Function at 0x4b7bb0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f7683
mov eax, dword fs:[0]
push eax
sub esp, 0x128
mov eax, dword [0x535a40]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x11c], edi
mov esi, dword [0x530350]
mov ecx, dword [0x530358]
mov edx, dword [0x53034c]
sub ecx, esi
mov eax, dword [0x530354]
push 0
push dword [0x56a3d4]
sub eax, edx
push 0x15ec
push dword [edi + 4]
push ecx
push eax
push esi
push edx
push 0x5600100d
push 0
push 0x4f9f3c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x4b9290
push 0xfffffffffffffffc
mov dword [edi + 0x88], eax
push eax
mov dword [edi + 0x2c], eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
movzx ecx, word [0x54af38]
push eax
push ecx
push dword [edi + 0x88]
call dword [sym.imp.USER32.dll_SetPropW]
push 0x10420
push 0
push 0x1036
push dword [edi + 0x88]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
call edi
mov dword [ebp - 0x24], 0xc1
mov dword [ebp - 0x20], 0xc0
mov dword [ebp - 0x1c], 0xc3
mov dword [ebp - 0x18], 0xc2
mov dword [ebp - 0x14], 0xb4
push 0x60
push dword [0x53a8bc]
mov dword [ebp - 4], 0
push 0x10
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x60
push dword [0x53a8bc]
mov esi, eax
push 0x10
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 0
push 5
push 0x20
push esi
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov esi, eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x134], esi
mov dword [ebp - 0x114], eax
nop dword [eax]
push 0x64
push 0x60
push dword [0x53a8bc]
push 0x10
call dword [sym.imp.KERNEL32.dll_MulDiv]
push eax
mov eax, dword [ebp - 0x114]
push dword [eax]
call fcn.0043b0c0
add esp, 0xc
push eax
push 0xffffffffffffffff
push esi
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov eax, dword [ebp - 0x114]
lea ecx, [ebp - 0x10]
add eax, 4
mov dword [ebp - 0x114], eax
cmp eax, ecx
jne 0x4b7ce0
push esi
mov esi, dword [ebp - 0x11c]
push 1
push 0x1003
push dword [esi + 0x88]
call edi
push dword [esi + 0x88]
lea ecx, [esi + 0x38]
call fcn.004b70c0
mov esi, dword [sym.imp.KERNEL32.dll_MulDiv]
push 1
push 0xb
push 0x60
push dword [0x53a8bc]
mov dword [ebp - 0x114], eax
push 0x5a
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 0
push 0x514628
call fcn.004b3f10
push 1
push 0x12
push 0x60
push dword [0x53a8bc]
push 0x5a
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 0
push 0x514634
call fcn.004b3f10
push 1
push 0
push 0x60
push dword [0x53a8bc]
push 0x3c
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x51464c
call fcn.004b3f10
push 1
push 9
push 0x60
push dword [0x53a8bc]
push 0x46
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x514654
call fcn.004b3f10
push 1
push 8
push 0x60
push dword [0x53a8bc]
push 0x46
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x514668
call fcn.004b3f10
push 1
push 0x10
push 0x60
push dword [0x53a8bc]
push 0x46
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x51405c
call fcn.004b3f10
push 1
push 0xf
push 0x60
push dword [0x53a8bc]
push 0x46
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x514680
call fcn.004b3f10
push 1
push 7
push 0x60
push dword [0x53a8bc]
push 0x5a
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 0
push 0x514694
call fcn.004b3f10
push 1
push 3
push 0x60
push dword [0x53a8bc]
push 0x8c
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 0
push 0x5146ac
call fcn.004b3f10
push 1
push 1
push 0x60
push dword [0x53a8bc]
push 0x3c
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x5146c8
call fcn.004b3f10
push 1
push 2
push 0x60
push dword [0x53a8bc]
push 0x3c
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x5146dc
call fcn.004b3f10
push 1
push 0x11
push 0x60
push dword [0x53a8bc]
push 0x46
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 0
push 0x512aac
call fcn.004b3f10
push 1
push 0xa
push 0x60
push dword [0x53a8bc]
push 0x50
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x5146ec
call fcn.004b3f10
cmp dword [0x54a9bc], 4
jl 0x4b7f49
push 1
push 0xe
push 0x60
push dword [0x53a8bc]
push 0x32
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x514710
call fcn.004b3f10
push 1
push 4
push 0x60
push dword [0x53a8bc]
push 0x32
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x51472c
call fcn.004b3f10
push 1
push 0xd
push 0x60
push dword [0x53a8bc]
push 0x50
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x514740
call fcn.004b3f10
push 1
push 0xc
push 0x60
push dword [0x53a8bc]
push 0x5a
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x51475c
call fcn.004b3f10
push 1
push 5
push 0x60
push dword [0x53a8bc]
push 0x3c
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x51476c
call fcn.004b3f10
push 1
push 6
push 0x60
push dword [0x53a8bc]
push 0x3c
call esi
mov ecx, dword [ebp - 0x114]
push eax
push 1
push 0x51477c
call fcn.004b3f10
mov ecx, dword [ebp - 0x114]
call fcn.0043ae10
mov esi, dword [ebp - 0x11c]
mov ecx, dword [0x530358]
sub ecx, dword [0x530350]
mov edx, dword [0x53034c]
mov eax, dword [0x530354]
push 0
push dword [0x56a3d4]
sub eax, edx
push 0xe800
push dword [esi + 4]
mov esi, dword [0x530350]
push ecx
push eax
push esi
push edx
push 0x5600194c
push 0
push 0x501ecc
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov esi, eax
push 0
mov dword [ebp - 0x78], esi
push 0
push 0x423
push esi
call edi
push 0xfffffffffffffff0
push eax
mov dword [ebp - 0x118], eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, eax
or ecx, 1
cmp eax, ecx
je 0x4b8088
push ecx
push 0xfffffffffffffff0
push dword [ebp - 0x118]
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 0x18
push 0
push 0x454
push esi
call edi
push 0x60
push dword [0x53a8bc]
mov byte [ebp - 4], 1
push 0x10
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 4
push 6
push 0x21
push eax
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov edi, eax
push edi
push 0
push 0x430
push esi
mov dword [ebp - 0x12c], edi
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x54b048
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov ecx, eax
mov eax, dword [ebp - 0x11c]
mov dword [eax + 0xdc], ecx
test ecx, ecx
je 0x4b80fb
push 1
push ecx
push 0x30
push dword [eax + 0x88]
call dword [sym.imp.USER32.dll_SendMessageW]
xorps xmm0, xmm0
mov dword [ebp - 0x74], 0x9f43
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x70], 0x155
mov word [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0x51478c
movq qword [ebp - 0x64], xmm0
mov word [ebp - 0x5c], 0x400
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0x9f44
mov dword [ebp - 0x50], 0x9a
mov word [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0x5144f0
movq qword [ebp - 0x44], xmm0
mov word [ebp - 0x3c], 0x400
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0x9f45
mov dword [ebp - 0x30], 0xbe
mov word [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x50a43c
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x118], 5
cmp dword [ecx - 0xc], 0
jne 0x4b81b9
mov dword [ebp - 0x90], 0x100
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x88], 0
jmp 0x4b8251
mov eax, dword [ecx - 8]
mov dword [ebp - 0x124], 0xffffffff
mov dword [ebp - 0x120], eax
test eax, eax
je 0x4b8207
push 0x60
push dword [0x53a8bc]
push 0x10
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x64
push eax
push dword [ebp - 0x120]
call fcn.0043b0c0
add esp, 0xc
push eax
push 0xffffffffffffffff
push edi
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x124], eax
mov dl, byte [ecx - 3]
mov ecx, dword [ecx]
mov esi, dword [ebp - 0x114]
neg ecx
mov byte [ebp - 0x90], dl
sbb cl, cl
and cl, 0x40
or cl, byte [esi - 4]
xor eax, eax
mov byte [ebp - 0x8f], cl
mov ecx, dword [esi - 0xc]
mov word [ebp - 0x8e], ax
mov eax, dword [esi]
mov esi, dword [ebp - 0x78]
mov dword [ebp - 0x94], ecx
mov ecx, dword [ebp - 0x124]
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x98]
mov dword [ebp - 0x8c], 0
push eax
push 0xffffffffffffffff
push 0x443
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x114]
add ecx, 0x10
sub dword [ebp - 0x118], 1
mov dword [ebp - 0x114], ecx
jne 0x4b8186
mov eax, dword [ebp - 0x11c]
push 0
push dword [0x56a3d4]
push 0xe800
push dword [eax + 4]
push 0x64
push 0x64
push 0
push 0
push 0x56002640
push 0
push 0x502390
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x114], eax
test eax, eax
je 0x4b8302
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x80], 0xc
push ecx
push 0
push 0x404
push eax
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
call edi
test eax, eax
jne 0x4b830c
mov ecx, dword [ebp - 0x114]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x114]
push 0
push 0
push 0x418
push esi
mov dword [eax + 0x24], ecx
call edi
mov dword [ebp - 0x118], eax
call fcn.00465210
push 0x60
mov dword [ebp - 0xfc], eax
lea eax, [ebp - 0xf8]
push 0
push eax
call fcn.004c53a0
add esp, 0xc
mov dword [ebp - 0xf8], 0x371
cmp dword [ebp - 0x118], 0
mov ecx, 0x204
mov eax, 4
mov dword [ebp - 0xe8], 0
cmovg eax, ecx
mov dword [ebp - 0xdc], esi
push 0
push 0
push 0x40c
push dword [ebp - 0x114]
mov dword [ebp - 0xf4], eax
call edi
add eax, 0xeb00
xorps xmm0, xmm0
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x118]
movups xmmword [ebp - 0x84], xmm0
test eax, eax
jle 0x4b83f7
lea ecx, [ebp - 0x84]
dec eax
push ecx
push eax
push 0x41d
push esi
call edi
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x80]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0x84]
push eax
push 0
push 0x41d
push esi
call edi
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0xd0]
mov dword [ebp - 0xd8], eax
jmp 0x4b842a
lea eax, [ebp - 0x84]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [ebp - 0x7c]
sub ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x80]
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0xfc]
mov dword [ebp - 0xb8], ecx
push eax
push 0xffffffffffffffff
push 0x40a
push dword [ebp - 0x114]
call edi
test eax, eax
je 0x4b8464
push 0
push 0
push 0x455
push esi
call edi
or eax, 0x10
push eax
push 0
push 0x454
push esi
call edi
mov ecx, dword [ebp - 0x11c]
push esi
lea ecx, [ecx + 0x54]
call fcn.004b9340
mov eax, dword [ebp - 0x11c]
push 0
push 0
push 0x40c
mov esi, dword [eax + 0x24]
push esi
call edi
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x114], 0
test eax, eax
jle 0x4b85e3
mov dword [ebp - 0x78], 0x64
call fcn.004601b0
test al, al
je 0x4b8533
xorps xmm0, xmm0
mov dword [ebp - 0x110], 0x14
push 0x50b454
movlpd qword [ebp - 0x10c], xmm0
movlpd qword [ebp - 0x104], xmm0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x118], eax
test eax, eax
je 0x4b8533
push 0x50b444
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x4b8509
push dword [ebp - 0x118]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 0x50
jmp 0x4b853d
lea ecx, [ebp - 0x110]
push ecx
call eax
push dword [ebp - 0x118]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test edi, edi
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
js 0x4b8533
cmp dword [ebp - 0x10c], 6
jae 0x4b853a
mov eax, 0x50
jmp 0x4b853d
mov eax, dword [ebp - 0x78]
push 0x60
mov dword [ebp - 0xfc], eax
lea eax, [ebp - 0xf8]
push 0
push eax
call fcn.004c53a0
add esp, 0xc
mov dword [ebp - 0xf8], 1
lea eax, [ebp - 0xfc]
push eax
push dword [ebp - 0x114]
push 0x41c
push esi
call edi
mov eax, dword [ebp - 0xf4]
test al, al
js 0x4b85aa
or eax, 0x80
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0xfc]
push eax
push dword [ebp - 0x114]
push 0x40b
push esi
call edi
mov eax, dword [ebp - 0xf4]
and eax, 0xffffff7f
or eax, 0x100
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0xfc]
push eax
push dword [ebp - 0x114]
push 0x40b
push esi
call edi
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebp - 0x120]
jl 0x4b84a0
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, eax
mov eax, dword [0x53a900]
add eax, 0x10
mov dword [ebp - 0x7c], eax
push eax
mov byte [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [0x56a3c8]
xor ecx, ecx
mov byte [ebp - 0x78], 1
mov edx, dword [edi + 8]
test edx, edx
jle 0x4b8622
mov eax, dword [edi]
cmp dword [eax], esi
je 0x4b8671
inc ecx
add eax, 4
cmp ecx, edx
jl 0x4b8616
xor esi, esi
push dword [ebp - 0x7c]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esi + 0x14]
mov edx, dword [esi + 0x18]
mov edi, dword [ebp - 0x11c]
mov byte [ebp - 4], 1
cmp eax, edx
jne 0x4b86cf
mov ecx, dword [esi + 0x10]
lea edi, [ebp - 0x128]
cmp edi, ecx
mov edi, dword [ebp - 0x11c]
jb 0x4b8691
lea edi, [ebp - 0x128]
lea eax, [ecx + edx*4]
cmp edi, eax
mov edi, dword [ebp - 0x11c]
jb 0x4b8746
jmp 0x4b868e
cmp ecx, 0xffffffff
je 0x4b8622
test ecx, ecx
js 0x4b8750
cmp ecx, edx
jge 0x4b8750
mov eax, dword [edi + 4]
mov esi, dword [eax + ecx*4]
jmp 0x4b8624
mov eax, dword [esi + 0x14]
test edx, edx
jne 0x4b86a2
mov eax, 1
mov dword [ebp - 0x118], eax
jmp 0x4b86b3
add eax, eax
mov dword [ebp - 0x118], eax
js 0x4b86e4
cmp eax, 0x1fffffff
ja 0x4b86e4
push 4
push eax
push ecx
call fcn.004d714f
add esp, 0xc
test eax, eax
je 0x4b86e4
mov ecx, dword [ebp - 0x118]
mov dword [esi + 0x18], ecx
mov dword [esi + 0x10], eax
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 0x10]
lea eax, [eax + ecx*4]
test eax, eax
je 0x4b86e1
lea ecx, [edi + 0x34]
mov dword [eax], ecx
inc dword [esi + 0x14]
lea eax, [ebp - 0x130]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x12c]
push 0xffff
mov dword [edi + 0xc8], eax
mov dword [edi + 0xcc], ecx
call dword [sym.imp.KERNEL32.dll_GetActiveProcessorCount]
mov dword [edi + 0xd0], eax
call dword [sym.imp.KERNEL32.dll_GetActiveProcessorGroupCount]
mov word [edi + 0xd4], ax
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004c34b7
mov esp, ebp
pop ebp
ret 0x10
push 0x80004005
call fcn.0042d270
push ntohs
call fcn.0042d270
int3