Function at 0x436d74
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff54c
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
push 0x1ff
mov eax, dword [ebp + 0xc]
add eax, 3
push eax
lea esi, [ebx + 0x5ac]
push esi
call fcn.004989f4
add esp, 0xc
mov byte [ebx + 0x7ab], 0
push esi
call fcn.00454ca4
cmp byte [ebx + 0x5ac], 0
pop ecx
jne 0x436de4
push 0xa0
lea eax, [ebp - 0x208]
push eax
push 0x43b
mov edx, dword [ebx + 0x3b]
push edx
call sub.USER32.dll_LoadStringA
lea ecx, [ebp - 0x208]
push ecx
push ebx
call fcn.0042d938
add esp, 8
jmp 0x43703a
cmp dword [ebx + 0x194], 0
setne al
and eax, 1
lea edi, [ebx + 0x3ac]
push eax
push 0
push 0
push edi
lea eax, [ebx + 0x1ac]
lea edx, [ebp - 1]
push eax
push esi
push edx
call fcn.004054cc
mov ecx, dword [ebx + 0xab]
add esp, 0x1c
mov dword [ebp - 0x40e], ecx
lea eax, [ebx + 0xbac]
mov dword [ebp - 0x64c], 0xd
push esi
push edi
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
lea esi, [ebp - 0x644]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
push esi
push edi
xor eax, eax
mov edi, esi
or ecx, 0xffffffff
lea esi, [ebp - 0x60e]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov eax, dword [ebx + 0xc97]
mov edx, dword [0x4b4a78]
mov dword [ebp - 0x612], eax
mov dword [ebp - 0x648], edx
lea ecx, [ebp - 0x64c]
push ecx
push 0
push 0x404
mov eax, dword [ebx + 0x3f]
push eax
call sub.USER32.dll_SendMessageA
cmp dword [ebp - 0x648], 0
jne 0x436f19
push 0xa0
lea edx, [ebp - 0x208]
push edx
push 0x43c
mov ecx, dword [ebx + 0x3b]
push ecx
call sub.USER32.dll_LoadStringA
cmp dword [ebx + 0x194], 0
setne al
and eax, 1
push eax
push edi
push esi
lea edx, [ebp - 1]
push edx
call fcn.004057fc
add esp, 0x10
push eax
lea ecx, [ebp - 0x208]
push ecx
lea eax, [ebp - 0x408]
push eax
call fcn.0049d914
add esp, 0xc
lea edx, [ebp - 0x408]
push edx
push ebx
call fcn.0042d938
add esp, 8
jmp 0x43703a
push esi
call fcn.00454ec8
pop ecx
test eax, eax
jne 0x436f86
push 0xa0
lea ecx, [ebp - 0x208]
push ecx
push 0x43d
mov eax, dword [ebx + 0x3b]
push eax
call sub.USER32.dll_LoadStringA
cmp dword [ebx + 0x194], 0
setne dl
and edx, 1
push edx
push edi
push esi
lea ecx, [ebp - 1]
push ecx
call fcn.004057fc
add esp, 0x10
push eax
lea eax, [ebp - 0x208]
push eax
lea edx, [ebp - 0x408]
push edx
call fcn.0049d914
add esp, 0xc
lea ecx, [ebp - 0x408]
push ecx
push ebx
call fcn.0042d938
add esp, 8
jmp 0x43703a
mov edx, esi
mov eax, dword [ebx + 0x17c]
cmp dword [eax], 0
je 0x436fa8
push pe_nt_image_headers32
push edx
mov ecx, dword [eax + 4]
add ecx, 0x68
push ecx
call fcn.004985c0
add esp, 0xc
mov esi, dword [ebx + 0x17c]
cmp dword [esi], 0
jne 0x436fb7
xor eax, eax
jmp 0x436ffe
mov edi, dword [esi + 4]
mov dword [edi], 0x6a
xor eax, eax
mov dword [edi + 4], eax
push 0x468
push edi
lea edx, [ebp - 0xab4]
push edx
call fcn.004985c0
add esp, 0xc
lea ecx, [ebp - 0xab4]
push ecx
mov eax, dword [0x4be8ac]
push eax
call fcn.00454234
add esp, 8
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0xa50]
mov dword [esi + 8], edx
mov eax, dword [ebp - 8]
cmp eax, 2
jne 0x437018
mov edx, dword [ebx + 0x17c]
mov ecx, dword [edx + 8]
push ecx
push ebx
call fcn.0042c540
add esp, 8
jmp 0x43703a
cmp eax, 3
jne 0x437033
mov dword [ebx + 0x1a0], 0xd
mov dword [ebx + 0x1a8], 0x14
jmp 0x43703a
push ebx
call fcn.00437044
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret