Function at 0x415d30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5df678
mov eax, dword fs:[0]
push eax
push ebx
push esi
push edi
mov eax, dword [0x714bc0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
push eax
push 0x81
mov ecx, esi
call fcn.004baedc
xor edi, edi
mov dword [ebp - 4], edi
mov dword [esi], 0x6dd8c4
mov eax, 0x66a8c4
mov dword [esi + 0x94], eax
mov dword [esi + 0x98], edi
mov dword [esi + 0x9c], eax
mov dword [esi + 0xa0], edi
lea ecx, [esi + 0xa4]
push ecx
mov byte [ebp - 4], 2
call fcn.00408060
lea edx, [esi + 0x8bc]
push edx
mov byte [ebp - 4], 3
call fcn.00408060
lea ecx, [esi + 0x10d8]
mov byte [ebp - 4], 4
call fcn.004be17b
mov dword [esi + 0x10d8], 0x66a144
mov byte [ebp - 4], 5
call fcn.004ba35d
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x415de7
push 0x80004005
call fcn.00401000
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x114c], eax
mov byte [ebp - 4], 6
call fcn.004ba35d
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x415e17
push 0x80004005
call fcn.00401000
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x1150], eax
lea ecx, [esi + 0x1154]
mov byte [ebp - 4], 7
call fcn.004be17b
mov dword [esi + 0x1154], 0x669fc4
mov byte [ebp - 4], 8
call fcn.004ba35d
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x415e60
push 0x80004005
call fcn.00401000
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x11c8], eax
lea ecx, [esi + 0x11d0]
mov byte [ebp - 4], 9
call fcn.004be17b
mov dword [esi + 0x11d0], 0x669fc4
lea ecx, [esi + 0x1244]
mov byte [ebp - 4], 0xa
call fcn.004be17b
mov dword [esi + 0x1244], 0x669fc4
lea ecx, [esi + 0x12b8]
mov byte [ebp - 4], 0xb
call fcn.004be17b
mov dword [esi + 0x12b8], 0x669fc4
lea ecx, [esi + 0x132c]
mov byte [ebp - 4], 0xc
call fcn.004be17b
mov dword [esi + 0x132c], 0x669fc4
lea ecx, [esi + 0x13a0]
mov byte [ebp - 4], 0xd
call fcn.004be17b
mov dword [esi + 0x13a0], 0x669fc4
lea ecx, [esi + 0x1414]
mov byte [ebp - 4], 0xe
call fcn.004be17b
mov dword [esi + 0x1414], 0x669fc4
lea ecx, [esi + 0x1488]
mov byte [ebp - 4], 0xf
call fcn.004be17b
mov dword [esi + 0x1488], 0x669fc4
lea ecx, [esi + 0x14fc]
mov byte [ebp - 4], 0x10
call fcn.004be17b
mov dword [esi + 0x14fc], 0x669fc4
lea ecx, [esi + 0x1570]
mov byte [ebp - 4], 0x11
call fcn.004be17b
mov dword [esi + 0x1570], 0x669fc4
lea ecx, [esi + 0x15e4]
mov byte [ebp - 4], 0x12
call fcn.004be17b
mov dword [esi + 0x15e4], 0x669fc4
lea ecx, [esi + 0x1658]
mov byte [ebp - 4], 0x13
call fcn.004be17b
mov dword [esi + 0x1658], 0x669fc4
lea ecx, [esi + 0x16cc]
mov byte [ebp - 4], 0x14
call fcn.004be17b
mov dword [esi + 0x16cc], 0x669fc4
lea ecx, [esi + 0x1740]
mov byte [ebp - 4], 0x15
call fcn.004be17b
mov dword [esi + 0x1740], 0x669fc4
lea ecx, [esi + 0x17b4]
mov byte [ebp - 4], 0x16
call fcn.004be17b
mov dword [esi + 0x17b4], 0x669fc4
lea ecx, [esi + 0x1828]
mov byte [ebp - 4], 0x17
call fcn.004be17b
mov dword [esi + 0x1828], 0x669fc4
lea ecx, [esi + 0x189c]
mov byte [ebp - 4], 0x18
call fcn.004be17b
mov dword [esi + 0x189c], 0x669fc4
lea ecx, [esi + 0x1910]
mov byte [ebp - 4], 0x19
call fcn.004be17b
mov dword [esi + 0x1910], 0x669fc4
lea ecx, [esi + 0x1984]
mov byte [ebp - 4], 0x1a
call fcn.004be17b
mov dword [esi + 0x1984], 0x669fc4
lea ecx, [esi + 0x19f8]
mov byte [ebp - 4], 0x1b
call fcn.004be17b
mov dword [esi + 0x19f8], 0x669fc4
lea ecx, [esi + 0x1a6c]
mov byte [ebp - 4], 0x1c
call fcn.004be17b
mov dword [esi + 0x1a6c], 0x669fc4
lea ecx, [esi + 0x1ae0]
mov byte [ebp - 4], 0x1d
call fcn.004be17b
mov dword [esi + 0x1ae0], 0x669fc4
lea ecx, [esi + 0x1b54]
mov byte [ebp - 4], 0x1e
call fcn.004be17b
mov dword [esi + 0x1b54], 0x669fc4
lea ecx, [esi + 0x1bc8]
mov byte [ebp - 4], 0x1f
call fcn.004be17b
mov dword [esi + 0x1bc8], 0x669fc4
lea ecx, [esi + 0x1c3c]
mov byte [ebp - 4], 0x20
call fcn.004be17b
mov dword [esi + 0x1c3c], 0x669fc4
lea ecx, [esi + 0x1cb0]
mov byte [ebp - 4], 0x21
call fcn.004be17b
mov dword [esi + 0x1cb0], 0x669fc4
lea ecx, [esi + 0x1d24]
mov byte [ebp - 4], 0x22
call fcn.004be17b
mov dword [esi + 0x1d24], 0x669fc4
lea ecx, [esi + 0x1d98]
mov byte [ebp - 4], 0x23
call fcn.004be17b
mov dword [esi + 0x1d98], 0x669fc4
lea ecx, [esi + 0x1e0c]
mov byte [ebp - 4], 0x24
call fcn.004be17b
mov dword [esi + 0x1e0c], 0x669fc4
lea ecx, [esi + 0x1e80]
mov byte [ebp - 4], 0x25
call fcn.004be17b
mov dword [esi + 0x1e80], 0x669fc4
lea ecx, [esi + 0x1ef4]
mov byte [ebp - 4], 0x26
call fcn.004be17b
mov dword [esi + 0x1ef4], 0x669fc4
lea ecx, [esi + 0x1f68]
mov byte [ebp - 4], 0x27
call fcn.004be17b
mov dword [esi + 0x1f68], 0x669fc4
lea ecx, [esi + 0x1fdc]
mov byte [ebp - 4], 0x28
call fcn.004be17b
mov dword [esi + 0x1fdc], 0x669fc4
lea ecx, [esi + 0x2050]
mov byte [ebp - 4], 0x29
call fcn.004be17b
mov dword [esi + 0x2050], 0x669fc4
lea ecx, [esi + 0x20c4]
mov byte [ebp - 4], 0x2a
call fcn.004be17b
mov dword [esi + 0x20c4], 0x669fc4
lea ecx, [esi + 0x2138]
mov byte [ebp - 4], 0x2b
call fcn.004be17b
mov dword [esi + 0x2138], 0x66a144
lea ecx, [esi + 0x21ac]
mov byte [ebp - 4], 0x2c
call fcn.004be17b
mov dword [esi + 0x21ac], 0x66a144
lea ecx, [esi + 0x2220]
mov byte [ebp - 4], 0x2d
call fcn.004be17b
mov dword [esi + 0x2220], 0x66a144
lea ecx, [esi + 0x2294]
mov byte [ebp - 4], 0x2e
call fcn.004be17b
mov dword [esi + 0x2294], 0x66a144
lea ecx, [esi + 0x2308]
mov byte [ebp - 4], 0x2f
call fcn.004be17b
mov dword [esi + 0x2308], 0x66a144
lea ecx, [esi + 0x237c]
mov byte [ebp - 4], 0x30
call fcn.004be17b
mov dword [esi + 0x237c], 0x669fc4
push 3
mov byte [ebp - 4], 0x31
push 0x6dcd44
lea ecx, [esi + 0x11c8]
mov dword [esi + 0x11cc], 0
call fcn.00401f70
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8