Function at 0x43fcb4
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x43fff8
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x40c110]
call fcn.00402db8
mov dword [ebp - 4], eax
call sub.user32.dll_GetDesktopWindow
push 5
push eax
call sub.user32.dll_GetWindow
mov ebx, eax
mov eax, 0xc8
call fcn.004026d8
mov esi, eax
test ebx, ebx
jbe 0x43fd49
push 0xc8
push esi
push ebx
call sub.user32.dll_GetWindowTextA
lea eax, [ebp - 0x14]
mov edx, esi
call fcn.00403c10
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x10]
call fcn.00407c7c
cmp dword [ebp - 0x10], 0
je 0x43fd3b
lea eax, [ebp - 0x18]
mov edx, esi
call fcn.00403c10
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 2
push ebx
call sub.user32.dll_GetWindow
mov ebx, eax
test ebx, ebx
ja 0x43fcff
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
jle 0x43ffdd
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x43ffce
inc ebx
mov dword [ebp - 8], 0
lea ecx, [ebp - 0x1c]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0xc]
call fcn.00407b14
mov edx, dword [ebp - 0xc]
mov eax, 0x440010
call fcn.00403fc4
test eax, eax
je 0x43fdc0
mov eax, dword [ebp - 0xc]
call fcn.00403e9c
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x43ffc4
mov edx, dword [ebp - 0xc]
mov eax, 0x440024
call fcn.00403fc4
test eax, eax
je 0x43fdf4
mov eax, dword [ebp - 0xc]
call fcn.00403e9c
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x43ffc4
mov edx, dword [ebp - 0xc]
mov eax, 0x440038
call fcn.00403fc4
test eax, eax
je 0x43fe28
mov eax, dword [ebp - 0xc]
call fcn.00403e9c
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x43ffc4
mov edx, dword [ebp - 0xc]
mov eax, 0x44004c
call fcn.00403fc4
test eax, eax
je 0x43fe5c
mov eax, dword [ebp - 0xc]
call fcn.00403e9c
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x43ffc4
mov edx, dword [ebp - 0xc]
mov eax, 0x440068
call fcn.00403fc4
test eax, eax
je 0x43fe90
mov eax, dword [ebp - 0xc]
call fcn.00403e9c
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x43ffc4
mov edx, dword [ebp - 0xc]
mov eax, 0x440078
call fcn.00403fc4
test eax, eax
je 0x43fec4
mov eax, dword [ebp - 0xc]
call fcn.00403e9c
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x43ffc4
mov edx, dword [ebp - 0xc]
mov eax, 0x440088
call fcn.00403fc4
test eax, eax
je 0x43fef8
mov eax, dword [ebp - 0xc]
call fcn.00403e9c
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x43ffc4
mov edx, dword [ebp - 0xc]
mov eax, 0x440098
call fcn.00403fc4
test eax, eax
je 0x43ff2c
mov eax, dword [ebp - 0xc]
call fcn.00403e9c
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x43ffc4
mov edx, dword [ebp - 0xc]
mov eax, 0x4400ac
call fcn.00403fc4
test eax, eax
je 0x43ff64
mov eax, dword [ebp - 0xc]
call fcn.00403e9c
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
mov eax, edi
call fcn.0043fc84
jmp 0x43ffc4
mov edx, dword [ebp - 0xc]
mov eax, 0x4400c4
call fcn.00403fc4
test eax, eax
je 0x43ff95
mov eax, dword [ebp - 0xc]
call fcn.00403e9c
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
jmp 0x43ffc4
mov edx, dword [ebp - 0xc]
mov eax, 0x4400dc
call fcn.00403fc4
test eax, eax
je 0x43ffc4
mov eax, dword [ebp - 0xc]
call fcn.00403e9c
push eax
push 0
call sub.user32.dll_FindWindowA
mov edi, eax
push 0
push 0
push 0x10
push edi
call sub.user32.dll_PostMessageA
inc dword [ebp - 8]
dec ebx
jne 0x43fd73
mov eax, esi
call fcn.004026f0
mov eax, dword [ebp - 4]
call fcn.00402de8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x43ffff
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.00403a7c
ret