Function at 0x4100e2
Capabilities:
Get graphical window text

Disassembly:
mov eax, 0x58f37c
call fcn.0055690c
sub esp, 0x44
push ebx
push esi
push edi
mov eax, dword [ebp + 8]
and dword [ebp - 4], 0
mov eax, dword [eax - 8]
lea esi, [eax + 2]
push esi
call fcn.0056dbe7
mov edi, eax
pop ecx
lea eax, [esi - 1]
lea ecx, [ebp + 8]
push eax
push 0
mov byte [edi], 0x36
call fcn.00572a8c
push eax
lea eax, [edi + 1]
push eax
call fcn.00556200
mov ecx, dword [0x600eb8]
add esp, 0xc
push esi
push edi
call fcn.00411618
mov eax, dword [0x5eb854]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov eax, dword [0x600d50]
xor esi, esi
mov byte [ebp - 4], 2
mov ebx, dword [eax + 0xd8]
test ebx, ebx
jle 0x41022c
mov eax, dword [0x600d50]
add eax, 0x7c
test esi, esi
jl 0x410170
cmp esi, dword [eax + 0x5c]
jge 0x410170
mov eax, dword [eax + 0x58]
mov ecx, dword [eax + esi*4]
jmp 0x410172
xor ecx, ecx
lea eax, [ebp - 0x1c]
push eax
call fcn.0042ba20
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 3
call fcn.00572795
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 2
call fcn.0057265c
push 0x28
lea ecx, [ebp - 0x14]
call fcn.0056b00b
test eax, eax
jle 0x4101ca
push eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x14]
call fcn.0056af93
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 4
call fcn.00572795
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 2
call fcn.0057265c
jmp 0x4101d6
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x18]
push eax
call fcn.00572795
push dword [ebp + 8]
push dword [ebp - 0x18]
call dword [0x5c6754]
pop ecx
test eax, eax
pop ecx
je 0x4101f3
inc esi
cmp esi, ebx
jl 0x410157
jmp 0x41022c
mov eax, dword [0x600d50]
add eax, 0x7c
test esi, esi
jl 0x41020c
cmp esi, dword [eax + 0x5c]
jge 0x41020c
mov eax, dword [eax + 0x58]
mov ecx, dword [eax + esi*4]
jmp 0x41020e
xor ecx, ecx
call fcn.004e7030
push eax
call fcn.0056eb00
push eax
push 0x5a4938
call fcn.0057370a
mov edi, eax
pop ecx
test edi, edi
pop ecx
jne 0x41028a
push dword [ebp + 8]
lea eax, [ebp - 0x14]
push str._s_0_
push eax
call fcn.0056b3b3
mov ecx, dword [0x600d50]
add esp, 0xc
push dword [ebp - 0x14]
call fcn.0040a03d
mov eax, dword [0x600d50]
add eax, 0x7c
test ebx, ebx
jl 0x410267
cmp ebx, dword [eax + 0x5c]
jge 0x410267
mov eax, dword [eax + 0x58]
mov ecx, dword [eax + ebx*4]
jmp 0x410269
xor ecx, ecx
call fcn.004e7030
push eax
call fcn.0056eb00
push eax
push 0x5a4938
call fcn.0057370a
pop ecx
mov edi, eax
pop ecx
mov ecx, edi
call fcn.004107cd
mov eax, dword [0x600d50]
xor ebx, ebx
mov eax, dword [eax + 0xd8]
test eax, eax
jle 0x41057a
mov dword [ebp - 0x1c], eax
mov eax, dword [0x600d50]
mov ecx, dword [eax + 0x80]
call fcn.004e7030
push eax
call fcn.0056eb00
push eax
push 0x5a4938
call fcn.0057370a
pop ecx
mov esi, eax
pop ecx
mov eax, dword [esi + 0x48]
push 0
push 0
push 0x1004
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_SendMessageA]
and dword [ebp - 0x10], 0
mov dword [ebp - 0x50], eax
test eax, eax
jle 0x410571
push dword [ebp - 0x10]
mov ecx, dword [esi + 0x48]
call fcn.0056bff1
cmp eax, 1
jne 0x410562
push dword [ebp - 0x10]
mov ecx, dword [esi + 0x48]
call fcn.0056c2be
push 0
lea ecx, [eax + 0x24]
mov dword [ebp - 0x48], eax
call fcn.00402304
mov edx, dword [0x5eb854]
mov dword [ebp - 0x4c], edx
cmp byte [eax + 0xee], 0
mov ecx, dword [edi + 0x48]
mov byte [ebp - 4], 5
je 0x410343
xor eax, eax
push eax
push eax
push eax
push eax
push edx
push ebx
push 3
call fcn.0056c0f3
mov ebx, eax
jmp 0x410353
xor eax, eax
push eax
push 1
push eax
push eax
push edx
push ebx
push 3
call fcn.0056c0f3
mov ecx, dword [esi + 0x48]
push 0
push dword [ebp - 0x10]
lea eax, [ebp - 0x20]
push eax
call fcn.0056c219
push dword [eax]
mov ecx, dword [edi + 0x48]
mov byte [ebp - 4], 6
push 0
push ebx
call fcn.0056c1ee
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 5
call fcn.0057265c
mov ecx, dword [esi + 0x48]
push 1
push dword [ebp - 0x10]
lea eax, [ebp - 0x24]
push eax
call fcn.0056c219
push dword [eax]
mov ecx, dword [edi + 0x48]
mov byte [ebp - 4], 7
push 1
push ebx
call fcn.0056c1ee
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.0057265c
mov ecx, dword [esi + 0x48]
push 2
push dword [ebp - 0x10]
lea eax, [ebp - 0x28]
push eax
call fcn.0056c219
push dword [eax]
mov ecx, dword [edi + 0x48]
mov byte [ebp - 4], 8
push 2
push ebx
call fcn.0056c1ee
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.0057265c
mov ecx, dword [esi + 0x48]
push 3
push dword [ebp - 0x10]
lea eax, [ebp - 0x2c]
push eax
call fcn.0056c219
push dword [eax]
mov ecx, dword [edi + 0x48]
mov byte [ebp - 4], 9
push 3
push ebx
call fcn.0056c1ee
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.0057265c
mov ecx, dword [esi + 0x48]
push 4
push dword [ebp - 0x10]
lea eax, [ebp - 0x30]
push eax
call fcn.0056c219
push dword [eax]
mov ecx, dword [edi + 0x48]
mov byte [ebp - 4], 0xa
push 4
push ebx
call fcn.0056c1ee
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 5
call fcn.0057265c
push 5
push dword [ebp - 0x10]
mov ecx, dword [esi + 0x48]
lea eax, [ebp - 0x34]
push eax
call fcn.0056c219
push dword [eax]
mov ecx, dword [edi + 0x48]
mov byte [ebp - 4], 0xb
push 5
push ebx
call fcn.0056c1ee
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 5
call fcn.0057265c
mov ecx, dword [esi + 0x48]
push 6
push dword [ebp - 0x10]
lea eax, [ebp - 0x38]
push eax
call fcn.0056c219
push dword [eax]
mov ecx, dword [edi + 0x48]
mov byte [ebp - 4], 0xc
push 6
push ebx
call fcn.0056c1ee
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 5
call fcn.0057265c
mov ecx, dword [esi + 0x48]
push 7
push dword [ebp - 0x10]
lea eax, [ebp - 0x3c]
push eax
call fcn.0056c219
push dword [eax]
mov ecx, dword [edi + 0x48]
mov byte [ebp - 4], 0xd
push 7
push ebx
call fcn.0056c1ee
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 5
call fcn.0057265c
mov ecx, dword [esi + 0x48]
push 8
push dword [ebp - 0x10]
lea eax, [ebp - 0x40]
push eax
call fcn.0056c219
push dword [eax]
mov ecx, dword [edi + 0x48]
mov byte [ebp - 4], 0xe
push 8
push ebx
call fcn.0056c1ee
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 5
call fcn.0057265c
mov ecx, dword [esi + 0x48]
push 9
push dword [ebp - 0x10]
lea eax, [ebp - 0x44]
push eax
call fcn.0056c219
push dword [eax]
mov ecx, dword [edi + 0x48]
mov byte [ebp - 4], 0xf
push 9
push ebx
call fcn.0056c1ee
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 5
call fcn.0057265c
mov ecx, dword [edi + 0x48]
push dword [ebp - 0x48]
xor eax, eax
push eax
push eax
push eax
push eax
push 4
push eax
push ebx
call fcn.0056c175
mov eax, dword [esi + 0x48]
push 0
push dword [ebp - 0x10]
inc ebx
push 0x1008
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x600d50]
call fcn.0040a054
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 2
call fcn.0057265c
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x50]
jl 0x4102eb
dec dword [ebp - 0x1c]
jne 0x4102a2
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.0057265c
and byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.0057265c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0057265c
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4