Function at 0x497cd4
Capabilities:
Get graphical window text
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
add ebx, 0xfffffffc
xor edx, edx
push ebp
push 0x498326
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 2
call fcn.00464dcc
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 8], eax
push 1
push 1
mov eax, dword [ebp - 8]
mov cl, 1
mov dl, 1
call fcn.00467b04
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
call fcn.004669ec
mov edx, eax
mov eax, dword [ebp - 8]
call fcn.0046636c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
call fcn.004669d0
mov edx, eax
mov eax, dword [ebp - 8]
call fcn.004663b0
mov eax, dword [ebp - 8]
mov edx, 0xeeeeee
call fcn.004663dc
push 0
push 0xffffffffffffffff
mov ecx, dword [ebp - 4]
mov edx, dword [0x497018]
xor eax, eax
call fcn.00498aac
mov edi, eax
mov eax, dword [ebp - 8]
mov dword [eax + 0xee], edi
lea edx, [ebp - 0xc]
mov eax, 0x498344
call fcn.004972d8
mov edx, dword [ebp - 0xc]
mov eax, edi
xor ecx, ecx
call fcn.00498b24
mov eax, dword [ebx]
push eax
push 0x49cad8
mov eax, dword [ebp - 8]
call fcn.00466888
mov eax, dword [ebx]
push eax
push 0x49a364
mov eax, dword [ebp - 8]
call fcn.00467be4
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x10]
lea edx, [ebp - 0x10]
mov eax, 0x498384
call fcn.004972d8
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebx]
mov ecx, 0x50af4c
mov edx, dword [ebp - 4]
call fcn.00499f90
mov esi, eax
push 1
push 1
mov eax, esi
xor ecx, ecx
xor edx, edx
call fcn.00467b04
lea edx, [ebp - 0x14]
mov eax, 0xd
call fcn.00448d28
mov edx, dword [ebp - 0x14]
mov eax, esi
call fcn.00465e44
mov eax, 0x2d0
call fcn.00497250
mov edx, eax
mov eax, esi
call fcn.004662d0
mov eax, 0x160
call fcn.00497264
mov edx, eax
mov eax, esi
call fcn.0046631c
mov eax, 0xca
call fcn.00497250
mov edx, eax
mov eax, esi
call fcn.0046636c
mov eax, 0x3a
call fcn.00497250
mov edx, eax
mov eax, esi
call fcn.004663b0
mov eax, dword [ebx]
push eax
push 0x4999e8
mov eax, esi
call fcn.00466fe4
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.00464dcc
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x54], esi
mov eax, esi
mov esi, eax
mov eax, esi
mov edx, 0xeeeeee
call fcn.004663dc
mov eax, 0x23
call fcn.00497250
mov edx, eax
mov eax, esi
call fcn.004662d0
mov eax, 0x1a
call fcn.00497264
mov edx, eax
mov eax, esi
call fcn.0046631c
push 0
push 0xffffffffffffffff
mov eax, dword [ebx]
mov ecx, dword [eax + 0x54]
mov edx, dword [0x497018]
xor eax, eax
call fcn.00498aac
mov edi, eax
mov dword [esi + 0xee], edi
lea edx, [ebp - 0x18]
mov eax, 0x4983bc
call fcn.004972d8
mov edx, dword [ebp - 0x18]
mov eax, edi
xor ecx, ecx
call fcn.00498b24
mov eax, dword [edi + 0x38]
mov edx, dword [eax + 0x18]
mov eax, esi
call fcn.0046636c
mov eax, dword [edi + 0x38]
mov edx, dword [eax + 0x1c]
mov eax, esi
call fcn.004663b0
mov eax, dword [ebx]
push eax
push 0x49d200
mov eax, esi
call fcn.00466888
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x10]
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.00464dcc
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x40], esi
mov eax, esi
mov esi, eax
mov eax, esi
mov edx, 0xfdfdfd
call fcn.004663dc
mov eax, 0x19f
call fcn.00497250
mov edx, eax
mov eax, esi
call fcn.004662d0
mov eax, 0x12
call fcn.00497264
mov edx, eax
mov eax, esi
call fcn.0046631c
mov eax, 0x1fa
call fcn.00497250
mov edx, eax
mov eax, esi
call fcn.0046636c
mov eax, 0x12b
call fcn.00497250
mov edx, eax
mov eax, esi
call fcn.004663b0
mov eax, esi
call fcn.004668e4
mov edx, 0x4983f4
call fcn.00463824
mov eax, 0xe
call fcn.004972c0
push eax
mov eax, esi
call fcn.004668e4
mov edx, 4
pop ecx
call fcn.004637e0
mov eax, esi
call fcn.004668e4
mov dl, 5
call fcn.00463814
mov eax, dword [ebx]
push eax
push 0x49c998
mov eax, esi
mov edx, 7
call fcn.00465c68
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.00464dcc
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x44], esi
mov eax, esi
mov esi, eax
mov eax, 0x20
call fcn.00497250
mov edx, eax
mov eax, esi
call fcn.004662d0
mov eax, 0x145
call fcn.00497264
mov edx, eax
mov eax, esi
call fcn.0046631c
mov eax, 0x382
call fcn.00497250
mov edx, eax
mov eax, esi
call fcn.0046636c
mov eax, 0x73
call fcn.00497250
mov edx, eax
mov eax, esi
call fcn.004663b0
mov eax, esi
call fcn.004668e4
push eax
mov edx, 0x4983f4
pop eax
call fcn.00463824
mov eax, 0xe
call fcn.004972c0
push eax
mov eax, esi
call fcn.004668e4
mov edx, 4
pop ecx
call fcn.004637e0
mov eax, esi
call fcn.004668e4
mov dl, 5
call fcn.00463814
mov eax, dword [ebx]
push eax
push 0x49a420
mov eax, esi
call fcn.00467be4
mov eax, dword [ebx]
mov eax, dword [eax + 0x44]
mov dl, 2
call fcn.00464dcc
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x4c], esi
mov eax, esi
mov esi, eax
mov eax, 0x120
call fcn.00497250
mov edx, eax
mov eax, esi
call fcn.004662d0
mov eax, 0x10
call fcn.00497264
mov edx, eax
mov eax, esi
call fcn.0046631c
mov eax, 0x36
call fcn.00497250
mov edx, eax
mov eax, esi
call fcn.0046636c
mov eax, 0x36
call fcn.00497264
mov edx, eax
mov eax, esi
call fcn.004663b0
push 0
push 0xffffffffffffffff
mov eax, dword [ebx]
mov ecx, dword [eax + 0x4c]
mov edx, dword [0x497018]
xor eax, eax
call fcn.00498aac
mov edi, eax
mov dword [esi + 0xee], edi
mov eax, dword [ebx]
push eax
push 0x49cad8
mov eax, esi
call fcn.00466888
mov eax, dword [ebx]
mov eax, dword [eax + 0x44]
mov dl, 2
call fcn.00464dcc
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x48], esi
mov eax, esi
mov esi, eax
mov eax, dword [ebx]
mov eax, dword [eax + 0x4c]
call fcn.004662b8
mov edi, eax
mov eax, dword [ebx]
mov eax, dword [eax + 0x4c]
call fcn.00466350
add edi, eax
mov eax, 8
call fcn.00497250
add edi, eax
mov edx, edi
mov eax, esi
call fcn.004662d0
mov eax, 0x18
call fcn.00497264
mov edx, eax
mov eax, esi
call fcn.0046631c
mov eax, 0x140
call fcn.00497250
mov edx, eax
mov eax, esi
call fcn.0046636c
mov eax, dword [esi + 0x30]
call fcn.004669d0
mov edi, eax
mov eax, esi
call fcn.00466304
sub edi, eax
mov eax, 0x10
call fcn.00497264
mov edx, edi
sub edx, eax
mov eax, esi
call fcn.004663b0
mov eax, dword [ebx]
push eax
push 0x49a420
mov eax, esi
call fcn.00467be4
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x10]
mov eax, 0xb
call fcn.004972c0
push eax
mov eax, esi
call fcn.004668e4
mov edx, 4
pop ecx
call fcn.004637e0
push 0
push 0
mov eax, esi
call fcn.004669ec
push eax
mov eax, esi
call fcn.004669d0
push eax
mov eax, dword [esi + 0x1c]
push eax
push 0x7b
mov eax, dword [0x4b0c38]
push eax
push 0
mov edx, 0x498400
mov eax, 0x498404
mov ecx, 0x50000000
call fcn.0040b6c4
mov edi, eax
mov eax, dword [ebx]
mov dword [eax + 0x58], edi
push 1
mov eax, esi
call fcn.004668e4
call fcn.00463980
push eax
push 0x30
push edi
call sub.user32.dll_SendMessageW_1
mov eax, 0x120
call fcn.00497250
push eax
mov eax, 0x63
call fcn.00497264
push eax
mov eax, 0x262
call fcn.00497250
push eax
mov eax, 0x10
call fcn.00497264
push eax
mov eax, dword [ebx]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0x1c]
push eax
push 0x7b
mov eax, dword [0x4b0c38]
push eax
push 0
mov edx, 0x498400
mov eax, 0x498404
mov ecx, 0x50000000
call fcn.0040b6c4
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x64], esi
push 1
mov eax, dword [ebx]
mov eax, dword [eax + 0x48]
call fcn.004668e4
call fcn.00463980
push eax
push 0x30
push esi
call sub.user32.dll_SendMessageW_1
mov eax, 0x20
call fcn.00497250
push eax
mov eax, 0x145
call fcn.00497264
push eax
mov eax, 0x1f4
call fcn.00497250
push eax
mov eax, 0x61
call fcn.00497264
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x1c]
push eax
push 0x7b
mov eax, dword [0x4b0c38]
push eax
push 0
lea edx, [ebp - 0x1c]
mov eax, 2
call fcn.00448d28
mov eax, dword [ebp - 0x1c]
call fcn.004071b0
mov edx, eax
mov eax, 0x498404
mov ecx, 0x50000000
call fcn.0040b6c4
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x60], esi
push 1
mov eax, dword [ebx]
mov eax, dword [eax + 0x40]
call fcn.004668e4
call fcn.00463980
push eax
push 0x30
push esi
call sub.user32.dll_SendMessageW_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49832d
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.0040711c
ret