Function at 0x4be958
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x61
push 0
push 0
dec ecx
jne 0x4be960
push ebx
push esi
push edi
mov byte [ebp - 5], dl
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4bf10b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
xor edx, edx
call fcn.00435b34
call fcn.0040ac64
mov eax, dword [ebp - 4]
fstp qword [eax + 0x3c0]
wait
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
mov eax, dword [ebp - 4]
call fcn.0045ca2c
push eax
call sub.user32.dll_SetWindowPos
mov eax, dword [ebp - 4]
fld qword [eax + 0x3c0]
mov eax, dword [ebp - 4]
fsub qword [eax + 0x3b8]
fstp qword [ebp - 0x10]
wait
mov eax, dword [ebp - 4]
push dword [eax + 0x3d0]
push 0x4bf124
lea eax, [ebp - 0x1f0]
push eax
lea edx, [ebp - 0x1f4]
mov eax, 0x4bdc24
call fcn.004066bc
mov ecx, dword [ebp - 0x1f4]
mov eax, dword [0x4c4798]
mov eax, dword [eax]
mov edx, 0x4bf134
mov ebx, dword [eax]
call dword [ebx + 0x4c]
push dword [ebp - 0x1f0]
push 0x4bf148
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00404ab0
mov eax, dword [ebp - 4]
cmp byte [eax + 0x399], 0
je 0x4bea5a
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x1f8]
mov eax, 0x4bdc0c
call fcn.004066bc
mov ecx, dword [ebp - 0x1f8]
mov eax, dword [0x4c4798]
mov eax, dword [eax]
mov edx, 0x4bf154
mov ebx, dword [eax]
call dword [ebx + 0x4c]
jmp 0x4bea85
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x1fc]
mov eax, 0x4bdc14
call fcn.004066bc
mov ecx, dword [ebp - 0x1fc]
mov eax, dword [0x4c4798]
mov eax, dword [eax]
mov edx, 0x4bf16c
mov ebx, dword [eax]
call dword [ebx + 0x4c]
mov eax, dword [ebp - 4]
cmp dword [eax + 0x39c], 0
jne 0x4bea9e
mov eax, dword [ebp - 4]
mov dword [eax + 0x39c], 1
lea eax, [ebp - 0x14]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x1c]
call fcn.00404c50
cmp byte [ebp - 5], 0
je 0x4beace
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x39c]
mov edx, dword [ebp - 4]
mov dword [edx + 0x3ac], eax
jmp 0x4beaed
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x3ac], eax
lea eax, [ebp - 0x14]
mov edx, 0x4bf180
call fcn.004049f8
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push 0x4bf148
lea eax, [ebp - 0x200]
push eax
lea edx, [ebp - 0x204]
mov eax, 0x4bdc2c
call fcn.004066bc
mov ecx, dword [ebp - 0x204]
mov eax, dword [0x4c4798]
mov eax, dword [eax]
mov edx, 0x4bf18c
mov ebx, dword [eax]
call dword [ebx + 0x4c]
push dword [ebp - 0x200]
push 0x4bf1a0
mov eax, dword [ebp - 4]
push dword [eax + 0x3cc]
push 0x4bf1b0
lea eax, [ebp - 0x208]
push eax
lea edx, [ebp - 0x20c]
mov eax, 0x4bdc34
call fcn.004066bc
mov ecx, dword [ebp - 0x20c]
mov eax, dword [0x4c4798]
mov eax, dword [eax]
mov edx, 0x4bf1c0
mov ebx, dword [eax]
call dword [ebx + 0x4c]
push dword [ebp - 0x208]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
lea eax, [ebp - 0x210]
call fcn.0040b8b4
push dword [ebp - 0x210]
push 0x4bf1b0
mov eax, dword [ebp - 4]
push dword [eax + 0x3dc]
push dword [eax + 0x3d8]
lea ecx, [ebp - 0x214]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x3ac]
mov eax, dword [ebp - 4]
call fcn.004bf964
push dword [ebp - 0x214]
lea eax, [ebp - 0x18]
mov edx, 0xb
call fcn.00404ab0
mov edx, dword [0x4c445c]
mov edx, dword [edx]
lea eax, [ebp - 0x218]
mov ecx, 0x4bf1d4
call fcn.00404a3c
mov edx, dword [ebp - 0x218]
lea eax, [ebp - 0x1ec]
call fcn.00402fa0
xor eax, eax
push ebp
push 0x4befe6
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4bec27
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1ec]
call fcn.00402d3c
call fcn.004028e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4bec8a
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x224]
mov eax, 0x4bdc4c
call fcn.004066bc
mov ecx, dword [ebp - 0x224]
mov eax, dword [0x4c4798]
mov eax, dword [eax]
mov edx, 0x4bf204
mov ebx, dword [eax]
call dword [ebx + 0x4c]
lea eax, [ebp - 0x228]
push eax
lea edx, [ebp - 0x22c]
mov eax, 0x4bdc74
call fcn.004066bc
mov ecx, dword [ebp - 0x22c]
mov eax, dword [0x4c4798]
mov eax, dword [eax]
mov edx, 0x4bf218
mov ebx, dword [eax]
call dword [ebx + 0x4c]
mov eax, dword [ebp - 0x228]
call fcn.0040a720
mov eax, dword [ebp - 4]
fstp qword [eax + 0x370]
wait
lea eax, [ebp - 0x230]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3d0]
mov dword [ebp - 0x2a8], eax
mov byte [ebp - 0x2a4], 0xb
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2a0], eax
mov byte [ebp - 0x29c], 0xb
mov eax, dword [ebp - 4]
fld qword [eax + 0x3d8]
fstp xword [ebp - 0x2b4]
wait
lea eax, [ebp - 0x2b4]
mov dword [ebp - 0x298], eax
mov byte [ebp - 0x294], 3
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x3ac]
mov dword [ebp - 0x290], ebx
mov byte [ebp - 0x28c], 0
mov dword [ebp - 0x2b8], ebx
fild dword [ebp - 0x2b8]
mov eax, dword [ebp - 4]
fdivr qword [eax + 0x3d8]
fstp xword [ebp - 0x2c4]
wait
lea eax, [ebp - 0x2c4]
mov dword [ebp - 0x288], eax
mov byte [ebp - 0x284], 3
mov eax, dword [ebp - 4]
fld qword [eax + 0x370]
mov eax, dword [ebp - 4]
fmul qword [eax + 0x3d8]
mov eax, dword [ebp - 4]
fild dword [eax + 0x3ac]
fdivp st(1)
fstp xword [ebp - 0x2d0]
wait
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x280], eax
mov byte [ebp - 0x27c], 3
mov eax, dword [ebp - 4]
fld qword [eax + 0x370]
mov eax, dword [ebp - 4]
fmul qword [eax + 0x3d8]
mov eax, dword [ebp - 4]
fild dword [eax + 0x3ac]
fdivp st(1)
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x2d4]
call fcn.004be904
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x278], eax
mov byte [ebp - 0x274], 0xb
mov eax, dword [ebp - 4]
push dword [eax + 0x3bc]
push dword [eax + 0x3b8]
lea edx, [ebp - 0x2d8]
mov eax, dword [ebp - 0x20]
call fcn.0040b8e0
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x270], eax
mov byte [ebp - 0x26c], 0xb
push dword [ebp - 0xc]
push dword [ebp - 0x10]
lea edx, [ebp - 0x2dc]
mov eax, dword [ebp - 0x20]
call fcn.0040b8e0
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x268], eax
mov byte [ebp - 0x264], 0xb
fld qword [ebp - 0x10]
call fcn.00402c68
mov eax, dword [ebp - 4]
fild dword [eax + 0x3ac]
fdivp st(1)
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x2e0]
mov eax, dword [ebp - 0x20]
call fcn.0040b8e0
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x260], eax
mov byte [ebp - 0x25c], 0xb
mov eax, dword [ebp - 4]
push dword [eax + 0x3c4]
push dword [eax + 0x3c0]
lea edx, [ebp - 0x2e4]
mov eax, dword [ebp - 0x20]
call fcn.0040b8e0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x258], eax
mov byte [ebp - 0x254], 0xb
mov eax, dword [ebp - 4]
push dword [eax + 0x3c4]
push dword [eax + 0x3c0]
lea eax, [ebp - 0x2ec]
push eax
lea edx, [ebp - 0x2f0]
mov eax, 0x4bdc54
call fcn.004066bc
mov ecx, dword [ebp - 0x2f0]
mov eax, dword [0x4c4798]
mov eax, dword [eax]
mov edx, 0x4bf22c
mov ebx, dword [eax]
call dword [ebx + 0x4c]
mov eax, dword [ebp - 0x2ec]
lea edx, [ebp - 0x2e8]
call fcn.0040b8e0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x24c], 0xb
mov eax, dword [ebp - 4]
add eax, 0x3e0
mov dword [ebp - 0x248], eax
mov byte [ebp - 0x244], 6
mov eax, dword [ebp - 4]
add eax, 0x4e0
mov dword [ebp - 0x240], eax
mov byte [ebp - 0x23c], 6
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3cc]
mov dword [ebp - 0x238], eax
mov byte [ebp - 0x234], 0xb
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x2f4]
push eax
lea edx, [ebp - 0x2f8]
mov eax, 0x4bdc44
call fcn.004066bc
mov ecx, dword [ebp - 0x2f8]
mov eax, dword [0x4c4798]
mov eax, dword [eax]
mov edx, 0x4bf240
mov ebx, dword [eax]
call dword [ebx + 0x4c]
mov eax, dword [ebp - 0x2f4]
mov ecx, 0xe
pop edx
call fcn.00409f94
mov edx, dword [ebp - 0x230]
lea eax, [ebp - 0x1ec]
call fcn.00404e0c
call fcn.00403430
call fcn.004028e4
lea eax, [ebp - 0x1ec]
call fcn.00403068
call fcn.004028e4
mov bl, 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4bf02e
test bl, bl
je 0x4bebf1
mov eax, dword [ebp - 4]
mov byte [eax + 0x378], 1
mov eax, dword [ebp - 4]
cmp byte [eax + 0x3b0], 0
je 0x4bf0c0
mov dl, 1
mov eax, dword [0x49a06c]
call fcn.00403970
mov ebx, eax
cmp byte [ebp - 5], 0
je 0x4bf066
mov byte [ebx + 0x14], 1
jmp 0x4bf06a
mov byte [ebx + 0x14], 2
push ebx
lea edx, [ebp - 0x304]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5e0]
call fcn.004bdcc0
mov eax, dword [ebp - 0x304]
push eax
lea edx, [ebp - 0x308]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5e0]
call fcn.004bdc8c
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5e4]
pop ecx
call fcn.0049a3a0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5e4]
mov eax, dword [eax + 4]
mov edx, dword [eax]
call dword [edx + 0x18]
mov eax, dword [ebp - 0x18]
call fcn.00433478
mov eax, dword [ebp - 4]
call fcn.00473240
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4bf112
lea eax, [ebp - 0x308]
mov edx, 0xe
call fcn.00404754
lea eax, [ebp - 0x230]
mov edx, 0x11
call fcn.00404754
lea eax, [ebp - 0x20]
mov edx, 4
call fcn.00404754
ret