Function at 0x412040
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7a4
mov eax, dword [0x457664]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x20], 0xbd4ee3e4
mov dword [ebp - 0x1c], 0xdf46efee
mov dword [ebp - 0x18], 0xdf46f874
mov dword [ebp - 0x14], 0xa3469278
mov dword [ebp - 0x10], 0xcc46b76c
mov dword [ebp - 0xc], 0x97462561
mov dword [ebp - 8], 0xd1414f52
mov dword [ebp - 0x18c], 0xe410e415
mov dword [ebp - 0x188], 0x7d46efee
mov dword [ebp - 0x184], 0xd646f374
mov dword [ebp - 0x180], 0xbe464ea2
mov dword [ebp - 0x17c], 0x3fc34b6c
mov dword [ebp - 0x178], 0x746ff61
mov dword [ebp - 0x174], 0xbe412a88
mov dword [ebp - 0x170], 0x23b9ba46
mov dword [ebp - 0x16c], 0x4b410b3b
mov dword [ebp - 0x168], 0xbe4104bc
mov dword [ebp - 0x164], 0xdfffdf33
mov dword [ebp - 0x160], 0xdb411727
mov dword [ebp - 0x15c], 0xbe4190a1
mov dword [ebp - 0x158], 0xd1e5ba0c
mov dword [ebp - 0x154], 0x5412301
mov dword [ebp - 0x150], 0xbe411aa5
mov dword [ebp - 0x14c], 0x462448ee
mov dword [ebp - 0x148], 0x5412fe2
mov word [ebp - 0x144], 0xb614
mov dword [ebp - 0xcc], 0xe464e44b
mov dword [ebp - 0xc8], 0x7d46efee
mov dword [ebp - 0xc4], 0xd6464e74
mov dword [ebp - 0xc0], 0x2d464e78
mov dword [ebp - 0xbc], 0x3f464b6c
mov dword [ebp - 0xb8], 0x7464161
mov dword [ebp - 0xb4], 0x7412a52
mov dword [ebp - 0xb0], 0x2341ba46
mov dword [ebp - 0xac], 0x4b41af3b
mov dword [ebp - 0xa8], 0xee41042f
mov dword [ebp - 0xa4], 0xa341df33
mov dword [ebp - 0xa0], 0x30417227
mov dword [ebp - 0x9c], 0x7d411b18
mov word [ebp - 0x98], 0x9a89
mov dword [ebp - 0x4c], 0xe44ce496
mov dword [ebp - 0x48], 0x3546efee
mov dword [ebp - 0x44], 0x464874
mov dword [ebp - 0x40], 0x64463778
mov dword [ebp - 0x3c], 0xd1463d6c
mov dword [ebp - 0x38], 0x35462361
mov dword [ebp - 0x34], 0x78410352
mov word [ebp - 0x30], 0x686f
mov dword [ebp - 0x5c], 0x8a5ac9e4
mov dword [ebp - 0x58], 0x546efee
mov dword [ebp - 0x54], 0xe8463174
mov dword [ebp - 0x50], 0xdf46de78
mov dword [ebp - 0xfc], 0xe440e48a
mov dword [ebp - 0xf8], 0x6446efee
mov dword [ebp - 0xf4], 0xd146f374
mov dword [ebp - 0xf0], 0xbe4635f6
mov dword [ebp - 0xec], 0x51cd3d6c
mov dword [ebp - 0xe8], 0xdf46ff61
mov word [ebp - 0xe4], 0x71cf
mov dword [ebp - 0x11c], 0xe44ce496
mov dword [ebp - 0x118], 0x7846efee
mov dword [ebp - 0x114], 0x5b463374
mov dword [ebp - 0x110], 0x7460d78
mov dword [ebp - 0x10c], 0x46406c
mov dword [ebp - 0x108], 0xa3469061
mov dword [ebp - 0x104], 0x97410352
mov word [ebp - 0x100], 0x9834
mov dword [ebp - 0x218], 0x7266a9e4
mov dword [ebp - 0x214], 0x7846efee
mov dword [ebp - 0x210], 0x5b460b74
mov dword [ebp - 0x20c], 0x62464e78
mov dword [ebp - 0x208], 0xd146406c
mov dword [ebp - 0x204], 0x23463d61
mov dword [ebp - 0x200], 0x7c41c552
mov dword [ebp - 0x1fc], 0xe5418c46
mov dword [ebp - 0x1f8], 0x741d13b
mov dword [ebp - 0x1f4], 0xcc41d52f
mov dword [ebp - 0x1f0], 0xd141d533
mov dword [ebp - 0x1ec], 0xdf417827
mov dword [ebp - 0x1e8], 0x97416918
mov dword [ebp - 0xe0], 0x9646c4e4
mov dword [ebp - 0xdc], 0x8346efee
mov dword [ebp - 0xd8], 0xd146f374
mov dword [ebp - 0xd4], 0xbe4649e5
mov dword [ebp - 0xd0], 0xccfd9a6c
mov dword [ebp - 0x1b4], 0x507296e4
mov dword [ebp - 0x1b0], 0xa346efee
mov dword [ebp - 0x1ac], 0x30464d74
mov dword [ebp - 0x1a8], 0x83467978
mov dword [ebp - 0x1a4], 0x3b467e6c
mov dword [ebp - 0x1a0], 0x3468d61
mov dword [ebp - 0x19c], 0xa3416c52
mov dword [ebp - 0x198], 0xdf41bc46
mov dword [ebp - 0x194], 0x2341b63b
mov dword [ebp - 0x190], 0x97418a2f
mov dword [ebp - 0x1e4], 0x477abde4
mov dword [ebp - 0x1e0], 0xd146efee
mov dword [ebp - 0x1dc], 0x7e469274
mov dword [ebp - 0x1d8], 0x78469678
mov dword [ebp - 0x1d4], 0x746c66c
mov dword [ebp - 0x1d0], 0x64465a61
mov dword [ebp - 0x1cc], 0xdb416c52
mov dword [ebp - 0x1c8], 0xd1416646
mov dword [ebp - 0x1c4], 0xdf41d73b
mov dword [ebp - 0x1c0], 0xdf41922f
mov dword [ebp - 0x1bc], 0xbe41c933
mov dword [ebp - 0x1b8], 0x688a27
mov dword [ebp - 0x140], 0xa4768ae4
mov dword [ebp - 0x13c], 0x6446efee
mov dword [ebp - 0x138], 0xd1464d74
mov dword [ebp - 0x134], 0x7e463578
mov dword [ebp - 0x130], 0x78463d6c
mov dword [ebp - 0x12c], 0x97464661
mov dword [ebp - 0x128], 0x35419e52
mov dword [ebp - 0x124], 0xbe418446
mov dword [ebp - 0x120], 0x533963b
mov dword [ebp - 0x94], 0xe458e3e3
mov dword [ebp - 0x90], 0xfa46efee
mov dword [ebp - 0x8c], 0xe468e74
mov dword [ebp - 0x88], 0x1a46f778
mov word [ebp - 0x84], 0x931e
mov dword [ebp - 0x2c], 0x9e5edde3
mov dword [ebp - 0x28], 0xbe46efee
mov dword [ebp - 0x24], 0xc24874
mov dword [ebp - 0x6c], 0x8a5ac9e4
mov dword [ebp - 0x68], 0x3d46efee
mov dword [ebp - 0x64], 0x7e46ce74
mov dword [ebp - 0x60], 0xdf467978
mov dword [ebp - 0x2a4], 0xda1a19e4
mov dword [ebp - 0x2a0], 0x7846efee
mov dword [ebp - 0x29c], 0xd146f374
mov dword [ebp - 0x298], 0xbe464cc6
mov dword [ebp - 0x294], 0x784396c
mov dword [ebp - 0x290], 0x8346ff61
mov dword [ebp - 0x28c], 0xbe41df33
mov dword [ebp - 0x288], 0x78876646
mov dword [ebp - 0x284], 0x5b410b3b
mov dword [ebp - 0x280], 0xbe41b694
mov dword [ebp - 0x27c], 0x645ca833
mov dword [ebp - 0x278], 0x411727
mov dword [ebp - 0x274], 0xbe41a577
mov dword [ebp - 0x270], 0x239b700c
mov dword [ebp - 0x26c], 0x64412301
mov dword [ebp - 0x268], 0xbe41e170
mov dword [ebp - 0x264], 0xa38395ee
mov dword [ebp - 0x260], 0x7412fe2
mov dword [ebp - 0x25c], 0xbe41ac15
mov dword [ebp - 0x258], 0xe587f7cb
mov dword [ebp - 0x254], 0xe460e447
mov dword [ebp - 0x250], 0x7846efee
mov dword [ebp - 0x24c], 0xd1460b74
mov dword [ebp - 0x248], 0x62464c78
mov dword [ebp - 0x244], 0x746396c
mov dword [ebp - 0x240], 0x83463d61
mov dword [ebp - 0x23c], 0x7c416c52
mov dword [ebp - 0x238], 0x78419a46
mov dword [ebp - 0x234], 0x3541d13b
mov dword [ebp - 0x230], 0xcc41542f
mov dword [ebp - 0x22c], 0x6441aa33
mov dword [ebp - 0x228], 0x7841d527
mov dword [ebp - 0x224], 0x7c417418
mov dword [ebp - 0x220], 0xe5417e0c
push 0x100
lea eax, [ebp - 0x4a4]
mov word [ebp - 0x21c], 0xe501
push 0
push eax
mov dword [ebp - 0x80], 0xe458e3e3
mov dword [ebp - 0x7c], 0x7846efee
mov dword [ebp - 0x78], 0x5b469c74
mov dword [ebp - 0x74], 0x9746f778
mov word [ebp - 0x70], 0x401e
call sub.VCRUNTIME140.dll_memset
push 0x100
lea eax, [ebp - 0x3a4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x100
lea eax, [ebp - 0x6a4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x100
lea eax, [ebp - 0x5a4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x100
lea eax, [ebp - 0x7a4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x3c
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x80
lea eax, [ebp - 0x4a4]
push eax
call fcn.00435200
test eax, eax
je 0x412aae
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x80
lea eax, [ebp - 0x3a4]
push eax
call fcn.00435200
test eax, eax
je 0x412aae
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x80
lea eax, [ebp - 0x6a4]
push eax
call fcn.00435200
test eax, eax
je 0x412aae
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x80
lea eax, [ebp - 0x5a4]
push eax
call fcn.00435200
test eax, eax
je 0x412aae
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x80
lea eax, [ebp - 0x7a4]
push eax
call fcn.00435200
test eax, eax
je 0x412aae
push esi
push 0
push 0
push 0
lea eax, [ebp - 0xfc]
push eax
call fcn.004201b0
mov esi, eax
lea eax, [ebp - 0x3a4]
push esi
push eax
call fcn.0041e3f0
cmp eax, 1
jne 0x4127ef
push esi
call fcn.0041fc30
mov eax, 3
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00441849
mov esp, ebp
pop ebp
ret
push edi
push esi
call fcn.0041fc30
push 0
push 0
push 0
lea eax, [ebp - 0x11c]
push eax
call fcn.004201b0
push 0
push 0
mov edi, eax
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.004201b0
mov esi, eax
lea eax, [ebp - 0x4a4]
push edi
push eax
call fcn.0041e3f0
cmp eax, 1
jne 0x412863
push esi
lea eax, [ebp - 0x3a4]
push eax
call fcn.0041e3f0
cmp eax, 1
jne 0x412863
push edi
call fcn.0041fc30
push esi
call fcn.0041fc30
pop edi
mov eax, 2
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00441849
mov esp, ebp
pop ebp
ret
push edi
call fcn.0041fc30
push esi
call fcn.0041fc30
call fcn.00427a10
call fcn.00427920
cmp ax, 1
jne 0x4128a8
push 0
push 0
push 0
lea eax, [ebp - 0x80]
push eax
call fcn.004201b0
mov esi, eax
push esi
push 0
call fcn.004279d0
push eax
call fcn.0041ea70
push esi
test eax, eax
jne 0x412849
call fcn.0041fc30
push ebx
push 0
push 0
push 0
lea eax, [ebp - 0x1e4]
push eax
call fcn.004201b0
push 0
push 0
mov ebx, eax
lea eax, [ebp - 0x140]
push 0
push eax
call fcn.004201b0
push 0
push 0
mov edi, eax
lea eax, [ebp - 0x94]
push 0
push eax
call fcn.004201b0
mov esi, eax
lea eax, [ebp - 0x4a4]
push ebx
push eax
call fcn.0041e3f0
cmp eax, 1
jne 0x41295d
push edi
lea eax, [ebp - 0x3a4]
push eax
call fcn.0041e3f0
cmp eax, 1
jne 0x41295d
mov ecx, esi
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x412910
sub ecx, edx
lea eax, [ebp - 0x5a4]
sar ecx, 1
push ecx
push esi
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x41295d
push ebx
call fcn.0041fc30
push edi
call fcn.0041fc30
push esi
call fcn.0041fc30
pop ebx
pop edi
mov eax, 8
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00441849
mov esp, ebp
pop ebp
ret
push ebx
call fcn.0041fc30
push edi
call fcn.0041fc30
push esi
call fcn.0041fc30
push 0
push 0
push 0
lea eax, [ebp - 0x2c]
push eax
call fcn.004201b0
mov esi, eax
lea eax, [ebp - 0x6a4]
push esi
push eax
call fcn.0041e3f0
push esi
cmp eax, 1
jne 0x4129c4
call fcn.0041fc30
lea eax, [ebp - 0x7a4]
push eax
push 0x20
push 0x517de8
call fcn.0041ec50
neg eax
pop ebx
sbb eax, eax
and eax, 5
pop edi
dec eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00441849
mov esp, ebp
pop ebp
ret
call fcn.0041fc30
push 0
push 0
push 0
lea eax, [ebp - 0x6c]
push eax
call fcn.004201b0
mov esi, eax
lea eax, [ebp - 0x4a4]
push esi
push eax
call fcn.0041e3f0
cmp eax, 1
jne 0x412a1a
push esi
lea eax, [ebp - 0x3a4]
push eax
call fcn.0041e3f0
cmp eax, 1
jne 0x412a1a
push esi
call fcn.0041fc30
pop ebx
pop edi
mov eax, 9
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00441849
mov esp, ebp
pop ebp
ret
push esi
call fcn.0041fc30
push 0
push 0
push 0
lea eax, [ebp - 0x2a4]
push eax
call fcn.004201b0
push 0
push 0
mov edi, eax
lea eax, [ebp - 0x254]
push 0
push eax
call fcn.004201b0
mov esi, eax
lea eax, [ebp - 0x4a4]
push edi
push eax
call fcn.0041e3f0
cmp eax, 1
jne 0x412a8e
push esi
lea eax, [ebp - 0x3a4]
push eax
call fcn.0041e3f0
cmp eax, 1
jne 0x412a8e
push edi
call fcn.0041fc30
push esi
call fcn.0041fc30
pop ebx
pop edi
mov eax, 5
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00441849
mov esp, ebp
pop ebp
ret
push edi
call fcn.0041fc30
push esi
call fcn.0041fc30
pop ebx
pop edi
or eax, 0xffffffff
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00441849
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
or eax, 0xffffffff
xor ecx, ebp
call fcn.00441849
mov esp, ebp
pop ebp
ret