Function at 0x4d34a0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x238
mov eax, dword [0x62e040]
xor eax, esp
mov dword [esp + 0x234], eax
cmp dword [0x636958], 1
jbe 0x4d363a
mov eax, dword [0x636930]
mov ecx, dword [0x636934]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0x10009
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3504
lea eax, [esp + 0x30]
jmp 0x4d3536
mov eax, dword [0x636930]
mov ecx, dword [0x636934]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10009
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x6368f8]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x636908]
mov ecx, dword [0x63690c]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0x10009
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3584
lea eax, [esp + 0x30]
jmp 0x4d35b6
mov eax, dword [0x636908]
mov ecx, dword [0x63690c]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10009
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x636884]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x636920]
mov ecx, dword [0x636924]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0x10009
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3605
lea eax, [esp + 0x30]
push eax
jmp 0x4d366b
mov eax, dword [0x636920]
mov ecx, dword [0x636924]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10009
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
jmp 0x4d366b
push 0x601920
push 0
push 0xc
push dword [0x6368f8]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x601920
push 0
push 0xc
push dword [0x636884]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x601920
push 0
push 0xc
push dword [0x6368f0]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x637b28], 0
je 0x4d381b
mov eax, dword [0x637ce8]
mov ecx, dword [0x637cec]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0xd
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d36c5
lea eax, [esp + 0x30]
jmp 0x4d3700
mov al, byte [0x632948]
mov ecx, dword [0x637cec]
mov byte [esp + 0xa], al
mov eax, dword [0x637ce8]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10d
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x6368e0]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x637b78]
mov ecx, dword [0x637b7c]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0xd
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d374f
lea eax, [esp + 0x30]
jmp 0x4d378e
mov al, byte [0x632948]
mov ecx, dword [0x637b7c]
mov byte ds:[esp + 0xa], al
mov eax, dword [0x637b78]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10d
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x636970]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x637b68]
mov ecx, dword [0x637b6c]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0xd
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d37dd
lea eax, [esp + 0x30]
push eax
jmp 0x4d384b
mov al, byte [0x632948]
mov ecx, dword [0x637b6c]
mov byte [esp + 0xa], al
mov eax, dword [0x637b68]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10d
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
jmp 0x4d384b
push 0x601920
push 0
push 0xc
push dword [0x6368e0]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x601920
push 0
push 0xc
push dword [0x636970]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x601920
push 0
push 0xc
push dword [0x636910]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x637ba0]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0x10009
push eax
mov dword [esp + 0x40], 0
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3896
lea eax, [esp + 0x30]
jmp 0x4d38c8
mov eax, dword [0x637ba0]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10009
mov dword [esp + 0x20], 0
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x636888]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x637b88]
mov ecx, dword [0x637b8c]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0xd
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3916
lea eax, [esp + 0x30]
jmp 0x4d3951
mov al, byte [0x632948]
mov ecx, dword [0x637b8c]
mov byte [esp + 0xa], al
mov eax, dword [0x637b88]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10d
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x6368d8]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x637ba4]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0x10009
push eax
mov dword [esp + 0x40], 0
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d39a2
lea eax, ds:[esp + 0x30]
jmp 0x4d39d2
mov eax, dword [0x637ba4]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10009
mov dword [esp + 0x20], 0
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x6368e4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x637b90]
mov ecx, dword [0x637b94]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0xd
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3a23
lea eax, [esp + 0x30]
jmp 0x4d3a5e
mov al, byte [0x632948]
mov ecx, dword [0x637b94]
mov byte [esp + 0xa], al
mov eax, dword [0x637b90]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10d
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x63696c]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x637ba8]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0x10009
push eax
mov dword [esp + 0x40], 0
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3aaf
lea eax, [esp + 0x30]
jmp 0x4d3adf
mov eax, dword [0x637ba8]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10009
mov dword [esp + 0x20], 0
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x6368fc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x637b98]
mov ecx, dword [0x637b9c]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0xd
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3b2f
lea eax, [esp + 0x30]
jmp 0x4d3b6e
mov al, byte [0x632948]
mov ecx, dword [0x637b9c]
mov byte ds:[esp + 0xa], al
mov eax, dword [0x637b98]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10d
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x6368f4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0x234]
xor ecx, esp
call fcn.005802ef
mov esp, ebp
pop ebp
ret