Function at 0x140010d10
Capabilities:
Get graphical window text

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x798]
sub rsp, 0x870
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x140218f40]
xor rax, rsp
mov qword [rbp + 0x760], rax
xor esi, esi
mov edi, esi
lea rcx, [rsp + 0x48]
call qword [sym.imp.USER32.dll_GetCursorPos]
cmp eax, 1
jne 0x140010d79
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov rdi, rax
mov qword [0x140226c60], rax
mov rcx, rdi
call qword [0x140226420]
mov dword [0x140226ca8], esi
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov qword [rsp + 0x40], rax
mov dword [0x140226c50], esi
mov dword [0x140226c54], esi
mov dword [0x140226c58], esi
cmp dword [0x140226c4c], 1
jne 0x1400115c3
call fcn.14001e6e8
mov rdx, rax
mov ecx, esi
test rax, rax
setne cl
test ecx, ecx
jne 0x140010dd1
mov ecx, 0x80004005
call fcn.140014f90
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x28], rbx
call fcn.14001e6e8
mov rdx, rax
mov ecx, esi
test rax, rax
setne cl
test ecx, ecx
jne 0x140010e02
mov ecx, 0x80004005
call fcn.140014f90
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rsi, [rax + 0x18]
mov qword [rsp + 0x20], rsi
mov r8d, 0x100
lea rdx, [rbp + 0x360]
mov rcx, qword [0x140226c60]
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov r8d, 0x100
lea rdx, [rsp + 0x60]
mov rcx, qword [0x140226c60]
call qword [sym.imp.USER32.dll_GetClassNameW]
xor eax, eax
or r13, 0xffffffffffffffff
mov rcx, r13
lea rdi, [rbp + 0x360]
repne scasw ax, word [rdi]
not rcx
dec rcx
mov r14, rcx
lea r12d, [rax + 1]
test ecx, ecx
jne 0x140010ed2
lea rdx, [rsi - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], eax
je 0x140010f5c
cmp dword [rdx + 0x10], eax
jge 0x140010e9f
cmp dword [rsi - 0xc], eax
jge 0x140010e8f
mov ecx, 0x80070057
call fcn.140014f90
int3
xor r14d, r14d
mov dword [rsi - 0x10], r14d
mov word [rsi], r14w
jmp 0x140010f5f
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140010eb6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rsi, [rax + 0x18]
mov qword [rsp + 0x20], rsi
mov rbx, qword [rsp + 0x28]
jmp 0x140010f5c
mov r15d, dword [rsi - 0x10]
lea rdi, [rbp + 0x360]
sub rdi, rsi
sar rdi, 1
test ecx, ecx
jns 0x140010ef2
mov ecx, 0x80070057
call fcn.140014f90
int3
mov ecx, r12d
sub ecx, dword [rsi - 8]
mov eax, dword [rsi - 0xc]
sub eax, r14d
or eax, ecx
jge 0x140010f14
mov edx, r14d
lea rcx, [rsp + 0x20]
call fcn.140014f30
mov rsi, qword [rsp + 0x20]
movsxd rax, r14d
movsxd rdx, dword [rsi - 0xc]
mov rcx, rsi
add rdx, rdx
cmp rdi, r15
lea r15, [rax + rax]
mov r9, r15
ja 0x140010f38
lea r8, [rsi + rdi*2]
call fcn.14015e47c
jmp 0x140010f44
lea r8, [rbp + 0x360]
call fcn.14015e3f4
cmp r14d, dword [rsi - 0xc]
jg 0x1400115b8
mov dword [rsi - 0x10], r14d
xor r14d, r14d
mov word [r15 + rsi], r14w
jmp 0x140010f5f
xor r14d, r14d
xor eax, eax
mov rcx, r13
lea rdi, [rsp + 0x60]
repne scasw ax, word [rdi]
not rcx
dec rcx
mov rdi, rcx
test ecx, ecx
jne 0x140010fde
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], eax
je 0x14001105e
cmp dword [rdx + 0x10], eax
jge 0x140010fab
cmp dword [rbx - 0xc], eax
jge 0x140010f9e
mov ecx, 0x80070057
call fcn.140014f90
int3
mov dword [rbx - 0x10], r14d
mov word [rbx], r14w
jmp 0x14001105e
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140010fc2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x28], rbx
mov rsi, qword [rsp + 0x20]
jmp 0x14001105e
mov r15d, dword [rbx - 0x10]
lea r14, [rsp + 0x60]
sub r14, rbx
sar r14, 1
test ecx, ecx
jns 0x140010ffc
mov ecx, 0x80070057
call fcn.140014f90
int3
mov ecx, r12d
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x14001101c
mov edx, edi
lea rcx, [rsp + 0x28]
call fcn.140014f30
mov rbx, qword [rsp + 0x28]
movsxd rax, edi
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
add rdx, rdx
cmp r14, r15
lea r15, [rax + rax]
mov r9, r15
ja 0x140011040
lea r8, [rbx + r14*2]
call fcn.14015e47c
jmp 0x14001104a
lea r8, [rsp + 0x60]
call fcn.14015e3f4
cmp edi, dword [rbx - 0xc]
jg 0x1400115ad
mov dword [rbx - 0x10], edi
xor r14d, r14d
mov word [r15 + rbx], r14w
cmp dword [rbx - 0x10], 0
jl 0x140011555
lea rdx, str.Internet_Explorer_Server
mov rcx, rbx
call fcn.14015eb3c
test rax, rax
je 0x140011099
sub rax, rbx
sar rax, 1
test eax, eax
js 0x140011099
mov dword [0x140226c50], r12d
mov dword [0x140226c54], r12d
jmp 0x140011563
cmp dword [rbx - 0x10], 0
jl 0x140011555
lea rdx, str.Chrome_RenderWidgetHostHWND
mov rcx, rbx
call fcn.14015eb3c
test rax, rax
je 0x1400110c5
sub rax, rbx
sar rax, 1
test eax, eax
jns 0x140011555
cmp dword [rbx - 0x10], 0
jl 0x140011555
lea rdx, str.WebKit2WebViewWindowClass
mov rcx, rbx
call fcn.14015eb3c
test rax, rax
je 0x1400110f1
sub rax, rbx
sar rax, 1
test eax, eax
jns 0x140011555
cmp dword [rbx - 0x10], 0
jl 0x140011555
lea rdx, str.Photos_PhotoCanvas
mov rcx, rbx
call fcn.14015eb3c
test rax, rax
je 0x140011133
sub rax, rbx
sar rax, 1
test eax, eax
js 0x140011133
mov dword [0x140226c50], r14d
mov dword [0x140226c54], r12d
mov dword [0x140226c58], r12d
jmp 0x14001156a
cmp dword [rbx - 0x10], 0
jl 0x140011555
lea rdx, str.UIHubMouseHiderWindowClass
mov rcx, rbx
call fcn.14015eb3c
test rax, rax
je 0x140011175
sub rax, rbx
sar rax, 1
test eax, eax
js 0x140011175
mov dword [0x140226c50], r12d
mov dword [0x140226c54], r12d
mov dword [0x140226c58], r12d
jmp 0x14001156a
cmp dword [rbx - 0x10], 0
jl 0x140011555
lea rdx, str.MacromediaFlashPlayerActiveX
mov rcx, rbx
call fcn.14015eb3c
test rax, rax
je 0x1400111a9
sub rax, rbx
sar rax, 1
test eax, eax
js 0x1400111a9
mov dword [0x140226c54], r12d
jmp 0x14001155c
cmp dword [rbx - 0x10], 0
jl 0x140011555
lea rdx, str._WwG
mov rcx, rbx
call fcn.14015eb3c
test rax, rax
je 0x140011511
sub rax, rbx
sar rax, 1
test eax, eax
js 0x140011511
call fcn.14001e6e8
mov rdx, rax
mov ecx, r14d
test rax, rax
setne cl
test ecx, ecx
jne 0x1400111f9
mov ecx, 0x80004005
call fcn.140014f90
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x30], rbx
call fcn.14001e6e8
mov rdx, rax
mov ecx, r14d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001122b
mov ecx, 0x80004005
call fcn.140014f90
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rsi, [rax + 0x18]
mov qword [rsp + 0x38], rsi
mov r8d, 0x100
lea rdx, [rbp + 0x160]
mov rdi, qword [rsp + 0x40]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
mov r8d, 0x100
lea rdx, [rbp + 0x560]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowTextW]
xor eax, eax
mov rcx, r13
lea rdi, [rbp + 0x160]
repne scasw ax, word [rdi]
not rcx
dec rcx
mov r14, rcx
test ecx, ecx
jne 0x1400112f2
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], eax
je 0x14001137c
cmp dword [rdx + 0x10], eax
jge 0x1400112bf
cmp dword [rbx - 0xc], eax
jge 0x1400112af
mov ecx, 0x80070057
call fcn.140014f90
int3
xor r14d, r14d
mov dword [rbx - 0x10], r14d
mov word [rbx], r14w
jmp 0x14001137f
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400112d6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x30], rbx
mov rsi, qword [rsp + 0x38]
jmp 0x14001137c
mov r15d, dword [rbx - 0x10]
lea rdi, [rbp + 0x160]
sub rdi, rbx
sar rdi, 1
test ecx, ecx
jns 0x140011312
mov ecx, 0x80070057
call fcn.140014f90
int3
mov ecx, r12d
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x140011334
mov edx, r14d
lea rcx, [rsp + 0x30]
call fcn.140014f30
mov rbx, qword [rsp + 0x30]
movsxd rax, r14d
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
add rdx, rdx
cmp rdi, r15
lea r15, [rax + rax]
mov r9, r15
ja 0x140011358
lea r8, [rbx + rdi*2]
call fcn.14015e47c
jmp 0x140011364
lea r8, [rbp + 0x160]
call fcn.14015e3f4
cmp r14d, dword [rbx - 0xc]
jg 0x140011506
mov dword [rbx - 0x10], r14d
xor r14d, r14d
mov word [r15 + rbx], r14w
jmp 0x14001137f
xor r14d, r14d
xor eax, eax
mov rcx, r13
lea rdi, [rbp + 0x560]
repne scasw ax, word [rdi]
not rcx
dec rcx
mov rdi, rcx
test ecx, ecx
jne 0x140011400
lea rdx, [rsi - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], eax
je 0x140011483
cmp dword [rdx + 0x10], eax
jge 0x1400113cd
cmp dword [rsi - 0xc], eax
jge 0x1400113c0
mov ecx, 0x80070057
call fcn.140014f90
int3
mov dword [rsi - 0x10], r14d
mov word [rsi], r14w
jmp 0x140011483
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400113e4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rsi, [rax + 0x18]
mov qword [rsp + 0x38], rsi
mov rbx, qword [rsp + 0x30]
jmp 0x140011483
mov r15d, dword [rsi - 0x10]
lea r14, [rbp + 0x560]
sub r14, rsi
sar r14, 1
test ecx, ecx
jns 0x140011420
mov ecx, 0x80070057
call fcn.140014f90
int3
sub r12d, dword [rsi - 8]
mov eax, dword [rsi - 0xc]
sub eax, ecx
or eax, r12d
jge 0x14001143f
mov edx, ecx
lea rcx, [rsp + 0x38]
call fcn.140014f30
mov rsi, qword [rsp + 0x38]
movsxd rax, edi
movsxd rdx, dword [rsi - 0xc]
mov rcx, rsi
lea r12, [rax + rax]
add rdx, rdx
mov r9, r12
cmp r14, r15
ja 0x140011463
lea r8, [rsi + r14*2]
call fcn.14015e47c
jmp 0x14001146f
lea r8, [rbp + 0x560]
call fcn.14015e3f4
cmp edi, dword [rsi - 0xc]
jg 0x1400114fb
mov dword [rsi - 0x10], edi
xor r14d, r14d
mov word [r12 + rsi], r14w
cmp dword [rbx - 0x10], 0
jl 0x1400114a3
lea rdx, str.rctrl_renwnd32
mov rcx, rbx
call fcn.14015eb3c
test rax, rax
je 0x1400114a3
sub rax, rbx
sar rax, 1
mov dword [0x140226c58], r14d
mov dword [0x140226c54], r14d
mov dword [0x140226c50], r14d
lea rdx, [rsi - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400114d4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400114f4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rsi, qword [rsp + 0x20]
jmp 0x14001156a
mov ecx, 0x80070057
call fcn.140014f90
int3
mov ecx, 0x80070057
call fcn.140014f90
nop
cmp dword [rbx - 0x10], 0
jl 0x140011555
lea rdx, str.EXCEL7
mov rcx, rbx
call fcn.14015eb3c
test rax, rax
je 0x140011535
sub rax, rbx
sar rax, 1
test eax, eax
jns 0x140011555
cmp dword [rbx - 0x10], 0
jl 0x140011555
lea rdx, str.paneClassDC
mov rcx, rbx
call fcn.14015eb3c
test rax, rax
je 0x140011555
sub rax, rbx
sar rax, 1
mov dword [0x140226c54], r14d
mov dword [0x140226c50], r14d
mov dword [0x140226c58], r14d
lea rdx, [rsi - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140011586
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
dec r13d
test r13d, r13d
jg 0x1400115a6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsp + 0x40]
jmp 0x1400115c3
mov ecx, 0x80070057
call fcn.140014f90
int3
mov ecx, 0x80070057
call fcn.140014f90
nop
mov qword [0x140226ca0], rax
mov edx, dword [0x140226c50]
mov rcx, rax
call qword [0x140226190]
mov dword [0x140226ca8], eax
mov rcx, qword [rbp + 0x760]
xor rcx, rsp
call fcn.14015e210
lea r11, [rsp + 0x870]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret