Function at 0x4026e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jmp 0x4026e0
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rdi
sub rsp, 0x290
mov rdi, rsp
movabs rcx, 0xa4
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov ecx, dword [rsp + 0x2a0]
mov qword [rsp + 0x240], 0xfffffffffffffffe
mov rax, qword [0x0048e070]
xor rax, rsp
mov qword [rsp + 0x280], rax
mov ecx, 0x70
call fcn.00406900
mov qword [rsp + 0x208], rax
cmp qword [rsp + 0x208], 0
je 0x40275e
mov rcx, qword [rsp + 0x208]
call fcn.0040105a
mov qword [rsp + 0x248], rax
jmp 0x40276a
mov qword [rsp + 0x248], 0
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x200]
mov qword [0x0048fec0], rax
mov r8d, 0x70
xor edx, edx
mov rcx, qword [0x0048fec0]
call fcn.00406810
mov r9d, 6
mov r8d, 0x30
mov edx, 0x1e
lea rcx, [rsp + 0x210]
call fcn.0040100a
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x258], rax
mov rax, qword [0x0048fec0]
add rax, 0x38
mov rdx, qword [rsp + 0x258]
mov rcx, rax
call fcn.0040119a
nop
lea rcx, [rsp + 0x210]
call fcn.004010b9
mov rax, qword [0x0048fec0]
add rax, 0x38
mov rcx, rax
call fcn.00401028
movzx eax, al
test eax, eax
jne 0x402838
mov rax, qword [0x0048fec0]
add rax, 0x38
lea rdx, str.6666
mov rcx, rax
call fcn.00401122
test eax, eax
jne 0x402ba8
mov qword [rsp + 0x60], 0
lea rdx, [rsp + 0x80]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.USER32.dll_BeginPaint]
mov qword [rsp + 0xd8], rax
mov byte [rsp + 0xe4], 0
mov byte [rsp + 0xe5], 0
mov byte [rsp + 0xe6], 0x80
mov byte [rsp + 0xe7], 1
lea rdx, [rsp + 0x108]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rsp + 0x110]
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x124], eax
mov eax, dword [rsp + 0x114]
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x128], eax
mov eax, dword [rsp + 0x128]
cmp dword [rsp + 0x124], eax
jge 0x4028d5
mov eax, dword [rsp + 0x124]
mov dword [rsp + 0x260], eax
jmp 0x4028e3
mov eax, dword [rsp + 0x128]
mov dword [rsp + 0x260], eax
mov eax, dword [rsp + 0x260]
sub eax, 0x14
mov dword [rsp + 0x12c], eax
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov qword [rsp + 0x130], rax
mov r8d, dword [rsp + 0x114]
mov edx, dword [rsp + 0x110]
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov qword [rsp + 0x138], rax
mov rdx, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x130]
call qword [sym.imp.GDI32.dll_SelectObject]
mov qword [rsp + 0x140], rax
mov r8d, 6
lea rdx, [rsp + 0x108]
mov rcx, qword [rsp + 0x130]
call qword [sym.imp.USER32.dll_FillRect]
mov eax, dword [rsp + 0x12c]
mov ecx, dword [rsp + 0x128]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x12c]
mov edx, dword [rsp + 0x124]
add edx, ecx
mov ecx, edx
mov edx, dword [rsp + 0x12c]
mov r8d, dword [rsp + 0x128]
sub r8d, edx
mov edx, r8d
mov r8d, dword [rsp + 0x12c]
mov r9d, dword [rsp + 0x124]
sub r9d, r8d
mov r8d, r9d
mov dword [rsp + 0x264], r8d
mov r9d, eax
mov r8d, ecx
mov eax, dword [rsp + 0x264]
mov ecx, eax
call qword [sym.imp.GDI32.dll_CreateEllipticRgn]
mov qword [rsp + 0x148], rax
mov rdx, qword [rsp + 0x148]
mov rcx, qword [rsp + 0x130]
call qword [sym.imp.GDI32.dll_SelectClipRgn]
mov eax, dword [rsp + 0x12c]
mov ecx, dword [rsp + 0x124]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x158], eax
mov eax, dword [rsp + 0x12c]
mov ecx, dword [rsp + 0x128]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x15c], eax
mov word [rsp + 0x160], 0xff00
mov word [rsp + 0x162], 0
mov word [rsp + 0x164], 0
mov word [rsp + 0x166], 0
mov eax, dword [rsp + 0x12c]
mov ecx, dword [rsp + 0x124]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x168], eax
mov eax, dword [rsp + 0x12c]
mov ecx, dword [rsp + 0x128]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x16c], eax
mov word [rsp + 0x170], 0
mov word [rsp + 0x172], 0
mov word [rsp + 0x174], 0xff
mov word [rsp + 0x176], 0
mov dword [rsp + 0x198], 0
mov dword [rsp + 0x19c], 1
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 1
lea r9, [rsp + 0x198]
mov r8d, 2
lea rdx, [rsp + 0x158]
mov rcx, qword [rsp + 0x130]
call qword [sym.imp.MSIMG32.dll_GradientFill]
mov eax, dword [rsp + 0xe4]
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x114]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x110]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x114]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x110]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.MSIMG32.dll_AlphaBlend]
mov rcx, qword [rsp + 0x148]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rdx, qword [rsp + 0x140]
mov rcx, qword [rsp + 0x130]
call qword [sym.imp.GDI32.dll_SelectObject]
mov rcx, qword [rsp + 0x138]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [rsp + 0x130]
call qword [sym.imp.GDI32.dll_DeleteDC]
lea rdx, [rsp + 0x80]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.USER32.dll_EndPaint]
mov rax, qword [0x0048fec0]
add rax, 0x30
mov rcx, qword [0x0048fec0]
add rcx, 0x28
mov rdx, qword [0x0048fec0]
add rdx, 0x20
mov qword [rsp + 0x268], rdx
mov r8, rax
mov rdx, rcx
mov rax, qword [rsp + 0x268]
mov rcx, rax
call fcn.00401046
test eax, eax
je 0x402c69
mov edx, 2
lea rcx, [0x00401127]
call qword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
mov edx, 2
lea rcx, [0x00401078]
call qword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
mov edx, 2
lea rcx, [0x0040111d]
call qword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
mov edx, 2
lea rcx, [0x004010b4]
call qword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
mov edx, 2
lea rcx, [0x0040115e]
call qword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
mov edx, 2
lea rcx, [0x00401172]
call qword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
mov edx, 2
lea rcx, [0x00401014]
call qword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
mov rax, qword [0x0048fec0]
add rax, 0x30
mov rcx, qword [0x0048fec0]
add rcx, 0x28
mov rdx, qword [0x0048fec0]
add rdx, 0x20
mov qword [rsp + 0x270], rdx
mov r8, rax
mov rdx, rcx
mov rax, qword [rsp + 0x270]
mov rcx, rax
call fcn.00401046
test eax, eax
je 0x402d97
mov byte [rsp + 0x1b8], 0x41
mov byte [rsp + 0x1b9], 0x6e
mov byte [rsp + 0x1ba], 0x77
mov byte [rsp + 0x1bb], 0x79
mov byte [rsp + 0x1bc], 0x7a
mov byte [rsp + 0x1bd], 0x66
mov byte [rsp + 0x1be], 0x71
mov byte [rsp + 0x1bf], 0x55
mov byte [rsp + 0x1c0], 0x77
mov byte [rsp + 0x1c1], 0x74
mov byte [rsp + 0x1c2], 0x79
mov byte [rsp + 0x1c3], 0x6a
mov byte [rsp + 0x1c4], 0x68
mov byte [rsp + 0x1c5], 0x79
mov byte [rsp + 0x1c6], 0
mov dword [rsp + 0x1d4], 5
mov rax, qword [0x0048fec0]
mov eax, dword [rax + 0x18]
mov qword [rsp + 0x278], rax
mov r9b, 1
mov rcx, qword [0x0048fec0]
mov r8, qword [rcx + 0x30]
mov edx, dword [rsp + 0x1d4]
lea rcx, [rsp + 0x1b8]
call fcn.00401082
lea r9, [rsp + 0x1e4]
mov r8d, 0x40
mov rcx, qword [rsp + 0x278]
mov rdx, rcx
mov rcx, qword [0x0048fec0]
mov rcx, qword [rcx + 0x68]
call rax
mov rax, qword [0x0048fec0]
call qword [rax + 0x68]
xor eax, eax
mov rdi, rax
mov rcx, rsp
lea rdx, [0x00479900]
call fcn.00406010
mov rax, rdi
mov rcx, qword [rsp + 0x280]
xor rcx, rsp
call fcn.00405ff0
add rsp, 0x290
pop rdi
ret