Function at 0x47ad98
Capabilities:
Initialize winsock library
Resolve dns

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe54
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x1ac], ebx
mov dword [ebp - 0x14], ebx
mov esi, ecx
mov dword [ebp - 4], edx
mov ebx, eax
mov eax, dword [ebp - 4]
call fcn.00404bd4
xor eax, eax
push ebp
push 0x47aefb
push dword fs:[eax]
mov dword fs:[eax], esp
cmp word [ebx + 0x42], 0
je 0x47addb
mov edx, ebx
mov eax, dword [ebx + 0x44]
call dword [ebx + 0x40]
mov dl, 1
mov al, 1
call fcn.00407738
mov edi, eax
mov eax, esi
call fcn.00404724
lea eax, [ebp - 0x1a8]
push eax
push edi
call sub.wsock32.dll_WSAStartup
mov dword [ebp - 8], eax
mov byte [ebp - 0x16], 0
cmp dword [ebp - 8], 0
je 0x47ae19
call sub.wsock32.dll_WSAGetLastError
sub eax, 0x2710
mov dword [ebp - 8], eax
jmp 0x47aeb7
mov eax, dword [ebp - 4]
call fcn.00404be4
push eax
call sub.wsock32.dll_gethostbyname
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x47ae3f
call sub.wsock32.dll_WSAGetLastError
sub eax, 0x2710
mov dword [ebp - 8], eax
jmp 0x47aeb7
mov eax, dword [ebp - 0x10]
movsx eax, word [eax + 0xa]
mov edi, eax
dec edi
test edi, edi
jl 0x47aea2
inc edi
mov dword [ebp - 0xc], 0
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov edx, dword [edx + 0xc]
mov edx, dword [edx]
mov ecx, dword [ebp - 0xc]
mov dl, byte [edx + ecx]
call fcn.0040490c
mov eax, dword [ebp - 0x14]
mov al, byte [eax]
mov byte [ebp - 0x15], al
push dword [esi]
push 0x47af14
lea edx, [ebp - 0x1ac]
xor eax, eax
mov al, byte [ebp - 0x15]
call fcn.004090a8
push dword [ebp - 0x1ac]
mov eax, esi
mov edx, 3
call fcn.00404aa4
inc dword [ebp - 0xc]
dec edi
jne 0x47ae55
mov eax, esi
mov ecx, 1
mov edx, 1
call fcn.00404c84
mov byte [ebp - 0x16], 1
call sub.wsock32.dll_WSACleanup
cmp word [ebx + 0x4a], 0
je 0x47aed2
mov eax, dword [ebp - 8]
push eax
mov cl, byte [ebp - 0x16]
mov edx, ebx
mov eax, dword [ebx + 0x4c]
call dword [ebx + 0x48]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47af02
lea eax, [ebp - 0x1ac]
call fcn.00404724
lea eax, [ebp - 0x14]
call fcn.00404724
lea eax, [ebp - 4]
call fcn.00404724
ret

Function at 0x487b74
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffc10
push ebx
push esi
xor ecx, ecx
mov dword [ebp - 0x3f0], ecx
mov ebx, edx
mov esi, eax
xor eax, eax
push ebp
push 0x487c2e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
call fcn.00404e30
mov eax, dword [0x4dc598]
cmp byte [eax], 0
je 0x487be3
push esi
call sub.user32.dll_GetWindowTextLengthW
mov edx, eax
inc edx
mov eax, ebx
call fcn.00405190
mov eax, dword [ebx]
call fcn.00404fbc
push eax
mov eax, dword [ebx]
call fcn.00404fac
push eax
push esi
call sub.user32.dll_GetWindowTextW
mov eax, dword [ebx]
call fcn.00404fbc
mov edx, eax
dec edx
mov eax, ebx
call fcn.00405190
jmp 0x487c15
lea eax, [ebp - 0x3e9]
push eax
push 0x3e8
push 0xd
push esi
call sub.user32.dll_SendMessageA
lea edx, [ebp - 0x3f0]
lea eax, [ebp - 0x3e9]
call fcn.00409a60
mov edx, dword [ebp - 0x3f0]
mov eax, ebx
call fcn.00404f9c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x487c35
lea eax, [ebp - 0x3f0]
call fcn.00404724
ret