Function at 0x1800217b0
Capabilities:
Get graphical window text

Disassembly:
mov r11, rsp
push rbx
push r12
push r13
push r14
push r15
sub rsp, 0x6c0
mov rax, qword [0x1801903f8]
xor rax, rsp
mov qword [rsp + 0x6a0], rax
mov r13, qword [rsp + 0x710]
mov r12, r9
mov r15d, r8d
mov r14, rdx
mov rbx, rcx
test rcx, rcx
je 0x18002212e
test rdx, rdx
je 0x18002212e
mov qword [r11 + 0x18], rbp
xor ebp, ebp
mov qword [r11 - 0x30], rsi
mov qword [r11 - 0x38], rdi
cmp dword [0x1801b0450], ebp
je 0x180021833
mov qword [rsp + 0x20], rcx
lea r9, str._ALI__CheckIMType_____0x_08x
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
call fcn.1800b3b40
lea rdi, str.Tencent_QQBar
mov rsi, r14
mov ecx, reloc.WS2_32.dll_ntohl
repe cmpsw word [rsi], word [rdi]
jne 0x180021914
cmp r15d, 0x3e9
jne 0x180022111
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetParent]
lea rcx, [rsp + 0x72]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x70], bp
mov rdi, rax
call fcn.18007ead0
lea r9, [rsp + 0x70]
mov edx, reloc.WS2_32.dll_listen
mov r8d, 0x104
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rsi, [rsp + 0x70]
lea rdi, [0x1801325a0]
mov ecx, 4
repe cmpsw word [rsi], word [rdi]
je 0x1800218ea
lea rsi, [rsp + 0x70]
lea rdi, [0x180132598]
mov ecx, 4
repe cmpsw word [rsi], word [rdi]
je 0x1800218ea
xor r8d, r8d
mov rcx, rbx
mov dword [r12], 1
lea edx, [r8 + 1]
movabs rbp, 0x100010000
call fcn.18002d5e0
mov qword [r13], rax
jmp 0x180022111
xor r8d, r8d
mov rcx, rbx
mov dword [r12], 0x100
lea edx, [r8 + 1]
movabs rbp, 0x10000010001
call fcn.18002d5e0
mov qword [r13], rax
jmp 0x180022111
lea rdi, str.TXGuiFoundation
mov rsi, r14
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
repe cmpsw word [rsi], word [rdi]
jne 0x180021a02
mov edx, 0xfffffff0
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowLongW]
test eax, 0x30000
je 0x180022111
lea r8, [rsp + 0x40]
mov edx, 1
mov rcx, rbx
mov dword [rsp + 0x40], ebp
call fcn.18002d5e0
mov rsi, rax
test rax, rax
je 0x180022111
cmp dword [rsp + 0x40], 1
jne 0x180022111
lea rcx, [rsp + 0x72]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x70], bp
call fcn.18007ead0
lea rdx, [rsp + 0x70]
mov r8d, 0x104
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rsi, [rsp + 0x70]
lea rdi, str.TXGuiFoundation
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
repe cmpsw word [rsi], word [rdi]
jne 0x180022111
mov eax, dword [0x1801aa48c]
cmp eax, 1
je 0x1800219e7
cmp eax, 0x11
je 0x1800219e7
cmp eax, 0x10
jne 0x180022111
mov dword [r12], eax
movabs rbp, 0x1000010004
mov qword [r13], rbx
jmp 0x180022111
mov dword [r12], 1
movabs rbp, 0x100010003
mov qword [r13], rbx
jmp 0x180022111
lea rdi, str.Tencent_UserBar_Class_Ver1.0
mov rsi, r14
mov ecx, 0x1d
repe cmpsw word [rsi], word [rdi]
je 0x1800220b4
lea rdi, str.AfxWnd42
mov rsi, r14
mov ecx, 9
repe cmpsw word [rsi], word [rdi]
je 0x1800220b4
lea rdi, str.AfxWnd42u
mov rsi, r14
mov ecx, 0xa
repe cmpsw word [rsi], word [rdi]
jne 0x180021a7d
cmp r15d, 0x3e9
jne 0x180022111
xor r8d, r8d
mov rcx, rbx
mov dword [r12], 0x100
lea edx, [r8 + 1]
movabs rbp, 0x10000010002
call fcn.18002d5e0
mov qword [r13], rax
jmp 0x180022111
lea rdi, str.ICQ_Contact_List_Window
mov rsi, r14
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
repe cmpsw word [rsi], word [rdi]
je 0x180022094
lea rdi, str.ICQ
mov rsi, r14
mov ecx, VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
je 0x180022094
lea rdi, str.MacromediaFlashPlayerActiveX
mov rsi, r14
mov ecx, 0x1d
repe cmpsw word [rsi], word [rdi]
jne 0x180021b07
lea rdx, [rsp + 0x40]
mov rcx, rbx
mov dword [rsp + 0x40], ebp
call fcn.180005d70
test eax, eax
je 0x180022111
cmp dword [rsp + 0x40], ebp
je 0x180022111
mov rcx, rbx
mov dword [r12], 2
movabs rbp, 0x202010000
call fcn.18002d5b0
mov qword [r13], rax
jmp 0x180022111
lea rdi, str.NETEASE_POPO_FRAME_FF098E9C_F0C6_454c_88AA_3CBCFB54F90F
mov rsi, r14
mov ecx, 0x38
repe cmpsw word [rsi], word [rdi]
jne 0x180021b36
mov dword [r12], 0x40
movabs rbp, 0x4000010001
mov qword [r13], rbx
jmp 0x180022111
lea rdi, str.NETEASE_POPO2_FRAME_FF098E9C_F0C6_454c_88AA_3CBCFB54F90F
mov rsi, r14
mov ecx, 0x39
repe cmpsw word [rsi], word [rdi]
jne 0x180021b65
mov dword [r12], 0x40
movabs rbp, 0x4000010002
mov qword [r13], rbx
jmp 0x180022111
lea rdi, str.tSkMainForm.UnicodeClass
mov rsi, r14
mov ecx, reloc.OLEAUT32.dll_SafeArrayPutElement
repe cmpsw word [rsi], word [rdi]
jne 0x180021b9c
mov rcx, rbx
mov dword [r12], 0x80
movabs rbp, 0x8000010000
call fcn.18002d5b0
mov qword [r13], rax
jmp 0x180022111
lea rdi, str.TZapMainForm.UnicodeClass
mov rsi, r14
mov ecx, reloc.OLEAUT32.dll_SafeArrayCopy
repe cmpsw word [rsi], word [rdi]
jne 0x180021bcb
mov dword [r12], 0x80
movabs rbp, 0x8000010003
mov qword [r13], rbx
jmp 0x180022111
lea rdi, str.Chrome_WidgetWin_1
mov rsi, r14
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetLBound
repe cmpsw word [rsi], word [rdi]
jne 0x180021bfa
mov dword [r12], 0x80
movabs rbp, 0x8000010004
mov qword [r13], rbx
jmp 0x180022111
lea rdi, str.SametimeConnect
mov rsi, r14
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
repe cmpsw word [rsi], word [rdi]
jne 0x180021c38
xor r8d, r8d
mov rcx, rbx
mov dword [r12], 0x200
lea edx, [r8 + 1]
movabs rbp, 0x20000010001
call fcn.18002d5e0
mov qword [r13], rax
jmp 0x180022111
lea rdi, str.SysTreeView32
mov rsi, r14
mov ecx, reloc.WS2_32.dll_ntohl
repe cmpsw word [rsi], word [rdi]
jne 0x180021e46
cmp r15d, 0x40a
jne 0x180021c7c
mov rcx, rbx
mov dword [r12], 0x400
movabs rbp, 0x40000010000
call fcn.18002d5b0
mov qword [r13], rax
jmp 0x180022111
test r15d, r15d
je 0x180021c8a
cmp r15d, ebx
jne 0x180022111
lea rax, str.SWT_Window0
lea rcx, [rsp + 0x72]
xor edx, edx
mov qword [rsp + 0x50], rax
lea rax, str.SWT_Window1
mov r8d, 0x206
mov qword [rsp + 0x58], rax
movabs rax, 0x20000010004
mov dword [rsp + 0x48], 6
mov qword [rsp + 0x60], rax
movabs rax, 0x20000010002
mov dword [rsp + 0x4c], 0xa
mov qword [rsp + 0x68], rax
mov word [rsp + 0x70], bp
call fcn.18007ead0
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetParent]
lea rdx, [rsp + 0x70]
mov r8d, 0x104
mov rcx, rax
call qword [sym.imp.USER32.dll_GetClassNameW]
mov edi, ebp
lea rsi, [rsp + 0x50]
nop dword [rax + rax]
mov rdx, qword [rsi]
lea rcx, [rsp + 0x70]
call fcn.18007f704
test eax, eax
je 0x180021d31
inc edi
add rsi, 8
cmp edi, 2
jbe 0x180021d10
jmp 0x180022111
movsxd r14, edi
lea r8, [rsp + 0x40]
mov rcx, rbx
mov edi, dword [rsp + r14*4 + 0x48]
mov dword [rsp + 0x40], ebp
mov edx, edi
call fcn.18002d5e0
mov rsi, rax
test rax, rax
je 0x180022111
cmp dword [rsp + 0x40], edi
jne 0x180022111
mov rcx, rax
call qword [sym.imp.USER32.dll_GetParent]
test rax, rax
jne 0x180022111
lea rcx, [rsp + 0x492]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x490], bp
call fcn.18007ead0
lea rdx, [rsp + 0x490]
mov r8d, 0x104
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rcx, [rsp + 0x282]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x280], bp
call fcn.18007ead0
lea rdx, [rsp + 0x280]
mov r8d, 0x104
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov rdi, qword [rsp + r14*8 + 0x50]
lea rax, [rsp + 0x490]
sub rdi, rax
nop dword [rax]
movzx edx, word [rax]
movzx ecx, word [rax + rdi]
sub edx, ecx
jne 0x180021e03
add rax, 2
test ecx, ecx
jne 0x180021df0
test edx, edx
jne 0x180022111
lea rsi, [rsp + 0x280]
lea rdi, str.IBM_Lotus_Sametime_Connect
mov ecx, reloc.OLEAUT32.dll_DispGetParam
repe cmpsw word [rsi], word [rdi]
jne 0x180022111
mov rbp, qword [rsp + r14*8 + 0x60]
mov rcx, rbx
mov dword [r12], 0x200
call fcn.18002d5b0
mov qword [r13], rax
jmp 0x180022111
mov eax, dword [0x1801aa490]
cmp eax, 0x400
jne 0x180021f45
cmp dword [0x1801aa48c], 0x12
je 0x180022111
lea rdi, str.SidingMaskComponent
mov rsi, r14
mov ecx, reloc.OLEAUT32.dll_SafeArrayLock
repe cmpsw word [rsi], word [rdi]
je 0x180021e90
lea rdi, str.WebControl
mov rsi, r14
mov ecx, VariantTimeToDosDateTime
repe cmpsw word [rsi], word [rdi]
jne 0x180022111
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetParent]
mov r14, rax
test rax, rax
je 0x180022111
lea rcx, [rsp + 0x282]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x280], bp
call fcn.18007ead0
lea rdx, [rsp + 0x280]
mov r8d, 0x104
mov rcx, r14
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rsi, [rsp + 0x280]
lea rdi, str.StandardFrame
mov ecx, reloc.WS2_32.dll_ntohl
repe cmpsw word [rsi], word [rdi]
jne 0x180022111
mov dword [r12], 0x400
mov qword [r13], r14
cmp dword [0x1801b0450], 0
movabs rbp, 0x40002010008
je 0x180022111
lea r9, str._ALI__CheckIMType_0x_08x_0x_08x
lea r8, [0x18012b1a8]
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
call fcn.1800b3b40
jmp 0x180022111
cmp eax, 0x2000000
jne 0x180021f90
cmp r15d, 0x409
jne 0x180022111
lea rdi, str.SysTabControl32
mov rsi, r14
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
repe cmpsw word [rsi], word [rdi]
jne 0x180022111
mov rcx, rbx
mov dword [r12], eax
movabs rbp, 0x200000000010000
call fcn.18002d5b0
mov qword [r13], rax
jmp 0x180022111
cmp eax, 0x1000000
jne 0x180022111
lea rdx, str.Qt5QWindowIcon
mov rcx, r14
call fcn.18007f704
test eax, eax
je 0x180021fc5
lea rdx, str.Qt5152QWindowIcon
mov rcx, r14
call fcn.18007f704
test eax, eax
jne 0x180022111
lea rcx, [rsp + 0x72]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x70], bp
call fcn.18007ead0
lea rdx, [rsp + 0x70]
mov r8d, 0x104
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov edx, 0xfffffff0
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov edi, eax
cmp dword [0x1801b0450], ebp
je 0x180022038
lea rax, [rsp + 0x70]
lea r9, str._line__CheckIMType__0x_08x___0x_08x____s_
lea r8, str.line
mov qword [rsp + 0x30], rax
lea rcx, [0x1801afb58]
or edx, 0xffffffff
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rbx
call fcn.1800b3b40
bt edi, 0x10
jae 0x180022111
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x70]
repne scasw ax, word [rdi]
not rcx
dec rcx
cmp rcx, 4
jne 0x180022111
mov r8, rcx
lea rdx, str.LINE
lea rcx, [rsp + 0x70]
call fcn.18007f540
test eax, eax
jne 0x180022111
mov dword [r12], 0x1000000
movabs rbp, 0x100000000010001
mov qword [r13], rbx
jmp 0x180022111
mov rcx, rbx
mov dword [r12], 2
movabs rbp, 0x201010000
call fcn.18002d5b0
mov qword [r13], rax
jmp 0x180022111
cmp r15d, 0x3e9
jne 0x180022111
mov rcx, rbx
mov dword [r12], reloc.OLEAUT32.dll_SafeArrayGetDim
movabs rbp, 0x1000010001
call qword [sym.imp.USER32.dll_GetParent]
lea r8, str.Tencent_BarMgr_Class_Ver1.0
xor r9d, r9d
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowExW]
movabs rcx, 0x1000010002
test rax, rax
cmove rbp, rcx
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 1]
call fcn.18002d5e0
mov qword [r13], rax
mov rdi, qword [rsp + 0x6b0]
mov rsi, qword [rsp + 0x6b8]
mov rax, rbp
mov rbp, qword [rsp + 0x700]
jmp 0x180022130
xor eax, eax
mov rcx, qword [rsp + 0x6a0]
xor rcx, rsp
call fcn.18007e1e0
add rsp, 0x6c0
pop r15
pop r14
pop r13
pop r12
pop rbx
ret