Function at 0x4baf90
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1a0
mov eax, dword [0x535a40]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x194]
push edi
push eax
mov dword [ebp - 0x194], 8
mov dword [ebp - 0x190], 0x8604
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push 0
push dword [0x54a9b8]
push 0
push esi
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x113
push 0x190
push 0
push 0
push 0x56800448
push 0
push 0x502390
push 0
call esi
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x1a0]
push ecx
push 0
push 0x404
push eax
mov dword [0x56a2e4], eax
mov dword [ebp - 0x1a0], 0xc
mov dword [ebp - 0x19c], 0
call edi
test eax, eax
jne 0x4bb040
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004c34b7
mov esp, ebp
pop ebp
ret
push 0
push dword [0x54a9b8]
push 0
push dword [0x56a2e4]
push 0
push 0
push 0
push 0
push 0x56000944
push 0
push 0x501ecc
push 0
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x60
push dword [0x53a8bc]
mov dword [ebp - 0x184], eax
push 0x10
mov dword [0x54feb4], eax
call ebx
push 0x60
push dword [0x53a8bc]
mov esi, eax
push 0x10
call ebx
push 4
push 0x10
push 0x21
push esi
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov esi, eax
push esi
push 0
push 0x430
push dword [ebp - 0x184]
call edi
xorps xmm0, xmm0
mov dword [ebp - 0xd4], 0x9c49
mov dword [ebp - 0xd0], 0xee
mov byte [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0
movq qword [ebp - 0xc4], xmm0
mov byte [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0x9c42
mov dword [ebp - 0xb0], 0xfc
mov byte [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0x9c6e
mov dword [ebp - 0xa0], 0x15a
mov byte [ebp - 0x9c], 2
mov dword [ebp - 0x98], 0
movq qword [ebp - 0x94], xmm0
mov byte [ebp - 0x8c], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0x9c7c
mov dword [ebp - 0x80], 0xb6
mov byte [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0x9c67
mov dword [ebp - 0x70], 0x73
mov byte [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
movq qword [ebp - 0x64], xmm0
mov byte [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0x9c66
mov dword [ebp - 0x50], 0xef
mov byte [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0x9c4d
mov dword [ebp - 0x40], 0xbe
mov byte [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
movq qword [ebp - 0x34], xmm0
mov byte [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0x9f3d
mov dword [ebp - 0x20], 0xbf
mov byte [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
lea ebx, [ebp - 0xcc]
mov dword [ebp - 0x14], 0x9cad
mov dword [ebp - 0x10], 0xc9
mov byte [ebp - 0xc], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x18c], 0xd
cmp dword [ebx - 8], 0
jne 0x4bb253
mov dword [ebp - 0xe0], 0x100
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xd8], 0
jmp 0x4bb310
push 0x60
push dword [0x53a8bc]
push 0x10
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp - 0x188], eax
call fcn.00447510
mov ecx, eax
call fcn.004456f0
movzx edx, word [ebx - 4]
xor ecx, ecx
test al, al
mov byte [ebp - 0x17d], al
push 0
mov eax, 0x64
cmovne ecx, eax
mov eax, dword [ebp - 0x188]
push eax
push eax
add cx, dx
push 1
movzx ecx, cx
push ecx
push dword [0x56a3d8]
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, eax
test ecx, ecx
jne 0x4bb2d6
cmp byte [ebp - 0x17d], al
je 0x4bb2d6
movzx eax, word [ebx - 4]
push ecx
mov ecx, dword [ebp - 0x188]
push ecx
push ecx
push 1
push eax
push dword [0x56a3d8]
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, eax
xor eax, eax
mov byte [ebp - 0xe0], 4
mov word [ebp - 0xde], ax
mov al, byte [ebx]
push ecx
push 0xffffffffffffffff
mov byte [ebp - 0xdf], al
mov eax, dword [ebx - 8]
push esi
mov dword [ebp - 0xe4], eax
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebx + 4]
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0xe8]
mov dword [ebp - 0xdc], 0
push eax
push 0xffffffffffffffff
push 0x443
push dword [ebp - 0x184]
call edi
add ebx, 0x10
sub dword [ebp - 0x18c], 1
jne 0x4bb220
push 0
push 0
push 0x421
push dword [ebp - 0x184]
call edi
mov eax, dword [0x54feb4]
test eax, eax
je 0x4bb02d
lea ecx, [ebp - 0x118]
push ecx
push 0x9c49
push 0x433
push eax
call edi
lea eax, [ebp - 0x108]
push eax
push 0x9cad
push 0x433
push dword [0x54feb4]
call edi
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.USER32.dll_UnionRect]
push 0x64
lea eax, [ebp - 0x17c]
push 0
push eax
call fcn.004c53a0
mov eax, dword [0x54feb4]
add esp, 0xc
mov esi, dword [sym.imp.USER32.dll_GetSysColor]
mov dword [ebp - 0x17c], 0x64
mov dword [ebp - 0x178], 0x173
push 0x12
mov dword [ebp - 0x174], 0x80
mov dword [ebp - 0x15c], eax
call esi
push 0xf
mov dword [ebp - 0x170], eax
call esi
push 0x32
mov dword [ebp - 0x16c], eax
call dword [sym.imp.USER32.dll_GetSystemMetrics]
add eax, 8
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0xf0]
sub eax, dword [ebp - 0xf8]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x158], eax
lea eax, [ebp - 0x17c]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x56a2e4]
call edi
push dword [0x550abc]
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
push dword [0x54a9b8]
push 0x7d0
push dword [0x56a2e4]
push 0
push 0
push 0
push 0
push 0x56010004
push 0x4f9d20
push 0x50aeb0
push 0
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x60
push dword [0x53a8bc]
mov dword [0x54febc], eax
push 0x4b
mov dword [ebp - 0x15c], eax
call ebx
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x17c]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x56a2e4]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 1
call edi
push dword [0x550ab8]
push dword [0x54a9b8]
push 0x7d0
push dword [0x56a2e4]
push 0
push 0
push 0
push 0
push 0x56010004
push 0x4f9d20
push 0x50aeb0
push 0
call esi
push 0x60
push dword [0x53a8bc]
mov dword [0x54fec0], eax
push 0x4b
mov dword [ebp - 0x15c], eax
call ebx
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x17c]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x56a2e4]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 2
call edi
push dword [0x550acc]
push dword [0x54a9b8]
push 0x7d0
push dword [0x56a2e4]
push 0
push 0
push 0
push 0
push 0x56010004
push 0x4f9d20
push 0x50aeb0
push 0
call esi
push 0x60
push dword [0x53a8bc]
mov dword [0x54fec4], eax
push 0x4b
mov dword [ebp - 0x15c], eax
call ebx
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x17c]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x56a2e4]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 3
call edi
mov eax, dword [0x5619bc]
test eax, eax
je 0x4bb639
push eax
push dword [0x54a9b8]
push 0x7d0
push dword [0x56a2e4]
push 0
push 0
push 0
push 0
push 0x56010004
push 0x4f9d20
push 0x50aeb0
push 0
call esi
push 0x60
push dword [0x53a8bc]
mov dword [0x54fecc], eax
push 0x4b
mov dword [ebp - 0x15c], eax
call ebx
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x17c]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x56a2e4]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 4
call edi
call fcn.0047d390
test al, al
je 0x4bb6bf
mov eax, dword [0x5619d4]
test eax, eax
je 0x4bb6bf
push eax
push dword [0x54a9b8]
push 0x7d0
push dword [0x56a2e4]
push 0
push 0
push 0
push 0
push 0x56010004
push 0x4f9d20
push 0x50aeb0
push 0
call esi
push 0x60
push dword [0x53a8bc]
mov dword [0x54fed0], eax
push 0x4b
mov dword [ebp - 0x15c], eax
call ebx
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x17c]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x56a2e4]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 5
call edi
call fcn.0047d390
test al, al
je 0x4bb745
mov eax, dword [0x5619ec]
test eax, eax
je 0x4bb745
push eax
push dword [0x54a9b8]
push 0x7d0
push dword [0x56a2e4]
push 0
push 0
push 0
push 0
push 0x56010004
push 0x4f9d20
push 0x50aeb0
push 0
call esi
push 0x60
push dword [0x53a8bc]
mov dword [0x54fed4], eax
push 0x4b
mov dword [ebp - 0x15c], eax
call ebx
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x17c]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x56a2e4]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 6
call edi
cmp dword [0x54a9a0], 0
je 0x4bb7c7
push dword [0x550ac0]
push dword [0x54a9b8]
push 0x7d0
push dword [0x56a2e4]
push 0
push 0
push 0
push 0
push 0x56010004
push 0x4f9d20
push 0x50aeb0
push 0
call esi
push 0x60
push dword [0x53a8bc]
mov dword [0x54fec8], eax
push 0x4b
mov dword [ebp - 0x15c], eax
call ebx
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x17c]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x56a2e4]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 7
call edi
call fcn.00475020
cmp dword [0x54f6f8], 0xffffffff
je 0x4bb884
xor ebx, ebx
xor esi, esi
nop dword [eax]
push 0
push dword [esi + 0x54f6fc]
push 0x410
push dword [0x56a2e4]
call edi
push ebx
push eax
push 0x427
push dword [0x56a2e4]
call edi
lea eax, [ebp - 0x17c]
push eax
push ebx
push 0x41c
push dword [0x56a2e4]
call edi
cmp byte [esi + 0x54f700], 0
mov dword [ebp - 0x178], 0x141
je 0x4bb835
or dword [ebp - 0x174], 1
jmp 0x4bb83c
and dword [ebp - 0x174], 0xfffffffe
push 0x60
push dword [0x53a8bc]
push dword [esi + 0x54f6f8]
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp - 0x150], eax
mov eax, dword [esi + 0x54f6fc]
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x17c]
push eax
push ebx
push 0x40b
push dword [0x56a2e4]
call edi
add esi, 0xc
inc ebx
cmp esi, 0x6c
jb 0x4bb7e0
mov ecx, dword [ebp - 4]
mov eax, dword [0x54feb4]
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.004c34b7
mov esp, ebp
pop ebp
ret