Function at 0x180011cf0
Capabilities:
Get graphical window text

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xff8]
mov eax, 0x10f8
call fcn.18006ce90
sub rsp, rax
imul eax, r9d, 0x594
xor ebx, ebx
mov r11, rcx
mov r14, r8
mov r10, rdx
lea rcx, [0x180000000]
mov r15d, r9d
mov dword [rsp + 0x58], eax
cmp r9d, eax
ja 0x180012313
mov eax, dword [rbp + 0x1058]
lea edi, [rbx + 0x57]
mov r12, qword [rsp + 0x48]
mov r13, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x48]
mov dword [rsp + 0x50], eax
movzx eax, byte [rbp + 0x1058]
mov byte [rsp + 0x40], al
mov r8d, 0xfa5
movabs r11, 0x3200730077
mov edx, 0x63
cmp r15d, 0xac8
ja 0x180011fd1
je 0x180012180
lea eax, [r15 - 0x17]
cmp eax, 0xa0
ja case.default.0x180011dc5
movzx eax, byte [rcx + rax + 0x12474]
mov ecx, dword [rcx + rax*4 + 0x12458]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
movzx eax, word [r14]
mov word [rbp + 0xe48], ax
mov word [rbp + 0xf5a], bx
jmp case.0x180011dc5.29
mov rdi, qword [r14]
mov r14, qword [r14 + 8]
cmp rdi, r14
je 0x180011e2e
nop word [rax + rax]
mov rax, qword [rdi]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
mov rcx, r10
mov qword [rsp + 0x20], rbx
lea edx, [r9 + 0x3f]
call fcn.180008f40
test al, al
jne 0x180012176
mov r10, qword [rbp + 0x1048]
add rdi, 8
cmp rdi, r14
jne 0x180011df0
mov r9d, dword [rbp + 0x1058]
mov r14, qword [rbp + 0x1050]
mov edi, 0x57
mov byte [rsp + 0x48], bl
jmp case.0x180011dc5.29
xor r9d, r9d
mov dword [rsp + 0x50], ebx
lea r8, [rsp + 0x60]
mov dword [rsp + 0x60], 0x200
mov rdx, r14
mov dword [rsp + 0x20], 0x157
lea rcx, [rbp + 0x410]
call fcn.1800108e0
mov r9d, dword [rbp + 0x1058]
jmp case.0x180011dc5.29
mov word [rsp + 0x68], di
mov eax, 0x6f
mov dword [rsp + 0x69], 0x534153
mov word [rsp + 0x6c], ax
jmp case.0x180011dc5.29
mov r13, 0xffffffffffffffff
nop dword [rax]
inc r13
cmp byte [r14 + r13], bl
jne 0x180011ea0
mov rcx, qword [r10]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x180012300
mov edi, 0xa6
nop
mov eax, edi
sub eax, 0xa6
je 0x180011f8c
cmp eax, 1
jne 0x180011fa9
nop word [rax + rax]
mov edi, 0x122
mov eax, edi
sub eax, 0x121
je 0x180011f20
cmp eax, 1
jne 0x180011f33
lea rcx, [rbp - 0x70]
call fcn.180071acc
mov rcx, rax
lea rdx, str.mdiclient
call fcn.18007cb70
mov r12, rsi
test eax, eax
je 0x180011f4f
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetParent]
mov rsi, rax
jmp 0x180011f33
mov r8d, 0xff
lea rdx, [rbp - 0x70]
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetClassNameW]
dec edi
cmp edi, 0x120
ja 0x180011ee5
test rsi, rsi
jne 0x180011ee0
mov edi, 0xa7
mov r15d, 0x17
jmp 0x180011fa9
mov rcx, r14
mov qword [0x1800be6a8], rsi
call fcn.180071acc
mov rdx, rbx
lea r8, [0x180095274]
nop dword [rax + rax]
movzx ecx, byte [rax + rdx]
inc rdx
cmp cl, byte [r8 + rdx - 1]
jne 0x180011f42
cmp rdx, 4
jne 0x180011f70
mov rax, rsi
jmp 0x180012443
mov rax, qword [rbp + 0x1048]
lea rdx, [rbp - 0x70]
mov r8d, 0xff
mov rsi, qword [rax]
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetClassNameW]
inc edi
cmp edi, 0xa8
jb 0x180011ec0
mov r9d, dword [rbp + 0x1058]
mov edi, 0x57
jmp case.0x180011dc5.29
mov byte [rsp + 0x40], bl
jmp case.0x180011dc5.29
cmp r15d, 0x2508
je case.0x180012174.6
cmp r15d, 0x2e68
je 0x1800120d6
cmp r15d, 0x3930
je 0x1800120c7
cmp r15d, 0x4998
je 0x18001203e
cmp r15d, 0x71e6
jne case.default.0x180011dc5
mov eax, dword [0x180098f08]
movsd xmm0, qword [str._32.dl]
mov dword [rbp - 0x7a], eax
movzx eax, word [0x180098f0c]
mov qword [rsp + 0x78], r11
mov word [rbp - 0x76], ax
mov byte [rsp + 0x72], bl
movsd qword [rsp + 0x7e], xmm0
jmp case.default.0x180011dc5
mov ecx, 0xffffff9c
mov qword [rbp + 0x962], rbx
lea rdx, [rbp + 0x410]
call qword [0x1800ce8f0]
mov rax, qword [rbp + 0x962]
test rax, rax
je 0x1800120b0
mov r8, qword [rbp + 0x1048]
mov r9d, 0x12d
mov qword [rsp + 0x60], rax
xor edx, edx
lea rax, [rsp + 0x60]
xor ecx, ecx
mov qword [rsp + 0x20], rax
call fcn.180056b50
mov rcx, qword [rbp + 0x962]
xor r9d, r9d
mov qword [rsp + 0x60], rcx
xor edx, edx
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x50], eax
mov qword [rsp + 0x20], rbx
lea r8d, [r9 + 0x5b]
call fcn.180008760
movzx ecx, word [rbp + 0x96a]
mov r9d, dword [rbp + 0x1058]
mov word [0x1800ce8f8], cx
jmp case.0x180011dc5.29
mov word [rsp + 0x6d], dx
mov dword [rsp + 0x6e], 0x5774656b
jmp case.default.0x180011dc5
mov rax, qword [r14]
mov rcx, qword [rax]
mov rdx, qword [rcx]
movzx eax, word [rdx]
cmp ax, 0x56
je 0x1800120f8
cmp ax, 0x47
je 0x1800120f8
mov word [0x1800ce8f8], r8w
jmp case.0x180011dc5.29
mov word [0x1800ce8f8], bx
cmp word [rdx + 0xa], 1
sete byte [rsp + 0x40]
lea rcx, [0x180000000]
mov r10, qword [rbp + 0x1048]
imul eax, r9d, 0x77
add r15d, eax
cmp r15d, dword [rsp + 0x58]
jbe 0x180011d75
mov r8d, dword [rsp + 0x50]
mov r11, qword [rbp + 0x1040]
lea esi, [r9 + 0xb]
cmp r9d, esi
jae case.0x180012174.6
mov r14, qword [rsp + 0x48]
lea edi, [r9 - 0x63]
mov r15, qword [rbp + 0x1050]
cmp edi, 0x55
ja case.0x180012174.10
movzx eax, byte [rcx + rdi + 0x12544]
mov ecx, dword [rcx + rax*4 + 0x12518]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov byte [rsp + 0x48], 1
jmp case.0x180012174.6
mov rcx, r12
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x180012308
mov rcx, r12
test r13, r13
jne 0x1800121d1
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1800121b8
mov rcx, r12
call qword [sym.imp.USER32.dll_GetParent]
mov r12, rax
mov rcx, r12
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x180012300
mov rax, r12
jmp 0x180012443
mov edx, 5
call qword [sym.imp.USER32.dll_GetWindow]
mov r15, qword [rbp + 0x1050]
mov r14, rax
nop word [rax + rax]
mov rdx, r14
mov rcx, r12
mov rsi, r14
call qword [sym.imp.USER32.dll_IsChild]
test eax, eax
je 0x180012300
mov edi, 0x119
nop dword [rax]
cmp edi, 0x119
je 0x180012282
cmp edi, 0x4bbd
jne 0x180012231
mov edx, 2
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
add edi, 0x4aa4
cmp edi, 0x9548
jbe 0x180012210
lea rcx, [rbp + 0x90]
call fcn.180071acc
mov rcx, r15
mov rdi, rax
call fcn.180071acc
sub rdi, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + rdi]
sub edx, ecx
jne 0x180012272
inc rax
test ecx, ecx
jne 0x180012260
test edx, edx
jne 0x1800121f0
mov rax, rsi
jmp 0x180012443
mov r8d, 0x100
lea rdx, [rbp + 0x90]
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov r8d, 0xff
lea rdx, [rbp - 0x70]
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rbp - 0x70]
call fcn.180071acc
mov rcx, rax
lea rdx, str.mdiclient
call fcn.18007cb70
test eax, eax
jne 0x180012231
mov rcx, r15
call fcn.180071acc
mov rdx, rbx
lea r8, [0x180095274]
nop dword [rax]
movzx ecx, byte [rax + rdx]
inc rdx
cmp cl, byte [r8 + rdx - 1]
jne 0x180012231
cmp rdx, 4
jne 0x1800122e0
mov rax, rsi
jmp 0x180012443
mov rax, rbx
jmp 0x180012443
mov rsi, rbx
mov rax, rbx
jmp 0x180012443
movzx edx, byte [rbp + 0x1058]
mov r8d, dword [rbp + 0x1058]
mov byte [rsp + 0x40], dl
mov dword [rsp + 0x50], r8d
jmp 0x180012135
mov dword [rsp + 0x30], 0x114
xor r9d, r9d
mov qword [rsp + 0x28], r15
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rbx
xor ecx, ecx
call fcn.1800480d0
test al, al
je 0x1800123ba
mov byte [rsp + 0x48], 1
jmp case.0x180012174.10
mov dword [rsp + 0x28], 1
lea r9, [rbp + 0x190]
xor r8d, r8d
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call r14
mov qword [r15], rax
jmp case.0x180012174.10
mov eax, dword [r11]
lea r8, [rbp + 0x1058]
mov dword [rsp + 0x58], eax
lea rdx, [rsp + 0x58]
mov eax, dword [r10]
lea rcx, [rbp + 0x190]
mov r9d, 0x90
mov dword [rbp + 0x1058], eax
mov qword [rsp + 0x20], rbx
call fcn.180022950
test al, al
jne case.0x180012174.10
mov byte [rsp + 0x48], bl
jmp case.0x180012174.6
movzx eax, word [rbp + 0xf5a]
mov word [0x1800ce8f8], ax
jmp case.0x180012174.10
mov ecx, 0xffffffd4
lea rdx, [rbp + 0xa00]
call qword [0x1800ce8f0]
jmp case.0x180012174.10
mov dword [rsp + 0x48], r8d
jmp case.0x180012174.10
lea r9, [rsp + 0x68]
mov edx, 0xe5
lea r8, [rsp + 0x78]
xor ecx, ecx
call fcn.1800588e0
mov r14, rax
jmp case.0x180012174.10
mov dword [rbp - 0x76], 0x6c
inc edi
lea eax, [rdi + 0x63]
cmp eax, esi
jae case.0x180012174.6
mov r10, qword [rbp + 0x1048]
lea rcx, [0x180000000]
mov r8d, dword [rsp + 0x50]
mov r11, qword [rbp + 0x1040]
jmp 0x180012152
movzx eax, byte [rsp + 0x40]
mov byte [rsp + 0x48], al
mov rax, qword [rsp + 0x48]
add rsp, 0x10f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret