Function at 0x1800031c0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x300
mov qword [rsp + 0x208], 0xfffffffffffffffe
mov rax, qword [0x18004b0d0]
xor rax, rsp
mov qword [rsp + 0x2f0], rax
mov rdx, qword [rsp + 0x310]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc90.dll_Ordinal_300]
nop
mov rcx, qword [rsp + 0x310]
call qword [sym.imp.mfc90.dll_Ordinal_4179]
xor r8d, r8d
lea rdx, str.xbbrowser.exe
mov rcx, qword [rsp + 0x310]
call qword [sym.imp.mfc90.dll_Ordinal_2328]
test eax, eax
jle 0x18000333f
lea rax, [rsp + 0x158]
mov qword [rsp + 0x160], rax
lea rax, [rsp + 0x168]
mov qword [rsp + 0x170], rax
lea rdx, [rsp + 0xa8]
mov rcx, qword [rsp + 0x170]
call qword [sym.imp.mfc90.dll_Ordinal_300]
mov qword [rsp + 0x210], rax
mov rdx, qword [rsp + 0x210]
mov rcx, qword [rsp + 0x160]
call fcn.180010e90
mov qword [rsp + 0x218], rax
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x220], rax
mov rdx, qword [rsp + 0x220]
lea rcx, [rsp + 0x178]
call fcn.180010e90
mov qword [rsp + 0x228], rax
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x230], rax
lea r8, str.xbstarter.exe
mov rdx, qword [rsp + 0x230]
lea rcx, [rsp + 0x180]
call fcn.180004170
mov qword [rsp + 0x238], rax
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x240], rax
mov rdx, qword [rsp + 0x240]
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc90.dll_Ordinal_795]
nop
lea rcx, [rsp + 0x180]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0x178]
call qword [sym.imp.mfc90.dll_Ordinal_589]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov qword [rsp + 0xb8], rax
lea rcx, [rsp + 0x40]
call fcn.180004340
nop
mov qword [rsp + 0xb0], 0
lea rcx, [rsp + 0x78]
call fcn.180004340
nop
xor eax, eax
cmp eax, 1
je 0x1800033b5
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0xb0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowExA]
mov qword [rsp + 0xb0], rax
cmp qword [rsp + 0xb0], 0
jne 0x1800033a1
jmp 0x1800033b5
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x78]
call fcn.180004740
jmp 0x18000336f
lea rax, [rsp + 0x188]
mov qword [rsp + 0x190], rax
lea r8, [rsp + 0xa8]
lea rdx, str.cmd__c_start_____
lea rcx, [rsp + 0x198]
call fcn.180004230
mov qword [rsp + 0x248], rax
mov rax, qword [rsp + 0x248]
mov qword [rsp + reloc.mfc90.dll_Ordinal_592], rax
lea r8, [0x18004125c]
mov rdx, qword [rsp + reloc.mfc90.dll_Ordinal_592]
lea rcx, [rsp + 0x1a0]
call fcn.180004170
mov qword [rsp + 0x258], rax
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x260], rax
mov r8, qword [rsp + 0x318]
mov rdx, qword [rsp + 0x260]
lea rcx, [rsp + 0x1a8]
call fcn.1800040a0
mov qword [rsp + 0x268], rax
mov rax, qword [rsp + 0x268]
mov qword [rsp + 0x270], rax
lea r8, [0x180041258]
mov rdx, qword [rsp + 0x270]
mov rcx, qword [rsp + 0x190]
call fcn.180004170
mov qword [rsp + 0x278], rax
xor edx, edx
mov rcx, qword [rsp + 0x278]
call fcn.1800134a0
nop
lea rcx, [rsp + 0x1a8]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0x198]
call qword [sym.imp.mfc90.dll_Ordinal_589]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x18004c304], eax
mov dword [rsp + 0x70], 0
mov dword [rsp + 0xc0], 0
jmp 0x1800034f4
mov eax, dword [rsp + 0xc0]
add eax, 1
mov dword [rsp + 0xc0], eax
cmp dword [rsp + 0xc0], 3
jge 0x180003743
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0xc8], 0
xor eax, eax
cmp eax, 1
je 0x18000372a
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0xc8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowExA]
mov qword [rsp + 0xc8], rax
cmp qword [rsp + 0xc8], 0
jne 0x180003552
jmp 0x18000372a
mov dword [rsp + 0xf4], 0
mov dword [rsp + 0xf4], 0
jmp 0x18000357b
mov eax, dword [rsp + 0xf4]
add eax, 1
mov dword [rsp + 0xf4], eax
movsxd rdi, dword [rsp + 0xf4]
lea rcx, [rsp + 0x78]
call fcn.1800043c0
cmp rdi, rax
jae 0x1800035b5
movsxd rdx, dword [rsp + 0xf4]
lea rcx, [rsp + 0x78]
call fcn.1800046f0
mov rax, qword [rax]
cmp qword [rsp + 0xc8], rax
jne 0x1800035b3
jmp 0x1800035b5
jmp 0x18000356a
movsxd rdi, dword [rsp + 0xf4]
lea rcx, [rsp + 0x78]
call fcn.1800043c0
cmp rdi, rax
jae 0x1800035d1
jmp 0x180003519
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x78]
call fcn.180004740
mov dword [rsp + 0xd0], 0
lea rdi, [rsp + 0xd4]
xor eax, eax
mov ecx, 0xc
rep stosb byte [rdi], al
lea rdx, [rsp + 0xd0]
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [rsp + 0xd0]
mov eax, dword [rsp + 0xd8]
sub eax, ecx
cmp eax, 0x2bc
jl 0x180003643
mov ecx, dword [rsp + 0xd4]
mov eax, dword [rsp + 0xdc]
sub eax, ecx
cmp eax, 0x190
jge 0x180003648
jmp 0x180003519
mov dword [rsp + 0xf0], 0
lea rdx, [rsp + 0xf0]
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [rsp + 0xf0]
lea rcx, [rsp + 0xe8]
call fcn.180013230
nop
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x1b8], rax
lea rdx, [rsp + 0xe8]
mov rcx, qword [rsp + 0x1b8]
call qword [sym.imp.mfc90.dll_Ordinal_300]
mov qword [rsp + 0x280], rax
mov rdx, qword [rsp + 0x280]
lea rcx, [rsp + 0xe0]
call fcn.180010880
nop
lea rcx, [rsp + 0xe0]
call fcn.180002900
test eax, eax
jne 0x1800036f5
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc90.dll_Ordinal_589]
jmp 0x180003519
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x40]
call fcn.180004740
nop
lea rcx, [rsp + 0xe0]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0xe8]
call qword [sym.imp.mfc90.dll_Ordinal_589]
jmp 0x180003519
call fcn.180003b90
test rax, rax
je 0x18000373e
mov dword [rsp + 0x70], 1
jmp 0x180003743
jmp 0x1800034e3
cmp dword [rsp + 0x70], 0
je 0x180003757
call fcn.180007bb0
test eax, eax
je 0x180003a4a
mov byte [rsp + 0x110], 0
lea rdi, [rsp + 0x111]
xor eax, eax
mov ecx, 0x3f
rep stosb byte [rdi], al
mov dword [rsp + 0x150], 0
jmp 0x18000378e
mov eax, dword [rsp + 0x150]
add eax, 1
mov dword [rsp + 0x150], eax
movsxd rdi, dword [rsp + 0x150]
lea rcx, [rsp + 0x40]
call fcn.1800043c0
cmp rdi, rax
jae 0x1800038d9
mov byte [rsp + 0x110], 0
movsxd rdx, dword [rsp + 0x150]
lea rcx, [rsp + 0x40]
call fcn.1800046f0
mov r8d, 0x3f
lea rdx, [rsp + 0x110]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetWindowTextA]
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x110]
repne scasb al, byte [rdi]
not rcx
sub rcx, 1
cmp rcx, 8
jae 0x1800037fc
jmp 0x18000377d
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.mfc90.dll_Ordinal_310]
mov qword [rsp + 0x288], rax
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x290], rax
mov r8d, 0x23
lea rdx, [rsp + 0x1c8]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.mfc90.dll_Ordinal_4095]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0x298]
mov qword [rsp + 0x2a0], rax
lea r8, [0x180041274]
mov rdx, qword [rsp + 0x2a0]
lea rcx, [rsp + 0x1d0]
call fcn.180004170
mov qword [rsp + 0x2a8], rax
mov rax, qword [rsp + 0x2a8]
mov qword [rsp + 0x2b0], rax
mov rdx, qword [rsp + 0x2b0]
lea rcx, [0x18004c468]
call qword [sym.imp.mfc90.dll_Ordinal_919]
nop
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0x1c8]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.mfc90.dll_Ordinal_589]
jmp 0x18000377d
mov byte [rsp + 0x110], 0
mov r8d, 0x3f
lea rdx, [rsp + 0x110]
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.USER32.dll_GetWindowTextA]
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x1d8]
call qword [sym.imp.mfc90.dll_Ordinal_310]
mov qword [rsp + 0x2b8], rax
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x2c0], rax
mov r8d, 0x14
lea rdx, [rsp + 0x1e0]
mov rcx, qword [rsp + 0x2c0]
call qword [sym.imp.mfc90.dll_Ordinal_4095]
mov qword [rsp + 0x2c8], rax
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x2d0], rax
lea r8, [0x180041278]
mov rdx, qword [rsp + 0x2d0]
lea rcx, [rsp + 0x1e8]
call fcn.180004170
mov qword [rsp + 0x2d8], rax
mov rax, qword [rsp + 0x2d8]
mov qword [rsp + 0x2e0], rax
mov rdx, qword [rsp + 0x2e0]
lea rcx, [0x18004c468]
call qword [sym.imp.mfc90.dll_Ordinal_919]
nop
lea rcx, [rsp + 0x1e8]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0x1e0]
call qword [sym.imp.mfc90.dll_Ordinal_589]
nop
lea rcx, [rsp + 0x1d8]
call qword [sym.imp.mfc90.dll_Ordinal_589]
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc90.dll_Ordinal_316]
nop
lea rax, [rsp + 0x1f0]
mov qword [rsp + 0x1f8], rax
lea rdx, [0x18004c468]
mov rcx, qword [rsp + 0x1f8]
call qword [sym.imp.mfc90.dll_Ordinal_300]
mov qword [rsp + 0x2e8], rax
lea rdx, [rsp + 0xf8]
mov rcx, qword [rsp + 0x2e8]
call fcn.1800106b0
lea rdx, [rsp + 0xf8]
lea rcx, [0x18004c468]
call qword [sym.imp.mfc90.dll_Ordinal_795]
nop
lea rcx, [rsp + 0xf8]
call qword [sym.imp.mfc90.dll_Ordinal_589]
call fcn.180007bb0
test eax, eax
je 0x180003a72
mov r9, qword [0x18004c468]
mov r8d, dword [rsp + 0x70]
lea rdx, str.PWPP__:_IsPopupSucceeded___d___Url_Inputed___s__r_n
mov rcx, qword [0x18004c3a8]
call fcn.18000f190
mov rcx, qword [rsp + 0x330]
call qword [sym.imp.mfc90.dll_Ordinal_888]
mov rcx, rax
mov rax, qword [rsp + 0x318]
mov qword [rsp + 0x30], rax
lea rax, [0x18004c468]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x320]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x310]
mov r8d, dword [rsp + 0x70]
mov rdx, qword [rsp + 0x328]
call fcn.180002990
test eax, eax
jne 0x180003ae3
call fcn.180007bb0
test eax, eax
je 0x180003ae3
lea rdx, str.PWPP__:_up_pop_record_failed__r_n
mov rcx, qword [0x18004c3a8]
call fcn.18000f190
lea rdx, [0x1800393f5]
lea rcx, [0x18004c468]
call qword [sym.imp.mfc90.dll_Ordinal_798]
mov rcx, qword [str.POPUP_SLEEP0000]
call fcn.180003020
mov dword [rsp + 0x154], eax
call fcn.180007bb0
test eax, eax
je 0x180003b2e
mov r8d, dword [rsp + 0x154]
lea rdx, str.PWPP__:_sleep__d_sec__r_n
mov rcx, qword [0x18004c3a8]
call fcn.18000f190
mov ecx, dword [rsp + 0x154]
imul ecx, ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x200], 1
lea rcx, [rsp + 0x78]
call fcn.1800046c0
nop
lea rcx, [rsp + 0x40]
call fcn.1800046c0
nop
lea rcx, [rsp + 0xa8]
call qword [sym.imp.mfc90.dll_Ordinal_589]
mov eax, dword [rsp + 0x200]
mov rcx, qword [rsp + 0x2f0]
xor rcx, rsp
call fcn.180032590
add rsp, 0x300
pop rdi
ret