Function at 0x1002a1a5
Capabilities:
Contain obfuscated stackstrings
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 0x10]
sub esp, 0x258
push ebx
push esi
xor ebx, ebx
cmp eax, ebx
push edi
mov edi, dword [ebp + 0xc]
jbe 0x1002a1cf
mov dword [ebp - 4], eax
push 0x20
mov esi, edi
call fcn.10005631
dec dword [ebp - 4]
pop ecx
jne 0x1002a1c0
push dword [ebp + 8]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 0x38], 0x22
mov byte [ebp - 0x37], 0x30
mov byte [ebp - 0x36], 0x78
mov byte [ebp - 0x35], 0x25
mov byte [ebp - 0x34], 0x30
mov byte [ebp - 0x33], 0x38
mov byte [ebp - 0x32], 0x58
mov byte [ebp - 0x31], 0x22
mov byte [ebp - 0x30], 0x3a
mov byte [ebp - 0x2f], 0x20
mov byte [ebp - 0x2e], 0x7b
mov byte [ebp - 0x2d], 0x20
mov byte [ebp - 0x2c], 0x22
mov byte [ebp - 0x2b], 0x74
mov byte [ebp - 0x2a], 0x65
mov byte [ebp - 0x29], 0x78
mov byte [ebp - 0x28], 0x74
mov byte [ebp - 0x27], 0x22
mov byte [ebp - 0x26], 0x3a
mov byte [ebp - 0x25], 0x20
mov byte [ebp - 0x24], bl
call dword [sym.imp.USER32.dll_wsprintfA]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push edi
lea eax, [ebp - 0x58]
call fcn.10004296
add esp, 0x2c
push 0x15
pop ecx
lea eax, [ebp - 0x38]
mov byte [eax], bl
inc eax
dec ecx
jne 0x1002a24c
push 0x19
pop ecx
lea eax, [ebp - 0x58]
mov byte [eax], bl
inc eax
dec ecx
jne 0x1002a258
mov esi, 0x100
push esi
lea eax, [ebp - 0x258]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea eax, [ebp - 0x258]
mov ecx, edi
call fcn.1002a0e1
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push edi
lea eax, [ebp - 0x10]
mov byte [ebp - 0x10], 0x2c
mov byte [ebp - 0xf], 0x20
mov byte [ebp - 0xe], 0x22
mov byte [ebp - 0xd], 0x63
mov byte [ebp - 0xc], 0x6c
mov byte [ebp - 0xb], 0x61
mov byte [ebp - 0xa], 0x73
mov byte [ebp - 9], 0x73
mov byte [ebp - 8], 0x22
mov byte [ebp - 7], 0x3a
mov byte [ebp - 6], 0x20
mov byte [ebp - 5], bl
call fcn.10004296
add esp, 0x20
push esi
lea eax, [ebp - 0x258]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetClassNameW]
lea eax, [ebp - 0x258]
mov ecx, edi
call fcn.1002a0e1
mov ecx, 0x200
lea eax, [ebp - 0x258]
mov byte [eax], bl
inc eax
dec ecx
jne 0x1002a2ec
push 0xc
pop ecx
lea eax, [ebp - 0x10]
mov byte [eax], bl
inc eax
dec ecx
jne 0x1002a2f8
cmp dword [ebp + 0x10], 0x14
jae 0x1002a3d8
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push edi
lea eax, [ebp - 0x20]
mov byte [ebp - 0x20], 0x2c
mov byte [ebp - 0x1f], 0x20
mov byte [ebp - 0x1e], 0x22
mov byte [ebp - 0x1d], 0x63
mov byte [ebp - 0x1c], 0x68
mov byte [ebp - 0x1b], 0x69
mov byte [ebp - 0x1a], 0x6c
mov byte [ebp - 0x19], 0x64
mov byte [ebp - 0x18], 0x72
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x16], 0x6e
mov byte [ebp - 0x15], 0x22
mov byte [ebp - 0x14], 0x3a
mov byte [ebp - 0x13], 0x20
mov byte [ebp - 0x12], 0x7b
mov byte [ebp - 0x11], bl
call fcn.10004296
add esp, 0x20
push 0x10
pop ecx
lea eax, [ebp - 0x20]
mov byte [eax], bl
inc eax
dec ecx
jne 0x1002a360
push ebx
push ebx
mov dword [ebp - 0x3c], 1
push ebx
jmp 0x1002a3a5
cmp dword [ebp - 0x3c], ebx
je 0x1002a37c
mov dword [ebp - 0x3c], ebx
jmp 0x1002a386
push 0x2c
mov esi, edi
call fcn.10005631
pop ecx
push 0xa
mov esi, edi
call fcn.10005631
mov eax, dword [ebp + 0x10]
inc eax
push eax
push edi
push dword [ebp - 4]
call fcn.1002a1a5
add esp, 0x10
push ebx
push ebx
push dword [ebp - 4]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_FindWindowExA]
cmp eax, ebx
mov dword [ebp - 4], eax
jne 0x1002a372
push 0xa
mov esi, edi
call fcn.10005631
cmp dword [ebp + 0x10], ebx
pop ecx
jbe 0x1002a3d4
mov ebx, dword [ebp + 0x10]
push 0x20
mov esi, edi
call fcn.10005631
dec ebx
pop ecx
jne 0x1002a3c7
push 0x7d
jmp 0x1002a3da
push 0x20
mov esi, edi
call fcn.10005631
pop ecx
push 0x7d
call fcn.10005631
pop ecx
pop edi
pop esi
pop ebx
leave
ret