Function at 0x500720
Capabilities:
Get graphical window text

Disassembly:
push ebx
push ebp
push esi
push edi
call fcn.004f6ce0
push 0
push 0
push 0x8e
call fcn.00500110
mov ebp, dword [sym.imp.USER32.dll_GetSubMenu]
add esp, 8
push eax
call ebp
mov edi, dword [sym.imp.USER32.dll_DeleteMenu]
mov esi, eax
test esi, esi
je 0x4fcc8e
nop
push 0x400
push 0
push esi
call edi
test eax, eax
jne 0x4fcc80
push 0
call fcn.004fb740
mov ebx, dword [0x674868]
add esp, 4
mov dword [0x674868], 0
call fcn.004f62d0
push 0
push 0
push 0x65
call fcn.00500110
add esp, 8
push eax
call ebp
mov esi, eax
test esi, esi
jne 0x4fcce0
test ebx, ebx
je 0x4fcccf
push ebx
call dword [sym.imp.USER32.dll_DestroyMenu]
push 0
call fcn.00421dc0
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
ret
push 0x400
push 0
push esi
call edi
test eax, eax
jne 0x4fcce0
push ebx
push esi
call fcn.004f4080
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
ret
mov eax, 0x20d0
call fcn.005d9990
push ebx
call fcn.004f6ce0
mov eax, dword [0x6a0f4c]
push 0x676d10
mov dword [0x676d10], eax
call fcn.00508c40
push 0
push 0xb0
mov dword [0x676d14], eax
call fcn.00500110
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x4fd37d
push ebp
push esi
push edi
push ebx
call dword [sym.imp.USER32.dll_GetMenuItemCount]
mov edi, eax
test edi, edi
jle 0x4fd25e
mov ebp, dword [sym.imp.USER32.dll_DeleteMenu]
lea esi, [edi - 1]
jmp 0x4fd240
push esi
push ebx
call dword [sym.imp.USER32.dll_GetMenuItemID]
cmp eax, 0xb0
je 0x4fd25e
push 0x400
push esi
push ebx
call ebp
dec edi
dec esi
test edi, edi
jg 0x4fd240
mov eax, dword [0x6a0f38]
test eax, eax
je 0x4fd37a
push 0x5f4c90
push 0
push 0x800
push ebx
call dword [sym.imp.USER32.dll_AppendMenuA]
mov esi, dword [0x6a0f38]
test esi, esi
mov edi, 1
mov ebp, 0x1770
je 0x4fd37a
mov eax, dword [esi + 0x1314]
test eax, eax
jne 0x4fd2b2
push 4
lea ecx, [esp + 0x14]
push ecx
push esi
call fcn.004dcd00
add esp, 0xc
jmp 0x4fd2c2
mov eax, dword [esi]
push 0x3c
lea edx, [esp + 0x14]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [esp + 0x10]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4fd2d0
sub eax, edx
cmp eax, 0x100
jbe 0x4fd2eb
mov dword [esp + 0x110], 0x2e2e2e
cmp edi, 1
jl 0x4fd312
cmp edi, 9
jg 0x4fd312
lea ecx, [esp + 0x10]
push ecx
push edi
lea edx, [esp + 0x1080]
push 0x5f508c
push edx
call fcn.005d9929
add esp, 0x10
jmp 0x4fd345
cmp edi, 0xa
jne 0x4fd32b
lea eax, [esp + 0x10]
push eax
push str.0__s
lea ecx, [esp + 0x1080]
push ecx
jmp 0x4fd33d
lea edx, [esp + 0x10]
push edx
push str.____s
lea eax, [esp + 0x1080]
push eax
call fcn.005d9929
add esp, 0xc
call fcn.0058ec80
mov edx, dword [esi]
xor ecx, ecx
cmp edx, eax
setne cl
lea edx, [esp + 0x1078]
push edx
push ebp
dec ecx
and ecx, 8
mov eax, ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_AppendMenuA]
mov esi, dword [esi + 0x21c0]
inc edi
inc ebp
test esi, esi
jne 0x4fd296
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20d0
ret
sub esp, 0x438
push ebx
push esi
call fcn.004f6ce0
mov eax, dword [0x6a0f4c]
push 0x676d10
mov dword [0x676d10], eax
call fcn.00508c40
xor ebx, ebx
push ebx
push 0xbe
mov dword [0x676d14], eax
call fcn.00500110
mov esi, eax
add esp, 0xc
cmp esi, ebx
je 0x4fdd0e
push edi
mov edi, dword [sym.imp.USER32.dll_GetMenuItemCount]
push esi
call edi
test eax, eax
jle 0x4fdb30
mov ebx, dword [sym.imp.USER32.dll_GetMenuItemID]
push ebp
mov ebp, dword [sym.imp.USER32.dll_DeleteMenu]
jmp 0x4fdb10
push 6
push esi
call ebx
cmp eax, 0xc2
je 0x4fdb2d
push 0x400
push 6
push esi
call ebp
push esi
call edi
test eax, eax
jg 0x4fdb10
xor ebx, ebx
pop ebp
lea ecx, [esp + 0x10]
push 0x432
push ecx
call fcn.004232e0
lea edx, [esp + 0x18]
push edx
call fcn.00422040
push 1
push ebx
push ebx
lea eax, [esp + 0x24]
push eax
push str..hlp
push 0x66c330
mov dword [esp + 0x30], ebx
call fcn.00425e00
mov al, byte [esp + 0x34]
add esp, 0x24
test al, al
je 0x4fdb8b
push 1
push ebx
push ebx
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x20]
push str..hlp
push edx
call fcn.00425e00
add esp, 0x18
push 1
push ebx
push ebx
lea eax, [esp + 0x18]
push eax
push str..chm
push 0x66c330
call fcn.00425e00
mov al, byte [esp + 0x28]
add esp, 0x18
test al, al
je 0x4fdbc9
push 1
push ebx
push ebx
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x20]
push str..chm
push edx
call fcn.00425e00
add esp, 0x18
mov eax, dword [esp + 0xc]
push 0x1388
push eax
push ebx
push 0xf02
call fcn.00424130
add esp, 8
push eax
push esi
call fcn.004f66c0
push 1
push ebx
push ebx
lea ecx, [esp + 0x28]
push ecx
mov edi, eax
push str..htm
push 0x66c330
add edi, 0x1388
mov dword [esp + 0x34], ebx
call fcn.00425e00
mov al, byte [esp + 0x38]
add esp, 0x28
test al, al
je 0x4fdc32
push 1
push ebx
push ebx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x20]
push str..htm
push eax
call fcn.00425e00
add esp, 0x18
push 1
push ebx
push ebx
lea ecx, [esp + 0x18]
push ecx
push str..html
push 0x66c330
call fcn.00425e00
mov al, byte [esp + 0x28]
add esp, 0x18
test al, al
je 0x4fdc70
push 1
push ebx
push ebx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x20]
push str..html
push eax
call fcn.00425e00
add esp, 0x18
mov ecx, dword [esp + 0xc]
push edi
push ecx
push ebx
push 0xf13
call fcn.00424130
add esp, 8
push eax
push esi
call fcn.004f66c0
push 1
push ebx
push ebx
lea edx, [esp + 0x28]
push edx
push str..txt
push 0x66c330
add edi, eax
mov dword [esp + 0x34], ebx
call fcn.00425e00
mov al, byte [esp + 0x38]
add esp, 0x28
test al, al
je 0x4fdccf
push 1
push ebx
push ebx
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x20]
push str..txt
push ecx
call fcn.00425e00
add esp, 0x18
mov edx, dword [esp + 0xc]
push edi
push edx
push ebx
push 0xf03
call fcn.00424130
add esp, 8
push eax
push esi
call fcn.004f66c0
add eax, edi
add esp, 0x10
cmp eax, 0x1388
pop edi
jle 0x4fdd0e
push 0x5f4c90
push ebx
push 0x800
push 0xc2
push esi
call dword [sym.imp.USER32.dll_InsertMenuA]
pop esi
pop ebx
add esp, 0x438
ret
push esi
mov esi, dword [esp + 8]
test esi, esi
je 0x50076c
push 0
push 0x65
call fcn.00500110
add esp, 8
cmp esi, eax
jne 0x50073f
pop esi
jmp 0x4fcc50
push 0
push 0x8e
call fcn.00500110
add esp, 8
cmp esi, eax
jne 0x500758
pop esi
jmp fcn.004fcd40
cmp esi, dword [0x674870]
push 0
jne 0x50076e
push 1
call fcn.004f5730
add esp, 8
pop esi
ret
push 0xb0
call fcn.00500110
add esp, 8
cmp esi, eax
jne 0x500785
pop esi
jmp 0x4fd1e0
push 0
push 0xbe
call fcn.00500110
add esp, 8
cmp esi, eax
jne 0x50076c
pop esi
jmp 0x4fdab0