Function at 0x180001396
Capabilities:
Get graphical window text

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x148
lea r14, [rsp + 0x2c]
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov dword [r14], 0x34d462
mov eax, dword [r14]
lea ecx, [rax + 3]
test eax, eax
cmovns ecx, eax
and ecx, 0xfffffffc
sub eax, ecx
mov dword [rsp + 0x38], eax
mov edi, 0x4f0bd571
mov eax, 3
mov ecx, 0x31001da3
mov edx, 0x1e03fea8
mov ebp, 0x99c8ad56
mov ebx, 0x2c30681e
cmp edi, 0x31001da2
jg 0x180001426
cmp edi, 0x22e91afb
jg 0x180001451
cmp edi, 0x99c8ad56
je 0x1800014b0
cmp edi, 0x1e03fea8
je 0x1800014cc
cmp edi, 0x96890e5
jne 0x1800013f1
jmp 0x180001544
cmp edi, 0x677c5f1b
jg 0x180001477
cmp edi, 0x31001da3
je 0x1800014de
cmp edi, 0x4f0bd571
jne 0x1800013f1
cmp dword [rsp + 0x38], 0
mov edi, 0x677c5f1c
cmove edi, edx
jmp 0x1800013f1
cmp edi, 0x22e91afc
je 0x1800014fb
cmp edi, 0x2c30681e
jne 0x1800013f1
add dword [rsp + 0x2c], 0x166
mov edi, 0x96890e5
jmp 0x1800013f1
cmp edi, 0x677c5f1c
je 0x18000151b
cmp edi, 0x6c48473d
jne 0x1800013f1
mov edi, dword [rsp + 0x30]
lea esi, [rdi + 3]
test edi, edi
cmovns esi, edi
and esi, 0xfffffffc
sub edi, esi
cmp edi, 2
mov edi, 0x22e91afc
cmove edi, ebx
jmp 0x1800013f1
imul edi, dword [rsp + 0x30], 0xb3
add edi, 0x7d45
mov dword [rsp + 0x2c], edi
mov edi, 0x96890e5
jmp 0x1800013f1
add dword [rsp + 0x2c], 0xb3
mov edi, 0x96890e5
jmp 0x1800013f1
mov edi, dword [rsp + 0x2c]
add edi, dword [rsp + 0x2c]
mov esi, 0xcf
sub esi, edi
mov dword [rsp + 0x2c], esi
mov edi, 0x96890e5
jmp 0x1800013f1
mov edi, dword [rsp + 0x2c]
lea esi, [rdi + rax]
test edi, edi
cmovns esi, edi
and esi, 0xfffffffc
sub edi, esi
cmp edi, eax
mov edi, 0x96890e5
cmove edi, ecx
jmp 0x1800013f1
mov edi, dword [rsp + 0x2c]
lea esi, [rdi + 3]
test edi, edi
cmovns esi, edi
and esi, 0xfffffffc
sub edi, esi
cmp edi, 1
mov edi, dword [rsp + 0x2c]
mov dword [rsp + 0x30], edi
mov edi, 0x6c48473d
cmove edi, ebp
jmp 0x1800013f1
mov rax, qword [rsp + 0x40]
call fcn.18000a6c0
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov dword [rsp + 0x2c], 0x34d462
mov eax, dword [rsp + 0x2c]
lea ecx, [rax + 3]
test eax, eax
cmovns ecx, eax
and ecx, 0xfffffffc
sub eax, ecx
mov dword [rsp + 0x38], eax
mov edi, 0x4f0bd571
mov eax, 3
mov ecx, 0x31001da3
mov edx, 0x1e03fea8
mov ebp, 0x99c8ad56
mov ebx, 0x2c30681e
cmp edi, 0x31001da2
jg 0x1800015c8
cmp edi, 0x22e91afb
jg 0x1800015f3
cmp edi, 0x99c8ad56
je 0x180001652
cmp edi, 0x1e03fea8
je 0x18000166e
cmp edi, 0x96890e5
jne 0x180001593
jmp 0x1800016e6
cmp edi, 0x677c5f1b
jg 0x180001619
cmp edi, 0x31001da3
je 0x180001680
cmp edi, 0x4f0bd571
jne 0x180001593
cmp dword [rsp + 0x38], 0
mov edi, 0x677c5f1c
cmove edi, edx
jmp 0x180001593
cmp edi, 0x22e91afc
je 0x18000169d
cmp edi, 0x2c30681e
jne 0x180001593
add dword [rsp + 0x2c], 0xa6b0ded4
mov edi, 0x96890e5
jmp 0x180001593
cmp edi, 0x677c5f1c
je 0x1800016bd
cmp edi, 0x6c48473d
jne 0x180001593
mov edi, dword [rsp + 0x30]
lea esi, [rdi + 3]
test edi, edi
cmovns esi, edi
and esi, 0xfffffffc
sub edi, esi
cmp edi, 2
mov edi, 0x22e91afc
cmove edi, ebx
jmp 0x180001593
imul edi, dword [rsp + 0x30], 0x53586f6a
add edi, 0x855d1800
mov dword [rsp + 0x2c], edi
mov edi, 0x96890e5
jmp 0x180001593
add dword [rsp + 0x2c], 0x53586f6a
mov edi, 0x96890e5
jmp 0x180001593
mov edi, dword [rsp + 0x2c]
add edi, dword [rsp + 0x2c]
mov esi, 0x53586f86
sub esi, edi
mov dword [rsp + 0x2c], esi
mov edi, 0x96890e5
jmp 0x180001593
mov edi, dword [rsp + 0x2c]
lea esi, [rdi + rax]
test edi, edi
cmovns esi, edi
and esi, 0xfffffffc
sub edi, esi
cmp edi, eax
mov edi, 0x96890e5
cmove edi, ecx
jmp 0x180001593
mov edi, dword [rsp + 0x2c]
lea esi, [rdi + 3]
test edi, edi
cmovns esi, edi
and esi, 0xfffffffc
sub edi, esi
cmp edi, 1
mov edi, dword [rsp + 0x2c]
mov dword [rsp + 0x30], edi
mov edi, 0x6c48473d
cmove edi, ebp
jmp 0x180001593
lea rsi, [rsp + 0x40]
mov rax, qword [rsi]
mov eax, dword [0x180033018]
mov dword [rsp + 0x3c], eax
mov eax, 0x16dff826
lea rbx, [0x180029070]
mov r15, qword [sym.imp.USER32.dll_GetClassNameA]
mov r12d, 0x5835a486
movabs r14, 0x3cdae84499633583
mov r13d, 0xb022d067
mov edi, 0xd75ea95e
cmp eax, 0xd75ea95e
je 0x18000192d
cmp eax, 0x7c8b0a5f
je 0x18000174e
cmp eax, 0x16dff826
jne 0x180001726
cmp dword [rsp + 0x3c], 0
mov eax, 0x7c8b0a5f
cmove eax, edi
jmp 0x180001726
xor ecx, ecx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.USER32.dll_SystemParametersInfoA]
xor ecx, ecx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.USER32.dll_SendMessageA]
mov byte [rsp + 0x30], 4
mov byte [rsp + 0x31], 0x6c
mov byte [rsp + 0x32], 0x74
mov byte [rsp + 0x33], 0x65
mov byte [rsp + 0x34], 0x43
mov byte [rsp + 0x35], 8
mov byte [rsp + 0x36], 0
mov ecx, 0x20efc36a
cmp ecx, 0xf189412f
jg 0x1800017c4
cmp ecx, 0x85f69d9b
je 0x1800018a6
cmp ecx, 0xb022d067
je 0x1800017ec
cmp ecx, 0xd28ed5e7
jne 0x180001799
mov ecx, 0x85f69d9b
jmp 0x180001799
cmp ecx, 0xf1894130
je 0x1800017f5
cmp ecx, 0x5835a486
je 0x18000180e
cmp ecx, 0x20efc36a
jne 0x180001799
cmp byte [rsp + 0x36], 0
mov ecx, 0x85f69d9b
cmove ecx, r13d
jmp 0x180001799
mov ecx, 0xf1894130
xor eax, eax
jmp 0x180001799
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x40]
cmp rcx, 6
mov ecx, 0xd28ed5e7
cmovb ecx, r12d
jmp 0x180001799
mov rax, qword [rsp + 0x40]
movzx ecx, byte [rsp + rax + 0x30]
mov edx, ecx
shl edx, 5
lea ebp, [rdx + rcx*2]
lea ecx, [rdx + rcx*2]
add ecx, 0xfffffef0
movsxd rcx, ecx
imul rcx, rcx, 0xffffffff81020409
shr rcx, 0x20
add ecx, ebp
add ecx, 0xfffffef0
mov edx, ecx
shr edx, 0x1f
sar ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
lea edx, [rcx + rbp]
add edx, 0xfffffef0
add ecx, ebp
add ecx, 0xffffff6f
movsxd rcx, ecx
imul rcx, rcx, 0xffffffff81020409
shr rcx, 0x20
add ecx, edx
add ecx, 0x7f
mov ebp, ecx
shr ebp, 0x1f
shr ecx, 6
add ecx, ebp
mov ebp, ecx
shl ebp, 7
sub ecx, ebp
add ecx, edx
add ecx, 0x7f
mov byte [rsp + rax + 0x30], cl
mov rax, qword [rsp + 0x40]
sub rax, r14
add rax, r14
inc rax
mov ecx, 0xf1894130
jmp 0x180001799
mov rcx, rsi
mov edx, 0x100
lea r8, [rsp + 0x30]
call qword [sym.imp.SHLWAPI.dll_wnsprintfA]
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetWindowDC]
xor ecx, ecx
mov rdx, rbx
mov r8, rbx
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxA]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, 0x6a
call qword [sym.imp.USER32.dll_GetSysColor]
mov ecx, 0x762
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x100
call qword [sym.imp.USER32.dll_GetWindowTextA]
xor ecx, ecx
xor edx, edx
mov r8d, 0xf6a
xor r9d, r9d
call qword [sym.imp.USER32.dll_SetTimer]
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x100
call r15
mov eax, 0xd75ea95e
jmp 0x180001726
lea r14, [rsp + 0x2c]
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x40]
mov dword [rsp + 0x2c], 0x34d462
mov eax, dword [rsp + 0x2c]
lea ecx, [rax + 3]
test eax, eax
cmovns ecx, eax
and ecx, 0xfffffffc
sub eax, ecx
mov dword [rsp + 0x38], eax
mov edi, 0x4f0bd571
mov eax, 3
mov ecx, 0x31001da3
mov edx, 0x1e03fea8
mov ebp, 0x99c8ad56
mov ebx, 0x2c30681e
cmp edi, 0x31001da2
jg 0x1800019ac
cmp edi, 0x22e91afb
jg 0x1800019d7
cmp edi, 0x99c8ad56
je 0x180001a36
cmp edi, 0x1e03fea8
je 0x180001a4f
cmp edi, 0x96890e5
jne 0x180001977
jmp 0x180001ac4
cmp edi, 0x677c5f1b
jg 0x1800019fd
cmp edi, 0x31001da3
je 0x180001a5e
cmp edi, 0x4f0bd571
jne 0x180001977
cmp dword [rsp + 0x38], 0
mov edi, 0x677c5f1c
cmove edi, edx
jmp 0x180001977
cmp edi, 0x22e91afc
je 0x180001a7b
cmp edi, 0x2c30681e
jne 0x180001977
add dword [rsp + 0x2c], 0x96
mov edi, 0x96890e5
jmp 0x180001977
cmp edi, 0x677c5f1c
je 0x180001a9b
cmp edi, 0x6c48473d
jne 0x180001977
mov edi, dword [rsp + 0x30]
lea esi, [rdi + 3]
test edi, edi
cmovns esi, edi
and esi, 0xfffffffc
sub edi, esi
cmp edi, 2
mov edi, 0x22e91afc
cmove edi, ebx
jmp 0x180001977
imul edi, dword [rsp + 0x30], 0x4b
add edi, 0x1615
mov dword [rsp + 0x2c], edi
mov edi, 0x96890e5
jmp 0x180001977
add dword [rsp + 0x2c], 0x4b
mov edi, 0x96890e5
jmp 0x180001977
mov edi, dword [rsp + 0x2c]
add edi, dword [rsp + 0x2c]
mov esi, 0x67
sub esi, edi
mov dword [rsp + 0x2c], esi
mov edi, 0x96890e5
jmp 0x180001977
mov edi, dword [rsp + 0x2c]
lea esi, [rdi + rax]
test edi, edi
cmovns esi, edi
and esi, 0xfffffffc
sub edi, esi
cmp edi, eax
mov edi, 0x96890e5
cmove edi, ecx
jmp 0x180001977
mov edi, dword [rsp + 0x2c]
lea esi, [rdi + 3]
test edi, edi
cmovns esi, edi
and esi, 0xfffffffc
sub edi, esi
cmp edi, 1
mov edi, dword [rsp + 0x2c]
mov dword [rsp + 0x30], edi
mov edi, 0x6c48473d
cmove edi, ebp
jmp 0x180001977
mov rax, qword [rsp + 0x40]
mov byte [rsp + 0x40], 0x6b
mov al, 0x4d
mov byte [rsp + 0x41], al
mov byte [rsp + 0x42], al
mov byte [rsp + 0x43], 0x21
mov al, 0x72
mov byte [rsp + 0x44], al
mov byte [rsp + 0x45], 0x31
mov byte [rsp + 0x46], 0x6f
mov byte [rsp + 0x47], 0x28
mov byte [rsp + 0x48], 0x47
mov byte [rsp + 0x49], al
mov cl, 9
mov byte [rsp + 0x4a], cl
mov byte [rsp + 0x4b], 0x40
mov byte [rsp + 0x4c], al
mov byte [rsp + 0x4d], cl
mov byte [rsp + 0x4e], 6
mov byte [rsp + 0x4f], al
mov byte [rsp + 0x50], cl
mov byte [rsp + 0x51], 0x1f
mov byte [rsp + 0x52], 0
mov ebp, 0x518e9004
mov eax, 0x47ceb4b2
movabs rcx, 0x8af25411c63cd1b3
mov edx, 0xa70858ab
cmp ebp, 0x393b4dea
jg 0x180001b65
cmp ebp, 0x9a1eac24
je 0x180001b90
cmp ebp, 0xa70858ab
je 0x180001ba8
cmp ebp, 0x27fbc4
jne 0x180001b3e
mov ebp, 0x393b4deb
jmp 0x180001b3e
cmp ebp, 0x393b4deb
je 0x180001c48
cmp ebp, 0x47ceb4b2
je 0x180001bb1
cmp ebp, 0x518e9004
jne 0x180001b3e
cmp byte [rsp + 0x52], 0
mov ebp, 0x393b4deb
cmove ebp, edx
jmp 0x180001b3e
mov qword [rsp + 0x30], rbx
mov rbp, qword [rsp + 0x30]
cmp rbp, 0x12
mov ebp, 0x27fbc4
cmovb ebp, eax
jmp 0x180001b3e
mov ebp, 0x9a1eac24
xor ebx, ebx
jmp 0x180001b3e
mov rbp, qword [rsp + 0x30]
movzx ebx, byte [rsp + rbp + 0x40]
lea edi, [rbx + rbx*4]
lea esi, [rbx + rdi*8]
lea ebx, [rbx + rdi*8]
add ebx, 0xfffffb09
movsxd rbx, ebx
imul rbx, rbx, 0xffffffff81020409
shr rbx, 0x20
add ebx, esi
add ebx, 0xfffffb09
mov edi, ebx
shr edi, 0x1f
sar ebx, 6
add ebx, edi
mov edi, ebx
shl edi, 7
sub ebx, edi
lea edi, [rbx + rsi]
add edi, 0xfffffb09
add ebx, esi
add ebx, 0xfffffb88
movsxd rbx, ebx
imul rbx, rbx, 0xffffffff81020409
shr rbx, 0x20
add ebx, edi
add ebx, 0x7f
mov esi, ebx
shr esi, 0x1f
shr ebx, 6
add ebx, esi
mov esi, ebx
shl esi, 7
sub ebx, esi
add ebx, edi
add ebx, 0x7f
mov byte [rsp + rbp + 0x40], bl
mov rbp, qword [rsp + 0x30]
sub rbp, rcx
lea rbx, [rcx + rbp]
inc rbx
mov ebp, 0x9a1eac24
jmp 0x180001b3e
lea rsi, [rsp + 0x40]
mov rcx, rsi
call fcn.180001e07
mov qword [rsi], r14
mov rax, qword [rsi]
mov dword [rsp + 0x2c], 0x34d462
mov eax, dword [rsp + 0x2c]
lea ecx, [rax + 3]
test eax, eax
cmovns ecx, eax
and ecx, 0xfffffffc
sub eax, ecx
mov dword [rsp + 0x38], eax
mov edi, 0x4f0bd571
mov eax, 3
mov ecx, 0x31001da3
mov edx, 0x1e03fea8
mov ebp, 0x99c8ad56
mov ebx, 0x2c30681e
cmp edi, 0x31001da2
jg 0x180001ccb
cmp edi, 0x22e91afb
jg 0x180001cf6
cmp edi, 0x99c8ad56
je 0x180001d55
cmp edi, 0x1e03fea8
je 0x180001d71
cmp edi, 0x96890e5
jne 0x180001c96
jmp 0x180001de9
cmp edi, 0x677c5f1b
jg 0x180001d1c
cmp edi, 0x31001da3
je 0x180001d83
cmp edi, 0x4f0bd571
jne 0x180001c96
cmp dword [rsp + 0x38], 0
mov edi, 0x677c5f1c
cmove edi, edx
jmp 0x180001c96
cmp edi, 0x22e91afc
je 0x180001da0
cmp edi, 0x2c30681e
jne 0x180001c96
add dword [rsp + 0x2c], 0x1160
mov edi, 0x96890e5
jmp 0x180001c96
cmp edi, 0x677c5f1c
je 0x180001dc0
cmp edi, 0x6c48473d
jne 0x180001c96
mov edi, dword [rsp + 0x30]
lea esi, [rdi + 3]
test edi, edi
cmovns esi, edi
and esi, 0xfffffffc
sub edi, esi
cmp edi, 2
mov edi, 0x22e91afc
cmove edi, ebx
jmp 0x180001c96
imul edi, dword [rsp + 0x30], 0x8b0
add edi, 0x4b791c
mov dword [rsp + 0x2c], edi
mov edi, 0x96890e5
jmp 0x180001c96
add dword [rsp + 0x2c], 0x8b0
mov edi, 0x96890e5
jmp 0x180001c96
mov edi, dword [rsp + 0x2c]
add edi, dword [rsp + 0x2c]
mov esi, 0x8cc
sub esi, edi
mov dword [rsp + 0x2c], esi
mov edi, 0x96890e5
jmp 0x180001c96
mov edi, dword [rsp + 0x2c]
lea esi, [rdi + rax]
test edi, edi
cmovns esi, edi
and esi, 0xfffffffc
sub edi, esi
cmp edi, eax
mov edi, 0x96890e5
cmove edi, ecx
jmp 0x180001c96
mov edi, dword [rsp + 0x2c]
lea esi, [rdi + 3]
test edi, edi
cmovns esi, edi
and esi, 0xfffffffc
sub edi, esi
cmp edi, 1
mov edi, dword [rsp + 0x2c]
mov dword [rsp + 0x30], edi
mov edi, 0x6c48473d
cmove edi, ebp
jmp 0x180001c96
mov rax, qword [rsp + 0x40]
mov eax, 1
add rsp, 0x148
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret