Function at 0x411a3c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e47f8
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x51b08c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [ebp + 8]
xor ebx, ebx
mov edi, dword [ebp + 0xc]
add eax, 0xffffff9b
cmp eax, 0x25
ja case.0x411601.123
jmp dword [eax*4 + 0x411b78]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 4], 1
lea eax, [ebp - 0x60]
mov ecx, dword [esi]
push eax
push 1
push edi
call fcn.004cc180
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.004066a0
jmp case.0x411601.123
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 4], 3
lea eax, [ebp - 0x60]
mov ecx, dword [esi]
push eax
call fcn.004cbad0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.004066a0
jmp case.0x411601.123
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 4], 5
lea eax, [ebp - 0x60]
mov ecx, dword [esi]
push eax
call fcn.004cba20
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.004066a0
jmp case.0x411601.123
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 4], 7
lea eax, [ebp - 0x60]
mov ecx, dword [esi]
push eax
call fcn.004cbe00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.004066a0
jmp case.0x411601.123
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 4], 9
lea eax, [ebp - 0x60]
mov ecx, dword [esi]
push eax
call fcn.004cbcc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.004066a0
jmp case.0x411601.123
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 4], 0xb
lea eax, [ebp - 0x60]
mov ecx, dword [esi]
push eax
push edi
call fcn.004cbb80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.004066a0
jmp case.0x411601.123
mov ecx, dword [esi]
push 1
call fcn.004cb740
mov ecx, dword [esi]
call fcn.004cb830
jmp case.0x411601.123
mov ecx, dword [esi]
push 0
call fcn.004cb740
mov ecx, dword [esi]
call fcn.004cb830
jmp case.0x411601.123
mov dword [ebp - 0x14], edi
mov dword [ebp - 4], 0xc
lea eax, [edi + 4]
mov ecx, dword [esi]
push eax
call fcn.004cb690
mov ecx, dword [esi]
call fcn.004cb830
mov dword [ebp - 4], 0xffffffff
test edi, edi
je case.0x411601.123
cmp byte [edi], 0
je case.0x411601.123
push 0x14
push edi
call fcn.00499a96
add esp, 8
jmp case.0x411601.123
mov ecx, dword [esi]
call fcn.004cb420
jmp case.0x411601.123
mov ecx, dword [esi]
call fcn.004cb2b0
jmp case.0x411601.123
mov ecx, dword [esi]
call fcn.004cb130
jmp case.0x411601.123
push ecx
mov ecx, dword [esi]
call fcn.004cb0c0
jmp case.0x411601.123
mov ecx, dword [esi]
call fcn.004cb010
jmp case.0x411601.123
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 4], 0xe
lea eax, [ebp - 0x60]
mov ecx, dword [esi]
push eax
push edi
call fcn.004cae20
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.004066a0
mov ecx, dword [0x51f2e8]
mov eax, dword [edi + 4]
mov dword [ecx], eax
mov eax, dword [edi + 8]
mov dword [ecx + 4], eax
call fcn.004c2f20
cmp byte [edi], 0
je case.0x411601.123
push 0xc
push edi
call fcn.00499a96
add esp, 8
jmp case.0x411601.123
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 4], 0x10
lea eax, [ebp - 0x60]
mov ecx, dword [esi]
push eax
call fcn.004ca9a0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.004066a0
mov ecx, dword [esi]
call fcn.004cb830
jmp case.0x411601.123
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 4], 0x12
lea eax, [ebp - 0x60]
mov ecx, dword [esi]
push eax
call fcn.004ca610
jmp 0x411816
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 4], 0x14
push ecx
mov ecx, dword [esi]
call fcn.004ca420
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.004066a0
jmp case.0x411601.123
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 4], 0x16
lea eax, [ebp - 0x60]
mov ecx, dword [esi]
push eax
call fcn.004ca310
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.004066a0
jmp case.0x411601.123
mov ecx, dword [esi + 4]
push 0
push edi
add ecx, 8
call fcn.004d5750
jmp case.0x411601.123
push 0
mov ecx, edi
call fcn.004c31f0
jmp case.0x411601.123
mov ecx, dword [esi]
call fcn.004ca170
jmp case.0x411601.123
xorps xmm0, xmm0
mov dword [ebp - 0x18], ebx
movq qword [ebp - 0x20], xmm0
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 4], 0x17
lea ecx, [ebp - 0x50]
push str.260c56
call fcn.00403200
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x20]
call fcn.004096f0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x50]
call fcn.004031c0
push 0x4fb700
lea ecx, [ebp - 0x50]
call fcn.00403200
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x20]
call fcn.004096f0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x50]
call fcn.004031c0
push str.752e64
lea ecx, [ebp - 0x50]
call fcn.00403200
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x20]
call fcn.004096f0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x50]
call fcn.004031c0
push 0x4fec48
lea ecx, [ebp - 0x50]
call fcn.00403200
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x20]
call fcn.004096f0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x50]
call fcn.004031c0
push str.dcbc29
lea ecx, [ebp - 0x50]
call fcn.00403200
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.0049b282
add esp, 0xc
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x50]
call fcn.004031c0
mov ecx, str.HPPViewer.exe
call fcn.00490a40
mov ecx, eax
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x38]
cmp dword [ebp - 0x24], 8
cmovae eax, dword [ebp - 0x38]
push eax
push ecx
push str._s__s
call fcn.0048f120
add esp, 0xc
lea ecx, [ebp - 0x14]
push eax
call fcn.00406700
mov esi, dword [ebp - 0x14]
mov ecx, edi
push esi
call fcn.004c31f0
mov byte [ebp - 4], 0x1e
push esi
call fcn.004a51e5
add esp, 4
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x38]
call fcn.004031c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00409690
jmp case.0x411601.123
mov ecx, dword [esi]
push edi
call fcn.004ca0f0
jmp case.0x411601.123
mov ebx, dword [esi]
add ebx, 0x220
jmp case.0x411601.123
xorps xmm0, xmm0
mov dword [ebp - 0x18], ebx
movq qword [ebp - 0x20], xmm0
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 4], 0x20
lea ecx, [ebp - 0x50]
push str.8781a7
call fcn.00403200
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x20]
call fcn.004096f0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x50]
call fcn.004031c0
push 0x4fec48
lea ecx, [ebp - 0x50]
call fcn.00403200
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x20]
call fcn.004096f0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x50]
call fcn.004031c0
push str.88d487
lea ecx, [ebp - 0x50]
call fcn.00403200
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.0049b282
add esp, 0xc
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x50]
call fcn.004031c0
mov ecx, str.HPPEditor.exe
call fcn.00490a40
mov ecx, eax
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 0x26
lea eax, [ebp - 0x38]
cmp dword [ebp - 0x24], 8
cmovae eax, dword [ebp - 0x38]
push eax
push ecx
push str._s__s
call fcn.0048f120
add esp, 0xc
lea ecx, [ebp - 0x14]
push eax
call fcn.00406700
mov esi, dword [ebp - 0x14]
mov ecx, edi
push esi
call fcn.004c31f0
mov byte [ebp - 4], 0x25
push esi
call fcn.004a51e5
add esp, 4
mov byte [ebp - 4], 0x20
jmp 0x411a06
mov ecx, dword [esi]
push edi
call fcn.004c9680
jmp case.0x411601.123
mov ecx, dword [esi]
push edi
call fcn.004c8ee0
jmp case.0x411601.123
mov ecx, dword [esi]
call fcn.004c88d0
jmp case.0x411601.123
push edi
push ecx
mov ecx, dword [esi]
call fcn.004c8660
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00499a52
mov esp, ebp
pop ebp
ret 8