Function at 0x42cf36
Capabilities:
Get graphical window text

Disassembly:
push ebx
push ebp
push esi
mov esi, dword [esp + 0x10]
push edi
mov edi, dword [esp + 0x18]
mov ecx, dword [esi]
push 0x411
mov bl, byte [edi + 2]
shr ebx, 2
and ebx, 1
call fcn.004479e2
push 0
mov ebp, 0xf1
push ebx
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
push ebp
push dword [eax + 0x1c]
call ebx
mov ax, word [edi]
mov ecx, dword [esi]
shr eax, 0xb
and eax, 1
push 0x40f
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov al, byte [edi + 2]
mov ecx, dword [esi]
shr eax, 3
and eax, 1
push 0x412
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov ax, word [edi]
mov ecx, dword [esi]
shr eax, 0xc
and eax, 1
push 0x40d
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov ax, word [edi + 2]
mov ecx, dword [esi]
shr eax, 0xa
and eax, 1
push 0x420
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov ax, word [edi + 2]
mov ecx, dword [esi]
shr eax, 0xd
and eax, 1
push 0x421
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov al, byte [edi + 0xe]
shr eax, 2
mov ecx, dword [esi]
and eax, 1
push 0x436
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
movsx eax, word [edi + 0x16]
mov ecx, dword [esi]
push eax
push 0x591
call fcn.004479e2
mov ecx, eax
call fcn.0042ebdc
mov ecx, dword [esi]
push 0x591
call fcn.004479e2
push 0
push 0xa
push 0xc5
push dword [eax + 0x1c]
call ebx
mov al, byte [edi]
mov ecx, dword [esi + 4]
and eax, 1
push 0x3ff
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
movsx eax, word [edi + 4]
mov ecx, dword [esi + 4]
push eax
push 0x41a
call fcn.004479e2
mov ecx, eax
call fcn.0042ebdc
mov ecx, dword [esi + 4]
push 0x41a
call fcn.004479e2
push 0
push 0xa
push 0xc5
push dword [eax + 0x1c]
call ebx
mov al, byte [edi]
mov ecx, dword [esi + 4]
shr eax, 7
and eax, 1
push 0x40b
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
movsx eax, word [edi + 0xa]
mov ecx, dword [esi + 4]
push eax
push 0x41d
call fcn.004479e2
mov ecx, eax
call fcn.0042ebdc
mov ecx, dword [esi + 4]
push 0x41d
call fcn.004479e2
push 0
push 0xa
push 0xc5
push dword [eax + 0x1c]
call ebx
movsx eax, word [edi + 0x14]
push eax
push 0x58f
mov ecx, dword [esi + 4]
call fcn.004479e2
mov ecx, eax
call fcn.0042ebdc
mov ecx, dword [esi + 4]
push 0x58f
call fcn.004479e2
push 0
push 0xa
push 0xc5
push dword [eax + 0x1c]
call ebx
mov al, byte [edi]
mov ecx, dword [esi + 4]
shr eax, 3
and eax, 1
push 0x403
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov al, byte [edi]
mov ecx, dword [esi + 4]
shr eax, 6
and eax, 1
push 0x404
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov al, byte [edi]
mov ecx, dword [esi + 4]
shr eax, 5
and eax, 1
push 0x405
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
movsx eax, word [edi + 0x12]
mov ecx, dword [esi + 4]
push eax
push 0x58c
call fcn.004479e2
mov ecx, eax
call fcn.0042ebdc
mov ecx, dword [esi + 4]
push 0x58c
call fcn.004479e2
push 0
push 0xa
push 0xc5
push dword [eax + 0x1c]
call ebx
mov al, byte [edi + 0xe]
mov ecx, dword [esi + 4]
shr eax, 6
and eax, 1
push 0x58e
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov al, byte [edi + 0xe]
mov ecx, dword [esi + 4]
shr eax, 7
and eax, 1
push 0x590
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov al, byte [edi]
mov ecx, dword [esi + 8]
shr eax, 1
and eax, 1
push 4
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
movsx eax, word [edi + 6]
mov ecx, dword [esi + 8]
push eax
push 0x41b
call fcn.004479e2
mov ecx, eax
call fcn.0042ebdc
mov ecx, dword [esi + 8]
push 0x41b
call fcn.004479e2
push 0
push 0xa
push 0xc5
push dword [eax + 0x1c]
call ebx
mov al, byte [edi]
mov ecx, dword [esi + 8]
shr eax, 4
and eax, 1
push 0x402
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
movsx eax, word [edi + 8]
mov ecx, dword [esi + 8]
push eax
push 0x41c
call fcn.004479e2
mov ecx, eax
call fcn.0042ebdc
mov ecx, dword [esi + 8]
push 0x41c
call fcn.004479e2
push 0
push 0xa
push 0xc5
push dword [eax + 0x1c]
call ebx
mov al, byte [edi]
mov ecx, dword [esi + 8]
shr eax, 2
and eax, 1
push 0x401
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov ax, word [edi]
mov ecx, dword [esi + 8]
shr eax, 9
and eax, 1
push 0x40c
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov ax, word [edi + 2]
mov ecx, dword [esi + 8]
shr eax, 9
and eax, 1
push 0x41e
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov al, byte [edi + 2]
mov ecx, dword [esi + 8]
shr eax, 1
and eax, 1
push 0x40e
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov ax, word [edi]
mov ecx, dword [esi + 0xc]
shr eax, 8
and eax, 1
push 0x400
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov al, byte [edi + 2]
mov ecx, dword [esi + 0xc]
shr eax, 4
and eax, 1
push 0x413
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov al, byte [edi + 2]
mov ecx, dword [esi + 0xc]
shr eax, 6
and eax, 1
push 0x417
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov al, byte [edi + 2]
mov ecx, dword [esi + 0xc]
and eax, 1
push 0x406
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov ax, word [edi + 2]
mov ecx, dword [esi + 0xc]
shr eax, 0xe
and eax, 1
push 0x422
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
movzx eax, word [edi + 2]
mov ecx, dword [esi + 0xc]
push 0x423
shr eax, 0xf
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov al, byte [edi + 0xe]
mov ecx, dword [esi + 0xc]
shr eax, 5
and eax, 1
push 0x58d
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
movzx eax, word [edi]
mov ecx, dword [esi + 0x10]
push 0x415
shr eax, 0xf
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov al, byte [edi + 2]
mov ecx, dword [esi + 0x10]
shr eax, 7
and eax, 1
push 0x418
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov ax, word [edi + 2]
mov ecx, dword [esi + 0x10]
shr eax, 0xc
and eax, 1
push 0x424
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov ax, word [edi + 2]
mov ecx, dword [esi + 0x10]
shr eax, 8
and eax, 1
push 0x41f
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov ax, word [edi + 2]
mov ecx, dword [esi + 0x10]
shr eax, 0xb
and eax, 1
push 0x441
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov al, byte [edi + 0xe]
mov ecx, dword [esi + 0x10]
shr eax, 3
and eax, 1
push 0x589
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
movsx eax, word [edi + 0x10]
mov ecx, dword [esi + 0x10]
push eax
push 0x588
call fcn.004479e2
mov ecx, eax
call fcn.0042ebdc
mov ecx, dword [esi + 0x10]
push 0x588
call fcn.004479e2
push 0
push 0xa
push 0xc5
push dword [eax + 0x1c]
call ebx
mov al, byte [edi + 0xe]
mov ecx, dword [esi + 0x10]
shr eax, 4
and eax, 1
push 0x58a
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov ax, word [edi]
mov ecx, dword [esi + 0x14]
shr eax, 0xd
and eax, 1
push 0x410
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov al, byte [edi + 2]
mov ecx, dword [esi + 0x14]
shr eax, 5
and eax, 1
push 0x414
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov ax, word [edi]
mov ecx, dword [esi + 0x14]
shr eax, 0xa
and eax, 1
push 0x416
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov ax, word [edi]
mov ecx, dword [esi + 0x14]
shr eax, 0xe
and eax, 1
push 0x419
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov al, byte [edi + 0xe]
mov ecx, dword [esi + 0x14]
and eax, 1
push 0x434
mov dword [esp + 0x1c], eax
call fcn.004479e2
push 0
push dword [esp + 0x1c]
push ebp
push dword [eax + 0x1c]
call ebx
mov al, byte [edi + 0xe]
mov ecx, dword [esi + 0x14]
shr eax, 1
and eax, 1
push 0x435
mov edi, eax
call fcn.004479e2
push 0
push edi
push ebp
push dword [eax + 0x1c]
call ebx
pop edi
pop esi
pop ebp
pop ebx
ret