Function at 0x406e50
Capabilities:
Get graphical window text

Disassembly:
push 0xffffffffffffffff
push 0x412ae1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x470
mov eax, dword [0x417218]
push ebp
push edi
mov edi, ecx
mov dword [esp + 0x474], eax
mov eax, dword [edi + 0x98]
xor ebp, ebp
cmp eax, ebp
jne 0x406e9a
mov eax, dword [esp + 0x494]
mov dword [eax], ebp
mov eax, 1
jmp 0x407268
mov eax, dword [edi + 4]
push ebx
push esi
lea ecx, [esp + 0x54]
push ecx
push eax
mov dword [esp + 0x54], ebp
mov dword [esp + 0x58], eax
call dword [0x41334c]
mov dword [esp + 0x4c], eax
mov eax, dword [edi + 4]
lea edx, [esp + 0x14]
push edx
push eax
mov dword [esp + 0x490], ebp
call dword [0x413380]
mov edx, dword [edi + 4]
push 0x3e8
lea ecx, [esp + 0x98]
push ecx
push edx
call dword [0x41330c]
lea eax, [esp + 0x94]
push eax
lea ecx, [esp + 0x14]
call fcn.00402c80
mov dword [esp + 0x24], ebp
cmp dword [edi + 0x84], ebp
mov byte [esp + 0x488], 2
jne 0x406f5d
push 4
call fcn.0040baaf
add esp, 4
cmp eax, ebp
je 0x406f1d
mov dword [eax], ebp
mov esi, eax
jmp 0x406f1f
xor esi, esi
mov ecx, dword [esp + 0x4c]
push ecx
call dword [0x4130ac]
mov dword [esi], eax
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x4c]
sub eax, ecx
mov ecx, dword [esp + 0x1c]
push eax
sub ecx, ebx
push ecx
push edx
call dword [0x41309c]
push eax
mov dword [esp + 0x28], eax
mov eax, dword [esi]
push eax
call dword [0x413058]
jmp 0x406f61
lea esi, [esp + 0x4c]
mov ecx, dword [esi]
push 1
push ecx
call dword [0x413098]
mov edx, dword [esi]
mov ebx, dword [0x413094]
mov dword [esp + 0x30], eax
mov eax, dword [edi + 0x24]
push eax
push edx
call ebx
mov dword [esp + 0x28], eax
mov eax, dword [edi + 0x70]
cmp eax, ebp
je 0x406f98
push eax
mov eax, dword [esi]
push eax
call dword [0x413058]
mov dword [esp + 0x34], eax
cmp dword [edi + 0x84], ebp
jne 0x406fe0
cmp dword [edi + 0xa8], ebp
jne 0x406fc3
mov eax, dword [edi + 0x30]
cmp eax, ebp
jne 0x406fb2
mov eax, dword [edi + 0x2c]
mov edx, dword [esi]
push eax
lea ecx, [esp + 0x18]
push ecx
push edx
call dword [0x413248]
jmp 0x406fe0
mov eax, dword [edi + 0xac]
mov ecx, dword [edi + 0xb0]
push 0x64
push eax
push ecx
lea edx, [esp + 0x20]
push edx
push esi
mov ecx, edi
call fcn.00407290
xor eax, eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov eax, dword [edi + 0x30]
cmp eax, ebp
je 0x407003
lea ecx, [esp + 0x38]
push ecx
push 0xc
push eax
call dword [0x413070]
cmp dword [edi + 0x78], ebp
jne 0x40701b
cmp dword [edi + 0x9c], 1
jne 0x40701b
mov edx, dword [esp + 0x3c]
mov eax, dword [esi]
push edx
push eax
call ebx
mov ecx, dword [edi + 4]
push 0xfffffffffffffff0
push ecx
call dword [0x413274]
mov ecx, eax
and ecx, 0x1f
dec ecx
je 0x407049
dec ecx
je 0x407042
sub ecx, 0xa
je 0x40703e
mov ebx, 0x10
jmp 0x40704e
xor ebx, ebx
jmp 0x40704e
mov ebx, 0x12
jmp 0x40704e
mov ebx, 0x11
test ah, 2
je 0x407081
mov eax, dword [esp + 0x10]
cmp dword [eax - 8], ebp
mov ebx, 1
jl 0x40707c
push 0x413948
push eax
call fcn.0040babd
add esp, 8
cmp eax, ebp
je 0x40707c
sub eax, dword [esp + 0x10]
cmp eax, 0xffffffff
jne 0x407081
mov ebx, 0x25
cmp dword [edi + 0x94], ebp
je 0x40711e
mov edx, dword [esi]
mov ebp, dword [0x413090]
push 0x18
push edx
call ebp
mov ecx, dword [esi]
mov ebx, eax
lea eax, [esp + 0x44]
push eax
push ecx
call dword [0x41308c]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
sub eax, edx
cdq
sub eax, edx
mov edx, dword [esp + 0x14]
sar eax, 1
push 0
push eax
mov eax, dword [esp + 0x24]
sub eax, edx
cdq
sub eax, edx
mov edx, dword [esi]
sar eax, 1
push eax
push edx
call dword [0x413088]
mov eax, dword [esp + 0x10]
push eax
mov dword [esp + 0x30], eax
call dword [0x4131ec]
mov ecx, dword [esi]
push eax
mov eax, dword [esp + 0x30]
push eax
push 0
push 0
push ecx
call dword [0x413084]
mov eax, dword [esp + 0x48]
cdq
sub eax, edx
sar eax, 1
push 0
push eax
mov eax, dword [esp + 0x4c]
cdq
sub eax, edx
mov edx, dword [esi]
sar eax, 1
push eax
push edx
call dword [0x413088]
mov eax, dword [esi]
push ebx
push eax
call ebp
jmp 0x407189
mov eax, dword [esi]
mov ebp, dword [0x413264]
push ebx
lea ecx, [esp + 0x18]
push ecx
push 0xffffffffffffffff
lea edx, [esp + 0xa0]
push edx
push eax
call ebp
mov eax, dword [edi + 0x88]
test eax, eax
je 0x407189
mov eax, dword [edi + 0x28]
mov ecx, dword [esi]
push eax
push ecx
call dword [0x413094]
mov eax, dword [edi + 0xa4]
test eax, eax
jne 0x407165
push 0xffffffffffffffff
push 0xffffffffffffffff
lea edx, [esp + 0x1c]
push edx
jmp 0x40716e
push 1
push 1
lea eax, [esp + 0x1c]
push eax
call dword [0x413250]
mov eax, dword [esi]
push ebx
lea ecx, [esp + 0x18]
push ecx
push 0xffffffffffffffff
lea edx, [esp + 0xa0]
push edx
push eax
call ebp
mov ecx, dword [esp + 0x30]
mov edx, dword [esi]
push ecx
push edx
call dword [0x413098]
mov eax, dword [esp + 0x34]
mov ecx, dword [esi]
push eax
push ecx
call dword [0x413058]
mov edx, dword [esp + 0x28]
mov eax, dword [esi]
push edx
push eax
call dword [0x413094]
mov eax, dword [edi + 0x84]
test eax, eax
jne 0x40720a
mov edx, dword [esi]
mov eax, dword [esp + 0x20]
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
push 0xcc0020
push 0
push 0
push edx
sub eax, ebp
push eax
sub ecx, ebx
push ecx
mov ecx, dword [esp + 0x64]
push 0
push 0
push ecx
call dword [0x4130a8]
mov eax, dword [esi]
test eax, eax
je 0x407201
push eax
mov dword [esi], 0
call dword [0x41305c]
push esi
call fcn.0040b029
add esp, 4
mov eax, dword [esp + 0x24]
test eax, eax
pop esi
pop ebx
je 0x40721b
push eax
call dword [0x413064]
mov eax, dword [esp + 8]
mov ecx, dword [0x417054]
lea edx, [eax - 0xc]
cmp edx, ecx
mov byte [esp + 0x480], 0
je 0x407252
add eax, 0xfffffff4
push eax
call dword [0x4131dc]
test eax, eax
jg 0x407252
mov eax, dword [esp + 8]
add eax, 0xfffffff4
push eax
call fcn.0040b02e
add esp, 4
lea ecx, [esp + 0x44]
mov dword [esp + 0x480], 0xffffffff
call fcn.00401750
xor eax, eax
mov ecx, dword [esp + 0x478]
pop edi
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x470]
pop ebp
call fcn.0040adb0
add esp, 0x47c
ret 0x10