Function at 0x404cb0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x80c
mov dword [ebp - 0x40c], 0
jmp 0x404cd4
mov eax, dword [ebp - 0x40c]
add eax, 1
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 0x10
jge 0x404f0e
mov ecx, dword [ebp - 0x40c]
imul ecx, ecx, 0x9650
cmp dword [ecx + 0x418650], 0
jne 0x404cf8
jmp 0x404cc5
push 0x3e8
lea edx, [ebp - 0x7f4]
push edx
push 0xc14
mov eax, dword [0x4a5d2c]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea ecx, [ebp - 0x18]
push ecx
push 0x40ec00
lea edx, [ebp - 0x7f4]
push edx
call dword [sym.imp.MSVCRT.dll_sscanf]
add esp, 0xc
cmp eax, 1
je 0x404d85
push 0xc28
mov eax, dword [0x4a5d2c]
push eax
call fcn.00409809
add esp, 8
push 0
push 0x4a6168
push 0xcaf
call fcn.00409a9b
add esp, 4
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x40c]
imul ecx, ecx, 0x9650
mov dword [ecx + 0x418650], 0
jmp 0x404f09
mov edx, dword [ebp - 0x40c]
imul edx, edx, 0x9650
mov eax, dword [edx + 0x418648]
mov dword [ebp - 0x7f8], eax
mov ecx, dword [ebp - 0x40c]
imul ecx, ecx, 0x9650
mov edx, dword [ebp - 0x7f8]
movsx eax, word [ecx + edx*2 + 0x40f048]
mov dword [ebp - 0x7fc], eax
fild dword [ebp - 0x7fc]
fdiv qword [0x40d1f8]
fmul qword [0x40d1f0]
fld dword [ebp - 0x18]
fcompp
fnstsw ax
test ah, 1
je 0x404f09
mov ecx, dword [ebp - 0x40c]
imul ecx, ecx, 0x9650
movsx edx, byte [ecx + 0x418662]
test edx, edx
je 0x404e87
mov eax, dword [ebp - 0x40c]
imul eax, eax, 0x9650
add eax, 0x418658
mov ecx, dword [ebp - 0x40c]
imul ecx, ecx, 0x9650
mov edx, dword [ebp - 0x7f8]
movsx ecx, word [ecx + edx*2 + 0x40f048]
mov dword [ebp - 0x800], ecx
fild dword [ebp - 0x800]
fdiv qword [0x40d1f8]
mov edx, dword [ebp - 0x40c]
imul edx, edx, 0x9650
xor ecx, ecx
mov cx, word [edx + 0x418660]
mov dword [ebp - 0x804], ecx
fild dword [ebp - 0x804]
fmulp st(1)
fmul qword [0x40d1e8]
fdiv qword [0x40d1e0]
fdiv qword [0x40d1d8]
fadd qword [eax]
mov edx, dword [ebp - 0x40c]
imul edx, edx, 0x9650
add edx, 0x418658
fstp qword [edx]
jmp 0x404f09
mov eax, dword [ebp - 0x40c]
imul eax, eax, 0x9650
add eax, 0x418658
mov ecx, dword [ebp - 0x40c]
imul ecx, ecx, 0x9650
mov edx, dword [ebp - 0x7f8]
movsx ecx, word [ecx + edx*2 + 0x40f048]
mov dword [ebp - 0x808], ecx
fild dword [ebp - 0x808]
fdiv qword [0x40d1f8]
mov edx, dword [ebp - 0x40c]
imul edx, edx, 0x9650
xor ecx, ecx
mov cx, word [edx + 0x418660]
mov dword [ebp - 0x80c], ecx
fild dword [ebp - 0x80c]
fmulp st(1)
fdiv qword [0x40d1e0]
fdiv qword [0x40d1d8]
fadd qword [eax]
mov edx, dword [ebp - 0x40c]
imul edx, edx, 0x9650
add edx, 0x418658
fstp qword [edx]
jmp 0x404cc5
mov eax, dword [0x4a6140]
imul eax, eax, 0x9650
cmp dword [eax + 0x41864c], 1
jne 0x404f76
mov ecx, dword [0x4a6140]
imul ecx, ecx, 0x9650
add ecx, 0x418658
fld qword [ecx]
fdiv qword [0x40d1e8]
sub esp, 8
fstp qword [esp]
push 0x40ec04
lea edx, [ebp - 0x400]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0xc2e
push 0xc2f
push 0xc2e
mov eax, dword [0x4a5d2c]
push eax
call fcn.00409878
add esp, 0x10
jmp 0x404fc2
mov ecx, dword [0x4a6140]
imul ecx, ecx, 0x9650
add ecx, 0x418658
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ecx]
push eax
push 0x40ec0c
lea ecx, [ebp - 0x400]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0xc2f
push 0xc2f
push 0xc2e
mov edx, dword [0x4a5d2c]
push edx
call fcn.00409878
add esp, 0x10
push 0xc0e
mov eax, dword [0x4a5d2c]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x14]
push ecx
push 0xc0e
mov edx, dword [0x4a5d2c]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x14]
add eax, 1
mov ecx, dword [ebp - 0xc]
sub ecx, eax
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x10]
add edx, 1
mov eax, dword [ebp - 8]
sub eax, edx
mov dword [ebp - 8], eax
mov dword [ebp - 0x10], 1
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x14], ecx
push 0xff0000
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [ebp - 0x408], eax
mov edx, dword [ebp - 0x408]
push edx
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.USER32.dll_FillRect]
mov edx, dword [ebp - 0x408]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
push str.SYSTEM_FIXED_FONT
push 0
push 2
push 0
push 0
push 0
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0x1a
call dword [sym.imp.GDI32.dll_CreateFontA]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x404]
push eax
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x404], eax
push 0xffffff
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.GDI32.dll_SetTextColor]
push 0xff0000
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
lea ecx, [ebp - 0x400]
push ecx
call sub.MSVCRT.dll_strlen
add esp, 4
push eax
lea edx, [ebp - 0x400]
push edx
push 1
push 0xa
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.GDI32.dll_TextOutA]
mov ecx, dword [ebp - 0x404]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 4]
push eax
push 0xc0e
mov ecx, dword [0x4a5d2c]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov esp, ebp
pop ebp
ret