Function at 0x436290
Capabilities:
Enumerate files on windows
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68c
mov eax, dword [0x4566e4]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 1
push 0
push 0
push 0x157
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x4362e5
push 0
push 1
push 0x14f
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x104
lea ecx, [ebp - 0x688]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.USER32.dll_GetWindowTextW]
push 0
push 0
push 0x140
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x688]
push ecx
push 0x452a6c
call fcn.00401190
add esp, 8
movzx edx, word [ebp - 0x688]
test edx, edx
je 0x4364ec
movzx eax, word [ebp - 0x686]
cmp eax, 0x3a
jne 0x4364ec
movzx ecx, word [ebp - 0x684]
cmp ecx, 0x5c
jne 0x4364ec
push 0
push 0
push 0xb
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x144
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jle 0x43637d
jmp 0x436364
lea ecx, [ebp - 0x688]
push ecx
lea edx, [ebp - 0x220]
push edx
call fcn.00405590
add esp, 8
push 0x5c
lea eax, [ebp - 0x220]
push eax
call fcn.00401170
add esp, 8
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x474], 0
je 0x4364a8
push 0x452a80
lea ecx, [ebp - 0x220]
push ecx
call fcn.00405562
add esp, 8
lea edx, [ebp - 0x470]
push edx
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x68c], eax
cmp dword [ebp - 0x68c], 0xffffffff
je 0x4364a8
cmp dword [ebp - 8], 0
je 0x43649b
push 0x452a84
lea ecx, [ebp - 0x444]
push ecx
call fcn.0040537c
add esp, 8
test eax, eax
je 0x43647f
push 0x452a88
lea edx, [ebp - 0x444]
push edx
call fcn.0040537c
add esp, 8
test eax, eax
je 0x43647f
lea eax, [ebp - 0x444]
push eax
mov ecx, dword [ebp - 0x474]
add ecx, 2
push ecx
call fcn.00405590
add esp, 8
mov edx, dword [ebp - 0x470]
and edx, 0x10
je 0x436467
push 0x452a90
mov eax, dword [ebp - 0x474]
add eax, 2
push eax
call fcn.00405562
add esp, 8
lea ecx, [ebp - 0x220]
push ecx
push 0
push 0x143
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x470]
push eax
mov ecx, dword [ebp - 0x68c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 8], eax
jmp 0x4363f2
mov edx, dword [ebp - 0x68c]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x688]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov edx, dword [ebp - 4]
push edx
push 0
push 0x142
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 1
push 0xb
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push 1
push 0
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, 1
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00403b8c
mov esp, ebp
pop ebp
ret