Function at 0x401f70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x419bb0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
push ebx
push ebp
push esi
push edi
xor ebx, ebx
push 0xffffff
push 1
push ebx
lea ecx, [esp + 0x34]
mov byte [esp + 0x20], 0x77
mov byte [esp + 0x21], 0x24
mov byte [esp + 0x22], 0x5d
mov byte [esp + 0x23], 0x6d
mov byte [esp + 0x24], 0x2e
mov byte [esp + 0x25], 0x6b
mov byte [esp + 0x26], 0x7b
mov byte [esp + 0x27], 0x25
mov byte [esp + 0x28], 0x7f
mov byte [esp + 0x29], 0x6f
mov byte [esp + 0x2a], 8
mov byte [esp + 0x2b], bl
call fcn.0041470d
push 0x808080
push 1
push ebx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x4c], ebx
call fcn.0041470d
mov eax, dword [esp + 0x54]
mov byte [esp + 0x40], 1
cmp eax, ebx
jl 0x402001
cmp eax, 0xb
jle 0x402003
xor eax, eax
mov bl, byte [esp + eax + 0x14]
mov al, bl
and al, 1
cmp al, 1
jne 0x402016
lea ecx, [esp + 0x28]
push ecx
jmp 0x40201b
lea edx, [esp + 0x20]
push edx
mov esi, dword [esp + 0x4c]
mov ecx, esi
call fcn.0041421d
mov ebp, dword [esp + 0x4c]
mov edi, dword [esp + 0x50]
push edi
mov ecx, esi
lea eax, [ebp + 2]
mov dword [esp + 0x14], eax
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.004144df
lea eax, [ebp + 9]
push edi
push eax
mov ecx, esi
mov dword [esp + 0x50], eax
call fcn.0041452b
lea eax, [edi + 1]
lea ecx, [ebp + 3]
push eax
push ecx
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
call fcn.004144df
lea eax, [edi + 1]
lea ecx, [ebp + 8]
push eax
mov dword [esp + 0x58], ecx
push ecx
mov ecx, esi
call fcn.0041452b
mov dl, bl
and dl, 2
cmp dl, 2
jne 0x40208b
lea eax, [esp + 0x28]
push eax
jmp 0x402090
lea ecx, [esp + 0x20]
push ecx
mov ecx, esi
call fcn.0041421d
lea eax, [edi + 1]
lea edx, [esp + 0x14]
push eax
push ebp
push edx
mov ecx, esi
call fcn.004144df
lea eax, [edi + 8]
mov ecx, esi
push eax
push ebp
call fcn.0041452b
lea eax, [edi + 2]
lea ecx, [ebp + 1]
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x50], ecx
push ecx
push eax
mov ecx, esi
call fcn.004144df
mov edx, dword [esp + 0x4c]
lea ecx, [edi + 7]
push ecx
push edx
mov ecx, esi
call fcn.0041452b
mov al, bl
and al, 4
cmp al, 4
jne 0x4020eb
lea ecx, [esp + 0x28]
push ecx
jmp 0x4020f0
lea edx, [esp + 0x20]
push edx
mov ecx, esi
call fcn.0041421d
lea eax, [edi + 2]
lea ecx, [esp + 0x14]
push eax
mov eax, dword [esp + 0x4c]
push eax
push ecx
mov ecx, esi
call fcn.004144df
mov edx, dword [esp + 0x48]
lea eax, [edi + 9]
push eax
push edx
mov ecx, esi
call fcn.0041452b
mov ecx, dword [esp + 0x54]
lea eax, [edi + 3]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
mov ecx, esi
call fcn.004144df
lea eax, [edi + 8]
mov ecx, esi
push eax
mov eax, dword [esp + 0x58]
push eax
call fcn.0041452b
mov cl, bl
and cl, 8
cmp cl, 8
jne 0x402152
lea edx, [esp + 0x28]
push edx
jmp 0x402157
lea eax, [esp + 0x20]
push eax
mov ecx, esi
call fcn.0041421d
mov ecx, dword [esp + 0x10]
lea eax, [edi + 8]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
mov ecx, esi
call fcn.004144df
lea ecx, [edi + 8]
lea eax, [ebp + 7]
push ecx
push eax
mov ecx, esi
mov dword [esp + 0x1c], eax
call fcn.0041452b
lea eax, [edi + 9]
mov ecx, esi
push eax
lea eax, [ebp + 3]
push eax
lea eax, [esp + 0x38]
push eax
call fcn.004144df
mov ecx, dword [esp + 0x54]
lea eax, [edi + 9]
push eax
push ecx
mov ecx, esi
call fcn.0041452b
mov dl, bl
and dl, 0x10
cmp dl, 0x10
jne 0x4021bb
lea eax, [esp + 0x28]
push eax
jmp 0x4021c0
lea ecx, [esp + 0x20]
push ecx
mov ecx, esi
call fcn.0041421d
lea eax, [edi + 9]
lea edx, [esp + 0x30]
push eax
push ebp
push edx
mov ecx, esi
call fcn.004144df
lea eax, [edi + 0x10]
mov ecx, esi
push eax
push ebp
mov dword [esp + 0x58], eax
call fcn.0041452b
mov eax, dword [esp + 0x4c]
lea ebp, [edi + 0xa]
push ebp
lea ecx, [esp + 0x34]
push eax
push ecx
mov ecx, esi
call fcn.004144df
mov eax, dword [esp + 0x4c]
lea edx, [edi + 0xf]
push edx
push eax
mov ecx, esi
call fcn.0041452b
mov cl, bl
and cl, 0x20
cmp cl, 0x20
jne 0x40221e
lea edx, [esp + 0x28]
push edx
jmp 0x402223
lea eax, [esp + 0x20]
push eax
mov ecx, esi
call fcn.0041421d
mov ecx, dword [esp + 0x48]
push ebp
lea edx, [esp + 0x34]
push ecx
push edx
mov ecx, esi
call fcn.004144df
mov eax, dword [esp + 0x48]
lea ebp, [edi + 0x11]
push ebp
push eax
mov ecx, esi
call fcn.0041452b
add edi, 0xb
lea ecx, [esp + 0x30]
push edi
mov edi, dword [esp + 0x58]
push edi
push ecx
mov ecx, esi
call fcn.004144df
mov edx, dword [esp + 0x50]
mov ecx, esi
push edx
push edi
call fcn.0041452b
and bl, 0x40
cmp bl, 0x40
jne 0x40227d
lea eax, [esp + 0x28]
push eax
jmp 0x402282
lea ecx, [esp + 0x20]
push ecx
mov ecx, esi
call fcn.0041421d
mov edx, dword [esp + 0x4c]
push ebp
lea eax, [esp + 0x34]
push edx
push eax
mov ecx, esi
call fcn.004144df
push ebp
push edi
mov ecx, esi
call fcn.0041452b
mov edi, dword [esp + 0x50]
mov ecx, dword [esp + 0x10]
push edi
lea edx, [esp + 0x34]
push ecx
push edx
mov ecx, esi
call fcn.004144df
mov eax, dword [esp + 0x14]
push edi
push eax
mov ecx, esi
call fcn.0041452b
mov esi, vtable.CGdiObject.0
mov dword [esp + 0x20], esi
lea ecx, [esp + 0x20]
mov byte [esp + 0x40], 2
call fcn.004146f7
mov dword [esp + 0x28], esi
lea ecx, [esp + 0x28]
mov dword [esp + 0x40], 3
call fcn.004146f7
mov ecx, dword [esp + 0x38]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x34
ret 0x10