Function at 0x1036e9e
Capabilities:
Get graphical window text

Disassembly:
push 0x910
mov eax, 0x104d90f
call fcn.01001ea1
mov esi, ecx
xor ebx, ebx
push 0xdd
mov dword [ebp - 0x8ec], esi
mov byte [ebp - 0x8b9], bl
call fcn.0101ad5a
push 0xe0
mov ecx, esi
mov dword [ebp - 0x8c0], eax
call fcn.0101ad5a
push 0xe1
mov ecx, esi
mov dword [ebp - 0x8e4], eax
call fcn.0101ad5a
push 0xe2
mov ecx, esi
mov dword [ebp - 0x8d4], eax
call fcn.0101ad5a
push 0xe3
mov ecx, esi
mov dword [ebp - 0x8d8], eax
call fcn.0101ad5a
mov dword [ebp - 0x8e0], eax
push 0x54
lea eax, [ebp - 0xb8]
push eax
push dword [ebp - 0x8d8]
mov dword [ebp - 0x8c4], ebx
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea eax, [ebp - 0x8c4]
push eax
push 0x54
lea eax, [ebp - 0xb8]
push eax
call fcn.01003235
cmp eax, ebx
jne 0x1037406
cmp dword [ebp - 0x8c4], ebx
jbe 0x1037406
push 0x14
call fcn.0100329a
pop ecx
cmp eax, ebx
je 0x1036f87
push 4
pop ecx
push 0x1030bb7
push fcn.0100ad22
push ecx
lea esi, [eax + 4]
push ecx
push esi
mov dword [eax], ecx
call fcn.0101b52f
mov dword [ebp - 0x8cc], esi
jmp 0x1036f8d
mov dword [ebp - 0x8cc], ebx
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
or dword [ebp - 0x8c4], 0xffffffff
push ebx
push ebx
push ebx
push 0x147
push dword [ebp - 0x8c0]
mov dword [ebp - 0x8dc], ebx
mov dword [ebp - 0x8d0], ebx
mov dword [ebp - 0x8c8], ebx
mov dword [ebp - 0x8e8], ebx
mov dword [ebp - 0x8fc], ebx
call esi
push eax
mov edi, 0x150
push edi
push dword [ebp - 0x8c0]
call esi
lea ecx, [ebp - 0x8fc]
push ecx
lea ecx, [ebp - 0x8e8]
push ecx
mov ecx, eax
call fcn.0101b4e6
mov ecx, dword [ebp - 0x8e8]
call fcn.0101ed6a
mov ecx, dword [ebp - 0x8cc]
push eax
call fcn.0100d877
push dword [ebp - 0x8cc]
mov ecx, dword [0x10540ac]
call fcn.01042cd1
push ebx
push ebx
push ebx
push 0x147
push dword [ebp - 0x8e4]
call esi
push eax
push edi
push dword [ebp - 0x8e4]
call esi
mov ecx, eax
call fcn.0101ed6a
mov ecx, dword [ebp - 0x8cc]
push eax
add ecx, 4
call fcn.0100d877
push ebx
push ebx
push ebx
push 0x147
push dword [ebp - 0x8d4]
call esi
push eax
push edi
push dword [ebp - 0x8d4]
call esi
mov ecx, eax
call fcn.0101ed6a
mov edi, dword [ebp - 0x8cc]
push eax
lea ecx, [edi + 8]
call fcn.0100d877
push 0x54
lea eax, [ebp - 0xb8]
push eax
push dword [ebp - 0x8d8]
call dword [sym.imp.USER32.dll_GetWindowTextW]
push 0x54
lea eax, [ebp - 0xb8]
push eax
call fcn.010381c0
test eax, eax
je 0x1037293
push 0x10
push 4
push 0x54
lea eax, [ebp - 0xb8]
push eax
call fcn.0100428a
mov dword [ebp - 0x8c4], eax
cmp eax, ebx
jne 0x1037293
lea eax, [ebp - 0xb8]
lea ecx, [edi + 0xc]
push eax
call fcn.0100c3c5
push 0x102fe84
lea ecx, [ebp - 0x8d4]
call fcn.0100c4ba
push 4
push edi
lea eax, [ebp - 0x8d4]
push eax
mov eax, dword [ebp - 0x8ec]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 4], ebx
call fcn.0101ab3c
mov ecx, eax
call fcn.0103431e
mov ecx, dword [ebp - 0x8d4]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
mov dword [ebp - 0x8c0], eax
call fcn.0100882d
cmp dword [ebp - 0x8c0], ebx
je 0x1037293
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
push ebx
xor edi, edi
push 0x10
inc edi
push edi
lea ecx, [ebp - 0x91c]
call fcn.010230f8
mov ecx, dword [ebp - 0x8c0]
mov dword [ebp - 4], edi
call fcn.0101b423
mov edi, eax
cmp edi, ebx
je 0x1037208
mov eax, dword [ebp - 0x8ec]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
push dword [eax + 4]
lea eax, [ebp - 0x91c]
push eax
lea ecx, [ebp - 0x8f0]
call fcn.01004d54
xor ecx, ecx
cmp word [edi], bx
je 0x1037199
mov eax, edi
cmp word [eax], 0x2e
jne 0x1037190
mov dx, word [0x1055574]
mov word [eax], dx
inc ecx
lea eax, [edi + ecx*2]
cmp word [eax], bx
jne 0x1037180
lea ecx, [ebp - 0x8f0]
call fcn.01004fc7
push 1
lea eax, [ebp - 0x8c4]
push eax
lea eax, [ebp - 0x8c8]
push eax
lea eax, [ebp - 0x8d0]
push eax
lea eax, [ebp - 0x8dc]
push eax
push edi
lea ecx, [ebp - 0x91c]
call fcn.0102334f
lea ecx, [ebp - 0x8f0]
mov edi, eax
call fcn.01005056
mov ecx, dword [ebp - 0x8c0]
push 0xffffffffffffffff
call fcn.0101b3f9
cmp edi, 1
jne 0x1037208
push dword [ebp - 0x8d0]
push dword [ebp - 0x8e0]
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov byte [ebp - 0x8b9], 1
jmp 0x1037275
cmp dword [0x105521c], ebx
je 0x1037275
mov al, byte [0x1055220]
cmp al, 2
jae 0x103721d
cmp al, bl
jne 0x1037275
mov edx, dword [0x1055208]
mov edi, dword [0x105520c]
mov ecx, 0x10000
mov eax, 0x40000000
and edx, ecx
and edi, eax
or edx, edi
je 0x1037275
mov edx, dword [0x1055210]
mov edi, edx
and edi, ecx
mov ecx, dword [0x1055214]
and ecx, eax
cmp edi, edx
jne 0x1037275
cmp ecx, dword [0x1055214]
jne 0x1037275
push dword [ebp - 0x8c8]
push 0x102fe08
push dword [0x1054a74]
push dword [0x1054a70]
call fcn.01034485
mov ecx, dword [ebp - 0x8c0]
push 1
call fcn.0100d613
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x91c]
call fcn.01023863
jmp 0x10372ff
cmp dword [0x105521c], ebx
je 0x10372ff
mov al, byte [0x1055220]
cmp al, 2
jae 0x10372a8
cmp al, bl
jne 0x10372ff
mov edx, dword [0x1055208]
mov edi, dword [0x105520c]
mov ecx, 0x10000
mov eax, 0x40000000
and edx, ecx
and edi, eax
or edx, edi
je 0x10372ff
mov edx, dword [0x1055210]
mov edi, edx
and edi, ecx
mov ecx, dword [0x1055214]
and ecx, eax
cmp edi, edx
jne 0x10372ff
cmp ecx, dword [0x1055214]
jne 0x10372ff
push 0x1037430
push 0x102fe08
push dword [0x1054a74]
push dword [0x1054a70]
call fcn.01034485
mov ecx, dword [ebp - 0x8cc]
cmp ecx, ebx
je 0x1037310
push 3
call fcn.01036750
cmp byte [ebp - 0x8b9], bl
jne 0x10373b0
mov dword [ebp - 0x8f8], 0x10
mov dword [ebp - 0x8f4], ebx
mov dword [ebp - 0x8f0], ebx
mov dword [ebp - 0x8ec], 5
cmp dword [ebp - 0x8c8], ebx
je 0x1037358
push dword [ebp - 0x8c8]
push dword [ebp - 0x8e0]
call dword [sym.imp.USER32.dll_SetWindowTextW]
jmp 0x10373bf
push 0x100247c
push dword [ebp - 0x8e0]
call dword [sym.imp.USER32.dll_SetWindowTextW]
cmp dword [ebp - 0x8c4], 0x77
push 0x400
lea eax, [ebp - 0x8b8]
push eax
jne 0x1037382
push 0x77
jmp 0x1037387
push 0x334
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [ebp - 0x8b8]
mov dword [ebp - 0x8f0], eax
lea eax, [ebp - 0x8f8]
push eax
push ebx
push 0x1503
jmp 0x10373b7
push ebx
push ebx
push 0x1504
push dword [ebp - 0x8d8]
call esi
mov esi, dword [sym.imp.msvcrt.dll_free]
cmp dword [ebp - 0x8dc], ebx
je 0x10373dc
push dword [ebp - 0x8dc]
call esi
pop ecx
mov dword [ebp - 0x8dc], ebx
cmp dword [ebp - 0x8d0], ebx
je 0x10373f3
push dword [ebp - 0x8d0]
call esi
pop ecx
mov dword [ebp - 0x8d0], ebx
cmp dword [ebp - 0x8c8], ebx
je 0x103741e
push dword [ebp - 0x8c8]
call esi
pop ecx
jmp 0x103741e
push 0x100247c
push dword [ebp - 0x8e0]
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov byte [ebp - 0x8b9], 1
mov al, byte [ebp - 0x8b9]
call fcn.01001f5c
ret