Function at 0x407d34
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov esi, 0x40a8ac
mov edi, 0x40accc
xor eax, eax
push ebp
push 0x4085ca
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [0x40acd0], eax
xor eax, eax
mov dword [edi], eax
mov ebx, 1
mov eax, ebx
sub eax, 1
jno 0x407d77
call fcn.00402c50
cmp eax, 0x200
jbe 0x407d83
call fcn.00402c48
mov dl, byte [esi + eax]
mov ecx, ebx
sub ecx, 1
jno 0x407d92
call fcn.00402c50
cmp ecx, 0x200
jbe 0x407d9f
call fcn.00402c48
mov byte [eax + 0x40aab0], dl
inc ebx
cmp ebx, 0x201
jne 0x407d6b
push esi
push 0x200
push 0xd
mov eax, dword [0x40a87c]
push eax
call sub.user32.dll_SendMessageA
xor ebx, ebx
mov eax, 0x40acb8
call fcn.00403648
jmp 0x407e03
mov eax, 0x40acb4
cmp ebx, 0x200
jbe 0x407de1
call fcn.00402c48
mov dl, byte [esi + ebx]
call fcn.00403810
mov eax, 0x40acb8
mov edx, dword [0x40acb4]
call fcn.004038c0
add ebx, 1
jno 0x407e03
call fcn.00402c50
cmp ebx, 0x200
jbe 0x407e10
call fcn.00402c48
xor eax, eax
mov al, byte [esi + ebx]
test eax, eax
jg 0x407dcf
mov ebx, 1
mov eax, ebx
sub eax, 1
jno 0x407e2a
call fcn.00402c50
cmp eax, 0x200
jbe 0x407e36
call fcn.00402c48
mov dl, byte [eax + 0x40aab0]
mov ecx, ebx
sub ecx, 1
jno 0x407e48
call fcn.00402c50
cmp ecx, 0x200
jbe 0x407e55
call fcn.00402c48
mov byte [esi + eax], dl
inc ebx
cmp ebx, 0x201
jne 0x407e1e
push esi
push 0x200
push 0xd
mov eax, dword [0x40a874]
push eax
call sub.user32.dll_SendMessageA
xor ebx, ebx
mov eax, 0x40acbc
call fcn.00403648
jmp 0x407eb6
mov eax, 0x40acb4
cmp ebx, 0x200
jbe 0x407e94
call fcn.00402c48
mov dl, byte [esi + ebx]
call fcn.00403810
mov eax, 0x40acbc
mov edx, dword [0x40acb4]
call fcn.004038c0
add ebx, 1
jno 0x407eb6
call fcn.00402c50
cmp ebx, 0x200
jbe 0x407ec3
call fcn.00402c48
xor eax, eax
mov al, byte [esi + ebx]
test eax, eax
jg 0x407e82
mov ebx, 1
mov eax, ebx
sub eax, 1
jno 0x407edd
call fcn.00402c50
cmp eax, 0x200
jbe 0x407ee9
call fcn.00402c48
mov dl, byte [eax + 0x40aab0]
mov ecx, ebx
sub ecx, 1
jno 0x407efb
call fcn.00402c50
cmp ecx, 0x200
jbe 0x407f08
call fcn.00402c48
mov byte [esi + eax], dl
inc ebx
cmp ebx, 0x201
jne 0x407ed1
call fcn.00402650
mov eax, 5
call fcn.0040275c
mov dword [edi], eax
cmp dword [edi], 1
je 0x407f2f
cmp dword [edi], 0
jne 0x407f66
mov eax, 0x40acc0
mov edx, 0x4085e0
call fcn.0040369c
mov dword [0x40ace4], 0x33
mov dword [0x40ace8], 0x33
mov dword [0x40acec], 0x4a
mov dword [0x40acf0], 0x33
cmp dword [edi], 2
jne 0x407fa2
mov eax, 0x40acc0
mov edx, 0x4085fc
call fcn.0040369c
mov dword [0x40ace4], 0x36
mov dword [0x40ace8], 0x35
mov dword [0x40acec], 0x48
mov dword [0x40acf0], 0x4e
cmp dword [edi], 3
jne 0x407fde
mov eax, 0x40acc0
mov edx, 0x408618
call fcn.0040369c
mov dword [0x40ace4], 0x35
mov dword [0x40ace8], 0x4b
mov dword [0x40acec], 0x33
mov dword [0x40acf0], 0x34
cmp dword [edi], 4
jne 0x40801a
mov eax, 0x40acc0
mov edx, 0x408634
call fcn.0040369c
mov dword [0x40ace4], 0x35
mov dword [0x40ace8], 0x33
mov dword [0x40acec], 0x35
mov dword [0x40acf0], 0x33
cmp dword [edi], 5
jne 0x408056
mov eax, 0x40acc0
mov edx, 0x408650
call fcn.0040369c
mov dword [0x40ace4], 0x4e
mov dword [0x40ace8], 0x4e
mov dword [0x40acec], 0x53
mov dword [0x40acf0], 0x33
mov eax, 0x40acc4
mov ecx, dword [0x40acbc]
mov edx, dword [0x40acb8]
call fcn.00403904
mov eax, 0x40acc8
call fcn.00403648
mov eax, dword [0x40acc4]
call fcn.004038b8
cmp eax, 5
jle 0x4084de
xor eax, eax
mov dword [edi], eax
mov eax, dword [0x40acc4]
call fcn.004038b8
mov dword [ebp - 4], eax
fild dword [ebp - 4]
fdiv dword [0x408664]
call fcn.0040268c
push eax
sar eax, 0x1f
cmp eax, edx
pop eax
je 0x4080b6
call fcn.00402c48
mov dword [0x40acd4], eax
lea eax, [ebp - 8]
push eax
mov edx, dword [edi]
add edx, 1
jno 0x4080cb
call fcn.00402c50
mov ecx, 1
mov eax, dword [0x40acc4]
call fcn.00403a08
mov edx, dword [ebp - 8]
mov eax, 0x40acc8
call fcn.004038c0
mov eax, dword [0x40acd4]
add dword [edi], eax
jno 0x4080f5
call fcn.00402c50
mov eax, dword [0x40acc4]
call fcn.004038b8
cmp eax, dword [edi]
jl 0x408131
lea eax, [ebp - 0xc]
push eax
mov edx, dword [edi]
add edx, 1
jno 0x408113
call fcn.00402c50
mov ecx, 1
mov eax, dword [0x40acc4]
call fcn.00403a08
mov edx, dword [ebp - 0xc]
mov eax, 0x40acc8
call fcn.004038c0
jmp 0x408140
mov eax, 0x40acc8
mov edx, 0x408670
call fcn.004038c0
mov eax, dword [0x40acd4]
add dword [edi], eax
jno 0x40814e
call fcn.00402c50
mov eax, dword [0x40acc4]
call fcn.004038b8
cmp eax, dword [edi]
jl 0x40818a
lea eax, [ebp - 0x10]
push eax
mov edx, dword [edi]
add edx, 1
jno 0x40816c
call fcn.00402c50
mov ecx, 1
mov eax, dword [0x40acc4]
call fcn.00403a08
mov edx, dword [ebp - 0x10]
mov eax, 0x40acc8
call fcn.004038c0
jmp 0x408199
mov eax, 0x40acc8
mov edx, 0x408670
call fcn.004038c0
mov eax, dword [0x40acd4]
add dword [edi], eax
jno 0x4081a7
call fcn.00402c50
mov eax, dword [0x40acc4]
call fcn.004038b8
cmp eax, dword [edi]
jl 0x4081e3
lea eax, [ebp - 0x14]
push eax
mov edx, dword [edi]
add edx, 1
jno 0x4081c5
call fcn.00402c50
mov ecx, 1
mov eax, dword [0x40acc4]
call fcn.00403a08
mov edx, dword [ebp - 0x14]
mov eax, 0x40acc8
call fcn.004038c0
jmp 0x4081f2
mov eax, 0x40acc8
mov edx, 0x408670
call fcn.004038c0
mov eax, dword [0x40acd4]
add dword [edi], eax
jno 0x408200
call fcn.00402c50
mov eax, dword [0x40acc4]
call fcn.004038b8
cmp eax, dword [edi]
jl 0x40823c
lea eax, [ebp - 0x18]
push eax
mov edx, dword [edi]
add edx, 1
jno 0x40821e
call fcn.00402c50
mov ecx, 1
mov eax, dword [0x40acc4]
call fcn.00403a08
mov edx, dword [ebp - 0x18]
mov eax, 0x40acc8
call fcn.004038c0
jmp 0x40824b
mov eax, 0x40acc8
mov edx, 0x408670
call fcn.004038c0
mov eax, dword [0x40acd4]
add dword [edi], eax
jno 0x408259
call fcn.00402c50
mov eax, dword [0x40acc4]
call fcn.004038b8
cmp eax, dword [edi]
jl 0x408295
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [edi]
add edx, 1
jno 0x408277
call fcn.00402c50
mov ecx, 1
mov eax, dword [0x40acc4]
call fcn.00403a08
mov edx, dword [ebp - 0x1c]
mov eax, 0x40acc8
call fcn.004038c0
jmp 0x4082a4
mov eax, 0x40acc8
mov edx, 0x408670
call fcn.004038c0
xor eax, eax
mov dword [edi], eax
push eax
push ebx
push ecx
push ebp
xor ebx, ebx
cmp ebx, 6
jge 0x4082e1
mov edx, dword [0x40accc]
shl edx, 6
mov dword [0x40accc], edx
mov eax, ebx
mov ebp, dword [0x40acc8]
mov cl, byte [eax + ebp]
and ecx, 0x3f
mov edx, dword [0x40accc]
add edx, ecx
mov dword [0x40accc], edx
inc ebx
jmp 0x4082ae
nop
pop ebp
pop ecx
pop ebx
pop eax
xor eax, eax
mov dword [0x40acd8], eax
mov dword [0x40acdc], 0xf
cmp dword [0x40acd8], 0x10
jge 0x408417
push eax
push ebx
push ecx
push ebp
mov eax, dword [0x40accc]
and eax, dword [0x40acdc]
and eax, 0xff
mov byte [0x40ace0], al
cmp eax, 4
jge 0x40834e
mov eax, dword [0x40ace4]
and eax, 0xff
mov ecx, dword [0x40ace0]
and ecx, 0xff
add eax, ecx
mov ecx, dword [0x40acd8]
mov ebx, dword [0x40acc0]
mov byte [ecx + ebx], al
jmp 0x4083eb
mov eax, dword [0x40ace0]
and eax, 0xff
cmp eax, 8
jge 0x408388
mov ebx, dword [0x40acc0]
mov eax, dword [0x40ace8]
and eax, 0xff
mov ecx, dword [0x40ace0]
and ecx, 0xff
lea eax, [eax + ecx - 4]
mov ecx, dword [0x40acd8]
mov byte [ecx + ebx], al
jmp 0x4083eb
mov eax, dword [0x40ace0]
and eax, 0xff
cmp eax, 0xc
jge 0x4083c2
mov ebx, dword [0x40acc0]
mov eax, dword [0x40acec]
and eax, 0xff
mov ecx, dword [0x40ace0]
and ecx, 0xff
lea eax, [eax + ecx - 8]
mov ecx, dword [0x40acd8]
mov byte [ecx + ebx], al
jmp 0x4083eb
mov eax, dword [0x40acf0]
and eax, 0xff
mov ecx, dword [0x40ace0]
and ecx, 0xff
lea eax, [eax + ecx - 0xc]
mov ecx, dword [0x40acd8]
mov ebx, dword [0x40acc0]
mov byte [ecx + ebx], al
mov eax, dword [0x40accc]
sar eax, 4
mov dword [0x40accc], eax
pop ebp
pop ecx
pop ebx
pop eax
add dword [0x40acd8], 2
jno 0x40840a
call fcn.00402c50
cmp dword [0x40acd8], 0x10
jl 0x408304
mov eax, dword [0x40acc0]
call fcn.004038b8
mov edi, eax
test edi, edi
jle 0x408481
mov ebx, 1
push 0x40acb4
mov ecx, 1
mov edx, ebx
mov eax, dword [0x40acc0]
call fcn.00403a08
mov eax, 1
mov edx, dword [0x40acb4]
dec eax
test edx, edx
je 0x408457
cmp eax, dword [edx - 4]
jb 0x40845c
call fcn.00402c48
inc eax
mov al, byte [edx + eax - 1]
mov edx, ebx
sub edx, 1
jno 0x40846d
call fcn.00402c50
cmp edx, 0x200
jbe 0x40847a
call fcn.00402c48
mov byte [esi + edx], al
inc ebx
dec edi
jne 0x40842c
push esi
push 0
push 0xc
mov eax, dword [0x40a878]
push eax
call sub.user32.dll_SendMessageA
mov ebx, 1
mov eax, ebx
sub eax, 1
jno 0x4084a2
call fcn.00402c50
cmp eax, 0x200
jbe 0x4084ae
call fcn.00402c48
mov dl, byte [eax + 0x40aab0]
mov ecx, ebx
sub ecx, 1
jno 0x4084c0
call fcn.00402c50
cmp ecx, 0x200
jbe 0x4084cd
call fcn.00402c48
mov byte [esi + eax], dl
inc ebx
cmp ebx, 0x201
jne 0x408496
jmp 0x4085af
mov eax, 0x40acc0
mov edx, 0x40867c
call fcn.0040369c
mov eax, dword [0x40acc0]
call fcn.004038b8
mov edi, eax
test edi, edi
jle 0x408557
mov ebx, 1
push 0x40acb4
mov ecx, 1
mov edx, ebx
mov eax, dword [0x40acc0]
call fcn.00403a08
mov eax, 1
mov edx, dword [0x40acb4]
dec eax
test edx, edx
je 0x40852d
cmp eax, dword [edx - 4]
jb 0x408532
call fcn.00402c48
inc eax
mov al, byte [edx + eax - 1]
mov edx, ebx
sub edx, 1
jno 0x408543
call fcn.00402c50
cmp edx, 0x200
jbe 0x408550
call fcn.00402c48
mov byte [esi + edx], al
inc ebx
dec edi
jne 0x408502
push esi
push 0
push 0xc
mov eax, dword [0x40a878]
push eax
call sub.user32.dll_SendMessageA
mov ebx, 1
mov eax, ebx
sub eax, 1
jno 0x408578
call fcn.00402c50
cmp eax, 0x200
jbe 0x408584
call fcn.00402c48
mov dl, byte [eax + 0x40aab0]
mov ecx, ebx
sub ecx, 1
jno 0x408596
call fcn.00402c50
cmp ecx, 0x200
jbe 0x4085a3
call fcn.00402c48
mov byte [esi + eax], dl
inc ebx
cmp ebx, 0x201
jne 0x40856c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4085d1
lea eax, [ebp - 0x1c]
mov edx, 6
call fcn.0040366c
ret