Function at 0x49c004
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5981db
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x60
mov eax, dword [0x6e1698]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x49c034
jmp 0x49c275
push 0
push 0
push 1
call fcn.0049ef40
mov dword [ebp - 0x10], eax
push 0x6e1694
push 0x49bf72
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.USER32.dll_EnumChildWindows]
cmp dword [0x6e1694], 0
jne 0x49c089
push 0x64f3d4
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x49c089
push 0x6e1694
push 0x49bf72
mov edx, dword [ebp - 0x6c]
push edx
call dword [sym.imp.USER32.dll_EnumChildWindows]
cmp dword [0x6e1694], 0
jne 0x49c097
jmp 0x49c275
push 0
push 0
push 0xe
mov eax, dword [0x6e1694]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
add eax, 1
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x64]
push ecx
lea ecx, [ebp - 0x68]
call fcn.00498e30
mov dword [ebp - 4], 0
push 0x7d0
lea ecx, [ebp - 0x60]
call fcn.00498e30
mov byte [ebp - 4], 1
push 0
push 0x64f3dc
lea ecx, [ebp - 0x60]
call fcn.00499170
lea ecx, [ebp - 0x68]
call fcn.0049eca0
push eax
mov edx, dword [ebp - 0x64]
push edx
push 0xd
mov eax, dword [0x6e1694]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x54]
push ecx
call fcn.0049c283
add esp, 4
mov byte [ebp - 0x58], al
mov edx, dword [ebp - 0x58]
and edx, 0xff
test edx, edx
je 0x49c17e
push 0
push 0x64f7f0
push 0
lea eax, [ebp - 0x4c]
push eax
push 0
push 0x64f7d8
lea ecx, [ebp - 0x60]
call fcn.00498f30
mov ecx, eax
call fcn.00498f30
mov ecx, eax
call fcn.00498f30
push 0
push 0x64f800
push 0
lea ecx, [ebp - 0x28]
push ecx
push 0
push 0x64f7f4
lea ecx, [ebp - 0x60]
call fcn.00498f30
mov ecx, eax
call fcn.00498f30
mov ecx, eax
call fcn.00498f30
push 0
push 0x64f80c
lea ecx, [ebp - 0x60]
call fcn.00498f30
jmp 0x49c19c
push 0
push 0x64f854
lea ecx, [ebp - 0x60]
call fcn.00498f30
push 0
push 0x64f8d0
lea ecx, [ebp - 0x60]
call fcn.00498f30
lea ecx, [ebp - 0x5c]
call fcn.00540f00
mov byte [ebp - 4], 2
push 0xd0
push 0
push 7
push str._d._d._d
lea edx, [ebp - 0x5c]
push edx
call fcn.0049c950
add esp, 0x14
push 1
lea eax, [ebp - 0x5c]
push eax
push 0
push 0x64f920
lea ecx, [ebp - 0x60]
call fcn.00498f30
mov ecx, eax
call fcn.00499130
push 0
push 0x64f930
lea ecx, [ebp - 0x60]
call fcn.00498f30
push 0
push 0
call fcn.0049c8c0
add esp, 4
push eax
lea ecx, [ebp - 0x60]
call fcn.00498f30
push 1
push 0
lea ecx, [ebp - 0x60]
push ecx
lea ecx, [ebp - 0x68]
call fcn.0049c990
cmp eax, dword [0x5b4940]
jne 0x49c24e
push 0xffffffffffffffff
mov edx, dword [ebp - 0x64]
push edx
push 0xb1
mov eax, dword [0x6e1694]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x60]
call fcn.0049eca0
push eax
push 0
push 0xc2
mov ecx, dword [0x6e1694]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x5c]
call fcn.004995e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x60]
call fcn.004995e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.004995e0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret