Function at 0x14006c4c0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x60
mov rdi, qword [0x1400d5c98]
lea r9, [0x14006f670]
xor r8d, r8d
mov rcx, rdi
mov edx, 0x84b1
mov qword [0x1400d60e0], rdi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x1400d8fa0]
xor esi, esi
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa0
mov dword [rsp + 0x28], 0x8000
mov dword [rsp + 0x20], esi
call qword [sym.imp.USER32.dll_LoadImageW]
mov rcx, qword [0x1400d8fa0]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xa1
mov dword [rsp + 0x28], 0x8000
mov rbx, rax
mov dword [rsp + 0x20], esi
call qword [sym.imp.USER32.dll_LoadImageW]
mov r9, rbx
mov edx, 0x84ba
mov rcx, rdi
mov r8, rax
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, str.Name
mov qword [rsp + 0x30], r11
or dword [rsp + 0x30], 1
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], esi
mov dword [rsp + 0x40], 0xc8
mov dword [rsp + 0x44], 1
mov dword [rsp + 0x48], esi
mov dword [rsp + 0x4c], esi
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
mov qword [rsp + 0x30], r11
or dword [rsp + 0x30], 1
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
lea rax, [0x1400b3150]
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 1
mov dword [rsp + 0x40], 0x32
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 1
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, [0x1400b80a0]
lea r9, [rsp + 0x30]
mov qword [rsp + 0x30], r11
or dword [rsp + 0x30], 1
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
mov qword [rsp + 0x50], r11
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x34], 2
mov dword [rsp + 0x40], 0x2d
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 2
mov dword [rsp + 0x4c], 2
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, str.I_O_Total
mov qword [rsp + 0x30], r11
or dword [rsp + 0x30], 1
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 3
mov dword [rsp + 0x40], 0x46
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 3
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
mov qword [rsp + 0x30], r11
or dword [rsp + 0x30], 1
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
lea rax, str.Pvt._Memory
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 4
mov dword [rsp + 0x40], 0x46
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 4
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, str.User_Name
lea r9, [rsp + 0x30]
mov qword [rsp + 0x30], r11
or dword [rsp + 0x30], 1
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 5
mov dword [rsp + 0x40], 0x8c
mov dword [rsp + 0x44], 1
mov dword [rsp + 0x48], 5
mov dword [rsp + 0x4c], esi
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, str.Description
mov qword [rsp + 0x30], r11
or dword [rsp + 0x30], 1
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 6
mov dword [rsp + 0x40], 0xb4
mov dword [rsp + 0x44], 1
mov dword [rsp + 0x48], 6
mov dword [rsp + 0x4c], esi
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
lea rax, str.Company_Name
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 7
mov dword [rsp + 0x40], 0xb4
mov dword [rsp + 0x44], 1
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], esi
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, str.Version
lea r9, [rsp + 0x30]
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 8
mov dword [rsp + 0x40], 0x64
mov dword [rsp + 0x44], 1
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], esi
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, str.File_Name
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 9
mov dword [rsp + 0x40], 0xb4
mov dword [rsp + 0x44], 1
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 0x4000
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
lea rax, str.Command_Line
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0xa
mov dword [rsp + 0x40], 0xb4
mov dword [rsp + 0x44], 1
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], esi
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
mov qword [rsp + 0x30], r11
mov qword [rsp + 0x38], r11
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x50], r11
and dword [rsp + 0x30], 0xfffffffe
lea rax, str.Peak_Pvt._Memory
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x34], 0xb
mov dword [rsp + 0x40], 0x46
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, [0x1400b8180]
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0xc
mov dword [rsp + 0x40], 0x46
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
lea rax, [0x1400b8198]
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0xd
mov dword [rsp + 0x40], 0x46
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, str.Private_WS
lea r9, [rsp + 0x30]
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0xe
mov dword [rsp + 0x40], 0x46
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, str.Shared_WS
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x38], r11
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0xf
mov dword [rsp + 0x40], 0x46
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
lea rax, str.Shareable_WS
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x10
mov dword [rsp + 0x40], 0x46
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, [0x1400b8210]
lea r9, [rsp + 0x30]
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x11
mov dword [rsp + 0x40], 0x46
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, [0x1400b8230]
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x12
mov dword [rsp + 0x40], 0x46
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
lea rax, [0x1400b8258]
mov qword [rsp + 0x38], r11
xor r8d, r8d
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x13
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], 0x46
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
lea r9, [rsp + 0x30]
mov edx, 0x84b6
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, str.Session_ID
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x14
mov dword [rsp + 0x40], 0x2d
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
lea rax, str.Priority_Class
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x15
mov dword [rsp + 0x40], 0x64
mov dword [rsp + 0x44], 1
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], esi
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, str.Base_Priority
lea r9, [rsp + 0x30]
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x16
mov dword [rsp + 0x40], 0x2d
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, [0x1400b82a8]
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x17
mov dword [rsp + 0x40], 0x2d
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
lea rax, [0x1400b3cb8]
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x18
mov dword [rsp + 0x40], 0x2d
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
lea rax, [0x1400b82b8]
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x19
mov dword [rsp + 0x40], 0x2d
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, [0x1400b82d0]
lea r9, [rsp + 0x30]
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x1a
mov dword [rsp + 0x40], 0x2d
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, [0x1400b82f0]
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x1b
mov dword [rsp + 0x40], 0x46
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
mov qword [rsp + 0x30], r11
mov qword [rsp + 0x38], r11
mov qword [rsp + 0x40], r11
mov dword [rsp + 0x34], 0x1c
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x50], r11
and dword [rsp + 0x30], 0xfffffffe
lea rax, [0x1400b8300]
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], 0x46
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, str.Integrity
lea r9, [rsp + 0x30]
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x1d
mov dword [rsp + 0x40], 0x64
mov dword [rsp + 0x44], 1
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], esi
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, [0x1400b8328]
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x1e
mov dword [rsp + 0x40], 0x2d
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
lea rax, [0x1400b8348]
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x1f
mov dword [rsp + 0x40], 0x2d
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, str.Start_Time
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x38], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x50], r11
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x34], 0x20
mov dword [rsp + 0x40], 0x64
mov dword [rsp + 0x44], 1
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], esi
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, str.Total_CPU_Time
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x21
mov dword [rsp + 0x40], 0x5a
mov dword [rsp + 0x44], 1
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], esi
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
lea rax, str.Kernel_CPU_Time
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x22
mov dword [rsp + 0x40], 0x5a
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, str.User_CPU_Time
lea r9, [rsp + 0x30]
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x23
mov dword [rsp + 0x40], 0x5a
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, str.Verification_Status
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x24
mov dword [rsp + 0x40], 0x46
mov dword [rsp + 0x44], 1
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], esi
lea r9, [rsp + 0x30]
mov edx, 0x84b6
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, str.Verified_Signer
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x25
mov dword [rsp + 0x40], 0x64
mov dword [rsp + 0x44], 1
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], esi
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
lea rax, str.Safe
mov qword [rsp + 0x38], r11
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x26
mov dword [rsp + 0x40], 0x64
mov dword [rsp + 0x44], 1
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], esi
call qword [sym.imp.USER32.dll_SendMessageW]
xor r11d, r11d
lea rax, str.Relative_Start_Time
lea r9, [rsp + 0x30]
mov qword [rsp + 0x30], r11
and dword [rsp + 0x30], 0xfffffffe
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x38], r11
xor r8d, r8d
mov edx, 0x84b6
mov rcx, rdi
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r11
mov dword [rsp + 0x34], 0x27
mov dword [rsp + 0x40], 0xb4
mov dword [rsp + 0x44], 1
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x4c], esi
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8d, [rsi + 1]
xor r9d, r9d
mov edx, 0x84c0
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
lea r9d, [rsi + 2]
xor r8d, r8d
mov edx, 0x84bf
mov rcx, rdi
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x60
pop rdi
jmp qword [sym.imp.USER32.dll_SendMessageW]