Function at 0x415dd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x67e01e
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x190
mov eax, dword [0x729140]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xdc], ecx
mov edi, dword [ebx + 8]
mov dword [ebp - 0xcc], edi
mov dword [ebp - 0xe0], 0
mov al, byte [edi + 8]
test al, al
je 0x416828
cmp al, 7
jne 0x416828
xorps xmm0, xmm0
mov ecx, edi
push 0x6cc9a3
push str.groupId
movups xmmword [ebp - 0x188], xmm0
movq qword [ebp - 0x178], xmm0
call fcn.005118d0
test eax, eax
jne 0x415e69
call fcn.0050f370
push eax
lea ecx, [ebp - 0x188]
call fcn.00510130
mov dword [ebp - 4], 0
cmp byte [ebp - 0x180], 0
je 0x416816
lea ecx, [ebp - 0x188]
call fcn.00511e10
test al, al
je 0x416816
xorps xmm0, xmm0
mov ecx, edi
push 0x6cca02
push str.subGroupId
movups xmmword [ebp - 0x170], xmm0
movq qword [ebp - 0x160], xmm0
call fcn.005118d0
test eax, eax
jne 0x415ec8
call fcn.0050f370
push eax
lea ecx, [ebp - 0x170]
call fcn.00510130
mov byte [ebp - 4], 1
cmp byte [ebp - 0x168], 0
je 0x416807
lea ecx, [ebp - 0x170]
call fcn.00511e10
test al, al
je 0x416807
xorps xmm0, xmm0
mov ecx, edi
push 0x6cca6b
push 0x6cca68
movups xmmword [ebp - 0x158], xmm0
movq qword [ebp - 0x148], xmm0
call fcn.005118d0
test eax, eax
jne 0x415f24
call fcn.0050f370
push eax
lea ecx, [ebp - 0x158]
call fcn.00510130
mov byte [ebp - 4], 2
cmp byte [ebp - 0x150], 0
je 0x4167f8
lea ecx, [ebp - 0x158]
call fcn.00511e10
test al, al
je 0x4167f8
xorps xmm0, xmm0
mov ecx, edi
push 0x6cca6f
push 0x6cca6c
movups xmmword [ebp - 0x140], xmm0
movq qword [ebp - 0x130], xmm0
call fcn.005118d0
test eax, eax
jne 0x415f80
call fcn.0050f370
push eax
lea ecx, [ebp - 0x140]
call fcn.00510130
mov byte [ebp - 4], 3
cmp byte [ebp - 0x138], 0
je 0x4167e9
lea ecx, [ebp - 0x140]
call fcn.00511e10
test al, al
je 0x4167e9
lea ecx, [ebp - 0x188]
call fcn.005106d0
lea ecx, [ebp - 0x170]
mov dword [ebp - 0xd0], eax
call fcn.005106d0
lea ecx, [ebp - 0x158]
mov dword [ebp - 0xd8], eax
call fcn.005106d0
lea ecx, [ebp - 0x140]
mov esi, eax
call fcn.005106d0
mov edx, eax
mov eax, dword [ebp - 0xdc]
cmp dword [eax + 0x34], 0
je 0x4167e9
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movq qword [ebp - 0x20], xmm0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 4
mov ecx, dword [eax + 0x34]
push edi
push edx
push esi
push dword [ebp - 0xd8]
mov eax, dword [ecx]
push dword [ebp - 0xd0]
push 2
call dword [eax + 0x18]
xorps xmm0, xmm0
lea ecx, [ebp - 0x98]
push 7
movups xmmword [ebp - 0x98], xmm0
movq qword [ebp - 0x88], xmm0
call fcn.0050fde0
xorps xmm0, xmm0
mov byte [ebp - 4], 5
push 6
lea ecx, [ebp - 0xb0]
movq qword [ebp - 0xa0], xmm0
movups xmmword [ebp - 0xb0], xmm0
call fcn.0050fde0
sub esp, 0x18
mov byte [ebp - 4], 6
mov ecx, esp
mov dword [ebp - 0xd4], esp
push dword [ebp - 0xd0]
call fcn.0050fed0
push 0x6cc9a3
push str.groupId
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 7
call fcn.00511640
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.005103b0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd4], esp
push dword [ebp - 0xd8]
call fcn.0050fed0
push 0x6cca02
push str.subGroupId
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 8
call fcn.00511640
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.005103b0
mov byte [ebp - 4], 9
mov ecx, 7
mov dword [ebp - 0x54], 0
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x58], 0
mov word [ebp - 0x68], ax
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov word [ebp - 0x50], ax
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov edi, dword [ebp - 0xcc]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], edx
cmp eax, edx
je 0x4164ac
lea edx, [esi + esi]
mov dword [ebp - 0xd0], edx
mov esi, dword [eax]
xorps xmm0, xmm0
cmp dword [ebp - 0x3c], 8
lea eax, [ebp - 0x50]
mov dword [ebp - 0x40], 0
cmovae eax, dword [ebp - 0x50]
xor edx, edx
cmp ecx, 8
mov dword [ebp - 0x58], edx
movups xmmword [ebp - 0x38], xmm0
mov word [eax], dx
lea eax, [ebp - 0x68]
cmovae eax, dword [ebp - 0x68]
xor ecx, ecx
push ecx
movq qword [ebp - 0x28], xmm0
mov word [eax], cx
lea ecx, [ebp - 0x38]
call fcn.0050fde0
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0xcc], esp
push dword [ebp - 0xd0]
call fcn.0050fed0
push 0x6cca6b
push 0x6cca68
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xe
call fcn.00511640
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.005103b0
lea eax, [esi + 8]
lea ecx, [ebp - 0x68]
cmp ecx, eax
je 0x4161fd
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x4161f1
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x68]
call fcn.00405b20
lea eax, [esi + 0x20]
lea ecx, [ebp - 0x50]
cmp ecx, eax
je 0x41621d
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x416211
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x50]
call fcn.00405b20
lea eax, [ebp - 0x68]
push eax
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0x1a0]
call fcn.004e05c0
add esp, 4
push eax
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xf
call fcn.0040cdf0
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x10
call fcn.00405ac0
push 0xfde9
lea edx, [ebp - 0x50]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x110]
call fcn.004dfb90
sub esp, 0x14
mov byte [ebp - 4], 0x14
mov ecx, esp
mov dword [ebp - 0xcc], esp
push eax
call fcn.005100b0
push 0x6cca58
push str.path
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x15
call fcn.00511640
mov ecx, eax
mov byte [ebp - 4], 0x14
call fcn.005103b0
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0xfc]
cmp edx, 0x10
jb 0x4162d9
mov ecx, dword [ebp - 0x110]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4162cf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416848
push edx
push ecx
call fcn.00634ee5
add esp, 8
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0xf
mov byte [ebp - 0x110], 0
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0xcc], esp
push dword [esi + 0x5c]
push dword [esi + 0x58]
call fcn.0050ff80
push 0x6cca74
push 0x6cca70
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x1a
call fcn.00511640
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.005103b0
lea eax, [esi + 0x3c]
push eax
lea ecx, [ebp - 0x128]
call fcn.00414330
or dword [ebp - 0xe0], 1
push 0xfde9
lea edx, [ebp - 0x128]
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xf8]
call fcn.004dfb90
sub esp, 0x14
mov byte [ebp - 4], 0x1c
mov ecx, esp
mov dword [ebp - 0xcc], esp
push eax
call fcn.005100b0
push 0x6cca80
push str.iconPath
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x1d
call fcn.00511640
mov ecx, eax
mov byte [ebp - 4], 0x1c
call fcn.005103b0
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0xe4]
cmp edx, 0x10
jb 0x4163d3
mov ecx, dword [ebp - 0xf8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4163c9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416848
push edx
push ecx
call fcn.00634ee5
add esp, 8
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x22
call fcn.00405ac0
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0xcc], esp
push dword [esi + 0x54]
call fcn.0050fed0
push 0x6cca8c
push str.iconType
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x26
call fcn.00511640
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.005103b0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xcc], esp
push dword [esi + 0x64]
push dword [esi + 0x60]
call fcn.0050ff80
push 0x6ccf8e
push str.modifyTime
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x27
call fcn.00511640
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.005103b0
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0xb0]
call fcn.00511a40
inc dword [ebp - 0xd0]
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xc
call fcn.005102d0
mov eax, dword [ebp - 0xd8]
add eax, 4
mov dword [ebp - 0xd8], eax
cmp eax, dword [ebp - 0xd4]
je 0x4164ac
mov ecx, dword [ebp - 0x54]
jmp 0x416162
sub esp, 0x18
lea eax, [ebp - 0xb0]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.00510130
push 0x6ccaa5
push str.items
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x28
call fcn.00511640
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.005103b0
xorps xmm0, xmm0
lea ecx, [ebp - 0x38]
push 7
movups xmmword [ebp - 0x38], xmm0
movq qword [ebp - 0x28], xmm0
call fcn.0050fde0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x128]
push str.SysCleanGetScanResultItemInfo
mov dword [ebp - 0xd4], 0
call fcn.00405880
sub esp, 0x18
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0x98]
mov dword [ebp - 0xcc], esp
mov ecx, esp
push eax
call fcn.00510130
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 0x2b
push eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.0040c3b0
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x2e
call fcn.00405ac0
mov byte [ebp - 4], 0x32
xor eax, eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
push 0x6cc5d7
push str.funName
mov ecx, edi
mov byte [ebp - 4], 0x33
call fcn.005118d0
test eax, eax
je 0x4166c1
xorps xmm0, xmm0
mov ecx, edi
push 0x6cc5d7
push str.funName
movups xmmword [ebp - 0x110], xmm0
movq qword [ebp - 0x100], xmm0
call fcn.005118d0
test eax, eax
jne 0x4165da
call fcn.0050f370
push eax
lea ecx, [ebp - 0x110]
call fcn.00510130
mov byte [ebp - 4], 0x34
mov al, byte [ebp - 0x108]
test al, al
je 0x4166b2
cmp al, 4
jne 0x4166b2
push 0x6cc5d7
push str.funName
mov ecx, edi
call fcn.005118d0
test eax, eax
jne 0x41661a
call fcn.0050f370
lea ecx, [ebp - 0xf8]
push ecx
mov ecx, eax
call fcn.00510530
mov edx, eax
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x1a0]
call fcn.004dfcf0
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x36
call fcn.0040cdf0
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x37
call fcn.00405ac0
mov byte [ebp - 4], 0x3b
mov edx, dword [ebp - 0xe4]
cmp edx, 0x10
jb 0x416693
mov ecx, dword [ebp - 0xf8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416689
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416848
push edx
push ecx
call fcn.00634ee5
add esp, 8
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x33
call fcn.005102d0
cmp dword [ebp - 0x70], 0
je 0x4166ea
mov ecx, dword [ebp - 0xdc]
mov ecx, dword [ecx + 0x2c]
test ecx, ecx
je 0x41684d
mov eax, dword [ecx]
lea edx, [ebp - 0xc8]
push edx
lea edx, [ebp - 0x80]
push edx
call dword [eax + 8]
jmp 0x416735
push str.SysCleanGetScanResultItemInfo
lea ecx, [ebp - 0x128]
call fcn.00405880
mov ecx, dword [ebp - 0xdc]
mov byte [ebp - 4], 0x3f
mov ecx, dword [ecx + 0x2c]
test ecx, ecx
je 0x416852
mov eax, dword [ecx]
lea edx, [ebp - 0xc8]
push edx
lea edx, [ebp - 0x128]
push edx
call dword [eax + 8]
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x40
call fcn.00405ac0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x44
call fcn.00405ac0
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x48
call fcn.00405ac0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xc
call fcn.005102d0
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x4c
call fcn.00405ac0
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x50
call fcn.00405ac0
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 5
call fcn.005102d0
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 4
call fcn.005102d0
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x4167e9
mov eax, dword [ebp - 0x18]
sub eax, ecx
sar eax, 2
lea edx, [eax*4]
mov eax, ecx
cmp edx, 0x1000
jb 0x4167ca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416857
push edx
push ecx
call fcn.00634ee5
add esp, 8
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 2
call fcn.005102d0
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 1
call fcn.005102d0
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0
call fcn.005102d0
lea ecx, [ebp - 0x188]
mov dword [ebp - 4], 0xffffffff
call fcn.005102d0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00634bf3
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
call fcn.00655f64
call fcn.00631b21
call fcn.00631b21
call fcn.00655f64
int3