Function at 0x1400060b8
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x160
mov rax, qword [0x140010240]
xor rax, rsp
mov qword [rsp + 0x150], rax
mov rbp, rcx
mov qword [rsp + 0x40], rcx
xor ecx, ecx
call fcn.140006094
xor edi, edi
jmp 0x140006171
mov r8d, 0x100
lea rdx, [rsp + 0x50]
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindowTextA]
lea rcx, [rsp + 0x50]
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], dil
jne 0x140006111
lea rdx, [rsp + 0x50]
add rdx, rax
mov r9, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140006dec
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x20]
call fcn.140002674
mov rdx, rbp
mov rcx, rax
call fcn.1400063b4
mov rbx, rax
lea rcx, [rsp + 0x20]
call fcn.140002650
cmp rbx, 0xffffffffffffffff
jne 0x14000617f
lea edx, [rbx + 3]
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
mov rsi, rax
jne 0x1400060f4
jmp 0x1400061a4
mov dil, 1
mov byte [0x1400109a0], dil
lea rcx, [rsp + 0x20]
call fcn.140006e94
mov rcx, rax
call fcn.140006038
mov rdx, rax
call fcn.140002648
nop
mov rcx, rbp
call fcn.140002650
mov al, dil
mov rcx, qword [rsp + 0x150]
xor rcx, rsp
call fcn.14000b3d0
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret

Function at 0x140009a30
Capabilities:
Resume thread

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x30
xor edi, edi
mov esi, ecx
mov ecx, dword [0x140010b5c]
mov ebx, edi
test ecx, ecx
je 0x140009b6b
mov rax, qword [0x140010b50]
add rax, 0x20
nop
movzx edx, byte [rax]
shr edx, 1
and edx, 1
cmp edx, esi
jne 0x140009a88
inc ebx
add rax, 0x38
cmp ebx, ecx
jb 0x140009a60
mov eax, edi
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
cmp ebx, 0xffffffff
je 0x140009b6b
mov r8d, edi
lea rcx, [rsp + 0x20]
test esi, esi
mov edx, 0xffffffff
setne r8b
call fcn.140009db0
mov r8d, dword [0x140010b5c]
cmp ebx, r8d
jae 0x140009af8
nop word [rax + rax]
mov eax, ebx
imul rcx, rax, 0x38
mov rax, qword [0x140010b50]
movzx edx, byte [rcx + rax + 0x20]
shr edx, 1
and edx, 1
cmp edx, esi
je 0x140009af1
mov edx, esi
mov ecx, ebx
call fcn.140009ca0
mov edi, eax
test eax, eax
jne 0x140009af8
mov r8d, dword [0x140010b5c]
inc ebx
cmp ebx, r8d
jb 0x140009ac0
cmp qword [rsp + 0x20], 0
je 0x140009b6b
mov eax, dword [rsp + 0x2c]
test eax, eax
je 0x140009b57
mov rbx, qword [rsp + 0x20]
mov qword [rsp + 0x40], rbp
mov ebp, eax
nop dword [rax]
nop dword [rax + rax]
mov r8d, dword [rbx]
xor edx, edx
lea ecx, [rdx + 0x5a]
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rsi, rax
test rax, rax
je 0x140009b48
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rbx, 4
sub rbp, 1
jne 0x140009b20
mov rbp, qword [rsp + 0x40]
mov r8, qword [rsp + 0x20]
xor edx, edx
mov rcx, qword [0x140010388]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [rsp + 0x48]
mov eax, edi
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret