Function at 0x413195
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x660
mov eax, dword [0xaff3f4]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x654], ecx
mov byte [ebp - 0x638], 0
push 0x3ff
push 0
lea eax, [ebp - 0x637]
push eax
call fcn.006512c0
add esp, 0xc
push 0xffffffffffffffff
push dword [ebp + 8]
push 0x400
lea eax, [ebp - 0x638]
push eax
call fcn.00657d28
add esp, 0x10
xor eax, eax
inc eax
shl eax, 0
mov byte [ebp + eax - 0xc], 0x70
xor eax, eax
inc eax
shl eax, 1
mov byte [ebp + eax - 0xc], 0x65
xor eax, eax
inc eax
shl eax, 2
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 5
jae 0x413210
jmp 0x413215
call fcn.0064e577
mov eax, dword [ebp - 0x648]
mov byte [ebp + eax - 0xc], 0
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0xc], 0x6e
xor eax, eax
inc eax
imul eax, eax, 0
mov byte [ebp + eax - 0xc], 0x6f
push dword [ebp + 0xc]
push 0
push 0
lea eax, [ebp - 0x638]
push eax
lea eax, [ebp - 0xc]
push eax
push 0
call fcn.00421006
add esp, 0x18
mov dword [ebp - 0x644], eax
cmp dword [ebp - 0x644], 0x20
ja 0x41356e
xor eax, eax
inc eax
shl eax, 0
mov byte [ebp + eax - 0x14], 0x68
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x14], 0x6d
xor eax, eax
inc eax
imul eax, eax, 0
mov byte [ebp + eax - 0x14], 0x2e
xor eax, eax
inc eax
shl eax, 1
mov byte [ebp + eax - 0x14], 0x74
xor eax, eax
inc eax
shl eax, 2
mov dword [ebp - 0x64c], eax
cmp dword [ebp - 0x64c], 5
jae 0x4132a7
jmp 0x4132ac
call fcn.0064e577
mov eax, dword [ebp - 0x64c]
mov byte [ebp + eax - 0x14], 0
push 0x208
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x14]
push eax
push SysReAllocStringLen
mov ecx, dword [ebp - 0x654]
call fcn.004130fa
test eax, eax
jne 0x41356e
xor eax, eax
inc eax
shl eax, 0
mov byte [ebp + eax - 0x30], 0x73
xor eax, eax
inc eax
shl eax, 2
mov byte [ebp + eax - 0x30], 0x6c
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x30], 0x6e
xor eax, eax
inc eax
imul eax, eax, 9
mov byte [ebp + eax - 0x30], 0x65
xor eax, eax
inc eax
imul eax, eax, 0xb
mov byte [ebp + eax - 0x30], 0x5c
xor eax, eax
inc eax
imul eax, eax, 0xc
mov byte [ebp + eax - 0x30], 0x63
xor eax, eax
inc eax
imul eax, eax, 0x11
mov byte [ebp + eax - 0x30], 0x6e
xor eax, eax
inc eax
shl eax, 4
mov byte [ebp + eax - 0x30], 0x61
xor eax, eax
inc eax
imul eax, eax, 5
mov byte [ebp + eax - 0x30], 0x6c
xor eax, eax
inc eax
shl eax, 3
mov byte [ebp + eax - 0x30], 0x70
xor eax, eax
inc eax
imul eax, eax, 0xf
mov byte [ebp + eax - 0x30], 0x6d
xor eax, eax
inc eax
imul eax, eax, 6
mov byte [ebp + eax - 0x30], 0x5c
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x30], 0x6f
xor eax, eax
inc eax
imul eax, eax, 7
mov byte [ebp + eax - 0x30], 0x6f
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x30], 0x65
xor eax, eax
inc eax
imul eax, eax, 0x13
mov dword [ebp - 0x650], eax
cmp dword [ebp - 0x650], 0x14
jae 0x41339b
jmp 0x4133a0
call fcn.0064e577
mov eax, dword [ebp - 0x650]
mov byte [ebp + eax - 0x30], 0
xor eax, eax
inc eax
shl eax, 1
mov byte [ebp + eax - 0x30], 0x68
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x30], 0x6d
xor eax, eax
inc eax
imul eax, eax, 0x12
mov byte [ebp + eax - 0x30], 0x64
xor eax, eax
inc eax
imul eax, eax, 0
mov byte [ebp + eax - 0x30], 0x5c
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.0040be64
pop ecx
pop ecx
push 0x208
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x238]
push eax
push SysReAllocStringLen
mov ecx, dword [ebp - 0x654]
call fcn.004130fa
test eax, eax
jne 0x41356e
xor eax, eax
inc eax
imul eax, eax, 0
mov byte [ebp + eax - 0x1c], 0x22
xor eax, eax
inc eax
shl eax, 1
mov byte [ebp + eax - 0x1c], 0x31
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x1c], 0x22
xor eax, eax
inc eax
shl eax, 2
mov dword [ebp - 0x658], eax
cmp dword [ebp - 0x658], 5
jae 0x41344a
jmp 0x41344f
call fcn.0064e577
mov eax, dword [ebp - 0x658]
mov byte [ebp + eax - 0x1c], 0
xor eax, eax
inc eax
shl eax, 0
mov byte [ebp + eax - 0x1c], 0x25
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.0045418a
pop ecx
pop ecx
mov dword [ebp - 0x63c], eax
cmp dword [ebp - 0x63c], 0
jne 0x41351a
xor eax, eax
inc eax
shl eax, 1
mov dword [ebp - 0x65c], eax
cmp dword [ebp - 0x65c], 3
jae 0x4134a0
jmp 0x4134a5
call fcn.0064e577
mov eax, dword [ebp - 0x65c]
mov byte [ebp + eax - 0x640], 0
xor eax, eax
inc eax
imul eax, eax, 0
mov byte [ebp + eax - 0x640], 0x25
xor eax, eax
inc eax
shl eax, 0
mov byte [ebp + eax - 0x640], 0x31
lea eax, [ebp - 0x640]
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.0045418a
pop ecx
pop ecx
mov dword [ebp - 0x63c], eax
cmp dword [ebp - 0x63c], 0
jne 0x41350f
lea eax, [ebp - 0x238]
push eax
call fcn.0040bf8c
pop ecx
lea eax, [ebp + eax - 0x239]
mov dword [ebp - 0x63c], eax
jmp 0x413518
mov eax, dword [ebp - 0x63c]
mov byte [eax], 0
jmp 0x413523
mov eax, dword [ebp - 0x63c]
mov byte [eax], 0
push 0x6821b0
push dword [ebp - 0x63c]
call fcn.0040be64
pop ecx
pop ecx
push dword [ebp + 8]
push dword [ebp - 0x63c]
call fcn.0040be64
pop ecx
pop ecx
call fcn.0042c386
mov dword [ebp - 0x660], eax
push dword [ebp + 0xc]
lea eax, [ebp - 0x238]
push eax
call fcn.0042734e
pop ecx
push eax
call fcn.0040bdcd
pop ecx
pop ecx
mov dword [ebp - 0x644], eax
mov eax, dword [ebp - 0x644]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0064e653
mov esp, ebp
pop ebp
ret 8