Function at 0x4baca0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1a8
mov eax, dword [0x53ba20]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x19c]
push edi
push eax
mov dword [ebp - 0x19c], 8
mov dword [ebp - 0x198], 0x8604
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push 0
push dword [0x5509e8]
push 0
push esi
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x113
push 0x190
push 0
push 0
push 0x56800448
push 0
push 0x5043a0
push 0
call esi
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x1a8]
push ecx
push 0
push 0x404
push eax
mov dword [0x570314], eax
mov dword [ebp - 0x1a8], 0xc
mov dword [ebp - 0x1a4], 0
call ebx
test eax, eax
jne 0x4bad50
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004c3287
mov esp, ebp
pop ebp
ret
push 0
push dword [0x5509e8]
push 0
push dword [0x570314]
push 0
push 0
push 0
push 0
push 0x56000944
push 0
push 0x503edc
push 0
call esi
push 0x60
push dword [0x5408ec]
mov esi, eax
push 0x10
mov dword [0x555edc], esi
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x60
push dword [0x5408ec]
mov edi, eax
push 0x10
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 4
push 0x10
push 0x21
push edi
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov edi, eax
push edi
push 0
push 0x430
push esi
call ebx
xorps xmm0, xmm0
mov dword [ebp - 0xd4], 0x9c49
mov dword [ebp - 0xd0], 0xee
mov byte [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0
movq qword [ebp - 0xc4], xmm0
mov byte [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0x9c42
mov dword [ebp - 0xb0], 0xfc
mov byte [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0x9c6e
mov dword [ebp - 0xa0], 0x15a
mov byte [ebp - 0x9c], 2
movq qword [ebp - 0x98], xmm0
mov dword [ebp - 0x90], 0
mov byte [ebp - 0x8c], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0x9c7c
mov dword [ebp - 0x80], 0xb6
mov byte [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0x9c67
mov dword [ebp - 0x70], 0x73
mov byte [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
movq qword [ebp - 0x64], xmm0
mov byte [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0x9c66
mov dword [ebp - 0x50], 0xef
mov byte [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0x9c4d
mov dword [ebp - 0x40], 0xbe
mov byte [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
movq qword [ebp - 0x34], xmm0
mov byte [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0x9f3d
mov dword [ebp - 0x20], 0xbf
mov byte [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0xcc]
mov dword [ebp - 0x14], 0x9cad
mov dword [ebp - 0x10], 0xc9
mov byte [ebp - 0xc], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x18c], 0xd
mov eax, dword [eax - 8]
mov dword [ebp - 0x194], eax
test eax, eax
jne 0x4baf5e
mov dword [ebp - 0xe0], 0x100
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xd8], eax
jmp 0x4bb03b
push 0x60
push dword [0x5408ec]
push 0x10
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp - 0x188], eax
call fcn.00447d00
mov ecx, eax
call fcn.00445ee0
mov ecx, dword [ebp - 0x184]
mov byte [ebp - 0x17d], al
push 0
movzx edx, word [ecx - 4]
xor ecx, ecx
test al, al
mov dword [ebp - 0x190], edx
mov eax, 0x64
cmovne ecx, eax
mov eax, dword [ebp - 0x188]
push eax
push eax
add cx, dx
push 1
movzx ecx, cx
push ecx
push dword [0x570408]
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, eax
test ecx, ecx
jne 0x4baff2
cmp byte [ebp - 0x17d], al
je 0x4baff2
mov eax, dword [ebp - 0x190]
push ecx
mov ecx, dword [ebp - 0x188]
push ecx
push ecx
push 1
movzx eax, ax
push eax
push dword [0x570408]
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, eax
xor eax, eax
mov byte [ebp - 0xe0], 4
mov word [ebp - 0xde], ax
mov eax, dword [ebp - 0x184]
push ecx
push 0xffffffffffffffff
push edi
mov al, byte [eax]
mov byte [ebp - 0xdf], al
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0xe4], eax
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x184]
mov eax, dword [eax + 4]
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0xe8]
mov dword [ebp - 0xdc], 0
push eax
push 0xffffffffffffffff
push 0x443
push esi
call ebx
mov eax, dword [ebp - 0x184]
add eax, 0x10
sub dword [ebp - 0x18c], 1
mov dword [ebp - 0x184], eax
jne 0x4baf30
push 0
push 0
push 0x421
push esi
call ebx
mov eax, dword [0x555edc]
test eax, eax
je 0x4bad3d
lea ecx, [ebp - 0x118]
push ecx
push 0x9c49
push 0x433
push eax
call ebx
lea eax, [ebp - 0x108]
push eax
push 0x9cad
push 0x433
push dword [0x555edc]
call ebx
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
push 0x64
lea eax, [ebp - 0x17c]
push 0
push eax
call fcn.004c52c0
mov eax, dword [0x555edc]
add esp, 0xc
mov esi, dword [sym.imp.USER32.dll_GetSysColor]
mov dword [ebp - 0x17c], 0x64
mov dword [ebp - 0x178], 0x173
push 0x12
mov dword [ebp - 0x174], 0x80
mov dword [ebp - 0x15c], eax
call esi
push 0xf
mov dword [ebp - 0x170], eax
call esi
push 0x32
mov dword [ebp - 0x16c], eax
call dword [sym.imp.USER32.dll_GetSystemMetrics]
add eax, 8
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0xf0]
sub eax, dword [ebp - 0xf8]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x158], eax
lea eax, [ebp - 0x17c]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x570314]
call ebx
push dword [0x556ad4]
mov edi, dword [sym.imp.USER32.dll_CreateWindowExW]
push dword [0x5509e8]
push 0x7d0
push dword [0x570314]
push 0
push 0
push 0
push 0
push 0x56010004
push 0x4fbd20
push 0x50cec0
push 0
call edi
mov esi, dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x60
push dword [0x5408ec]
mov dword [0x555ee4], eax
push 0x4b
mov dword [ebp - 0x15c], eax
call esi
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x17c]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x570314]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 1
call ebx
push dword [0x556ad0]
push dword [0x5509e8]
push 0x7d0
push dword [0x570314]
push 0
push 0
push 0
push 0
push 0x56010004
push 0x4fbd20
push 0x50cec0
push 0
call edi
push 0x60
push dword [0x5408ec]
mov dword [0x555ee8], eax
push 0x4b
mov dword [ebp - 0x15c], eax
call esi
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x17c]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x570314]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 2
call ebx
push dword [0x556ae4]
push dword [0x5509e8]
push 0x7d0
push dword [0x570314]
push 0
push 0
push 0
push 0
push 0x56010004
push 0x4fbd20
push 0x50cec0
push 0
call edi
push 0x60
push dword [0x5408ec]
mov dword [0x555eec], eax
push 0x4b
mov dword [ebp - 0x15c], eax
call esi
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x17c]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x570314]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 3
call ebx
mov eax, dword [0x5679ec]
test eax, eax
je 0x4bb366
push eax
push dword [0x5509e8]
push 0x7d0
push dword [0x570314]
push 0
push 0
push 0
push 0
push 0x56010004
push 0x4fbd20
push 0x50cec0
push 0
call edi
push 0x60
push dword [0x5408ec]
mov dword [0x555ef4], eax
push 0x4b
mov dword [ebp - 0x15c], eax
call esi
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x17c]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x570314]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 4
call ebx
call fcn.0047d0f0
test al, al
je 0x4bb3ec
mov eax, dword [0x567a04]
test eax, eax
je 0x4bb3ec
push eax
push dword [0x5509e8]
push 0x7d0
push dword [0x570314]
push 0
push 0
push 0
push 0
push 0x56010004
push 0x4fbd20
push 0x50cec0
push 0
call edi
push 0x60
push dword [0x5408ec]
mov dword [0x555ef8], eax
push 0x4b
mov dword [ebp - 0x15c], eax
call esi
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x17c]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x570314]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 5
call ebx
call fcn.0047d0f0
test al, al
je 0x4bb472
mov eax, dword [0x567a1c]
test eax, eax
je 0x4bb472
push eax
push dword [0x5509e8]
push 0x7d0
push dword [0x570314]
push 0
push 0
push 0
push 0
push 0x56010004
push 0x4fbd20
push 0x50cec0
push 0
call edi
push 0x60
push dword [0x5408ec]
mov dword [0x555efc], eax
push 0x4b
mov dword [ebp - 0x15c], eax
call esi
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x17c]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x570314]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 6
call ebx
cmp dword [0x5509d0], 0
je 0x4bb4f4
push dword [0x556ad8]
push dword [0x5509e8]
push 0x7d0
push dword [0x570314]
push 0
push 0
push 0
push 0
push 0x56010004
push 0x4fbd20
push 0x50cec0
push 0
call edi
push 0x60
push dword [0x5408ec]
mov dword [0x555ef0], eax
push 0x4b
mov dword [ebp - 0x15c], eax
call esi
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x17c]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x570314]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 7
call ebx
call fcn.004752c0
cmp dword [0x555728], 0xffffffff
je 0x4bb5b4
xor edi, edi
xor esi, esi
nop word [eax + eax]
push 0
push dword [esi + 0x55572c]
push 0x410
push dword [0x570314]
call ebx
push edi
push eax
push 0x427
push dword [0x570314]
call ebx
lea eax, [ebp - 0x17c]
push eax
push edi
push 0x41c
push dword [0x570314]
call ebx
cmp byte [esi + 0x555730], 0
mov dword [ebp - 0x178], 0x141
je 0x4bb565
or dword [ebp - 0x174], 1
jmp 0x4bb56c
and dword [ebp - 0x174], 0xfffffffe
push 0x60
push dword [0x5408ec]
push dword [esi + 0x555728]
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp - 0x150], eax
mov eax, dword [esi + 0x55572c]
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x17c]
push eax
push edi
push 0x40b
push dword [0x570314]
call ebx
add esi, 0xc
inc edi
cmp esi, 0x6c
jb 0x4bb510
mov ecx, dword [ebp - 4]
mov eax, dword [0x555edc]
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.004c3287
mov esp, ebp
pop ebp
ret