Function at 0x4cd230
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x30
mov edx, dword [esp + 0x3c]
push ebx
push ebp
mov ebp, dword [esp + 0x40]
imul ebp, ebp, 0x170
push esi
mov esi, dword [esp + 0x40]
mov eax, dword [esi + 0x3434]
mov ecx, dword [eax + ebp + 0x84]
mov ebx, dword [eax + ebp + 0xa4]
add eax, ebp
push edi
mov dword [esp + 0x44], ecx
mov ecx, dword [esi + 0x500]
push 0x5a0
mov dword [esp + 0x34], edx
mov edx, dword [eax + 0xb4]
push ecx
push edx
xor edi, edi
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, dword [esi + 0x3434]
mov edx, dword [ecx + ebp + 0xb0]
mov dword [esp + 0x34], eax
mov eax, dword [esi + 0x500]
push 0x5a0
push eax
push edx
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [esp + 0x24], eax
mov eax, dword [ebx + 0x874]
test al, 1
je 0x4cd2b9
mov edi, 2
cmp dword [ebx + 0x884], 0
jge 0x4cd320
movzx ecx, byte [ebx + 0x878]
push 0
push 0
push ecx
push 0
push 0
push 0
mov edx, dword [ebx + 0x880]
mov ecx, dword [ebx + 0x87c]
push 0
push edi
push 0
push 0
push 0
push 0
push 0
push 0
push 0x10101
push edx
mov edx, dword [ebx + 0x870]
push ecx
mov ecx, dword [esi + 0x3a0]
and eax, 7
push eax
push edx
lea eax, [ebx + 0x830]
push eax
push 0
push ecx
push esi
call fcn.004a9100
add esp, 0x5c
mov dword [ebx + 0x884], eax
mov edi, dword [ebx + 0x884]
test edi, edi
jl 0x4cd91e
mov edx, dword [esi + 0x3434]
imul edi, edi, 0x170
mov ecx, dword [esp + 0x44]
mov eax, dword [edi + edx]
push 0
push 0
push 0xd4
push ecx
mov dword [esp + 0x2c], eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [esp + 0x1c]
push 0
push edx
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x4c]
push 0x30
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [esp + 0x4c]
mov ecx, eax
shr ecx, 0x10
movzx edx, ax
mov eax, dword [esp + 0x44]
shl ecx, 0x10
or ecx, edx
push ecx
push 3
push 0xd3
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [esi + 0x3434]
mov dword [ecx + ebp + 0xbc], 1
test dword [ebx + 0x3c], 0x800000
je 0x4cd3cd
mov ecx, dword [esi + 0x3434]
mov edi, dword [ecx + edi + 0x128]
lea eax, [edi + edi*4]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [ecx + ebp + 0x128], eax
jmp 0x4cd3e1
mov eax, dword [esi + 0x3434]
mov edx, dword [eax + edi + 0x128]
mov dword [eax + ebp + 0x128], edx
cmp dword [esp + 0x50], 0
je 0x4cd415
mov eax, dword [esi + 0x504]
mov ecx, dword [esi + 0x3434]
mov edx, dword [ecx + ebp + 0x128]
push eax
push 0x5a0
push edx
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov ecx, dword [esi + 0x3434]
mov dword [ecx + ebp + 0xb0], eax
mov edx, dword [esp + 0x44]
push edx
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
mov edi, eax
mov eax, dword [ebx + 0x50]
test eax, eax
mov dword [esp + 0x4c], edi
jne 0x4cd453
test edi, edi
jle 0x4cd453
lea eax, [edi + 1]
push eax
call fcn.004e27e0
add esp, 4
lea ecx, [edi + 1]
push ecx
push eax
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x4c]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
jmp 0x4cd48f
mov edi, eax
test edi, edi
mov dword [esp + 0x4c], edi
jne 0x4cd469
mov dword [esp + 0x4c], 0x14
mov edi, dword [esp + 0x4c]
lea ecx, [edi + 1]
push ecx
call fcn.004e27e0
add esp, 4
test edi, edi
mov dword [esp + 0x14], eax
jle 0x4cd48b
push edi
mov edx, eax
push 0x61
push edx
call fcn.005abb20
add esp, 0xc
mov edi, dword [esp + 0x4c]
test edi, edi
mov eax, dword [esp + 0x14]
mov byte [eax + edi], 0
jle 0x4cd8c9
mov eax, dword [esi + 0x4b4]
lea ecx, [eax + eax*4]
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [esp + 0x1c]
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [esi + 0x3a0]
push ecx
push edx
mov dword [esp + 0x30], 0
mov dword [esp + 0x18], edi
mov dword [esp + 0x20], 0xffffffff
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x38]
push eax
mov eax, dword [esi + 0x3a0]
push ecx
push edx
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 0x3a0]
push ecx
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
test byte [ebx + 0x88c], 2
je 0x4cd53d
mov eax, dword [esi + 0x500]
mov ecx, dword [esi + 0x3434]
mov edx, dword [ecx + ebp + 0xb4]
push 0x5a0
push eax
push edx
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [esp + 0x10], eax
mov edi, eax
mov edx, dword [esp + 0x48]
xor eax, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x34], eax
lea eax, [esp + 0x34]
push eax
mov eax, dword [esi + 0x39c]
lea ecx, [esp + 0x1c]
push ecx
push edx
push eax
call fcn.004ea180
test eax, eax
je 0x4cd5a3
mov ecx, dword [esp + 0x18]
push 0xffffffffffffffff
push ecx
push esi
call fcn.004f8120
lea ecx, [eax + eax*4]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add esp, 0xc
add eax, edx
mov edx, dword [esi + 0x138]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x18]
mov ecx, dword [edx + eax*4]
mov edx, dword [ecx + 0x2c]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x28], edx
lea eax, [ebx + 0x441]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
xor ecx, ecx
cmp eax, ecx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x48], ecx
jle 0x4cd5db
mov al, byte [esi + 0xb50]
cmp byte [ebx + ecx + 0x441], al
jne 0x4cd5d2
add dword [esp + 0x48], 1
add ecx, 1
cmp ecx, dword [esp + 0x4c]
jl 0x4cd5c4
mov eax, dword [esp + 0x38]
cmp eax, edi
jg 0x4cd5ee
cmp dword [esp + 0x48], 0
jle 0x4cd876
cdq
idiv edi
mov ecx, dword [esp + 0x48]
lea edx, [eax + ecx + 1]
mov dword [esp + 0x20], edx
lea ecx, [ecx]
mov eax, dword [esi + 0x3434]
lea eax, [eax + ebp + 0x128]
mov dword [esp + 0x38], edi
mov ecx, dword [eax]
imul ecx, dword [esp + 0x20]
mov dword [eax], ecx
mov eax, dword [esp + 0x28]
test eax, eax
jle 0x4cd690
mov edx, dword [esi + 0x588c]
imul eax, eax, 0x84
mov eax, dword [edx + eax + 4]
mov ecx, dword [esi + 0x5884]
imul eax, eax, 0x68
mov eax, dword [ecx + eax + 0x4c]
test eax, eax
jge 0x4cd690
mov edx, dword [esi + 0x504]
mov edi, dword [sym.imp.KERNEL32.dll_MulDiv]
push 0x5a0
push edx
cdq
xor eax, edx
sub eax, edx
push eax
call edi
lea ecx, [eax + eax*4]
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [esi + 0x3434]
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ecx + ebp + 0x128], eax
lea ecx, [ecx + ebp + 0x128]
jle 0x4cd696
mov dword [ecx], eax
mov dword [esp + 0x50], 1
jmp 0x4cd69d
mov edi, dword [sym.imp.KERNEL32.dll_MulDiv]
cmp dword [esp + 0x50], 0
je 0x4cd6c6
mov edx, dword [esi + 0x504]
mov eax, dword [esi + 0x3434]
mov ecx, dword [eax + ebp + 0x128]
push edx
push 0x5a0
push ecx
call edi
mov edx, dword [esi + 0x3434]
mov dword [edx + ebp + 0xb0], eax
mov eax, dword [esi + 0x3434]
mov ecx, dword [eax + ebp + 0x84]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov edx, dword [ebx + 0x3c]
and edx, 0xffffff7f
or edx, 4
mov dword [ebx + 0x3c], edx
mov eax, dword [esi + 0x3434]
mov dword [eax + ebp + 0xbc], 2
test byte [ebx + 0x88c], 2
mov ecx, dword [esi + 0x3434]
mov edx, dword [ecx + ebp + 0x128]
mov dword [esp + 0x24], edx
je 0x4cd730
mov eax, dword [esi + 0x500]
mov edx, dword [ecx + ebp + 0xb4]
push 0x5a0
push eax
push edx
call edi
mov dword [esp + 0x38], eax
jmp 0x4cd734
mov eax, dword [esp + 0x38]
mov ecx, dword [0x622d98]
mov edx, dword [ebx + 0x40]
push 0
push ecx
mov ecx, dword [esi + 0x39c]
push edx
mov edx, dword [esp + 0x30]
push ecx
mov ecx, dword [esi + 0x410]
push edx
mov edx, dword [ebx + 0x3c]
push eax
mov dword [esp + 0x48], eax
mov eax, dword [esi + 0x414]
push eax
push ecx
push edx
push 0x5da43c
push ebx
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0
push 0
mov edi, eax
mov eax, dword [esi + 0x3434]
push 0xd4
push edi
mov dword [eax + ebp + 0x84], edi
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [esp + 0x1c]
push 0
push ecx
push 0x30
push edi
mov dword [esp + 0x5c], eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [esp + 0x4c]
mov edx, eax
shr edx, 0x10
movzx eax, ax
shl edx, 0x10
or edx, eax
push edx
push 3
push 0xd3
push edi
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [esp + 0x48], 0
lea eax, [ebx + 0x441]
push eax
jne 0x4cd7dc
push edi
call dword [sym.imp.USER32.dll_SetWindowTextA]
jmp 0x4cd84f
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [esp + 0x48]
lea edx, [eax + ecx + 1]
push edx
mov dword [esp + 0x50], eax
call fcn.004e2930
mov edx, dword [esp + 0x50]
add edx, 1
add esp, 4
test edx, edx
mov dword [esp + 0x2c], eax
jle 0x4cd83a
mov ecx, eax
lea eax, [ebx + 0x441]
mov dword [esp + 0x4c], edx
mov dl, byte [eax]
cmp dl, byte [esi + 0xb50]
jne 0x4cd827
mov byte [ecx], 0xd
add ecx, 1
mov byte [ecx], 0xa
jmp 0x4cd829
mov byte [ecx], dl
add eax, 1
add ecx, 1
sub dword [esp + 0x4c], 1
jne 0x4cd812
mov eax, dword [esp + 0x2c]
push eax
push edi
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, dword [esp + 0x2c]
push eax
call fcn.004e2910
add esp, 4
push 0
push 0
push 0xba
push edi
call dword [sym.imp.USER32.dll_SendMessageA]
cmp eax, dword [esp + 0x20]
je 0x4cd872
mov edi, dword [esp + 0x10]
mov dword [esp + 0x20], eax
jmp 0x4cd600
mov eax, dword [esp + 0x38]
test byte [ebx + 0x88c], 2
je 0x4cd8a3
mov ecx, dword [esi + 0x500]
mov edx, dword [esi + 0x3434]
mov eax, dword [edx + ebp + 0xb4]
push 0x5a0
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [esp + 0x38], eax
mov ecx, dword [esi + 0x500]
push ecx
push 0x5a0
push eax
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edx, dword [esi + 0x3434]
mov dword [edx + ebp + 0xb4], eax
mov edi, dword [esp + 0x38]
jmp 0x4cd8cd
mov edi, dword [esp + 0x34]
mov eax, dword [esp + 0x14]
push eax
call fcn.004e2860
mov ecx, dword [esi + 0x3434]
mov ebp, dword [ecx + ebp + 0x128]
add esp, 4
cmp ebp, dword [esp + 0x24]
jne 0x4cd8f3
cmp edi, dword [esp + 0x30]
je 0x4cd908
mov edx, dword [esp + 0x44]
push 0xe
push ebp
push edi
push 0
push 0
push 0
push edx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [ebx + 0x50]
mov ecx, dword [esp + 0x44]
push 0
push eax
push 0xc5
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x30
ret