Function at 0x48add0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50bc9d
mov eax, dword fs:[0]
push eax
sub esp, 0xd4
mov eax, dword [0x542040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x147
push dword [0x5495e0]
call esi
push 0
push 0
push 0x146
push dword [0x5495e0]
mov dword [0x54a5a8], eax
call esi
mov esi, eax
mov dword [ebp - 0x80], 0
mov ecx, 0x1011
mov dword [ebp - 0xa0], esi
call fcn.00425b20
mov edx, eax
mov ecx, 0x809
xor eax, eax
mov edi, edx
rep stosd dword es:[edi], eax
lea ecx, [edx + 0x10]
mov dword [edx + 4], 1
mov dword [edx + 0xc], 0x1001
mov dword [edx + 8], ecx
mov dword [ebp - 0x80], edx
mov dword [edx], 0x1000
mov eax, dword [ebp - 0x80]
test eax, eax
je 0x48ae7a
mov dword [eax], 0
lea eax, [esi + 2]
mov dword [ebp - 4], 0
mov edi, dword [0x549994]
mov ecx, edi
sub ecx, dword [0x549990]
mov dword [ebp - 0x8c], eax
mov eax, 0x66666667
imul ecx
sar edx, 4
mov esi, edx
shr esi, 0x1f
add esi, edx
cmp dword [ebp - 0x8c], esi
jae 0x48aeca
mov esi, dword [ebp - 0x8c]
mov ecx, dword [0x549990]
lea eax, [esi + esi*4]
lea eax, [ecx + eax*8]
mov dword [0x549994], eax
jmp 0x48af24
jbe 0x48af1e
mov ecx, dword [0x549998]
mov eax, 0x66666667
sub ecx, dword [0x549990]
imul ecx
mov ecx, dword [ebp - 0x8c]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jbe 0x48aefe
push ecx
mov esi, ecx
push esi
call fcn.0048b760
jmp 0x48af24
mov eax, ecx
sub eax, esi
je 0x48af18
lea esi, [eax + eax*4]
shl esi, 3
push esi
push 0
push edi
call fcn.004ded20
add esp, 0xc
add edi, esi
mov dword [0x549994], edi
mov esi, dword [ebp - 0x8c]
mov edi, dword [0x549974]
mov ecx, edi
mov edx, dword [0x549970]
sub ecx, edx
sar ecx, 2
cmp esi, ecx
jae 0x48af45
lea eax, [edx + esi*4]
mov dword [0x549974], eax
jmp 0x48af79
jbe 0x48af79
mov eax, dword [0x549978]
sub eax, edx
sar eax, 2
cmp esi, eax
jbe 0x48af63
push ecx
push esi
mov ecx, 0x549970
call fcn.00483b40
jmp 0x48af79
mov eax, esi
sub eax, ecx
mov ecx, edi
lea esi, [edi + eax*4]
mov edx, esi
call fcn.00483e10
mov dword [0x549974], esi
push 5
push dword [0x5495e0]
call dword [sym.imp.USER32.dll_GetWindow]
mov edi, eax
push 0
test edi, edi
je 0x48afbc
push 0
push 0xe
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push ecx
mov ecx, 0x54997c
lea esi, [eax + 1]
push esi
call fcn.0040a210
push eax
push esi
push 0xd
push edi
mov dword [ebp - 0x84], eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x48b007
mov edi, dword [0x54a5a8]
push edi
push 0x149
push dword [0x5495e0]
call dword [sym.imp.USER32.dll_SendMessageW]
push ecx
inc eax
mov ecx, 0x54997c
push eax
call fcn.0040a210
mov esi, eax
push esi
push edi
push 0x148
push dword [0x5495e0]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 0xffffffff
mov ecx, 0x51b3ac
cmovne ecx, esi
mov dword [ebp - 0x84], ecx
mov esi, dword [ebp - 0xa0]
lea eax, [ebp - 0x80]
mov dword [ebp - 0xac], eax
xor ecx, ecx
mov dword [ebp - 0x88], ecx
lea eax, [ebp - 0x84]
mov dword [ebp - 0xa8], eax
test esi, esi
jle 0x48b487
xor edx, edx
mov dword [ebp - 0x94], edx
nop word [eax + eax]
mov edi, dword [0x549990]
mov eax, dword [0x549970]
add edi, edx
push 0
push ecx
push 0x149
mov dword [eax + ecx*4], edi
push dword [0x5495e0]
mov dword [ebp - 0x90], edi
call dword [sym.imp.USER32.dll_SendMessageW]
push ecx
inc eax
mov ecx, 0x54997c
push eax
call fcn.0040a210
mov esi, eax
push esi
push dword [ebp - 0x88]
push 0x148
push dword [0x5495e0]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 0xffffffff
mov ecx, 0x51b3ac
mov eax, dword [ebp - 0x88]
push 0
cmovne ecx, esi
mov dword [edi + 4], ecx
push eax
lea ecx, [eax + 1]
push 0x150
mov dword [edi + 0x20], ecx
push dword [0x5495e0]
mov dword [ebp - 0xa4], ecx
call dword [sym.imp.USER32.dll_SendMessageW]
cdq
mov dword [edi + 0x18], eax
xor eax, eax
push 0x64
push eax
mov word [ebp - 0x14], ax
lea eax, [ebp - 0x7c]
push eax
mov dword [edi + 0x1c], edx
mov dword [ebp - 0x18], 0x640025
call fcn.004ded20
push dword [edi + 0x20]
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x7c]
push 0x32
push eax
call fcn.00407ae0
add esp, 0x1c
lea ecx, [ebp - 0x80]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.0042dfa0
mov eax, dword [ebp - 0x80]
test eax, eax
je 0x48b15c
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
test eax, eax
je 0x48b15c
mov esi, eax
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x48b120
sub esi, ecx
sar esi, 1
je 0x48b15c
add esi, esi
push ecx
mov ecx, 0x54997c
lea eax, [esi + 2]
push eax
call fcn.0040a210
push esi
push dword [ebp - 0x88]
mov edi, eax
push edi
call fcn.004def30
add esp, 0xc
xor eax, eax
mov word [edi + esi], ax
jmp 0x48b161
mov edi, 0x51b3ac
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x98]
push 1
mov edx, dword [eax + 0x18]
mov dword [eax], edi
call fcn.0047fc90
mov edx, eax
add esp, 4
lea eax, [ebp - 0x80]
cmp edx, eax
je 0x48b1d6
mov ecx, dword [ebp - 0x80]
mov esi, dword [edx]
test ecx, ecx
jne 0x48b195
mov dword [ebp - 0x80], esi
mov dword [edx], ecx
jmp 0x48b1d6
test esi, esi
jne 0x48b1a8
mov eax, dword [ecx + 8]
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
jmp 0x48b1d6
mov eax, dword [ecx + 0xc]
cmp eax, dword [esi + 0xc]
jbe 0x48b1d1
mov eax, dword [esi]
lea eax, [eax*2 + 2]
push eax
push dword [esi + 8]
push dword [ecx + 8]
call fcn.004def30
mov eax, dword [ebp - 0x80]
add esp, 0xc
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x48b1d6
mov dword [edx], ecx
mov dword [ebp - 0x80], esi
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x98]
test eax, eax
je 0x48b1fd
add dword [eax + 4], 0xffffffff
jne 0x48b1fd
mov eax, dword [ebp - 0x98]
test eax, eax
je 0x48b1fd
push eax
call fcn.004eb01a
add esp, 4
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x98], 0
test eax, eax
je 0x48b260
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
test eax, eax
je 0x48b260
mov esi, eax
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x48b224
sub esi, ecx
sar esi, 1
je 0x48b260
add esi, esi
push ecx
mov ecx, 0x54997c
lea eax, [esi + 2]
push eax
call fcn.0040a210
push esi
push dword [ebp - 0x88]
mov edi, eax
push edi
call fcn.004def30
add esp, 0xc
xor eax, eax
mov word [edi + esi], ax
jmp 0x48b265
mov edi, 0x51b3ac
mov esi, dword [ebp - 0x90]
mov ecx, edi
mov dword [esi + 0xc], edi
call fcn.0047fd80
mov edx, dword [esi + 0x18]
lea ecx, [ebp - 0x9c]
push 0
call fcn.0047fc90
mov edx, eax
add esp, 4
lea eax, [ebp - 0x80]
cmp edx, eax
je 0x48b2e2
mov ecx, dword [ebp - 0x80]
mov esi, dword [edx]
test ecx, ecx
jne 0x48b2a1
mov dword [ebp - 0x80], esi
mov dword [edx], ecx
jmp 0x48b2e2
test esi, esi
jne 0x48b2b4
mov eax, dword [ecx + 8]
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
jmp 0x48b2e2
mov eax, dword [ecx + 0xc]
cmp eax, dword [esi + 0xc]
jbe 0x48b2dd
mov eax, dword [esi]
lea eax, [eax*2 + 2]
push eax
push dword [esi + 8]
push dword [ecx + 8]
call fcn.004def30
mov eax, dword [ebp - 0x80]
add esp, 0xc
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x48b2e2
mov dword [edx], ecx
mov dword [ebp - 0x80], esi
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x9c]
test eax, eax
je 0x48b309
add dword [eax + 4], 0xffffffff
jne 0x48b309
mov eax, dword [ebp - 0x9c]
test eax, eax
je 0x48b309
push eax
call fcn.004eb01a
add esp, 4
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x9c], 0
test eax, eax
je 0x48b36c
mov eax, dword [eax + 8]
mov dword [ebp - 0x88], eax
test eax, eax
je 0x48b36c
mov esi, eax
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x48b330
sub esi, ecx
sar esi, 1
je 0x48b36c
add esi, esi
push ecx
mov ecx, 0x54997c
lea eax, [esi + 2]
push eax
call fcn.0040a210
push esi
push dword [ebp - 0x88]
mov edi, eax
push edi
call fcn.004def30
add esp, 0xc
xor eax, eax
mov word [esi + edi], ax
jmp 0x48b371
mov edi, 0x51b3ac
mov esi, dword [ebp - 0x90]
mov ecx, edi
mov dword [esi + 8], edi
call fcn.0047fd80
push esi
push ecx
push 0
lea ecx, [ebp - 0xac]
call fcn.0048b650
mov dword [ebp - 0x88], eax
test eax, eax
jne 0x48b3a1
mov edi, 0x51b3ac
jmp 0x48b3e7
mov esi, eax
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x48b3a6
sub esi, ecx
sar esi, 1
jne 0x48b3be
mov edi, 0x51b3ac
jmp 0x48b3e7
add esi, esi
push ecx
mov ecx, 0x54997c
lea eax, [esi + 2]
push eax
call fcn.0040a210
push esi
push dword [ebp - 0x88]
mov edi, eax
push edi
call fcn.004def30
add esp, 0xc
xor eax, eax
mov word [esi + edi], ax
mov eax, dword [ebp - 0x90]
push eax
push ecx
push 1
lea ecx, [ebp - 0xac]
mov dword [eax + 0x10], edi
call fcn.0048b650
mov dword [ebp - 0x88], eax
test eax, eax
jne 0x48b410
mov edi, 0x51b3ac
jmp 0x48b455
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x48b413
sub eax, edx
sar eax, 1
jne 0x48b42b
mov edi, 0x51b3ac
jmp 0x48b455
lea esi, [eax + eax]
push ecx
lea eax, [esi + 2]
mov ecx, 0x54997c
push eax
call fcn.0040a210
push esi
push dword [ebp - 0x88]
mov edi, eax
push edi
call fcn.004def30
add esp, 0xc
xor eax, eax
mov word [esi + edi], ax
mov esi, dword [ebp - 0x90]
mov edx, dword [ebp - 0x94]
mov ecx, dword [ebp - 0xa4]
add edx, 0x28
mov dword [ebp - 0x88], ecx
mov dword [esi + 0x14], edi
mov esi, dword [ebp - 0xa0]
mov dword [ebp - 0x94], edx
cmp ecx, esi
jl 0x48b040
mov edx, esi
cmp esi, dword [ebp - 0x8c]
jge 0x48b57f
lea ecx, [esi + esi*4]
shl ecx, 3
mov dword [ebp - 0x94], ecx
mov eax, dword [0x549970]
add ecx, dword [0x549990]
mov dword [ebp - 0x88], ecx
mov dword [eax + edx*4], ecx
lea eax, [edx + 1]
mov dword [ebp - 0xa4], eax
mov dword [ecx + 0x20], eax
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x1c], 0
cmp edx, esi
je 0x48b562
mov esi, dword [0x5495e0]
push 0
push 0
push 0x154
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x1702
push esi
mov edi, eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, eax
mov eax, dword [ebp - 0x88]
push dword [eax + 0x20]
mov dword [eax + 4], str.____:
push 0x51c1c8
push 0x54997c
mov dword [eax + 8], 0x531e5c
mov dword [eax + 0xc], 0x531e5c
call fcn.00423bf0
mov ecx, dword [ebp - 0x88]
push esi
push edi
push 0x531dfc
push 0x54997c
mov dword [ecx], eax
call fcn.00423bf0
mov ecx, dword [ebp - 0x88]
add esp, 0x1c
mov esi, dword [ebp - 0xa0]
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x94]
mov edx, eax
add ecx, 0x28
mov dword [ebp - 0x94], ecx
cmp edx, dword [ebp - 0x8c]
jl 0x48b4a1
push esi
push 0x52f918
push 0x51ed04
call fcn.0047fb20
xorps xmm0, xmm0
mov dword [ebp - 0xb8], 0xffffffff
movlpd qword [ebp - 0xb4], xmm0
lea ecx, [ebp - 0x4c]
movlpd qword [ebp - 0xe0], xmm0
mov edx, 0x549970
movlpd qword [ebp - 0xd8], xmm0
movlpd qword [ebp - 0xd0], xmm0
movlpd qword [ebp - 0xc8], xmm0
movlpd qword [ebp - 0xc0], xmm0
movups xmm0, xmmword [ebp - 0xe0]
push eax
mov eax, dword [ebp - 0xb0]
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x1c], eax
movups xmm0, xmmword [ebp - 0xd0]
mov eax, dword [0x54a5a8]
movups xmmword [ebp - 0x3c], xmm0
movups xmm0, xmmword [ebp - 0xc0]
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x24], eax
call fcn.0047f8c0
add esp, 0x10
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0x80]
test eax, eax
je 0x48b633
add dword [eax + 4], 0xffffffff
jne 0x48b633
mov eax, dword [ebp - 0x80]
test eax, eax
je 0x48b633
push eax
call fcn.004eb01a
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004dadd7
mov esp, ebp
pop ebp
ret