Function at 0x140017d98
Capabilities:
Get graphical window text
Open clipboard
Read clipboard data

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x1e8]
sub rsp, 0x2e0
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x140035868]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov dword [rsp + 0x30], r8d
mov esi, edx
mov rdi, rcx
mov ebx, 1
and dword [rsp + 0x40], 0
cmp dword [rcx + 0x3f0], 0
je 0x140017e08
call fcn.14001ada4
mov rcx, rdi
call fcn.140018ea8
mov rdx, rax
xor r8d, r8d
mov rcx, rdi
call fcn.140018f04
mov rcx, rdi
call fcn.140018ea8
mov rcx, rax
xor r8d, r8d
test rax, rax
je 0x140017e8c
mov rax, qword [rax]
mov rax, qword [rax + 0x60]
call qword [0x140022378]
xor r8d, r8d
test eax, eax
jne 0x140017e8c
mov rcx, qword [rdi + 0x48]
mov qword [rsp + 0x48], rcx
mov rax, qword [rcx]
mov rax, qword [rax + 0x38]
call qword [0x140022378]
xor r8d, r8d
test eax, eax
je 0x140017e8c
mov dword [rsp + 0x40], ebx
mov edx, 0x7f02
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetCursor]
mov rbx, rax
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x30]
call qword [0x140022378]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetCursor]
mov ebx, 1
xor r8d, r8d
mov eax, 0x800c
cmp esi, eax
jg 0x140018113
je 0x1400180fb
mov eax, 0x8000
cmp esi, eax
jg 0x140017fcb
je 0x140017f9f
cmp esi, 3
jl 0x1400182b5
cmp esi, 4
jle 0x14001827c
cmp esi, 5
je 0x140017eec
mov edx, 0xcc
cmp esi, edx
je 0x140017f44
lea eax, [rdx + 2]
cmp esi, eax
je 0x140017f19
lea edx, [rax + 2]
cmp esi, edx
je 0x140017f00
cmp esi, 0xd4
jne 0x1400182b5
mov rcx, rdi
call fcn.14001ae90
or dword [0x14003abc0], 0x20
jmp 0x140018479
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, ebx
jne 0x140018479
mov edx, 0xce
jmp 0x140017f32
mov edx, eax
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, ebx
jne 0x140018479
mov edx, 0xd0
xor r8d, r8d
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_CheckDlgButton]
jmp 0x140018479
cmp dword [rsp + 0x30], 0x300
jne 0x140018479
mov dword [rdi + 0x3f8], r8d
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_GetDlgItem]
lea rsi, [rdi + 0x408]
mov r8d, 0x104
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov rcx, rsi
test eax, eax
lea rdx, [0x140022b78]
je 0x140017f8f
lea rdx, [rbp - 0x40]
call qword [sym.imp.MFC42u.dll_AfxDeleteObject]
mov rcx, rdi
call fcn.140017108
jmp 0x140018013
cmp dword [rdi + 0x3a8], r8d
je 0x140017fb8
xor r8d, r8d
mov edx, 0xe124
mov rcx, rdi
call fcn.140017d98
mov rcx, rdi
call fcn.140019d40
or dword [0x14003abc0], ebx
jmp 0x140018479
sub esi, 0x8001
je 0x1400180e7
sub esi, 1
je 0x1400180c5
sub esi, 4
je 0x1400180b1
sub esi, 4
je 0x140018020
cmp esi, 1
jne 0x1400182b5
cmp dword [rdi + 0x84], r8d
je 0x140018479
mov dword [rdi + 0x84], r8d
mov rcx, rdi
call fcn.140019bac
mov rcx, rdi
call fcn.14001a670
jmp 0x140018479
mov rcx, rdi
call fcn.140018ea8
mov rbx, rax
test rax, rax
je 0x140018082
mov rax, qword [rax]
mov rcx, rbx
mov rax, qword [rax + 0x60]
call qword [0x140022378]
test eax, eax
jne 0x140018082
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1009
mov rcx, qword [rdi + 0x28]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
lea edx, [r9 + 0x67]
mov rcx, rdi
call fcn.140019afc
mov rax, qword [rbx]
xor r8d, r8d
mov rdx, qword [rdi + 0x48]
mov rcx, rbx
mov rax, qword [rax + 0xb8]
call qword [0x140022378]
mov ebx, 1
mov eax, ebx
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.14001cbc0
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
mov rcx, rdi
call fcn.14001a074
or dword [0x14003abc0], 4
jmp 0x140018479
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140018479
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x140018479
mov rcx, rdi
call fcn.140019eb8
or dword [0x14003abc0], 2
jmp 0x140018479
cmp dword [rdi + 0x84], r8d
jne 0x140018479
mov dword [rdi + 0x84], ebx
jmp 0x14001800b
mov eax, 0x8017
cmp esi, eax
jg 0x140018289
je 0x140018224
sub esi, 0x800d
je 0x1400181d0
sub esi, 3
je 0x14001816c
sub esi, 1
je 0x140018158
sub esi, 1
je 0x140018479
cmp esi, 2
jne 0x1400182b5
call fcn.14001c064
jmp 0x140018479
mov rcx, rdi
call fcn.1400184a0
or dword [0x14003abc0], 0x10
jmp 0x140018479
mov rcx, rdi
call fcn.140018ea8
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov rcx, qword [rdi + 0x28]
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jle 0x140018479
xor esi, esi
mov eax, eax
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x70], 2
mov dword [rsp + 0x6c], 2
lea r9, [rsp + 0x60]
mov r8, rsi
mov edx, 0x102b
mov rcx, qword [rdi + 0x28]
call qword [sym.imp.USER32.dll_SendMessageW]
add rsi, rbx
sub qword [rsp + 0x38], rbx
jne 0x14001819a
jmp 0x140018479
mov edx, 0x18f
mov rcx, qword [rdi]
call qword [sym.imp.USER32.dll_LoadIconW]
mov rsi, rax
test rax, rax
je 0x140018479
mov r9d, 0x104
lea r8, [rbp - 0x40]
mov edx, 0x75
mov rcx, qword [rdi]
call qword [sym.imp.USER32.dll_LoadStringW]
mov r9, rsi
xor r8d, r8d
lea rdx, [rbp - 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.SHELL32.dll_ShellAboutW]
mov rcx, rsi
call qword [sym.imp.USER32.dll_DestroyIcon]
jmp 0x140018479
call qword [sym.imp.USER32.dll_GetFocus]
cmp dword [rdi + 0x3a8], 0
je 0x140018479
cmp rax, qword [rdi + 0x3d8]
je 0x14001827c
cmp rax, qword [rdi + 0x3e8]
je 0x14001827c
mov rcx, qword [rdi + 0x3d0]
call qword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x14001826f
mov rcx, qword [rdi + 0x3e0]
call qword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x140018479
mov rcx, rdi
call fcn.14001ae90
jmp 0x140018479
mov rcx, rdi
call fcn.14001ae40
jmp 0x140018479
sub esi, 0xe102
je 0x140018458
sub esi, 5
je 0x140018447
sub esi, 0x1b
je 0x14001843d
sub esi, 2
je 0x1400183f2
cmp esi, 1
je 0x1400182bd
mov ebx, r8d
jmp 0x140018479
mov rsi, qword [rdi + 0x3b8]
call qword [sym.imp.USER32.dll_GetFocus]
cmp rax, rsi
jne 0x140018479
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x140018479
mov rcx, qword [rdi + 0x3b8]
call qword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x140018479
and dword [rsp + 0x30], 0
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x1400183d5
mov esi, SafeArrayGetElemsize
mov ecx, esi
call qword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
je 0x1400183c4
mov ecx, esi
call qword [sym.imp.USER32.dll_GetClipboardData]
mov rsi, rax
test rax, rax
je 0x1400183c4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
test rax, rax
je 0x1400183c4
mov rdx, rax
lea rcx, [rsp + 0x38]
call qword [sym.imp.MFC42u.dll_CDaoException::CDaoException]
nop
mov edx, 9
lea rcx, [rsp + 0x38]
call qword [sym.imp.MFC42u.dll_CRichEditView::FindTextSimple]
cmp eax, 0xffffffff
je 0x14001837f
mov edx, 9
lea r8d, [rdx + 0x17]
lea rcx, [rsp + 0x38]
call qword [sym.imp.MFC42u.dll_CFontHolder::SetFont]
mov dword [rsp + 0x48], 2
mov dword [rsp + 0x4c], 0x4b0
mov r9, qword [rsp + 0x38]
lea r8, [rsp + 0x48]
mov edx, AfxDaoGetEngine
mov rcx, qword [rdi + 0x3b8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rsp + 0x30], ebx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
nop
lea rcx, [rsp + 0x38]
call qword [sym.imp.MFC42u.dll_CDocObjectServer::XOleDocument::AddRef]
call qword [sym.imp.USER32.dll_CloseClipboard]
cmp dword [rsp + 0x30], 0
jne 0x140018479
xor r9d, r9d
xor r8d, r8d
mov edx, 0x302
mov rcx, qword [rdi + 0x3b8]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140018479
mov eax, r8d
cmp dword [rdi + 0x3a8], r8d
sete al
mov dword [rdi + 0x3a8], eax
and qword [rdi + 0x3f4], 0
mov qword [rdi + reloc.MFC42u.dll_CDocObjectServer::XOleDocument::AddRef], r8
mov dword [rdi + 0x3f0], r8d
mov rcx, rdi
call fcn.140016fd8
mov rcx, rdi
call fcn.140016cdc
mov rcx, rdi
call fcn.14001a670
mov rcx, rdi
call fcn.140017108
jmp 0x140018479
mov rcx, rdi
call fcn.14001a9c4
jmp 0x140018479
mov rcx, rdi
call fcn.14001abe8
or dword [0x14003abc0], 8
jmp 0x140018479
cmp dword [rdi + 0x3a8], r8d
je 0x140018471
xor r8d, r8d
mov edx, 0xe124
mov rcx, rdi
call fcn.140017d98
mov rcx, rdi
call fcn.140017b90
cmp dword [rsp + 0x40], 0
je 0x140018087
mov rcx, rdi
call fcn.140018ea8
mov rdx, rax
xor r8d, r8d
mov rcx, rdi
call fcn.140018f04
jmp 0x140018087