Function at 0x4fab70
Capabilities:
Get graphical window text

Disassembly:
push ebx
push ebp
push esi
push edi
call fcn.004f10e0
push 0
push 0
push 0x8e
call fcn.004fa580
mov ebp, dword [sym.imp.USER32.dll_GetSubMenu]
add esp, 8
push eax
call ebp
mov edi, dword [sym.imp.USER32.dll_DeleteMenu]
mov esi, eax
test esi, esi
je 0x4f705e
nop
push 0x400
push 0
push esi
call edi
test eax, eax
jne 0x4f7050
push 0
call fcn.004f5b20
mov ebx, dword [0x63ad78]
add esp, 4
mov dword [0x63ad78], 0
call fcn.004f0700
push 0
push 0
push 0x65
call fcn.004fa580
add esp, 8
push eax
call ebp
mov esi, eax
test esi, esi
jne 0x4f70b0
test ebx, ebx
je 0x4f709f
push ebx
call dword [sym.imp.USER32.dll_DestroyMenu]
push 0
call fcn.00421c80
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
ret
push 0x400
push 0
push esi
call edi
test eax, eax
jne 0x4f70b0
push ebx
push esi
call fcn.004ee520
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
ret
sub esp, 0x7d0
push ebx
call fcn.004f10e0
mov eax, dword [0x645330]
push 0x63b648
mov dword [0x63b648], eax
call fcn.00502c00
push 0
push 0xb0
mov dword [0x63b64c], eax
call fcn.004fa580
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x4f772d
push ebp
push esi
push edi
push ebx
call dword [sym.imp.USER32.dll_GetMenuItemCount]
mov edi, eax
test edi, edi
jle 0x4f7615
mov ebp, dword [sym.imp.USER32.dll_DeleteMenu]
lea esi, [edi - 1]
push esi
push ebx
call dword [sym.imp.USER32.dll_GetMenuItemID]
cmp eax, 0xb0
je 0x4f7615
push 0x400
push esi
push ebx
call ebp
dec edi
dec esi
test edi, edi
jg 0x4f75f7
mov eax, dword [0x64531c]
test eax, eax
je 0x4f772a
push 0x5e6c98
push 0
push 0x800
push ebx
call dword [sym.imp.USER32.dll_AppendMenuA]
mov esi, dword [0x64531c]
test esi, esi
mov edi, 1
mov ebp, 0x1770
je 0x4f772a
lea ecx, [ecx]
mov eax, dword [esi + 0x71c]
test eax, eax
jne 0x4f766c
push 4
lea ecx, [esp + 0x14]
push ecx
push esi
call fcn.004d7800
add esp, 0xc
jmp 0x4f767c
mov eax, dword [esi]
push 0x3c
lea edx, [esp + 0x14]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [esp + 0x10]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4f7683
sub eax, edx
cmp eax, 0x32
jbe 0x4f7699
mov dword [esp + 0x42], 0x2e2e2e
cmp edi, 1
jl 0x4f76c1
cmp edi, 9
jg 0x4f76c1
lea ecx, [esp + 0x10]
push ecx
push edi
lea edx, [esp + 0x400]
push 0x5e708c
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x4f76f5
cmp edi, 0xa
jne 0x4f76da
lea eax, [esp + 0x10]
push eax
push str.0__s
lea ecx, [esp + 0x400]
push ecx
jmp 0x4f76ec
lea edx, [esp + 0x10]
push edx
push str.____s
lea eax, [esp + 0x400]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
call fcn.00582a20
mov edx, dword [esi]
xor ecx, ecx
cmp edx, eax
setne cl
lea edx, [esp + 0x3f8]
push edx
push ebp
dec ecx
and ecx, 8
mov eax, ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_AppendMenuA]
mov esi, dword [esi + 0xe54]
inc edi
inc ebp
test esi, esi
jne 0x4f7650
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x7d0
ret
sub esp, 0x108
push ebx
push esi
call fcn.004f10e0
mov eax, dword [0x645330]
push 0x63b648
mov dword [0x63b648], eax
call fcn.00502c00
xor ebx, ebx
push ebx
push 0xbe
mov dword [0x63b64c], eax
call fcn.004fa580
mov esi, eax
add esp, 0xc
cmp esi, ebx
je 0x4f80be
push edi
mov edi, dword [sym.imp.USER32.dll_GetMenuItemCount]
push esi
call edi
test eax, eax
jle 0x4f7ee0
mov ebx, dword [sym.imp.USER32.dll_GetMenuItemID]
push ebp
mov ebp, dword [sym.imp.USER32.dll_DeleteMenu]
jmp 0x4f7ec0
push 6
push esi
call ebx
cmp eax, 0xc2
je 0x4f7edd
push 0x400
push 6
push esi
call ebp
push esi
call edi
test eax, eax
jg 0x4f7ec0
xor ebx, ebx
pop ebp
lea ecx, [esp + 0x10]
push 0x104
push ecx
call fcn.00423a00
lea edx, [esp + 0x18]
push edx
call fcn.00422000
push 1
push ebx
push ebx
lea eax, [esp + 0x24]
push eax
push str..hlp
push 0x637bf8
mov dword [esp + 0x30], ebx
call fcn.00426b70
mov al, byte [esp + 0x34]
add esp, 0x24
test al, al
je 0x4f7f3b
push 1
push ebx
push ebx
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x20]
push str..hlp
push edx
call fcn.00426b70
add esp, 0x18
push 1
push ebx
push ebx
lea eax, [esp + 0x18]
push eax
push str..chm
push 0x637bf8
call fcn.00426b70
mov al, byte [esp + 0x28]
add esp, 0x18
test al, al
je 0x4f7f79
push 1
push ebx
push ebx
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x20]
push str..chm
push edx
call fcn.00426b70
add esp, 0x18
mov eax, dword [esp + 0xc]
push 0x1388
push eax
push ebx
push 0xf02
call fcn.00421db0
add esp, 8
push eax
push esi
call fcn.004f0ad0
push 1
push ebx
push ebx
lea ecx, [esp + 0x28]
push ecx
mov edi, eax
push str..htm
push 0x637bf8
add edi, 0x1388
mov dword [esp + 0x34], ebx
call fcn.00426b70
mov al, byte [esp + 0x38]
add esp, 0x28
test al, al
je 0x4f7fe2
push 1
push ebx
push ebx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x20]
push str..htm
push eax
call fcn.00426b70
add esp, 0x18
push 1
push ebx
push ebx
lea ecx, [esp + 0x18]
push ecx
push str..html
push 0x637bf8
call fcn.00426b70
mov al, byte [esp + 0x28]
add esp, 0x18
test al, al
je 0x4f8020
push 1
push ebx
push ebx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x20]
push str..html
push eax
call fcn.00426b70
add esp, 0x18
mov ecx, dword [esp + 0xc]
push edi
push ecx
push ebx
push 0xf13
call fcn.00421db0
add esp, 8
push eax
push esi
call fcn.004f0ad0
push 1
push ebx
push ebx
lea edx, [esp + 0x28]
push edx
push str..txt
push 0x637bf8
add edi, eax
mov dword [esp + 0x34], ebx
call fcn.00426b70
mov al, byte [esp + 0x38]
add esp, 0x28
test al, al
je 0x4f807f
push 1
push ebx
push ebx
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x20]
push str..txt
push ecx
call fcn.00426b70
add esp, 0x18
mov edx, dword [esp + 0xc]
push edi
push edx
push ebx
push 0xf03
call fcn.00421db0
add esp, 8
push eax
push esi
call fcn.004f0ad0
add eax, edi
add esp, 0x10
cmp eax, 0x1388
pop edi
jle 0x4f80be
push 0x5e6c98
push ebx
push 0x800
push 0xc2
push esi
call dword [sym.imp.USER32.dll_InsertMenuA]
pop esi
pop ebx
add esp, 0x108
ret
push esi
mov esi, dword [esp + 8]
test esi, esi
je 0x4fabbc
push 0
push 0x65
call fcn.004fa580
add esp, 8
cmp esi, eax
jne 0x4fab8f
pop esi
jmp 0x4f7020
push 0
push 0x8e
call fcn.004fa580
add esp, 8
cmp esi, eax
jne 0x4faba8
pop esi
jmp fcn.004f7110
cmp esi, dword [0x63ad80]
push 0
jne 0x4fabbe
push 1
call fcn.004efbb0
add esp, 8
pop esi
ret
push 0xb0
call fcn.004fa580
add esp, 8
cmp esi, eax
jne 0x4fabd5
pop esi
jmp 0x4f75a0
push 0
push 0xbe
call fcn.004fa580
add esp, 8
cmp esi, eax
jne 0x4fabbc
pop esi
jmp 0x4f7e60