Function at 0x4c0da8
Capabilities:
Get graphical window text

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xffffffa0
mov edi, edx
mov ebx, eax
mov eax, ebx
call fcn.00497244
test al, al
je 0x4c1029
mov eax, esp
xor ecx, ecx
mov edx, 0x60
call fcn.00404b3c
mov edx, edi
mov eax, dword [ebx + 0x400]
call fcn.004c2c1c
mov esi, eax
mov eax, ebx
call fcn.00496e90
mov ebp, eax
mov edx, edi
mov eax, dword [ebx + 0x400]
call fcn.004c2c1c
mov eax, dword [eax + 0x14]
push 0
push eax
push 0x1096
push ebp
call sub.user32.dll_SendMessageW
mov dword [esp + 4], 0xd
cmp dword [esi + 0x10], 0
je 0x4c0e19
or dword [esp + 4], 2
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp], 0x60
cmp byte [esi + 0x1a], 2
jne 0x4c0e5e
cmp dword [esi + 0x28], 0xffffffff
jle 0x4c0e5e
mov eax, 0x4c1034
mov dword [esp + 8], eax
mov eax, 0x4c1034
mov dword [esp + 0x28], eax
mov eax, dword [esi + 0xc]
call fcn.004077dc
mov dword [esp + 0x38], eax
mov eax, dword [esi + 0x1c]
call fcn.004077dc
mov dword [esp + 0x40], eax
jmp 0x4c0e88
mov eax, dword [esi + 0xc]
call fcn.004077dc
mov dword [esp + 8], eax
mov eax, dword [esi + 0x1c]
call fcn.004077dc
mov dword [esp + 0x28], eax
mov eax, 0x4c1034
mov dword [esp + 0x38], eax
mov eax, 0x4c1034
mov dword [esp + 0x40], eax
mov eax, dword [esi + 0x10]
call fcn.004077dc
mov dword [esp + 0x10], eax
xor eax, eax
mov dword [esp + 0x1c], eax
xor eax, eax
mov dword [esp + 0x20], eax
mov edx, edi
mov eax, dword [ebx + 0x400]
call fcn.004c2c1c
test byte [eax + 0x18], 1
je 0x4c0eb8
or dword [esp + 0x20], 0
mov edx, edi
mov eax, dword [ebx + 0x400]
call fcn.004c2c1c
test byte [eax + 0x18], 2
je 0x4c0ed0
or dword [esp + 0x20], 2
xor edx, edx
mov eax, 6
call fcn.00424f3c
test al, al
je 0x4c0fd5
mov edx, edi
mov eax, dword [ebx + 0x400]
call fcn.004c2c1c
test byte [eax + 0x18], 8
je 0x4c0efc
or dword [esp + 0x20], 4
mov edx, edi
mov eax, dword [ebx + 0x400]
call fcn.004c2c1c
test byte [eax + 0x18], 0x10
je 0x4c0f14
or dword [esp + 0x20], 8
mov edx, edi
mov eax, dword [ebx + 0x400]
call fcn.004c2c1c
test byte [eax + 0x18], 4
je 0x4c0f2c
or dword [esp + 0x20], 1
mov edx, edi
mov eax, dword [ebx + 0x400]
call fcn.004c2c1c
test byte [eax + 0x18], 0x20
je 0x4c0f44
or dword [esp + 0x20], 0x10
mov edx, edi
mov eax, dword [ebx + 0x400]
call fcn.004c2c1c
test byte [eax + 0x18], 0x40
je 0x4c0f5c
or dword [esp + 0x20], 0x20
mov eax, dword [esi + 0x28]
cmp eax, 0xffffffff
jle 0x4c0f6c
or dword [esp + 4], 0x1000
mov dword [esp + 0x48], eax
cmp byte [esi + 0x1a], 2
jne 0x4c0f84
cmp dword [esi + 0x28], 0xffffffff
jle 0x4c0f84
or dword [esp + 4], 0x400
cmp dword [esi + 0x1c], 0
je 0x4c0fb2
cmp byte [esi + 0x1a], 2
jne 0x4c0faa
cmp dword [esi + 0x28], 0xffffffff
jle 0x4c0faa
mov eax, dword [esp + 4]
or eax, 0x800
or eax, 0x100
mov dword [esp + 4], eax
jmp 0x4c0fb2
or dword [esp + 4], 0x100
movzx eax, byte [esi + 0x1b]
test al, al
jne 0x4c0fc1
or dword [esp + 0x24], 8
jmp 0x4c0fd5
cmp al, 1
jne 0x4c0fcc
or dword [esp + 0x24], 0x20
jmp 0x4c0fd5
cmp al, 2
jne 0x4c0fd5
or dword [esp + 0x24], 0x10
movzx eax, byte [esi + 0x1a]
test al, al
jne 0x4c0fe4
or dword [esp + 0x24], 1
jmp 0x4c0ff8
cmp al, 1
jne 0x4c0fef
or dword [esp + 0x24], 4
jmp 0x4c0ff8
cmp al, 2
jne 0x4c0ff8
or dword [esp + 0x24], 2
or dword [esp + 4], 0x10
mov edx, edi
mov eax, dword [ebx + 0x400]
call fcn.004c2c1c
mov eax, dword [eax + 0x14]
mov dword [esp + 0x18], eax
mov eax, ebx
call fcn.00496e90
mov edx, edi
mov ecx, esp
push ecx
push edx
push 0x1091
push eax
call sub.user32.dll_SendMessageW
add esp, 0x60
pop ebp
pop edi
pop esi
pop ebx
ret