Function at 0x140036af0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x450
mov r14, rdx
mov r15, rdx
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor ebp, ebp
test rax, rax
je 0x140036b35
lea r8d, [rbp + 0x64]
mov rcx, rax
lea rdx, [rsp + 0x180]
call qword [sym.imp.USER32.dll_GetWindowTextW]
jmp 0x140036b3d
mov word [rsp + 0x180], bp
mov rbx, qword [0x140105e68]
or rsi, 0xffffffffffffffff
mov word [rsp + 0x80], bp
test rbx, rbx
je 0x140036c08
nop dword [rax]
cmp byte [rbx + 0x15], bpl
je 0x140036ba0
mov rcx, qword [rbx]
call fcn.140082590
test eax, eax
je 0x140036b80
cmp eax, 1
je 0x140036b80
lea r9, str.Object
jmp 0x140036b87
mov rax, qword [rbx]
mov r9, qword [rax + 8]
lea r8, [0x1400e4d88]
mov edx, 0x7d
lea rcx, [rsp + 0x80]
call fcn.140087860
mov rbx, qword [rbx + 0x18]
test rbx, rbx
jne 0x140036b60
cmp word [rsp + 0x80], bp
je 0x140036c08
lea rcx, [rsp + 0x80]
mov rax, rsi
nop
inc rax
cmp word [rcx + rax*2], bp
jne 0x140036bc0
cmp rax, 0x7b
jbe 0x140036bfb
lea rdi, [rsp + 0x80]
mov ebx, 0x7f
lea rdi, [rdi + rax*2]
sub rbx, rax
mov r8, rbx
lea rdx, [0x1400dff20]
mov rcx, rdi
call fcn.1400b0734
mov word [rdi + rbx*2], bp
jmp 0x140036c08
cmp word [rsp + rax*2 + 0x7e], 0x20
jne 0x140036c08
mov word [rsp + rax*2 + 0x7e], bp
mov rax, qword [0x140100af8]
cmp byte [rax + 0x138], bpl
je 0x140036c26
cmp byte [0x140105ed1], bpl
mov ebx, 1
je 0x140036c28
mov ebx, ebp
mov eax, dword [0x140100c5c]
cmp eax, 1
jle 0x140036c36
lea ebp, [rax - 1]
mov cl, 1
call fcn.140013a60
movzx ecx, al
lea rdx, [rsp + 0x250]
call fcn.140013e50
mov edx, dword [0x140100c5c]
lea r11, [0x1400deca0]
mov r10d, dword [0x140100c58]
lea r8, str.__preempted:_they_will_resume_when_the_current_thread_finishes_
mov qword [rsp + 0x70], rax
lea r9, [0x1400dec98]
mov eax, dword [0x140100ea8]
lea rcx, [0x1400e8118]
mov dword [rsp + 0x68], eax
sub r10d, ebx
mov dword [rsp + 0x60], edx
lea rax, [rsp + 0x80]
mov dword [rsp + 0x58], r10d
cmp edx, 1
mov edi, 0xfffe
cmovg rcx, r8
mov edx, edi
cmp qword [0x140100ec0], 0
mov r8, r9
mov qword [rsp + 0x50], rcx
mov rcx, r14
mov dword [rsp + 0x48], ebp
cmove r8, r11
cmp qword [0x140100ec8], 0
mov qword [rsp + 0x40], rax
mov eax, dword [0x140105e78]
cmove r9, r11
mov dword [rsp + 0x38], eax
mov eax, dword [0x140105e7c]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r8
lea r8, str.Window:__s_r_nKeybd_hook:__s_r_nMouse_hook:__s_r_nEnabled_Timers:__u_of__u___s__r_nInterrupted_threads:__d_s_r_nPaused_threads:__d_of__d___d_layers__r_nModifiers__GetKeyState___now____s_r_n
mov qword [rsp + 0x20], r9
lea r9, [rsp + 0x180]
call fcn.140087800
movsxd rcx, eax
mov edx, edi
sub edx, ecx
lea r14, [r14 + rcx*2]
mov rcx, r14
call fcn.14000aa70
nop dword [rax + rax]
cmp word [r14 + rsi*2 + 2], 0
lea rsi, [rsi + 1]
jne 0x140036d20
cmp qword [0x140100eb8], 0
lea rax, str._r_nPress__F5__to_refresh.
lea rbx, [r14 + rsi*2]
lea r8, str._r_nKey_History_has_been_disabled_via_KeyHistory_0.
mov rcx, rbx
cmovne r8, rax
mov rax, rbx
sub rax, r15
sar rax, 1
sub edi, eax
mov edx, edi
call fcn.140087800
lea r11, [rsp + 0x450]
movsxd rcx, eax
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
lea rax, [rbx + rcx*2]
mov rbx, qword [r11 + 0x20]
mov rsp, r11
pop r15
pop r14
pop rdi
ret