Function at 0x14001b3f0
Capabilities:
Get graphical window text

Disassembly:
push rbp
push rbx
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xa0
mov rax, qword [0x140075030]
xor rax, rsp
mov qword [rbp + 0x1f], rax
mov rax, r8
movsx r12d, r8w
shr rax, 0x10
mov r15d, ecx
movsx r13d, ax
mov r14, r8
mov dword [rbp - 0x25], r13d
mov dword [rbp - 0x29], r12d
mov rcx, qword [rbp - 0x29]
mov qword [rbp - 0x31], rdx
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov qword [0x140077be8], rax
mov rdi, rax
cmp r15d, 0x203
jne 0x14001b4ad
mov r9, r14
xor r8d, r8d
mov edx, 0x84
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, 2
jne 0x14001b872
lea rdx, [rbp - 0x11]
mov dword [rbp - 0x11], 0x2c
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowPlacement]
xor r9d, r9d
mov edx, 0x112
test byte [rbp - 0xd], 3
mov rcx, rdi
je 0x14001b4a2
mov r8d, 0xf120
jmp 0x14001b8ef
mov r8d, 0xf030
jmp 0x14001b8ef
mov qword [rsp + 0xf8], rsi
cmp r15d, 0x201
jne 0x14001b6c8
mov rcx, qword [0x140077bf8]
call qword [sym.imp.USER32.dll_GetParent]
xor esi, esi
mov r9, r14
xor r8d, r8d
mov dword [0x140077c08], esi
mov edx, 0x84
mov qword [0x140077bf8], rsi
mov rcx, rdi
mov qword [0x140077c00], rsi
mov rbx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, 0xffffffffffffffff
je 0x14001b5c0
cmp rax, 2
je 0x14001b59a
cmp rax, 8
je 0x14001b581
cmp rax, 9
je 0x14001b53d
cmp rax, 0x14
jne 0x14001b5f7
xor r9d, r9d
lea edx, [rsi + 0x10]
xor r8d, r8d
mov rcx, rdi
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x14001b5f7
lea rdx, [rbp - 0x11]
mov dword [rbp - 0x11], 0x2c
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowPlacement]
xor r9d, r9d
mov edx, 0x112
test byte [rbp - 0xd], 3
mov rcx, rdi
je 0x14001b573
mov r8d, 0xf120
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x14001b5f7
mov r8d, 0xf030
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x14001b5f7
xor r9d, r9d
mov edx, 0x112
mov r8d, 0xf020
mov rcx, rdi
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x14001b5f7
test rbx, rbx
jne 0x14001b5f7
mov dword [0x140077c08], 1
mov qword [0x140077bf8], rdi
mov dword [0x140077c00], r12d
mov dword [0x140077c04], r13d
jmp 0x14001b5f7
mov edx, 0xfffffff0
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, 0xfffffff0
mov rcx, rdi
bts eax, 0x1b
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov r9, r14
xor r8d, r8d
mov edx, 0x84
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rbx, qword [rbp - 0x29]
mov rcx, rbx
mov dword [0x140077c0c], esi
call qword [sym.imp.USER32.dll_WindowFromPoint]
xor edx, edx
lea rcx, str.Button
mov rsi, rax
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
lea rdx, [rbp - 0x21]
mov r12, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rdx, rbx
lea rcx, [rbp - 0x21]
call qword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x14001b656
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf5
mov rcx, r12
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x14001b86a
xor edx, edx
lea rcx, str.32768
call qword [sym.imp.USER32.dll_FindWindowA]
cmp rax, rsi
jne 0x14001b86a
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1e1
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageA]
mov r8, rbx
xor ecx, ecx
mov rdx, rax
call qword [sym.imp.USER32.dll_MenuItemFromPoint]
movsxd r8, eax
xor r9d, r9d
mov edx, 0x1e5
mov rcx, rsi
call qword [sym.imp.USER32.dll_PostMessageW]
xor r9d, r9d
mov edx, pe_nt_image_headers64
mov rcx, rsi
lea r8d, [r9 + 0xd]
call qword [sym.imp.USER32.dll_PostMessageW]
mov dword [0x140077c0c], 1
jmp 0x14001b86a
cmp r15d, 0x200
jne 0x14001b7bb
cmp dword [0x140077c08], 0
je 0x14001b86a
mov r9, r14
xor r8d, r8d
mov edx, 0x84
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, 2
jne 0x14001b86a
mov rcx, qword [0x140077bf8]
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, qword [0x140077bf8]
lea rdx, [rbp - 0x21]
mov ebx, r12d
mov esi, r13d
sub ebx, dword [0x140077c00]
sub esi, dword [0x140077c04]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rbp - 0x21]
lea rdx, [rbp - 0x11]
mov dword [rbp - 0x35], eax
mov rcx, rdi
mov eax, dword [rbp - 0x1d]
mov dword [rbp - 0x39], eax
mov dword [rbp - 0x11], 0x2c
call qword [sym.imp.USER32.dll_GetWindowPlacement]
cmp dword [rbp - 0xd], 0
je 0x14001b773
xor r9d, r9d
mov edx, 0x112
mov r8d, 0xf120
mov rcx, rdi
call qword [sym.imp.USER32.dll_PostMessageW]
sub ebx, 0xa
sub esi, 0xa
mov ecx, dword [rbp - 0x15]
xor edx, edx
sub ecx, dword [rbp - 0x1d]
mov eax, dword [rbp - 0x19]
mov r9d, dword [rbp - 0x39]
mov r8d, dword [rbp - 0x35]
add r9d, esi
sub eax, dword [rbp - 0x21]
add r8d, ebx
mov dword [rsp + 0x30], 0x40
mov dword [rsp + 0x28], ecx
mov rcx, rdi
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_SetWindowPos]
mov dword [0x140077c00], r12d
mov dword [0x140077c04], r13d
jmp 0x14001b86a
cmp r15d, 0x202
jne 0x14001b86a
xor esi, esi
mov dword [0x140077c08], esi
mov ebx, esi
mov qword [0x140077bf8], rsi
mov qword [0x140077c00], rsi
test rdi, rdi
je 0x14001b801
nop word [rax + rax]
mov rcx, rax
mov rbx, rax
call qword [sym.imp.USER32.dll_GetParent]
test rax, rax
jne 0x14001b7f0
xor r9d, r9d
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], esi
xor r8d, r8d
mov rcx, rbx
mov dword [rsp + 0x20], esi
lea rdx, [r9 - 2]
call qword [sym.imp.USER32.dll_SetWindowPos]
xor r9d, r9d
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], esi
xor r8d, r8d
mov rcx, rbx
mov dword [rsp + 0x20], esi
lea rdx, [r9 - 1]
call qword [sym.imp.USER32.dll_SetWindowPos]
xor r9d, r9d
mov dword [rsp + 0x30], 0x43
mov dword [rsp + 0x28], esi
xor r8d, r8d
mov rcx, rbx
mov dword [rsp + 0x20], esi
lea rdx, [r9 - 2]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rsi, qword [rsp + 0xf8]
mov rax, qword [rbp - 0x31]
cmp rax, 0x20e
je 0x14001b8d5
mov rbx, rdi
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp - 0x29]
mov rcx, rbx
mov rdi, rbx
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rdx, qword [rbp - 0x29]
mov rcx, rbx
call qword [sym.imp.USER32.dll_ChildWindowFromPoint]
mov rbx, rax
test rax, rax
je 0x14001b8ba
cmp rax, rdi
jne 0x14001b890
movzx r14d, word [rbp - 0x25]
movzx eax, word [rbp - 0x29]
shl r14d, 0x10
or r14, rax
mov qword [0x140077bf0], rdi
mov rax, qword [rbp - 0x31]
test rdi, rdi
je 0x14001b8f5
cmp dword [0x140077c0c], 0
jne 0x14001b8f5
mov r9, r14
mov r8, rax
mov edx, r15d
mov rcx, rdi
call qword [sym.imp.USER32.dll_PostMessageW]
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.14001e530
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rbx
pop rbp
ret