Function at 0x14004eca0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x450
mov r14, rdx
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor ebp, ebp
test rax, rax
je 0x14004ece4
lea r8d, [rbp + 0x64]
mov rcx, rax
lea rdx, [rsp + 0x180]
call qword [sym.imp.USER32.dll_GetWindowTextW]
jmp 0x14004ecec
mov word [rsp + 0x180], bp
mov rbx, qword [0x140119768]
mov rsi, 0xffffffffffffffff
mov word [rsp + 0x80], bp
test rbx, rbx
je 0x14004edb9
nop dword [rax + rax]
cmp byte [rbx + 0x15], bpl
je 0x14004ed50
mov rcx, qword [rbx]
call fcn.1400ad7d0
test eax, eax
je 0x14004ed30
cmp eax, 1
je 0x14004ed30
lea r9, str.Object
jmp 0x14004ed37
mov rax, qword [rbx]
mov r9, qword [rax + 8]
lea r8, [0x1400fc1e8]
mov edx, 0x7d
lea rcx, [rsp + 0x80]
call fcn.1400bf410
mov rbx, qword [rbx + 0x18]
test rbx, rbx
jne 0x14004ed10
cmp word [rsp + 0x80], bp
je 0x14004edb9
lea rcx, [rsp + 0x80]
mov rax, rsi
nop
inc rax
cmp word [rcx + rax*2], bp
jne 0x14004ed70
cmp rax, 0x7b
jbe 0x14004edac
lea rdi, [rsp + 0x80]
mov ebx, 0x7f
lea rdi, [rdi + rax*2]
sub rbx, rax
mov r8, rbx
lea rdx, [0x1400f6d10]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov word [rdi + rbx*2], bp
jmp 0x14004edb9
cmp word [rsp + rax*2 + 0x7e], 0x20
jne 0x14004edb9
mov word [rsp + rax*2 + 0x7e], bp
mov rax, qword [0x140115548]
cmp byte [rax + 0x138], bpl
je 0x14004edd7
cmp byte [0x1401197d1], bpl
mov ebx, 1
je 0x14004edd9
mov ebx, ebp
mov eax, dword [0x1401156c8]
cmp eax, 1
jle 0x14004ede7
lea ebp, [rax - 1]
mov cl, 1
call fcn.14001a280
movzx ecx, al
lea rdx, [rsp + 0x250]
call fcn.14001a670
mov edx, dword [0x1401156c8]
lea r11, [0x1400f5570]
mov r10d, dword [0x1401156a4]
lea r8, str.__preempted:_they_will_resume_when_the_current_thread_finishes_
mov qword [rsp + 0x70], rax
lea r9, [0x1400f5568]
mov eax, dword [0x1401156ec]
lea rcx, [0x1400e0674]
mov dword [rsp + 0x68], eax
sub r10d, ebx
mov dword [rsp + 0x60], edx
lea rax, [rsp + 0x80]
mov dword [rsp + 0x58], r10d
cmp edx, 1
mov edi, 0xfffe
cmovg rcx, r8
mov edx, edi
cmp qword [0x140115718], 0
mov r8, r9
mov qword [rsp + 0x50], rcx
mov rcx, r14
mov dword [rsp + 0x48], ebp
cmove r8, r11
cmp qword [0x140115720], 0
mov qword [rsp + 0x40], rax
mov eax, dword [0x140119778]
cmove r9, r11
mov dword [rsp + 0x38], eax
mov eax, dword [0x14011977c]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r8
lea r8, str.Window:__s_r_nKeybd_hook:__s_r_nMouse_hook:__s_r_nEnabled_Timers:__u_of__u___s__r_nInterrupted_threads:__d_s_r_nPaused_threads:__d_of__d___d_layers__r_nModifiers__GetKeyState___now____s_r_n
mov qword [rsp + 0x20], r9
lea r9, [rsp + 0x180]
call fcn.1400bf370
movsxd rcx, eax
mov edx, edi
sub edx, ecx
lea rbx, [r14 + rcx*2]
mov rcx, rbx
call fcn.14000dcc0
nop dword [rax]
cmp word [rbx + rsi*2 + 2], 0
lea rsi, [rsi + 1]
jne 0x14004eed0
cmp qword [0x140115710], 0
lea rax, str._r_nPress__F5__to_refresh.
lea rbx, [rbx + rsi*2]
lea r8, str._r_nKey_History_has_been_disabled_via_KeyHistory_0.
mov rcx, rbx
cmovne r8, rax
mov rax, rbx
sub rax, r14
sar rax, 1
sub edi, eax
mov edx, edi
call fcn.1400bf370
lea r11, [rsp + 0x450]
movsxd rcx, eax
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
lea rax, [rbx + rcx*2]
mov rbx, qword [r11 + 0x10]
mov rsp, r11
pop r14
ret