Function at 0x4058c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x4296f9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
mov dword [esp + 4], esi
lea ecx, [esi + 0x1e1d]
mov dword [esp + 0x10], 0x7e
call fcn.004264f0
mov eax, dword [esi + 0x1e15]
sub eax, 0x10
mov byte [esp + 0x10], 0x7d
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405915
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1e11]
sub eax, 0x10
mov byte [esp + 0x10], 0x7c
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40593a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1e0d]
sub eax, 0x10
mov byte [esp + 0x10], 0x7b
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40595f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1e09]
sub eax, 0x10
mov byte [esp + 0x10], 0x7a
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405984
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1e05]
sub eax, 0x10
mov byte [esp + 0x10], 0x79
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4059a9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1e01]
sub eax, 0x10
mov byte [esp + 0x10], 0x78
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4059ce
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1dfd]
sub eax, 0x10
mov byte [esp + 0x10], 0x77
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4059f3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1df9]
sub eax, 0x10
mov byte [esp + 0x10], 0x76
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405a18
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1df5]
sub eax, 0x10
mov byte [esp + 0x10], 0x75
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405a3d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1df1]
sub eax, 0x10
mov byte [esp + 0x10], 0x74
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405a62
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1ded]
sub eax, 0x10
mov byte [esp + 0x10], 0x73
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405a87
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1de9]
sub eax, 0x10
mov byte [esp + 0x10], 0x72
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405aac
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1de5]
sub eax, 0x10
mov byte [esp + 0x10], 0x71
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405ad1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1de1]
sub eax, 0x10
mov byte [esp + 0x10], 0x70
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405af6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1ddd]
sub eax, 0x10
mov byte [esp + 0x10], 0x6f
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405b1b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1dd9]
sub eax, 0x10
mov byte [esp + 0x10], 0x6e
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405b40
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1dd5]
sub eax, 0x10
mov byte [esp + 0x10], 0x6d
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405b65
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1dd1]
sub eax, 0x10
mov byte [esp + 0x10], 0x6c
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405b8a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1dcd]
sub eax, 0x10
mov byte [esp + 0x10], 0x6b
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405baf
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1dc9]
sub eax, 0x10
mov byte [esp + 0x10], 0x6a
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405bd4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1dc5]
sub eax, 0x10
mov byte [esp + 0x10], 0x69
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405bf9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1dc1]
sub eax, 0x10
mov byte [esp + 0x10], 0x68
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405c1e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1dbd]
sub eax, 0x10
mov byte [esp + 0x10], 0x67
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405c43
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1db9]
sub eax, 0x10
mov byte [esp + 0x10], 0x66
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405c68
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1db5]
sub eax, 0x10
mov byte [esp + 0x10], 0x65
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405c8d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1db1]
sub eax, 0x10
mov byte [esp + 0x10], 0x64
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405cb2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1dad]
sub eax, 0x10
mov byte [esp + 0x10], 0x63
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405cd7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1da9]
sub eax, 0x10
mov byte [esp + 0x10], 0x62
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405cfc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1da5]
sub eax, 0x10
mov byte [esp + 0x10], 0x61
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405d21
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1da1]
sub eax, 0x10
mov byte [esp + 0x10], 0x60
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405d46
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1d9d]
sub eax, 0x10
mov byte [esp + 0x10], 0x5f
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405d6b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1d99]
sub eax, 0x10
mov byte [esp + 0x10], 0x5e
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405d90
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1d95]
sub eax, 0x10
mov byte [esp + 0x10], 0x5d
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405db5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1d91]
sub eax, 0x10
mov byte [esp + 0x10], 0x5c
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405dda
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1d8d]
sub eax, 0x10
mov byte [esp + 0x10], 0x5b
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405dff
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1d89]
sub eax, 0x10
mov byte [esp + 0x10], 0x5a
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405e24
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1d85]
sub eax, 0x10
mov byte [esp + 0x10], 0x59
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405e49
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1d81]
sub eax, 0x10
mov byte [esp + 0x10], 0x58
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405e6e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1d7d]
sub eax, 0x10
mov byte [esp + 0x10], 0x57
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405e93
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1d79]
sub eax, 0x10
mov byte [esp + 0x10], 0x56
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405eb8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi + 0x1d75]
sub eax, 0x10
mov byte [esp + 0x10], 0x55
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405edd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esi + 0x1d25]
mov byte [esp + 0x10], 0x54
call fcn.004264f0
lea ecx, [esi + 0x1cd5]
mov byte [esp + 0x10], 0x53
call fcn.00426625
lea ecx, [esi + 0x1c85]
mov byte [esp + 0x10], 0x52
call fcn.00426625
lea ecx, [esi + 0x1c35]
mov byte [esp + 0x10], 0x51
call fcn.00426625
lea ecx, [esi + 0x1be5]
mov byte [esp + 0x10], 0x50
call fcn.00426625
lea ecx, [esi + 0x1b95]
mov byte [esp + 0x10], 0x4f
call fcn.0042656a
lea ecx, [esi + 0x1b45]
mov byte [esp + 0x10], 0x4e
call fcn.004264f0
lea ecx, [esi + 0x1af5]
mov byte [esp + 0x10], 0x4d
call fcn.004264f0
lea ecx, [esi + 0x1aa5]
mov byte [esp + 0x10], 0x4c
call fcn.004264f0
lea ecx, [esi + 0x1a55]
mov byte [esp + 0x10], 0x4b
call fcn.004264f0
lea ecx, [esi + 0x1a05]
mov byte [esp + 0x10], 0x4a
call fcn.004264f0
lea ecx, [esi + 0x19b5]
mov byte [esp + 0x10], 0x49
call fcn.004264f0
lea ecx, [esi + 0x1965]
mov byte [esp + 0x10], 0x48
call fcn.004264f0
lea ecx, [esi + 0x1915]
mov byte [esp + 0x10], 0x47
call fcn.004264f0
lea ecx, [esi + 0x18c5]
mov byte [esp + 0x10], 0x46
call fcn.004264f0
lea ecx, [esi + 0x1875]
mov byte [esp + 0x10], 0x45
call fcn.004264f0
lea ecx, [esi + 0x1825]
mov byte [esp + 0x10], 0x44
call fcn.004264f0
lea ecx, [esi + 0x17d5]
mov byte [esp + 0x10], 0x43
call fcn.0040bd80
lea ecx, [esi + 0x1785]
mov byte [esp + 0x10], 0x42
call fcn.0040bd80
lea ecx, [esi + 0x1735]
mov byte [esp + 0x10], 0x41
call fcn.0040bd80
lea ecx, [esi + 0x16e5]
mov byte [esp + 0x10], 0x40
call fcn.0040bd80
lea ecx, [esi + 0x1695]
mov byte [esp + 0x10], 0x3f
call fcn.0040bd80
lea ecx, [esi + 0x1645]
mov byte [esp + 0x10], 0x3e
call fcn.0040bd80
lea ecx, [esi + 0x15f5]
mov byte [esp + 0x10], 0x3d
call fcn.0040bd80
lea ecx, [esi + 0x15a5]
mov byte [esp + 0x10], 0x3c
call fcn.0040bd80
lea ecx, [esi + 0x1555]
mov byte [esp + 0x10], 0x3b
call fcn.0040bd80
lea ecx, [esi + 0x1505]
mov byte [esp + 0x10], 0x3a
call fcn.0040bd80
lea ecx, [esi + 0x14b5]
mov byte [esp + 0x10], 0x39
call fcn.0040bd80
lea ecx, [esi + 0x1465]
mov byte [esp + 0x10], 0x38
call fcn.0040bd80
lea ecx, [esi + 0x1415]
mov byte [esp + 0x10], 0x37
call fcn.0040bd80
lea ecx, [esi + 0x13c5]
mov byte [esp + 0x10], 0x36
call fcn.0040bd80
lea ecx, [esi + 0x1375]
mov byte [esp + 0x10], 0x35
call fcn.0040bd80
lea ecx, [esi + 0x1325]
mov byte [esp + 0x10], 0x34
call fcn.0040bd80
lea ecx, [esi + 0x12d5]
mov byte [esp + 0x10], 0x33
call fcn.0040bd80
lea ecx, [esi + 0x1285]
mov byte [esp + 0x10], 0x32
call fcn.0040bd80
lea ecx, [esi + 0x1235]
mov byte [esp + 0x10], 0x31
call fcn.0040bd80
lea ecx, [esi + 0x11e5]
mov byte [esp + 0x10], 0x30
call fcn.0040bd80
lea ecx, [esi + 0x1195]
mov byte [esp + 0x10], 0x2f
call fcn.0040bd80
lea ecx, [esi + 0x1145]
mov byte [esp + 0x10], 0x2e
call fcn.0040bd80
lea ecx, [esi + 0x10f5]
mov byte [esp + 0x10], 0x2d
call fcn.0040bd80
lea ecx, [esi + 0x10a5]
mov byte [esp + 0x10], 0x2c
call fcn.0040bd80
lea ecx, [esi + 0x1055]
mov byte [esp + 0x10], 0x2b
call fcn.0040bd80
lea ecx, [esi + 0x1005]
mov byte [esp + 0x10], 0x2a
call fcn.0040bd80
lea ecx, [esi + 0xfb5]
mov byte [esp + 0x10], 0x29
call fcn.0040bd80
lea ecx, [esi + 0xf65]
mov byte [esp + 0x10], 0x28
call fcn.0040bd80
lea ecx, [esi + 0xf15]
mov byte [esp + 0x10], 0x27
call fcn.0040bd80
lea ecx, [esi + 0xec5]
mov byte [esp + 0x10], 0x26
call fcn.0040bd80
lea ecx, [esi + 0xe75]
mov byte [esp + 0x10], 0x25
call fcn.0040bd80
lea ecx, [esi + 0xe25]
mov byte [esp + 0x10], 0x24
call fcn.0040bd80
lea ecx, [esi + 0xdd5]
mov byte [esp + 0x10], 0x23
call fcn.0040bd80
lea ecx, [esi + 0xd85]
mov byte [esp + 0x10], 0x22
call fcn.0040bd80
lea ecx, [esi + 0xd35]
mov byte [esp + 0x10], 0x21
call fcn.0040bd80
lea ecx, [esi + 0xce5]
mov byte [esp + 0x10], 0x20
call fcn.0040bd80
lea ecx, [esi + 0xc95]
mov byte [esp + 0x10], 0x1f
call fcn.004264f0
lea ecx, [esi + 0xc45]
mov byte [esp + 0x10], 0x1e
call fcn.004264f0
lea ecx, [esi + 0xbf5]
mov byte [esp + 0x10], 0x1d
call fcn.004264f0
lea ecx, [esi + 0xba5]
mov byte [esp + 0x10], 0x1c
call fcn.004264f0
lea ecx, [esi + 0xb55]
mov byte [esp + 0x10], 0x1b
call fcn.004264f0
lea ecx, [esi + 0xb05]
mov byte [esp + 0x10], 0x1a
call fcn.004264f0
lea ecx, [esi + 0xab5]
mov byte [esp + 0x10], 0x19
call fcn.004264f0
lea ecx, [esi + 0xa65]
mov byte [esp + 0x10], 0x18
call fcn.004264f0
lea ecx, [esi + 0xa15]
mov byte [esp + 0x10], 0x17
call fcn.004264f0
lea ecx, [esi + 0x9c5]
mov byte [esp + 0x10], 0x16
call fcn.0042656a
lea ecx, [esi + 0x975]
mov byte [esp + 0x10], 0x15
call fcn.004264f0
lea ecx, [esi + 0x925]
mov byte [esp + 0x10], 0x14
call fcn.004264f0
lea ecx, [esi + 0x8d5]
mov byte [esp + 0x10], 0x13
call fcn.0042656a
lea ecx, [esi + 0x885]
mov byte [esp + 0x10], 0x12
call fcn.00426496
lea ecx, [esi + 0x835]
mov byte [esp + 0x10], 0x11
call fcn.00426496
lea ecx, [esi + 0x7e5]
mov byte [esp + 0x10], 0x10
call fcn.00426496
lea ecx, [esi + 0x795]
mov byte [esp + 0x10], 0xf
call fcn.00426496
lea ecx, [esi + 0x745]
mov byte [esp + 0x10], 0xe
call fcn.00426496
lea ecx, [esi + 0x6f5]
mov byte [esp + 0x10], 0xd
call fcn.00426496
lea ecx, [esi + 0x6a5]
mov byte [esp + 0x10], 0xc
call fcn.00426496
lea ecx, [esi + 0x655]
mov byte [esp + 0x10], 0xb
call fcn.00426496
lea ecx, [esi + 0x605]
mov byte [esp + 0x10], 0xa
call fcn.00426496
lea ecx, [esi + 0x5b5]
mov byte [esp + 0x10], 9
call fcn.00426496
lea ecx, [esi + 0x565]
mov byte [esp + 0x10], 8
call fcn.00426625
lea ecx, [esi + 0x515]
mov byte [esp + 0x10], 7
call fcn.004264f0
lea ecx, [esi + 0x4c5]
mov byte [esp + 0x10], 6
call fcn.004264f0
lea ecx, [esi + 0x475]
mov byte [esp + 0x10], 5
call fcn.004264f0
lea ecx, [esi + 0x425]
mov byte [esp + 0x10], 4
call fcn.004264f0
lea ecx, [esi + 0x3d5]
mov byte [esp + 0x10], 3
call fcn.004264f0
lea ecx, [esi + 0x29d]
mov byte [esp + 0x10], 2
mov dword [ecx], vtable.CGdiObject.0
call fcn.00425543
lea ecx, [esi + 0x91]
mov byte [esp + 0x10], 1
call fcn.004032d0
lea ecx, [esi + 0x70]
mov byte [esp + 0x10], 0
call fcn.004018f0
mov ecx, esi
mov dword [esp + 0x10], 0xffffffff
call fcn.0041e499
mov ecx, dword [esp + 8]
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret