Function at 0x10035b22
Capabilities:
Get graphical window text

Disassembly:
mov eax, 0x2038
call fcn.101b7610
mov eax, dword [0x102bff3c]
xor eax, esp
mov dword [esp + 0x2034], eax
push ebx
push ebp
push esi
push edi
push 0xa
call fcn.1002a528
push eax
call fcn.101e418a
push 0xb
mov ebp, eax
call fcn.1002a528
push eax
call fcn.101e418a
push 0xc
mov edi, eax
call fcn.1002a528
push eax
call fcn.101e418a
push 0xd
mov dword [esp + 0x3c], eax
call fcn.1002a528
push eax
call fcn.101e418a
push 0xe
mov dword [esp + 0x40], eax
call fcn.1002a528
push eax
call fcn.101e418a
push 0xf
mov dword [esp + 0x58], eax
call fcn.1002a528
push eax
call fcn.101e418a
mov esi, dword [sym.imp.USER32.dll_GetWindowTextW]
add esp, 0x30
mov ebx, eax
xorps xmm0, xmm0
lea eax, [esp + 0x844]
movups xmmword [esp + 0x34], xmm0
push 0x400
push eax
push edi
call esi
push 0x400
lea eax, [esp + 0x48]
push eax
push dword [esp + 0x24]
call esi
push 0x400
lea eax, [esp + 0x1048]
push eax
push dword [esp + 0x28]
call esi
push 0x400
lea eax, [esp + 0x1848]
push eax
push dword [esp + 0x34]
call esi
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x84c]
push eax
push ebp
call fcn.10199fa0
add esp, 0x10
lea eax, [esp + 0x34]
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov esi, dword [sym.imp.USER32.dll_ScreenToClient]
lea eax, [esp + 0x34]
push eax
push ebx
call esi
lea eax, [esp + 0x3c]
push eax
push ebx
call esi
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
xor edx, edx
add eax, dword [esp + 0x38]
add ecx, dword [esp + 0x34]
push 0x201
push edx
push edx
push eax
push ecx
push edx
push edi
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], eax
call dword [sym.imp.USER32.dll_SetWindowPos]
lea eax, [esp + 0x844]
push eax
lea ecx, [esp + 0x1c]
call fcn.1001f510
push 0x20
lea ecx, [esp + 0x1c]
call fcn.10037c94
push 0x6f
lea ecx, [esp + 0x1c]
call fcn.10018460
mov eax, dword [esp + 0x18]
cmp dword [eax - 4], 1
jle 0x10035c9e
push dword [eax - 0xc]
lea ecx, [esp + 0x1c]
call fcn.1000d3e0
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x4c]
push ecx
push eax
push ebp
call fcn.10199b20
mov edi, dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [esp + 0x48]
add esp, 0x14
push eax
push dword [esp + 0x20]
call edi
lea eax, [esp + 0x34]
push eax
push ebx
call esi
lea eax, [esp + 0x3c]
push eax
push ebx
call esi
mov eax, dword [esp + 0x14]
xor edx, edx
mov ecx, dword [esp + 0x10]
add eax, dword [esp + 0x38]
add ecx, dword [esp + 0x34]
push 0x201
push edx
push edx
push eax
push ecx
push edx
push dword [esp + 0x34]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], eax
call dword [sym.imp.USER32.dll_SetWindowPos]
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x20]
call fcn.1001f510
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x30]
push eax
call fcn.100266b4
mov ecx, dword [esp + 0x28]
add esp, 0xc
lea ecx, [ecx - 0x10]
call fcn.1000dde0
mov eax, dword [esp + 0x28]
cmp dword [eax - 4], 1
jle 0x10035d4d
push dword [eax - 0xc]
lea ecx, [esp + 0x2c]
call fcn.1000d3e0
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x104c]
push ecx
push eax
push ebp
call fcn.10199b20
add esp, 0x14
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x24]
call edi
lea eax, [esp + 0x34]
push eax
push ebx
call esi
lea eax, [esp + 0x3c]
push eax
push ebx
call esi
mov eax, dword [esp + 0x14]
xor edx, edx
mov ecx, dword [esp + 0x10]
add eax, dword [esp + 0x38]
add ecx, dword [esp + 0x34]
push 0x201
push edx
push edx
push eax
push ecx
push edx
push dword [esp + 0x38]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], eax
call dword [sym.imp.USER32.dll_SetWindowPos]
lea eax, [esp + 0x1044]
push eax
lea ecx, [esp + 0x34]
call fcn.1001f510
push eax
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x24]
call fcn.1001f510
push eax
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.100266b4
add esp, 0xc
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.100266b4
mov ecx, dword [esp + 0x2c]
add esp, 0xc
lea ecx, [ecx - 0x10]
call fcn.1000dde0
mov ecx, dword [esp + 0x1c]
lea ecx, [ecx - 0x10]
call fcn.1000dde0
mov ecx, dword [esp + 0x30]
lea ecx, [ecx - 0x10]
call fcn.1000dde0
mov eax, dword [esp + 0x24]
cmp dword [eax - 4], 1
jle 0x10035e31
push dword [eax - 0xc]
lea ecx, [esp + 0x28]
call fcn.1000d3e0
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x184c]
push ecx
push eax
push ebp
call fcn.10199b20
mov ebp, dword [esp + 0x40]
lea eax, [esp + 0x48]
add esp, 0x14
push eax
push ebp
call edi
lea eax, [esp + 0x34]
push eax
push ebx
call esi
lea eax, [esp + 0x3c]
push eax
push ebx
call esi
mov eax, dword [esp + 0x14]
xor edx, edx
mov ecx, dword [esp + 0x10]
add eax, dword [esp + 0x38]
add ecx, dword [esp + 0x34]
push 0x201
push edx
push edx
push eax
push ecx
push edx
push ebp
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, dword [esp + 0x24]
lea ecx, [ecx - 0x10]
call fcn.1000dde0
mov ecx, dword [esp + 0x28]
lea ecx, [ecx - 0x10]
call fcn.1000dde0
mov ecx, dword [esp + 0x18]
lea ecx, [ecx - 0x10]
call fcn.1000dde0
mov ecx, dword [esp + 0x2044]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.101b70aa
add esp, 0x2038
ret