Function at 0x422130
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x4fde08
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push ebp
push esi
push edi
mov eax, dword [0x52e028]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x24], 0x2b
mov eax, dword [esi + 0x8b0c]
mov edi, dword [sym.imp.GDI32.dll_DeleteObject]
xor ebx, ebx
or ebp, 0xffffffff
mov dword [esi + 0x8b08], 0x5030c4
cmp eax, ebx
je 0x4221bb
push eax
mov dword [esi + 0x8b0c], ebx
mov dword [esi + 0x8b10], ebx
mov dword [esi + 0x8b14], ebx
mov dword [esi + 0x8b18], ebx
mov dword [esi + 0x8b20], ebx
mov dword [esi + 0x8b1c], ebx
mov dword [esi + 0x8b28], ebp
mov byte [esi + 0x8b25], bl
mov byte [esi + 0x8b24], bl
call edi
call fcn.00413890
mov byte [esp + 0x24], 0x2a
mov eax, dword [esi + 0x8adc]
mov dword [esi + 0x8ad8], 0x5030c4
cmp eax, ebx
je 0x422212
push eax
mov dword [esi + 0x8adc], ebx
mov dword [esi + 0x8ae0], ebx
mov dword [esi + 0x8ae4], ebx
mov dword [esi + 0x8ae8], ebx
mov dword [esi + 0x8af0], ebx
mov dword [esi + 0x8aec], ebx
mov dword [esi + 0x8af8], ebp
mov byte [esi + 0x8af5], bl
mov byte [esi + 0x8af4], bl
call edi
call fcn.00413890
mov byte [esp + 0x24], 0x29
mov eax, dword [esi + 0x8aac]
mov dword [esi + 0x8aa8], 0x5030c4
cmp eax, ebx
je 0x422269
push eax
mov dword [esi + 0x8aac], ebx
mov dword [esi + 0x8ab0], ebx
mov dword [esi + 0x8ab4], ebx
mov dword [esi + 0x8ab8], ebx
mov dword [esi + 0x8ac0], ebx
mov dword [esi + 0x8abc], ebx
mov dword [esi + 0x8ac8], ebp
mov byte [esi + 0x8ac5], bl
mov byte [esi + 0x8ac4], bl
call edi
call fcn.00413890
mov byte [esp + 0x24], 0x28
lea ecx, [esi + 0x8a7c]
call fcn.00403d90
mov cl, 0x27
mov byte [esp + 0x24], cl
lea eax, [esi + 0x8a5c]
mov dword [esp + 0x18], eax
mov byte [esp + 0x24], cl
push eax
call fcn.0042e3d0
mov cl, 0x26
mov byte [esp + 0x24], cl
lea eax, [esi + 0x8a3c]
mov dword [esp + 0x18], eax
mov byte [esp + 0x24], cl
push eax
call fcn.0042e190
mov byte [esp + 0x24], 0x25
lea ecx, [esi + 0x8a34]
call dword [0x4fff34]
mov byte [esp + 0x24], 0x24
lea eax, [esi + 0x89e8]
push eax
call fcn.00456290
mov byte [esp + 0x24], 0x23
lea ecx, [esi + 0x8600]
call fcn.004ef546
mov byte [esp + 0x24], 0x22
lea ecx, [esi + 0x85fc]
call dword [0x4fff34]
mov byte [esp + 0x24], 0x21
lea ecx, [esi + 0x85d0]
call dword [0x4fff34]
mov byte [esp + 0x24], 0x20
lea ecx, [esi + 0x85cc]
call dword [0x4fff34]
mov byte [esp + 0x24], 0x1f
lea ecx, [esi + 0x85c8]
call dword [0x4fff34]
mov byte [esp + 0x24], 0x1e
lea ecx, [esi + 0x85c0]
call fcn.004ef876
mov byte [esp + 0x24], 0x1d
lea ecx, [esi + 0x85b8]
call fcn.004ef86a
mov byte [esp + 0x24], 0x1c
lea ecx, [esi + 0x8544]
push ecx
call fcn.0040cbc0
mov al, 0x1b
mov byte [esp + 0x24], al
lea ecx, [esi + 0x853c]
mov dword [esp + 0x18], ecx
mov dword [ecx], vtable.CBrush.0
mov byte [esp + 0x24], al
call fcn.0040b760
mov byte [esp + 0x24], 0x1a
lea ecx, [esi + 0x8518]
call dword [0x4fff34]
mov byte [esp + 0x24], 0x19
lea ecx, [esi + 0x8514]
call dword [0x4fff34]
mov byte [esp + 0x24], 0x18
lea ecx, [esi + 0x8508]
call fcn.004ef546
mov byte [esp + 0x24], 0x17
lea ecx, [esi + 0x7a78]
call fcn.0043a250
mov byte [esp + 0x24], 0x16
lea ecx, [esi + 0x7398]
call fcn.0045f2b0
mov byte [esp + 0x24], 0x15
lea ecx, [esi + 0x6cb8]
call fcn.0045f2b0
mov byte [esp + 0x24], 0x14
lea ecx, [esi + 0x65d8]
call fcn.0045f2b0
mov byte [esp + 0x24], 0x13
lea ecx, [esi + 0x5ef8]
call fcn.0045f2b0
mov byte [esp + 0x24], 0x12
lea ecx, [esi + 0x5818]
call fcn.0045f2b0
mov byte [esp + 0x24], 0x11
lea ecx, [esi + 0x5138]
call fcn.0045f2b0
mov byte [esp + 0x24], 0x10
lea ecx, [esi + 0x5068]
call fcn.00445040
mov byte [esp + 0x24], 0xf
lea ecx, [esi + 0x4988]
call fcn.0045f2b0
mov byte [esp + 0x24], 0xe
lea ecx, [esi + 0x48f8]
call fcn.00414260
mov byte [esp + 0x24], 0xd
lea ecx, [esi + 0x4868]
call fcn.00414260
mov byte [esp + 0x24], 0xc
lea ecx, [esi + 0x37e0]
call fcn.00411fd0
mov byte [esp + 0x24], 0xb
lea ecx, [esi + 0x1d50]
call fcn.00409af0
mov byte [esp + 0x24], 0xa
lea ecx, [esi + 0xad0]
call fcn.0041abc0
mov byte [esp + 0x24], 9
lea ecx, [esi + 0xa04]
call fcn.00441440
mov byte [esp + 0x24], 8
lea ecx, [esi + 0x94c]
call fcn.00468410
mov byte [esp + 0x24], 7
lea ecx, [esi + 0x890]
call fcn.00451fe0
mov al, 6
mov byte [esp + 0x24], al
lea ecx, [esi + 0x774]
mov dword [esp + 0x18], ecx
mov byte [esp + 0x24], al
call fcn.004ef87c
mov byte [esp + 0x24], 5
lea ecx, [esi + 0x704]
call fcn.004ef85e
mov byte [esp + 0x24], 4
lea ecx, [esi + 0x580]
call fcn.0041c280
mov al, 3
mov byte [esp + 0x24], al
lea ecx, [esi + 0x52c]
mov dword [esp + 0x18], ecx
mov dword [ecx], vtable.CGUHeaderCtrl.0
mov byte [esp + 0x24], al
call fcn.004efa50
mov byte [esp + 0x24], 2
lea ecx, [esi + 0x22c]
call fcn.00466630
mov byte [esp + 0x24], 1
lea ecx, [esi + 0x1d8]
call fcn.004ef306
mov byte [esp + 0x24], bl
lea ecx, [esi + 0x148]
call fcn.00414260
mov dword [esp + 0x24], ebp
mov ecx, esi
call fcn.0046d600
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret 4