Function at 0x10016320
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100a9ba9
mov eax, dword fs:[0]
push eax
sub esp, 0x114
mov eax, dword [0x100dbc1c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x78], ecx
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x64], 0
test edx, edx
je 0x10016dc3
test esi, esi
je 0x10016dc3
movups xmm0, xmmword [esi]
mov ecx, dword [edx]
lea eax, [ebp - 0x80]
push eax
sub esp, 0x10
mov dword [ebp - 0x80], 0
mov eax, esp
push edx
movups xmmword [eax], xmm0
call dword [ecx + 0x28]
test eax, eax
js 0x10016b41
mov edi, dword [ebp - 0x80]
test edi, edi
je 0x10016b41
push 0xc
call fcn.10076018
mov esi, eax
add esp, 4
mov dword [ebp - 0x70], esi
mov dword [ebp - 4], 6
test esi, esi
je 0x100163e4
push edi
mov dword [esi + 4], 0
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x100163e6
test edi, edi
jne 0x10016de0
jmp 0x100163e6
xor esi, esi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x64], esi
test esi, esi
je 0x10016dea
mov eax, dword [esi + 4]
mov dword [ebp - 4], 7
test eax, eax
jne 0x10016410
push dword [esi]
call fcn.10075d90
mov dword [esi + 4], eax
push eax
lea ecx, [ebp - 0x40]
call fcn.10011010
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 9
call fcn.10013570
lea eax, [ebp - 0x6c]
push eax
call fcn.1003b6a0
add esp, 4
cmp dword [eax], 0
mov ecx, 4
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x64], ecx
je 0x10016474
lea eax, [ebp - 0x74]
push eax
call fcn.1003b6a0
add esp, 4
mov ecx, 0xc
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x64], ecx
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov byte [ebp - 0x59], 1
test al, al
jne 0x10016478
mov byte [ebp - 0x59], 0
mov ecx, dword [ebp - 0x60]
or esi, 0xffffffff
test cl, 8
je 0x100164b2
mov edi, dword [ebp - 0x70]
and ecx, 0xfffffff7
mov dword [ebp - 0x60], ecx
test edi, edi
je 0x100164b2
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x100164b2
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, esi
lock xadd dword [edi + 8], eax
jne 0x100164af
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov ecx, dword [ebp - 0x60]
mov edi, dword [ebp - 0x68]
and ecx, 0xfffffffb
mov dword [ebp - 4], 9
mov dword [ebp - 0x60], ecx
test edi, edi
je 0x100164e5
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x100164e5
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, esi
lock xadd dword [edi + 8], eax
jne 0x100164e5
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
cmp byte [ebp - 0x59], 0
je 0x10016572
lea eax, [ebp - 0x6c]
push eax
call fcn.1003b6a0
add esp, 4
mov edi, dword [eax]
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0xc
call fcn.10015e70
mov esi, eax
push str.Name:
push esi
mov byte [ebp - 4], 0xd
call fcn.10012080
cmp dword [ebp - 0x2c], 0x10
lea edx, [ebp - 0x40]
cmovae edx, dword [ebp - 0x40]
push edx
push esi
call fcn.10012080
mov eax, dword [edi]
add esp, 0x10
mov ecx, edi
push esi
call dword [eax + 0x14]
lea ecx, [ebp - 0x120]
call fcn.10012280
mov edi, dword [ebp - 0x68]
or esi, 0xffffffff
mov byte [ebp - 4], 9
test edi, edi
je 0x10016572
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x10016572
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, esi
lock xadd dword [edi + 8], eax
jne 0x10016572
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov edi, dword [ebp - 0x78]
cmp dword [edi + 0xc], 0
jne 0x10016700
push 0
push str.SmartUI.Win32.Edit
push 0
push dword [ebp - 0x84]
call dword [sym.imp.USER32.dll_FindWindowExW]
push eax
mov dword [edi + 0xc], eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x10016700
lea eax, [ebp - 0x74]
push eax
call fcn.1003b6a0
add esp, 4
mov ecx, dword [ebp - 0x60]
or ecx, 0x10
mov byte [ebp - 4], 0xe
cmp dword [eax], 0
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x64], ecx
je 0x100165f7
lea eax, [ebp - 0x6c]
push eax
call fcn.1003b6a0
add esp, 4
mov ecx, dword [ebp - 0x60]
or ecx, 0x20
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x64], ecx
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov byte [ebp - 0x59], 1
test al, al
jne 0x100165fb
mov byte [ebp - 0x59], 0
mov edi, dword [ebp - 0x68]
test edi, edi
je 0x10016629
mov ecx, dword [ebp - 0x60]
test cl, 0x20
je 0x10016629
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x10016629
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, esi
lock xadd dword [edi + 8], eax
jne 0x10016629
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov edi, dword [ebp - 0x70]
mov dword [ebp - 4], 9
test edi, edi
je 0x10016656
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x10016656
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, esi
lock xadd dword [edi + 8], eax
jne 0x10016656
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
cmp byte [ebp - 0x59], 0
je 0x100166c8
lea eax, [ebp - 0x6c]
push eax
call fcn.1003b6a0
add esp, 4
mov edi, dword [eax]
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x10
call fcn.10015e70
mov esi, eax
push str.find_Edit_failed.
push esi
mov byte [ebp - 4], 0x11
call fcn.10012080
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x14]
lea ecx, [ebp - 0x120]
call fcn.10012280
mov edi, dword [ebp - 0x68]
test edi, edi
je 0x100166c8
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x100166c8
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x100166c8
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov edi, dword [ebp - 0x78]
cmp byte [edi + 0x10], 0
jne 0x10016b34
mov esi, dword [sym.imp.USER32.dll_keybd_event]
push 0
push 0
push 0
push 0x75
call esi
push 0
push 2
push 0
push 0x75
call esi
lea ecx, [ebp - 0x40]
mov byte [edi + 0x10], 1
call fcn.10011940
jmp 0x10016dc3
push 0
push 0
push 0xe
push dword [edi + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x70], eax
cmp eax, 0xa
jge 0x1001686c
lea eax, [ebp - 0x88]
push eax
call fcn.1003b6a0
add esp, 4
mov ecx, dword [ebp - 0x60]
or ecx, 0x40
mov byte [ebp - 4], 0x12
cmp dword [eax], 0
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x64], ecx
je 0x10016772
lea eax, [ebp - 0x6c]
push eax
call fcn.1003b6a0
add esp, 4
mov ecx, dword [ebp - 0x60]
or ecx, 0x80
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x64], ecx
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov byte [ebp - 0x59], 1
test al, al
jne 0x10016776
mov byte [ebp - 0x59], 0
mov edi, dword [ebp - 0x68]
test edi, edi
je 0x100167a3
mov ecx, dword [ebp - 0x60]
test cl, cl
jns 0x100167a3
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x100167a3
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, esi
lock xadd dword [edi + 8], eax
jne 0x100167a3
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov edi, dword [ebp - 0x84]
mov dword [ebp - 4], 9
test edi, edi
je 0x100167d3
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x100167d3
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, esi
lock xadd dword [edi + 8], eax
jne 0x100167d3
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
cmp byte [ebp - 0x59], 0
je 0x10016b34
lea eax, [ebp - 0x6c]
push eax
call fcn.1003b6a0
add esp, 4
mov edi, dword [eax]
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x14
call fcn.10015e70
mov esi, eax
push str.urlStr_len:
push esi
mov byte [ebp - 4], 0x15
call fcn.10012080
add esp, 8
mov ecx, esi
push dword [ebp - 0x70]
call fcn.10015fc0
mov eax, dword [edi]
mov ecx, edi
push esi
call dword [eax + 0x14]
lea ecx, [ebp - 0x120]
call fcn.10012280
mov edi, dword [ebp - 0x68]
test edi, edi
je 0x10016b34
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x10016b34
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x10016b34
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
lea ecx, [ebp - 0x40]
call fcn.10011940
jmp 0x10016dc3
lea edi, [eax + 1]
xor ecx, ecx
mov eax, edi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.100763c5
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x78]
push esi
push edi
push 0xd
push dword [eax + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
push esi
lea ecx, [ebp - 0x58]
call fcn.10015e20
push 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1003f9e0
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x17
push eax
call fcn.1003b6a0
add esp, 0x10
mov ecx, dword [ebp - 0x60]
or ecx, 0x100
mov byte [ebp - 4], 0x18
cmp dword [eax], 0
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x64], ecx
je 0x10016913
lea eax, [ebp - 0x6c]
push eax
call fcn.1003b6a0
add esp, 4
mov ecx, dword [ebp - 0x60]
or ecx, 0x200
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x64], ecx
mov ecx, dword [eax]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov byte [ebp - 0x59], 1
test al, al
jne 0x10016917
mov byte [ebp - 0x59], 0
mov edi, dword [ebp - 0x68]
or esi, 0xffffffff
test edi, edi
je 0x10016949
test dword [ebp - 0x60], 0x200
je 0x10016949
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x10016949
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, esi
lock xadd dword [edi + 8], eax
jne 0x10016949
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov edi, dword [ebp - 0x70]
mov dword [ebp - 4], 0x17
test edi, edi
je 0x10016976
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x10016976
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, esi
lock xadd dword [edi + 8], eax
jne 0x10016976
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
cmp byte [ebp - 0x59], 0
je 0x10016a03
lea eax, [ebp - 0x6c]
push eax
call fcn.1003b6a0
add esp, 4
mov edi, dword [eax]
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x1a
call fcn.10015e70
mov esi, eax
push str.url:
push esi
mov byte [ebp - 4], 0x1b
call fcn.10012080
cmp dword [ebp - 0x14], 0x10
lea edx, [ebp - 0x28]
cmovae edx, dword [ebp - 0x28]
push edx
push esi
call fcn.10012080
mov eax, dword [edi]
add esp, 0x10
mov ecx, edi
push esi
call dword [eax + 0x14]
lea ecx, [ebp - 0x120]
call fcn.10012280
mov edi, dword [ebp - 0x68]
mov byte [ebp - 4], 0x17
test edi, edi
je 0x10016a03
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x10016a03
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, esi
lock xadd dword [edi + 8], eax
jne 0x10016a03
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
lea eax, [ebp - 0x6c]
push eax
call fcn.1006aae0
add esp, 4
mov esi, dword [eax]
lea eax, [ebp - 0x28]
push 0
push eax
push 0
mov edi, dword [esi]
push str.SeWnd
push 0
push dword [ebp - 0x84]
mov byte [ebp - 4], 0x1c
call dword [sym.imp.USER32.dll_FindWindowExW]
push eax
mov eax, dword [ebp - 0x78]
mov ecx, esi
push dword [eax + 8]
call dword [edi + 4]
mov edi, dword [ebp - 0x68]
or esi, 0xffffffff
mov byte [ebp - 4], 0x17
test edi, edi
je 0x10016a6b
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x10016a6b
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, esi
lock xadd dword [edi + 8], eax
jne 0x10016a6b
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
lea eax, [ebp - 0x6c]
push eax
call fcn.10021e40
add esp, 4
mov ecx, dword [eax]
lea edx, [ebp - 0x28]
push edx
mov byte [ebp - 4], 0x1d
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov edi, dword [ebp - 0x68]
mov byte [ebp - 0x59], al
mov byte [ebp - 4], 0x17
test edi, edi
je 0x10016ab7
mov ecx, esi
lock xadd dword [edi + 4], ecx
jne 0x10016ab7
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x10016ab4
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov al, byte [ebp - 0x59]
test al, al
je 0x10016b24
mov eax, dword [0x100e0e60]
test eax, eax
jne 0x10016b13
push 0x100da004
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x100e0e60], 0
jne 0x10016b03
push 0x28
call fcn.10076018
add esp, 4
mov dword [ebp - 0x70], eax
mov byte [ebp - 4], 0x1e
test eax, eax
je 0x10016af8
mov ecx, eax
call fcn.1004d1d0
mov ecx, eax
jmp 0x10016afa
xor ecx, ecx
xchg dword [ebp - 0x70], eax
mov dword [0x100e0e60], ecx
push 0x100da004
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x100e0e60]
push 0
push 2
push 0x4d5
push dword [eax]
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [ebp - 0x28]
call fcn.10011940
lea ecx, [ebp - 0x58]
call fcn.10011990
lea ecx, [ebp - 0x40]
call fcn.10011940
jmp 0x10016dc3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x7c]
push eax
call fcn.1003b6a0
add esp, 4
cmp dword [eax], 0
mov ecx, 1
mov dword [ebp - 4], 0
mov dword [ebp - 0x64], ecx
je 0x10016ba2
lea eax, [ebp - 0x6c]
push eax
call fcn.1003b6a0
add esp, 4
mov ecx, dword [eax]
mov dword [ebp - 4], 1
mov dword [ebp - 0x64], 3
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
test al, al
je 0x10016b9d
mov ecx, dword [ebp - 0x64]
mov byte [ebp - 0x59], 1
jmp 0x10016ba6
mov ecx, 3
mov byte [ebp - 0x59], 0
mov edi, dword [ebp - 0x68]
or esi, 0xffffffff
test edi, edi
je 0x10016bd4
test cl, 2
je 0x10016bd4
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x10016bd4
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, esi
lock xadd dword [edi + 8], eax
jne 0x10016bd4
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov edi, dword [ebp - 0x78]
mov dword [ebp - 4], 0xffffffff
test edi, edi
je 0x10016c01
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x10016c01
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, esi
lock xadd dword [edi + 8], eax
jne 0x10016c01
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
cmp byte [ebp - 0x59], 0
je 0x10016dc3
lea eax, [ebp - 0x6c]
push eax
call fcn.1003b6a0
add esp, 4
mov eax, dword [eax]
mov esi, dword [ebp - 0x80]
mov dword [ebp - 0x70], eax
mov eax, dword [0x100e2e8c]
mov dword [ebp - 4], 2
test al, 1
jne 0x10016c65
or eax, 1
mov dword [0x100e2e8c], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push 0x100b28e0
mov dword [0x100e2eac], 0x100b38ec
mov dword [0x100e2eb0], eax
mov byte [0x100e2eb4], 0
call fcn.1007639f
mov eax, dword [0x100e2e8c]
add esp, 4
test al, 2
jne 0x10016cc1
or eax, 2
mov dword [0x100e2e90], 0x100b3904
mov dword [0x100e2e8c], eax
xor eax, eax
push 0x100b2910
mov dword [0x100e2e94], 0x100e2eac
mov dword [0x100e2ea4], 2
mov dword [0x100e2e9c], 0
mov dword [0x100e2ea0], 0
mov dword [0x100e2ea8], eax
mov dword [0x100e2e98], 0x100e2e90
call fcn.1007639f
add esp, 4
mov eax, dword [0x100e2e90]
mov ecx, 0x100e2e90
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x78], eax
mov byte [ebp - 4], 3
test esi, esi
je 0x10016d11
test esi, 0xffff0000
jne 0x10016cf4
movzx eax, si
lea ecx, [ebp - 0x78]
push eax
call fcn.10009c70
jmp 0x10016d1d
mov ecx, esi
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10016d00
sub ecx, edx
sar ecx, 1
jmp 0x10016d13
xor ecx, ecx
push ecx
push esi
lea ecx, [ebp - 0x78]
call fcn.10009e80
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 4
call fcn.10015e70
mov edi, eax
push str.get_name:
push edi
mov byte [ebp - 4], 5
call fcn.10012080
mov esi, dword [ebp - 0x78]
mov ecx, 0x100b38d8
test esi, esi
cmovne ecx, esi
push ecx
push edi
call fcn.10010030
push str.__ret:
push edi
call fcn.10012080
add esp, 0x18
mov ecx, edi
push dword [ebp - 0x84]
call fcn.10011d70
mov ecx, dword [ebp - 0x70]
push edi
mov eax, dword [ecx]
call dword [eax + 0x14]
lea ecx, [ebp - 0x120]
call fcn.10012280
lea edx, [esi - 0x10]
mov byte [ebp - 4], 2
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10016d9e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x68]
test edi, edi
je 0x10016dc3
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x10016dc3
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x10016dc3
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100763b4
mov esp, ebp
pop ebp
ret 0x10
push 0x8007000e
call fcn.10075d70
push 0x8007000e
call fcn.10075d70
int3