Function at 0x140071790
Capabilities:
Get graphical window text

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x268
mov rax, qword [0x1403486d0]
xor rax, rsp
mov qword [rsp + 0x250], rax
cmp dword [rsp + 0x2d0], 0
mov rbp, r9
mov r14, qword [rsp + 0x2c0]
mov edi, r8d
mov rsi, qword [rsp + 0x2c8]
mov r15, rdx
mov rbx, rcx
jne case.0x140071a81.8505
cmp r8d, 1
jne 0x140071822
mov rax, qword [rcx + 0x30]
mov dword [rax + 0x34], r8d
call fcn.140070070
mov qword [rsi], 0
mov rax, qword [rbx + 0x30]
cmp dword [rax + 0x34], 0
jne 0x1400719a8
xor eax, eax
mov rcx, qword [rsp + 0x250]
xor rcx, rsp
call fcn.1400e6b50
add rsp, 0x268
pop r15
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
cmp edi, 0x201
jne 0x14007184c
cmp byte [rcx + 0x58], 0
je 0x140071965
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_SetFocus]
mov qword [rsi], 0
mov eax, 1
jmp 0x140071802
cmp edi, 0x203
je 0x14007182a
cmp edi, 0x100
jne 0x140071878
cmp byte [rcx + 0x58], 0
je 0x140071965
lea eax, [r9 - 0x23]
test eax, 0xfffffffa
jne 0x14007183e
cmp ebp, 0x24
je 0x14007183e
jmp 0x140071834
cmp edi, 7
jne 0x140071909
xor edx, edx
lea rcx, [rsp + 0x40]
mov r8d, 0x208
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rbx + 8]
lea rdx, [rsp + 0x40]
mov r8d, 0x104
call qword [sym.imp.USER32.dll_GetWindowTextW]
cmp byte [rbx + 0x58], 0
je 0x140071965
cmp qword [rbx + 0x78], 8
lea r8, [rbx + 0x60]
jb 0x1400718c0
mov r8, qword [r8]
lea rax, [rsp + 0x40]
sub r8, rax
nop dword [rax + rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x1400718e4
add rax, 2
test ecx, ecx
jne 0x1400718d0
test edx, edx
jne 0x140071965
mov rcx, qword [rbx + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xb1
call qword [sym.imp.USER32.dll_PostMessageW]
mov qword [rsi], 0
jmp case.0x140071a81.8505
cmp edi, 8
jne 0x140071971
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
test eax, eax
jne 0x140071965
lea rdx, [rbx + 0x60]
mov byte [rbx + 0x58], 1
cmp qword [rdx + 0x18], 8
jb 0x14007192e
mov rdx, qword [rdx]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_SetWindowTextW]
mov r8, qword [rbx + 0x48]
mov r9d, 1
mov rcx, qword [rbx + 8]
lea edx, [r9 + 0x2f]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xcc
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rsi], 0
jmp case.0x140071a81.8505
cmp edi, 0x133
jne 0x1400719b2
cmp byte [rcx + 0x58], 0
mov ecx, 8
je 0x140071989
mov ecx, SafeArrayGetLBound
call qword [sym.imp.USER32.dll_GetSysColor]
mov edx, eax
mov rcx, rbp
call qword [sym.imp.GDI32.dll_SetTextColor]
mov ecx, 5
call qword [sym.imp.USER32.dll_GetSysColorBrush]
mov qword [rsi], rax
mov eax, 1
jmp 0x140071802
cmp edi, 0x2133
je 0x140071979
cmp edi, 0x138
jne 0x1400719da
mov ecx, SafeArrayGetLBound
call qword [sym.imp.USER32.dll_GetSysColorBrush]
mov qword [rsi], rax
mov eax, 1
jmp 0x140071802
cmp edi, 0x2138
je 0x1400719c2
cmp edi, 0x2111
jne 0x140071a1b
lea rax, [rsp + 0x30]
mov dword [rsp + 0x30], 1
mov r9, r14
mov qword [rsp + 0x20], rax
mov r8, rbp
mov edx, edi
call fcn.1400701c0
cmp dword [rsp + 0x30], 0
mov qword [rsi], rax
jne 0x1400719a8
lea eax, [rdi - 0x202b]
jmp 0x140071a37
cmp edi, 0x2132
ja 0x140071a54
je case.0x140071a81.8499
lea eax, [r8 - 0x202b]
cmp eax, 0xea
ja case.0x140071a81.8505
lea r8, [0x140000000]
movzx eax, byte [r8 + rax + 0x71ab0]
mov ecx, dword [r8 + rax*4 + 0x71aa8]
add rcx, r8
jmp rcx
lea eax, [r8 - 0x2133]
cmp eax, 0xdd
ja case.0x140071a81.8505
lea r8, [0x140000000]
movzx eax, byte [r8 + rax + 0x71ba4]
mov edx, dword [r8 + rax*4 + 0x71b9c]
add rdx, r8
jmp rdx
lea edx, [rdi - 0x2000]
mov r9, r14
mov r8, rbp
mov rcx, r15
call qword [sym.imp.USER32.dll_DefWindowProcW]
mov qword [rsi], rax
mov eax, 1
jmp 0x140071802