Function at 0x52bfa0
Capabilities:
Get graphical window text

Disassembly:
push ebp
lea ebp, [esp - 0xf124]
mov eax, 0xf124
call fcn.00616f00
push 0xffffffffffffffff
push 0x651680
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x74d890]
xor eax, ebp
mov dword [ebp + 0xf120], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
xor ebx, ebx
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x14]
call fcn.00402500
mov byte [ebp - 4], 1
push 0x2800
push ebx
lea eax, [ebp + 0xc920]
push eax
call fcn.00615eb0
add esp, 0xc
push 0x27ff
mov edx, dword [edi + 0x90]
cmp dword [edi + 0x94], ebx
je 0x52c05f
lea ecx, [ebp + 0x7920]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
je 0x52c085
push 0x2800
lea eax, [ebp + 0xc920]
push eax
lea ecx, [ebp + 0x7920]
push ecx
call fcn.004072e0
lea edx, [ebp + 0xc920]
push edx
push 0x66dea8
lea eax, [ebp - 0x14]
push eax
call fcn.00402f70
add esp, 0x18
jmp 0x52c085
lea ecx, [ebp + 0xc920]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0xc920]
push eax
push 0x66dea8
lea ecx, [ebp - 0x14]
push ecx
call fcn.00402f70
add esp, 0xc
mov eax, dword [ebp - 0x14]
lea edx, [eax + 1]
jmp 0x52c090
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x52c090
sub eax, edx
jne 0x52c0c8
push 0x40
mov edx, dword [0x7540c4]
push edx
mov eax, dword [0x7540c8]
push eax
mov ecx, dword [edi + 0x20]
push ecx
call fcn.0046f2a0
add esp, 0x10
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402570
xor eax, eax
jmp 0x52c4c9
lea ecx, [ebp - 0x1c]
call fcn.00402500
mov byte [ebp - 4], 2
lea esi, [edi + 0x7c]
push esi
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x14]
push eax
call fcn.0052bec0
add esp, 0xc
test al, al
jne 0x52c14f
lea ecx, [ebp - 0x18]
call fcn.00402500
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [0x753fa8]
push edx
lea eax, [ebp - 0x18]
push eax
call fcn.00402f70
push 0x40
mov ecx, dword [0x7540cc]
push ecx
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [edi + 0x20]
push eax
call fcn.0046f2a0
add esp, 0x1c
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00402570
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.00402570
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402570
xor eax, eax
jmp 0x52c4c9
lea ecx, [ebp]
call fcn.00543670
mov byte [ebp - 4], 4
push 0x2800
push ebx
lea ecx, [ebp + 0xc920]
push ecx
call fcn.00615eb0
add esp, 0xc
mov esi, dword [esi]
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x52c177
sub eax, edx
cmp eax, 0x2800
jb 0x52c18e
mov eax, 0x27ff
jmp 0x52c19c
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x52c193
sub eax, edx
push eax
push esi
lea edx, [ebp + 0xc920]
push edx
call fcn.00617370
add esp, 0xc
push ebx
push 0x2800
lea eax, [ebp + 0xc920]
push eax
lea ecx, [ebp]
call fcn.00545b40
test eax, eax
jne 0x52c1f3
push 0x40
mov ecx, dword [0x7540cc]
push ecx
mov edx, dword [0x753d94]
push edx
mov eax, dword [edi + 0x20]
push eax
call fcn.0046f2a0
add esp, 0x10
mov byte [ebp - 4], 2
lea ecx, [ebp]
call fcn.005436b0
jmp 0x52c131
mov dword [ebp - 0x24], ebx
lea eax, [ebp + 0x5108]
mov dword [ebp - 0x28], eax
cmp byte [ebp + 0x5108], 0x2f
jne 0x52c211
lea eax, [ebp + 0x5109]
mov dword [ebp - 0x28], eax
cmp byte [eax], bl
je 0x52c233
push 0x69d498
push eax
call fcn.00617f30
add esp, 8
cmp eax, ebx
je 0x52c233
cmp byte [eax], 0x2f
jne 0x52c233
mov dword [ebp - 0x24], 1
lea ecx, [edi + 0x34c]
call fcn.00405420
test eax, eax
je 0x52c29e
lea ecx, [ebp - 0x18]
call fcn.00402500
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [edi + 0x1f0]
call fcn.005efa6e
lea edx, [ebp - 0x18]
push edx
lea ecx, [edi + 0x19c]
call fcn.005efa6e
mov eax, dword [ebp - 0x14]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x52c272
sub eax, edx
je 0x52c300
mov eax, dword [ebp - 0x18]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x52c287
sub eax, edx
je 0x52c300
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x18]
call fcn.00402570
lea ecx, [edi + 0x31c]
call fcn.00405420
test eax, eax
je 0x52c421
lea eax, [ebp - 0x14]
push eax
lea ecx, [edi + 0x148]
call fcn.005efa6e
mov edx, dword [ebp - 0x14]
mov eax, edx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x52c2c8
sub eax, esi
jne 0x52c338
push 0x40
mov ecx, dword [0x7540c4]
push ecx
mov edx, dword [0x7540d4]
push edx
mov eax, dword [edi + 0x20]
push eax
call fcn.0046f2a0
add esp, 0x10
mov byte [ebp - 4], 2
lea ecx, [ebp]
call fcn.005436b0
jmp 0x52c131
push 0x40
mov eax, dword [0x7540c4]
push eax
mov ecx, dword [0x7540d0]
push ecx
mov edx, dword [edi + 0x20]
push edx
call fcn.0046f2a0
add esp, 0x10
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x18]
call fcn.00402570
mov byte [ebp - 4], 2
lea ecx, [ebp]
call fcn.005436b0
jmp 0x52c131
lea esi, [edi + 0x80]
push esi
lea ecx, [ebp - 0x1c]
push ecx
push edx
call fcn.0052bec0
add esp, 0xc
test al, al
jne 0x52c38a
lea ecx, [ebp - 0x18]
call fcn.00402500
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [0x753fa8]
push eax
lea ecx, [ebp - 0x18]
push ecx
call fcn.00402f70
push 0x40
mov edx, dword [0x7540d8]
push edx
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [edi + 0x20]
push ecx
call fcn.0046f2a0
add esp, 0x1c
jmp 0x52c31b
push 0x2800
push ebx
lea edx, [ebp + 0xc920]
push edx
call fcn.00615eb0
add esp, 0xc
mov esi, dword [esi]
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x52c3a6
sub eax, edx
cmp eax, 0x2800
jb 0x52c3bd
mov eax, 0x27ff
jmp 0x52c3cb
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x52c3c2
sub eax, edx
push eax
push esi
lea eax, [ebp + 0xc920]
push eax
call fcn.00617370
add esp, 0xc
push ebx
push 0x2800
lea ecx, [ebp + 0xc920]
push ecx
lea ecx, [ebp]
call fcn.00545b40
test eax, eax
jne 0x52c421
push 0x40
mov edx, dword [0x7540d8]
push edx
mov eax, dword [0x753d94]
push eax
mov ecx, dword [edi + 0x20]
push ecx
call fcn.0046f2a0
add esp, 0x10
mov byte [ebp - 4], 2
lea ecx, [ebp]
call fcn.005436b0
jmp 0x52c131
lea ecx, [edi + 0x2ec]
call fcn.00405420
test eax, eax
je 0x52c47c
lea edx, [ebp - 0x14]
push edx
lea ecx, [edi + 0xa0]
call fcn.005efa6e
mov eax, dword [ebp - 0x14]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x52c445
sub eax, edx
jne 0x52c47c
push 0x40
mov eax, dword [0x7540c4]
push eax
mov ecx, dword [0x7541b4]
push ecx
mov edx, dword [edi + 0x20]
push edx
call fcn.0046f2a0
add esp, 0x10
mov byte [ebp - 4], 2
lea ecx, [ebp]
call fcn.005436b0
jmp 0x52c131
mov eax, dword [ebp - 0x24]
push eax
push 0x141a
push 0x111
mov ecx, dword [edi + 0x74]
mov edx, dword [ecx + 0x410]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov byte [ebp - 4], 2
lea ecx, [ebp]
call fcn.005436b0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.00402570
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402570
mov dword [ebp - 4], 0xffffffff
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0xf120]
xor ecx, ebp
call fcn.006157d3
add ebp, 0xf124
mov esp, ebp
pop ebp
ret