Function at 0x1000649ec
Capabilities:
Get graphical window text

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2e0
mov rax, qword [0x10009f140]
xor rax, rsp
mov qword [rsp + 0x2d0], rax
mov edx, dword [rcx + 0x34]
mov rbx, rcx
mov ecx, dword [rcx + 0x30]
lea rax, [r11 - 0x258]
xor r14d, r14d
mov r9d, 0x26200a
mov qword [rsp + 0x28], rax
xor r8d, r8d
mov qword [rsp + 0x20], r14
mov qword [r11 - 0x258], r14
call sub.gdiplus.dll_GdipCreateBitmapFromScan0
mov r12, qword [rsp + 0xb0]
lea rdx, [rsp + 0xc8]
mov rcx, r12
mov qword [rsp + 0x88], r12
mov qword [rsp + 0xc8], r14
call sub.gdiplus.dll_GdipGetImageGraphicsContext
mov rbp, qword [rsp + 0xc8]
lea esi, [r14 + 2]
cmp qword [0x1000a8668], r14
je 0x100064b6d
mov eax, dword [rbx + 0x28]
mov rcx, qword [rbx + 0x18]
mov dword [rsp + 0x78], eax
mov eax, dword [rbx + 0x2c]
mov dword [rsp + 0x7c], eax
call qword [sym.imp.USER32.dll_GetParent]
mov rcx, qword [rbx + 0x18]
lea r9d, [r14 + 1]
lea r8, [rsp + 0x78]
mov rdx, rax
call qword [sym.imp.USER32.dll_MapWindowPoints]
cmp byte [0x1000a85b5], r14b
jne 0x100064b00
mov rax, qword [0x1000a8668]
mov ecx, dword [rbx + 0x34]
mov edi, dword [rbx + 0x30]
cmp rax, r14
je 0x100064adf
mov rdx, qword [rax + 8]
jmp 0x100064ae2
mov rdx, r14
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x20], eax
jmp 0x100064b5f
mov rdi, qword [0x1000a8668]
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x70], r14d
mov rcx, qword [rdi + 8]
call sub.gdiplus.dll_GdipGetImageWidth
cmp eax, r14d
je 0x100064b22
mov dword [rdi + 0x10], eax
mov eax, dword [rbx + 0x30]
mov ecx, dword [rsp + 0x70]
mov rdx, qword [0x1000a8668]
mov edi, dword [rbx + 0x34]
sub ecx, eax
sub ecx, dword [rsp + 0x78]
cmp rdx, r14
je 0x100064b44
mov rdx, qword [rdx + 8]
jmp 0x100064b47
mov rdx, r14
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
xor r9d, r9d
xor r8d, r8d
mov rcx, rbp
call sub.gdiplus.dll_GdipDrawImagePointRectI
mov rsi, qword [0x1000ab0e8]
cmp rsi, r14
je 0x100064f18
cmp qword [0x1000ab0e0], r14
je 0x100064f18
cmp qword [0x1000ab0d8], r14
je 0x100064f18
cmp qword [0x1000ab0c8], r14
je 0x100064f18
cmp qword [0x1000ab0c0], r14
je 0x100064f18
mov rdi, qword [0x1000ab0d0]
cmp rdi, r14
je 0x100064f18
test byte [rbx + 0x10], 0x40
jne 0x100064c8c
mov rax, qword [rbx + 0x18]
cmp qword [0x1000a8650], rax
je 0x100064c8c
mov rcx, qword [rdi + 8]
lea rdx, [rsp + 0x74]
mov dword [rsp + 0x74], r14d
call sub.gdiplus.dll_GdipGetImageWidth
cmp eax, r14d
je 0x100064bf7
mov dword [rdi + 0x10], eax
mov rdi, qword [0x1000ab0c8]
mov r15d, dword [rsp + 0x74]
lea rdx, [rsp + 0x70]
mov rcx, qword [rdi + 8]
mov dword [rsp + 0x70], r14d
call sub.gdiplus.dll_GdipGetImageWidth
cmp eax, r14d
je 0x100064c1e
mov dword [rdi + 0x10], eax
mov rdi, qword [0x1000ab0c0]
mov r13d, dword [rsp + 0x70]
lea rdx, [rsp + 0x74]
mov rcx, qword [rdi + 8]
mov dword [rsp + 0x74], r14d
call sub.gdiplus.dll_GdipGetImageWidth
cmp eax, r14d
je 0x100064c45
mov dword [rdi + 0x10], eax
mov rdi, qword [0x1000ab0c0]
mov eax, dword [rsp + 0x74]
lea rdx, [rsp + 0x70]
mov rcx, qword [rdi + 8]
mov dword [rsp + 0xa8], eax
mov dword [rsp + 0x70], r14d
call sub.gdiplus.dll_GdipGetImageHeight
cmp eax, r14d
je 0x100064c72
mov dword [rdi + 0x10], eax
mov r12, qword [0x1000ab0d0]
mov rsi, qword [0x1000ab0c8]
mov rdi, qword [0x1000ab0c0]
jmp 0x100064d37
mov rcx, qword [rsi + 8]
lea rdx, [rsp + 0x74]
mov dword [rsp + 0x74], r14d
call sub.gdiplus.dll_GdipGetImageWidth
cmp eax, r14d
je 0x100064ca7
mov dword [rsi + 0x10], eax
mov rdi, qword [0x1000ab0e0]
mov r15d, dword [rsp + 0x74]
lea rdx, [rsp + 0x70]
mov rcx, qword [rdi + 8]
mov dword [rsp + 0x70], r14d
call sub.gdiplus.dll_GdipGetImageWidth
cmp eax, r14d
je 0x100064cce
mov dword [rdi + 0x10], eax
mov rdi, qword [0x1000ab0d8]
mov r13d, dword [rsp + 0x70]
lea rdx, [rsp + 0x74]
mov rcx, qword [rdi + 8]
mov dword [rsp + 0x74], r14d
call sub.gdiplus.dll_GdipGetImageWidth
cmp eax, r14d
je 0x100064cf5
mov dword [rdi + 0x10], eax
mov rdi, qword [0x1000ab0d8]
mov eax, dword [rsp + 0x74]
lea rdx, [rsp + 0x70]
mov rcx, qword [rdi + 8]
mov dword [rsp + 0xa8], eax
mov dword [rsp + 0x70], r14d
call sub.gdiplus.dll_GdipGetImageHeight
cmp eax, r14d
je 0x100064d22
mov dword [rdi + 0x10], eax
mov r12, qword [0x1000ab0e8]
mov rsi, qword [0x1000ab0e0]
mov rdi, qword [0x1000ab0d8]
mov r14d, dword [rsp + 0x70]
and qword [rsp + 0x98], 0
lea rcx, [rsp + 0x98]
call sub.gdiplus.dll_GdipCreateImageAttributes
mov rcx, qword [rsp + 0x98]
xor r9d, r9d
lea edx, [r9 + 3]
mov r8d, 0xff000000
mov dword [rsp + 0xa0], eax
call sub.gdiplus.dll_GdipSetImageAttributesWrapMode
mov ecx, dword [rsp + 0xa0]
mov r8d, dword [rbx + 0x28]
test eax, eax
cmovne ecx, eax
lea eax, [r8 + r15]
mov dword [rsp + 0x78], eax
mov eax, dword [rbx + 0x30]
mov dword [rsp + 0xa0], ecx
mov ecx, dword [rbx + 0x2c]
sub eax, r13d
sub eax, r15d
mov dword [rsp + 0xb0], ecx
mov dword [rsp + 0xc0], eax
mov eax, dword [rbx + 0x34]
mov dword [rsp + 0x74], eax
test r12, r12
je 0x100064dbf
mov rdx, qword [r12 + 8]
jmp 0x100064dc1
xor edx, edx
mov r9d, ecx
mov dword [rsp + 0x28], eax
mov rcx, rbp
mov dword [rsp + 0x20], r15d
call sub.gdiplus.dll_GdipDrawImageRectI
test rdi, rdi
je 0x100064de0
mov rdx, qword [rdi + 8]
jmp 0x100064de2
xor edx, edx
and qword [rsp + 0x68], 0
and qword [rsp + 0x60], 0
mov rax, qword [rsp + 0x98]
mov r9d, dword [rsp + 0xb0]
mov r8d, dword [rsp + 0x78]
mov qword [rsp + 0x58], rax
mov eax, dword [rsp + 0xa8]
mov dword [rsp + 0x50], 2
mov dword [rsp + 0x48], r14d
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x74]
xor r14d, r14d
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0xc0]
mov rcx, rbp
mov dword [rsp + 0x20], eax
call sub.gdiplus.dll_GdipDrawImageRectRectI
mov r8d, dword [rbx + 0x30]
mov ecx, dword [rbx + 0x34]
sub r8d, r13d
cmp rsi, r14
je 0x100064e5d
mov rdx, qword [rsi + 8]
jmp 0x100064e60
mov rdx, r14
mov r9d, dword [rbx + 0x2c]
mov dword [rsp + 0x28], ecx
mov rcx, rbp
mov dword [rsp + 0x20], r13d
call sub.gdiplus.dll_GdipDrawImageRectI
test byte [rbx + 0x10], 0x11
je 0x100064f03
movss xmm1, dword [0x10002400c]
lea r9, [rsp + 0x78]
xor r8d, r8d
mov ecx, 0xc0ffffff
mov qword [rsp + 0x78], r14
call sub.gdiplus.dll_GdipCreatePen1
mov rcx, qword [rsp + 0x78]
mov edx, 1
mov dword [rsp + 0x80], eax
call sub.gdiplus.dll_GdipSetPenDashStyle
mov ecx, dword [rsp + 0x80]
mov r9d, dword [rbx + 0x2c]
mov r8d, dword [rbx + 0x28]
mov rdx, qword [rsp + 0x78]
cmp eax, r14d
cmovne ecx, eax
mov eax, dword [rbx + 0x30]
add r9d, 5
mov dword [rsp + 0x80], ecx
mov ecx, dword [rbx + 0x34]
sub eax, 0xa
sub ecx, 0xa
add r8d, 5
mov dword [rsp + 0x28], ecx
mov rcx, rbp
mov dword [rsp + 0x20], eax
call sub.gdiplus.dll_GdipDrawRectangleI
mov rcx, qword [rsp + 0x78]
call sub.gdiplus.dll_GdipDeletePen
mov rcx, qword [rsp + 0x98]
call sub.gdiplus.dll_GdipDisposeImageAttributes
mov r12, qword [rsp + 0x88]
lea rcx, [rsp + 0xd2]
xor edx, edx
mov r8d, 0x1fe
mov word [rsp + 0xd0], r14w
call sub.msvcrt.dll_memset
mov rcx, qword [rbx + 0x18]
lea rdx, [rsp + 0xd0]
mov r8d, 0x100
call qword [sym.imp.USER32.dll_GetWindowTextW]
cmp eax, r14d
je 0x100065121
mov edx, 3
mov rcx, rbp
call sub.gdiplus.dll_GdipSetTextRenderingHint
lea rdx, [rsp + 0x78]
or ecx, 0xffffffff
mov qword [rsp + 0x78], r14
call sub.gdiplus.dll_GdipCreateSolidFill
mov r8, qword [0x1000a8658]
mov rdx, qword [rbx + 0x20]
mov rsi, qword [rsp + 0x78]
lea rcx, [rsp + 0xb0]
call fcn.100062be4
lea r8, [rsp + 0x88]
xor edx, edx
movd xmm0, dword [rbx + 0x2c]
movd xmm5, dword [rbx + 0x28]
movd xmm1, dword [rbx + 0x30]
xor ecx, ecx
mov qword [rsp + 0x88], r14
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm5, xmm5
cvtdq2ps xmm1, xmm1
movss dword [rsp + 0x9c], xmm0
movss dword [rsp + 0x98], xmm5
movss dword [rsp + 0xa0], xmm1
movd xmm0, dword [rbx + 0x34]
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0xa4], xmm0
call sub.gdiplus.dll_GdipCreateStringFormat
mov rcx, qword [rsp + 0x88]
mov edx, 1
mov dword [rsp + 0x90], eax
call sub.gdiplus.dll_GdipSetStringFormatLineAlign
mov ecx, dword [rsp + 0x90]
cmp eax, r14d
mov edx, 1
cmovne ecx, eax
mov dword [rsp + 0x90], ecx
mov rcx, qword [rsp + 0x88]
call sub.gdiplus.dll_GdipSetStringFormatHotkeyPrefix
mov ecx, dword [rsp + 0x90]
mov edx, 1
cmp eax, r14d
cmovne ecx, eax
mov dword [rsp + 0x90], ecx
mov rcx, qword [rsp + 0x88]
call sub.gdiplus.dll_GdipSetStringFormatAlign
mov ecx, dword [rsp + 0x90]
cmp eax, r14d
cmovne ecx, eax
mov dword [rsp + 0x90], ecx
mov rcx, qword [rsp + 0x88]
cmp byte [0x1000a85b5], r14b
je 0x100065092
mov edx, 0x1001
call sub.gdiplus.dll_GdipSetStringFormatFlags
cmp eax, r14d
je 0x1000650b0
mov dword [rsp + 0x90], eax
jmp 0x1000650b0
mov edx, 0x1000
call sub.gdiplus.dll_GdipSetStringFormatFlags
mov ecx, dword [rsp + 0x90]
cmp eax, r14d
cmovne ecx, eax
mov dword [rsp + 0x90], ecx
mov r9, qword [rsp + 0xb0]
xor eax, eax
or rcx, 0xffffffffffffffff
mov qword [rsp + 0x30], rsi
lea rdi, [rsp + 0xd0]
lea rdx, [rsp + 0xd0]
repne scasw ax, word [rdi]
mov rax, qword [rsp + 0x88]
not rcx
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x98]
lea r8d, [rcx - 1]
mov rcx, rbp
mov qword [rsp + 0x20], rax
call sub.gdiplus.dll_GdipDrawString
mov rcx, qword [rsp + 0x88]
call sub.gdiplus.dll_GdipDeleteStringFormat
mov rcx, qword [rsp + 0xb0]
call sub.gdiplus.dll_GdipDeleteFont
mov rcx, rsi
call sub.gdiplus.dll_GdipDeleteBrush
mov rcx, qword [rbx + 0x20]
lea rdx, [rsp + 0x78]
mov qword [rsp + 0x78], r14
call sub.gdiplus.dll_GdipCreateFromHDC
mov edx, dword [rbx + 0x30]
mov eax, dword [rbx + 0x34]
mov rdi, qword [rsp + 0x78]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], edx
mov rdx, r12
xor r9d, r9d
xor r8d, r8d
mov rcx, rdi
call sub.gdiplus.dll_GdipDrawImageRectI
mov rcx, rdi
call sub.gdiplus.dll_GdipDeleteGraphics
mov rcx, rbp
call sub.gdiplus.dll_GdipDeleteGraphics
mov rcx, r12
call sub.gdiplus.dll_GdipDisposeImage
mov rcx, qword [rsp + 0x2d0]
xor rcx, rsp
call fcn.10008f560
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret