Function at 0x436bb9
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff54c
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
push 0x1ff
mov eax, dword [ebp + 0xc]
add eax, 3
push eax
lea esi, [ebx + 0x5ad]
push esi
call fcn.0049b180
add esp, 0xc
mov byte [ebx + 0x7ac], 0
push esi
call fcn.00454478
cmp byte [ebx + 0x5ad], 0
pop ecx
jne 0x436c28
push 0xa0
lea eax, [ebp - 0x208]
push eax
push 0x43b
push dword [ebx + 0x3c]
call sub.USER32.dll_LoadStringA
lea edx, [ebp - 0x208]
push edx
push ebx
call fcn.0042d216
add esp, 8
jmp 0x436e92
cmp dword [ebx + 0x195], 0
setne cl
and ecx, 1
lea edi, [ebx + 0x3ad]
push ecx
push 0
push 0
push edi
lea eax, [ebx + 0x1ad]
lea edx, [ebp - 1]
push eax
push esi
push edx
call fcn.00405279
mov ecx, dword [ebx + 0xac]
add esp, 0x1c
mov dword [ebp - 0x40e], ecx
lea eax, [ebx + 0xbad]
mov dword [ebp - 0x64c], 0xd
push esi
push edi
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
lea esi, [ebp - 0x644]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
push esi
push edi
xor eax, eax
mov edi, esi
or ecx, 0xffffffff
lea esi, [ebp - 0x60e]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov eax, dword [ebx + 0xc98]
mov edx, dword [0x4b64a0]
mov dword [ebp - 0x612], eax
mov dword [ebp - 0x648], edx
lea ecx, [ebp - 0x64c]
push ecx
push 0
push 0x404
push dword [ebx + 0x40]
call sub.USER32.dll_SendMessageA
cmp dword [ebp - 0x648], 0
jne 0x436d5b
push 0xa0
lea eax, [ebp - 0x208]
push eax
push 0x43c
push dword [ebx + 0x3c]
call sub.USER32.dll_LoadStringA
cmp dword [ebx + 0x195], 0
setne dl
and edx, 1
push edx
push edi
push esi
lea ecx, [ebp - 1]
push ecx
call fcn.0040559f
add esp, 0x10
push eax
lea eax, [ebp - 0x208]
push eax
lea edx, [ebp - 0x408]
push edx
call fcn.004a00a0
add esp, 0xc
lea ecx, [ebp - 0x408]
push ecx
push ebx
call fcn.0042d216
add esp, 8
jmp 0x436e92
push esi
call fcn.0045468f
pop ecx
test eax, eax
jne 0x436dc7
push 0xa0
lea eax, [ebp - 0x208]
push eax
push 0x43d
push dword [ebx + 0x3c]
call sub.USER32.dll_LoadStringA
cmp dword [ebx + 0x195], 0
setne dl
and edx, 1
push edx
push edi
push esi
lea ecx, [ebp - 1]
push ecx
call fcn.0040559f
add esp, 0x10
push eax
lea eax, [ebp - 0x208]
push eax
lea edx, [ebp - 0x408]
push edx
call fcn.004a00a0
add esp, 0xc
lea ecx, [ebp - 0x408]
push ecx
push ebx
call fcn.0042d216
add esp, 8
jmp 0x436e92
mov edx, esi
mov eax, dword [ebx + 0x17d]
cmp dword [eax], 0
je 0x436de9
push pe_nt_image_headers32
push edx
mov ecx, dword [eax + 4]
add ecx, 0x68
push ecx
call fcn.0049ad4c
add esp, 0xc
mov esi, dword [ebx + 0x17d]
cmp dword [esi], 0
jne 0x436df8
xor eax, eax
jmp 0x436e57
mov edi, dword [esi + 4]
mov dword [edi], 0x6a
xor eax, eax
mov dword [edi + 4], eax
push 0x468
push edi
lea edx, [ebp - 0xab4]
push edx
call fcn.0049ad4c
add esp, 0xc
lea ecx, [ebp - 0xab4]
push ecx
push dword [0x4bfb98]
call fcn.00453a33
add esp, 8
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0xa50]
lea edx, [ebp - 0xa4c]
mov dword [esi + 8], eax
push pe_nt_image_headers32
push edx
add esi, 0x34
push esi
call fcn.0049ad4c
add esp, 0xc
mov eax, dword [ebp - 8]
cmp eax, 2
jne 0x436e70
mov edx, dword [ebx + 0x17d]
push dword [edx + 8]
push ebx
call fcn.0042bed6
add esp, 8
jmp 0x436e92
cmp eax, 3
jne 0x436e8b
mov dword [ebx + 0x1a1], 0xd
mov dword [ebx + 0x1a9], 0x14
jmp 0x436e92
push ebx
call fcn.00436e99
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret