Function at 0x41a6d0
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c59d9
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
push ebx
push esi
push edi
mov eax, dword [0x6478bc]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x90]
push eax
call fcn.004484b0
mov esi, eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
mov dword [ebp - 0x38], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x10], 0xfe
mov dword [ebp - 0x38], vtable.CWConstString.0
mov dword [ebp - 0x2c], 0x5dfd34
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 2
push eax
add edi, 0xe48
push 0
mov ecx, edi
call fcn.00442570
mov ebx, eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 3
mov dword [ebp - 0x28], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0x28], vtable.CVolObject.0
mov dword [ebp - 0x38], vtable.CVolObject.0
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 4
mov dword [ebp - 0x80], vtable.CVolMem.0
call fcn.00453a90
mov ecx, dword [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call fcn.00448460
mov esi, eax
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x88], 0
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 5
mov dword [ebp - 0x90], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x68], 0xfe
push esi
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 6
mov dword [ebp - 0x90], vtable.CWString.0
call fcn.004551e0
mov dword [ebp - 4], 7
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 8
mov dword [ebp - 0x38], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x10], 0xfe
mov dword [ebp - 0x38], vtable.CWConstString.0
mov dword [ebp - 0x2c], 0x5df95c
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
push ebx
push 0
call fcn.004426b0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x28], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0x28], vtable.CVolObject.0
mov dword [ebp - 0x38], vtable.CVolObject.0
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x80], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x88], 0
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x90], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x68], 0xfe
push dword [ebp + 0xc]
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x90], vtable.CWString.0
call fcn.004551e0
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x38], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x10], 0xfe
mov dword [ebp - 0x38], vtable.CWConstString.0
mov dword [ebp - 0x2c], 0x5dfd2c
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
push ebx
push 0
call fcn.004426b0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x28], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0x28], vtable.CVolObject.0
mov dword [ebp - 0x38], vtable.CVolObject.0
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x80], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x88], 0
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x90], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x68], 0xfe
push ebx
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x90], vtable.CWString.0
call fcn.004551e0
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x38], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x10], 0xfe
mov dword [ebp - 0x38], vtable.CWConstString.0
mov dword [ebp - 0x2c], 0x5e0494
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
push ebx
push 0
call fcn.004426b0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x28], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0x28], vtable.CVolObject.0
mov dword [ebp - 0x38], vtable.CVolObject.0
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x80], vtable.CVolMem.0
call fcn.00453a90
mov ecx, dword [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call fcn.00448530
mov esi, eax
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x88], 0
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x90], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x68], 0xfe
push esi
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x90], vtable.CWString.0
call fcn.004551e0
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x38], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x10], 0xfe
mov dword [ebp - 0x38], vtable.CWConstString.0
mov dword [ebp - 0x2c], 0x5e04a0
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
push ebx
push 0
call fcn.004426b0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x28], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0x28], vtable.CVolObject.0
mov dword [ebp - 0x38], vtable.CVolObject.0
mov dword [ebp - 4], 0x20
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x80], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x88], 0
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x90], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x68], 0xfe
mov dword [ebp - 0x90], vtable.CWConstString.0
mov dword [ebp - 0x84], 0x5dfd44
mov ecx, dword [ebp + 8]
mov dword [ebp - 4], 0x22
call fcn.00448520
push eax
lea eax, [ebp - 0x90]
mov ecx, edi
push eax
push ebx
push 0
call fcn.00442680
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x80], vtable.CVolMem.0
call fcn.00453a90
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x90]
push 0
push eax
mov dword [ebp - 4], 0xffffffff
call fcn.00448540
mov esi, eax
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x25
mov dword [ebp - 0x38], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x10], 0xfe
mov dword [ebp - 0x38], vtable.CWConstString.0
mov dword [ebp - 0x2c], str.CQ_0
push esi
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x26
push eax
push ebx
push 0
mov ecx, edi
call fcn.004426b0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x27
mov dword [ebp - 0x28], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0x28], vtable.CVolObject.0
mov dword [ebp - 0x38], vtable.CVolObject.0
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x80], vtable.CVolMem.0
call fcn.00453a90
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x90]
push 1
push eax
mov dword [ebp - 4], 0xffffffff
call fcn.00448540
mov esi, eax
mov dword [ebp - 4], 0x29
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov byte [ebp - 4], 0x2a
mov dword [ebp - 0x38], vtable.CWString.0
lea ecx, [ebp - 0x28]
call fcn.00453690
mov dword [ebp - 0x10], 0xfe
mov dword [ebp - 0x38], vtable.CWConstString.0
mov dword [ebp - 0x2c], str.CQ_1
push esi
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x2b
push eax
push ebx
push 0
mov ecx, edi
call fcn.004426b0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x28], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0x28], vtable.CVolObject.0
mov dword [ebp - 0x38], vtable.CVolObject.0
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0x2d
mov dword [ebp - 0x80], vtable.CVolMem.0
call fcn.00453a90
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x90]
push 2
push eax
mov dword [ebp - 4], 0xffffffff
call fcn.00448540
mov esi, eax
mov dword [ebp - 4], 0x2e
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x38], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x10], 0xfe
mov dword [ebp - 0x38], vtable.CWConstString.0
mov dword [ebp - 0x2c], str.CQ_2
push esi
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x30
push eax
push ebx
push 0
mov ecx, edi
call fcn.004426b0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x28], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0x28], vtable.CVolObject.0
mov dword [ebp - 0x38], vtable.CVolObject.0
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0x32
mov dword [ebp - 0x80], vtable.CVolMem.0
call fcn.00453a90
mov esi, dword [ebp + 8]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
cmp dword [esi + 0x18], 0
je 0x41ae8a
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x33
mov dword [ebp - 0x64], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x3c], 0xfe
mov dword [ebp - 0x64], vtable.CWConstString.0
mov dword [ebp - 0x58], 0x5e04c4
mov dword [ebp - 4], 0x34
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x35
mov dword [ebp - 0x38], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x10], 0xfe
mov dword [ebp - 0x38], vtable.CWConstString.0
mov dword [ebp - 0x2c], 0x5e04c8
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x36
push eax
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
push ebx
push 0
call fcn.004426b0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x37
mov dword [ebp - 0x28], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0x28], vtable.CVolObject.0
mov dword [ebp - 0x38], vtable.CVolObject.0
mov dword [ebp - 4], 0x38
jmp 0x41af30
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x39
mov dword [ebp - 0x64], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x3c], 0xfe
mov dword [ebp - 0x64], vtable.CWConstString.0
mov dword [ebp - 0x58], 0x5df504
mov dword [ebp - 4], 0x3a
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3b
mov dword [ebp - 0x38], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x10], 0xfe
mov dword [ebp - 0x38], vtable.CWConstString.0
mov dword [ebp - 0x2c], 0x5e04c8
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
push ebx
push 0
call fcn.004426b0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3d
mov dword [ebp - 0x28], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0x28], vtable.CVolObject.0
mov dword [ebp - 0x38], vtable.CVolObject.0
mov dword [ebp - 4], 0x3e
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x54], vtable.CVolMem.0
call fcn.00453a90
cmp dword [esi + 0x1c], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
je 0x41b002
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x3f
mov dword [ebp - 0x64], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x3c], 0xfe
mov dword [ebp - 0x64], vtable.CWConstString.0
mov dword [ebp - 0x58], 0x5e04c4
mov dword [ebp - 4], 0x40
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x41
mov dword [ebp - 0x38], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x10], 0xfe
mov dword [ebp - 0x38], vtable.CWConstString.0
mov dword [ebp - 0x2c], 0x5e04d4
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x42
push eax
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
push ebx
push 0
call fcn.004426b0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x43
mov dword [ebp - 0x28], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0x28], vtable.CVolObject.0
mov dword [ebp - 0x38], vtable.CVolObject.0
mov dword [ebp - 4], 0x44
jmp 0x41b0a8
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x45
mov dword [ebp - 0x64], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x3c], 0xfe
mov dword [ebp - 0x64], vtable.CWConstString.0
mov dword [ebp - 0x58], 0x5df504
mov dword [ebp - 4], 0x46
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x47
mov dword [ebp - 0x38], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x10], 0xfe
mov dword [ebp - 0x38], vtable.CWConstString.0
mov dword [ebp - 0x2c], 0x5e04d4
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x48
push eax
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
push ebx
push 0
call fcn.004426b0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x49
mov dword [ebp - 0x28], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0x28], vtable.CVolObject.0
mov dword [ebp - 0x38], vtable.CVolObject.0
mov dword [ebp - 4], 0x4a
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x54], vtable.CVolMem.0
call fcn.00453a90
cmp dword [esi + 0x20], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
je 0x41b17a
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x4b
mov dword [ebp - 0x64], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x3c], 0xfe
mov dword [ebp - 0x64], vtable.CWConstString.0
mov dword [ebp - 0x58], 0x5e04c4
mov dword [ebp - 4], 0x4c
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x4d
mov dword [ebp - 0x38], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x10], 0xfe
mov dword [ebp - 0x38], vtable.CWConstString.0
mov dword [ebp - 0x2c], 0x5e04e0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x4e
push eax
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
push ebx
push 0
call fcn.004426b0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x4f
mov dword [ebp - 0x28], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0x28], vtable.CVolObject.0
mov dword [ebp - 0x38], vtable.CVolObject.0
mov dword [ebp - 4], 0x50
jmp 0x41b220
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x51
mov dword [ebp - 0x64], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x3c], 0xfe
mov dword [ebp - 0x64], vtable.CWConstString.0
mov dword [ebp - 0x58], 0x5df504
mov dword [ebp - 4], 0x52
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x53
mov dword [ebp - 0x38], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x10], 0xfe
mov dword [ebp - 0x38], vtable.CWConstString.0
mov dword [ebp - 0x2c], 0x5e04e0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x54
push eax
lea eax, [ebp - 0x38]
mov ecx, edi
push eax
push ebx
push 0
call fcn.004426b0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x55
mov dword [ebp - 0x28], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0x28], vtable.CVolObject.0
mov dword [ebp - 0x38], vtable.CVolObject.0
mov dword [ebp - 4], 0x56
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x54], vtable.CVolMem.0
call fcn.00453a90
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call fcn.00448560
mov esi, eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x57
mov dword [ebp - 0x64], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x3c], 0xfe
push esi
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0x58
mov dword [ebp - 0x64], vtable.CWString.0
call fcn.004551e0
mov dword [ebp - 4], 0x59
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x5a
mov dword [ebp - 0xbc], vtable.CWString.0
call fcn.00453690
mov dword [ebp - 0x94], 0xfe
mov dword [ebp - 0xbc], vtable.CWConstString.0
mov dword [ebp - 0xb0], 0x5e04ec
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x5b
push eax
lea eax, [ebp - 0xbc]
mov ecx, edi
push eax
push ebx
push 0
call fcn.004426b0
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x5c
mov dword [ebp - 0xac], vtable.CVolMem.0
call fcn.00453a90
mov dword [ebp - 0xac], vtable.CVolObject.0
mov dword [ebp - 0xbc], vtable.CVolObject.0
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x5d
mov dword [ebp - 0x54], vtable.CVolMem.0
call fcn.00453a90
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8