Function at 0x435b00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x4ba582
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xcc
push ebx
push esi
push edi
lea ecx, [esp + 0x38]
mov dword [esp + 0x28], 0
call fcn.0040deb0
mov dword [esp + 0xe0], 1
mov dword [esp + 0x80], 0
lea eax, [esp + 0x27]
lea ecx, [esp + 0x2c]
push eax
mov byte [esp + 0xe4], 2
call fcn.00441c50
mov edi, 0x4e7894
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0xe0], 3
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x4e7894
push ecx
push 0x4e7894
lea ecx, [esp + 0x34]
call fcn.00404480
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0xf0]
push edx
mov byte [esp + 0xe8], 4
call fcn.00426ba0
lea ecx, [esp + 0x2c]
mov byte [esp + 0xe0], 7
call fcn.00421180
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x9c]
mov bl, 6
push eax
push ecx
mov byte [esp + 0xe8], bl
call fcn.00429020
add esp, 8
mov esi, eax
push esi
lea ecx, [esp + 0x3c]
mov byte [esp + 0xe4], 8
call fcn.004145b0
lea edx, [esi + 0xc]
lea ecx, [esp + 0x44]
push edx
call fcn.004145b0
mov eax, dword [esi + 0x18]
add esi, 0x2c
mov dword [esp + 0x50], eax
mov ecx, dword [esi - 0x10]
mov dword [esp + 0x54], ecx
mov edx, dword [esi - 0xc]
mov dword [esp + 0x58], edx
mov eax, dword [esi - 8]
mov dword [esp + 0x5c], eax
mov ecx, dword [esi - 4]
mov dword [esp + 0x60], ecx
mov edx, dword [esi]
mov dword [esp + 0x64], edx
mov eax, dword [esi + 4]
mov dword [esp + 0x68], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x6c], ecx
mov edx, dword [esi + 0xc]
mov dword [esp + 0x70], edx
mov byte [esp + 0xe0], 9
lea ecx, [esp + 0xa8]
call fcn.00421180
lea ecx, [esp + 0x9c]
mov byte [esp + 0xe0], bl
call fcn.00421180
lea eax, [esp + 0xf]
lea ecx, [esp + 0x10]
push eax
mov byte [esp + 0xe4], 0xa
call fcn.00441c50
mov edi, 0x4e788c
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0xe0], 0xb
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x4e788c
push ecx
push 0x4e788c
lea ecx, [esp + 0x18]
call fcn.00404480
lea ecx, [esp + 0x10]
push 0
push ecx
lea ecx, [esp + 0x24]
mov byte [esp + 0xe8], 0xc
call fcn.004268e0
lea ecx, [esp + 0x10]
mov dword [esp + 0x80], eax
mov byte [esp + 0xe0], 0xa
call fcn.00421180
lea edx, [esp + 0xf]
lea ecx, [esp + 0x10]
push edx
mov byte [esp + 0xe4], 0xd
call fcn.00441c50
mov edi, 0x4e7880
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0xe0], 0xe
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x4e7880
push ecx
push 0x4e7880
lea ecx, [esp + 0x18]
call fcn.00404480
lea eax, [esp + 0x10]
push 0
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xe8], 0xf
call fcn.004268e0
lea ecx, [esp + 0x10]
mov dword [esp + 0x84], eax
mov byte [esp + 0xe0], 0xd
call fcn.00421180
lea ecx, [esp + 0xf]
mov byte [esp + 0xe0], 0x10
push ecx
lea ecx, [esp + 0x14]
call fcn.00441c50
mov edi, 0x4e7878
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0xe0], 0x11
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x4e7878
push ecx
push 0x4e7878
lea ecx, [esp + 0x18]
call fcn.00404480
lea edx, [esp + 0x10]
push 0
push edx
lea ecx, [esp + 0x24]
mov byte [esp + 0xe8], 0x12
call fcn.004268e0
lea ecx, [esp + 0x10]
mov dword [esp + 0x7c], eax
mov byte [esp + 0xe0], 0x10
call fcn.00421180
lea eax, [esp + 0xf]
lea ecx, [esp + 0x10]
push eax
mov byte [esp + 0xe4], 0x13
call fcn.00441c50
mov edi, 0x4e7874
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0xe0], 0x14
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x4e7874
push ecx
push 0x4e7874
lea ecx, [esp + 0x18]
call fcn.00404480
lea ecx, [esp + 0x10]
push 0
push ecx
lea ecx, [esp + 0x24]
mov byte [esp + 0xe8], 0x15
call fcn.004268e0
lea ecx, [esp + 0x10]
mov dword [esp + 0x98], eax
mov byte [esp + 0xe0], 0x13
call fcn.00421180
lea edx, [esp + 0xf]
lea ecx, [esp + 0x10]
push edx
mov byte [esp + 0xe4], 0x16
call fcn.00441c50
mov edi, 0x4e5bcc
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0xe0], 0x17
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x4e5bcc
push ecx
push 0x4e5bcc
lea ecx, [esp + 0x18]
call fcn.00404480
lea eax, [esp + 0x10]
push 0
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xe8], 0x18
call fcn.00426a10
fstp dword [esp + 0x74]
lea ecx, [esp + 0x10]
mov byte [esp + 0xe0], 0x16
call fcn.00421180
lea ecx, [esp + 0xf]
mov byte [esp + 0xe0], 0x19
push ecx
lea ecx, [esp + 0x14]
call fcn.00441c50
mov edi, 0x4e5bd4
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0xe0], 0x1a
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x4e5bd4
push ecx
push 0x4e5bd4
lea ecx, [esp + 0x18]
call fcn.00404480
lea edx, [esp + 0x10]
push 0
push edx
lea ecx, [esp + 0x24]
mov byte [esp + 0xe8], 0x1b
call fcn.00426a10
fstp dword [esp + 0x78]
lea ecx, [esp + 0x10]
mov byte [esp + 0xe0], 0x19
call fcn.00421180
mov eax, dword [esp + 0x1c]
mov byte [esp + 0xe0], bl
test eax, eax
je 0x43615c
lea eax, [esp + 0xf]
lea ecx, [esp + 0x10]
push eax
mov byte [esp + 0xe4], 0x1c
call fcn.00441c50
mov edi, 0x4e7868
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0xe0], 0x1d
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x4e7868
push ecx
push 0x4e7868
lea ecx, [esp + 0x18]
call fcn.00404480
lea ecx, [esp + 0x10]
lea edx, [esp + 0x20]
push ecx
push edx
lea ecx, [esp + 0x24]
mov byte [esp + 0xe8], 0x1e
call fcn.00426ba0
lea ecx, [esp + 0x10]
mov byte [esp + 0xe0], 0x21
call fcn.00421180
lea eax, [esp + 0xf]
lea ecx, [esp + 0x10]
push eax
mov byte [esp + 0xe4], 0x22
call fcn.00441c50
mov edi, 0x4e785c
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0xe0], 0x23
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x4e785c
push ecx
push 0x4e785c
lea ecx, [esp + 0x18]
call fcn.00404480
lea ecx, [esp + 0x10]
push 0
push ecx
lea ecx, [esp + 0x28]
mov byte [esp + 0xe8], 0x24
call fcn.004268e0
lea ecx, [esp + 0x10]
mov dword [esp + 0x88], eax
mov byte [esp + 0xe0], 0x22
call fcn.00421180
lea edx, [esp + 0xf]
lea ecx, [esp + 0x10]
push edx
mov byte [esp + 0xe4], 0x25
call fcn.00441c50
mov edi, 0x4e7850
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0xe0], 0x26
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x4e7850
push ecx
push 0x4e7850
lea ecx, [esp + 0x18]
call fcn.00404480
lea eax, [esp + 0x10]
push 0
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xe8], 0x27
call fcn.004268e0
lea ecx, [esp + 0x10]
mov dword [esp + 0x8c], eax
mov byte [esp + 0xe0], 0x25
call fcn.00421180
lea ecx, [esp + 0xf]
mov byte [esp + 0xe0], 0x28
push ecx
lea ecx, [esp + 0x14]
call fcn.00441c50
mov edi, 0x4e7644
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0xe0], 0x29
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x4e7644
push ecx
push 0x4e7644
lea ecx, [esp + 0x18]
call fcn.00404480
lea edx, [esp + 0x10]
push 0
push edx
lea ecx, [esp + 0x28]
mov byte [esp + 0xe8], 0x2a
call fcn.00426a10
fstp dword [esp + 0x90]
lea ecx, [esp + 0x10]
mov byte [esp + 0xe0], 0x28
call fcn.00421180
lea eax, [esp + 0xf]
lea ecx, [esp + 0x10]
push eax
mov byte [esp + 0xe4], 0x2b
call fcn.00441c50
mov edi, 0x4e7844
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0xe0], 0x2c
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x4e7844
push ecx
push 0x4e7844
lea ecx, [esp + 0x18]
call fcn.00404480
lea ecx, [esp + 0x10]
push 0xff
push ecx
lea ecx, [esp + 0x28]
mov byte [esp + 0xe8], 0x2d
call fcn.004268e0
lea ecx, [esp + 0x10]
mov dword [esp + 0x94], eax
mov byte [esp + 0xe0], 0x2b
call fcn.00421180
lea ecx, [esp + 0x20]
mov byte [esp + 0xe0], bl
call fcn.00414630
mov esi, dword [esp + 0xe8]
lea edx, [esp + 0x38]
push edx
mov ecx, esi
call fcn.004361d0
mov dword [esp + 0x28], 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0xe0], 1
call fcn.00414630
lea ecx, [esp + 0x44]
mov dword [esp + 0xe0], 0x2e
call fcn.00421180
lea ecx, [esp + 0x38]
mov byte [esp + 0xe0], 0
call fcn.00421180
mov ecx, dword [esp + 0xd8]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0xd8
ret