Function at 0x140010860
Capabilities:
Create thread
Get graphical window text

Disassembly:
push rbx
push rbp
sub rsp, 0x108
mov rax, qword [0x1400db800]
xor rax, rsp
mov qword [rsp + 0xe0], rax
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rbp, rcx
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
mov rbx, rax
cmp byte [rax + 0x3c], 0
jne 0x140010dd2
mov qword [rsp + 0x128], rsi
mov edx, 0x431
mov byte [rax + 0x48], 0
lea rsi, [rax + 0x48]
mov byte [rax + 0x14c], 0
mov rcx, rbp
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x138], r12
mov qword [rsp + 0x100], r13
xor r13d, r13d
mov qword [rax + 0x34c], r13
mov dword [rax + 0x38], r13d
mov qword [rax + 0x354], r13
mov dword [rax + 0x360], r13d
mov qword [rsp + 0xf8], r14
mov dword [rax + 0x364], 0x64
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov r14, rax
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
test eax, eax
je 0x140010a67
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
test eax, eax
je 0x140010aac
lea edi, [rax + 1]
mov qword [rsp + 0xf0], r15
movsxd rcx, edi
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.140094b74
mov r8d, edi
mov rdx, rax
mov rcx, r14
mov r15, rax
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov qword [rsp + 0x38], r13
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], r13
lea r9d, [r13 - 1]
mov dword [rsp + 0x28], r13d
mov r8, r15
xor edx, edx
mov qword [rsp + 0x50], rax
mov ecx, 0xfde9
mov qword [rsp + 0x20], r13
mov qword [rsp + 0x58], r13
mov byte [rsp + 0x60], r13b
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cdqe
mov qword [rsp + 0x58], rax
test rax, rax
je 0x1400109fc
lea rcx, [rax + 1]
cmp rcx, 0x80
jbe 0x1400109cb
call fcn.140094b74
mov rcx, rax
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x58]
jmp 0x1400109d0
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x38], r13
inc rax
mov qword [rsp + 0x30], r13
mov r9d, 0xffffffff
mov dword [rsp + 0x28], eax
mov r8, r15
mov qword [rsp + 0x20], rcx
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rdx, qword [rsp + 0x50]
mov ecx, 0x104
sub rdx, rsi
nop dword [rax]
lea rax, [rcx + 0x7ffffefa]
test rax, rax
je 0x140010a39
movzx eax, byte [rdx + rsi]
test al, al
je 0x140010a31
mov byte [rsi], al
inc rsi
sub rcx, 1
jne 0x140010a10
jmp 0x140010a36
test rcx, rcx
jne 0x140010a39
dec rsi
mov rcx, r15
mov byte [rsi], r13b
call fcn.140062970
mov rcx, qword [rsp + 0x50]
mov r15, qword [rsp + 0xf0]
test rcx, rcx
je 0x140010aac
lea rax, [rsp + 0x60]
cmp rcx, rax
je 0x140010aac
call fcn.140062970
jmp 0x140010aac
lea rdx, [0x1400c62e0]
mov ecx, 0x104
sub rdx, rsi
nop word [rax + rax]
lea rax, [rcx + 0x7ffffefa]
test rax, rax
je 0x140010aa9
movzx eax, byte [rdx + rsi]
test al, al
je 0x140010aa1
mov byte [rsi], al
inc rsi
sub rcx, 1
jne 0x140010a80
jmp 0x140010aa6
test rcx, rcx
jne 0x140010aa9
dec rsi
mov byte [rsi], r13b
mov edx, 0x435
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
mov r14, qword [rsp + 0xf8]
mov rsi, qword [rsp + 0x128]
test eax, eax
je 0x140010b8f
mov edx, 0x438
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x140010b28
lea r8, [rbx + 0x14c]
mov rcx, rbp
call fcn.14000f060
mov dword [rbx + 0x34c], eax
test eax, eax
jne 0x140010b22
xor r8d, r8d
mov edx, 0x112
mov rcx, rbp
call fcn.140091750
mov rcx, rdi
jmp 0x140010d0e
or dword [rbx + 0x38], 4
jmp 0x140010b44
mov r8d, 0x200
lea rdx, [rbx + 0x14c]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextA]
mov dword [rbx + 0x34c], eax
cmp qword [rbx + 0x40], r13
jne 0x140010b58
mov ecx, 0x11001
call fcn.140094b74
mov qword [rbx + 0x40], rax
mov edx, 0x436
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x140010b6e
or dword [rbx + 0x38], eax
mov edx, 0x437
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x140010b85
or dword [rbx + 0x38], 2
mov dword [rbx + 0x364], 1
mov edx, 0x433
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x140010c92
mov edx, 0x40b
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x140010bc3
or dword [rbx + 0x350], 0x100
mov edx, 0x40c
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x140010be0
or dword [rbx + 0x350], 0x200
mov edx, 0x40d
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x140010bfd
or dword [rbx + 0x350], 0x10000
mov edx, 0x40e
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x140010c1a
or dword [rbx + 0x350], 0x20000
mov edx, 0x40f
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x140010c37
or dword [rbx + 0x350], 0x1000000
mov edx, 0x410
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x140010c54
or dword [rbx + 0x350], 0x2000000
mov edx, 0x411
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x140010c71
or dword [rbx + 0x350], 0x4000000
mov edx, 0x412
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x140010c8e
or dword [rbx + 0x350], 0x100000
or dword [rbx + 0x38], 8
mov edx, 0x439
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x140010d5e
mov edx, 0x43a
mov rcx, rbp
lea r8d, [rdx + 2]
call fcn.14000ed80
mov edi, eax
mov rcx, rbp
cmp eax, 0xffffffff
jne 0x140010cd8
xor r8d, r8d
mov edx, 0x113
call fcn.140091750
mov edx, 0x43a
jmp 0x140010d02
mov edx, 0x43b
lea r8d, [rdx + 6]
call fcn.14000ed80
mov ecx, eax
cmp eax, 0xffffffff
jne 0x140010d46
xor r8d, r8d
mov edx, 0x113
mov rcx, rbp
call fcn.140091750
mov edx, 0x43b
mov rcx, rbp
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetFocus]
mov r12, qword [rsp + 0x138]
mov rdi, qword [rsp + 0x130]
mov r13, qword [rsp + 0x100]
mov rcx, qword [rsp + 0xe0]
xor rcx, rsp
call fcn.140094850
add rsp, 0x108
pop rbp
pop rbx
ret
or dword [rbx + 0x38], 0x10
cmp edi, ecx
cmovb eax, edi
cmova ecx, edi
mov dword [rbx + 0x354], eax
mov dword [rbx + 0x358], ecx
lea r8, [0x1400c5060]
mov edx, 0x445
mov rcx, rbp
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
xor r9d, r9d
xor edx, edx
mov r8d, 0x84
mov rcx, rbp
call fcn.14008f160
lea rax, [rsp + 0x40]
mov word [rbx + 0x3c], 1
mov qword [rsp + 0x28], rax
lea r8, [0x14000f650]
mov r9, rbx
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, 1
mov rcx, rbx
mov qword [rbx + 0x10], rax
call fcn.14000ee20
mov edx, 4
mov rcx, rbp
call fcn.14000ef40
jmp 0x140010d14
mov byte [rax + 0x3d], 1
jmp 0x140010d2c