Function at 0x417090
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x47ef34
call fcn.0047bf90
sub esp, 0x6c
push ebx
push esi
mov esi, ecx
push edi
xor ebx, ebx
lea ecx, [ebp - 0x48]
mov edi, dword [esi + 0x458]
mov eax, dword [esi + 0x454]
push edi
push eax
mov dword [ebp - 0x48], ebx
call fcn.0040aab8
push ecx
lea ecx, [ebp - 0x48]
mov eax, esp
mov dword [ebp - 4], ebx
mov dword [ebp - 0x34], esp
and byte [eax + 3], bl
or byte [eax + 2], 0xff
and byte [eax + 1], bl
and byte [eax], bl
call fcn.0040c229
lea eax, [edi - 0x24]
push 1
mov dword [ebp - 0x10], eax
mov eax, 0xbc
push ebx
push eax
push eax
lea ecx, [ebp - 0x48]
call fcn.0040c264
push dword [ebp - 0x10]
lea ecx, [ebp - 0x48]
push 1
push 0xd2
push 0xfb
call fcn.0040c264
mov eax, dword [ebp - 0x10]
push 1
inc eax
lea ecx, [ebp - 0x48]
push eax
mov eax, 0xb2
push eax
push eax
call fcn.0040c264
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x48]
sub edi, eax
add eax, 2
dec edi
dec edi
push edi
push eax
push 0xb1
push 0xed
call fcn.0040c264
lea ecx, [ebp - 0x78]
call fcn.00428ebc
push 0x58
lea eax, [ebp - 0x78]
push dword [ebp - 0x10]
mov byte [ebp - 4], 1
push 0x49e16c
push eax
call fcn.0041811d
add esp, 0x10
lea ecx, [ebp - 0x78]
push 2
push 0xff8c8c8c
push 1
push 0x106
call fcn.00429f6b
push eax
lea ecx, [ebp - 0x48]
call fcn.00417a19
and byte [ebp - 4], bl
lea ecx, [ebp - 0x78]
call fcn.00428f7e
movzx edi, word [0x49fc32]
movzx eax, word [0x49fc30]
add edi, edi
lea ecx, [ebp - 0x3c]
push edi
push eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x3c], ebx
call fcn.0040aab8
push 0x49fc30
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 2
mov dword [ebp - 0x6c], ebx
call fcn.0040ab96
push ebx
lea eax, [ebp - 0x6c]
push ebx
push eax
lea ecx, [ebp - 0x3c]
call fcn.004132e4
cmp dword [ebp - 0x6c], ebx
je 0x4171da
push dword [ebp - 0x6c]
call dword [sym.imp.MSVCRT.dll_free]
pop ecx
lea ecx, [ebp - 0x3c]
call fcn.004177ed
or byte [ebp - 0x10], 0xff
or byte [ebp - 0xf], 0xff
or byte [ebp - 0xe], 0xff
or byte [ebp - 0xd], 0xff
push dword [ebp - 0x10]
lea ecx, [ebp - 0x3c]
call fcn.0040ab1a
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], ebx
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0x48]
push eax
push edi
push dword [ebp - 0x14]
mov byte [ebp - 4], 4
push 0x45
push 0xa2
call fcn.0040aa49
lea eax, [ebp - 0x54]
lea ecx, [ebp - 0x48]
push eax
push edi
push dword [ebp - 0x14]
push 0x45
push 0xa2
call fcn.0040aa49
push ebx
lea eax, [ebp - 0x3c]
push ebx
push eax
lea ecx, [ebp - 0x54]
call fcn.004132e4
lea ecx, [ebp - 0x3c]
call fcn.004177ab
push 0x46
lea ecx, [ebp - 0x3c]
call fcn.00417857
push ebx
lea eax, [ebp - 0x3c]
push ebx
push eax
lea ecx, [ebp - 0x60]
call fcn.004132e4
lea eax, [ebp - 0x54]
lea ecx, [esi + 0x438]
push eax
lea eax, [ebp - 0x60]
push eax
push edi
push dword [ebp - 0x14]
call fcn.0041dfef
push edi
lea ecx, [esi + 0x438]
push dword [ebp - 0x14]
push 0x45
push 0xa2
call fcn.0041dfd1
cmp dword [ebp - 0x54], ebx
je 0x4172ab
push dword [ebp - 0x54]
call dword [sym.imp.MSVCRT.dll_free]
pop ecx
cmp dword [ebp - 0x60], ebx
je 0x4172ba
push dword [ebp - 0x60]
call dword [sym.imp.MSVCRT.dll_free]
pop ecx
and byte [ebp - 4], 0
cmp dword [ebp - 0x3c], ebx
je 0x4172cd
push dword [ebp - 0x3c]
call dword [sym.imp.MSVCRT.dll_free]
pop ecx
push 0xffffffffffffffff
push 0x18
push 0x9d
push 0x45
push 0x118
lea ecx, [ebp - 0x48]
call fcn.00417913
mov edi, 0xff7f9db9
lea ecx, [ebp - 0x48]
push edi
push 0x18
push 0x9d
push 0x45
push 0x118
call fcn.00417996
push 0xff60756c
push 0xd2f5de
push edi
push 0x49d314
push 0x64
push 0x3d
lea eax, [ebp - 0x48]
push 6
push eax
call fcn.00417e6c
push 0xff60756c
push 0xd4e8f6
push edi
push 0x49d454
push 0xa4
push 0x79
lea eax, [ebp - 0x48]
push 6
push eax
call fcn.00417e6c
movzx eax, word [0x49d4b4]
mov dword [ebp - 0x18], eax
add esp, 0x40
movzx eax, word [0x49d4b6]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x5c], ebx
lea eax, [esi + 0x2b8]
mov byte [ebp - 4], 6
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], 0xff96f997
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
cmp ecx, 5
mov dword [ebp - 0x30], ecx
jl 0x417397
add ecx, 0xfffffffd
lea eax, [ecx + ecx*2]
push 2
pop edi
lea eax, [eax*4 + 0xc4]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x10]
cdq
idiv edi
cmp ecx, 3
lea eax, [edx + edx*2]
lea edi, [eax*4 + 0x44]
jne 0x4173c3
mov dword [ebp - 0x20], 0xfffbfd8b
cmp ecx, 4
jne 0x4173cf
mov dword [ebp - 0x20], 0xfffe6b73
cmp dword [ebp - 0x30], 5
jl 0x4173d8
add edi, 0x3c
lea eax, [ebp - 0x54]
lea ecx, [ebp - 0x48]
push eax
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push edi
push dword [ebp - 0x24]
call fcn.0040aa49
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0x48]
push eax
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push edi
push dword [ebp - 0x24]
call fcn.0040aa49
push 0xfff7f7f7
push ebx
push ebx
lea ecx, [ebp - 0x54]
call fcn.00417cc5
push dword [ebp - 0x20]
lea ecx, [ebp - 0x60]
push ebx
push ebx
call fcn.00417cc5
lea eax, [ebp - 0x60]
mov ecx, dword [ebp - 0x1c]
push eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x14]
push dword [ebp - 0x18]
call fcn.0041dfef
push dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1c]
push dword [ebp - 0x18]
push edi
push dword [ebp - 0x24]
call fcn.0041dfd1
inc dword [ebp - 0x10]
add dword [ebp - 0x1c], 0x18
cmp dword [ebp - 0x10], 0x10
jb 0x41737b
cmp dword [ebp - 0x60], ebx
je 0x417468
push dword [ebp - 0x60]
call dword [sym.imp.MSVCRT.dll_free]
pop ecx
and byte [ebp - 4], 0
cmp dword [ebp - 0x54], ebx
je 0x41747b
push dword [ebp - 0x54]
call dword [sym.imp.MSVCRT.dll_free]
pop ecx
lea ecx, [ebp - 0x48]
call fcn.0040acf4
mov edi, dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 0x24], eax
mov eax, dword [esi + 0x2a8]
cmp eax, ebx
je 0x41749f
push eax
call edi
mov dword [esi + 0x2a8], ebx
mov eax, dword [esi + 0x45c]
cmp eax, ebx
je 0x4174b6
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov dword [esi + 0x45c], ebx
push dword [ebp - 0x24]
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
cmp eax, ebx
mov dword [esi + 0x2a8], eax
jne 0x4174e2
push 0x586
push 0x4a1628
lea ecx, [ebp - 0x38]
call fcn.00425726
mov ecx, eax
call fcn.00425832
push ebx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push dword [ebp - 0x24]
mov ebx, dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esi + 0x45c], eax
push eax
call ebx
push dword [ebp - 0x24]
call edi
push 1
push dword [esi + 0x45c]
call dword [sym.imp.GDI32.dll_SetBkMode]
push dword [esi + 0x2ac]
mov dword [ebp - 0x10], eax
push dword [esi + 0x45c]
call ebx
push 8
mov dword [ebp - 0x34], eax
push dword [esi + 0x45c]
call dword [sym.imp.GDI32.dll_SetTextAlign]
push 0x6e6e6e
push dword [esi + 0x45c]
call dword [sym.imp.GDI32.dll_SetTextColor]
lea eax, [ebp - 0x2c]
mov edi, 0x4ae530
push 1
push eax
mov ecx, edi
call fcn.0041eac3
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x28]
push eax
mov byte [ebp - 4], 7
call fcn.0042bc7b
push 0x4a1874
push 0x4a186c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 8
call fcn.0042c8ed
lea eax, [ebp - 0x2c]
push eax
push 0x41
push 0x22
push dword [esi + 0x45c]
call fcn.004181bc
lea eax, [ebp - 0x28]
push eax
push 0x7d
push 0x22
push dword [esi + 0x45c]
call fcn.004181bc
add esp, 0x20
lea eax, [ebp - 0x30]
mov ecx, edi
push 5
push eax
call fcn.0041eac3
push eax
push 0x41
push 0x118
mov byte [ebp - 4], 9
push dword [esi + 0x45c]
call fcn.004181bc
add esp, 0x10
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 8
call fcn.0042bf6c
push dword [esi + 0x2b4]
push dword [esi + 0x45c]
call ebx
push 0xe
push dword [esi + 0x45c]
call dword [sym.imp.GDI32.dll_SetTextAlign]
push 0x4a1868
lea ecx, [ebp - 0x24]
call fcn.0042c02c
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x14]
push 0x35
push eax
mov ecx, edi
call fcn.0041eac3
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x18]
push 2
push eax
mov ecx, edi
mov byte [ebp - 4], 0xb
call fcn.0041eac3
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xc
push ecx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0042c1e4
push dword [ebp - 0x30]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0042c1e4
push eax
mov eax, dword [esi + 0x454]
push 0x1a
push 4
cdq
pop ecx
mov byte [ebp - 4], 0xe
idiv ecx
push eax
push dword [esi + 0x45c]
call fcn.004181bc
add esp, 0x28
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xd
call fcn.0042bf6c
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xc
call fcn.0042bf6c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb
call fcn.0042bf6c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa
call fcn.0042bf6c
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 8
call fcn.0042bf6c
push 0x4a1868
lea ecx, [ebp - 0x24]
call fcn.0042c02c
lea eax, [ebp - 0x14]
push 0x36
push eax
mov ecx, edi
mov byte [ebp - 4], 0xf
call fcn.0041eac3
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x18]
push 3
push eax
mov ecx, edi
mov byte [ebp - 4], 0x10
call fcn.0041eac3
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x11
push ecx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0042c1e4
push dword [ebp - 0x30]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0042c1e4
push eax
mov eax, dword [esi + 0x454]
push 0x1a
push 4
lea eax, [eax + eax*2]
pop ecx
cdq
idiv ecx
mov byte [ebp - 4], 0x13
push eax
push dword [esi + 0x45c]
call fcn.004181bc
add esp, 0x28
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x12
call fcn.0042bf6c
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x11
call fcn.0042bf6c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x10
call fcn.0042bf6c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf
call fcn.0042bf6c
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 8
call fcn.0042bf6c
push dword [ebp - 0x10]
push dword [esi + 0x45c]
call dword [sym.imp.GDI32.dll_SetBkMode]
push dword [ebp - 0x34]
push dword [esi + 0x45c]
call ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 7
call fcn.0042bf6c
and byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.0042bf6c
cmp dword [ebp - 0x48], 0
je 0x41779c
push dword [ebp - 0x48]
call dword [sym.imp.MSVCRT.dll_free]
pop ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret