Function at 0x7ff741ac620
Capabilities:
Get graphical window text

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x140
mov rax, qword [0x7ff741e7790]
xor rax, rsp
mov qword [rsp + 0x130], rax
and dword [rsp + 0x20], 0
xor r14b, r14b
mov rdi, r9
mov rbp, r8
mov r12, rdx
mov rsi, rcx
test r9, 0xffffffffffff0000
jne 0x7ff741ac715
test rcx, rcx
je 0x7ff741ac715
movzx edx, r9w
mov r13d, 0x50
lea r8, [rsp + 0xe0]
mov r9d, r13d
call qword [sym.imp.USER32.dll_LoadStringA]
test eax, eax
jne 0x7ff741ac704
test r12, r12
je 0x7ff741ac70e
lea rdx, [rsp + 0xe0]
mov r8d, r13d
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowTextA]
test eax, eax
je 0x7ff741ac70e
lea rdx, [0x7ff741de228]
lea rcx, [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x7ff741ac704
xor edx, edx
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp ebx, eax
jne 0x7ff741ac715
lea rdx, [0x7ff741de238]
mov rcx, r12
call qword [sym.imp.USER32.dll_GetPropA]
test rax, rax
je 0x7ff741ac704
lea r8, [rsp + 0xe0]
mov r9d, r13d
mov rdx, rax
xor ecx, ecx
call sym.SHLWAPI.dll_Ordinal_218
lea rdi, [rsp + 0xe0]
jmp 0x7ff741ac715
lea rdi, [0x7ff741d0a40]
lea rax, [rsp + 0x1a8]
lea r8, [rsp + 0x38]
mov rdx, rbp
mov rcx, rsi
mov qword [rsp + 0x38], rax
call fcn.7ff741c04f8
and qword [rsp + 0x38], 0
mov r13, rax
test rax, rax
je 0x7ff741ac862
and qword [rsp + 0x30], 0
lea rdx, [rsp + 0x30]
xor esi, esi
mov rcx, rax
mov qword [rsp + 0x28], rsi
call sym.SHLWAPI.dll_SHStrDupA
mov rbp, qword [rsp + 0x30]
mov ebx, eax
test eax, eax
js 0x7ff741ac83b
test rdi, rdi
je 0x7ff741ac786
lea rdx, [rsp + 0x28]
mov rcx, rdi
call sym.SHLWAPI.dll_SHStrDupA
mov rsi, qword [rsp + 0x28]
mov ebx, eax
test ebx, ebx
js 0x7ff741ac83b
lea rcx, [rsp + 0x44]
xor edx, edx
mov r8d, 0x9c
call sub.ntdll.dll_memset
mov ecx, dword [rsp + 0x1a0]
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0xa0
mov qword [rsp + 0x44], r12
mov qword [rsp + 0x74], rbp
mov qword [rsp + 0x5c], rsi
call fcn.7ff741bf420
mov ebx, eax
test eax, eax
js 0x7ff741ac83b
lea rcx, [rsp + 0x28]
call fcn.7ff74185c54
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
call fcn.7ff741c3cf4
mov ebx, eax
test eax, eax
js 0x7ff741ac80e
test byte [rsp + 0x1a0], 0xf
jne 0x7ff741ac831
cmp dword [rsp + 0x20], 2
jne 0x7ff741ac831
mov dword [rsp + 0x20], 1
jmp 0x7ff741ac831
mov r9d, dword [rsp + 0x1a0]
mov r8, rsi
mov rdx, rbp
bts r9d, 0x10
mov rcx, r12
mov r14b, 1
call qword [sym.imp.USER32.dll_MessageBoxW]
mov dword [rsp + 0x20], eax
mov rcx, qword [rsp + 0x28]
call fcn.7ff741c3cd4
test rbp, rbp
je 0x7ff741ac849
mov rcx, rbp
call qword [sym.imp.ole32.dll_CoTaskMemFree]
test rsi, rsi
je 0x7ff741ac857
mov rcx, rsi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x7ff741ac867
mov ebx, 0x8007000e
test ebx, ebx
jns 0x7ff741ac894
neg r14b
mov ecx, ebx
sbb eax, eax
and ecx, 0x1fff0000
and eax, dword [rsp + 0x20]
cmp ecx, 0x70000
mov dword [rsp + 0x20], eax
movzx eax, bx
cmove ebx, eax
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [rsp + 0x20]
mov rcx, qword [rsp + 0x130]
xor rcx, rsp
call fcn.7ff741947a0
add rsp, 0x140
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret