Function at 0x10009500
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10038491
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1010
call fcn.10011a20
mov eax, dword [0x10045ca0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov esi, ecx
cmp dword [0x10047130], ebx
je 0x100097c6
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [0x10047148]
cmp ecx, 0x64
jb 0x100097c6
push 0xf9f
lea edx, [ebp - 0xfb3]
push ebx
push edx
mov dword [0x10047148], eax
mov byte [ebp - 0xfb4], bl
call fcn.100115b0
add esp, 0xc
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov ecx, eax
and ecx, 0xb
cmp cl, 0xb
jne 0x1000959a
push str.Mongoose:_Owner_draw_button_clicked_r_n
jmp 0x100095a8
and eax, 0x80
cmp al, 0x80
jne 0x100095b0
push str.Mongoose:_Bitmap_button_clicked_r_n
call fcn.1000df40
add esp, 4
push 0xfa0
lea edx, [ebp - 0xfb4]
push edx
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0xfb4]
push eax
push str.Mongoose:_Button_Clicked:__Text_s_r_n
call fcn.1000df40
add esp, 8
push esi
call dword [sym.imp.USER32.dll_GetParent]
mov dword [ebp - 0x1020], ebx
mov dword [ebp - 0x101c], ebx
mov dword [ebp - 0x1018], ebx
mov dword [ebp - 0x1014], ebx
mov dword [ebp - 0x1010], ebx
mov dword [ebp - 0x100c], ebx
cmp eax, ebx
je 0x10009615
lea ecx, [ebp - 0x1020]
push ecx
push 0x100040c0
push eax
jmp 0x10009622
lea edx, [ebp - 0x1020]
push edx
push 0x100040c0
push esi
call dword [sym.imp.USER32.dll_EnumChildWindows]
cmp dword [ebp - 0x1014], 7
jne 0x100097c6
mov eax, dword [ebp - 0x100c]
cmp eax, ebx
je 0x100097c6
lea esi, [eax - 1]
mov eax, dword [esi*4 + 0x1003a820]
push eax
lea ecx, [ebp - 0xfd0]
mov edi, 3
call fcn.10007ba0
cmp dword [ebp - 0xfbc], 0x10
mov eax, dword [ebp - 0xfd0]
mov byte [ebp - 4], 1
jae 0x10009677
lea eax, [ebp - 0xfd0]
push eax
push str.Mongoose:_EULA_Windows_Detected_in__s_r_n
call fcn.1000df40
mov eax, dword [ebp - 0x100c]
add esp, 8
cmp eax, 1
jle 0x1000969d
lea ecx, [eax - 2]
mov edi, 0x20
shl edi, cl
or edi, 3
push edi
call fcn.1000a420
add esp, 4
cmp al, bl
je 0x100096e1
lea ecx, [ebp - 0xfd0]
push ecx
lea edx, [ebp - 0x1008]
push str.Saw_Eula_Windows_in
push edx
call fcn.100093c0
add esp, 0xc
push eax
mov byte [ebp - 4], 2
call fcn.1000e190
add esp, 4
lea ecx, [ebp - 0x1008]
mov byte [ebp - 4], 1
call fcn.10001e30
lea eax, [ebp - 0xfb4]
push eax
lea ecx, [ebp - 0xfec]
push ecx
call fcn.1000b1a0
add esp, 8
mov ecx, dword [0x10047130]
lea edx, [ebp - 0xfec]
push edx
mov byte [ebp - 4], 3
call fcn.1000b2f0
cmp dword [ebp - 0xfd8], 0x10
mov eax, dword [ebp - 0xfec]
jae 0x10009722
lea eax, [ebp - 0xfec]
push eax
push str.Mongoose:_Cleaned_Button_Text:__Text_s_r_n
call fcn.1000df40
mov ecx, dword [0x10047130]
add esp, 8
push esi
lea eax, [ebp - 0xfec]
push eax
call fcn.1000a8a0
mov esi, eax
cmp esi, ebx
je 0x100097b0
cmp esi, 1
jne 0x1000977f
cmp dword [ebp - 0xfbc], 0x10
mov eax, dword [ebp - 0xfd0]
jae 0x10009763
lea eax, [ebp - 0xfd0]
push eax
push str.Mongoose:_An_accept_button_in__s_was_clicked._Eula_has_been_accepted._r_n
call fcn.1000df40
mov ecx, edi
or ecx, 4
add esp, 8
push ecx
call fcn.1000a420
add esp, 4
cmp esi, 2
jne 0x100097b0
cmp dword [ebp - 0xfbc], 0x10
mov eax, dword [ebp - 0xfd0]
jae 0x10009799
lea eax, [ebp - 0xfd0]
push eax
push str.Mongoose:_A_decline_button_in__s_was_clicked._Eula_has_been_declined._r_n
call fcn.1000df40
add esp, 8
push edi
call fcn.1000a4c0
add esp, 4
lea ecx, [ebp - 0xfec]
call fcn.10001e30
lea ecx, [ebp - 0xfd0]
call fcn.10001e30
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1001105b
mov esp, ebp
pop ebp
ret