Function at 0x403460
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x11c
mov eax, dword [ebp + 0xc]
cmp eax, 0xf
je 0x4034a0
cmp eax, 0x400
jne 0x403b83
mov ebx, dword [ebp + 0x10]
test ebx, ebx
jne 0x403bc0
mov dword [0x418440], 1
lea esp, [ebp - 0xc]
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret 0x10
lea ecx, [ebp - 0x58]
mov eax, dword [0x418448]
mov edi, dword [0x418440]
lea esi, [ebp - 0x94]
mov dword [esp + 4], ecx
mov ecx, dword [ebp + 8]
lea ebx, [ebp - 0x84]
mov dword [ebp - 0xd0], eax
mov dword [esp], ecx
call sub.user32.dll_BeginPaint
sub esp, 8
mov dword [ebp - 0xbc], eax
call sym._make_dc
mov edx, eax
mov dword [ebp - 0xdc], eax
mov eax, esi
call sym.unk_26
mov ecx, dword [ebp + 8]
mov dword [esp + 4], ebx
mov esi, dword [ebp - 0x8c]
mov dword [esp], ecx
call sub.user32.dll_GetClientRect
sub esp, 8
mov dword [esp], 4
call sub.user32.dll_GetSysColorBrush
sub esp, 4
mov dword [esp + 8], eax
mov eax, dword [ebp - 0xbc]
mov dword [esp + 4], ebx
mov dword [esp], eax
call sub.user32.dll_FillRect
mov eax, dword [ebp - 0xbc]
mov edx, dword [ebp - 0xd0]
sub esp, 0xc
add dword [ebp - 0x80], 3
mov dword [esp + 4], 0x58
mov dword [esp], eax
sub dword [ebp - 0x78], 3
mov dword [ebp - 0x84], edx
call sub.gdi32.dll_GetDeviceCaps
mov edx, esi
sub edx, dword [0x4184c4]
sub esp, 8
mov dword [esp], edx
mov dword [esp + 8], 0x5a0
mov dword [esp + 4], eax
call sub.kernel32.dll_MulDiv
sub esp, 0xc
mov dword [ebp - 0x7c], eax
mov dword [esp], 0
call sub.gdi32.dll_GetStockObject
sub esp, 4
mov dword [esp + 8], eax
mov eax, dword [ebp - 0xbc]
mov dword [esp + 4], ebx
mov dword [esp], eax
call sub.user32.dll_FillRect
mov eax, dword [ebp - 0xbc]
sub dword [ebp - 0x80], 1
sub esp, 0xc
add dword [ebp - 0x78], 1
mov dword [esp + 0xc], 0xf
mov dword [esp + 8], 0xa
mov dword [esp + 4], ebx
mov dword [esp], eax
call sub.user32.dll_DrawEdge
mov edx, dword [ebp - 0x7c]
sub esp, 0x10
lea eax, [edx - 1]
mov dword [esp + 4], 0x58
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0xbc]
mov dword [esp], eax
call sub.gdi32.dll_GetDeviceCaps
add esi, dword [0x4184cc]
sub esi, dword [0x4184c4]
sub esp, 8
mov dword [esp + 8], 0x5a0
mov dword [esp + 4], eax
mov dword [esp], esi
call sub.kernel32.dll_MulDiv
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0xbc]
sub esp, 0xc
mov dword [esp + 0xc], 0xf
mov dword [esp + 8], 6
mov dword [esp + 4], ebx
mov dword [esp], eax
call sub.user32.dll_DrawEdge
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x84], 0
sub esp, 0x10
test edi, edi
je 0x403ae3
mov eax, dword [0x41843c]
mov dword [ebp - 0x74], 0x53004d
mov dword [ebp - 0x70], 0x530020
mov dword [ebp - 0x6c], 0x6e0061
mov dword [ebp - 0x68], 0x200073
mov dword [ebp - 0x64], 0x650053
mov dword [ebp - 0x60], 0x690072
mov dword [ebp - 0x5c], 0x66
test eax, eax
je 0x4036ae
mov dword [esp], eax
call sub.gdi32.dll_DeleteDC
mov eax, dword [0x418438]
sub esp, 4
mov dword [esp], eax
call sub.gdi32.dll_DeleteObject
sub esp, 4
mov dword [esp], 0
call sub.gdi32.dll_CreateCompatibleDC
sub esp, 4
mov dword [0x41843c], eax
mov dword [esp + 4], 0x58
mov dword [esp], eax
call sub.gdi32.dll_GetDeviceCaps
sub esp, 8
mov esi, eax
mov dword [esp + 8], 0x9ec
mov dword [esp + 4], 0x5a0
mov dword [esp], 0x3e8
call sub.kernel32.dll_MulDiv
sub esp, 0xc
mov dword [esp + 4], esi
mov dword [esp + 8], 0x5a0
mov dword [esp], eax
call sub.kernel32.dll_MulDiv
fnstcw word [ebp - 0xaa]
mov dword [ebp - 0xc0], eax
sub esp, 0xc
fild dword [ebp - 0xc0]
fmul dword [0x411510]
movzx eax, word [ebp - 0xaa]
or ah, 0xc
mov word [ebp - 0xac], ax
mov eax, dword [ebp - 0x78]
fldcw word [ebp - 0xac]
fistp dword [ebp - 0xb8]
fldcw word [ebp - 0xaa]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x7c]
mov dword [esp + 4], eax
mov eax, dword [0x41843c]
mov dword [esp], eax
call sub.gdi32.dll_CreateCompatibleBitmap
sub esp, 0xc
mov dword [0x418438], eax
mov dword [esp + 4], eax
mov eax, dword [0x41843c]
mov dword [esp], eax
call sub.gdi32.dll_SelectObject
sub esp, 8
mov dword [esp], 0
call sub.gdi32.dll_GetStockObject
sub esp, 4
mov dword [esp + 8], eax
mov eax, dword [0x41843c]
mov dword [esp + 4], ebx
mov dword [esp], eax
call sub.user32.dll_FillRect
lea eax, [ebp - 0x74]
sub esp, 0xc
mov dword [esp + 0x34], eax
mov dword [esp + 0x30], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 6
mov dword [esp], 0xa
call sub.gdi32.dll_CreateFontW
sub esp, 0x38
mov dword [ebp - 0xe0], eax
mov dword [esp + 4], eax
mov eax, dword [0x41843c]
mov dword [esp], eax
call sub.gdi32.dll_SelectObject
mov eax, dword [0x41843c]
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], eax
call sym.unk_173
mov eax, dword [0x41843c]
sub esp, 8
mov dword [esp + 4], 6
mov dword [esp], eax
call sub.gdi32.dll_SetTextAlign
fild dword [ebp - 0x78]
fild dword [ebp - 0x80]
fnstcw word [ebp - 0xaa]
mov edx, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0xd0]
sub esp, 8
movzx eax, word [ebp - 0xaa]
fsubp st(1)
fmul dword [0x41150c]
sub edx, ecx
or ah, 0xc
mov word [ebp - 0xac], ax
fldcw word [ebp - 0xac]
fistp dword [ebp - 0xb0]
fldcw word [ebp - 0xaa]
mov eax, dword [ebp - 0xb0]
lea esi, [eax + 1]
mov dword [ebp - 0xc4], esi
lea esi, [edx + 1]
mov dword [ebp - 0xb4], esi
cmp ecx, edx
jg 0x403ad2
xor edx, edx
mov esi, dword [ebp - 0xd0]
mov dword [ebp - 0x9a], 0x640025
mov word [ebp - 0x96], dx
mov edx, dword [ebp - 0xb8]
mov ebx, esi
add ebx, edx
cmp dword [ebp - 0xb4], ebx
jl 0x403ad2
mov dword [ebp - 0xcc], 1
lea ecx, [eax + 3]
add ebx, edx
lea edx, [eax - 2]
add eax, 4
mov dword [ebp - 0xc8], ecx
mov dword [ebp - 0xd4], edx
mov dword [ebp - 0xd8], eax
nop
mov edx, dword [ebp - 0xc4]
mov eax, dword [0x41843c]
mov edi, ebx
mov dword [esp + 0xc], 0
sub edi, dword [ebp - 0xb8]
mov dword [esp + 8], edx
mov dword [esp + 4], edi
mov dword [esp], eax
call sub.gdi32.dll_MoveToEx
mov eax, dword [ebp - 0xc8]
sub esp, 0x10
mov dword [esp + 8], eax
mov eax, dword [0x41843c]
mov dword [esp + 4], edi
mov dword [esp], eax
call sub.gdi32.dll_LineTo
sub esp, 0xc
cmp dword [ebp - 0xb4], ebx
jl 0x403ad2
mov edx, dword [ebp - 0xd4]
mov eax, dword [0x41843c]
mov dword [esp + 0xc], 0
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp], eax
call sub.gdi32.dll_MoveToEx
mov ecx, dword [ebp - 0xd8]
mov eax, dword [0x41843c]
sub esp, 0x10
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
mov dword [esp], eax
call sub.gdi32.dll_LineTo
mov ecx, dword [ebp - 0xb8]
sub esp, 0xc
lea edi, [edi + ecx*2]
cmp dword [ebp - 0xb4], edi
jl 0x403ad2
mov edx, dword [ebp - 0xc4]
mov eax, dword [0x41843c]
mov dword [esp + 0xc], 0
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp], eax
call sub.gdi32.dll_MoveToEx
mov ecx, dword [ebp - 0xc8]
mov eax, dword [0x41843c]
sub esp, 0x10
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov dword [esp], eax
call sub.gdi32.dll_LineTo
add esi, dword [ebp - 0xc0]
sub esp, 0xc
cmp dword [ebp - 0xb4], esi
jl 0x403ad2
mov eax, dword [ebp - 0xcc]
lea edi, [ebp - 0xa0]
mov dword [esp], edi
mov dword [esp + 8], eax
lea eax, [ebp - 0x9a]
mov dword [esp + 4], eax
call sub.user32.dll_wsprintfW
cmp word [ebp - 0xa0], 0
je 0x403be0
mov eax, edi
lea esi, [esi]
add eax, 2
cmp word [eax], 0
jne 0x403a60
sub eax, edi
sar eax, 1
mov dword [esp + 0x10], eax
mov eax, dword [0x41843c]
mov dword [esp + 0xc], edi
mov dword [esp + 8], 5
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.gdi32.dll_TextOutW
mov eax, dword [ebp - 0x7c]
sub eax, dword [ebp - 0xd0]
sub esp, 0x14
add dword [ebp - 0xcc], 1
cmp esi, eax
jg 0x403ad2
mov eax, dword [ebp - 0xb8]
xor ecx, ecx
add ebx, dword [ebp - 0xc0]
mov dword [ebp - 0x9a], 0x640025
mov word [ebp - 0x96], cx
add eax, esi
cmp dword [ebp - 0xb4], eax
jge 0x403920
mov eax, dword [ebp - 0xe0]
mov dword [esp], eax
call sub.gdi32.dll_DeleteObject
sub esp, 4
mov eax, dword [0x41843c]
mov ebx, dword [ebp - 0xbc]
mov dword [esp + 0x20], 0x8800c6
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x78]
mov dword [esp], ebx
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x7c]
mov dword [esp + 0x18], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
call sym.unk_182
sub esp, 0x24
mov dword [esp], 4
call sub.gdi32.dll_GetStockObject
sub esp, 4
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.gdi32.dll_SelectObject
mov eax, dword [ebp - 0xdc]
sub esp, 8
mov dword [esp], eax
call sub.gdi32.dll_DeleteDC
lea eax, [ebp - 0x58]
sub esp, 4
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym.unk_195
xor eax, eax
sub esp, 8
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret 0x10
mov edx, dword [ebp + 0x14]
mov dword [esp + 8], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x10], edx
mov edx, dword [ebp + 0x10]
mov dword [esp + 4], eax
mov eax, dword [0x418444]
mov dword [esp + 0xc], edx
mov dword [esp], eax
call sub.user32.dll_CallWindowProcW
sub esp, 0x14
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret 0x10
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov dword [0x418448], eax
mov eax, dword [ebp + 0x14]
mov dword [0x418444], eax
jmp 0x40348a
xor eax, eax
jmp 0x403a6d