Function at 0x41c68b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x344
mov eax, 0x4638a4
call fcn.0043f4b0
mov edi, ecx
lea ecx, [edi + 4]
lea eax, [ebp - 0x2b0]
push eax
mov eax, dword [ecx]
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x348], ecx
call dword [eax + 0x2c]
mov ecx, eax
call fcn.00409f77
xor ecx, ecx
inc ecx
mov byte [ebp - 4], cl
push ebx
lea ecx, [ebp - 0x1c0]
push ecx
mov ecx, eax
call fcn.0040ad48
mov esi, eax
lea ecx, [edi + 4]
lea eax, [ebp - 0x310]
mov edx, dword [ecx]
push eax
mov byte [ebp - 4], 2
call dword [edx + 0x2c]
mov ecx, eax
call fcn.0040c743
push esi
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.004087bf
push ebx
mov esi, 0x46be90
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 4
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], 0x46c540
call fcn.004064d5
lea ecx, [ebp - 0x40]
call fcn.00401500
lea ecx, [ebp - 0x310]
call fcn.00401500
lea ecx, [ebp - 0x1c0]
call fcn.00401500
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 4], 9
call fcn.00401500
sub esp, 0x30
mov ecx, esp
mov dword [ebp - 0x350], esp
push ebx
lea eax, [ebp - 0x70]
push eax
mov dword [ecx], esi
mov dword [ecx + 0x28], 0x46c540
call fcn.004064d5
lea esi, [edi + 4]
sub esp, 0x30
mov eax, dword [esi]
push esp
mov ecx, esi
mov byte [ebp - 4], 0xa
call dword [eax + 0x2c]
mov ecx, eax
call fcn.00409f77
mov byte [ebp - 4], 9
mov ecx, edi
call fcn.00414463
test eax, eax
jns 0x41c798
mov esi, 0xffffec67
jmp 0x41ca13
lea eax, [ebp - 0x160]
push eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2c]
mov ecx, eax
call fcn.0040c743
lea ecx, [ebp - 0x250]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.004075b7
mov edi, eax
mov edx, dword [esi]
lea eax, [ebp - 0x340]
push eax
mov ecx, esi
mov byte [ebp - 4], 0xc
call dword [edx + 0x2c]
mov ecx, eax
call fcn.00409f77
push ebx
push ebx
lea ecx, [ebp - 0x2e0]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.0040760e
lea ecx, [ebp - 0x280]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.004075b7
mov esi, eax
push 0x46a79c
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x1f0]
push eax
mov byte [ebp - 4], 0xf
call fcn.00408209
lea ecx, [ebp + 8]
push ecx
push eax
lea eax, [ebp - 0x190]
push eax
mov byte [ebp - 4], 0x10
call fcn.00410448
push str.__media_path:_
push eax
lea eax, [ebp - 0x130]
push eax
mov byte [ebp - 4], 0x11
call fcn.00408209
push esi
push eax
lea eax, [ebp - 0x100]
push eax
mov byte [ebp - 4], 0x12
call fcn.00410448
push str.___tempdisk1folder:_
push eax
lea eax, [ebp - 0x220]
push eax
mov byte [ebp - 4], 0x13
call fcn.00408209
push edi
push eax
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x14
push eax
call fcn.00410448
add esp, 0x48
push 0x46aea8
push eax
lea eax, [ebp - 0xa0]
push eax
mov byte [ebp - 4], 0x15
call fcn.00408209
add esp, 0xc
lea ecx, [ebp - 0xd0]
call fcn.00401500
lea ecx, [ebp - 0x220]
call fcn.00401500
lea ecx, [ebp - 0x100]
call fcn.00401500
lea ecx, [ebp - 0x130]
call fcn.00401500
lea ecx, [ebp - 0x190]
call fcn.00401500
lea ecx, [ebp - 0x1f0]
call fcn.00401500
lea ecx, [ebp - 0x280]
call fcn.00401500
lea ecx, [ebp - 0x2e0]
call fcn.00401500
lea ecx, [ebp - 0x340]
call fcn.00401500
lea ecx, [ebp - 0x250]
call fcn.00401500
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x21
call fcn.00401500
mov edi, dword [ebp - 0x348]
mov ecx, edi
mov eax, dword [edi]
call dword [eax + 0x2c]
cmp byte [eax + 0x11], 0
push 1
pop eax
mov esi, ebx
cmovne esi, eax
push ebx
lea eax, [ebp - 0x341]
push eax
push str.open
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], 0x46be90
mov dword [ebp - 0x18], 0x46c540
call fcn.004065c0
lea eax, [ebp - 0x40]
push eax
push ebx
xor eax, eax
inc eax
push eax
push 0xffffffffffffffff
push esi
sub esp, 0x30
mov ecx, esp
mov dword [ebp - 0x34c], esp
push eax
lea eax, [ebp - 0x341]
push eax
mov esi, 0x476040
push esi
mov byte [ebp - 4], 0x22
call fcn.004067ae
sub esp, 0x30
mov ecx, esp
mov dword [ebp - 0x350], esp
push ebx
lea eax, [ebp - 0xa0]
push eax
mov byte [ebp - 4], 0x23
mov dword [ecx], 0x46be90
mov dword [ecx + 0x28], 0x46c540
call fcn.004064d5
sub esp, 0x30
xor eax, eax
mov ecx, esp
inc eax
push eax
lea eax, [ebp - 0x341]
push eax
push esi
mov byte [ebp - 4], 0x24
call fcn.004067ae
mov byte [ebp - 4], 0x22
call fcn.00434bb8
add esp, 0xa4
test eax, eax
lea ecx, [ebp - 0x40]
setne bl
mov byte [ebp - 4], 0x21
call fcn.00401500
test bl, bl
je 0x41c9f1
mov esi, 0xffffec67
jmp 0x41ca08
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x2c]
cmp byte [eax + 0x11], 0
je 0x41ca06
mov esi, dword [0x485718]
jmp 0x41ca08
xor esi, esi
lea ecx, [ebp - 0xa0]
call fcn.00401500
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp + 8]
call fcn.00401500
mov eax, esi
call fcn.0043f45f
ret 0x30