Function at 0x14001b100
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
mov rbp, rsp
sub rsp, 0x80
mov rbx, rcx
xor r9d, r9d
mov rcx, qword [rcx + 8]
xor r8d, r8d
mov edx, 0x845c
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1009
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Magic_number
xor edi, edi
mov qword [rbp - 0x48], rax
lea r9, [rbp - 0x60]
mov qword [rbp - 0x60], 0x101
xor r8d, r8d
mov dword [rbp - 0x58], edi
mov edx, 0x104d
mov dword [rbp - 0x2c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Bytes_on_last_page_of_file
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 1
mov dword [rbp - 0x2c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Pages_in_file
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 2
mov dword [rbp - 0x2c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, [0x140112b88]
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 3
mov dword [rbp - 0x2c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 8]
lea rax, str.Size_of_header_in_paragraphs
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 4
mov dword [rbp - 0x2c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Minimum_extra_paragraphs_needed
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 5
mov dword [rbp - 0x2c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Maximum_extra_paragraphs_needed
mov qword [rbp - 0x48], rax
lea r9, [rbp - 0x60]
mov dword [rbp - 0x60], 0x101
xor r8d, r8d
mov qword [rbp - 0x5c], 6
mov edx, 0x104d
mov dword [rbp - 0x2c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Initial__relative__SS_value
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 7
mov dword [rbp - 0x2c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Initial_SP_value
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 8
mov dword [rbp - 0x2c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 8]
lea rax, str.Checksum
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 9
mov dword [rbp - 0x2c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Initial_IP_value
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0xa
mov dword [rbp - 0x2c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Initial__relative__CS_value
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0xb
mov dword [rbp - 0x2c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.File_address_of_relocation_table
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0xc
mov dword [rbp - 0x2c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Overlay_number
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0xd
mov dword [rbp - 0x2c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 8]
lea rax, str.OEM_identifier__for_e_oeminfo_
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0xe
mov dword [rbp - 0x2c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.OEM_information__e_oemid_specific_
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0xf
mov dword [rbp - 0x2c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.File_address_of_new_exe_header
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x10
mov dword [rbp - 0x2c], edi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 8]
lea rax, str.Stub_size
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x11
mov dword [rbp - 0x2c], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Stub_entropy
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x12
mov dword [rbp - 0x2c], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Stub_hash
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x13
mov dword [rbp - 0x2c], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Rich_size
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x14
mov dword [rbp - 0x2c], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 8]
lea rax, str.Rich_entropy
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x15
mov dword [rbp - 0x2c], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Rich_hash
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x16
mov dword [rbp - 0x2c], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp - 0x60], 0x101
mov rcx, qword [rbx + 8]
lea rax, str.Total_size
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov qword [rbp - 0x5c], 0x17
mov edx, 0x104d
mov dword [rbp - 0x2c], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Total_entropy
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x18
mov dword [rbp - 0x2c], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 8]
lea rax, str.Total_hash
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x19
mov dword [rbp - 0x2c], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Signature
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x1a
mov dword [rbp - 0x2c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Machine
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x1b
mov dword [rbp - 0x2c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.NumberOfSections
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x1c
mov dword [rbp - 0x2c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 8]
lea rax, str.Timestamp
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x1d
mov dword [rbp - 0x2c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.PointerToSymbolTable
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x1e
mov dword [rbp - 0x2c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp - 0x60], 0x101
mov qword [rbp - 0x5c], 0x1f
mov rcx, qword [rbx + 8]
lea rax, str.NumberOfSymbols
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x2c], 2
mov edx, 0x104d
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.SizeOfOptionalHeader
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x20
mov dword [rbp - 0x2c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 8]
lea rax, str.Characteristics
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x21
mov dword [rbp - 0x2c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Magic
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x22
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.LinkerVersion
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x23
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.SizeOfCode
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x24
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 8]
lea rax, str.SizeOfInitializedData
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x25
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.SizeOfUninitializedData
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x26
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.AddressOfEntryPoint
mov dword [rbp - 0x60], 0x101
mov qword [rbp - 0x5c], 0x27
mov rcx, qword [rbx + 8]
lea r9, [rbp - 0x60]
xor r8d, r8d
mov qword [rbp - 0x48], rax
mov edx, 0x104d
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.BaseOfCode
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x28
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 8]
lea rax, str.BaseOfData
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x29
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.ImageBase
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x2a
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.SectionAlignment
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x2b
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.FileAlignment
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x2c
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 8]
lea rax, str.OperatingSystemVersion
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x2d
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.ImageVersion
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x2e
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.SubsystemVersion
mov dword [rbp - 0x60], 0x101
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x5c], 0x2f
mov rcx, qword [rbx + 8]
lea r9, [rbp - 0x60]
xor r8d, r8d
mov dword [rbp - 0x2c], 3
mov edx, 0x104d
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Win32VersionValue
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x30
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 8]
lea rax, str.SizeOfImage
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x31
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.SizeOfHeaders
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x32
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.CheckSum
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x33
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Subsystem
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x34
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 8]
lea rax, str.DllCharacteristics
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x35
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.SizeOfStackReserve
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x36
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.SizeOfStackCommit
mov dword [rbp - 0x60], 0x101
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x5c], 0x37
mov dword [rbp - 0x2c], 3
mov rcx, qword [rbx + 8]
lea r9, [rbp - 0x60]
xor r8d, r8d
mov edx, 0x104d
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.SizeOfHeapReserve
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x38
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 8]
lea rax, str.SizeOfHeapCommit
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x39
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.LoaderFlags
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x3a
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.NumberOfRvaAndSizes
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x3b
mov dword [rbp - 0x2c], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Data_size
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x3c
mov dword [rbp - 0x2c], 4
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 8]
lea rax, str.Data_entropy
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x3d
mov dword [rbp - 0x2c], 4
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
lea rax, str.Data_hash
lea r9, [rbp - 0x60]
mov qword [rbp - 0x48], rax
xor r8d, r8d
mov dword [rbp - 0x60], 0x101
mov edx, 0x104d
mov qword [rbp - 0x5c], 0x3e
mov dword [rbp - 0x2c], 4
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
call fcn.1400186a0
mov rcx, rbx
call fcn.140018c40
mov rcx, rbx
call fcn.140019520
mov rcx, rbx
call fcn.140019820
mov rcx, rbx
call fcn.14001adc0
mov rcx, qword [rbx + 8]
xor r9d, r9d
mov edx, 0x845c
mov r8d, 1
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
jmp qword [sym.imp.USER32.dll_SendMessageW]