Function at 0x4bfbb6
Capabilities:
Get graphical window text

Disassembly:
push 0x118
mov eax, 0x54c828
call fcn.0052b37e
mov edi, ecx
mov eax, dword [edi + 0x150]
xor ebx, ebx
test eax, eax
jle 0x4bfc17
mov esi, ebx
lea ebx, [edi + 0x1b0]
mov eax, dword [edi + 0x1b8]
mov ecx, ebx
dec eax
push eax
mov dword [ebp - 0x118], eax
call fcn.005059a9
mov ecx, dword [eax]
test ecx, ecx
je 0x4bfbfd
mov eax, dword [ecx]
push 1
call dword [eax + 4]
push 1
push dword [ebp - 0x118]
mov ecx, ebx
call fcn.004c2417
inc esi
cmp esi, dword [edi + 0x150]
jl 0x4bfbdb
xor ebx, ebx
mov ecx, edi
mov dword [edi + 0x150], ebx
call fcn.00485b7d
test eax, eax
je 0x4bfe75
mov ecx, eax
call fcn.0040f8e6
push eax
push 0x55c4c4
call fcn.00414e65
mov dword [ebp - 0x124], eax
pop ecx
pop ecx
test eax, eax
je 0x4bfe75
push 5
push dword [eax + 0x110]
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, eax
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x114], esi
mov eax, ebx
jmp 0x4bfdf2
cmp eax, 9
jge 0x4bfdfa
push esi
call fcn.0040f4db
push eax
push 0x55cb0c
call fcn.00414e65
pop ecx
pop ecx
mov ecx, eax
test ecx, ecx
jne 0x4bfca9
push 2
push esi
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, eax
mov dword [ebp - 0x114], esi
jmp 0x4bfde5
mov eax, dword [ecx]
call dword [eax + 0x1e4]
test eax, eax
je 0x4bfc93
cmp dword [ebp - 0x11c], 0
jne 0x4bfd05
push pe_nt_image_headers32
call fcn.00404ad2
pop ecx
mov dword [ebp - 0x120], eax
mov dword [ebp - 4], ebx
test eax, eax
je 0x4bfce1
push 1
mov ecx, eax
call fcn.004850a4
jmp 0x4bfce3
mov eax, ebx
or dword [ebp - 4], 0xffffffff
mov ecx, edi
push 0xffffffffffffffff
push eax
mov dword [eax + 0xec], 1
call fcn.004bee1a
mov dword [edi + 0x150], 1
push 0x100
lea eax, [ebp - 0x110]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
call fcn.00409b29
push eax
lea ecx, [ebp - 0x118]
call fcn.00403000
lea eax, [ebp - 0x110]
mov dword [ebp - 4], 1
push eax
mov eax, dword [ebp - 0x11c]
inc eax
push eax
lea eax, [ebp - 0x118]
push str._d__s
push eax
call fcn.004032f0
push 0x1c4
call fcn.00404ad2
add esp, 0x14
mov dword [ebp - 0x120], eax
mov esi, dword [ebp - 0x118]
mov byte [ebp - 4], 2
test eax, eax
je 0x4bfd87
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
push esi
push 0xff00
mov ecx, eax
call fcn.004bec2f
mov ecx, eax
jmp 0x4bfd89
mov ecx, ebx
mov eax, dword [ebp - 0x114]
mov dword [ecx + 0xa0], eax
mov dword [ecx + 0xec], 1
mov eax, dword [edi + 0x84]
push 0xffffffffffffffff
mov dword [ecx + 0x84], eax
push ecx
mov ecx, edi
mov byte [ebp - 4], 1
call fcn.004bee1a
push 2
push dword [ebp - 0x114]
call dword [sym.imp.USER32.dll_GetWindow]
inc dword [edi + 0x150]
lea ecx, [esi - 0x10]
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x114], eax
call fcn.00403080
mov esi, dword [ebp - 0x114]
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
test esi, esi
jne 0x4bfc71
mov esi, dword [ebp - 0x124]
cmp dword [esi + 0x11c], ebx
je 0x4bfe75
cmp eax, 9
je 0x4bfe15
cmp dword [esi + 0x12c], ebx
je 0x4bfe75
push 0x1c4
call fcn.00404ad2
pop ecx
mov dword [ebp - 0x120], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x4bfe4b
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [esi + 0x114]
mov ecx, eax
push dword [esi + 0x11c]
call fcn.004bec2f
mov ebx, eax
or dword [ebp - 4], 0xffffffff
mov ecx, edi
push 0xffffffffffffffff
mov dword [ebx + 0xec], 1
mov eax, dword [edi + 0x84]
push ebx
mov dword [ebx + 0x84], eax
call fcn.004bee1a
inc dword [edi + 0x150]
call fcn.0052b32d
ret