Function at 0x51cb84
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x88
push 0
push 0
dec ecx
jne 0x51cb8c
push ecx
push ebx
push esi
push edi
mov esi, eax
xor eax, eax
push ebp
push 0x51cec9
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0x51ced8
push 0
push edx
call sub.user32.dll_FindWindowExA
mov ebx, eax
push 0
push 0x51cee8
push 0
push ebx
call sub.user32.dll_FindWindowExA
mov ebx, eax
push 0
push 0x51cefc
push 0
push ebx
call sub.user32.dll_FindWindowExA
mov ebx, eax
test ebx, ebx
je 0x51ce9e
call fcn.0051b160
cdq
push edx
push eax
mov eax, ebx
xor edx, edx
cmp edx, dword [esp + 4]
jne 0x51cbf7
cmp eax, dword [esp]
pop edx
pop eax
je 0x51ce9e
lea eax, [ebp - 0x414]
push eax
push 0x3ff
push 0xd
push ebx
call sub.user32.dll_SendMessageA
push 0x51cf1c
lea edx, [ebp - 0x418]
mov eax, 0x1f3ba8
call fcn.0040906c
push dword [ebp - 0x418]
push 0x51cf30
lea eax, [ebp - 4]
mov edx, 3
call fcn.004046a4
lea eax, [ebp - 8]
mov edx, dword [0x524f48]
call fcn.004043bc
push 0x51cf40
lea edx, [ebp - 0x41c]
mov eax, 0x7b
call fcn.0040906c
push dword [ebp - 0x41c]
push 0x51cf58
lea edx, [ebp - 0x420]
mov eax, 0x57e0b7c
call fcn.0040906c
push dword [ebp - 0x420]
push 0x51cf6c
lea eax, [ebp - 0xc]
mov edx, 5
call fcn.004046a4
push 0x51cf40
lea edx, [ebp - 0x424]
mov eax, 0x7b
call fcn.0040906c
push dword [ebp - 0x424]
push 0x51cf58
lea edx, [ebp - 0x428]
mov eax, 0x5c1a11a
call fcn.0040906c
push dword [ebp - 0x428]
push 0x51cf6c
lea eax, [ebp - 0x10]
mov edx, 5
call fcn.004046a4
lea eax, [ebp - 0x42c]
lea edx, [ebp - 0x414]
mov ecx, 0x400
call fcn.00404594
mov eax, dword [ebp - 0x42c]
call fcn.00409658
test al, al
jne 0x51ce9e
cmp dword [esi + 0x3bc], 0
jle 0x51cd18
dec dword [esi + 0x3bc]
jmp 0x51cd41
lea eax, [ebp - 0x430]
lea edx, [ebp - 0x414]
mov ecx, 0x400
call fcn.00404594
mov eax, dword [ebp - 0x430]
call fcn.0051a980
test al, al
je 0x51ce9e
lea eax, [ebp - 0x434]
lea edx, [ebp - 0x414]
mov ecx, 0x400
call fcn.00404594
mov edx, dword [ebp - 0x434]
mov eax, dword [ebp - 4]
call fcn.0040e41c
test eax, eax
jg 0x51ce9e
lea eax, [ebp - 0x438]
lea edx, [ebp - 0x414]
mov ecx, 0x400
call fcn.00404594
mov edx, dword [ebp - 0x438]
mov eax, dword [ebp - 8]
call fcn.0040e41c
test eax, eax
jg 0x51ce9e
lea eax, [ebp - 0x43c]
lea edx, [ebp - 0x414]
mov ecx, 0x400
call fcn.00404594
mov edx, dword [ebp - 0x43c]
mov eax, dword [ebp - 0xc]
call fcn.0040e41c
test eax, eax
jg 0x51ce9e
lea eax, [ebp - 0x440]
lea edx, [ebp - 0x414]
mov ecx, 0x400
call fcn.00404594
mov edx, dword [ebp - 0x440]
mov eax, dword [ebp - 0x10]
call fcn.0040e41c
test eax, eax
jg 0x51ce9e
mov dword [ebp - 0x14], 6
push 0x51cf74
push 0xff
push 0xc
push ebx
call sub.user32.dll_SendMessageA
mov eax, dword [ebp - 4]
call fcn.004045e4
mov esi, eax
test esi, esi
jle 0x51ce37
mov edi, 1
push 2
mov eax, dword [ebp - 4]
movzx eax, byte [eax + edi - 1]
push eax
push 0x102
push ebx
call sub.user32.dll_SendMessageA
inc edi
dec esi
jne 0x51ce1d
lea eax, [ebp - 0x414]
push eax
push 0x3ff
push 0xd
push ebx
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0x444]
lea edx, [ebp - 0x414]
mov ecx, 0x400
call fcn.00404594
mov eax, dword [ebp - 0x444]
mov edx, dword [ebp - 4]
call fcn.00404730
je 0x51ce76
dec dword [ebp - 0x14]
jne 0x51cdf8
push 0
push 0xd
push pe_nt_image_headers32
push ebx
call sub.user32.dll_SendMessageA
push 0xc8
call sub.kernel32.dll_Sleep_1
push 0
push 0xd
push pe_nt_image_headers32
push ebx
call sub.user32.dll_SendMessageA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x51ced0
lea eax, [ebp - 0x444]
mov edx, 0xc
call fcn.00404348
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.00404348
ret