Function at 0x435ff0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x456ec0
push 0x44bffc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4c
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 4], 0
push 0
push 0
push 0xb
mov eax, dword [0x4773e0]
push eax
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
call edi
push 0
push 0
push 0x184
mov ecx, dword [0x477450]
push ecx
call edi
push 0
push 0
push 0x2afd
mov edx, dword [0x4773e0]
push edx
call edi
mov ebx, eax
mov dword [ebp - 0x3c], ebx
test ebx, ebx
push 0
push 0
je 0x436090
push 0x18b
mov eax, dword [0x4773e0]
push eax
call edi
mov dword [ebp - 0x2c], eax
lea esi, [eax - 1]
mov dword [ebp - 0x44], esi
cmp esi, ebx
jb 0x43609e
push 0
push esi
push 0x182
mov ecx, dword [0x4773e0]
push ecx
call edi
dec esi
jmp 0x436075
push 0x184
mov edx, dword [0x4773e0]
push edx
call edi
mov dword [ebp - 0x2c], 0
mov esi, dword [0x47518c]
mov dword [ebp - 0x40], esi
mov eax, dword [0x4751a4]
shr eax, 1
lea ecx, [eax + eax*2]
shl ecx, 4
add ecx, eax
lea edi, [esi + ecx*2]
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x44], 0
mov edx, dword [0x4751a4]
cmp dword [ebp - 0x44], edx
jae 0x436272
mov eax, dword [esi + 0x2a]
test eax, eax
je 0x436264
mov ecx, dword [0x477350]
test ecx, ecx
je 0x4360fc
test byte [esi + 0x27], 6
je 0x436106
test ecx, ecx
jne 0x436264
test byte [esi + 0x27], 1
je 0x436264
cmp eax, dword [edi + 0x2a]
jne 0x436117
mov al, byte [esi + 0x22]
cmp al, byte [edi + 0x22]
je 0x436264
mov cl, byte [esi + 0x22]
mov ebx, dword [ebp + 8]
test byte [ebx], cl
je 0x436264
mov dl, byte [esi + 0x26]
test byte [ebx + 1], dl
je 0x436264
mov al, byte [ebx + 2]
cmp al, byte [esi + 0x61]
je 0x436141
test al, al
jne 0x436264
mov cl, byte [ebx + 4]
cmp cl, 0xff
je 0x43616f
mov al, byte [esi + 0x60]
cmp cl, al
je 0x43616f
test cl, al
je 0x436264
and ecx, 0xff
and eax, 0xe
mov edx, ecx
not edx
and eax, edx
cmp eax, ecx
jg 0x436264
lea eax, [ebx + 5]
cmp byte [eax], 0
je 0x436189
push eax
lea eax, [esi + 2]
push eax
call fcn.00449570
test eax, eax
je 0x436264
mov cl, byte [ebx + 3]
cmp cl, 0xff
je 0x4361df
and ecx, 0xff
mov dword [ebp - 0x58], ecx
cmp ecx, 0x20
jae 0x4361ab
mov eax, 1
shl eax, cl
mov ebx, dword [esi + 0x54]
jmp 0x4361cc
cmp ecx, 0x40
jae 0x4361bf
add ecx, 0xffffffe0
mov eax, 1
shl eax, cl
mov ebx, dword [esi + 0x58]
jmp 0x4361cc
add ecx, 0xffffffc0
mov eax, 1
shl eax, cl
mov ebx, dword [esi + 0x5c]
and eax, ebx
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x5c], eax
test eax, eax
je 0x436264
xor eax, eax
mov ax, word [esi]
mov dword [ebp - 0x30], eax
mov cl, byte [esi + 0x22]
test cl, 0x10
je 0x4361fb
and eax, 0xffe2ffff
or eax, 0x20000
jmp 0x436216
test cl, 0x40
je 0x43620c
and eax, 0xffe3ffff
or eax, 0x30000
jmp 0x436216
and eax, 0xffe1ffff
or eax, 0x10000
mov edi, eax
mov dword [ebp - 0x30], edi
test byte [esi + 0x27], 2
je 0x436230
and edi, 0xffffff
or edi, 0x10000000
mov dword [ebp - 0x30], edi
lea ecx, [esi + 2]
push ecx
push 0xffffffffffffffff
push 0x181
mov edx, dword [0x4773e0]
push edx
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
call ebx
mov dword [ebp - 0x28], eax
push edi
push eax
push 0x19a
mov eax, dword [0x4773e0]
push eax
call ebx
mov edi, esi
mov dword [ebp - 0x24], edi
inc dword [ebp - 0x2c]
add esi, 0x62
mov dword [ebp - 0x40], esi
inc dword [ebp - 0x44]
jmp 0x4360ca
push 0x40
call fcn.0044c0d4
add esp, 4
mov esi, eax
mov dword [ebp - 0x50], esi
test esi, esi
je 0x436378
push 0x80
call fcn.0044c0d4
add esp, 4
mov ebx, eax
mov dword [ebp - 0x38], ebx
test ebx, ebx
je 0x43636f
push 0x40
push esi
push 0x3f
mov ecx, dword [0x4773fc]
push ecx
call dword [sym.imp.USER32.dll_LoadStringA]
push ebx
push 0x80
push 0xd
mov edx, dword [0x4773e0]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x28
push ebx
call fcn.0044d020
add esp, 8
mov edx, eax
mov dword [ebp - 0x48], edx
test edx, edx
je 0x4362ff
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x436352
mov edi, 0x460c74
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, ebx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
dec edi
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x50]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, ebx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
dec edi
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ebx, dword [ebp - 0x38]
push ebx
push 0
push 0xc
mov eax, dword [0x4773e0]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push ebx
call fcn.0044c186
add esp, 4
mov esi, dword [ebp - 0x50]
push esi
call fcn.0044c186
add esp, 4
push 0
push 0
push 0x197
mov ecx, dword [0x4773e0]
push ecx
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
call esi
push 0
push 1
push 0xb
mov edx, dword [0x4773e0]
push edx
call esi
mov eax, dword [0x4773e0]
push eax
jmp 0x4363ef
call dword [sym.imp.USER32.dll_UpdateWindow]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4