Function at 0x140003cc0
Capabilities:
Get graphical window text
Get process image filename

Disassembly:
push rbp
push rsi
push rdi
push rbx
sub rsp, 0xa8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x10], xmm6
mov qword [rbp + 8], 0xfffffffffffffffe
call sub.USER32.dll_GetForegroundWindow
mov rsi, rax
mov dword [rbp - 0x38], 0
lea rdx, [rbp - 0x38]
mov rcx, rax
call sub.USER32.dll_GetWindowThreadProcessId
mov r8d, dword [rbp - 0x38]
mov ecx, 0x1000
xor edx, edx
call sub.KERNEL32.dll_OpenProcess
mov rdi, rax
mov ecx, 0x200
mov edx, 2
call fcn.140006330
test rax, rax
je 0x140003fc6
mov rcx, rdi
mov qword [rbp], rax
mov rdx, rax
mov r8d, 0x100
call sub.PSAPI.DLL_GetProcessImageFileNameW
xor edi, edi
xor edx, edx
xor eax, eax
mov r11, qword [rbp]
jmp 0x140003d62
mov rdi, r8
add rax, 2
mov rdx, rcx
cmp rax, 0x100
je 0x140003db0
cmp word [r11 + rax*2], 0
sete r9b
test rdx, rdx
sete r10b
mov r8, rax
mov rcx, rax
test r9b, r10b
jne 0x140003d84
mov r8, rdi
mov rcx, rdx
cmp word [r11 + rax*2 + 2], 0
sete dl
test rcx, rcx
sete r9b
test dl, r9b
je 0x140003d50
lea rdi, [rax + 1]
mov rcx, rdi
add rax, 2
mov rdx, rcx
cmp rax, 0x100
jne 0x140003d62
cmp rdi, 0x101
jae 0x140003fd7
mov qword [rbp - 0x18], 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov rax, rdi
shr rax, 1
mov r8d, edi
and r8d, 1
add r8, rax
je 0x140003de9
lea rcx, [rbp - 0x18]
xor edx, edx
call fcn.1400d2c90
mov rcx, qword [rbp]
lea rax, [rcx + rdi*2]
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x30], rax
mov word [rbp - 0x28], 0
lea rcx, [rbp - 0x38]
lea rdx, [rbp - 0x18]
call fcn.1400048b0
mov rax, qword [rbp - 0x18]
mov qword [rbp - 0x20], rax
movups xmm0, xmmword [rbp - 0x10]
movaps xmmword [rbp - 0x60], xmm0
mov edx, 0x200
mov r8d, 2
mov rcx, qword [rbp]
call fcn.140006310
mov rcx, rsi
call sub.USER32.dll_GetWindowTextLengthW
mov ebx, eax
movzx eax, byte [0x14014b245]
mov ecx, recv
mov edx, 1
call fcn.140006300
test rax, rax
je 0x140003fed
mov rdi, rax
movabs rax, 0x5449545f4f4e5f5f
mov qword [rdi], rax
mov dword [rdi + 8], 0x5f5f454c
cmp ebx, 0x7fffffff
jae 0x140003f4f
mov qword [rbp - 0x40], rdi
inc ebx
mov eax, ebx
mov qword [rbp - 0x48], rax
lea rdi, [rax + rax]
mov edx, 2
mov rcx, rdi
call fcn.140006330
test rax, rax
je 0x140003ffe
mov rcx, rsi
mov qword [rbp], rax
mov rdx, rax
mov r8d, ebx
call sub.USER32.dll_GetWindowTextW
mov rsi, qword [rbp - 0x48]
lea r8, [rsi - 1]
mov qword [rbp - 0x18], 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov rax, r8
shr rax, 1
and r8d, 1
add r8, rax
je 0x140003ee5
lea rcx, [rbp - 0x18]
xor edx, edx
call fcn.1400d2c90
mov rcx, qword [rbp]
lea rax, [rcx + rsi*2]
add rax, 0xfffffffffffffffe
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x30], rax
mov word [rbp - 0x28], 0
lea rcx, [rbp - 0x38]
lea rdx, [rbp - 0x18]
call fcn.1400048b0
mov rsi, qword [rbp - 0x18]
movups xmm6, xmmword [rbp - 0x10]
mov edx, recv
mov r8d, 1
mov rcx, qword [rbp - 0x40]
call fcn.140006310
mov r8d, 2
mov rcx, qword [rbp]
mov rdx, rdi
call fcn.140006310
mov rdi, rsi
mov rsi, qword [rbp - 0x20]
mov rdx, qword [0x14014b020]
test rdx, rdx
jne 0x140003f66
jmp 0x140003f78
movaps xmm6, xmmword [0x1400d7270]
mov rsi, qword [rbp - 0x20]
mov rdx, qword [0x14014b020]
test rdx, rdx
je 0x140003f78
mov rcx, qword [0x14014b018]
mov r8d, 1
call fcn.140006310
mov qword [0x14014b018], rdi
movups xmmword [0x14014b020], xmm6
mov rdx, qword [0x14014b038]
test rdx, rdx
je 0x140003fa4
mov rcx, qword [0x14014b030]
mov r8d, 1
call fcn.140006310
mov qword [0x14014b030], rsi
movaps xmm0, xmmword [rbp - 0x60]
movups xmmword [0x14014b038], xmm0
movaps xmm6, xmmword [rbp + 0x10]
add rsp, 0xa8
pop rbx
pop rdi
pop rsi
pop rbp
ret
mov ecx, 2
mov edx, 0x200
call fcn.1400d5480
ud2
lea r8, str.srcmain.rs
mov edx, 0x100
mov rcx, rdi
call fcn.1400d5b60
jmp 0x14000400b
mov ecx, 1
mov edx, recv
call fcn.1400d5480
jmp 0x14000400b
mov ecx, 2
mov rdx, rdi
call fcn.1400d5480
ud2