Function at 0x5135fc
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x94
push 0
push 0
dec ecx
jne 0x513604
push ebx
push esi
push edi
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], eax
xor eax, eax
push ebp
push 0x513c1c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x85c]
mov edx, dword [eax]
call dword [edx + 0xec]
test al, al
je 0x513712
lea eax, [ebp - 8]
call fcn.004fe2f8
xor eax, eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 8]
test eax, eax
je 0x513665
mov edx, eax
sub edx, 0xa
cmp word [edx], 2
je 0x513665
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040622c
test eax, eax
je 0x51366e
sub eax, 4
mov eax, dword [eax]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x5136a7
inc ebx
mov dword [ebp - 0x24], 0
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x24]
movzx eax, word [eax + edx*2 - 2]
lea edx, [ebp - 0x47c]
call fcn.00412474
mov edx, dword [ebp - 0x47c]
lea eax, [ebp - 0xc]
call fcn.00406ce0
inc dword [ebp - 0x24]
dec ebx
jne 0x51367d
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x5fc]
mov eax, dword [eax + 0x2a0]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x513704
inc ebx
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x480]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x5fc]
mov eax, dword [eax + 0x2a0]
mov edx, dword [ebp - 0x24]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x480]
mov eax, dword [ebp - 0xc]
call fcn.00406fa4
jne 0x5136fe
mov dword [ebp - 0x2c], 1
inc dword [ebp - 0x24]
dec ebx
jne 0x5136ca
cmp dword [ebp - 0x2c], 0
jne 0x513712
mov eax, dword [ebp - 0x10]
call fcn.004bbed8
mov esi, dword [0x5267bc]
add esi, 0x4d2
add esi, dword [0x5267d0]
cmp esi, dword [0x89f704]
je 0x513734
mov eax, dword [ebp - 0x10]
call fcn.004bbed8
xor edx, edx
mov eax, 2
call fcn.004c33f8
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x258], 0x22c
lea edx, [ebp - 0x258]
mov eax, dword [ebp - 0x18]
call fcn.004c3418
mov dword [ebp - 0x1c], eax
mov esi, 4
lea eax, [ebp - 0x268]
lea ebx, [ebp - 0x278]
xor edx, edx
mov dword [eax], edx
xor edx, edx
mov dword [ebx], edx
add ebx, 4
add eax, 4
dec esi
jne 0x51376f
mov esi, 1
jmp 0x51389a
lea eax, [ebp - 4]
lea edx, [ebp - 0x234]
mov ecx, 0x104
call fcn.00406acc
lea edx, [ebp - 0x484]
mov eax, dword [ebp - 4]
call fcn.00411754
mov eax, dword [ebp - 0x484]
push eax
lea edx, [ebp - 0x488]
mov eax, 0x513c38
call fcn.00411754
mov edx, dword [ebp - 0x488]
pop eax
call fcn.00406fa4
jne 0x513884
mov eax, dword [ebp - 0x250]
call fcn.004fe6b0
mov dword [ebp - 0x20], eax
push 0x1fe
lea eax, [ebp - 0x476]
push eax
mov eax, dword [ebp - 0x20]
push eax
call sub.user32.dll_GetWindowTextW
lea eax, [ebp - 0x48c]
lea edx, [ebp - 0x476]
mov ecx, 0xff
call fcn.00406acc
mov edx, dword [ebp - 0x48c]
mov eax, dword [0x89f778]
call fcn.00407324
test eax, eax
jle 0x513884
mov eax, dword [ebp - 0x20]
mov dword [ebp + esi*4 - 0x26c], eax
xor eax, eax
mov dword [ebp - 0x28], eax
mov edi, 4
mov ebx, 0x52677c
mov eax, dword [ebp + esi*4 - 0x26c]
cmp eax, dword [ebx]
jne 0x51384c
mov dword [ebp - 0x28], 1
add ebx, 4
dec edi
jne 0x51383a
cmp dword [ebp - 0x28], 0
jne 0x513883
push 0x5267b8
mov eax, dword [ebp + esi*4 - 0x26c]
push eax
call sub.user32.dll_GetWindowThreadProcessId
mov eax, dword [0x5267b8]
push eax
push 0
push 0x1f0fff
call sub.kernel32.dll_OpenProcess
mov dword [ebp + esi*4 - 0x27c], eax
inc esi
cmp esi, 4
jg 0x5138a4
lea edx, [ebp - 0x258]
mov eax, dword [ebp - 0x18]
call fcn.004c3438
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x51378a
mov eax, dword [ebp - 0x18]
push eax
call sub.kernel32.dll_CloseHandle
mov esi, 4
mov ebx, 0x52677c
mov eax, 0x52678c
xor edx, edx
mov dword [ebp - 0x24], 4
lea edi, [ebp - 0x268]
mov ecx, dword [edi]
cmp ecx, dword [ebx]
jne 0x5138d6
mov edx, 1
add edi, 4
dec dword [ebp - 0x24]
jne 0x5138cb
test edx, edx
jne 0x5138ea
xor edx, edx
mov dword [ebx], edx
xor edx, edx
mov dword [eax], edx
add eax, 4
add ebx, 4
dec esi
jne 0x5138bc
mov eax, dword [0x5267a4]
mov dword [0x5267a0], eax
cmp dword [0x52677c], 0
jne 0x513923
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x38c]
mov edx, 0x513c60
call fcn.00491304
mov eax, dword [0x5267a8]
mov dword [0x5267a0], eax
cmp dword [0x526780], 0
jne 0x513952
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x3c4]
mov edx, 0x513c60
call fcn.00491304
cmp dword [0x52677c], 0
jne 0x513952
mov eax, dword [0x5267ac]
mov dword [0x5267a0], eax
cmp dword [0x526784], 0
jne 0x51396e
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x670]
mov edx, 0x513c60
call fcn.00491304
cmp dword [0x526788], 0
jne 0x51398a
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x430]
mov edx, 0x513c60
call fcn.00491304
mov esi, 4
lea eax, [ebp - 0x268]
lea ebx, [ebp - 0x278]
xor edx, edx
mov dword [ebp - 0x24], 4
mov edi, 0x52677c
mov ecx, dword [edi]
cmp ecx, dword [eax]
jne 0x5139b4
mov edx, 1
add edi, 4
dec dword [ebp - 0x24]
jne 0x5139a9
test edx, edx
jne 0x513a54
xor edx, edx
mov dword [ebp - 0x2c], edx
cmp dword [0x52677c], 0
jne 0x5139e9
mov edx, dword [eax]
mov dword [0x52677c], edx
mov edx, dword [ebx]
mov dword [0x52678c], edx
mov dword [ebp - 0x2c], 1
cmp dword [ebp - 0x2c], 0
jne 0x513a0f
cmp dword [0x526780], 0
jne 0x513a0f
mov edx, dword [eax]
mov dword [0x526780], edx
mov edx, dword [ebx]
mov dword [0x526790], edx
mov dword [ebp - 0x2c], 1
cmp dword [ebp - 0x2c], 0
jne 0x513a35
cmp dword [0x526784], 0
jne 0x513a35
mov edx, dword [eax]
mov dword [0x526784], edx
mov edx, dword [ebx]
mov dword [0x526794], edx
mov dword [ebp - 0x2c], 1
cmp dword [ebp - 0x2c], 0
jne 0x513a54
cmp dword [0x526788], 0
jne 0x513a54
mov edx, dword [eax]
mov dword [0x526788], edx
mov edx, dword [ebx]
mov dword [0x526798], edx
add ebx, 4
add eax, 4
dec esi
jne 0x51399b
mov eax, dword [0x52677c]
mov dword [0x526760], eax
mov eax, dword [0x52678c]
mov dword [0x5267a4], eax
mov ebx, dword [0x526760]
lea eax, [ebp - 0x490]
mov ecx, 0x513c70
mov edx, dword [0x89f778]
call fcn.00406da0
mov esi, dword [ebp - 0x490]
mov dword [ebp - 0x494], esi
mov eax, dword [ebp - 0x494]
call fcn.00406958
push eax
push ebx
call sub.user32.dll_SetWindowTextW
mov eax, dword [0x526780]
mov dword [0x526764], eax
mov eax, dword [0x526790]
mov dword [0x5267a8], eax
mov ebx, dword [0x526764]
lea eax, [ebp - 0x498]
mov ecx, 0x513c84
mov edx, dword [0x89f778]
call fcn.00406da0
mov esi, dword [ebp - 0x498]
mov dword [ebp - 0x494], esi
mov eax, dword [ebp - 0x494]
call fcn.00406958
push eax
push ebx
call sub.user32.dll_SetWindowTextW
mov eax, dword [0x526784]
mov dword [0x526768], eax
mov eax, dword [0x526794]
mov dword [0x5267ac], eax
mov ebx, dword [0x526768]
lea eax, [ebp - 0x49c]
mov ecx, 0x513c98
mov edx, dword [0x89f778]
call fcn.00406da0
mov esi, dword [ebp - 0x49c]
mov dword [ebp - 0x494], esi
mov eax, dword [ebp - 0x494]
call fcn.00406958
push eax
push ebx
call sub.user32.dll_SetWindowTextW
mov eax, dword [0x526788]
mov dword [0x52676c], eax
mov eax, dword [0x526798]
mov dword [0x5267b0], eax
mov ebx, dword [0x52676c]
lea eax, [ebp - 0x4a0]
mov ecx, 0x513cac
mov edx, dword [0x89f778]
call fcn.00406da0
mov esi, dword [ebp - 0x4a0]
mov dword [ebp - 0x494], esi
mov eax, dword [ebp - 0x494]
call fcn.00406958
push eax
push ebx
call sub.user32.dll_SetWindowTextW
cmp dword [0x5267a4], 0
je 0x513bae
mov eax, dword [0x5267a4]
mov dword [0x5267a0], eax
jmp 0x513bd6
cmp dword [0x5267a8], 0
je 0x513bc3
mov eax, dword [0x5267a8]
mov dword [0x5267a0], eax
jmp 0x513bd6
cmp dword [0x5267ac], 0
je 0x513bd6
mov eax, dword [0x5267ac]
mov dword [0x5267a0], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
call fcn.00502738
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x513c23
lea eax, [ebp - 0x4a0]
mov edx, 3
call fcn.004068c4
lea eax, [ebp - 0x490]
mov edx, 6
call fcn.004068c4
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.004068c4
ret