Function at 0x407d9b
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x2c
push ebx
mov ebx, ecx
push edi
xor edi, edi
mov eax, dword [ebx + 4]
mov dword [esp + 0x10], ebx
cmp eax, edi
je 0x40807d
push 0xd
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, ebx
call fcn.0040834a
test al, al
jne 0x407dcc
mov byte [esp + 0x38], 1
cmp dword [ebx + 0x64], edi
push esi
mov dword [esp + 0x10], edi
jle 0x40801c
push ebp
jmp 0x407ddf
xor edi, edi
push dword [esp + 0x14]
lea ecx, [ebx + 0x58]
call fcn.004211d1
mov esi, eax
mov ecx, ebx
push dword [esi + 0xc]
call fcn.0040746a
mov ebp, eax
cmp ebp, edi
je 0x408008
mov ecx, dword [ebp + 0x50]
cmp ecx, edi
je 0x408008
mov eax, dword [ebp + 8]
cmp eax, 3
je 0x407eec
cmp eax, 4
je 0x407eec
cmp eax, 5
jne 0x407e86
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
mov edi, eax
inc edi
push edi
call fcn.00427869
mov ebx, eax
pop ecx
test ebx, ebx
jne 0x407e4e
mov ecx, 0x481a44
call fcn.0041f120
push eax
call fcn.0041fd97
pop ecx
cmp edi, 1
jne 0x407e58
and byte [ebx], 0
jmp 0x407e63
push edi
push ebx
push dword [ebp + 0x50]
call dword [sym.imp.USER32.dll_GetWindowTextA]
push ebx
lea ecx, [esi + 0x10]
call fcn.0041e314
push ebx
call fcn.00427a53
push ebx
mov dword [esi + 0x1c], eax
call fcn.0042785e
mov ebx, dword [esp + 0x20]
pop ecx
pop ecx
jmp 0x407f2d
cmp eax, 0xd
jne 0x407ead
lea edi, [esi + 0x10]
push edi
push ecx
call fcn.00406fab
pop ecx
pop ecx
mov ecx, edi
call fcn.0041f120
push eax
call fcn.00427ade
pop ecx
mov dword [esi + 0x1c], eax
jmp 0x407f2d
cmp eax, 7
je 0x407eb7
cmp eax, 8
jne 0x407f2d
xor edx, edx
cmp eax, 7
setne dl
dec edx
push edi
and edx, 0x41
push edi
add edx, 0x147
push edx
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0x1c]
push 0xa
push ecx
push eax
mov dword [esi + 0x1c], eax
call fcn.00428cac
add esp, 0xc
lea eax, [esp + 0x1c]
jmp 0x407f24
push edi
push edi
push 0xf0
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
push 1
pop ecx
cmp eax, ecx
je 0x407f0b
cmp eax, 2
je 0x407f0b
mov dword [esi + 0x1c], edi
jmp 0x407f0e
mov dword [esi + 0x1c], ecx
lea eax, [esp + 0x2c]
push 0xa
push eax
push dword [esi + 0x1c]
call fcn.00428d5f
add esp, 0xc
lea eax, [esp + 0x2c]
push eax
lea ecx, [esi + 0x10]
call fcn.0041e314
push 0x58
call fcn.00427869
test eax, eax
pop ecx
je 0x407f44
mov ecx, eax
call fcn.00408088
mov edi, eax
jmp 0x407f46
xor edi, edi
test edi, edi
jne 0x407f5b
mov ecx, 0x481a44
call fcn.0041f120
push eax
call fcn.0041fd97
pop ecx
push esi
mov ecx, edi
call fcn.0041e382
or dword [edi + 0x10], 0xffffffff
lea ebp, [esi + 0x10]
push ebp
lea ecx, [edi + 0x48]
mov dword [edi + 0xc], 1
call fcn.0041e382
mov eax, dword [esi + 0x1c]
test esi, esi
mov dword [edi + 0x54], eax
je 0x407f99
mov ecx, ebp
call fcn.0041e2fd
mov ecx, esi
call fcn.0041e2fd
push esi
call fcn.0042785e
pop ecx
and dword [esp + 0x10], 0
cmp dword [0x4815d4], 0
jle 0x407ff9
push dword [esp + 0x10]
mov esi, 0x4815c8
mov ecx, esi
call fcn.004211d1
mov ebp, eax
push 1
push edi
mov ecx, ebp
call fcn.0041e578
test al, al
jne 0x407fd9
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, dword [0x4815d4]
jl 0x407fa7
jmp 0x407ffe
test ebp, ebp
je 0x407feb
mov ecx, ebp
call fcn.004080bc
push ebp
call fcn.0042785e
pop ecx
push edi
mov ecx, esi
push dword [esp + 0x14]
call fcn.00421278
jmp 0x408008
mov esi, 0x4815c8
push 0xffffffffffffffff
push edi
mov ecx, esi
call fcn.004211eb
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp eax, dword [ebx + 0x64]
jl 0x407ddd
xor edi, edi
pop ebp
lea ecx, [ebx + 0x58]
call fcn.00421292
cmp dword [0x4811d8], ebx
jne 0x408032
mov dword [0x4811d8], edi
xor esi, esi
cmp dword [ebx + 0x7c], edi
jle 0x408067
lea edi, [ebx + 0x70]
push esi
mov ecx, edi
call fcn.004211d1
mov ecx, dword [eax + 8]
cmp ecx, 2
je 0x408056
cmp ecx, 3
je 0x408056
cmp ecx, 4
jne 0x408061
push 0
push dword [eax + 0x50]
call dword [sym.imp.USER32.dll_EnableWindow]
inc esi
cmp esi, dword [ebx + 0x7c]
jl 0x40803c
cmp byte [esp + 0x3c], 0
mov dword [0x481024], ebx
pop esi
je 0x40807d
push 0
call fcn.004080f0
pop ecx
push 1
pop eax
pop edi
pop ebx
add esp, 0x2c
ret 4