Function at 0x41f24a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x518a0d
call fcn.004efe80
push ecx
push ebx
push esi
push edi
mov esi, ecx
push dword [ebp + 8]
mov dword [ebp - 0x10], esi
push 0x135
call fcn.004efc22
lea edi, [esi + 0x60]
xor ebx, ebx
mov ecx, edi
mov dword [ebp - 4], ebx
call fcn.004650c2
lea ecx, [esi + 0x184]
mov byte [ebp - 4], 1
call fcn.0047e4b3
lea ecx, [esi + 0x2dc]
mov byte [ebp - 4], 2
call fcn.0047e4b3
lea ecx, [esi + 0x434]
mov byte [ebp - 4], 3
call fcn.0047e4b3
lea ecx, [esi + 0x58c]
mov byte [ebp - 4], 4
call fcn.004650c2
lea ecx, [esi + 0x6b0]
mov byte [ebp - 4], 5
call fcn.0047e4b3
lea ecx, [esi + 0x808]
mov byte [ebp - 4], 6
call fcn.0047e4b3
lea ecx, [esi + 0x960]
mov byte [ebp - 4], 7
call fcn.0047e4b3
lea ecx, [esi + 0xab8]
mov byte [ebp - 4], 8
call fcn.004650c2
lea ecx, [esi + 0xbdc]
mov byte [ebp - 4], 9
call fcn.004650c2
lea ecx, [esi + 0xd00]
mov byte [ebp - 4], 0xa
call fcn.004650c2
lea ecx, [esi + 0xe24]
mov byte [ebp - 4], 0xb
call fcn.004650c2
lea ecx, [esi + 0xf48]
mov byte [ebp - 4], 0xc
call fcn.004650c2
lea ecx, [esi + 0x106c]
mov byte [ebp - 4], 0xd
call fcn.004650c2
lea ecx, [esi + 0x1190]
mov byte [ebp - 4], 0xe
call fcn.004650c2
lea ecx, [esi + 0x12b4]
mov byte [ebp - 4], 0xf
call fcn.004650c2
lea ecx, [esi + 0x13d8]
mov byte [ebp - 4], 0x10
call fcn.004650c2
mov byte [ebp - 4], 0x11
lea ecx, [esi + 0x14fc]
call fcn.004650c2
lea ecx, [esi + 0x1620]
mov byte [ebp - 4], 0x12
call fcn.00462537
lea ecx, [esi + 0x1744]
mov byte [ebp - 4], 0x13
call fcn.0046027d
lea ecx, [esi + 0x1814]
mov byte [ebp - 4], 0x14
call fcn.0046027d
lea ecx, [esi + 0x18e4]
mov byte [ebp - 4], 0x15
call fcn.0046027d
lea ecx, [esi + 0x19b4]
mov byte [ebp - 4], 0x16
call fcn.0046027d
lea ecx, [esi + 0x1a84]
mov byte [ebp - 4], 0x17
call fcn.0046027d
lea ecx, [esi + 0x1b54]
mov byte [ebp - 4], 0x18
call fcn.0046027d
lea ecx, [esi + 0x1c24]
mov byte [ebp - 4], 0x19
call fcn.0046027d
lea ecx, [esi + 0x1cf4]
mov byte [ebp - 4], 0x1a
call fcn.0046027d
lea ecx, [esi + 0x1dc4]
mov byte [ebp - 4], 0x1b
call fcn.0046027d
lea ecx, [esi + 0x1e94]
mov byte [ebp - 4], 0x1c
call fcn.0046027d
lea ecx, [esi + 0x1f64]
mov byte [ebp - 4], 0x1d
call fcn.0046027d
lea ecx, [esi + 0x2034]
mov byte [ebp - 4], 0x1e
call fcn.0046027d
lea ecx, [esi + 0x2104]
mov byte [ebp - 4], 0x1f
call fcn.0047e4b3
lea ecx, [esi + 0x225c]
mov byte [ebp - 4], 0x20
call fcn.0047e4b3
lea ecx, [esi + 0x23b4]
mov byte [ebp - 4], 0x21
call fcn.0047e4b3
lea ecx, [esi + 0x250c]
mov byte [ebp - 4], 0x22
call fcn.0047e4b3
lea ecx, [esi + 0x2664]
mov byte [ebp - 4], 0x23
call fcn.0047e4b3
lea ecx, [esi + 0x27bc]
mov byte [ebp - 4], 0x24
call fcn.0047e4b3
lea ecx, [esi + 0x2914]
mov byte [ebp - 4], 0x25
call fcn.0047e4b3
lea ecx, [esi + 0x2a6c]
mov byte [ebp - 4], 0x26
call fcn.0047e4b3
lea ecx, [esi + 0x2bc4]
mov byte [ebp - 4], 0x27
call fcn.0047e4b3
lea ecx, [esi + 0x2d1c]
mov byte [ebp - 4], 0x28
call fcn.0047e4b3
lea ecx, [esi + 0x2e74]
mov byte [ebp - 4], 0x29
call fcn.0047e4b3
lea ecx, [esi + 0x2fcc]
mov byte [ebp - 4], 0x2a
call fcn.0047e4b3
lea ecx, [esi + 0x3124]
mov byte [ebp - 4], 0x2b
call fcn.0047e4b3
lea ecx, [esi + 0x327c]
mov byte [ebp - 4], 0x2c
call fcn.0047e4b3
lea ecx, [esi + 0x33d4]
mov byte [ebp - 4], 0x2d
call fcn.0047e4b3
lea ecx, [esi + 0x352c]
mov byte [ebp - 4], 0x2e
call fcn.0047e4b3
lea ecx, [esi + 0x3684]
mov byte [ebp - 4], 0x2f
call fcn.0047e4b3
lea ecx, [esi + 0x37dc]
mov byte [ebp - 4], 0x30
call fcn.0047e4b3
lea ecx, [esi + 0x3934]
mov byte [ebp - 4], 0x31
call fcn.0047e4b3
lea ecx, [esi + 0x3a8c]
mov byte [ebp - 4], 0x32
call fcn.0047e4b3
lea ecx, [esi + 0x3be4]
mov byte [ebp - 4], 0x33
call fcn.0047e4b3
lea ecx, [esi + 0x3d3c]
mov byte [ebp - 4], 0x34
call fcn.0047e4b3
lea ecx, [esi + 0x3e94]
mov byte [ebp - 4], 0x35
call fcn.0047e4b3
lea ecx, [esi + 0x3fec]
mov byte [ebp - 4], 0x36
call fcn.0047e4b3
lea ecx, [esi + 0x4144]
mov byte [ebp - 4], 0x37
call fcn.0047e4b3
lea ecx, [esi + 0x429c]
mov byte [ebp - 4], 0x38
call fcn.0047e4b3
lea ecx, [esi + 0x43f4]
mov byte [ebp - 4], 0x39
call fcn.0047e4b3
lea ecx, [esi + 0x454c]
mov byte [ebp - 4], 0x3a
call fcn.0047e4b3
lea ecx, [esi + 0x46a4]
mov byte [ebp - 4], 0x3b
call fcn.0047e4b3
lea ecx, [esi + 0x47fc]
mov byte [ebp - 4], 0x3c
call fcn.0047e4b3
lea ecx, [esi + 0x4954]
mov byte [ebp - 4], 0x3d
call fcn.004650c2
lea ecx, [esi + 0x4a78]
mov byte [ebp - 4], 0x3e
call fcn.004650c2
lea ecx, [esi + 0x4b9c]
mov byte [ebp - 4], 0x3f
call fcn.004650c2
lea ecx, [esi + 0x4cc0]
mov byte [ebp - 4], 0x40
call fcn.004650c2
lea ecx, [esi + 0x4de4]
mov byte [ebp - 4], 0x41
call fcn.004650c2
lea ecx, [esi + 0x4f08]
mov byte [ebp - 4], 0x42
call fcn.004650c2
lea ecx, [esi + 0x502c]
mov byte [ebp - 4], 0x43
call fcn.004650c2
lea ecx, [esi + 0x5150]
mov byte [ebp - 4], 0x44
call fcn.004650c2
lea ecx, [esi + 0x5274]
mov byte [ebp - 4], 0x45
call fcn.004650c2
lea ecx, [esi + 0x5398]
mov byte [ebp - 4], 0x46
call fcn.004650c2
push 0x2132b
mov dword [esi], 0x528f08
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [esi + 0x54cc], eax
xor eax, eax
mov dword [esi + 0x54d0], eax
mov dword [esi + 0x54d4], ebx
mov byte [esi + 0x54c8], bl
mov dword [esi + 0x55bc], ebx
mov dword [esi + 0x54bc], ebx
mov dword [esi + 0x54c0], ebx
mov dword [esi + 0x54d8], ebx
mov dword [esi + 0x54dc], ebx
lea eax, [esi + 0x3be4]
mov dword [esi + 0x54c4], ebx
mov dword [esi + 0x5590], eax
lea eax, [esi + 0x3d3c]
mov dword [esi + 0x5594], eax
lea eax, [esi + 0x3e94]
mov dword [esi + 0x5598], eax
lea eax, [esi + 0x3fec]
mov dword [esi + 0x559c], eax
lea eax, [esi + 0x4144]
mov dword [esi + 0x55a0], eax
lea eax, [esi + 0x429c]
mov dword [esi + 0x55a4], eax
lea eax, [esi + 0x43f4]
mov dword [esi + 0x55a8], eax
lea eax, [esi + 0x454c]
mov dword [esi + 0x55ac], eax
lea eax, [esi + 0x46a4]
mov dword [esi + 0x5560], edi
mov dword [esi + 0x55b0], eax
lea eax, [esi + 0x47fc]
mov dword [esi + 0x55b4], eax
lea eax, [esi + 0x184]
mov dword [esi + 0x55b8], eax
lea eax, [esi + 0x14fc]
mov dword [esi + 0x54e0], eax
lea eax, [esi + 0x12b4]
mov dword [esi + 0x54e4], eax
lea eax, [esi + 0x1190]
mov dword [esi + 0x54e8], eax
lea eax, [esi + 0x106c]
mov dword [esi + 0x54ec], eax
lea eax, [esi + 0xf48]
mov dword [esi + 0x54f0], eax
lea eax, [esi + 0xe24]
mov dword [esi + 0x54f4], eax
lea eax, [esi + 0xbdc]
mov dword [esi + 0x54f8], eax
lea eax, [esi + 0xd00]
mov dword [esi + 0x54fc], eax
lea eax, [esi + 0xab8]
mov dword [esi + 0x5500], eax
lea eax, [esi + 0x13d8]
mov dword [esi + 0x5504], eax
lea eax, [esi + 0x58c]
mov dword [esi + 0x5508], eax
lea eax, [esi + 0x4954]
mov dword [esi + 0x5538], eax
lea eax, [esi + 0x4a78]
mov dword [esi + 0x553c], eax
lea eax, [esi + 0x4b9c]
mov dword [esi + 0x5540], eax
lea eax, [esi + 0x4cc0]
mov dword [esi + 0x5544], eax
lea eax, [esi + 0x4de4]
mov dword [esi + 0x5548], eax
lea eax, [esi + 0x4f08]
mov dword [esi + 0x554c], eax
lea eax, [esi + 0x502c]
mov dword [esi + 0x5550], eax
lea eax, [esi + 0x5150]
mov dword [esi + 0x5554], eax
lea eax, [esi + 0x5274]
mov dword [esi + 0x5558], eax
lea eax, [esi + 0x5398]
mov dword [esi + 0x555c], eax
lea eax, [esi + 0x2104]
mov dword [esi + 0x550c], eax
lea eax, [esi + 0x225c]
mov dword [esi + 0x5510], eax
lea eax, [esi + 0x23b4]
mov dword [esi + 0x5514], eax
lea eax, [esi + 0x250c]
mov dword [esi + 0x5518], eax
lea eax, [esi + 0x2664]
mov dword [esi + 0x551c], eax
lea eax, [esi + 0x27bc]
mov dword [esi + 0x5520], eax
lea eax, [esi + 0x2914]
mov dword [esi + 0x5524], eax
lea eax, [esi + 0x2a6c]
mov dword [esi + 0x5528], eax
lea eax, [esi + 0x2bc4]
mov dword [esi + 0x552c], eax
lea eax, [esi + 0x2d1c]
mov dword [esi + 0x5530], eax
lea eax, [esi + 0x2dc]
mov dword [esi + 0x5534], eax
lea eax, [esi + 0x2e74]
mov dword [esi + 0x5564], eax
lea eax, [esi + 0x2fcc]
mov dword [esi + 0x5568], eax
lea eax, [esi + 0x3124]
mov dword [esi + 0x556c], eax
lea eax, [esi + 0x327c]
mov dword [esi + 0x5570], eax
lea eax, [esi + 0x33d4]
mov dword [esi + 0x5574], eax
lea eax, [esi + 0x352c]
mov ecx, dword [ebp - 0xc]
mov dword [esi + 0x5578], eax
lea eax, [esi + 0x3684]
mov dword [esi + 0x557c], eax
lea eax, [esi + 0x37dc]
mov dword [esi + 0x5580], eax
lea eax, [esi + 0x3934]
mov dword [esi + 0x5584], eax
lea eax, [esi + 0x3a8c]
mov dword [esi + 0x5588], eax
lea eax, [esi + 0x434]
mov dword [esi + 0x558c], eax
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4