Function at 0x14008f570
Capabilities:
Get graphical window text

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xd8]
sub rsp, 0x1a0
mov qword [rbp + 0x50], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
movaps xmmword [rax - 0x48], xmm6
mov rax, qword [0x140216b40]
xor rax, rsp
mov qword [rbp + 0x80], rax
mov rsi, rcx
xor r13d, r13d
mov dword [rsp + 0x40], r13d
mov rdi, qword [r8 + 0x20]
mov qword [rsp + 0x50], rdi
mov qword [rbp + 0x58], r13
mov qword [rsp + 0x58], r13
test byte [rcx + 0x69], 4
jne 0x14008f5e0
movzx eax, byte [r8 + 0x10]
shl al, 2
xor al, byte [rcx + 0x68]
and al, 4
xor byte [rcx + 0x68], al
mov eax, dword [r8 + 0x10]
shr eax, 4
shl al, 3
xor al, byte [rcx + 0x68]
and al, 8
xor byte [rcx + 0x68], al
mov ecx, dword [r8 + 0x10]
shr ecx, 2
shl cl, 4
xor cl, byte [rsi + 0x68]
and cl, 0x10
xor byte [rsi + 0x68], cl
lea r15, [r8 + 0x28]
mov rdx, r15
lea rcx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_CopyRect]
mov edx, 1
mov rcx, rdi
call qword [sym.imp.GDI32.dll_SetBkMode]
mov rdx, rdi
mov rcx, rsi
test byte [rsi + 0x68], 2
je 0x14008f637
call fcn.140091390
jmp 0x14008f641
mov rax, qword [rsi]
lea r8, [rbp + 0x70]
call qword [rax + 0x20]
movzx eax, byte [rsi + 0x68]
and al, 0x64
cmp al, 0x64
jne 0x14008f65b
mov rax, qword [rsi]
lea r8, [rbp + 0x70]
mov rdx, rdi
mov rcx, rsi
call qword [rax + 0x28]
call fcn.14004b618
mov rcx, rax
test rax, rax
jne 0x14008f673
mov ecx, 0x80004005
call fcn.14004a980
int3
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x48], rbx
mov rcx, qword [rsi + 8]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
movsxd r14, eax
test eax, eax
jns 0x14008f69e
mov ecx, 0x80070057
call fcn.14004a980
int3
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x14008f6c2
mov edx, r14d
lea rcx, [rsp + 0x48]
call fcn.14004ed24
mov rbx, qword [rsp + 0x48]
cmp r14d, dword [rbx - 0xc]
jg 0x14008ffda
mov dword [rbx - 0x10], r14d
mov word [rbx + r14*2], r13w
lea r8d, [r14 + 1]
mov rdx, rbx
mov rcx, qword [rsi + 8]
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov rdx, r15
lea rcx, [rbp + 0x60]
call qword [sym.imp.USER32.dll_CopyRect]
cmp qword [rsi + 0x2c0], 0
je 0x14008f744
mov edx, 0xffffff
mov rcx, rdi
call qword [sym.imp.GDI32.dll_SetBkColor]
movzx ecx, byte [rsi + 0x68]
movzx eax, cl
shr al, 4
and al, 1
shr cl, 2
and cl, 1
cmp dword [rbx - 0x10], 0
setne r8b
mov byte [rsp + 0x30], al
mov byte [rsp + 0x28], cl
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
mov r9, r15
mov rdx, rdi
mov rcx, rsi
call fcn.140090020
or r14d, 0xffffffff
cmp dword [rbx - 0x10], 0
je 0x14008ffad
test byte [rsi + 0x68], 4
je 0x14008f770
test byte [rsi + 0x69], 4
jne 0x14008f770
mov edx, 1
mov r8d, edx
lea rcx, [rbp + 0x60]
call qword [sym.imp.USER32.dll_OffsetRect]
mov edx, 0x5a
mov rcx, rdi
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edx, eax
mov ecx, 0xa
lea r8d, [rcx + 0x3e]
call qword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [rsp + 0x44], eax
lea rdx, [0x14018b0b8]
lea rcx, [rbp + 0x38]
call fcn.14004df84
mov r8, rax
lea rdx, [rbp - 0x68]
lea rcx, [0x14021cdd0]
call fcn.1400cdc10
nop
mov edi, 1
mov dword [rsp + 0x40], edi
mov rdx, qword [rax]
test rdx, rdx
jne 0x14008f7d5
mov ecx, 0x80004005
call fcn.14004a980
int3
mov rcx, rbx
call fcn.1400eb6a0
test eax, eax
je 0x14008f881
lea rdx, [0x1401855c0]
lea rcx, [rbp + 0x40]
call fcn.14004df84
mov r8, rax
lea rdx, [rbp - 0x70]
lea rcx, [0x14021cdd0]
call fcn.1400cdc10
nop
mov edi, 3
mov dword [rsp + 0x40], edi
mov rdx, qword [rax]
test rdx, rdx
jne 0x14008f825
mov ecx, 0x80004005
call fcn.14004a980
int3
mov rcx, rbx
call fcn.1400eb6a0
test eax, eax
je 0x14008f881
lea rdx, [0x1401855c8]
lea rcx, [rbp + 0x48]
call fcn.14004df84
mov r8, rax
lea rdx, [rbp - 0x78]
lea rcx, [0x14021cdd0]
call fcn.1400cdc10
nop
mov edi, 7
mov dword [rsp + 0x40], edi
mov rdx, qword [rax]
test rdx, rdx
jne 0x14008f871
mov ecx, 0x80004005
call fcn.14004a980
int3
mov rcx, rbx
call fcn.1400eb6a0
test eax, eax
je 0x14008f881
xor bl, bl
jmp 0x14008f883
mov bl, 1
test dil, 4
je 0x14008f8b2
and edi, 0xfffffffb
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008f8ae
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov edi, dword [rsp + 0x40]
test dil, 2
je 0x14008f8e1
and edi, 0xfffffffd
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008f8dd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov edi, dword [rsp + 0x40]
and edi, 0xfffffffe
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008f906
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [rsp + 0x44]
mov ecx, 0xfffffff3
test bl, bl
cmovne eax, ecx
mov dword [rsp + 0x44], eax
lea rcx, [rsp + 0x68]
call fcn.1400b23c0
nop
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rsp + 0x70], xmm0
lea rdx, [0x14018b0c0]
lea rcx, [rbp - 0x60]
call fcn.14004df84
mov r8, rax
lea rdx, [rbp - 0x58]
lea rcx, [0x14021cdd0]
call fcn.1400cdc10
nop
mov rdx, qword [rax]
test rdx, rdx
jne 0x14008f964
mov ecx, 0x80004005
call fcn.14004a980
int3
mov rcx, qword [rsp + 0x48]
call fcn.1400eb6a0
test eax, eax
sete bl
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008f991
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
je 0x14008f9b6
add dword [rsp + 0x74], 0xa
add dword [rsp + 0x70], 5
mov eax, dword [rsp + 0x44]
mov ecx, 0xffffffea
cmp eax, ecx
cmovl eax, ecx
mov dword [rsp + 0x44], eax
jmp 0x14008fada
lea rdx, [0x14018b0b8]
lea rcx, [rbp - 0x50]
call fcn.14004df84
mov r8, rax
lea rdx, [rbp - 0x48]
lea rcx, [0x14021cdd0]
call fcn.1400cdc10
nop
mov rdx, qword [rax]
test rdx, rdx
jne 0x14008f9ed
mov ecx, 0x80004005
call fcn.14004a980
int3
mov rcx, qword [rsp + 0x48]
call fcn.1400eb6a0
test eax, eax
sete bl
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008fa1a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
je 0x14008fa28
mov byte [rsp + 0x20], 1
jmp 0x14008fadf
lea rdx, [0x14018b0c4]
lea rcx, [rbp - 0x40]
call fcn.14004df84
mov r8, rax
lea rdx, [rbp - 0x38]
lea rcx, [0x14021cdd0]
call fcn.1400cdc10
nop
mov rdx, qword [rax]
test rdx, rdx
jne 0x14008fa5f
mov ecx, 0x80004005
call fcn.14004a980
int3
mov rcx, qword [rsp + 0x48]
call fcn.1400eb6a0
test eax, eax
sete bl
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008fa8c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
je 0x14008fada
mov eax, dword [rsp + 0x44]
mov ecx, 0xffffffea
cmp eax, ecx
cmovl eax, ecx
mov dword [rsp + 0x44], eax
mov r9d, 0x190
lea r8, [rsp + 0x44]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x68]
cmp dword [rsi + 0x318], 0
je 0x14008fad3
mov byte [rsp + 0x20], 1
call fcn.1400b2430
mov dword [rsi + 0x318], r13d
jmp 0x14008faf9
mov byte [rsp + 0x20], 0
jmp 0x14008faf4
mov byte [rsp + 0x20], 0
mov r9d, 0x2bc
lea r8, [rsp + 0x44]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x68]
call fcn.1400b2430
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.GDI32.dll_SelectObject]
mov r12, rax
lea rdx, [0x14018b0c4]
lea rcx, [rbp - 0x30]
call fcn.14004df84
mov r8, rax
lea rdx, [rbp - 0x28]
lea rcx, [0x14021cdd0]
call fcn.1400cdc10
nop
mov rdx, qword [rax]
test rdx, rdx
jne 0x14008fb43
mov ecx, 0x80004005
call fcn.14004a980
int3
mov rcx, qword [rsp + 0x48]
call fcn.1400eb6a0
test eax, eax
sete bl
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008fb70
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
je 0x14008fb9e
mov dword [rsp + 0x20], 0x410
lea r9, [rbp + 0x60]
mov r8d, r14d
mov rdi, qword [rsp + 0x48]
mov rdx, rdi
mov rbx, qword [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.USER32.dll_DrawTextW]
jmp 0x14008fd6d
lea rdx, [0x14018b0b8]
lea rcx, [rbp - 0x20]
call fcn.14004df84
mov r8, rax
lea rdx, [rbp + 8]
lea rcx, [0x14021cdd0]
call fcn.1400cdc10
nop
mov edi, dword [rsp + 0x40]
or edi, 8
mov dword [rsp + 0x40], edi
mov rdx, qword [rax]
test rdx, rdx
jne 0x14008fbe0
mov ecx, 0x80004005
call fcn.14004a980
int3
mov rbx, qword [rsp + 0x48]
mov rcx, rbx
call fcn.1400eb6a0
test eax, eax
je 0x14008fc8d
lea rdx, [0x1401855c0]
lea rcx, [rbp - 0x18]
call fcn.14004df84
mov r8, rax
lea rdx, [rbp]
lea rcx, [0x14021cdd0]
call fcn.1400cdc10
nop
or edi, 0x10
mov dword [rsp + 0x40], edi
mov rdx, qword [rax]
test rdx, rdx
jne 0x14008fc33
mov ecx, 0x80004005
call fcn.14004a980
int3
mov rcx, rbx
call fcn.1400eb6a0
test eax, eax
je 0x14008fc8d
lea rdx, [0x1401855c8]
lea rcx, [rbp - 0x10]
call fcn.14004df84
mov r8, rax
lea rdx, [rbp - 8]
lea rcx, [0x14021cdd0]
call fcn.1400cdc10
nop
or edi, 0x20
mov dword [rsp + 0x40], edi
mov rdx, qword [rax]
test rdx, rdx
jne 0x14008fc7d
mov ecx, 0x80004005
call fcn.14004a980
int3
mov rcx, rbx
call fcn.1400eb6a0
test eax, eax
je 0x14008fc8d
xor bl, bl
jmp 0x14008fc8f
mov bl, 1
test dil, 0x20
je 0x14008fcbe
and edi, 0xffffffdf
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008fcba
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov edi, dword [rsp + 0x40]
test dil, 0x10
je 0x14008fcea
and edi, 0xffffffef
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008fcea
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008fd08
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
movaps xmm6, xmmword [rbp + 0x60]
mov dword [rsp + 0x20], 0x411
lea r9, [rbp + 0x60]
mov r8d, r14d
mov rdi, qword [rsp + 0x48]
mov rdx, rdi
test bl, bl
mov rbx, qword [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.USER32.dll_DrawTextW]
mov eax, dword [rsp + 0x7c]
sub eax, dword [rbp + 0x6c]
sub eax, dword [rsp + 0x74]
add eax, dword [rbp + 0x64]
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov eax, dword [rsp + 0x78]
sub eax, dword [rbp + 0x68]
sub eax, dword [rsp + 0x70]
add eax, dword [rbp + 0x60]
cdq
sub eax, edx
sar eax, 1
mov edx, eax
lea rcx, [rbp + 0x60]
call qword [sym.imp.USER32.dll_OffsetRect]
movdqa xmmword [rbp + 0x60], xmm6
movzx eax, byte [rsi + 0x68]
test al, 0x10
je 0x14008fee6
mov edx, 1
mov r8d, edx
lea rcx, [rbp + 0x60]
call qword [sym.imp.USER32.dll_OffsetRect]
mov ecx, 0x14
call qword [sym.imp.USER32.dll_GetSysColor]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.GDI32.dll_SetTextColor]
lea rdx, [0x14018b0c4]
lea rcx, [rbp + 0x10]
call fcn.14004df84
mov r8, rax
lea rdx, [rbp + 0x18]
lea rcx, [0x14021cdd0]
call fcn.1400cdc10
nop
mov rdx, qword [rax]
test rdx, rdx
jne 0x14008fdd8
mov ecx, 0x80004005
call fcn.14004a980
int3
mov rcx, rdi
call fcn.1400eb6a0
test eax, eax
sete bl
mov rdx, qword [rbp + 0x18]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008fe03
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r8d, r14d
mov rdi, qword [rsp + 0x50]
mov rcx, rdi
test bl, bl
mov rbx, qword [rsp + 0x48]
mov rdx, rbx
je 0x14008fe24
mov dword [rsp + 0x20], r13d
mov r9, r15
jmp 0x14008fe30
mov dword [rsp + 0x20], 0x11
lea r9, [rbp + 0x60]
call qword [sym.imp.USER32.dll_DrawTextW]
mov r8d, r14d
mov edx, r14d
lea rcx, [rbp + 0x60]
call qword [sym.imp.USER32.dll_OffsetRect]
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetSysColor]
mov edx, eax
mov rcx, rdi
call qword [sym.imp.GDI32.dll_SetTextColor]
lea rdx, [0x14018b0c4]
lea rcx, [rbp + 0x20]
call fcn.14004df84
mov r8, rax
lea rdx, [rbp + 0x28]
lea rcx, [0x14021cdd0]
call fcn.1400cdc10
nop
mov rdx, qword [rax]
test rdx, rdx
jne 0x14008fe93
mov ecx, 0x80004005
call fcn.14004a980
int3
mov rcx, rbx
call fcn.1400eb6a0
test eax, eax
sete bl
mov rdx, qword [rbp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008febe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r8d, r14d
mov rdi, qword [rsp + 0x50]
mov rcx, rdi
test bl, bl
mov rbx, qword [rsp + 0x48]
mov rdx, rbx
je 0x14008ff69
mov dword [rsp + 0x20], r13d
mov r9, r15
jmp 0x14008ff75
mov rcx, rbx
test al, 5
jne 0x14008ff01
mov edx, dword [rsi + 0x94]
call qword [sym.imp.GDI32.dll_SetTextColor]
mov edx, dword [rsi + 0x90]
jmp 0x14008ff13
mov edx, dword [rsi + 0x8c]
call qword [sym.imp.GDI32.dll_SetTextColor]
mov edx, dword [rsi + 0x88]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_SetBkColor]
lea rdx, [0x14018b0c4]
lea rcx, [rbp + 0x30]
call fcn.14004df84
mov r8, rax
lea rdx, [rbp - 0x80]
lea rcx, [0x14021cdd0]
call fcn.1400cdc10
nop
mov rdx, qword [rax]
test rdx, rdx
jne 0x14008ff53
mov ecx, 0x80004005
call fcn.14004a980
int3
mov rcx, rdi
call fcn.1400eb6a0
test eax, eax
sete bl
mov rdx, qword [rbp - 0x80]
jmp 0x14008fea4
lea r9, [rbp + 0x60]
mov dword [rsp + 0x20], 0x11
call qword [sym.imp.USER32.dll_DrawTextW]
mov rdx, r12
mov rcx, rdi
call qword [sym.imp.GDI32.dll_SelectObject]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [rsp + 0x58]
test eax, eax
cmovne rcx, r13
mov qword [rsp + 0x58], rcx
lea rcx, [rsp + 0x68]
call fcn.1400b2400
nop
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], r14d
sub r14d, 1
jg 0x14008ffc7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14008ffd8
call qword [sym.imp.GDI32.dll_DeleteObject]
nop
jmp 0x14008ffe5
mov ecx, 0x80070057
call fcn.14004a980
nop
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.1400dd830
mov rbx, qword [rsp + 0x1e8]
movaps xmm6, xmmword [rsp + 0x190]
add rsp, 0x1a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret