Function at 0x4b7666
Capabilities:
Get graphical window text

Disassembly:
mov eax, 0x5e7f61
call fcn.00594e8c
mov eax, 0x40038
call fcn.00597530
mov eax, dword [0x6534d8]
xor eax, ebp
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
cmp dword [eax], 0
je 0x4b7693
xor eax, eax
jmp 0x4b7a13
push dword [ebp + 0xc]
push dword [ebp + 8]
push 0
push dword [0x651228]
call sub.Enable40.dll_Ordinal_1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x4b78ce
mov dword [ebp - 0x40020], 1
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
inc eax
mov dword [ebp - 0x18], eax
push 0x3ffff
lea eax, [ebp - 0x4001c]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x4001c]
push eax
lea ecx, [ebp - 0x40028]
call fcn.0040e04b
and dword [ebp - 4], 0
lea eax, [ebp - 0x40028]
push eax
lea ecx, [ebp - 0x14]
call fcn.0040b108
mov byte [ebp - 4], 1
lea eax, [ebp - 0x40028]
push eax
call fcn.004bbe83
pop ecx
lea eax, [ebp - 0x40028]
push eax
call fcn.004bb53a
pop ecx
test eax, eax
jne 0x4b7753
or dword [ebp - 0x40040], 0xffffffff
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.0040b121
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40028]
call fcn.0040b121
mov eax, dword [ebp - 0x40040]
jmp 0x4b7a13
push 0x60a7e8
push 0x60a7ec
lea ecx, [ebp - 0x14]
call fcn.0041d3be
and dword [ebp - 0x40024], 0
and dword [ebp - 0x4002c], 0
jmp 0x4b7782
mov eax, dword [ebp - 0x4002c]
inc eax
mov dword [ebp - 0x4002c], eax
cmp dword [ebp - 0x4002c], 0x20
jge 0x4b77ac
mov eax, dword [ebp - 0x4002c]
movsx eax, word [eax*2 + 0x65a180]
test eax, eax
jl 0x4b77aa
mov eax, dword [ebp - 0x40024]
inc eax
mov dword [ebp - 0x40024], eax
jmp 0x4b7775
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x40028]
push eax
call fcn.0041d6ca
pop ecx
pop ecx
movzx eax, al
test eax, eax
je 0x4b783a
cmp dword [ebp - 0x40024], 0
jg 0x4b77d9
movzx eax, byte [0x6a987c]
test eax, eax
je 0x4b783a
movzx eax, byte [0x6a987c]
test eax, eax
je 0x4b7803
lea ecx, [ebp - 0x40028]
call fcn.00517034
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4b783a
push 4
push str.Expand_needed
push str.Would_you_like_to_re_expand_the_script_file__Breakpoints_will_be_taken_out_
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x4b783a
lea ecx, [ebp - 0x40028]
call fcn.00517034
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push dword [ebp - 0x40020]
mov eax, dword [ebp + 0xc]
push dword [eax]
call sub.Enable40.dll_Ordinal_10002
push 0
push 0x60a84c
mov eax, dword [ebp + 0xc]
push dword [eax]
call sub.Enable40.dll_Ordinal_112
push dword [0x6507fc]
mov eax, dword [ebp + 0xc]
push dword [eax]
call sub.Enable40.dll_Ordinal_11
push dword [0x683ed0]
push 0
mov eax, dword [ebp + 0xc]
push dword [eax]
call sub.Enable40.dll_Ordinal_34
cmp dword [ebp - 0x40024], 0
jne 0x4b78a3
lea ecx, [ebp - 0x40028]
call fcn.00517034
push eax
mov eax, dword [ebp + 0xc]
push dword [eax]
call sub.Enable40.dll_Ordinal_11
mov dword [ebp - 0x10], eax
jmp 0x4b78b3
push dword [ebp + 8]
mov eax, dword [ebp + 0xc]
push dword [eax]
call sub.Enable40.dll_Ordinal_120
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.0040b121
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40028]
call fcn.0040b121
cmp dword [ebp - 0x10], 0
jge 0x4b7947
and dword [ebp - 0x40034], 0
push 0
push 0
lea eax, [ebp - 0x40034]
push eax
push 0x400
push dword [ebp - 0x10]
push 0
push 0x1100
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
mov dword [ebp - 0x40030], eax
cmp dword [ebp - 0x40030], 0
je 0x4b7918
mov eax, dword [ebp - 0x40034]
mov dword [ebp - 0x40044], eax
jmp 0x4b7922
mov dword [ebp - 0x40044], 0x60a860
push 0
push dword [0x651228]
push dword [ebp - 0x40044]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
push dword [ebp - 0x40034]
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x4b7975
push 0x4b7561
mov eax, dword [ebp + 0xc]
push dword [eax]
call sub.Enable40.dll_Ordinal_5
push 0x40bf0c
mov eax, dword [ebp + 0xc]
push dword [eax]
call sub.Enable40.dll_Ordinal_6
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0xc]
push dword [eax]
call sub.Enable40.dll_Ordinal_15
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jge 0x4b798b
mov eax, dword [ebp + 0xc]
push dword [eax]
call sub.Enable40.dll_Ordinal_54
mov eax, dword [ebp + 0xc]
and dword [eax], 0
push 0
mov eax, dword [ebp + 0xc]
push dword [eax]
push 0xfa
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x60a878
push 0x6a9a98
call fcn.00596170
pop ecx
pop ecx
push 0x6a9a98
push 0x60a87c
mov eax, dword [ebp + 0xc]
push dword [eax]
call sub.Enable40.dll_Ordinal_27
mov dword [ebp - 0x4003c], eax
push 0x60a880
push 0x6a9898
call fcn.00599b3d
pop ecx
pop ecx
push 0x6a9898
push 0x60a888
mov eax, dword [ebp + 0xc]
push dword [eax]
call sub.Enable40.dll_Ordinal_10027
mov dword [ebp - 0x4003c], eax
push 0x651210
push str.MyVar
mov eax, dword [ebp + 0xc]
push dword [eax]
call sub.Enable40.dll_Ordinal_31
mov dword [ebp - 0x40038], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0059508d
leave
ret