Function at 0x4b7830
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f9063
mov eax, dword fs:[0]
push eax
sub esp, 0x128
mov eax, dword [0x53ba20]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x11c], edi
mov esi, dword [0x536350]
mov ecx, dword [0x536358]
mov edx, dword [0x53634c]
sub ecx, esi
mov eax, dword [0x536354]
push 0
push dword [0x570404]
sub eax, edx
push 0x15ec
push dword [edi + 4]
push ecx
push eax
push esi
push edx
push 0x5600100d
push 0
push 0x4fbf3c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x4b8f00
mov dword [edi + 0x88], eax
push 0xfffffffffffffffc
mov dword [edi + 0x2c], eax
push dword [edi + 0x88]
call dword [sym.imp.USER32.dll_SetWindowLongW]
movzx ecx, word [0x550f68]
push eax
push ecx
push dword [edi + 0x88]
call dword [sym.imp.USER32.dll_SetPropW]
push 0x10420
push 0
push 0x1036
push dword [edi + 0x88]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
call edi
mov dword [ebp - 0x24], 0xc1
mov dword [ebp - 0x20], 0xc0
mov dword [ebp - 0x1c], 0xc3
mov dword [ebp - 0x18], 0xc2
mov dword [ebp - 0x14], 0xb4
push 0x60
push dword [0x5408ec]
mov dword [ebp - 4], 0
push 0x10
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x60
push dword [0x5408ec]
mov esi, eax
push 0x10
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 0
push 5
push 0x20
push esi
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov esi, eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x134], esi
mov dword [ebp - 0x114], eax
nop
push 0x64
push 0x60
push dword [0x5408ec]
push 0x10
call dword [sym.imp.KERNEL32.dll_MulDiv]
push eax
mov eax, dword [ebp - 0x114]
push dword [eax]
call fcn.0043b0e0
add esp, 0xc
push eax
push 0xffffffffffffffff
push esi
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov eax, dword [ebp - 0x114]
lea ecx, [ebp - 0x10]
add eax, 4
mov dword [ebp - 0x114], eax
cmp eax, ecx
jne 0x4b7960
push esi
mov esi, dword [ebp - 0x11c]
push 1
push 0x1003
push dword [esi + 0x88]
call edi
push dword [esi + 0x88]
lea ecx, [esi + 0x38]
call fcn.004b6d40
mov esi, dword [sym.imp.KERNEL32.dll_MulDiv]
push 1
push 0xb
push 0x60
push dword [0x5408ec]
mov dword [ebp - 0x114], eax
push 0x5a
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 0
push 0x516638
call fcn.004b3cf0
push 1
push 0x12
push 0x60
push dword [0x5408ec]
push 0x5a
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 0
push 0x516644
call fcn.004b3cf0
push 1
push 0
push 0x60
push dword [0x5408ec]
push 0x3c
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x51665c
call fcn.004b3cf0
push 1
push 9
push 0x60
push dword [0x5408ec]
push 0x46
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x516664
call fcn.004b3cf0
push 1
push 8
push 0x60
push dword [0x5408ec]
push 0x46
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x516678
call fcn.004b3cf0
push 1
push 0x10
push 0x60
push dword [0x5408ec]
push 0x46
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x51606c
call fcn.004b3cf0
push 1
push 0xf
push 0x60
push dword [0x5408ec]
push 0x46
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x516690
call fcn.004b3cf0
push 1
push 7
push 0x60
push dword [0x5408ec]
push 0x5a
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 0
push 0x5166a4
call fcn.004b3cf0
push 1
push 3
push 0x60
push dword [0x5408ec]
push 0x8c
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 0
push 0x5166bc
call fcn.004b3cf0
push 1
push 1
push 0x60
push dword [0x5408ec]
push 0x3c
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x5166d8
call fcn.004b3cf0
push 1
push 2
push 0x60
push dword [0x5408ec]
push 0x3c
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x5166ec
call fcn.004b3cf0
push 1
push 0x11
push 0x60
push dword [0x5408ec]
push 0x46
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 0
push 0x514abc
call fcn.004b3cf0
push 1
push 0xa
push 0x60
push dword [0x5408ec]
push 0x50
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x5166fc
call fcn.004b3cf0
cmp dword [0x5509ec], 4
jl 0x4b7bc9
push 1
push 0xe
push 0x60
push dword [0x5408ec]
push 0x32
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x516720
call fcn.004b3cf0
push 1
push 4
push 0x60
push dword [0x5408ec]
push 0x32
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x51673c
call fcn.004b3cf0
push 1
push 0xd
push 0x60
push dword [0x5408ec]
push 0x50
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x516750
call fcn.004b3cf0
push 1
push 0xc
push 0x60
push dword [0x5408ec]
push 0x5a
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x51676c
call fcn.004b3cf0
push 1
push 5
push 0x60
push dword [0x5408ec]
push 0x3c
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x51677c
call fcn.004b3cf0
push 1
push 6
push 0x60
push dword [0x5408ec]
push 0x3c
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x51678c
call fcn.004b3cf0
mov ecx, dword [ebp - 0x114]
call fcn.0043ae30
mov esi, dword [ebp - 0x11c]
mov ecx, dword [0x536358]
sub ecx, dword [0x536350]
mov edx, dword [0x53634c]
mov eax, dword [0x536354]
push 0
push dword [0x570404]
sub eax, edx
push 0xe800
push dword [esi + 4]
mov esi, dword [0x536350]
push ecx
push eax
push esi
push edx
push 0x5600194c
push 0
push 0x503edc
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov esi, eax
push 0
mov dword [ebp - 0x78], esi
push 0
push 0x423
push esi
call edi
mov edi, eax
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, eax
or ecx, 1
cmp eax, ecx
je 0x4b7cff
push ecx
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 0x18
push 0
push 0x454
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x60
push dword [0x5408ec]
mov byte [ebp - 4], 1
push 0x10
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 4
push 6
push 0x21
push eax
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov edi, eax
push edi
push 0
push 0x430
push esi
mov dword [ebp - 0x12c], edi
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x551078
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov ecx, dword [ebp - 0x11c]
mov dword [ecx + 0xdc], eax
test eax, eax
je 0x4b7d74
push 1
push eax
push 0x30
push dword [ecx + 0x88]
call dword [sym.imp.USER32.dll_SendMessageW]
xorps xmm0, xmm0
mov dword [ebp - 0x74], 0x9f43
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x70], 0x155
mov word [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0x51679c
movq qword [ebp - 0x64], xmm0
mov word [ebp - 0x5c], 0x400
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0x9f44
mov dword [ebp - 0x50], 0x9a
mov word [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0x516500
movq qword [ebp - 0x44], xmm0
mov word [ebp - 0x3c], 0x400
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0x9f45
mov dword [ebp - 0x30], 0xbe
mov word [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x50c44c
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x118], 5
nop
cmp dword [ecx - 0xc], 0
jne 0x4b7e33
mov dword [ebp - 0x90], 0x100
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x88], 0
jmp 0x4b7ecb
mov eax, dword [ecx - 8]
mov dword [ebp - 0x124], 0xffffffff
mov dword [ebp - 0x120], eax
test eax, eax
je 0x4b7e81
push 0x60
push dword [0x5408ec]
push 0x10
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x64
push eax
push dword [ebp - 0x120]
call fcn.0043b0e0
add esp, 0xc
push eax
push 0xffffffffffffffff
push edi
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x124], eax
mov dl, byte [ecx - 3]
mov ecx, dword [ecx]
mov esi, dword [ebp - 0x114]
neg ecx
mov byte [ebp - 0x90], dl
sbb cl, cl
and cl, 0x40
or cl, byte [esi - 4]
xor eax, eax
mov byte [ebp - 0x8f], cl
mov ecx, dword [esi - 0xc]
mov word [ebp - 0x8e], ax
mov eax, dword [esi]
mov esi, dword [ebp - 0x78]
mov dword [ebp - 0x94], ecx
mov ecx, dword [ebp - 0x124]
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x98]
mov dword [ebp - 0x8c], 0
push eax
push 0xffffffffffffffff
push 0x443
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x114]
add ecx, 0x10
sub dword [ebp - 0x118], 1
mov dword [ebp - 0x114], ecx
jne 0x4b7e00
mov eax, dword [ebp - 0x11c]
push 0
push dword [0x570404]
push 0xe800
push dword [eax + 4]
push 0x64
push 0x64
push 0
push 0
push 0x56002640
push 0
push 0x5043a0
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x114], eax
test eax, eax
je 0x4b7f76
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x80], 0xc
push ecx
push 0
push 0x404
xorps xmm0, xmm0
push eax
movq qword [ebp - 0x7c], xmm0
call edi
test eax, eax
jne 0x4b7f80
mov ecx, dword [ebp - 0x114]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x114]
push 0
push 0
push 0x418
push esi
mov dword [eax + 0x24], ecx
call edi
mov dword [ebp - 0x118], eax
call fcn.00465780
push 0x60
mov dword [ebp - 0xfc], eax
lea eax, [ebp - 0xf8]
push 0
push eax
call fcn.004c52c0
add esp, 0xc
mov dword [ebp - 0xf8], 0x371
cmp dword [ebp - 0x118], 0
mov ecx, 0x204
mov eax, 4
mov dword [ebp - 0xe8], 0
cmovg eax, ecx
mov dword [ebp - 0xdc], esi
push 0
push 0
push 0x40c
push dword [ebp - 0x114]
mov dword [ebp - 0xf4], eax
call edi
add eax, 0xeb00
xorps xmm0, xmm0
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x118]
movups xmmword [ebp - 0x84], xmm0
test eax, eax
jle 0x4b806b
lea ecx, [ebp - 0x84]
dec eax
push ecx
push eax
push 0x41d
push esi
call edi
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x80]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0x84]
push eax
push 0
push 0x41d
push esi
call edi
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0xd0]
mov dword [ebp - 0xd8], eax
jmp 0x4b809e
lea eax, [ebp - 0x84]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [ebp - 0x7c]
sub ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x80]
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0xfc]
mov dword [ebp - 0xb8], ecx
push eax
push 0xffffffffffffffff
push 0x40a
push dword [ebp - 0x114]
call edi
test eax, eax
je 0x4b80d8
push 0
push 0
push 0x455
push esi
call edi
or eax, 0x10
push eax
push 0
push 0x454
push esi
call edi
mov ecx, dword [ebp - 0x11c]
push esi
lea ecx, [ecx + 0x54]
call fcn.004b8fb0
mov eax, dword [ebp - 0x11c]
push 0
push 0
push 0x40c
mov esi, dword [eax + 0x24]
push esi
call edi
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x114], 0
test eax, eax
jle 0x4b8257
mov dword [ebp - 0x78], 0x64
call fcn.004606f0
test al, al
je 0x4b81a7
xorps xmm0, xmm0
mov dword [ebp - 0x110], 0x14
push 0x50d464
movlpd qword [ebp - 0x10c], xmm0
movlpd qword [ebp - 0x104], xmm0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x118], eax
test eax, eax
je 0x4b81a7
push 0x50d454
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x4b817d
push dword [ebp - 0x118]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 0x50
jmp 0x4b81b1
lea ecx, [ebp - 0x110]
push ecx
call eax
push dword [ebp - 0x118]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test edi, edi
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
js 0x4b81a7
cmp dword [ebp - 0x10c], 6
jae 0x4b81ae
mov eax, 0x50
jmp 0x4b81b1
mov eax, dword [ebp - 0x78]
push 0x60
mov dword [ebp - 0xfc], eax
lea eax, [ebp - 0xf8]
push 0
push eax
call fcn.004c52c0
add esp, 0xc
mov dword [ebp - 0xf8], 1
lea eax, [ebp - 0xfc]
push eax
push dword [ebp - 0x114]
push 0x41c
push esi
call edi
mov eax, dword [ebp - 0xf4]
test al, al
js 0x4b821e
or eax, 0x80
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0xfc]
push eax
push dword [ebp - 0x114]
push 0x40b
push esi
call edi
mov eax, dword [ebp - 0xf4]
and eax, 0xffffff7f
or eax, 0x100
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0xfc]
push eax
push dword [ebp - 0x114]
push 0x40b
push esi
call edi
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebp - 0x120]
jl 0x4b8114
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, eax
mov eax, dword [0x540930]
add eax, 0x10
mov dword [ebp - 0x7c], eax
push eax
mov byte [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [0x5703f8]
xor ecx, ecx
mov byte [ebp - 0x78], 1
mov edx, dword [edi + 8]
test edx, edx
jle 0x4b829c
mov eax, dword [edi]
nop word [eax + eax]
cmp dword [eax], esi
je 0x4b82e1
inc ecx
add eax, 4
cmp ecx, edx
jl 0x4b8290
xor edi, edi
push dword [ebp - 0x7c]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [ebp - 0x11c]
mov edx, esi
neg edx
mov byte [ebp - 4], 1
sbb edx, edx
lea eax, [esi + 0x34]
and edx, eax
mov eax, dword [edi + 0x18]
mov dword [ebp - 0x78], edx
cmp dword [edi + 0x14], eax
jne 0x4b8345
mov ecx, dword [edi + 0x10]
lea edx, [ebp - 0x128]
cmp edx, ecx
jb 0x4b8301
lea eax, [ecx + eax*4]
cmp edx, eax
jb 0x4b83b9
jmp 0x4b82fe
cmp ecx, 0xffffffff
je 0x4b829c
test ecx, ecx
js 0x4b83c3
cmp ecx, edx
jge 0x4b83c3
mov eax, dword [edi + 4]
mov edi, dword [eax + ecx*4]
jmp 0x4b829e
mov eax, dword [edi + 0x18]
test eax, eax
jne 0x4b8312
mov eax, 1
mov dword [ebp - 0x118], eax
jmp 0x4b8326
mov eax, dword [edi + 0x14]
add eax, eax
mov dword [ebp - 0x118], eax
js 0x4b8357
cmp eax, 0x1fffffff
ja 0x4b8357
push 4
push eax
push ecx
call fcn.004d7d82
add esp, 0xc
test eax, eax
je 0x4b8357
mov ecx, dword [ebp - 0x118]
mov edx, dword [ebp - 0x78]
mov dword [edi + 0x18], ecx
mov dword [edi + 0x10], eax
mov ecx, dword [edi + 0x14]
mov eax, dword [edi + 0x10]
lea eax, [eax + ecx*4]
test eax, eax
je 0x4b8354
mov dword [eax], edx
inc dword [edi + 0x14]
lea eax, [ebp - 0x130]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x12c]
push 0xffff
mov dword [esi + 0xc8], eax
mov dword [esi + 0xcc], ecx
call dword [sym.imp.KERNEL32.dll_GetActiveProcessorCount]
mov dword [esi + 0xd0], eax
call dword [sym.imp.KERNEL32.dll_GetActiveProcessorGroupCount]
mov word [esi + 0xd4], ax
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004c3287
mov esp, ebp
pop ebp
ret 0x10
push 0x80004005
call fcn.0042d2e0
push ntohs
call fcn.0042d2e0
int3