Function at 0x470f00
Capabilities:
Get graphical window text
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x492a03
mov eax, dword fs:[0]
push eax
sub esp, 0x360
mov eax, dword [0x4b6798]
xor eax, esp
mov dword [esp + 0x358], eax
push ebx
push esi
push edi
mov eax, dword [0x4b6798]
xor eax, esp
push eax
lea eax, [esp + 0x370]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
xor ebx, ebx
xor ecx, ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x154], 7
mov dword [esp + 0x150], ebx
mov word [esp + 0x140], cx
lea edx, [esp + 0x1c]
push edx
mov dword [esp + 0x37c], ebx
call fcn.004192c0
mov esi, dword [ebp + 0x10]
mov byte [esp + 0x378], 1
cmp esi, ebx
jle 0x470fa5
jmp 0x470f90
lea eax, [esp + 0x2c]
push 0x4a64ec
push eax
call fcn.0041b810
add esp, 8
dec esi
jne 0x470f90
lea ecx, [esp + 0x2c]
push 0x4a64f0
push ecx
call fcn.0041b810
lea edx, [esp + 0x34]
push 0x4a64f4
push edx
call fcn.0041b810
mov esi, eax
add esp, 0x10
cmp esi, ebx
jne 0x470fd0
xor eax, eax
jmp 0x470fd7
mov eax, dword [esi]
mov eax, dword [eax + 4]
add eax, esi
mov ecx, dword [eax + 0x14]
and ecx, 0xfffff9ff
or ecx, 0x800
mov dword [eax + 0x14], ecx
mov edx, dword [esi]
mov eax, dword [edx + 4]
push ebx
lea edx, [esp + 0xc8]
mov ecx, 0x30
push 8
push edx
mov word [eax + esi + 0x40], cx
call fcn.0047314a
mov edx, dword [eax + 0xc]
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add esp, 0xc
push edx
mov edx, dword [eax + 8]
mov eax, dword [eax]
add ecx, esi
push edx
push ecx
call eax
add esp, 0xc
push 0x4a64f0
push ecx
push edi
push esi
call fcn.00471bc0
add esp, 4
push eax
call fcn.0041b810
add esp, 8
push edi
call dword [sym.imp.USER32.dll_GetParent]
lea ecx, [esp + 0x2c]
push 0x4a64f4
push ecx
mov ebx, eax
call fcn.0041b810
mov esi, eax
add esp, 8
test esi, esi
je 0x471063
mov edx, dword [esi]
mov eax, dword [edx + 4]
add eax, esi
mov ecx, dword [eax + 0x14]
and ecx, 0xfffff9ff
or ecx, 0x800
mov dword [eax + 0x14], ecx
mov edx, dword [esi]
mov eax, dword [edx + 4]
push 0
lea edx, [esp + 0xc8]
mov ecx, 0x30
push 8
push edx
mov word [eax + esi + 0x40], cx
call fcn.0047314a
mov edx, dword [eax + 0xc]
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add esp, 0xc
push edx
mov edx, dword [eax + 8]
mov eax, dword [eax]
add ecx, esi
push edx
push ecx
call eax
add esp, 0xc
push 0x4a64f0
push ecx
push ebx
push esi
call fcn.00471bc0
add esp, 4
push eax
call fcn.0041b810
add esp, 8
push 0x104
lea ecx, [esp + 0x160]
push ecx
push edi
call dword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
je 0x4710f5
lea edx, [esp + 0x15c]
push edx
lea eax, [esp + 0x30]
push eax
call fcn.0041b810
add esp, 8
lea ecx, [esp + 0x2c]
push 0x4a64f0
push ecx
call fcn.0041b810
add esp, 8
push 0x104
lea edx, [esp + 0x160]
push edx
push edi
call dword [sym.imp.USER32.dll_GetClassNameW]
test eax, eax
je 0x471134
lea eax, [esp + 0x15c]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.0041b810
add esp, 8
lea edx, [esp + 0x2c]
push 0x4a64f0
push edx
call fcn.0041b810
add esp, 8
lea eax, [esp + 0xdc]
xor esi, esi
push eax
push edi
mov dword [esp + 0xe4], esi
mov dword [esp + 0xe8], esi
mov dword [esp + 0xec], esi
mov dword [esp + 0xf0], esi
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x471214
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx + 4]
mov edx, dword [esp + eax + 0x40]
lea eax, [esp + eax + 0x2c]
and edx, 0xfffff3ff
or edx, 0x200
mov dword [eax + 0x14], edx
mov edx, dword [esp + 0xe0]
mov eax, dword [esp + 0xe8]
mov ebx, dword [esp + 0xdc]
mov ecx, dword [esp + 0xe4]
sub ecx, ebx
sub eax, edx
push eax
push ecx
push 0x4a64f0
push ecx
push ecx
push ecx
push 0x4a64f0
push ecx
push edx
push ecx
push 0x4a64f0
push ecx
push ebx
lea eax, [esp + 0x60]
push eax
call fcn.004719f0
add esp, 4
push eax
call fcn.0041b810
add esp, 0xc
push eax
call fcn.004719f0
add esp, 4
push eax
call fcn.0041b810
add esp, 0xc
push eax
call fcn.00471820
add esp, 4
push eax
call fcn.0041b810
add esp, 0xc
push eax
call fcn.00471820
jmp 0x471226
lea ecx, [esp + 0x2c]
push 0x4a64fc
push ecx
call fcn.0041b810
add esp, 8
lea edx, [esp + 0x2c]
push 0x4a64f0
push edx
call fcn.0041b810
add esp, 8
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ebx, eax
mov dword [esp + 0x14], ebx
cmp ebx, esi
je 0x4712bd
lea eax, [esp + 0x2c]
push 0x4a64f4
push eax
call fcn.0041b810
mov esi, eax
add esp, 8
test esi, esi
je 0x47126a
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
add eax, esi
mov edx, dword [eax + 0x14]
and edx, 0xfffff9ff
or edx, 0x800
mov dword [eax + 0x14], edx
mov eax, dword [esi]
mov eax, dword [eax + 4]
push 0
lea edx, [esp + 0xc8]
mov ecx, 0x30
push 8
push edx
mov word [eax + esi + 0x40], cx
call fcn.0047314a
mov edx, dword [eax + 0xc]
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add esp, 0xc
push edx
mov edx, dword [eax + 8]
mov eax, dword [eax]
add ecx, esi
push edx
push ecx
call eax
add esp, 0xc
push ebx
push esi
call fcn.004190f0
lea ecx, [esp + 0x2c]
push 0x4a64f0
push ecx
call fcn.0041b810
add esp, 8
push 0xffffffffffffffec
push edi
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ebx, eax
test ebx, ebx
je 0x471350
lea edx, [esp + 0x2c]
push 0x4a64f4
push edx
call fcn.0041b810
mov esi, eax
add esp, 8
test esi, esi
je 0x4712fd
mov eax, dword [esi]
mov eax, dword [eax + 4]
add eax, esi
mov ecx, dword [eax + 0x14]
and ecx, 0xfffff9ff
or ecx, 0x800
mov dword [eax + 0x14], ecx
mov edx, dword [esi]
mov eax, dword [edx + 4]
push 0
lea edx, [esp + 0xc8]
mov ecx, 0x30
push 8
push edx
mov word [eax + esi + 0x40], cx
call fcn.0047314a
mov edx, dword [eax + 0xc]
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add esp, 0xc
push edx
mov edx, dword [eax + 8]
mov eax, dword [eax]
add ecx, esi
push edx
push ecx
call eax
add esp, 0xc
push ebx
push esi
call fcn.004190f0
lea ecx, [esp + 0x2c]
push 0x4a64f0
push ecx
call fcn.0041b810
mov eax, dword [esp + 0x1c]
add esp, 8
lea esi, [esp + 0x108]
call fcn.00470ea0
mov byte [esp + 0x378], 2
cmp dword [esp + 0x118], 0
je 0x471394
mov edx, esi
push edx
lea eax, [esp + 0x30]
push eax
call fcn.00467d80
add esp, 8
lea ecx, [esp + 0x2c]
push 0x4a64f0
push ecx
call fcn.0041b810
add esp, 8
mov eax, ebx
lea esi, [esp + 0x124]
call fcn.00470ed0
mov byte [esp + 0x378], 3
cmp dword [esp + 0x134], 0
je 0x4713d6
mov edx, esi
push edx
lea eax, [esp + 0x30]
push eax
call fcn.00467d80
add esp, 8
lea ecx, [esp + 0x2c]
push 0x4a1950
push ecx
call fcn.0041b810
add esp, 8
lea esi, [esp + 0xec]
lea eax, [esp + 0x1c]
call fcn.004193f0
mov byte [esp + 0x378], 4
cmp dword [esp + 0x100], 8
mov eax, dword [esp + 0xec]
mov dword [esp + 0x18], 0
jae 0x47141b
mov eax, esi
mov ecx, dword [esp + 0xfc]
mov ebx, dword [esp + 0x10]
push 0
lea edx, [esp + 0x1c]
push edx
lea edx, [ecx + ecx]
push edx
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 5
push edi
mov edi, dword [sym.imp.USER32.dll_GetWindow]
call edi
mov esi, eax
test esi, esi
je 0x47146c
mov eax, dword [ebp + 0x10]
inc eax
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x10]
push ecx
push ebx
push esi
call fcn.00470f00
add esp, 0xc
push 2
push esi
call edi
mov esi, eax
test esi, esi
jne 0x471452
mov edi, 8
cmp dword [esp + 0x100], edi
jb 0x47148a
mov edx, dword [esp + 0xec]
push edx
call fcn.004736d0
add esp, 4
xor eax, eax
mov esi, 7
mov dword [esp + 0x100], esi
mov dword [esp + 0xfc], 0
mov word [esp + 0xec], ax
cmp dword [esp + 0x138], edi
jb 0x4714c4
mov ecx, dword [esp + 0x124]
push ecx
call fcn.004736d0
add esp, 4
xor edx, edx
mov dword [esp + 0x138], esi
mov dword [esp + 0x134], 0
mov word [esp + 0x124], dx
cmp dword [esp + 0x11c], edi
jb 0x4714f9
mov eax, dword [esp + 0x108]
push eax
call fcn.004736d0
add esp, 4
mov eax, dword [esp + 0x1c]
xor ecx, ecx
mov dword [esp + 0x11c], esi
mov dword [esp + 0x118], 0
mov word [esp + 0x108], cx
mov ecx, dword [eax + 4]
lea edx, [esp + 0x7c]
mov dword [esp + 0x14], edx
mov dword [esp + ecx + 0x1c], vtable.std::basic_stringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
test byte [esp + 0x74], 1
lea edx, [esp + 0x34]
mov dword [esp + 0xd8], edx
mov dword [esp + 0x34], vtable.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
je 0x471555
mov eax, dword [esp + 0x44]
mov eax, dword [eax]
push eax
call fcn.004736d0
add esp, 4
mov ecx, dword [esp + 0x44]
mov dword [ecx], 0
mov edx, dword [esp + 0x54]
mov dword [edx], 0
mov eax, dword [esp + 0x64]
mov dword [eax], 0
mov ecx, dword [esp + 0x48]
mov dword [ecx], 0
mov edx, dword [esp + 0x58]
mov dword [edx], 0
mov eax, dword [esp + 0x68]
mov dword [eax], 0
and dword [esp + 0x74], 0xfffffffe
mov dword [esp + 0x70], 0
mov dword [esp + 0x34], vtable.std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__.0
mov byte [esp + 0x378], 6
mov eax, dword [esp + 0x6c]
mov ebx, eax
test eax, eax
je 0x471602
mov edi, dword [eax]
test edi, edi
je 0x4715f9
push 0
lea ecx, [esp + 0x14]
call fcn.004722ad
mov eax, dword [edi + 4]
test eax, eax
je 0x4715d9
cmp eax, 0xffffffff
jae 0x4715d9
dec eax
mov dword [edi + 4], eax
mov esi, dword [edi + 4]
neg esi
sbb esi, esi
lea ecx, [esp + 0x10]
not esi
call fcn.004722d5
and esi, edi
je 0x4715f9
mov edx, dword [esi]
mov eax, dword [edx]
push 1
mov ecx, esi
call eax
push ebx
call fcn.004736d0
add esp, 4
lea ecx, [esp + 0x38]
mov byte [esp + 0x378], 5
call fcn.00472ff4
mov byte [esp + 0x378], 0
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx + 4]
mov dword [esp + edx + 0x1c], vtable.std::basic_iostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax + 4]
mov dword [esp + ecx + 0x2c], vtable.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 4]
lea ecx, [esp + 0x7c]
mov dword [esp + eax + 0x1c], vtable.std::basic_istream_wchar_t__struct_std::char_traits_wchar_t__.0
push ecx
mov dword [esp + 0x80], vtable.std::ios_base.0
call fcn.00472ea4
add esp, 4
mov ecx, dword [esp + 0x370]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x358]
xor ecx, esp
call fcn.004736db
mov esp, ebp
pop ebp
ret