Function at 0x4367af
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov eax, dword [0x446b10]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
push esi
xor esi, esi
mov dword [ebp - 0x34], ebx
call fcn.00431ce8
push 1
push dword [0x4d9aac]
mov dword [0x4d9b9c], ebx
push 4
push 0xffff0000
push dword [0x4d9b24]
mov dword [0x4d9ba0], ebx
push ebx
call fcn.00433329
mov dword [0x4d9b10], eax
mov eax, dword [0x4c5e7c]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x38]
test eax, eax
jl 0x43682c
mov eax, dword [0x4c5e7c]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x4c]
lea edx, [ebp - 0x3c]
mov esi, eax
mov eax, dword [0x4c5e7c]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x54]
mov eax, dword [0x4c5e7c]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x3c]
test eax, eax
jl 0x43685f
mov eax, dword [0x4c5e7c]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x4c]
lea edx, [ebp - 0x3c]
add esi, eax
mov eax, dword [0x4c5e7c]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x54]
mov ecx, dword [0x4d9b0c]
push edi
push ebx
call fcn.00433b2e
mov ecx, dword [0x4d9b10]
mov dword [eax], ecx
mov ecx, dword [0x4d9b0c]
push ebx
call fcn.00433b2e
mov dword [eax + 4], ebx
mov ecx, dword [0x4d9b0c]
push ebx
lea edi, [esi + 1]
call fcn.00433b2e
mov dword [eax + 0xc], edi
mov ecx, dword [0x4d9b0c]
push ebx
call fcn.00433b2e
inc esi
imul esi, esi, 0xc
push esi
mov esi, dword [sym.imp.MSVCR80.dll_malloc]
mov dword [eax + 0x10], ebx
call esi
pop ecx
mov ecx, dword [0x4d9b0c]
push ebx
mov edi, eax
call fcn.00433b2e
push 0xffffffffffffffff
mov dword [eax + 8], edi
mov ecx, dword [0x4d9b0c]
inc dword [0x4d9b9c]
push 0x40a0b0
push ebx
call fcn.00433b2e
push eax
push 0xffff0000
call fcn.00433e5f
mov eax, dword [0x4c3e44]
cmp eax, ebx
je 0x4369a0
shl eax, 2
push eax
call esi
mov dword [ebp - 0x40], eax
xor eax, eax
xor esi, esi
cmp dword [0x4c3e44], ebx
pop ecx
mov dword [ebp - 0x44], eax
jbe 0x43698b
mov ecx, eax
mov eax, dword [0x4c5e90]
shl ecx, 2
cmp dword [ecx + eax], 0x2000000
jne 0x43694e
mov eax, dword [0x4c5e7c]
mov edx, dword [eax]
lea edi, [ebp - 0x48]
push edi
lea edi, [ebp - 0x4c]
push edi
mov edi, dword [0x4c5e8c]
push dword [ecx + edi]
push eax
call dword [edx + 0x78]
mov eax, dword [ebp - 0x48]
cmp eax, ebx
je 0x43694e
cmp byte [eax], bl
je 0x43694e
mov ecx, dword [ebp - 0x40]
mov dword [ecx + esi*4], eax
inc esi
mov eax, dword [ebp - 0x44]
inc eax
cmp eax, dword [0x4c3e44]
mov dword [ebp - 0x44], eax
jb 0x43690d
cmp esi, ebx
je 0x43698b
push 0x431d3e
push 4
push esi
push dword [ebp - 0x40]
call dword [sym.imp.MSVCR80.dll_qsort]
add esp, 0x10
xor edi, edi
cmp esi, ebx
jbe 0x43698b
mov eax, dword [ebp - 0x40]
push dword [eax + edi*4]
call fcn.00434a4d
inc edi
cmp edi, esi
jb 0x43697b
push dword [ebp - 0x40]
call dword [sym.imp.MSVCR80.dll_free]
pop ecx
push ebx
push 0x2000000
call fcn.0043664c
call fcn.00434d1d
push dword [0x4d9b10]
push 2
push 0x1102
push dword [0x4d9aac]
call fcn.00438c04
mov esi, dword [sym.imp.USER32.dll_EnableMenuItem]
push ebx
push dword [0x4d9a00]
push dword [0x4d9aa4]
call esi
push ebx
push 2
push dword [0x4d9a04]
call esi
push ebx
push 3
push dword [0x4d9a04]
call esi
push dword [0x4d9afc]
call dword [sym.imp.USER32.dll_DrawMenuBar]
mov edi, 0x800
push edi
mov esi, 0x467c50
push esi
push 0xffffffffffffffff
push 0x4c4260
push ebx
push 0xfde9
call fcn.004383d7
push 0x40a098
push edi
push esi
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
cmp dword [0x4c566c], ebx
je 0x436a99
mov dword [ebp - 0x40], ebx
push esi
push ebx
push 0xc
push dword [0x4d9afc]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x468c50
push edi
push 0xd
push dword [0x4d9afc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov word [0x468c4e], bx
mov ecx, 0x468c50
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x436a85
cmp dx, bx
je 0x436a81
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x436a85
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x436a5f
xor eax, eax
jmp 0x436a8a
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x436aaf
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0x64
jl 0x436a2d
jmp 0x436aaf
push esi
call fcn.0040ca53
push eax
push ebx
push 0xc
push dword [0x4d9afc]
call dword [sym.imp.USER32.dll_SendMessageA]
call fcn.00430623
test eax, eax
pop edi
je 0x436abc
push ebx
jmp 0x436abe
push 5
push dword [0x4d9afc]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x4d9afc]
call dword [sym.imp.USER32.dll_UpdateWindow]
and dword [0x4c5ee4], 0xfffffffb
push ebx
call fcn.00414876
or dword [0x4c5ee4], 4
call fcn.00431db4
push dword [0x4d9b10]
push 9
push 0x110b
push dword [0x4d9aac]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [0x4d9aac]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 4]
xor eax, eax
pop esi
xor ecx, ebp
inc eax
pop ebx
call fcn.0043eef0
leave
ret