Function at 0x100010dc
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x14
push ebx
push ebp
push esi
mov ebx, 0x2000
push edi
push ebx
call fcn.10001000
mov esi, eax
xor ecx, ecx
cmp esi, ecx
je 0x100013a2
cmp dword [0x1000680c], ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x10], 1
jle 0x10001366
mov dword [esp + 0x18], ecx
mov eax, dword [0x10006804]
mov edx, dword [esp + 0x18]
lea edi, [edx + eax]
mov eax, dword [edi + 0x20]
mov ebp, dword [edi + 0x38]
cmp eax, 6
mov dword [esp + 0x20], ebp
je 0x10001334
cmp eax, 9
jle 0x10001349
cmp eax, 0xb
jle 0x100012e2
cmp eax, 0xf
jle 0x10001202
cmp eax, 0x10
jne 0x10001349
push dword [edi + 0xc]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, eax
add edi, 0xa
cmp edi, ebx
jle 0x10001183
push esi
call fcn.1000100f
push edi
mov ebx, edi
call fcn.10001000
mov esi, eax
test esi, esi
je 0x100013a2
push ebx
call fcn.10001000
xor edi, edi
cmp eax, edi
mov dword [esp + 0x14], eax
je 0x100013a2
and byte [esi], 0
push edi
push edi
push 0x18b
push ebp
call sub.USER32.dll_SendMessageA
test eax, eax
mov dword [esp + 0x20], eax
jle 0x100011f4
push 0
push edi
push 0x187
push ebp
call sub.USER32.dll_SendMessageA
test eax, eax
jle 0x100011ed
cmp byte [esi], 0
je 0x100011d2
push 0x100044b8
push esi
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push dword [esp + 0x14]
push edi
push 0x189
push ebp
call sub.USER32.dll_SendMessageA
push dword [esp + 0x14]
push esi
call dword [sym.imp.KERNEL32.dll_lstrcatA]
inc edi
cmp edi, dword [esp + 0x20]
jl 0x100011af
push dword [esp + 0x14]
call fcn.1000100f
jmp 0x10001305
push ecx
push ecx
push 0xe
push ebp
call sub.USER32.dll_SendMessageA
mov ebp, eax
cmp ebp, ebx
jle 0x1000122b
push esi
call fcn.1000100f
lea ebx, [ebp + 0x14]
push ebx
call fcn.10001000
mov esi, eax
test esi, esi
je 0x100013a2
lea eax, [ebx - 1]
mov byte [esi], 0x22
push eax
lea eax, [esi + 1]
push eax
push dword [esp + 0x28]
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [esi + ebp]
and byte [eax + 2], 0
mov byte [eax + 1], 0x22
cmp dword [edi + 0x20], 0xc
jne 0x10001305
test byte [edi + 0x35], 1
je 0x10001305
add ebx, ebx
push ebx
call fcn.10001000
cmp byte [esi], 0
mov edi, eax
mov dword [esp + 0x20], edi
mov ebp, esi
je 0x100012d3
movsx eax, byte [ebp]
sub eax, 9
je 0x100012b5
dec eax
je 0x100012ae
sub eax, 3
je 0x100012a7
sub eax, 0x4f
jne 0x1000128e
mov byte [edi], 0x5c
inc edi
push ebp
call dword [sym.imp.USER32.dll_CharNextA]
xor ecx, ecx
inc ecx
sub ecx, ebp
add eax, ecx
push eax
push ebp
push edi
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
jmp 0x100012bb
mov word [edi], 0x725c
jmp 0x100012ba
mov word [edi], 0x6e5c
jmp 0x100012ba
mov word [edi], 0x745c
inc edi
push ebp
call dword [sym.imp.USER32.dll_CharNextA]
push edi
mov ebp, eax
call dword [sym.imp.USER32.dll_CharNextA]
cmp byte [ebp], 0
mov edi, eax
jne 0x10001274
and byte [edi], 0
push esi
call fcn.1000100f
mov esi, dword [esp + 0x20]
jmp 0x10001305
push ecx
push ecx
push 0xf0
push ebp
call sub.USER32.dll_SendMessageA
neg eax
sbb eax, eax
neg eax
push eax
push 0x100044b4
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push dword [esp + 0x10]
mov edi, 0x10006648
push str.Field__d
push edi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push dword [0x100067e0]
push esi
push str.State
push edi
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
xor ecx, ecx
jmp 0x10001349
mov eax, dword [0x100067bc]
cmp eax, dword [esp + 0x10]
jle 0x10001345
dec dword [0x100067bc]
dec dword [esp + 0x10]
inc dword [esp + 0x1c]
add dword [esp + 0x18], 0x54
mov eax, dword [esp + 0x1c]
inc dword [esp + 0x10]
cmp eax, dword [0x1000680c]
jl 0x10001116
push dword [0x100067bc]
push 0x100044b4
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push dword [0x100067e0]
push esi
push str.State
push str.Settings
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push esi
call fcn.1000100f
mov al, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret
xor al, al
jmp 0x1000139a