Function at 0x140036eb0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x450
mov r14, rdx
mov r15, rdx
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor ebp, ebp
test rax, rax
je 0x140036ef5
lea r8d, [rbp + 0x64]
mov rcx, rax
lea rdx, [rsp + 0x180]
call qword [sym.imp.USER32.dll_GetWindowTextW]
jmp 0x140036efd
mov word [rsp + 0x180], bp
mov rbx, qword [0x140105e78]
or rsi, 0xffffffffffffffff
mov word [rsp + 0x80], bp
test rbx, rbx
je 0x140036fc8
nop dword [rax]
cmp byte [rbx + 0x15], bpl
je 0x140036f60
mov rcx, qword [rbx]
call fcn.140083080
test eax, eax
je 0x140036f40
cmp eax, 1
je 0x140036f40
lea r9, str.Object
jmp 0x140036f47
mov rax, qword [rbx]
mov r9, qword [rax + 8]
lea r8, [0x1400e4e28]
mov edx, 0x7d
lea rcx, [rsp + 0x80]
call fcn.140088350
mov rbx, qword [rbx + 0x18]
test rbx, rbx
jne 0x140036f20
cmp word [rsp + 0x80], bp
je 0x140036fc8
lea rcx, [rsp + 0x80]
mov rax, rsi
nop
inc rax
cmp word [rcx + rax*2], bp
jne 0x140036f80
cmp rax, 0x7b
jbe 0x140036fbb
lea rdi, [rsp + 0x80]
mov ebx, 0x7f
lea rdi, [rdi + rax*2]
sub rbx, rax
mov r8, rbx
lea rdx, [0x1400dff90]
mov rcx, rdi
call fcn.1400b12e4
mov word [rdi + rbx*2], bp
jmp 0x140036fc8
cmp word [rsp + rax*2 + 0x7e], 0x20
jne 0x140036fc8
mov word [rsp + rax*2 + 0x7e], bp
mov rax, qword [0x140100af8]
cmp byte [rax + 0x138], bpl
je 0x140036fe6
cmp byte [0x140105ee1], bpl
mov ebx, 1
je 0x140036fe8
mov ebx, ebp
mov eax, dword [0x140100c5c]
cmp eax, 1
jle 0x140036ff6
lea ebp, [rax - 1]
mov cl, 1
call fcn.140013a30
movzx ecx, al
lea rdx, [rsp + 0x250]
call fcn.140013e20
mov edx, dword [0x140100c5c]
lea r11, [0x1400decf0]
mov r10d, dword [0x140100c58]
lea r8, str.__preempted:_they_will_resume_when_the_current_thread_finishes_
mov qword [rsp + 0x70], rax
lea r9, [0x1400dece8]
mov eax, dword [0x140100ea8]
lea rcx, [0x1400e8268]
mov dword [rsp + 0x68], eax
sub r10d, ebx
mov dword [rsp + 0x60], edx
lea rax, [rsp + 0x80]
mov dword [rsp + 0x58], r10d
cmp edx, 1
mov edi, 0xfffe
cmovg rcx, r8
mov edx, edi
cmp qword [0x140100ec0], 0
mov r8, r9
mov qword [rsp + 0x50], rcx
mov rcx, r14
mov dword [rsp + 0x48], ebp
cmove r8, r11
cmp qword [0x140100ec8], 0
mov qword [rsp + 0x40], rax
mov eax, dword [0x140105e88]
cmove r9, r11
mov dword [rsp + 0x38], eax
mov eax, dword [0x140105e8c]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r8
lea r8, str.Window:__s_r_nKeybd_hook:__s_r_nMouse_hook:__s_r_nEnabled_Timers:__u_of__u___s__r_nInterrupted_threads:__d_s_r_nPaused_threads:__d_of__d___d_layers__r_nModifiers__GetKeyState___now____s_r_n
mov qword [rsp + 0x20], r9
lea r9, [rsp + 0x180]
call fcn.1400882f0
movsxd rcx, eax
mov edx, edi
sub edx, ecx
lea r14, [r14 + rcx*2]
mov rcx, r14
call fcn.14000aac0
nop dword [rax + rax]
cmp word [r14 + rsi*2 + 2], 0
lea rsi, [rsi + 1]
jne 0x1400370e0
cmp qword [0x140100eb8], 0
lea rax, str._r_nPress__F5__to_refresh.
lea rbx, [r14 + rsi*2]
lea r8, str._r_nKey_History_has_been_disabled_via_KeyHistory_0.
mov rcx, rbx
cmovne r8, rax
mov rax, rbx
sub rax, r15
sar rax, 1
sub edi, eax
mov edx, edi
call fcn.1400882f0
lea r11, [rsp + 0x450]
movsxd rcx, eax
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
lea rax, [rbx + rcx*2]
mov rbx, qword [r11 + 0x20]
mov rsp, r11
pop r15
pop r14
pop rdi
ret