Function at 0x415f30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10c
push edi
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0x80
mov byte [ebp - 0x108], 0x39
mov byte [ebp - 0x107], 0x42
mov byte [ebp - 0x106], 0x46
mov byte [ebp - 0x105], 0x44
mov byte [ebp - 0x104], 0x38
mov byte [ebp - 0x103], 0x45
mov byte [ebp - 0x102], 0x39
mov byte [ebp - 0x101], 0x32
mov byte [ebp - 0x100], 0x2d
mov byte [ebp - 0xff], 0x30
mov byte [ebp - 0xfe], 0x35
mov byte [ebp - 0xfd], 0x37
mov byte [ebp - 0xfc], 0x36
mov byte [ebp - 0xfb], 0x2d
mov byte [ebp - 0xfa], 0x34
mov byte [ebp - 0xf9], 0x39
mov byte [ebp - 0xf8], 0x61
mov byte [ebp - 0xf7], 0x31
mov byte [ebp - 0xf6], 0x2d
mov byte [ebp - 0xf5], 0x41
mov byte [ebp - 0xf4], 0x39
mov byte [ebp - 0xf3], 0x43
mov byte [ebp - 0xf2], 0x41
mov byte [ebp - 0xf1], 0x2d
mov byte [ebp - 0xf0], 0x36
mov byte [ebp - 0xef], 0x43
mov byte [ebp - 0xee], 0x34
mov byte [ebp - 0xed], 0x46
mov byte [ebp - 0xec], 0x42
mov byte [ebp - 0xeb], 0x31
mov byte [ebp - 0xea], 0x39
mov byte [ebp - 0xe9], 0x36
mov byte [ebp - 0xe8], 0x31
mov byte [ebp - 0xe7], 0x36
mov byte [ebp - 0xe6], 0x37
mov byte [ebp - 0xe5], 0x41
mov byte [ebp - 0xe4], 0
mov ecx, 0x16
xor eax, eax
lea edi, [ebp - 0xe3]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x88], 0x38
mov byte [ebp - 0x87], 0x37
mov byte [ebp - 0x86], 0x34
mov byte [ebp - 0x85], 0x44
mov byte [ebp - 0x84], 0x39
mov byte [ebp - 0x83], 0x38
mov byte [ebp - 0x82], 0x32
mov byte [ebp - 0x81], 0x32
mov byte [ebp - 0x80], 0x2d
mov byte [ebp - 0x7f], 0x43
mov byte [ebp - 0x7e], 0x39
mov byte [ebp - 0x7d], 0x31
mov byte [ebp - 0x7c], 0x35
mov byte [ebp - 0x7b], 0x2d
mov byte [ebp - 0x7a], 0x34
mov byte [ebp - 0x79], 0x33
mov byte [ebp - 0x78], 0x61
mov byte [ebp - 0x77], 0x35
mov byte [ebp - 0x76], 0x2d
mov byte [ebp - 0x75], 0x38
mov byte [ebp - 0x74], 0x33
mov byte [ebp - 0x73], 0x46
mov byte [ebp - 0x72], 0x35
mov byte [ebp - 0x71], 0x2d
mov byte [ebp - 0x70], 0x33
mov byte [ebp - 0x6f], 0x37
mov byte [ebp - 0x6e], 0x31
mov byte [ebp - 0x6d], 0x37
mov byte [ebp - 0x6c], 0x33
mov byte [ebp - 0x6b], 0x35
mov byte [ebp - 0x6a], 0x32
mov byte [ebp - 0x69], 0x39
mov byte [ebp - 0x68], 0x41
mov byte [ebp - 0x67], 0x35
mov byte [ebp - 0x66], 0x45
mov byte [ebp - 0x65], 0x35
mov byte [ebp - 0x64], 0
mov ecx, 0x16
xor eax, eax
lea edi, [ebp - 0x63]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
cmp dword [ebp + 8], 0
jne 0x416129
jmp 0x4162cf
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x108]
push ecx
push 0x453e14
push 0x80
lea edx, [ebp - 0x108]
push edx
call fcn.00416430
add esp, 0x14
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x88]
push ecx
push str._s__d
push 0x80
lea edx, [ebp - 0x88]
push edx
call fcn.00416430
add esp, 0x14
cmp dword [ebp + 0xc], 0
je 0x416213
lea eax, [ebp - 0x108]
push eax
push 8
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, dword [ebp - 0x10c]
mov dword [ecx + 8], eax
mov edx, dword [ebp - 0x10c]
cmp dword [edx + 8], 0
jne 0x4161ac
jmp 0x4162cd
push 0
push 0
push 0
push 0xf001f
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 4], 0
jne 0x4161e1
jmp 0x4162cb
lea ecx, [ebp - 0x88]
push ecx
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0xc], 0
jne 0x41620e
jmp 0x4162c9
jmp 0x41629b
lea ecx, [ebp - 0x108]
push ecx
push 0
push 6
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov edx, dword [ebp - 0x10c]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 8], 0
jne 0x41623e
jmp 0x4162c7
push 0
push 0
push 0
push 0xf001f
mov ecx, dword [ebp - 0x10c]
mov edx, dword [ecx + 8]
push edx
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, dword [ebp - 0x10c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x10c]
cmp dword [edx + 4], 0
jne 0x416270
jmp 0x4162c5
lea eax, [ebp - 0x88]
push eax
push 0
push 0x1f0003
call dword [sym.imp.KERNEL32.dll_OpenEventA]
mov ecx, dword [ebp - 0x10c]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x10c]
cmp dword [edx + 0xc], 0
jne 0x41629b
jmp 0x4162c3
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp + 0xc]
mov dword [eax], ecx
mov dword [ebp - 4], 1
cmp dword [ebp - 4], 0
jne 0x4162be
mov ecx, dword [ebp - 0x10c]
call fcn.004162d8
mov eax, dword [ebp - 4]
jmp 0x4162d1
jmp 0x4162ad
jmp 0x4162ad
jmp 0x4162ad
jmp 0x4162ad
jmp 0x4162ad
jmp 0x4162ad
jmp 0x4162ad
pop edi
mov esp, ebp
pop ebp
ret 8