Function at 0x42b1c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x471f24
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3e4
push edi
mov dword [ebp - 0x3d0], ecx
mov eax, dword [ebp - 0x3d0]
cmp dword [eax + 0x44], 0
jbe 0x42b793
push 5
mov ecx, dword [ebp - 0x3d0]
call fcn.0042b960
push 1
mov ecx, dword [ebp - 0x3d0]
call fcn.0042b920
mov ecx, dword [ebp + 0x14]
mov dword [ecx], 0
lea edx, [ebp - 0x10]
push edx
mov ecx, dword [ebp - 0x3d0]
add ecx, 0x3c
call fcn.004323d0
mov ecx, eax
call fcn.0042b820
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x3d0]
add ecx, 0x3c
call fcn.004323d0
mov ecx, eax
call fcn.0042b7e0
mov dword [ebp - 0x4c], eax
lea ecx, [ebp - 0x48]
call fcn.00446b30
mov byte [ebp - 4], 1
push 0x47d720
lea ecx, [ebp - 0x48]
call fcn.00446ea0
push 0
push 1
push 0x73
push str.Tips_Window
lea ecx, [ebp - 0x48]
call fcn.00447710
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3d4], eax
mov ecx, dword [ebp - 0x3d4]
sub ecx, 1
mov dword [ebp - 0x3d4], ecx
cmp dword [ebp - 0x3d4], 0xe
ja case.default.0x42b2ae
mov edx, dword [ebp - 0x3d4]
movzx eax, byte [edx + 0x42b7c6]
jmp dword [eax*4 + 0x42b7b6]
mov dword [ebp - 0x50], 2
push 0
mov ecx, dword [ebp - 0x3d0]
call fcn.0042b920
lea ecx, [ebp - 0x244]
call fcn.00465d60
mov byte [ebp - 4], 2
push 0
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x244]
call fcn.004322a0
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jne 0x42b369
mov dword [ebp - 0x280], 0
mov ecx, 0xe
xor eax, eax
lea edi, [ebp - 0x27c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x280], 0x3c
mov dword [ebp - 0x27c], 0x40
mov dword [ebp - 0x264], 1
mov dword [ebp - 0x274], 0x47d6fc
lea ecx, [ebp - 0x10]
call fcn.0042a760
mov ecx, dword [eax]
mov dword [ebp - 0x270], ecx
lea edx, [ebp - 0x280]
push edx
call dword [0x49c2d0]
mov eax, dword [ebp - 0x10]
push eax
push 0x47d6e0
push 0x49d444
call fcn.00441600
add esp, 0xc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x244]
call fcn.004666f0
jmp case.default.0x42b2ae
lea ecx, [ebp - 0x10]
call fcn.0042a760
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x2c4]
call fcn.00402910
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c0]
call fcn.004028f0
mov byte [ebp - 4], 4
cmp dword [ebp - 0x4c], 9
jne 0x42b3fe
lea edx, [ebp - 0x2c4]
push edx
push 0x47d6cc
lea eax, [ebp - 0x3c0]
push eax
call fcn.004029e0
add esp, 0xc
mov dword [ebp - 0x3d8], eax
mov ecx, dword [ebp - 0x3d8]
mov dword [ebp - 0x3dc], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x3dc]
push edx
lea ecx, [ebp - 0x2c4]
call fcn.004029a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3c0]
call fcn.00402980
mov dword [ebp - 0x2bc], 0
mov ecx, 0xe
xor eax, eax
lea edi, [ebp - 0x2b8]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x2bc], 0x3c
mov dword [ebp - 0x2b8], 0x40
mov dword [ebp - 0x2a0], 1
mov dword [ebp - 0x2b0], 0x47d6fc
lea ecx, [ebp - 0x2c4]
call fcn.0042f5d0
mov dword [ebp - 0x2ac], eax
lea eax, [ebp - 0x2bc]
push eax
call dword [0x49c2d0]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c0]
call fcn.00402980
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c4]
call fcn.00402980
jmp case.default.0x42b2ae
lea ecx, [ebp - 0x10]
call fcn.0042a760
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x30c]
call fcn.00402910
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x304]
call fcn.004028f0
mov byte [ebp - 4], 7
mov dword [ebp - 0x300], 0
mov ecx, 0xe
xor eax, eax
lea edi, [ebp - 0x2fc]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x300], 0x3c
mov dword [ebp - 0x2fc], 0x40
mov dword [ebp - 0x2e4], 1
mov dword [ebp - 0x2f4], 0x47d6fc
push 0
push 0x47d6c4
lea ecx, [ebp - 0x30c]
call fcn.004129f0
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0
jl 0x42b58a
mov edx, dword [ebp - 0x308]
push edx
lea eax, [ebp - 0x3c4]
push eax
lea ecx, [ebp - 0x30c]
call fcn.0042f590
mov dword [ebp - 0x3e0], eax
mov ecx, dword [ebp - 0x3e0]
mov dword [ebp - 0x3e4], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x3e4]
push edx
lea ecx, [ebp - 0x304]
call fcn.004029a0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x3c4]
call fcn.00402980
lea ecx, [ebp - 0x304]
call fcn.00402ae0
push eax
mov eax, dword [ebp - 0x308]
push eax
lea ecx, [ebp - 0x30c]
call fcn.0042f410
lea ecx, [ebp - 0x304]
call fcn.0042f5d0
mov dword [ebp - 0x2ec], eax
lea ecx, [ebp - 0x30c]
call fcn.0042f5d0
mov dword [ebp - 0x2f0], eax
lea ecx, [ebp - 0x300]
push ecx
call dword [0x49c2d0]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x304]
call fcn.00402980
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x30c]
call fcn.00402980
jmp case.default.0x42b2ae
lea ecx, [ebp - 0x378]
call fcn.004028f0
mov byte [ebp - 4], 9
push 0x47d6c0
lea ecx, [ebp - 0x378]
call fcn.004029c0
lea ecx, [ebp - 0x374]
call fcn.00418560
mov byte [ebp - 4], 0xa
push 0x47d684
lea ecx, [ebp - 0x380]
call fcn.00402910
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0x380]
push edx
lea eax, [ebp - 0x3c8]
push eax
lea ecx, [ebp - 0x374]
call fcn.0041a0d0
mov dword [ebp - 0x3e8], eax
mov ecx, dword [ebp - 0x3e8]
mov dword [ebp - 0x3ec], ecx
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x3ec]
push edx
lea ecx, [ebp - 0x378]
call fcn.00412690
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x3c8]
call fcn.00402980
push 0x47d6c0
lea ecx, [ebp - 0x378]
call fcn.004126b0
lea ecx, [ebp - 0x10]
call fcn.0042a760
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x37c]
call fcn.00402910
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x3bc], 0
mov ecx, 0xe
xor eax, eax
lea edi, [ebp - 0x3b8]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x3bc], 0x3c
mov dword [ebp - 0x3b8], 0x40
mov dword [ebp - 0x3a0], 1
mov dword [ebp - 0x3b0], 0x47d6fc
lea ecx, [ebp - 0x378]
call fcn.00405020
mov dword [ebp - 0x3ac], eax
lea ecx, [ebp - 0x37c]
push ecx
push 0x47cf10
lea edx, [ebp - 0x3cc]
push edx
call fcn.004029e0
add esp, 0xc
mov dword [ebp - 0x3f0], eax
mov ecx, dword [ebp - 0x3f0]
call fcn.00405020
mov dword [ebp - 0x3a8], eax
lea ecx, [ebp - 0x3cc]
call fcn.00402980
lea eax, [ebp - 0x3bc]
push eax
call dword [0x49c2d0]
mov ecx, dword [ebp - 0x378]
push ecx
push 0x47d6e0
push 0x49d444
call fcn.00441600
add esp, 0xc
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x37c]
call fcn.00402980
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x380]
call fcn.00402980
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x374]
call fcn.00418630
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x378]
call fcn.00402980
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x48]
call fcn.00446c40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.0042a740
push 0
mov ecx, dword [ebp - 0x3d0]
call fcn.0042b920
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
mov esp, ebp
pop ebp
ret 0x10