Function at 0x18001b020
Capabilities:
Get graphical window text

Disassembly:
test ecx, ecx
je 0x18001b40c
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x5c8
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov rax, qword [0x180132920]
xor rax, rsp
mov qword [rsp + 0x5b0], rax
mov ebp, r9d
mov dword [rsp + 0x70], r9d
mov r12, r8
mov rbx, rdx
mov edi, ecx
test rdx, rdx
je 0x18001b3e9
call fcn.18001a550
mov esi, eax
xor r15d, r15d
lea r13, [0x1800d5a20]
lea r14, [0x1800e9ea0]
cmp dword [0x180154c70], r15d
je 0x18001b2d3
mov ecx, edi
call fcn.18001a5f0
mov r15, rax
xor ebp, ebp
mov word [rsp + 0x3a0], bp
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x3a2]
call fcn.18004a760
mov word [rsp + 0x190], bp
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x192]
call fcn.18004a760
mov r8d, 0x104
lea rdx, [rsp + 0x3a0]
mov rcx, r12
call qword [sym.imp.USER32.dll_GetClassNameW]
mov r8d, 0x104
lea rdx, [rsp + 0x190]
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowTextW]
lea edx, [rbp + 0x5c]
mov rcx, rbx
call fcn.18004b884
mov rbp, rax
test rax, rax
je 0x18001b121
add rbp, 2
jmp 0x18001b124
mov rbp, rbx
mov r11d, dword [0x180154c70]
test r11d, r11d
je 0x18001b1a8
mov rcx, r13
test rbp, rbp
cmovne rcx, rbp
mov rax, r14
cmp dword [rsp + 0x70], 0
lea rdx, [0x1800e4818]
cmovne rax, rdx
mov qword [rsp + 0x60], rbx
lea rdx, [rsp + 0x190]
mov qword [rsp + 0x58], rdx
lea rdx, [rsp + 0x3a0]
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x48], r12
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, str._____s____s___hwnd:_0x_08x___name:__s___type:__08x__08x____hwndnotify:_0x_08x___s____s____filename:__s_
lea rdx, str.TUodExport
or ecx, 0xffffffff
call fcn.180002110
mov r11d, dword [0x180154c70]
test esi, esi
je 0x18001b243
cmp edi, esi
je 0x18001b243
mov ecx, esi
call fcn.18001a5f0
mov r15, rax
test r11d, r11d
je 0x18001b2c3
mov rcx, r13
test rbp, rbp
cmovne rcx, rbp
mov rax, r14
cmp dword [rsp + 0x70], 0
lea rdx, [0x1800e4818]
cmovne rax, rdx
mov qword [rsp + 0x60], rbx
lea r9, [rsp + 0x190]
mov qword [rsp + 0x58], r9
lea r9, [rsp + 0x3a0]
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x48], r12
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, str._____s____s___hwnd:_0x_08x___name:__s___type:__08x__08x____hwndnotify:_0x_08x___s____s____filename:__s_
lea rdx, str.TUodExport
or ecx, 0xffffffff
call fcn.180002110
mov r11d, dword [0x180154c70]
test r11d, r11d
je 0x18001b2cc
mov rcx, r13
test rbp, rbp
cmovne rcx, rbp
mov rax, r14
mov ebp, dword [rsp + 0x70]
test ebp, ebp
lea rdx, [0x1800e4818]
cmovne rax, rdx
mov qword [rsp + 0x60], rbx
lea rdx, [rsp + 0x190]
mov qword [rsp + 0x58], rdx
lea rdx, [rsp + 0x3a0]
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x48], r12
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, str._tMY_NotifyFile__________s____s___hwnd:_0x_08x___name:__s___type:__08x__08x____hwndnotify:_0x_08x___s____s____filename:__s_
lea rdx, [0x1800e9708]
or ecx, 0xffffffff
call fcn.180002110
xor r15d, r15d
jmp 0x18001b2d3
mov ebp, dword [rsp + 0x70]
xor r15d, r15d
jmp 0x18001b2d3
mov ebp, dword [rsp + 0x70]
xor r15d, r15d
test esi, esi
je 0x18001b3e9
xor edx, edx
lea rcx, [rsp + 0x80]
call fcn.180035de0
nop
mov dword [rsp + 0xd0], r15d
xor edx, edx
mov r8d, 0xb0
lea rcx, [rsp + 0xd8]
call fcn.18004a760
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov r8, rbx
mov edx, esi
lea rcx, [rsp + 0xd0]
call fcn.18001a710
lea r8, [rsp + 0xd0]
xor edx, edx
lea rcx, [rsp + 0x80]
call fcn.18001afe0
mov r9d, 2
mov r8, rbx
mov rdx, r12
mov ecx, edi
call fcn.18001a950
cmp dword [0x180154c70], 0
je 0x18001b3dc
mov ecx, edi
call fcn.18001a5f0
mov r15, rax
mov edx, 0x5c
mov rcx, rbx
call fcn.18004b884
test rax, rax
je 0x18001b381
add rax, 2
jmp 0x18001b384
mov rax, rbx
cmp dword [0x180154c70], 0
je 0x18001b3dc
test rax, rax
cmovne r13, rax
test ebp, ebp
lea rax, [0x1800e4818]
cmovne r14, rax
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], r12
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r14
mov r9, r15
lea r8, str._tMY_NotifyFile______s____s___hwnd:_0x_08x___name:__s___type:__08x__08x____hwndnotify:_0x_08x___filename:__s_
lea rdx, [0x1800e9708]
or ecx, 0xffffffff
call fcn.180002110
nop
lea rcx, [rsp + 0x80]
call fcn.180035ea0
mov rcx, qword [rsp + 0x5b0]
xor rcx, rsp
call fcn.18004ac60
add rsp, 0x5c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
repz ret