Function at 0x140013f70
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2c0]
sub rsp, 0x3c0
mov rax, qword [0x14003a040]
xor rax, rsp
mov qword [rbp + 0x2b0], rax
mov rax, rdx
mov r12, rcx
xor r13d, r13d
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], rcx
mov dword [rbp + 0x78], ecx
mov r8d, 0x100
lea rdx, [rbp + 0xb0]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextW]
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], r13
lea rax, [rbp + 0xb0]
mov r14, 0xffffffffffffffff
mov r8, r14
nop
inc r8
cmp word [rax + r8*2], r13w
jne 0x140014000
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 0x48]
call fcn.1400246e0
nop
lea rdx, [rbp - 0x48]
cmp qword [rbp - 0x30], 7
cmova rdx, qword [rbp - 0x48]
mov rax, qword [rbp - 0x38]
lea r8, [rdx + rax*2]
lea rdx, [rbp - 0x48]
cmova rdx, qword [rbp - 0x48]
lea rcx, [rbp - 8]
call fcn.140022950
nop
lea rcx, [rbp - 0x28]
call fcn.1400045d0
nop
mov rsi, qword [rbp - 0x18]
test rsi, rsi
je 0x14001455b
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 1
jb 0x140014786
lea r15, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova r15, qword [rbp - 0x28]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
lea r14, [rsi + 1]
mov ebx, 0xf
lea rdi, [rsp + 0x30]
movabs rax, 0x8000000000000000
mov edx, 0x16
cmp r14, rbx
jbe 0x140014126
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400140e5
mov rbx, rcx
add rax, 0x27
mov rcx, rax
call fcn.140028348
test rax, rax
je 0x140014112
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140014121
cmp rbx, rdx
cmovb rbx, rdx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400140fa
mov rdi, r13
jmp 0x140014121
cmp rcx, 0x1000
jb 0x140014119
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001477a
jmp 0x1400140ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028348
mov rdi, rax
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movzx ecx, word [0x14002efec]
mov byte [rdi + rsi], cl
mov byte [rdi + r14], 0
lea rdx, [rbp - 8]
cmp qword [rbp + 0x10], 0xf
cmova rdx, qword [rbp - 8]
mov r8, qword [rbp + 8]
lea rcx, [rsp + 0x30]
call fcn.1400212c0
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x1400141d6
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400141d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400141d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
mov r14, qword [rbp - 0x58]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 0x12
jb 0x140014774
lea r15, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova r15, qword [rbp - 0x68]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
lea rsi, [r14 + 0x12]
mov edi, 0xf
lea rbx, [rsp + 0x50]
cmp rsi, rdi
jbe 0x1400142b9
mov rdi, rsi
or rdi, 0xf
cmp rdi, rcx
jbe 0x140014272
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140028348
test rax, rax
je 0x1400142a5
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400142b4
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x14001428d
mov rbx, r13
jmp 0x1400142b4
cmp rcx, 0x1000
jb 0x1400142ac
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140014780
jmp 0x140014257
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028348
mov rbx, rax
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rdi
movups xmm0, xmmword [str.Constructed_Path:]
movups xmmword [rbx], xmm0
movzx ecx, word [0x14002f250]
mov word [rbx + 0x10], cx
lea rcx, [rbx + 0x12]
mov r8, r14
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
mov r8d, 2
lea rdx, [0x14002eb74]
lea rcx, [rsp + 0x50]
call fcn.1400212c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140014371
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001436c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001436c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
lea r8, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova r8, qword [rsp + 0x78]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov rsi, 0xffffffffffffffff
mov r9d, esi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
mov eax, 2
mul rbx
cmovb rax, rsi
mov rcx, rax
call fcn.14002869c
mov rdi, rax
lea r8, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova r8, qword [rsp + 0x78]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, esi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rbp + 0x34], 0xff00
lea r9, [rbp + 0x20]
mov edx, 0x444
mov r8d, 1
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, rdi
xor r8d, r8d
mov edx, 0xc2
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rdi
call fcn.140028340
mov dword [rbp + 0x90], 0x8bc4a31f
mov dword [rbp + 0x94], 0x39e17ad2
mov dword [rbp + 0x98], 0x5f0d945f
mov dword [rbp + 0x9c], 0x3fc9a821
mov dword [rbp + 0xa0], 0x25f1bd6e
mov dword [rbp + 0xa4], 0x8dc6a578
mov dword [rbp + 0xa8], 0x9641b23e
mov dword [rbp + 0xac], 0x9d07f35a
mov dword [rbp + 0x80], 0xb74ed3a5
mov dword [rbp + 0x84], 0x1e59f28c
mov dword [rbp + 0x88], 0xf58a7ba1
mov dword [rbp + 0x8c], 0x12e73a9c
lea rax, [rbp + 0x80]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x90]
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x68]
call fcn.14000dbf0
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x140014505
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014500
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140014500
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x140014554
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001454f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001454f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
mov bl, 1
jmp 0x140014677
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], r13
mov r8d, 0x1a
lea rdx, str.Error:_exePath_is_empty._r_n
lea rcx, [rsp + 0x78]
call fcn.140004070
nop
lea r8, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova r8, qword [rsp + 0x78]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
mov eax, 2
mul rbx
cmovb rax, r14
mov rcx, rax
call fcn.14002869c
mov rdi, rax
lea r8, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova r8, qword [rsp + 0x78]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rbp + 0x34], 0xff
lea r9, [rbp + 0x20]
mov edx, 0x444
mov r8d, 1
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, rdi
xor r8d, r8d
mov edx, 0xc2
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rdi
call fcn.140028340
xor bl, bl
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x140014666
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014661
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140014661
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x1400146b5
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400146b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400146b0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x140014704
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400146fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400146fe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 7
jbe 0x140014747
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014742
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140014742
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140028340
movzx eax, bl
mov rcx, qword [rbp + 0x2b0]
xor rcx, rsp
call fcn.140028320
mov rbx, qword [rsp + 0x410]
add rsp, 0x3c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400018d0
nop
call fcn.140001830
nop
call fcn.140001830
nop
call fcn.1400018d0
int3