Function at 0x1036e8e
Capabilities:
Get graphical window text

Disassembly:
push 0x910
mov eax, 0x104d907
call fcn.01001ea1
mov esi, ecx
xor ebx, ebx
push 0xdd
mov dword [ebp - 0x8ec], esi
mov byte [ebp - 0x8b9], bl
call fcn.0101ad56
push 0xe0
mov ecx, esi
mov dword [ebp - 0x8c0], eax
call fcn.0101ad56
push 0xe1
mov ecx, esi
mov dword [ebp - 0x8e4], eax
call fcn.0101ad56
push 0xe2
mov ecx, esi
mov dword [ebp - 0x8d4], eax
call fcn.0101ad56
push 0xe3
mov ecx, esi
mov dword [ebp - 0x8d8], eax
call fcn.0101ad56
mov dword [ebp - 0x8e0], eax
push 0x54
lea eax, [ebp - 0xb8]
push eax
push dword [ebp - 0x8d8]
mov dword [ebp - 0x8c4], ebx
call dword [fcn.010013e8]
lea eax, [ebp - 0x8c4]
push eax
push 0x54
lea eax, [ebp - 0xb8]
push eax
call fcn.01003235
cmp eax, ebx
jne 0x10373f6
cmp dword [ebp - 0x8c4], ebx
jbe 0x10373f6
push 0x14
call fcn.0100329a
pop ecx
cmp eax, ebx
je 0x1036f77
push 4
pop ecx
push 0x1030baf
push fcn.0100ad22
push ecx
lea esi, [eax + 4]
push ecx
push esi
mov dword [eax], ecx
call fcn.0101b52b
mov dword [ebp - 0x8cc], esi
jmp 0x1036f7d
mov dword [ebp - 0x8cc], ebx
mov esi, dword [fcn.010013cc]
or dword [ebp - 0x8c4], 0xffffffff
push ebx
push ebx
push ebx
push 0x147
push dword [ebp - 0x8c0]
mov dword [ebp - 0x8dc], ebx
mov dword [ebp - 0x8d0], ebx
mov dword [ebp - 0x8c8], ebx
mov dword [ebp - 0x8e8], ebx
mov dword [ebp - 0x8fc], ebx
call esi
push eax
mov edi, 0x150
push edi
push dword [ebp - 0x8c0]
call esi
lea ecx, [ebp - 0x8fc]
push ecx
lea ecx, [ebp - 0x8e8]
push ecx
mov ecx, eax
call fcn.0101b4e2
mov ecx, dword [ebp - 0x8e8]
call fcn.0101ed62
mov ecx, dword [ebp - 0x8cc]
push eax
call fcn.0100d877
push dword [ebp - 0x8cc]
mov ecx, dword [0x10540ac]
call fcn.01042cc1
push ebx
push ebx
push ebx
push 0x147
push dword [ebp - 0x8e4]
call esi
push eax
push edi
push dword [ebp - 0x8e4]
call esi
mov ecx, eax
call fcn.0101ed62
mov ecx, dword [ebp - 0x8cc]
push eax
add ecx, 4
call fcn.0100d877
push ebx
push ebx
push ebx
push 0x147
push dword [ebp - 0x8d4]
call esi
push eax
push edi
push dword [ebp - 0x8d4]
call esi
mov ecx, eax
call fcn.0101ed62
mov edi, dword [ebp - 0x8cc]
push eax
lea ecx, [edi + 8]
call fcn.0100d877
push 0x54
lea eax, [ebp - 0xb8]
push eax
push dword [ebp - 0x8d8]
call dword [fcn.010013e8]
push 0x54
lea eax, [ebp - 0xb8]
push eax
call fcn.010381b0
test eax, eax
je 0x1037283
push 0x10
push 4
push 0x54
lea eax, [ebp - 0xb8]
push eax
call fcn.0100428a
mov dword [ebp - 0x8c4], eax
cmp eax, ebx
jne 0x1037283
lea eax, [ebp - 0xb8]
lea ecx, [edi + 0xc]
push eax
call fcn.0100c3c5
push 0x102fe7c
lea ecx, [ebp - 0x8d4]
call fcn.0100c4ba
push 4
push edi
lea eax, [ebp - 0x8d4]
push eax
mov eax, dword [ebp - 0x8ec]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 4], ebx
call fcn.0101ab38
mov ecx, eax
call fcn.01034312
mov ecx, dword [ebp - 0x8d4]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
mov dword [ebp - 0x8c0], eax
call fcn.0100882d
cmp dword [ebp - 0x8c0], ebx
je 0x1037283
push ebx
call dword [int.01001194]
push eax
push ebx
xor edi, edi
push 0x10
inc edi
push edi
lea ecx, [ebp - 0x91c]
call fcn.010230f0
mov ecx, dword [ebp - 0x8c0]
mov dword [ebp - 4], edi
call fcn.0101b41f
mov edi, eax
cmp edi, ebx
je 0x10371f8
mov eax, dword [ebp - 0x8ec]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
push dword [eax + 4]
lea eax, [ebp - 0x91c]
push eax
lea ecx, [ebp - 0x8f0]
call fcn.01004d54
xor ecx, ecx
cmp word [edi], bx
je 0x1037189
mov eax, edi
cmp word [eax], 0x2e
jne 0x1037180
mov dx, word [0x1055574]
mov word [eax], dx
inc ecx
lea eax, [edi + ecx*2]
cmp word [eax], bx
jne 0x1037170
lea ecx, [ebp - 0x8f0]
call fcn.01004fc7
push 1
lea eax, [ebp - 0x8c4]
push eax
lea eax, [ebp - 0x8c8]
push eax
lea eax, [ebp - 0x8d0]
push eax
lea eax, [ebp - 0x8dc]
push eax
push edi
lea ecx, [ebp - 0x91c]
call fcn.01023347
lea ecx, [ebp - 0x8f0]
mov edi, eax
call fcn.01005056
mov ecx, dword [ebp - 0x8c0]
push 0xffffffffffffffff
call fcn.0101b3f5
cmp edi, 1
jne 0x10371f8
push dword [ebp - 0x8d0]
push dword [ebp - 0x8e0]
call dword [fcn.010013f8]
mov byte [ebp - 0x8b9], 1
jmp 0x1037265
cmp dword [0x105521c], ebx
je 0x1037265
mov al, byte [0x1055220]
cmp al, 2
jae 0x103720d
cmp al, bl
jne 0x1037265
mov edx, dword [0x1055208]
mov edi, dword [0x105520c]
mov ecx, 0x10000
mov eax, 0x40000000
and edx, ecx
and edi, eax
or edx, edi
je 0x1037265
mov edx, dword [0x1055210]
mov edi, edx
and edi, ecx
mov ecx, dword [0x1055214]
and ecx, eax
cmp edi, edx
jne 0x1037265
cmp ecx, dword [0x1055214]
jne 0x1037265
push dword [ebp - 0x8c8]
push 0x102fe00
push dword [0x1054a74]
push dword [0x1054a70]
call fcn.01034475
mov ecx, dword [ebp - 0x8c0]
push 1
call fcn.0100d613
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x91c]
call fcn.0102385b
jmp 0x10372ef
cmp dword [0x105521c], ebx
je 0x10372ef
mov al, byte [0x1055220]
cmp al, 2
jae 0x1037298
cmp al, bl
jne 0x10372ef
mov edx, dword [0x1055208]
mov edi, dword [0x105520c]
mov ecx, 0x10000
mov eax, 0x40000000
and edx, ecx
and edi, eax
or edx, edi
je 0x10372ef
mov edx, dword [0x1055210]
mov edi, edx
and edi, ecx
mov ecx, dword [0x1055214]
and ecx, eax
cmp edi, edx
jne 0x10372ef
cmp ecx, dword [0x1055214]
jne 0x10372ef
push 0x1037420
push 0x102fe00
push dword [0x1054a74]
push dword [0x1054a70]
call fcn.01034475
mov ecx, dword [ebp - 0x8cc]
cmp ecx, ebx
je 0x1037300
push 3
call fcn.01036740
cmp byte [ebp - 0x8b9], bl
jne 0x10373a0
mov dword [ebp - 0x8f8], 0x10
mov dword [ebp - 0x8f4], ebx
mov dword [ebp - 0x8f0], ebx
mov dword [ebp - 0x8ec], 5
cmp dword [ebp - 0x8c8], ebx
je 0x1037348
push dword [ebp - 0x8c8]
push dword [ebp - 0x8e0]
call dword [fcn.010013f8]
jmp 0x10373af
push 0x100247c
push dword [ebp - 0x8e0]
call dword [fcn.010013f8]
cmp dword [ebp - 0x8c4], 0x77
push 0x400
lea eax, [ebp - 0x8b8]
push eax
jne 0x1037372
push 0x77
jmp 0x1037377
push 0x334
push ebx
call dword [int.01001194]
push eax
call dword [fcn.010013f4]
lea eax, [ebp - 0x8b8]
mov dword [ebp - 0x8f0], eax
lea eax, [ebp - 0x8f8]
push eax
push ebx
push 0x1503
jmp 0x10373a7
push ebx
push ebx
push 0x1504
push dword [ebp - 0x8d8]
call esi
mov esi, dword [fcn.010015fc]
cmp dword [ebp - 0x8dc], ebx
je 0x10373cc
push dword [ebp - 0x8dc]
call esi
pop ecx
mov dword [ebp - 0x8dc], ebx
cmp dword [ebp - 0x8d0], ebx
je 0x10373e3
push dword [ebp - 0x8d0]
call esi
pop ecx
mov dword [ebp - 0x8d0], ebx
cmp dword [ebp - 0x8c8], ebx
je 0x103740e
push dword [ebp - 0x8c8]
call esi
pop ecx
jmp 0x103740e
push 0x100247c
push dword [ebp - 0x8e0]
call dword [fcn.010013f8]
mov byte [ebp - 0x8b9], 1
mov al, byte [ebp - 0x8b9]
call fcn.01001f5c
ret