Function at 0x4d0365
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
sub esp, 0x400
lea ebp, [esp - 4]
mov eax, dword [0x7c0650]
xor eax, ebp
mov dword [ebp + 0x400], eax
push 0x58
mov eax, 0x67992e
call fcn.00645482
xor ebx, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov ecx, dword [0x7e39c4]
cmp ecx, ebx
mov dword [ebp - 4], ebx
je 0x4d05ea
call fcn.004cb3ed
mov ecx, dword [0x7e39c4]
push 0x1e0
mov edi, 0x280
push edi
push ebx
push ebx
call fcn.004d0193
mov ecx, dword [0x7e39c4]
mov dword [ebp - 0x24], eax
call fcn.004ca179
push str.c:_screen.bmp
mov esi, 0x7e3bb0
push esi
call fcn.00645e70
pop ecx
pop ecx
push ebx
push ebx
push 0xff
push esi
push 0x777
call fcn.00462827
pop ecx
push eax
push 0x776
call fcn.00462827
pop ecx
push eax
call fcn.004c45aa
add esp, 0x18
test al, al
je 0x4d05ea
push ebx
lea eax, [ebp - 0x64]
push esi
push eax
call fcn.0047c9d3
mov ecx, eax
call fcn.0047d1d7
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.0040a202
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], bl
call fcn.0040757d
mov esi, dword [ebp - 0x18]
cmp esi, ebx
je 0x4d05ea
push ebx
mov eax, 0x129a6
push 0xe
lea ecx, [ebp - 0x34]
mov word [ebp - 0x34], 0x4d42
mov dword [ebp - 0x32], 0x10
mov word [ebp - 0x2e], bx
mov word [ebp - 0x2c], bx
mov dword [ebp - 0x2a], 0x436
mov dword [ebp - 0x5c], 0x28
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x54], 0x1e0
mov word [ebp - 0x50], 1
mov word [ebp - 0x4e], 8
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], 0x100
mov dword [ebp - 0x38], ebx
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x10]
mov eax, dword [esi]
push ebx
push 0x28
lea ecx, [ebp - 0x5c]
push ecx
mov ecx, esi
call dword [eax + 0x10]
mov byte [ebp], bl
mov byte [ebp + 1], bl
mov byte [ebp + 2], bl
mov byte [ebp + 4], 0x39
mov byte [ebp + 5], 0x39
mov byte [ebp + 6], 0x39
mov byte [ebp + 8], 0x62
mov byte [ebp + 9], 0x62
mov byte [ebp + 0xa], 0x62
mov byte [ebp + 0xc], 0x74
mov byte [ebp + 0xd], 0x74
mov byte [ebp + 0xe], 0x74
mov byte [ebp + 0x10], 0x84
mov byte [ebp + 0x11], 0x84
mov byte [ebp + 0x12], 0x84
mov byte [ebp + 0x14], 0x95
mov byte [ebp + 0x15], 0x95
mov byte [ebp + 0x16], 0x95
mov byte [ebp + 0x18], 0xff
mov byte [ebp + 0x19], bl
mov byte [ebp + 0x1a], bl
mov byte [ebp + 0x1c], 0xce
mov byte [ebp + 0x1d], 0xce
mov byte [ebp + 0x1e], 0xce
mov byte [ebp + 0x20], 0xff
mov byte [ebp + 0x21], 0xff
mov byte [ebp + 0x22], 0xff
mov byte [ebp + 0x24], 0x97
mov byte [ebp + 0x25], 0xa9
mov byte [ebp + 0x26], 0xff
mov byte [ebp + 0x28], 0xa2
mov byte [ebp + 0x29], 0x67
mov byte [ebp + 0x2a], 0x3b
mov byte [ebp + 0x2c], 0xff
mov byte [ebp + 0x2d], 0x86
mov byte [ebp + 0x2e], bl
mov byte [ebp + 0x30], 4
mov byte [ebp + 0x31], bl
mov byte [ebp + 0x32], 0xb0
mov byte [ebp + 0x34], 0x90
mov byte [ebp + 0x35], 0xa0
mov byte [ebp + 0x36], 0xb0
mov byte [ebp + 0x38], bl
mov byte [ebp + 0x39], 0xff
mov byte [ebp + 0x3a], 0xff
mov byte [ebp + 0x3c], 0xb6
mov byte [ebp + 0x3d], 0xb6
mov byte [ebp + 0x3e], 0xb6
mov eax, dword [esi]
push ebx
push 0x400
lea ecx, [ebp]
push ecx
mov ecx, esi
call dword [eax + 0x10]
push 0x4b000
call fcn.0040b555
cmp eax, ebx
pop ecx
mov dword [ebp - 0x20], eax
jne 0x4d059e
push str.ScreenDump:bitmap
push 0x67
call fcn.0041ca03
pop ecx
jmp 0x4d05e9
add eax, 0x4ad80
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x1c], eax
xor eax, eax
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ecx + 2]
add ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
mov cl, byte [ecx + eax]
mov byte [edx + eax], cl
inc eax
cmp eax, edi
jl 0x4d05ab
add dword [ebp - 0x10], edi
sub dword [ebp - 0x1c], edi
cmp dword [ebp - 0x10], 0x4b000
jl 0x4d05a9
mov eax, dword [esi]
push ebx
push 0x4b000
push dword [ebp - 0x20]
mov ecx, esi
call dword [eax + 0x10]
push dword [ebp - 0x20]
call fcn.0040b57b
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.0040757d
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x400]
xor ecx, ebp
call fcn.00644f58
add ebp, 0x404
leave
ret