Function at 0x47f1d4
Capabilities:
Get graphical window text
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
add ebx, 0xfffffffc
xor edx, edx
push ebp
push 0x47fac5
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 2
call fcn.0045787c
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 8], eax
push 1
push 1
mov eax, dword [ebp - 8]
mov cl, 1
mov dl, 1
call fcn.0045a4b8
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
call fcn.0045945c
mov edx, eax
mov eax, dword [ebp - 8]
call fcn.00458ddc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
call fcn.00459440
mov edx, eax
mov eax, dword [ebp - 8]
call fcn.00458e20
mov eax, dword [ebp - 8]
mov edx, 0xffffff
call fcn.00458e4c
push 0
push 0xffffffffffffffff
mov ecx, dword [ebp - 4]
mov edx, dword [0x47e748]
xor eax, eax
call fcn.0047ffd8
mov esi, eax
mov eax, dword [ebp - 8]
mov dword [eax + 0xee], esi
mov dword [esi + 0x44], 0xe7edf1
movzx eax, byte [0x47fad8]
mov byte [esi + 0x43], al
mov eax, dword [ebx]
push eax
push 0x482bd4
mov eax, dword [ebp - 8]
call fcn.004592f8
mov eax, dword [ebx]
push eax
push 0x481a68
mov eax, dword [ebp - 8]
call fcn.0045a598
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x10]
push 0
mov eax, dword [ebx]
mov ecx, 0x89a3b9
mov edx, dword [ebp - 4]
call fcn.004817b8
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x8c], esi
mov eax, esi
mov esi, eax
push 0
push 1
mov eax, esi
xor ecx, ecx
mov dl, 1
call fcn.0045a4b8
lea edx, [ebp - 0x10]
mov eax, 0xc
call fcn.0047e8f0
mov edx, dword [ebp - 0x10]
mov eax, esi
call fcn.004588ac
mov eax, 0xd
call fcn.0047ea18
mov edx, eax
mov eax, esi
call fcn.00458d40
mov eax, 0x12a
call fcn.0047ea2c
mov edx, eax
mov eax, esi
call fcn.00458d8c
mov eax, 0xb4
call fcn.0047ea18
mov edx, eax
mov eax, esi
call fcn.00458ddc
mov eax, 0x2d
call fcn.0047ea18
mov edx, eax
mov eax, esi
call fcn.00458e20
mov eax, dword [ebx]
push eax
push 0x48135c
mov eax, esi
call fcn.004599bc
mov eax, esi
xor edx, edx
call fcn.00458954
lea edx, [ebp - 0x14]
mov eax, 0x47fae8
call fcn.0047eaa0
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebx]
mov ecx, 0xffa400
mov edx, dword [ebp - 4]
call fcn.004817b8
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x90], esi
mov eax, esi
mov esi, eax
push 1
push 1
mov eax, esi
xor ecx, ecx
xor edx, edx
call fcn.0045a4b8
lea edx, [ebp - 0x18]
mov eax, 0xd
call fcn.0047e8f0
mov edx, dword [ebp - 0x18]
mov eax, esi
call fcn.004588ac
mov eax, 0x242
call fcn.0047ea18
mov edx, eax
mov eax, esi
call fcn.00458d40
mov eax, 0x12a
call fcn.0047ea2c
mov edx, eax
mov eax, esi
call fcn.00458d8c
mov eax, 0x11d
call fcn.0047ea18
mov edx, eax
mov eax, esi
call fcn.00458ddc
mov eax, 0x30
call fcn.0047ea18
mov edx, eax
mov eax, esi
call fcn.00458e20
mov eax, dword [ebx]
push eax
push 0x481130
mov eax, esi
call fcn.004599bc
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.0045787c
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x84], esi
mov eax, esi
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov edx, 0xffffff
call fcn.00458e4c
mov eax, 0x18
call fcn.0047ea18
mov edx, eax
mov eax, dword [ebp - 0xc]
call fcn.00458d40
mov eax, 1
call fcn.0047ea2c
mov edx, eax
mov eax, dword [ebp - 0xc]
call fcn.00458d8c
push 0
push 0xffffffffffffffff
mov eax, dword [ebx]
mov ecx, dword [eax + 0x84]
mov edx, dword [0x47e748]
xor eax, eax
call fcn.0047ffd8
mov esi, eax
mov eax, dword [ebp - 0xc]
mov dword [eax + 0xee], esi
lea edx, [ebp - 0x1c]
mov eax, 0x47fb0c
call fcn.0047eaa0
mov edx, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, esi
call fcn.00480050
mov eax, 0x13b
call fcn.0047ea18
mov edx, eax
mov eax, dword [ebp - 0xc]
call fcn.00458ddc
mov eax, 0xf0
call fcn.0047ea2c
mov edx, eax
mov eax, dword [ebp - 0xc]
call fcn.00458e20
mov eax, dword [ebx]
push eax
push 0x483e3c
mov eax, dword [ebp - 0xc]
call fcn.004592f8
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x10]
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.0045787c
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x54], esi
mov edi, esi
push 0
push 0xffffffffffffffff
mov ecx, esi
mov edx, dword [0x47e748]
xor eax, eax
call fcn.0047ffd8
mov esi, eax
mov dword [edi + 0xee], esi
mov eax, dword [ebx]
push eax
push 0x482bd4
mov eax, edi
call fcn.004592f8
mov eax, dword [ebx]
push eax
push 0x482b08
mov eax, edi
mov edx, 5
call fcn.004586d0
mov eax, dword [ebx]
push eax
push 0x4828ac
mov eax, edi
mov edx, 3
call fcn.004586d0
mov eax, dword [ebx]
push eax
push 0x482958
mov eax, edi
mov edx, 4
call fcn.004586d0
mov eax, edi
xor edx, edx
call fcn.00458954
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.0045787c
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x58], esi
mov edi, esi
push 1
push 1
mov eax, edi
xor ecx, ecx
mov dl, 1
call fcn.0045a4b8
push 0
push 0xffffffffffffffff
mov eax, dword [ebx]
mov ecx, dword [eax + 0x58]
mov edx, dword [0x47e748]
xor eax, eax
call fcn.0047ffd8
mov esi, eax
mov dword [edi + 0xee], esi
movzx eax, byte [0x47fb30]
mov byte [esi + 0x43], al
mov dword [esi + 0x44], 0xffe7edf1
mov eax, 8
call fcn.0047ea18
mov edx, eax
mov eax, edi
call fcn.00458d40
mov eax, 0x11e
call fcn.0047ea2c
mov edx, eax
mov eax, edi
call fcn.00458d8c
mov eax, dword [edi + 0x30]
call fcn.0045945c
push eax
mov eax, 0x10
call fcn.0047ea18
pop edx
sub edx, eax
mov eax, edi
call fcn.00458ddc
mov eax, edi
mov edx, 2
call fcn.00458e20
mov eax, dword [ebx]
push eax
push 0x482bd4
mov eax, edi
call fcn.004592f8
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.0045787c
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x60], esi
mov edi, esi
push 0
push 0xffffffffffffffff
mov ecx, esi
mov edx, dword [0x47e748]
xor eax, eax
call fcn.0047ffd8
mov esi, eax
mov dword [edi + 0xee], esi
mov dword [esi + 0x44], 0xffe7edf1
movzx eax, byte [0x47fb34]
mov byte [esi + 0x43], al
mov eax, edi
mov edx, 0xffffff
call fcn.00458e4c
mov eax, dword [ebx]
push eax
push 0x482bd4
mov eax, edi
call fcn.004592f8
mov eax, 0x168
call fcn.0047ea18
mov edx, eax
mov eax, edi
call fcn.00458d40
mov eax, 0x10
call fcn.0047ea2c
mov edx, eax
mov eax, edi
call fcn.00458d8c
mov eax, 0x1f4
call fcn.0047ea18
mov edx, eax
mov eax, edi
call fcn.00458ddc
mov eax, 0x102
call fcn.0047ea18
mov edx, eax
mov eax, edi
call fcn.00458e20
mov eax, edi
call fcn.00459354
mov edx, 0x47fb44
call fcn.00456268
mov eax, 0xe
call fcn.0047ea88
push eax
mov eax, edi
call fcn.00459354
mov edx, 4
pop ecx
call fcn.00456224
mov eax, edi
call fcn.00459354
mov dl, 5
call fcn.00456258
mov eax, dword [ebx]
push eax
push 0x482a68
mov eax, edi
mov edx, 7
call fcn.004586d0
mov dl, 2
mov eax, dword [ebp - 4]
call fcn.0045787c
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x64], esi
mov eax, esi
mov esi, eax
push 1
push 1
mov eax, esi
xor ecx, ecx
mov dl, 1
call fcn.0045a4b8
mov eax, esi
mov edx, 0xffffff
call fcn.00458e4c
mov eax, 0xc
call fcn.0047ea18
mov edx, eax
mov eax, esi
call fcn.00458d40
mov eax, 0x120
call fcn.0047ea2c
mov edx, eax
mov eax, esi
call fcn.00458d8c
mov eax, 0x222
call fcn.0047ea18
mov edx, eax
mov eax, esi
call fcn.00458ddc
mov eax, 0x50
call fcn.0047ea18
mov edx, eax
mov eax, esi
call fcn.00458e20
mov eax, esi
call fcn.00459354
mov edx, 0x47fb88
call fcn.00456268
mov eax, 0xb
call fcn.0047ea88
push eax
mov eax, esi
call fcn.00459354
mov edx, 4
pop ecx
call fcn.00456224
mov eax, esi
call fcn.00459354
mov dl, 5
call fcn.00456258
mov eax, dword [ebx]
mov eax, dword [eax + 0x64]
mov dl, 2
call fcn.0045787c
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x6c], esi
mov edi, esi
mov eax, 0xe0
call fcn.0047ea18
mov edx, eax
mov eax, edi
call fcn.00458d40
mov eax, 8
call fcn.0047ea2c
mov edx, eax
mov eax, edi
call fcn.00458d8c
mov eax, 0x36
call fcn.0047ea18
mov edx, eax
mov eax, edi
call fcn.00458ddc
mov eax, 0x36
call fcn.0047ea2c
mov edx, eax
mov eax, edi
call fcn.00458e20
push 0
push 0xffffffffffffffff
mov eax, dword [ebx]
mov ecx, dword [eax + 0x6c]
mov edx, dword [0x47e748]
xor eax, eax
call fcn.0047ffd8
mov esi, eax
mov dword [edi + 0xee], esi
mov eax, dword [ebx]
push eax
push 0x482bd4
mov eax, edi
call fcn.004592f8
mov eax, dword [ebx]
mov eax, dword [eax + 0x64]
mov dl, 2
call fcn.0045787c
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x68], esi
mov eax, esi
mov esi, eax
mov eax, dword [ebx]
mov eax, dword [eax + 0x6c]
call fcn.00458d28
mov edi, eax
mov eax, dword [ebx]
mov eax, dword [eax + 0x6c]
call fcn.00458dc0
add edi, eax
mov eax, 8
call fcn.0047ea18
add edi, eax
mov edx, edi
mov eax, esi
call fcn.00458d40
xor eax, eax
call fcn.0047ea2c
mov edx, eax
mov eax, esi
call fcn.00458d8c
mov eax, dword [esi + 0x30]
call fcn.0045945c
push eax
mov eax, esi
call fcn.00458d28
pop edx
sub edx, eax
mov eax, esi
call fcn.00458ddc
mov eax, dword [esi + 0x30]
call fcn.00459440
push eax
mov eax, esi
call fcn.00458d74
pop edx
sub edx, eax
mov eax, esi
call fcn.00458e20
mov eax, esi
mov edx, 0xffffff
call fcn.00458e4c
mov eax, dword [ebx]
push eax
push 0x481a68
mov eax, esi
call fcn.0045a598
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x10]
mov eax, 0xb
call fcn.0047ea88
push eax
mov eax, esi
call fcn.00459354
mov edx, 4
pop ecx
call fcn.00456224
push 0
push 0
mov eax, esi
call fcn.0045945c
push eax
mov eax, esi
call fcn.00459440
push eax
mov eax, dword [esi + 0x1c]
push eax
push 0x7b
mov eax, dword [0x499c38]
push eax
push 0
mov edx, 0x47fb9c
mov eax, 0x47fba0
mov ecx, 0x50000000
call fcn.0040b4c0
mov edi, eax
mov eax, dword [ebx]
mov dword [eax + 0x94], edi
push 1
mov eax, esi
call fcn.00459354
call fcn.004563c4
push eax
push 0x30
push edi
call sub.user32.dll_SendMessageW_1
mov eax, 0x20
call fcn.0047ea18
push eax
mov eax, 0x160
call fcn.0047ea2c
push eax
mov eax, 0x32c
call fcn.0047ea18
push eax
mov eax, 0x10
call fcn.0047ea2c
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
push eax
push 0x7b
mov eax, dword [0x499c38]
push eax
push 0
mov edx, 0x47fb9c
mov eax, 0x47fba0
mov ecx, 0x50000000
call fcn.0040b4c0
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0xa4], esi
push 1
mov eax, dword [ebx]
mov eax, dword [eax + 0x68]
call fcn.00459354
call fcn.004563c4
push eax
push 0x30
push esi
call sub.user32.dll_SendMessageW_1
mov eax, 0x20
call fcn.0047ea18
push eax
mov eax, 0x12c
call fcn.0047ea2c
push eax
mov eax, 0x20a
call fcn.0047ea18
push eax
mov eax, 0x50
call fcn.0047ea2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x1c]
push eax
push 0x7b
mov eax, dword [0x499c38]
push eax
push 0
lea edx, [ebp - 0x20]
mov eax, 2
call fcn.0047e8f0
mov eax, dword [ebp - 0x20]
call fcn.004070f0
mov edx, eax
mov eax, 0x47fba0
mov ecx, 0x50000000
call fcn.0040b4c0
mov esi, eax
mov eax, dword [ebx]
mov dword [eax + 0x9c], esi
push 1
mov eax, dword [ebx]
mov eax, dword [eax + 0x68]
call fcn.00459354
call fcn.004563c4
push eax
push 0x30
push esi
call sub.user32.dll_SendMessageW_1
mov eax, 0xcd
call fcn.0047ea18
push eax
mov eax, 0x12a
call fcn.0047ea2c
push eax
mov eax, 0x169
call fcn.0047ea18
push eax
mov eax, 0x50
call fcn.0047ea2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x1c]
push eax
push 0x7b
mov eax, dword [0x499c38]
push eax
push 0
mov edx, 0x47fb9c
mov eax, 0x47fba0
mov ecx, 0x40000000
call fcn.0040b4c0
mov edx, dword [ebx]
mov dword [edx + 0xa0], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47facc
lea eax, [ebp - 0x20]
mov edx, 5
call fcn.0040705c
ret