Function at 0x1400a2cb0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x210]
sub rsp, 0x310
mov rax, qword [0x1401222f0]
xor rax, rsp
mov qword [rbp + 0x200], rax
xor eax, eax
xor ebx, ebx
mov rdi, rcx
lea rcx, [rbp - 0x28]
mov dword [rbp + 0x40], 3
mov dword [rbp + 0x44], 0x9c49
mov qword [rbp + 0x48], 4
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x68], 0x104
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x80], 7
mov dword [rbp + 0x84], 0x9c42
mov qword [rbp + 0x88], 4
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], rax
mov qword [rbp + 0xa0], rbx
mov qword [rbp + 0xa8], 0x104
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xb8], rax
mov dword [rbp + 0xc0], ntohs
mov dword [rbp + 0xc4], 0x9c7c
mov qword [rbp + 0xc8], 4
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xd8], rax
mov dword [rbp + 0xe0], 8
mov dword [rbp + 0xe4], 0x9c67
mov qword [rbp + 0xe8], 4
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], rax
mov dword [rbp + 0x100], 9
mov dword [rbp + 0x104], 0x9c6e
mov qword [rbp + 0x108], 4
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x118], rax
mov dword [rbp + 0x120], 4
mov dword [rbp + 0x124], 0x9c5e
mov qword [rbp + 0x128], 4
mov qword [rbp + 0x130], rax
mov qword [rbp + 0x138], rax
mov qword [rbp + 0x140], rbx
mov qword [rbp + 0x148], 0x104
mov qword [rbp + 0x150], rax
mov qword [rbp + 0x158], rax
mov dword [rbp + 0x160], 6
mov dword [rbp + 0x164], 0x9ec3
mov qword [rbp + 0x168], 4
mov qword [rbp + 0x170], rax
mov qword [rbp + 0x178], rax
mov dword [rbp + 0x180], 5
mov dword [rbp + 0x184], 0x9c4d
mov qword [rbp + 0x188], 4
mov qword [rbp + 0x190], rax
mov qword [rbp + 0x198], rax
mov qword [rbp + 0x1a0], rbx
mov qword [rbp + 0x1a8], 0x104
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 0x1b8], rax
mov dword [rbp + 0x1c0], 2
mov dword [rbp + 0x1c4], 0x9c7f
mov qword [rbp + 0x1c8], 4
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 0x1d8], rax
mov dword [rbp + 0x1e0], reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov dword [rbp + 0x1e4], 0x9cad
mov qword [rbp + 0x1e8], 4
mov qword [rbp + 0x1f0], rax
mov qword [rbp + 0x1f8], rax
mov dword [rbp - 0x28], 8
mov dword [rbp - 0x24], 0x604
call qword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov rax, qword [0x140126550]
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x38], 0x113
mov dword [rsp + 0x30], 0x190
mov dword [rsp + 0x28], ebx
lea rdx, str.ReBarWindow32
mov r9d, 0x56800448
xor r8d, r8d
mov ecx, 0x80
mov dword [rsp + 0x20], ebx
call qword [sym.imp.USER32.dll_CreateWindowExW]
lea r9, [rbp - 0x20]
xor r8d, r8d
mov edx, 0x404
mov rcx, rax
mov qword [rbp - 0x20], reloc.OLEAUT32.dll_SafeArrayGetDim
mov qword [0x140147468], rax
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
je 0x1400a379f
mov ecx, 5
mov qword [rsp + 0x328], rsi
call qword [sym.imp.USER32.dll_GetSysColor]
mov rcx, qword [0x140126550]
xor r8d, r8d
lea r9, [rbp - 0x30]
lea edx, [r8 + 0x6c]
mov dword [rbp - 0x30], 0xc0c0c0
mov dword [rbp - 0x2c], eax
mov dword [rsp + 0x20], 1
call qword [sym.imp.COMCTL32.dll_CreateMappedBitmap]
lea r8, [rbp - 0x10]
mov edx, 0x20
mov rcx, rax
mov rsi, rax
call qword [sym.imp.GDI32.dll_GetObjectW]
mov ecx, gethostbyaddr
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, gethostbyaddr
mov edi, eax
mov eax, dword [rbp - 0xc]
cdq
and edx, 0xf
add eax, edx
sar eax, 4
imul edi, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov r8d, edi
xor edx, edx
mov rcx, rsi
mov r9d, eax
mov dword [rsp + 0x20], ebx
call qword [sym.imp.USER32.dll_CopyImage]
mov rcx, qword [0x140126550]
mov rdx, qword [0x140147468]
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rdx
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
lea rdx, str.ToolbarWindow32
mov r9d, 0x56000944
xor r8d, r8d
xor ecx, ecx
mov dword [rsp + 0x28], ebx
mov rsi, rax
mov dword [rsp + 0x20], ebx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov ecx, gethostbyaddr
mov qword [0x14012bc00], rax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, gethostbyaddr
mov edi, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov r9d, reloc.WS2_32.dll_ntohl
lea r8d, [r9 + 3]
mov edx, edi
mov ecx, eax
mov dword [rsp + 0x20], ebx
call qword [sym.imp.COMCTL32.dll_ImageList_Create]
xor r8d, r8d
mov rcx, rax
mov rdx, rsi
mov rdi, rax
call qword [sym.imp.COMCTL32.dll_ImageList_Add]
mov rcx, qword [0x14012bc00]
mov r9, rdi
xor r8d, r8d
mov edx, 0x430
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x14012bc00]
xor r9d, r9d
lea r8d, [r9 + 0x20]
mov edx, 0x41e
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x14012bc00]
lea r9, [rbp + 0x40]
mov edx, 0x444
mov r8d, reloc.WS2_32.dll_ntohl
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x14012bc00]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x421
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x14012bc00]
mov edx, 1
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14012bc00]
test rcx, rcx
jne 0x1400a314a
xor eax, eax
jmp 0x1400a3797
lea r9, [rbp + 0x30]
mov edx, 0x433
mov r8d, 0x9c49
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x14012bc00]
lea r9, [rbp + 0x20]
mov edx, 0x433
mov r8d, 0x9cad
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x10]
call qword [sym.imp.USER32.dll_UnionRect]
xor edx, edx
lea rcx, [rsp + 0x60]
lea r8d, [rdx + 0x70]
call fcn.1400a8b00
mov rax, qword [0x14012bc00]
mov ecx, SafeArrayLock
mov dword [rsp + 0x60], WSAStartup
mov dword [rsp + 0x64], 0x173
mov dword [rsp + 0x68], 0x80
mov qword [rbp - 0x78], rax
mov dword [rbp - 0x70], ebx
call qword [sym.imp.USER32.dll_GetSysColor]
mov ecx, reloc.WS2_32.dll_ntohs
mov dword [rsp + 0x6c], eax
call qword [sym.imp.USER32.dll_GetSysColor]
mov ecx, gethostbyaddr
mov dword [rsp + 0x70], eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rcx, qword [0x140147468]
add eax, 8
lea r9, [rsp + 0x60]
or r8, 0xffffffffffffffff
mov dword [rbp - 0x6c], eax
mov eax, dword [rbp + 0x18]
mov edx, 0x40a
sub eax, dword [rbp + 0x10]
mov dword [rbp - 0x58], ebx
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x70], eax
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [0x140130ff0]
lea r8, [0x1400d1428]
lea rdx, [0x1400e4230]
mov qword [rsp + 0x58], rax
mov rax, qword [0x140126550]
mov r9d, 0x56010004
mov qword [rsp + 0x50], rax
mov rax, qword [0x140147468]
mov qword [rsp + 0x48], 0x7d0
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
xor ecx, ecx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov edx, dword [0x140126408]
mov r8d, 0x60
lea ecx, [r8 - 0x15]
mov qword [0x14012bc10], rax
mov qword [rbp - 0x78], rax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov rcx, qword [0x140147468]
lea r9, [rsp + 0x60]
or r8, 0xffffffffffffffff
mov edx, 0x40a
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x70], ebx
mov dword [rbp - 0x58], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [0x140130fe8]
mov qword [rsp + 0x58], rax
mov rax, qword [0x140126550]
mov qword [rsp + 0x50], rax
mov rax, qword [0x140147468]
mov qword [rsp + 0x48], 0x7d0
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
lea r8, [0x1400d1428]
lea rdx, [0x1400e4230]
mov r9d, 0x56010004
xor ecx, ecx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov edx, dword [0x140126408]
mov r8d, 0x60
mov qword [0x14012bc18], rax
mov qword [rbp - 0x78], rax
lea ecx, [r8 - 0x15]
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov rcx, qword [0x140147468]
lea r9, [rsp + 0x60]
or r8, 0xffffffffffffffff
mov edx, 0x40a
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x70], ebx
mov dword [rbp - 0x58], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [0x140131018]
lea r8, [0x1400d1428]
lea rdx, [0x1400e4230]
mov qword [rsp + 0x58], rax
mov rax, qword [0x140126550]
mov r9d, 0x56010004
mov qword [rsp + 0x50], rax
mov rax, qword [0x140147468]
mov qword [rsp + 0x48], 0x7d0
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
xor ecx, ecx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov edx, dword [0x140126408]
mov r8d, 0x60
lea ecx, [r8 - 0x15]
mov qword [0x14012bc20], rax
mov qword [rbp - 0x78], rax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov rcx, qword [0x140147468]
lea r9, [rsp + 0x60]
or r8, 0xffffffffffffffff
mov edx, 0x40a
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x70], ebx
mov dword [rbp - 0x58], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [0x14013d820]
test rax, rax
je 0x1400a34ad
mov qword [rsp + 0x58], rax
mov rax, qword [0x140126550]
lea r8, [0x1400d1428]
mov qword [rsp + 0x50], rax
mov rax, qword [0x140147468]
mov qword [rsp + 0x48], 0x7d0
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
lea rdx, [0x1400e4230]
mov r9d, 0x56010004
xor ecx, ecx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov edx, dword [0x140126408]
mov r8d, 0x60
mov qword [0x14012bc30], rax
lea ecx, [r8 - 0x15]
mov qword [rbp - 0x78], rax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov rcx, qword [0x140147468]
lea r9, [rsp + 0x60]
or r8, 0xffffffffffffffff
mov edx, 0x40a
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x70], ebx
mov dword [rbp - 0x58], 4
call qword [sym.imp.USER32.dll_SendMessageW]
call fcn.140064600
test al, al
je 0x1400a3565
mov rax, qword [0x14013d840]
test rax, rax
je 0x1400a3565
mov qword [rsp + 0x58], rax
mov rax, qword [0x140126550]
lea r8, [0x1400d1428]
mov qword [rsp + 0x50], rax
mov rax, qword [0x140147468]
mov qword [rsp + 0x48], 0x7d0
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
lea rdx, [0x1400e4230]
mov r9d, 0x56010004
xor ecx, ecx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov edx, dword [0x140126408]
mov r8d, 0x60
mov qword [0x14012bc38], rax
lea ecx, [r8 - 0x15]
mov qword [rbp - 0x78], rax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov rcx, qword [0x140147468]
lea r9, [rsp + 0x60]
or r8, 0xffffffffffffffff
mov edx, 0x40a
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x70], ebx
mov dword [rbp - 0x58], 5
invalid
invalid