Function at 0x42e945
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
mov eax, 0x52cbfc
call fcn.004ea774
sub esp, 0x3c
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x28], esi
call fcn.0051a4f7
xor ebx, ebx
lea ecx, [esi + 0xbc]
mov dword [ebp - 4], ebx
call fcn.004182aa
mov eax, dword [0x58c61c]
mov dword [esi + 0x1b0], eax
lea ecx, [esi + 0x1ed]
mov byte [ebp - 4], 2
call fcn.004dfcb7
lea ecx, [esi + 0x2ea]
mov byte [ebp - 4], 3
call fcn.004df15d
lea ecx, [esi + 0x3ea]
mov byte [ebp - 4], 4
call fcn.005063d2
mov edi, vtable.CComboBox.0
mov dword [esi + 0x3ea], edi
lea ecx, [esi + 0x426]
mov byte [ebp - 4], 5
call fcn.005063d2
mov dword [esi + 0x426], edi
lea ecx, [esi + 0x462]
mov byte [ebp - 4], 6
call fcn.005063d2
mov dword [esi + 0x462], edi
lea ecx, [esi + 0x49e]
mov byte [ebp - 4], 7
call fcn.005063d2
mov dword [esi + 0x49e], 0x5535dc
lea ecx, [esi + 0x4da]
mov byte [ebp - 4], 8
call fcn.005063d2
mov dword [esi + 0x4da], edi
lea ecx, [esi + 0x516]
mov byte [ebp - 4], 9
call fcn.005063d2
mov dword [esi + 0x516], 0x5535dc
lea ecx, [esi + 0x552]
mov byte [ebp - 4], 0xa
call fcn.005063d2
mov dword [esi + 0x552], 0x5535dc
lea ecx, [esi + 0x58e]
mov byte [ebp - 4], 0xb
call fcn.005063d2
mov dword [esi + 0x58e], edi
mov eax, dword [0x58c61c]
mov dword [esi + 0x5da], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0x712], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0x716], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0x71a], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0x732], eax
lea edi, [esi + 0x767]
push 0x12b
push ebx
push edi
call fcn.004ea940
mov word [edi], 0xfffd
mov word [edi + 6], bx
lea edi, [esi + 0x892]
push 0x12b
push ebx
push edi
call fcn.004ea940
mov word [edi], 0xfffd
mov word [edi + 6], bx
mov eax, dword [0x58c61c]
add esp, 0x18
mov dword [esi + 0x9bd], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0x9c1], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0x9c5], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0x9c9], eax
lea ecx, [esi + 0x9ed]
mov byte [ebp - 4], 0x15
call fcn.0042cf5f
lea ecx, [esi + 0x9f9]
mov byte [ebp - 4], 0x16
call fcn.0042cf5f
mov eax, dword [0x58c61c]
mov dword [esi + 0xa0d], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xa15], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xa19], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xa21], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xa25], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xa29], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xa35], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xa39], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xa3d], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xa41], eax
push 0xa
lea ecx, [esi + 0xa52]
pop edi
mov byte [ebp - 4], 0x21
push edi
call fcn.0050404f
mov eax, dword [0x58c61c]
mov dword [esi + 0xa6e], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xa72], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xa76], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xa7a], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xa7e], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xa82], eax
lea ecx, [esi + 0xa92]
mov byte [ebp - 4], 0x28
call fcn.0041f04f
mov eax, dword [0x58c61c]
mov dword [esi + 0xb17], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xb1b], eax
lea ecx, [esi + 0xb47]
mov byte [ebp - 4], 0x2b
call fcn.0046f016
mov eax, dword [0x58c61c]
mov dword [esi + 0xc79], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xc85], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xc89], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xcc1], eax
lea ecx, [esi + 0xccd]
mov byte [ebp - 4], 0x30
call fcn.00419fac
lea ecx, [esi + 0xe31]
mov byte [ebp - 4], 0x31
call fcn.00503eec
lea ecx, [esi + 0xe4d]
mov byte [ebp - 4], 0x32
call fcn.00408d9b
mov eax, dword [0x58c61c]
mov dword [esi + 0xe99], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xea7], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xeb7], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xebc], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0xec0], eax
push 1
push 0x20
lea ecx, [esi + 0xec4]
mov byte [ebp - 4], 0x38
call fcn.0046ee0e
push edi
lea ecx, [esi + 0xed5]
mov byte [ebp - 4], 0x39
call fcn.0050404f
push ebx
push ebx
push ebx
lea ecx, [esi + 0xef1]
mov byte [ebp - 4], 0x3a
call fcn.004e300b
lea ecx, [esi + 0xef9]
mov byte [ebp - 4], 0x3b
call fcn.0041fc62
mov eax, dword [0x58c61c]
mov dword [esi + 0xf41], eax
lea ecx, [esi + 0xf4a]
push edi
mov byte [ebp - 4], 0x3d
call fcn.00505169
push edi
lea ecx, [esi + 0xf66]
mov byte [ebp - 4], 0x3e
call fcn.00505169
push edi
lea ecx, [esi + 0xf82]
mov byte [ebp - 4], 0x3f
call fcn.00505169
lea ecx, [esi + 0xfa2]
mov byte [ebp - 4], 0x40
call fcn.004a18c7
push edi
lea ecx, [esi + 0x10a3]
mov byte [ebp - 4], 0x41
call fcn.0050404f
push edi
lea ecx, [esi + 0x10bf]
mov byte [ebp - 4], 0x42
call fcn.00505169
push ebx
push ebx
push ebx
lea ecx, [esi + 0x10db]
mov byte [ebp - 4], 0x43
call fcn.004e300b
push edi
lea ecx, [esi + 0x10e3]
mov byte [ebp - 4], 0x44
call fcn.00504d36
lea ecx, [esi + 0x110f]
push edi
mov byte [ebp - 4], 0x45
call fcn.0050404f
push ebx
push ebx
push ebx
lea ecx, [esi + 0x112b]
mov byte [ebp - 4], 0x46
call fcn.004e300b
lea ecx, [esi + 0x1133]
mov byte [ebp - 4], 0x47
call fcn.00405f54
mov eax, dword [0x58c61c]
mov dword [esi + 0x1394], eax
lea eax, [esi + 0x13a0]
mov dword [eax + 4], ebx
mov dword [eax], vtable.CFont.0
mov eax, dword [0x58c61c]
mov dword [esi + 0x13e8], eax
push ebx
push ebx
push ebx
lea ecx, [esi + 0x13f4]
mov byte [ebp - 4], 0x4b
call fcn.004e300b
mov byte [ebp - 4], 0x4c
push edi
lea ecx, [esi + 0x13fc]
call fcn.00504f67
mov eax, dword [0x58c61c]
mov dword [esi + 0x1418], eax
mov eax, dword [0x58c61c]
mov dword [esi + 0x141c], eax
lea ecx, [esi + 0x1430]
mov byte [ebp - 4], 0x4f
call fcn.0045bf27
push edi
lea ecx, [esi + 0x18c0]
mov byte [ebp - 4], 0x50
call fcn.00505169
push edi
lea ecx, [esi + 0x18dc]
mov byte [ebp - 4], 0x51
call fcn.0050404f
push edi
lea ecx, [esi + 0x1900]
mov byte [ebp - 4], 0x52
call fcn.00505169
lea ecx, [esi + 0x191c]
mov byte [ebp - 4], 0x53
call fcn.0041f04f
mov dword [esi], 0x543634
mov dword [esi + 0x18fc], ebx
mov dword [esi + 0x3e6], ebx
mov dword [esi + 0x18f8], ebx
mov dword [esi + 0x18bc], ebx
mov dword [esi + 0x18b8], ebx
mov dword [esi + 0x1428], ebx
mov dword [esi + 0x142c], ebx
mov dword [esi + 0x1424], ebx
mov dword [esi + 0x1420], ebx
lea ecx, [esi + 0x13e8]
mov byte [ebp - 4], 0x54
mov dword [esi + 0x13ec], ebx
call fcn.00505a63
lea eax, [esi + 0x13a8]
mov dword [esi + 0x13e4], ebx
push eax
push 0x3c
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
call dword [sym.imp.GDI32.dll_GetObjectA]
call fcn.00520100
mov eax, dword [eax + 4]
lea ecx, [esi + 0x110f]
mov dword [esi + 0x110b], eax
mov dword [esi + 0x139c], ebx
mov dword [esi + 0x1398], ebx
mov dword [esi + 0x1390], ebx
mov dword [esi + 0x138c], ebx
mov dword [esi + 0x1388], ebx
call fcn.0050408e
mov ecx, esi
call fcn.00444213
mov dword [esi + 0xe29], ebx
mov dword [esi + 0x1103], ebx
mov dword [esi + 0x10ff], ebx
mov dword [esi + 0x1e1], ebx
mov dword [esi + 0xc8d], ebx
mov dword [esi + 0x109b], ebx
mov dword [esi + 0x109f], ebx
mov dword [esi + 0x1097], ebx
mov dword [esi + 0x1e5], ebx
mov dword [esi + 0x1dd], ebx
mov dword [esi + 0x1d9], ebx
mov dword [esi + 0x1d5], ebx
mov dword [esi + 0x9d1], ebx
mov dword [esi + 0x9cd], ebx
mov dword [esi + 0xf9e], ebx
mov dword [esi + 0xb0f], ebx
push 0x5913bc
lea ecx, [esi + 0x9c9]
mov dword [esi + 0xb13], ebx
call fcn.00505c61
mov dword [esi + 0xb37], ebx
mov dword [esi + 0xb3b], ebx
mov dword [esi + 0x743], ebx
mov dword [esi + 0x75f], ebx
mov dword [esi + 0x763], ebx
mov dword [esi + 0x73a], ebx
mov dword [esi + 0x19c], ebx
mov dword [esi + 0x1a0], ebx
mov dword [esi + 0x1a4], ebx
mov dword [esi + 0xcad], ebx
mov dword [esi + 0xc95], ebx
mov dword [esi + 0xc9d], ebx
mov dword [esi + 0xc99], ebx
mov edi, 0xe00d
mov dword [esi + 0xca1], ebx
mov dword [esi + 0xca5], ebx
push edi
mov dword [esi + 0x1b9], ebx
push 0x22
mov ecx, esi
mov byte [esi + 0x1b4], bl
call fcn.004426e2
cmp al, 0x4e
jne 0x42efd3
mov byte [esi + 0x1b4], 1
push edi
push 0xe
mov ecx, esi
mov dword [esi + 0x73f], 1
call fcn.004426e2
cmp al, 0x31
jne 0x42eff1
mov dword [esi + 0x73f], ebx
push edi
push 0x15
mov ecx, esi
mov dword [esi + 0x72e], ebx
call fcn.004426e2
cmp al, 0x59
jne 0x42f00f
mov dword [esi + 0x72e], 1
mov dword [esi + 0x1c1], ebx
push edi
mov dword [esi + 0x1bd], ebx
push 0x13
mov ecx, esi
mov dword [esi + 0x736], ebx
call fcn.004426e2
cmp al, 0x4d
je 0x42f039
mov dword [esi + 0x736], 1
push 0x57ec28
lea ecx, [esi + 0xc79]
mov dword [esi + 0x1a8], ebx
call fcn.00505c61
mov dword [esi + 0xc3d], ebx
mov dword [esi + 0x9d5], 0x14
mov ecx, esi
mov word [esi + 0x9d9], bx
call fcn.0043e5a5
lea eax, [esi + 0xc41]
push 8
push ebx
push eax
mov dword [esi + 0xc7d], ebx
call fcn.004ea940
lea eax, [esi + 0xc59]
push 8
push ebx
push eax
call fcn.004ea940
or dword [esi + 0x5ce], 0xffffffff
mov eax, 0xa5
mov dword [esi + 0xa86], eax
mov dword [esi + 0xa8a], eax
push 0x18
lea eax, [esi + 0xc41]
mov dword [esi + 0xc61], ebx
push ebx
mov dword [esi + 0xc65], ebx
push eax
mov dword [esi + 0xc69], ebx
mov dword [esi + 0xb27], ebx
mov dword [esi + 0xb23], ebx
mov dword [esi + 0xb2f], ebx
mov dword [esi + 0xb33], ebx
mov word [esi + 0x9db], bx
mov dword [esi + 0x9dd], ebx
mov dword [esi + 0x9e1], ebx
mov dword [esi + 0xe25], ebx
mov dword [esi + 0xb3f], 1
mov dword [esi + 0xb1f], ebx
mov dword [esi + 0x5d2], ebx
mov dword [esi + 0xb43], ebx
call fcn.004ea940
push 8
lea eax, [esi + 0xc59]
push ebx
push eax
call fcn.004ea940
add esp, 0x30
lea ecx, [ebp - 0x30]
mov word [esi + 0xe13], 0xff00
mov dword [esi + 0xa09], ebx
mov dword [esi + 0xe15], ebx
mov dword [esi + 0xe19], ebx
call fcn.004219ec
push edi
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x55
call fcn.00421a9e
mov eax, dword [ebp - 0x2c]
mov dword [esi + 0xa05], ebx
cmp dword [eax - 8], 6
jle 0x42f185
movsx eax, byte [eax + 6]
push eax
call fcn.004ec4f0
cmp eax, 0x49
pop ecx
jne 0x42f182
mov dword [esi + 0xa05], 1
mov eax, dword [ebp - 0x2c]
mov dword [esi + 0x74f], ebx
cmp dword [eax - 8], 5
jle 0x42f1ae
movsx eax, byte [eax + 5]
push eax
call fcn.004ec4f0
cmp eax, 0x45
pop ecx
jne 0x42f1ab
mov dword [esi + 0x74f], 1
mov eax, dword [ebp - 0x2c]
mov dword [esi + 0x9e9], ebx
mov dword [esi + 0x757], ebx
cmp dword [eax - 8], 8
jle 0x42f1dd
movsx eax, byte [eax + 8]
push eax
call fcn.004ec4f0
cmp eax, 0x44
pop ecx
jne 0x42f1da
mov dword [esi + 0x757], 1
mov eax, dword [ebp - 0x2c]
mov dword [esi + 0x74b], ebx
cmp dword [eax - 8], 9
jle 0x42f206
movsx eax, byte [eax + 9]
push eax
call fcn.004ec4f0
cmp eax, 0x41
pop ecx
jne 0x42f203
mov dword [esi + 0x74b], 1
mov eax, dword [ebp - 0x2c]
mov dword [esi + 0x1a8], ebx
cmp dword [eax - 8], 0xb
jle 0x42f222
cmp byte [eax + 0xb], 0x30
jne 0x42f222
mov dword [esi + 0x1a8], 1
push edi
push 0x11
mov ecx, esi
mov dword [esi + 0xe49], 1
call fcn.004426e2
cmp al, 0x4e
jne 0x42f240
mov dword [esi + 0xe49], ebx
lea ecx, [ebp - 0x2c]
mov dword [esi + 0x5ca], ebx
call fcn.00505a63
push 0xe039
lea ecx, [ebp - 0x30]
call fcn.00421a9e
mov eax, dword [ebp - 0x2c]
cmp dword [eax - 8], ebx
jle 0x42f272
cmp byte [eax], 0x31
jne 0x42f272
mov dword [esi + 0x5ca], 1
lea ecx, [ebp - 0x2c]
call fcn.00505a63
push 0xe735
lea ecx, [ebp - 0x30]
call fcn.00421a9e
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x2c]
neg eax
sbb eax, eax
and eax, ecx
push dword [eax]
call fcn.004eb768
pop ecx
cmp eax, ebx
lea ecx, [esi + 0xe1d]
mov dword [ecx], eax
jne 0x42f2ad
mov dword [ecx], 0x7a
lea ecx, [esi + 0xa21]
mov dword [esi + 0xa45], ebx
mov dword [esi + 0x753], ebx
mov dword [esi + 0xcc5], ebx
call fcn.00505a63
lea ecx, [esi + 0xa19]
mov dword [esi + 0xa1d], ebx
call fcn.00505a63
mov dword [esi + 0xc1b], ebx
mov dword [esi + 0xc2b], ebx
mov dword [esi + 0xc27], ebx
mov dword [esi + 0xc1f], ebx
mov dword [esi + 0xc23], ebx
push 0x5913bc
lea ecx, [esi + 0xcc1]
mov dword [esi + 0xcbd], ebx
call fcn.00505c61
push 1
lea ecx, [esi + 0xea7]
pop eax
mov dword [esi + 0xcb9], eax
mov dword [esi + 0xcb5], eax
mov dword [esi + 0x747], ebx
mov dword [esi + 0xcc9], ebx
mov dword [esi + 0xe2d], ebx
mov dword [esi + 0xcb1], ebx
mov byte [esi + 0x73e], bl
mov dword [esi + 0x1c5], eax
mov dword [esi + 0xa4a], ebx
mov dword [esi + 0x702], ebx
mov dword [esi + 0xc91], ebx
mov dword [esi + 0x71e], ebx
mov dword [esi + 0x722], ebx
mov dword [esi + 0x726], ebx
mov dword [esi + 0x72a], ebx
mov dword [esi + 0x706], 2
mov dword [esi + 0x6fe], eax
mov dword [esi + 0x5ea], ebx
mov dword [esi + 0x1ac], ebx
mov dword [esi + 0x5de], ebx
mov dword [esi + 0x5e2], ebx
mov dword [esi + 0xc81], ebx
call fcn.00505a63
push 0x20
push ecx
mov dword [esi + 0xeab], ebx
mov ecx, esp
mov dword [ebp - 0x24], esp
mov dword [esi + 0xeaf], ebx
push 1
mov dword [esi + 0xea3], ebx
push 0x20
mov dword [esi + 0xe9f], ebx
call fcn.00501137
push ecx
mov byte [ebp - 4], 0x56
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x5913bc
call fcn.00505b46
push ecx
mov byte [ebp - 4], 0x57
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 0x5913bc
call fcn.00505b46
mov ecx, esi
mov byte [ebp - 4], 0x55
call fcn.00441f71
mov dword [esi + 0xeb3], ebx
mov byte [esi + 0xf45], 1
mov dword [esi + 0xca9], ebx
push edi
mov dword [esi + 0x1c9], ebx
push 0xc
mov ecx, esi
mov dword [esi + 0x1a8], ebx
call fcn.004426e2
cmp al, 0x30
jne 0x42f438
mov dword [esi + 0x1a8], 1
mov dword [esi + 0x1cd], ebx
push str._________________
lea ecx, [ebp - 0x48]
mov dword [esi + 0xa8e], ebx
call fcn.0040af95
mov eax, dword [0x58c61c]
mov dword [ebp - 0x14], eax
push 0xe814
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x59
call fcn.0050af9e
push dword [ebp - 0x14]
lea ecx, [ebp - 0x48]
call int.0040b073
test eax, eax
je 0x42f512
lea eax, [ebp - 0x24]
push 1
push eax
lea ecx, [ebp - 0x48]
call fcn.0040b13b
mov edi, dword [eax]
lea eax, [ebp - 0x20]
push 2
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x5a
call fcn.0040b13b
mov ebx, dword [eax]
lea eax, [ebp - 0x1c]
push 3
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x5b
call fcn.0040b13b
mov eax, dword [eax]
push 0xffffffffffffffff
push eax
mov byte [ebp - 4], 0x5c
call fcn.004c8a50
xor edx, edx
push 0xffffffffffffffff
mov dh, al
push ebx
mov ebx, edx
call fcn.004c8a50
push 0xffffffffffffffff
mov bl, al
push edi
shl ebx, 8
call fcn.004c8a50
movzx eax, al
or ebx, eax
add esp, 0x18
lea ecx, [ebp - 0x1c]
mov dword [esi + 0xf46], ebx
mov byte [ebp - 4], 0x5b
call fcn.00505ad8
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x5a
call fcn.00505ad8
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x59
call fcn.00505ad8
xor ebx, ebx
jmp 0x42f520
push 0xf
call dword [sym.imp.USER32.dll_GetSysColor]
mov dword [esi + 0xf46], eax
push 1
push 0x1d
lea ecx, [esi + 0xf4a]
call fcn.005051ac
mov dword [esi + 0x1d1], ebx
mov eax, dword [0x58c61c]
mov dword [ebp - 0x10], eax
push 0x80b8
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x5d
call fcn.0050af9e
push dword [ebp - 0x10]
call fcn.004eb6dd
pop ecx
mov word [esi + 0xc3b], ax
or dword [esi + 0xc2f], 0xffffffff
or dword [esi + 0xc33], 0xffffffff
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x59
call fcn.00505ad8
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x58
call fcn.00505ad8
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x55
call fcn.0040b035
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x54
call fcn.00421a1a
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret