Function at 0x43db30
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x618d00
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xfd4
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
mov esi, ecx
push ebx
mov dword [ebp - 0x40], esi
mov dword [ebp - 4], ebx
call fcn.0060313e
mov eax, dword [esi + 0x90]
cmp eax, ebx
jne 0x43db74
lea eax, [esi + 0x94]
push eax
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], ebx
mov word [ebp - 0x18], bx
call fcn.00402410
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 1
cmp eax, ebx
jne 0x43db95
lea eax, [ebp - 0x18]
push 0x3a
push eax
call fcn.005e77bb
mov edi, eax
add esp, 8
cmp edi, ebx
je 0x43dccd
add edi, 2
push 0x3a
push edi
call fcn.005e77bb
add esp, 8
test eax, eax
je 0x43dccd
push edi
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], ebx
mov word [ebp - 0x2c], bx
call fcn.00402410
mov esi, dword [ebp - 0x30]
mov byte [ebp - 4], 2
cmp esi, ebx
je 0x43dbfe
push esi
call fcn.005e71bf
add esp, 4
lea eax, [esi + eax*2]
cmp esi, eax
jae 0x43dbfe
cmp word [esi], 0x3a
jne 0x43dbf9
mov word [esi], 0x2d
add esi, 2
jmp 0x43dbea
mov word [edi], bx
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
jne 0x43dc0b
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x34], ebx
mov word [ebp - 0x38], bx
call fcn.00402410
mov edi, dword [ebp - 0x30]
mov byte [ebp - 4], 3
cmp edi, ebx
jne 0x43dc30
lea edi, [ebp - 0x2c]
cmp edi, ebx
je 0x43dca9
push edi
call fcn.005e71bf
add esp, 4
test eax, eax
je 0x43dca9
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
je 0x43dc51
push eax
call fcn.005e71bf
add esp, 4
mov esi, eax
jmp 0x43dc53
xor esi, esi
push edi
call fcn.005e71bf
add eax, esi
lea eax, [eax + eax + 2]
push eax
call fcn.005ffe3f
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x43dca9
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
je 0x43dc88
push eax
push esi
call fcn.005e7389
push edi
push esi
call fcn.005e735f
add esp, 0x10
jmp 0x43dc92
push edi
push esi
call fcn.005e7389
add esp, 8
lea ecx, [ebp - 0x3c]
call fcn.00401070
push esi
mov dword [ebp - 0x3c], esi
call fcn.005e71bf
add esp, 4
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x1c]
call fcn.00402410
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 2
call fcn.00401070
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00401070
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x43ddff
push eax
mov esi, eax
call fcn.005e71bf
add esp, 4
lea eax, [esi + eax*2]
cmp esi, eax
jae 0x43dcfa
cmp word [esi], 0x2a
jne 0x43dcf5
mov word [esi], 0x2d
add esi, 2
jmp 0x43dce6
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x43ddff
push eax
mov esi, eax
call fcn.005e71bf
add esp, 4
lea eax, [esi + eax*2]
cmp esi, eax
jae 0x43dd27
cmp word [esi], 0x3f
jne 0x43dd22
mov word [esi], 0x2d
add esi, 2
jmp 0x43dd13
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x43ddff
push eax
mov esi, eax
call fcn.005e71bf
add esp, 4
lea eax, [esi + eax*2]
cmp esi, eax
jae 0x43dd54
cmp word [esi], 0x7c
jne 0x43dd4f
mov word [esi], 0x2d
add esi, 2
jmp 0x43dd40
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x43ddff
push eax
mov esi, eax
call fcn.005e71bf
add esp, 4
lea eax, [esi + eax*2]
cmp esi, eax
jae 0x43dd81
cmp word [esi], 0x3c
jne 0x43dd7c
mov word [esi], 0x2d
add esi, 2
jmp 0x43dd6d
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x43ddff
push eax
mov esi, eax
call fcn.005e71bf
add esp, 4
lea eax, [esi + eax*2]
cmp esi, eax
jae 0x43ddaa
cmp word [esi], 0x3e
jne 0x43dda5
mov word [esi], 0x2d
add esi, 2
jmp 0x43dd96
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x43ddff
push eax
mov esi, eax
call fcn.005e71bf
add esp, 4
lea eax, [esi + eax*2]
cmp esi, eax
jae 0x43ddd3
cmp word [esi], 0x22
jne 0x43ddce
mov word [esi], 0x27
add esi, 2
jmp 0x43ddbf
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x43ddff
push eax
mov esi, eax
call fcn.005e71bf
add esp, 4
lea eax, [esi + eax*2]
cmp esi, eax
jae 0x43ddfc
cmp word [esi], 0x2f
jne 0x43ddf7
mov word [esi], 0x5c
add esi, 2
jmp 0x43dde8
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x43de06
lea eax, [ebp - 0x18]
push 0x6a5254
push eax
call fcn.005e7a20
add esp, 8
test eax, eax
je 0x43dfee
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x43de03
mov edx, 0x6a5254
test edx, edx
je 0x43ddff
mov ecx, 0x6a115c
test ecx, ecx
je 0x43ddff
push ecx
push edx
call fcn.005e77e4
add esp, 8
test eax, eax
je 0x43ddfc
mov edx, dword [ebp - 0x1c]
push 0x6a5254
push edx
call fcn.005e7a20
add esp, 8
mov esi, eax
xor edi, edi
test esi, esi
je 0x43de7c
push 0x6a5254
inc edi
call fcn.005e71bf
lea eax, [esi + eax*2]
push 0x6a5254
push eax
call fcn.005e7a20
add esp, 0xc
mov esi, eax
jmp 0x43de58
test edi, edi
je 0x43ddfc
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x30]
push eax
call fcn.0040e580
push 0x6a115c
mov byte [ebp - 4], 4
call fcn.005e71bf
push 0x6a5254
mov esi, eax
call fcn.005e71bf
add esp, 8
cmp esi, eax
jbe 0x43df0d
lea ecx, [ebp - 0x1c]
call fcn.00401070
mov esi, dword [ebp - 0x30]
test esi, esi
jne 0x43dec3
lea esi, [ebp - 0x2c]
push 0x6a115c
call fcn.005e71bf
push 0x6a5254
mov ebx, eax
call fcn.005e71bf
sub ebx, eax
push esi
imul ebx, edi
call fcn.005e71bf
add ebx, eax
lea ecx, [ebx + ebx + 2]
push ecx
call fcn.005ffe3f
mov ebx, eax
add esp, 0x10
test ebx, ebx
mov dword [ebp - 0x1c], ebx
jne 0x43df10
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00401070
jmp 0x43ddfc
mov ebx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x30]
call fcn.00402400
push 0x6a5254
push eax
mov dword [ebp - 0x20], eax
call fcn.005e7a20
add esp, 8
test eax, eax
mov dword [ebp - 0x24], eax
je 0x43dfa0
mov esi, dword [ebp - 0x20]
mov edi, ebx
sub eax, esi
push 0x6a115c
sar eax, 1
shl eax, 1
mov ecx, eax
add ebx, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.005e71bf
mov ecx, eax
mov esi, 0x6a115c
shl ecx, 1
mov eax, ecx
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0x6a115c
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.005e71bf
push 0x6a5254
lea ebx, [ebx + eax*2]
call fcn.005e71bf
mov ecx, dword [ebp - 0x24]
push 0x6a5254
lea eax, [ecx + eax*2]
push eax
mov dword [ebp - 0x20], eax
call fcn.005e7a20
add esp, 0x14
jmp 0x43df29
mov esi, dword [ebp - 0x20]
push esi
call fcn.005e71bf
mov ecx, eax
mov edi, ebx
shl ecx, 1
mov edx, ecx
mov eax, dword [ebp - 0x20]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.005e71bf
lea ebx, [ebx + eax*2]
mov word [ebx], 0
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.005e71bf
add esp, 0xc
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 1
call fcn.00401070
jmp 0x43ddfc
mov eax, dword [0x6d2338]
test eax, eax
jne 0x43e288
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x43e005
lea eax, [ebp - 0x18]
push 0x202a
push eax
call fcn.005e77bb
add esp, 8
test eax, eax
jne 0x43e037
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x43e021
lea eax, [ebp - 0x18]
push 0x202d
push eax
call fcn.005e77bb
add esp, 8
test eax, eax
je 0x43e22c
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x43e208
mov edx, 0x6a5250
test edx, edx
je 0x43e208
mov eax, 0x6d1c9c
test eax, eax
je 0x43e208
push eax
push edx
call fcn.005e77e4
add esp, 8
test eax, eax
je 0x43e208
mov ecx, dword [ebp - 0x1c]
push 0x6a5250
push ecx
call fcn.005e7a20
add esp, 8
mov esi, eax
xor edi, edi
test esi, esi
je 0x43e0a7
push 0x6a5250
inc edi
call fcn.005e71bf
lea esi, [esi + eax*2]
push 0x6a5250
push esi
call fcn.005e7a20
add esp, 0xc
mov esi, eax
jmp 0x43e083
test edi, edi
je 0x43e208
mov edx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x30]
push edx
call fcn.0040e580
push 0x6a5250
mov byte [ebp - 4], 5
call fcn.005e71bf
push 0x6d1c9c
mov esi, eax
call fcn.005e71bf
add esp, 8
cmp eax, esi
jbe 0x43e12c
lea ecx, [ebp - 0x1c]
call fcn.00401070
lea ecx, [ebp - 0x30]
call fcn.00402400
push eax
call fcn.005e71bf
push 0x6a5250
mov esi, eax
call fcn.005e71bf
push 0x6d1c9c
mov ebx, eax
call fcn.005e71bf
sub eax, ebx
imul eax, edi
add esi, eax
lea eax, [esi + esi + 2]
push eax
call fcn.005ffe3f
mov ebx, eax
add esp, 0x10
test ebx, ebx
mov dword [ebp - 0x1c], ebx
jne 0x43e12f
jmp 0x43e1fc
mov ebx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x30]
call fcn.00402400
push 0x6a5250
push eax
mov dword [ebp - 0x24], eax
call fcn.005e7a20
add esp, 8
test eax, eax
mov dword [ebp - 0x20], eax
je 0x43e1bf
mov esi, dword [ebp - 0x24]
mov edi, ebx
sub eax, esi
push 0x6d1c9c
sar eax, 1
shl eax, 1
mov ecx, eax
add ebx, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.005e71bf
mov ecx, eax
mov esi, 0x6d1c9c
shl ecx, 1
mov eax, ecx
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0x6d1c9c
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.005e71bf
push 0x6a5250
lea ebx, [ebx + eax*2]
call fcn.005e71bf
mov ecx, dword [ebp - 0x20]
push 0x6a5250
lea eax, [ecx + eax*2]
push eax
mov dword [ebp - 0x24], eax
call fcn.005e7a20
add esp, 0x14
jmp 0x43e148
mov esi, dword [ebp - 0x24]
push esi
call fcn.005e71bf
mov ecx, eax
mov edi, ebx
shl ecx, 1
mov edx, ecx
mov eax, dword [ebp - 0x24]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.005e71bf
lea ebx, [ebx + eax*2]
mov word [ebx], 0
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.005e71bf
add esp, 0xc
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00401070
push 0x6d1c9c
push 0x6a524c
lea ecx, [ebp - 0x1c]
call fcn.0043e560
push 0x6d1c9c
push 0x6a5248
lea ecx, [ebp - 0x1c]
call fcn.0043e560
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x43e236
lea eax, [ebp - 0x18]
push 0x200e
push eax
call fcn.005e77bb
add esp, 8
test eax, eax
je 0x43e25a
push 0x6d1c9c
push 0x6a5244
lea ecx, [ebp - 0x1c]
call fcn.0043e560
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x43e264
lea eax, [ebp - 0x18]
push 0x200f
push eax
call fcn.005e77bb
add esp, 8
test eax, eax
je 0x43e288
push 0x6d1c9c
push 0x6a5240
lea ecx, [ebp - 0x1c]
call fcn.0043e560
mov esi, dword [ebp - 0x40]
lea edx, [ebp - 0x1c]
push 0
push edx
mov eax, dword [esi + 0x70]
mov ecx, dword [esi + 0x68]
push eax
call fcn.00488ba0
cmp eax, 2
jne 0x43e2c6
mov byte [esi + 0x440], 1
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call fcn.00401070
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [esi + 0x70]
mov edx, dword [ecx + 0x488]
mov eax, dword [ecx + 0x48c]
or edx, eax
je 0x43e300
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x43e2e3
lea eax, [ebp - 0x18]
push eax
call fcn.005b1b50
cmp eax, 2
jne 0x43e300
push 5
mov ecx, esi
call fcn.0060313e
mov byte [esi + 0x442], 1
jmp 0x43e2a9
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x43e30a
lea eax, [ebp - 0x18]
mov ecx, dword [esi + 0x70]
push eax
call fcn.005b1f20
mov eax, dword [esi + 0x458]
push 0x7d0
test eax, eax
je 0x43e3d7
mov ecx, dword [esi + 0x448]
lea eax, [ebp - 0xfe0]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
je 0x43e3cb
mov edx, dword [0x6cd768]
mov dword [ebp - 0x20], edx
mov ebx, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xfe0]
push 0xffffffffffffffff
push eax
push 0
push 0xfde9
mov byte [ebp - 4], 6
call ebx
mov edi, eax
test edi, edi
jle 0x43e3a9
push edi
lea ecx, [ebp - 0x20]
call fcn.00603e09
push 0
push 0
push edi
push eax
lea ecx, [ebp - 0xfe0]
push 0xffffffffffffffff
push ecx
push 0
push 0xfde9
call ebx
mov edx, dword [esi + 0x70]
mov byte [edx + 0x32a], 1
mov eax, dword [ebp - 0x20]
mov ecx, dword [esi + 0x70]
push eax
jmp 0x43e3b8
mov ecx, dword [esi + 0x70]
mov eax, dword [ecx + 0x60]
test eax, eax
je 0x43e3bd
push 0x6d1c98
call fcn.005aad60
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 1
call fcn.00603a3c
jmp 0x43e40f
mov ecx, dword [esi + 0x70]
mov eax, dword [ecx + 0x60]
test eax, eax
je 0x43e40f
jmp 0x43e405
mov edx, dword [esi + 0x448]
lea ecx, [ebp - 0x810]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowTextA]
test eax, eax
je 0x43e3fb
mov ecx, dword [esi + 0x70]
lea eax, [ebp - 0x810]
push eax
jmp 0x43e40a
mov ecx, dword [esi + 0x70]
mov eax, dword [ecx + 0x60]
test eax, eax
je 0x43e40f
push 0x6d1c98
call fcn.005aad60
mov ecx, dword [esi + 0x70]
mov eax, dword [ecx + 0x8d4]
test eax, eax
je 0x43e437
cmp eax, 3
je 0x43e437
mov edx, dword [esi + 0x6c]
push 0
push 0x2721
push 0x111
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [esi + 0x70]
mov ecx, dword [eax + 0x444]
test ecx, ecx
je 0x43e462
mov al, byte [ecx + 8]
test al, al
je 0x43e462
test ecx, ecx
je 0x43e455
mov edx, dword [ecx]
push 1
call dword [edx]
mov eax, dword [esi + 0x70]
mov dword [eax + 0x444], 0
mov ecx, dword [esi + 0x70]
mov edx, dword [ecx + 0x300]
push edx
call fcn.005aaef0
mov ecx, esi
call fcn.004408a0
mov eax, dword [esi + 0x70]
mov ecx, dword [eax + 0x480]
push ecx
lea ecx, [eax + 0x20]
call fcn.005c1ed0
mov ecx, dword [esi + 0x70]
push 0
call fcn.005b4880
mov ecx, dword [esi + 0x64]
test ecx, ecx
je 0x43e4d4
mov edx, dword [esi + 0x70]
push 1
push 1
push edx
call fcn.004b5090
mov eax, dword [esi + 0x6c]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x43e4d4
mov ecx, dword [esi + 0x70]
mov eax, dword [esi + 0x6c]
mov edx, dword [ecx + 0x480]
push edx
push 0x144d
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [0x6d24a0]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x43e506
mov edx, dword [esi + 0x70]
mov ecx, dword [0x6d24a0]
mov eax, dword [edx + 0x480]
push eax
push 0x1395
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
push 1
mov ecx, esi
call fcn.0043e780
mov eax, dword [esi + 0x60]
push 0
test eax, eax
je 0x43e52e
mov edx, dword [esi + 0x1c]
push 0xc8
push 1
push edx
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x43e2a9
mov ecx, esi
call fcn.005ffb96
jmp 0x43e2a9