Function at 0x4b6f2c
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe0
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4b7623
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xa8]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x4b6fa1
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xa8]
mov edx, dword [ebp - 0xc]
call fcn.0041d0e0
mov ebx, eax
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 4]
call dword [ebx]
test al, al
je 0x4b6f99
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b7638
inc dword [ebp - 0xc]
dec dword [ebp - 0x1c]
jne 0x4b6f6d
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004b6db4
mov eax, dword [ebp - 8]
mov eax, dword [eax]
cmp eax, 0x53
jg 0x4b7068
je 0x4b7538
cmp eax, 0x16
jg 0x4b702f
je 0x4b72dc
cmp eax, 0x14
ja case.0x4b6fd4.1
jmp dword [eax*4 + 0x4b6fdb]
cmp eax, 0x1d
jg 0x4b7051
je 0x4b75dc
sub eax, 0x1a
je 0x4b75b6
sub eax, 2
je 0x4b71cf
jmp case.0x4b6fd4.1
sub eax, 0x37
je 0x4b719b
sub eax, 0x13
je 0x4b72f3
jmp case.0x4b6fd4.1
cmp eax, 0xb017
jg 0x4b70be
je 0x4b73f9
cmp eax, 0xb000
jg 0x4b70a5
je 0x4b74a1
sub eax, 0x112
je 0x4b7100
add eax, 0xffffffe0
sub eax, 7
jb 0x4b72ac
sub eax, 0x1e1
je 0x4b75ef
jmp case.0x4b6fd4.1
sub eax, 0xb001
je 0x4b74c9
sub eax, 0x15
je 0x4b73d7
jmp case.0x4b6fd4.1
cmp eax, 0xb020
jg 0x4b70e4
je 0x4b7552
sub eax, 0xb01a
je 0x4b74f1
sub eax, 5
je 0x4b7538
jmp case.0x4b6fd4.1
sub eax, 0xb031
je 0x4b758b
add eax, 0xfffffff2
sub eax, 2
jb 0x4b73b6
jmp case.0x4b6fd4.1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 4]
and eax, 0xfff0
sub eax, 0xf020
je 0x4b711b
sub eax, 0x100
je 0x4b7128
jmp 0x4b7135
mov eax, dword [ebp - 4]
call fcn.004b76a4
jmp 0x4b7619
mov eax, dword [ebp - 4]
call fcn.004b7790
jmp 0x4b7619
push ebp
call fcn.004b6ea4
pop ecx
jmp 0x4b7619
mov eax, dword [ebp - 4]
cmp dword [eax + 0x44], 0
je 0x4b7619
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
call fcn.004b3aa4
jmp 0x4b7619
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
push eax
call fcn.00408110
test eax, eax
je 0x4b717a
push ebp
call fcn.004b6ee0
pop ecx
jmp 0x4b7619
push ebp
call fcn.004b6ea4
pop ecx
jmp 0x4b7619
mov eax, dword [ebp - 8]
mov dword [eax], 0x27
push ebp
call fcn.004b6ea4
pop ecx
jmp 0x4b7619
mov eax, dword [ebp - 4]
call fcn.004b766c
mov edx, dword [ebp - 8]
mov dword [edx + 0xc], eax
jmp 0x4b7619
push 0
push 0
push 0xb01a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
push eax
call fcn.004081d0
push ebp
call fcn.004b6ea4
pop ecx
jmp 0x4b7619
push ebp
call fcn.004b6ea4
pop ecx
mov eax, dword [ebp - 8]
cmp dword [eax + 4], 1
sbb eax, eax
inc eax
mov edx, dword [ebp - 4]
mov byte [edx + 0x9d], al
mov eax, dword [ebp - 8]
cmp dword [eax + 4], 0
je 0x4b7214
mov eax, dword [ebp - 4]
call fcn.004b6cc8
push 0
push 0
push 0xb000
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
push eax
call fcn.004081d0
jmp 0x4b7619
mov eax, dword [ebp - 4]
call fcn.004b6ca0
push 0
push 0
push 0xb001
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
push eax
call fcn.004081d0
jmp 0x4b7619
mov eax, dword [ebp - 8]
cmp dword [eax + 4], 0
je 0x4b7278
mov eax, dword [ebp - 4]
call fcn.004b6cc8
mov eax, dword [ebp - 4]
cmp dword [eax + 0xac], 0
je 0x4b726c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xac]
call fcn.004ac654
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0xac], edx
push ebp
call fcn.004b6ea4
pop ecx
jmp 0x4b7619
push ebp
call fcn.004b6ea4
pop ecx
mov eax, dword [ebp - 4]
cmp dword [eax + 0xac], 0
jne 0x4b729f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
call fcn.004ac59c
mov edx, dword [ebp - 4]
mov dword [edx + 0xac], eax
mov eax, dword [ebp - 4]
call fcn.004b6cb4
jmp 0x4b7619
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 4]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax]
add eax, 0xbc00
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
push eax
call fcn.00408250
mov edx, dword [ebp - 8]
mov dword [edx + 0xc], eax
jmp 0x4b7619
mov eax, dword [ebp - 8]
cmp dword [eax + 4], 0
je 0x4b7619
call fcn.00404c28
jmp 0x4b7619
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
cmp dword [eax], 0xde534454
jne 0x4b7619
mov eax, dword [ebp - 4]
cmp byte [eax + 0x9e], 0
je 0x4b7619
mov eax, dword [ebp - 4]
cmp dword [eax + 0xa0], 0
jne 0x4b73a9
mov edx, 0x8000
mov eax, 0x4b7648
call fcn.00410ea4
mov edx, dword [ebp - 4]
mov dword [edx + 0xa0], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0xa0], 0
je 0x4b738e
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0xc], edx
push 0x4b7658
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xa0]
push eax
call sub.user32.dll_GetWindowTextA
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x4b7619
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 8]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 4]
push eax
call dword [ebp - 0x18]
jmp 0x4b7619
call sub.user32.dll_GetTopWindow
mov edx, dword [ebp - 8]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0xa0], edx
jmp 0x4b7619
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0xc], edx
jmp 0x4b7619
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx + 8]
mov edx, dword [ebp - 8]
mov edx, dword [edx]
mov eax, dword [ebp - 4]
call fcn.004b9660
and eax, 0x7f
mov edx, dword [ebp - 8]
mov dword [edx + 0xc], eax
jmp 0x4b7619
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004b7c34
test al, al
je 0x4b7619
mov eax, dword [ebp - 8]
mov dword [eax + 0xc], 1
jmp 0x4b7619
mov eax, dword [ebp - 4]
cmp dword [eax + 0x44], 0
je 0x4b7619
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
call fcn.00497b54
test eax, eax
je 0x4b7619
mov eax, dword [ebp - 0x20]
call fcn.00497b54
push eax
call fcn.00408128
test eax, eax
je 0x4b7619
mov eax, dword [ebp - 0x20]
call fcn.00497b54
push eax
call fcn.00408130
test eax, eax
je 0x4b7619
mov byte [0x5477e8], 0
call fcn.00407f90
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x20]
call fcn.00497b54
push eax
call fcn.00408298
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
push eax
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx + 4]
mov edx, 0x112
mov eax, dword [ebp - 0x20]
call fcn.00490b48
mov eax, dword [ebp - 0x10]
push eax
call fcn.00408298
mov byte [0x5477e8], 1
mov eax, dword [ebp - 8]
mov dword [eax + 0xc], 1
jmp 0x4b7619
mov eax, dword [ebp - 4]
cmp word [eax + 0x112], 0
je 0x4b7619
mov ebx, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x114]
call dword [ebx + 0x110]
jmp 0x4b7619
mov eax, dword [ebp - 4]
cmp word [eax + 0x10a], 0
je 0x4b7619
mov ebx, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x10c]
call dword [ebx + 0x108]
jmp 0x4b7619
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
push eax
call fcn.00408110
test eax, eax
jne 0x4b7619
call fcn.00407f90
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x30]
jne 0x4b7619
xor eax, eax
call fcn.004ac720
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4b7619
mov eax, dword [ebp - 0x14]
push eax
call fcn.00408298
jmp 0x4b7619
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx + 8]
mov edx, dword [ebp - 8]
mov dx, word [edx + 4]
mov eax, dword [ebp - 4]
call fcn.004b8398
jmp 0x4b7619
mov eax, dword [ebp - 8]
cmp dword [eax + 4], 0
jne 0x4b7573
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
push dword [eax + 4]
push dword [eax]
mov eax, dword [ebp - 4]
call fcn.004b7dc0
jmp 0x4b7619
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
push dword [eax + 4]
push dword [eax]
mov eax, dword [ebp - 4]
call fcn.004b7e38
jmp 0x4b7619
mov eax, dword [ebp - 8]
cmp dword [eax + 4], 1
jne 0x4b75a5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xb0]
mov edx, dword [ebp - 8]
mov dword [edx + 0xc], eax
jmp 0x4b7619
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0xb0], eax
jmp 0x4b7619
mov edx, dword [ebp - 8]
mov edx, dword [edx + 4]
mov eax, dword [0x549148]
mov eax, dword [eax]
call fcn.0049d92c
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004b6e24
push ebp
call fcn.004b6ea4
pop ecx
jmp 0x4b7619
mov eax, dword [0x54c630]
call fcn.004b6144
push ebp
call fcn.004b6ea4
pop ecx
jmp 0x4b7619
call fcn.0047fc20
call fcn.0047fd4c
test al, al
je 0x4b7619
call fcn.0047fc20
call fcn.0047fdf4
jmp 0x4b7619
xor eax, eax
call fcn.00426c18
jmp 0x4b7619
push ebp
call fcn.004b6ea4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b7638
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret