Function at 0x140049120
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x450
mov r14, rdx
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor ebp, ebp
test rax, rax
je 0x140049164
lea r8d, [rbp + 0x64]
mov rcx, rax
lea rdx, [rsp + 0x180]
call qword [sym.imp.USER32.dll_GetWindowTextW]
jmp 0x14004916c
mov word [rsp + 0x180], bp
mov rbx, qword [0x140106868]
mov rsi, 0xffffffffffffffff
mov word [rsp + 0x80], bp
test rbx, rbx
je 0x140049239
nop dword [rax + rax]
cmp byte [rbx + 0x15], bpl
je 0x1400491d0
mov rcx, qword [rbx]
call fcn.14009e100
test eax, eax
je 0x1400491b0
cmp eax, 1
je 0x1400491b0
lea r9, str.Object
jmp 0x1400491b7
mov rax, qword [rbx]
mov r9, qword [rax + 8]
lea r8, [0x1400e81c8]
mov edx, 0x7d
lea rcx, [rsp + 0x80]
call fcn.1400acfd0
mov rbx, qword [rbx + 0x18]
test rbx, rbx
jne 0x140049190
cmp word [rsp + 0x80], bp
je 0x140049239
lea rcx, [rsp + 0x80]
mov rax, rsi
nop
inc rax
cmp word [rcx + rax*2], bp
jne 0x1400491f0
cmp rax, 0x7b
jbe 0x14004922c
lea rdi, [rsp + 0x80]
mov ebx, 0x7f
lea rdi, [rdi + rax*2]
sub rbx, rax
mov r8, rbx
lea rdx, [0x1400e2ce0]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov word [rdi + rbx*2], bp
jmp 0x140049239
cmp word [rsp + rax*2 + 0x7e], 0x20
jne 0x140049239
mov word [rsp + rax*2 + 0x7e], bp
mov rax, qword [0x1401025e8]
cmp byte [rax + 0x138], bpl
je 0x140049257
cmp byte [0x1401068d1], bpl
mov ebx, 1
je 0x140049259
mov ebx, ebp
mov eax, dword [0x140102768]
cmp eax, 1
jle 0x140049267
lea ebp, [rax - 1]
mov cl, 1
call fcn.140018500
movzx ecx, al
lea rdx, [rsp + 0x250]
call fcn.1400188f0
mov edx, dword [0x140102768]
lea r11, [0x1400e1540]
mov r10d, dword [0x140102744]
lea r8, str.__preempted:_they_will_resume_when_the_current_thread_finishes_
mov qword [rsp + 0x70], rax
lea r9, [0x1400e1538]
mov eax, dword [0x14010278c]
lea rcx, [0x1400cc644]
mov dword [rsp + 0x68], eax
sub r10d, ebx
mov dword [rsp + 0x60], edx
lea rax, [rsp + 0x80]
mov dword [rsp + 0x58], r10d
cmp edx, 1
mov edi, 0xfffe
cmovg rcx, r8
mov edx, edi
cmp qword [0x1401027b8], 0
mov r8, r9
mov qword [rsp + 0x50], rcx
mov rcx, r14
mov dword [rsp + 0x48], ebp
cmove r8, r11
cmp qword [0x1401027c0], 0
mov qword [rsp + 0x40], rax
mov eax, dword [0x140106878]
cmove r9, r11
mov dword [rsp + 0x38], eax
mov eax, dword [0x14010687c]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r8
lea r8, str.Window:__s_r_nKeybd_hook:__s_r_nMouse_hook:__s_r_nEnabled_Timers:__u_of__u___s__r_nInterrupted_threads:__d_s_r_nPaused_threads:__d_of__d___d_layers__r_nModifiers__GetKeyState___now____s_r_n
mov qword [rsp + 0x20], r9
lea r9, [rsp + 0x180]
call fcn.1400acf70
movsxd rcx, eax
mov edx, edi
sub edx, ecx
lea rbx, [r14 + rcx*2]
mov rcx, rbx
call fcn.14000d0c0
nop dword [rax]
cmp word [rbx + rsi*2 + 2], 0
lea rsi, [rsi + 1]
jne 0x140049350
cmp qword [0x1401027b0], 0
lea rax, str._r_nPress__F5__to_refresh.
lea rbx, [rbx + rsi*2]
lea r8, str._r_nKey_History_has_been_disabled_via_KeyHistory_0.
mov rcx, rbx
cmovne r8, rax
mov rax, rbx
sub rax, r14
sar rax, 1
sub edi, eax
mov edx, edi
call fcn.1400acf70
lea r11, [rsp + 0x450]
movsxd rcx, eax
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
lea rax, [rbx + rcx*2]
mov rbx, qword [r11 + 0x10]
mov rsp, r11
pop r14
ret