Function at 0x416747
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xec0
push ebx
xor eax, eax
push esi
xor ebx, ebx
push 0x206
lea ecx, [ebp - 0x2b6]
push ebx
push ecx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov word [ebp - 0x2b8], ax
call fcn.0041fb07
push 0x206
lea eax, [ebp - 0x4be]
xor edx, edx
push ebx
push eax
mov word [ebp - 0x4c0], dx
call fcn.0041fb07
push 0x30
lea edx, [ebp - 0x38]
push ebx
push edx
mov dword [ebp - 0x88], 0x6e0049
mov dword [ebp - 0x84], 0x650074
mov dword [ebp - 0x80], 0x6e0072
mov dword [ebp - 0x7c], 0x740065
mov dword [ebp - 0x78], 0x450020
mov dword [ebp - 0x74], 0x700078
mov dword [ebp - 0x70], 0x6f006c
mov dword [ebp - 0x6c], 0x650072
mov dword [ebp - 0x68], 0x5c0072
mov dword [ebp - 0x64], 0x6e0049
mov dword [ebp - 0x60], 0x650074
mov dword [ebp - 0x5c], 0x6c006c
mov dword [ebp - 0x58], 0x460069
mov dword [ebp - 0x54], 0x72006f
mov dword [ebp - 0x50], 0x73006d
mov dword [ebp - 0x4c], 0x53005c
mov dword [ebp - 0x48], 0x6f0074
mov dword [ebp - 0x44], 0x610072
mov dword [ebp - 0x40], 0x650067
mov dword [ebp - 0x3c], 0x32
call fcn.0041fb07
mov esi, dword [ebp + 8]
push 1
push 0xd
lea eax, [ebp - 0x2b8]
push eax
push esi
call fcn.0040c677
lea ecx, [ebp - 0x2b8]
push ecx
call fcn.0041fc87
mov edx, 0x5c
mov word [ebp + eax*2 - 0x2b8], dx
lea eax, [ebp - 0x2b8]
push eax
call fcn.0041fc87
lea ecx, [ebp + eax*2 - 0x2b8]
push ecx
push esi
call fcn.0040de97
add esp, 0x44
test eax, eax
jne 0x4168b8
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push edi
push 1
lea edx, [ebp - 0x2b8]
push 0xf
push edx
call fcn.0041fc87
add esp, 4
lea eax, [ebp + eax*2 - 0x2b8]
push eax
push esi
call fcn.0040c677
lea ecx, [ebp - 0x2b8]
push ecx
call fcn.0041fc87
xor edx, edx
mov word [ebp + eax*2 - 0x2e4], dx
push ebx
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x2b8]
push ecx
call fcn.0041fdf7
push 0x20219
lea edx, [ebp - 0x2b8]
push edx
lea eax, [ebp - 4]
push eax
push esi
call fcn.0040df57
add esp, 0x30
test eax, eax
je 0x416a3d
push 0x128
lea ecx, [ebp - 0x4c0]
push ecx
push esi
call fcn.004172c7
add esp, 0xc
test eax, eax
je 0x416a49
lea edx, [ebp - 0xb0]
push edx
push esi
call fcn.00416567
add esp, 8
test eax, eax
je 0x416a49
push 0x9fe
lea ecx, [ebp - 0xebe]
xor eax, eax
push ebx
push ecx
mov dword [ebp - 8], ebx
mov word [ebp - 0xec0], ax
call fcn.0041fb07
push 0x1f4400
push esi
call fcn.0041fb47
mov edi, eax
add esp, 0x14
cmp edi, ebx
jne 0x4169a2
mov edx, dword [ebp - 4]
push edx
push esi
call fcn.0041dfe7
add esp, 8
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0xb0]
push eax
push edi
push esi
call fcn.00416457
mov eax, dword [ebp - 4]
lea ecx, [ebp - 8]
push ecx
push 0x800
lea edx, [ebp - 0xec0]
push edx
push 1
push 0
push eax
push esi
call fcn.0041dcf7
add esp, 0x28
test eax, eax
jne 0x416a29
mov edi, edi
lea ecx, [ebp - 0xb0]
push ecx
lea edx, [ebp - 0x4c0]
push edx
push edi
lea eax, [ebp - 0xec0]
push eax
push esi
call fcn.00416387
lea ecx, [ebp - 0xec0]
push 0x400
push ecx
inc ebx
call fcn.0041fab7
mov ecx, dword [ebp - 4]
lea edx, [ebp - 8]
push edx
push 0x800
lea eax, [ebp - 0xec0]
push eax
push 1
push ebx
push ecx
push esi
call fcn.0041dcf7
add esp, 0x38
test eax, eax
je 0x4169d7
mov edx, dword [ebp - 4]
push edx
push esi
call fcn.0041dfe7
push edi
push esi
call fcn.0041fa67
add esp, 0x10
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 4]
push eax
push esi
call fcn.0041dfe7
add esp, 8
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret