Function at 0x406e10
Capabilities:
Get graphical window text

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x38
mov eax, dword [ecx + 4]
mov ebx, dword [ecx]
mov edx, dword [ecx + 8]
mov esi, dword [ecx + 0xc]
cmp eax, 0x110
je 0x406e60
cmp eax, 0x111
je 0x407030
cmp eax, 0x4e
je 0x406f10
lea esp, [ebp - 0x10]
xor eax, eax
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0x10
mov dword [esp + 4], 0x6b
lea edi, [ebp - 0x1c]
mov dword [esp], ebx
call dword [sym.imp.user32.dll_GetDlgItem]
mov dword [ebp - 0x2c], eax
mov eax, dword [esi + 0x1c]
sub esp, 8
mov dword [esp + 4], 0x4116d0
mov dword [esp + 8], eax
mov dword [esp], edi
call sym._sprintf
mov eax, dword [ebp - 0x2c]
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [sym.imp.user32.dll_SetWindowTextA]
mov eax, dword [esi + 0x1c]
sub esp, 8
mov edx, dword [eax*4 + 0x41f6f0]
test edx, edx
je 0x4070b0
cmp edx, 1
je 0x407170
cmp edx, 2
je 0x4071a8
mov eax, dword [eax*4 + 0x41f6e8]
test al, 4
jne 0x407140
test al, 8
jne 0x407110
test al, 1
jne 0x4070e0
test al, 2
je 0x406e4a
mov dword [esp + 8], 1
mov dword [esp + 4], 0x67
mov dword [esp], ebx
call dword [sym.imp.user32.dll_CheckDlgButton]
sub esp, 0xc
jmp 0x406e4a
cmp dword [esi + 8], 0xffffff36
jne 0x406e4a
mov dword [esp + 4], 0x6b
lea esi, [ebp - 0x1c]
mov dword [esp], ebx
call dword [sym.imp.user32.dll_GetDlgItem]
sub esp, 8
mov dword [esp + 4], esi
mov dword [esp + 8], 4
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetWindowTextA]
sub esp, 0xc
mov dword [esp], esi
call dword [sym.imp.ucrtbase.dll_atoi]
mov dword [esp], ebx
mov edi, dword [sym.imp.user32.dll_IsDlgButtonChecked]
mov dword [esp + 4], 0x68
mov esi, eax
call edi
sub esp, 8
test eax, eax
je 0x407180
mov dword [esi*4 + 0x41f6f0], 0
mov dword [esp + 4], 0x64
mov dword [esp], ebx
call edi
sub esp, 8
test eax, eax
mov eax, dword [esi*4 + 0x41f6e8]
je 0x4071e0
or eax, 4
mov dword [esi*4 + 0x41f6e8], eax
mov dword [esp + 4], 0x65
mov dword [esp], ebx
call edi
sub esp, 8
test eax, eax
mov eax, dword [esi*4 + 0x41f6e8]
je 0x4071d0
or eax, 8
mov dword [esi*4 + 0x41f6e8], eax
mov dword [esp + 4], 0x66
mov dword [esp], ebx
call edi
sub esp, 8
test eax, eax
mov eax, dword [esi*4 + 0x41f6e8]
je 0x4071c0
or eax, 1
mov dword [esi*4 + 0x41f6e8], eax
mov dword [esp + 4], 0x67
mov dword [esp], ebx
call edi
sub esp, 8
test eax, eax
mov eax, dword [esi*4 + 0x41f6e8]
je 0x4071b8
or eax, 2
mov dword [esi*4 + 0x41f6e8], eax
jmp 0x406e4a
movzx esi, dx
cmp dx, 0x67
jbe 0x407070
lea eax, [esi - 0x68]
cmp eax, 2
ja 0x406e4a
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0x6a
mov dword [esp + 4], 0x68
mov dword [esp], ebx
call dword [sym.imp.user32.dll_CheckRadioButton]
sub esp, 0x10
jmp 0x406e4a
cmp esi, 0x63
jbe 0x406e4a
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.user32.dll_IsDlgButtonChecked]
sub esp, 8
test eax, eax
sete al
mov dword [esp + 4], esi
movzx eax, al
mov dword [esp], ebx
mov dword [esp + 8], eax
call dword [sym.imp.user32.dll_CheckDlgButton]
sub esp, 0xc
jmp 0x406e4a
mov eax, 0x68
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x6a
mov dword [esp + 4], 0x68
mov dword [esp], ebx
call dword [sym.imp.user32.dll_CheckRadioButton]
mov eax, dword [esi + 0x1c]
sub esp, 0x10
jmp 0x406ec8
mov dword [esp + 8], 1
mov dword [esp + 4], 0x66
mov dword [esp], ebx
call dword [sym.imp.user32.dll_CheckDlgButton]
mov eax, dword [esi + 0x1c]
sub esp, 0xc
mov eax, dword [eax*4 + 0x41f6e8]
jmp 0x406ee7
mov dword [esp + 8], 1
mov dword [esp + 4], 0x65
mov dword [esp], ebx
call dword [sym.imp.user32.dll_CheckDlgButton]
mov eax, dword [esi + 0x1c]
sub esp, 0xc
mov eax, dword [eax*4 + 0x41f6e8]
jmp 0x406edf
mov dword [esp + 8], 1
mov dword [esp + 4], 0x64
mov dword [esp], ebx
call dword [sym.imp.user32.dll_CheckDlgButton]
mov eax, dword [esi + 0x1c]
sub esp, 0xc
mov eax, dword [eax*4 + 0x41f6e8]
jmp 0x406ed7
mov eax, 0x69
jmp 0x4070b5
mov dword [esp + 4], 0x69
mov dword [esp], ebx
call edi
sub esp, 8
test eax, eax
je 0x4071e8
mov dword [esi*4 + 0x41f6f0], 1
jmp 0x406f80
mov eax, 0x6a
jmp 0x4070b5
and eax, 0xfffffffd
jmp 0x40701d
and eax, 0xfffffffe
jmp 0x406ff4
and eax, 0xfffffff7
jmp 0x406fcb
and eax, 0xfffffffb
jmp 0x406fa2
mov dword [esp + 4], 0x6a
mov dword [esp], ebx
call edi
sub esp, 8
test eax, eax
je 0x406f80
mov dword [esi*4 + 0x41f6f0], 2
jmp 0x406f80