Function at 0x407c04
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x2c
push ebx
mov ebx, ecx
push edi
xor edi, edi
mov eax, dword [ebx + 4]
mov dword [esp + 0x10], ebx
cmp eax, edi
je 0x407ee6
push 0xd
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, ebx
call fcn.004081b3
test al, al
jne 0x407c35
mov byte [esp + 0x38], 1
cmp dword [ebx + 0x64], edi
push esi
mov dword [esp + 0x10], edi
jle 0x407e85
push ebp
jmp 0x407c48
xor edi, edi
push dword [esp + 0x14]
lea ecx, [ebx + 0x58]
call fcn.0041fafa
mov esi, eax
mov ecx, ebx
push dword [esi + 0xc]
call fcn.004072e4
mov ebp, eax
cmp ebp, edi
je 0x407e71
mov ecx, dword [ebp + 0x50]
cmp ecx, edi
je 0x407e71
mov eax, dword [ebp + 8]
cmp eax, 3
je 0x407d55
cmp eax, 4
je 0x407d55
cmp eax, 5
jne 0x407cef
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
mov edi, eax
inc edi
push edi
call fcn.004260f9
mov ebx, eax
pop ecx
test ebx, ebx
jne 0x407cb7
mov ecx, 0x47fa34
call fcn.0041de81
push eax
call fcn.0041ea8b
pop ecx
cmp edi, 1
jne 0x407cc1
and byte [ebx], 0
jmp 0x407ccc
push edi
push ebx
push dword [ebp + 0x50]
call dword [sym.imp.USER32.dll_GetWindowTextA]
push ebx
lea ecx, [esi + 0x10]
call fcn.0041d075
push ebx
call fcn.004262e3
push ebx
mov dword [esi + 0x1c], eax
call fcn.004260ee
mov ebx, dword [esp + 0x20]
pop ecx
pop ecx
jmp 0x407d96
cmp eax, 0xd
jne 0x407d16
lea edi, [esi + 0x10]
push edi
push ecx
call fcn.00406e25
pop ecx
pop ecx
mov ecx, edi
call fcn.0041de81
push eax
call fcn.0042636e
pop ecx
mov dword [esi + 0x1c], eax
jmp 0x407d96
cmp eax, 7
je 0x407d20
cmp eax, 8
jne 0x407d96
xor edx, edx
cmp eax, 7
setne dl
dec edx
push edi
and edx, 0x41
push edi
add edx, 0x147
push edx
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0x1c]
push 0xa
push ecx
push eax
mov dword [esi + 0x1c], eax
call fcn.00428bd6
add esp, 0xc
lea eax, [esp + 0x1c]
jmp 0x407d8d
push edi
push edi
push 0xf0
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
push 1
pop ecx
cmp eax, ecx
je 0x407d74
cmp eax, 2
je 0x407d74
mov dword [esi + 0x1c], edi
jmp 0x407d77
mov dword [esi + 0x1c], ecx
lea eax, [esp + 0x2c]
push 0xa
push eax
push dword [esi + 0x1c]
call fcn.00428c89
add esp, 0xc
lea eax, [esp + 0x2c]
push eax
lea ecx, [esi + 0x10]
call fcn.0041d075
push 0x58
call fcn.004260f9
test eax, eax
pop ecx
je 0x407dad
mov ecx, eax
call fcn.00407ef1
mov edi, eax
jmp 0x407daf
xor edi, edi
test edi, edi
jne 0x407dc4
mov ecx, 0x47fa34
call fcn.0041de81
push eax
call fcn.0041ea8b
pop ecx
push esi
mov ecx, edi
call fcn.0041d0e3
or dword [edi + 0x10], 0xffffffff
lea ebp, [esi + 0x10]
push ebp
lea ecx, [edi + 0x48]
mov dword [edi + 0xc], 1
call fcn.0041d0e3
mov eax, dword [esi + 0x1c]
test esi, esi
mov dword [edi + 0x54], eax
je 0x407e02
mov ecx, ebp
call fcn.0041d05e
mov ecx, esi
call fcn.0041d05e
push esi
call fcn.004260ee
pop ecx
and dword [esp + 0x10], 0
cmp dword [0x47f5dc], 0
jle 0x407e62
push dword [esp + 0x10]
mov esi, 0x47f5d0
mov ecx, esi
call fcn.0041fafa
mov ebp, eax
push 1
push edi
mov ecx, ebp
call fcn.0041d2c4
test al, al
jne 0x407e42
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, dword [0x47f5dc]
jl 0x407e10
jmp 0x407e67
test ebp, ebp
je 0x407e54
mov ecx, ebp
call fcn.00407f25
push ebp
call fcn.004260ee
pop ecx
push edi
mov ecx, esi
push dword [esp + 0x14]
call fcn.0041fba1
jmp 0x407e71
mov esi, 0x47f5d0
push 0xffffffffffffffff
push edi
mov ecx, esi
call fcn.0041fb14
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp eax, dword [ebx + 0x64]
jl 0x407c46
xor edi, edi
pop ebp
lea ecx, [ebx + 0x58]
call fcn.0041fbbb
cmp dword [0x47f210], ebx
jne 0x407e9b
mov dword [0x47f210], edi
xor esi, esi
cmp dword [ebx + 0x7c], edi
jle 0x407ed0
lea edi, [ebx + 0x70]
push esi
mov ecx, edi
call fcn.0041fafa
mov ecx, dword [eax + 8]
cmp ecx, 2
je 0x407ebf
cmp ecx, 3
je 0x407ebf
cmp ecx, 4
jne 0x407eca
push 0
push dword [eax + 0x50]
call dword [sym.imp.USER32.dll_EnableWindow]
inc esi
cmp esi, dword [ebx + 0x7c]
jl 0x407ea5
cmp byte [esp + 0x3c], 0
mov dword [0x47f060], ebx
pop esi
je 0x407ee6
push 0
call fcn.00407f59
pop ecx
push 1
pop eax
pop edi
pop ebx
add esp, 0x2c
ret 4