Function at 0x6e6f90
Capabilities:
Get graphical window text

Disassembly:
push rbp
push rdi
push rsi
sub rsp, 0x310
mov rbp, rsp
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x70], 0
lea rdi, [rbp + 0x98]
xor eax, eax
stosq qword [rdi], rax
stosq qword [rdi], rax
stosq qword [rdi], rax
mov qword [rbp + 0xb0], 0
mov qword [rbp + 0x2f8], 0
mov qword [rbp + 0x2f0], 0
mov qword [rbp + 0x2e0], 0
mov qword [rbp + 0x2d8], 0
mov qword [rbp + 0xb8], rbp
mov qword [rbp + 0x330], rcx
nop
nop
call sub.user32.dll_GetForegroundWindow
mov qword [rbp + 0x300], rax
lea rcx, [rbp + 0xd8]
mov edx, 0x200
xor r8, r8
call fcn.00408d50
mov rcx, qword [rbp + 0x300]
lea rdx, [rbp + 0xd8]
mov r8d, 0xff
call sub.user32.dll_GetClassNameW
lea rcx, [rbp + 0xb0]
lea rdx, [rbp + 0xd8]
mov r8d, pe_nt_image_headers64
call fcn.0040ffb0
mov rcx, qword [rbp + 0xb0]
lea rdx, [0x006e74fc]
call fcn.0042af30
test eax, eax
jne 0x6e7399
mov qword [rbp + 0xc8], 0
mov rcx, qword [rbp + 0x300]
mov edx, 0x3d
xor r8, r8
mov r9d, 0xfffffffc
mov dword [rsp + 0x20], 2
mov dword [rsp + 0x28], 0x3e8
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x30], rax
call sub.user32.dll_SendMessageTimeoutW
cmp qword [rbp + 0xc8], 0
jne 0x6e7105
mov cx, 1
lea rdx, [0x006e7530]
call fcn.0047cfa0
jmp 0x6e7399
lea rcx, [rbp + 0x2e0]
call fcn.00414030
lea rcx, [rbp + 0x2e0]
call fcn.00414030
mov rcx, qword [rbp + 0xc8]
mov rdx, qword [0x00a8e110]
xor r8, r8
mov r9, rax
call sub.oleacc.dll_ObjectFromLresult
mov dword [rbp + 0xc4], eax
cmp dword [rbp + 0xc4], 0
je 0x6e716f
lea rcx, [rbp + 0x2e0]
call fcn.00414030
mov rcx, qword [rbp + 0xc8]
mov rdx, qword [0x00a8e110]
mov r8, rax
call fcn.006e32e0
test al, al
je 0x6e7399
cmp qword [rbp + 0x2e0], 0
jne 0x6e718e
mov cx, 1
lea rdx, [0x006e7570]
call fcn.0047cfa0
jmp 0x6e7399
mov rcx, qword [rbp + 0x330]
lea rdx, [rbp + 0x2d8]
mov r8, qword [rbp + 0x2e0]
mov r9d, 0x2a
call fcn.006e57d0
cmp qword [rbp + 0x2d8], 0
je 0x6e7399
lea rcx, [rbp + 0x98]
xor rdx, rdx
mov r8d, 1
call fcn.004482b0
lea rdi, [rbp + 0x80]
lea rsi, [rbp + 0x98]
movsq qword [rdi], qword [rsi]
movsq qword [rdi], qword [rsi]
movsq qword [rdi], qword [rsi]
lea rcx, [rbp + 0x2f8]
call fcn.0040e120
mov rcx, qword [rbp + 0x2d8]
lea rdx, [rbp + 0x80]
mov r8, rax
mov rax, qword [rbp + 0x2d8]
mov rax, qword [rax]
call qword [rax + 0x58]
test eax, eax
jne 0x6e7399
mov dword [rbp + 0x2ec], 0
mov rcx, qword [rbp + 0x300]
lea rdx, [rbp + 0x2ec]
call sub.user32.dll_GetWindowThreadProcessId
lea rcx, [rbp + 0x70]
mov edx, dword [rbp + 0x2ec]
call fcn.0042bdf0
mov rax, qword [rbp + 0x330]
mov rcx, qword [rax + 0x248]
lea rdx, [rbp + 0x78]
mov r8, qword [rbp + 0x70]
call fcn.0046c3d0
lea rcx, [rbp + 0x68]
mov rdx, qword [rbp + 0x2f8]
call fcn.00410030
mov rcx, qword [rbp + 0x78]
mov rdx, qword [rbp + 0x68]
call fcn.004104f0
test eax, eax
je 0x6e7398
lea rcx, [rbp + 0x2f0]
mov edx, 0x400
call fcn.0040fdc0
mov rcx, qword [rbp + 0x2f0]
call fcn.0040f7f0
mov rcx, qword [rbp + 0x300]
mov rdx, rax
mov r8d, 0x400
call sub.user32.dll_GetWindowTextW
mov dword [rbp + 0xd4], eax
cmp dword [rbp + 0xd4], 1
jle 0x6e72dc
lea rcx, [rbp + 0x2f0]
mov edx, dword [rbp + 0xd4]
call fcn.0040fdc0
jmp 0x6e72e8
lea rcx, [rbp + 0x2f0]
call fcn.0040e120
lea rcx, [rbp + 0x60]
mov rdx, qword [rbp + 0x2f8]
call fcn.00414430
lea rcx, [rbp + 0x58]
mov rdx, qword [rbp + 0x2f0]
call fcn.00410030
mov rcx, qword [rbp + 0x330]
mov rdx, qword [rbp + 0x60]
mov r8, qword [rbp + 0x58]
mov r9d, dword [rbp + 0x2ec]
call fcn.006e4230
lea rcx, [rbp + 0x50]
mov edx, dword [rbp + 0x2ec]
call fcn.0042bdf0
lea rcx, [rbp + 0x48]
mov rdx, qword [rbp + 0x2f8]
call fcn.00410030
mov rax, qword [rbp + 0x330]
mov rcx, qword [rax + 0x248]
mov rdx, qword [rbp + 0x50]
mov r8, qword [rbp + 0x48]
call fcn.0046d370
jmp 0x6e7398
nop
lea rcx, [rbp + 0x40]
mov edx, 4
call fcn.0040e160
lea rcx, [rbp + 0x60]
call fcn.0040e0d0
lea rcx, [rbp + 0x68]
mov edx, 3
call fcn.0040e160
lea rcx, [rbp + 0x98]
call fcn.00440690
lea rcx, [rbp + 0xb0]
call fcn.0040e080
lea rcx, [rbp + 0x2d8]
mov rdx, qword [0x006df1c0]
mov r8d, 2
call fcn.00410ff0
lea rcx, [rbp + 0x2f0]
mov edx, 2
call fcn.0040e1c0
lea rsp, [rbp + 0x310]
pop rsi
pop rdi
pop rbp
ret