Function at 0x1036bc1
Capabilities:
Get graphical window text

Disassembly:
push 0x910
mov eax, 0x104d8ef
call fcn.01001ea1
mov esi, ecx
xor ebx, ebx
push 0xdd
mov dword [ebp - 0x8ec], esi
mov byte [ebp - 0x8b9], bl
call fcn.0100881c
push 0xe0
mov ecx, esi
mov dword [ebp - 0x8c0], eax
call fcn.0100881c
push 0xe1
mov ecx, esi
mov dword [ebp - 0x8e4], eax
call fcn.0100881c
push 0xe2
mov ecx, esi
mov dword [ebp - 0x8d4], eax
call fcn.0100881c
push 0xe3
mov ecx, esi
mov dword [ebp - 0x8d8], eax
call fcn.0100881c
mov dword [ebp - 0x8e0], eax
push 0x54
lea eax, [ebp - 0xb8]
push eax
push dword [ebp - 0x8d8]
mov dword [ebp - 0x8c4], ebx
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea eax, [ebp - 0x8c4]
push eax
push 0x54
lea eax, [ebp - 0xb8]
push eax
call fcn.0100304a
cmp eax, ebx
jne 0x1037129
cmp dword [ebp - 0x8c4], ebx
jbe 0x1037129
push 0x14
call fcn.010030b8
pop ecx
cmp eax, ebx
je 0x1036caa
push 4
pop ecx
push 0x10308df
push fcn.01023132
push ecx
lea esi, [eax + 4]
push ecx
push esi
mov dword [eax], ecx
call fcn.01011e15
mov dword [ebp - 0x8cc], esi
jmp 0x1036cb0
mov dword [ebp - 0x8cc], ebx
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
or dword [ebp - 0x8c4], 0xffffffff
push ebx
push ebx
push ebx
push 0x147
push dword [ebp - 0x8c0]
mov dword [ebp - 0x8dc], ebx
mov dword [ebp - 0x8d0], ebx
mov dword [ebp - 0x8c8], ebx
mov dword [ebp - 0x8e8], ebx
mov dword [ebp - 0x8fc], ebx
call esi
push eax
mov edi, 0x150
push edi
push dword [ebp - 0x8c0]
call esi
lea ecx, [ebp - 0x8fc]
push ecx
lea ecx, [ebp - 0x8e8]
push ecx
mov ecx, eax
call fcn.01011dd7
mov ecx, dword [ebp - 0x8e8]
call fcn.0101cf0a
mov ecx, dword [ebp - 0x8cc]
push eax
call fcn.01025159
push dword [ebp - 0x8cc]
mov ecx, dword [0x10540a4]
call fcn.01042b85
push ebx
push ebx
push ebx
push 0x147
push dword [ebp - 0x8e4]
call esi
push eax
push edi
push dword [ebp - 0x8e4]
call esi
mov ecx, eax
call fcn.0101cf0a
mov ecx, dword [ebp - 0x8cc]
push eax
add ecx, 4
call fcn.01025159
push ebx
push ebx
push ebx
push 0x147
push dword [ebp - 0x8d4]
call esi
push eax
push edi
push dword [ebp - 0x8d4]
call esi
mov ecx, eax
call fcn.0101cf0a
mov edi, dword [ebp - 0x8cc]
push eax
lea ecx, [edi + 8]
call fcn.01025159
push 0x54
lea eax, [ebp - 0xb8]
push eax
push dword [ebp - 0x8d8]
call dword [sym.imp.USER32.dll_GetWindowTextW]
push 0x54
lea eax, [ebp - 0xb8]
push eax
call fcn.01037ee0
test eax, eax
je 0x1036fb6
push 0x10
push 4
push 0x54
lea eax, [ebp - 0xb8]
push eax
call fcn.01004138
mov dword [ebp - 0x8c4], eax
cmp eax, ebx
jne 0x1036fb6
lea eax, [ebp - 0xb8]
lea ecx, [edi + 0xc]
push eax
call fcn.01024666
push 0x102fbac
lea ecx, [ebp - 0x8d4]
call fcn.0102475b
push 4
push edi
lea eax, [ebp - 0x8d4]
push eax
mov eax, dword [ebp - 0x8ec]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 4], ebx
call fcn.01008698
mov ecx, eax
call fcn.01034042
mov ecx, dword [ebp - 0x8d4]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
mov dword [ebp - 0x8c0], eax
call fcn.01020aad
cmp dword [ebp - 0x8c0], ebx
je 0x1036fb6
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
push ebx
xor edi, edi
push 0x10
inc edi
push edi
lea ecx, [ebp - 0x91c]
call fcn.0101c060
mov ecx, dword [ebp - 0x8c0]
mov dword [ebp - 4], edi
call fcn.01011d14
mov edi, eax
cmp edi, ebx
je 0x1036f2b
mov eax, dword [ebp - 0x8ec]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
push dword [eax + 4]
lea eax, [ebp - 0x91c]
push eax
lea ecx, [ebp - 0x8f0]
call fcn.01004e7a
xor ecx, ecx
cmp word [edi], bx
je 0x1036ebc
mov eax, edi
cmp word [eax], 0x2e
jne 0x1036eb3
mov dx, word [0x105555c]
mov word [eax], dx
inc ecx
lea eax, [edi + ecx*2]
cmp word [eax], bx
jne 0x1036ea3
lea ecx, [ebp - 0x8f0]
call fcn.01004f2b
push 1
lea eax, [ebp - 0x8c4]
push eax
lea eax, [ebp - 0x8c8]
push eax
lea eax, [ebp - 0x8d0]
push eax
lea eax, [ebp - 0x8dc]
push eax
push edi
lea ecx, [ebp - 0x91c]
call fcn.0101c2b7
lea ecx, [ebp - 0x8f0]
mov edi, eax
call fcn.01004d6b
mov ecx, dword [ebp - 0x8c0]
push 0xffffffffffffffff
call fcn.01011cea
cmp edi, 1
jne 0x1036f2b
push dword [ebp - 0x8d0]
push dword [ebp - 0x8e0]
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov byte [ebp - 0x8b9], 1
jmp 0x1036f98
cmp dword [0x1055204], ebx
je 0x1036f98
mov al, byte [0x1055208]
cmp al, 2
jae 0x1036f40
cmp al, bl
jne 0x1036f98
mov edx, dword [0x10551f0]
mov edi, dword [0x10551f4]
mov ecx, 0x10000
mov eax, 0x40000000
and edx, ecx
and edi, eax
or edx, edi
je 0x1036f98
mov edx, dword [0x10551f8]
mov edi, edx
and edi, ecx
mov ecx, dword [0x10551fc]
and ecx, eax
cmp edi, edx
jne 0x1036f98
cmp ecx, dword [0x10551fc]
jne 0x1036f98
push dword [ebp - 0x8c8]
push 0x102fb30
push dword [0x1054a5c]
push dword [0x1054a58]
call fcn.010341a5
mov ecx, dword [ebp - 0x8c0]
push 1
call fcn.01024fc6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x91c]
call fcn.0101c7cb
jmp 0x1037022
cmp dword [0x1055204], ebx
je 0x1037022
mov al, byte [0x1055208]
cmp al, 2
jae 0x1036fcb
cmp al, bl
jne 0x1037022
mov edx, dword [0x10551f0]
mov edi, dword [0x10551f4]
mov ecx, 0x10000
mov eax, 0x40000000
and edx, ecx
and edi, eax
or edx, edi
je 0x1037022
mov edx, dword [0x10551f8]
mov edi, edx
and edi, ecx
mov ecx, dword [0x10551fc]
and ecx, eax
cmp edi, edx
jne 0x1037022
cmp ecx, dword [0x10551fc]
jne 0x1037022
push 0x1037150
push 0x102fb30
push dword [0x1054a5c]
push dword [0x1054a58]
call fcn.010341a5
mov ecx, dword [ebp - 0x8cc]
cmp ecx, ebx
je 0x1037033
push 3
call fcn.01036470
cmp byte [ebp - 0x8b9], bl
jne 0x10370d3
mov dword [ebp - 0x8f8], 0x10
mov dword [ebp - 0x8f4], ebx
mov dword [ebp - 0x8f0], ebx
mov dword [ebp - 0x8ec], 5
cmp dword [ebp - 0x8c8], ebx
je 0x103707b
push dword [ebp - 0x8c8]
push dword [ebp - 0x8e0]
call dword [sym.imp.USER32.dll_SetWindowTextW]
jmp 0x10370e2
push 0x1002b54
push dword [ebp - 0x8e0]
call dword [sym.imp.USER32.dll_SetWindowTextW]
cmp dword [ebp - 0x8c4], 0x77
push 0x400
lea eax, [ebp - 0x8b8]
push eax
jne 0x10370a5
push 0x77
jmp 0x10370aa
push 0x334
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [ebp - 0x8b8]
mov dword [ebp - 0x8f0], eax
lea eax, [ebp - 0x8f8]
push eax
push ebx
push 0x1503
jmp 0x10370da
push ebx
push ebx
push 0x1504
push dword [ebp - 0x8d8]
call esi
mov esi, dword [sym.imp.msvcrt.dll_free]
cmp dword [ebp - 0x8dc], ebx
je 0x10370ff
push dword [ebp - 0x8dc]
call esi
pop ecx
mov dword [ebp - 0x8dc], ebx
cmp dword [ebp - 0x8d0], ebx
je 0x1037116
push dword [ebp - 0x8d0]
call esi
pop ecx
mov dword [ebp - 0x8d0], ebx
cmp dword [ebp - 0x8c8], ebx
je 0x1037141
push dword [ebp - 0x8c8]
call esi
pop ecx
jmp 0x1037141
push 0x1002b54
push dword [ebp - 0x8e0]
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov byte [ebp - 0x8b9], 1
mov al, byte [ebp - 0x8b9]
call fcn.01001f5c
ret