Function at 0x40a610
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x492c96
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x234
push ebx
push esi
push edi
xor ebx, ebx
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x141]
mov byte [esp + 0x140], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x4be818]
mov esi, 0x100
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], esi
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x254]
mov dword [esp + 0x248], 1
and eax, 0xffff
sub eax, ebx
je 0x40a96c
dec eax
je 0x40a7fc
dec eax
jne 0x40aae6
lea ecx, [esp + 0x38]
lea edx, [esp + 0x140]
push ecx
push edx
push 0x4bde3c
push 0x38
push 0x4b9188
call fcn.0043f280
add esp, 0x14
test eax, eax
je 0x40a6be
lea eax, [esp + 0x140]
jmp 0x40aadc
mov eax, dword [0x4be818]
mov dword [esp + 0xc], eax
mov al, 0xd8
mov cl, 0xae
mov byte [esp + 0x15], al
mov byte [esp + 0x17], al
mov al, 0x28
mov byte [esp + 0x12], cl
mov byte [esp + 0x22], al
mov byte [esp + 0x26], cl
mov byte [esp + 0x2c], al
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x41]
mov byte [esp + 0x40], bl
lea edx, [esp + 0x40]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x30]
mov byte [esp + 0x248], 4
push ecx
push edx
stosb byte es:[edi], al
push 0x4bde3c
lea eax, [esp + 0x1c]
push 0x20
push eax
mov byte [esp + 0x24], 0x25
mov byte [esp + 0x25], 0xd3
mov byte [esp + 0x27], 0x32
mov byte [esp + 0x28], 0x15
mov byte [esp + 0x2a], 0x12
mov byte [esp + 0x2c], 0xc9
mov byte [esp + 0x2d], 0x78
mov byte [esp + 0x2e], 0xea
mov byte [esp + 0x2f], 0x81
mov byte [esp + 0x30], 0x8f
mov byte [esp + 0x31], 0x53
mov byte [esp + 0x32], 0xcf
mov byte [esp + 0x33], 0x63
mov byte [esp + 0x34], 0x3b
mov byte [esp + 0x35], 0x5d
mov byte [esp + 0x37], 0xaf
mov byte [esp + 0x38], 0x51
mov byte [esp + 0x39], 0x27
mov byte [esp + 0x3b], 0x13
mov byte [esp + 0x3c], 0x40
mov byte [esp + 0x3d], 0xf6
mov byte [esp + 0x3e], 0x7d
mov byte [esp + 0x3f], 0x5a
mov byte [esp + 0x41], 0xeb
mov byte [esp + 0x42], 0xaa
mov byte [esp + 0x43], 0xe1
mov dword [esp + 0x44], esi
call fcn.0043f280
add esp, 0x14
test eax, eax
lea eax, [esp + 0x40]
jne 0x40a7b2
mov eax, str.sh_wnst
push eax
lea ecx, [esp + 0x10]
call fcn.004845bc
push 0x4b95f8
push 0x4b95f4
lea ecx, [esp + 0x14]
call fcn.004820c0
push str.utdo
push 0x4b95e8
lea ecx, [esp + 0x14]
call fcn.004820c0
lea ecx, [esp + 0xc]
mov byte [esp + 0x248], 1
call fcn.00484433
xor ecx, ecx
call ecx
jmp 0x40aad7
lea edx, [esp + 0x38]
lea eax, [esp + 0x140]
push edx
push eax
push 0x4bde3c
push 0x38
push 0x4b9100
call fcn.0043f280
add esp, 0x14
test eax, eax
je 0x40a82d
lea eax, [esp + 0x140]
jmp 0x40aadc
mov ecx, dword [0x4be818]
mov dword [esp + 0xc], ecx
mov al, 0xd8
mov cl, 0xae
mov byte [esp + 0x15], al
mov byte [esp + 0x17], al
mov al, 0x28
mov byte [esp + 0x12], cl
mov byte [esp + 0x22], al
mov byte [esp + 0x26], cl
mov byte [esp + 0x2c], al
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x41]
mov byte [esp + 0x40], bl
lea edx, [esp + 0x30]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x40]
push edx
push eax
push 0x4bde3c
lea ecx, [esp + 0x1c]
push 0x20
push ecx
mov byte [esp + 0x25c], 3
mov byte [esp + 0x24], 0x25
mov byte [esp + 0x25], 0xd3
mov byte [esp + 0x27], 0x32
mov byte [esp + 0x28], 0x15
mov byte [esp + 0x2a], 0x12
mov byte [esp + 0x2c], 0xc9
mov byte [esp + 0x2d], 0x78
mov byte [esp + 0x2e], 0xea
mov byte [esp + 0x2f], 0x81
mov byte [esp + 0x30], 0x8f
mov byte [esp + 0x31], 0x53
mov byte [esp + 0x32], 0xcf
mov byte [esp + 0x33], 0x63
mov byte [esp + 0x34], 0x3b
mov byte [esp + 0x35], 0x5d
mov byte [esp + 0x37], 0xaf
mov byte [esp + 0x38], 0x51
mov byte [esp + 0x39], 0x27
mov byte [esp + 0x3b], 0x13
mov byte [esp + 0x3c], 0x40
mov byte [esp + 0x3d], 0xf6
mov byte [esp + 0x3e], 0x7d
mov byte [esp + 0x3f], 0x5a
mov byte [esp + 0x41], 0xeb
mov byte [esp + 0x42], 0xaa
mov byte [esp + 0x43], 0xe1
mov dword [esp + 0x44], esi
call fcn.0043f280
add esp, 0x14
test eax, eax
lea eax, [esp + 0x40]
jne 0x40a922
mov eax, str.sh_wnst
push eax
lea ecx, [esp + 0x10]
call fcn.004845bc
push 0x4b95f8
push 0x4b95f4
lea ecx, [esp + 0x14]
call fcn.004820c0
push str.utdo
push 0x4b95e8
lea ecx, [esp + 0x14]
call fcn.004820c0
lea ecx, [esp + 0xc]
mov byte [esp + 0x248], 1
call fcn.00484433
xor edx, edx
call edx
jmp 0x40aad7
lea eax, [esp + 0x38]
lea ecx, [esp + 0x140]
push eax
push ecx
push 0x4bde3c
push 0x38
push 0x4b90c8
call fcn.0043f280
add esp, 0x14
test eax, eax
je 0x40a99d
lea eax, [esp + 0x140]
jmp 0x40aadc
mov edx, dword [0x4be818]
mov dword [esp + 0xc], edx
mov al, 0xd8
mov cl, 0xae
mov byte [esp + 0x15], al
mov byte [esp + 0x17], al
mov al, 0x28
mov byte [esp + 0x12], cl
mov byte [esp + 0x22], al
mov byte [esp + 0x26], cl
mov byte [esp + 0x2c], al
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x41]
mov byte [esp + 0x40], bl
lea edx, [esp + 0x10]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x30]
lea ecx, [esp + 0x40]
push eax
push ecx
push 0x4bde3c
push 0x20
push edx
mov byte [esp + 0x25c], 2
mov byte [esp + 0x24], 0x25
mov byte [esp + 0x25], 0xd3
mov byte [esp + 0x27], 0x32
mov byte [esp + 0x28], 0x15
mov byte [esp + 0x2a], 0x12
mov byte [esp + 0x2c], 0xc9
mov byte [esp + 0x2d], 0x78
mov byte [esp + 0x2e], 0xea
mov byte [esp + 0x2f], 0x81
mov byte [esp + 0x30], 0x8f
mov byte [esp + 0x31], 0x53
mov byte [esp + 0x32], 0xcf
mov byte [esp + 0x33], 0x63
mov byte [esp + 0x34], 0x3b
mov byte [esp + 0x35], 0x5d
mov byte [esp + 0x37], 0xaf
mov byte [esp + 0x38], 0x51
mov byte [esp + 0x39], 0x27
mov byte [esp + 0x3b], 0x13
mov byte [esp + 0x3c], 0x40
mov byte [esp + 0x3d], 0xf6
mov byte [esp + 0x3e], 0x7d
mov byte [esp + 0x3f], 0x5a
mov byte [esp + 0x41], 0xeb
mov byte [esp + 0x42], 0xaa
mov byte [esp + 0x43], 0xe1
mov dword [esp + 0x44], esi
call fcn.0043f280
add esp, 0x14
test eax, eax
lea eax, [esp + 0x40]
jne 0x40aa92
mov eax, str.sh_wnst
push eax
lea ecx, [esp + 0x10]
call fcn.004845bc
push 0x4b95f8
push 0x4b95f4
lea ecx, [esp + 0x14]
call fcn.004820c0
push str.utdo
push 0x4b95e8
lea ecx, [esp + 0x14]
call fcn.004820c0
lea ecx, [esp + 0xc]
mov byte [esp + 0x248], 1
call fcn.00484433
xor eax, eax
call eax
mov eax, 0x4c2d98
push eax
lea ecx, [esp + 0x38]
call fcn.004845bc
mov esi, dword [esp + 0x250]
lea ecx, [esp + 0x34]
push ecx
mov ecx, esi
call fcn.004841a8
mov dword [esp + 0x3c], 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x248], bl
call fcn.00484433
mov ecx, dword [esp + 0x240]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x240
ret