Function at 0x46844c
Capabilities:
Get graphical window text

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xfffffed0
mov word [esp + 4], cx
mov dword [esp], edx
mov ebp, eax
mov eax, ebp
call fcn.00464bb4
test al, al
je 0x4687b1
mov edx, dword [0x48d370]
lea eax, [esp + 0x29]
call fcn.00405c48
push 0xff
mov eax, dword [0x48d370]
push eax
mov eax, dword [esp + 8]
push eax
call sub.user32.dll_GetWindowTextA
cmp word [esp + 4], 0x3e9
jne 0x4684c9
mov eax, dword [0x48d370]
mov dl, 0x2e
call fcn.00405e00
mov dword [esp + 0x18], eax
cmp dword [esp + 0x18], 0
je 0x4684c9
mov eax, dword [esp + 0x18]
mov byte [eax], 0
mov edx, dword [0x48d4fc]
mov eax, dword [esp + 0x18]
call fcn.00405c48
call fcn.0040f494
mov al, 1
call fcn.0042aef4
test al, al
jne 0x4684ec
lea edx, [esp + 0x29]
mov eax, dword [0x48d370]
call fcn.00405c48
jmp 0x4687b1
mov eax, dword [0x48d370]
call fcn.00412584
test al, al
je 0x46851d
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [0x48d370]
push eax
call sub.kernel32.dll_lstrcmpiA
test eax, eax
je 0x4684c9
mov eax, dword [0x48d370]
xor edx, edx
call fcn.00411180
test al, al
je 0x4684c9
mov eax, 0xa
call fcn.0040f448
push 0
mov eax, dword [0x48d370]
push eax
call sub.kernel32.dll__lcreat
mov dword [esp + 0x14], eax
cmp dword [esp + 0x14], 0xffffffff
jne 0x468553
mov edx, dword [0x48d370]
mov ax, 3
call fcn.0040de10
jmp 0x4687b1
push 0x7f02
push 0
call sub.user32.dll_LoadCursorA
push eax
call sub.user32.dll_SetCursor
push 4
push 0x1000
mov eax, dword [ebp + 0x4bc]
push eax
push 0
call sub.kernel32.dll_VirtualAlloc_1
mov esi, eax
push 0
push 0
push 0x18b
mov eax, dword [esp + 0xc]
push eax
call sub.user32.dll_SendMessageA
mov dword [esp + 0x10], eax
mov edi, dword [esp + 0x10]
test edi, edi
jbe 0x46876c
mov dword [esp + 0xc], 1
mov eax, dword [0x48da44]
push eax
mov eax, dword [esp + 0x10]
dec eax
push eax
push 0x189
mov eax, dword [esp + 0xc]
push eax
call sub.user32.dll_SendMessageA
cmp word [esp + 4], 0x3e9
jne 0x4685f3
mov eax, dword [0x48da44]
call fcn.0040cd5c
mov edx, dword [0x48da44]
mov eax, esi
call fcn.00405c48
mov eax, dword [0x48da44]
call fcn.00405bdc
mov ebx, eax
jmp 0x468740
mov byte [esp + 0x28], 0
mov eax, dword [0x48da44]
cmp byte [eax], 0x28
je 0x468693
mov eax, dword [0x48da44]
mov dl, 0x20
call fcn.00405cf8
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
inc eax
mov dl, 0x20
call fcn.00405cf8
mov dword [esp + 0x18], eax
cmp dword [esp + 0x18], 0
je 0x46865c
mov ebx, dword [esp + 0x18]
add ebx, 2
mov eax, ebx
call fcn.00405bdc
mov ecx, eax
dec ecx
mov edx, ebx
mov eax, dword [0x48d7ec]
call fcn.00405c70
xor eax, eax
call fcn.0040bcc0
mov ebx, eax
mov eax, dword [esp + 0x18]
mov byte [eax], 0
jmp 0x468662
mov ebx, dword [ebp + 0x4bc]
mov eax, dword [0x48da44]
mov dl, 0x20
call fcn.00405cf8
mov edx, eax
inc edx
mov eax, dword [0x48d7ec]
call fcn.00405c48
xor eax, eax
call fcn.0040bcc0
lea edx, [ebp + 0x4a4]
call fcn.0041ea80
mov dword [esp + 8], eax
jmp 0x4686e5
mov eax, dword [0x48d6bc]
mov eax, dword [eax]
push eax
mov eax, dword [0x48da44]
push eax
call sub.kernel32.dll_lstrcmpA
test eax, eax
jne 0x4686b1
mov byte [esp + 0x28], 1
jmp 0x4686e5
mov eax, dword [0x48da44]
mov dl, 0x20
call fcn.00405e00
mov edx, eax
inc edx
mov eax, dword [0x48d7ec]
call fcn.00405c48
call fcn.0040bd18
mov dword [esp + 8], eax
movsx eax, byte [ebp + 0x55d]
mov edx, dword [0x48d9a0]
movzx ebx, word [edx + eax*2 + 0x4c]
cmp byte [esp + 0x28], 0
jne 0x468731
mov eax, dword [esp + 8]
call fcn.0040fd30
movsx eax, byte [ebp + 0x55d]
mov edx, dword [0x48d9a0]
movzx eax, word [edx + eax*2 + 0x4c]
mov dword [esp + 0x12c], eax
fild dword [esp + 0x12c]
fmulp st(1)
fistp qword [esp + 0x20]
wait
push ebx
lea edx, [esp + 0x24]
lea eax, [ebp + 0xc]
mov ecx, esi
call fcn.004254a8
cmp ebx, eax
jg 0x46876c
jmp 0x468740
mov ebx, dword [ebp + 0x4bc]
mov edx, ebx
mov eax, esi
call fcn.00405a9c
push ebx
push esi
mov eax, dword [esp + 0x1c]
push eax
call sub.kernel32.dll__hwrite
cmp ebx, eax
jle 0x468761
mov edx, dword [0x48d370]
mov ax, 5
call fcn.0040de10
jmp 0x46876c
inc dword [esp + 0xc]
dec edi
jne 0x4685a7
mov eax, dword [esp + 0x14]
push eax
call sub.kernel32.dll_CloseHandle_1
push 0x4000
push 0xc800
push esi
call sub.kernel32.dll_VirtualFree_1
push 0x7f00
push 0
call sub.user32.dll_LoadCursorA
push eax
call sub.user32.dll_SetCursor
xor ecx, ecx
xor edx, edx
xor eax, eax
call fcn.004616f8
lea edx, [esp + 0x29]
mov eax, dword [0x48d370]
call fcn.00405c48
add esp, 0x130
pop ebp
pop edi
pop esi
pop ebx
ret