Function at 0x487c9c
Capabilities:
Get graphical window text
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
mov ecx, 4
push 0
push 0
dec ecx
jne 0x487ca4
push ecx
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
add ebx, 0xfffffffc
xor edx, edx
push ebp
push 0x488342
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 2
call fcn.0040d578
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 8], eax
push 1
push 1
mov eax, dword [ebp - 8]
mov cl, 1
mov dl, 1
call fcn.004102b0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
call fcn.0040f198
mov edx, eax
mov eax, dword [ebp - 8]
call fcn.0040eb18
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
call fcn.0040f17c
mov edx, eax
mov eax, dword [ebp - 8]
call fcn.0040eb5c
mov eax, dword [ebp - 8]
mov edx, 0xeeeeee
call fcn.0040eb88
push 0
push 0xffffffffffffffff
mov ecx, dword [ebp - 4]
mov edx, dword [0x486c14]
xor eax, eax
call fcn.00488b98
mov edi, eax
mov eax, dword [ebp - 8]
mov dword [eax + 0xee], edi
mov eax, edi
xor ecx, ecx
mov edx, 0xd
call fcn.00488c10
mov eax, dword [ebx]
push eax
push 0x48ee94
mov eax, dword [ebp - 8]
call fcn.0040f034
mov eax, dword [ebx]
push eax
push 0x48a480
mov eax, dword [ebp - 8]
call fcn.00410390
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x10]
push 0x50af4c
mov eax, dword [ebx]
mov ecx, 0x11
mov edx, dword [ebp - 4]
call fcn.0048a1bc
mov esi, eax
push 1
push 1
mov eax, esi
xor ecx, ecx
xor edx, edx
call fcn.004102b0
lea edx, [ebp - 0xc]
mov eax, 0xd
call fcn.0044d254
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.0040e5f0
mov eax, 0x2d0
call fcn.004874a4
mov edx, eax
mov eax, esi
call fcn.0040ea7c
mov eax, 0x160
call fcn.004874b8
mov edx, eax
mov eax, esi
call fcn.0040eac8
mov eax, 0xca
call fcn.004874a4
mov edx, eax
mov eax, esi
call fcn.0040eb18
mov eax, 0x3a
call fcn.004874a4
mov edx, eax
mov eax, esi
call fcn.0040eb5c
mov eax, dword [ebx]
push eax
push 0x489b64
mov eax, esi
call fcn.0040f790
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.0040d578
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x54], esi
mov eax, esi
mov esi, eax
mov eax, esi
mov edx, 0xeeeeee
call fcn.0040eb88
mov eax, 0x23
call fcn.004874a4
mov edx, eax
mov eax, esi
call fcn.0040ea7c
mov eax, 0x1a
call fcn.004874b8
mov edx, eax
mov eax, esi
call fcn.0040eac8
push 0
push 0xffffffffffffffff
mov eax, dword [ebx]
mov ecx, dword [eax + 0x54]
mov edx, dword [0x486c14]
xor eax, eax
call fcn.00488b98
mov edi, eax
mov dword [esi + 0xee], edi
mov eax, edi
xor ecx, ecx
mov edx, 0xe
call fcn.00488c10
mov eax, dword [edi + 0x38]
mov edx, dword [eax + 0x18]
mov eax, esi
call fcn.0040eb18
mov eax, dword [edi + 0x38]
mov edx, dword [eax + 0x1c]
mov eax, esi
call fcn.0040eb5c
mov eax, dword [ebx]
push eax
push 0x48f430
mov eax, esi
call fcn.0040f034
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x10]
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.0040d578
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x40], esi
mov eax, esi
mov esi, eax
mov eax, esi
mov edx, 0xfdfdfd
call fcn.0040eb88
mov eax, 0x19f
call fcn.004874a4
mov edx, eax
mov eax, esi
call fcn.0040ea7c
mov eax, 0x12
call fcn.004874b8
mov edx, eax
mov eax, esi
call fcn.0040eac8
mov eax, 0x1fa
call fcn.004874a4
mov edx, eax
mov eax, esi
call fcn.0040eb18
mov eax, 0x12b
call fcn.004874a4
mov edx, eax
mov eax, esi
call fcn.0040eb5c
lea eax, [ebp - 0x10]
push eax
xor ecx, ecx
mov edx, 0x317
mov eax, 0x488360
call fcn.00487008
mov eax, dword [ebp - 0x10]
push eax
mov eax, esi
call fcn.0040f090
pop edx
call fcn.0040c0cc
mov eax, 0xe
call fcn.004874cc
push eax
mov eax, esi
call fcn.0040f090
mov edx, 4
pop ecx
call fcn.0040c088
mov eax, esi
call fcn.0040f090
mov dl, 5
call fcn.0040c0bc
mov eax, dword [ebx]
push eax
push 0x48ed54
mov eax, esi
mov edx, 7
call fcn.0040e414
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.0040d578
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x44], esi
mov eax, esi
mov esi, eax
mov eax, 0x20
call fcn.004874a4
mov edx, eax
mov eax, esi
call fcn.0040ea7c
mov eax, 0x145
call fcn.004874b8
mov edx, eax
mov eax, esi
call fcn.0040eac8
mov eax, 0x382
call fcn.004874a4
mov edx, eax
mov eax, esi
call fcn.0040eb18
mov eax, 0x73
call fcn.004874a4
mov edx, eax
mov eax, esi
call fcn.0040eb5c
lea eax, [ebp - 0x14]
push eax
xor ecx, ecx
mov edx, 0x324
mov eax, 0x488378
call fcn.00487008
mov eax, dword [ebp - 0x14]
push eax
mov eax, esi
call fcn.0040f090
pop edx
call fcn.0040c0cc
mov eax, 0xe
call fcn.004874cc
push eax
mov eax, esi
call fcn.0040f090
mov edx, 4
pop ecx
call fcn.0040c088
mov eax, esi
call fcn.0040f090
mov dl, 5
call fcn.0040c0bc
mov eax, dword [ebx]
push eax
push 0x48a53c
mov eax, esi
call fcn.00410390
mov eax, dword [ebx]
mov eax, dword [eax + 0x44]
mov dl, 2
call fcn.0040d578
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x4c], esi
mov eax, esi
mov esi, eax
mov eax, 0x120
call fcn.004874a4
mov edx, eax
mov eax, esi
call fcn.0040ea7c
mov eax, 0x10
call fcn.004874b8
mov edx, eax
mov eax, esi
call fcn.0040eac8
mov eax, 0x36
call fcn.004874a4
mov edx, eax
mov eax, esi
call fcn.0040eb18
mov eax, 0x36
call fcn.004874b8
mov edx, eax
mov eax, esi
call fcn.0040eb5c
push 0
push 0xffffffffffffffff
mov eax, dword [ebx]
mov ecx, dword [eax + 0x4c]
mov edx, dword [0x486c14]
xor eax, eax
call fcn.00488b98
mov edi, eax
mov dword [esi + 0xee], edi
mov eax, dword [ebx]
push eax
push 0x48ee94
mov eax, esi
call fcn.0040f034
mov eax, dword [ebx]
mov eax, dword [eax + 0x44]
mov dl, 2
call fcn.0040d578
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x48], esi
mov eax, esi
mov esi, eax
mov eax, dword [ebx]
mov eax, dword [eax + 0x4c]
call fcn.0040ea64
mov edi, eax
mov eax, dword [ebx]
mov eax, dword [eax + 0x4c]
call fcn.0040eafc
add edi, eax
mov eax, 8
call fcn.004874a4
add edi, eax
mov edx, edi
mov eax, esi
call fcn.0040ea7c
mov eax, 0x18
call fcn.004874b8
mov edx, eax
mov eax, esi
call fcn.0040eac8
mov eax, 0x140
call fcn.004874a4
mov edx, eax
mov eax, esi
call fcn.0040eb18
mov eax, dword [esi + 0x30]
call fcn.0040f17c
mov edi, eax
mov eax, esi
call fcn.0040eab0
sub edi, eax
mov eax, 0x10
call fcn.004874b8
mov edx, edi
sub edx, eax
mov eax, esi
call fcn.0040eb5c
mov eax, dword [ebx]
push eax
push 0x48a53c
mov eax, esi
call fcn.00410390
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x10]
mov eax, 0xb
call fcn.004874cc
push eax
mov eax, esi
call fcn.0040f090
mov edx, 4
pop ecx
call fcn.0040c088
push 0
push 0
mov eax, esi
call fcn.0040f198
push eax
mov eax, esi
call fcn.0040f17c
push eax
mov eax, dword [esi + 0x1c]
push eax
push 0x7b
mov eax, dword [0x4bfc38]
push eax
push 0
lea eax, [ebp - 0x18]
push eax
xor ecx, ecx
mov edx, 0x340
mov eax, 0x488390
call fcn.00487008
mov eax, dword [ebp - 0x18]
call fcn.0040712c
mov edx, 0x4883a0
mov ecx, 0x50000000
call fcn.0040b50c
mov edi, eax
mov eax, dword [ebx]
mov dword [eax + 0x58], edi
push 1
mov eax, esi
call fcn.0040f090
call fcn.0040c228
push eax
push 0x30
push edi
call sub.user32.dll_SendMessageW_1
mov eax, 0x120
call fcn.004874a4
push eax
mov eax, 0x63
call fcn.004874b8
push eax
mov eax, 0x262
call fcn.004874a4
push eax
mov eax, 0x10
call fcn.004874b8
push eax
mov eax, dword [ebx]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0x1c]
push eax
push 0x7b
mov eax, dword [0x4bfc38]
push eax
push 0
lea eax, [ebp - 0x1c]
push eax
xor ecx, ecx
mov edx, 0x345
mov eax, 0x4883b0
call fcn.00487008
mov eax, dword [ebp - 0x1c]
call fcn.0040712c
mov edx, 0x4883a0
mov ecx, 0x50000000
call fcn.0040b50c
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x64], esi
push 1
mov eax, dword [ebx]
mov eax, dword [eax + 0x48]
call fcn.0040f090
call fcn.0040c228
push eax
push 0x30
push esi
call sub.user32.dll_SendMessageW_1
mov eax, 0x20
call fcn.004874a4
push eax
mov eax, 0x145
call fcn.004874b8
push eax
mov eax, 0x1f4
call fcn.004874a4
push eax
mov eax, 0x61
call fcn.004874b8
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x1c]
push eax
push 0x7b
mov eax, dword [0x4bfc38]
push eax
push 0
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 0x34d
mov eax, 0x4883cc
call fcn.00487008
mov eax, dword [ebp - 0x20]
call fcn.0040712c
push eax
lea edx, [ebp - 0x24]
mov eax, 2
call fcn.0044d254
mov eax, dword [ebp - 0x24]
call fcn.0040712c
mov edx, eax
mov ecx, 0x50000000
pop eax
call fcn.0040b50c
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x60], esi
push 1
mov eax, dword [ebx]
mov eax, dword [eax + 0x40]
call fcn.0040f090
call fcn.0040c228
push eax
push 0x30
push esi
call sub.user32.dll_SendMessageW_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x488349
lea eax, [ebp - 0x24]
mov edx, 7
call fcn.00407098
ret