Function at 0x4a8796
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffcc
push ebx
push esi
push edi
mov edi, dword [ebp + 0x10]
cmp dword [edi + 8], 0
jne 0x4a87eb
push 0x63
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push edi
mov eax, dword [ebp + 0xc]
push dword [eax]
push dword [ebp + 8]
call fcn.004e5890
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jne 0x4a87e3
cmp dword [edi + 8], 1
je 0x4a87e3
cmp dword [edi + 8], 2
je 0x4a87e3
push 6
push dword [ebp + 0x1c]
push edi
call fcn.00479a18
jmp 0x4a99f5
mov eax, dword [ebp - 0xc]
jmp 0x4a99f5
cmp dword [edi + 0x40], 0
jne 0x4a87fb
mov eax, 2
jmp 0x4a99f5
cmp dword [edi + 8], 2
jne 0x4a8814
mov edx, dword [edi + 0x40]
cmp dword [edx + 0x40], 0
jne 0x4a8814
mov eax, 2
jmp 0x4a99f5
mov edx, dword [edi + 0x40]
cmp dword [edx + 0x1c], 1
je 0x4a8827
mov eax, 1
jmp 0x4a99f5
cmp dword [edi + 8], 2
jne 0x4a8843
mov edx, dword [edi + 0x40]
mov ecx, dword [edx + 0x40]
cmp dword [ecx + 0x1c], 1
je 0x4a8843
mov eax, 1
jmp 0x4a99f5
mov edx, dword [edi + 0x40]
cmp dword [edx + 0xc], 0
jne case.default.0x4a929b
cmp dword [edi + 8], 2
jne 0x4a8866
mov ecx, dword [edi + 0x40]
mov eax, dword [ecx + 0x40]
cmp dword [eax + 0xc], 0
jne case.default.0x4a929b
mov edx, dword [ebp + 0x1c]
mov byte [edx], 0
cmp dword [edi + 8], 2
jne 0x4a8895
mov ecx, dword [edi + 0x40]
mov eax, dword [ecx + 0x40]
push dword [eax]
call fcn.005570e0
pop ecx
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x270e
jle 0x4a88f5
mov dword [ebp - 0xc], 0x270e
jmp 0x4a88f5
mov edx, dword [edi + 0x40]
push dword [edx]
call fcn.004e54ab
test eax, eax
je 0x4a88ee
mov ecx, dword [edi + 0x40]
mov eax, dword [ecx]
mov edx, dword [ebp + 0x1c]
push edi
mov edi, eax
mov esi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
mov eax, dword [edi + 0x40]
push dword [eax]
call fcn.005570e0
pop ecx
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x270e
jle 0x4a88f5
mov dword [ebp - 0xc], 0x270e
jmp 0x4a88f5
mov dword [ebp - 0xc], 0x270f
cmp dword [ebp - 0xc], 0
jne 0x4a89f8
xor edx, edx
mov dword [ebp - 0xc], edx
mov ebx, dword [0x56f010]
test ebx, ebx
je 0x4a89e0
mov eax, dword [ebx + 0xb6c]
cmp eax, dword [ebp + 0x20]
je 0x4a8933
mov edx, dword [ebx + 0x6bc]
add edx, 0xfffffffb
sub edx, 3
jb 0x4a8933
dec edx
je 0x4a8933
jmp 0x4a89d2
cmp dword [edi + 8], 2
jne 0x4a89c6
cmp dword [ebx + 0x6bc], 2
jne 0x4a8983
mov eax, dword [ebx + 0x6c0]
cmp eax, 3
je 0x4a8956
cmp eax, 4
jne 0x4a8983
push 0x20
lea edx, [ebx + 8]
push edx
call fcn.0054e1ec
add esp, 8
mov esi, eax
test esi, esi
jne 0x4a896f
lea esi, [ebx + 8]
jmp 0x4a8970
inc esi
push esi
push 0x567d17
push dword [ebp + 0x1c]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x4a89ac
lea eax, [ebx + 8]
mov edx, dword [ebp + 0x1c]
push edi
mov edi, eax
mov esi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
push 1
push 0
push dword [ebp + 0x1c]
mov eax, dword [edi + 0x40]
push dword [eax]
call fcn.0051f0b8
test eax, eax
je 0x4a89d2
inc dword [ebp - 0xc]
jmp 0x4a89d2
cmp dword [ebx + 0x6bc], 9
jne 0x4a89d2
inc dword [ebp - 0xc]
mov ebx, dword [ebx + 0xd3c]
test ebx, ebx
jne 0x4a8912
push dword [ebp - 0xc]
push 0x567d1c
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push dword [ebp + 0x1c]
call fcn.0051fc59
mov dword [ebp + 8], eax
cmp dword [ebp + 8], 0
je 0x4a8a15
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x4a8b40
mov ebx, dword [0x56f010]
test ebx, ebx
je 0x4a8b40
mov eax, dword [ebx + 0xb6c]
cmp eax, dword [ebp + 0x20]
je 0x4a8a44
mov edx, dword [ebx + 0x6bc]
add edx, 0xfffffffb
sub edx, 3
jb 0x4a8a44
dec edx
je 0x4a8a44
jmp 0x4a8b32
cmp dword [ebx + 0x6bc], 2
jne 0x4a8a8a
mov eax, dword [ebx + 0x6c0]
cmp eax, 3
je 0x4a8a5d
cmp eax, 4
jne 0x4a8a8a
push 0x20
lea edx, [ebx + 8]
push edx
call fcn.0054e1ec
add esp, 8
mov esi, eax
test esi, esi
jne 0x4a8a76
lea esi, [ebx + 8]
jmp 0x4a8a77
inc esi
push esi
push 0x567d20
push dword [ebp + 0x1c]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x4a8ab3
lea eax, [ebx + 8]
mov edx, dword [ebp + 0x1c]
push edi
mov edi, eax
mov esi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
cmp dword [ebp - 0xc], 0x270f
jne 0x4a8af9
cmp dword [edi + 8], 2
jne 0x4a8ade
push 1
push 0
push dword [ebp + 0x1c]
mov eax, dword [edi + 0x40]
push dword [eax]
call fcn.0051f0b8
test eax, eax
je 0x4a8b25
xor edx, edx
mov dword [ebp - 0xc], edx
jmp 0x4a8b25
push dword [ebp + 0x1c]
mov ecx, dword [edi + 0x40]
push dword [ecx]
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a8b25
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x4a8b25
cmp dword [edi + 8], 2
jne 0x4a8b19
push 1
push 0
push dword [ebp + 0x1c]
mov edx, dword [edi + 0x40]
push dword [edx]
call fcn.0051f0b8
test eax, eax
je 0x4a8b25
dec dword [ebp - 0xc]
jmp 0x4a8b25
cmp dword [ebx + 0x6bc], 9
jne 0x4a8b25
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0
jg 0x4a8b32
mov ecx, dword [ebx]
mov dword [ebp + 8], ecx
jmp 0x4a8b40
mov ebx, dword [ebx + 0xd3c]
test ebx, ebx
jne 0x4a8a23
cmp dword [ebp + 8], 0
je case.default.0x4a929b
cmp dword [ebp - 0xc], 0
jne case.default.0x4a929b
test ebx, ebx
je 0x4a95ca
lea eax, [ebp - 0x34]
push eax
push dword [ebx]
call fcn.00522102
cmp dword [edi + 0x10], 0
je 0x4a9553
push 0x2e
push dword [edi]
call fcn.0054e574
add esp, 8
mov esi, eax
test eax, eax
je 0x4a9553
push 0x567d25
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a8bb1
push dword [ebp - 0x34]
push 0x567d29
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567d2d
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a8bdb
push dword [ebp - 0x30]
push 0x567d31
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567d35
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a8c05
push dword [ebp - 0x2c]
push 0x567d39
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567d3d
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a8c2f
push dword [ebp - 0x28]
push 0x567d41
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567d45
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a8c98
push dword [ebx]
call fcn.0051fe9d
test eax, eax
je 0x4a8c5d
lea edx, [ebp - 0x34]
push edx
push dword [0x56f01c]
call sub.USER32.dll_ClientToScreen
jmp 0x4a8c80
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 8], ecx
push 0
lea eax, [ebp - 0x34]
push eax
lea edx, [ebp - 8]
push edx
push 0
call fcn.004d56b4
mov ecx, dword [ebp - 0x34]
sub dword [ebp - 8], ecx
mov eax, dword [ebp - 8]
mov dword [ebp - 0x34], eax
push dword [ebp - 0x34]
push 0x567d4a
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567d4e
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a8d01
push dword [ebx]
call fcn.0051fe9d
test eax, eax
je 0x4a8cc6
lea edx, [ebp - 0x34]
push edx
push dword [0x56f01c]
call sub.USER32.dll_ClientToScreen
jmp 0x4a8ce9
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 4], ecx
push 0
lea eax, [ebp - 0x34]
push eax
lea edx, [ebp - 8]
push edx
push 0
call fcn.004d56b4
mov ecx, dword [ebp - 0x30]
sub dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x30], eax
push dword [ebp - 0x30]
push 0x567d53
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567d57
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a8d2e
push dword [ebx + 0x7f8]
push 0x567d5c
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567d60
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a8d5b
push dword [ebx + 0x7fc]
push 0x567d65
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567d69
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a8d9f
mov eax, dword [ebx + 0x8f4]
test eax, eax
je case.default.0x4a929b
lea edx, [ebp - 0x24]
push edx
push 0x18
push eax
call sub.GDI32.dll_GetObjectA
push dword [ebp - 0x20]
push 0x567d6e
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567d72
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a8de3
mov eax, dword [ebx + 0x8f4]
test eax, eax
je case.default.0x4a929b
lea edx, [ebp - 0x24]
push edx
push 0x18
push eax
call sub.GDI32.dll_GetObjectA
push dword [ebp - 0x1c]
push 0x567d77
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push str..sbtext
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a8e0b
push ebx
call fcn.00416aef
push eax
push 4
push dword [ebp + 0x14]
call fcn.0042e5e3
jmp case.default.0x4a929b
push str..sbcolor
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a8e7e
cmp dword [ebx + 0x6c4], 1
jne 0x4a8e3b
mov ecx, dword [ebp + 0x14]
push edi
mov esi, 0x567d8e
mov edi, ecx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
jmp case.default.0x4a929b
cmp dword [ebx + 0x6c4], 3
jne 0x4a8e5a
mov edx, dword [ebp + 0x14]
push edi
mov esi, str.event
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.default.0x4a929b
cmp dword [ebx + 0x6c4], 2
jne case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, str.highlight
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.default.0x4a929b
push 0x567da9
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a8f60
cmp dword [0x55f2c4], 0
je 0x4a8ed5
cmp dword [ebx + 0x9d0], 0
jne 0x4a8ef7
push dword [ebp + 8]
call sub.USER32.dll_IsIconic
test eax, eax
jne 0x4a8ebe
push dword [ebp + 8]
call sub.USER32.dll_IsWindowVisible
test eax, eax
jne 0x4a8ef7
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567db1
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
push dword [ebx]
call sub.USER32.dll_IsWindowVisible
test eax, eax
jne 0x4a8ef7
mov edx, dword [ebp + 0x14]
push edi
mov esi, str.hidden
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
push dword [ebp + 8]
call sub.USER32.dll_IsIconic
test eax, eax
jne 0x4a8f0f
push dword [ebp + 8]
call sub.USER32.dll_IsWindowVisible
test eax, eax
jne 0x4a8f26
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567dc1
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.default.0x4a929b
push dword [ebp + 8]
call sub.USER32.dll_IsZoomed
test eax, eax
je 0x4a8f49
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567dcc
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567dd7
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
push 0x567ddf
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a8fee
cmp dword [0x55f2c4], 0
je 0x4a8fae
cmp dword [ebx + 0x9d0], 0
je 0x4a8f9a
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567de6
mov edi, edx
mov eax, edi
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567dea
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
pop edi
jmp case.default.0x4a929b
push dword [ebx]
call sub.USER32.dll_IsIconic
test eax, eax
je 0x4a8fda
push dword [ebx]
call sub.USER32.dll_IsWindowVisible
test eax, eax
je 0x4a8fda
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567def
mov edi, edx
mov eax, edi
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567df3
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
pop edi
jmp case.default.0x4a929b
push str..mdi
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a9039
push dword [ebp + 8]
call fcn.0051fe9d
test eax, eax
je 0x4a9022
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567dfe
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567e05
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
push str..font
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a907c
add ebx, 0x928
mov eax, dword [ebp + 0x14]
push edi
mov edi, ebx
mov esi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
push str..fontbold
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a90c7
cmp dword [ebx + 0x990], 0x190
jle 0x4a90b0
mov eax, dword [ebp + 0x14]
push edi
mov esi, 0x567e1f
mov edi, eax
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567e26
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
push str..fontsize
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a90f4
push dword [ebx + 0x98c]
push 0x567e39
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 6
push 0x567e3d
push esi
call fcn.0054e4e8
add esp, 0xc
test eax, eax
jne 0x4a9170
push 0x100
push dword [ebp + 0x1c]
push dword [ebp + 8]
call sub.USER32.dll_GetWindowTextA
mov edx, dword [ebp + 0x1c]
mov byte [edx + 0x100], 0
push 0x20
push dword [ebp + 0x1c]
call fcn.0054e1ec
add esp, 8
mov esi, eax
test esi, esi
je case.default.0x4a929b
inc esi
cmp byte [esi], 0
je case.default.0x4a929b
mov eax, dword [ebp + 0x14]
push esi
push edi
mov edi, esi
mov esi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
jmp case.default.0x4a929b
push str..logfile
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a91c0
cmp dword [ebx + 0x66c], 0
je case.default.0x4a929b
add ebx, 0x464
mov eax, dword [ebp + 0x14]
push edi
mov edi, ebx
mov esi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
push str..stamp
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a921a
cmp dword [ebx + 0x6e4], 1
je 0x4a91ed
cmp dword [ebx + 0x6e4], 2
jne 0x4a9203
cmp dword [0x56c324], 0
je 0x4a9203
mov eax, dword [ebp + 0x14]
push edi
mov esi, 0x567e57
mov edi, eax
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567e5e
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
push str..ontop
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a9266
push 0xffffffffffffffec
push dword [ebx]
call sub.USER32.dll_GetWindowLongA
test al, 8
je 0x4a924f
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567e6e
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567e75
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
push 0x567e7d
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a9460
mov edx, dword [ebp + 0x14]
push edi
mov esi, str.unknown
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
mov edx, dword [ebx + 0x6bc]
cmp edx, 9
ja case.default.0x4a929b
jmp dword [edx*4 + 0x4a92a2]
mov ecx, dword [ebp + 0x14]
push edi
mov esi, 0x567e8d
mov edi, ecx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567e95
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebx + 0x6c0]
dec edx
je 0x4a930d
dec edx
je 0x4a9323
dec edx
je 0x4a9338
dec edx
je 0x4a934d
jmp case.default.0x4a929b
mov ecx, dword [ebp + 0x14]
push edi
mov esi, 0x567e9e
mov edi, ecx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, str.message
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, str.chat
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567eb4
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebx + 0x6c0]
dec edx
je 0x4a9375
dec edx
je 0x4a938a
jmp case.default.0x4a929b
mov ecx, dword [ebp + 0x14]
push edi
mov esi, str.send
mov edi, ecx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567ec2
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567ec7
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567ed1
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567ed9
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567edf
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567ee7
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.default.0x4a929b
cmp dword [ebx + 0x6f8], 0
je 0x4a942b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567eee
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
jmp case.default.0x4a929b
cmp dword [ebx + 0x6c0], 1
jne 0x4a9449
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567ef7
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567f00
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
push str..anysc
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a94a8
cmp dword [ebx + 0xb74], 0
je 0x4a9491
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567f10
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567f17
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
push 0x567f1f
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a94d1
push dword [ebx]
push 0x567f26
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567f2a
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a94fb
push dword [ebx + 4]
push 0x567f30
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567f34
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne case.default.0x4a929b
push dword [ebx + 0xb6c]
call fcn.0041261f
test eax, eax
je 0x4a953e
mov edx, dword [ebx + 0xb6c]
push dword [edx + 8]
push 0x567f3a
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
mov ecx, dword [ebp + 0x14]
push edi
mov esi, 0x567f3e
mov edi, ecx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp case.default.0x4a929b
cmp dword [ebx + 0x6bc], 2
jne 0x4a959c
mov eax, dword [ebx + 0x6c0]
cmp eax, 3
je 0x4a956c
cmp eax, 4
jne 0x4a959c
push 0x20
lea edx, [ebx + 8]
push edx
call fcn.0054e1ec
add esp, 8
mov esi, eax
test esi, esi
jne 0x4a9585
lea esi, [ebx + 8]
jmp 0x4a9586
inc esi
push esi
push 0x567f41
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
add ebx, 8
mov eax, dword [ebp + 0x14]
push edi
mov edi, ebx
mov esi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
lea eax, [ebp - 0x34]
push eax
push dword [ebp + 8]
call sub.USER32.dll_GetWindowRect
cmp dword [edi + 0x10], 0
je case.default.0x4a929b
push 0x2e
push dword [edi]
call fcn.0054e574
add esp, 8
mov esi, eax
test eax, eax
je case.default.0x4a929b
push 0x567f46
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a9620
push dword [ebp - 0x34]
push 0x567f4a
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567f4e
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a964a
push dword [ebp - 0x30]
push 0x567f52
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567f56
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a9678
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x34]
push edx
push 0x567f5a
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567f5e
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a96a6
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x30]
push ecx
push 0x567f62
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567f66
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a9700
mov eax, dword [ebp + 8]
cmp eax, dword [0x56f01c]
jne 0x4a96d0
push 1
lea edx, [ebp - 0x34]
push edx
call fcn.0040c2c0
jmp 0x4a96e8
lea ecx, [ebp - 0x34]
push ecx
push dword [ebp + 8]
call sub.USER32.dll_GetClientRect
lea eax, [ebp - 0x34]
push eax
push dword [ebp + 8]
call sub.USER32.dll_ClientToScreen
push dword [ebp - 0x34]
push 0x567f6b
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567f6f
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a975a
mov edx, dword [ebp + 8]
cmp edx, dword [0x56f01c]
jne 0x4a972a
push 1
lea ecx, [ebp - 0x34]
push ecx
call fcn.0040c2c0
jmp 0x4a9742
lea eax, [ebp - 0x34]
push eax
push dword [ebp + 8]
call sub.USER32.dll_GetClientRect
lea edx, [ebp - 0x34]
push edx
push dword [ebp + 8]
call sub.USER32.dll_ClientToScreen
push dword [ebp - 0x30]
push 0x567f74
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567f78
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a97ac
mov ecx, dword [ebp + 8]
cmp ecx, dword [0x56f01c]
jne 0x4a9784
push 0
lea eax, [ebp - 0x34]
push eax
call fcn.0040c2c0
jmp 0x4a9790
lea edx, [ebp - 0x34]
push edx
push dword [ebp + 8]
call sub.USER32.dll_GetClientRect
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x34]
push ecx
push 0x567f7d
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push 0x567f81
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a97fe
mov eax, dword [ebp + 8]
cmp eax, dword [0x56f01c]
jne 0x4a97d6
push 0
lea edx, [ebp - 0x34]
push edx
call fcn.0040c2c0
jmp 0x4a97e2
lea ecx, [ebp - 0x34]
push ecx
push dword [ebp + 8]
call sub.USER32.dll_GetClientRect
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
push eax
push 0x567f86
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push str..state
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a98a7
cmp dword [0x55f824], 0
je 0x4a983e
push dword [ebp + 8]
call sub.USER32.dll_IsWindowVisible
test eax, eax
jne 0x4a983e
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567f92
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
push dword [ebp + 8]
call sub.USER32.dll_IsIconic
test eax, eax
jne 0x4a9856
push dword [ebp + 8]
call sub.USER32.dll_IsWindowVisible
test eax, eax
jne 0x4a986d
mov edx, dword [ebp + 0x14]
push edi
mov esi, str.minimized
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.default.0x4a929b
push dword [ebp + 8]
call sub.USER32.dll_IsZoomed
test eax, eax
je 0x4a9890
mov edx, dword [ebp + 0x14]
push edi
mov esi, str.maximized
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, str.normal
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
push str..icon
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a98fb
push dword [ebp + 8]
call sub.USER32.dll_IsIconic
test eax, eax
je 0x4a98e7
push dword [ebp + 8]
call sub.USER32.dll_IsWindowVisible
test eax, eax
je 0x4a98e7
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567fbd
mov edi, edx
mov eax, edi
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567fc1
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
pop edi
jmp case.default.0x4a929b
push 0x567fc6
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a9961
mov edx, dword [ebp + 8]
cmp edx, dword [0x56f018]
jne 0x4a992d
mov ecx, dword [ebp + 0x14]
push edi
mov esi, 0x567fcd
mov edi, ecx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 8]
cmp edx, dword [0x56f01c]
jne 0x4a994c
mov ecx, dword [ebp + 0x14]
push edi
mov esi, 0x567fd3
mov edi, ecx
mov eax, edi
movsd dword es:[edi], dword [esi]
pop edi
jmp case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, str.desktop
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
jmp case.default.0x4a929b
push str..hwnd
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a9988
push dword [ebp + 8]
push 0x567fe8
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp case.default.0x4a929b
push str..wid
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4a99ac
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567ff2
mov edi, edx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp case.default.0x4a929b
push str..cid
push esi
call fcn.0054e450
add esp, 8
test eax, eax
jne case.default.0x4a929b
mov edx, dword [ebp + 0x14]
push edi
mov esi, 0x567ffb
mov edi, edx
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
jmp case.default.0x4a929b
push dword [edi + 0x40]
mov edx, dword [ebp + 0xc]
push dword [edx]
call fcn.004c6c7e
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
dec dword [edi + 8]
cmp dword [edi + 8], 0
jg 0x4a99d0
xor eax, eax
mov dword [edi + 8], eax
mov eax, 2
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c