Function at 0x414e0b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1b8
mov eax, 0x455290
call fcn.004421bd
mov edi, ecx
mov dword [ebp - 0x1b0], edi
xor ebx, ebx
push 8
mov dword [ebp - 4], ebx
call fcn.00441c95
mov esi, eax
pop ecx
cmp esi, ebx
je 0x414e49
push 0x46e608
mov ecx, esi
call fcn.0041245e
mov dword [ebp - 0x198], esi
jmp 0x414e4f
mov dword [ebp - 0x198], ebx
mov esi, dword [ebp - 0x198]
lea eax, [ebp + 8]
push eax
mov ecx, esi
call fcn.0041304e
mov eax, dword [ebp + 0xc]
push dword [ebp - 0x198]
mov dword [esi + 4], eax
mov esi, dword [edi + 0x18]
lea eax, [ebp - 0x19c]
lea ecx, [edi + 0x14]
push eax
call fcn.0041313c
cmp dword [eax], esi
je 0x414e9a
xor ebx, ebx
inc ebx
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.004115db
mov eax, ebx
call fcn.00442240
ret 0xc
push 0x46e608
lea ecx, [ebp - 0x1b4]
call fcn.0041245e
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push dword [ebp + 0x10]
lea eax, [ebp - 0x1b4]
push dword [ebp + 0xc]
push dword [ebp + 8]
push str.http:__bizhi.baidu.com_wallpaper_getList_type_spage_dcount_dgC_0_D_100825PBN40317ERB89E_M_206A8A1263C4_V_DE5571AC_T_20140714225619485tnbdwpversion2.0.0.1160_t_d
push eax
call fcn.00413128
mov esi, dword [ebp - 0x1b4]
add esp, 0x14
add esi, 0xfffffff0
mov dword [ebp - 0x19c], esp
mov edi, esp
push esi
mov dword [ebp - 0x19c], esi
call fcn.004124f0
add eax, 0x10
mov dword [edi], eax
pop ecx
lea eax, [ebp - 0x64]
push eax
call fcn.00413672
pop ecx
pop ecx
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 2
call fcn.00404682
push ebx
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 3
call fcn.00405f11
cmp dword [ebp - 0x50], 0x10
mov eax, dword [ebp - 0x64]
mov byte [ebp - 4], 4
jae 0x414f2f
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00403a00
push ebx
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 5
call fcn.00405444
neg al
sbb al, al
xor edi, edi
push ebx
inc al
inc edi
push edi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x191], al
mov byte [ebp - 4], 4
call fcn.00402d7c
cmp byte [ebp - 0x191], bl
je 0x414fab
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 3
call fcn.00405f96
lea ecx, [ebp - 0x18c]
call fcn.00404965
push ebx
push edi
lea ecx, [ebp - 0x64]
call fcn.00402d7c
mov ecx, esi
call fcn.004115db
or ebx, 0xffffffff
jmp 0x414e85
lea eax, [ebp - 0x80]
push eax
push str.errormsg
lea ecx, [ebp - 0x1ac]
call fcn.004068ec
mov ecx, eax
call fcn.00405fe9
push str.errorno
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 6
call fcn.004068ec
mov ecx, eax
call fcn.00405605
cmp eax, ebx
je 0x414ff1
push ebx
push edi
lea ecx, [ebp - 0x80]
call fcn.00402d7c
jmp 0x414f78
mov esi, str.totalPage
push esi
lea ecx, [ebp - 0x1ac]
call fcn.004068ec
mov ecx, eax
call fcn.00405600
lea ecx, [ebp - 0x1ac]
cmp eax, edi
jne 0x415028
push esi
call fcn.004068ec
mov ecx, eax
call fcn.00405605
mov dword [ebp - 0x190], eax
jmp 0x41505c
lea eax, [ebp - 0x2c]
push eax
push esi
call fcn.004068ec
mov ecx, eax
call fcn.00405fe9
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x415045
lea eax, [ebp - 0x2c]
push eax
call fcn.00445440
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x190], eax
call fcn.00402d7c
push 8
call fcn.00441c95
mov esi, eax
pop ecx
cmp esi, ebx
je 0x415078
push 0x46e608
mov ecx, esi
call fcn.0041245e
jmp 0x41507a
xor esi, esi
lea eax, [ebp + 8]
push eax
mov ecx, esi
call fcn.0041304e
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x1b0]
mov dword [esi + 4], eax
lea eax, [ebp + 8]
push eax
add ecx, 4
call fcn.0041443e
mov ecx, eax
push esi
mov dword [ebp - 0x190], ecx
call fcn.0041304e
mov eax, dword [esi + 4]
mov ecx, dword [ebp - 0x190]
push ebx
push esi
mov esi, dword [ebp - 0x1b0]
push 0x464
mov dword [ecx + 4], eax
push dword [esi]
call dword [sym.imp.USER32.dll_PostMessageW]
push str.page
lea ecx, [ebp - 0x1ac]
call fcn.004068ec
mov ecx, eax
call fcn.00405605
push str.list
lea ecx, [ebp - 0x1ac]
call fcn.004068ec
push eax
lea ecx, [ebp - 0x1c4]
call fcn.0040660a
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 7
mov dword [ebp - 0x190], ebx
call fcn.00405e91
test eax, eax
je 0x4152a6
push dword [ebp - 0x190]
lea ecx, [ebp - 0x1c4]
call fcn.00406737
push eax
lea ecx, [ebp - 0x20]
call fcn.0040660a
lea ecx, [ebp - 0x10c]
call fcn.00412de9
lea eax, [ebp - 0x48]
push eax
push str.flag
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 9
call fcn.004068ec
mov ecx, eax
call fcn.00405fe9
push eax
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0xa
call fcn.00403a5e
push ebx
push edi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 9
call fcn.00402d7c
lea eax, [ebp - 0x48]
push eax
push str.flag_desc
lea ecx, [ebp - 0x20]
call fcn.004068ec
mov ecx, eax
call fcn.00405fe9
push eax
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0xb
call fcn.00403a5e
push ebx
push edi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 9
call fcn.00402d7c
lea eax, [ebp - 0x48]
push eax
push 0x45b388
lea ecx, [ebp - 0x20]
call fcn.004068ec
mov ecx, eax
call fcn.00405fe9
push eax
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0xc
call fcn.00403a5e
push ebx
push edi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 9
call fcn.00402d7c
lea eax, [ebp - 0x48]
push eax
push str.thumb_mid
lea ecx, [ebp - 0x20]
call fcn.004068ec
mov ecx, eax
call fcn.00405fe9
push eax
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xd
call fcn.00403a5e
push ebx
push edi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 9
call fcn.00402d7c
lea eax, [ebp - 0x48]
push eax
push str.thumbnail
lea ecx, [ebp - 0x20]
call fcn.004068ec
mov ecx, eax
call fcn.00405fe9
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0xe
call fcn.00403a5e
push ebx
push edi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 9
call fcn.00402d7c
lea eax, [ebp - 0x10c]
push eax
push dword [ebp - 0x198]
lea ecx, [esi + 0x14]
call fcn.00414d7b
mov ecx, eax
call fcn.0041456f
lea ecx, [ebp - 0x10c]
call fcn.00412e25
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 7
call fcn.00405f96
inc dword [ebp - 0x190]
lea ecx, [ebp - 0x1c4]
call fcn.00405e91
cmp dword [ebp - 0x190], eax
jb 0x41511f
push ebx
push dword [ebp - 0x198]
push 0x465
push dword [esi]
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 6
call fcn.00405f96
push ebx
push edi
lea ecx, [ebp - 0x80]
call fcn.00402d7c
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 3
call fcn.00405f96
lea ecx, [ebp - 0x18c]
call fcn.00404965
push ebx
push edi
lea ecx, [ebp - 0x64]
call fcn.00402d7c
mov ecx, dword [ebp - 0x19c]
call fcn.004115db
jmp 0x414e85