Function at 0x4a1d30
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push ebx
push esi
mov esi, ecx
test byte [esi + 0x2c], 0x60
mov dword [ebp - 4], esi
je 0x4a215d
mov ebx, dword [ebp + 8]
cmp bx, 8
je 0x4a215d
mov eax, dword [0x5427f0]
mov edx, dword [eax + 0xc]
push edi
mov ecx, 0x5427f0
call edx
mov edi, eax
mov eax, dword [esi + 4]
add edi, 0x10
push eax
mov dword [ebp + 8], edi
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov edx, dword [edi - 8]
mov esi, eax
inc esi
mov ecx, 1
sub ecx, dword [edi - 4]
sub edx, esi
or ecx, edx
jge 0x4a1d96
push esi
lea ecx, [ebp + 8]
call fcn.00462660
mov edi, dword [ebp + 8]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
push esi
push edi
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov eax, dword [edi - 8]
push eax
push edi
call fcn.004eb0bf
add esp, 8
test eax, eax
jl 0x4a20e1
cmp eax, dword [edi - 8]
jg 0x4a20e1
mov esi, dword [ebp + 8]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esi - 0xc], eax
xor edx, edx
mov word [esi + eax*2], dx
mov edx, dword [ebp - 4]
lea eax, [ebp - 0x10]
push eax
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x14]
push ecx
push 0xb0
push eax
call edi
mov ecx, dword [ebp - 4]
mov eax, dword [ecx + 0x2c]
test al, al
jns 0x4a1eb9
cmp bx, 0x2d
jne 0x4a1eb9
test al, 0x40
je 0x4a1e40
push esi
call fcn.004ecd7e
fldz
fcomp st(1)
add esp, 4
fnstsw ax
test ah, 0x41
jne 0x4a1e2f
sub esp, 8
fchs
fstp qword [esp]
mov esi, 1
push 0x5131f4
jmp 0x4a1e5a
xor esi, esi
fchs
sub esp, 8
fstp qword [esp]
push 0x5131f4
jmp 0x4a1e5a
mov eax, dword [ebp + 8]
push eax
call fcn.004eb09e
xor ecx, ecx
test eax, eax
setl cl
neg eax
push eax
push 0x5131ec
mov esi, ecx
lea edx, [ebp + 8]
push edx
call fcn.0046cc40
mov eax, dword [ebp + 8]
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx + 4]
add esp, 0x10
push eax
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov ecx, dword [ebp - 0x10]
test esi, esi
je 0x4a1e85
mov eax, dword [ebp - 0x14]
dec ecx
dec eax
jmp 0x4a1e8a
mov eax, dword [ebp - 0x14]
inc ecx
inc eax
mov edx, dword [ebx + 4]
push ecx
push eax
push 0xb1
push edx
call edi
mov eax, dword [ebx + 4]
push 0
push 0
push 0xb7
push eax
call edi
lea ecx, [ebp + 8]
call fcn.00492ef0
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [esi - 0xc]
sub eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x28]
push eax
push ecx
lea ecx, [ebp + 8]
call fcn.004a1200
mov edx, dword [ebp - 0x14]
push eax
push ebx
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp + 8]
call fcn.0048e4f0
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.004a15b0
add esp, 0xc
push eax
lea edx, [ebp - 0xc]
push edx
call fcn.004a1530
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
add esp, 0xc
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a1f17
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a1f36
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a1f55
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [ebp - 0xc]
mov eax, dword [edi - 0xc]
xor esi, esi
or ebx, 0xffffffff
cmp eax, esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 8], ebx
jle 0x4a2114
test esi, esi
jl 0x4a20e1
cmp esi, eax
jg 0x4a20e1
movzx ecx, word [edi + esi*2]
movzx eax, cx
add eax, 0xffffffd3
cmp eax, 0x11
ja case.0x4a1fa6.47
movzx edx, byte [eax + 0x4a2184]
jmp dword [edx*4 + 0x4a216c]
mov dword [ebp - 0x30], esi
jmp 0x4a2021
mov eax, dword [ebp - 4]
test dword [eax + 0x2c], 0x100
je 0x4a20f9
inc dword [ebp - 0x18]
mov dword [ebp - 0x28], esi
jmp 0x4a2021
mov ecx, dword [ebp - 4]
test dword [ecx + 0x2c], 0x100
je 0x4a20f9
inc dword [ebp - 0x1c]
mov dword [ebp - 0x2c], esi
jmp 0x4a2021
mov edx, dword [ebp - 4]
test dword [edx + 0x2c], 0x100
je 0x4a20f9
inc dword [ebp - 0x20]
mov ebx, esi
jmp 0x4a2021
mov eax, dword [ebp - 4]
test byte [eax + 0x2c], 0x40
je 0x4a20f9
inc dword [ebp - 0x24]
jmp 0x4a2021
push ecx
call fcn.004eccc9
add esp, 4
test eax, eax
je 0x4a2097
cmp dword [ebp - 8], 0
jge 0x4a2021
mov dword [ebp - 8], esi
mov eax, 1
cmp dword [ebp - 0x18], eax
jg 0x4a2097
cmp dword [ebp - 0x1c], eax
jg 0x4a2097
cmp dword [ebp - 0x20], eax
jg 0x4a2097
cmp dword [ebp - 0x24], eax
jg 0x4a2097
add esi, eax
mov eax, dword [edi - 0xc]
cmp esi, eax
jl 0x4a1f80
mov eax, dword [ebp - 0x28]
cmp eax, 0xffffffff
je 0x4a2058
cmp ebx, 0xffffffff
je 0x4a2058
cmp eax, ebx
jg 0x4a2097
mov eax, dword [ebp - 0x2c]
cmp eax, 0xffffffff
je 0x4a2069
cmp ebx, 0xffffffff
je 0x4a2069
cmp eax, ebx
jg 0x4a2097
cmp dword [ebp - 8], 0xffffffff
je 0x4a2114
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 8]
cmp ecx, 0xffffffff
je 0x4a2082
cmp ecx, eax
jg 0x4a2097
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0xffffffff
je 0x4a208e
cmp ecx, eax
jg 0x4a2097
cmp ebx, 0xffffffff
je 0x4a20eb
cmp ebx, eax
jle 0x4a20eb
lea eax, [edi - 0x10]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a20b3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a1eae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x80070057
call fcn.0045f890
cmp dword [ebp - 0x30], 0xffffffff
je 0x4a2114
mov ecx, dword [ebp - 8]
cmp dword [ebp - 0x30], ecx
jle 0x4a2114
lea ecx, [ebp - 0xc]
call fcn.00492ef0
lea ecx, [ebp + 8]
call fcn.00492ef0
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 4
lea eax, [edi - 0x10]
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4a2130
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a214f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 4
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 4