Function at 0x401680
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x4167ad
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf4
mov dword [esp + 0xc0], ecx
lea ecx, [esp + 0x60]
mov dword [esp + 0xfc], 0
call fcn.0040f280
lea ecx, [esp + 0x68]
mov byte [esp + 0xfc], 1
call fcn.0040f280
lea ecx, [esp + 0x58]
mov byte [esp + 0xfc], 2
call fcn.0040f280
lea ecx, [esp + 0x50]
mov byte [esp + 0xfc], 3
call fcn.0040f280
lea ecx, [esp + 0x38]
mov byte [esp + 0xfc], 4
call fcn.0040f280
lea ecx, [esp + 0x28]
mov byte [esp + 0xfc], 5
call fcn.0040f280
lea ecx, [esp + 0x18]
mov byte [esp + 0xfc], 6
call fcn.0040f280
lea ecx, [esp + 0x10]
mov byte [esp + 0xfc], 7
call fcn.0040f280
lea ecx, [esp + 8]
mov byte [esp + 0xfc], 8
call fcn.0040f280
lea ecx, [esp + 0x30]
mov byte [esp + 0xfc], 9
call fcn.0040f280
lea ecx, [esp + 0x48]
mov byte [esp + 0xfc], 0xa
call fcn.0040f280
lea ecx, [esp + 0x20]
mov byte [esp + 0xfc], 0xb
call fcn.0040f280
lea ecx, [esp + 0x40]
mov byte [esp + 0xfc], 0xc
call fcn.0040f280
push 0
push 0
push 0x41e468
lea eax, [esp + 0xc]
push 0x41e454
push eax
lea ecx, [esp + 0x118]
mov byte [esp + 0x110], 0xd
call fcn.0040f2c0
test eax, eax
mov byte [esp + 0xfc], 0xe
je 0x4017ba
add eax, 4
jmp 0x4017bc
xor eax, eax
push eax
lea ecx, [esp + 0x68]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [esp]
mov byte [esp + 0xfc], 0xd
call fcn.0040f2a0
push 0
push 0
push 0x41e438
lea ecx, [esp + 0xc]
push 0x41e420
push ecx
lea ecx, [esp + 0x118]
call fcn.0040f2c0
test eax, eax
mov byte [esp + 0xfc], 0xf
je 0x401807
add eax, 4
jmp 0x401809
xor eax, eax
push eax
lea ecx, [esp + 0x70]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [esp]
mov byte [esp + 0xfc], 0xd
call fcn.0040f2a0
push 0
push 0
push 0x41e408
lea edx, [esp + 0xc]
push 0x41e3f0
push edx
lea ecx, [esp + 0x118]
call fcn.0040f2c0
test eax, eax
mov byte [esp + 0xfc], 0x10
je 0x401854
add eax, 4
jmp 0x401856
xor eax, eax
push eax
lea ecx, [esp + 0x60]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [esp]
mov byte [esp + 0xfc], 0xd
call fcn.0040f2a0
push 0
push 0
push 0x41e3d4
lea eax, [esp + 0xc]
push 0x41e3b8
push eax
lea ecx, [esp + 0x118]
call fcn.0040f2c0
test eax, eax
mov byte [esp + 0xfc], 0x11
je 0x4018a1
add eax, 4
jmp 0x4018a3
xor eax, eax
push eax
lea ecx, [esp + 0x58]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [esp]
mov byte [esp + 0xfc], 0xd
call fcn.0040f2a0
push 0
push 0
push 0x41e39c
lea ecx, [esp + 0xc]
push 0x41e384
push ecx
lea ecx, [esp + 0x118]
call fcn.0040f2c0
test eax, eax
mov byte [esp + 0xfc], 0x12
je 0x4018ee
add eax, 4
jmp 0x4018f0
xor eax, eax
push eax
lea ecx, [esp + 0x40]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [esp]
mov byte [esp + 0xfc], 0xd
call fcn.0040f2a0
push 0
push 0
push 0x41e368
lea edx, [esp + 0xc]
push 0x41e350
push edx
lea ecx, [esp + 0x118]
call fcn.0040f2c0
test eax, eax
mov byte [esp + 0xfc], 0x13
je 0x40193b
add eax, 4
jmp 0x40193d
xor eax, eax
push eax
lea ecx, [esp + 0x30]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [esp]
mov byte [esp + 0xfc], 0xd
call fcn.0040f2a0
push 0
push 0
push 0x41e338
lea eax, [esp + 0xc]
push 0x41e320
push eax
lea ecx, [esp + 0x118]
call fcn.0040f2c0
test eax, eax
mov byte [esp + 0xfc], 0x14
je 0x401988
add eax, 4
jmp 0x40198a
xor eax, eax
push eax
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [esp]
mov byte [esp + 0xfc], 0xd
call fcn.0040f2a0
push 0
push 0
push 0x41e308
lea ecx, [esp + 0xc]
push 0x41e2f0
push ecx
lea ecx, [esp + 0x118]
call fcn.0040f2c0
test eax, eax
mov byte [esp + 0xfc], 0x15
je 0x4019d5
add eax, 4
jmp 0x4019d7
xor eax, eax
push eax
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [esp]
mov byte [esp + 0xfc], 0xd
call fcn.0040f2a0
push 0
push 0
push 0x41e2d8
lea edx, [esp + 0xc]
push 0x41e2c0
push edx
lea ecx, [esp + 0x118]
call fcn.0040f2c0
test eax, eax
mov byte [esp + 0xfc], 0x16
je 0x401a22
add eax, 4
jmp 0x401a24
xor eax, eax
push eax
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [esp]
mov byte [esp + 0xfc], 0xd
call fcn.0040f2a0
push 0
push 0
push 0x41e2a4
lea eax, [esp + 0xc]
push 0x41e288
push eax
lea ecx, [esp + 0x118]
call fcn.0040f2c0
test eax, eax
mov byte [esp + 0xfc], 0x17
je 0x401a6f
add eax, 4
jmp 0x401a71
xor eax, eax
push eax
lea ecx, [esp + 0x38]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [esp]
mov byte [esp + 0xfc], 0xd
call fcn.0040f2a0
push 0
push 0
push 0x41e26c
lea ecx, [esp + 0xc]
push 0x41e254
push ecx
lea ecx, [esp + 0x118]
call fcn.0040f2c0
test eax, eax
mov byte [esp + 0xfc], 0x18
je 0x401abc
add eax, 4
jmp 0x401abe
xor eax, eax
push eax
lea ecx, [esp + 0x50]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [esp]
mov byte [esp + 0xfc], 0xd
call fcn.0040f2a0
push 0
push 0
push 0x41e238
lea edx, [esp + 0xc]
push 0x41e220
push edx
lea ecx, [esp + 0x118]
call fcn.0040f2c0
test eax, eax
mov byte [esp + 0xfc], 0x19
je 0x401b09
add eax, 4
jmp 0x401b0b
xor eax, eax
push eax
lea ecx, [esp + 0x28]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [esp]
mov byte [esp + 0xfc], 0xd
call fcn.0040f2a0
push 0
push 0
push 0x41e208
lea eax, [esp + 0xc]
push 0x41e1f0
push eax
lea ecx, [esp + 0x118]
call fcn.0040f2c0
test eax, eax
mov byte [esp + 0xfc], 0x1a
je 0x401b56
add eax, 4
jmp 0x401b58
xor eax, eax
push eax
lea ecx, [esp + 0x48]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [esp]
mov byte [esp + 0xfc], 0xd
call fcn.0040f2a0
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x401b90
lea edx, [esp + 0x3c]
push 0x41e1ec
push edx
call sub.MFC42.DLL_CString::Format
add esp, 8
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x401bad
lea ecx, [esp + 0x2c]
push 0x41e1e8
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 8
mov edx, dword [esp + 0x1c]
mov eax, dword [edx - 8]
test eax, eax
jne 0x401bca
lea eax, [esp + 0x1c]
push 0x41e1e8
push eax
call sub.MFC42.DLL_CString::Format
add esp, 8
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x401be7
lea edx, [esp + 0x14]
push 0x41e1ec
push edx
call sub.MFC42.DLL_CString::Format
add esp, 8
mov eax, dword [esp + 0xc]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x401c04
lea ecx, [esp + 0xc]
push 0x41e1ec
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 8
mov edx, dword [esp + 0x34]
mov eax, dword [edx - 8]
test eax, eax
jne 0x401c21
lea eax, [esp + 0x34]
push 0x41e1ec
push eax
call sub.MFC42.DLL_CString::Format
add esp, 8
mov ecx, dword [esp + 0x4c]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x401c3e
lea edx, [esp + 0x4c]
push 0x41e1ec
push edx
call sub.MFC42.DLL_CString::Format
add esp, 8
mov eax, dword [esp + 0x24]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x401c5b
lea ecx, [esp + 0x24]
push 0x41e1e8
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 8
mov edx, dword [esp + 0x44]
mov eax, dword [edx - 8]
test eax, eax
jne 0x401c78
lea eax, [esp + 0x44]
push 0x41e1e8
push eax
call sub.MFC42.DLL_CString::Format
add esp, 8
push ebx
push ebp
push esi
lea esi, [esp + 0x4c]
neg esi
sbb esi, esi
push edi
lea ecx, [esp + 0x54]
lea edi, [esp + 0x30]
and esi, ecx
lea edx, [esp + 0x34]
neg edi
sbb edi, edi
lea ebp, [esp + 0x58]
and edi, edx
lea eax, [esp + 0x5c]
neg ebp
sbb ebp, ebp
lea ebx, [esp + 0x40]
and ebp, eax
lea ecx, [esp + 0x44]
neg ebx
sbb ebx, ebx
lea eax, [esp + 0x18]
and ebx, ecx
lea edx, [esp + 0x1c]
neg eax
sbb eax, eax
lea ecx, [esp + 0x24]
and eax, edx
lea edx, [esp + 0x2c]
mov dword [esp + 0xc8], eax
lea eax, [esp + 0x20]
neg eax
sbb eax, eax
push 0x41e1e4
and eax, ecx
lea ecx, [esp + 0x40]
mov dword [esp + 0xc4], eax
lea eax, [esp + 0x2c]
neg eax
sbb eax, eax
and eax, edx
lea edx, [esp + 0x50]
mov dword [esp + 0xbc], eax
lea eax, [esp + 0x3c]
neg eax
sbb eax, eax
and eax, ecx
lea ecx, [esp + 0x68]
mov dword [esp + 0xb4], eax
lea eax, [esp + 0x4c]
neg eax
sbb eax, eax
and eax, edx
lea edx, [esp + 0x70]
mov dword [esp + 0xac], eax
lea eax, [esp + 0x64]
neg eax
sbb eax, eax
and eax, ecx
lea ecx, [esp + 0x80]
mov dword [esp + 0xa4], eax
lea eax, [esp + 0x6c]
neg eax
sbb eax, eax
and eax, edx
lea edx, [esp + 0x78]
mov dword [esp + 0x9c], eax
lea eax, [esp + 0x7c]
neg eax
sbb eax, eax
and eax, ecx
mov dword [esp + 0xd8], eax
lea eax, [esp + 0x74]
neg eax
sbb eax, eax
and eax, edx
push eax
lea eax, [esp + 0x18]
push eax
call sub.MFC42.DLL_operator_1
mov ecx, dword [esp + 0xd4]
lea edx, [esp + 0x90]
push ecx
push eax
push edx
mov byte [esp + 0x118], 0x1b
call sub.MFC42.DLL_operator_2
push 0x41e1e4
push eax
lea eax, [esp + 0x90]
mov byte [esp + 0x114], 0x1c
push eax
call sub.MFC42.DLL_operator_1
mov ecx, dword [esp + 0x98]
lea edx, [esp + 0x84]
push ecx
push eax
push edx
mov byte [esp + 0x118], 0x1d
call sub.MFC42.DLL_operator_2
push 0x41e1e4
push eax
lea eax, [esp + 0x104]
mov byte [esp + 0x114], 0x1e
push eax
call sub.MFC42.DLL_operator_1
mov ecx, dword [esp + 0xa0]
lea edx, [esp + 0xbc]
push ecx
push eax
push edx
mov byte [esp + 0x118], 0x1f
call sub.MFC42.DLL_operator_2
push 0x41e1e4
push eax
lea eax, [esp + 0xe4]
mov byte [esp + 0x114], 0x20
push eax
call sub.MFC42.DLL_operator_1
mov ecx, dword [esp + 0xa8]
lea edx, [esp + 0xb4]
push ecx
push eax
push edx
mov byte [esp + 0x118], 0x21
call sub.MFC42.DLL_operator_2
push 0x41e1e4
push eax
lea eax, [esp + 0xf4]
mov byte [esp + 0x114], 0x22
push eax
call sub.MFC42.DLL_operator_1
mov ecx, dword [esp + 0xb0]
lea edx, [esp + 0xac]
push ecx
push eax
push edx
mov byte [esp + 0x118], 0x23
call sub.MFC42.DLL_operator_2
push 0x41e1e4
push eax
lea eax, [esp + 0x88]
mov byte [esp + 0x114], 0x24
push eax
call sub.MFC42.DLL_operator_1
mov ecx, dword [esp + 0xb8]
mov byte [esp + 0x10c], 0x25
push ecx
push eax
lea edx, [esp + 0xac]
push edx
call sub.MFC42.DLL_operator_2
push 0x41e1e4
push eax
lea eax, [esp + 0xfc]
mov byte [esp + 0x114], 0x26
push eax
call sub.MFC42.DLL_operator_1
mov ecx, dword [esp + 0xc0]
lea edx, [esp + 0x9c]
push ecx
push eax
push edx
mov byte [esp + 0x118], 0x27
call sub.MFC42.DLL_operator_2
push 0x41e1e4
push eax
lea eax, [esp + 0xd4]
mov byte [esp + 0x114], 0x28
push eax
call sub.MFC42.DLL_operator_1
mov ecx, dword [esp + 0xc8]
lea edx, [esp + 0x94]
push ecx
push eax
push edx
mov byte [esp + 0x118], 0x29
call sub.MFC42.DLL_operator_2
push 0x41e1e4
push eax
lea eax, [esp + 0xec]
mov byte [esp + 0x114], 0x2a
push eax
call sub.MFC42.DLL_operator_1
push ebx
lea ecx, [esp + 0x90]
push eax
push ecx
mov byte [esp + 0x118], 0x2b
call sub.MFC42.DLL_operator_2
push 0x41e1e4
lea edx, [esp + 0xc8]
push eax
push edx
mov byte [esp + 0x118], 0x2c
call sub.MFC42.DLL_operator_1
push ebp
push eax
lea eax, [esp + 0x108]
mov byte [esp + 0x114], 0x2d
push eax
call sub.MFC42.DLL_operator_2
push 0x41e1e4
lea ecx, [esp + 0xfc]
push eax
push ecx
mov byte [esp + 0x118], 0x2e
call sub.MFC42.DLL_operator_1
push edi
lea edx, [esp + 0xf4]
push eax
push edx
mov byte [esp + 0x118], 0x2f
call sub.MFC42.DLL_operator_2
push 0x41e1e4
push eax
lea eax, [esp + 0xf0]
mov byte [esp + 0x114], 0x30
push eax
call sub.MFC42.DLL_operator_1
push esi
lea ecx, [esp + 0xe4]
push eax
push ecx
mov byte [esp + 0x118], 0x31
call sub.MFC42.DLL_operator_2
push 0x41e1e4
lea edx, [esp + 0xdc]
mov bl, 0x32
push eax
push edx
mov byte [esp + 0x118], bl
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
mov ecx, dword [esp + 0xd0]
push eax
mov byte [esp + 0x110], 0x33
call fcn.004013f0
lea ecx, [esp + 0xd8]
mov byte [esp + 0x10c], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xe0]
mov byte [esp + 0x10c], 0x31
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xe8]
mov byte [esp + 0x10c], 0x30
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xf0]
mov byte [esp + 0x10c], 0x2f
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xf8]
mov byte [esp + 0x10c], 0x2e
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x100]
mov byte [esp + 0x10c], 0x2d
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xc4]
mov byte [esp + 0x10c], 0x2c
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x8c]
mov byte [esp + 0x10c], 0x2b
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xe4]
mov byte [esp + 0x10c], 0x2a
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x94]
mov byte [esp + 0x10c], 0x29
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xcc]
mov byte [esp + 0x10c], 0x28
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x9c]
mov byte [esp + 0x10c], 0x27
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xf4]
mov byte [esp + 0x10c], 0x26
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xa4]
mov byte [esp + 0x10c], 0x25
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x80]
mov byte [esp + 0x10c], 0x24
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xac]
mov byte [esp + 0x10c], 0x23
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xec]
mov byte [esp + 0x10c], 0x22
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xb4]
mov byte [esp + 0x10c], 0x21
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xdc]
mov byte [esp + 0x10c], 0x20
call sub.MFC42.DLL_CString::CString
mov byte [esp + 0x10c], 0x1f
lea ecx, [esp + 0xbc]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xfc]
mov byte [esp + 0x10c], 0x1e
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x84]
mov byte [esp + 0x10c], 0x1d
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x88]
mov byte [esp + 0x10c], 0x1c
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x90]
mov byte [esp + 0x10c], 0x1b
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
mov byte [esp + 0x10c], 0xd
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x50]
mov byte [esp + 0x10c], 0xc
call fcn.0040f2a0
lea ecx, [esp + 0x30]
mov byte [esp + 0x10c], 0xb
call fcn.0040f2a0
lea ecx, [esp + 0x58]
mov byte [esp + 0x10c], 0xa
call fcn.0040f2a0
lea ecx, [esp + 0x40]
mov byte [esp + 0x10c], 9
call fcn.0040f2a0
lea ecx, [esp + 0x18]
mov byte [esp + 0x10c], 8
call fcn.0040f2a0
lea ecx, [esp + 0x20]
mov byte [esp + 0x10c], 7
call fcn.0040f2a0
lea ecx, [esp + 0x28]
mov byte [esp + 0x10c], 6
call fcn.0040f2a0
lea ecx, [esp + 0x38]
mov byte [esp + 0x10c], 5
call fcn.0040f2a0
lea ecx, [esp + 0x48]
mov byte [esp + 0x10c], 4
call fcn.0040f2a0
lea ecx, [esp + 0x60]
mov byte [esp + 0x10c], 3
call fcn.0040f2a0
lea ecx, [esp + 0x68]
mov byte [esp + 0x10c], 2
call fcn.0040f2a0
lea ecx, [esp + 0x78]
mov byte [esp + 0x10c], 1
call fcn.0040f2a0
lea ecx, [esp + 0x70]
mov byte [esp + 0x10c], 0
call fcn.0040f2a0
lea ecx, [esp + 0x114]
mov dword [esp + 0x10c], 0xffffffff
call fcn.0040f2a0
mov ecx, dword [esp + 0x104]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x100
ret 8