Function at 0x4d38a0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x238
mov eax, dword [0x62f040]
xor eax, esp
mov dword [esp + 0x234], eax
cmp dword [0x637958], 1
jbe 0x4d3a3a
mov eax, dword [0x637930]
mov ecx, dword [0x637934]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0x10009
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3904
lea eax, [esp + 0x30]
jmp 0x4d3936
mov eax, dword [0x637930]
mov ecx, dword [0x637934]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10009
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x6378f8]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x637908]
mov ecx, dword [0x63790c]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0x10009
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3984
lea eax, [esp + 0x30]
jmp 0x4d39b6
mov eax, dword [0x637908]
mov ecx, dword [0x63790c]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10009
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x637884]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x637920]
mov ecx, dword [0x637924]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0x10009
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3a05
lea eax, [esp + 0x30]
push eax
jmp 0x4d3a6b
mov eax, dword [0x637920]
mov ecx, dword [0x637924]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10009
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
jmp 0x4d3a6b
push 0x602920
push 0
push 0xc
push dword [0x6378f8]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x602920
push 0
push 0xc
push dword [0x637884]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x602920
push 0
push 0xc
push dword [0x6378f0]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x638b28], 0
je 0x4d3c1b
mov eax, dword [0x638ce8]
mov ecx, dword [0x638cec]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0xd
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3ac5
lea eax, [esp + 0x30]
jmp 0x4d3b00
mov al, byte [0x633948]
mov ecx, dword [0x638cec]
mov byte [esp + 0xa], al
mov eax, dword [0x638ce8]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10d
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x6378e0]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x638b78]
mov ecx, dword [0x638b7c]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0xd
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3b4f
lea eax, [esp + 0x30]
jmp 0x4d3b8e
mov al, byte [0x633948]
mov ecx, dword [0x638b7c]
mov byte ds:[esp + 0xa], al
mov eax, dword [0x638b78]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10d
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x637970]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x638b68]
mov ecx, dword [0x638b6c]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0xd
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3bdd
lea eax, [esp + 0x30]
push eax
jmp 0x4d3c4b
mov al, byte [0x633948]
mov ecx, dword [0x638b6c]
mov byte [esp + 0xa], al
mov eax, dword [0x638b68]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10d
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
jmp 0x4d3c4b
push 0x602920
push 0
push 0xc
push dword [0x6378e0]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x602920
push 0
push 0xc
push dword [0x637970]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x602920
push 0
push 0xc
push dword [0x637910]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x638ba0]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0x10009
push eax
mov dword [esp + 0x40], 0
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3c96
lea eax, [esp + 0x30]
jmp 0x4d3cc8
mov eax, dword [0x638ba0]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10009
mov dword [esp + 0x20], 0
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x637888]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x638b88]
mov ecx, dword [0x638b8c]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0xd
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3d16
lea eax, [esp + 0x30]
jmp 0x4d3d51
mov al, byte [0x633948]
mov ecx, dword [0x638b8c]
mov byte [esp + 0xa], al
mov eax, dword [0x638b88]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10d
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x6378d8]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x638ba4]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0x10009
push eax
mov dword [esp + 0x40], 0
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3da2
lea eax, ds:[esp + 0x30]
jmp 0x4d3dd2
mov eax, dword [0x638ba4]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10009
mov dword [esp + 0x20], 0
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x6378e4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x638b90]
mov ecx, dword [0x638b94]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0xd
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3e23
lea eax, [esp + 0x30]
jmp 0x4d3e5e
mov al, byte [0x633948]
mov ecx, dword [0x638b94]
mov byte [esp + 0xa], al
mov eax, dword [0x638b90]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10d
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x63796c]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x638ba8]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0x10009
push eax
mov dword [esp + 0x40], 0
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3eaf
lea eax, [esp + 0x30]
jmp 0x4d3edf
mov eax, dword [0x638ba8]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10009
mov dword [esp + 0x20], 0
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x6378fc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x638b98]
mov ecx, dword [0x638b9c]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x34]
push 0x200
push eax
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0xd
push eax
mov dword [esp + 0x40], ecx
call sym.SystemInformer.exe_PhFormatToBuffer
test al, al
je 0x4d3f2f
lea eax, [esp + 0x30]
jmp 0x4d3f6e
mov al, byte [0x633948]
mov ecx, dword [0x638b9c]
mov byte ds:[esp + 0xa], al
mov eax, dword [0x638b98]
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 4]
push 1
push eax
mov dword [esp + 0xc], 0x10d
mov dword [esp + 0x20], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov eax, dword [eax + 4]
push eax
push 0
push 0xc
push dword [0x6378f4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0x234]
xor ecx, esp
call fcn.0058078f
mov esp, ebp
pop ebp
ret