Function at 0x180008b90
Capabilities:
Get graphical window text

Disassembly:
mov r11, rsp
push rbx
push rbp
push rdi
sub rsp, 0x1c0
mov rax, qword [0x18006f1d0]
xor rax, rsp
mov qword [rsp + 0x1a0], rax
mov rdi, rdx
mov qword [rsp + 0x30], rdx
xor edx, edx
mov eax, r8d
mov ebx, r8d
mov rbp, rcx
div dword [rcx + 0x1a0]
test edx, edx
jne 0x180008ef9
mov rcx, qword [0x180071e70]
mov qword [r11 + 0x20], r13
mov qword [r11 - 0x20], r14
mov qword [r11 - 0x28], r15
xor r14d, r14d
call qword [sym.imp.USER32.dll_SetThreadDesktop]
xor edx, edx
mov eax, ebx
xor r13d, r13d
div dword [rbp + 0x1a0]
mov r15d, eax
test eax, eax
jle 0x180008ee1
mov qword [rsp + 0x1e8], rsi
mov qword [rsp + 0x1f0], r12
nop word [rax + rax]
mov eax, r13d
imul eax, dword [rbp + 0x1a0]
movsxd rdx, eax
add rdx, rdi
mov qword [rbp + 0x198], rdx
mov ecx, dword [rdx + 4]
sub ecx, 0x100
je 0x180009005
dec ecx
je 0x180008ed1
dec ecx
je 0x180009005
mov eax, dword [rdx + 0x10]
mov rbx, qword [rbp + 0x178]
lea r12, [rbp + 0x170]
mov dword [r12], eax
mov eax, dword [rdx + 0x14]
mov r14d, 1
mov dword [rbp + 0x174], eax
mov rax, qword [r12]
mov qword [rsp + 0x38], rbx
mov rcx, rax
mov qword [rbp + 0x178], rax
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov rcx, qword [rbp + 0x198]
mov rsi, rax
mov eax, dword [rcx + 4]
cmp eax, 0x202
jne 0x180008da9
mov dword [rbp + 0x180], 0
mov r9d, dword [rcx]
xor r8d, r8d
mov edx, 0x84
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageA]
cmp rax, 0xffffffffffffffff
je 0x180008d66
cmp rax, 8
je 0x180008d4a
cmp rax, 9
je 0x180008d00
cmp rax, 0x14
jne 0x180009020
lea edx, [rax - 4]
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
call qword [sym.imp.USER32.dll_PostMessageA]
jmp 0x180009020
lea rdx, [rsp + 0x60]
mov rcx, rsi
mov dword [rsp + 0x60], 0x2c
call qword [sym.imp.USER32.dll_GetWindowPlacement]
xor r9d, r9d
test byte [rsp + 0x64], 3
mov edx, 0x112
mov rcx, rsi
je 0x180008d39
mov r8d, 0xf120
call qword [sym.imp.USER32.dll_PostMessageA]
jmp 0x180009020
mov r8d, 0xf030
call qword [sym.imp.USER32.dll_PostMessageA]
jmp 0x180009020
xor r9d, r9d
mov edx, 0x112
mov r8d, 0xf020
mov rcx, rsi
call qword [sym.imp.USER32.dll_PostMessageA]
jmp 0x180009020
mov edx, 0xfffffff0
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, 0xfffffff0
mov rcx, rsi
bts eax, 0x1b
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r11, qword [rbp + 0x198]
xor r8d, r8d
mov r9d, dword [r11]
mov edx, 0x84
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageA]
jmp 0x180009020
cmp eax, 0x201
jne 0x180008f14
lea rcx, str.Button
xor edx, edx
mov dword [rbp + 0x180], r14d
mov qword [rbp + 0x188], 0
call qword [sym.imp.USER32.dll_FindWindowA]
lea rdx, [rsp + 0x50]
mov rcx, rax
mov rbx, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rdx, qword [r12]
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x180008e12
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf5
mov rcx, rbx
call qword [sym.imp.USER32.dll_PostMessageA]
jmp 0x180008ec5
lea rcx, [rsp + 0x91]
xor edx, edx
mov r8d, 0x103
mov byte [rsp + 0x90], 0
call fcn.180006860
lea rdx, [rsp + 0x90]
mov r8d, 0x104
mov rcx, rsi
call qword [sym.imp.USER32.dll_RealGetWindowClassA]
lea rdx, str.32768
lea rcx, [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x180009020
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1e1
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageA]
mov r8, qword [r12]
xor ecx, ecx
mov rdx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_MenuItemFromPoint]
mov rcx, rdi
movsxd rbx, eax
mov edx, ebx
call qword [sym.imp.USER32.dll_GetMenuItemID]
mov r8, rbx
xor r9d, r9d
mov edx, 0x1e5
mov rcx, rsi
call qword [sym.imp.USER32.dll_PostMessageA]
xor r9d, r9d
mov edx, 0x100
lea r8d, [r9 + 0xd]
mov rcx, rsi
call qword [sym.imp.USER32.dll_PostMessageA]
mov rdi, qword [rsp + 0x30]
inc r13d
cmp r13d, r15d
jl 0x180008c20
mov r12, qword [rsp + 0x1f0]
mov rsi, qword [rsp + 0x1e8]
mov r13, qword [rsp + 0x1f8]
mov r14, qword [rsp + 0x1b8]
mov r15, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1a0]
xor rcx, rsp
call fcn.18000ae20
add rsp, 0x1c0
pop rdi
pop rbp
pop rbx
ret
cmp eax, 0x200
jne 0x180009020
cmp dword [rbp + 0x180], 0
je 0x180008ec5
mov rax, qword [rbp + 0x188]
test rax, rax
jne 0x180008f51
mov r9d, dword [rcx]
xor r8d, r8d
mov edx, 0x84
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageA]
mov qword [rbp + 0x190], rax
jmp 0x180008f54
mov rsi, rax
mov edi, dword [rsp + 0x3c]
sub ebx, dword [r12]
lea rdx, [rsp + 0x40]
sub edi, dword [rbp + 0x174]
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [rbp + 0x190]
mov edx, dword [rsp + 0x40]
mov r8d, dword [rsp + 0x44]
mov r9d, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x4c]
add rax, 0xfffffffffffffffe
sub r9d, edx
sub ecx, r8d
cmp rax, 0xf
ja case.0x180008faf.3
lea r10, [0x180000000]
mov eax, dword [r10 + rax*4 + 0x90a8]
add rax, r10
jmp rax
sub edx, ebx
sub r8d, edi
jmp 0x180008fe4
sub r8d, edi
add ecx, edi
jmp 0x180008fe4
sub ecx, edi
jmp 0x180008fe4
sub r8d, edi
add ecx, edi
sub edx, ebx
add r9d, ebx
jmp 0x180008fe4
sub r8d, edi
add ecx, edi
jmp case.0x180008faf.11
sub ecx, edi
sub edx, ebx
add r9d, ebx
jmp 0x180008fe4
sub ecx, edi
sub r9d, ebx
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_MoveWindow]
mov qword [rbp + 0x188], rsi
jmp case.0x180008faf.3
mov rcx, qword [rbp + 0x178]
lea r12, [rbp + 0x170]
mov qword [r12], rcx
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov rsi, rax
mov rdx, r12
mov rcx, rsi
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rdx, qword [r12]
mov rcx, rsi
call qword [sym.imp.USER32.dll_ChildWindowFromPoint]
mov rbx, rax
test rax, rax
je 0x18000906a
cmp rbx, rsi
je 0x18000906a
mov rdx, r12
mov rcx, rbx
mov rsi, rbx
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rdx, qword [r12]
mov rcx, rbx
call qword [sym.imp.USER32.dll_ChildWindowFromPoint]
mov rbx, rax
test rax, rax
jne 0x180009041
test r14d, r14d
je 0x180009089
movzx eax, word [r12]
movzx ecx, word [rbp + 0x174]
shl ecx, 0x10
or ecx, eax
mov rax, qword [rbp + 0x198]
mov dword [rax], ecx
mov rax, qword [rbp + 0x198]
mov rcx, rsi
mov r9d, dword [rax]
mov r8, qword [rax + 8]
mov edx, dword [rax + 4]
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x180008ec5