Function at 0x430dc7
Capabilities:
Get graphical window text

Disassembly:
mov eax, 0x480b2c
call fcn.0047bf20
sub esp, 0x68
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov esi, ecx
xor ebx, ebx
cmp eax, 0x10
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x28], esi
mov dword [ebp - 4], ebx
ja 0x430e9d
je 0x430e91
dec eax
dec eax
je 0x430e76
sub eax, 3
je 0x430e6d
dec eax
je 0x430e3e
dec eax
je 0x430e24
dec eax
jne 0x4311d9
call fcn.0042e8f7
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x10
mov ecx, dword [0x4ae880]
mov eax, dword [ebp + 8]
mov dword [ecx + 4], eax
push dword [esi + 0x694]
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x430e11
mov eax, dword [ebp + 0x10]
shr eax, 0x10
cmp word [ebp + 0x10], bx
jne 0x430e55
cmp byte [esi + 0x6a0], bl
je 0x430e11
push ebx
jmp 0x430e64
cmp ax, bx
jne 0x430e11
cmp byte [esi + 0x6a0], bl
je 0x430e11
push 1
mov ecx, esi
call fcn.0042df86
jmp 0x430e11
mov ecx, esi
call fcn.0042fa0c
jmp 0x430e11
push dword [esi + 0x87c]
push dword [esi + 0x694]
call dword [sym.imp.USER32.dll_ChangeClipboardChain]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x430e11
mov ecx, esi
call fcn.00430520
jmp 0x430e11
cmp eax, 0x4e
je 0x431214
cmp eax, 0x110
jbe 0x4311d9
cmp eax, 0x112
jbe 0x430ef8
cmp eax, 0x113
je 0x430ee9
cmp eax, 0x402
jne 0x4311d9
push ebx
push 0x1f4
push 3
push dword [esi + 0x68c]
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [esi + 0x888], eax
jmp 0x430e11
push dword [ebp + 0x10]
mov ecx, esi
call fcn.00430c33
jmp 0x430e11
movzx eax, word [ebp + 0x10]
mov edi, 0x9f
cmp eax, edi
jg 0x4310a9
je 0x43106a
cmp eax, 0x6a
jg 0x430fef
je 0x430fdd
sub eax, 0x65
je 0x430fd4
dec eax
je 0x430fb5
dec eax
je 0x430fa2
dec eax
jne 0x4311d9
cmp byte [esi + 0xb04], bl
je 0x430e11
push 1
push 0xffe3
mov ecx, esi
call fcn.004323c0
push 1
push 0xffe5
mov ecx, esi
call fcn.004323c0
mov edi, 0xffff
push 1
push edi
mov ecx, esi
call fcn.004323c0
push ebx
push edi
mov ecx, esi
call fcn.004323c0
push ebx
push 0xffe5
mov ecx, esi
call fcn.004323c0
push ebx
push 0xffe3
mov ecx, esi
call fcn.004323c0
push 1
push ebx
push ebx
mov ecx, esi
call fcn.00433278
jmp 0x430e11
push 0xffe5
push 0x67
mov ecx, esi
call fcn.00430c6e
jmp 0x430e11
cmp byte [esi + 0xb04], bl
je 0x430e11
mov edi, 0xffeb
push 1
push edi
mov ecx, esi
call fcn.004323c0
push ebx
push edi
jmp 0x430f8b
push 0xffe3
push 0x65
jmp 0x430fa9
cmp byte [esi + 0x850], bl
je 0x430e11
mov byte [ebp + 0x13], 0x33
jmp 0x43105d
sub eax, 0x6d
je 0x43104d
sub eax, 3
je 0x43102f
dec eax
je 0x431016
dec eax
jne 0x4311d9
lea eax, [esi + 0x6a0]
cmp byte [eax], bl
sete cl
mov byte [eax], cl
push ecx
jmp 0x430e64
cmp byte [esi + 0xb04], bl
je 0x430e11
mov ecx, esi
call fcn.004300e6
mov byte [ebp + 0x13], 0x2b
jmp 0x43105d
cmp dword [ebp + 0x14], 0x10000
push 1
mov ecx, esi
sete al
mov byte [ebp + 0x10], al
push dword [ebp + 0x10]
call fcn.0043485a
jmp 0x430e11
cmp byte [esi + 0x850], bl
je 0x430e11
mov byte [ebp + 0x13], 0x32
push 1
lea eax, [ebp + 0x13]
push 1
push eax
jmp 0x430f96
push ebx
push edi
push dword [esi + 0x688]
call dword [sym.imp.USER32.dll_GetMenuState]
test al, 1
je 0x431080
xor al, al
jmp 0x431085
shr eax, 3
and al, 1
neg al
sbb eax, eax
and al, 0xf8
add eax, 8
push eax
push edi
push dword [esi + 0x688]
call dword [sym.imp.USER32.dll_CheckMenuItem]
push ebx
mov ecx, esi
call fcn.0042f7f9
jmp 0x430e11
mov ecx, 0x3f5
cmp eax, ecx
jg 0x4311ad
je 0x4311a1
sub eax, 0xa0
je 0x43118f
dec eax
je 0x431183
dec eax
je 0x4310e8
sub eax, 0x352
jne 0x4311d9
mov ecx, esi
call fcn.0043191c
jmp 0x430e11
cmp byte [esi + 0x850], bl
jne 0x430e11
lea ecx, [esi + 0x228]
call fcn.0042c635
push eax
lea ecx, [ebp + 0x10]
call fcn.0042bf7c
lea eax, [esi + 0x76c]
lea ecx, [ebp - 0x38]
push eax
mov byte [ebp - 4], 0xd
call fcn.0041170f
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
add esi, 0x68c
push 0xf020
push 0x112
mov byte [ebp - 4], 0xe
push dword [esi]
call edi
push ebx
push ebx
push 0x10
push dword [esi]
call edi
lea eax, [ebp - 0x38]
push eax
push 0x64
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push 0x4ade80
call fcn.0042bf7c
mov ecx, dword [0x4adfdc]
lea eax, [ebp + 0x10]
push eax
call fcn.00414505
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xd
call fcn.0042bebc
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], bl
call fcn.0042bebc
jmp 0x430e11
mov ecx, esi
call fcn.0043173a
jmp 0x430e11
push ebx
push ebx
push 0x10
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x430e11
mov ecx, esi
call fcn.00431b98
jmp 0x430e11
cmp eax, 0x3f6
je 0x431208
cmp eax, 0x9c4a
je 0x4311fc
cmp eax, 0xf020
je 0x4311f0
cmp eax, 0xf120
jne 0x4311d9
cmp byte [esi + 0x850], bl
je 0x4311d9
push ebx
mov ecx, esi
call fcn.00433191
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_DefWindowProcW]
jmp 0x430e13
cmp byte [esi + 0x850], bl
je 0x4311d9
push 1
jmp 0x4311d2
mov ecx, esi
call fcn.0043188b
jmp 0x430e11
mov ecx, esi
call fcn.0043163e
jmp 0x430e11
mov edi, dword [ebp + 0x14]
mov eax, dword [edi + 8]
cmp eax, 0xfffffd3a
jne 0x431414
mov eax, dword [edi + 0x2c]
push 1
mov dword [ebp - 0x38], eax
mov eax, dword [edi + 0x38]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x38]
push eax
push ebx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MapWindowPoints]
push 0x9e
push 0x400000
call dword [sym.imp.USER32.dll_LoadBitmapA]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], ebx
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 2
call fcn.00406a4a
lea eax, [ebp - 0x44]
push 4
push eax
call fcn.00430cf9
pop ecx
mov dword [ebp + 0xc], eax
pop ecx
mov dword [ebp + 0x10], ebx
mov byte [ebp - 4], 4
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov dword [ebp + 0x10], eax
lea eax, [ebp - 0x18]
mov edi, 0x4adff0
push 0x7d
push eax
mov ecx, edi
call fcn.0041ea15
push ebx
push eax
push 0x6a
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 5
call fcn.0043159b
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 4
call fcn.0042bebc
lea eax, [ebp - 0x1c]
push 0x7e
push eax
mov ecx, edi
call fcn.0041ea15
push ebx
push eax
push 0x72
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 6
call fcn.0043159b
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 4
call fcn.0042bebc
push ebx
push ebx
push 0x800
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_AppendMenuA]
push 0xb
xor eax, eax
pop ecx
lea edi, [ebp - 0x70]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x74], 0x30
mov dword [ebp - 0x70], 0xc2
push 0x68
mov eax, dword [ebp + 0xc]
pop edi
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x74]
push eax
push ebx
push edi
mov dword [ebp - 0x64], edi
push dword [ebp + 0x10]
mov dword [ebp - 0x50], str.CtrlAltDel
call dword [sym.imp.USER32.dll_InsertMenuItemA]
lea eax, [ebp - 0x20]
push 0x7f
push eax
mov ecx, 0x4adff0
call fcn.0041ea15
push ebx
push eax
push 0x6d
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 7
call fcn.0043159b
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.0042bebc
cmp byte [esi + 0xb04], bl
je 0x431372
mov eax, dword [esi + 0x824]
mov byte [ebp + 0x14], 1
shr eax, 1
test al, 1
jne 0x431375
mov byte [ebp + 0x14], bl
push ebx
lea ecx, [ebp + 0x10]
push dword [ebp + 0x14]
push 0x6a
call fcn.004315e9
push ebx
lea ecx, [ebp + 0x10]
push dword [ebp + 0x14]
push edi
call fcn.004315e9
push ebx
lea ecx, [ebp + 0x10]
push dword [ebp + 0x14]
push 0x6d
call fcn.004315e9
mov al, byte [esi + 0x6a0]
cmp al, bl
mov byte [ebp - 0x24], al
je 0x4313af
mov byte [ebp + 0x14], 1
push dword [ebp - 0x24]
lea ecx, [ebp + 0x10]
push dword [ebp + 0x14]
push 0x72
call fcn.004315e9
push ebx
push dword [ebp + 8]
push ebx
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push ebx
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_TrackPopupMenu]
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 3
call fcn.00431567
cmp dword [ebp + 0xc], ebx
je 0x4313ee
push dword [ebp + 0xc]
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [ebp - 0x44], ebx
je 0x4313fd
push dword [ebp - 0x44]
call dword [sym.imp.MSVCRT.dll_free]
pop ecx
cmp dword [ebp - 0x14], ebx
je 0x430e11
push dword [ebp - 0x14]
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x430e11
cmp eax, 0xfffffdee
jne 0x430e11
mov eax, dword [edi + 4]
cmp eax, 0x71
ja 0x4314be
je 0x4314a5
sub eax, 0x65
je 0x431499
dec eax
je 0x43148d
dec eax
je 0x431481
dec eax
dec eax
je 0x431475
sub eax, 7
jne 0x430e11
lea eax, [ebp + 0x10]
push 0x79
push eax
mov ecx, 0x4adff0
call fcn.0041ea15
mov byte [ebp - 4], 8
mov ecx, eax
call fcn.0042c635
lea ecx, [ebp + 0x10]
mov esi, eax
mov byte [ebp - 4], bl
call fcn.0042bebc
mov dword [edi + 0xc], esi
jmp 0x430e11
mov dword [edi + 0xc], str.Actions_with_remote_computer
jmp 0x430e11
mov dword [edi + 0xc], 0x4a4618
jmp 0x430e11
mov dword [edi + 0xc], str.WinKey
jmp 0x430e11
mov dword [edi + 0xc], str.Ctrl
jmp 0x430e11
lea eax, [ebp + 0x10]
push 0x80
push eax
mov ecx, 0x4adff0
call fcn.0041ea15
mov byte [ebp - 4], 9
jmp 0x431459
sub eax, 0xa1
je 0x43152a
dec eax
je 0x43150e
sub eax, 0x352
je 0x431502
dec eax
je 0x4314f6
sub eax, 0x9855
jne 0x430e11
lea eax, [ebp + 0x10]
push 0x12
push eax
mov ecx, 0x4adff0
call fcn.0041ea15
mov byte [ebp - 4], 0xc
jmp 0x431459
mov dword [edi + 0xc], str.Encoder_settings
jmp 0x430e11
mov dword [edi + 0xc], str.Connection_settings
jmp 0x430e11
lea eax, [ebp + 0x10]
push 0x81
push eax
mov ecx, 0x4adff0
call fcn.0041ea15
mov byte [ebp - 4], 0xa
jmp 0x431459
lea eax, [ebp + 0x10]
push 0x13
push eax
mov ecx, 0x4adff0
call fcn.0041ea15
mov byte [ebp - 4], 0xb
jmp 0x431459