Function at 0x41621a
Capabilities:
Contain obfuscated stackstrings
Get graphical window text

Disassembly:
push 0x4c
mov eax, 0x453bcd
call fcn.004387b7
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x50], eax
call fcn.00423024
push eax
lea ecx, [ebp - 0x44]
call fcn.00421c70
mov edi, dword [sym.imp.USER32.dll_GetWindow]
and dword [ebp - 4], 0
and dword [ebp - 0x4c], 0
push 5
push esi
call edi
mov ebx, eax
test ebx, ebx
je 0x416412
mov esi, 0x400
lea eax, [ebp - 0x44]
push eax
push ebx
call fcn.00415e54
pop ecx
pop ecx
call fcn.00423024
push eax
lea ecx, [ebp - 0x48]
call fcn.00421c70
lea eax, [ebp - 0x54]
push eax
push esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
mov byte [ebp - 0x40], 0xe7
mov byte [ebp - 0x3f], 0x10
mov byte [ebp - 0x3e], 0xbf
mov byte [ebp - 0x3d], 0xa5
mov byte [ebp - 0x3c], 0x5f
mov byte [ebp - 0x3b], 0x91
mov byte [ebp - 0x3a], 0x22
mov byte [ebp - 0x39], 0xf3
mov byte [ebp - 0x38], 1
mov byte [ebp - 0x37], 0x9f
mov byte [ebp - 0x36], 0xcc
mov byte [ebp - 0x35], 0xa9
mov byte [ebp - 0x34], 0xf5
mov byte [ebp - 0x33], 0xd2
mov byte [ebp - 0x32], 0x49
mov byte [ebp - 0x31], 0xdc
mov byte [ebp - 0x30], 0xa
mov byte [ebp - 0x2f], 0x2d
mov byte [ebp - 0x2e], 0x34
mov byte [ebp - 0x2d], 0x55
mov byte [ebp - 0x2c], 0x35
mov byte [ebp - 0x2b], 0xaf
mov byte [ebp - 0x2a], 0x39
mov byte [ebp - 0x29], 0x8c
mov byte [ebp - 0x28], 0xc7
mov byte [ebp - 0x27], 0xdc
mov byte [ebp - 0x26], 9
mov byte [ebp - 0x25], 0x30
mov byte [ebp - 0x24], 0xf5
mov byte [ebp - 0x23], 0x33
mov byte [ebp - 0x22], 0xf3
mov byte [ebp - 0x21], 0x9d
mov dword [ebp - 0x54], esi
call fcn.00409312
push eax
push 0x20
lea eax, [ebp - 0x40]
push eax
push str.hckiG_xsfs
call fcn.0040d5ac
add esp, 0x14
push 0xffffffffffffffff
lea ecx, [ebp - 0x48]
call fcn.004091a3
push dword [ebp - 0x48]
lea ecx, [ebp - 0x44]
call fcn.0040f8a3
test eax, eax
jne 0x4163f4
push esi
lea ecx, [ebp - 0x44]
call fcn.00409312
push esi
push eax
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
test eax, eax
jle 0x4163f4
push 0xffffffffffffffff
lea ecx, [ebp - 0x44]
call fcn.004091a3
lea eax, [ebp - 0x54]
push eax
push esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 0x20], 0x9a
mov byte [ebp - 0x1f], 9
mov byte [ebp - 0x1e], 0x42
mov byte [ebp - 0x1d], 0x48
mov byte [ebp - 0x1c], 0x99
mov byte [ebp - 0x1b], 0xfc
mov byte [ebp - 0x1a], 2
mov byte [ebp - 0x19], 0xd4
mov byte [ebp - 0x18], 0xb8
mov byte [ebp - 0x17], 0x90
mov byte [ebp - 0x16], 0xdc
mov byte [ebp - 0x15], 0x90
mov byte [ebp - 0x14], 0xfc
mov byte [ebp - 0x13], 0x88
mov byte [ebp - 0x12], 0x97
mov byte [ebp - 0x11], 0xff
mov dword [ebp - 0x54], esi
call fcn.00409312
push eax
push 0x10
lea eax, [ebp - 0x20]
push eax
push str.wdfhv2kjbn349
call fcn.0040d5ac
add esp, 0x14
push 0xffffffffffffffff
lea ecx, [ebp - 0x48]
call fcn.004091a3
push dword [ebp - 0x48]
lea ecx, [ebp - 0x44]
call fcn.0040f8a3
test eax, eax
jne 0x4163f4
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x50]
mov dword [ecx + eax*4], ebx
inc eax
cmp eax, dword [ebp + 0x10]
mov dword [ebp - 0x4c], eax
je 0x416467
push 2
push ebx
call edi
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
mov ebx, eax
mov byte [ebp - 4], 0
call fcn.00409012
test ebx, ebx
jne 0x416262
push 5
push dword [ebp - 0x58]
call edi
mov ebx, eax
test ebx, ebx
je 0x416453
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp + 0x10]
sub eax, ecx
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x50]
lea eax, [eax + ecx*4]
mov dword [ebp - 0x50], eax
push dword [ebp - 0x58]
push dword [ebp - 0x50]
push ebx
call fcn.0041621a
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x416474
push 2
push ebx
call edi
mov ebx, eax
test ebx, ebx
jne 0x416433
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.00409012
mov eax, dword [ebp - 0x4c]
call fcn.0043883a
ret
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.00409012
jmp 0x416453
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.00409012
mov eax, dword [ebp - 0x4c]
add eax, esi
jmp 0x416461