Function at 0x100bcfb7
Capabilities:
Get graphical window text

Disassembly:
push 0x118
mov eax, 0x10165dd1
call fcn.101435db
mov edi, ecx
mov eax, dword [edi + 0x150]
xor ebx, ebx
test eax, eax
jle 0x100bd018
mov esi, ebx
lea ebx, [edi + 0x1b0]
mov eax, dword [edi + 0x1b8]
mov ecx, ebx
dec eax
push eax
mov dword [ebp - 0x118], eax
call fcn.10020d8c
mov ecx, dword [eax]
test ecx, ecx
je 0x100bcffe
mov eax, dword [ecx]
push 1
call dword [eax + 4]
push 1
push dword [ebp - 0x118]
mov ecx, ebx
call fcn.100bf818
inc esi
cmp esi, dword [edi + 0x150]
jl 0x100bcfdc
xor ebx, ebx
mov ecx, edi
mov dword [edi + 0x150], ebx
call fcn.100ba474
test eax, eax
je 0x100bd276
mov ecx, eax
call fcn.1000fe00
push eax
push 0x10182f50
call fcn.10034498
mov dword [ebp - 0x124], eax
pop ecx
pop ecx
test eax, eax
je 0x100bd276
push 5
push dword [eax + 0x110]
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, eax
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x114], esi
mov eax, ebx
jmp 0x100bd1f3
cmp eax, 9
jge 0x100bd1fb
push esi
call fcn.1000f9ec
push eax
push 0x10183d0c
call fcn.10034498
pop ecx
pop ecx
mov ecx, eax
test ecx, ecx
jne 0x100bd0aa
push 2
push esi
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, eax
mov dword [ebp - 0x114], esi
jmp 0x100bd1e6
mov eax, dword [ecx]
call dword [eax + 0x1e4]
test eax, eax
je 0x100bd094
cmp dword [ebp - 0x11c], 0
jne 0x100bd106
push 0x110
call fcn.1000bd2a
pop ecx
mov dword [ebp - 0x120], eax
mov dword [ebp - 4], ebx
test eax, eax
je 0x100bd0e2
push 1
mov ecx, eax
call fcn.100b9920
jmp 0x100bd0e4
mov eax, ebx
or dword [ebp - 4], 0xffffffff
mov ecx, edi
push 0xffffffffffffffff
push eax
mov dword [eax + 0xec], 1
call fcn.100bc21b
mov dword [edi + 0x150], 1
push 0x100
lea eax, [ebp - 0x110]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
call fcn.1001926b
push eax
lea ecx, [ebp - 0x118]
call fcn.10018210
lea eax, [ebp - 0x110]
mov dword [ebp - 4], 1
push eax
mov eax, dword [ebp - 0x11c]
inc eax
push eax
lea eax, [ebp - 0x118]
push str._d__s
push eax
call fcn.100031c0
push 0x1c4
call fcn.1000bd2a
add esp, 0x14
mov dword [ebp - 0x120], eax
mov esi, dword [ebp - 0x118]
mov byte [ebp - 4], 2
test eax, eax
je 0x100bd188
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
push esi
push 0xff00
mov ecx, eax
call fcn.100bbfc6
mov ecx, eax
jmp 0x100bd18a
mov ecx, ebx
mov eax, dword [ebp - 0x114]
mov dword [ecx + 0xa0], eax
mov dword [ecx + 0xec], 1
mov eax, dword [edi + 0x84]
push 0xffffffffffffffff
mov dword [ecx + 0x84], eax
push ecx
mov ecx, edi
mov byte [ebp - 4], 1
call fcn.100bc21b
push 2
push dword [ebp - 0x114]
call dword [sym.imp.USER32.dll_GetWindow]
inc dword [edi + 0x150]
lea ecx, [esi - 0x10]
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x114], eax
call fcn.10002040
mov esi, dword [ebp - 0x114]
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
test esi, esi
jne 0x100bd072
mov esi, dword [ebp - 0x124]
cmp dword [esi + 0x11c], ebx
je 0x100bd276
cmp eax, 9
je 0x100bd216
cmp dword [esi + 0x12c], ebx
je 0x100bd276
push 0x1c4
call fcn.1000bd2a
pop ecx
mov dword [ebp - 0x120], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x100bd24c
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [esi + 0x114]
mov ecx, eax
push dword [esi + 0x11c]
call fcn.100bbfc6
mov ebx, eax
or dword [ebp - 4], 0xffffffff
mov ecx, edi
push 0xffffffffffffffff
mov dword [ebx + 0xec], 1
mov eax, dword [edi + 0x84]
push ebx
mov dword [ebx + 0x84], eax
call fcn.100bc21b
inc dword [edi + 0x150]
call fcn.1014358a
ret