Function at 0x412ce4
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x413002
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x40b6fc]
call fcn.00402af4
mov dword [ebp - 4], eax
call sub.user32.dll_GetDesktopWindow
push 5
push eax
call sub.user32.dll_GetWindow
mov ebx, eax
mov eax, 0xc8
call fcn.004025a8
mov esi, eax
test ebx, ebx
jbe 0x412d79
push 0xc8
push esi
push ebx
call sub.user32.dll_GetWindowTextA
lea eax, [ebp - 0x14]
mov edx, esi
call fcn.0040364c
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x10]
call fcn.00406bfc
cmp dword [ebp - 0x10], 0
je 0x412d6b
lea eax, [ebp - 0x18]
mov edx, esi
call fcn.0040364c
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 2
push ebx
call sub.user32.dll_GetWindow
mov ebx, eax
test ebx, ebx
ja 0x412d2f
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
jle 0x412fe7
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x412fd8
inc ebx
mov dword [ebp - 8], 0
lea ecx, [ebp - 0x1c]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0xc]
call fcn.00406b10
mov edx, dword [ebp - 0xc]
mov eax, 0x413018
call fcn.00403980
test eax, eax
je 0x412df0
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x412fce
mov edx, dword [ebp - 0xc]
mov eax, 0x41302c
call fcn.00403980
test eax, eax
je 0x412e24
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x412fce
mov edx, dword [ebp - 0xc]
mov eax, 0x413040
call fcn.00403980
test eax, eax
je 0x412e58
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x412fce
mov edx, dword [ebp - 0xc]
mov eax, 0x413058
call fcn.00403980
test eax, eax
je 0x412e8c
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x412fce
mov edx, dword [ebp - 0xc]
mov eax, 0x413068
call fcn.00403980
test eax, eax
je 0x412ec0
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x412fce
mov edx, dword [ebp - 0xc]
mov eax, 0x413098
call fcn.00403980
test eax, eax
je 0x412f4b
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
mov edx, dword [ebp - 0xc]
mov eax, 0x4130b0
call fcn.00403980
test eax, eax
je 0x412f17
push 0
push 0
push 0x82
push edi
call sub.user32.dll_PostMessageA
mov eax, 0x1388
call fcn.00411a14
call fcn.004119e8
jmp 0x412fce
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
call fcn.004119e8
mov eax, dword [0x417704]
call fcn.0040e420
mov eax, 0x3e8
call fcn.00411a14
mov eax, dword [0x417704]
call fcn.0040e410
jmp 0x412fce
mov edx, dword [ebp - 0xc]
mov eax, 0x4130cc
call fcn.00403980
test eax, eax
je 0x412f9f
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
call fcn.004119e8
mov eax, dword [0x417704]
call fcn.0040e420
mov eax, 0x3e8
call fcn.00411a14
mov eax, dword [0x417704]
call fcn.0040e410
jmp 0x412fce
mov edx, dword [ebp - 0xc]
mov eax, 0x4130e0
call fcn.00403980
test eax, eax
je 0x412fce
mov eax, dword [ebp - 0xc]
call fcn.004038b4
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
inc dword [ebp - 8]
dec ebx
jne 0x412da3
mov eax, esi
call fcn.004025c0
mov eax, dword [ebp - 4]
call fcn.00402b24
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x413009
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.004034b8
ret