Function at 0x40bf10
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x2dc
mov eax, dword [ebp + 0xc]
cmp eax, 0x110
je 0x40c0f0
cmp eax, 0x111
jne 0x40c0b0
movzx eax, word [ebp + 0x10]
cmp eax, 0x64
je 0x40c310
jbe 0x40c0c0
cmp eax, 0x66
je 0x40c060
jb 0x40c2a0
xor ebx, ebx
cmp eax, 0x7dc
jne 0x40c0b2
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0x64
mov dword [esp], eax
call sub.user32.dll_GetDlgItem
mov ebx, eax
mov eax, dword [ebp + 8]
sub esp, 8
mov dword [esp + 4], 0x65
mov dword [esp], eax
call sub.user32.dll_GetDlgItem
mov edi, eax
mov eax, dword [ebp + 8]
sub esp, 8
mov dword [esp + 4], 0x66
mov dword [esp], eax
call sub.user32.dll_GetDlgItem
mov esi, eax
mov eax, dword [ebp + 0x14]
sub esp, 8
mov dword [esp], eax
call sub.user32.dll_GetWindowTextLengthW
sub esp, 4
test eax, eax
je 0x40c3df
mov dword [esp + 4], 1
mov dword [esp], ebx
call sub.user32.dll_EnableWindow
sub esp, 8
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x146
mov dword [esp], eax
call sym.unk_169
sub esp, 0x10
mov ebx, eax
test eax, eax
je 0x40c3f7
mov dword [esp + 4], 1
mov dword [esp], esi
call sub.user32.dll_EnableWindow
mov eax, dword [ebp + 0x14]
sub esp, 8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x147
mov dword [esp], eax
call sym.unk_169
sub esp, 0x10
cmp eax, 0xffffffff
je 0x40c561
mov dword [esp + 4], 1
xor ebx, ebx
mov dword [esp], edi
call sub.user32.dll_EnableWindow
sub esp, 8
jmp 0x40c0b2
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0x7dc
mov dword [esp], eax
call sub.user32.dll_GetDlgItem
sub esp, 8
mov ebx, eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x14b
mov dword [esp], eax
call sym.unk_169
sub esp, 0x10
mov dword [esp], ebx
call sub.user32.dll_SetFocus
sub esp, 4
lea esi, [esi]
lea esi, [esi]
xor ebx, ebx
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 0x10
cmp eax, 1
je 0x40c1d5
cmp eax, 2
jne 0x40c0b0
mov eax, dword [ebp + 0x10]
mov ebx, 1
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.user32.dll_EndDialog
sub esp, 8
jmp 0x40c0b2
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0x7dc
lea esi, [ebp - 0x2b4]
xor edi, edi
mov dword [esp], eax
call sub.user32.dll_GetDlgItem
mov dword [ebp - 0x2b4], 0x9c
mov ebx, eax
mov dword [ebp - 0x2cc], eax
sub esp, 8
mov eax, dword [0x41a724]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0x43d
mov dword [esp], eax
mov dword [ebp - 0x2b0], 0x10
call sym.unk_169
sub esp, 0x10
mov dword [esp], ebx
lea ebx, [ebp - 0x216]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0xfe
mov dword [esp + 4], 0x141
call sym.unk_169
sub esp, 0x10
cmp word [ebp - 0x29a], 0
jle 0x40c1bf
mov edx, dword [esi + edi*4 + 0x1c]
mov eax, ebx
add edi, 1
call sym.unk_102
mov eax, dword [ebp - 0x2cc]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0
mov dword [esp + 4], 0x143
mov dword [esp], eax
call sym.unk_169
movsx eax, word [ebp - 0x29a]
sub esp, 0x10
cmp eax, edi
jg 0x40c181
mov eax, dword [ebp - 0x2cc]
mov dword [esp], eax
call sub.user32.dll_SetFocus
sub esp, 4
jmp 0x40c0b0
mov eax, dword [ebp + 8]
lea ebx, [ebp - 0x216]
xor edi, edi
lea esi, [ebp - 0x2b4]
mov dword [esp + 4], 0x7dc
mov dword [esp], eax
call sub.user32.dll_GetDlgItem
mov dword [ebp - 0x2b4], 0x9c
sub esp, 8
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2b0], 0x10
jmp 0x40c248
cmp edi, 0x20
je 0x40c26e
lea ecx, [ebp - 0x2b8]
lea edx, [ebp - 0x2bc]
mov eax, ebx
call sym.unk_77
fld dword [ebp - 0x2bc]
mov eax, dword [ebp - 0x2b8]
fstp dword [esp]
call sym.unk_87
mov dword [esi + edi*4 + 0x1c], eax
add edi, 1
mov eax, dword [ebp - 0x2cc]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], edi
mov dword [esp + 4], 0x148
mov dword [esp], eax
call sym.unk_169
sub esp, 0x10
cmp eax, 0xffffffff
jne 0x40c215
mov eax, dword [0x41a724]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0x447
mov dword [esp], eax
mov word [ebp - 0x29a], di
call sym.unk_169
sub esp, 0x10
jmp 0x40c0ce
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0x7dc
xor ebx, ebx
mov dword [esp], eax
call sub.user32.dll_GetDlgItem
sub esp, 8
mov esi, eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x147
mov dword [esp], eax
call sym.unk_169
sub esp, 0x10
cmp eax, 0xffffffff
je 0x40c0b2
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], 0x144
mov dword [esp], esi
call sym.unk_169
sub esp, 0x10
jmp 0x40c0b2
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0x7dc
lea ebx, [ebp - 0x216]
mov dword [esp], eax
call sub.user32.dll_GetDlgItem
sub esp, 8
mov edi, eax
mov dword [esp + 8], 0xff
mov dword [esp + 4], ebx
mov dword [esp], eax
call sub.user32.dll_GetWindowTextW
mov edx, ebx
sub esp, 0xc
cmp word [ebp - 0x216], 0
je 0x40c35a
add edx, 2
cmp word [edx], 0
jne 0x40c351
xor eax, eax
mov ecx, 0x20
jmp 0x40c36a
movzx ecx, word [eax + 0x4117b8]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40c363
cmp word [ebp - 0x216], 0
mov edx, ebx
je 0x40c38b
add edx, 2
cmp word [edx], 0
jne 0x40c382
xor eax, eax
lea esi, [esi]
movzx ecx, word [eax + 0x4196c0]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x40c390
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x158
mov dword [esp], edi
call sym.unk_169
sub esp, 0x10
mov dword [ebp - 0x2d0], eax
cmp eax, 0xffffffff
je 0x40c40f
mov dword [esp], edi
xor ebx, ebx
call sub.user32.dll_SetFocus
sub esp, 4
jmp 0x40c0b2
mov dword [esp + 4], 0
mov dword [esp], ebx
call sub.user32.dll_EnableWindow
sub esp, 8
jmp 0x40bfd5
mov dword [esp + 4], 0
mov dword [esp], esi
call sub.user32.dll_EnableWindow
sub esp, 8
jmp 0x40c0b2
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x146
mov dword [esp], edi
mov dword [ebp - 0x2b8], 0
call sym.unk_169
lea ecx, [ebp - 0x2bc]
lea edx, [ebp - 0x2b8]
sub esp, 0x10
mov dword [ebp - 0x2cc], eax
mov eax, ebx
call sym.unk_77
test eax, eax
je 0x40c57b
cmp dword [ebp - 0x2cc], 0x1f
jg 0x40c592
fld dword [ebp - 0x2b8]
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x2b4], 0xbf800000
fstp dword [esp]
call sym.unk_87
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2cc]
test eax, eax
jle 0x40c5b4
lea esi, [ebp - 0x2b4]
xor eax, eax
mov dword [ebp - 0x2d0], esi
mov esi, eax
jmp 0x40c4bf
add esi, 1
cmp dword [ebp - 0x2cc], esi
je 0x40c5a9
mov dword [esp + 0xc], ebx
mov dword [esp + 8], esi
mov dword [esp + 4], 0x148
mov dword [esp], edi
call sym.unk_169
mov edx, dword [ebp - 0x2d0]
lea ecx, [ebp - 0x2bc]
mov eax, ebx
sub esp, 0x10
call sym.unk_77
fld dword [ebp - 0x2b4]
mov eax, dword [ebp - 0x2bc]
fstp dword [esp]
call sym.unk_87
cmp dword [ebp - 0x2d4], eax
jg 0x40c4b0
mov dword [ebp - 0x2d0], eax
mov ecx, dword [ebp - 0x2d4]
cmp dword [ebp - 0x2d0], ecx
je 0x40c3cd
mov edx, dword [ebp - 0x2d4]
mov eax, ebx
call sym.unk_102
mov dword [esp + 0xc], ebx
mov dword [esp + 8], esi
mov dword [esp + 4], 0x14a
mov dword [esp], edi
call sym.unk_169
sub esp, 0x10
mov dword [esp + 4], 0
mov dword [esp], edi
call sub.user32.dll_SetWindowTextW
sub esp, 8
jmp 0x40c3cd
mov dword [esp + 4], 0
xor ebx, ebx
mov dword [esp], edi
call sub.user32.dll_EnableWindow
sub esp, 8
jmp 0x40c0b2
mov eax, dword [ebp + 8]
mov ecx, 0x40
mov edx, 0x6a9
call sym.unk_94
jmp 0x40c3cd
mov eax, dword [ebp + 8]
mov ecx, 0x40
mov edx, 0x6b0
call sym.unk_94
jmp 0x40c3cd
mov esi, dword [ebp - 0x2cc]
jmp 0x40c521
xor esi, esi
jmp 0x40c50f