Function at 0x42a6a4
Capabilities:
Contain obfuscated stackstrings
Get graphical window text

Disassembly:
mov eax, 0x4ab480
call fcn.00483228
sub esp, 0x178
push ebx
push esi
mov esi, ecx
push edi
inc dword [esi + 0x120]
mov eax, dword [0x4e43a4]
mov dword [ebp - 0x4c], eax
xor ebx, ebx
mov dword [ebp - 0x44], eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x20], eax
push ebx
push 5
lea ecx, [esi + 0x124]
push 3
mov byte [ebp - 4], 5
call fcn.0049cf9c
mov eax, dword [esi + 0x1a4]
mov dword [ebp - 0x14], ebx
cmp eax, ebx
jle 0x42aae7
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x18], ebx
lea eax, [ebp - 0x184]
push 0xa
push eax
push dword [ebp - 0x14]
call fcn.0048476f
mov eax, dword [esi + 0x1a0]
mov ecx, dword [ebp - 0x18]
add esp, 0xc
lea eax, [ecx + eax + 4]
lea ecx, [ebp - 0x10]
push eax
call fcn.0049d64d
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.TEMP
mov byte [ebp - 4], 6
call fcn.0049d946
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x5c], esp
push eax
mov byte [ebp - 4], 7
call fcn.0049d64d
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 6
push eax
call fcn.00447f34
add esp, 0x10
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 8
call fcn.0049d9c5
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 6
call fcn.0049d8d8
lea eax, [ebp - 0x10]
lea ecx, [ebp - 0x24]
push eax
call fcn.0049d64d
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x10]
lea ecx, [esi + 0x124]
mov byte [ebp - 4], 9
push dword [ebp - 0x14]
push 1
call fcn.00497bc4
lea eax, [ebp - 0x10]
lea ecx, [ebp - 0x20]
push eax
call fcn.0049d9c5
push str.__D__CONFIGcorelapp.ini_TempPaths_
lea ecx, [ebp - 0x1c]
call fcn.0049d946
lea eax, [ebp - 0x184]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0049db21
push 0x4dd674
push eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0xb
push eax
call fcn.0049db21
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x20]
push ecx
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.0049dabb
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xd
call fcn.0049d9c5
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xc
call fcn.0049d8d8
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xb
call fcn.0049d8d8
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xa
call fcn.0049d8d8
lea eax, [ebp - 0x1c]
push 0x4dd674
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0049db21
push str.1111__1_1_11111111111111111111111111111111_1_
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xe
push eax
call fcn.0049db21
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xf
call fcn.0049d9c5
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xe
call fcn.0049d8d8
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xa
call fcn.0049d8d8
push str.Profle1
lea ecx, [ebp - 0x28]
call fcn.0049d946
mov ecx, dword [esi + 0xe0]
push 1
push ebx
push ebx
lea eax, [ebp - 0x1c]
push 3
push eax
mov byte [ebp - 4], 0x10
call fcn.00456ab4
push ebx
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x2c], eax
call fcn.0049dcbc
push eax
push ebx
push 0x1011
push dword [esi + 0x140]
call edi
cmp eax, dword [esi + 0x110]
jle 0x42a8d3
cmp eax, 0x96
jge 0x42a8d3
mov dword [esi + 0x110], eax
mov eax, dword [esi + 0x1a0]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax + 8]
lea ecx, [ebp - 0x10]
push eax
call fcn.0049d9c5
push dword [ebp - 0x10]
lea ecx, [esi + 0x124]
push 1
push dword [ebp - 0x14]
call fcn.00497cbf
push dword [ebp - 0x2c]
lea ecx, [esi + 0x124]
push ebx
push ebx
push ebx
push ebx
push 4
push ebx
push dword [ebp - 0x14]
call fcn.00497c46
push ebx
lea ecx, [ebp - 0x10]
call fcn.0049dcbc
push eax
push ebx
push 0x1011
push dword [esi + 0x140]
call edi
cmp eax, dword [esi + 0x114]
jle 0x42a941
cmp eax, 0x96
jge 0x42a941
mov dword [esi + 0x114], eax
mov eax, dword [esi + 0x1a0]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax + 0x10]
lea ecx, [ebp - 0x10]
push eax
call fcn.0049d9c5
push dword [ebp - 0x10]
lea ecx, [esi + 0x124]
push 2
push dword [ebp - 0x14]
call fcn.00497cbf
push ebx
lea ecx, [ebp - 0x10]
call fcn.0049dcbc
push eax
push ebx
push 0x1011
push dword [esi + 0x140]
call edi
cmp eax, dword [esi + 0x118]
jle 0x42a997
cmp eax, 0x96
jge 0x42a997
mov dword [esi + 0x118], eax
mov eax, dword [esi + 0x1a0]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx + eax + 0xc]
sub eax, ebx
je 0x42a9f3
dec eax
je 0x42a9ec
dec eax
je 0x42a9e5
dec eax
je 0x42a9de
dec eax
je 0x42a9d7
dec eax
je 0x42a9d0
dec eax
jne 0x42aaa1
push 0xb02
lea ecx, [ebp - 0x10]
call fcn.0049de81
jmp 0x42aaa1
push 0xb01
jmp 0x42a9f8
push 0xb00
jmp 0x42a9f8
push 0xaff
jmp 0x42a9f8
push 0xb05
jmp 0x42a9f8
push 0xafe
jmp 0x42a9f8
push 0xafd
lea ecx, [ebp - 0x10]
call fcn.0049de81
push dword [ebp - 0x10]
lea ecx, [esi + 0x124]
push 3
push dword [ebp - 0x14]
call fcn.00497cbf
push ebx
lea ecx, [ebp - 0x10]
call fcn.0049dcbc
push eax
push ebx
push 0x1011
push dword [esi + 0x140]
call edi
cmp eax, dword [esi + 0x11c]
lea ecx, [esi + 0x11c]
jle 0x42aa42
cmp eax, 0x96
jge 0x42aa42
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
push ebx
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x84], 0xb
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ebx
call fcn.0049dcbc
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x70], eax
mov eax, dword [esi + 0x1a0]
mov dword [ebp - 0x68], 1
mov dword [ebp - 0x74], 0xf000
mov ecx, dword [ecx + eax + 0x14]
mov eax, 0x1000
neg ecx
sbb ecx, ecx
and ecx, eax
add ecx, eax
lea eax, [ebp - 0x84]
push eax
push ebx
push 0x1006
mov dword [ebp - 0x78], ecx
push dword [esi + 0x140]
call edi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xa
call fcn.0049d8d8
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 9
call fcn.0049d8d8
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 6
call fcn.0049d8d8
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 5
call fcn.0049d8d8
inc dword [ebp - 0x14]
add dword [ebp - 0x18], 0x18
mov eax, dword [ebp - 0x14]
cmp eax, dword [esi + 0x1a4]
jl 0x42a709
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.0049d8d8
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 3
call fcn.0049d8d8
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 2
call fcn.0049d8d8
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.0049d8d8
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], bl
call fcn.0049d8d8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c]
call fcn.0049d8d8
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret