Function at 0x140011738
Capabilities:
Check for time delay via gettickcount
Get graphical window text

Disassembly:
push rbp
push rbx
push rsi
push rdi
lea rbp, [rsp - 0xfc8]
mov eax, 0x10c8
call fcn.1400f0b10
sub rsp, rax
mov rax, qword [0x1401412b0]
xor rax, rsp
mov qword [rbp + 0xfb0], rax
mov al, byte [rbp + 0x1010]
mov rbx, r9
mov byte [rsp + 0x30], al
mov rsi, rcx
xor eax, eax
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x68], rcx
mov r9, r8
mov rcx, qword [rcx]
mov edx, 0x110a
mov qword [rsp + 0x58], rbx
mov edi, eax
lea r8d, [rax + 4]
call qword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140011a1c
mov qword [rsp + 0x78], rax
lea r9, [rsp + 0x70]
lea rax, [rbp - 0x50]
mov word [rbp - 0x50], cx
mov rcx, qword [rsi]
xor r8d, r8d
mov edx, 0x113e
mov qword [rbp - 0x78], rax
mov dword [rsp + 0x70], 0xd
mov dword [rbp - 0x70], 0x800
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rbp - 0x60]
xor edx, edx
mov r8d, dword [rbx]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x34], r8d
test rax, rax
je 0x140011820
mov rcx, qword [rax + 0x10]
lea rdx, [rbp - 0x50]
call qword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov r8d, dword [rsp + 0x34]
xor edx, edx
test eax, eax
setne al
test al, al
je 0x1400118e1
mov rax, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x48]
neg rax
mov r9d, edx
movsxd rax, r8d
sbb ecx, ecx
movzx r10d, dx
movzx r11d, dx
and ecx, r8d
movsxd rdx, ecx
sub rdx, rax
lea r8, [rbx + rax*2]
add rdx, rdx
lea rax, [rbp - 0x50]
sub rdx, rbx
add rax, rdx
mov qword [rsp + 0x60], rax
movzx ecx, word [rax + r8]
movzx eax, word [r8]
mov word [rsp + 0x3c], ax
mov qword [rsp + 0x50], r8
mov dword [rsp + 0x38], r9d
mov word [rsp + 0x32], cx
test cx, cx
jne 0x140011891
test ax, ax
je 0x1400118cd
cmp r10w, 0x5c
jne 0x14001188b
cmp r11w, r10w
jmp 0x14001188f
cmp ax, 0x5c
je 0x1400118cd
movzx ecx, ax
call fcn.140090208
movzx ecx, word [rsp + 0x32]
mov ebx, eax
call fcn.140090208
cmp eax, ebx
jne 0x1400118d7
mov r9d, dword [rsp + 0x38]
mov r8, qword [rsp + 0x50]
inc r9d
movzx r10d, word [rsp + 0x32]
add r8, 2
movzx r11d, word [rsp + 0x3c]
mov rax, qword [rsp + 0x60]
jmp 0x140011857
mov r8d, dword [rsp + 0x34]
add r8d, r9d
jmp 0x1400118dc
mov r8d, dword [rsp + 0x34]
mov rbx, qword [rsp + 0x58]
mov r9, qword [rsp + 0x40]
cmp r8d, dword [rbx]
jle 0x1400118f3
mov dword [rbx], r8d
mov rdi, r9
jmp 0x140011912
test byte [rbp - 0x80], 0x20
je 0x140011912
mov rcx, qword [rsi]
mov edx, 0x1102
mov r8d, 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, qword [rsp + 0x40]
mov rcx, qword [rsi]
mov edx, 0x110a
mov r8d, 1
call qword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
mov qword [rsp + 0x40], rax
test rax, rax
jne 0x1400117ab
test rdi, rdi
je 0x140011a1c
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [rsi]
mov r9, rdi
mov edx, 0x1102
mov dword [rsp + 0x38], eax
mov r8d, 2
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [rsi + 0x14], 0
je 0x140011993
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [rsp + 0x38]
cmp eax, dword [rsi + 0x14]
jbe 0x140011993
mov rcx, qword [rsi]
mov r9, rdi
mov edx, 0x1102
mov r8d, 0x8001
call qword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
jmp 0x140011a1f
mov al, byte [rsp + 0x30]
mov r9, rdi
mov rcx, qword [rsi]
neg al
mov edx, 0x110b
sbb r8, r8
and r8d, 4
add r8, 5
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rsi]
mov r9, rdi
xor r8d, r8d
mov edx, 0x1114
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rax, dword [rbx]
mov rcx, qword [rsp + 0x48]
movzx ecx, word [rcx + rax*2]
call fcn.140077f94
test al, al
je 0x1400119fa
mov rsi, qword [rsp + 0x48]
inc dword [rbx]
movsxd rax, dword [rbx]
movzx ecx, word [rsi + rax*2]
call fcn.140077f94
test al, al
jne 0x1400119e3
mov rsi, qword [rsp + 0x68]
mov al, byte [rsp + 0x30]
mov r9, rbx
mov rdx, qword [rsp + 0x48]
mov r8, rdi
mov rcx, rsi
mov byte [rsp + 0x20], al
call fcn.140011738
test rax, rax
cmovne rdi, rax
mov rax, rdi
mov rcx, qword [rbp + 0xfb0]
xor rcx, rsp
call fcn.1400f0b80
add rsp, 0x10c8
pop rdi
pop rsi
pop rbx
pop rbp
ret