Function at 0x10006a8c4
Capabilities:
Get graphical window text

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2e0
mov rax, qword [0x1000af140]
xor rax, rsp
mov qword [rsp + 0x2d0], rax
mov edx, dword [rcx + 0x34]
mov rbx, rcx
mov ecx, dword [rcx + 0x30]
lea rax, [r11 - 0x258]
xor r14d, r14d
mov r9d, 0x26200a
mov qword [rsp + 0x28], rax
xor r8d, r8d
mov qword [rsp + 0x20], r14
mov qword [r11 - 0x258], r14
call sub.gdiplus.dll_GdipCreateBitmapFromScan0
mov r12, qword [rsp + 0xb0]
lea rdx, [rsp + 0xc8]
mov rcx, r12
mov qword [rsp + 0x88], r12
mov qword [rsp + 0xc8], r14
call sub.gdiplus.dll_GdipGetImageGraphicsContext
mov rbp, qword [rsp + 0xc8]
lea esi, [r14 + 2]
cmp qword [0x1000b89b8], r14
je 0x10006aa45
mov eax, dword [rbx + 0x28]
mov rcx, qword [rbx + 0x18]
mov dword [rsp + 0x78], eax
mov eax, dword [rbx + 0x2c]
mov dword [rsp + 0x7c], eax
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, qword [rbx + 0x18]
lea r9d, [r14 + 1]
lea r8, [rsp + 0x78]
mov rdx, rax
call qword [sym.imp.USER32.dll_MapWindowPoints]
cmp byte [0x1000b8866], r14b
jne 0x10006a9d8
mov rax, qword [0x1000b89b8]
mov ecx, dword [rbx + 0x34]
mov edi, dword [rbx + 0x30]
cmp rax, r14
je 0x10006a9b7
mov rdx, qword [rax + 8]
jmp 0x10006a9ba
mov rdx, r14
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x20], eax
jmp 0x10006aa37
mov rdi, qword [0x1000b89b8]
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x70], r14d
mov rcx, qword [rdi + 8]
call sub.gdiplus.dll_GdipGetImageWidth
cmp eax, r14d
je 0x10006a9fa
mov dword [rdi + 0x10], eax
mov eax, dword [rbx + 0x30]
mov ecx, dword [rsp + 0x70]
mov rdx, qword [0x1000b89b8]
mov edi, dword [rbx + 0x34]
sub ecx, eax
sub ecx, dword [rsp + 0x78]
cmp rdx, r14
je 0x10006aa1c
mov rdx, qword [rdx + 8]
jmp 0x10006aa1f
mov rdx, r14
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
xor r9d, r9d
xor r8d, r8d
mov rcx, rbp
call sub.gdiplus.dll_GdipDrawImagePointRectI
mov rsi, qword [0x1000bb498]
cmp rsi, r14
je 0x10006adf0
cmp qword [0x1000bb490], r14
je 0x10006adf0
cmp qword [0x1000bb488], r14
je 0x10006adf0
cmp qword [0x1000bb478], r14
je 0x10006adf0
cmp qword [0x1000bb470], r14
je 0x10006adf0
mov rdi, qword [0x1000bb480]
cmp rdi, r14
je 0x10006adf0
test byte [rbx + 0x10], 0x40
jne 0x10006ab64
mov rax, qword [rbx + 0x18]
cmp qword [0x1000b89a0], rax
je 0x10006ab64
mov rcx, qword [rdi + 8]
lea rdx, [rsp + 0x74]
mov dword [rsp + 0x74], r14d
call sub.gdiplus.dll_GdipGetImageWidth
cmp eax, r14d
je 0x10006aacf
mov dword [rdi + 0x10], eax
mov rdi, qword [0x1000bb478]
mov r15d, dword [rsp + 0x74]
lea rdx, [rsp + 0x70]
mov rcx, qword [rdi + 8]
mov dword [rsp + 0x70], r14d
call sub.gdiplus.dll_GdipGetImageWidth
cmp eax, r14d
je 0x10006aaf6
mov dword [rdi + 0x10], eax
mov rdi, qword [0x1000bb470]
mov r13d, dword [rsp + 0x70]
lea rdx, [rsp + 0x74]
mov rcx, qword [rdi + 8]
mov dword [rsp + 0x74], r14d
call sub.gdiplus.dll_GdipGetImageWidth
cmp eax, r14d
je 0x10006ab1d
mov dword [rdi + 0x10], eax
mov rdi, qword [0x1000bb470]
mov eax, dword [rsp + 0x74]
lea rdx, [rsp + 0x70]
mov rcx, qword [rdi + 8]
mov dword [rsp + 0xa8], eax
mov dword [rsp + 0x70], r14d
call sub.gdiplus.dll_GdipGetImageHeight
cmp eax, r14d
je 0x10006ab4a
mov dword [rdi + 0x10], eax
mov r12, qword [0x1000bb480]
mov rsi, qword [0x1000bb478]
mov rdi, qword [0x1000bb470]
jmp 0x10006ac0f
mov rcx, qword [rsi + 8]
lea rdx, [rsp + 0x74]
mov dword [rsp + 0x74], r14d
call sub.gdiplus.dll_GdipGetImageWidth
cmp eax, r14d
je 0x10006ab7f
mov dword [rsi + 0x10], eax
mov rdi, qword [0x1000bb490]
mov r15d, dword [rsp + 0x74]
lea rdx, [rsp + 0x70]
mov rcx, qword [rdi + 8]
mov dword [rsp + 0x70], r14d
call sub.gdiplus.dll_GdipGetImageWidth
cmp eax, r14d
je 0x10006aba6
mov dword [rdi + 0x10], eax
mov rdi, qword [0x1000bb488]
mov r13d, dword [rsp + 0x70]
lea rdx, [rsp + 0x74]
mov rcx, qword [rdi + 8]
mov dword [rsp + 0x74], r14d
call sub.gdiplus.dll_GdipGetImageWidth
cmp eax, r14d
je 0x10006abcd
mov dword [rdi + 0x10], eax
mov rdi, qword [0x1000bb488]
mov eax, dword [rsp + 0x74]
lea rdx, [rsp + 0x70]
mov rcx, qword [rdi + 8]
mov dword [rsp + 0xa8], eax
mov dword [rsp + 0x70], r14d
call sub.gdiplus.dll_GdipGetImageHeight
cmp eax, r14d
je 0x10006abfa
mov dword [rdi + 0x10], eax
mov r12, qword [0x1000bb498]
mov rsi, qword [0x1000bb490]
mov rdi, qword [0x1000bb488]
mov r14d, dword [rsp + 0x70]
and qword [rsp + 0x98], 0
lea rcx, [rsp + 0x98]
call sub.gdiplus.dll_GdipCreateImageAttributes
mov rcx, qword [rsp + 0x98]
xor r9d, r9d
lea edx, [r9 + 3]
mov r8d, 0xff000000
mov dword [rsp + 0xa0], eax
call sub.gdiplus.dll_GdipSetImageAttributesWrapMode
mov ecx, dword [rsp + 0xa0]
mov r8d, dword [rbx + 0x28]
test eax, eax
cmovne ecx, eax
lea eax, [r8 + r15]
mov dword [rsp + 0x78], eax
mov eax, dword [rbx + 0x30]
mov dword [rsp + 0xa0], ecx
mov ecx, dword [rbx + 0x2c]
sub eax, r13d
sub eax, r15d
mov dword [rsp + 0xb0], ecx
mov dword [rsp + 0xc0], eax
mov eax, dword [rbx + 0x34]
mov dword [rsp + 0x74], eax
test r12, r12
je 0x10006ac97
mov rdx, qword [r12 + 8]
jmp 0x10006ac99
xor edx, edx
mov r9d, ecx
mov dword [rsp + 0x28], eax
mov rcx, rbp
mov dword [rsp + 0x20], r15d
call sub.gdiplus.dll_GdipDrawImageRectI
test rdi, rdi
je 0x10006acb8
mov rdx, qword [rdi + 8]
jmp 0x10006acba
xor edx, edx
and qword [rsp + 0x68], 0
and qword [rsp + 0x60], 0
mov rax, qword [rsp + 0x98]
mov r9d, dword [rsp + 0xb0]
mov r8d, dword [rsp + 0x78]
mov qword [rsp + 0x58], rax
mov eax, dword [rsp + 0xa8]
mov dword [rsp + 0x50], 2
mov dword [rsp + 0x48], r14d
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x74]
xor r14d, r14d
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0xc0]
mov rcx, rbp
mov dword [rsp + 0x20], eax
call sub.gdiplus.dll_GdipDrawImageRectRectI
mov r8d, dword [rbx + 0x30]
mov ecx, dword [rbx + 0x34]
sub r8d, r13d
cmp rsi, r14
je 0x10006ad35
mov rdx, qword [rsi + 8]
jmp 0x10006ad38
mov rdx, r14
mov r9d, dword [rbx + 0x2c]
mov dword [rsp + 0x28], ecx
mov rcx, rbp
mov dword [rsp + 0x20], r13d
call sub.gdiplus.dll_GdipDrawImageRectI
test byte [rbx + 0x10], 0x11
je 0x10006addb
movss xmm1, dword [0x10002dca0]
lea r9, [rsp + 0x78]
xor r8d, r8d
mov ecx, 0xc0ffffff
mov qword [rsp + 0x78], r14
call sub.gdiplus.dll_GdipCreatePen1
mov rcx, qword [rsp + 0x78]
mov edx, 1
mov dword [rsp + 0x80], eax
call sub.gdiplus.dll_GdipSetPenDashStyle
mov ecx, dword [rsp + 0x80]
mov r9d, dword [rbx + 0x2c]
mov r8d, dword [rbx + 0x28]
mov rdx, qword [rsp + 0x78]
cmp eax, r14d
cmovne ecx, eax
mov eax, dword [rbx + 0x30]
add r9d, 5
mov dword [rsp + 0x80], ecx
mov ecx, dword [rbx + 0x34]
sub eax, 0xa
sub ecx, 0xa
add r8d, 5
mov dword [rsp + 0x28], ecx
mov rcx, rbp
mov dword [rsp + 0x20], eax
call sub.gdiplus.dll_GdipDrawRectangleI
mov rcx, qword [rsp + 0x78]
call sub.gdiplus.dll_GdipDeletePen
mov rcx, qword [rsp + 0x98]
call sub.gdiplus.dll_GdipDisposeImageAttributes
mov r12, qword [rsp + 0x88]
lea rcx, [rsp + 0xd2]
xor edx, edx
mov r8d, 0x1fe
mov word [rsp + 0xd0], r14w
call sub.msvcrt.dll_memset
mov rcx, qword [rbx + 0x18]
lea rdx, [rsp + 0xd0]
mov r8d, 0x100
call qword [sym.imp.USER32.dll_GetWindowTextW]
cmp eax, r14d
je 0x10006aff9
mov edx, 3
mov rcx, rbp
call sub.gdiplus.dll_GdipSetTextRenderingHint
lea rdx, [rsp + 0x78]
or ecx, 0xffffffff
mov qword [rsp + 0x78], r14
call sub.gdiplus.dll_GdipCreateSolidFill
mov r8, qword [0x1000b89a8]
mov rdx, qword [rbx + 0x20]
mov rsi, qword [rsp + 0x78]
lea rcx, [rsp + 0xb0]
call fcn.100068768
lea r8, [rsp + 0x88]
xor edx, edx
movd xmm0, dword [rbx + 0x2c]
movd xmm5, dword [rbx + 0x28]
movd xmm1, dword [rbx + 0x30]
xor ecx, ecx
mov qword [rsp + 0x88], r14
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm5, xmm5
cvtdq2ps xmm1, xmm1
movss dword [rsp + 0x9c], xmm0
movss dword [rsp + 0x98], xmm5
movss dword [rsp + 0xa0], xmm1
movd xmm0, dword [rbx + 0x34]
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0xa4], xmm0
call sub.gdiplus.dll_GdipCreateStringFormat
mov rcx, qword [rsp + 0x88]
mov edx, 1
mov dword [rsp + 0x90], eax
call sub.gdiplus.dll_GdipSetStringFormatLineAlign
mov ecx, dword [rsp + 0x90]
cmp eax, r14d
mov edx, 1
cmovne ecx, eax
mov dword [rsp + 0x90], ecx
mov rcx, qword [rsp + 0x88]
call sub.gdiplus.dll_GdipSetStringFormatHotkeyPrefix
mov ecx, dword [rsp + 0x90]
mov edx, 1
cmp eax, r14d
cmovne ecx, eax
mov dword [rsp + 0x90], ecx
mov rcx, qword [rsp + 0x88]
call sub.gdiplus.dll_GdipSetStringFormatAlign
mov ecx, dword [rsp + 0x90]
cmp eax, r14d
cmovne ecx, eax
mov dword [rsp + 0x90], ecx
mov rcx, qword [rsp + 0x88]
cmp byte [0x1000b8866], r14b
je 0x10006af6a
mov edx, 0x1001
call sub.gdiplus.dll_GdipSetStringFormatFlags
cmp eax, r14d
je 0x10006af88
mov dword [rsp + 0x90], eax
jmp 0x10006af88
mov edx, 0x1000
call sub.gdiplus.dll_GdipSetStringFormatFlags
mov ecx, dword [rsp + 0x90]
cmp eax, r14d
cmovne ecx, eax
mov dword [rsp + 0x90], ecx
mov r9, qword [rsp + 0xb0]
xor eax, eax
or rcx, 0xffffffffffffffff
mov qword [rsp + 0x30], rsi
lea rdi, [rsp + 0xd0]
lea rdx, [rsp + 0xd0]
repne scasw ax, word [rdi]
mov rax, qword [rsp + 0x88]
not rcx
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x98]
lea r8d, [rcx - 1]
mov rcx, rbp
mov qword [rsp + 0x20], rax
call sub.gdiplus.dll_GdipDrawString
mov rcx, qword [rsp + 0x88]
call sub.gdiplus.dll_GdipDeleteStringFormat
mov rcx, qword [rsp + 0xb0]
call sub.gdiplus.dll_GdipDeleteFont
mov rcx, rsi
call sub.gdiplus.dll_GdipDeleteBrush
mov rcx, qword [rbx + 0x20]
lea rdx, [rsp + 0x78]
mov qword [rsp + 0x78], r14
call sub.gdiplus.dll_GdipCreateFromHDC
mov edx, dword [rbx + 0x30]
mov eax, dword [rbx + 0x34]
mov rdi, qword [rsp + 0x78]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], edx
mov rdx, r12
xor r9d, r9d
xor r8d, r8d
mov rcx, rdi
call sub.gdiplus.dll_GdipDrawImageRectI
mov rcx, rdi
call sub.gdiplus.dll_GdipDeleteGraphics
mov rcx, rbp
call sub.gdiplus.dll_GdipDeleteGraphics
mov rcx, r12
call sub.gdiplus.dll_GdipDisposeImage
mov rcx, qword [rsp + 0x2d0]
xor rcx, rsp
call fcn.1000a2150
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret