Function at 0x406e30
Capabilities:
Get graphical window text

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x28
mov eax, dword [ecx + 4]
mov ebx, dword [ecx]
mov edx, dword [ecx + 8]
mov esi, dword [ecx + 0xc]
cmp eax, 0x110
je 0x406e80
cmp eax, 0x111
je 0x407050
cmp eax, 0x4e
je 0x406f30
lea esp, [ebp - 0x10]
xor eax, eax
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0x10
mov dword [esp + 4], 0x6b
mov dword [esp], ebx
call dword [sym.imp.user32.dll_GetDlgItem]
lea edx, [ebp - 0x1c]
mov edi, eax
mov eax, dword [esi + 0x1c]
sub esp, 8
mov dword [esp], edx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4116b0
call sym._sprintf
lea edx, [ebp - 0x1c]
mov dword [esp], edi
mov dword [esp + 4], edx
call dword [sym.imp.user32.dll_SetWindowTextA]
mov eax, dword [esi + 0x1c]
sub esp, 8
mov edx, dword [eax*4 + 0x41f6f0]
test edx, edx
je 0x4070d0
cmp edx, 1
je 0x407190
cmp edx, 2
je 0x4071c8
mov eax, dword [eax*4 + 0x41f6e8]
test al, 4
jne 0x407160
test al, 8
jne 0x407130
test al, 1
jne 0x407100
test al, 2
je 0x406e6a
mov dword [esp + 8], 1
mov dword [esp + 4], 0x67
mov dword [esp], ebx
call dword [sym.imp.user32.dll_CheckDlgButton]
sub esp, 0xc
jmp 0x406e6a
cmp dword [esi + 8], 0xffffff36
jne 0x406e6a
mov dword [esp + 4], 0x6b
lea esi, [ebp - 0x1c]
mov dword [esp], ebx
call dword [sym.imp.user32.dll_GetDlgItem]
sub esp, 8
mov dword [esp + 4], esi
mov dword [esp + 8], 4
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetWindowTextA]
sub esp, 0xc
mov dword [esp], esi
call dword [sym.imp.ucrtbase.dll_atoi]
mov dword [esp], ebx
mov edi, dword [sym.imp.user32.dll_IsDlgButtonChecked]
mov dword [esp + 4], 0x68
mov esi, eax
call edi
sub esp, 8
test eax, eax
je 0x4071a0
mov dword [esi*4 + 0x41f6f0], 0
mov dword [esp + 4], 0x64
mov dword [esp], ebx
call edi
sub esp, 8
test eax, eax
mov eax, dword [esi*4 + 0x41f6e8]
je 0x407200
or eax, 4
mov dword [esi*4 + 0x41f6e8], eax
mov dword [esp + 4], 0x65
mov dword [esp], ebx
call edi
sub esp, 8
test eax, eax
mov eax, dword [esi*4 + 0x41f6e8]
je 0x4071f0
or eax, 8
mov dword [esi*4 + 0x41f6e8], eax
mov dword [esp + 4], 0x66
mov dword [esp], ebx
call edi
sub esp, 8
test eax, eax
mov eax, dword [esi*4 + 0x41f6e8]
je 0x4071e0
or eax, 1
mov dword [esi*4 + 0x41f6e8], eax
mov dword [esp + 4], 0x67
mov dword [esp], ebx
call edi
sub esp, 8
test eax, eax
mov eax, dword [esi*4 + 0x41f6e8]
je 0x4071d8
or eax, 2
mov dword [esi*4 + 0x41f6e8], eax
jmp 0x406e6a
movzx esi, dx
cmp dx, 0x67
jbe 0x407090
lea eax, [esi - 0x68]
cmp eax, 2
ja 0x406e6a
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0x6a
mov dword [esp + 4], 0x68
mov dword [esp], ebx
call dword [sym.imp.user32.dll_CheckRadioButton]
sub esp, 0x10
jmp 0x406e6a
cmp esi, 0x63
jbe 0x406e6a
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.user32.dll_IsDlgButtonChecked]
sub esp, 8
test eax, eax
sete al
mov dword [esp + 4], esi
movzx eax, al
mov dword [esp], ebx
mov dword [esp + 8], eax
call dword [sym.imp.user32.dll_CheckDlgButton]
sub esp, 0xc
jmp 0x406e6a
mov eax, 0x68
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x6a
mov dword [esp + 4], 0x68
mov dword [esp], ebx
call dword [sym.imp.user32.dll_CheckRadioButton]
mov eax, dword [esi + 0x1c]
sub esp, 0x10
jmp 0x406ee7
mov dword [esp + 8], 1
mov dword [esp + 4], 0x66
mov dword [esp], ebx
call dword [sym.imp.user32.dll_CheckDlgButton]
mov eax, dword [esi + 0x1c]
sub esp, 0xc
mov eax, dword [eax*4 + 0x41f6e8]
jmp 0x406f06
mov dword [esp + 8], 1
mov dword [esp + 4], 0x65
mov dword [esp], ebx
call dword [sym.imp.user32.dll_CheckDlgButton]
mov eax, dword [esi + 0x1c]
sub esp, 0xc
mov eax, dword [eax*4 + 0x41f6e8]
jmp 0x406efe
mov dword [esp + 8], 1
mov dword [esp + 4], 0x64
mov dword [esp], ebx
call dword [sym.imp.user32.dll_CheckDlgButton]
mov eax, dword [esi + 0x1c]
sub esp, 0xc
mov eax, dword [eax*4 + 0x41f6e8]
jmp 0x406ef6
mov eax, 0x69
jmp 0x4070d5
mov dword [esp + 4], 0x69
mov dword [esp], ebx
call edi
sub esp, 8
test eax, eax
je 0x407208
mov dword [esi*4 + 0x41f6f0], 1
jmp 0x406fa0
mov eax, 0x6a
jmp 0x4070d5
and eax, 0xfffffffd
jmp 0x40703d
and eax, 0xfffffffe
jmp 0x407014
and eax, 0xfffffff7
jmp 0x406feb
and eax, 0xfffffffb
jmp 0x406fc2
mov dword [esp + 4], 0x6a
mov dword [esp], ebx
call edi
sub esp, 8
test eax, eax
je 0x406fa0
mov dword [esi*4 + 0x41f6f0], 2
jmp 0x406fa0