Function at 0x100f4f0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xc8
mov rax, qword [0x0101c100]
xor rax, rsp
mov qword [rsp + 0xb0], rax
mov dword [rsp + 0x78], 0x20
mov dword [rsp + 0x7c], 5
lea rax, [rsp + 0x84]
lea rcx, [0x010014d0]
mov rdi, rax
mov rsi, rcx
mov ecx, InitCommonControls
rep movsb byte [rdi], byte [rsi]
xor r8d, r8d
lea rdx, [rsp + 0x78]
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.USER32.dll_RegisterDeviceNotificationW]
mov qword [0x010208e0], rax
lea rax, [rsp + 0x84]
lea rcx, [0x010014c0]
mov rdi, rax
mov rsi, rcx
mov ecx, InitCommonControls
rep movsb byte [rdi], byte [rsi]
xor r8d, r8d
lea rdx, [rsp + 0x78]
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.USER32.dll_RegisterDeviceNotificationW]
mov qword [0x010208b8], rax
mov edx, 0x3e8
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov qword [0x010208c0], rax
mov dword [rsp + 0x20], 0
mov r9d, 2
xor r8d, r8d
mov edx, InitCommonControls
mov ecx, InitCommonControls
call qword [sym.imp.COMCTL32.dll_ImageList_Create]
mov qword [rsp + 0x98], rax
mov edx, 0x68
mov rcx, qword [0x010208b0]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0xa8], rax
mov r8, qword [rsp + 0xa8]
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [0x01020898], eax
mov edx, 0x6b
mov rcx, qword [0x010208b0]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0xa8], rax
mov r8, qword [rsp + 0xa8]
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [0x010208ec], eax
mov edx, 0x6c
mov rcx, qword [0x010208b0]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0xa8], rax
mov r8, qword [rsp + 0xa8]
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [0x010208d0], eax
mov edx, 0x6d
mov rcx, qword [0x010208b0]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0xa8], rax
mov r8, qword [rsp + 0xa8]
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [0x010208e8], eax
mov edx, 0x6e
mov rcx, qword [0x010208b0]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0xa8], rax
mov r8, qword [rsp + 0xa8]
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov dword [0x010208a8], eax
mov r9, qword [rsp + 0x98]
xor r8d, r8d
mov edx, 0x1109
mov rcx, qword [0x010208c0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x3e9
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov qword [0x010208a0], rax
mov edx, 0x3ea
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov qword [0x010208f8], rax
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.USER32.dll_GetMenu]
mov qword [0x010208f0], rax
lea rax, [0x010014f0]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x60], 0x31
mov dword [rsp + 0x58], 1
mov dword [rsp + 0x50], 2
mov dword [rsp + 0x48], 1
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x190
xor r9d, r9d
xor r8d, r8d
mov edx, 8
mov ecx, InitCommonControls
call qword [sym.imp.GDI32.dll_CreateFontW]
mov qword [rsp + 0xa0], rax
xor r9d, r9d
mov r8, qword [rsp + 0xa0]
mov edx, 0x30
mov rcx, qword [0x010208a0]
call qword [sym.imp.USER32.dll_SendMessageW]
call fcn.0100fcb0
xor eax, eax
mov rcx, qword [rsp + 0xb0]
xor rcx, rsp
call fcn.01015770
add rsp, 0xc8
pop rdi
pop rsi
ret