Function at 0x440048
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
sub esp, 0x400
lea ebp, [esp - 4]
mov eax, dword [0x6e1760]
xor eax, ebp
mov dword [ebp + 0x400], eax
push 0x58
mov eax, 0x5fb31e
call fcn.00409179
xor ebx, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov ecx, dword [0x7246bc]
cmp ecx, ebx
mov dword [ebp - 4], ebx
je 0x4402cf
call fcn.0043b19a
mov ecx, dword [0x7246bc]
push 0x1e0
mov edi, 0x280
push edi
push ebx
push ebx
call fcn.0043fe78
mov ecx, dword [0x7246bc]
mov dword [ebp - 0x24], eax
call fcn.00439ef3
push str.c:_screen.bmp
mov esi, 0x7236a8
push esi
call fcn.0040b3e0
pop ecx
pop ecx
push ebx
push ebx
push 0xff
push esi
push 0x777
call fcn.0045ad5e
pop ecx
push eax
push 0x776
call fcn.0045ad5e
pop ecx
push eax
call fcn.00462e9e
add esp, 0x18
test al, al
je 0x4402cf
push ebx
lea eax, [ebp - 0x64]
push esi
push eax
call fcn.00403473
mov ecx, eax
call fcn.0047357c
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.005b9a51
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], bl
call fcn.004d6118
mov esi, dword [ebp - 0x18]
cmp esi, ebx
je 0x4402cf
push ebx
mov eax, 0x129a6
push 0xe
lea ecx, [ebp - 0x34]
mov word [ebp - 0x34], 0x4d42
mov dword [ebp - 0x32], 0x10
mov word [ebp - 0x2e], bx
mov word [ebp - 0x2c], bx
mov dword [ebp - 0x2a], 0x436
mov dword [ebp - 0x5c], 0x28
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x54], 0x1e0
mov word [ebp - 0x50], 1
mov word [ebp - 0x4e], 8
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], 0x100
mov dword [ebp - 0x38], ebx
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x10]
mov eax, dword [esi]
push ebx
push 0x28
lea ecx, [ebp - 0x5c]
push ecx
mov ecx, esi
call dword [eax + 0x10]
mov byte [ebp], bl
mov byte [ebp + 1], bl
mov byte [ebp + 2], bl
mov byte [ebp + 4], 0x39
mov byte [ebp + 5], 0x39
mov byte [ebp + 6], 0x39
mov byte [ebp + 8], 0x62
mov byte [ebp + 9], 0x62
mov byte [ebp + 0xa], 0x62
mov byte [ebp + 0xc], 0x74
mov byte [ebp + 0xd], 0x74
mov byte [ebp + 0xe], 0x74
mov byte [ebp + 0x10], 0x84
mov byte [ebp + 0x11], 0x84
mov byte [ebp + 0x12], 0x84
mov byte [ebp + 0x14], 0x95
mov byte [ebp + 0x15], 0x95
mov byte [ebp + 0x16], 0x95
mov byte [ebp + 0x18], 0xff
mov byte [ebp + 0x19], bl
mov byte [ebp + 0x1a], bl
mov byte [ebp + 0x1c], 0xce
mov byte [ebp + 0x1d], 0xce
mov byte [ebp + 0x1e], 0xce
mov byte [ebp + 0x20], 0xff
mov byte [ebp + 0x21], 0xff
mov byte [ebp + 0x22], 0xff
mov byte [ebp + 0x24], 0x97
mov byte [ebp + 0x25], 0xa9
mov byte [ebp + 0x26], 0xff
mov byte [ebp + 0x28], 0xa2
mov byte [ebp + 0x29], 0x67
mov byte [ebp + 0x2a], 0x3b
mov byte [ebp + 0x2c], 0xff
mov byte [ebp + 0x2d], 0x86
mov byte [ebp + 0x2e], bl
mov byte [ebp + 0x30], 4
mov byte [ebp + 0x31], bl
mov byte [ebp + 0x32], 0xb0
mov byte [ebp + 0x34], 0x90
mov byte [ebp + 0x35], 0xa0
mov byte [ebp + 0x36], 0xb0
mov byte [ebp + 0x38], bl
mov byte [ebp + 0x39], 0xff
mov byte [ebp + 0x3a], 0xff
mov byte [ebp + 0x3c], 0xb6
mov byte [ebp + 0x3d], 0xb6
mov byte [ebp + 0x3e], 0xb6
mov eax, dword [esi]
push ebx
push 0x400
lea ecx, [ebp]
push ecx
mov ecx, esi
call dword [eax + 0x10]
push 0x4b000
call fcn.0040b899
cmp eax, ebx
pop ecx
mov dword [ebp - 0x1c], eax
jne 0x440280
push str.ScreenDump:bitmap
push 0x67
call fcn.0045aaff
pop ecx
pop ecx
mov eax, dword [ebp - 0x1c]
add eax, 0x4ad80
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x20], eax
xor eax, eax
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ecx + 2]
add ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x20]
mov cl, byte [ecx + eax]
mov byte [edx + eax], cl
inc eax
cmp eax, edi
jl 0x440290
add dword [ebp - 0x10], edi
sub dword [ebp - 0x20], edi
cmp dword [ebp - 0x10], 0x4b000
jl 0x44028e
mov eax, dword [esi]
push ebx
push 0x4b000
push dword [ebp - 0x1c]
mov ecx, esi
call dword [eax + 0x10]
push dword [ebp - 0x1c]
call fcn.00408c48
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004d6118
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x400]
xor ecx, ebp
call fcn.0040916a
add ebp, 0x404
leave
ret