Function at 0x414d90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
push 0xffffffffffffffff
push 0x4df22d
mov eax, dword fs:[0]
push eax
sub esp, 0xa4
push ebx
push ebp
push esi
push edi
mov eax, dword [0x806d00]
xor eax, esp
push eax
lea eax, [esp + 0xb8]
mov dword fs:[0], eax
mov ebp, ecx
mov eax, dword [ebp + 0x14]
add eax, 0xfffffff6
cmp eax, 0x2d
jl 0x414de1
push eax
mov dword [ebp + 0x14], eax
call fcn.004d8b8c
fldz
fstp qword [esp + 0x7c]
jmp 0x414e17
fld qword [0x6bfa18]
push 0x55
fstp qword [esp + 0x80]
mov dword [ebp + 0x14], 0x55
call fcn.004d8b8c
lea eax, [ebp + 0x24]
push eax
lea ecx, [ebp + 0x20]
call fcn.0040b300
mov ecx, ebp
call fcn.004148d0
test al, al
je 0x415362
xor esi, esi
lea edi, [ebp + 0x20]
mov ecx, edi
mov dword [esp + 0x30], esi
mov dword [esp + 0x2c], esi
call dword [0x6abc24]
test eax, eax
jle 0x4152fc
lea ebx, [esi + 1]
jmp 0x414e44
mov esi, dword [esp + 0x2c]
push esi
mov ecx, edi
call dword [0x6abbf8]
push eax
lea ecx, [esp + 0x2c]
call dword [0x6abc10]
push esi
lea ecx, [ebp + 0x24]
mov dword [esp + 0xc4], 0
call dword [0x6abbf8]
push eax
lea ecx, [esp + 0x48]
call dword [0x6abc10]
mov byte [esp + 0xc0], bl
call dword [0x6abb44]
push ecx
mov eax, esp
mov dword [esp + 0x50], esp
mov dword [eax], 0
call dword [0x6abb48]
mov ecx, dword [ebp + 0xb4]
add esp, 4
cmp byte [ecx + 0x25], 0
jne 0x41533b
lea edx, [esp + 0x48]
push edx
lea ecx, [esp + 0x2c]
call dword [0x6aba64]
mov ecx, eax
mov byte [esp + 0xc0], 2
call dword [0x6aba68]
push eax
call fcn.004d8b86
lea ecx, [esp + 0x48]
mov esi, eax
mov byte [esp + 0xc0], bl
call dword [0x6aba6c]
test esi, esi
je 0x4152b8
push esi
call fcn.004d8b9e
fstp qword [esp + 0x74]
push esi
call fcn.004d8b98
fldz
fcomp qword [esp + 0x7c]
fnstsw ax
test ah, 5
jp 0x41506b
fld qword [esp + 0x74]
fsub qword [ebp + 0x18]
fld qword [0x6bfa48]
fcom st(1)
fnstsw ax
test ah, 5
jp 0x41504f
fxch st(2)
fsub qword [ebp + 0x18]
fcom st(2)
fnstsw ax
fstp st(2)
test ah, 0x41
jne 0x41505e
fst qword [esp + 0x74]
sub esp, 0x10
fxch st(1)
fstp qword [esp + 8]
fstp qword [esp]
push esi
call fcn.004d8b92
mov edi, eax
test edi, edi
je 0x415171
push esi
call fcn.004d8b80
mov dword [esp + 0x4c], eax
cmp eax, ebx
je 0x414fd2
push str..jpg
lea ecx, [esp + 0x3c]
call dword [0x6abbc4]
push 0x6b8990
lea ecx, [esp + 0x38]
mov byte [esp + 0xc4], 3
call dword [0x6abbc4]
push ebx
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x34]
mov byte [esp + 0xcc], 4
call dword [0x6aba7c]
lea ecx, [esp + 0x34]
mov byte [esp + 0xc0], 3
call dword [0x6abc18]
lea ecx, [esp + 0x38]
mov byte [esp + 0xc0], bl
call dword [0x6abc18]
mov eax, dword [esp + 0x4c]
cmp eax, 0x20
jne 0x414ff3
push 0x18
push 2
push edi
call fcn.004d8b7a
mov dword [esp + 0x4c], eax
test eax, eax
je 0x414ff3
push edi
call fcn.004d8b74
mov edi, dword [esp + 0x4c]
mov eax, dword [esp + 0x2c]
lea edx, [esp + 0x28]
push edx
push eax
lea ecx, [ebp + 0x20]
call fcn.0040c100
mov ecx, eax
call dword [0x6abbac]
lea ecx, [esp + 0x50]
push ecx
lea ecx, [esp + 0x2c]
call dword [0x6aba64]
mov ecx, eax
mov byte [esp + 0xc0], 5
call dword [0x6aba68]
push eax
push edi
call fcn.004d8b6e
lea ecx, [esp + 0x50]
mov byte [esp + 0xc0], bl
call dword [0x6aba6c]
push edi
call fcn.004d8b74
jmp 0x415171
add dword [esp + 0x30], ebx
fstp st(2)
fstp st(0)
fstp st(0)
jmp 0x415171
add dword [esp + 0x30], ebx
fstp st(1)
fstp st(0)
jmp 0x415171
push esi
fstp st(0)
call fcn.004d8b80
mov dword [esp + 0x4c], eax
cmp eax, ebx
je 0x4150e5
push str..jpg
lea ecx, [esp + 0x44]
call dword [0x6abbc4]
push 0x6b8990
lea ecx, [esp + 0x40]
mov byte [esp + 0xc4], 6
call dword [0x6abbc4]
push ebx
lea edx, [esp + 0x44]
push edx
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0xcc], 7
call dword [0x6aba7c]
lea ecx, [esp + 0x3c]
mov byte [esp + 0xc0], 6
call dword [0x6abc18]
lea ecx, [esp + 0x40]
mov byte [esp + 0xc0], bl
call dword [0x6abc18]
mov eax, dword [esp + 0x4c]
cmp eax, 0x20
jne 0x415106
push 0x18
push 2
push esi
call fcn.004d8b7a
mov dword [esp + 0x4c], eax
test eax, eax
je 0x415106
push esi
call fcn.004d8b74
mov esi, dword [esp + 0x4c]
mov ecx, dword [edi]
push ebx
call dword [0x6abbe0]
test al, al
je 0x415120
mov ecx, dword [edi]
mov edx, dword [ecx + 4]
push edx
mov ecx, edi
call fcn.00401480
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0x28]
push eax
push ecx
mov ecx, edi
call dword [0x6abbf8]
mov ecx, eax
call dword [0x6abbac]
lea edx, [esp + 0x54]
push edx
lea ecx, [esp + 0x2c]
call dword [0x6aba64]
mov ecx, eax
mov byte [esp + 0xc0], 8
call dword [0x6aba68]
push eax
push esi
call fcn.004d8b6e
lea ecx, [esp + 0x54]
mov byte [esp + 0xc0], bl
call dword [0x6aba6c]
push esi
call fcn.004d8b74
mov byte [esp + 0x58], 0x20
mov eax, dword [esp + 0x58]
push eax
lea ecx, [esp + 0x2a]
call dword [0x6abb70]
mov byte [esp + 0x5c], 0x20
mov ecx, dword [esp + 0x5c]
push ecx
lea ecx, [esp + 0x28]
call dword [0x6abb70]
push str._DPI:__1_JPEG:__2
lea ecx, [esp + 0x74]
call dword [0x6abbc4]
fld qword [esp + 0x74]
lea edx, [esp + 0x24]
push edx
push 0xffffffffffffffff
push 0x67
push 0
sub esp, 8
lea ecx, [esp + 0x84]
fstp qword [esp]
push ecx
mov ecx, eax
mov byte [esp + 0xdc], 9
call dword [0x6ab9e8]
mov ecx, dword [ebp + 0x14]
lea edx, [esp + 0x26]
push edx
push 0xa
push 0
push ecx
lea edx, [esp + 0x78]
push edx
mov ecx, eax
mov byte [esp + 0xd4], 0xa
call dword [0x6abafc]
mov esi, eax
push 0
lea eax, [esp + 0x68]
push 0x6bfa20
push eax
mov byte [esp + 0xcc], 0xb
call fcn.0040cd10
push esi
push eax
lea ecx, [esp + 0x74]
push ecx
mov byte [esp + 0xd8], 0xc
call fcn.00401010
add esp, 0x18
mov ecx, dword [ebp + 0xb4]
push eax
mov byte [esp + 0xc4], 0xd
call fcn.00485e20
lea ecx, [esp + 0x60]
mov byte [esp + 0xc0], 0xc
call dword [0x6abc18]
lea ecx, [esp + 0x64]
mov byte [esp + 0xc0], 0xb
call dword [0x6abc18]
lea ecx, [esp + 0x68]
mov byte [esp + 0xc0], 0xa
call dword [0x6abc18]
lea ecx, [esp + 0x6c]
mov byte [esp + 0xc0], 9
call dword [0x6abc18]
lea ecx, [esp + 0x70]
mov byte [esp + 0xc0], bl
call dword [0x6abc18]
call dword [0x6abb44]
push ecx
mov dword [esp + 0x50], esp
mov eax, esp
mov dword [eax], 0
call dword [0x6abb48]
add esp, 4
lea ecx, [esp + 0x44]
mov byte [esp + 0xc0], 0
call dword [0x6abc18]
lea ecx, [esp + 0x28]
mov dword [esp + 0xc0], 0xffffffff
call dword [0x6abc18]
mov esi, dword [esp + 0x2c]
lea edi, [ebp + 0x20]
add esi, ebx
mov ecx, edi
mov dword [esp + 0x2c], esi
call dword [0x6abc24]
cmp esi, eax
jl 0x414e40
fldz
fcomp qword [esp + 0x7c]
fnstsw ax
test ah, 5
jp 0x415315
fld qword [ebp + 0x18]
fadd qword [0x6bfa18]
fstp qword [ebp + 0x18]
mov ecx, edi
call dword [0x6abc24]
cmp dword [esp + 0x30], eax
setne al
mov ecx, dword [esp + 0xb8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [esp + 0x44]
mov byte [esp + 0xc0], 0
call dword [0x6abc18]
lea ecx, [esp + 0x28]
mov dword [esp + 0xc0], 0xffffffff
call dword [0x6abc18]
xor al, al
mov ecx, dword [esp + 0xb8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret