Function at 0x1800b0f80
Capabilities:
Get graphical window text
Read .ini file

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x200
lea rbp, [rsp + 0x20]
mov qword [rbp + 0x60], 0xfffffffffffffffe
mov qword [rbp + 0x230], rbx
mov rax, qword [0x1801dc960]
xor rax, rbp
mov qword [rbp + 0x1d0], rax
mov r12, rdx
mov rdi, rcx
mov edx, 0x5655
lea rcx, str.line:_d__MyGetResult
call fcn.18005cd20
lea rdx, [sym.vrvhook64.dll_MyGetResult]
lea rcx, [0x18028d500]
call fcn.18000dae0
mov rsi, rax
test rax, rax
jne 0x1800b0ff4
mov eax, 0x8000ffff
jmp 0x1800b1537
mov rcx, rax
call fcn.18000d7e0
mov rbx, rax
cmp dword [0x18025caa4], 0
jne 0x1800b1015
mov rdx, r12
mov rcx, rdi
call rbx
jmp 0x1800b1537
mov rcx, rsi
call fcn.180083ad0
test eax, eax
je 0x1800b102e
mov rdx, r12
mov rcx, rdi
call rbx
jmp 0x1800b1537
mov rdx, r12
mov rcx, rdi
call rbx
mov ebx, eax
test eax, eax
js 0x1800b1537
cmp dword [0x180250e70], 0
je 0x1800b1537
cmp dword [0x1802633e4], 0
jne 0x1800b1537
lea rdx, str._OUTLOOK.EXE_
lea rcx, [0x18025c000]
call fcn.18010b680
test eax, eax
jne 0x1800b1078
mov eax, ebx
jmp 0x1800b1537
lea rdx, [0x18025c000]
mov rcx, qword [str._IEXPLORE.EXE_CHROME.EXE_FIREFOX.EXE_360SE.EXE_QQBROWSER.EXE_SOGOUEXPLORER.EXE_BAIDUBROWSER.EXE_HAO123JUZI.EXE_LIEBAO.EXE_TANGO3.EXE_TWCHROME.EXE_THEWORLD.EXE_UCBROWSER.EXE_JUZI.EXE_360CHROME.EXE_115BR.EXE_MAXTHON.EXE_2345EXPLORER.EXE_115CHROME.EXE_HAO123BROWSER.EXE_BAIDUYUNGUANJIA.EXE_BAIDUNETDISK.EXE_360WANGPAN.EXE_WYDRIVE.EXE_FLASHUTIL_ACTIVEX.EXE_FOXMAIL.EXE_OUTLOOK.EXE_WLMAIL.EXE_ECLOUD.EXE_STEEDOS_DESKTOP.EXE_]
call fcn.1800f4d08
test rax, rax
jne 0x1800b1097
mov eax, ebx
jmp 0x1800b1537
call fcn.1800a79a0
xor r14d, r14d
mov esi, r14d
mov byte [rbp + 0xc0], sil
xor edx, edx
mov r8d, 0x103
lea rcx, [rbp + 0xc1]
call fcn.1800f4fb0
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea r15d, [r14 + 1]
test rax, rax
je 0x1800b1118
mov r8d, 0x104
lea rdx, [rbp + 0xc0]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextA]
lea rcx, [rbp + 0xc0]
call fcn.1800fd3f0
lea r8, [rbp + 0xc0]
mov edx, 0x5693
lea rcx, str.line:_d__MyGetResults:
call fcn.18005cd20
lea rcx, [rbp + 0xc0]
call fcn.180064200
test eax, eax
cmovne esi, r15d
mov r13d, r14d
mov r8d, r15d
lea rdx, str.VpDlpSettings.ini
lea rcx, [rbp + 8]
call fcn.18001f690
nop
cmp qword [rax + 0x20], 0x10
jb 0x1800b113c
mov r9, qword [rax + 8]
jmp 0x1800b1140
lea r9, [rax + 8]
xor r8d, r8d
lea rdx, str.FuShun
lea rcx, [0x180162974]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov edi, eax
cmp qword [rbp + 0x28], 0x10
jb 0x1800b1169
mov rcx, qword [rbp + 0x10]
call fcn.1800f4b9c
mov qword [rbp + 0x28], 0xf
mov qword [rbp + 0x20], r14
mov byte [rbp + 0x10], 0
cmp edi, 1
jne 0x1800b11b1
lea rdx, [0x180165a70]
lea rcx, [rbp + 0xc0]
call fcn.1800f4d08
test rax, rax
jne 0x1800b11ae
lea rdx, str.Mail__
lea rcx, [rbp + 0xc0]
call fcn.1800f4d08
test rax, rax
je 0x1800b11b1
mov r13d, r15d
test esi, esi
je 0x1800b11bc
mov eax, ebx
jmp 0x1800b1537
mov esi, r14d
test r13d, r13d
cmovne esi, r15d
mov rcx, qword [r12]
mov qword [rbp], r14
mov rax, qword [rcx]
lea r8, [rbp]
mov edx, 0x80058000
call qword [rax + 0x28]
test eax, eax
jns 0x1800b11e8
mov eax, ebx
jmp 0x1800b1537
mov rcx, qword [0x1801e1b60]
test rcx, rcx
je 0x1800b11f9
mov rax, qword [rcx]
call qword [rax]
mov qword [rbp + 0xb8], 0xf
mov qword [rbp + 0xb0], r14
mov byte [rbp + 0xa0], 0
mov r8d, 0x17
lea rdx, str.MSGTYPERPT_r_nMSGSTRING
lea rcx, [rbp + 0x98]
call fcn.180003700
nop
mov qword [rbp + 0x90], 0xf
mov qword [rbp + 0x88], r14
mov byte [rbp + 0x78], 0
mov r8d, 0x17
lea rdx, str.MSGTYPERPT_r_nMSGSTRING
lea rcx, [rbp + 0x70]
call fcn.180003700
nop
mov rdi, qword [rbp]
movabs r12, 0xffffffffffffff0
test rdi, rdi
jne 0x1800b1271
mov rax, r14
jmp 0x1800b12bf
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x1800b1288
mov rax, r14
jmp 0x1800b12bf
lea r8d, [rax + rax]
cdqe
add rax, rax
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x1800b129d
mov rcx, r12
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.180124410
sub rsp, rcx
lea rcx, [rsp + 0x20]
mov r9d, 3
mov rdx, rdi
call fcn.180015500
mov r8, rax
mov edx, 0x56c2
lea rcx, [0x180165b10]
call fcn.18005cd20
mov rdi, qword [rbp]
test rdi, rdi
jne 0x1800b12e1
mov rax, r14
jmp 0x1800b132f
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x1800b12f8
mov rax, r14
jmp 0x1800b132f
lea r8d, [rax + rax]
cdqe
add rax, rax
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x1800b130d
mov rcx, r12
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.180124410
sub rsp, rcx
lea rcx, [rsp + 0x20]
mov r9d, 3
mov rdx, rdi
call fcn.180015500
mov r9d, esi
mov r8, rax
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x98]
call fcn.18009b1e0
test eax, eax
jne 0x1800b13d4
mov edx, 0x56c6
lea rcx, [0x180165a08]
call fcn.18005cd20
mov r11, qword [0x1801deea0]
test r11, r11
je 0x1800b1372
mov rcx, qword [rbp]
call r11
nop
cmp qword [rbp + 0x90], 0x10
jb 0x1800b1385
mov rcx, qword [rbp + 0x78]
call fcn.1800f4b9c
mov qword [rbp + 0x90], 0xf
mov qword [rbp + 0x88], r14
mov byte [rbp + 0x78], 0
cmp qword [rbp + 0xb8], 0x10
jb 0x1800b13b1
mov rcx, qword [rbp + 0xa0]
call fcn.1800f4b9c
mov qword [rbp + 0xb8], 0xf
mov qword [rbp + 0xb0], r14
mov byte [rbp + 0xa0], 0
mov eax, 0x8000ffff
jmp 0x1800b1537
mov rax, qword [0x1801deea0]
test rax, rax
je 0x1800b13e6
mov rcx, qword [rbp]
call rax
mov rcx, qword [0x1801e1b60]
test rcx, rcx
je 0x1800b13f8
mov rax, qword [rcx]
call qword [rax + 8]
cmp qword [rbp + 0xb0], 0x17
ja 0x1800b1410
cmp qword [rbp + 0x88], 0x17
jbe 0x1800b14dd
lea rax, [rbp + 8]
mov qword [rbp + 0x58], rax
lea rax, [rbp + 0x30]
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x28], 0xf
mov qword [rbp + 0x20], r14
mov byte [rbp + 0x10], 0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 8]
call fcn.1800035e0
nop
mov qword [rbp + 0x50], 0xf
mov qword [rbp + 0x48], r14
mov byte [rbp + 0x38], 0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x30]
call fcn.1800035e0
nop
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x30]
call fcn.18007bdb0
test eax, eax
jne 0x1800b14dd
cmp qword [rbp + 0x90], 0x10
jb 0x1800b1491
mov rcx, qword [rbp + 0x78]
call fcn.1800f4b9c
mov qword [rbp + 0x90], 0xf
mov qword [rbp + 0x88], r14
mov byte [rbp + 0x78], 0
cmp qword [rbp + 0xb8], 0x10
jb 0x1800b14bd
mov rcx, qword [rbp + 0xa0]
call fcn.1800f4b9c
mov qword [rbp + 0xb8], 0xf
mov qword [rbp + 0xb0], r14
mov byte [rbp + 0xa0], 0
mov eax, 0x8000ffff
jmp 0x1800b1537
cmp qword [rbp + 0x90], 0x10
jb 0x1800b14f0
mov rcx, qword [rbp + 0x78]
call fcn.1800f4b9c
mov qword [rbp + 0x90], 0xf
mov qword [rbp + 0x88], r14
mov byte [rbp + 0x78], 0
cmp qword [rbp + 0xb8], 0x10
jb 0x1800b151c
mov rcx, qword [rbp + 0xa0]
call fcn.1800f4b9c
mov qword [rbp + 0xb8], 0xf
mov qword [rbp + 0xb0], r14
mov byte [rbp + 0xa0], 0
mov eax, ebx
mov rcx, qword [rbp + 0x1d0]
xor rcx, rbp
call fcn.1800f4f80
mov rbx, qword [rbp + 0x230]
lea rsp, [rbp + 0x1e0]
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret