Function at 0x430dab
Capabilities:
Get graphical window text

Disassembly:
mov eax, 0x480b5c
call fcn.0047bfa0
sub esp, 0x68
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov esi, ecx
xor ebx, ebx
cmp eax, 0x10
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x28], esi
mov dword [ebp - 4], ebx
ja 0x430e81
je 0x430e75
dec eax
dec eax
je 0x430e5a
sub eax, 3
je 0x430e51
dec eax
je 0x430e22
dec eax
je 0x430e08
dec eax
jne 0x4311bd
call fcn.0042e8db
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x10
mov ecx, dword [0x4ae8c0]
mov eax, dword [ebp + 8]
mov dword [ecx + 4], eax
push dword [esi + 0x694]
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x430df5
mov eax, dword [ebp + 0x10]
shr eax, 0x10
cmp word [ebp + 0x10], bx
jne 0x430e39
cmp byte [esi + 0x6a0], bl
je 0x430df5
push ebx
jmp 0x430e48
cmp ax, bx
jne 0x430df5
cmp byte [esi + 0x6a0], bl
je 0x430df5
push 1
mov ecx, esi
call fcn.0042df6a
jmp 0x430df5
mov ecx, esi
call fcn.0042f9f0
jmp 0x430df5
push dword [esi + 0x87c]
push dword [esi + 0x694]
call dword [sym.imp.USER32.dll_ChangeClipboardChain]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x430df5
mov ecx, esi
call fcn.00430504
jmp 0x430df5
cmp eax, 0x4e
je 0x4311f8
cmp eax, 0x110
jbe 0x4311bd
cmp eax, 0x112
jbe 0x430edc
cmp eax, 0x113
je 0x430ecd
cmp eax, 0x402
jne 0x4311bd
push ebx
push 0x1f4
push 3
push dword [esi + 0x68c]
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [esi + 0x888], eax
jmp 0x430df5
push dword [ebp + 0x10]
mov ecx, esi
call fcn.00430c17
jmp 0x430df5
movzx eax, word [ebp + 0x10]
mov edi, 0x9f
cmp eax, edi
jg 0x43108d
je 0x43104e
cmp eax, 0x6a
jg 0x430fd3
je 0x430fc1
sub eax, 0x65
je 0x430fb8
dec eax
je 0x430f99
dec eax
je 0x430f86
dec eax
jne 0x4311bd
cmp byte [esi + 0xb04], bl
je 0x430df5
push 1
push 0xffe3
mov ecx, esi
call fcn.004323a4
push 1
push 0xffe5
mov ecx, esi
call fcn.004323a4
mov edi, 0xffff
push 1
push edi
mov ecx, esi
call fcn.004323a4
push ebx
push edi
mov ecx, esi
call fcn.004323a4
push ebx
push 0xffe5
mov ecx, esi
call fcn.004323a4
push ebx
push 0xffe3
mov ecx, esi
call fcn.004323a4
push 1
push ebx
push ebx
mov ecx, esi
call fcn.0043325c
jmp 0x430df5
push 0xffe5
push 0x67
mov ecx, esi
call fcn.00430c52
jmp 0x430df5
cmp byte [esi + 0xb04], bl
je 0x430df5
mov edi, 0xffeb
push 1
push edi
mov ecx, esi
call fcn.004323a4
push ebx
push edi
jmp 0x430f6f
push 0xffe3
push 0x65
jmp 0x430f8d
cmp byte [esi + 0x850], bl
je 0x430df5
mov byte [ebp + 0x13], 0x33
jmp 0x431041
sub eax, 0x6d
je 0x431031
sub eax, 3
je 0x431013
dec eax
je 0x430ffa
dec eax
jne 0x4311bd
lea eax, [esi + 0x6a0]
cmp byte [eax], bl
sete cl
mov byte [eax], cl
push ecx
jmp 0x430e48
cmp byte [esi + 0xb04], bl
je 0x430df5
mov ecx, esi
call fcn.004300ca
mov byte [ebp + 0x13], 0x2b
jmp 0x431041
cmp dword [ebp + 0x14], 0x10000
push 1
mov ecx, esi
sete al
mov byte [ebp + 0x10], al
push dword [ebp + 0x10]
call fcn.0043483e
jmp 0x430df5
cmp byte [esi + 0x850], bl
je 0x430df5
mov byte [ebp + 0x13], 0x32
push 1
lea eax, [ebp + 0x13]
push 1
push eax
jmp 0x430f7a
push ebx
push edi
push dword [esi + 0x688]
call dword [sym.imp.USER32.dll_GetMenuState]
test al, 1
je 0x431064
xor al, al
jmp 0x431069
shr eax, 3
and al, 1
neg al
sbb eax, eax
and al, 0xf8
add eax, 8
push eax
push edi
push dword [esi + 0x688]
call dword [sym.imp.USER32.dll_CheckMenuItem]
push ebx
mov ecx, esi
call fcn.0042f7dd
jmp 0x430df5
mov ecx, 0x3f5
cmp eax, ecx
jg 0x431191
je 0x431185
sub eax, 0xa0
je 0x431173
dec eax
je 0x431167
dec eax
je 0x4310cc
sub eax, 0x352
jne 0x4311bd
mov ecx, esi
call fcn.00431900
jmp 0x430df5
cmp byte [esi + 0x850], bl
jne 0x430df5
lea ecx, [esi + 0x228]
call fcn.0042b08a
push eax
lea ecx, [ebp + 0x10]
call fcn.0042bf63
lea eax, [esi + 0x76c]
lea ecx, [ebp - 0x38]
push eax
mov byte [ebp - 4], 0xd
call fcn.004116dd
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
add esi, 0x68c
push 0xf020
push 0x112
mov byte [ebp - 4], 0xe
push dword [esi]
call edi
push ebx
push ebx
push 0x10
push dword [esi]
call edi
lea eax, [ebp - 0x38]
push eax
push 0x64
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push 0x4adf20
call fcn.0042bf63
mov ecx, dword [0x4ae01c]
lea eax, [ebp + 0x10]
push eax
call fcn.004144d8
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xd
call fcn.0042bea3
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], bl
call fcn.0042bea3
jmp 0x430df5
mov ecx, esi
call fcn.0043171e
jmp 0x430df5
push ebx
push ebx
push 0x10
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x430df5
mov ecx, esi
call fcn.00431b7c
jmp 0x430df5
cmp eax, 0x3f6
je 0x4311ec
cmp eax, 0x9c4a
je 0x4311e0
cmp eax, 0xf020
je 0x4311d4
cmp eax, 0xf120
jne 0x4311bd
cmp byte [esi + 0x850], bl
je 0x4311bd
push ebx
mov ecx, esi
call fcn.00433175
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_DefWindowProcW]
jmp 0x430df7
cmp byte [esi + 0x850], bl
je 0x4311bd
push 1
jmp 0x4311b6
mov ecx, esi
call fcn.0043186f
jmp 0x430df5
mov ecx, esi
call fcn.00431622
jmp 0x430df5
mov edi, dword [ebp + 0x14]
mov eax, dword [edi + 8]
cmp eax, 0xfffffd3a
jne 0x4313f8
mov eax, dword [edi + 0x2c]
push 1
mov dword [ebp - 0x38], eax
mov eax, dword [edi + 0x38]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x38]
push eax
push ebx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapWindowPoints]
push 0x9e
push 0x400000
call dword [sym.imp.USER32.dll_LoadBitmapA]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], ebx
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 2
call fcn.00401711
lea eax, [ebp - 0x44]
push 4
push eax
call fcn.00430cdd
pop ecx
mov dword [ebp + 0xc], eax
pop ecx
mov dword [ebp + 0x10], ebx
mov byte [ebp - 4], 4
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov dword [ebp + 0x10], eax
lea eax, [ebp - 0x18]
mov edi, 0x4ae030
push 0x7d
push eax
mov ecx, edi
call fcn.0041e9ff
push ebx
push eax
push 0x6a
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 5
call fcn.0043157f
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 4
call fcn.0042bea3
lea eax, [ebp - 0x1c]
push 0x7e
push eax
mov ecx, edi
call fcn.0041e9ff
push ebx
push eax
push 0x72
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 6
call fcn.0043157f
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 4
call fcn.0042bea3
push ebx
push ebx
push 0x800
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_AppendMenuA]
push 0xb
xor eax, eax
pop ecx
lea edi, [ebp - 0x70]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x74], 0x30
mov dword [ebp - 0x70], 0xc2
push 0x68
mov eax, dword [ebp + 0xc]
pop edi
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x74]
push eax
push ebx
push edi
mov dword [ebp - 0x64], edi
push dword [ebp + 0x10]
mov dword [ebp - 0x50], str.CtrlAltDel
call dword [sym.imp.USER32.dll_InsertMenuItemA]
lea eax, [ebp - 0x20]
push 0x7f
push eax
mov ecx, 0x4ae030
call fcn.0041e9ff
push ebx
push eax
push 0x6d
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 7
call fcn.0043157f
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.0042bea3
cmp byte [esi + 0xb04], bl
je 0x431356
mov eax, dword [esi + 0x824]
mov byte [ebp + 0x14], 1
shr eax, 1
test al, 1
jne 0x431359
mov byte [ebp + 0x14], bl
push ebx
lea ecx, [ebp + 0x10]
push dword [ebp + 0x14]
push 0x6a
call fcn.004315cd
push ebx
lea ecx, [ebp + 0x10]
push dword [ebp + 0x14]
push edi
call fcn.004315cd
push ebx
lea ecx, [ebp + 0x10]
push dword [ebp + 0x14]
push 0x6d
call fcn.004315cd
mov al, byte [esi + 0x6a0]
cmp al, bl
mov byte [ebp - 0x24], al
je 0x431393
mov byte [ebp + 0x14], 1
push dword [ebp - 0x24]
lea ecx, [ebp + 0x10]
push dword [ebp + 0x14]
push 0x72
call fcn.004315cd
push ebx
push dword [ebp + 8]
push ebx
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push ebx
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_TrackPopupMenu]
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 3
call fcn.0043154b
cmp dword [ebp + 0xc], ebx
je 0x4313d2
push dword [ebp + 0xc]
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [ebp - 0x44], ebx
je 0x4313e1
push dword [ebp - 0x44]
call dword [sym.imp.MSVCRT.dll_free]
pop ecx
cmp dword [ebp - 0x14], ebx
je 0x430df5
push dword [ebp - 0x14]
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x430df5
cmp eax, 0xfffffdee
jne 0x430df5
mov eax, dword [edi + 4]
cmp eax, 0x71
ja 0x4314a2
je 0x431489
sub eax, 0x65
je 0x43147d
dec eax
je 0x431471
dec eax
je 0x431465
dec eax
dec eax
je 0x431459
sub eax, 7
jne 0x430df5
lea eax, [ebp + 0x10]
push 0x79
push eax
mov ecx, 0x4ae030
call fcn.0041e9ff
mov byte [ebp - 4], 8
mov ecx, eax
call fcn.0042b08a
lea ecx, [ebp + 0x10]
mov esi, eax
mov byte [ebp - 4], bl
call fcn.0042bea3
mov dword [edi + 0xc], esi
jmp 0x430df5
mov dword [edi + 0xc], str.Actions_with_remote_computer
jmp 0x430df5
mov dword [edi + 0xc], 0x4a4620
jmp 0x430df5
mov dword [edi + 0xc], str.WinKey
jmp 0x430df5
mov dword [edi + 0xc], str.Ctrl
jmp 0x430df5
lea eax, [ebp + 0x10]
push 0x80
push eax
mov ecx, 0x4ae030
call fcn.0041e9ff
mov byte [ebp - 4], 9
jmp 0x43143d
sub eax, 0xa1
je 0x43150e
dec eax
je 0x4314f2
sub eax, 0x352
je 0x4314e6
dec eax
je 0x4314da
sub eax, 0x9855
jne 0x430df5
lea eax, [ebp + 0x10]
push 0x12
push eax
mov ecx, 0x4ae030
call fcn.0041e9ff
mov byte [ebp - 4], 0xc
jmp 0x43143d
mov dword [edi + 0xc], str.Encoder_settings
jmp 0x430df5
mov dword [edi + 0xc], str.Connection_settings
jmp 0x430df5
lea eax, [ebp + 0x10]
push 0x81
push eax
mov ecx, 0x4ae030
call fcn.0041e9ff
mov byte [ebp - 4], 0xa
jmp 0x43143d
lea eax, [ebp + 0x10]
push 0x13
push eax
mov ecx, 0x4ae030
call fcn.0041e9ff
mov byte [ebp - 4], 0xb
jmp 0x43143d