Function at 0x48a870
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4e865b
mov eax, dword fs:[0]
push eax
sub esp, 0x240
mov eax, dword [0x50e74c]
xor eax, esp
mov dword [esp + 0x238], eax
push ebx
push esi
push edi
mov eax, dword [0x50e74c]
xor eax, esp
push eax
lea eax, [esp + 0x250]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, dword [ebp + 0xc]
lea eax, [esp + 0x40]
push eax
push ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x1f], 0
mov dword [esp + 0x48], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [esp + 0x40]
cmp eax, dword [ebp + 8]
je 0x48a8e2
xor al, al
jmp 0x48a9fb
push 1
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [esp + 0x1c], eax
xor eax, eax
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
mov dword [esp + 0x258], eax
push 0x1fe
push eax
mov word [esp + 0x4c], ax
lea eax, [esp + 0x4e]
push eax
call fcn.004cb9a0
add esp, 0xc
lea eax, [esp + 0x44]
push 0xff
push eax
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextW]
cmp word [esp + 0x44], 0
jne 0x48a952
xor ecx, ecx
jmp 0x48a96f
lea ecx, [esp + 0x44]
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x48a960
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x30]
call fcn.00403120
push 7
push 0
push 0x4febf0
lea ecx, [esp + 0x34]
call fcn.0047eb80
cmp eax, 0xffffffff
je 0x48aa21
push 2
push 0
push 0x4febe8
lea ecx, [esp + 0x34]
call fcn.0047eb80
cmp eax, 0xffffffff
je 0x48aa21
push 0
push 0
push 0xbd8
push ebx
call dword [sym.imp.USER32.dll_PostMessageW]
mov bl, byte [esp + 0x17]
mov dword [esp + 0x258], 0xffffffff
cmp dword [esp + 0x3c], 8
jb 0x48a9e2
push dword [esp + 0x28]
call fcn.004c515a
add esp, 4
xor eax, eax
mov dword [esp + 0x3c], 7
mov word [esp + 0x28], ax
mov al, bl
mov dword [esp + 0x38], 0
mov ecx, dword [esp + 0x250]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x238]
xor ecx, esp
call fcn.004c515f
mov esp, ebp
pop ebp
ret 8
push 9
push 0
push 0x4fec20
lea ecx, [esp + 0x34]
call fcn.0047eb80
cmp eax, 0xffffffff
je 0x48aa90
push 2
push 0
push 0x4febe8
lea ecx, [esp + 0x34]
call fcn.0047eb80
cmp eax, 0xffffffff
je 0x48aa90
push 0x4fec20
push 0
push 0
push ebx
call dword [sym.imp.USER32.dll_FindWindowExW]
mov edi, dword [sym.imp.USER32.dll_PostMessageW]
mov esi, eax
push 0
push 0
push 0xbd8
push ebx
call edi
push 0
push 0
push 0x7f0
push esi
call edi
push 0
push 0
push 0x7f0
push ebx
call edi
jmp 0x48a9c0
push 0xa
push 0
push 0x4fec00
lea ecx, [esp + 0x34]
call fcn.0047eb80
mov esi, dword [sym.imp.USER32.dll_FindWindowExW]
cmp eax, 0xffffffff
je 0x48ab09
push 0
push 0x4febe8
lea ecx, [esp + 0x30]
call fcn.0047e430
cmp eax, 0xffffffff
je 0x48ab09
push 0x4fec44
push 0
push 0
push ebx
call esi
test eax, eax
je 0x48ab09
push 0x4fec44
push 0
push 0
push ebx
call esi
test eax, eax
je 0x48a9c0
mov esi, dword [sym.imp.USER32.dll_PostMessageW]
push 0
push 0
push 0x7f0
push eax
call esi
push 0
push 0
push 0x7f0
push ebx
call esi
jmp 0x48a9c0
push 6
push 0
push 0x4fec34
lea ecx, [esp + 0x34]
call fcn.0047eb80
cmp eax, 0xffffffff
je 0x48ab4f
push 0
push 0x4febe8
lea ecx, [esp + 0x30]
call fcn.0047e430
cmp eax, 0xffffffff
je 0x48ab4f
push 0x4fec84
push 0
push 0
push ebx
call esi
push 0
push 0
push 0x7f0
jmp 0x48a9b9
push 9
push 0
push 0x4fec70
lea ecx, [esp + 0x34]
call fcn.0047eb80
cmp eax, 0xffffffff
je 0x48abe4
push 0
push 0x4febe8
lea ecx, [esp + 0x30]
call fcn.0047e430
cmp eax, 0xffffffff
je 0x48abe4
push 0x4fecb4
push 0
push 0
push ebx
call esi
test eax, eax
je 0x48abe4
push 0x4fecb4
push 0
push 0
push ebx
call esi
test eax, eax
je 0x48a9c0
mov esi, dword [sym.imp.USER32.dll_PostMessageW]
push 1
push 0x7d0
push 0x7f1
push ebx
call esi
cmp byte [edi + 0x11], 0
je 0x48abc4
cmp byte [edi + 0x45], 0
jne 0x48abc4
push 1
jmp 0x48abc6
push 0
push 0x7d1
push 0x7f1
push ebx
call esi
push 0
push 0
push 0x7f0
push ebx
call esi
jmp 0x48a9c0
push 9
push 0
push 0x4feca0
lea ecx, [esp + 0x34]
call fcn.0047eb80
cmp eax, 0xffffffff
je 0x48ac78
push 0x4fece4
push 0
push 0
push ebx
call esi
mov esi, dword [sym.imp.USER32.dll_PostMessageW]
push 1
push 0x7d3
push 0xbd9
push eax
mov dword [esp + 0x28], eax
call esi
cmp byte [edi + 0x11], 0
je 0x48ac2a
push 1
jmp 0x48ac2c
push 0
push 0x7d2
push 0xbd9
push dword [esp + 0x24]
call esi
cmp byte [edi + 0x10], 0
je 0x48ac46
push 1
jmp 0x48ac48
push 0
push 0x7d5
push 0xbd9
push dword [esp + 0x24]
call esi
push 0
push 0
push 0xbd8
push ebx
call esi
push 0
push 0
push 0xbd8
push dword [esp + 0x24]
call esi
jmp 0x48a9c0
push 0
push 0x4fecd0
lea ecx, [esp + 0x30]
call fcn.0047e430
cmp eax, 0xffffffff
je 0x48ad24
push 0
push 0x4febe8
lea ecx, [esp + 0x30]
call fcn.0047e430
cmp eax, 0xffffffff
je 0x48ad24
push 0x4fed08
push 0
push 0
push ebx
call esi
test eax, eax
je 0x48ad24
push 0x4fed08
push 0
push 0
push ebx
call esi
mov esi, eax
test esi, esi
je 0x48a9c0
mov ebx, dword [sym.imp.USER32.dll_PostMessageW]
push 1
push 0x7d0
push 0x7f1
push esi
call ebx
cmp byte [edi + 0x11], 0
je 0x48aceb
push 1
jmp 0x48aced
push 0
push 0x7d2
push 0x7f1
push esi
call ebx
cmp byte [edi + 0x10], 0
je 0x48ad04
push 1
jmp 0x48ad06
push 0
push 0x7d4
push 0x7f1
push esi
call ebx
push 0
push 0
push 0x7f0
push esi
call ebx
jmp 0x48a9c0
mov esi, dword [esp + 0x1c]
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x48a9c0
push esi
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x48a9c0
mov esi, dword [0x70dc9c]
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.004923e0
cmp dword [eax], esi
jne 0x48a9c0
cmp byte [edi + 0x45], 0
je 0x48ae5a
push 0
push 0x4feca0
lea ecx, [esp + 0x30]
call fcn.0047e430
cmp eax, 0xffffffff
je 0x48ae5a
push 0
push 0x4febe8
lea ecx, [esp + 0x30]
call fcn.0047e430
cmp eax, 0xffffffff
je 0x48ae5a
push 0
push 0x4fed00
lea ecx, [esp + 0x30]
call fcn.0047e430
cmp eax, 0xffffffff
jne 0x48ae5a
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [sym.imp.USER32.dll_FindWindowExW]
push 0
push str.32770
push 0
push ebx
call esi
push eax
mov dword [esp + 0x1c], eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x48ae60
push 0x4fed40
push 0x4b3
push dword [esp + 0x20]
call fcn.0048b040
cmp byte [edi + 0x11], 0
mov byte [esp + 0x20], al
jne 0x48ae29
push 0x4fed30
push 0x4b4
push dword [esp + 0x20]
call fcn.0048b040
mov ecx, dword [esp + 0x20]
test al, al
movzx ecx, cl
mov edx, 1
cmovne ecx, edx
mov dword [esp + 0x20], ecx
cmp byte [edi + 0x10], 0
jne 0x48ae46
push 0x4fed6c
push 0x4b5
push dword [esp + 0x20]
call fcn.0048b040
test al, al
jne 0x48ae4d
cmp byte [esp + 0x20], 0
je 0x48ae60
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x48ae60
mov esi, dword [sym.imp.USER32.dll_FindWindowExW]
cmp byte [edi + 0x46], 0
je 0x48af24
push 0
push 0x4fec70
lea ecx, [esp + 0x30]
call fcn.0047e430
cmp eax, 0xffffffff
je 0x48af24
push 0
push 0x4febe8
lea ecx, [esp + 0x30]
call fcn.0047e430
cmp eax, 0xffffffff
je 0x48af24
push 0
push 0x4fed00
lea ecx, [esp + 0x30]
call fcn.0047e430
cmp eax, 0xffffffff
jne 0x48af24
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push str.32770
push 0
push ebx
call esi
push eax
mov dword [esp + 0x24], eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x48af24
push 0x4fed40
push 0x4b3
push dword [esp + 0x28]
call fcn.0048b040
cmp byte [edi + 0x11], 0
mov byte [esp + 0x17], al
je 0x48aefa
cmp byte [edi + 0x45], 0
je 0x48af15
push 0x4fed30
push 0x4b5
push dword [esp + 0x28]
call fcn.0048b040
test al, al
jne 0x48af19
mov al, byte [esp + 0x17]
test al, al
je 0x48af24
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [edi + 0x44], 0
je 0x48b00d
push 0
push 0x4fec34
lea ecx, [esp + 0x30]
call fcn.0047e430
cmp eax, 0xffffffff
je 0x48b00d
push 0
push 0x4febe8
lea ecx, [esp + 0x30]
call fcn.0047e430
cmp eax, 0xffffffff
je 0x48b00d
push 0xff
lea eax, [esp + 0x48]
push eax
push dword [esp + 0x24]
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x2c]
call fcn.00402ac0
push 0
push 0x4fed00
lea ecx, [esp + 0x30]
call fcn.0047e430
cmp eax, 0xffffffff
jne 0x48b00d
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push str.32770
push 0
push ebx
call esi
push eax
mov dword [esp + 0x24], eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x48afd9
push dword [esp + 0x20]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x48afd9
push eax
push str.32770
push eax
push ebx
call esi
mov esi, eax
jmp 0x48afdd
mov esi, dword [esp + 0x20]
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x48b00d
cmp byte [edi + 0x10], 0
jne 0x48b00d
push 0x4fed50
push 0x4b1
push esi
call fcn.0048b040
test al, al
je 0x48b00d
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
movzx eax, byte [0x70dcf3]
push eax
lea eax, [esp + 0x20]
push eax
push ecx
lea eax, [esp + 0x2c]
push eax
call fcn.00492b30
push 0
push 0
push 0xf5
push 1
push ebx
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov bl, 1
jmp 0x48a9c4