Function at 0x1000019ec
Capabilities:
Get graphical window text

Disassembly:
mov r11, rsp
push r12
sub rsp, 0x40
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
mov qword [r11 + 0x20], rdi
mov rsi, r9
mov rdi, rcx
mov eax, dword [rsp + 0x80]
xor r12d, r12d
cmp eax, r12d
je 0x100001a88
lea ebx, [r12 + 1]
sub eax, ebx
je 0x100001df7
sub eax, ebx
je 0x100001dd6
sub eax, ebx
je 0x100001d86
cmp eax, ebx
jne 0x100001a6b
lea eax, [rbx + 0x13]
cmp r8d, eax
je 0x10000318b
cmp r8d, 0x210
je 0x10000255e
mov eax, VarUI4FromDisp
cmp r8d, eax
je 0x100001e88
xor eax, eax
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop r12
ret
mov ebx, 1
cmp r8d, ebx
je 0x10000af80
cmp r8d, 5
je 0x10000aa18
cmp r8d, 0x900
je 0x100005218
cmp r8d, 0x31a
je 0x1000208f6
mov edx, 0x1a
cmp r8d, edx
je 0x100020908
mov eax, VarUI4FromDisp
cmp r8d, eax
jne 0x100001a6b
mov eax, reloc.OLEAUT32.dll_SafeArrayLock
cmp r9w, ax
je 0x100020946
mov r11d, r12d
movsxd rax, r11d
mov rbp, qword [rsp + 0x78]
mov qword [rbp], rax
cmp r11d, r12d
jne 0x100020967
mov eax, 0x300
cmp ax, si
jne 0x100001a6b
jmp 0x10002096e
mov edx, 0x200
cmp r8d, edx
je 0x100007bcf
mov eax, 0x2a3
cmp r8d, eax
je 0x1000207c7
cmp r8d, 7
je 0x100005206
cmp r8d, 8
je 0x10001669b
mov edx, 0x100
cmp r8d, edx
je 0x100020806
cmp r8d, 0x102
jne 0x100001a6b
jmp 0x100020844
mov edx, 0x200
cmp r8d, edx
je 0x100020872
mov eax, 0x2a3
cmp r8d, eax
jne 0x100001a6b
jmp 0x1000208b0
cmp r8d, 0x128
je 0x100010651
cmp r8d, 0x138
jne 0x100001a6b
mov edx, ebx
mov rcx, r9
call qword [sym.imp.GDI32.dll_SetBkMode]
mov ecx, 5
call qword [sym.imp.GDI32.dll_GetStockObject]
mov rcx, qword [rsp + 0x78]
mov qword [rcx], rax
mov eax, ebx
jmp 0x100001a6d
mov r9, qword [rsp + 0x70]
mov r8, rsi
mov edx, eax
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r11, qword [rsp + 0x78]
mov qword [r11], rbx
mov eax, ebx
jmp 0x100001a6d
lea edx, [r8 - 0x10]
cmp r9w, dx
je 0x100007bb2
mov eax, 0x2a3
cmp r9w, ax
je 0x1000207a1
mov rax, qword [rsp + 0x78]
mov qword [rax], rbx
mov eax, ebx
jmp 0x100001a6d
mov dword [r11 + 0x38], ebx
lea rcx, [r11 + 0x38]
mov qword [r11 - 0x28], rcx
mov r9, qword [rsp + 0x70]
mov r8, rsi
mov edx, eax
mov rcx, rdi
call fcn.1000031cc
mov rcx, qword [rsp + 0x78]
mov qword [rcx], rax
cmp dword [rsp + 0x80], r12d
je 0x100001a6b
mov eax, ebx
jmp 0x100001a6d
call fcn.100001e40
mov r11, qword [rsp + 0x78]
mov qword [r11], r12
jmp 0x100001a6b
mov rcx, qword [rcx + 0x1c0]
call qword [sym.imp.USER32.dll_SetFocus]
mov r11, qword [rsp + 0x78]
mov qword [r11], rbx
mov eax, ebx
jmp 0x100001a6d
cmp byte [rcx + 0x218], r12b
jne 0x10000257b
mov byte [rcx + 0x218], bl
call fcn.100001e40
jmp 0x10000257b
mov dword [rsp + 0x80], ebx
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x70]
mov r8, rsi
call fcn.100007c20
mov rcx, qword [rsp + 0x78]
mov qword [rcx], rax
cmp dword [rsp + 0x80], r12d
je 0x100001a6b
jmp 0x1000207c0
mov dword [rsp + 0x80], ebx
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x70]
mov r8, rsi
mov edx, 5
call fcn.10000aa70
mov rcx, qword [rsp + 0x78]
mov qword [rcx], rax
cmp dword [rsp + 0x80], r12d
je 0x100001a6b
mov eax, ebx
jmp 0x100001a6d
mov dword [rsp + 0x80], ebx
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x70]
mov r8, rsi
mov edx, ebx
call fcn.10000afc4
mov rcx, qword [rsp + 0x78]
mov qword [rcx], rax
cmp dword [rsp + 0x80], r12d
je 0x100001a6b
jmp 0x1000208ef
mov rax, qword [rsp + 0x78]
mov qword [rax], r12
mov eax, ebx
jmp 0x100001a6d
call fcn.100001e40
mov r11, qword [rsp + 0x78]
mov qword [r11], r12
jmp 0x100001a6b
cmp byte [rcx + 0x218], r12b
je 0x10000257b
mov byte [rcx + 0x218], r12b
call fcn.100001e40
nop
jmp 0x10000257b
mov eax, ebx
jmp 0x100001a6d
mov r9, qword [rsp + 0x70]
mov r8, rax
mov edx, 0x210
mov rcx, qword [rcx + 0xb8]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x41c
mov rcx, qword [rdi + 0x210]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r11, qword [rsp + 0x78]
mov qword [r11], r12
jmp 0x100001a6b
mov dword [rsp + 0x80], ebx
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x70]
mov r8, rsi
call fcn.10003ae6c
mov rcx, qword [rsp + 0x78]
mov qword [rcx], rax
cmp dword [rsp + 0x80], r12d
je 0x100001a6b
mov eax, ebx
jmp 0x100001a6d
mov edx, r12d
movzx eax, r9w
cmp eax, 9
je 0x100020855
cmp eax, 0xd
jne 0x100020857
mov edx, ebx
movsxd rcx, edx
mov rax, qword [rsp + 0x78]
mov qword [rax], rcx
cmp edx, r12d
je 0x100001a6b
mov eax, ebx
jmp 0x100001a6d
mov dword [rsp + 0x80], ebx
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x70]
mov r8, rsi
call fcn.100007c20
mov rcx, qword [rsp + 0x78]
mov qword [rcx], rax
cmp dword [rsp + 0x80], r12d
je 0x100001a6b
mov eax, ebx
jmp 0x100001a6d
mov r9, qword [rsp + 0x70]
mov r8, rax
mov edx, 0x210
mov rcx, qword [rcx + 0xb8]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x41c
mov rcx, qword [rdi + 0x210]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r11, qword [rsp + 0x78]
mov qword [r11], r12
jmp 0x100001a6b
mov eax, ebx
jmp 0x100001a6d
call fcn.10000b540
mov r11, qword [rsp + 0x78]
mov qword [r11], r12
jmp 0x100001a6b
mov dword [rsp + 0x80], ebx
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x70]
mov r8, rsi
call fcn.10003b170
mov rcx, qword [rsp + 0x78]
mov qword [rcx], rax
cmp dword [rsp + 0x80], r12d
je 0x100001a6b
mov eax, ebx
jmp 0x100001a6d
or r9, 0xffffffffffffffff
xor r8d, r8d
mov edx, 0xb1
mov rcx, qword [rcx + 0x1c0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r11d, ebx
jmp 0x100001ae4
mov eax, ebx
jmp 0x100001a6d
lea rdx, [0x100066a5c]
lea rcx, [rsp + 0x30]
call fcn.100001740
nop
mov edx, LoadRegTypeLib
lea rcx, [rsp + 0x30]
call fcn.1000017d0
mov r9, rax
mov edx, SafeArrayGetDim
mov r8d, LoadRegTypeLib
mov rcx, qword [rdi + 0x1c0]
call qword [sym.imp.USER32.dll_SendMessageW]
or edx, 0xffffffff
lea rcx, [rsp + 0x30]
call fcn.100001848
xor r8d, r8d
mov rdx, qword [rsp + 0x30]
mov rcx, rdi
call fcn.10003b360
nop
lea rcx, [rsp + 0x30]
call fcn.1000012b0
mov qword [rbp], rbx
mov eax, ebx
jmp 0x100001a6d