Function at 0x5ecf7c
Capabilities:
Get graphical window text
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x89
push 0
push 0
dec ecx
jne 0x5ecf85
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
mov esi, edx
lea edi, [ebp - 4]
xor eax, eax
push ebp
push 0x5ed564
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xff
lea eax, [ebp - 0x214]
push eax
push esi
call sub.user32.dll_GetWindowTextW
lea eax, [ebp - 0x14]
push eax
push esi
call sub.user32.dll_GetWindowRect
lea eax, [ebp - 0x41c]
lea edx, [ebp - 0x214]
mov ecx, pe_nt_image_headers32
call fcn.00407e40
mov ecx, dword [ebp - 0x41c]
lea eax, [ebp - 0x418]
mov edx, 0x5ed580
call fcn.00407ff0
mov edx, dword [ebp - 0x418]
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x424]
mov eax, dword [ebp - 0x10]
call fcn.0041e8c8
mov ecx, dword [ebp - 0x424]
lea eax, [ebp - 0x420]
mov edx, 0x5ed5a4
call fcn.00407ff0
mov edx, dword [ebp - 0x420]
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x42c]
mov eax, dword [ebp - 0x14]
call fcn.0041e8c8
mov ecx, dword [ebp - 0x42c]
lea eax, [ebp - 0x428]
mov edx, 0x5ed5c0
call fcn.00407ff0
mov edx, dword [ebp - 0x428]
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x434]
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
call fcn.0041e8c8
mov ecx, dword [ebp - 0x434]
lea eax, [ebp - 0x430]
mov edx, 0x5ed5dc
call fcn.00407ff0
mov edx, dword [ebp - 0x430]
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 0x43c]
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x10]
call fcn.0041e8c8
mov ecx, dword [ebp - 0x43c]
lea eax, [ebp - 0x438]
mov edx, 0x5ed5fc
call fcn.00407ff0
mov edx, dword [ebp - 0x438]
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor edx, edx
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0xff
lea eax, [ebp - 0x414]
push eax
push esi
call sub.user32.dll_GetClassNameW
lea eax, [ebp - 0x444]
lea edx, [ebp - 0x414]
mov ecx, pe_nt_image_headers32
call fcn.00407e40
mov ecx, dword [ebp - 0x444]
lea eax, [ebp - 0x440]
mov edx, 0x5ed61c
call fcn.00407ff0
mov edx, dword [ebp - 0x440]
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0xffffffffffffffeb
push esi
call sub.user32.dll_GetWindowLongW
mov ebx, eax
lea edx, [ebp - 0x44c]
mov eax, ebx
call fcn.0041e8c8
mov ecx, dword [ebp - 0x44c]
lea eax, [ebp - 0x448]
mov edx, 0x5ed644
call fcn.00407ff0
mov edx, dword [ebp - 0x448]
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor edx, edx
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0xfffffffffffffff0
push esi
call sub.user32.dll_GetWindowLongW
mov ebx, eax
push 0xffffffffffffffec
push esi
call sub.user32.dll_GetWindowLongW
mov esi, eax
mov edx, 0x5ed66c
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push ebp
mov ecx, 0x5ed688
mov edx, 0xcf0000
mov eax, ebx
call fcn.005ecf18
pop ecx
test al, al
jne 0x5ed1f1
push ebp
mov ecx, 0x5ed6bc
xor edx, edx
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed6e4
mov edx, 0xc00000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed708
mov edx, 0x40000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed730
mov edx, 0x20000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed75c
mov edx, 0x10000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed788
mov edx, 0x80880000
mov eax, ebx
call fcn.005ecf18
pop ecx
test al, al
jne 0x5ed22e
push ebp
mov ecx, 0x5ed7b4
mov edx, 0x80000000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed7d4
mov edx, 0x800000
mov eax, ebx
call fcn.005ecf18
pop ecx
mov eax, ebx
and eax, 0x80000
cmp eax, 0x80000
jne 0x5ed268
mov edx, 0x5ed688
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0x5ed268
mov edx, 0x5ed788
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0x5ed268
mov edx, 0x5ed7f4
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push ebp
mov ecx, 0x5ed818
mov edx, 0x40000000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed838
mov edx, 0x20000000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed85c
mov edx, 0x10000000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed880
mov edx, 0x8000000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed8a4
mov edx, 0x4000000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed8d0
mov edx, 0x2000000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed8fc
mov edx, 0x1000000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed6e4
mov edx, 0xc00000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed7d4
mov edx, 0x800000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed920
mov edx, 0x400000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed944
mov edx, 0x200000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed968
mov edx, 0x100000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed7f4
mov edx, 0x80000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed708
mov edx, 0x40000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed98c
mov edx, 0x20000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed9ac
mov edx, 0x10000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed730
mov edx, 0x20000
mov eax, ebx
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5ed75c
mov edx, 0x10000
mov eax, ebx
call fcn.005ecf18
pop ecx
xor edx, edx
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x5ed9d0
mov eax, dword [edi]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push ebp
mov ecx, 0x5ed9f0
mov edx, 0x10
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5eda20
mov edx, 0x200
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5eda50
mov edx, 0x400
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5eda80
mov edx, 0x10000
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5edab4
mov edx, 1
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5edae8
xor edx, edx
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5edb0c
mov edx, 0x4000
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5edb40
xor edx, edx
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5edb70
mov edx, 0x40
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5edb9c
mov edx, 4
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5edbd4
mov edx, 0x300
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5edc10
mov edx, 0x188
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5edc44
mov edx, 0x1000
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5edc68
xor edx, edx
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5edca0
mov edx, 0x2000
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5edcd0
mov edx, 0x20000
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5edd00
mov edx, 0x80
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5edd30
mov edx, 8
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5edd58
mov edx, 0x20
mov eax, esi
call fcn.005ecf18
pop ecx
push ebp
mov ecx, 0x5edd88
mov edx, pe_nt_image_headers32
mov eax, esi
call fcn.005ecf18
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5ed56b
lea eax, [ebp - 0x44c]
mov edx, 0xe
call fcn.00406f0c
ret