Function at 0x412c68
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x412f86
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x40b6fc]
call fcn.00402af4
mov dword [ebp - 4], eax
call sub.user32.dll_GetDesktopWindow
push 5
push eax
call sub.user32.dll_GetWindow
mov ebx, eax
mov eax, 0xc8
call fcn.004025a8
mov esi, eax
test ebx, ebx
jbe 0x412cfd
push 0xc8
push esi
push ebx
call sub.user32.dll_GetWindowTextA
lea eax, [ebp - 0x14]
mov edx, esi
call fcn.0040364c
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x10]
call fcn.00406bfc
cmp dword [ebp - 0x10], 0
je 0x412cef
lea eax, [ebp - 0x18]
mov edx, esi
call fcn.0040364c
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 2
push ebx
call sub.user32.dll_GetWindow
mov ebx, eax
test ebx, ebx
ja 0x412cb3
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
jle 0x412f6b
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x412f5c
inc ebx
mov dword [ebp - 8], 0
lea ecx, [ebp - 0x1c]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0xc]
call fcn.00406b10
mov edx, dword [ebp - 0xc]
mov eax, 0x412f9c
call fcn.00403980
test eax, eax
je 0x412d74
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x412f52
mov edx, dword [ebp - 0xc]
mov eax, 0x412fb0
call fcn.00403980
test eax, eax
je 0x412da8
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x412f52
mov edx, dword [ebp - 0xc]
mov eax, 0x412fc4
call fcn.00403980
test eax, eax
je 0x412ddc
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x412f52
mov edx, dword [ebp - 0xc]
mov eax, 0x412fdc
call fcn.00403980
test eax, eax
je 0x412e10
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x412f52
mov edx, dword [ebp - 0xc]
mov eax, 0x412fec
call fcn.00403980
test eax, eax
je 0x412e44
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x412f52
mov edx, dword [ebp - 0xc]
mov eax, 0x41301c
call fcn.00403980
test eax, eax
je 0x412ecf
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
mov edx, dword [ebp - 0xc]
mov eax, 0x413034
call fcn.00403980
test eax, eax
je 0x412e9b
push 0
push 0
push 0x82
push edi
call sub.user32.dll_PostMessageA
mov eax, 0x1388
call fcn.00411a14
call fcn.004119e8
jmp 0x412f52
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
call fcn.004119e8
mov eax, dword [0x417704]
call fcn.0040e420
mov eax, 0x3e8
call fcn.00411a14
mov eax, dword [0x417704]
call fcn.0040e410
jmp 0x412f52
mov edx, dword [ebp - 0xc]
mov eax, 0x413050
call fcn.00403980
test eax, eax
je 0x412f23
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
call fcn.004119e8
mov eax, dword [0x417704]
call fcn.0040e420
mov eax, 0x3e8
call fcn.00411a14
mov eax, dword [0x417704]
call fcn.0040e410
jmp 0x412f52
mov edx, dword [ebp - 0xc]
mov eax, 0x413064
call fcn.00403980
test eax, eax
je 0x412f52
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
inc dword [ebp - 8]
dec ebx
jne 0x412d27
mov eax, esi
call fcn.004025c0
mov eax, dword [ebp - 4]
call fcn.00402b24
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x412f8d
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.004034b8
ret