Function at 0x11b06150
Capabilities:
Get graphical window text

Disassembly:
push 0xffffffffffffffff
push 0x11b90473
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x644
push ebx
push ebp
push esi
mov esi, dword [esp + 0x660]
push edi
xor edi, edi
mov ebx, ecx
push esi
mov dword [esp + 0x14], edi
call dword [sym.imp.USER32.dll_GetParent]
test eax, eax
jne 0x11b06195
mov dword [esp + 0x10], 1
mov edi, dword [esp + 0x10]
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x11b061a7
or edi, 2
mov dword [esp + 0x10], edi
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ebp, eax
and eax, 0x80
cmp al, 0x80
mov dword [esp + 0x38], ebp
je 0x11b061c6
or edi, 4
mov dword [esp + 0x10], edi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], 0
push ecx
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov dword [esp + 0x20], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [esp + 0x1c]
cmp eax, ecx
jne 0x11b061f3
or edi, 8
mov dword [esp + 0x10], edi
mov edx, dword [esp + 0x668]
push eax
push ecx
push ebp
push edi
push edx
push esi
push str._CFloatTipManager::FindMainWnd__hwnd_0x_08x__bFilter__d__dwFlag_0x_x__lExStyle_0x_08x__dwWndProcId__lu___dwCurProcId__lu_
push str.FloatTipTest
push 4
push 0x11bb2dbc
call fcn.11b3bd80
mov eax, ebp
add esp, 0x28
and eax, 0x80000
cmp eax, 0x80000
jne 0x11b06235
mov ecx, ebp
and ecx, 8
cmp cl, 8
jne 0x11b06742
mov edx, dword [0x11b9835c]
mov dword [esp + 0x18], edx
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x14]
push eax
xor ebp, ebp
push ecx
mov ecx, 0x11bb0408
mov dword [esp + 0x664], ebp
mov dword [esp + 0x34], ebp
call fcn.11b0d050
mov eax, dword [esp + 0x14]
mov byte [esp + 0x65c], 1
cmp dword [eax - 8], ebp
je 0x11b062f9
push eax
lea ecx, [esp + 0x38]
call fcn.11b2aea0
mov eax, dword [0x11ba4490]
mov byte [esp + 0x65c], 2
test eax, eax
jbe 0x11b062c2
mov edi, 0x11ba4488
mov eax, dword [edi]
mov edx, dword [esp + 0x34]
push eax
push edx
call fcn.11b1456f
add esp, 8
test eax, eax
jne 0x11b062b1
mov dword [esp + 0x2c], 1
mov eax, dword [0x11ba4490]
inc ebp
add edi, 4
cmp ebp, eax
jb 0x11b06295
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x34]
push eax
push ecx
push esi
push str._CFloatTipManager::FindMainWnd__hwnd__08x__wstrSpeciProc__s__bSpecialProc__d_
push str.FloatTipTest
push 4
push 0x11bb2dbc
call fcn.11b3bd80
add esp, 0x1c
lea ecx, [esp + 0x34]
mov byte [esp + 0x65c], 1
call fcn.11b2b710
xor ebp, ebp
mov edx, edi
and edx, 0xf
cmp dl, 0xf
je 0x11b06749
cmp dword [esp + 0x668], ebp
jne 0x11b06749
mov eax, edi
and eax, 0xd
cmp al, 0xd
jne 0x11b063fe
mov ecx, dword [esp + 0x20]
xor eax, eax
push eax
push esi
push ecx
mov ecx, ebx
mov dword [esp + 0x3c], ebp
call fcn.11b06f40
mov ebx, eax
cmp ebx, ebp
je 0x11b06804
push 1
push 0x11baf660
lea ecx, [esp + 0x28]
call fcn.11b10504
mov edx, dword [0x11bb03d8]
xor eax, eax
cmp edx, ebp
mov byte [esp + 0x65c], 4
jle 0x11b06375
mov ecx, dword [0x11baf684]
cmp dword [ecx], esi
je 0x11b063e8
inc eax
add ecx, 4
cmp eax, edx
jl 0x11b06369
mov edi, dword [0x11baf688]
cmp edi, edi
jl 0x11b0638f
lea edx, [edi + 1]
push 0xffffffffffffffff
push edx
mov ecx, 0x11baf680
call fcn.11b09a80
mov eax, dword [0x11baf684]
push 0x11bb03d8
mov dword [eax + edi*4], esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, dword [0x11bb03d8]
mov edx, dword [esp + 0x38]
push ecx
push eax
push edx
push esi
push 0x1f9
push str._CFloatTipManager::FindMainWnd__FLAG_POSSIBLE_Line:_d__CreateObject_Parent__08x__lExStyle__08x__lStyle__08x__PossibleHwndCount__d_
push 0x11ba3170
push 4
push 0x11bb2dbc
call fcn.11b3bd80
add esp, 0x24
mov byte [esp + 0x65c], 1
lea ecx, [esp + 0x20]
jmp 0x11b067ff
lea ecx, [esp + 0x20]
mov byte [esp + 0x65c], 1
call fcn.11b10540
jmp 0x11b0671d
cmp dword [esp + 0x2c], ebp
je 0x11b06584
push esi
mov ecx, ebx
call fcn.11b08ba0
test eax, eax
je 0x11b0655a
xor edi, edi
mov dword [esp + 0x24], ebp
push edi
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push edi
push esi
push eax
mov ecx, ebx
call fcn.11b06f40
mov ebx, eax
test ebx, ebx
je 0x11b06804
push 1
push 0x11baf660
lea ecx, [esp + 0x28]
call fcn.11b10504
mov edx, dword [0x11bb03d8]
xor eax, eax
test edx, edx
mov byte [esp + 0x65c], 5
jle 0x11b06474
mov ecx, dword [0x11baf684]
cmp dword [ecx], esi
je 0x11b06544
inc eax
add ecx, 4
cmp eax, edx
jl 0x11b06464
mov edi, dword [0x11baf688]
cmp edi, edi
jl 0x11b0648e
lea eax, [edi + 1]
push 0xffffffffffffffff
push eax
mov ecx, 0x11baf680
call fcn.11b09a80
mov ecx, dword [0x11baf684]
mov ebp, dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
push 0x11bb03d8
mov dword [ecx + edi*4], esi
call ebp
lea ecx, [esp + 0x20]
mov byte [esp + 0x65c], 1
call fcn.11b10540
push esi
call fcn.11b07960
add esp, 4
test eax, eax
jne 0x11b06514
push 1
push 0x11baf628
lea ecx, [esp + 0x28]
call fcn.11b10504
mov edi, dword [0x11baf650]
mov byte [esp + 0x65c], 6
cmp edi, edi
jl 0x11b064f4
lea edx, [edi + 1]
push 0xffffffffffffffff
push edx
mov ecx, 0x11baf648
call fcn.11b09a80
mov eax, dword [0x11baf64c]
push 0x11bb03dc
mov dword [eax + edi*4], esi
call ebp
lea ecx, [esp + 0x20]
mov byte [esp + 0x65c], 1
call fcn.11b10540
mov ecx, dword [0x11bb03dc]
mov edx, dword [esp + 0x38]
push ecx
push edx
push esi
push 0x225
push str._CFloatTipManager::FindMainWnd__Special_Line:_d__CreateObject_Parent__08x__lExStyle__08x__g_nSpecialHwndCount__d_
push 0x11ba3170
push 4
push 0x11bb2dbc
call fcn.11b3bd80
add esp, 0x20
jmp 0x11b06804
lea ecx, [esp + 0x20]
mov byte [esp + 0x65c], 1
call fcn.11b10540
jmp 0x11b0671d
lea ecx, [esp + 0x14]
mov byte [esp + 0x65c], 0
call fcn.11b819eb
lea ecx, [esp + 0x18]
mov dword [esp + 0x65c], 0xffffffff
call fcn.11b2b710
jmp 0x11b0682b
mov ecx, 0x103
xor eax, eax
lea edi, [esp + 0x246]
mov word [esp + 0x244], bp
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
push ecx
mov ecx, 0x11bb0408
call fcn.11b0d050
mov edx, dword [esp + 0x10]
mov ebp, dword [sym.imp.USER32.dll_GetWindowTextW]
mov byte [esp + 0x65c], 7
mov eax, dword [edx - 8]
test eax, eax
jne 0x11b06611
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x3e]
mov word [esp + 0x3c], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x3c]
push 0x104
push eax
push esi
call ebp
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x3c]
push ecx
push edx
push str._CFloatTipManager::FindMainWnd__Get_Process_Name_Failed._Dst_PID__0.8x___Wnd_Name__s_
push 0x11ba3170
push 4
push 0x11bb2dbc
call fcn.11b3bd80
add esp, 0x18
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x2c]
push eax
call fcn.11b2aea0
mov ecx, dword [esp + 0x2c]
push 0x103
lea edx, [esp + 0x248]
push ecx
push edx
mov byte [esp + 0x668], 8
call fcn.11b13f02
add esp, 0xc
lea eax, [esp + 0x244]
mov ecx, ebx
push eax
call fcn.11b078b0
cmp eax, 0xffffffff
je 0x11b066fb
push eax
mov ecx, ebx
call fcn.11b07900
mov esi, eax
test esi, esi
je 0x11b066fb
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x3e]
mov word [esp + 0x3c], 0
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x3c]
push 0x104
push ecx
push esi
stosw word es:[edi], ax
call ebp
push 0
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
xor ecx, ecx
mov dword [esp + 0x24], 0
push ecx
push esi
push eax
mov ecx, ebx
call fcn.11b06f40
lea ecx, [esp + 0x2c]
mov esi, eax
mov byte [esp + 0x65c], 7
call fcn.11b2b710
lea ecx, [esp + 0x10]
mov byte [esp + 0x65c], 1
call fcn.11b819eb
lea ecx, [esp + 0x14]
mov byte [esp + 0x65c], 0
call fcn.11b819eb
lea ecx, [esp + 0x18]
mov dword [esp + 0x65c], 0xffffffff
call fcn.11b2b710
mov eax, esi
jmp 0x11b0682b
lea ecx, [esp + 0x2c]
mov byte [esp + 0x65c], 7
call fcn.11b2b710
lea ecx, [esp + 0x10]
mov byte [esp + 0x65c], 1
call fcn.11b819eb
lea ecx, [esp + 0x14]
mov byte [esp + 0x65c], 0
call fcn.11b819eb
lea ecx, [esp + 0x18]
mov dword [esp + 0x65c], 0xffffffff
call fcn.11b2b710
xor eax, eax
jmp 0x11b0682b
mov edx, dword [esp + 0x20]
xor eax, eax
push eax
push esi
push edx
mov ecx, ebx
mov dword [esp + 0x3c], ebp
call fcn.11b06f40
mov ebx, eax
cmp ebx, ebp
je 0x11b06804
push 1
push 0x11baf698
lea ecx, [esp + 0x28]
call fcn.11b10504
mov edx, dword [0x11bb03d4]
xor eax, eax
cmp edx, ebp
mov byte [esp + 0x65c], 3
jle 0x11b067a1
mov ecx, dword [0x11baf6bc]
cmp dword [ecx], esi
je 0x11b06846
inc eax
add ecx, 4
cmp eax, edx
jl 0x11b06791
mov edi, dword [0x11baf6c0]
cmp edi, edi
jl 0x11b067bb
lea eax, [edi + 1]
push 0xffffffffffffffff
push eax
mov ecx, 0x11baf6b8
call fcn.11b09a80
mov ecx, dword [0x11baf6bc]
push 0x11bb03d4
mov dword [ecx + edi*4], esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov edx, dword [esp + 0x38]
push edx
push esi
push 0x1dd
push str._CFloatTipManager::FindMainWnd__FLAG_ALL_Line:_d__CreateObject_Parent__08x__lExStyle__08x_
push 0x11ba3170
push 4
push 0x11bb2dbc
call fcn.11b3bd80
add esp, 0x1c
mov byte [esp + 0x65c], 1
lea ecx, [esp + 0x20]
call fcn.11b10540
lea ecx, [esp + 0x14]
mov byte [esp + 0x65c], 0
call fcn.11b819eb
lea ecx, [esp + 0x18]
mov dword [esp + 0x65c], 0xffffffff
call fcn.11b2b710
mov eax, ebx
mov ecx, dword [esp + 0x654]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x650
ret 8
lea ecx, [esp + 0x20]
mov byte [esp + 0x65c], 1
call fcn.11b10540
jmp 0x11b0671d