Function at 0x6df410
Capabilities:
Get graphical window text

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xc8
mov rbp, rsp
mov qword [rbp + 0x28], 0
mov qword [rbp + 0x98], 0
lea rdi, [rbp + 0x80]
xor eax, eax
stosq qword [rdi], rax
stosq qword [rdi], rax
stosq qword [rdi], rax
lea rdi, [rbp + 0xa8]
xor eax, eax
stosq qword [rdi], rax
stosq qword [rdi], rax
stosq qword [rdi], rax
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x48], rbp
mov qword [rbp + 0xf0], rcx
mov qword [rbp + 0xf8], rdx
mov qword [rbp + 0x100], r8
mov qword [rbp + 0x108], r9
nop
nop
mov rcx, qword [rbp + 0xf0]
mov rdx, qword [rbp + 0x108]
mov r8d, 0x104
call sub.user32.dll_GetClassNameW
lea rcx, [rbp + 0x98]
call fcn.00414030
mov rcx, qword [rbp + 0xf8]
lea rdx, [rbp + 0x98]
lea r8, [rbp + 0x80]
call sub.oleacc.dll_AccessibleObjectFromPoint
test eax, eax
je 0x6df4e4
mov rcx, qword [rbp + 0xf0]
mov rdx, qword [rbp + 0x100]
mov r8d, 0x400
call sub.user32.dll_GetWindowTextW
jmp 0x6df7f6
cmp qword [rbp + 0x98], 0
jne 0x6df50d
mov rcx, qword [rbp + 0xf0]
mov rdx, qword [rbp + 0x100]
mov r8d, 0x400
call sub.user32.dll_GetWindowTextW
jmp 0x6df7f6
lea rdi, [rbp + 0x30]
lea rsi, [rbp + 0x80]
movsq qword [rdi], qword [rsi]
movsq qword [rdi], qword [rsi]
movsq qword [rdi], qword [rsi]
lea rcx, [rbp + 0x78]
call fcn.0040e120
mov rcx, qword [rbp + 0x98]
lea rdx, [rbp + 0x30]
mov r8, rax
mov rax, qword [rbp + 0x98]
mov rax, qword [rax]
call qword [rax + 0x50]
lea rdi, [rbp + 0x30]
lea rsi, [rbp + 0x80]
movsq qword [rdi], qword [rsi]
movsq qword [rdi], qword [rsi]
movsq qword [rdi], qword [rsi]
lea rcx, [rbp + 0x70]
call fcn.0040e120
mov rcx, qword [rbp + 0x98]
lea rdx, [rbp + 0x30]
mov r8, rax
mov rax, qword [rbp + 0x98]
mov rax, qword [rax]
call qword [rax + 0x58]
lea rdi, [rbp + 0x30]
lea rsi, [rbp + 0x80]
movsq qword [rdi], qword [rsi]
movsq qword [rdi], qword [rsi]
movsq qword [rdi], qword [rsi]
lea rcx, [rbp + 0xa8]
call fcn.00440690
mov rcx, qword [rbp + 0x98]
lea rdx, [rbp + 0x30]
mov r8, rax
mov rax, qword [rbp + 0x98]
mov rax, qword [rax]
call qword [rax + 0x68]
test eax, eax
jne 0x6df652
cmp word [rbp + 0xa8], 3
jne 0x6df652
mov rcx, qword [rbp + 0x108]
call sub.kernel32.dll_lstrlenW_1
mov ecx, 0x103
sub ecx, eax
mov dword [rbp + 0x6c], ecx
cmp dword [rbp + 0x6c], 5
jle 0x6df652
mov rcx, qword [rbp + 0x108]
call sub.kernel32.dll_lstrlenW_1
test eax, eax
jle 0x6df605
mov rcx, qword [rbp + 0x108]
lea rdx, [0x006df8dc]
call sub.kernel32.dll_lstrcatW
mov rcx, qword [rbp + 0x108]
call sub.kernel32.dll_lstrlenW_1
mov ecx, 0x103
sub ecx, eax
mov dword [rbp + 0x6c], ecx
lea rcx, [rbp + 0xa8]
call fcn.00442db0
mov rbx, rax
mov rcx, qword [rbp + 0x108]
call sub.kernel32.dll_lstrlenW_1
mov ecx, ebx
movsxd rax, eax
add rax, rax
mov rdx, qword [rbp + 0x108]
add rdx, rax
mov r8d, dword [rbp + 0x6c]
call sub.oleacc.dll_GetRoleTextW
mov dword [rbp + 0x68], 0
cmp qword [rbp + 0x78], 0
je 0x6df66d
mov rax, qword [rbp + 0x78]
mov eax, dword [rax - 4]
shr eax, 1
mov dword [rbp + 0x68], eax
cmp dword [rbp + 0x68], 0x400
jge 0x6df67e
mov eax, dword [rbp + 0x68]
mov dword [rbp + 0x64], eax
jmp 0x6df685
mov dword [rbp + 0x64], 0x400
mov rcx, qword [rbp + 0x78]
call fcn.0040f7f0
mov rcx, rax
mov rdx, qword [rbp + 0x100]
mov r8d, dword [rbp + 0x64]
add r8d, r8d
movsxd r8, r8d
call fcn.00406200
mov dword [rbp + 0x60], 0
cmp qword [rbp + 0x70], 0
je 0x6df6c2
mov rax, qword [rbp + 0x70]
mov eax, dword [rax - 4]
shr eax, 1
mov dword [rbp + 0x60], eax
cmp dword [rbp + 0x60], 0
jle 0x6df7f5
mov rcx, qword [rbp + 0x78]
mov rdx, qword [rbp + 0x70]
call fcn.0040fc70
test eax, eax
je 0x6df7f5
mov rcx, qword [rbp + 0x100]
call sub.kernel32.dll_lstrlenW_1
mov ecx, 0x3ff
sub ecx, eax
mov dword [rbp + 0x6c], ecx
cmp dword [rbp + 0x6c], 5
jle 0x6df7f5
mov rcx, qword [rbp + 0x100]
call sub.kernel32.dll_lstrlenW_1
test eax, eax
jle 0x6df725
mov rcx, qword [rbp + 0x100]
mov rdx, qword [0x009bac28]
call sub.kernel32.dll_lstrcatW
mov rcx, qword [rbp + 0x100]
call sub.kernel32.dll_lstrlenW_1
mov ecx, 0x3ff
sub ecx, eax
mov dword [rbp + 0x6c], ecx
mov dword [rbp + 0x5c], 0
cmp qword [rbp + 0x70], 0
je 0x6df757
mov rax, qword [rbp + 0x70]
mov eax, dword [rax - 4]
shr eax, 1
mov dword [rbp + 0x5c], eax
mov eax, dword [rbp + 0x5c]
cmp eax, dword [rbp + 0x6c]
jge 0x6df780
mov dword [rbp + 0x58], 0
cmp qword [rbp + 0x70], 0
je 0x6df77a
mov rax, qword [rbp + 0x70]
mov eax, dword [rax - 4]
shr eax, 1
mov dword [rbp + 0x58], eax
mov eax, dword [rbp + 0x58]
mov dword [rbp + 0x6c], eax
mov rcx, qword [rbp + 0x70]
call fcn.0040f7f0
mov rbx, rax
mov rcx, qword [rbp + 0x100]
call sub.kernel32.dll_lstrlenW_1
mov rcx, rbx
movsxd rax, eax
add rax, rax
mov rdx, qword [rbp + 0x100]
add rdx, rax
mov r8d, dword [rbp + 0x6c]
add r8d, r8d
movsxd r8, r8d
call fcn.00406200
jmp 0x6df7f5
nop
lea rcx, [rbp + 0x28]
call fcn.0040e080
lea rcx, [rbp + 0x70]
mov edx, 2
call fcn.0040e1c0
lea rcx, [rbp + 0x80]
call fcn.00440690
lea rcx, [rbp + 0x98]
call fcn.00414030
lea rcx, [rbp + 0xa8]
call fcn.00440690
lea rsp, [rbp + 0xc8]
pop rbx
pop rsi
pop rdi
pop rbp
ret