Function at 0x4a99bb
Capabilities:
Get graphical window text

Disassembly:
push 4
mov eax, 0x4a1199
call fcn.0042db66
mov edi, ecx
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
xor ebx, ebx
push ebx
push 4
push 0xf3
push dword [edi + 0xe58]
call esi
cmp dword [edi + 0x1c058], ebx
jne 0x4a9e38
cmp dword [edi + 0x1c05c], ebx
jne 0x4a9e38
cmp dword [edi + 0x1c060], ebx
jne 0x4a9e38
push ebx
push ebx
push 0xf3
push dword [edi + 0x1020]
call esi
push ebx
push ebx
push 0xf3
push dword [edi + 0x11e8]
call esi
push ebx
mov ebx, dword [sym.imp.mfc140u.dll_CWnd::ShowWindow]
lea ecx, [edi + 0x13d50]
call ebx
xor esi, esi
lea ecx, [edi + 0x31d8]
push esi
call ebx
push esi
lea ecx, [edi + 0x33a0]
call ebx
push esi
lea ecx, [edi + 0x1558]
call ebx
push esi
lea ecx, [edi + 0x1720]
call ebx
push esi
lea ecx, [edi + 0x18e8]
call ebx
push esi
lea ecx, [edi + 0x1ab0]
call ebx
push esi
lea ecx, [edi + 0x1c78]
call ebx
push 5
lea ecx, [edi + 0x1e40]
call ebx
push 5
lea ecx, [edi + 0x2008]
call ebx
push esi
lea ecx, [edi + 0x2560]
call ebx
push esi
lea ecx, [edi + 0x2728]
call ebx
lea ecx, [edi + 0x3910]
push 5
call ebx
lea ecx, [edi + 0x3a48]
push 5
call ebx
lea ecx, [edi + 0x3b80]
push 5
call ebx
lea ecx, [edi + 0x3cb8]
push 5
call ebx
lea ecx, [edi + 0x3df0]
push 5
call ebx
lea ecx, [edi + 0x3f28]
push 5
call ebx
lea ecx, [edi + 0x4060]
push 5
call ebx
push dword [ebp + 8]
mov ecx, edi
call fcn.00488b1b
mov eax, dword [0x4e49f4]
mov dword [edi + 0x1c07c], esi
mov esi, dword [sym.imp.USER32.dll_InvalidateRect]
mov dword [edi + 0x1c078], 1
cmp eax, 0xd
ja case.default.0x4a9b0d
jmp dword [eax*4 + 0x4a9e43]
push 5
lea ecx, [edi + 0x4300]
call ebx
mov edx, 0x4ad0fc
lea ecx, [ebp + 8]
call fcn.004142f5
and dword [ebp - 4], 0
lea ecx, [edi + 0x220]
push dword [eax]
push 0x8e
call fcn.0048cf10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push 5
lea ecx, [edi + 0x3910]
call ebx
push 5
lea ecx, [edi + 0x3a48]
call ebx
push 5
lea ecx, [edi + 0x3b80]
call ebx
push 5
lea ecx, [edi + 0x3cb8]
call ebx
push 5
lea ecx, [edi + 0x3df0]
call ebx
push 5
lea ecx, [edi + 0x3f28]
call ebx
push 5
lea ecx, [edi + 0x4060]
call ebx
push 1
push 0
push dword [edi + 0x3930]
call esi
push 1
push 0
push dword [edi + 0x3a68]
call esi
push 1
push 0
push dword [edi + 0x3ba0]
call esi
push 1
push 0
push dword [edi + 0x3cd8]
call esi
push 1
push 0
push dword [edi + 0x3e10]
call esi
push 1
push 0
push dword [edi + 0x3f48]
call esi
push 1
push 0
push dword [edi + 0x4080]
call esi
jmp case.default.0x4a9b0d
push 5
lea ecx, [edi + 0x5628]
call ebx
mov edx, 0x4ad0fc
lea ecx, [ebp + 8]
call fcn.004142f5
mov dword [ebp - 4], 1
push dword [eax]
push 0xb0
lea ecx, [edi + 0x220]
call fcn.0048cf10
lea ecx, [ebp + 8]
jmp 0x4a9dac
push 5
lea ecx, [edi + 0x8148]
call ebx
mov edx, 0x4ad0fc
lea ecx, [ebp + 8]
call fcn.004142f5
mov dword [ebp - 4], 2
push dword [eax]
push 0xc8
jmp 0x4a9c12
mov ecx, 0x4f4a70
call fcn.00442ac4
lea ecx, [edi + 0x9300]
push 5
test al, al
jne 0x4a9c68
lea ecx, [edi + 0x8868]
call ebx
mov edx, 0x4ad0fc
lea ecx, [ebp + 8]
call fcn.004142f5
mov dword [ebp - 4], 3
push dword [eax]
push 0xd5
jmp 0x4a9c12
push 5
lea ecx, [edi + 0xa890]
call ebx
mov edx, 0x4ad0fc
lea ecx, [ebp + 8]
call fcn.004142f5
mov dword [ebp - 4], 4
jmp 0x4a9c7e
push 5
lea ecx, [edi + 0xb070]
call ebx
mov edx, 0x4ad0fc
lea ecx, [ebp + 8]
call fcn.004142f5
mov dword [ebp - 4], 5
push dword [eax]
push 0xde
jmp 0x4a9c12
mov ecx, 0x4f4a70
call fcn.00442ac4
lea ecx, [edi + 0xee48]
push 5
test al, al
jne 0x4a9ced
lea ecx, [edi + 0xda88]
call ebx
mov edx, 0x4ad0fc
lea ecx, [ebp + 8]
call fcn.004142f5
mov dword [ebp - 4], 6
push dword [eax]
push 0xe5
jmp 0x4a9c12
push 5
lea ecx, [edi + 0x114d8]
call ebx
mov edx, 0x4ad0fc
lea ecx, [ebp + 8]
call fcn.004142f5
mov dword [ebp - 4], 7
jmp 0x4a9cc5
push 5
lea ecx, [edi + 0x12c60]
call ebx
mov edx, 0x4ad0fc
lea ecx, [ebp + 8]
call fcn.004142f5
mov dword [ebp - 4], 8
push dword [eax]
push 0x11c
jmp 0x4a9c12
push 5
lea ecx, [edi + 0x13248]
call ebx
mov edx, 0x4ad0fc
lea ecx, [ebp + 8]
call fcn.004142f5
mov dword [ebp - 4], 9
jmp 0x4a9d4d
push 5
lea ecx, [edi + 0x13768]
call ebx
mov edx, 0x4ad0fc
lea ecx, [ebp - 0x10]
call fcn.004142f5
mov dword [ebp - 4], 0xa
lea ecx, [edi + 0x220]
push dword [eax]
push 0xde
call fcn.0048cf10
lea ecx, [ebp - 0x10]
or dword [ebp - 4], 0xffffffff
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov eax, dword [0x4e49f0]
sub eax, 0
je 0x4a9e07
sub eax, 1
je 0x4a9dff
sub eax, 1
je 0x4a9de4
sub eax, 1
je 0x4a9ddc
sub eax, 1
jne 0x4a9e2f
lea ecx, [edi + 0x185f0]
jmp 0x4a9e2b
lea ecx, [edi + 0x17c08]
jmp 0x4a9e2b
lea esi, [edi + 0x164b8]
push 0
mov ecx, esi
call ebx
mov ecx, esi
call fcn.00483e29
mov esi, dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x4a9e2f
lea ecx, [edi + 0x15740]
jmp 0x4a9e2b
push 0
lea ecx, [edi + 0x14440]
call ebx
push 0
lea ecx, [edi + 0x14df0]
call ebx
push 0
lea ecx, [edi + 0x2c80]
call ebx
lea ecx, [edi + 0x2e48]
push 0
call ebx
push 1
push 0
push dword [edi + 0x20]
call esi
call fcn.0042db2f
ret 4