Function at 0x43c1d0
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cb0b4
mov eax, dword fs:[0]
push eax
sub esp, 0x47c
mov eax, dword [0x4fe37c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x464], ecx
mov eax, dword [ebp - 0x464]
mov ecx, dword [ebp + 8]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x464]
add ecx, 4
call fcn.00406c50
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x464]
add ecx, 0x20
call fcn.00406c50
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x464]
add ecx, 0x3c
call fcn.00406f20
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x464]
add ecx, 0x64
call fcn.0043c4b0
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x464]
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
neg eax
sbb eax, eax
neg eax
mov ecx, dword [ebp - 0x464]
mov byte [ecx + 0x60], al
mov edx, dword [ebp - 0x464]
add edx, 0x58
push edx
mov eax, dword [ebp - 0x464]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [ebp - 0x464]
mov dword [edx + 0x5c], eax
push 0x80
lea eax, [ebp - 0x214]
push eax
mov ecx, dword [ebp - 0x464]
mov edx, dword [ecx]
push edx
call dword [sym.imp.USER32.dll_GetWindowTextW]
push 0x80
lea eax, [ebp - 0x114]
push eax
mov ecx, dword [ebp - 0x464]
mov edx, dword [ecx]
push edx
call dword [sym.imp.USER32.dll_GetClassNameW]
push 0
push 0xfde9
lea ecx, [ebp - 0x424]
call fcn.0040a290
mov dword [ebp - 0x468], eax
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x46c], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x46c]
mov edx, dword [ecx]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x440]
push ecx
call fcn.004bf860
add esp, 0x10
mov dword [ebp - 0x470], eax
mov edx, dword [ebp - 0x470]
mov dword [ebp - 0x474], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x474]
push eax
mov ecx, dword [ebp - 0x464]
add ecx, 4
call fcn.00417dd0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x440]
call fcn.00406d00
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x424]
call fcn.00439bd0
push 0
push 0xfde9
lea ecx, [ebp - 0x444]
call fcn.0040a290
mov dword [ebp - 0x478], eax
mov ecx, dword [ebp - 0x478]
mov dword [ebp - 0x47c], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x47c]
mov eax, dword [edx]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x114]
push ecx
lea edx, [ebp - 0x460]
push edx
call fcn.004bf860
add esp, 0x10
mov dword [ebp - 0x480], eax
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x484], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x484]
push ecx
mov ecx, dword [ebp - 0x464]
add ecx, 0x20
call fcn.00417dd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x460]
call fcn.00406d00
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x444]
call fcn.00439bd0
mov edx, dword [ebp - 0x464]
mov eax, dword [edx + 0x58]
push eax
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x43c488
push 0x104
lea ecx, [ebp - 0x41c]
push ecx
push 0
mov edx, dword [ebp - 0x10]
push edx
call sub.PSAPI.DLL_GetModuleFileNameExW
test eax, eax
je 0x43c47e
push 0x5c
lea eax, [ebp - 0x41c]
push eax
call fcn.004260c0
add esp, 8
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0
je 0x43c45d
mov ecx, dword [ebp - 0x420]
add ecx, 2
mov dword [ebp - 0x488], ecx
jmp 0x43c469
lea edx, [ebp - 0x41c]
mov dword [ebp - 0x488], edx
mov eax, dword [ebp - 0x488]
push eax
mov ecx, dword [ebp - 0x464]
add ecx, 0x3c
call fcn.00407010
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x464]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004443e3
mov esp, ebp
pop ebp
ret 4