Function at 0x4b3ab8
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x29
push 0
push 0
dec ecx
jne 0x4b3ac0
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov esi, 0x4c223c
xor eax, eax
push ebp
push 0x4b3e5e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4b4]
mov eax, dword [eax + 0x22c]
call fcn.004448ec
mov eax, dword [0x4c2238]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4b3b94
inc eax
mov dword [ebp - 0x18], eax
xor ebx, ebx
lea ecx, [ebp - 0x11c]
mov edx, ebx
mov eax, dword [0x4c2238]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x11c]
call fcn.004088d0
mov edi, eax
push pe_nt_image_headers32
lea eax, [ebp - 0x118]
push eax
push edi
call sub.user32.dll_GetWindowTextA
push pe_nt_image_headers32
lea eax, [ebp - 0x118]
push eax
push edi
call sub.user32.dll_GetClassNameA
lea edx, [ebp - 0x10]
lea eax, [ebp - 0x118]
call fcn.004092a4
lea edx, [ebp - 0x120]
mov eax, dword [ebp - 0x10]
call fcn.00408664
cmp dword [ebp - 0x120], 0
jne 0x4b3b8a
mov edx, ebx
mov eax, dword [0x4c2238]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov edx, ebx
mov eax, dword [esi]
mov ecx, dword [eax]
call dword [ecx + 0x48]
inc ebx
dec dword [ebp - 0x18]
jne 0x4b3b0d
mov eax, dword [0x4c2238]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4b3d50
inc eax
mov dword [ebp - 0x18], eax
xor ebx, ebx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4b4]
mov eax, dword [eax + 0x22c]
call fcn.0044479c
mov dword [ebp - 8], eax
lea ecx, [ebp - 0x124]
mov edx, ebx
mov eax, dword [0x4c2238]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x124]
call fcn.004088d0
mov edi, eax
push pe_nt_image_headers32
lea eax, [ebp - 0x118]
push eax
push edi
call sub.user32.dll_GetWindowTextA
lea edx, [ebp - 0xc]
lea eax, [ebp - 0x118]
call fcn.004092a4
push pe_nt_image_headers32
lea eax, [ebp - 0x118]
push eax
push edi
call sub.user32.dll_GetClassNameA
lea edx, [ebp - 0x10]
lea eax, [ebp - 0x118]
call fcn.004092a4
lea ecx, [ebp - 0x128]
mov edx, ebx
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x128]
call fcn.004088d0
shr eax, 8
test al, 1
jne 0x4b3c51
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.0044423c
jmp 0x4b3c5c
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
call fcn.0044423c
lea ecx, [ebp - 0x130]
mov edx, ebx
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x130]
call fcn.004088d0
mov edx, eax
shr edx, 8
and edx, 1
lea ecx, [ebp - 0x12c]
mov eax, dword [0x4bace0]
mov eax, dword [eax]
mov eax, dword [eax + 0x304]
mov eax, dword [eax + 0x214]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x12c]
push 0x4b3e74
lea ecx, [ebp - 0x138]
mov edx, ebx
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x138]
call fcn.004088d0
mov edx, eax
and edx, 3
lea ecx, [ebp - 0x134]
mov eax, dword [0x4bace0]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov eax, dword [eax + 0x214]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x134]
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00404548
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x13c]
mov edx, ebx
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x13c]
call fcn.004088d0
test eax, 0x10000
jne 0x4b3d37
mov ecx, 2
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.004443f4
jmp 0x4b3d46
mov ecx, 1
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.004443f4
inc ebx
dec dword [ebp - 0x18]
jne 0x4b3bad
mov eax, dword [0x4c0230]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4b3e33
inc eax
mov dword [ebp - 0x18], eax
xor ebx, ebx
mov esi, 0x4c0234
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4b4]
mov eax, dword [eax + 0x22c]
call fcn.0044479c
mov dword [ebp - 8], eax
lea ecx, [ebp - 0x140]
mov edx, ebx
mov eax, dword [0x4c0230]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x140]
mov eax, dword [ebp - 8]
call fcn.0044423c
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.004443f4
lea ecx, [ebp - 0x144]
mov edx, dword [esi]
shr edx, 8
and edx, 1
mov eax, dword [0x4bace0]
mov eax, dword [eax]
mov eax, dword [eax + 0x304]
mov eax, dword [eax + 0x214]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x144]
push 0x4b3e74
lea ecx, [ebp - 0x148]
mov edx, dword [esi]
and edx, 3
mov eax, dword [0x4bace0]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov eax, dword [eax + 0x214]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x148]
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00404548
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc ebx
add esi, 4
dec dword [ebp - 0x18]
jne 0x4b3d6e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b3e65
lea eax, [ebp - 0x148]
mov edx, 0xc
call fcn.004041d0
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.004041d0
ret