Function at 0x41bdb0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c9fd0
mov eax, dword fs:[0]
push eax
sub esp, 0x64
mov eax, dword [0x63fbf0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [0x64d974]
call fcn.0043efa0
mov dword [ebp - 0x54], eax
call fcn.0045590c
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41be05
push 0x80004005
call fcn.00406d40
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x50], eax
mov dword [ebp - 4], 0
mov ecx, dword [esi + 0xa4]
add ecx, 0x74
push ecx
push 0x644d38
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
cmp dword [ebp - 0x4c], 0
je 0x41bed4
mov ebx, dword [esi + 0xa4]
add ebx, 0x74
jne 0x41be4d
xor eax, eax
jmp 0x41be77
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea edi, [eax + 1]
cmp edi, 0x3fffffff
jle 0x41be63
xor eax, eax
jmp 0x41be77
lea eax, [edi + edi]
call fcn.0054cb20
mov eax, esp
push 3
push edi
push ebx
push eax
call fcn.0043a940
mov edx, dword [ebp - 0x4c]
push edx
push eax
push 0x61c570
lea edi, [ebp - 0x50]
call fcn.00406950
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x50]
add esp, 0xc
push 0x30
add eax, 0x18
push eax
push ecx
mov ecx, esi
call fcn.00450032
mov ecx, edi
call fcn.00406970
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x50]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41becd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
jmp 0x41c700
mov ecx, dword [esi + 0xa4]
add ecx, 0xbb4
push ecx
push 0x644d40
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
cmp dword [ebp - 0x4c], 0
je 0x41bf0f
mov ebx, dword [esi + 0xa4]
add ebx, 0xbb4
jne 0x41be4d
xor eax, eax
jmp 0x41be77
mov ecx, dword [esi + 0xa4]
add ecx, 0x98
push ecx
lea edx, [esi + 0xa8]
push edx
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
cmp dword [ebp - 0x4c], 0
je 0x41bfc2
mov ebx, dword [esi + 0xa4]
add ebx, 0x98
jne 0x41bf49
xor eax, eax
jmp 0x41bf73
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea edi, [eax + 1]
cmp edi, 0x3fffffff
jle 0x41bf5f
xor eax, eax
jmp 0x41bf73
lea eax, [edi + edi]
call fcn.0054cb20
mov eax, esp
push 3
push edi
push ebx
push eax
call fcn.0043a940
mov ecx, dword [ebp - 0x4c]
push ecx
push eax
push 0x61c570
lea edi, [ebp - 0x50]
call fcn.00406950
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x50]
add esp, 0xc
push 0x30
add edx, 0x18
push edx
push eax
mov ecx, esi
call fcn.00450032
mov ecx, edi
call fcn.00406970
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jmp 0x41bec1
mov ecx, dword [esi + 0xa4]
add ecx, 0xc4
push ecx
lea edx, [esi + 0xb0]
push edx
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
cmp dword [ebp - 0x4c], 0
je 0x41bfff
mov ebx, dword [esi + 0xa4]
add ebx, 0xc4
jne 0x41bf49
xor eax, eax
jmp 0x41bf73
mov ecx, dword [esi + 0xa4]
add ecx, 0x10
push ecx
lea edx, [esi + 0xb8]
push edx
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
cmp dword [ebp - 0x4c], 0
je 0x41c095
mov ebx, dword [esi + 0xa4]
add ebx, 0x10
je 0x41c03d
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea edi, [eax + 1]
cmp edi, 0x3fffffff
jle 0x41c041
xor eax, eax
jmp 0x41c055
lea eax, [edi + edi]
call fcn.0054cb20
mov eax, esp
push 3
push edi
push ebx
push eax
call fcn.0043a940
mov ecx, dword [ebp - 0x4c]
push ecx
push eax
push 0x61c570
lea edi, [ebp - 0x50]
call fcn.00406950
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x50]
add esp, 0xc
push 0x30
add edx, 0x18
push edx
push eax
mov ecx, esi
call fcn.00450032
lea ecx, [ebp - 0x50]
call fcn.00406970
lea ecx, [ebp - 0x50]
call fcn.00406de0
xor eax, eax
jmp 0x41c700
mov ecx, dword [esi + 0xa4]
add ecx, 0x3c
push ecx
lea edx, [esi + 0xc0]
push edx
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
cmp dword [ebp - 0x4c], 0
je 0x41c0c9
mov ebx, dword [esi + 0xa4]
add ebx, 0x3c
jne 0x41c02b
xor eax, eax
jmp 0x41c055
mov ecx, dword [esi + 0xa4]
add ecx, 0x15c
push ecx
lea edx, [esi + 0xc8]
push edx
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
cmp dword [ebp - 0x4c], 0
je 0x41c117
push 0
push 0x3ea
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454f85
push 0
push 0x3ea
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454fc7
mov eax, dword [esi + 0xa4]
add eax, 0x108
push eax
lea ecx, [esi + 0xd0]
push ecx
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
cmp dword [ebp - 0x4c], 0
je 0x41c199
mov ebx, dword [esi + 0xa4]
add ebx, 0x108
je 0x41c15a
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea edi, [eax + 1]
cmp edi, 0x3fffffff
jle 0x41c15e
xor eax, eax
jmp 0x41c172
lea eax, [edi + edi]
call fcn.0054cb20
mov eax, esp
push 3
push edi
push ebx
push eax
call fcn.0043a940
mov edx, dword [ebp - 0x4c]
push edx
push eax
push 0x61c570
lea edi, [ebp - 0x50]
call fcn.00406950
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x50]
add esp, 0xc
push 0x30
add eax, 0x18
push eax
push ecx
jmp 0x41c077
mov edx, dword [esi + 0xa4]
add edx, 0x130
push edx
lea eax, [esi + 0xd8]
push eax
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
cmp dword [ebp - 0x4c], 0
je 0x41c1d6
mov ebx, dword [esi + 0xa4]
add ebx, 0x130
jne 0x41c02b
xor eax, eax
jmp 0x41c055
xor eax, eax
lea ecx, [esi + 0xf0]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], 0x3ee
mov dword [ebp - 0x64], eax
mov edi, 0xad4
mov dword [ebp - 0x60], ecx
jmp 0x41c200
mov ecx, dword [esi + 0xa4]
cmp dword [edi + ecx - 0x940], 0
je 0x41c272
mov edx, dword [ebp - 0x64]
lea ebx, [edx + ecx + 0x1b4]
mov eax, ebx
lea edx, [eax + 1]
mov dword [ebp - 0x70], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41c222
sub eax, dword [ebp - 0x70]
je 0x41c272
cmp dword [edi + ecx], 0
je 0x41c272
cmp dword [edi + ecx + 0x20], 0
je 0x41c272
mov eax, dword [ebp - 0x60]
push ebx
push eax
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
cmp dword [ebp - 0x4c], 0
je 0x41c297
mov ebx, dword [ebp - 0x5c]
mov ecx, dword [esi + 0xa4]
shl ebx, 5
lea ebx, [ebx + ecx + 0x1b4]
test ebx, ebx
jne 0x41c148
xor eax, eax
jmp 0x41c172
mov ebx, dword [ebp - 0x58]
push 0
push ebx
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454f85
push 0
push ebx
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454fc7
add dword [ebp - 0x60], 8
add dword [ebp - 0x64], 0x20
mov eax, 1
add dword [ebp - 0x5c], eax
add dword [ebp - 0x58], eax
add edi, 4
cmp edi, 0xaf4
jl 0x41c200
mov edx, dword [esi + 0xa4]
add edx, 0xcfc
push edx
lea eax, [esi + 0x130]
push eax
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
xor ebx, ebx
cmp dword [ebp - 0x4c], ebx
je 0x41c2f7
mov ebx, dword [esi + 0xa4]
add ebx, 0xcfc
jne 0x41c02b
xor eax, eax
jmp 0x41c055
mov eax, dword [esi + 0xa4]
cmp dword [eax + 0xd80], ebx
jle 0x41c34c
cmp dword [eax + 0xd84], ebx
jle 0x41c34c
add eax, 0xd88
push eax
lea ecx, [esi + 0x170]
push ecx
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
mov ecx, esi
cmp dword [ebp - 0x4c], ebx
jne 0x41c34e
mov edx, dword [esi + 0xa4]
add edx, 0xda8
push edx
lea eax, [esi + 0x178]
push eax
lea edx, [ebp - 0x4c]
call fcn.00426000
cmp dword [ebp - 0x4c], ebx
je 0x41c39c
mov ecx, esi
push ebx
push 0x409
call fcn.00454da4
mov ecx, eax
call fcn.00454f85
push ebx
push 0x409
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454fc7
push ebx
push 0x40a
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454f85
push ebx
push 0x40a
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454fc7
mov ecx, dword [esi + 0xa4]
add ecx, 0xd2c
push ecx
lea edx, [esi + 0x138]
push edx
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
cmp dword [ebp - 0x4c], ebx
je 0x41c3e7
push ebx
push 0x406
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454f85
push ebx
push 0x406
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454fc7
mov eax, dword [esi + 0xa4]
add eax, 0xd58
push eax
lea ecx, [esi + 0x140]
push ecx
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
cmp dword [ebp - 0x4c], ebx
je 0x41c431
push ebx
push 0x407
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454f85
push ebx
push 0x407
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454fc7
mov edx, dword [esi + 0xa4]
add edx, 0xc04
push edx
lea eax, [esi + 0x148]
push eax
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
cmp dword [ebp - 0x4c], ebx
je 0x41c47c
push ebx
push 0x3fa
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454f85
push ebx
push 0x3fa
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454fc7
mov ecx, dword [esi + 0xa4]
add ecx, 0xc2c
push ecx
lea edx, [esi + 0x150]
push edx
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
cmp dword [ebp - 0x4c], ebx
je 0x41c4c7
push ebx
push 0x3fb
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454f85
push ebx
push 0x3fb
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454fc7
mov eax, dword [esi + 0xa4]
add eax, 0xc54
push eax
lea ecx, [esi + 0x158]
push ecx
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
cmp dword [ebp - 0x4c], ebx
je 0x41c511
push ebx
push 0x3fc
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454f85
push ebx
push 0x3fc
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454fc7
mov edx, dword [esi + 0xa4]
add edx, 0xc7c
push edx
lea eax, [esi + 0x160]
push eax
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
cmp dword [ebp - 0x4c], ebx
je 0x41c55c
push ebx
push 0x3fd
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454f85
push ebx
push 0x3fd
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454fc7
mov ecx, dword [esi + 0xa4]
add ecx, 0xca8
push ecx
lea edx, [esi + 0x168]
push edx
lea edx, [ebp - 0x4c]
mov ecx, esi
call fcn.00426000
cmp dword [ebp - 0x4c], ebx
je 0x41c5a7
push ebx
push 0x3f9
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454f85
push ebx
push 0x3f9
mov ecx, esi
call fcn.00454da4
mov ecx, eax
call fcn.00454fc7
mov edx, 0x4f
mov edi, 0x50
mov word [ebp - 0x48], di
mov edi, edx
mov word [ebp - 0x46], di
lea eax, [edx - 1]
lea ecx, [edx - 6]
mov edi, 0x53
mov word [ebp - 0x44], di
mov edx, eax
mov edi, 0x45
mov word [ebp - 0x32], ax
mov word [ebp - 0x42], di
mov edi, ecx
mov word [ebp - 0x3a], dx
lea eax, [ebp - 0x24]
mov edx, 0x4d
push eax
lea ecx, [esi + 0x180]
mov word [ebp - 0x38], dx
push ecx
lea edx, [ebp - 0x4c]
mov ecx, esi
mov dword [ebp - 0x24], 0x45534f50
mov dword [ebp - 0x20], 0x4e4f4449
mov dword [ebp - 0x1c], 0x4e49414d
mov dword [ebp - 0x18], 0x6d622e31
mov word [ebp - 0x14], 0x70
mov word [ebp - 0x40], di
mov dword [ebp - 0x3e], 0x4f0044
mov dword [ebp - 0x36], 0x490041
mov dword [ebp - 0x30], 0x2e0031
mov dword [ebp - 0x2c], 0x6d0062
mov dword [ebp - 0x28], 0x70
call fcn.00426000
mov eax, dword [ebp - 0x4c]
cmp eax, ebx
je 0x41c657
push eax
lea edx, [ebp - 0x48]
push edx
jmp 0x41c177
push 8
call fcn.00445142
add esp, 4
cmp eax, ebx
je 0x41c670
mov dword [eax + 4], ebx
mov dword [eax], vtable.CBrush.0
jmp 0x41c672
xor eax, eax
mov edi, vtable.CBitmap.0
mov dword [esi + 0x198], eax
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x6c], edi
mov byte [ebp - 4], 1
mov eax, dword [esi + 0xa4]
mov edx, dword [eax + 0xf8]
mov ecx, dword [0x644d3c]
push edx
mov edx, dword [eax + 0xf0]
push edx
mov edx, dword [eax + 0xec]
push edx
push ecx
mov ecx, dword [eax + 0xf4]
call fcn.00431740
add esp, 0x10
push eax
lea ecx, [ebp - 0x6c]
call fcn.0045c764
mov ecx, dword [esi + 0x198]
lea eax, [ebp - 0x6c]
push eax
call fcn.0043a900
push ebx
push ebx
push ebx
push ebx
add esi, 0x1a8
push esi
push 0x42e7b0
call fcn.0045a6fd
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x6c], edi
call fcn.0043ad90
lea ecx, [ebp - 0x50]
call fcn.00406de0
mov eax, 1
lea esp, [ebp - 0x80]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00544a28
mov esp, ebp
pop ebp
ret