Function at 0x404870
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xffffffe0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0xf8
push esi
push edi
mov esi, ecx
mov dword [ebp - 4], esi
mov dword [ebp - 0xf0], 0x41b58ab3
lea eax, [ebp - 0xf0]
mov dword [ebp - 0xec], str.4_16_13_5_GdcJG_32_12_5_BdPGX_48_15_5_nOVLO_64_4_10_oldProtect
shr eax, 3
add eax, 0x30000000
mov dword [ebp - 0xe8], fcn.00404870
mov dword [eax], 0x500f1f1
mov dword [eax + 4], 0xf2f2f2f2
mov dword [eax + 8], 0xf2f20400
mov dword [eax + 0xc], 0x700f2f2
mov dword [eax + 0x10], 0xf2f2f2f2
mov dword [eax + 0x14], 0xf3f3f3f8
mov byte [eax + 0x18], 0xf3
lea eax, [ebp - 0xe0]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xdf]
mov dword [ebp - 0xe0], 0x4e52454b
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xde]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xdd]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xdc]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xdb]
mov dword [ebp - 0xdc], 0x32334c45
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xda]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xd9]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xd8]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xd7]
mov dword [ebp - 0xd8], 0x6c6c642e
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xd6]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xd5]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xd4]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xb0]
mov byte [ebp - 0xd4], 0
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xaf]
mov dword [ebp - 0xb0], 0x74726956
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xae]
push eax
call sym.Install.dat___asan_store1
add esp, 0x40
lea eax, [ebp - 0xad]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xac]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xab]
mov dword [ebp - 0xac], 0x466c6175
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xaa]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xa9]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xa8]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xa7]
mov dword [ebp - 0xa8], 0x656572
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xa6]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xa5]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0xb0]
xor ecx, ecx
push eax
lea edx, [ebp - 0xe0]
call fcn.00403cf0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x80]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0x7f]
mov dword [ebp - 0x80], 0x74726956
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0x7e]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0x7d]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0x7c]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0x7b]
mov dword [ebp - 0x7c], 0x506c6175
push eax
call sym.Install.dat___asan_store1
add esp, 0x40
lea eax, [ebp - 0x7a]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0x79]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0x78]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0x77]
mov dword [ebp - 0x78], 0x65746f72
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0x76]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0x75]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0x74]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0x73]
mov word [ebp - 0x74], 0x7463
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0x72]
push eax
call sym.Install.dat___asan_store1
lea eax, [ebp - 0x80]
mov byte [ebp - 0x72], 0
push eax
lea edx, [ebp - 0xe0]
xor ecx, ecx
call fcn.00403cf0
push esi
mov dword [ebp - 8], eax
call sym.Install.dat___asan_load4
mov esi, dword [esi]
lea edi, [esi + 0x14]
push edi
call sym.Install.dat___asan_load2
movzx eax, word [edi]
xor ecx, ecx
add eax, esi
mov dword [ebp - 0x20], ecx
lea edi, [esi + 6]
mov dword [ebp - 0x18], eax
push edi
call sym.Install.dat___asan_load2
xor eax, eax
add esp, 0x34
cmp ax, word [edi]
jae 0x404c7d
mov ecx, dword [ebp - 0x18]
add ecx, 0x28
mov dword [ebp - 0x24], ecx
lea eax, [ebp - 0x50]
shr eax, 3
lea edi, [ecx + 0x14]
push edi
mov byte [eax + 0x30000000], 4
call sym.Install.dat___asan_load4
push dword [ebp - 0x24]
mov edi, dword [edi]
mov dword [ebp - 0x10], edi
call sym.Install.dat___asan_load4
mov eax, dword [ebp - 0x24]
add esp, 8
mov ecx, dword [eax]
mov dword [ebp - 0x1c], ecx
test edi, 0x2000000
je 0x404bc4
lea esi, [eax - 8]
push esi
call sym.Install.dat___asan_load4
add esp, 4
push 0x4000
push dword [ebp - 0x1c]
push dword [esi]
call dword [ebp - 0x14]
jmp 0x404c50
mov ecx, edi
mov eax, edi
shr eax, 0x1e
shr ecx, 0x1d
and eax, 1
and ecx, 1
lea ecx, [eax + ecx*2]
mov eax, edi
shr eax, 0x1f
lea edi, [eax + ecx*2]
shl edi, 2
add edi, 0x60d7a0
push edi
call sym.Install.dat___asan_load4
mov ecx, dword [edi]
add esp, 4
mov edx, dword [ebp - 0x10]
mov edi, ecx
mov eax, dword [ebp - 0x1c]
or edi, 0x200
test edx, 0x4000000
mov dword [ebp - 0xc], eax
cmove edi, ecx
test eax, eax
jne 0x404c34
test edx, 0x40
je 0x404c1e
add esi, 0x20
jmp 0x404c25
test dl, dl
jns 0x404c50
add esi, 0x24
push esi
call sym.Install.dat___asan_load4
mov eax, dword [esi]
add esp, 4
test eax, eax
je 0x404c50
mov esi, dword [ebp - 0x24]
sub esi, 8
push esi
call sym.Install.dat___asan_load4
add esp, 4
lea eax, [ebp - 0x50]
push eax
push edi
push dword [ebp - 0xc]
push dword [esi]
call dword [ebp - 8]
mov esi, dword [ebp - 4]
inc dword [ebp - 0x20]
add dword [ebp - 0x24], 0x28
push esi
call sym.Install.dat___asan_load4
mov esi, dword [esi]
lea edi, [esi + 6]
push edi
call sym.Install.dat___asan_load2
movzx eax, word [edi]
add esp, 8
mov ecx, dword [ebp - 0x24]
cmp dword [ebp - 0x20], eax
jl 0x404b70
lea eax, [ebp - 0xf0]
mov dword [ebp - 0xf0], 0x45e0360e
shr eax, 3
add eax, 0x30000000
push 0x19
push eax
call sym.Install.dat___asan_set_shadow_00
add esp, 8
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret