Function at 0x455d90
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b2021
mov eax, dword fs:[0]
push eax
sub esp, 0x820
mov eax, dword [0x4d7a50]
xor eax, ebp
mov dword [ebp - 0x210], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x808], ecx
call fcn.0040fd30
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
mov ecx, dword [eax + 0xe4]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
movzx eax, byte [edx + 0x4c6dcc]
test eax, eax
jne 0x455df2
jmp 0x456974
lea ecx, [ebp - 0x18]
call fcn.0040fe00
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1b0]
call fcn.0047886d
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0x594c50], 0
jl 0x456062
mov ecx, dword [ebp - 0x14]
add ecx, 0x595064
call fcn.004521f0
mov dword [ebp - 0x1c8], eax
push 0xffffffffffffffff
push 0
push 0xf
push 0x16
push 0x13
push 3
push 0x7cf
lea ecx, [ebp - 0x1d0]
call fcn.00452af0
push 0xffffffffffffffff
push 0
push 0xf
push 0x16
push 0x14
push 3
push 0x7cf
lea ecx, [ebp - 0x1c4]
call fcn.00452af0
mov edx, dword [ebp - 0x1cc]
push edx
mov eax, dword [ebp - 0x1d0]
push eax
lea ecx, [ebp - 0x1bc]
push ecx
lea ecx, [ebp - 0x1c4]
call fcn.00451e60
push 0x14
lea edx, [ebp - 0x19c]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x594c50]
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x594c44]
lea ecx, [eax + ecx*4]
push ecx
mov edx, esp
mov dword [ebp - 0x7d4], esp
push ecx
mov ecx, edx
call fcn.0040fe20
mov dword [ebp - 0x80c], eax
call fcn.00405c90
add esp, 0xc
mov dword [ebp - 0x810], eax
mov eax, dword [ebp - 0x810]
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1c8], 0
jne 0x456062
cmp dword [ebp - 0x1d4], 0xa
jne 0x456062
mov ecx, dword [ebp - 0x19c]
imul ecx, ecx, 0x3e8
mov edx, dword [ebp - 0x198]
imul edx, edx, 0x64
add ecx, edx
mov eax, dword [ebp - 0x194]
imul eax, eax, 0xa
add ecx, dword [ebp - 0x190]
add eax, ecx
mov dword [ebp - 0x1e8], eax
mov ecx, dword [ebp - 0x18c]
imul ecx, ecx, 0xa
add ecx, dword [ebp - 0x188]
mov dword [ebp - 0x1dc], ecx
mov edx, dword [ebp - 0x184]
imul edx, edx, 0xa
add edx, dword [ebp - 0x180]
mov dword [ebp - 0x1d8], edx
mov eax, dword [ebp - 0x17c]
imul eax, eax, 0x64
mov ecx, dword [ebp - 0x178]
imul ecx, ecx, 0xa
add eax, dword [ebp - 0x174]
add ecx, eax
mov dword [ebp - 0x1e4], ecx
mov edx, dword [ebp - 0x1e4]
add edx, 1
mov dword [ebp - 0x1e0], edx
cmp dword [ebp - 0x1e0], 0x78
jle 0x456012
push 0xffffffffffffffff
push 0
push 0xf
push 0x16
mov eax, dword [ebp - 0x1d8]
push eax
mov ecx, dword [ebp - 0x1dc]
push ecx
mov edx, dword [ebp - 0x1e8]
push edx
lea ecx, [ebp - 0x1f0]
call fcn.00452af0
mov eax, dword [ebp - 0x1b8]
push eax
mov ecx, dword [ebp - 0x1bc]
push ecx
lea ecx, [ebp - 0x1f0]
call fcn.00452cb0
mov dword [ebp - 0x1e0], 1
mov edx, dword [ebp - 0x1e0]
push edx
lea ecx, [ebp - 0x1f0]
call fcn.00452df0
push eax
lea ecx, [ebp - 0x1f0]
call fcn.00452db0
push eax
lea ecx, [ebp - 0x1f0]
call fcn.00452d00
push eax
push str._02d_02d_02d_03d
lea eax, [ebp - 0x18]
push eax
call fcn.00410a80
add esp, 0x18
jmp 0x456062
mov ecx, dword [ebp - 0x1e0]
push ecx
mov edx, dword [ebp - 0x180]
push edx
mov eax, dword [ebp - 0x184]
push eax
mov ecx, dword [ebp - 0x188]
push ecx
mov edx, dword [ebp - 0x18c]
push edx
mov eax, dword [ebp - 0x190]
push eax
mov ecx, dword [ebp - 0x194]
push ecx
mov edx, dword [ebp - 0x198]
push edx
mov eax, dword [ebp - 0x19c]
push eax
push str._d_d_d_d_d_d_d_d_03d
lea ecx, [ebp - 0x18]
push ecx
call fcn.00410a80
add esp, 0x2c
lea ecx, [ebp - 0x3c]
call fcn.0040fe00
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10]
call fcn.0040fe00
mov byte [ebp - 4], 3
lea edx, [ebp - 0x10]
push edx
push 0x430
mov ecx, dword [ebp - 0x808]
call fcn.00486a58
cmp dword [ebp + 8], 1
jne 0x4560bc
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x1a0]
mov eax, dword [edx + 0xc8]
push eax
push 0x4bd8e4
lea ecx, [ebp - 0x3c]
push ecx
call fcn.00410a80
add esp, 0x14
jmp 0x456116
cmp dword [ebp + 8], 2
jne 0x4560ea
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x1a0]
mov edx, dword [ecx + 0xc8]
push edx
push 0x4bd8f4
lea eax, [ebp - 0x3c]
push eax
call fcn.00410a80
add esp, 0x14
jmp 0x456116
cmp dword [ebp + 8], 3
jne 0x456116
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x1a0]
mov ecx, dword [eax + 0xc8]
push ecx
push 0x4bd904
lea edx, [ebp - 0x3c]
push edx
call fcn.00410a80
add esp, 0x14
cmp dword [ebp + 8], 1
jne 0x456147
push ecx
mov ecx, esp
mov dword [ebp - 0x7d8], esp
lea eax, [ebp - 0x3c]
push eax
call fcn.0040fe20
mov dword [ebp - 0x814], eax
mov ecx, dword [ebp - 0x808]
add ecx, 0xf9b60
call fcn.00475e40
jmp 0x4561a7
cmp dword [ebp + 8], 2
jne 0x456178
push ecx
mov ecx, esp
mov dword [ebp - 0x7dc], esp
lea edx, [ebp - 0x3c]
push edx
call fcn.0040fe20
mov dword [ebp - 0x818], eax
mov ecx, dword [ebp - 0x808]
add ecx, 0xf9bcc
call fcn.00475e40
jmp 0x4561a7
cmp dword [ebp + 8], 3
jne 0x4561a7
push ecx
mov ecx, esp
mov dword [ebp - 0x7e0], esp
lea eax, [ebp - 0x3c]
push eax
call fcn.0040fe20
mov dword [ebp - 0x81c], eax
mov ecx, dword [ebp - 0x808]
add ecx, 0xf9c38
call fcn.00475e40
lea ecx, [ebp - 0x1b4]
call fcn.0040fe00
mov byte [ebp - 4], 4
push 0
mov ecx, dword [ebp - 0x14]
call fcn.00452ac0
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x30]
call fcn.00479b1e
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
push ecx
push ecx
mov esi, esp
mov dword [ebp - 0x7e4], esp
push ecx
mov edx, esp
mov dword [ebp - 0x7e8], esp
push 0x4bd914
mov eax, dword [ebp - 0x1a0]
add eax, 0xbc
push eax
push edx
call fcn.0040e470
add esp, 0xc
mov dword [ebp - 0x820], eax
push esi
call fcn.00402300
add esp, 8
mov dword [ebp - 0x824], eax
mov ecx, dword [ebp - 0x824]
mov dword [ebp - 0x828], ecx
call fcn.00407750
add esp, 8
lea ecx, [ebp - 0x30]
call fcn.0040fb60
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0
jle 0x456923
lea ecx, [ebp - 0x434]
call fcn.00479b1e
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1f4]
call fcn.0040fe00
mov byte [ebp - 4], 7
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x448], 0
mov dword [ebp - 0x20c], 0
jmp 0x456293
mov eax, dword [ebp - 0x20c]
add eax, 1
mov dword [ebp - 0x20c], eax
mov ecx, dword [ebp - 0x20c]
cmp ecx, dword [ebp - 0x1c]
jg 0x45630f
mov edx, dword [ebp - 0x20c]
push edx
lea ecx, [ebp - 0x30]
call fcn.0040fc00
push eax
lea ecx, [ebp - 0x1f4]
call fcn.0040fee0
push 0
push 0x4bd920
lea ecx, [ebp - 0x1f4]
call fcn.0040e340
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 0
jl 0x45630a
lea ecx, [ebp - 0x1f4]
call fcn.0040ff70
push eax
mov eax, dword [ebp - 0x44c]
push eax
lea ecx, [ebp - 0x1f4]
call fcn.0040e1a0
lea ecx, [ebp - 0x1f4]
push ecx
lea ecx, [ebp - 0x434]
call fcn.0040fbd0
jmp 0x456284
lea ecx, [ebp - 0x434]
call fcn.0040fb60
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x38], edx
xor ecx, ecx
mov eax, dword [ebp - 0x38]
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004781df
add esp, 4
mov dword [ebp - 0x7ec], eax
mov eax, dword [ebp - 0x7ec]
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x20c], 0
jmp 0x45636f
mov ecx, dword [ebp - 0x20c]
add ecx, 1
mov dword [ebp - 0x20c], ecx
mov edx, dword [ebp - 0x20c]
cmp edx, dword [ebp - 0x38]
jge 0x45638f
mov eax, dword [ebp - 0x20c]
mov ecx, dword [ebp - 0x420]
mov dword [ecx + eax*4], 0
jmp 0x456360
xor ecx, ecx
mov eax, dword [ebp - 0x38]
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004781df
add esp, 4
mov dword [ebp - 0x7f0], eax
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0x208], eax
xor ecx, ecx
mov eax, dword [ebp - 0x38]
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004781df
add esp, 4
mov dword [ebp - 0x7f4], eax
mov eax, dword [ebp - 0x7f4]
mov dword [ebp - 0x43c], eax
mov dword [ebp - 0x20c], 0
jmp 0x456406
mov ecx, dword [ebp - 0x20c]
add ecx, 1
mov dword [ebp - 0x20c], ecx
mov edx, dword [ebp - 0x20c]
cmp edx, dword [ebp - 0x38]
jge 0x456439
mov eax, dword [ebp - 0x20c]
mov ecx, dword [ebp - 0x208]
mov dword [ecx + eax*4], 0
mov edx, dword [ebp - 0x20c]
mov eax, dword [ebp - 0x43c]
mov dword [eax + edx*4], 0
jmp 0x4563f7
lea ecx, [ebp - 0x438]
call fcn.0040fe00
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x444]
call fcn.0040fe00
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x204]
call fcn.0040fc50
mov dword [ebp - 0x440], 0x4bd924
xor ecx, ecx
mov word [ebp - reloc.crypt32.dll_CertOpenStore], cx
push 0x206
push 0
lea edx, [ebp - 0x41a]
push edx
call fcn.0049a6f0
add esp, 0xc
push 0x208
lea eax, [ebp - 0x41c]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x440]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp dword [ebp - 0x34], 0
je 0x4566a6
lea edx, [ebp - 0x1b4]
push edx
mov ecx, dword [ebp - 0x34]
call fcn.004852cd
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax + 0x20]
mov dword [ebp - 0x450], ecx
xor edx, edx
mov word [ebp - reloc.crypt32.dll_CertOpenStore], dx
push 0x206
push 0
lea eax, [ebp - 0x792]
push eax
call fcn.0049a6f0
add esp, 0xc
push 0xff
lea ecx, [ebp - 0x58c]
push ecx
mov edx, dword [ebp - 0x450]
push edx
call dword [sym.imp.USER32.dll_GetClassNameA]
mov dword [ebp - 0x454], eax
push 0x208
lea eax, [ebp - 0x794]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x58c]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [ebp - 0x434]
call fcn.0040fb60
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20c], 0
jmp 0x456555
mov edx, dword [ebp - 0x20c]
add edx, 1
mov dword [ebp - 0x20c], edx
mov eax, dword [ebp - 0x20c]
cmp eax, dword [ebp - 0x1c]
jg 0x456694
push 0
mov ecx, dword [ebp - 0x20c]
push ecx
lea ecx, [ebp - 0x434]
call fcn.0040fc00
mov ecx, eax
call fcn.0040ff40
push eax
lea ecx, [ebp - 0x1b4]
call fcn.0040e340
cmp eax, 0xffffffff
jle 0x45668f
mov edx, dword [ebp - 0x450]
push edx
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x4565e5
mov eax, dword [ebp - 0x20c]
mov ecx, dword [ebp - 0x420]
mov edx, dword [ebp - 0x450]
mov dword [ecx + eax*4], edx
mov eax, dword [ebp - 0x20c]
mov ecx, dword [ebp - 0x208]
mov dword [ecx + eax*4], 0x54c5638
mov edx, dword [ebp - 0x20c]
mov eax, dword [ebp - 0x43c]
mov dword [eax + edx*4], 0x54c5638
jmp 0x45668d
lea ecx, [ebp - 0x204]
call fcn.0040fc50
push eax
mov ecx, dword [ebp - 0x450]
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
lea ecx, [ebp - 0x204]
call fcn.00451de0
mov dword [ebp - 0x79c], eax
lea ecx, [ebp - 0x204]
call fcn.00451e00
mov dword [ebp - 0x798], eax
mov edx, dword [ebp - 0x20c]
mov eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x79c]
cmp ecx, dword [eax + edx*4]
jle 0x45668d
mov edx, dword [ebp - 0x20c]
mov eax, dword [ebp - 0x43c]
mov ecx, dword [ebp - 0x798]
cmp ecx, dword [eax + edx*4]
jle 0x45668d
mov edx, dword [ebp - 0x20c]
mov eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x79c]
mov dword [eax + edx*4], ecx
mov edx, dword [ebp - 0x20c]
mov eax, dword [ebp - 0x43c]
mov ecx, dword [ebp - 0x798]
mov dword [eax + edx*4], ecx
mov edx, dword [ebp - 0x20c]
mov eax, dword [ebp - 0x420]
mov ecx, dword [ebp - 0x450]
mov dword [eax + edx*4], ecx
jmp 0x456694
jmp 0x456546
push 2
mov ecx, dword [ebp - 0x34]
call fcn.00452ac0
mov dword [ebp - 0x34], eax
jmp 0x4564aa
mov dword [ebp - 0x20c], 0
jmp 0x4566c1
mov edx, dword [ebp - 0x20c]
add edx, 1
mov dword [ebp - 0x20c], edx
mov eax, dword [ebp - 0x20c]
cmp eax, dword [ebp - 0x38]
jge 0x456896
mov ecx, dword [ebp - 0x20c]
mov edx, dword [ebp - 0x420]
cmp dword [edx + ecx*4], 0
je 0x456891
mov dword [ebp - 0x7a0], 0
lea eax, [ebp - 0x7cc]
mov dword [ebp - 0x7a0], eax
lea ecx, [ebp - 0x7cc]
push ecx
mov edx, dword [ebp - 0x20c]
mov eax, dword [ebp - 0x420]
mov ecx, dword [eax + edx*4]
push ecx
call dword [sym.imp.USER32.dll_GetWindowPlacement]
mov edx, dword [ebp - 0x7a0]
mov dword [edx + 8], 1
mov eax, dword [ebp - 0x7a0]
push eax
mov ecx, dword [ebp - 0x20c]
mov edx, dword [ebp - 0x420]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.USER32.dll_SetWindowPlacement]
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
mov ecx, dword [ebp - 0x20c]
mov edx, dword [ebp - 0x420]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0x8008
push 1
push 0x203
mov ecx, dword [ebp - 0x20c]
mov edx, dword [ebp - 0x420]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x303
mov ecx, dword [ebp - 0x20c]
mov edx, dword [ebp - 0x420]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push ecx
mov ecx, esp
mov dword [ebp - 0x7f8], esp
lea edx, [ebp - 0x3c]
push edx
call fcn.0040fe20
mov dword [ebp - 0x82c], eax
call fcn.00454280
add esp, 4
push 0
push 0
push 0x302
mov eax, dword [ebp - 0x20c]
mov ecx, dword [ebp - 0x420]
mov edx, dword [ecx + eax*4]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0xd
push 0x100
mov eax, dword [ebp - 0x20c]
mov ecx, dword [ebp - 0x420]
mov edx, dword [ecx + eax*4]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
push 0
push 0xd
push 0x101
mov eax, dword [ebp - 0x20c]
mov ecx, dword [ebp - 0x420]
mov edx, dword [ecx + eax*4]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
xor eax, eax
je 0x456873
mov ecx, 1
test ecx, ecx
je 0x456866
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocStringLen
lea ecx, [ebp - 0x3c]
call fcn.0040ff40
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x7d0], eax
cmp dword [ebp - 0x7d0], 0xffffffff
jne 0x456862
jmp 0x456864
jmp 0x456866
jmp 0x456827
mov edx, dword [ebp - 0x7d0]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp + 8], 2
jg 0x456886
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x456891
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4566b2
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x7fc], eax
mov ecx, dword [ebp - 0x7fc]
push ecx
call fcn.004781d4
add esp, 4
mov edx, dword [ebp - 0x208]
mov dword [ebp - 0x800], edx
mov eax, dword [ebp - 0x800]
push eax
call fcn.004781d4
add esp, 4
mov ecx, dword [ebp - 0x43c]
mov dword [ebp - 0x804], ecx
mov edx, dword [ebp - 0x804]
push edx
call fcn.004781d4
add esp, 4
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x444]
call fcn.0040fec0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x438]
call fcn.0040fec0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1f4]
call fcn.0040fec0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x434]
call fcn.00479fec
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x30]
call fcn.00479fec
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1b4]
call fcn.0040fec0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10]
call fcn.0040fec0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3c]
call fcn.0040fec0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1b0]
call fcn.004789ef
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.0040fec0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x210]
xor ecx, ebp
call fcn.0049a6da
mov esp, ebp
pop ebp
ret 4