Function at 0x48ddd8
Capabilities:
Get graphical window text

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r14
sub rsp, 0x200
mov qword [rsp + 0x1a0], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rdi, rcx
mov rcx, qword [rcx + 0x2c0]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
xor ebp, ebp
cmp eax, ebp
jle 0x48e68e
mov rcx, qword [rdi + 0x2c0]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
inc eax
movsxd rdx, eax
lea eax, [rbp + 2]
mul rdx
lea rcx, [rbp - 1]
cmovo rax, rcx
mov rcx, rax
call fcn.006a43c4
mov rbx, rax
mov qword [rsp + 0x238], rax
mov rcx, qword [rdi + 0x2c0]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
lea r8d, [rax + 1]
mov rdx, rbx
mov rcx, qword [rdi + 0x2c0]
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov rcx, qword [rdi + 0x2c0]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
movsxd r8, eax
lea r9, [rsp + 0x230]
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.0042100c
nop
mov rcx, qword [rdi + 0x460]
sub rcx, qword [rdi + 0x458]
movabs rax, 0x6666666666666667
imul rcx
mov r10, rdx
sar r10, 5
mov rax, r10
shr rax, 0x3f
add r10, rax
mov qword [rdi + 0x4c0], r10
je 0x48df37
cmp r10, rbp
jbe 0x48dfa9
mov r11, qword [rdi + 0x458]
lea r9, [r10 + r10*4]
add r9, r9
mov rdx, qword [r11 + r9*8 - 0x10]
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
sub rcx, r8
mov rax, rdx
sub rax, qword [r11 + r9*8 - 8]
xor rcx, rax
test rcx, 0xfffffffffffffffe
jne 0x48df37
mov rcx, qword [r11 + r9*8 - 8]
sub rdx, rcx
sar rdx, 1
je 0x48df31
movzx eax, word [r8]
cmp word [rcx], ax
jne 0x48df25
add rcx, 2
add r8, 2
sub rdx, 1
jne 0x48df0c
jmp 0x48df31
cmp word [rcx], ax
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0x48df33
mov eax, ebp
cmp eax, ebp
je 0x48dfa9
lea rax, [r10 + 1]
mov qword [rdi + 0x4c0], rax
mov rax, qword [rdi + 0x460]
cmp rax, qword [rdi + 0x468]
je 0x48df7f
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x240], rax
cmp rax, rbp
je 0x48df75
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.004021f8
nop
add qword [rdi + 0x460], 0x50
jmp 0x48dfa9
mov byte [rsp + 0x28], 1
mov qword [rsp + 0x20], 1
lea r9, [rsp + 0x230]
lea r8, [rsp + 0x30]
mov rdx, rax
lea rcx, [rdi + 0x458]
call fcn.0040827c
lea rcx, [rdi + 0x470]
lea r14, [0x0078dc30]
mov r8, r14
mov rdx, r14
call fcn.00406d38
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x80]
call fcn.00402190
nop
mov r8, rax
mov rdx, qword [rdi + 0x7b8]
mov rcx, qword [0x008bb560]
call fcn.006123b8
mov esi, eax
lea rax, [rsp + 0x80]
mov r12d, 0x100
mov rcx, qword [rsp + 0xa8]
cmp rcx, rax
je 0x48e029
cmp rcx, rbp
je 0x48e029
mov rdx, qword [rsp + 0x80]
sub rdx, rcx
cmp rdx, r12
jbe 0x48e024
call fcn.006a4944
jmp 0x48e029
call fcn.006a3610
cmp esi, ebp
je 0x48e085
cmp esi, 1
jne 0x48e043
mov rdx, r14
mov rcx, qword [rdi + 0x2c0]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x48e078
cmp rcx, rbp
je 0x48e078
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r12
jbe 0x48e072
call fcn.006a4944
jmp 0x48e078
call fcn.006a3610
nop
mov rcx, rbx
call fcn.006a5088
jmp 0x48e699
mov rax, qword [rsp + 0x78]
cmp word [rax], 0x2f
jne 0x48e4b7
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x1b0]
call fcn.004021f8
nop
lea rax, [rsp + 0x150]
mov qword [rsp + 0x190], rax
lea rax, [rsp + 0x150]
mov qword [rsp + 0x198], rax
mov word [rsp + 0x150], bp
lea rax, [rsp + 0x100]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x100]
mov qword [rsp + 0x148], rax
mov word [rsp + 0x100], bp
lea rax, [rsp + 0xb0]
mov qword [rsp + 0xf0], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0xf8], rax
mov word [rsp + 0xb0], bp
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x100]
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x1b0]
mov rcx, rdi
call fcn.0048b758
mov r11, qword [rsp + 0x140]
cmp qword [rsp + 0x148], r11
je 0x48e374
mov rcx, qword [rdi + 0x7b8]
cmp rcx, rbp
je 0x48e199
call fcn.005a1568
cmp byte [rax + 0x305a], bpl
jne 0x48e191
mov rcx, qword [rax + 0x30]
cmp rcx, rbp
je 0x48e191
mov edx, 0x262
call fcn.0041024c
jmp 0x48e1c7
mov al, byte [rax + 0x2c7b]
jmp 0x48e1c7
mov rax, qword [0x00862cb8]
cmp byte [rax + 0x30e2], bpl
jne 0x48e1c1
mov rcx, qword [rax + 0xb8]
cmp rcx, rbp
je 0x48e1c1
mov edx, 0x262
call fcn.0041024c
jmp 0x48e1c7
mov al, byte [rax + 0x2d03]
cmp al, bpl
je 0x48e316
mov ecx, gethostbyname
call qword [sym.imp.USER32.dll_MessageBeep]
nop
lea rax, [rsp + 0xb0]
mov rcx, qword [rsp + 0xf8]
cmp rcx, rax
je 0x48e21a
cmp rcx, rbp
je 0x48e21a
mov rax, qword [rsp + 0xb0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r12
jbe 0x48e214
call fcn.006a4944
jmp 0x48e21a
call fcn.006a3610
nop
lea rax, [rsp + 0x100]
mov rcx, qword [rsp + 0x148]
cmp rcx, rax
je 0x48e258
cmp rcx, rbp
je 0x48e258
mov rax, qword [rsp + 0x100]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r12
jbe 0x48e252
call fcn.006a4944
jmp 0x48e258
call fcn.006a3610
nop
lea rax, [rsp + 0x150]
mov rcx, qword [rsp + 0x198]
cmp rcx, rax
je 0x48e296
cmp rcx, rbp
je 0x48e296
mov rax, qword [rsp + 0x150]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r12
jbe 0x48e290
call fcn.006a4944
jmp 0x48e296
call fcn.006a3610
nop
lea rax, [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1f8]
cmp rcx, rax
je 0x48e2d4
cmp rcx, rbp
je 0x48e2d4
mov rax, qword [rsp + 0x1b0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r12
jbe 0x48e2ce
call fcn.006a4944
jmp 0x48e2d4
call fcn.006a3610
nop
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x48e309
cmp rcx, rbp
je 0x48e309
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r12
jbe 0x48e303
call fcn.006a4944
jmp 0x48e309
call fcn.006a3610
nop
mov rcx, rbx
call fcn.006a5088
jmp 0x48e699
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x80]
call fcn.00402190
nop
mov rcx, qword [rdi + 0x7b8]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x20]
nop
lea rax, [rsp + 0x80]
mov rcx, qword [rsp + 0xa8]
cmp rcx, rax
je 0x48e374
cmp rcx, rbp
je 0x48e374
mov rdx, qword [rsp + 0x80]
sub rdx, rcx
cmp rdx, r12
jbe 0x48e36f
call fcn.006a4944
jmp 0x48e374
call fcn.006a3610
mov rax, qword [rsp + 0xf0]
cmp qword [rsp + 0xf8], rax
je 0x48e39f
mov r9b, 1
mov r8d, 3
lea rdx, [rsp + 0xb0]
mov rcx, rdi
call fcn.004983bc
mov rdx, r14
mov rcx, qword [rdi + 0x2c0]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop
lea rax, [rsp + 0xb0]
mov rcx, qword [rsp + 0xf8]
cmp rcx, rax
je 0x48e3ee
cmp rcx, rbp
je 0x48e3ee
mov rax, qword [rsp + 0xb0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r12
jbe 0x48e3e8
call fcn.006a4944
jmp 0x48e3ee
call fcn.006a3610
nop
lea rax, [rsp + 0x100]
mov rcx, qword [rsp + 0x148]
cmp rcx, rax
je 0x48e42c
cmp rcx, rbp
je 0x48e42c
mov rax, qword [rsp + 0x100]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r12
jbe 0x48e426
call fcn.006a4944
jmp 0x48e42c
call fcn.006a3610
nop
lea rax, [rsp + 0x150]
mov rcx, qword [rsp + 0x198]
cmp rcx, rax
je 0x48e46a
cmp rcx, rbp
je 0x48e46a
mov rax, qword [rsp + 0x150]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r12
jbe 0x48e464
call fcn.006a4944
jmp 0x48e46a
call fcn.006a3610
nop
lea rax, [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1f8]
cmp rcx, rax
je 0x48e64f
cmp rcx, rbp
je 0x48e64f
mov rax, qword [rsp + 0x1b0]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r12
jbe 0x48e4ad
call fcn.006a4944
jmp 0x48e64f
call fcn.006a3610
jmp 0x48e64f
cmp byte [rdi + 0x450], bpl
je 0x48e52b
mov r8b, 1
lea rdx, [0x0086a3b0]
mov rcx, rdi
call fcn.004961a8
lea rdx, str._password
mov rcx, qword [rdi + 0x2c0]
call qword [sym.imp.USER32.dll_SetWindowTextW]
mov rcx, qword [rdi + 0x2c0]
call qword [sym.imp.USER32.dll_SetFocus]
mov r8d, 0xa
mov r9, r8
mov edx, 0xb1
mov rcx, qword [rdi + 0x2c0]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb7
mov rcx, qword [rdi + 0x2c0]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x48e64f
mov rcx, qword [rdi + 0x7b8]
cmp rcx, rbp
je 0x48e562
call fcn.005a1568
cmp byte [rax + 0x305a], bpl
jne 0x48e55a
mov rcx, qword [rax + 0x30]
cmp rcx, rbp
je 0x48e55a
mov edx, 0x262
call fcn.0041024c
jmp 0x48e590
mov al, byte [rax + 0x2c7b]
jmp 0x48e590
mov rax, qword [0x00862cb8]
cmp byte [rax + 0x30e2], bpl
jne 0x48e58a
mov rcx, qword [rax + 0xb8]
cmp rcx, rbp
je 0x48e58a
mov edx, 0x262
call fcn.0041024c
jmp 0x48e590
mov al, byte [rax + 0x2d03]
cmp al, bpl
je 0x48e5e3
mov ecx, gethostbyname
call qword [sym.imp.USER32.dll_MessageBeep]
nop
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x48e5d6
cmp rcx, rbp
je 0x48e5d6
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r12
jbe 0x48e5d0
call fcn.006a4944
jmp 0x48e5d6
call fcn.006a3610
nop
mov rcx, rbx
call fcn.006a5088
jmp 0x48e699
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x80]
call fcn.00402190
nop
mov rcx, qword [rdi + 0x7b8]
mov r8, qword [rcx]
mov rdx, rax
call qword [r8 + 0x20]
nop
lea rax, [rsp + 0x80]
mov rcx, qword [rsp + 0xa8]
cmp rcx, rax
je 0x48e63e
cmp rcx, rbp
je 0x48e63e
mov rdx, qword [rsp + 0x80]
sub rdx, rcx
cmp rdx, r12
jbe 0x48e639
call fcn.006a4944
jmp 0x48e63e
call fcn.006a3610
mov rdx, r14
mov rcx, qword [rdi + 0x2c0]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop
lea rax, [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
cmp rcx, rax
je 0x48e684
cmp rcx, rbp
je 0x48e684
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 1
lea rdx, [rax + rax]
cmp rdx, r12
jbe 0x48e67e
call fcn.006a4944
jmp 0x48e684
call fcn.006a3610
nop
mov rcx, rbx
call fcn.006a5088
jmp 0x48e699
mov ecx, gethostbyname
call qword [sym.imp.USER32.dll_MessageBeep]
mov rbx, qword [rsp + 0x248]
add rsp, 0x200
pop r14
pop r12
pop rdi
pop rsi
pop rbp
ret