Function at 0x1400b3420
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x220
mov r10, qword [rsp + 0x270]
mov r13, r8
mov rsi, rcx
cmp word [r10], 0
je 0x1400b3464
mov rax, qword [rcx + 0x1018]
mov byte [rsp + 0x270], 1
cmp word [rax], 0
je 0x1400b346c
mov byte [rsp + 0x270], 0
mov r15, 0xffffffffffffffff
mov qword [rcx + 0x1018], r10
mov rax, r15
nop dword [rax]
inc rax
cmp word [r10 + rax*2], 0
jne 0x1400b3480
mov qword [rcx + 0x1020], rax
xor edi, edi
mov rax, qword [rsp + 0x278]
mov ebp, edi
mov qword [rcx + 0x1030], rax
mov eax, dword [rcx]
mov qword [rcx + 8], rdx
lea rdx, str.ahk_
mov dword [rcx], edi
mov qword [rcx + 0x1028], r9
mov rcx, r13
mov qword [rsp + 0x250], rbx
mov dword [rsp + 0x278], eax
call fcn.1400ad2f0
mov r14, rax
test rax, rax
je 0x1400b383f
nop
test ebp, ebp
je 0x1400b34f9
movzx eax, word [r14 - 2]
cmp ax, 0x20
je 0x1400b34f9
cmp ax, 9
jne 0x1400b3816
mov r8d, 2
lea rdx, [0x14011c474]
lea rcx, [r14 + 8]
call fcn.1400d2a10
test eax, eax
jne 0x1400b354f
or dword [rsi], 2
lea rcx, [r14 + 0xc]
call fcn.140053260
mov qword [rsi + 0x1038], rax
cmp rax, 0xffff
je 0x1400b37ba
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x1400b37ba
mov qword [rsi + 0x1038], rdi
jmp 0x1400b3954
mov r8d, 3
lea rdx, [0x14011c480]
lea rcx, [r14 + 8]
call fcn.1400d2a10
test eax, eax
jne 0x1400b35a3
or dword [rsi], 4
lea rcx, [r14 + 0xe]
call fcn.140005a80
lea rcx, [r14 + 0xe]
test al, al
je 0x1400b3593
xor edx, edx
lea r8d, [rdx + 0x10]
call fcn.1400d22a0
mov dword [rsi + 0x1040], eax
jmp 0x1400b37ba
call fcn.1400d283c
mov dword [rsi + 0x1040], eax
jmp 0x1400b37ba
mov r8d, 5
lea rdx, str.group
lea rcx, [r14 + 8]
call fcn.1400d2a10
test eax, eax
jne 0x1400b36ba
or dword [rsi], 0x10
lea rdx, [r14 + 0x12]
nop dword [rax + rax]
movzx eax, word [rdx]
cmp ax, 0x20
je 0x1400b35df
cmp ax, 9
jne 0x1400b35e5
add rdx, 2
jmp 0x1400b35d0
mov r8d, 0xfd
lea rcx, [rsp + 0x20]
call fcn.1400de184
movzx r9d, word [rsp + 0x20]
lea r8, [rsp + 0x20]
mov word [rsp + 0x21a], di
test r9w, r9w
je 0x1400b369b
movzx edx, r9w
nop word [rax + rax]
lea rcx, [0x1401108a0]
mov eax, SafeArrayAllocDescriptor
nop dword [rax]
cmp dx, ax
je 0x1400b3652
movzx eax, word [rcx + 2]
add rcx, 2
test ax, ax
jne 0x1400b3630
movzx edx, word [r8 + 2]
add r8, 2
test dx, dx
jne 0x1400b3620
jmp 0x1400b3661
test r8, r8
je 0x1400b3661
mov word [r8], di
movzx r9d, word [rsp + 0x20]
test r9w, r9w
je 0x1400b369b
mov rbx, qword [0x1401366a0]
test rbx, rbx
je 0x1400b369b
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rbx + 8]
lea rdx, [rsp + 0x20]
call fcn.1400d0944
test eax, eax
je 0x1400b36a9
mov rbx, qword [rbx + 0x28]
test rbx, rbx
jne 0x1400b3680
mov qword [rsi + 0x1048], rdi
xor eax, eax
jmp 0x1400b3954
mov qword [rsi + 0x1048], rbx
test rbx, rbx
je 0x1400b36a2
jmp 0x1400b37ba
mov r8d, 3
lea rdx, [0x140118c30]
lea rcx, [r14 + 8]
call fcn.1400d2a10
test eax, eax
jne 0x1400b36e3
or dword [rsi], 0x20
mov eax, 0x1050
mov ecx, ntohs
jmp 0x1400b370e
mov r8d, 5
lea rdx, str.class
lea rcx, [r14 + 8]
call fcn.1400d2a10
test eax, eax
jne 0x1400b3816
or dword [rsi], 8
mov eax, 0x810
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetUBound
lea rbx, [rax + rsi]
lea rdx, [r14 + rcx]
movzx eax, word [rdx]
cmp ax, 0x20
je 0x1400b3725
cmp ax, 9
jne 0x1400b372b
add rdx, 2
jmp 0x1400b3716
mov r8d, 0x3ff
mov rcx, rbx
call fcn.1400de184
lea rdx, str.ahk_
mov word [rbx + 0x7fe], di
mov rcx, rbx
call fcn.1400ad2f0
test rax, rax
je 0x1400b3789
cmp rax, rbx
je 0x1400b3786
movzx ecx, word [rax - 2]
cmp cx, 0x20
je 0x1400b3780
cmp cx, 9
je 0x1400b3780
lea rcx, [rax + 8]
lea rdx, str.ahk_
call fcn.1400ad2f0
test rax, rax
jne 0x1400b3754
jmp 0x1400b3789
mov word [rax - 2], di
jmp 0x1400b3789
mov word [rax], di
lea rcx, [rsi + 0x1050]
cmp rbx, rcx
jne 0x1400b37ba
mov rax, qword [rsi + 8]
cmp dword [rax + 0x30], 4
je 0x1400b37b2
mov edx, 0x5c
call fcn.1400cbb24
test rax, rax
jne 0x1400b37b2
mov al, 1
jmp 0x1400b37b4
xor al, al
mov byte [rsi + 0x1850], al
test ebp, ebp
jne 0x1400b3818
mov rcx, r13
call 0x140015470
cmp r14, rax
jbe 0x1400b3818
or dword [rsi], 1
lea rcx, [rsi + 0x10]
mov eax, 0x400
mov rbx, r14
sub rbx, r13
mov rdx, r13
sar rbx, 1
cmp rbx, rax
cmova rbx, rax
lea r8, [rbx - 1]
call fcn.1400de184
xor eax, eax
mov word [rsi + rbx*2 + 0xe], ax
mov rax, r15
nop dword [rax]
inc rax
cmp word [rsi + rax*2 + 0x10], 0
jne 0x1400b3800
mov qword [rsi + 0x1010], rax
xor edi, edi
jmp 0x1400b3818
dec ebp
mov eax, 8
lea rdx, str.ahk_
inc ebp
lea rcx, [rax + r14]
call fcn.1400ad2f0
mov r14, rax
test rax, rax
jne 0x1400b34e0
test ebp, ebp
jne 0x1400b3873
mov r8d, 0x3ff
mov dword [rsi], 1
mov rdx, r13
lea rcx, [rsi + 0x10]
call fcn.1400de184
mov word [rsi + 0x80e], di
nop
inc r15
cmp word [rsi + r15*2 + 0x10], 0
jne 0x1400b3860
mov qword [rsi + 0x1010], r15
mov eax, dword [rsi]
cmp eax, dword [rsp + 0x278]
jne 0x1400b388c
cmp byte [rsp + 0x270], 0
je 0x1400b394f
mov rcx, qword [rsi + 0x1890]
test rcx, rcx
je 0x1400b394f
test eax, eax
je 0x1400b394f
test al, 1
jne 0x1400b38b5
mov rax, qword [rsi + 0x1018]
cmp word [rax], 0
je 0x1400b38d3
mov r8d, 0x7fff
lea rdx, [rsi + 0x189c]
call qword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
jne 0x1400b38d3
mov word [rsi + 0x189c], di
test byte [rsi], 4
je 0x1400b38ec
mov rcx, qword [rsi + 0x1890]
lea rdx, [rsi + 0x1898]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
test byte [rsi], 0x20
je 0x1400b3930
mov rcx, qword [rsi + 0x1890]
lea rdx, [rsp + 0x270]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
test eax, eax
je 0x1400b3930
movzx r9d, byte [rsi + 0x1850]
lea rdx, [rsi + 0x11a9c]
mov ecx, dword [rsp + 0x270]
call fcn.14007e350
test eax, eax
jne 0x1400b3930
mov word [rsi + 0x11a9c], di
test byte [rsi], 8
je 0x1400b394f
mov rcx, qword [rsi + 0x1890]
lea rdx, [rsi + 0x1189a]
mov r8d, 0x101
call qword [sym.imp.USER32.dll_GetClassNameW]
mov eax, 1
mov rbx, qword [rsp + 0x250]
lea r11, [rsp + 0x220]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret