Function at 0x40f62f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
sub esp, 0x114
lea ebp, [esp - 4]
mov eax, dword [0x47dad4]
xor eax, ebp
mov dword [ebp + 0x114], eax
push 0xd0
mov eax, 0x45f82a
call fcn.0044a6d8
xor ebx, ebx
push ebx
mov esi, ecx
push 0x164
push esi
mov dword [ebp - 0x18], esi
call fcn.0040f3b5
add esp, 0xc
lea ecx, [esi + 0x20]
mov dword [ebp - 4], ebx
mov byte [esi + 0x1c], bl
call fcn.004081f5
lea ecx, [esi + 0x3c]
call fcn.004081f5
lea ecx, [esi + 0x58]
call fcn.004081f5
lea ecx, [esi + 0x78]
mov byte [esi + 0x74], bl
mov byte [esi + 0x75], bl
call fcn.004081f5
push ebx
xor edi, edi
push 0x1388
inc edi
push edi
lea ecx, [esi + 0xa0]
mov byte [ebp - 4], 4
mov byte [esi + 0x94], bl
mov dword [esi + 0x98], 2
call fcn.0042bf50
push ebx
push 0x1388
push 2
lea ecx, [esi + 0x208]
mov byte [ebp - 4], 5
call fcn.0042bf50
push ebx
push ebx
push 3
lea ecx, [esi + 0x370]
mov byte [ebp - 4], 6
call fcn.0042bf50
push ebx
push ebx
push 4
lea ecx, [esi + 0x4d8]
mov byte [ebp - 4], 7
call fcn.0042bf50
lea ecx, [esi + 0x644]
call fcn.004081f5
lea ecx, [esi + 0x660]
mov byte [ebp - 4], 9
call fcn.0040bb40
lea ecx, [esi + 0x67c]
mov byte [ebp - 4], 0xa
call fcn.0040bb40
lea ecx, [esi + 0x698]
mov byte [ebp - 4], 0xb
call fcn.0040bb40
lea ecx, [esi + 0x6b4]
call fcn.004081f5
lea ecx, [esi + 0x6d0]
call fcn.004081f5
lea ecx, [esi + 0x6ec]
call fcn.004081f5
lea ecx, [esi + 0x708]
call fcn.004081f5
lea ecx, [esi + 0x724]
call fcn.004081f5
lea ecx, [esi + 0x740]
call fcn.004081f5
lea ecx, [esi + 0x75c]
call fcn.004081f5
lea ecx, [esi + 0x778]
call fcn.004081f5
lea ecx, [esi + 0x794]
call fcn.004081f5
lea ecx, [esi + 0x7b0]
call fcn.004081f5
lea ecx, [esi + 0x7cc]
call fcn.004081f5
lea ecx, [esi + 0x7e8]
call fcn.004081f5
lea ecx, [esi + 0x804]
mov byte [ebp - 4], 0x18
call fcn.0040bb40
lea ecx, [esi + 0x824]
mov byte [esi + 0x820], bl
call fcn.004081f5
lea ecx, [esi + 0x840]
call fcn.004081f5
lea ecx, [esi + 0x85c]
call fcn.004081f5
lea ecx, [esi + 0x878]
call fcn.004081f5
lea ecx, [esi + 0x894]
call fcn.004081f5
lea ecx, [esi + 0x8b8]
mov dword [esi + 0x8b0], ebx
mov dword [esi + 0x8b4], ebx
call fcn.004081f5
lea ecx, [esi + 0x8d4]
call fcn.004081f5
lea ecx, [esi + 0x8f0]
call fcn.004081f5
lea ecx, [esi + 0x910]
mov byte [esi + 0x90c], bl
call fcn.004081f5
lea ecx, [esi + 0x930]
mov dword [esi + 0x92c], ebx
call fcn.004081f5
lea ecx, [esi + 0x95c]
mov byte [ebp - 4], 0x23
mov dword [esi + 0x94c], 0x3e8
mov dword [esi + 0x950], ebx
mov dword [esi + 0x954], ebx
mov dword [esi + 0x958], ebx
call fcn.004355cc
lea ecx, [esi + 0x97c]
mov dword [esi + 0x978], ebx
call fcn.004081f5
lea ecx, [esi + 0x998]
mov byte [ebp - 4], 0x25
call fcn.0040bb40
lea ecx, [esi + 0x9b4]
mov byte [ebp - 4], 0x26
call fcn.0040e75c
lea ecx, [esi + 0xa10]
mov dword [esi + 0x9d8], ebx
mov dword [esi + 0x9dc], ebx
mov dword [esi + 0x9e0], ebx
mov dword [esi + 0x9e4], ebx
mov dword [esi + 0x9e8], ebx
mov dword [esi + 0x9ec], ebx
mov dword [esi + 0x9f0], ebx
mov dword [esi + 0x9f4], ebx
mov dword [esi + 0x9f8], ebx
mov dword [esi + 0x9fc], ebx
mov dword [esi + 0xa00], ebx
mov dword [esi + 0xa04], ebx
mov dword [esi + 0xa08], ebx
mov dword [esi + 0xa0c], ebx
call fcn.004081f5
lea ecx, [esi + 0xa2c]
call fcn.004081f5
lea ecx, [esi + 0xa50]
mov dword [esi + 0xa48], ebx
mov dword [esi + 0xa4c], ebx
call fcn.004081f5
push edi
push 2
lea ecx, [esi + 0xa6c]
mov byte [ebp - 4], 0x2a
call fcn.0040e6ce
lea ecx, [esi + 0xaec]
call fcn.004081f5
lea ecx, [esi + 0xb08]
call fcn.004081f5
lea ecx, [esi + 0xb24]
call fcn.004081f5
lea ecx, [esi + 0xb40]
call fcn.004081f5
lea ecx, [esi + 0xb5c]
call fcn.004081f5
lea ecx, [esi + 0xb7c]
mov dword [esi + 0xb78], ebx
call fcn.004081f5
lea ecx, [esi + 0xb98]
call fcn.004081f5
lea ecx, [esi + 0xbb4]
call fcn.004081f5
lea ecx, [esi + 0xbd0]
call fcn.004081f5
lea ecx, [esi + 0xbec]
call fcn.004081f5
push 0x114
lea eax, [ebp]
push ebx
mov byte [esi + 0xc09], 1
mov byte [esi + 0xc0a], 1
mov byte [esi + 0xc0b], bl
push eax
mov byte [ebp - 4], 0x35
mov byte [0x47f2f8], 1
call fcn.0044ab10
add esp, 0xc
lea eax, [ebp]
mov dword [ebp], 0x114
push eax
call dword [sym.imp.KERNEL32.DLL_GetVersionExW]
mov eax, dword [ebp + 4]
push ebx
push dword [ebp + 0xc]
mov dword [esi + 0x640], eax
lea eax, [ebp - 0xa4]
push eax
call fcn.0040f3b5
mov dword [ebp - 0x10], eax
push ebx
push dword [ebp + 8]
lea eax, [ebp - 0x6c]
push eax
mov byte [ebp - 4], 0x36
call fcn.0040f3b5
mov dword [ebp - 0x14], eax
push ebx
push dword [ebp + 4]
lea eax, [ebp - 0x50]
push eax
mov byte [ebp - 4], 0x37
call fcn.0040f3b5
push 0x46677c
push eax
lea eax, [ebp - 0x88]
push eax
mov byte [ebp - 4], 0x38
call fcn.00408aee
push dword [ebp - 0x14]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00408b35
push 0x46677c
push eax
lea eax, [ebp - 0xdc]
push eax
mov byte [ebp - 4], 0x3a
call fcn.00408aee
add esp, 0x48
push dword [ebp - 0x10]
mov byte [ebp - 4], 0x3b
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.00408b35
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esi + 0x644]
mov byte [ebp - 4], 0x3c
call fcn.00408577
push ebx
push edi
lea ecx, [ebp - 0xc0]
call fcn.00407efb
push ebx
push edi
lea ecx, [ebp - 0xdc]
call fcn.00407efb
push ebx
push edi
lea ecx, [ebp - 0x34]
call fcn.00407efb
push ebx
push edi
lea ecx, [ebp - 0x88]
call fcn.00407efb
push ebx
push edi
lea ecx, [ebp - 0x50]
call fcn.00407efb
push ebx
push edi
lea ecx, [ebp - 0x6c]
call fcn.00407efb
push ebx
push edi
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x35
call fcn.00407efb
call fcn.0040d4be
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x114]
xor ecx, ebp
call fcn.0044a6c9
add ebp, 0x118
leave
ret