Function at 0x40fd00
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xe0
mov eax, dword [0x4a1a34]
push ebx
push ebp
push esi
push edi
push 0xfa
push eax
call fcn.00410150
add esp, 8
test eax, eax
je 0x4100e9
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [0x4a1a34], eax
xor eax, eax
mov ecx, 0x19
lea edi, [esp + 0x20]
rep stosd dword es:[edi], eax
mov ax, word [0x4a1488]
cmp ax, 6
ja 0x40fd5d
mov ecx, dword [0x45d76c]
mov edx, dword [0x45d770]
jmp 0x40fda8
cmp ax, 0xa
je 0x40fd9c
cmp dword [0x49fc80], 1
je 0x40fd9c
cmp ax, 9
jne 0x40fd87
mov eax, dword [0x45d764]
mov ecx, dword [0x45d768]
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
jmp 0x40fdb0
mov edx, dword [0x45d75c]
mov eax, dword [0x45d760]
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], eax
jmp 0x40fdb0
mov ecx, dword [0x45d754]
mov edx, dword [0x45d758]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], edx
mov eax, dword [0x4a1524]
test eax, eax
mov ebx, dword [sym.imp.USER32.dll_SetDlgItemTextA]
je 0x40fdcc
lea ecx, [esp + 0x20]
push ecx
push 0x43a
push eax
call ebx
call fcn.00404790
call fcn.0040e690
mov ax, word [0x4a1488]
cmp ax, 9
je 0x40fdec
cmp ax, 0xa
jne 0x4100e9
mov eax, dword [0x4a1524]
test eax, eax
je 0x40fea9
lea edx, [esp + 0x1c]
push edx
call fcn.0044d933
mov eax, dword [0x4a13f4]
mov ebp, dword [0x4a13f0]
mov edi, dword [esp + 0x20]
sub eax, ebp
add eax, edi
cdq
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x20], edx
call fcn.0044d725
add esp, 8
test eax, eax
je 0x40fe34
mov ebp, dword [eax]
jmp 0x40fe37
or ebp, 0xffffffff
lea ecx, [esp + 0x14]
push ecx
call fcn.0044d725
add esp, 4
test eax, eax
je 0x40fe4d
mov edi, dword [eax + 4]
jmp 0x40fe50
or edi, 0xffffffff
lea edx, [esp + 0x14]
push edx
call fcn.0044d725
add esp, 4
test eax, eax
je 0x40fe66
mov esi, dword [eax + 8]
jmp 0x40fe69
or esi, 0xffffffff
lea eax, [esp + 0x14]
push eax
call fcn.0044d725
add esp, 4
test eax, eax
je 0x40fe7f
mov eax, dword [eax + 0xc]
jmp 0x40fe81
xor eax, eax
push ebp
push edi
push esi
push eax
lea ecx, [esp + 0x30]
push 0x45d740
push ecx
call fcn.0044c952
mov eax, dword [0x4a1524]
add esp, 0x18
lea edx, [esp + 0x20]
push edx
push 0x43e
push eax
call ebx
call fcn.00404730
push 4
push 0x49d418
push 0x4639d84
call fcn.004042b0
mov eax, dword [0x49fc64]
add esp, 0xc
cmp eax, 1
jne 0x40ff11
call dword [sym.imp.WINMM.dll_timeGetTime]
cmp eax, dword [0x49fc60]
jb 0x40ff11
xor ecx, ecx
mov cx, word [0x4a1484]
lea edx, [esp + 0x88]
and ecx, 0xfffe
push ecx
push edx
call fcn.00424cf0
lea eax, [esp + 0x90]
push eax
call fcn.00402900
add esp, 0xc
mov dword [0x49fc64], 0
call fcn.0040cdf0
mov esi, 9
cmp word [0x4a1488], si
jne 0x4100e9
mov eax, dword [0x49fc80]
test eax, eax
jne 0x4100e9
call fcn.0040bb90
mov dword [0x4a15c4], 0
call fcn.0040b9d0
call fcn.0040c660
mov edi, 0x49df14
jmp 0x40ff60
mov eax, dword [esi*4 + 0x4a0848]
mov ebx, 1
cmp eax, ebx
jne 0x40ff88
cmp dword [edi], ebx
jne 0x40ff7d
push esi
call fcn.0040be30
add esp, 4
mov dword [esi*4 + 0x4a0848], 0
add edi, 0x124
inc esi
cmp edi, 0x49f030
jl 0x40ff60
call fcn.0040cf20
call fcn.0040db70
call fcn.0040b2b0
cmp dword [0x4a15ac], ebx
jne 0x40ffb3
call fcn.00405830
cmp dword [0x4a1650], ebx
jne 0x410069
cmp dword [0x49fbf8], 0x10
jne 0x410069
cmp dword [0x4997bf], ebx
jne 0x410069
cmp dword [0x4a1434], ebx
jne 0x410069
mov ecx, dword [0x4a1a30]
push 0xfa0
push ecx
call fcn.00410150
add esp, 8
cmp eax, ebx
jne 0x410069
mov eax, 0x4997c3
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x410004
sub eax, edx
mov dword [esp + 0x1c], eax
je 0x410069
mov edx, dword [0x4a1494]
mov eax, dword [0x4a1498]
push 6
push edx
push eax
lea ecx, [esp + 0x94]
push ecx
call fcn.00424e10
lea edx, [esp + 0x98]
push edx
call fcn.00402900
push 0x4997c3
call fcn.00404470
mov eax, dword [0x4a1588]
add esp, 0x18
push 0
push 0xd
push pe_nt_image_headers32
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [0x4a1a30], eax
mov eax, dword [0x4a1a2c]
mov ecx, dword [0x4a1434]
inc eax
cmp ecx, 3
mov dword [0x4a1a2c], eax
jne 0x4100ab
and eax, 0x80000001
jns 0x41008b
dec eax
or eax, 0xfffffffe
inc eax
jne 0x410099
push 0x108
push 0x120
jmp 0x4100a3
push 0xd8
push 0x160
call fcn.00404920
add esp, 8
call fcn.00404df0
call fcn.0040b600
call fcn.0040b460
mov ecx, dword [0x49d4cc]
push ecx
call fcn.0040b7f0
mov edx, dword [0x49d4b0]
push edx
call fcn.0040b7f0
add esp, 8
call fcn.0040bc20
call fcn.0040f800
call fcn.0040ef40
call fcn.00405690
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret