Function at 0x140117440
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
sub rsp, 0x20
mov rdi, rcx
lea rax, vtable.eset::SysinspectorApp.0
mov qword [rcx], rax
lea rax, vtable.eset::SysinspectorApp.1.0
mov qword [rcx + 0x30], rax
cmp byte [rcx + 0x620], 0
je 0x140117564
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rax
lea r8, [0x1401aa7d0]
lea rdx, str.NUL:
lea rcx, [rsp + 0x48]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
test eax, eax
je 0x1401174b3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 4]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_setvbuf]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rax
lea r8, [0x1401a7a1c]
lea rdx, str.NUL:
lea rcx, [rsp + 0x48]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
test eax, eax
je 0x1401174fb
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 4]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_setvbuf]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rax
lea r8, [0x1401a7a1c]
lea rdx, str.NUL:
lea rcx, [rsp + 0x48]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
test eax, eax
je 0x140117543
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 4]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_setvbuf]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor r9d, r9d
mov edx, 0x102
lea r8d, [r9 + 0xd]
call qword [sym.imp.USER32.dll_SendMessageW]
call qword [sym.imp.KERNEL32.dll_FreeConsole]
call qword [sym.imp.ole32.dll_CoFreeUnusedLibraries]
call qword [sym.imp.ole32.dll_OleUninitialize]
nop
mov rcx, qword [rdi + 0x638]
test rcx, rcx
je 0x14011758f
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax]
call qword [case.0x1400309a4.0]
nop
mov rcx, qword [rdi + 0x628]
test rcx, rcx
je 0x1401175a2
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
lea rbx, [rdi + 0x5b8]
mov qword [rsp + 0x48], rbx
lea rcx, [rbx + 0x48]
call fcn.140024660
nop
lea rcx, [rbx + 0x28]
call fcn.140024660
nop
lea rcx, [rbx + 8]
call fcn.14011bcd0
nop
lea rcx, [rdi + 0x558]
call fcn.140050850
nop
lea rbx, [rdi + 0x550]
mov qword [rsp + 0x50], rbx
lea rax, vtable.CDPIManager.1.0
mov qword [rbx - 0x48], rax
mov rax, qword [rbx - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, vtable.CDPIManager.0
mov qword [rcx + rbx - 0x40], rax
mov rcx, qword [rbx - 8]
call qword [sym.imp.gdiplus.dll_GdiplusShutdown]
nop
lea rcx, [rbx - 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
lea rax, vtable.eset::IInterface.0
mov qword [rbx], rax
lea rcx, [rdi + 0x3e8]
call fcn.140064470
nop
lea rcx, [rdi + 0x320]
call fcn.1401142e0
nop
lea rcx, [rdi + 0x2d0]
call fcn.14005dde0
nop
lea rcx, [rdi + 0x220]
call fcn.140057720
nop
lea rbx, [rdi + 0x58]
mov qword [rsp + 0x58], rbx
lea rcx, [rbx + 0x110]
call fcn.140116d90
nop
mov rcx, rbx
call fcn.140116b90
nop
lea rcx, [rdi + 0x30]
call fcn.14004ef70
nop
lea rax, vtable.eset::Application.0
mov qword [rdi], rax
lea rax, [rdi + 0x20]
mov qword [rsp + 0x40], rax
mov rdx, qword [rax]
sub rdx, 0x18
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1401176c4
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
add rsp, 0x20
pop rdi
pop rsi
pop rbx
jmp qword [case.0x1400309a4.0]
add rsp, 0x20
pop rdi
pop rsi
pop rbx
ret