Function at 0x14000fe00
Capabilities:
Get graphical window text

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x450
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov rax, qword [0x140218f40]
xor rax, rsp
mov qword [rsp + 0x440], rax
mov r13d, 1
call fcn.14001e6e8
mov rcx, rax
xor r15d, r15d
mov eax, r15d
test rcx, rcx
setne al
test eax, eax
jne 0x14000fe63
mov ecx, 0x80004005
call fcn.140014f90
int3
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rsi, [rax + 0x18]
mov qword [rsp + 0x20], rsi
call fcn.14001e6e8
mov rcx, rax
mov eax, r15d
test rcx, rcx
setne al
test eax, eax
jne 0x14000fe92
mov ecx, 0x80004005
call fcn.140014f90
int3
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x28], rbx
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rdi, rax
mov r8d, 0x100
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov r8d, 0x100
lea rdx, [rsp + 0x240]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetClassNameW]
xor eax, eax
or rbp, 0xffffffffffffffff
mov rcx, rbp
lea rdi, [rsp + 0x40]
repne scasw ax, word [rdi]
not rcx
dec rcx
mov r12, rcx
test ecx, ecx
jne 0x14000ff57
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], eax
je 0x14000ffd8
cmp dword [rdx + 0x10], eax
jge 0x14000ff25
cmp dword [rbx - 0xc], eax
jge 0x14000ff18
mov ecx, 0x80070057
call fcn.140014f90
int3
mov dword [rbx - 0x10], r15d
mov word [rbx], r15w
jmp 0x14000ffd8
mov eax, ebp
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14000ff3b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x28], rbx
mov rsi, qword [rsp + 0x20]
jmp 0x14000ffd8
mov r14d, dword [rbx - 0x10]
lea rdi, [rsp + 0x40]
sub rdi, rbx
sar rdi, 1
test ecx, ecx
jns 0x14000ff75
mov ecx, 0x80070057
call fcn.140014f90
int3
mov ecx, r13d
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r12d
or eax, ecx
jge 0x14000ff97
mov edx, r12d
lea rcx, [rsp + 0x28]
call fcn.140014f30
mov rbx, qword [rsp + 0x28]
movsxd rax, r12d
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
add rdx, rdx
cmp rdi, r14
lea r14, [rax + rax]
mov r9, r14
ja 0x14000ffbb
lea r8, [rbx + rdi*2]
call fcn.14015e47c
jmp 0x14000ffc5
lea r8, [rsp + 0x40]
call fcn.14015e3f4
cmp r12d, dword [rbx - 0xc]
jg 0x140010213
mov dword [rbx - 0x10], r12d
mov word [r14 + rbx], r15w
xor eax, eax
mov rcx, rbp
lea rdi, [rsp + 0x240]
repne scasw ax, word [rdi]
not rcx
dec rcx
mov rdi, rcx
test ecx, ecx
jne 0x140010059
lea rdx, [rsi - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], eax
je 0x1400100dc
cmp dword [rdx + 0x10], eax
jge 0x140010027
cmp dword [rsi - 0xc], eax
jge 0x14001001a
mov ecx, 0x80070057
call fcn.140014f90
int3
mov dword [rsi - 0x10], r15d
mov word [rsi], r15w
jmp 0x1400100dc
mov eax, ebp
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14001003d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x20], rax
mov rbx, qword [rsp + 0x28]
jmp 0x1400100dc
mov r14d, dword [rsi - 0x10]
lea r12, [rsp + 0x240]
sub r12, rsi
sar r12, 1
test ecx, ecx
jns 0x14001007a
mov ecx, 0x80070057
call fcn.140014f90
int3
mov ecx, r13d
sub ecx, dword [rsi - 8]
mov eax, dword [rsi - 0xc]
sub eax, edi
or eax, ecx
jge 0x14001009a
mov edx, edi
lea rcx, [rsp + 0x20]
call fcn.140014f30
mov rsi, qword [rsp + 0x20]
movsxd rax, edi
movsxd rdx, dword [rsi - 0xc]
mov rcx, rsi
add rdx, rdx
cmp r12, r14
lea r14, [rax + rax]
mov r9, r14
ja 0x1400100be
lea r8, [rsi + r12*2]
call fcn.14015e47c
jmp 0x1400100cb
lea r8, [rsp + 0x240]
call fcn.14015e3f4
cmp edi, dword [rsi - 0xc]
jg 0x140010208
mov dword [rsi - 0x10], edi
mov word [r14 + rsi], r15w
cmp dword [rbx - 0x10], 0
jl 0x1400101cb
lea rdx, str.Microsoft_Word
mov rcx, rbx
call fcn.14015eb3c
test rax, rax
je 0x140010108
sub rax, rbx
sar rax, 1
test eax, eax
jns 0x1400101c8
cmp dword [rbx - 0x10], 0
jl 0x1400101cb
lea rdx, str.___Word
mov rcx, rbx
call fcn.14015eb3c
test rax, rax
je 0x140010134
sub rax, rbx
sar rax, 1
test eax, eax
jns 0x1400101c8
cmp dword [rbx - 0x10], 0
jl 0x1400101cb
lea rdx, str.Microsoft_Excel
mov rcx, rbx
call fcn.14015eb3c
test rax, rax
je 0x14001015c
sub rax, rbx
sar rax, 1
test eax, eax
jns 0x1400101c8
cmp dword [rbx - 0x10], 0
jl 0x1400101cb
lea rdx, str.___Excel
mov rcx, rbx
call fcn.14015eb3c
test rax, rax
je 0x140010180
sub rax, rbx
sar rax, 1
test eax, eax
jns 0x1400101c8
cmp dword [rbx - 0x10], 0
jl 0x1400101cb
lea rdx, str.Microsoft_PowerPoint
mov rcx, rbx
call fcn.14015eb3c
test rax, rax
je 0x1400101a4
sub rax, rbx
sar rax, 1
test eax, eax
jns 0x1400101c8
cmp dword [rbx - 0x10], 0
jl 0x1400101cb
lea rdx, str.___PowerPoint
mov rcx, rbx
call fcn.14015eb3c
test rax, rax
je 0x1400101cb
sub rax, rbx
sar rax, 1
test eax, eax
js 0x1400101cb
mov r13d, r15d
lea rdx, [rbx - 0x18]
mov eax, ebp
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400101e6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebp
dec ebp
test ebp, ebp
jg 0x140010203
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, r13d
jmp 0x14001021e
mov ecx, 0x80070057
call fcn.140014f90
int3
mov ecx, 0x80070057
call fcn.140014f90
nop
mov rcx, qword [rsp + 0x440]
xor rcx, rsp
call fcn.14015e210
lea r11, [rsp + 0x450]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret