Function at 0x406180
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x589323
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x5f01b4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov dword [ebp - 4], 0x3f
mov eax, dword [edi + 0x1a40]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4061d2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [edi + 0x19c8]
call fcn.0046febb
mov esi, dword [edi + 0x19b4]
xor ebx, ebx
cmp esi, ebx
je 0x40621d
mov dword [ebp - 0x10], esi
mov byte [ebp - 4], 0x40
mov ecx, dword [esi]
cmp ecx, ebx
je 0x406201
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push 1
call eax
mov dword [esi], ebx
mov byte [ebp - 4], 0x3e
mov ecx, dword [esi]
cmp ecx, ebx
je 0x406214
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push 1
call eax
push esi
call fcn.0046acae
add esp, 4
mov byte [ebp - 4], 0x3d
mov eax, dword [edi + 0x199c]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406243
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x3c
mov eax, dword [edi + 0x1998]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406269
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x3b
mov eax, dword [edi + 0x1994]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40628f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x3a
mov eax, dword [edi + 0x1990]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4062b5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [edi + 0x190c]
mov byte [ebp - 4], 0x39
call fcn.0046febb
mov byte [ebp - 4], 0x38
mov eax, dword [edi + 0x1900]
cmp eax, ebx
je 0x4062da
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [edi + 0x18a8]
mov dword [edi + 0x18b8], ebx
cmp eax, ebx
je 0x4062f3
push eax
call fcn.0046acae
add esp, 4
mov dword [edi + 0x18a8], ebx
mov dword [edi + 0x18ac], ebx
mov dword [edi + 0x18b0], ebx
mov byte [ebp - 4], 0x36
mov eax, dword [edi + 0x1898]
cmp eax, ebx
je 0x406333
mov ecx, dword [ebp + 8]
mov ebx, dword [edi + 0x189c]
push ecx
call fcn.00408210
mov eax, dword [edi + 0x1898]
push eax
call fcn.0046acae
add esp, 8
xor ebx, ebx
mov dword [edi + 0x1898], ebx
mov dword [edi + 0x189c], ebx
mov dword [edi + 0x18a0], ebx
mov byte [ebp - 4], 0x35
mov eax, dword [edi + 0x1888]
cmp eax, ebx
je 0x406373
mov edx, dword [ebp + 8]
mov ebx, dword [edi + 0x188c]
push edx
call fcn.00408210
mov eax, dword [edi + 0x1888]
push eax
call fcn.0046acae
add esp, 8
xor ebx, ebx
lea ecx, [edi + 0x1814]
mov dword [edi + 0x1888], ebx
mov dword [edi + 0x188c], ebx
mov dword [edi + 0x1890], ebx
mov byte [ebp - 4], 0x34
call fcn.0046fd05
lea ecx, [edi + 0x16fc]
mov byte [ebp - 4], 0x33
mov dword [ecx], vtable.CSupplyInfoBar.0
call fcn.0046fd05
lea ecx, [edi + 0x15e4]
mov byte [ebp - 4], 0x32
mov dword [ecx], vtable.CSupplyInfoBar.0
call fcn.0046fd05
lea ecx, [edi + 0x14cc]
mov byte [ebp - 4], 0x31
mov dword [ecx], vtable.CSupplyInfoBar.0
call fcn.0046fd05
lea ecx, [edi + 0x13b4]
mov byte [ebp - 4], 0x30
mov dword [ecx], vtable.CSupplyInfoBar.0
call fcn.0046fd05
lea ecx, [edi + 0x129c]
mov byte [ebp - 4], 0x2f
mov dword [ecx], vtable.CSupplyInfoBar.0
call fcn.0046fd05
lea ecx, [edi + 0x1184]
mov byte [ebp - 4], 0x2e
mov dword [ecx], vtable.CSupplyInfoBar.0
call fcn.0046fd05
lea ecx, [edi + 0x106c]
mov byte [ebp - 4], 0x2d
mov dword [ecx], vtable.CSupplyInfoBar.0
call fcn.0046fd05
lea ecx, [edi + 0xf54]
mov byte [ebp - 4], 0x2c
mov dword [ecx], vtable.CSupplyInfoBar.0
call fcn.0046fd05
lea ecx, [edi + 0xe3c]
mov byte [ebp - 4], 0x2b
mov dword [ecx], vtable.CSupplyInfoBar.0
call fcn.0046fd05
lea ecx, [edi + 0xd24]
mov byte [ebp - 4], 0x2a
mov dword [ecx], vtable.CSupplyInfoBar.0
call fcn.0046fd05
lea ecx, [edi + 0xc0c]
mov byte [ebp - 4], 0x29
mov dword [ecx], vtable.CSupplyInfoBar.0
call fcn.0046fd05
lea ecx, [edi + 0xaf4]
mov byte [ebp - 4], 0x28
mov dword [ecx], vtable.CSupplyInfoBar.0
call fcn.0046fd05
lea ecx, [edi + 0x9dc]
mov byte [ebp - 4], 0x27
mov dword [ecx], vtable.CSupplyInfoBar.0
call fcn.0046fd05
mov eax, dword [edi + 0x9b4]
mov dword [edi + 0x9b0], 0x5c4580
cmp eax, ebx
je 0x4064de
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [edi + 0x9b4], ebx
mov dword [edi + 0x9b8], ebx
mov dword [edi + 0x9bc], ebx
mov dword [edi + 0x9c0], ebx
mov dword [edi + 0x9c4], ebx
lea esi, [edi + 0x710]
mov dword [ebp - 0x10], esi
mov dword [esi], vtable.CWebBrowser.0
mov byte [ebp - 4], 0x41
mov eax, dword [esi + 0x298]
cmp eax, ebx
je 0x406507
mov eax, dword [eax + 0x2c]
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea ecx, [esi + 0x98]
call fcn.004026e0
mov eax, dword [esi + 0x94]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406534
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, esi
mov byte [ebp - 4], 0x25
call fcn.0046f1ab
lea esi, [edi + 0x5f8]
mov dword [ebp - 0x10], esi
mov dword [esi], vtable.CSuppliesPicture.0
lea ecx, [esi + 0x74]
mov byte [ebp - 4], 0x42
mov dword [ecx], vtable.CBitmap.0
call fcn.00408490
mov ecx, esi
mov byte [ebp - 4], 0x24
call fcn.0046fd05
lea esi, [edi + 0x5dc]
mov byte [ebp - 4], 0x23
call fcn.004077d0
mov byte [ebp - 4], 0x22
mov eax, dword [edi + 0x5cc]
mov dword [edi + 0x5c8], 0x5a514c
cmp eax, ebx
je 0x40659b
push eax
call fcn.0046acae
add esp, 4
lea esi, [edi + 0x5b0]
mov byte [ebp - 4], 0x21
call fcn.004076b0
mov byte [ebp - 4], 0x20
mov eax, dword [edi + 0x5ac]
sub eax, 0x10
mov dword [edi + 0x5a4], 0x5c139c
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4065da
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [edi + 0x5a8]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4065fc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [edi + 0x57c]
mov byte [ebp - 4], 0x1f
mov dword [ecx], vtable.CMenu.0
call fcn.0047171a
lea ecx, [edi + 0x574]
mov byte [ebp - 4], 0x1e
mov dword [ecx], vtable.CMenu.0
call fcn.0047171a
lea ecx, [edi + 0x56c]
mov byte [ebp - 4], 0x1d
mov dword [ecx], vtable.CMenu.0
call fcn.0047171a
mov byte [ebp - 4], 0x1c
mov eax, dword [edi + 0x564]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406661
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x1b
mov eax, dword [edi + 0x560]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406687
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x1a
mov eax, dword [edi + 0x55c]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4066ad
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x19
mov eax, dword [edi + 0x558]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4066d3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [edi + 0x550]
mov byte [ebp - 4], 0x18
mov dword [ecx], vtable.CFont.0
call fcn.00408490
lea ecx, [edi + 0x548]
mov byte [ebp - 4], 0x17
mov dword [ecx], vtable.CFont.0
call fcn.00408490
mov byte [ebp - 4], 0x16
mov eax, dword [edi + 0x478]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406723
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [edi + 0x3f8]
mov byte [ebp - 4], 0x15
call fcn.0046fd05
lea ecx, [edi + 0x384]
mov byte [ebp - 4], 0x14
call fcn.0046fd05
lea ecx, [edi + 0x310]
mov byte [ebp - 4], 0x13
call fcn.0046fd05
mov byte [ebp - 4], 0x12
mov eax, dword [edi + 0x30c]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406776
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x11
mov eax, dword [edi + 0x308]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40679c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x10
mov eax, dword [edi + 0x304]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4067c2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0xf
mov eax, dword [edi + 0x300]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4067e8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0xe
mov eax, dword [edi + 0x2fc]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40680e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0xd
mov eax, dword [edi + 0x2f8]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406834
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0xc
mov eax, dword [edi + 0x2f4]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40685a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0xb
mov eax, dword [edi + 0x2f0]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406880
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0xa
mov eax, dword [edi + 0x2ec]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4068a6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 9
mov eax, dword [edi + 0x2e8]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4068cc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 8
mov eax, dword [edi + 0x2e4]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4068f2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 7
mov eax, dword [edi + 0x2e0]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406918
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 6
mov eax, dword [edi + 0x2dc]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40693e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 5
mov eax, dword [edi + 0x2d8]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406964
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [edi + 0x264]
mov byte [ebp - 4], 4
call fcn.0046fd05
lea ecx, [edi + 0x1f0]
mov byte [ebp - 4], 3
call fcn.0046fd05
lea ecx, [edi + 0x17c]
mov byte [ebp - 4], 2
call fcn.0046fd05
lea ecx, [edi + 0x108]
mov byte [ebp - 4], 1
call fcn.0046fd05
lea ecx, [edi + 0x94]
mov byte [ebp - 4], bl
call fcn.0046fd05
mov ecx, edi
mov dword [ebp - 4], 0xffffffff
call fcn.0046f1ab
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4