Function at 0x41cf41
Capabilities:
Get graphical window text

Disassembly:
mov eax, 0x436774
call fcn.00431ec0
sub esp, 0x14
push ebx
push esi
mov esi, ecx
xor ebx, ebx
cmp dword [esi + 0x84], ebx
je 0x41d1cf
push ebp
push edi
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString_3
push 0x8a0
lea ecx, [esp + 0x14]
mov dword [esp + 0x30], ebx
call sub.MFC42.DLL_CString::LoadStringA
lea eax, [esp + 0x10]
mov ecx, dword [esi + 0x84]
push eax
push 1
pop ebp
push ebp
push ebx
call fcn.004217b0
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
push 0x147
push dword [esi + 0x18c]
call edi
cmp eax, ebx
jl 0x41cfce
lea ecx, [esp + 0x10]
push ecx
push eax
lea ecx, [esi + 0x16c]
call sub.MFC42.DLL_CComboBox::GetLBText
mov ecx, dword [esi + 0x84]
lea eax, [esp + 0x10]
push eax
push ebp
push ebp
call fcn.004217b0
lea eax, [esp + 0x10]
mov ecx, esi
push eax
call fcn.0041e0da
cmp eax, ebx
je 0x41cff1
mov ecx, dword [esi + 0x84]
lea eax, [esp + 0x10]
push eax
push 2
push ebp
call fcn.004217b0
push ebx
push ebx
push 0x1004
push dword [esi + 0x1cc]
call edi
mov ecx, dword [esi + 0x84]
push eax
push 3
push ebp
mov dword [esp + 0x28], eax
call fcn.004216b0
xor ebp, ebp
cmp dword [esp + 0x1c], ebx
jbe 0x41d096
push ebx
lea eax, [esp + 0x1c]
push ebp
push eax
lea ecx, [esi + 0x1ac]
call sub.MFC42.DLL_CListCtrl::GetItemText
push 4
lea eax, [esp + 0x18]
push ebp
push eax
lea ecx, [esi + 0x1ac]
mov byte [esp + 0x38], 1
call sub.MFC42.DLL_CListCtrl::GetItemText
push 0xa
push ebx
push dword [esp + 0x1c]
mov byte [esp + 0x38], 2
call dword [sym.imp.MSVCRT.dll_strtoul]
mov ecx, dword [esi + 0x84]
add esp, 0xc
mov dword [esp + 0x20], eax
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x1c]
inc ebp
push eax
push ebp
call fcn.00423870
lea ecx, [esp + 0x14]
mov byte [esp + 0x2c], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], bl
call sub.MFC42.DLL_CString::CString
cmp ebp, dword [esp + 0x1c]
jb 0x41d01b
push ebx
mov ebp, 0x101d
push ebx
push ebp
push dword [esi + 0x1cc]
call edi
mov ecx, dword [esi + 0x84]
push eax
push 4
push 1
call fcn.004216b0
push ebx
push 1
push ebp
push dword [esi + 0x1cc]
call edi
mov ecx, dword [esi + 0x84]
push eax
push 5
push 1
call fcn.004216b0
push ebx
push 2
push ebp
push dword [esi + 0x1cc]
call edi
mov ecx, dword [esi + 0x84]
push eax
push 6
push 1
call fcn.004216b0
push ebx
push 3
push ebp
push dword [esi + 0x1cc]
call edi
mov ecx, dword [esi + 0x84]
push eax
push 7
push 1
call fcn.004216b0
push ebx
push 4
push ebp
push dword [esi + 0x1cc]
call edi
mov ecx, dword [esi + 0x84]
push eax
push 8
push 1
call fcn.004216b0
push ebx
push 5
push ebp
push dword [esi + 0x1cc]
call edi
mov ecx, dword [esi + 0x84]
push eax
push 9
push 1
call fcn.004216b0
push ebx
push 6
push ebp
push dword [esi + 0x1cc]
call edi
mov ecx, dword [esi + 0x84]
push eax
push 0xa
push 1
call fcn.004216b0
push ebx
push 7
push ebp
push dword [esi + 0x1cc]
call edi
mov ecx, dword [esi + 0x84]
push eax
push 0xb
push 1
call fcn.004216b0
push ebx
push 8
push ebp
push dword [esi + 0x1cc]
call edi
mov ecx, dword [esi + 0x84]
push eax
push 0xc
push 1
call fcn.004216b0
push ebx
push 9
push ebp
push dword [esi + 0x1cc]
call edi
mov ecx, dword [esi + 0x84]
push eax
push 0xd
push 1
call fcn.004216b0
mov ecx, dword [esi + 0x84]
push 1
call fcn.004224d0
or dword [esp + 0x2c], 0xffffffff
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString
pop edi
pop ebp
mov ecx, dword [esp + 0x1c]
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret