Function at 0x416b40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x645db9
mov eax, dword fs:[0]
push eax
sub esp, 0x1dc
mov eax, dword [0x6a56e8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp dword [ebp + 8], 0
jne 0x416b7a
or eax, 0xffffffff
jmp 0x417130
mov eax, dword [ebp + 8]
mov dword [ebp - 0x124], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x138], esp
push ecx
call fcn.00407f80
add esp, 4
lea edx, [ebp - 0x94]
push edx
call fcn.00408200
add esp, 8
mov dword [ebp - 0x13c], eax
mov dword [ebp - 4], 0
lea eax, [ebp - 0xac]
push eax
call fcn.004172c0
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc4]
push ecx
call fcn.004135f0
add esp, 4
mov byte [ebp - 4], 2
push 0x18
lea ecx, [ebp - 0x28]
call fcn.00405ed0
push 0
lea ecx, [ebp - 0x28]
call fcn.00427fc0
mov byte [ebp - 4], 3
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x140], esp
mov dword [ebp - 0x120], edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x144], esp
lea eax, [ebp - 0x94]
push eax
call fcn.0040a6f0
lea ecx, [ebp - 0x1d0]
push ecx
call fcn.00406520
add esp, 0x1c
mov dword [ebp - 0x118], eax
mov edx, dword [ebp - 0x118]
mov dword [ebp - 0x11c], edx
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x11c]
push eax
mov ecx, dword [ebp - 0x120]
call fcn.00428300
mov dword [ebp - 0x148], eax
mov byte [ebp - 4], 5
push str.insname
lea ecx, [ebp - 0x28]
call fcn.0042ab20
mov byte [ebp - 4], 4
mov ecx, eax
call fcn.00428810
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1d0]
call fcn.00404be0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14c], esp
lea edx, [ebp - 0xac]
push edx
call fcn.00428300
mov dword [ebp - 0x150], eax
mov byte [ebp - 4], 6
push str.insdate
lea ecx, [ebp - 0x28]
call fcn.0042ab20
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.00428810
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x154], esp
lea eax, [ebp - 0xc4]
push eax
call fcn.00428300
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 4], 7
push 0x682c40
lea ecx, [ebp - 0x28]
call fcn.0042ab20
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.00428810
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1ac], esp
mov edx, dword [ebp - 0x124]
push edx
call fcn.00428300
mov dword [ebp - 0x1a8], eax
mov byte [ebp - 4], 8
push str.action
lea ecx, [ebp - 0x28]
call fcn.0042ab20
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.00428810
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1a4], esp
push 0x680a8e
call fcn.00428190
mov dword [ebp - 0x19c], eax
mov byte [ebp - 4], 9
push 0x682c4c
lea ecx, [ebp - 0x28]
call fcn.0042ab20
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.00428810
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x198], esp
mov dword [ebp - 0x12c], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x194], esp
push ecx
call fcn.00408ed0
add esp, 4
lea edx, [ebp - 0x1e8]
push edx
call fcn.00408200
add esp, 8
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x134], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x134]
push ecx
mov ecx, dword [ebp - 0x12c]
call fcn.00428300
mov dword [ebp - 0x190], eax
mov byte [ebp - 4], 0xb
push str.winver
lea ecx, [ebp - 0x28]
call fcn.0042ab20
mov byte [ebp - 4], 0xa
mov ecx, eax
call fcn.00428810
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1e8]
call fcn.00404be0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x18c], esp
call fcn.00408e70
push eax
mov ecx, esi
call fcn.004280d0
mov dword [ebp - 0x188], eax
mov byte [ebp - 4], 0xc
push 0x682c58
lea ecx, [ebp - 0x28]
call fcn.0042ab20
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.00428810
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x1a0], esp
call fcn.00409c20
push eax
mov ecx, esi
call fcn.004280d0
mov dword [ebp - 0x158], eax
mov byte [ebp - 4], 0xd
push str.winsub
lea ecx, [ebp - 0x28]
call fcn.0042ab20
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.00428810
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x15c], esp
push 0x6adec4
call fcn.00428300
mov dword [ebp - 0x160], eax
mov byte [ebp - 4], 0xe
push 0x682c64
lea ecx, [ebp - 0x28]
call fcn.0042ab20
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.00428810
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x164], esp
push 0x6ade78
call fcn.00428300
mov dword [ebp - 0x168], eax
mov byte [ebp - 4], 0xf
push str.updatever
lea ecx, [ebp - 0x28]
call fcn.0042ab20
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.00428810
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x16c], esp
push 0x682c7c
call fcn.00428190
mov dword [ebp - 0x170], eax
mov byte [ebp - 4], 0x10
push 0x682c78
lea ecx, [ebp - 0x28]
call fcn.0042ab20
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.00428810
lea ecx, [ebp - 0xfc]
call fcn.0042f0e0
mov byte [ebp - 4], 0x11
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0xfc]
call fcn.0042f140
mov byte [ebp - 4], 0x12
push 0xc
lea ecx, [ebp - 0x34]
call fcn.00405ed0
mov byte [ebp - 0x110], 0x69
mov byte [ebp - 0x10f], 0x65
mov byte [ebp - 0x10e], 0x78
mov byte [ebp - 0x10d], 0x6c
mov byte [ebp - 0x10c], 0x79
mov byte [ebp - 0x10b], 0x77
mov byte [ebp - 0x10a], 0x78
mov byte [ebp - 0x109], 0x6c
mov byte [ebp - 0x108], 0x77
mov byte [ebp - 0x107], 0x63
mov byte [ebp - 0x106], 0x75
mov byte [ebp - 0x105], 0x73
mov byte [ebp - 0x104], 0x75
mov byte [ebp - 0x103], 0x77
mov byte [ebp - 0x102], 0x6e
mov byte [ebp - 0x101], 0x63
mov byte [ebp - 0x100], 0
lea ecx, [ebp - 0x111]
call fcn.00405260
push eax
lea ecx, [ebp - 0xff]
push ecx
lea edx, [ebp - 0x110]
push edx
lea ecx, [ebp - 0x1b8]
call fcn.00417560
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x34]
call fcn.00417520
mov byte [ebp - 4], 0x13
push 1
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x174], esp
lea ecx, [ebp - 0x34]
call fcn.004121e0
push eax
mov ecx, esi
call fcn.00404cb0
mov dword [ebp - 0x178], eax
mov byte [ebp - 4], 0x14
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x17c], esp
lea eax, [ebp - 0x7c]
push eax
call fcn.0040a6f0
lea ecx, [ebp - 0xdc]
push ecx
mov byte [ebp - 4], 0x13
call fcn.00404150
add esp, 0x38
mov dword [ebp - 0x180], eax
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x4c]
push edx
call fcn.004173c0
add esp, 4
mov byte [ebp - 4], 0x16
push str._para
lea ecx, [ebp - 0x4c]
call fcn.0040a6b0
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040a6d0
lea ecx, [ebp - 0x64]
call fcn.00404d20
mov byte [ebp - 4], 0x17
push 3
lea ecx, [ebp - 0x64]
push ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x184], esp
lea edx, [ebp - 0x4c]
push edx
call fcn.0040a6f0
call fcn.00412930
add esp, 0x20
mov dword [ebp - 0x130], 0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x64]
call fcn.00404be0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x4c]
call fcn.00404be0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xdc]
call fcn.00404be0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x34]
call fcn.00412230
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x7c]
call fcn.00404be0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xfc]
call fcn.00415d10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28]
call fcn.004286e0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc4]
call fcn.00404be0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xac]
call fcn.00404be0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.00404be0
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006158c5
mov esp, ebp
pop ebp
ret 4