Function at 0x40a330
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x174
mov eax, dword [0x4a9018]
xor eax, esp
mov dword [esp + 0x170], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
lea eax, [esp + 0x14c]
mov esi, ecx
mov word [esp + 0x14d], 0x73
push eax
mov ecx, edi
mov dword [esp + 0x144], esi
mov ebx, edx
mov byte [esp + 0x150], 0x71
call fcn.00411bb0
cmp byte [ebp + 0xc], 0
lea eax, [esp + 0x14c]
mov ecx, edi
push eax
je 0x40a448
mov word [esp + 0x151], 0x61
mov byte [esp + 0x150], 0x71
call fcn.00411bb0
lea edx, [esp + 0x14]
mov dword [esp + 0x14], 0
mov ecx, esi
call fcn.00416dc0
test eax, eax
je 0x40a42d
cmp dword [esp + 0x14], 0
je 0x40a42d
lea eax, [esp + 0x14c]
mov dword [esp + 0x14c], 0x746171
push eax
mov ecx, edi
call fcn.00411bb0
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x140]
push eax
push 4
push ebx
mov edx, 0x13
mov dword [esp + 0x14c], 0
call fcn.00416d10
add esp, 0xc
cmp dword [ebx], 0
je 0x40a430
lea eax, [esp + 0x14c]
mov dword [esp + 0x14c], 0x68746171
push eax
mov ecx, edi
mov byte [esp + 0x154], 0
call fcn.00411bb0
cmp dword [ebx], 0
setne al
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x170]
xor ecx, esp
call fcn.0041c0d2
mov esp, ebp
pop ebp
ret
mov word [esp + 0x150], 0x7571
mov byte [esp + 0x152], 0
call fcn.00411bb0
mov byte [esp + 0x13], 0
mov dword [esp + 0x144], 4
mov dword [esp + 0x148], 0
mov dword [esp + 0x18], 0x128
call fcn.00417760
mov dword [esp + 0x14], eax
cmp eax, 0xffffffff
je 0x40a698
lea edx, [esp + 0x18]
mov ecx, eax
call fcn.004176e0
cmp eax, 1
jne 0x40a68f
mov word [esp + 0x16c], 0x7865
mov dword [esp + 0x16f], 0x65726f6c
mov dword [esp + 0x174], 0x6578652e
mov byte [esp + 0x16e], 0x70
mov byte [esp + 0x178], 0
mov byte [esp + 0x173], 0x72
lea eax, [esp + 0x3c]
lea ecx, [esp + 0x16c]
nop dword [eax + eax]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x40a510
test dl, dl
je 0x40a50c
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x40a510
add ecx, 2
add eax, 2
test dl, dl
jne 0x40a4f0
xor eax, eax
jmp 0x40a515
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40a637
mov byte [esp + 0x14f], al
mov ecx, edi
lea eax, [esp + 0x14c]
mov word [esp + 0x14d], 0x6575
push eax
mov byte [esp + 0x150], 0x71
call fcn.00411bb0
push dword [esp + 0x20]
call fcn.004184a0
mov esi, eax
add esp, 4
test esi, esi
je 0x40a637
lea eax, [esp + 0x15c]
mov dword [esp + 0x15c], 0x70657571
push eax
mov ecx, edi
mov byte [esp + 0x164], 0
call fcn.00411bb0
push ebx
mov edx, 0xa
mov ecx, esi
call fcn.00418820
add esp, 4
test eax, eax
je 0x40a61f
lea eax, [esp + 0x164]
mov dword [esp + 0x164], 0x70657571
push eax
mov ecx, edi
mov word [esp + 0x16c], 0x74
call fcn.00411bb0
mov ecx, dword [ebx]
lea eax, [esp + 0x144]
push eax
push dword [esp + 0x148]
lea eax, [esp + 0x150]
mov edx, 0xc
push eax
call fcn.00416d10
add esp, 0xc
test eax, eax
je 0x40a61f
lea eax, [esp + 0x154]
mov dword [esp + 0x155], 0x74706575
push eax
mov ecx, edi
mov word [esp + 0x15d], 0x69
mov byte [esp + 0x158], 0x71
call fcn.00411bb0
mov eax, dword [esp + 0x140]
cmp eax, dword [esp + 0x148]
je 0x40a64f
mov ecx, dword [ebx]
test ecx, ecx
je 0x40a630
call fcn.00419810
mov dword [ebx], 0
mov ecx, esi
call fcn.00419810
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x18]
call fcn.00417660
cmp eax, 1
je 0x40a4e0
jmp 0x40a68f
lea eax, [esp + 0x154]
mov word [esp + 0x155], 0x6575
push eax
mov ecx, edi
mov byte [esp + 0x158], 0x71
mov dword [esp + 0x15c], 0x736974
mov byte [esp + 0x15b], 0x70
call fcn.00411bb0
mov ecx, esi
mov byte [esp + 0x13], 1
call fcn.00419810
mov ecx, dword [esp + 0x14]
call fcn.00419810
mov ecx, dword [esp + 0x17c]
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0041c0d2
mov esp, ebp
pop ebp
ret