Function at 0x407880
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x1c8
push ebx
push ebp
push esi
push edi
mov edx, dword [0x4273c0]
mov eax, dword [str.582vtc0gzg]
mov dword [esp + 0x60], edx
xor edx, edx
mov dword [esp + 0x70], edx
mov ecx, dword [0x4273bc]
mov dword [esp + 0x74], edx
mov dword [esp + 0x80], edx
mov dword [esp + 0x84], edx
mov dword [esp + 0x8d], edx
mov dword [esp + 0x91], edx
mov dword [esp + 0x58], eax
mov eax, dword [0x4273b0]
mov word [esp + 0x95], dx
mov byte [esp + 0x97], dl
mov edx, dword [0x4273ac]
mov dword [esp + 0x68], eax
mov eax, dword [str.cxr0gzg]
mov dword [esp + 0x5c], ecx
mov ecx, dword [0x4273b4]
mov dword [esp + 0xa0], edx
mov dword [esp + 0x78], eax
mov eax, dword [0x427394]
xor edx, edx
mov dword [esp + 0x6c], ecx
mov ecx, dword [0x4273a0]
mov dword [esp + 0xad], edx
mov dword [esp + 0x88], eax
mov eax, dword [str.MxOqpZR0gzg]
mov dword [esp + 0x7c], ecx
mov cl, byte [0x427398]
mov dword [esp + 0xb1], edx
mov dword [esp + 0x98], eax
mov eax, dword [0x42738c]
mov word [esp + 0xb5], dx
mov byte [esp + 0x8c], cl
mov ecx, dword [0x4273a8]
mov byte [esp + 0xb7], dl
mov edx, dword [0x427388]
mov dword [esp + 0xa8], eax
mov eax, dword [str.TcxOqpF0gzg]
mov dword [esp + 0x9c], ecx
mov cl, byte [0x427390]
mov dword [esp + 0xc0], edx
mov dword [esp + 0xb8], eax
mov eax, dword [0x427378]
xor edx, edx
mov byte [esp + 0xac], cl
mov ecx, dword [0x427384]
mov dword [esp + 0xcd], edx
mov dword [esp + 0xc8], eax
mov eax, dword [str.582uf0gzg]
mov dword [esp + 0xbc], ecx
mov cl, byte [0x42737c]
mov dword [esp + 0xd1], edx
xor esi, esi
mov word [esp + 0xd5], dx
mov dword [esp + 0xd8], eax
mov byte [esp + 0xcc], cl
mov ecx, dword [0x427370]
xor eax, eax
mov byte [esp + 0xd7], dl
mov dx, word [0x427374]
mov dword [esp + 0xe2], eax
mov dword [esp + 0xdc], ecx
mov ecx, dword [str.582]
mov word [esp + 0xe0], dx
mov edx, dword [0x427368]
mov word [esp + 0xe6], ax
mov dword [esp + 0xf0], eax
mov dword [esp + 0xe8], ecx
mov ecx, dword [str.Oeujkgnf0gzg]
mov dword [esp + 0x64], esi
mov dword [esp + 0xa4], esi
mov dword [esp + 0xc4], esi
mov dword [esp + 0xec], edx
mov dword [esp + 0xf4], eax
mov eax, dword [0x42735c]
mov dword [esp + 0xf8], ecx
mov cl, byte [0x427360]
mov edx, dword [0x427358]
mov byte [esp + 0x104], cl
mov cx, word [0x427350]
mov dword [esp + 0x100], eax
mov eax, dword [0x42734c]
mov word [esp + 0x10c], cx
mov ecx, dword [str.giwk0gzg]
mov dword [esp + 0x108], eax
xor eax, eax
mov dword [esp + 0x118], ecx
xor ecx, ecx
mov dword [esp + 0x10f], eax
mov dword [esp + 0x121], ecx
mov dword [esp + 0xfc], edx
mov dword [esp + 0x113], eax
xor edx, edx
mov word [esp + 0x125], cx
mov byte [esp + 0x117], al
mov al, byte [0x427348]
mov word [esp + 0x105], dx
mov byte [esp + 0x127], cl
mov dword [esp + 0x12e], ecx
mov byte [esp + 0x107], dl
mov dl, byte [0x427352]
mov byte [esp + 0x120], al
mov ax, word [0x42733c]
mov dword [esp + 0x132], ecx
mov byte [esp + 0x10e], dl
mov edx, dword [0x427344]
mov word [esp + 0x12c], ax
mov eax, dword [0x427330]
mov word [esp + 0x136], cx
mov ecx, dword [0x427334]
mov dword [esp + 0x11c], edx
mov edx, dword [str.PQF54]
mov dword [esp + 0x13c], eax
mov al, byte [0x427328]
mov dword [esp + 0x140], ecx
xor ecx, ecx
mov dword [esp + 0x128], edx
mov edx, dword [str.mzgvtc0gzg]
mov byte [esp + 0x14c], al
mov eax, dword [0x427318]
mov dword [esp + 0x14d], ecx
mov dword [esp + 0x138], edx
mov edx, dword [0x427324]
mov dword [esp + 0x151], ecx
mov dword [esp + 0x15c], eax
mov word [esp + 0x155], cx
xor eax, eax
mov dword [esp + 0x148], edx
mov edx, dword [str.mpufvtc0gzg]
mov byte [esp + 0x157], cl
mov ecx, dword [0x42731c]
mov word [esp + 0x165], ax
mov byte [esp + 0x167], al
mov dword [esp + 0x158], edx
mov dl, byte [0x427320]
mov dword [esp + 0x160], ecx
mov ecx, dword [0x42730c]
mov dword [esp + 0x16d], eax
mov dword [esp + 0x171], eax
mov byte [esp + 0x164], dl
mov dl, byte [0x427310]
mov dword [esp + 0x168], ecx
mov ecx, dword [str.VODOUTX0gzg]
mov word [esp + 0x175], ax
mov byte [esp + 0x16c], dl
mov edx, dword [0x427304]
mov byte [esp + 0x177], al
mov eax, dword [0x427308]
mov dword [esp + 0x178], ecx
mov ecx, dword [0x4272f8]
mov dword [esp + 0x144], esi
mov dword [esp + 0x17c], edx
mov dword [esp + 0x180], eax
mov dword [esp + 0x184], esi
mov dword [esp + 0x188], ecx
mov dl, byte [0x4272fc]
mov ecx, dword [str.cxegpvgt0gzg]
mov byte [esp + 0x18c], dl
mov edx, dword [0x4272ec]
mov dword [esp + 0x19c], edx
xor eax, eax
xor edx, edx
mov dword [esp + 0x18d], eax
mov word [esp + 0x1a5], dx
mov dword [esp + 0x191], eax
mov byte [esp + 0x1a7], dl
mov dword [esp + 0x1ae], edx
mov word [esp + 0x195], ax
mov dword [esp + 0x1b2], edx
mov byte [esp + 0x197], al
mov eax, dword [0x4272f0]
mov dword [esp + 0x198], ecx
mov cl, byte [0x4272f4]
mov word [esp + 0x1b6], dx
mov edx, dword [0x4272e4]
mov dword [esp + 0x1a0], eax
mov eax, dword [str.cxktc]
mov byte [esp + 0x1a4], cl
mov cx, word [0x4272d8]
mov dword [esp + 0x1c0], edx
xor edx, edx
mov dword [esp + 0x1a8], eax
mov eax, dword [str.cujFkur0gzg]
mov word [esp + 0x1ac], cx
mov ecx, dword [0x4272e0]
mov dword [esp + 0x1ce], edx
mov dword [esp + 0x1b8], eax
mov eax, dword [str.cxcuv]
mov dword [esp + 0x1bc], ecx
mov cx, word [0x4272d0]
mov dword [esp + 0x1d2], edx
mov word [esp + 0x1d6], dx
mov dword [esp + 0x1c4], esi
mov dword [esp + 0x1c8], eax
mov word [esp + 0x1cc], cx
lea edx, [esp + 0x58]
mov edi, 0x18
xor ecx, ecx
mov al, byte [edx + ecx]
test al, al
je 0x407d70
sub al, 2
mov byte [edx + ecx], al
inc ecx
cmp ecx, 0x10
jl 0x407d64
add edx, 0x10
dec edi
jne 0x407d62
lea eax, [esp + 0x10]
mov bl, 0x73
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x14], 0x50
mov byte [esp + 0x15], 0x72
mov byte [esp + 0x16], 0x6f
mov byte [esp + 0x17], 0x63
mov byte [esp + 0x18], 0x65
mov byte [esp + 0x19], bl
mov byte [esp + 0x1a], bl
mov byte [esp + 0x1b], 0x33
mov byte [esp + 0x1c], 0x32
mov byte [esp + 0x1d], 0x4e
mov byte [esp + 0x1e], 0x65
mov byte [esp + 0x1f], 0x78
mov byte [esp + 0x20], 0x74
mov byte [esp + 0x21], 0
call fcn.00417640
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call esi
mov cl, 0x68
mov dword [esp + 0x50], eax
mov al, 0x6c
mov byte [esp + 0x3a], cl
mov byte [esp + 0x45], cl
lea ecx, [esp + 0x30]
mov byte [esp + 0x39], al
mov byte [esp + 0x3c], al
mov dl, 0x61
mov al, 0x70
push ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0x34], 0x43
mov byte [esp + 0x35], 0x72
mov byte [esp + 0x36], 0x65
mov byte [esp + 0x37], dl
mov byte [esp + 0x38], 0x74
mov byte [esp + 0x39], 0x65
mov byte [esp + 0x3a], 0x54
mov byte [esp + 0x3b], 0x6f
mov byte [esp + 0x3c], 0x6f
mov byte [esp + 0x3f], 0x65
mov byte [esp + 0x41], al
mov byte [esp + 0x42], 0x33
mov byte [esp + 0x43], 0x32
mov byte [esp + 0x44], 0x53
mov byte [esp + 0x45], 0x6e
mov byte [esp + 0x46], dl
mov byte [esp + 0x47], al
mov byte [esp + 0x48], bl
mov byte [esp + 0x4a], 0x6f
mov byte [esp + 0x4b], 0x74
mov byte [esp + 0x4c], 0
call fcn.00417640
push eax
call esi
lea edx, [esp + 0x20]
lea ecx, [esp + 0x4c]
push edx
mov ebp, eax
mov byte [esp + 0x24], 0x50
mov byte [esp + 0x25], 0x72
mov byte [esp + 0x26], 0x6f
mov byte [esp + 0x27], 0x63
mov byte [esp + 0x28], 0x65
mov byte [esp + 0x29], bl
mov byte [esp + 0x2a], bl
mov byte [esp + 0x2b], 0x33
mov byte [esp + 0x2c], 0x32
mov byte [esp + 0x2d], 0x46
mov byte [esp + 0x2e], 0x69
mov byte [esp + 0x2f], 0x72
mov byte [esp + 0x30], bl
mov byte [esp + 0x31], 0x74
mov byte [esp + 0x32], 0
call fcn.00417640
push eax
call esi
mov dword [esp + 0x54], eax
push 0
push 2
lea edi, [esp + 0x60]
call ebp
push 0x128
mov ebp, eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov ebx, eax
add esp, 4
lea esi, [esp + 0x68]
mov dword [ebx], 0x128
push ebx
push ebp
call dword [esp + 0x5c]
test eax, eax
je 0x407f81
lea eax, [ebx + 0x24]
push edi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x407f2c
push esi
push 0x42991c
push 0x4272c4
push 0x42991c
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
add edi, 0x10
add esi, 0x10
jmp 0x407f81
push ebx
push ebp
call dword [esp + 0x58]
test eax, eax
je 0x407f7b
lea eax, [esp + 0x1e8]
cmp esi, eax
jge 0x407f7b
lea eax, [ebx + 0x24]
push edi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x407f5c
push ebx
push ebp
call dword [esp + 0x58]
test eax, eax
jne 0x407f36
jmp 0x407f7b
push esi
push 0x42991c
push 0x4272c4
push 0x42991c
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
add edi, 0x20
add esi, 0x20
add edi, 0x20
add esi, 0x20
lea ecx, [esp + 0x1e8]
cmp esi, ecx
jl 0x407eee
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c8
ret