Function at 0x100004410
Capabilities:
Get graphical window text

Disassembly:
cmp rcx, r15
je 0x1000044f0
mov rax, qword [rcx + 8]
mov edx, r12d
mov rcx, qword [rax + 8]
call qword [sym.imp.USER32.dll_GetDlgItem]
cmp rax, r15
je 0x1000029f6
mov rax, qword [0x1000735e0]
mov edx, r12d
mov rcx, qword [rax + 8]
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindowEnabled]
cmp eax, r15d
je 0x10002e545
mov rcx, qword [0x1000735e0]
mov eax, 1
jmp 0x1000044f0
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x118
mov rax, qword [0x1000730b0]
xor rax, rsp
mov qword [rsp + 0x100], rax
xor r15d, r15d
mov r14d, edx
mov r13, r9
lea ebx, [r15 + 1]
mov rsi, r8
mov rdi, rcx
mov bpl, r15b
lea r12d, [r15 + 0x51]
lea edx, [rbx + 2]
cmp byte [rcx + 0x10], r15b
jne 0x1000044a8
movzx ecx, r8w
sub ecx, 0x77
je 0x10002e3ca
sub ecx, 0x24
je 0x10002e39b
sub ecx, 0xd
je 0x1000133ad
sub ecx, edx
je 0x10001543c
sub ecx, ebx
je 0x10002e377
sub ecx, ebx
je 0x100015483
sub ecx, ebx
je 0x10002e355
sub ecx, ebx
je 0x100015464
cmp ecx, ebx
je 0x10002e338
movzx r12d, si
mov ecx, r12d
sub ecx, 0x41b
je 0x10002e513
sub ecx, ebx
je 0x10002c902
sub ecx, 3
je 0x10002e4cb
cmp ecx, ebx
je 0x10002e458
mov rcx, qword [0x1000735e0]
mov rbx, rsi
mov eax, 1
shr rbx, 0x10
cmp ax, bx
je 0x1000029ad
cmp dword [rdi + 0x120], r15d
je 0x100009f99
mov ebx, 0x51
mov eax, 0x9d
cmp si, ax
je 0x10002e586
mov eax, 0x9e
cmp si, ax
je 0x10002e5e0
mov eax, DllRegisterServer
cmp si, ax
je 0x100029f7a
mov eax, 0x99
cmp si, ax
je 0x10002e610
mov eax, 0x41a
cmp si, ax
je 0x10002e621
mov eax, 0xa0
cmp si, ax
je 0x10002e663
mov eax, 0x9c
cmp si, ax
je 0x10002e682
mov eax, 0x41d
cmp si, ax
je 0x10002e6aa
mov eax, 0x41e
cmp si, ax
je 0x10002e6d4
mov r14d, 1
cmp dword [rdi + 0xf8], 2
je 0x10002e5b7
cmp dword [rdi + 0x120], 2
je 0x100010287
cmp bpl, r15b
jne 0x10000662b
mov eax, 0x50
cmp si, ax
jb 0x10000662b
mov eax, DllRegisterServer
cmp si, ax
ja 0x10000662b
cmp byte [rdi + 0x10], r15b
jne 0x10002e76b
cmp si, bx
je 0x1000045fb
cmp si, 0x52
je 0x1000045fb
mov rax, qword [rdi + 0x118]
mov edx, dword [rdi + 0x120]
mov rcx, qword [0x100073278]
mov r8d, dword [rax + 0x30]
movzx r9d, si
call fcn.100004ba0
mov rcx, qword [rdi + 0x118]
mov edx, r12d
call fcn.1000048cc
mov byte [rdi + 0x10], r15b
mov ebx, 0x79
cmp si, bx
je 0x100006f7f
mov eax, 0x51
cmp r12d, eax
je 0x100008f6e
cmp r12d, ebx
je 0x100008513
mov rdx, qword [rdi + 0xbb8]
mov dword [rsp + 0x20], esi
cmp rdx, r15
je 0x10002c8d7
mov rcx, qword [rdi + 0xbc0]
sub rcx, rdx
sar rcx, 2
cmp rdx, r15
je 0x10002c64c
mov rax, qword [rdi + 0xbc8]
sub rax, rdx
sar rax, 2
cmp rcx, rax
jae 0x10002c64c
mov rax, qword [rdi + 0xbc0]
lea rcx, [rax + 4]
mov dword [rax], esi
mov qword [rdi + 0xbc0], rcx
jmp 0x10000468b
mov bpl, r14b
mov al, bpl
mov rcx, qword [rsp + 0x100]
xor rcx, rsp
call fcn.100001c30
add rsp, 0x118
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov eax, 0x139
cmp si, ax
jae 0x10000664f
mov ecx, 0x2bc
movzx eax, si
sub ax, cx
cmp ax, 0x3f
ja 0x10000468e
jmp 0x1000045c5
mov eax, 0x143
cmp si, ax
ja 0x100006635
jmp 0x1000045c5
mov rcx, qword [0x1000735d0]
call qword [sym.imp.USER32.dll_SetFocus]
mov rcx, qword [rdi + 0x190]
lea edx, [rbx + 0x1d]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetFocus]
nop
jmp 0x10000461c
mov rcx, qword [rdi + 0x190]
mov edx, reloc.OLEAUT32.dll_DllRegisterServer
call qword [sym.imp.USER32.dll_GetDlgItem]
lea rdx, [rdi + 0x20]
mov r8d, 0x64
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextW]
call fcn.100001bd8
lea rdx, [rdi + 0x20]
mov rcx, rax
call fcn.1000039b4
cmp al, r15b
jne 0x10002e783
mov rdx, qword [rdi + 0xbc0]
mov rax, qword [rdi + 0xbb8]
cmp rax, rdx
je 0x10000468b
mov r8, rdx
cmp rdx, rdx
jne 0x10002e78d
mov qword [rdi + 0xbc0], rax
jmp 0x10000468b
mov word [rdi + 0x20], r15w
mov rdx, qword [rdi + 0xbc0]
mov rax, qword [rdi + 0xbb8]
cmp rax, rdx
je 0x10000468b
mov r8, rdx
cmp rdx, rdx
je 0x100008575
jmp 0x10002e7a4
cmp ax, bx
mov ebx, 0x51
jne 0x100004502
cmp bx, si
jne 0x100004502
jmp 0x10002e54c
lea eax, [r12 - 0x302]
cmp eax, 2
ja 0x1000045a0
jmp 0x10002e743
mov rcx, qword [rdi + 0x658]
mov edx, reloc.OLEAUT32.dll_DllRegisterServer
call qword [sym.imp.USER32.dll_GetDlgItem]
lea rdx, [rsp + 0x30]
mov r8d, 0x64
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextW]
movsxd rcx, eax
mov eax, 0x20
cmp word [rsp + rcx*2 + 0x2e], ax
je 0x10002e390
mov rcx, qword [0x100073578]
lea rdx, [rsp + 0x30]
mov r8d, 0x64
mov rcx, qword [rcx + 0x20]
call fcn.100003154
mov rcx, qword [rdi + 0xb48]
lea rdx, [rsp + 0x30]
mov rax, qword [rcx]
call qword [rax + 0x10]
cmp al, r15b
je 0x1000044a8
mov rax, qword [rdi + 0x118]
lea r8, [0x100062c88]
lea rdx, [rsp + 0x30]
mov rcx, qword [rax + 0x20]
mov rcx, qword [rcx + 0x20]
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rdi + 0xb48]
xor r9d, r9d
mov rcx, qword [rcx + 0xc0]
xor r8d, r8d
mov edx, 0x18b
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 0x7d0
jg 0x1000044a8
mov rcx, qword [rdi + 0x658]
call qword [sym.imp.USER32.dll_GetParent]
mov r9, r13
mov r8, r12
mov rcx, rax
mov edx, 0x111
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1000044a8
mov edx, ebx
mov rcx, rdi
call fcn.100014c9c
mov r11, qword [0x100073278]
or dword [r11 + 0x38], 0x10
jmp 0x1000044a8
mov edx, 4
mov rcx, rdi
call fcn.100014c9c
mov r11, qword [0x100073278]
bts dword [r11 + 0x38], 7
jmp 0x1000044a8
xor edx, edx
mov rcx, rdi
call fcn.100014c9c
mov r11, qword [0x100073278]
or dword [r11 + 0x38], 8
jmp 0x1000044a8
mov rdx, rsi
mov rcx, rdi
call fcn.100029f90
jmp 0x100004580
mov rdx, qword [rdi + 0xbc0]
lea r9, [rsp + 0x20]
lea rcx, [rdi + 0xbb0]
mov r8, r14
call fcn.10002c680
jmp 0x10000468b
mov rcx, r15
jmp 0x100004655
cmp dword [rdi + 0x120], 3
je 0x10002e4f8
cmp byte [rdi + 0x124], r15b
jne 0x10002e501
mov bpl, bl
jmp 0x1000044d4
lea edx, [rbx + 4]
mov rcx, rdi
call fcn.100014c9c
mov r11, qword [0x100073278]
bts dword [r11 + 0x38], 8
jmp 0x1000044a8
mov edx, 2
mov rcx, rdi
call fcn.100014c9c
mov r11, qword [0x100073278]
mov eax, 0x20
or dword [r11 + 0x38], eax
jmp 0x1000044a8
mov rcx, rdi
call fcn.100014c9c
mov r11, qword [0x100073278]
or dword [r11 + 0x38], 0x40
jmp 0x1000044a8
mov word [rsp + rcx*2 + 0x2e], r15w
jmp 0x1000133e6
cmp dword [rdi + 0x120], edx
jne 0x10002e3ac
mov rcx, qword [rdi + 0xb48]
jmp 0x10002e3bc
cmp byte [rdi + 0x124], r15b
je 0x10002e3c2
mov rcx, qword [rdi + 0x5f0]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov bpl, bl
jmp 0x1000044a8
mov eax, dword [rdi + 0x120]
cmp eax, edx
jne 0x10002e400
mov rbx, qword [rdi + 0x180]
mov edx, 0x77
mov rax, qword [rbx + 8]
mov rcx, qword [rax + 8]
call qword [sym.imp.USER32.dll_GetDlgItem]
cmp byte [rbx + 0x218], r15b
sete cl
mov byte [rbx + 0x218], cl
jmp 0x10002e433
cmp eax, r15d
jne 0x1000044a8
mov rbx, qword [rdi + 0x180]
mov edx, 0x77
mov rax, qword [rbx + 8]
mov rcx, qword [rax + 8]
call qword [sym.imp.USER32.dll_GetDlgItem]
cmp byte [rbx + 0x308], r15b
sete cl
mov byte [rbx + 0x308], cl
cmp cl, r15b
mov r8, r15
mov edx, 0xf1
setne r8b
xor r9d, r9d
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov ebx, 1
jmp 0x1000044a8
mov rax, qword [rdi + 0xb48]
cmp qword [rax + 0xb0], r15
je 0x10002e48a
mov rcx, qword [rdi + 0x658]
call qword [sym.imp.USER32.dll_GetParent]
mov edx, 0x111
xor r9d, r9d
lea r8d, [rdx - 0x71]
mov rcx, rax
call qword [sym.imp.USER32.dll_PostMessageW]
mov rcx, qword [rdi + 0xb48]
call fcn.1000446cc
mov rcx, qword [rdi + 0x658]
call qword [sym.imp.USER32.dll_GetParent]
mov r9, r13
mov edx, 0x111
mov rcx, rax
mov r8d, 0x51
call qword [sym.imp.USER32.dll_PostMessageW]
mov r11, qword [0x100073278]
or dword [r11 + 0x38], 2
jmp 0x1000044d4
mov rcx, qword [rdi + 0xb48]
cmp qword [rcx + 0xb0], r15
jne 0x10002e4e2
call fcn.100044590
jmp 0x10002e4e8
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rax, qword [0x100073278]
or dword [rax + 0x38], 4
jmp 0x1000044d4
mov rcx, qword [rdi + 0xb48]
jmp 0x10002e508
mov rcx, qword [rdi + 0x5f0]
mov rax, qword [rcx]
call qword [rax + 0x30]
jmp 0x10002c91c
cmp dword [rdi + 0x120], 3
jne 0x10002e525
mov rcx, qword [rdi + 0xb48]
jmp 0x10002e539
cmp byte [rdi + 0x124], r15b
je 0x10002c91c
mov rcx, qword [rdi + 0x5f0]
mov rax, qword [rcx]
call qword [rax + 0x28]
nop
jmp 0x10002c91c
xor al, al
jmp 0x100004691
mov rax, qword [rdi + 0x180]
cmp byte [rax + 0x308], r15b
je 0x100004580
mov rcx, qword [rcx + 8]
lea r8d, [rbx + 0x26]
xor r9d, r9d
mov rcx, qword [rcx + 8]
mov edx, 0x111
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x1000735e0]
jmp 0x100004502
mov rax, qword [0x100073a50]
mov rcx, qword [0x100073a48]
cmp qword [rax + 0xb0], r15
jne 0x10002e5d1
mov r8d, DllRegisterServer
xor r9d, r9d
mov edx, 0x111
call qword [sym.imp.USER32.dll_PostMessageW]
nop
jmp 0x100004580
lea rax, [rsi - 0x82]
cmp rax, 0xf
ja 0x10002e704
sub si, 0x52
jmp 0x10002e71e
call qword [sym.imp.USER32.dll_SetFocus]
mov rcx, qword [0x100073a48]
jmp 0x10002e59d
mov rcx, qword [rdi + 0xb48]
cmp qword [rcx + 0xb0], r15
jne 0x10002e600
mov rcx, qword [0x1000735d0]
mov r9, r13
lea r8d, [rax - 3]
jmp 0x10002e5a6
mov rax, qword [rcx]
mov edx, 0x2b
call qword [rax + 0x18]
jmp 0x100004580
mov rcx, qword [rdi + 0x118]
call fcn.10002abc4
jmp 0x100004580
mov rax, qword [0x100073a50]
cmp qword [rax + 0xb0], r15
je 0x10002e64a
mov rcx, qword [0x1000735d0]
mov edx, 0x111
xor r9d, r9d
lea r8d, [rdx - 0x75]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rdi + 0x118]
mov rcx, qword [rax + 0x20]
mov rcx, qword [rcx + 0x28]
call fcn.10003dd84
jmp 0x100004580
mov rcx, qword [0x1000735d0]
call qword [sym.imp.USER32.dll_SetFocus]
mov rcx, qword [rdi + 0xb48]
mov rax, qword [rcx]
call qword [rax + 0x20]
jmp 0x100004580
mov rcx, qword [0x1000735d0]
call qword [sym.imp.USER32.dll_SetFocus]
mov rcx, qword [0x100073a48]
mov r9, r13
mov r8, rsi
mov edx, r14d
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x100004580
cmp dword [0x100073580], 3
je 0x100004580
mov rcx, qword [rcx + 8]
lea rdx, [0x10003f760]
xor r8d, r8d
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_EnumChildWindows]
jmp 0x100004580
cmp dword [0x100073580], 3
je 0x100004580
mov rcx, qword [rcx + 8]
mov r14d, 1
lea rdx, [0x10003f760]
mov rcx, qword [rcx + 8]
mov r8, r14
call qword [sym.imp.USER32.dll_EnumChildWindows]
jmp 0x100004586
mov eax, 0x50
cmp rsi, rax
je 0x10002e732
cmp rsi, 0x54
jne 0x10000468e
lea eax, [rsi - 0x26]
mov si, ax
mov rcx, qword [rdi + 0x100]
movzx edx, si
call fcn.10004032c
jmp 0x10000468b
mov rcx, qword [rdi + 0x100]
call fcn.100040230
jmp 0x10000468b
mov rax, qword [rdi + 0x180]
mov r9, r13
mov r8, rsi
mov rcx, qword [rax + 8]
mov edx, 0x111
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov bpl, r14b
jmp 0x1000045a0
cmp si, bx
je 0x1000045fb
cmp si, 0x52
je 0x1000045cf
jmp 0x10000460e
mov word [rdi + 0x20], r15w
jmp 0x10000468b
mov ecx, dword [r8]
add r8, 4
mov dword [rax], ecx
add rax, 4
cmp r8, rdx
jne 0x10002e78d
jmp 0x100008575
mov ecx, dword [r8]
add r8, 4
mov dword [rax], ecx
add rax, 4
cmp r8, rdx
je 0x100008575
jmp 0x10002e7a4