Function at 0x1401103c0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x180]
sub rsp, 0x280
mov rax, qword [0x1402bb040]
xor rax, rsp
mov qword [rbp + 0x170], rax
xor ebx, ebx
cmp dword [0x1402c8ad8], 1
jbe 0x14011057c
mov rax, qword [0x1402c8e90]
lea r8, [rsp + 0x70]
mov r9d, 0x200
mov qword [rsp + 0x60], rax
mov edx, 1
mov dword [rsp + 0x50], 0x10009
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], rbx
call sym.SystemInformer.exe_Ordinal_1380
xor r8d, r8d
test al, al
je 0x140110436
lea r9, [rsp + 0x70]
jmp 0x14011046c
mov rax, qword [0x1402c8e90]
lea rcx, [rsp + 0x30]
mov edx, 1
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], 0x10009
call sym.SystemInformer.exe_Ordinal_1375
mov rcx, rax
call sym.SystemInformer.exe_Ordinal_1238
xor r8d, r8d
mov r9, qword [rax + 8]
mov rcx, qword [0x1402c8e48]
mov edx, 0xc
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [0x1402c8e58]
lea r8, [rsp + 0x70]
mov r9d, 0x200
mov qword [rsp + 0x60], rax
mov edx, 1
mov dword [rsp + 0x50], 0x10009
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], rbx
call sym.SystemInformer.exe_Ordinal_1380
xor r8d, r8d
test al, al
je 0x1401104bf
lea r9, [rsp + 0x70]
jmp 0x1401104f4
mov rax, qword [0x1402c8e58]
lea rcx, ds:[rsp + 0x30]
mov edx, 1
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], 0x10009
call sym.SystemInformer.exe_Ordinal_1375
mov rcx, rax
call sym.SystemInformer.exe_Ordinal_1238
xor r8d, r8d
mov r9, qword [rax + 8]
mov rcx, qword [0x1402c8d88]
mov edx, 0xc
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [0x1402c8e78]
lea r8, [rsp + 0x70]
mov r9d, 0x200
mov qword [rsp + 0x60], rax
mov edx, 1
mov dword [rsp + 0x50], 0x10009
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], rbx
call sym.SystemInformer.exe_Ordinal_1380
xor r8d, r8d
test al, al
je 0x14011054b
lea r9, [rsp + 0x70]
jmp 0x1401105be
mov rax, qword [0x1402c8e78]
lea rcx, [rsp + 0x30]
mov edx, 1
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], 0x10009
call sym.SystemInformer.exe_Ordinal_1375
mov rcx, rax
call sym.SystemInformer.exe_Ordinal_1238
mov r9, qword [rax + 8]
jmp 0x1401105bb
mov rcx, qword [0x1402c8e48]
lea r9, [0x140275798]
xor r8d, r8d
mov edx, 0xc
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x1402c8d88]
lea r9, [0x140275798]
xor r8d, r8d
mov edx, 0xc
call qword [sym.imp.USER32.dll_SendMessageW]
lea r9, [0x140275798]
xor r8d, r8d
mov rcx, qword [0x1402c8e38]
mov edx, 0xc
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x1402caf08], ebx
je 0x14011077b
mov rax, qword [0x1402cb0c8]
lea r8, [rsp + 0x70]
mov r9d, 0x200
mov qword [rsp + 0x60], rax
mov edx, 1
mov dword [rsp + 0x50], 0xd
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], rbx
call sym.SystemInformer.exe_Ordinal_1380
xor r8d, r8d
test al, al
je 0x14011061d
lea r9, [rsp + 0x70]
jmp 0x14011065a
movzx eax, byte [0x1402c29e0]
lea rcx, [rsp + 0x30]
mov byte [rsp + 0x3a], al
mov edx, 1
mov rax, qword [0x1402cb0c8]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], 0x10d
call sym.SystemInformer.exe_Ordinal_1375
mov rcx, rax
call sym.SystemInformer.exe_Ordinal_1238
xor r8d, r8d
mov r9, qword [rax + 8]
mov rcx, qword [0x1402c8e18]
mov edx, 0xc
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [0x1402caf58]
lea r8, [rsp + 0x70]
mov r9d, 0x200
mov qword [rsp + 0x60], rax
mov edx, 1
mov dword [rsp + 0x50], 0xd
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], rbx
call sym.SystemInformer.exe_Ordinal_1380
xor r8d, r8d
test al, al
je 0x1401106ad
lea r9, [rsp + 0x70]
jmp 0x1401106ec
movzx eax, byte [0x1402c29e0]
lea rcx, [rsp + 0x30]
mov byte [rsp + 0x3a], al
mov edx, 1
mov rax, qword [0x1402caf58]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], 0x10d
call sym.SystemInformer.exe_Ordinal_1375
mov rcx, rax
call sym.SystemInformer.exe_Ordinal_1238
xor r8d, r8d
mov r9, qword [rax + 8]
mov rcx, qword [0x1402c8ee8]
mov edx, 0xc
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [0x1402caf48]
lea r8, [rsp + 0x70]
mov r9d, 0x200
mov qword [rsp + 0x60], rax
mov edx, 1
mov dword [rsp + 0x50], 0xd
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], rbx
call sym.SystemInformer.exe_Ordinal_1380
xor r8d, r8d
test al, al
je 0x14011073f
lea r9, [rsp + 0x70]
jmp 0x1401107bd
movzx eax, byte [0x1402c29e0]
lea rcx, [rsp + 0x30]
mov byte [rsp + 0x3a], al
mov edx, 1
mov rax, qword [0x1402caf48]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], 0x10d
call sym.SystemInformer.exe_Ordinal_1375
mov rcx, rax
call sym.SystemInformer.exe_Ordinal_1238
mov r9, qword [rax + 8]
jmp 0x1401107ba
mov rcx, qword [0x1402c8e18]
lea r9, [0x140275798]
xor r8d, r8d
mov edx, 0xc
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x1402c8ee8]
lea r9, [0x140275798]
xor r8d, r8d
mov edx, 0xc
call qword [sym.imp.USER32.dll_SendMessageW]
lea r9, [0x140275798]
xor r8d, r8d
mov rcx, qword [0x1402c8e68]
mov edx, 0xc
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x1402caf80]
lea r8, ds:[rsp + 0x70]
mov r9d, 0x200
mov qword [rsp + 0x60], rax
mov edx, 1
mov dword [rsp + 0x50], 0x10009
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], rbx
call sym.SystemInformer.exe_Ordinal_1380
xor r8d, r8d
test al, al
je 0x140110813
lea r9, [rsp + 0x70]
jmp 0x140110844
mov eax, dword [0x1402caf80]
lea rcx, [rsp + 0x30]
mov edx, 1
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], 0x10009
call sym.SystemInformer.exe_Ordinal_1375
mov rcx, rax
call sym.SystemInformer.exe_Ordinal_1238
xor r8d, r8d
mov r9, qword [rax + 8]
mov rcx, qword [0x1402c8d90]
mov edx, 0xc
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [0x1402caf68]
lea r8, [rsp + 0x70]
mov r9d, 0x200
mov qword [rsp + 0x60], rax
mov edx, 1
mov dword [rsp + 0x50], 0xd
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], rbx
call sym.SystemInformer.exe_Ordinal_1380
xor r8d, r8d
test al, al
je 0x140110897
lea r9, [rsp + 0x70]
jmp 0x1401108d4
movzx eax, byte [0x1402c29e0]
lea rcx, [rsp + 0x30]
mov byte [rsp + 0x3a], al
mov edx, 1
mov rax, qword [0x1402caf68]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], 0x10d
call sym.SystemInformer.exe_Ordinal_1375
mov rcx, rax
call sym.SystemInformer.exe_Ordinal_1238
xor r8d, r8d
mov r9, qword [rax + 8]
mov rcx, qword [0x1402c8e08]
mov edx, 0xc
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x1402caf84]
lea r8, [rsp + 0x70]
mov r9d, 0x200
mov qword [rsp + 0x60], rax
mov edx, 1
mov dword [rsp + 0x50], 0x10009
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], rbx
call sym.SystemInformer.exe_Ordinal_1380
xor r8d, r8d
test al, al
je 0x140110926
lea r9, [rsp + 0x70]
jmp 0x140110957
mov eax, dword [0x1402caf84]
lea rcx, [rsp + 0x30]
mov edx, 1
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], 0x10009
call sym.SystemInformer.exe_Ordinal_1375
mov rcx, rax
call sym.SystemInformer.exe_Ordinal_1238
xor r8d, r8d
mov r9, qword [rax + 8]
mov rcx, qword [0x1402c8e20]
mov edx, 0xc
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [0x1402caf70]
lea r8, [rsp + 0x70]
mov r9d, 0x200
mov qword [rsp + 0x60], rax
mov edx, 1
mov dword [rsp + 0x50], 0xd
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], rbx
call sym.SystemInformer.exe_Ordinal_1380
xor r8d, r8d
test al, al
je 0x1401109ab
lea r9, [rsp + 0x70]
jmp 0x1401109ec
movzx eax, byte [0x1402c29e0]
lea rcx, [rsp + 0x30]
mov byte [rsp + 0x3a], al
mov edx, 1
mov rax, qword [0x1402caf70]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], 0x10d
call sym.SystemInformer.exe_Ordinal_1375
mov rcx, rax
call sym.SystemInformer.exe_Ordinal_1238
xor r8d, r8d
mov r9, qword [rax + 8]
mov rcx, qword [0x1402c8ee0]
mov edx, 0xc
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x1402caf88]
lea r8, [rsp + 0x70]
mov r9d, 0x200
mov qword [rsp + 0x60], rax
mov edx, 1
mov dword [rsp + 0x50], 0x10009
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], rbx
call sym.SystemInformer.exe_Ordinal_1380
xor r8d, r8d
test al, al
je 0x140110a3e
lea r9, [rsp + 0x70]
jmp 0x140110a74
mov eax, dword [0x1402caf88]
lea rcx, ds:[rsp + 0x30]
mov edx, 1
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], 0x10009
call sym.SystemInformer.exe_Ordinal_1375
mov rcx, rax
call sym.SystemInformer.exe_Ordinal_1238
xor r8d, r8d
mov r9, qword [rax + 8]
mov rcx, qword [0x1402c8e60]
mov edx, 0xc
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [0x1402caf78]
lea r8, [rsp + 0x70]
mov r9d, 0x200
mov qword [rsp + 0x60], rax
mov edx, 1
mov dword [rsp + 0x50], 0xd
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x20], rbx
call sym.SystemInformer.exe_Ordinal_1380
xor r8d, r8d
test al, al
je 0x140110acb
lea r9, [rsp + 0x70]
jmp 0x140110b0c
movzx eax, byte [0x1402c29e0]
lea rcx, [rsp + 0x30]
mov byte [rsp + 0x3a], al
mov edx, 1
mov rax, qword [0x1402caf78]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], 0x10d
call sym.SystemInformer.exe_Ordinal_1375
mov rcx, rax
call sym.SystemInformer.exe_Ordinal_1238
xor r8d, r8d
mov r9, qword [rax + 8]
mov rcx, qword [0x1402c8e40]
mov edx, 0xc
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.1401e5e40
mov rbx, qword [rsp + 0x290]
add rsp, 0x280
pop rbp
ret