Function at 0x407a86
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x844
push ebx
push esi
mov esi, ecx
push edi
mov bl, byte [esi + 0x20]
push dword [esi + 4]
and bl, 1
mov byte [ebp - 1], bl
call dword [0x40d308]
test eax, eax
jne 0x407aba
push 0x11
call dword [0x40d368]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x34]
jmp 0x407aef
mov eax, dword [esi + 0x40]
mov ecx, eax
and ecx, 4
cmp cl, 4
jne 0x407ad2
mov eax, dword [esi + 0x48]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x2c]
jmp 0x407aef
test bl, bl
jne 0x407adf
and eax, 2
cmp al, 2
je 0x407ae6
jmp 0x407af7
and eax, 1
cmp al, 1
jne 0x407af7
mov eax, dword [esi + 0x4c]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x30]
cmp eax, 0xffffffff
mov dword [ebp - 0xc], eax
jne 0x407b03
mov eax, dword [esi + 0x44]
mov dword [ebp - 8], eax
mov eax, dword [esi + 0x28]
mov dword [ebp - 0xc], eax
mov eax, dword [esi + 0x40]
xor ebx, ebx
and eax, 4
cmp al, 4
jne 0x407b1e
test byte [esi + 0x20], 6
je 0x407b1e
cmp dword [esi + 0x2c], 0xffffffff
jne 0x407b1e
push 1
pop ebx
lea eax, [ebp - 0x10]
and dword [ebp - 0x14], 0
and dword [ebp - 0x10], 0
push eax
lea eax, [ebp - 0x14]
push eax
push dword [esi + 0x24]
call dword [0x40d02c]
xor eax, eax
lea edi, [ebp - 0x20]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebp - 0x14]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
push 2
push edi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], eax
call dword [0x40d038]
push eax
lea eax, [ebp - 0x24]
push eax
push edi
call dword [0x40d30c]
push 0
push ebx
push ebx
push edi
push dword [ebp - 0xc]
push dword [esi + 0x24]
call dword [0x40d010]
test byte [esi + 0x20], 6
mov ebx, dword [0x40d328]
je 0x407c17
lea eax, [ebp - 0x34]
push eax
push dword [esi + 4]
call ebx
mov eax, dword [esi + 0x40]
mov ecx, eax
and ecx, 4
cmp cl, 4
jne 0x407bb1
mov eax, dword [esi + 0x20]
push 0xf
not eax
and eax, 2
shl eax, 2
or al, 2
jmp 0x407bcc
cmp byte [ebp - 1], 0
je 0x407bbe
and eax, 1
cmp al, 1
jne 0x407bd8
mov eax, dword [esi + 0x20]
push 0xf
not eax
and eax, 2
or al, 8
shr eax, 1
push eax
lea eax, [ebp - 0x34]
push eax
push edi
call dword [0x40d310]
cmp byte [ebp - 1], 0
jne 0x407c17
mov eax, dword [esi + 0x40]
and eax, 2
cmp al, 2
jne 0x407c17
push 0x2e
call dword [0x40d2c8]
neg eax
shl eax, 1
push eax
push 0x2d
call dword [0x40d2c8]
neg eax
shl eax, 1
push eax
lea eax, [ebp - 0x34]
push eax
call dword [0x40d314]
lea eax, [ebp - 0x34]
push eax
push edi
call dword [0x40d318]
lea eax, [ebp - 0x44]
push eax
push dword [esi + 4]
call ebx
and word [ebp - 0x844], 0
push dword [ebp - 8]
mov ecx, 0x1ff
xor eax, eax
push dword [ebp + 8]
lea edi, [ebp - 0x842]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
call dword [0x40d03c]
lea eax, [ebp - 0x844]
push 0x400
push eax
push dword [esi + 4]
call dword [0x40d31c]
test eax, eax
jle 0x407cec
push 1
push dword [ebp + 8]
call dword [0x40d040]
push 0
push 0
push 0x31
push dword [esi + 4]
call dword [0x40d2c0]
mov ebx, dword [0x40d044]
push eax
push dword [ebp + 8]
call ebx
push 1
mov dword [ebp - 8], eax
pop edi
push 0xfffffffffffffff0
push dword [esi + 4]
call dword [0x40d340]
test ah, 3
je 0x407ca1
push edi
jmp 0x407cb1
test ah, 1
je 0x407caa
xor edi, edi
jmp 0x407cb2
test ah, 2
je 0x407cb2
push 2
pop edi
mov eax, dword [esi + 0x40]
and eax, 4
cmp al, 4
jne 0x407cca
push 1
lea eax, [ebp - 0x44]
push 1
push eax
call dword [0x40d320]
or edi, 0x24
lea eax, [ebp - 0x44]
push edi
push eax
lea eax, [ebp - 0x844]
push 0xffffffffffffffff
push eax
push dword [ebp + 8]
call dword [0x40d290]
push dword [ebp - 8]
push dword [ebp + 8]
call ebx
pop edi
pop esi
pop ebx
leave
ret 4