dword [eax]
mov dword [0x56457c], edx
push dword [0x55f8a4]
push edi
push dword [esi]
call fcn.004ee447
cmp dword [0x56acb4], 0
je 0x4bb577
push 0
lea ecx, [ebp - 8]
push ecx
push 0
push 0x41
push 0x567b1a
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fd2f4
jmp 0x4bb577
cmp dword [0x56a1c4], 0
je 0x4bb123
cmp dword [0x56a1c8], 0
je 0x4bafe9
push dword [ebx + 0xef0]
push dword [ebx + 0x3f8]
mov eax, dword [ebx]
push dword [eax]
call fcn.004d6f34
test eax, eax
je 0x4bafe9
cmp dword [eax + 0x29c], 1
je 0x4bb123
cmp dword [0x56acb4], 0
je 0x4bb011
push 0
lea edx, [ebp - 8]
push edx
push 1
push 0x41
push 0x567b20
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fd2f4
mov edi, eax
test edi, edi
je 0x4bb0be
push ebx
call fcn.004beb1b
test eax, eax
je 0x4bb577
xor eax, eax
mov dword [0x56ac00], eax
mov dword [0x56ac04], 2
mov dword [0x56ac08], 1
mov dword [0x56ac0c], 1
mov dword [0x56ac10], 1
mov dword [0x56ac14], 1
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx]
push 1
push 0
call fcn.0043fa52
push eax
push 0x567b26
lea esi, [ebx + 0x720]
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebx]
push esi
push 3
call fcn.004e45c5
mov dword [0x56ac24], 1
mov eax, dword [ebx]
mov edx, dword [eax]
mov dword [0x56457c], edx
push dword [0x55f8a4]
push esi
mov ecx, dword [ebx + 0xef0]
push dword [ecx + 0x1b78]
call fcn.004ee447
cmp dword [0x55c608], 0
je 0x4bb0f4
push 2
mov eax, dword [ebx + 0xef0]
push dword [eax + 0x1b78]
call fcn.0051dd0a
push eax
call fcn.00409764
test eax, eax
je 0x4bb0f4
push 0
push dword [ebx + 0xef0]
push 3
push ebx
call fcn.00409a7e
cmp dword [0x56acb4], 0
je 0x4bb577
push 0
lea edx, [ebp - 8]
push edx
push 0
push 0x41
push 0x567b2d
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fd2f4
jmp 0x4bb577
cmp dword [0x56a208], 0
je 0x4bb280
push dword [0x56cef4]
call fcn.0051dd0a
mov esi, eax
test esi, esi
je 0x4bb280
mov eax, dword [esi + 0xb6c]
cmp eax, dword [ebx + 0xef0]
jne 0x4bb280
cmp dword [esi + 0x6bc], 1
jne 0x4bb280
cmp dword [0x55c608], 0
je 0x4bb186
cmp dword [0x55c59c], 0
je 0x4bb186
push 0
push dword [ebx + 0xef0]
push 3
push ebx
call fcn.00409a7e
cmp dword [0x56acb4], 0
je 0x4bb1ae
push 0
lea edx, [ebp - 8]
push edx
push 1
push 0x41
push 0x567b33
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fd2f4
mov edi, eax
test edi, edi
je 0x4bb251
push esi
call fcn.0051df69
test eax, eax
je 0x4bb251
xor eax, eax
mov dword [0x56ac00], eax
mov dword [0x56ac04], 2
mov dword [0x56ac08], 1
mov dword [0x56ac0c], 1
mov dword [0x56ac10], 1
mov dword [0x56ac14], 1
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx]
push 1
push 0
call fcn.0043fa52
push eax
push 0x567b39
lea edi, [ebx + 0x720]
push edi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebx]
push edi
push 3
call fcn.004e45c5
mov dword [0x56ac24], 1
mov eax, dword [ebx]
mov edx, dword [eax]
mov dword [0x56457c], edx
push dword [0x55f8a8]
push edi
push dword [esi]
call fcn.004ee447
cmp dword [0x56acb4], 0
je 0x4bb577
push 0
lea ecx, [ebp - 8]
push ecx
push 0
push 0x41
push 0x567b40
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fd2f4
jmp 0x4bb577
cmp dword [0x56acb4], 0
je 0x4bb2b4
push 0
lea eax, [ebp - 8]
push eax
push 1
push 0x2d
push 0x567b46
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fd2f4
test eax, eax
jne 0x4bb2ac
xor edi, edi
test edi, edi
je 0x4bb577
mov eax, dword [ebx]
push dword [eax]
push 0x3e7
lea edx, [ebx + 0x720]
push edx
call fcn.0042e322
push dword [ebx + 0xef0]
lea ecx, [ebx + 0x720]
push ecx
call fcn.00412db7
mov esi, eax
test esi, esi
jne 0x4bb31d
push dword [ebx + 0xef0]
push 0
push 1
push 2
lea eax, [ebx + 0x720]
push eax
call fcn.00524566
test eax, eax
je 0x4bb577
push dword [ebx + 0xef0]
lea edx, [ebx + 0x720]
push edx
call fcn.00412db7
mov esi, eax
test esi, esi
je 0x4bb577
push ebx
push esi
call fcn.004bcf81
cmp dword [esi + 0x6bc], 2
jne 0x4bb395
cmp dword [esi + 0x6c0], 1
jne 0x4bb395
lea eax, [ebx + 0xb07]
push eax
push 0xdca
call fcn.0042c564
push 0x104
lea edx, [ebx + 0xb07]
push edx
call fcn.0054c2d0
pop ecx
add eax, ebx
add eax, 0xb07
push eax
push dword [esi]
call sub.USER32.dll_GetWindowTextA
push 0x40
lea ecx, [ebx + 0xb07]
push ecx
call fcn.0054c230
add esp, 8
test eax, eax
je 0x4bb395
cmp dword [esi + 0x66c], 0
je 0x4bb395
push 0
lea eax, [ebx + 0xb07]
push eax
push esi
call fcn.004c8710
cmp dword [0x56a1a8], 0
je 0x4bb3f0
cmp dword [0x561078], 0
je 0x4bb3b3
push 5
push ebx
call fcn.0045b568
test eax, eax
je 0x4bb3f0
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx]
push dword [esi]
call fcn.004bdd0c
mov ecx, dword [ebx]
push dword [ecx]
push 0x567b4c
lea eax, [ebx + 0x720]
push eax
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebx + 0xef0]
push 1
lea edx, [ebx + 0x720]
push edx
call fcn.00525f63
cmp dword [0x56a1d4], 0
je 0x4bb42f
cmp dword [0x569de8], 1
jne 0x4bb40f
push dword [0x56a1e0]
call fcn.0042c48d
jmp 0x4bb42f
cmp dword [0x569de8], 2
jne 0x4bb42f
push dword [ebx + 0xef0]
push 1
push 0
push 0
call fcn.00477d00
push eax
call fcn.0050b5a6
cmp dword [0x56a1cc], 0
je 0x4bb444
push dword [ebx + 0xef0]
push esi
call fcn.004bedf8
cmp dword [0x55c608], 0
je 0x4bb469
push 2
push esi
call fcn.00409764
test eax, eax
je 0x4bb469
push 0
push dword [ebx + 0xef0]
push 3
push ebx
call fcn.00409a7e
cmp dword [0x56acb4], 0
je 0x4bb48f
push 0
lea ecx, [ebp - 8]
push ecx
push 0
push 0x2d
push 0x567b57
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fd2f4
xor eax, eax
mov dword [ebp - 8], eax
cmp dword [0x56acb4], 0
je 0x4bb4bc
push 0
lea edx, [ebp - 8]
push edx
push 1
push 0x41
push 0x567b5d
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fd2f4
mov edi, eax
test edi, edi
je 0x4bb551
xor eax, eax
mov dword [0x56ac00], eax
mov dword [0x56ac04], 2
mov dword [0x56ac08], 1
mov dword [0x56ac0c], 1
mov dword [0x56ac10], 1
mov dword [0x56ac14], 1
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx]
push 1
push 0
call fcn.0043fa52
push eax
push 0x567b63
lea edi, [ebx + 0x720]
push edi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebx]
push edi
push 3
call fcn.004e45c5
mov dword [0x56ac24], 1
mov eax, dword [ebx]
mov edx, dword [eax]
mov dword [0x56457c], edx
push dword [0x55f8a4]
push edi
push dword [esi]
call fcn.004ee447
cmp dword [0x56acb4], 0
je 0x4bb577
push 0
lea ecx, [ebp - 8]
push ecx
push 0
push 0x41
push 0x567b6a
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fd2f4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4