Function at 0x1400a8ac0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x30
mov edx, 0x409
mov r14, rcx
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov r15, rax
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
xor edi, edi
or rbp, 0xffffffffffffffff
test eax, eax
je 0x1400a8b5d
mov rdx, qword [0x140196800]
mov ebx, eax
add rbx, rbx
lea rcx, [rbx + 0x12]
call sym.ProcessHacker.exe_PhCreateObject
mov rsi, rax
lea rcx, [rax + 0x10]
mov qword [rax], rbx
mov qword [rax + 8], rcx
mov word [rcx + rbx], di
mov rcx, r15
mov r8d, dword [rax]
mov rdx, qword [rax + 8]
shr r8d, 1
inc r8d
call qword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
je 0x1400a8b3c
mov qword [rsp + 0x70], rsi
jmp 0x1400a8b67
call sym.ProcessHacker.exe_PhReferenceEmptyString
mov qword [rsp + 0x70], rax
lea rcx, [rsi - 0x10]
mov eax, ebp
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400a8b67
call fcn.1400c8bc0
jmp 0x1400a8b67
call sym.ProcessHacker.exe_PhReferenceEmptyString
mov qword [rsp + 0x70], rax
mov rcx, qword [rsp + 0x70]
call sym.ProcessHacker.exe_PhAutoDereferenceObject
lea r8, str.Auto_start
mov rcx, rbp
mov rdx, qword [rax + 8]
nop
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r8 + rcx*2 + 2]
jne 0x1400a8ba6
add rcx, 2
cmp rcx, 0xb
je 0x1400a8c29
movzx eax, word [rdx + rcx*2]
cmp ax, word [r8 + rcx*2]
je 0x1400a8b80
mov edx, 0x4d2
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 0x408
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov r15, rax
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
test eax, eax
je 0x1400a8c62
mov rdx, qword [0x140196800]
mov ebx, eax
add rbx, rbx
lea rcx, [rbx + 0x12]
call sym.ProcessHacker.exe_PhCreateObject
mov rsi, rax
lea rcx, [rax + 0x10]
mov qword [rax], rbx
mov qword [rax + 8], rcx
mov word [rcx + rbx], di
mov rcx, r15
mov r8d, dword [rax]
mov rdx, qword [rax + 8]
shr r8d, 1
inc r8d
call qword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
je 0x1400a8c41
mov qword [rsp + 0x78], rsi
jmp 0x1400a8c6c
mov edx, 0x4d2
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
mov edx, 1
jmp 0x1400a8bb6
call sym.ProcessHacker.exe_PhReferenceEmptyString
mov qword [rsp + 0x78], rax
lea rcx, [rsi - 0x10]
mov eax, ebp
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400a8c6c
call fcn.1400c8bc0
jmp 0x1400a8c6c
call sym.ProcessHacker.exe_PhReferenceEmptyString
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x78]
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, rdi
lea r8, [0x1401679a8]
mov rdx, qword [rax + 8]
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x1400a8caa
cmp rcx, 7
jne 0x1400a8c90
jmp 0x1400a8d70
mov edx, 0x408
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov r15, rax
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
test eax, eax
je 0x1400a8d2d
mov rdx, qword [0x140196800]
mov ebx, eax
add rbx, rbx
lea rcx, [rbx + 0x12]
call sym.ProcessHacker.exe_PhCreateObject
mov rsi, rax
mov rcx, r15
mov qword [rax], rbx
add rax, 0x10
mov qword [rsi + 8], rax
mov word [rax + rbx], di
mov r8d, dword [rsi]
mov rdx, qword [rsi + 8]
shr r8d, 1
inc r8d
call qword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
jne 0x1400a8d35
call sym.ProcessHacker.exe_PhReferenceEmptyString
mov qword [rsp + 0x20], rax
lea rcx, [rsi - 0x10]
lock xadd dword [rcx + 8], ebp
cmp ebp, 1
jne 0x1400a8d26
call fcn.1400c8bc0
mov rsi, qword [rsp + 0x20]
jmp 0x1400a8d35
call sym.ProcessHacker.exe_PhReferenceEmptyString
mov rsi, rax
mov rcx, rsi
call sym.ProcessHacker.exe_PhAutoDereferenceObject
lea rdx, str.FS_driver
mov rcx, qword [rax + 8]
nop dword [rax + rax]
movzx eax, word [rcx + rdi*2]
cmp ax, word [rdx + rdi*2]
jne 0x1400a8dcd
movzx eax, word [rcx + rdi*2 + 2]
cmp ax, word [rdx + rdi*2 + 2]
jne 0x1400a8dcd
add rdi, 2
cmp rdi, 0xa
jne 0x1400a8d50
mov edx, 0x40d
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 0x410
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 0x411
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 0x412
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
xor edx, edx
jmp 0x1400a8e34
mov edx, 0x4d2
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov edx, 1
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 0x410
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov edx, 1
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 0x411
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov edx, 1
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 0x412
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
mov edx, 1
mov rcx, rax
mov rbx, qword [rsp + 0x60]
add rsp, 0x30
pop r15
pop r14
pop rdi
pop rsi
pop rbp
jmp qword [sym.imp.USER32.dll_EnableWindow]