Function at 0x404a70
Capabilities:
Create process on windows
Get graphical window text
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xec
push edi
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edi, eax
push edi
mov dword [esp + 0x14], edi
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
test eax, eax
jle 0x404df6
push ebx
push ebp
push esi
lea esi, [eax + 1]
push esi
mov dword [esp + 0x24], 0x40cd94
mov dword [esp + 0x28], 0x40cd84
mov dword [esp + 0x2c], 0x40cd78
mov dword [esp + 0x30], 0x40cd68
mov dword [esp + 0x34], 0x40cd50
mov dword [esp + 0x38], 0x40cd40
mov dword [esp + 0x3c], 0x40cd38
mov dword [esp + 0x40], 0x40cd24
mov dword [esp + 0x44], 0x40cd14
mov dword [esp + 0x48], 0x40cd0c
mov dword [esp + 0x4c], 0x40ca24
mov dword [esp + 0x50], 0x40cd00
mov dword [esp + 0x54], 0x40ccf4
mov dword [esp + 0x58], 0x40ccec
mov dword [esp + 0x5c], 0x40cce4
mov dword [esp + 0x60], 0x40ccdc
mov dword [esp + 0x64], 0x40ca88
mov dword [esp + 0x68], 0x40ccd4
mov dword [esp + 0x6c], 0x40becc
mov dword [esp + 0x70], 0x40ca78
mov dword [esp + 0x74], 0x40cccc
mov dword [esp + 0x78], 0x40b1cc
mov dword [esp + 0x7c], 0x40ccc0
mov dword [esp + 0x80], 0x40be38
mov dword [esp + 0x84], 0x40be30
mov dword [esp + 0x88], 0x40bdcc
mov dword [esp + 0x8c], 0x40ccb4
mov dword [esp + 0x90], 0x40cca4
mov dword [esp + 0x94], 0x40bafc
mov dword [esp + 0x98], 0x40bb90
mov dword [esp + 0x9c], 0x40bb84
mov dword [esp + 0xa0], 0x40ca50
mov dword [esp + 0xa4], 0x40baf0
mov dword [esp + 0xa8], 0x40ca68
mov dword [esp + 0xac], 0x40bc18
mov dword [esp + 0xb0], 0x40cbc0
mov dword [esp + 0xb4], 0x40cc9c
mov dword [esp + 0xb8], 0x40cafc
mov dword [esp + 0xbc], 0x40cc94
mov dword [esp + 0xc0], 0x40cc8c
mov dword [esp + 0xc4], 0x40bc64
mov dword [esp + 0xc8], 0x40cc84
mov dword [esp + 0xcc], 0x40cc74
mov dword [esp + 0xd0], 0x40cc6c
mov dword [esp + 0xd4], 0x40cc64
mov dword [esp + 0xd8], 0x40cc60
mov dword [esp + 0xdc], 0x40cc58
mov dword [esp + 0xe0], 0x40cc50
mov dword [esp + 0xe4], 0x40cc48
mov dword [esp + 0xe8], 0x40cc40
mov dword [esp + 0xec], 0x40cc34
mov dword [esp + 0xf0], 0x40ca1c
mov dword [esp + 0xf4], 0x40cc28
mov dword [esp + 0xf8], 0x40cc20
mov dword [esp + 0xfc], 0x40ca0c
call fcn.0040829e
add esp, 4
mov ebx, eax
push esi
push ebx
push edi
mov dword [esp + 0x1c], ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
xor eax, eax
mov dword [esp + 0x14], eax
mov edi, edi
mov edi, dword [esp + eax*4 + 0x20]
push edi
mov esi, ebx
call fcn.004086d0
mov ebx, eax
add esp, 4
test ebx, ebx
jle 0x404e0b
mov eax, dword [esp + 0x10]
mov cl, byte [eax]
xor ebp, ebp
test cl, cl
je 0x404e0b
lea esp, [esp]
push ebx
push edi
push esi
inc ebp
call fcn.0040853c
add esp, 0xc
test eax, eax
je 0x404d1d
mov al, byte [esi + 1]
inc esi
test al, al
jne 0x404d00
jmp 0x404e0b
test ebp, ebp
jle 0x404e0b
mov esi, dword [esp + 0x10]
push 0x40cc0c
call fcn.004086d0
mov edi, eax
add esp, 4
test edi, edi
jle 0x404d64
mov al, byte [esi]
xor ebx, ebx
test al, al
je 0x404d64
push edi
push 0x40cc0c
push esi
inc ebx
call fcn.0040853c
add esp, 0xc
test eax, eax
je 0x404e03
mov al, byte [esi + 1]
inc esi
test al, al
jne 0x404d44
mov esi, dword [esp + 0x1c]
push esi
mov dword [esp + 0x1c], 0
call dword [sym.imp.USER32.dll_CloseWindow]
lea ecx, [esp + 0x18]
push ecx
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [esp + 0x18]
cmp eax, 0x32
jbe 0x404d9d
push eax
call fcn.00401000
add esp, 4
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
cmp dword [esp + 0x14], 1
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteA]
jne 0x404dc6
mov edx, dword [0x411e98]
push 5
push 0
push 0x40cbf4
push 0x412118
push 0x40cbec
push edx
call esi
call fcn.004047a0
mov eax, dword [0x411e98]
push 0
push 0
push 0x40cbdc
push 0x410710
push 0x40cbec
push eax
call esi
mov ecx, dword [esp + 0x10]
push ecx
call fcn.004082b2
add esp, 4
pop esi
pop ebp
pop ebx
mov eax, 1
pop edi
add esp, 0xec
ret
test ebx, ebx
je 0x404d64
mov eax, dword [esp + 0x14]
inc eax
cmp eax, 0x37
mov dword [esp + 0x14], eax
jge 0x404de6
mov ebx, dword [esp + 0x10]
jmp 0x404cd0