Function at 0x4ba4f8
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
cmp dword [eax + 4], 0
je 0x4bb410
cmp dword [eax + 8], 0
je 0x4bb410
cmp dword [eax + 0xc], 0
je 0x4bb410
xor edx, edx
mov dword [ebp - 4], edx
mov edi, 1
xor eax, eax
mov dword [ebp - 8], eax
xor edx, edx
mov dword [ebx + 0x404], edx
mov ecx, dword [ebx]
push dword [ecx + 0xc]
call fcn.0045aa80
test eax, eax
je 0x4ba552
mov dword [ebp - 0xc], 1
jmp 0x4ba557
xor eax, eax
mov dword [ebp - 0xc], eax
push dword [ebx + 0xef0]
push 0
push 1
push 0
push 0
mov edx, dword [ebx]
push dword [edx]
call fcn.004d7f72
push ebx
call fcn.0048a3a4
test eax, eax
jne 0x4bb410
mov ecx, dword [ebx + 0xef0]
test byte [ecx + 0x1a08], 0x20
je 0x4ba664
mov eax, dword [ebx]
mov esi, dword [eax + 0xc]
cmp byte [esi], 0x28
jne 0x4ba60a
cmp byte [esi + 1], 0x23
jne 0x4ba60a
cmp byte [esi + 2], 0x47
jne 0x4ba60a
push 0x29
mov eax, dword [ebx]
push dword [eax + 0xc]
call fcn.0054e1ec
add esp, 8
mov esi, eax
test esi, esi
je 0x4ba60a
mov byte [esi], 0
mov eax, dword [ebx]
push dword [eax + 0xc]
call fcn.0054e28c
pop ecx
cmp eax, 0xb
jb 0x4ba603
lea edx, [esi + 1]
mov dword [ebp - 0x10], edx
mov ecx, dword [ebp - 0x10]
cmp byte [ecx], 0
je 0x4ba5de
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp byte [eax], 0
je 0x4ba603
push dword [ebp - 0x10]
call fcn.0054e28c
pop ecx
inc eax
push eax
push dword [ebp - 0x10]
mov edx, dword [ebx]
push dword [edx + 0xc]
call fcn.0054e0c0
add esp, 0xc
xor esi, esi
test esi, esi
je 0x4ba60a
mov byte [esi], 0x29
push dword [ebx + 0xef0]
mov eax, dword [ebx]
push dword [eax]
call fcn.004ee9bd
test al, al
je 0x4ba664
mov eax, dword [ebx + 0xef0]
imul edx, dword [eax + 0xb88], 0x64
add edx, eax
add edx, 0xa5c
push edx
mov ecx, dword [ebx]
push dword [ecx + 8]
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x4ba664
mov eax, dword [ebx]
push dword [eax]
push 0x104
lea edx, [ebx + 0x518]
push edx
call fcn.0042e5e3
lea ecx, [ebx + 0x518]
mov eax, dword [ebx]
mov dword [eax + 8], ecx
cmp dword [0x560398], 0
je 0x4ba681
mov edx, dword [ebx]
mov ecx, dword [edx + 0xc]
cmp byte [ecx], 0
je 0x4ba681
mov eax, dword [ebx]
push dword [eax + 0xc]
call fcn.00427594
mov edx, dword [ebx]
mov ecx, dword [edx + 0xc]
cmp byte [ecx], 0
je 0x4ba6ef
cmp dword [0x5681d4], 0
je 0x4ba6b7
push 0x569b36
push ebx
call fcn.004be072
test eax, eax
je 0x4ba6b7
push 0xf
mov eax, dword [ebx]
push dword [eax + 0xc]
call fcn.0050e7f8
mov dword [ebx + 0x410], eax
jmp 0x4ba6ef
mov eax, dword [ebx + 0xef0]
imul edx, dword [eax + 0xb88], 0x64
add edx, eax
add edx, 0xa5c
push edx
mov ecx, dword [ebx]
push dword [ecx]
call fcn.0054e450
add esp, 8
test eax, eax
je 0x4ba6ef
push 0xffffffffffffffff
mov eax, dword [ebx]
push dword [eax + 0xc]
call fcn.0050e7f8
mov dword [ebx + 0x410], eax
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx + 8]
call fcn.004ee9bd
test al, al
jne 0x4ba719
mov ecx, dword [ebx]
mov eax, dword [ecx + 8]
cmp byte [eax], 0x40
jne 0x4ba719
add dword [ebx + 0x404], 2
mov edx, dword [ebx]
inc dword [edx + 8]
push dword [ebx + 0xef0]
mov ecx, dword [ebx]
push dword [ecx + 8]
call fcn.004ee9bd
test al, al
jne 0x4ba743
mov eax, dword [ebx]
mov edx, dword [eax + 8]
cmp byte [edx], 0x2b
jne 0x4ba743
add dword [ebx + 0x404], 4
mov ecx, dword [ebx]
inc dword [ecx + 8]
mov eax, dword [ebx]
mov eax, dword [eax + 8]
cmp byte [eax], 0
je 0x4bb410
push dword [ebx + 0xef0]
push eax
call fcn.004ee9bd
test al, al
je 0x4ba81c
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx + 8]
call fcn.00412c63
mov esi, eax
test esi, esi
je 0x4ba88c
push 0
push 2
push esi
mov eax, dword [ebx]
push dword [eax]
call fcn.004d588a
test eax, eax
je 0x4ba7af
push dword [ebx + 0xef0]
push 0
lea edx, [ebx + 0xb07]
push edx
push dword [ebx + 0x3f8]
mov ecx, dword [ebx]
push dword [ecx]
call fcn.004955cc
mov eax, dword [ebx]
push dword [eax]
push esi
call fcn.0043dd1f
cmp dword [0x5681d4], 0
je 0x4ba7d5
push 0x569b3d
push ebx
call fcn.004be072
test eax, eax
jne 0x4bb410
cmp dword [0x56e2c8], 0
je 0x4ba88c
push 0x3e7
lea edx, [ebx + 0xb07]
push edx
call fcn.0042e6b1
push dword [ebx]
lea ecx, [ebx + 0xb07]
push ecx
push 3
call fcn.004e56b5
push dword [ebx + 0xef0]
lea eax, [ebx + 0xb07]
push eax
mov edx, dword [ebx]
push dword [edx]
push esi
call fcn.0050ddf7
jmp 0x4ba88c
push dword [ebx + 0xef0]
mov ecx, dword [ebx]
push dword [ecx]
call fcn.004bdb40
test eax, eax
je 0x4ba84d
push dword [ebx + 0xef0]
push 0
lea eax, [ebx + 0xb07]
push eax
push dword [ebx + 0x3f8]
mov edx, dword [ebx]
push dword [edx]
call fcn.004955cc
push dword [ebx + 0xef0]
mov ecx, dword [ebx]
push dword [ecx]
call fcn.00412c63
mov esi, eax
cmp dword [ebp - 0xc], 0
je 0x4ba885
push 7
push 0x569b46
mov eax, dword [ebx]
push dword [eax + 0xc]
call fcn.0054e4e8
add esp, 0xc
test eax, eax
jne 0x4ba88c
mov dword [ebp - 4], 1
jmp 0x4ba88c
mov dword [ebp - 4], 1
push ebx
push esi
call fcn.004bce01
cmp dword [ebp - 0xc], 0
je 0x4ba97a
push 7
push 0x569b4f
mov edx, dword [ebx]
push dword [edx + 0xc]
call fcn.0054e4e8
add esp, 0xc
test eax, eax
jne 0x4ba907
test esi, esi
jne 0x4ba8e9
cmp dword [0x5681d4], 0
je 0x4ba8e9
push dword [ebx + 0xef0]
mov ecx, dword [ebx]
push dword [ecx + 8]
call fcn.004ee9bd
test al, al
jne 0x4ba8e9
push 0x569b58
push ebx
call fcn.004be072
test eax, eax
jne 0x4bb410
test esi, esi
jne 0x4ba959
push dword [ebx + 0xef0]
mov eax, dword [ebx]
push dword [eax + 8]
call fcn.004ee9bd
test al, al
jne 0x4bb410
jmp 0x4ba959
push 4
push 0x569b61
mov edx, dword [ebx]
push dword [edx + 0xc]
call fcn.0054e4e8
add esp, 0xc
test eax, eax
jne 0x4ba93d
cmp dword [0x5681d4], 0
je 0x4ba959
push 0x569b67
push ebx
call fcn.004be072
test eax, eax
jne 0x4bb410
jmp 0x4ba959
cmp dword [0x5681d4], 0
je 0x4ba959
push 0x569b6c
push ebx
call fcn.004be072
test eax, eax
jne 0x4bb410
cmp dword [ebp - 4], 0
je 0x4ba96e
push dword [ebx + 0xef0]
mov ecx, dword [ebx]
push dword [ecx]
call fcn.0050fd94
push esi
push ebx
call fcn.0045b949
jmp 0x4bb410
cmp dword [ebp - 4], 0
je 0x4ba98f
push dword [ebx + 0xef0]
mov eax, dword [ebx]
push dword [eax]
call fcn.0050fd94
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx + 8]
call fcn.004ee9bd
test al, al
je 0x4bab92
test esi, esi
je 0x4ba9b8
test esi, esi
je 0x4ba9d4
cmp dword [esi + 0x6bc], 1
je 0x4ba9d4
push 0x2e
mov ecx, dword [ebx]
push dword [ecx + 8]
call fcn.0054e1ec
add esp, 8
test eax, eax
jne 0x4baba0
jmp 0x4bb410
cmp dword [0x55e5e4], 0
je 0x4ba9f9
push 1
push esi
call fcn.0040976c
test eax, eax
je 0x4ba9f9
push 0
push dword [ebx + 0xef0]
push 1
push ebx
call fcn.00409a86
cmp dword [0x56cdd8], 0
je 0x4baa21
push 0
lea eax, [ebp - 8]
push eax
push 1
push 0x42
push 0x569b72
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fecf0
mov edi, eax
test edi, edi
je 0x4bab63
xor eax, eax
mov dword [0x56cd18], eax
mov dword [0x56cd1c], 2
mov dword [0x56cd20], 1
mov dword [0x56cd24], 1
mov dword [0x56cd28], 1
mov dword [0x56cd2c], 1
cmp dword [ebx + 0x404], 0
je 0x4baaff
mov edi, dword [0x5618f4]
push dword [ebx + 0xef0]
mov eax, dword [ebx]
push dword [eax]
push 1
push esi
call fcn.0043fe56
push eax
push 0x569b78
lea edx, [ebx + 0x720]
push edx
call sub.USER32.dll_wsprintfA
add esp, 0xc
test byte [ebx + 0x404], 2
je 0x4baab9
push 0x569b7e
lea ecx, [ebx + 0x720]
push ecx
call fcn.0054e1b0
add esp, 8
test byte [ebx + 0x404], 4
je 0x4baad6
push 0x569b81
lea eax, [ebx + 0x720]
push eax
call fcn.0054e1b0
add esp, 8
mov edx, dword [ebx]
push dword [edx + 8]
push 0x569b84
lea ecx, [ebx + 0x720]
push ecx
call fcn.0054e28c
pop ecx
add eax, ebx
add eax, 0x720
push eax
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x4bab2c
mov edi, dword [0x5618f0]
push dword [ebx + 0xef0]
mov eax, dword [ebx]
push dword [eax]
push 1
push esi
call fcn.0043fe56
push eax
push 0x569b8a
lea edx, [ebx + 0x720]
push edx
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebx]
lea ecx, [ebx + 0x720]
push ecx
push 3
call fcn.004e56b5
mov dword [0x56cd3c], 1
mov eax, dword [ebx]
mov eax, dword [eax]
mov dword [0x56cd40], eax
mov dword [0x56cd44], eax
push edi
lea edx, [ebx + 0x720]
push edx
push dword [esi]
call fcn.004ef55b
cmp dword [0x56cdd8], 0
je 0x4bb410
push 0
lea ecx, [ebp - 8]
push ecx
push 0
push 0x42
push 0x569b91
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fecf0
jmp 0x4bb410
mov eax, dword [ebx]
mov edx, dword [eax + 8]
cmp byte [edx], 0x24
jne 0x4bac90
cmp dword [0x55e61c], 0
je 0x4babc2
cmp dword [0x55e5a0], 0
je 0x4babc2
push 0
push dword [ebx + 0xef0]
push 6
push ebx
call fcn.00409a86
cmp dword [0x56cdd8], 0
je 0x4babea
push 0
lea ecx, [ebp - 8]
push ecx
push 1
push 0x42
push 0x569b97
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fecf0
mov edi, eax
test edi, edi
je 0x4bac61
xor eax, eax
mov dword [0x56cd18], eax
mov dword [0x56cd1c], 2
mov dword [0x56cd20], 1
mov dword [0x56cd28], 1
mov edx, dword [ebx]
push dword [edx]
push 0x569b9d
lea esi, [ebx + 0x720]
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebx]
push esi
push 3
call fcn.004e56b5
mov dword [0x56cd3c], 1
mov eax, dword [ebx]
mov eax, dword [eax]
mov dword [0x56cd40], eax
mov dword [0x56cd44], eax
push dword [0x5618f4]
push esi
mov edx, dword [ebx + 0xef0]
push dword [edx]
call fcn.004f0245
cmp dword [0x56cdd8], 0
je 0x4bb410
push 0
lea ecx, [ebp - 8]
push ecx
push 0
push 0x42
push 0x569ba5
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fecf0
jmp 0x4bb410
test esi, esi
jne 0x4bacb0
cmp dword [0x5681d4], 0
je 0x4bacb0
push str.private
push ebx
call fcn.004be072
test eax, eax
jne 0x4bb410
cmp dword [0x56e2c8], 0
je 0x4bacfd
push 0x3e7
lea eax, [ebx + 0xb07]
push eax
call fcn.0042e6b1
push dword [ebx]
lea edx, [ebx + 0xb07]
push edx
push 3
call fcn.004e56b5
push dword [ebx + 0xef0]
lea ecx, [ebx + 0xb07]
push ecx
mov eax, dword [ebx]
push dword [eax]
push esi
call fcn.0050ddf7
test eax, eax
je 0x4bacfd
test esi, esi
je 0x4bb410
test byte [0x56a69c], 0x20
jne 0x4bb410
test esi, esi
je 0x4bae35
cmp dword [0x55e608], 0
je 0x4bad37
push 2
push esi
call fcn.0040976c
test eax, eax
je 0x4bad37
push 0
push dword [ebx + 0xef0]
push 3
push ebx
call fcn.00409a86
cmp dword [0x56cdd8], 0
je 0x4bad5f
push 0
lea edx, [ebp - 8]
push edx
push 1
push 0x42
push 0x569bb4
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fecf0
mov edi, eax
test edi, edi
je 0x4bae06
push esi
call fcn.0051fd59
test eax, eax
je 0x4bae06
xor eax, eax
mov dword [0x56cd18], eax
mov dword [0x56cd1c], 2
mov dword [0x56cd20], 1
mov dword [0x56cd24], 1
mov dword [0x56cd28], 1
mov dword [0x56cd2c], 1
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx]
push 1
push 0
call fcn.0043fe56
push eax
push 0x569bba
lea edi, [ebx + 0x720]
push edi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebx]
push edi
push 3
call fcn.004e56b5
mov dword [0x56cd3c], 1
mov eax, dword [ebx]
mov eax, dword [eax]
mov dword [0x56cd40], eax
mov dword [0x56cd44], eax
push dword [0x5618f0]
push edi
push dword [esi]
call fcn.004ef55b
cmp dword [0x56cdd8], 0
je 0x4bb410
push 0
lea edx, [ebp - 8]
push edx
push 0
push 0x42
push 0x569bc1
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fecf0
jmp 0x4bb410
cmp dword [0x56c2dc], 0
je 0x4bafaf
cmp dword [0x56c2e0], 0
je 0x4bae71
push dword [ebx + 0xef0]
push dword [ebx + 0x3f8]
mov ecx, dword [ebx]
push dword [ecx]
call fcn.004d7d20
test eax, eax
je 0x4bae71
cmp dword [eax + 0x29c], 1
je 0x4bafaf
cmp dword [0x56cdd8], 0
je 0x4bae99
push 0
lea eax, [ebp - 8]
push eax
push 1
push 0x42
push 0x569bc7
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fecf0
mov edi, eax
test edi, edi
je 0x4baf4a
push ebx
call fcn.004be9cc
test eax, eax
je 0x4bb410
xor eax, eax
mov dword [0x56cd18], eax
mov dword [0x56cd1c], 2
mov dword [0x56cd20], 1
mov dword [0x56cd24], 1
mov dword [0x56cd28], 1
mov dword [0x56cd2c], 1
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx]
push 1
push 0
call fcn.0043fe56
push eax
push 0x569bcd
lea esi, [ebx + 0x720]
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebx]
push esi
push 3
call fcn.004e56b5
mov dword [0x56cd3c], 1
mov eax, dword [ebx]
mov eax, dword [eax]
mov dword [0x56cd40], eax
mov dword [0x56cd44], eax
push dword [0x5618f0]
push esi
mov edx, dword [ebx + 0xef0]
push dword [edx + 0x1b78]
call fcn.004ef55b
cmp dword [0x55e608], 0
je 0x4baf80
push 2
mov ecx, dword [ebx + 0xef0]
push dword [ecx + 0x1b78]
call fcn.0051fafa
push eax
call fcn.0040976c
test eax, eax
je 0x4baf80
push 0
push dword [ebx + 0xef0]
push 3
push ebx
call fcn.00409a86
cmp dword [0x56cdd8], 0
je 0x4bb410
push 0
lea eax, [ebp - 8]
push eax
push 0
push 0x42
push 0x569bd4
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fecf0
jmp 0x4bb410
cmp dword [0x56c320], 0
je 0x4bb115
push dword [0x56f024]
call fcn.0051fafa
mov esi, eax
test esi, esi
je 0x4bb115
mov eax, dword [esi + 0xb6c]
cmp eax, dword [ebx + 0xef0]
jne 0x4bb115
cmp dword [esi + 0x6bc], 1
jne 0x4bb115
cmp dword [0x55e608], 0
je 0x4bb012
cmp dword [0x55e59c], 0
je 0x4bb012
push 0
push dword [ebx + 0xef0]
push 3
push ebx
call fcn.00409a86
cmp dword [0x56cdd8], 0
je 0x4bb03a
push 0
lea edx, [ebp - 8]
push edx
push 1
push 0x42
push 0x569bda
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fecf0
mov edi, eax
test edi, edi
je 0x4bb0e6
push esi
call fcn.0051fd59
test eax, eax
je 0x4bb0e6
xor eax, eax
mov dword [0x56cd18], eax
mov dword [0x56cd1c], 2
mov dword [0x56cd20], 1
mov dword [0x56cd24], 1
mov dword [0x56cd28], 1
mov dword [0x56cd2c], 1
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx]
push 1
push 0
call fcn.0043fe56
push eax
push 0x569be0
lea edi, [ebx + 0x720]
push edi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebx]
push edi
push 3
call fcn.004e56b5
mov dword [0x56cd3c], 1
mov eax, dword [ebx]
mov edx, dword [eax]
mov dword [0x56cd40], edx
mov ecx, dword [ebx]
mov eax, dword [ecx]
mov dword [0x56cd44], eax
push dword [0x5618f4]
push edi
push dword [esi]
call fcn.004ef55b
cmp dword [0x56cdd8], 0
je 0x4bb410
push 0
lea edx, [ebp - 8]
push edx
push 0
push 0x42
push 0x569be7
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fecf0
jmp 0x4bb410
cmp dword [0x56cdd8], 0
je 0x4bb149
push 0
lea ecx, [ebp - 8]
push ecx
push 1
push 0x2d
push 0x569bed
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fecf0
test eax, eax
jne 0x4bb141
xor edi, edi
test edi, edi
je 0x4bb410
mov eax, dword [ebx]
push dword [eax]
push 0x3e7
lea edx, [ebx + 0x720]
push edx
call fcn.0042e5e3
push dword [ebx + 0xef0]
lea ecx, [ebx + 0x720]
push ecx
call fcn.00412c63
mov esi, eax
test esi, esi
jne 0x4bb1b2
push dword [ebx + 0xef0]
push 0
push 1
push 2
lea eax, [ebx + 0x720]
push eax
call fcn.0052637f
test eax, eax
je 0x4bb410
push dword [ebx + 0xef0]
lea edx, [ebx + 0x720]
push edx
call fcn.00412c63
mov esi, eax
test esi, esi
je 0x4bb410
push ebx
push esi
call fcn.004bce01
cmp dword [esi + 0x6bc], 2
jne 0x4bb22a
cmp dword [esi + 0x6c0], 1
jne 0x4bb22a
lea eax, [ebx + 0xb07]
push eax
push 0xdca
call fcn.0042c771
push 0x104
lea edx, [ebx + 0xb07]
push edx
call fcn.0054e28c
pop ecx
add eax, ebx
add eax, 0xb07
push eax
push dword [esi]
call sub.USER32.dll_GetWindowTextA
push 0x40
lea ecx, [ebx + 0xb07]
push ecx
call fcn.0054e1ec
add esp, 8
test eax, eax
je 0x4bb22a
cmp dword [esi + 0x66c], 0
je 0x4bb22a
push 0
lea eax, [ebx + 0xb07]
push eax
push esi
call fcn.004c86d8
cmp dword [0x56c2c0], 0
je 0x4bb285
cmp dword [0x563090], 0
je 0x4bb248
push 5
push ebx
call fcn.0045aaf0
test eax, eax
je 0x4bb285
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx]
push dword [esi]
call fcn.004bdbbd
mov ecx, dword [ebx]
push dword [ecx]
push 0x569bf3
lea eax, [ebx + 0x720]
push eax
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebx + 0xef0]
push 1
lea edx, [ebx + 0x720]
push edx
call fcn.00527eaf
cmp dword [0x56c2ec], 0
je 0x4bb2c4
cmp dword [0x56bef4], 1
jne 0x4bb2a4
push dword [0x56c2f8]
call fcn.0042c69a
jmp 0x4bb2c4
cmp dword [0x56bef4], 2
jne 0x4bb2c4
push dword [ebx + 0xef0]
push 1
push 0
push 0
call fcn.00477504
push eax
call fcn.0050d13a
cmp dword [0x56c2e4], 0
je 0x4bb2d9
push dword [ebx + 0xef0]
push esi
call fcn.004bed57
cmp dword [0x55e608], 0
je 0x4bb2fe
push 2
push esi
call fcn.0040976c
test eax, eax
je 0x4bb2fe
push 0
push dword [ebx + 0xef0]
push 3
push ebx
call fcn.00409a86
cmp dword [0x56cdd8], 0
je 0x4bb324
push 0
lea ecx, [ebp - 8]
push ecx
push 0
push 0x2d
push 0x569bfe
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fecf0
xor eax, eax
mov dword [ebp - 8], eax
cmp dword [0x56cdd8], 0
je 0x4bb351
push 0
lea edx, [ebp - 8]
push edx
push 1
push 0x42
push 0x569c04
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fecf0
mov edi, eax
test edi, edi
je 0x4bb3ea
xor eax, eax
mov dword [0x56cd18], eax
mov dword [0x56cd1c], 2
mov dword [0x56cd20], 1
mov dword [0x56cd24], 1
mov dword [0x56cd28], 1
mov dword [0x56cd2c], 1
push dword [ebx + 0xef0]
mov edx, dword [ebx]
push dword [edx]
push 1
push 0
call fcn.0043fe56
push eax
push 0x569c0a
lea edi, [ebx + 0x720]
push edi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebx]
push edi
push 3
call fcn.004e56b5
mov dword [0x56cd3c], 1
mov eax, dword [ebx]
mov eax, dword [eax]
mov dword [0x56cd40], eax
mov dword [0x56cd44], eax
push dword [0x5618f0]
push edi
push dword [esi]
call fcn.004ef55b
cmp dword [0x56cdd8], 0
je 0x4bb410
push 0
lea edx, [ebp - 8]
push edx
push 0
push 0x42
push 0x569c11
push ebx
push 0
push dword [ebx + 0xef0]
call fcn.004fecf0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4