Function at 0x140004e20
Capabilities:
Get graphical window text
Hide graphical window

Disassembly:
sub rsp, 0x38
and qword [rsp + 0x40], 0
lea rcx, [rsp + 0x40]
call fcn.140004df8
cmp dword [rax], 0x64
jle case.default.0x140004f26
xor ecx, ecx
call qword [sym.imp.USER32.dll_IsWindowVisible]
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetCriticalSectionSpinCount]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetWindowContextHelpId]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_RegisterClassW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_IsWindowVisible]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertDefaultLocale]
and dword [rsp + 0x28], 0
xor r9d, r9d
and qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_IsDialogMessageW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_DestroyWindow]
xor ecx, ecx
call qword [sym.imp.USER32.dll_IsIconic]
mov edx, 5
xor ecx, ecx
call qword [sym.imp.USER32.dll_ShowWindow]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 0x10]
call qword [sym.imp.USER32.dll_PostMessageW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_IsWindowVisible]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetClassNameW]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov dword [rsp + 0x28], 1
xor r9d, r9d
and dword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_MoveWindow]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x40]
xor edx, edx
mov rcx, rax
add rsp, 0x38
jmp qword [sym.imp.KERNEL32.dll_HeapFree]
jns 0x140029048
invalid
outsd dx, dword [rsi]
outsb dx, byte [rsi]
outsb dx, byte [rsi]
invalid
and byte [rax], ah
and byte [rax], ah
cmp al, 0x49
jae 0x14002904e
invalid
invalid
cmp al, 0x55
push rdx
outsd dx, dword [rsi]
jb 0x1400290a9
invalid
jae 0x1400290af
cmp dl, byte [rsp + riz*2 + 0x73]
cmp ah, byte [rsi]
insb byte [rdi], dx
je 0x14002908e
jae 0x1400290ba
jb 0x1400290cd
jb case.0x140004f26.8
je 0x140029098
cmp ah, byte [rsi]
insb byte [rdi], dx
insb byte [rdi], dx
je 0x14002909d
jo 0x1400290d3
jb 0x1400290da
xor eax, 0x26303030
je 0x1400290a9
invalid
insb byte [rdi], dx
je 0x1400290ae
invalid
invalid
and byte [rax], ah
cmp al, 0x2f
jb 0x1400290fe
jbe 0x1400290fc
jb 0x1400290d7
jb 0x1400290d7
or ah, byte ds:[rax]
or ah, byte [rax]
and byte [rax], ah
and byte [rsp + rax*2], bh
jb 0x14002910b
jbe 0x140029109
jb 0x1400290e4
or ah, byte [rax]
and byte [rax], ah
and byte [rax], ah
and byte [rsi + rcx*2], bh
and byte [rax], ah
and byte [rax], ah
cmp al, 0x4e
invalid
invalid
push rbx
push rcx
and byte [rcx + 0x6e], r8b
jns 0x140029139
push 0x20657265
sub byte [rdx + 0x43], cl
outsd dx, dword [rsi]
outsb dx, byte [rsi]
outsb dx, byte [rsi]
invalid
invalid
or ah, byte ds:[rax]
and byte [rax], ah
and byte [rax], ah
and byte [rcx + rcx*2], bh
jae 0x140029127
invalid
invalid
jne 0x14002916a
je 0x140029144
jb 0x14002916b
jbe 0x140029169
jb 0x140029144
or ah, byte [rax]
and byte [rax], ah
and byte [rax], ah
and byte [rdx*2 + 0x6f464c52], bh
and byte [rax], ah
and byte [rax], ah
cmp al, 0x55
push rdx
outsd dx, dword [rsi]
jb 0x140029182
invalid
cmp ah, byte [rsi]
insb byte [rdi], dx
je 0x140029167
jae 0x140029193
jb 0x1400291a6
jb 0x140029159
je 0x140029171
cmp ah, byte [rsi]
insb byte [rdi], dx
je 0x140029176
jo 0x1400291ac
jb 0x1400291b3
xor dh, byte [rsi]
xor edi, dword [rax]
je 0x140029182
je 0x140029182
invalid
invalid
and byte [rax], ah
cmp al, 0x2f
invalid
jb 0x1400291d7
jbe 0x1400291d5
jb 0x1400291b0
or ah, byte ds:[rax]
or ah, byte [rax]
and byte [rax], ah
and byte [rsp + rax*2], bh
jb 0x1400291e4
jbe 0x1400291e2
jb 0x1400291bd
or ah, byte [rax]
and byte [rax], ah
and byte [rax], ah
and byte [rsi + rcx*2], bh
and byte [rax], ah
and byte [rax], ah
cmp al, 0x4e
invalid
sub byte [rcx + riz*2 + 0x74], al
invalid
or ah, byte [rax]
and byte [rax], ah
and byte [rax], ah
and byte [rcx + rcx*2], bh
jae 0x1400291f5
invalid
invalid
invalid
je 0x140029232
jne 0x140029227
cmp al, 0x2f
jae 0x14002920b
invalid
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
cmp al, 0x55
push rdx
outsd dx, dword [rsi]
jb 0x140029250
insd dword [rdi], dx
invalid
je 0x140029224
push 0x64
invalid
cmp dh, byte [rbx + 0x79]
invalid
je 0x140029248
cmp ah, byte [rsi]
insb byte [rdi], dx
je 0x14002924d
jo 0x140029283
jb 0x14002928a
xor dh, byte [rax]
xor al, 0x38
je 0x140029259
cmp eax, dword [rcx + riz*2 + 0x74]
invalid
invalid
invalid
je 0x140029295
invalid
insd dword [rdi], dx
invalid
and byte [rax], ah
and byte [rax], ah
cmp al, 0x2f
and byte [rdi + rbp], bh
jb 0x1400292bf
jbe 0x1400292bd
jb 0x140029298
or ah, byte ds:[rax]
or ah, byte [rax]
and byte [rax], ah
and byte [rsp + rax*2], bh
jb 0x1400292cc
jbe 0x1400292ca
jb 0x1400292a5
or ah, byte [rax]
and byte [rax], ah
and byte [rax], ah
and byte [rsi + rcx*2], bh
invalid
invalid
insd dword [rdi], dx
or ah, byte ds:[rax]
and byte [rax], ah
and byte [rax], ah
and byte [rcx + rcx*2], bh
jae 0x1400292dc
jae 0x1400292dc
invalid
je 0x140029319
jne 0x14002930e
cmp al, 0x2f
jae 0x1400292f2
invalid
and byte [rax], ah
and byte [rax], ah
and byte [rdx*2 + 0x6f464c52], bh
jb 0x140029337
invalid
push 0x64
invalid
cmp ch, byte [rbp + 0x79]
jae 0x140029352
insb byte [rdi], dx
cmp ch, byte [rdi]
invalid
cmp edi, dword [rdx]
insb byte [rdi], dx
je 0x140029333
jo 0x140029369
jb 0x140029370
xor esi, dword [rbx]
xor byte [rsi], dh
je 0x14002933f
cmp al, 0x2f
push rbp
push rdx
outsd dx, dword [rsi]
jb 0x14002937a
invalid
je 0x14002934e
or ah, byte [rax]
and byte [rax], ah
and byte [rdi + rbp], bh
jb 0x140029383
imul esi, dword [rsi + 0x65], 0x200a3e72
jbe 0x140029381
jb 0x14002935c
or ah, byte [rax]
and byte [rax], ah
and byte [rsp + rax*2], bh
jb 0x140029390
jbe 0x14002938e
jb 0x140029369
or ah, byte [rax]
and byte [rax], ah
and byte [rax], ah
and byte [rsi + rcx*2], bh
invalid
invalid
push rbx
invalid
jb 0x1400293a4
and byte gs:[rax], ch
invalid
sub dword [rdi + rbp], edi
invalid
invalid
and byte [rcx + rcx*2], bh
jae 0x1400293a5
invalid
imul esi, dword [rsi + 0x65], 0x72743e72
jne 0x1400293d7
cmp al, 0x2f
jae 0x1400293bb
invalid
jne 0x1400293e8
je 0x1400293c2
jb 0x1400293e9
jbe 0x1400293e7
jb 0x1400293c2
jb 0x1400293c2
or ah, byte ds:[rax]
or ah, byte [rax]
and byte [rax], ah
and byte [rax], ah
and byte [rdx*2 + 0x6f464c52], bh
outsd dx, dword [rsi]
outsd dx, dword [rsi]
jb 0x140029400
invalid
je 0x1400293e0
cmp dh, byte [rbx + 0x66]
jae 0x14002940e
outsd dx, dword [rsi]
jb 0x14002940e
cmp ch, byte gs:[rdi]
invalid
je 0x1400293f8
cmp al, 0x2f
push rbp
push rdx
outsd dx, dword [rsi]
outsd dx, dword [rsi]
jb 0x140029433
invalid
or ah, byte [rax]
and byte [rax], ah
and byte [rsp + rax*2], bh
jb 0x140029449
jbe 0x140029447
jb 0x140029422
or ah, byte [rax]
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rsi + rcx*2], bh
and byte [rax], ah
cmp al, 0x4e
invalid
invalid
invalid
jae 0x140029455
invalid
cmp al, 0x2f
jae 0x14002946b
invalid
or ah, byte ds:[rax]
and byte [rax], ah
and byte [rax], ah
and byte [rdx*2 + 0x6f464c52], bh
jb 0x1400294b0
invalid
invalid
invalid
invalid
jb 0x1400294e1
xor dh, byte [rax + rsi]
je 0x1400294b0
invalid
cmp al, 0x44
invalid
and byte [rax], ah
and byte [rax], ah
and byte [rdx*2 + 0x2f206c72], bh
or ah, byte ds:[rax]
and byte [rax], ah
and byte [rax], ah
and byte [rsp + rax*2], bh
jb 0x140029561
jbe 0x14002955f
jb case.0x140004f26.37
and edx, dword [rbp + 0x44]
jb case.0x140004f26.35
jbe 0x140029568
jb 0x140029528
cmp al, 0x2f
jb 0x140029573
jbe 0x140029571
jb 0x14002954c
or ah, byte [rax]
and byte [rax], ah
and byte [rax], ah
and byte [rdx*2 + 0x69726573], bh
push rbp
jae 0x14002957e
jb 0x140029584
push rbp
jae 0x14002957e
jb 0x140029584
and edx, dword ds:[rbp + 0x73]
jb 0x14002958c
and edi, dword fs:[rdi + rbp]
push rbp
jae 0x14002958f
jb 0x140029595
or ah, byte ds:[rax]
and byte [rax], ah
and byte [rax], ah
and byte [rax + rdx*2], bh
jb 0x1400295a8
imul bp, word [rbp + riz*2 + 0x3e], 0x7561
je 0x1400295b1
imul ebp, dword [rbp + riz*2 + 0x3e], 0x6f747561
cmp al, 0x2f
push rax
jb 0x1400295b6
imul bp, word [rbp + riz*2 + 0x3e], 0x200a
or ah, byte [rax]
and byte [rax], ah
and byte [rax], ah
and byte [rsp + rdx*2], bh
jns 0x1400295c7
and ecx, dword ds:[rsp + rax*2 + 0x72]
imul esi, dword [rsi + 0x65], 0x2f3c2372
jb 0x140029585
and edi, dword [rdi + rbp]
cmp al, 0x2f
push rsp
jns 0x1400295d7
or ah, byte ds:[rax]
or ah, byte ds:[rax]
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
cmp al, 0x50
and byte [rax], ah
and byte [rax], ah
and byte [rax + rdx*2], bh
push rax
invalid
jae 0x1400295e8
ja 0x1400295e6
jb 0x1400295dd
and edx, dword ds:[rax + 0x61]
jae 0x1400295f2
jae 0x1400295f7
ja 0x1400295f0
outsd dx, dword [rsi]
jb 0x1400295e7
and edi, dword [rdi + rbp]
cmp al, 0x2f
invalid
push rax
invalid
jae 0x1400295fd
ja 0x1400295fb
jb 0x1400295f2
or ah, byte ds:[rax]
or ah, byte [rax]
and byte [rax], ah
and byte [rax], ah
and byte [rbx + rdx*2], bh
jb 0x140029611
jb 0x1400295e7
outsb dx, byte [rsi]
outsw dx, word [rsi]
outsd dx, dword [rsi]
outsd dx, dword [rsi]
outsd dx, dword [rsi]
jb case.0x140004f26.27
invalid
xor dword [rdi + rbp], edi
push rbx
jb 0x140029625
jb 0x1400295fb
outsb dx, byte [rsi]
outsb dx, byte [rsi]
outsw dx, word [rsi]
outsd dx, dword [rsi]
outsd dx, dword [rsi]
jb case.0x140004f26.26
invalid
je 0x1400295fa
or ah, byte [rax]
and byte [rax], ah
and byte [rax], ah
and byte [rcx + rax*2], bh
jne 0x14002963b
outsd dx, dword [rsi]
je 0x140029631
invalid
cmp al, 0x2f
jne 0x140029650
outsd dx, dword [rsi]
je 0x140029646
invalid
or ah, byte ds:[rax]
or ah, byte ds:[rax]
or ah, byte [rax]
and byte [rax], ah
and byte [rax], ah
and byte [rax + rdx*2], bh
push rax
jb case.0x14000edc4.0
outsd dx, dword [rsi]
jo case.0x14000edc4.1
jb 0x14002966b
imul esp, dword [rbp + 0x73], 0x20200a3e
and byte [rax], ah
and byte [rax], ah
or ah, byte ds:[rax]
or ah, byte [rax]
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and edx, dword [rax + 0x72]
outsd dx, dword [rsi]
and byte [rax], ah
and edx, dword [rax + 0x72]
outsd dx, dword [rsi]
jo 0x14002966f
jb 0x140029680
imul esp, dword [rbp + 0x73], 0x20200a23
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rdi + rbp], bh
and byte [rax], ah
and byte [rax], ah
cmp al, 0x2f
push rax
jb 0x14002968b
and byte [rax], ah
outsd dx, dword [rsi]
and edi, dword [rdi + rbp]
push rbp
jb 0x1400296b2
outsd dx, dword [rsi]
jb 0x1400296b7
invalid
and byte [rax], ah
cmp al, 0x44
jb 0x1400296aa
jb 0x14002972a
push r8
and edi, dword [rdi + rbp]
push rbp
and byte [rax], ah
outsd dx, dword [rsi]
jb 0x140029777
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rax], ah
and byte [rbx], ah
invalid
invalid
insb byte [rdi], dx
insb byte [rdi], dx