Function at 0x40b4c3
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b9083
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x198
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xbc], 0x1519
mov dword [ebp - 0xdc], str.tdi_emyhoqd_giptxmzf_strde_kbab_wkd_afydwupmf
cmp dword [ebp - 0xbc], 0x156d
jle 0x40b546
push 0
push 0
push 1
push 1
push 0x4c3d
push 1
push 0x5dd7
push 0x7f6
push 1
push 0xcf4
push 1
push 0x7859
push 0x3246
push 0x2e3a
push 0x4aba
call fcn.0040c5fa
add esp, 0x3c
mov eax, dword [0xabbf3c]
and eax, 1
jne 0x40b572
mov eax, dword [0xabbf3c]
or eax, 1
mov dword [0xabbf3c], eax
mov ecx, 0xabbfb4
call fcn.0040300a
push 0x4ba119
call fcn.0048c7cf
pop ecx
push 0x13f5
push 0x4935
lea eax, [ebp - 0xdc]
push eax
push 0x636e
push 0
push 0
lea eax, [ebp - 0xbc]
push eax
push 0x5652
push 0x6f88
push 1
call fcn.004197e7
add esp, 0x28
mov dword [ebp - 0xd0], 0x41eb
mov dword [ebp - 0x120], str.hpwwehpz_qwvunwlz_dste_cshmkjda
push 0x2a39
push 0x1e14
push 0x3976
push 0
push 1
push 0x6e3e
push 0x6184
push 1
push 0x3791
push 0x194a
lea eax, [ebp - 0xd0]
push eax
call fcn.0041acb3
add esp, 0x2c
push dword [ebp + 8]
lea ecx, [ebp - 0x138]
call fcn.00402cf4
push 0x7e0f
lea eax, [ebp - 0xd0]
push eax
push 0
push 0x45a8
lea eax, [ebp - 0x120]
push eax
call fcn.0041c941
add esp, 0x14
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x138]
call fcn.0040342a
push dword [eax]
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x138]
call fcn.0040343e
push dword [eax]
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x138]
call fcn.0040342a
push dword [eax]
mov edx, 0x405bb7
lea ecx, [ebp - 0x154]
call fcn.00428530
add esp, 0xc
mov dword [ebp - 0xd8], 0x5bc0
mov dword [ebp - 0xf4], str.zdo_xjzbguxhp_pxhw_rbdguyq_bbmuzqvk_dbajnm_pdl_exg
cmp dword [ebp - 0xd8], 0x5bcc
jle 0x40b6a0
push 0
push 0x41f9
call fcn.00424838
pop ecx
pop ecx
lea ecx, [ebp - 0x138]
call fcn.004056a5
mov dword [ebp - 0xc0], eax
push 0x3b1e
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xd8]
push eax
push 0x7d12
push 0
push 0x5784
call fcn.00419720
add esp, 0x18
mov dword [ebp - 0x8c], 0x6987
mov dword [ebp - 0x100], str.iqhjofccz_axzlufe_krbtsqjyi_fjyr_pmeobh_kcovo_abnqe_fwnsajr_eqfvlp_fprjymmri_zdvufdt_wozowgspp
push 1
push 0x321f
push 0
push 0x6e31
push 1
lea eax, [ebp - 0x8c]
push eax
push 0x1df5
call fcn.0041f62a
add esp, 0x1c
movzx eax, byte [0xabbe65]
test eax, eax
je 0x40b792
mov ecx, 0xabbfb4
call fcn.00426ccd
movzx eax, al
test eax, eax
jne 0x40b792
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0xc4]
push eax
mov ecx, 0xabbfb4
call fcn.00402fe2
lea eax, [ebp - 0x150]
push eax
mov ecx, 0xabbfb4
call fcn.00402fd4
push eax
lea ecx, [ebp - 0xc4]
call fcn.00402ff7
movzx eax, al
test eax, eax
je 0x40b792
lea ecx, [ebp - 0xc4]
call fcn.00426cd6
mov eax, dword [eax + 4]
mov dword [ebp - 0xe4], eax
lea ecx, [ebp - 0x138]
call fcn.00402d79
mov eax, dword [ebp - 0xe4]
jmp 0x40c1de
push 0x127b
lea eax, [ebp - 0x100]
push eax
push 0x594
push 0x3621
lea eax, [ebp - 0x8c]
push eax
push 1
push 0
push 1
push 1
push 1
call fcn.0041b2d2
add esp, 0x28
and dword [ebp - 0x1c], 0
mov dword [ebp - 0xb8], 0x254b
mov dword [ebp - 0xf8], str.wzuqpay_zizypll_nrksrfcf
lea eax, [ebp - 0xb8]
push eax
push 0
call fcn.00416ff1
pop ecx
pop ecx
lea eax, [ebp - 0x138]
push eax
call fcn.0040610c
pop ecx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x40c0ac
cmp dword [0xabbe74], 0
jne 0x40c091
mov byte [ebp - 0x7c], 0
mov byte [ebp - 0x7b], 0x4c
mov byte [ebp - 0x7a], 0x19
mov byte [ebp - 0x79], 0xc8
mov byte [ebp - 0x78], 0xdc
mov byte [ebp - 0x77], 0x4d
mov byte [ebp - 0x76], 0x62
mov byte [ebp - 0x75], 0x99
mov byte [ebp - 0x74], 0x7b
mov byte [ebp - 0x73], 0x70
mov byte [ebp - 0x72], 0x32
mov byte [ebp - 0x71], 0xb9
mov byte [ebp - 0x70], 0xb1
mov byte [ebp - 0x6f], 0x4c
mov byte [ebp - 0x6e], 0x64
mov byte [ebp - 0x6d], 0x15
mov byte [ebp - 0x6c], 6
mov byte [ebp - 0x6b], 0x5b
mov byte [ebp - 0x6a], 0x54
mov byte [ebp - 0x69], 0x2c
mov byte [ebp - 0x68], 0x47
mov byte [ebp - 0x67], 0x3e
mov byte [ebp - 0x66], 0xf0
mov byte [ebp - 0x65], 0xc6
mov byte [ebp - 0x64], 0x73
mov byte [ebp - 0x63], 0xf
mov byte [ebp - 0x62], 0xbd
mov byte [ebp - 0x61], 9
mov byte [ebp - 0x60], 0x67
mov byte [ebp - 0x5f], 7
mov byte [ebp - 0x5e], 0x37
mov byte [ebp - 0x5d], 8
mov byte [ebp - 0x5c], 0x35
mov byte [ebp - 0x5b], 1
mov byte [ebp - 0x5a], 0x6e
mov byte [ebp - 0x59], 5
mov byte [ebp - 0x58], 0x77
mov byte [ebp - 0x57], 3
mov byte [ebp - 0x56], 0x7b
mov byte [ebp - 0x55], 0xa
mov byte [ebp - 0x54], 0x7b
mov byte [ebp - 0x53], 4
mov byte [ebp - 0x52], 0x76
mov byte [ebp - 0x51], 6
mov byte [ebp - 0x50], 0x46
mov byte [ebp - 0x4f], 0xb
mov byte [ebp - 0x4e], 0x81
mov byte [ebp - 0x4d], 2
mov byte [ebp - 0x4c], 0x89
mov dword [ebp - 0x80], 0x5dde
mov dword [ebp - 0x110], str.xfibnfi_dvooccknz_ianjz_tawjjcgkk_tzoklhuri_wmhm_godeyd_ebonblv_voho_iao_vharga_pvpnin_nrm_lrybe
cmp dword [ebp - 0x80], 0x5edb
jle 0x40b933
push 0x3948
push 0
push 1
call fcn.00418565
add esp, 0xc
push 1
push 1
push 1
push 1
push 0x74ba
push 1
push 0x730c
push 1
push 0x4eb4
push 0x4b9a
push 1
push 0x4058
push 0x716d
call fcn.0040ac4a
add esp, 0x34
and dword [ebp - 0x18], 0
and dword [ebp - 0xb4], 0
jmp 0x40b948
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x31
jae 0x40bb3e
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x7c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x40b9ab
push 0x47a5
push 1
push 0
push 1
push 0x56cf
lea eax, [ebp - 0xb4]
push eax
call fcn.00414ac5
add esp, 0x18
push 0xa0
push 0
push 0x3e4f
lea eax, [ebp - 0x18]
push eax
push 0x4641
push 0
push 0x2337
call fcn.00415ef4
add esp, 0x1c
jmp 0x40b940
mov dword [ebp - 0x94], 0x66c9
mov dword [ebp - 0xec], str.knyx_gwqrtiums_bjohshdi_zrbo_yyk_tjqrwrk_dursuh
cmp dword [ebp - 0x94], 0x6718
jle 0x40ba1c
push 0
push 0x42ac
push 0x7f9f
push 0
push 0x403d
push 0x28f9
call fcn.00417c8a
add esp, 0x18
push 0x228f
push 0xa28
push 0x1ca5
push 0x1884
push 1
push 0
push 0x3c82
push 0x3bff
push 0x5b0d
push 1
call fcn.004197e7
add esp, 0x28
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x7b]
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xb4]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x9c], eax
and dword [ebp - 4], 0
push 0
push 0x1b68
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x94]
push eax
push 1
push 1
call fcn.0041a197
add esp, 0x18
jmp 0x40ba87
or dword [ebp - 4], 0xffffffff
jmp 0x40ba91
mov dword [ebp - 0xd4], 0x5b84
mov dword [ebp - 0x108], str.kccpfc_wigbbwryg_jlesfxqog_ovqxbc_wdsvsu_igwulgu_zroxda_adkpfgr_kdpxwj_rlzw_ytrh_fjbmyqz_dycrkmm_sxygijn
lea eax, [ebp - 0xd4]
push eax
push 0x65ff
push 0
push 0x3b7a
push 1
call fcn.0040c3d5
add esp, 0x14
push 0
push 0x8b9
push 1
push 0x6e1a
push 0x56a4
push 0x7299
push 0x3651
push 0x37ba
push 0
lea eax, [ebp - 0x9c]
push eax
push 1
push 0x50c
push 0x7fe7
push 1
call fcn.0041c0a7
add esp, 0x38
lea eax, [ebp - 0x108]
push eax
push 0
lea eax, [ebp - 0xd4]
push eax
push 0
push 0x3ee5
call fcn.0040c2ed
add esp, 0x14
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x7c]
mov cx, word [ebp - 0x9c]
mov word [ebp + eax*2 - 0x178], cx
jmp 0x40b940
push 0x49f3
lea eax, [ebp - 0x110]
push eax
push 0
lea eax, [ebp - 0x80]
push eax
call fcn.0040d9bb
add esp, 0x10
mov dword [ebp - 0xa4], 0x70b0
mov dword [ebp - 0x11c], str.qyvr_qzohv_tuxhfqgxb_sejws
cmp dword [ebp - 0xa4], 0x726e
jle 0x40bbb3
push 0x7908
push 0x7260
push 0
call fcn.0041f470
add esp, 0xc
push 0x19d4
push 0x2641
push 0x3ab3
push 0
push 0x52b0
push 0
push 0x73b9
push 1
call fcn.00419278
add esp, 0x20
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x178], cx
push 0x598a
push 0
lea eax, [ebp - 0xa4]
push eax
push 0
lea eax, [ebp - 0x11c]
push eax
call fcn.0041e537
add esp, 0x14
lea eax, [ebp - 0x178]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.00426c11
push eax
call fcn.0040610c
pop ecx
mov dword [ebp - 0xb0], eax
lea ecx, [ebp - 0x1a8]
call fcn.00402d79
and dword [ebp - 0x20], 0
jmp 0x40bc19
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xd
jae 0x40bcdd
mov dword [ebp - 0xcc], 0x6bbc
mov dword [ebp - 0xfc], str.bpwtrrntl_btgpcbl_cofldaaai_arnh_esmbvp_jze_brmm_jrxqbwbx_mqfqfza_mxgebsr
lea eax, [ebp - 0xcc]
push eax
push 0x4693
push 0x2487
push 0
push 1
call fcn.00416656
add esp, 0x14
xor eax, eax
mov ecx, dword [ebp - 0x20]
mov word [ebp + ecx*2 - 0x178], ax
mov dword [ebp - 4], 2
push 0x1a1e
push 0
push 0x7d72
push 0x22d7
lea eax, [ebp - 0xcc]
push eax
push 1
lea eax, [ebp - 0xfc]
push eax
call fcn.00415ef4
add esp, 0x1c
jmp 0x40bcce
or dword [ebp - 4], 0xffffffff
jmp 0x40bcd8
jmp 0x40bc12
cmp dword [ebp - 0xb0], 0
je 0x40c091
mov dword [ebp - 0xac], 0x322b
mov dword [ebp - 0x114], str.jeweo_goxr_hwrdxzqs
cmp dword [ebp - 0xac], 0x35f2
jle 0x40bd18
push 0x4184
push 0
call fcn.00414a83
pop ecx
pop ecx
push 0x3f5c
push 1
lea eax, [ebp - 0xac]
push eax
push 0
lea eax, [ebp - 0x114]
push eax
push 0x186f
call fcn.0041c51c
add esp, 0x18
mov dword [ebp - 0xa8], 0x4dc0
mov dword [ebp - 0xf0], str.rgzfgpeni_vbdyfvhpv_lycnevaok
push 0x2556
push 0x43e
push 0
lea eax, [ebp - 0xa8]
push eax
push 1
push 1
call fcn.00423fce
add esp, 0x18
mov byte [ebp - 0x48], 8
mov byte [ebp - 0x47], 0x62
mov byte [ebp - 0x46], 0xa
mov byte [ebp - 0x45], 0x7c
mov byte [ebp - 0x44], 6
mov byte [ebp - 0x43], 0x67
mov byte [ebp - 0x42], 1
mov byte [ebp - 0x41], 0x76
mov byte [ebp - 0x40], 0
mov byte [ebp - 0x3f], 0x55
mov byte [ebp - 0x3e], 0xb
mov byte [ebp - 0x3d], 0x62
mov byte [ebp - 0x3c], 7
mov byte [ebp - 0x3b], 0x7f
mov byte [ebp - 0x3a], 4
mov byte [ebp - 0x39], 0x5b
mov byte [ebp - 0x38], 9
mov byte [ebp - 0x37], 0x83
mov byte [ebp - 0x36], 9
mov byte [ebp - 0x35], 0x49
mov byte [ebp - 0x34], 0xaa
mov byte [ebp - 0x33], 0xae
mov byte [ebp - 0x32], 0x97
mov byte [ebp - 0x31], 0xab
mov byte [ebp - 0x30], 0xf6
mov byte [ebp - 0x2f], 0xad
mov byte [ebp - 0x2e], 0x2d
mov byte [ebp - 0x2d], 3
mov byte [ebp - 0x2c], 0x77
mov byte [ebp - 0x2b], 5
mov byte [ebp - 0x2a], 0x7e
mov byte [ebp - 0x29], 2
mov byte [ebp - 0x28], 0x78
mov dword [ebp - 0xa0], 0x1df3
mov dword [ebp - 0x10c], str.rahglbud_iwetszrl_qtfwpaww_cvvsa_ovfhbupbm_ysejb_kikb_mluwhnw_qqr
push 0x636b
push 0
push 0x5e5a
push 0x3a74
lea eax, [ebp - 0xa0]
push eax
call fcn.0041c06a
add esp, 0x14
and dword [ebp - 0x14], 0
and dword [ebp - 0x88], 0
jmp 0x40be3c
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x21
jae 0x40bfce
mov dword [ebp - 0x84], 0x1ad5
mov dword [ebp - 0x104], str.yeolztpl_rbzfg_fhy_bvyrrpgv_vcbvt_auyqdw_azvurpzbj_gdiatu_dgvqy_buiqagse_xsyw_fmnldn_ddgrmbpn_rbqxzlg
lea eax, [ebp - 0x84]
push eax
push 0x3344
push 0
call fcn.0040e001
add esp, 0xc
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x48]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x40bec1
push 1
push 0x69b4
push 1
push 0x1f4e
push 1
push 0x6643
lea eax, [ebp - 0x88]
push eax
push 0x1114
push 1
call fcn.00409cc7
add esp, 0x24
lea eax, [ebp - 0x14]
push eax
push 0
call fcn.0041d03a
pop ecx
pop ecx
jmp 0x40be34
push 0x6c08
lea eax, [ebp - 0x104]
push eax
push 0
push 1
push 0x7907
push 1
push 1
lea eax, [ebp - 0x84]
push eax
call fcn.0040d8a9
add esp, 0x20
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x47]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x88]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x90], 0x3135
mov dword [ebp - 0x118], str.woqjqk_azw_zabka_ztj_esupccjxj_qtvsi_ssts
push 1
lea eax, [ebp - 0x90]
push eax
push 0x5c28
push 0
push 0x15df
push 0x5032
call fcn.00417c8a
add esp, 0x18
push 1
push 0x389c
push 0x17ca
push 0x128e
push 1
push 1
lea eax, [ebp - 0x98]
push eax
push 1
push 1
push 0x260b
push 0x485
push 0x3e36
call fcn.00407738
add esp, 0x30
push 1
push 0x7ea4
push 1
push 0x769a
lea eax, [ebp - 0x118]
push eax
push 0x64de
push 0x280a
lea eax, [ebp - 0x90]
push eax
push 0
push 0x8ef
push 1
push 0x4d8c
push 0x2517
push 1
call fcn.0041c0a7
add esp, 0x38
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x48]
mov cl, byte [ebp - 0x98]
mov byte [ebp + eax - 0x148], cl
jmp 0x40be34
push 1
push 1
push 1
push 1
push 0x47a7
push 1
push 0x1e0a
push 1
lea eax, [ebp - 0x10c]
push eax
push 0x4fb6
push 0
lea eax, [ebp - 0xa0]
push eax
push 0x914
call fcn.0040ac4a
add esp, 0x34
xor eax, eax
inc eax
imul eax, eax, 0xc
mov byte [ebp + eax - 0x148], 0
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0xf0]
push eax
push 0
push 0x7e8
push 0x12ad
call fcn.0042167d
add esp, 0x14
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x190]
call fcn.00426c41
and dword [ebp - 0x24], 0
jmp 0x40c055
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xd
jae 0x40c068
mov eax, dword [ebp - 0x24]
mov byte [ebp + eax - 0x148], 0
jmp 0x40c04e
push 0
push 0
lea eax, [ebp - 0x190]
push eax
push dword [ebp - 0xb0]
call fcn.0040f675
add esp, 0x10
mov dword [0xabbe74], eax
lea ecx, [ebp - 0x190]
call fcn.00402ea1
cmp dword [0xabbe74], 0
je 0x40c0ac
mov ecx, dword [ebp + 8]
call fcn.00426c36
push eax
call dword [0xabbe74]
mov dword [ebp - 0x1c], eax
push 0x5666
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xb8]
push eax
push 0
push 1
push 0x15a7
push 0x5bd2
push 0
push 0x3440
push 0x722e
push 0x37ca
call fcn.0041acb3
add esp, 0x2c
cmp dword [ebp - 0x1c], 0
je 0x40c1c4
movzx eax, byte [0xabbe65]
test eax, eax
je 0x40c110
mov ecx, 0xabbfb4
call fcn.00426ccd
movzx eax, al
test eax, eax
jne 0x40c1c4
push 0x2ee5
push 0
push 1
push 0xabbfb4
push 0x4029
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0xc0]
push eax
push 1
call fcn.0041711e
add esp, 0x20
mov dword [ebp - 0xc8], 0x5468
mov dword [ebp - 0xe0], str.sgq_lfysxd_falxvpa_tfdm_xciexk_ftmbpazzl_fxp
cmp dword [ebp - 0xc8], 0x580a
jle 0x40c173
push 0x4c13
push 0
push 0x5037
push 1
push 0x1160
call fcn.0041e537
add esp, 0x14
push 0
push 0xabbe65
call fcn.00412d96
pop ecx
pop ecx
push 0
lea eax, [ebp - 0xc8]
push eax
push 0x1a75
push 0x7269
lea eax, [ebp - 0xe0]
push eax
push 0x62a
push 0x7124
push 0x418b
push 0x5d8a
push 0x3983
push 1
push 1
push 1
push 1
call fcn.00415359
add esp, 0x38
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xe8], eax
lea ecx, [ebp - 0x138]
call fcn.00402d79
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret