Function at 0x4cffc4
Capabilities:
Get graphical window text

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xffffffa0
mov edi, edx
mov ebx, eax
mov eax, ebx
call fcn.00484770
test al, al
je 0x4d0243
mov eax, esp
xor ecx, ecx
mov edx, 0x60
call fcn.004049d4
mov edx, edi
mov eax, dword [ebx + 0x3f8]
call fcn.004d1e28
mov esi, eax
mov eax, ebx
call fcn.004843c4
mov ebp, eax
mov edx, edi
mov eax, dword [ebx + 0x3f8]
call fcn.004d1e28
mov eax, dword [eax + 0x14]
push 0
push eax
push 0x1096
push ebp
call sub.user32.dll_SendMessageW
mov dword [esp + 4], 0xd
cmp dword [esi + 0x10], 0
je 0x4d0035
or dword [esp + 4], 2
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp], 0x60
cmp byte [esi + 0x1a], 2
jne 0x4d007a
cmp dword [esi + 0x28], 0xffffffff
jle 0x4d007a
mov eax, 0x4d024c
mov dword [esp + 8], eax
mov eax, 0x4d024c
mov dword [esp + 0x28], eax
mov eax, dword [esi + 0xc]
call fcn.0040774c
mov dword [esp + 0x38], eax
mov eax, dword [esi + 0x1c]
call fcn.0040774c
mov dword [esp + 0x40], eax
jmp 0x4d00a4
mov eax, dword [esi + 0xc]
call fcn.0040774c
mov dword [esp + 8], eax
mov eax, dword [esi + 0x1c]
call fcn.0040774c
mov dword [esp + 0x28], eax
mov eax, 0x4d024c
mov dword [esp + 0x38], eax
mov eax, 0x4d024c
mov dword [esp + 0x40], eax
mov eax, dword [esi + 0x10]
call fcn.0040774c
mov dword [esp + 0x10], eax
xor eax, eax
mov dword [esp + 0x1c], eax
xor eax, eax
mov dword [esp + 0x20], eax
mov edx, edi
mov eax, dword [ebx + 0x3f8]
call fcn.004d1e28
test byte [eax + 0x18], 1
je 0x4d00d4
or dword [esp + 0x20], 0
mov edx, edi
mov eax, dword [ebx + 0x3f8]
call fcn.004d1e28
test byte [eax + 0x18], 2
je 0x4d00ec
or dword [esp + 0x20], 2
xor edx, edx
mov eax, 6
call fcn.0042488c
test al, al
je 0x4d01f1
mov edx, edi
mov eax, dword [ebx + 0x3f8]
call fcn.004d1e28
test byte [eax + 0x18], 8
je 0x4d0118
or dword [esp + 0x20], 4
mov edx, edi
mov eax, dword [ebx + 0x3f8]
call fcn.004d1e28
test byte [eax + 0x18], 0x10
je 0x4d0130
or dword [esp + 0x20], 8
mov edx, edi
mov eax, dword [ebx + 0x3f8]
call fcn.004d1e28
test byte [eax + 0x18], 4
je 0x4d0148
or dword [esp + 0x20], 1
mov edx, edi
mov eax, dword [ebx + 0x3f8]
call fcn.004d1e28
test byte [eax + 0x18], 0x20
je 0x4d0160
or dword [esp + 0x20], 0x10
mov edx, edi
mov eax, dword [ebx + 0x3f8]
call fcn.004d1e28
test byte [eax + 0x18], 0x40
je 0x4d0178
or dword [esp + 0x20], 0x20
mov eax, dword [esi + 0x28]
cmp eax, 0xffffffff
jle 0x4d0188
or dword [esp + 4], 0x1000
mov dword [esp + 0x48], eax
cmp byte [esi + 0x1a], 2
jne 0x4d01a0
cmp dword [esi + 0x28], 0xffffffff
jle 0x4d01a0
or dword [esp + 4], 0x400
cmp dword [esi + 0x1c], 0
je 0x4d01ce
cmp byte [esi + 0x1a], 2
jne 0x4d01c6
cmp dword [esi + 0x28], 0xffffffff
jle 0x4d01c6
mov eax, dword [esp + 4]
or eax, 0x800
or eax, 0x100
mov dword [esp + 4], eax
jmp 0x4d01ce
or dword [esp + 4], 0x100
movzx eax, byte [esi + 0x1b]
test al, al
jne 0x4d01dd
or dword [esp + 0x24], 8
jmp 0x4d01f1
cmp al, 1
jne 0x4d01e8
or dword [esp + 0x24], 0x20
jmp 0x4d01f1
cmp al, 2
jne 0x4d01f1
or dword [esp + 0x24], 0x10
movzx eax, byte [esi + 0x1a]
test al, al
jne 0x4d0200
or dword [esp + 0x24], 1
jmp 0x4d0214
cmp al, 1
jne 0x4d020b
or dword [esp + 0x24], 4
jmp 0x4d0214
cmp al, 2
jne 0x4d0214
or dword [esp + 0x24], 2
or dword [esp + 4], 0x10
mov edx, edi
mov eax, dword [ebx + 0x3f8]
call fcn.004d1e28
mov eax, dword [eax + 0x14]
mov dword [esp + 0x18], eax
mov eax, ebx
call fcn.004843c4
mov edx, esp
push edx
push edi
push 0x1091
push eax
call sub.user32.dll_SendMessageW
add esp, 0x60
pop ebp
pop edi
pop esi
pop ebx
ret