Function at 0x498fb0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffac
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x14], ecx
mov edi, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x10]
call fcn.0040710c
mov eax, dword [ebp + 0xc]
call fcn.0040710c
mov eax, dword [ebp + 8]
call fcn.0040710c
lea eax, [ebp - 0xc]
mov edx, dword [0x496f44]
call fcn.00407d8c
xor eax, eax
push ebp
push 0x4999bf
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x3c], eax
mov eax, edi
call fcn.00466f78
mov esi, eax
dec esi
test esi, esi
jl 0x49905c
inc esi
xor ebx, ebx
mov eax, edi
mov edx, ebx
call fcn.00466498
call fcn.00466304
push eax
mov eax, edi
mov edx, ebx
call fcn.00466498
call fcn.00466394
pop edx
add edx, eax
cmp edx, dword [ebp - 0x3c]
jle 0x499058
mov eax, edi
mov edx, ebx
call fcn.00466498
call fcn.00466304
push eax
mov eax, edi
mov edx, ebx
call fcn.00466498
call fcn.00466394
pop edx
add edx, eax
mov dword [ebp - 0x3c], edx
inc ebx
dec esi
jne 0x499010
mov eax, 8
call fcn.00497264
add dword [ebp - 0x3c], eax
cmp dword [ebp - 0x14], 0
je 0x499101
lea eax, [ebp + 0x10]
mov edx, dword [ebp - 0x14]
mov edx, dword [edx + 0x28]
call fcn.00407178
mov eax, dword [ebp - 0x14]
call fcn.0048cc84
test eax, eax
je 0x49909d
lea eax, [ebp + 0xc]
mov edx, dword [ebp - 0x14]
mov edx, dword [edx + 0x4c]
call fcn.00407178
jmp 0x4990ab
lea eax, [ebp + 0xc]
mov edx, dword [ebp - 0x14]
mov edx, dword [edx + 0x50]
call fcn.00407178
lea eax, [ebp - 0xc]
xor edx, edx
call fcn.00407178
mov eax, dword [0x4b3860]
call fcn.0040892c
mov esi, eax
test esi, esi
jl 0x499101
inc esi
xor ebx, ebx
lea eax, [ebx + ebx*2]
mov edx, dword [0x4b3860]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp - 0x14]
mov edx, dword [edx + 4]
call fcn.00407884
jne 0x4990fd
lea eax, [ebp - 0xc]
lea edx, [ebx + ebx*2]
mov ecx, dword [0x4b3860]
lea edx, [ecx + edx*4]
mov ecx, dword [0x496f44]
call fcn.004080e8
jmp 0x499101
inc ebx
dec esi
jne 0x4990c8
mov dl, 2
mov eax, edi
call fcn.00464dcc
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x18]
mov edx, dword [0x497018]
xor eax, eax
call fcn.00498aac
mov edi, eax
mov eax, dword [ebp - 0x40]
mov dword [eax + 0xee], edi
mov eax, 8
call fcn.00497264
mov ecx, eax
mov eax, dword [ebp - 0x40]
mov edx, 1
call fcn.0046794c
mov eax, 8
call fcn.00497250
mov ecx, eax
mov eax, dword [ebp - 0x40]
mov edx, 3
call fcn.0046794c
mov eax, 8
call fcn.00497250
mov ecx, eax
mov eax, dword [ebp - 0x40]
mov edx, 4
call fcn.0046794c
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
call fcn.0046631c
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 0x30]
call fcn.004669ec
mov edx, eax
mov eax, dword [ebp - 0x40]
call fcn.0046636c
lea ecx, [ebp - 0x50]
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 0x30]
mov edx, 7
call fcn.00465c54
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
mov eax, dword [ebp - 0x40]
mov edx, 7
call fcn.00465c68
mov eax, dword [ebp - 0x40]
mov edx, dword [eax]
call dword [edx + 0x10]
mov dl, 2
mov eax, dword [ebp - 0x18]
call fcn.00464dcc
call fcn.00466db0
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x20]
mov ebx, eax
mov eax, dword [ebx + 0x30]
mov edx, dword [eax + 0xa4]
mov eax, ebx
call fcn.004663dc
mov eax, 8
call fcn.00497250
mov edx, eax
mov eax, ebx
call fcn.004662d0
mov eax, dword [ebx + 0x30]
call fcn.004669ec
mov esi, eax
mov eax, ebx
call fcn.004662b8
sub esi, eax
mov eax, 0x10
call fcn.00497250
mov edx, esi
sub edx, eax
mov eax, ebx
call fcn.0046636c
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x10]
mov dl, 2
mov eax, dword [ebp - 0x20]
call fcn.00464dcc
call fcn.00466db0
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov esi, eax
mov eax, 8
call fcn.00497250
mov edx, eax
mov eax, esi
call fcn.004662d0
mov eax, esi
mov edx, 0xfdfdfd
call fcn.004663dc
mov eax, 0x30
call fcn.00497250
mov edx, eax
mov eax, esi
call fcn.0046636c
mov eax, 0x30
call fcn.00497264
mov edx, eax
mov eax, esi
call fcn.004663b0
push 0
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x1c]
mov edx, dword [0x497018]
xor eax, eax
call fcn.00498aac
mov edi, eax
mov dword [esi + 0xee], edi
cmp dword [ebp - 0x14], 0
je 0x4992ed
cmp dword [ebp - 0xc], 0
je 0x4992dc
lea eax, [edi + 0x38]
mov edx, dword [eax]
mov dword [ebp - 0x48], edx
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 0x48]
call fcn.00405008
mov eax, dword [ebp - 8]
mov dword [edi + 0x38], eax
jmp 0x4992f9
mov dl, 1
mov eax, dword [0x496ea8]
call fcn.00404fd8
mov dword [edi + 0x38], eax
jmp 0x4992f9
mov eax, edi
xor ecx, ecx
mov edx, dword [ebp + 8]
call fcn.00498b24
mov byte [edi + 0x3c], 1
mov eax, dword [ebp - 0x10]
push eax
push 0x49cad8
mov eax, esi
call fcn.00466888
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x10]
mov dl, 2
mov eax, dword [ebp - 0x20]
call fcn.00464dcc
mov esi, eax
mov eax, dword [ebp - 0x1c]
call fcn.004662b8
mov edi, eax
mov eax, dword [ebp - 0x1c]
call fcn.00466350
add edi, eax
mov eax, 8
call fcn.00497250
add edi, eax
mov edx, edi
mov eax, esi
call fcn.004662d0
mov eax, 0x18
call fcn.00497264
mov edx, eax
mov eax, esi
call fcn.004663b0
mov eax, esi
mov dl, 1
call fcn.0046763c
mov eax, 0x10
call fcn.004972c0
push eax
mov eax, esi
call fcn.004668e4
mov edx, 4
pop ecx
call fcn.004637e0
mov eax, esi
call fcn.004668e4
movzx edx, byte [0x4999d4]
call fcn.0046391c
mov eax, esi
mov edx, dword [ebp + 0x10]
call fcn.00465e44
mov eax, dword [esi + 0x30]
mov edx, dword [eax + 0xa4]
mov eax, esi
call fcn.004663dc
cmp dword [ebp - 0x14], 0
je 0x4994a1
mov dl, 2
mov eax, dword [ebp - 0x20]
call fcn.00464dcc
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov esi, eax
mov eax, dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x24]
mov edx, dword [0x497018]
xor eax, eax
call fcn.00498aac
mov edi, eax
mov dword [esi + 0xee], edi
mov eax, dword [esi + 0x30]
mov edx, dword [eax + 0xa4]
mov eax, esi
call fcn.004663dc
mov eax, dword [ebp - 0x10]
push eax
push 0x49d814
mov eax, esi
call fcn.00466888
mov eax, dword [ebp - 0x1c]
call fcn.004662b8
mov edi, eax
mov eax, dword [ebp - 0x1c]
call fcn.00466350
add edi, eax
mov eax, 8
call fcn.00497250
add edi, eax
mov edx, edi
mov eax, esi
call fcn.004662d0
mov eax, 0x18
call fcn.00497264
mov edx, eax
mov eax, esi
call fcn.0046631c
mov eax, dword [esi + 0x30]
call fcn.004669ec
push eax
mov eax, esi
call fcn.004662b8
pop edx
sub edx, eax
mov eax, esi
call fcn.0046636c
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x88]
mov edx, dword [eax + 0x1c]
mov eax, esi
call fcn.004663b0
mov eax, dword [ebp - 0x24]
call fcn.00466304
mov esi, eax
mov eax, dword [ebp - 0x24]
call fcn.00466394
add esi, eax
mov eax, 8
call fcn.00497250
add esi, eax
mov edx, esi
mov eax, ebx
call fcn.00466a08
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
mov dl, 2
mov eax, dword [ebp - 0x38]
call fcn.00464dcc
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov ebx, eax
mov eax, dword [ebx + 0x30]
mov edx, dword [eax + 0xa4]
mov eax, ebx
call fcn.004663dc
cmp dword [ebp - 0x14], 0
je 0x4994fb
mov eax, 8
call fcn.00497250
mov edx, eax
mov eax, ebx
call fcn.004662d0
mov eax, dword [ebp - 0x20]
call fcn.00466304
mov esi, eax
mov eax, dword [ebp - 0x20]
call fcn.00466394
add esi, eax
mov edx, esi
mov eax, ebx
call fcn.0046631c
jmp 0x499537
mov eax, dword [ebp - 0x1c]
call fcn.004662b8
mov esi, eax
mov eax, dword [ebp - 0x1c]
call fcn.00466350
add esi, eax
mov eax, 8
call fcn.00497250
add esi, eax
mov edx, esi
mov eax, ebx
call fcn.004662d0
mov eax, 0x18
call fcn.00497264
mov edx, eax
mov eax, ebx
call fcn.0046631c
mov eax, dword [ebx + 0x30]
call fcn.004669ec
mov esi, eax
mov eax, ebx
call fcn.004662b8
sub esi, eax
mov eax, 8
call fcn.00497250
mov edx, esi
sub edx, eax
mov eax, ebx
call fcn.0046636c
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x10]
mov dl, 2
mov eax, dword [ebp - 0x28]
call fcn.00464dcc
mov ebx, eax
mov eax, 0xd
call fcn.004972c0
push eax
mov eax, ebx
call fcn.004668e4
mov edx, 4
pop ecx
call fcn.004637e0
xor edx, edx
mov eax, ebx
call fcn.00464fb8
mov eax, dword [ebx + 0x30]
call fcn.004669ec
mov edx, eax
mov eax, ebx
call fcn.0046636c
mov edx, 0x40
mov eax, ebx
call fcn.004663b0
mov eax, dword [ebp - 0x10]
push eax
push 0x49a364
mov eax, ebx
call fcn.00467be4
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x10]
push 0x50000000
push 0
push 0
mov eax, ebx
call fcn.004669ec
push eax
mov eax, ebx
call fcn.004669d0
push eax
mov eax, dword [ebx + 0x1c]
push eax
push 0x7a
mov eax, dword [0x4b0c38]
push eax
push 0
mov eax, dword [ebp + 0xc]
call fcn.004071b0
mov ecx, eax
mov edx, 0x4999d8
mov eax, 0x20
call fcn.0040b66c
mov esi, eax
push 1
mov eax, ebx
call fcn.004668e4
call fcn.00463980
push eax
push 0x30
push esi
call sub.user32.dll_SendMessageW_1
push 0
mov eax, ebx
call fcn.00466350
push eax
push 0x701
push esi
call sub.user32.dll_SendMessageW_1
mov edx, eax
mov eax, ebx
call fcn.00466a08
push 0x40
mov eax, ebx
call fcn.004669d0
push eax
mov eax, ebx
call fcn.004669ec
push eax
push 0
push 0
push 0
push esi
call sub.user32.dll_SetWindowPos
push 0
push 0
push esi
call sub.user32.dll_InvalidateRect
mov eax, ebx
call fcn.00466304
mov esi, eax
mov eax, ebx
call fcn.00466394
add esi, eax
mov eax, 8
call fcn.00497264
add esi, eax
mov edx, esi
mov eax, dword [ebx + 0x30]
call fcn.00466a08
cmp dword [ebp - 0x14], 0
je 0x499864
mov eax, dword [ebp - 0x14]
call fcn.0048cc84
test eax, eax
je 0x499882
mov eax, dword [ebp - 0x14]
call fcn.0048cc84
mov esi, eax
dec esi
test esi, esi
jl 0x499882
inc esi
xor ebx, ebx
mov dl, 2
mov eax, dword [ebp - 0x28]
call fcn.00464dcc
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [eax + 0x30]
mov edx, dword [eax + 0xa4]
mov eax, dword [ebp - 0x44]
call fcn.004663dc
mov eax, dword [ebp - 0x44]
mov eax, dword [eax + 0x30]
call fcn.004669d0
mov edx, eax
mov eax, dword [ebp - 0x44]
call fcn.0046631c
mov eax, 4
call fcn.00497250
mov edx, eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x8c]
add edx, dword [eax + 0x18]
mov eax, dword [ebp - 0x44]
call fcn.0046636c
mov eax, 4
call fcn.00497264
mov edx, eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x8c]
add edx, dword [eax + 0x1c]
mov eax, dword [ebp - 0x44]
call fcn.004663b0
mov eax, dword [ebp - 0x14]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x30]
mov edx, dword [0x497018]
xor eax, eax
call fcn.00498aac
mov edi, eax
mov eax, dword [ebp - 0x44]
mov dword [eax + 0xee], edi
mov eax, dword [ebp - 0x10]
push eax
push 0x49d990
mov eax, dword [ebp - 0x44]
call fcn.00466888
lea ecx, [ebp - 0x54]
mov edx, ebx
mov eax, dword [ebp - 0x14]
call fcn.004883a8
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x28]
call fcn.004647a8
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov edi, eax
mov eax, dword [edi + 0x30]
mov edx, dword [eax + 0xa4]
mov eax, edi
call fcn.004663dc
mov eax, dword [edi + 0x30]
call fcn.004669d0
push eax
mov eax, 2
call fcn.00497264
pop edx
add edx, eax
mov eax, edi
call fcn.0046631c
mov eax, dword [ebp - 0x30]
call fcn.004662b8
push eax
mov eax, dword [ebp - 0x30]
call fcn.00466350
pop edx
add edx, eax
push edx
mov eax, 4
call fcn.00497250
pop edx
add edx, eax
mov eax, edi
call fcn.004662d0
mov eax, dword [edi + 0x30]
call fcn.004669ec
push eax
mov eax, edi
call fcn.004662b8
pop edx
sub edx, eax
push edx
mov eax, 8
call fcn.00497250
pop edx
sub edx, eax
mov eax, edi
call fcn.0046636c
mov eax, edi
mov dl, 1
call fcn.0046763c
mov eax, edi
mov edx, dword [eax]
call dword [edx + 0x10]
mov eax, dword [ebp - 0x34]
call fcn.00466304
mov edi, eax
mov eax, dword [ebp - 0x34]
call fcn.00466394
add edi, eax
push edi
mov eax, dword [ebp - 0x30]
call fcn.00466304
mov edi, eax
mov eax, dword [ebp - 0x30]
call fcn.00466394
add edi, eax
mov eax, edi
pop edx
call fcn.0046313c
mov edx, eax
mov eax, dword [ebp - 0x28]
call fcn.00466a08
inc ebx
dec esi
jne 0x4996c3
jmp 0x499882
mov eax, dword [ebp - 0x28]
call fcn.00466304
mov ebx, eax
mov eax, dword [ebp - 0x28]
call fcn.00466394
add ebx, eax
mov edx, ebx
mov eax, dword [ebp - 0x38]
call fcn.00466a08
cmp dword [ebp - 0x14], 0
je 0x49990f
push 0xfdfdfd
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
call fcn.0049a260
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov ebx, eax
mov eax, dword [ebx + 0xee]
mov eax, dword [eax + 0x38]
mov edx, dword [eax + 0x18]
mov eax, ebx
call fcn.0046636c
mov eax, dword [ebx + 0xee]
mov eax, dword [eax + 0x38]
mov edx, dword [eax + 0x1c]
shr edx, 3
mov eax, ebx
call fcn.004663b0
mov eax, dword [ebx + 0x30]
call fcn.004669ec
mov esi, eax
mov eax, ebx
call fcn.00466350
sub esi, eax
mov eax, 8
call fcn.00497250
mov edx, esi
sub edx, eax
mov eax, ebx
call fcn.004662d0
mov eax, dword [ebp - 0x14]
movzx edx, byte [eax + 0x59]
mov eax, ebx
call fcn.00466d3c
mov eax, ebx
xor edx, edx
call fcn.00465eec
mov eax, dword [ebp - 0x28]
call fcn.00466304
mov ebx, eax
mov eax, dword [ebp - 0x28]
call fcn.00466394
add ebx, eax
mov edx, ebx
mov eax, dword [ebp - 0x40]
call fcn.00466a08
cmp dword [ebp - 0x14], 0
je 0x499958
mov eax, dword [ebp - 0x18]
call fcn.004669d0
push eax
mov eax, dword [ebp - 0x2c]
call fcn.00466394
pop edx
sub edx, eax
sar edx, 1
jns 0x49994e
adc edx, 0
mov eax, dword [ebp - 0x2c]
call fcn.0046631c
jmp 0x49997b
mov eax, dword [ebp - 0x18]
call fcn.004669d0
push eax
mov eax, dword [ebp - 0x1c]
call fcn.00466394
pop edx
sub edx, eax
sar edx, 1
jns 0x499973
adc edx, 0
mov eax, dword [ebp - 0x1c]
call fcn.0046631c
mov ebx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
push eax
push fcn.00499d4c
mov eax, ebx
call fcn.0046737c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4999c6
lea eax, [ebp - 0x54]
call fcn.00407114
lea eax, [ebp - 0xc]
mov edx, dword [0x496f44]
call fcn.00407e58
lea eax, [ebp + 8]
mov edx, 3
call fcn.0040711c
ret