Function at 0x541184
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffd84
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], eax
xor eax, eax
push ebp
push 0x5416f3
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0052a94c
test al, al
je 0x5416c5
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x54170c
mov edx, 0x54171c
mov eax, 0x80000001
call fcn.00526980
lea eax, [ebp - 0xc]
push eax
mov edx, 0x54171c
mov ecx, 0x54173c
mov eax, 0x80000001
call fcn.00526b80
xor ecx, ecx
mov dl, 1
mov eax, dword [0x518120]
call fcn.00518608
mov dword [ebp - 4], eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 0xe0], 0x73
mov byte [ebp - 0xdc], 2
mov byte [ebp - 0xd8], 0x65
mov byte [ebp - 0xd4], 2
mov byte [ebp - 0xd0], 0x72
mov byte [ebp - 0xcc], 2
mov byte [ebp - 0xc8], 0x76
mov byte [ebp - 0xc4], 2
mov byte [ebp - 0xc0], 0x69
mov byte [ebp - 0xbc], 2
mov byte [ebp - 0xb8], 0x63
mov byte [ebp - 0xb4], 2
mov byte [ebp - 0xb0], 0x65
mov byte [ebp - 0xac], 2
mov byte [ebp - 0xa8], 0x2e
mov byte [ebp - 0xa4], 2
mov byte [ebp - 0xa0], 0x73
mov byte [ebp - 0x9c], 2
mov byte [ebp - 0x98], 0x6d
mov byte [ebp - 0x94], 2
mov byte [ebp - 0x90], 0x61
mov byte [ebp - 0x8c], 2
mov byte [ebp - 0x88], 0x72
mov byte [ebp - 0x84], 2
mov byte [ebp - 0x80], 0x74
mov byte [ebp - 0x7c], 2
mov byte [ebp - 0x78], 0x70
mov byte [ebp - 0x74], 2
mov byte [ebp - 0x70], 0x63
mov byte [ebp - 0x6c], 2
mov byte [ebp - 0x68], 0x75
mov byte [ebp - 0x64], 2
mov byte [ebp - 0x60], 0x70
mov byte [ebp - 0x5c], 2
mov byte [ebp - 0x58], 0x64
mov byte [ebp - 0x54], 2
mov byte [ebp - 0x50], 0x61
mov byte [ebp - 0x4c], 2
mov byte [ebp - 0x48], 0x74
mov byte [ebp - 0x44], 2
mov byte [ebp - 0x40], 0x65
mov byte [ebp - 0x3c], 2
mov byte [ebp - 0x38], 0x2e
mov byte [ebp - 0x34], 2
mov byte [ebp - 0x30], 0x63
mov byte [ebp - 0x2c], 2
mov byte [ebp - 0x28], 0x6f
mov byte [ebp - 0x24], 2
mov byte [ebp - 0x20], 0x6d
mov byte [ebp - 0x1c], 2
lea edx, [ebp - 0xe0]
mov ecx, 0x18
mov eax, 0x541754
call fcn.0040aa44
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x88]
lea eax, [ebp - 0xe4]
push eax
mov byte [ebp - 0x27c], 0x68
mov byte [ebp - 0x278], 2
mov byte [ebp - 0x274], 0x74
mov byte [ebp - 0x270], 2
mov byte [ebp - 0x26c], 0x74
mov byte [ebp - 0x268], 2
mov byte [ebp - 0x264], 0x70
mov byte [ebp - 0x260], 2
mov byte [ebp - 0x25c], 0x3a
mov byte [ebp - 0x258], 2
mov byte [ebp - 0x254], 0x2f
mov byte [ebp - 0x250], 2
mov byte [ebp - 0x24c], 0x2f
mov byte [ebp - 0x248], 2
mov byte [ebp - 0x244], 0x73
mov byte [ebp - 0x240], 2
mov byte [ebp - 0x23c], 0x65
mov byte [ebp - 0x238], 2
mov byte [ebp - 0x234], 0x72
mov byte [ebp - 0x230], 2
mov byte [ebp - 0x22c], 0x76
mov byte [ebp - 0x228], 2
mov byte [ebp - 0x224], 0x69
mov byte [ebp - 0x220], 2
mov byte [ebp - 0x21c], 0x63
mov byte [ebp - 0x218], 2
mov byte [ebp - 0x214], 0x65
mov byte [ebp - 0x210], 2
mov byte [ebp - 0x20c], 0x2e
mov byte [ebp - 0x208], 2
mov byte [ebp - 0x204], 0x73
mov byte [ebp - 0x200], 2
mov byte [ebp - 0x1fc], 0x6d
mov byte [ebp - 0x1f8], 2
mov byte [ebp - 0x1f4], 0x61
mov byte [ebp - 0x1f0], 2
mov byte [ebp - 0x1ec], 0x72
mov byte [ebp - 0x1e8], 2
mov byte [ebp - 0x1e4], 0x74
mov byte [ebp - 0x1e0], 2
mov byte [ebp - 0x1dc], 0x70
mov byte [ebp - 0x1d8], 2
mov byte [ebp - 0x1d4], 0x63
mov byte [ebp - 0x1d0], 2
mov byte [ebp - 0x1cc], 0x75
mov byte [ebp - 0x1c8], 2
mov byte [ebp - 0x1c4], 0x70
mov byte [ebp - 0x1c0], 2
mov byte [ebp - 0x1bc], 0x64
mov byte [ebp - 0x1b8], 2
mov byte [ebp - 0x1b4], 0x61
mov byte [ebp - 0x1b0], 2
mov byte [ebp - 0x1ac], 0x74
mov byte [ebp - 0x1a8], 2
mov byte [ebp - 0x1a4], 0x65
mov byte [ebp - 0x1a0], 2
mov byte [ebp - 0x19c], 0x2e
mov byte [ebp - 0x198], 2
mov byte [ebp - 0x194], 0x63
mov byte [ebp - 0x190], 2
mov byte [ebp - 0x18c], 0x6f
mov byte [ebp - 0x188], 2
mov byte [ebp - 0x184], 0x6d
mov byte [ebp - 0x180], 2
mov byte [ebp - 0x17c], 0x2f
mov byte [ebp - 0x178], 2
mov byte [ebp - 0x174], 0x72
mov byte [ebp - 0x170], 2
mov byte [ebp - 0x16c], 0x70
mov byte [ebp - 0x168], 2
mov byte [ebp - 0x164], 0x63
mov byte [ebp - 0x160], 2
mov byte [ebp - 0x15c], 0x2f
mov byte [ebp - 0x158], 2
mov byte [ebp - 0x154], 0x73
mov byte [ebp - 0x150], 2
mov byte [ebp - 0x14c], 0x65
mov byte [ebp - 0x148], 2
mov byte [ebp - 0x144], 0x6e
mov byte [ebp - 0x140], 2
mov byte [ebp - 0x13c], 0x64
mov byte [ebp - 0x138], 2
mov byte [ebp - 0x134], 0x73
mov byte [ebp - 0x130], 2
mov byte [ebp - 0x12c], 0x70
mov byte [ebp - 0x128], 2
mov byte [ebp - 0x124], 0x6d
mov byte [ebp - 0x120], 2
mov byte [ebp - 0x11c], 0x69
mov byte [ebp - 0x118], 2
mov byte [ebp - 0x114], 0x6e
mov byte [ebp - 0x110], 2
mov byte [ebp - 0x10c], 0x73
mov byte [ebp - 0x108], 2
mov byte [ebp - 0x104], 0x74
mov byte [ebp - 0x100], 2
mov byte [ebp - 0xfc], 0x61
mov byte [ebp - 0xf8], 2
mov byte [ebp - 0xf4], 0x6c
mov byte [ebp - 0xf0], 2
mov byte [ebp - 0xec], 0x6c
mov byte [ebp - 0xe8], 2
lea edx, [ebp - 0x27c]
mov ecx, 0x32
mov eax, 0x541790
call fcn.0040aa44
push dword [ebp - 0xe4]
push 0x541800
push dword [ebp - 8]
push 0x541814
push 0x541824
push 0x541830
push dword [ebp - 0xc]
lea eax, [ebp - 0x10]
mov edx, 7
call fcn.0040471c
mov dl, 1
mov eax, dword [0x41b914]
call fcn.0040350c
mov dword [ebp - 0x14], eax
xor eax, eax
push ebp
push 0x541681
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00518730
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x54168b
mov eax, dword [ebp - 0x14]
call fcn.0040353c
push 1
mov edx, 0x54171c
mov ecx, 0x541844
mov eax, 0x80000001
call fcn.00526fc4
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x54]
test al, al
je 0x5416bd
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x58]
mov eax, dword [ebp - 4]
call fcn.0040353c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5416fa
lea eax, [ebp - 0xe4]
call fcn.0040438c
lea eax, [ebp - 0x18]
call fcn.0040438c
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.004043b0
ret