Function at 0x42b850
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x3d8
mov eax, dword [esp + 0x3f4]
mov eax, dword [esp + 0x3f0]
mov eax, dword [esp + 0x3ec]
mov dword [esp + 0x3ac], 0x43ea70
mov esi, dword [0x440010]
mov eax, dword [esp + 0x3ec]
lea ecx, [esp + 0x394]
mov dword [esp + 8], ecx
mov dword [esp], eax
mov dword [esp + 4], 0x18
mov eax, dword [sym.imp.GDI32.dll_GetObjectW]
call eax
sub esp, 0xc
mov dword [esp + 0x3b0], 0x28
mov eax, dword [esp + 0x398]
mov dword [esp + 0x3b4], eax
mov eax, dword [esp + 0x39c]
neg eax
mov dword [esp + 0x3b8], eax
mov word [esp + 0x3bc], 1
mov ax, word [esp + 0x3a6]
mov word [esp + 0x3be], ax
mov dword [esp + 0x3c0], 0
mov dword [esp + 0x3c4], 0
mov dword [esp + 0x3c8], 0
mov dword [esp + 0x3cc], 0
mov dword [esp + 0x3d0], 0
mov dword [esp + 0x3d4], 0
movzx eax, word [esp + 0x3be]
shr eax, 3
mov word [esp + 0x24], ax
mov eax, dword [esp + 0x398]
mov ecx, dword [esp + 0x39c]
imul eax, ecx
movzx ecx, word [esp + 0x24]
imul eax, ecx
mov dword [esp + 0x390], eax
mov eax, dword [esp + 0x390]
mov dword [esp], eax
call fcn.00408550
mov dword [esp + 0x30], eax
mov byte [esp + 0x23], 0
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_GetDC]
call eax
sub esp, 4
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x39c]
mov edx, dword [esp + 0x3ec]
mov edi, dword [esp + 0x50]
lea ebx, [esp + 0x3b0]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x18], 0
mov dword [esp + 8], 0
mov eax, dword [sym.imp.GDI32.dll_GetDIBits]
call eax
sub esp, 0x1c
mov dword [esp + 0x388], eax
mov dword [esp + 0x38], 0x3ffea24d
lea eax, [esp + 0x38]
mov dword [esp + 0x1c], eax
xor esi, 0x17d0d257
mov eax, dword [esp + 0x3ac]
mov eax, dword [eax + esi*4]
mov ecx, dword [0x440014]
xor ecx, 0xae7372bd
sub eax, ecx
mov dword [esp + 0x380], 0x43ea70
mov ebx, dword [str.___6]
mov dword [esp + 0x37c], 0x440020
mov dword [esp + 0x374], 0x44002c
mov dword [esp + 0x36c], 0x440038
mov dword [esp + 0x364], 0x440044
mov dword [esp + 0x35c], 0x440050
mov dword [esp + 0x354], 0x44005c
mov dword [esp + 0x34c], 0x440068
mov dword [esp + 0x344], 0x440074
mov dword [esp + 0x33c], 0x440080
mov dword [esp + 0x334], 0x44008c
mov dword [esp + 0x32c], 0x440098
mov dword [esp + 0x324], 0x4400a4
mov dword [esp + 0x31c], 0x4400b0
mov dword [esp + 0x314], 0x4400bc
mov dword [esp + 0x30c], 0x4400c8
mov dword [esp + 0x304], 0x4400d4
mov dword [esp + 0x2fc], 0x4400e0
mov dword [esp + 0x2f4], 0x4400ec
mov dword [esp + 0x2ec], 0x4400f8
mov dword [esp + 0x2e4], 0x440104
mov dword [esp + 0x2dc], 0x440110
mov dword [esp + 0x2d4], 0x44011c
mov dword [esp + 0x2cc], 0x440128
mov dword [esp + 0x2c4], 0x440134
mov dword [esp + 0x2bc], 0x440140
mov dword [esp + 0x2b4], 0x44014c
mov dword [esp + 0x2ac], 0x440158
mov dword [esp + 0x2a4], 0x440164
mov dword [esp + 0x29c], 0x440170
mov dword [esp + 0x294], 0x44017c
mov dword [esp + 0x28c], 0x440188
mov dword [esp + 0x284], 0x440194
mov dword [esp + 0x27c], 0x4401a0
mov dword [esp + 0x274], 0x4401ac
mov dword [esp + 0x26c], 0x4401b8
mov dword [esp + 0x264], 0x4401c4
mov dword [esp + 0x25c], 0x4401d0
mov dword [esp + 0x254], 0x4401dc
mov dword [esp + 0x24c], 0x4401e8
mov dword [esp + 0x244], 0x4401f4
mov dword [esp + 0x23c], 0x440200
mov dword [esp + 0x234], 0x44020c
mov dword [esp + 0x22c], 0x440218
mov dword [esp + 0x224], 0x440224
mov dword [esp + 0x21c], 0x440230
mov dword [esp + 0x214], 0x44023c
mov dword [esp + 0x20c], 0x440248
mov dword [esp + 0x204], 0x440254
mov dword [esp + 0x1fc], 0x440260
mov dword [esp + 0x1f4], 0x44026c
mov dword [esp + 0x1ec], 0x440278
mov dword [esp + 0x1e4], 0x440284
mov dword [esp + 0x1dc], 0x440290
mov dword [esp + 0x1d4], 0x44029c
mov dword [esp + 0x1cc], 0x4402a8
mov dword [esp + 0x1c4], 0x4402b4
mov dword [esp + 0x1bc], 0x4402c0
mov dword [esp + 0x1b4], 0x4402cc
mov dword [esp + 0x1ac], 0x4402d8
mov dword [esp + 0x1a4], 0x4402e4
mov dword [esp + 0x19c], 0x4402f0
mov dword [esp + 0x194], 0x4402fc
mov dword [esp + 0x18c], 0x440308
mov dword [esp + 0x184], 0x440314
mov dword [esp + 0x17c], 0x440320
mov dword [esp + 0x174], 0x44032c
mov dword [esp + 0x16c], 0x440338
mov dword [esp + 0x164], 0x43ea70
mov ebp, dword [0x440344]
mov dword [esp + 0x160], 0x43ea70
mov ecx, dword [0x44034c]
mov dword [esp + 0xd4], ecx
mov dword [esp + 0x15c], 0x43ea70
mov ecx, dword [0x440354]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0x158], 0x43ea70
mov ecx, dword [0x44035c]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0x154], 0x43ea70
mov ecx, dword [0x440364]
mov dword [esp + 0xc8], ecx
mov dword [esp + 0x150], 0x43ea70
mov ecx, dword [0x44036c]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0x14c], 0x43ea70
mov ecx, dword [0x440374]
mov dword [esp + 0xc0], ecx
mov dword [esp + 0x148], 0x43ea70
mov ecx, dword [0x44037c]
mov dword [esp + 0xbc], ecx
mov dword [esp + 0x144], 0x43ea70
mov ecx, dword [0x440384]
mov dword [esp + 0xb8], ecx
mov dword [esp + 0x140], 0x43ea70
mov ecx, dword [0x44038c]
mov dword [esp + 0xb4], ecx
mov dword [esp + 0x13c], 0x43ea70
mov ecx, dword [0x440394]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0x138], 0x43ea70
mov ecx, dword [0x44039c]
mov dword [esp + 0xac], ecx
mov dword [esp + 0x134], 0x43ea70
mov ecx, dword [0x4403a4]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0x130], 0x43ea70
mov ecx, dword [0x4403ac]
mov dword [esp + 0xa4], ecx
mov dword [esp + 0x12c], 0x43ea70
mov ecx, dword [0x4403b4]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0x128], 0x43ea70
mov ecx, dword [0x4403bc]
mov dword [esp + 0x9c], ecx
mov dword [esp + 0x124], 0x43ea70
mov ecx, dword [0x4403c4]
mov dword [esp + 0x98], ecx
mov dword [esp + 0x120], 0x43ea70
mov ecx, dword [0x4403cc]
mov dword [esp + 0x94], ecx
mov dword [esp + 0x11c], 0x43ea70
mov ecx, dword [0x4403d4]
mov dword [esp + 0x90], ecx
mov dword [esp + 0x118], 0x43ea70
mov ecx, dword [0x4403dc]
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x114], 0x43ea70
mov ecx, dword [0x4403e4]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x110], 0x43ea70
mov ecx, dword [0x4403ec]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x10c], 0x43ea70
mov ecx, dword [0x4403f4]
mov dword [esp + 0x80], ecx
mov dword [esp + 0x108], 0x43ea70
mov ecx, dword [0x4403fc]
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x104], 0x43ea70
mov ecx, dword [0x440404]
mov dword [esp + 0x78], ecx
mov dword [esp + 0x100], 0x43ea70
mov ecx, dword [0x44040c]
mov dword [esp + 0x74], ecx
mov dword [esp + 0xfc], 0x43ea70
mov ecx, dword [0x440414]
mov dword [esp + 0x70], ecx
mov dword [esp + 0xf8], 0x43ea70
mov ecx, dword [0x44041c]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0xf4], 0x43ea70
mov ecx, dword [0x440424]
mov dword [esp + 0x68], ecx
mov dword [esp + 0xf0], 0x43ea70
mov ecx, dword [0x44042c]
mov dword [esp + 0x64], ecx
mov dword [esp + 0xec], 0x43ea70
mov ecx, dword [0x440434]
mov dword [esp + 0x60], ecx
mov dword [esp + 0xe8], 0x43ea70
mov ecx, dword [0x44043c]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0xe4], 0x43ea70
mov ecx, dword [0x440444]
mov dword [esp + 0x58], ecx
mov dword [esp + 0xe0], 0x43ea70
mov ecx, dword [0x44044c]
mov dword [esp + 0x54], ecx
mov dword [esp + 0xdc], 0x43ea70
mov esi, dword [0x440454]
mov dword [esp + 0x34], esi
jmp eax