Function at 0x4122c8
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x4125e6
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x40b698]
call fcn.00402af4
mov dword [ebp - 4], eax
call sub.user32.dll_GetDesktopWindow
push 5
push eax
call sub.user32.dll_GetWindow
mov ebx, eax
mov eax, 0xc8
call fcn.004025a8
mov esi, eax
test ebx, ebx
jbe 0x41235d
push 0xc8
push esi
push ebx
call sub.user32.dll_GetWindowTextA
lea eax, [ebp - 0x14]
mov edx, esi
call fcn.0040364c
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x10]
call fcn.00406bf4
cmp dword [ebp - 0x10], 0
je 0x41234f
lea eax, [ebp - 0x18]
mov edx, esi
call fcn.0040364c
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 2
push ebx
call sub.user32.dll_GetWindow
mov ebx, eax
test ebx, ebx
ja 0x412313
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
jle 0x4125cb
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x4125bc
inc ebx
mov dword [ebp - 8], 0
lea ecx, [ebp - 0x1c]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0xc]
call fcn.00406b08
mov edx, dword [ebp - 0xc]
mov eax, 0x4125fc
call fcn.00403980
test eax, eax
je 0x4123d4
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x4125b2
mov edx, dword [ebp - 0xc]
mov eax, 0x412610
call fcn.00403980
test eax, eax
je 0x412408
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x4125b2
mov edx, dword [ebp - 0xc]
mov eax, 0x412624
call fcn.00403980
test eax, eax
je 0x41243c
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x4125b2
mov edx, dword [ebp - 0xc]
mov eax, 0x41263c
call fcn.00403980
test eax, eax
je 0x412470
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x4125b2
mov edx, dword [ebp - 0xc]
mov eax, 0x41264c
call fcn.00403980
test eax, eax
je 0x4124a4
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x4125b2
mov edx, dword [ebp - 0xc]
mov eax, 0x41267c
call fcn.00403980
test eax, eax
je 0x41252f
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
mov edx, dword [ebp - 0xc]
mov eax, 0x412694
call fcn.00403980
test eax, eax
je 0x4124fb
push 0
push 0
push 0x82
push edi
call sub.user32.dll_PostMessageA
mov eax, 0x1388
call fcn.0041105c
call fcn.00411030
jmp 0x4125b2
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
call fcn.00411030
mov eax, dword [0x4166f8]
call fcn.0040e3bc
mov eax, 0x3e8
call fcn.0041105c
mov eax, dword [0x4166f8]
call fcn.0040e3ac
jmp 0x4125b2
mov edx, dword [ebp - 0xc]
mov eax, 0x4126b0
call fcn.00403980
test eax, eax
je 0x412583
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
call fcn.00411030
mov eax, dword [0x4166f8]
call fcn.0040e3bc
mov eax, 0x3e8
call fcn.0041105c
mov eax, dword [0x4166f8]
call fcn.0040e3ac
jmp 0x4125b2
mov edx, dword [ebp - 0xc]
mov eax, 0x4126c4
call fcn.00403980
test eax, eax
je 0x4125b2
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
inc dword [ebp - 8]
dec ebx
jne 0x412387
mov eax, esi
call fcn.004025c0
mov eax, dword [ebp - 4]
call fcn.00402b24
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4125ed
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.004034b8
ret