Function at 0x4c9c85
Capabilities:
Get graphical window text

Disassembly:
push 0x120
mov eax, 0x599514
call fcn.00559fb1
mov ebx, ecx
xor edi, edi
cmp dword [ebx + 0x150], edi
jle 0x4c9d0c
mov esi, edi
lea edi, [ebx + 0x1b0]
mov dword [ebp - 0x118], esi
mov eax, dword [ebx + 0x1b8]
mov ecx, edi
dec eax
push eax
mov dword [ebp - 0x114], eax
call fcn.004c9c66
mov eax, dword [eax]
mov dword [ebp - 0x11c], eax
test eax, eax
je 0x4c9cec
mov eax, dword [eax]
push 1
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x5a4a38]
mov ecx, dword [ebp - 0x11c]
call esi
mov esi, dword [ebp - 0x118]
push 1
push dword [ebp - 0x114]
mov ecx, edi
call fcn.004ccc77
inc esi
mov dword [ebp - 0x118], esi
cmp esi, dword [ebx + 0x150]
jl 0x4c9cae
xor edi, edi
mov ecx, ebx
mov dword [ebx + 0x150], edi
call fcn.004c668a
test eax, eax
je 0x4c9f83
mov ecx, eax
call fcn.0041724c
push eax
push 0x5b6038
call fcn.0042b3f9
mov dword [ebp - 0x124], eax
pop ecx
pop ecx
test eax, eax
je 0x4c9f83
push 5
push dword [eax + 0x120]
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, eax
mov dword [ebp - 0x118], edi
mov dword [ebp - 0x114], esi
mov eax, edi
jmp 0x4c9f01
cmp eax, 9
jge 0x4c9f09
push esi
call fcn.00416dcf
push eax
push 0x5b6ba4
call fcn.0042b3f9
mov dword [ebp - 0x120], eax
pop ecx
pop ecx
test eax, eax
jne 0x4c9da2
push 2
push esi
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, eax
mov dword [ebp - 0x114], esi
jmp 0x4c9ef4
mov eax, dword [eax]
mov esi, dword [eax + 0x1e8]
mov ecx, esi
call dword [0x5a4a38]
mov ecx, dword [ebp - 0x120]
call esi
test eax, eax
jne 0x4c9dc8
push 2
push dword [ebp - 0x114]
jmp 0x4c9d8f
mov esi, dword [ebp - 0x118]
test esi, esi
jne 0x4c9e19
push 0x110
call fcn.00423f1f
pop ecx
mov dword [ebp - 0x12c], eax
mov dword [ebp - 4], edi
test eax, eax
je 0x4c9df5
push 1
mov ecx, eax
call fcn.004c5973
jmp 0x4c9df7
mov eax, edi
or dword [ebp - 4], 0xffffffff
mov ecx, ebx
push 0xffffffffffffffff
push eax
mov dword [eax + 0xec], 1
call fcn.004c8d83
mov dword [ebx + 0x150], 1
push 0x100
lea eax, [ebp - 0x110]
push eax
push dword [ebp - 0x114]
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea ecx, [ebp - 0x11c]
call fcn.00401fff
lea eax, [ebp - 0x110]
mov dword [ebp - 4], 1
push eax
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0x11c]
push str._d__Ts
push eax
call fcn.00403131
push 0x1c4
call fcn.00423f1f
add esp, 0x14
mov dword [ebp - 0x128], eax
mov esi, dword [ebp - 0x11c]
mov byte [ebp - 4], 2
test eax, eax
je 0x4c9e96
push edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push esi
push 0xff00
mov ecx, eax
call fcn.004c8b01
mov ecx, eax
jmp 0x4c9e98
mov ecx, edi
mov eax, dword [ebp - 0x114]
mov dword [ecx + 0xa0], eax
mov dword [ecx + 0xec], 1
mov eax, dword [ebx + 0x84]
push 0xffffffffffffffff
mov dword [ecx + 0x84], eax
push ecx
mov ecx, ebx
mov byte [ebp - 4], 1
call fcn.004c8d83
push 2
push dword [ebp - 0x114]
call dword [sym.imp.USER32.dll_GetWindow]
inc dword [ebx + 0x150]
lea ecx, [esi - 0x10]
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x114], eax
call fcn.004047a1
mov esi, dword [ebp - 0x114]
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
test esi, esi
jne 0x4c9d66
mov esi, dword [ebp - 0x124]
cmp dword [esi + 0x130], edi
je 0x4c9f83
cmp eax, 9
je 0x4c9f24
cmp dword [esi + 0x140], edi
je 0x4c9f83
push 0x1c4
call fcn.00423f1f
pop ecx
mov dword [ebp - 0x128], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x4c9f5a
push edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [esi + 0x128]
mov ecx, eax
push dword [esi + 0x130]
call fcn.004c8b01
mov edi, eax
or dword [ebp - 4], 0xffffffff
xor esi, esi
inc esi
mov ecx, ebx
push 0xffffffffffffffff
mov dword [edi + 0xec], esi
mov eax, dword [ebx + 0x84]
push edi
mov dword [edi + 0x84], eax
call fcn.004c8d83
add dword [ebx + 0x150], esi
call fcn.00559f60
ret