Function at 0x4672a5
Capabilities:
Access peb ldr_data
Get graphical window text
Get kernel32 base address
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4d043b
mov eax, dword fs:[0]
push eax
sub esp, 0x38
push ebx
push esi
push edi
mov eax, dword [0x55c6c0]
xor eax, esp
push eax
lea eax, [esp + 0x48]
mov dword fs:[0], eax
mov edi, ecx
call fcn.0040a6a7
call fcn.0048b4c4
fld qword [0x53a620]
mov eax, dword [eax + 0xc]
push ecx
push ecx
fstp qword [esp]
push 0x1ac
push dword [edi + 0x20]
lea ecx, [edi + 0x2a0]
mov edx, eax
call fcn.0040b5ad
push 1
push 0x1b2
push 0x238
xor esi, esi
push esi
push esi
mov ecx, edi
call fcn.0048b738
push esi
mov ecx, edi
call fcn.0048e1fc
call fcn.0048b4c4
push 0x64
call fcn.00434b7e
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 1
mov esi, 0x80
push esi
push dword [edi + 0x20]
call ebx
call fcn.0048b4c4
push 0x64
call fcn.00434b7e
push eax
push 0
push esi
push dword [edi + 0x20]
call ebx
mov esi, 0x520938
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov ebx, str.RESOURCESTRING
push ebx
call fcn.0040255d
and dword [esp + 0x58], 0
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push str.S9PT9_253
call fcn.0040255d
or dword [esp + 0x5c], 0xffffffff
lea eax, [esp + 0x30]
push eax
call fcn.00406e18
mov dword [esp + 0x18], eax
push 0x531644
mov dword [esp + 0x54], 1
call fcn.00406f73
push eax
lea eax, [esp + 0x28]
push eax
call fcn.004021ba
add esp, 0xc
mov byte [esp + 0x50], 2
push dword [esp + 0x18]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.00402163
add esp, 0xc
mov byte [esp + 0x50], 3
push dword [eax]
mov ecx, edi
call fcn.0048b6d6
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00402883
or dword [esp + 0x50], 0xffffffff
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.00402883
call fcn.00467bbc
lea ecx, [esp + 0x30]
call fcn.004956f5
push esi
push ecx
mov dword [esp + 0x58], 4
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040255d
push ecx
mov byte [esp + 0x5c], 5
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x533b58
call fcn.0040255d
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x60], 4
call fcn.00406e18
push eax
mov byte [esp + 0x54], 6
push dword [esp + 0x3c]
lea ecx, [esp + 0x38]
call fcn.00495a83
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.00402883
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040255d
push ecx
mov byte [esp + 0x5c], 7
mov ecx, esp
mov dword [esp + 0x34], esp
push str.S9PT9_408
call fcn.0040255d
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x60], 4
call fcn.00406e18
push eax
mov byte [esp + 0x54], 8
push dword [esp + 0x3c]
lea ecx, [esp + 0x38]
call fcn.00495a83
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.00402883
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040255d
push ecx
mov byte [esp + 0x5c], 9
mov ecx, esp
mov dword [esp + 0x34], esp
push str.S9PT9_409
call fcn.0040255d
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x60], 4
call fcn.00406e18
push eax
mov byte [esp + 0x54], 0xa
push dword [esp + 0x3c]
lea ecx, [esp + 0x38]
call fcn.00495a83
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.00402883
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040255d
push ecx
mov byte [esp + 0x5c], 0xb
mov ecx, esp
mov dword [esp + 0x34], esp
push str.S9PT9_410
call fcn.0040255d
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x60], 4
call fcn.00406e18
push eax
mov byte [esp + 0x54], 0xc
push dword [esp + 0x3c]
lea ecx, [esp + 0x38]
call fcn.00495a83
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.00402883
lea ecx, [edi + 0x39c]
test ecx, ecx
je 0x4675b7
cmp dword [ecx + 0x20], 0
je 0x4675b7
push 1
push 0x1c
push 0x78
push 0x186
push 0x1ab
call fcn.0048b738
cmp dword [esp + 0x38], 0
jg 0x4675a6
call fcn.0048a94a
mov eax, dword [esp + 0x34]
push dword [eax]
lea ecx, [edi + 0x39c]
call fcn.0048b6d6
lea ecx, [edi + 0x56c]
test ecx, ecx
je 0x4675f5
cmp dword [ecx + 0x20], 0
je 0x4675f5
push 1
push 0x1c
push 0x78
push 0x186
push 0x12c
call fcn.0048b738
cmp dword [esp + 0x38], 1
jle 0x4675a1
mov eax, dword [esp + 0x34]
push dword [eax + 4]
lea ecx, [edi + 0x56c]
call fcn.0048b6d6
cmp dword [0x566394], 0xb
push 0x23
pop eax
jne 0x467604
push 0x32
pop eax
lea ecx, [edi + 0x2b4]
test ecx, ecx
je 0x467645
cmp dword [ecx + 0x20], 0
je 0x467645
push 1
push 0x1c
add eax, 0x78
push eax
push 0x186
push 0x15
call fcn.0048b738
cmp dword [esp + 0x38], 3
jle 0x4675a1
mov eax, dword [esp + 0x34]
push dword [eax + 0xc]
lea ecx, [edi + 0x2b4]
call fcn.0048b6d6
lea ecx, [edi + 0x484]
test ecx, ecx
je 0x467694
cmp dword [ecx + 0x20], 0
je 0x467694
push 1
push 0x1c
push 0x78
push 0x186
push 0x94
call fcn.0048b738
cmp dword [esp + 0x38], 2
jle 0x4675a1
mov eax, dword [esp + 0x34]
push dword [eax + 8]
lea ecx, [edi + 0x484]
call fcn.0048b6d6
push 0
lea ecx, [edi + 0x484]
call fcn.0048b778
push 0x15e
mov ecx, edi
call fcn.0048b5c0
push 0x15f
mov ecx, edi
mov dword [edi + 0x65c], eax
call fcn.0048b5c0
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
mov dword [edi + 0x660], eax
call fcn.0040255d
push ecx
mov byte [esp + 0x5c], 0xd
mov ecx, esp
mov dword [esp + 0x34], esp
push str.S9PT9_411
call fcn.0040255d
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x60], 4
call fcn.00406e18
mov byte [esp + 0x50], 0xe
push dword [eax]
mov ecx, dword [edi + 0x65c]
call fcn.0048b6d6
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.00402883
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040255d
push ecx
mov byte [esp + 0x5c], 0xf
mov ecx, esp
mov dword [esp + 0x34], esp
push str.S9PT9_412
call fcn.0040255d
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x60], 4
call fcn.00406e18
mov byte [esp + 0x50], 0x10
push dword [eax]
mov ecx, dword [edi + 0x660]
call fcn.0048b6d6
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.00402883
mov eax, dword [edi + 0x65c]
push 0
push 1
push 0xf1
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [edi + 0x89c], 0
jle 0x467790
lea ecx, [edi + 0x890]
call fcn.00498d5f
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040255d
push ecx
mov byte [esp + 0x5c], 0x11
mov ecx, esp
mov dword [esp + 0x34], esp
push str.S9PT9_415
call fcn.0040255d
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x60], 4
call fcn.00406e18
mov byte [esp + 0x50], 0x12
mov eax, dword [eax]
lea ecx, [edi + 0x890]
push 0x521604
mov dword [esp + 0x28], eax
call fcn.00498eba
push dword [esp + 0x24]
mov ecx, eax
call fcn.0040276b
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00402883
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040255d
push ecx
mov byte [esp + 0x5c], 0x13
mov ecx, esp
mov dword [esp + 0x34], esp
push str.S9PT9_416
call fcn.0040255d
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x60], 4
call fcn.00406e18
mov byte [esp + 0x50], 0x14
mov eax, dword [eax]
push 0x521724
lea ecx, [edi + 0x890]
mov dword [esp + 0x28], eax
call fcn.00498eba
push dword [esp + 0x24]
mov ecx, eax
call fcn.0040276b
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00402883
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040255d
push ecx
mov byte [esp + 0x5c], 0x15
mov ecx, esp
mov dword [esp + 0x34], esp
push str.S9PT9_417
call fcn.0040255d
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x60], 4
call fcn.00406e18
mov byte [esp + 0x50], 0x16
mov eax, dword [eax]
push 0x533bf8
lea ecx, [edi + 0x890]
mov dword [esp + 0x28], eax
call fcn.00498eba
push dword [esp + 0x24]
mov ecx, eax
call fcn.0040276b
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00402883
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040255d
push ecx
mov byte [esp + 0x5c], 0x17
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x533bfc
call fcn.0040255d
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x60], 4
call fcn.00406e18
mov byte [esp + 0x50], 0x18
mov eax, dword [eax]
push 0x533c10
lea ecx, [edi + 0x890]
mov dword [esp + 0x28], eax
call fcn.00498eba
push dword [esp + 0x24]
mov ecx, eax
call fcn.0040276b
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00402883
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040255d
push ecx
mov byte [esp + 0x5c], 0x19
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x533c14
call fcn.0040255d
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x60], 4
call fcn.00406e18
mov byte [esp + 0x50], 0x1a
mov eax, dword [eax]
push 0x533c28
lea ecx, [edi + 0x890]
mov dword [esp + 0x28], eax
call fcn.00498eba
push dword [esp + 0x24]
mov ecx, eax
call fcn.0040276b
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00402883
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040255d
push ecx
mov byte [esp + 0x5c], 0x1b
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x533c2c
call fcn.0040255d
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x60], 4
call fcn.00406e18
mov byte [esp + 0x50], 0x1c
mov eax, dword [eax]
push 0x533c40
lea ecx, [edi + 0x890]
mov dword [esp + 0x28], eax
call fcn.00498eba
push dword [esp + 0x24]
mov ecx, eax
call fcn.0040276b
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00402883
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
call fcn.0040255d
push ecx
mov byte [esp + 0x5c], 0x1d
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x533c44
call fcn.0040255d
lea eax, [esp + 0x34]
push eax
mov byte [esp + 0x60], 4
call fcn.00406e18
mov byte [esp + 0x50], 0x1e
mov ebx, dword [eax]
push 0x533c58
lea ecx, [edi + 0x890]
call fcn.00498eba
push ebx
mov ecx, eax
call fcn.0040276b
mov byte [esp + 0x50], 4
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.00402883
push esi
lea ecx, [esp + 0x18]
call fcn.0040255d
push esi
lea ecx, [esp + 0x14]
mov byte [esp + 0x54], 0x1f
call fcn.0040255d
mov byte [esp + 0x50], 0x20
mov eax, dword [edi + 0x89c]
xor ebx, ebx
cmp eax, ebx
jle 0x467af7
xor esi, esi
cmp eax, ebx
jle 0x467af7
lea ecx, [esp + 0x14]
call fcn.0040268b
lea ecx, [esp + 0x10]
call fcn.0040268b
push esi
lea eax, [esp + 0x18]
push 0x52303c
push eax
call fcn.00402a45
add esp, 0xc
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x18]
lea ecx, [edi + 0x890]
call fcn.00498dbe
push dword [esp + 0x10]
push esi
push 0x14a
push dword [edi + 0x7d4]
call dword [sym.imp.USER32.dll_SendMessageW]
inc esi
cmp esi, dword [edi + 0x89c]
jl 0x467a9f
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push ebx
push ebx
push 0x14e
push dword [edi + 0x7d4]
call esi
lea ecx, [edi + 0x664]
push ebx
call fcn.0048b778
lea ecx, [edi + 0x6b8]
push ebx
call fcn.0048b778
lea ecx, [edi + 0x70c]
push ebx
call fcn.0048b778
push ebx
lea ecx, [edi + 0x664]
call fcn.0048b7ba
push ebx
lea ecx, [edi + 0x6b8]
call fcn.0048b7ba
push ebx
lea ecx, [edi + 0x70c]
call fcn.0048b7ba
push ebx
push 0x190
push 0xc5
push dword [edi + 0x780]
call esi
push 0x258
push ebx
push 0x435
push dword [edi + 0x828]
call esi
push edi
call fcn.00469530
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.00402883
or dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x30]
call fcn.00495921
xor eax, eax
inc eax
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret