Function at 0x140035b80
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3d0]
sub rsp, 0x4d0
mov rax, qword [0x1400cd548]
xor rax, rsp
mov qword [rbp + 0x3c0], rax
mov r12, rdx
mov r13, rcx
mov qword [rcx + 0xd60], rdx
lea rbx, [rcx + 0x140]
mov rdx, rbx
mov rcx, r12
call fcn.14006aaf0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
xor r14d, r14d
cmp eax, 0x23
jle 0x140035bf0
mov eax, 0x2a
mov word [rbx], ax
mov word [r13 + 0x142], r14w
mov rcx, r12
call fcn.14006a7e0
mov qword [r13 + 0xd70], r14
cmp eax, 0xd3c018ad
jne 0x140035c23
mov rcx, r12
call fcn.14006a870
mov qword [r13 + 0xd70], rax
test rax, rax
jne 0x140035f2c
jmp 0x140036287
cmp eax, 0x69b2184f
jne 0x14003607b
call fcn.14005a3e0
mov rdi, rax
mov rcx, rax
call fcn.14005abf0
test al, al
je 0x140035cb1
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov rcx, qword [rdi + 8]
mov r9, qword [rcx]
lea r8, [rsp + 0x28]
mov rdx, r12
call qword [r9 + 0x20]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
movq rax, xmm0
cmp qword [rsp + 0x28], rax
jne 0x140035c81
mov rax, qword [rsp + 0x30]
cmp rax, qword [rsp + 0x50]
je 0x1400361c8
mov dword [rsp + 0x20], r14d
mov rcx, qword [rdi + 8]
mov rax, qword [rcx]
lea r8, [rsp + 0x20]
mov rdx, r12
call qword [rax + 0x18]
cmp dword [rsp + 0x20], r14d
je 0x140035ca9
mov byte [r13 + 0xd58], 1
jmp 0x140035cb1
mov byte [r13 + 0xd59], 1
mov ecx, 0x64
lea rdx, str.ApplicationFrameWindow
sub rdx, rbx
lea rax, [rcx + 0x7fffff9a]
test rax, rax
je 0x140035ce2
movzx eax, word [rdx + rbx]
test ax, ax
je 0x140035ce2
mov word [rbx], ax
add rbx, 2
sub rcx, 1
jne 0x140035cc0
lea rax, [rbx - 2]
test rcx, rcx
cmovne rax, rbx
mov word [rax], r14w
mov qword [r13 + 0xd70], r12
lea r8, [r13 + 0xd60]
lea rdx, [rsp + 0x48]
lea rcx, [0x1400cf2e0]
call fcn.1400336d0
mov rcx, qword [rax]
mov r12, qword [rcx + 0x18]
test r12, r12
je 0x140035d28
mov qword [r13 + 0xd60], r12
jmp 0x140035f2c
mov r8d, 0x104
lea rdx, [rbp + 0x1b0]
mov rcx, qword [r13 + 0xd70]
call qword [sym.imp.USER32.dll_GetWindowTextW]
xor r9d, r9d
lea r8, str.ApplicationFrameWindow
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowExW]
mov r15, rax
test rax, rax
je 0x140035f2c
mov r8d, 0x104
lea rdx, [rsp + 0x70]
mov rcx, r15
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], 7
mov word [rsp + 0x28], r14w
lea rax, [rsp + 0x70]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140035da0
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x28]
call fcn.14000d670
lea rax, [rbp + 0x1b0]
mov r10, 0xffffffffffffffff
nop dword [rax + rax]
inc r10
cmp word [rax + r10*2], 0
jne 0x140035dd0
lea rdi, [rsp + 0x28]
mov rbx, qword [rsp + 0x28]
mov r14, qword [rsp + 0x40]
cmp r14, 8
cmovae rdi, rbx
mov rax, qword [rsp + 0x38]
cmp r10, rax
ja 0x140035e80
test r10, r10
je 0x140035ee7
sub rax, r10
inc rax
lea rsi, [rdi + rax*2]
mov rax, rdi
movzx r11d, word [rbp + 0x1b0]
nop
mov rcx, rsi
sub rcx, rax
sar rcx, 1
je 0x140035e80
cmp word [rax], r11w
je 0x140035e3b
add rax, 2
sub rcx, 1
jmp 0x140035e29
mov r8, r10
lea rdx, [rbp + 0x1b0]
test r10, r10
je 0x140035e74
lea rcx, [rbp + 0x1b0]
mov r9, rax
sub r9, rcx
nop word [rax + rax]
movzx ecx, word [rdx]
cmp word [rdx + r9], cx
jne 0x140035ede
add rdx, 2
sub r8, 1
jne 0x140035e60
sub rax, rdi
sar rax, 1
cmp rax, 0xffffffffffffffff
jne 0x140035ee7
xor r9d, r9d
lea r8, str.ApplicationFrameWindow
mov rdx, r15
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowExW]
mov r15, rax
cmp r14, 8
jb 0x140035ed3
lea rdx, [r14*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140035ecb
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400362c3
mov rcx, rbx
call fcn.14006ec58
xor r14d, r14d
test r15, r15
jmp 0x140035d5c
add rax, 2
jmp 0x140035e20
mov qword [r13 + 0xd60], r15
cmp r14, 8
jb 0x140035f29
lea rdx, [r14*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140035f21
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400362c3
mov rcx, rbx
call fcn.14006ec58
xor r14d, r14d
mov rcx, qword [r13 + 0xd70]
test rcx, rcx
je 0x140036114
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], 7
mov word [rsp + 0x28], r14w
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], r14w
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x28]
call fcn.14006ab40
test al, al
je 0x140035fdb
lea r8, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae r8, qword [rsp + 0x48]
lea rcx, [r13 + 0x208]
mov edx, 0x208
call fcn.140004af0
lea rcx, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae rcx, qword [rsp + 0x28]
mov r8d, 0x104
mov rdx, r13
call fcn.14005bd60
lea r8, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae r8, qword [rsp + 0x28]
lea rcx, [r13 + 0x618]
mov edx, 0x208
call fcn.140004af0
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14003601d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036018
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400362bd
call fcn.14006ec58
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], r14w
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x140036285
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036280
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400362b7
jmp 0x140036280
mov rcx, r12
call fcn.14006ae90
test al, al
je 0x140035f2c
mov qword [r13 + 0xd70], r12
call fcn.14005a3e0
mov rbx, rax
mov rcx, rax
call fcn.14005abf0
test al, al
je 0x140035f2c
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov rcx, qword [rbx + 8]
mov r9, qword [rcx]
lea r8, [rsp + 0x28]
mov rdx, r12
call qword [r9 + 0x20]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
movq rax, xmm0
cmp qword [rsp + 0x28], rax
jne 0x1400360e9
mov rax, qword [rsp + 0x30]
cmp rax, qword [rsp + 0x50]
je 0x1400361c8
mov dword [rsp + 0x20], r14d
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
lea r8, [rsp + 0x20]
mov rdx, r12
call qword [rax + 0x18]
cmp dword [rsp + 0x20], r14d
sete al
mov byte [r13 + 0xd59], al
jmp 0x140035f2c
movdqa xmm0, xmmword [0x1400ba1e0]
movdqa xmmword [rbp + 0x190], xmm0
mov word [rbp + 0x180], r14w
mov dword [rsp + 0x70], r14d
mov word [rsp + 0x74], r14w
mov dword [rbp + 0x17c], r14d
mov qword [rbp + 0x1a0], 0
lea rdx, [rsp + 0x70]
mov rcx, r12
call fcn.140011d80
test eax, eax
jne 0x1400361cf
mov dword [rsp + 0x20], r14d
lea rdx, [rsp + 0x20]
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
xor r8d, r8d
mov edx, dword [rsp + 0x20]
lea rcx, [rsp + 0x70]
call fcn.14005be80
test al, al
jne 0x1400361cf
mov rdx, qword [rbp + 0x198]
cmp rdx, 8
jb 0x1400361c8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400361c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400362c9
call fcn.14006ec58
xor al, al
jmp 0x140036287
mov ecx, 0x50
mov rdx, r13
lea r8, [rsp + 0x74]
sub r8, r13
nop
lea rax, [rcx + 0x7fffffae]
test rax, rax
je 0x140036203
movzx eax, word [r8 + rdx]
test ax, ax
je 0x140036203
mov word [rdx], ax
add rdx, 2
sub rcx, 1
jne 0x1400361e0
lea rax, [rdx - 2]
test rcx, rcx
cmovne rax, rdx
mov word [rax], r14w
lea r8, [rbp + 0x180]
cmp qword [rbp + 0x198], 8
cmovae r8, qword [rbp + 0x180]
lea rcx, [r13 + 0x208]
mov edx, 0x208
call fcn.140004af0
mov rcx, r13
call fcn.1400339f0
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 8
jb 0x140036285
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036280
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400362b1
call fcn.14006ec58
mov al, 1
mov rcx, qword [rbp + 0x3c0]
xor rcx, rsp
call fcn.14006ed70
mov rbx, qword [rsp + 0x520]
add rsp, 0x4d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14007576c
int3
call fcn.14007576c
nop
call fcn.14007576c
nop
call fcn.14007576c
int3
call fcn.14007576c
int3