Function at 0x4b0b1b
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0xc8
push ebx
push ebp
push esi
push edi
push 0
push 0
push 0
mov esi, ecx
push 0
push 0x2710
mov dword [esp + 0x28], esi
call fcn.00530d10
mov eax, dword [0x906f20]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x4b0b30
push 0
push 0x10c
push 0x243
push 0x17
push 0x2710
call fcn.00530d10
add esp, 0x14
push esi
call fcn.004b1090
mov ecx, dword [esi + 4]
imul ecx, ecx, 0x1b8
mov eax, 0x1948b0fd
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 0x1b8
jle 0x4b0b56
mov eax, 0x1b8
push 0x257
add eax, 0x6b
push eax
push 0
push 0x6b
call fcn.0052ded0
push 0
push 0x237
push 0x6b
push 0x16
push 0x2710
call fcn.00530d10
push 0x257
push 0x31f
push 0
push 0
call fcn.0052ded0
mov eax, dword [0x884634]
movzx ecx, byte [eax + 0x26020]
push 0
push 0x12
push 0x1a
shl ecx, 1
push ecx
push 0x2711
call fcn.00530d10
add esp, 0x48
mov dword [esp + 0x10], 0
mov ebp, 0x1f3
nop
mov ecx, dword [esp + 0x10]
mov eax, dword [0x884634]
mov edi, 0x2000
lea edx, [esp + 0x38]
shl edi, cl
mov ecx, dword [eax + 0x1ff10]
push edx
push ecx
call fcn.004cc430
mov ebx, 1
mov esi, eax
call fcn.00403200
mov edx, dword [esp + 0x38]
and edx, edi
cmp edx, edi
jne 0x4b0c64
mov ecx, dword [0x884634]
mov edx, dword [ecx + 0x26028]
lea eax, [esp + 0x48]
push eax
push edx
call fcn.004cc430
mov esi, eax
call fcn.00403200
mov edx, dword [esp + 0x48]
mov eax, dword [0x884634]
imul edx, edx, 0xb
movzx ecx, byte [eax + 0x26020]
mov esi, dword [esp + 0x10]
add ecx, edx
imul ecx, ecx, 0x5a
add ecx, esi
mov edx, dword [eax + ecx*8 + 0x2c614]
lea eax, [eax + ecx*8 + 0x2c610]
lea ecx, [esp + 0x1c]
push ecx
push edx
call fcn.004cc430
mov esi, eax
call fcn.00403200
mov eax, dword [esp + 0x1c]
push 0
push 0xe
push ebp
add eax, 0x10c
push eax
jmp 0x4b0c6e
push 0
push 0xe
push ebp
push 0x10c
push 0x32
call fcn.00530d10
mov edx, dword [esp + 0x24]
add esp, 0x14
inc edx
add ebp, 0x2c
cmp ebp, 0x327
mov dword [esp + 0x10], edx
jb 0x4b0bc0
mov edi, dword [esp + 0x14]
xor ebx, ebx
push ebx
lea esi, [edi + 8]
push esi
push 0x27
push 0xffffffffffffffff
push esi
call fcn.0052df90
mov ecx, 0x2fc
sub ecx, eax
add esp, 8
push ecx
call fcn.00530c60
add esp, 0x10
push 0xffff
push esi
push 0x27
push 0xffffffffffffffff
push esi
call fcn.0052df90
mov edx, 0x2fc
sub edx, eax
add esp, 8
push edx
call fcn.00530bb0
mov eax, dword [edi + 4]
mov ecx, dword [0x884634]
add esp, 0x10
cmp eax, 0xd
jle 0x4b0e2c
xor eax, eax
xor ebp, ebp
mov dword [esp + 0x10], eax
add edi, 0x12c
jmp 0x4b0d00
cmp byte [ecx + eax + 0x2449a], bl
je 0x4b0e11
xor edx, edx
cmp byte [ecx + eax + 0x24492], bl
mov ecx, dword [ecx + 0x1a638]
sete dl
lea eax, [esp + 0x1c]
push eax
push ecx
lea edx, [edx + edx + 0x18]
mov dword [esp + 0x20], edx
call fcn.004cc430
mov ebx, 1
mov esi, eax
call fcn.00403200
mov ebx, dword [esp + 0x10]
cmp dword [esp + 0x1c], ebx
jne 0x4b0d73
mov edx, dword [esp + 0x14]
mov ecx, dword [edx + 4]
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
and eax, reloc.WS2_32.dll_accept
jns 0x4b0d6c
dec eax
or eax, 0xfffffffe
inc eax
mov eax, 0x19
je 0x4b0d77
mov eax, dword [esp + 0x18]
mov ecx, dword [edi]
mov edx, dword [edi - 0x20]
push 0
add ecx, 2
push ecx
add edx, 0x1a
push edx
push eax
push 0x2710
call fcn.00530d10
mov eax, dword [0x884634]
lea ecx, [eax + ebp + 0x242bd]
push 0xffffffffffffffff
push ecx
call fcn.0052df90
mov esi, dword [edi - 0x20]
cdq
sub eax, edx
sar eax, 1
sub esi, eax
mov eax, dword [0x884634]
mov dl, byte [eax + ebx + 0x24492]
sub dl, byte [eax + 0x1a63c]
mov ecx, dword [edi]
add esi, 0x1a
neg dl
lea eax, [eax + ebp + 0x242bd]
sbb edx, edx
and edx, 0xfae8
push edx
push eax
add ecx, 5
push ecx
push esi
call fcn.00530c60
mov edx, dword [0x884634]
mov ecx, dword [edi]
push 0xffff
lea eax, [edx + ebp + 0x242bd]
push eax
add ecx, 5
push ecx
push esi
call fcn.00530bb0
mov ecx, dword [0x884634]
mov eax, dword [esp + 0x4c]
add esp, 0x3c
xor ebx, ebx
inc eax
add ebp, 0x14
add edi, 4
cmp ebp, 0xa0
mov dword [esp + 0x10], eax
jl 0x4b0d00
mov edi, dword [esp + 0x14]
mov edx, dword [ecx + 0x2419c]
inc edx
push edx
lea eax, [esp + 0x5c]
push 0x581fc0
push eax
call fcn.00550730
lea eax, [esp + 0x64]
add esp, 0xc
xor esi, esi
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4b0e50
sub eax, edx
mov dword [esp + 0x18], eax
je 0x4b0e9d
mov ebp, 0x29
movsx ecx, byte [esp + esi + 0x58]
push ebx
push 0x117
push ebp
add ecx, 0xd2
push ecx
push 0x32
call fcn.00530d10
add esp, 0x14
lea eax, [esp + 0x58]
inc esi
add ebp, 8
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4b0e90
sub eax, edx
cmp esi, eax
jb 0x4b0e64
lea eax, [esp + 0x58]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4b0ea4
sub eax, edx
mov edx, dword [0x884634]
push 0xffff
add edx, 0x241a0
push edx
lea eax, [eax*8 + 0x2d]
push 0x118
push eax
call fcn.00530bb0
mov eax, dword [0x884634]
mov cl, byte [eax + 0x24220]
add eax, 0x24220
add esp, 0x10
cmp cl, bl
je 0x4b0f00
push 0xffff
push eax
push 0x117
push 0x1ec
call fcn.00530bb0
add esp, 0x10
mov ecx, dword [0x884634]
push ecx
call fcn.00421960
cmp byte [0x884994], 1
jne 0x4b102c
mov eax, dword [0x8849bc]
cmp byte [eax + 8], bl
je 0x4b0f8c
mov ecx, dword [eax + 4]
lea esi, [eax + 4]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x14]
push eax
push 0xb0
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
cmp eax, 0xffffffff
jne 0x4b0f50
xor eax, eax
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], eax
jmp 0x4b0f54
mov eax, dword [esp + 0x10]
lea edx, [eax + eax*2]
lea eax, [edx + edx + 0xca]
mov edx, dword [esi]
lea ecx, [esp + 0x1c]
push ecx
push edx
mov dword [esp + 0x24], 2
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 0x21b
call sub.IMM32.dll_ImmGetContext
push eax
call sub.IMM32.dll_ImmSetCompositionWindow
mov eax, dword [0x8849bc]
jmp 0x4b0f94
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], ebx
cmp byte [eax + 8], bl
je 0x4b0fb1
mov edx, dword [eax + 4]
push 0x80
lea ecx, [esp + 0x5c]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowTextA]
test eax, eax
jne 0x4b0fb5
mov byte [esp + 0x58], bl
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x5c]
push ecx
call fcn.0052df90
mov edx, dword [esp + 0x1c]
mov esi, eax
push edx
lea eax, [esp + 0x64]
push eax
call fcn.0052df90
push 0xf800
sub eax, esi
push 0xc
add eax, 2
push eax
push 0x21b
add esi, 0xca
push esi
call fcn.0052e220
push ebx
lea ecx, [esp + 0x80]
push ecx
push 0x21c
push 0xcb
call fcn.00530bb0
push 0xffe0
lea edx, [esp + 0x90]
push edx
push 0x21b
push 0xca
call fcn.00530bb0
add esp, 0x44
jmp 0x4b1045
push 0xffff
push 0x884890
push 0x208
push 0x24
call fcn.00530bb0
add esp, 0x10
mov eax, dword [0x884634]
cmp word [eax + 0x775ec], 0xffff
je 0x4b1078
mov eax, dword [edi + 4]
cdq
mov ecx, 0x14
idiv ecx
cmp edx, 0xa
jge 0x4b1078
push ebx
push 0x12
push 0x1a
push ebx
push 0x2712
call fcn.00530d10
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc8
ret