Function at 0x4a9300
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x4a98fc
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 1], 0
xor esi, esi
mov eax, dword [0x4ad2e8]
mov byte [eax], 4
xor edx, edx
push ebp
push 0x4a98d7
push dword fs:[edx]
mov dword fs:[edx], esp
inc esi
push 0x4a9910
push 0
call sub.user32.dll_FindWindowA
mov dword [ebx + 0x3dc], eax
push 0x14
call sub.kernel32.dll_Sleep_1
mov eax, dword [ebx + 0x3dc]
test eax, eax
jg 0x4a9368
cmp esi, 0x3e8
jle 0x4a933c
cmp esi, 0x3e8
jle 0x4a937f
pop dword fs:[0]
add esp, 8
jmp 0x4a98e1
test eax, eax
jg 0x4a9442
xor esi, esi
inc esi
push 0x4a991c
push 0x4a9928
push 0
mov eax, dword [ebx + 0x3c0]
push eax
call sub.user32.dll_FindWindowExA
mov dword [ebx + 0x3c8], eax
push 0x14
call sub.kernel32.dll_Sleep_1
mov eax, dword [ebx + 0x3c8]
test eax, eax
jg 0x4a93c1
cmp esi, 0x3e8
jle 0x4a9389
cmp esi, 0x3e8
jle 0x4a93d8
pop dword fs:[0]
add esp, 8
jmp 0x4a98e1
test eax, eax
jle 0x4a9400
push 0
push 0
push 0x201
push eax
call sub.user32.dll_PostMessageA
push 0
push 0
push 0x202
mov eax, dword [ebx + 0x3c8]
push eax
call sub.user32.dll_PostMessageA
xor esi, esi
inc esi
push 0x4a9910
push 0
call sub.user32.dll_FindWindowA
mov dword [ebx + 0x3dc], eax
push 0xa
call sub.kernel32.dll_Sleep_1
cmp dword [ebx + 0x3dc], 0
jg 0x4a942d
cmp esi, 0xc8
jle 0x4a9402
cmp esi, 0xc8
jle 0x4a9442
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a98e1
xor esi, esi
inc esi
push 0x4a9930
push 0x4a9934
push 0
mov eax, dword [ebx + 0x3dc]
push eax
call sub.user32.dll_FindWindowExA
mov dword [ebx + 0x3e0], eax
push 0x14
call sub.kernel32.dll_Sleep_1
mov edi, dword [ebx + 0x3e0]
test edi, edi
jg 0x4a947c
cmp esi, 0x3e8
jle 0x4a9444
cmp esi, 0x3e8
jle 0x4a9491
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a98e1
test edi, edi
jle 0x4a962f
mov dword [ebp - 9], 5
mov dword [ebp - 5], 3
push dword [ebp - 5]
push dword [ebp - 9]
push edi
call sub.user32.dll_ChildWindowFromPoint
mov dword [ebx + 0x3e4], eax
lea eax, [ebp - 0x14]
mov edx, dword [0x4ad704]
add edx, 0x100
call fcn.00404954
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x10]
mov dl, 1
call fcn.004a6680
mov eax, dword [ebp - 0x10]
call fcn.00404bb0
push eax
push 0
push 0xc
mov eax, dword [ebx + 0x3e4]
push eax
call sub.user32.dll_SendMessageA
push 0xa
call sub.kernel32.dll_Sleep_1
mov dword [ebp - 9], 0x2e
mov dword [ebp - 5], 3
push dword [ebp - 5]
push dword [ebp - 9]
mov eax, dword [ebx + 0x3e0]
push eax
call sub.user32.dll_ChildWindowFromPoint
mov dword [ebx + 0x3e8], eax
lea eax, [ebp - 0x18]
mov edx, dword [0x4ad704]
add edx, 0x100
call fcn.00404954
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x10]
mov dl, 2
call fcn.004a6680
mov eax, dword [ebp - 0x10]
call fcn.00404bb0
push eax
push 0
push 0xc
mov eax, dword [ebx + 0x3e8]
push eax
call sub.user32.dll_SendMessageA
push 0xa
call sub.kernel32.dll_Sleep_1
mov dword [ebp - 9], 0x57
mov dword [ebp - 5], 3
push dword [ebp - 5]
push dword [ebp - 9]
mov eax, dword [ebx + 0x3e0]
push eax
call sub.user32.dll_ChildWindowFromPoint
mov dword [ebx + 0x3ec], eax
lea eax, [ebp - 0x1c]
mov edx, dword [0x4ad704]
add edx, 0x100
call fcn.00404954
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x10]
mov dl, 3
call fcn.004a6680
mov eax, dword [ebp - 0x10]
call fcn.00404bb0
push eax
push 0
push 0xc
mov eax, dword [ebx + 0x3ec]
push eax
call sub.user32.dll_SendMessageA
push 0xa
call sub.kernel32.dll_Sleep_1
mov dword [ebp - 9], 0x80
mov dword [ebp - 5], 3
push dword [ebp - 5]
push dword [ebp - 9]
mov eax, dword [ebx + 0x3e0]
push eax
call sub.user32.dll_ChildWindowFromPoint
mov dword [ebx + 0x3f0], eax
lea eax, [ebp - 0x20]
mov edx, dword [0x4ad704]
add edx, 0x100
call fcn.00404954
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x10]
mov dl, 4
call fcn.004a6680
mov eax, dword [ebp - 0x10]
call fcn.00404bb0
push eax
push 0
push 0xc
mov eax, dword [ebx + 0x3f0]
push eax
call sub.user32.dll_SendMessageA
push 0xa
call sub.kernel32.dll_Sleep_1
xor esi, esi
inc esi
push 0x4a9930
push 0x4a9944
push 0
mov eax, dword [ebx + 0x3dc]
push eax
call sub.user32.dll_FindWindowExA
mov dword [ebx + 0x3f4], eax
push 0x14
call sub.kernel32.dll_Sleep_1
mov eax, dword [ebx + 0x3f4]
test eax, eax
jg 0x4a9669
cmp esi, 0x3e8
jle 0x4a9631
cmp esi, 0x3e8
jle 0x4a9680
pop dword fs:[0]
add esp, 8
jmp 0x4a98e1
test eax, eax
jle 0x4a96f9
push 0
push 1
push 0x14f
push eax
call sub.user32.dll_SendMessageA
push 0
push 0
push 0x14e
mov eax, dword [ebx + 0x3f4]
push eax
call sub.user32.dll_SendMessageA
push 0
push 0
push 7
mov eax, dword [ebx + 0x3f4]
push eax
call sub.user32.dll_SendMessageA
push 0xa
call sub.kernel32.dll_Sleep_1
push 0
push 0xd
push pe_nt_image_headers32
mov eax, dword [ebx + 0x3f4]
push eax
call sub.user32.dll_SendMessageA
push 0xa
call sub.kernel32.dll_Sleep_1
push 0
push 0xd
push 0x101
mov eax, dword [ebx + 0x3f4]
push eax
call sub.user32.dll_SendMessageA
push 0xa
call sub.kernel32.dll_Sleep_1
push 0x4a9930
push 0x4a9950
push 0
mov eax, dword [ebx + 0x3dc]
push eax
call sub.user32.dll_FindWindowExA
mov esi, eax
mov dword [ebx + 0x3f8], esi
test esi, esi
jle 0x4a975f
push 0x4a9958
push 0x4a9928
push 0
push esi
call sub.user32.dll_FindWindowExA
mov edi, eax
mov dword [ebx + 0x3fc], edi
test edi, edi
jle 0x4a975f
push 0
push 0
push 0x201
push edi
call sub.user32.dll_PostMessageA
push 0
push 0
push 0x202
mov eax, dword [ebx + 0x3fc]
push eax
call sub.user32.dll_PostMessageA
mov dword [ebp - 9], 0x5d
mov dword [ebp - 5], 0xc2
push 0x4a9964
push 0x4a9928
push 0
mov eax, dword [ebx + 0x3dc]
push eax
call sub.user32.dll_FindWindowExA
mov esi, eax
mov dword [ebx + 0x400], esi
test esi, esi
jle 0x4a97bf
push 0
push 0
push 0x201
push esi
call sub.user32.dll_PostMessageA
push 0
push 0
push 0x202
mov eax, dword [ebx + 0x400]
push eax
call sub.user32.dll_PostMessageA
push 0x1f4
call sub.kernel32.dll_Sleep_1
push 0x4a9930
push 0x4a9950
push 0
mov eax, dword [ebx + 0x3c0]
push eax
call sub.user32.dll_FindWindowExA
mov esi, eax
mov dword [ebx + 0x3cc], esi
test esi, esi
jle 0x4a98c9
mov dword [ebp - 9], 0x4e
xor eax, eax
mov dword [ebp - 5], eax
push dword [ebp - 5]
push dword [ebp - 9]
push esi
call sub.user32.dll_ChildWindowFromPoint
mov edi, eax
mov dword [ebx + 0x3d4], edi
test edi, edi
jle 0x4a985d
mov eax, dword [0x4ad64c]
mov eax, dword [eax]
call fcn.0045ca34
push 0
push 0
push 7
mov eax, dword [ebx + 0x3d4]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [0x4ad704]
add eax, 0x200
push eax
push 4
push 0xc
mov eax, dword [ebx + 0x3d4]
push eax
call sub.user32.dll_SendMessageA
push 0
push 0
push 8
mov eax, dword [ebx + 0x3d4]
push eax
call sub.user32.dll_SendMessageA
push 0xa
call sub.kernel32.dll_Sleep_1
mov dword [ebp - 9], 0x4e
mov dword [ebp - 5], 0x1b
push dword [ebp - 5]
push dword [ebp - 9]
mov eax, dword [ebx + 0x3cc]
push eax
call sub.user32.dll_ChildWindowFromPoint
mov esi, eax
mov dword [ebx + 0x3d8], esi
test esi, esi
jle 0x4a98c9
push 0
push 0
push 7
push esi
call sub.user32.dll_SendMessageA
mov eax, dword [0x4ad704]
add eax, 0x300
push eax
push 6
push 0xc
mov eax, dword [ebx + 0x3d8]
push eax
call sub.user32.dll_SendMessageA
push 0
push 0
push 8
mov eax, dword [ebx + 0x3d8]
push eax
call sub.user32.dll_SendMessageA
push 0xa
call sub.kernel32.dll_Sleep_1
mov byte [ebp - 1], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a98e1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a9903
lea eax, [ebp - 0x20]
mov edx, 5
call fcn.00404714
ret