Function at 0x40dd70
Capabilities:
Get graphical window text

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x2e8
mov eax, dword [ecx]
mov edx, dword [ecx + 8]
mov edi, dword [ecx + 0xc]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0x2d4], edx
cmp eax, 0x110
je 0x40ded0
cmp eax, 0x111
jne 0x40e00a
movzx eax, word [ebp - 0x2d4]
cmp eax, 0x65
je 0x40e2b8
ja 0x40e020
cmp eax, 2
je 0x40e28e
cmp eax, 0x64
jne 0x40e140
mov eax, dword [ebp - 0x2d0]
mov dword [esp + 4], 0x7dc
lea ebx, [ebp - 0x216]
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetDlgItem]
sub esp, 8
mov edi, eax
mov dword [esp + 8], 0xff
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetWindowTextW]
mov edx, ebx
sub esp, 0xc
cmp word [ebp - 0x216], 0
je 0x40de31
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x40de28
xor eax, eax
mov ecx, 0x20
jmp 0x40de47
movzx ecx, word [eax + 0x41c328]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40de40
cmp word [ebp - 0x216], 0
mov edx, ebx
je 0x40de69
nop
add edx, 2
cmp word [edx], 0
jne 0x40de60
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [eax + 0x411060]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40de70
mov dword [esp + 0xc], ebx
mov esi, dword [sym.imp.user32.dll_SendMessageW]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x158
mov dword [esp], edi
call esi
mov dword [ebp - 0x2d4], eax
sub esp, 0x10
cmp eax, 0xffffffff
je 0x40e3c2
mov dword [esp], edi
call dword [sym.imp.user32.dll_SetFocus]
xor ecx, ecx
sub esp, 4
jmp 0x40e00c
mov eax, dword [ebp - 0x2d0]
mov dword [esp + 4], 0x7dc
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetDlgItem]
lea edx, [ebp - 0x2b4]
mov esi, dword [sym.imp.user32.dll_SendMessageW]
mov dword [ebp - 0x2b4], 0x9c
mov dword [ebp - 0x2d0], eax
mov edi, eax
mov eax, dword [0x410cb0]
sub esp, 8
mov dword [ebp - 0x2cc], edx
mov dword [esp + 0xc], edx
mov dword [ebp - 0x2b0], 0x10
mov dword [esp + 8], 0
mov dword [esp + 4], 0x43d
mov dword [esp], eax
call esi
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0xfe
mov dword [esp + 4], 0x141
mov dword [esp], edi
call esi
sub esp, 0x10
cmp word [ebp - 0x29a], 0
jle 0x40dff8
xor edi, edi
mov eax, esi
lea ebx, [ebp - 0x216]
mov esi, edi
mov edi, eax
lea esi, [esi]
mov dword [esp + 0x14], 0x411060
mov eax, dword [ebp - 0x2cc]
pxor xmm0, xmm0
cvtsi2ss xmm0, dword [eax + esi*4 + 0x1c]
mov dword [esp + 8], str._.2f__s
inc esi
divss xmm0, dword [0x413640]
mulss xmm0, dword [0x413644]
mov dword [esp], ebx
mov dword [esp + 4], 0xff
divss xmm0, dword [0x413648]
cvtss2sd xmm0, xmm0
movsd qword [esp + 0xc], xmm0
call sym._swprintf.constprop.0
mov eax, dword [ebp - 0x2d0]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0
mov dword [esp + 4], 0x143
mov dword [esp], eax
call edi
movsx eax, word [ebp - 0x29a]
sub esp, 0x10
cmp eax, esi
jg 0x40df78
mov eax, dword [ebp - 0x2d0]
mov dword [esp], eax
call dword [sym.imp.user32.dll_SetFocus]
sub esp, 4
xor ecx, ecx
lea esp, [ebp - 0x10]
mov eax, ecx
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0x10
cmp eax, 0x66
je 0x40e350
cmp eax, 0x7dc
jne 0x40e00a
mov eax, dword [ebp - 0x2d0]
mov ebx, dword [sym.imp.user32.dll_GetDlgItem]
mov dword [esp + 4], 0x64
mov dword [esp], eax
call ebx
mov esi, eax
mov eax, dword [ebp - 0x2d0]
sub esp, 8
mov dword [esp + 4], 0x65
mov dword [esp], eax
call ebx
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x2d0]
sub esp, 8
mov dword [esp + 4], 0x66
mov dword [esp], eax
call ebx
sub esp, 8
mov ebx, eax
mov dword [esp], edi
call dword [sym.imp.user32.dll_GetWindowTextLengthW]
sub esp, 4
test eax, eax
jne 0x40e332
mov dword [esp], esi
mov esi, dword [sym.imp.user32.dll_EnableWindow]
mov dword [esp + 4], 0
call esi
sub esp, 8
mov eax, dword [sym.imp.user32.dll_SendMessageW]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x146
mov dword [esp], edi
mov dword [ebp - 0x2d0], eax
call eax
sub esp, 0x10
test eax, eax
je 0x40e3a1
mov dword [esp + 4], 1
mov dword [esp], ebx
call esi
mov eax, dword [ebp - 0x2d0]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x147
mov dword [esp], edi
call eax
sub esp, 0x10
cmp eax, 0xffffffff
je 0x40e534
mov dword [esp + 4], 1
mov eax, dword [ebp - 0x2cc]
mov dword [esp], eax
call esi
sub esp, 8
jmp 0x40e00a
cmp eax, 1
jne 0x40e00a
mov eax, dword [ebp - 0x2d0]
mov dword [esp + 4], 0x7dc
lea ebx, [ebp - 0x216]
xor edi, edi
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetDlgItem]
mov esi, dword [sym.imp.user32.dll_SendMessageW]
mov dword [ebp - 0x2b4], 0x9c
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0x2b4]
sub esp, 8
mov dword [ebp - 0x2b0], 0x10
mov dword [ebp - 0x2cc], eax
jmp 0x40e1b1
xor edx, edx
test eax, eax
je 0x40e220
mov eax, dword [ebp - 0x2cc]
mov dword [eax + edi*4 + 0x1c], edx
inc edi
mov eax, dword [ebp - 0x2d8]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], edi
mov dword [esp + 4], 0x148
mov dword [esp], eax
call esi
sub esp, 0x10
cmp eax, 0xffffffff
je 0x40e260
cmp edi, 0x20
je 0x40e260
lea ecx, [ebp - 0x2b8]
lea edx, [ebp - 0x2bc]
mov eax, ebx
call sym._number_from_string
mov eax, dword [ebp - 0x2b8]
movss xmm0, dword [ebp - 0x2bc]
cmp eax, 1
je 0x40e248
cmp eax, 2
jne 0x40e1a0
cvtss2sd xmm0, xmm0
mulsd xmm0, qword [0x413668]
cvttsd2si edx, xmm0
jmp 0x40e1a6
cvtss2sd xmm0, xmm0
mulsd xmm0, qword [0x413650]
divsd xmm0, qword [0x413658]
mulsd xmm0, qword [0x413660]
cvttsd2si edx, xmm0
jmp 0x40e1a6
mulss xmm0, dword [0x413640]
cvttss2si edx, xmm0
jmp 0x40e1a6
mov eax, dword [ebp - 0x2cc]
mov word [ebp - 0x29a], di
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [0x410cb0]
mov dword [esp + 4], 0x447
mov dword [esp], eax
call esi
sub esp, 0x10
mov eax, dword [ebp - 0x2d4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2d0]
mov dword [esp], eax
call dword [sym.imp.user32.dll_EndDialog]
mov ecx, 1
sub esp, 8
jmp 0x40e00c
mov eax, dword [ebp - 0x2d0]
mov dword [esp + 4], 0x7dc
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetDlgItem]
mov esi, dword [sym.imp.user32.dll_SendMessageW]
sub esp, 8
mov ebx, eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x147
mov dword [esp], eax
call esi
xor ecx, ecx
sub esp, 0x10
cmp eax, 0xffffffff
je 0x40e00c
mov dword [ebp - 0x2cc], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], 0x144
mov dword [esp], ebx
call esi
mov ecx, dword [ebp - 0x2cc]
sub esp, 0x10
jmp 0x40e00c
mov dword [esp], esi
mov esi, dword [sym.imp.user32.dll_EnableWindow]
mov dword [esp + 4], 1
call esi
sub esp, 8
jmp 0x40e0ac
mov eax, dword [ebp - 0x2d0]
mov dword [esp + 4], 0x7dc
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetDlgItem]
sub esp, 8
mov ebx, eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x14b
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendMessageW]
sub esp, 0x10
mov dword [esp], ebx
call dword [sym.imp.user32.dll_SetFocus]
sub esp, 4
jmp 0x40e00a
mov dword [ebp - 0x2cc], eax
mov dword [esp + 4], 0
mov dword [esp], ebx
call esi
mov ecx, dword [ebp - 0x2cc]
sub esp, 8
jmp 0x40e00c
mov dword [ebp - 0x2b8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x146
mov dword [esp], edi
call esi
lea ecx, [ebp - 0x2bc]
lea edx, [ebp - 0x2b8]
mov dword [ebp - 0x2cc], eax
sub esp, 0x10
mov eax, ebx
call sym._number_from_string
test eax, eax
je 0x40e541
cmp dword [ebp - 0x2cc], 0x1f
jg 0x40e5ca
mov eax, dword [ebp - 0x2bc]
movss xmm0, dword [ebp - 0x2b8]
mov dword [ebp - 0x2b4], 0xbf800000
cmp eax, 1
je 0x40e6f2
cmp eax, 2
je 0x40e6c7
test eax, eax
je 0x40e706
mov dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x2cc]
test eax, eax
jle 0x40e72e
xor edx, edx
lea eax, [ebp - 0x2b4]
mov dword [ebp - 0x2d4], edi
mov dword [ebp - 0x2d8], esi
mov edi, edx
mov esi, eax
jmp 0x40e4a1
xor edx, edx
test eax, eax
je 0x40e50f
cmp dword [ebp - 0x2d0], edx
jle 0x40e605
inc edi
cmp dword [ebp - 0x2cc], edi
je 0x40e6b6
mov eax, dword [ebp - 0x2d4]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], edi
mov dword [esp], eax
mov eax, dword [ebp - 0x2d8]
mov dword [esp + 4], 0x148
call eax
lea ecx, [ebp - 0x2bc]
mov edx, esi
mov eax, ebx
sub esp, 0x10
call sym._number_from_string
mov eax, dword [ebp - 0x2bc]
movss xmm0, dword [ebp - 0x2b4]
cmp eax, 1
je 0x40e4fe
cmp eax, 2
jne 0x40e47e
cvtss2sd xmm0, xmm0
mulsd xmm0, qword [0x413668]
cvttsd2si edx, xmm0
jmp 0x40e488
mulss xmm0, dword [0x413640]
cvttss2si edx, xmm0
jmp 0x40e488
cvtss2sd xmm0, xmm0
mulsd xmm0, qword [0x413650]
divsd xmm0, qword [0x413658]
mulsd xmm0, qword [0x413660]
cvttsd2si edx, xmm0
jmp 0x40e488
mov dword [esp + 4], 0
jmp 0x40e126
mov eax, dword [ebp - 0x2d0]
mov dword [esp], 0
mov dword [ebp - 0x2b4], 0x28
mov dword [ebp - 0x2b0], eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov dword [ebp - 0x2a8], 0x6a9
mov dword [ebp - 0x2ac], eax
sub esp, 4
mov dword [ebp - 0x2a4], 0x41c450
lea eax, [ebp - 0x2b4]
mov dword [ebp - 0x2a0], 0x40
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x290], 0
mov dword [esp], eax
call dword [sym.imp.user32.dll_MessageBoxIndirectW]
sub esp, 4
jmp 0x40deb4
mov eax, dword [ebp - 0x2d0]
mov dword [esp], 0
mov dword [ebp - 0x2b4], 0x28
mov dword [ebp - 0x2b0], eax
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
mov dword [ebp - 0x2a8], 0x6b0
mov dword [ebp - 0x2ac], eax
sub esp, 4
jmp 0x40e577
mov ecx, edi
mov edi, dword [ebp - 0x2d4]
mov dword [ebp - 0x2d4], edx
mov esi, dword [ebp - 0x2d8]
mov edx, dword [ebp - 0x2d0]
cmp dword [ebp - 0x2d4], edx
je 0x40deb4
mov dword [ebp - 0x2cc], ecx
mov dword [esp + 0x14], 0x411060
pxor xmm0, xmm0
mov dword [esp + 8], str._.2f__s
cvtsi2ss xmm0, dword [ebp - 0x2d0]
divss xmm0, dword [0x413640]
mulss xmm0, dword [0x413644]
divss xmm0, dword [0x413648]
mov dword [esp], ebx
cvtss2sd xmm0, xmm0
mov dword [esp + 4], 0xff
movsd qword [esp + 0xc], xmm0
call sym._swprintf.constprop.0
mov eax, dword [ebp - 0x2cc]
mov dword [esp + 0xc], ebx
mov dword [esp + 4], 0x14a
mov dword [esp + 8], eax
mov dword [esp], edi
call esi
sub esp, 0x10
mov dword [esp + 4], 0
mov dword [esp], edi
call dword [sym.imp.user32.dll_SetWindowTextW]
sub esp, 8
jmp 0x40deb4
mov edi, dword [ebp - 0x2d4]
mov esi, dword [ebp - 0x2d8]
jmp 0x40e631
cvtss2sd xmm0, xmm0
mulsd xmm0, qword [0x413668]
cvttsd2si eax, xmm0
mov dword [ebp - 0x2d0], eax
mov edx, dword [ebp - 0x2cc]
test edx, edx
jg 0x40e464
xor ecx, ecx
jmp 0x40e619
mulss xmm0, dword [0x413640]
cvttss2si eax, xmm0
mov dword [ebp - 0x2d0], eax
jmp 0x40e6dd
cvtss2sd xmm0, xmm0
mulsd xmm0, qword [0x413650]
divsd xmm0, qword [0x413658]
mulsd xmm0, qword [0x413660]
cvttsd2si eax, xmm0
mov dword [ebp - 0x2d0], eax
jmp 0x40e6dd
mov dword [ebp - 0x2cc], 0
jmp 0x40e631