Function at 0x140009d00
Capabilities:
Get graphical window text

Disassembly:
push rbp
push r12
push r13
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov rax, qword [0x140061040]
xor rax, rsp
mov qword [rbp + 0x80], rax
xor r12d, r12d
mov qword [rsp + 0x38], rcx
mov r13, rcx
mov qword [rsp + 0x50], r12
xorps xmm0, xmm0
mov qword [rsp + 0x58], r12
movups xmmword [rsp + 0x40], xmm0
lea ecx, [r12 + 0x20]
call fcn.14004e7f0
movups xmm0, xmmword [str.img_in_match.png]
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rax
movsd xmm2, qword [0x1400588c8]
mov rcx, r13
mov qword [rsp + 0x50], 0x10
mov qword [rsp + 0x58], 0x1f
movups xmmword [rax], xmm0
mov byte [rax + 0x10], r12b
call fcn.1400028c0
test al, al
je 0x14000a657
mov qword [rsp + 0x1c8], rbx
lea rdx, [rbp - 0x80]
mov r8d, pe_nt_image_headers64
mov qword [rsp + 0x1d0], rsi
mov rcx, r13
call qword [sym.imp.USER32.dll_GetWindowTextA]
xorps xmm0, xmm0
lea rax, [rbp - 0x80]
movups xmmword [rsp + 0x60], xmm0
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], r12b
jne 0x140009dc5
movabs rbx, 0x7fffffffffffffff
cmp rsi, rbx
ja 0x14000a673
mov qword [rsp + 0x190], r15
cmp rsi, 0xf
ja 0x140009e27
mov r8, rsi
mov qword [rsp + 0x70], rsi
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x78], 0xf
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rsi + 0x60], r12b
mov r15, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x70]
mov r12, qword [rsp + 0x60]
jmp 0x140009ebc
mov r15, rsi
or r15, 0xf
cmp r15, rbx
jbe 0x140009e64
movabs rax, 0x8000000000000000
mov r15, rbx
add rax, 0x27
mov rcx, rax
call fcn.14004e7f0
test rax, rax
je 0x14000a630
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x140009e99
mov eax, 0x16
cmp r15, rax
cmovb r15, rax
lea rcx, [r15 + 1]
cmp rcx, 0x1000
jb 0x140009e8c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000a679
jmp 0x140009e44
test rcx, rcx
je 0x140009e99
call fcn.14004e7f0
mov r12, rax
mov r8, rsi
mov qword [rsp + 0x60], r12
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x70], rsi
mov rcx, r12
mov qword [rsp + 0x78], r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [r12 + rsi], 0
mov qword [rsp + 0x1d8], rdi
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x198], r14
call fcn.140001c40
mov rdi, qword [rsp + 0x30]
movabs rax, 0x7fffffffc46535fe
cmp rdi, rax
jg 0x140009ef3
add rdi, 0x3b9aca00
jmp 0x140009ef6
mov rdi, rbx
movabs r14, 0x4e94914effff
movabs r13, 0x431bde82d7b634db
nop word [rax + rax]
lea rcx, [rsp + 0x30]
call fcn.140001c40
mov rax, qword [rsp + 0x30]
cmp rdi, rax
je 0x140009f69
jl 0x140009f69
mov rcx, rdi
sub rcx, rax
cmp rcx, r14
jg 0x140009f5d
mov rax, r13
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x140009f54
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x140009f10
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x140009f10
mov r13, qword [rsp + 0x38]
lea rdi, [rsp + 0x60]
cmp r15, 0xf
cmova rdi, r12
cmp rsi, 6
jb 0x140009fd0
lea r14, [rsi + rdi]
mov edx, 0x47
lea r8, [r14 - 5]
mov rcx, rdi
sub r8, rdi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140009fd0
nop
cmp dword [rax], 0x676f6f47
jne 0x140009fb4
cmp word [rax + 4], 0x656c
je 0x14000a0dd
inc rax
lea r8, [r14 - 5]
sub r8, rax
mov rcx, rax
mov edx, 0x47
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140009fa0
cmp r15, 0xf
lea rdi, [rsp + 0x60]
cmova rdi, r12
cmp rsi, 5
jb 0x14000a02e
lea r14, [rdi + rsi]
mov edx, 0x4f
lea r8, [r14 - 4]
mov rcx, rdi
sub r8, rdi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x14000a02e
cmp dword [rax], 0x7265704f
jne 0x14000a012
cmp byte [rax + 4], 0x61
je 0x14000a24d
inc rax
lea r8, [r14 - 4]
sub r8, rax
mov rcx, rax
mov edx, 0x4f
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x14000a000
cmp r15, 0xf
lea rdi, [rsp + 0x60]
cmova rdi, r12
cmp rsi, 5
jb 0x14000a091
lea r8, [rdi - 4]
mov edx, 0x42
add r8, rsi
mov rcx, rdi
sub r8, rdi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x14000a091
nop dword [rax]
cmp dword [rax], 0x76617242
jne 0x14000a072
cmp byte [rax + 4], 0x65
je 0x14000a345
inc rax
lea r8, [rdi - 4]
add r8, rsi
mov edx, 0x42
sub r8, rax
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x14000a060
mov edx, 0x1c0
mov dword [rsp + 0x20], 0x77
mov r9d, edx
mov r8d, 0x77
mov rcx, r13
call fcn.140002b10
lea rcx, [rsp + 0x30]
call fcn.140001c40
mov rdi, qword [rsp + 0x30]
movabs rcx, 0x7ffffffff4143dfe
cmp rdi, rcx
jg 0x14000a4b3
add rdi, 0xbebc200
jmp 0x14000a4b6
sub rax, rdi
cmp rax, 0xffffffffffffffff
je 0x140009fd0
mov edx, 0x1c0
mov dword [rsp + 0x20], 0x78
mov r9d, edx
mov r8d, 0x78
mov rcx, r13
call fcn.140002b10
lea rcx, [rsp + 0x30]
call fcn.140001c40
mov rdi, qword [rsp + 0x30]
movabs rcx, 0x7ffffffff4143dfe
cmp rdi, rcx
jg 0x14000a12f
add rdi, 0xbebc200
jmp 0x14000a132
mov rdi, rbx
movabs r14, 0x4e94914effff
movabs r13, 0x431bde82d7b634db
lea rcx, [rsp + 0x30]
call fcn.140001c40
mov rax, qword [rsp + 0x30]
cmp rdi, rax
je 0x14000a19f
jl 0x14000a19f
mov rcx, rdi
sub rcx, rax
cmp rcx, r14
jg 0x14000a193
mov rax, r13
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14000a18a
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14000a146
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x14000a146
mov rcx, qword [rsp + 0x38]
mov edi, 0x12c
mov esi, 0x1d6
mov dword [rsp + 0x20], edi
mov r9d, esi
mov r8d, edi
mov edx, esi
call fcn.140002b10
lea rcx, [rsp + 0x30]
call fcn.140001c40
mov rax, qword [rsp + 0x30]
movabs rcx, 0x7fffffffe2329afe
cmp rax, rcx
jg 0x14000a1e4
lea rbx, [rax + 0x1dcd6500]
lea rcx, [rsp + 0x30]
call fcn.140001c40
mov rax, qword [rsp + 0x30]
cmp rbx, rax
je 0x14000a23d
jl 0x14000a23d
mov rcx, rbx
sub rcx, rax
cmp rcx, r14
jg 0x14000a231
mov rax, r13
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14000a228
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14000a1e4
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x14000a1e4
mov r13, qword [rsp + 0x38]
mov r9d, 0xc8
jmp 0x14000a5e3
sub rax, rdi
cmp rax, 0xffffffffffffffff
je 0x14000a02e
mov edx, 0x1c0
mov dword [rsp + 0x20], 0x78
mov r9d, edx
mov r8d, 0x78
mov rcx, r13
call fcn.140002b10
lea rcx, [rsp + 0x30]
call fcn.140001c40
mov rax, qword [rsp + 0x30]
movabs rcx, 0x7ffffffff4143dfe
cmp rax, rcx
jg 0x14000a29d
lea rbx, [rax + 0xbebc200]
movabs r14, 0x4e94914effff
movabs r13, 0x431bde82d7b634db
lea rcx, [rsp + 0x30]
call fcn.140001c40
mov rax, qword [rsp + 0x30]
cmp rbx, rax
je 0x14000a30a
jl 0x14000a30a
mov rcx, rbx
sub rcx, rax
cmp rcx, r14
jg 0x14000a2fe
mov rax, r13
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14000a2f5
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14000a2b1
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x14000a2b1
mov r13, qword [rsp + 0x38]
mov edi, 0x128
mov esi, 0x1bb
mov dword [rsp + 0x20], edi
mov r9d, esi
mov r8d, edi
mov edx, esi
mov rcx, r13
call fcn.140002b10
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x38], 0x1f4
call fcn.14000b220
jmp 0x14000a5dd
sub rax, rdi
cmp rax, 0xffffffffffffffff
je 0x14000a091
mov edx, 0x1c0
mov dword [rsp + 0x20], 0x78
mov r9d, edx
mov r8d, 0x78
mov rcx, r13
call fcn.140002b10
lea rcx, [rsp + 0x30]
call fcn.140001c40
mov rdi, qword [rsp + 0x30]
movabs rcx, 0x7ffffffff4143dfe
cmp rdi, rcx
jg 0x14000a397
add rdi, 0xbebc200
jmp 0x14000a39a
mov rdi, rbx
movabs r14, 0x4e94914effff
movabs r13, 0x431bde82d7b634db
nop
lea rcx, [rsp + 0x30]
call fcn.140001c40
mov rax, qword [rsp + 0x30]
cmp rdi, rax
je 0x14000a409
jl 0x14000a409
mov rcx, rdi
sub rcx, rax
cmp rcx, r14
jg 0x14000a3fd
mov rax, r13
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14000a3f4
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14000a3b0
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x14000a3b0
mov rcx, qword [rsp + 0x38]
mov edi, 0x128
mov esi, 0x1a7
mov dword [rsp + 0x20], edi
mov r9d, esi
mov r8d, edi
mov edx, esi
call fcn.140002b10
lea rcx, [rsp + 0x30]
call fcn.140001c40
mov rax, qword [rsp + 0x30]
movabs rcx, 0x7fffffffe2329afe
cmp rax, rcx
jg 0x14000a450
lea rbx, [rax + 0x1dcd6500]
nop
lea rcx, [rsp + 0x30]
call fcn.140001c40
mov rax, qword [rsp + 0x30]
cmp rbx, rax
je 0x14000a4a9
jl 0x14000a4a9
mov rcx, rbx
sub rcx, rax
cmp rcx, r14
jg 0x14000a49d
mov rax, r13
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14000a494
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14000a450
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x14000a450
mov r13, qword [rsp + 0x38]
jmp 0x14000a5dd
mov rdi, rbx
movabs r14, 0x4e94914effff
movabs r13, 0x431bde82d7b634db
nop word [rax + rax]
lea rcx, [rsp + 0x30]
call fcn.140001c40
mov rax, qword [rsp + 0x30]
cmp rdi, rax
je 0x14000a529
jl 0x14000a529
mov rcx, rdi
sub rcx, rax
cmp rcx, r14
jg 0x14000a51d
mov rax, r13
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14000a514
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14000a4d0
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x14000a4d0
mov r13, qword [rsp + 0x38]
mov esi, 0x1a9
mov edi, 0x125
mov dword [rsp + 0x30], esi
mov r9d, esi
mov dword [rsp + 0x20], edi
mov r8d, edi
mov edx, esi
mov rcx, r13
call fcn.140002b10
lea rcx, [rsp + 0x38]
call fcn.140001c40
mov rax, qword [rsp + 0x38]
movabs rcx, 0x7fffffffe2329afe
cmp rax, rcx
jg 0x14000a575
lea rbx, [rax + 0x1dcd6500]
movabs rsi, 0x431bde82d7b634db
nop
lea rcx, [rsp + 0x38]
call fcn.140001c40
mov rax, qword [rsp + 0x38]
cmp rbx, rax
je 0x14000a5d9
jl 0x14000a5d9
mov rcx, rbx
sub rcx, rax
cmp rcx, r14
jg 0x14000a5cd
mov rax, rsi
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14000a5c4
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14000a580
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x14000a580
mov esi, dword [rsp + 0x30]
mov r9d, 0xe6
mov r8d, edi
mov dword [rsp + 0x20], edi
mov edx, esi
mov rcx, r13
call fcn.140002b10
mov r14, qword [rsp + 0x198]
mov rdi, qword [rsp + 0x1d8]
cmp r15, 0xf
jbe 0x14000a63f
lea rdx, [r15 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x14000a637
mov r12, qword [r12 - 8]
add rdx, 0x27
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a637
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.14004e904
mov r15, qword [rsp + 0x190]
mov rbx, qword [rsp + 0x1c8]
mov rsi, qword [rsp + 0x1d0]
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.14004e7d0
add rsp, 0x1a0
pop r13
pop r12
pop rbp
ret
call fcn.140001c20
int3
call fcn.140001b80
int3