Function at 0x44f0a0
Capabilities:
Get graphical window text
Read file on windows

Disassembly:
push 0xffffffffffffffff
push 0x4789fc
mov eax, dword fs:[0]
push eax
sub esp, 0x170
mov eax, dword [0x4951c0]
xor eax, esp
mov dword [esp + 0x168], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4951c0]
xor eax, esp
push eax
lea eax, [esp + 0x184]
mov dword fs:[0], eax
mov eax, dword [esp + 0x194]
mov ecx, dword [str.envdata]
mov dword [esp + 0x40], eax
mov eax, dword [0x49a31c]
xor ebx, ebx
mov dword [eax], ecx
mov edx, dword [0x485fd8]
push ebx
push eax
mov dword [eax + 4], edx
call fcn.00408562
add esp, 8
test eax, eax
jne 0x44f6ed
mov eax, dword [0x49a31c]
push 0x48b1d4
push eax
mov dword [esp + 0x2c], ebx
call fcn.00408bd7
mov esi, eax
mov dword [esp + 0x28], esi
push esi
mov dword [esp + 0x198], ebx
push 1
lea ecx, [esp + 0x48]
push 4
push ecx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x40], ebx
call fcn.00408e8e
add esp, 0x18
test eax, eax
jne 0x44f15f
mov dword [esp + 0x38], ebx
push esi
push 1
lea edx, [esp + 0x44]
push 4
push edx
call fcn.00408e8e
add esp, 0x10
test eax, eax
jne 0x44f179
mov dword [esp + 0x3c], ebx
push esi
push 1
lea eax, [esp + 0x34]
push 4
push eax
call fcn.00408e8e
add esp, 0x10
test eax, eax
jne 0x44f193
mov dword [esp + 0x2c], ebx
push esi
push 1
lea ecx, [esp + 0x3c]
push 4
push ecx
call fcn.00408e8e
add esp, 0x10
test eax, eax
jne 0x44f1ad
mov dword [esp + 0x34], ebx
push 0x100
lea ecx, [esp + 0x80]
lea esi, [esp + 0x1c]
call fcn.004026c0
cmp dword [esp + 0x24], ebx
je 0x44f1f8
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x28]
mov dword [eax], edx
add eax, 4
mov dword [esp + 0x18], eax
sub eax, dword [esp + 0x1c]
cmp eax, 0x32000
jl 0x44f216
push 0x48b2e8
push 0x48b1d8
call fcn.00458fe0
add esp, 8
jmp 0x44f216
mov eax, dword [esp + 0x20]
push eax
push 1
lea ecx, [esp + 0x30]
push 4
push ecx
call fcn.00408e8e
add esp, 0x10
test eax, eax
jne 0x44f216
mov dword [esp + 0x28], ebx
mov edx, dword [0x49a31c]
mov eax, dword [0x49ab6c]
mov ecx, dword [eax + 0x10]
push 0x100
push edx
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov eax, dword [0x49a31c]
cmp byte [eax], 0x4f
jne 0x44f255
cmp byte [eax + 1], 0x4e
jne 0x44f255
cmp byte [eax + 2], 0x45
jne 0x44f255
cmp byte [eax + 3], 0x32
jne 0x44f255
push 0x10
lea ecx, [esp + 0x70]
jmp 0x44f26c
cmp dword [0x58fccc], ebx
jne 0x44f266
push 0xa
mov ecx, 0x58fab0
jmp 0x44f26c
push 0xb
lea ecx, [esp + 0x64]
lea esi, [esp + 0x1c]
call fcn.004026c0
xor eax, eax
mov dword [0x54a8b8], ebx
mov dword [0x54c2dc], eax
mov dword [0x54ad08], ebx
cmp dword [esp + 0x24], ebx
je 0x44f31c
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
add esi, 4
mov dword [esi - 4], eax
mov edx, esi
sub edx, edi
cmp edx, 0x32000
mov dword [esp + 0x18], esi
jl 0x44f2c2
push 0x48b2e8
push 0x48b1d8
call fcn.00458fe0
add esp, 8
mov eax, dword [0x54a8b8]
add esi, 4
mov dword [esi - 4], eax
mov ecx, esi
sub ecx, edi
cmp ecx, 0x32000
mov dword [esp + 0x18], esi
jl 0x44f2ef
push 0x48b2e8
push 0x48b1d8
call fcn.00458fe0
add esp, 8
mov edx, dword [0x54cb1c]
mov dword [esi], edx
add esi, 4
mov dword [esp + 0x18], esi
sub esi, edi
cmp esi, 0x32000
jl 0x44f374
push 0x48b2e8
push 0x48b1d8
call fcn.00458fe0
add esp, 8
jmp 0x44f374
mov esi, dword [esp + 0x20]
push esi
push 1
push 4
push 0x54c2dc
call fcn.00408e8e
add esp, 0x10
test eax, eax
jne 0x44f33c
mov dword [0x54c2dc], ebx
push esi
push 1
push 4
push 0x54a8b8
call fcn.00408e8e
add esp, 0x10
test eax, eax
jne 0x44f358
mov dword [0x54a8b8], ebx
push esi
push 1
push 4
push 0x54cb1c
call fcn.00408e8e
add esp, 0x10
test eax, eax
jne 0x44f374
mov dword [0x54cb1c], ebx
mov eax, dword [0x54cb1c]
mov dword [0x54ad08], eax
cmp dword [esp + 0x24], ebx
je 0x44f3e6
mov esi, dword [esp + 0x18]
mov ecx, dword [0x54453c]
mov edi, dword [esp + 0x1c]
add esi, 4
mov dword [esi - 4], ecx
mov edx, esi
sub edx, edi
cmp edx, 0x32000
mov dword [esp + 0x18], esi
jl 0x44f3ba
push 0x48b2e8
push 0x48b1d8
call fcn.00458fe0
add esp, 8
mov eax, dword [0x58fe54]
mov dword [esi], eax
add esi, 4
mov dword [esp + 0x18], esi
sub esi, edi
cmp esi, 0x32000
jl 0x44f422
push 0x48b2e8
push 0x48b1d8
call fcn.00458fe0
add esp, 8
jmp 0x44f422
mov esi, dword [esp + 0x20]
push esi
push 1
push 4
push 0x54453c
call fcn.00408e8e
add esp, 0x10
test eax, eax
jne 0x44f406
mov dword [0x54453c], ebx
push esi
push 1
push 4
push 0x58fe54
call fcn.00408e8e
add esp, 0x10
test eax, eax
jne 0x44f422
mov dword [0x58fe54], ebx
push 0x100
mov ecx, 0x58fba8
lea esi, [esp + 0x1c]
call fcn.004026c0
cmp dword [esp + 0x24], ebx
je 0x44f570
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x30]
mov dword [eax], ecx
add eax, 4
mov dword [esp + 0x18], eax
sub eax, dword [esp + 0x1c]
cmp eax, 0x32000
jl 0x44f46d
push 0x48b2e8
push 0x48b1d8
call fcn.00458fe0
add esp, 8
mov eax, dword [esp + 0x30]
cmp eax, ebx
je 0x44f47a
mov dword [0x4967f4], eax
cmp eax, 0x1869f
jne 0x44f487
mov dword [0x4967f4], ebx
xor eax, eax
lea esp, [esp]
mov cl, byte [esp + eax + 0x7c]
mov byte [eax + 0x4ab5b8], cl
inc eax
test cl, cl
jne 0x44f490
xor eax, eax
mov cl, byte [esp + eax + 0x7c]
mov byte [eax + 0x53a0c8], cl
inc eax
test cl, cl
jne 0x44f4a1
mov ebp, dword [sym.imp.USER32.dll_PostMessageA]
cmp dword [esp + 0x38], ebx
je 0x44f4d3
mov ecx, dword [0x49ab6c]
mov edx, dword [ecx + 0x10]
push ebx
push 0x9c42
push 0x111
push edx
call ebp
cmp dword [esp + 0x3c], ebx
jne 0x44f4ef
mov eax, dword [0x49ab6c]
mov ecx, dword [eax + 0x10]
push ebx
push 0x9c52
push 0x111
push ecx
call ebp
cmp dword [esp + 0x28], ebx
jne 0x44f50c
mov edx, dword [0x49ab6c]
mov eax, dword [edx + 0x10]
push ebx
push 0x9c56
push 0x111
push eax
call ebp
cmp dword [0x54453c], ebx
jne 0x44f52b
mov ecx, dword [0x49ab6c]
mov edx, dword [ecx + 0x10]
push ebx
push 0x9c5a
push 0x111
push edx
call ebp
cmp dword [esp + 0x34], ebx
je 0x44f547
mov eax, dword [0x49ab6c]
mov ecx, dword [eax + 0x10]
push ebx
push 0x9c47
push 0x111
push ecx
call ebp
mov eax, dword [esp + 0x2c]
sub eax, ebx
je 0x44f5ae
sub eax, 1
je 0x44f597
sub eax, 1
jne 0x44f5c4
mov edx, dword [0x49ab6c]
mov eax, dword [edx + 0x10]
push ebx
push 0x9c50
push 0x111
push eax
jmp 0x44f5c2
mov edx, dword [esp + 0x20]
push edx
push 1
lea eax, [esp + 0x38]
push 4
push eax
call fcn.00408e8e
add esp, 0x10
test eax, eax
jne 0x44f46d
mov dword [esp + 0x30], ebx
jmp 0x44f487
mov ecx, dword [0x49ab6c]
mov edx, dword [ecx + 0x10]
push ebx
push 0x9c4f
push 0x111
push edx
jmp 0x44f5c2
mov eax, dword [0x49ab6c]
mov ecx, dword [eax + 0x10]
push ebx
push 0x9c4e
push 0x111
push ecx
call ebp
mov ecx, 0x496808
lea eax, [esp + 0x7c]
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x44f5f0
test dl, dl
je 0x44f5ec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x44f5f0
add eax, 2
add ecx, 2
test dl, dl
jne 0x44f5d0
xor eax, eax
jmp 0x44f5f5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x44f660
mov ebx, dword [0x4eeed0]
xor esi, esi
test ebx, ebx
jle 0x44f677
mov edi, 0x4ef068
lea ebx, [ebx]
lea ecx, [esp + 0x7c]
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x44f636
test dl, dl
je 0x44f632
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x44f636
add eax, 2
add ecx, 2
test dl, dl
jne 0x44f616
xor eax, eax
jmp 0x44f63b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x44f64c
inc esi
add edi, 0x3e8
cmp esi, ebx
jl 0x44f610
jmp 0x44f677
mov edx, dword [0x49ab6c]
mov eax, dword [edx + 0x10]
push 0
push esi
push 0x111
push eax
jmp 0x44f675
mov ecx, dword [0x49ab6c]
mov edx, dword [ecx + 0x10]
push ebx
push 0x9c44
push 0x111
push edx
call ebp
mov esi, dword [sym.imp.USER32.dll_PeekMessageA]
mov edi, dword [sym.imp.USER32.dll_TranslateAcceleratorA]
mov ebx, dword [sym.imp.USER32.dll_TranslateMessage]
mov ebp, 0x64
mov edi, edi
push 1
push 0
push 0
push 0
lea eax, [esp + 0x54]
push eax
call esi
test eax, eax
je 0x44f6cf
mov edx, dword [0x49ac78]
mov eax, dword [esp + 0x40]
lea ecx, [esp + 0x44]
push ecx
mov ecx, dword [eax + 0x10]
push edx
push ecx
call edi
test eax, eax
jne 0x44f6c4
lea edx, [esp + 0x44]
push edx
call ebx
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
sub ebp, 1
jne 0x44f690
cmp dword [esp + 0x24], ebp
jne 0x44f6ed
cmp dword [esp + 0x20], ebp
je 0x44f6ed
mov ecx, dword [esp + 0x20]
push ecx
call fcn.00409014
add esp, 4
mov ecx, dword [esp + 0x184]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x168]
xor ecx, esp
call fcn.00407f40
add esp, 0x17c
ret 4