Function at 0x42abc0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x508210
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x65d4c0]
xor eax, esp
push eax
lea eax, [esp + 0x38]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x1c], edi
lea ecx, [esp + 0x20]
call fcn.0041ac60
lea eax, [esp + 0x20]
xor ebx, ebx
push eax
lea ecx, [edi + 0x1c]
mov dword [esp + 0x44], ebx
call fcn.00436c60
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
mov esi, dword [esp + 0x48]
push ecx
push edx
push 0x494d4730
push esi
call fcn.00438f00
add esp, 0x10
lea ecx, [esp + 0x20]
mov dword [esp + 0x40], 0xffffffff
call fcn.004392c0
mov eax, dword [edi + 0x2c]
cmp eax, 0x5f
je 0x42ac4c
push eax
push 0x534d4c30
push esi
call fcn.00438f40
add esp, 0xc
mov eax, dword [edi + 0x30]
cmp dword [eax - 0xc], ebx
je 0x42ac63
push eax
push 0x24434d30
push esi
call fcn.00438f80
add esp, 0xc
lea esi, [edi + 0xb0]
add edi, 0x60
lea esp, [esp]
cmp dword [edi], 0
je 0x42ad46
mov al, bl
add al, 0x31
lea ecx, [esp + 0x2c]
mov byte [esp + 0x10], al
mov byte [esp + 0x11], 0x47
mov byte [esp + 0x12], 0x4d
mov byte [esp + 0x13], 0x49
mov byte [esp + 0x14], al
mov byte [esp + 0x15], 0x4c
mov byte [esp + 0x16], 0x4d
mov byte [esp + 0x17], 0x53
mov byte [esp + 0x18], al
mov byte [esp + 0x19], 0x4d
mov byte [esp + 0x1a], 0x43
mov byte [esp + 0x1b], 0x24
call fcn.0041ac60
lea eax, [esp + 0x2c]
push eax
mov ecx, edi
mov dword [esp + 0x44], 1
call fcn.00436c60
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x4c]
push edx
push eax
push ecx
call fcn.00438f00
mov eax, dword [esi - 0x10]
add esp, 0x10
cmp eax, 0x5f
je 0x42ad0a
mov edx, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x4c]
push edx
push eax
call fcn.00438f40
add esp, 0xc
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
je 0x42ad25
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x48]
push eax
push ecx
push edx
call fcn.00438f80
add esp, 0xc
lea ecx, [esp + 0x2c]
mov dword [esp + 0x40], 0xffffffff
call fcn.004392c0
inc ebx
add edi, 0x10
add esi, 4
cmp ebx, 4
jl 0x42ac70
mov edi, dword [esp + 0x1c]
mov eax, dword [edi + 0x34]
mov ebx, dword [esp + 0x48]
cmp eax, 0xa
je 0x42ad65
push eax
push 0x544f5554
push ebx
call fcn.00438f40
add esp, 0xc
mov esi, dword [edi + 0x38]
mov ecx, str.move_click
mov eax, esi
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x42ad96
test dx, dx
je 0x42ad92
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x42ad96
add eax, 4
add ecx, 4
test dx, dx
jne 0x42ad70
xor eax, eax
jmp 0x42ad9b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x42adae
push esi
push 0x2446444f
push ebx
call fcn.00438f80
add esp, 0xc
mov esi, dword [edi + 0x3c]
mov ecx, str.stop_tip
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x42adde
test dx, dx
je 0x42adda
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x42adde
add eax, 4
add ecx, 4
test dx, dx
jne 0x42adb8
xor eax, eax
jmp 0x42ade3
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x42adf6
push esi
push 0x2454444f
push ebx
call fcn.00438f80
add esp, 0xc
mov eax, dword [edi + 0x40]
test eax, eax
je 0x42ae0c
push eax
push 0x4946
push ebx
call fcn.00438f40
add esp, 0xc
mov eax, dword [edi + 0x44]
push eax
push 0x41544d
push ebx
call fcn.00438f40
mov esi, dword [edi + 0x48]
add esp, 0xc
mov ecx, 0x51ba7c
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x42ae4e
test dx, dx
je 0x42ae4a
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x42ae4e
add eax, 4
add ecx, 4
test dx, dx
jne 0x42ae28
xor eax, eax
jmp 0x42ae53
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x42ae66
push esi
push 0x2454554e
push ebx
call fcn.00438f80
add esp, 0xc
mov eax, dword [edi + 0x4c]
cmp dword [eax - 0xc], 0
je 0x42ae7e
push eax
push 0x24574852
push ebx
call fcn.00438f80
add esp, 0xc
lea esi, [edi + 0x50]
push esi
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x42aeca
mov ecx, dword [esi]
push ecx
push 0x52474e4c
push ebx
call fcn.00438f40
mov edx, dword [edi + 0x54]
push edx
push 0x52474e54
push ebx
call fcn.00438f40
mov eax, dword [edi + 0x58]
push eax
push 0x52474e52
push ebx
call fcn.00438f40
mov ecx, dword [edi + 0x5c]
push ecx
push 0x52474e42
push ebx
call fcn.00438f40
add esp, 0x30
push ebx
mov ecx, edi
call fcn.004052d0
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x34
ret 4