Function at 0x4029b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x429c56
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x90c
push ebx
push ebp
push esi
push edi
lea ecx, [esp + 0x4c]
call dword [0x42b7d4]
xor ebp, ebp
push 0x42c534
lea ecx, [esp + 0x1c]
mov dword [esp + 0x928], ebp
call dword [0x42b1b8]
push 0x42c534
lea ecx, [esp + 0x20]
mov byte [esp + 0x928], 1
call dword [0x42b1b8]
push 0x42c534
lea ecx, [esp + 0x24]
mov byte [esp + 0x928], 2
call dword [0x42b1b8]
push 0x42c534
lea ecx, [esp + 0x18]
mov byte [esp + 0x928], 3
call dword [0x42b1b8]
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x80], ebp
mov dword [esp + 0x84], ebp
mov dword [esp + 0x88], ebp
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x90], ebp
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], ebp
mov dword [esp + 0x9c], ebp
mov dword [esp + 0xa0], ebp
mov dword [esp + 0xa4], ebp
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xac], ebp
mov dword [esp + 0xb0], ebp
mov dword [esp + 0xb4], ebp
mov dword [esp + 0xb8], ebp
mov dword [esp + 0xbc], ebp
mov dword [esp + 0xc0], ebp
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xc8], ebp
mov dword [esp + 0xd0], ebp
mov dword [esp + 0xd4], ebp
mov ecx, 0x42bff4
lea esi, [esp + 0x7c]
mov byte [esp + 0x924], 5
call fcn.004095f0
cmp eax, 0xe0010020
jne 0x402b0b
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x42c010
call dword [0x42b1b8]
call fcn.0041e040
add esp, 4
push ebp
call dword [0x42b6dc]
mov ebx, dword [esp + 0x92c]
lea eax, [ebx + 0xb0]
push eax
lea eax, [esp + 0x14]
push eax
mov edi, 0x42bf58
call fcn.00405870
add esp, 8
push ebp
mov byte [esp + 0x928], 6
mov eax, dword [eax]
push 0x40
push eax
lea ecx, [esp + 0x58]
call fcn.00425566
lea ecx, [esp + 0x10]
mov esi, eax
mov byte [esp + 0x924], 5
call dword [0x42b63c]
cmp esi, ebp
jne 0x402b68
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x42c050
jmp 0x402af6
push 0xa
lea ecx, [esp + 0x64]
call fcn.00425530
lea ecx, [esp + 0x60]
push ecx
push ecx
mov byte [esp + 0x92c], 7
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42bf6c
call dword [0x42b1b8]
mov esi, dword [0x42b7cc]
lea ecx, [esp + 0x54]
call esi
mov edi, dword [0x42b7c8]
lea edx, [esp + 0x60]
push edx
push 1
lea eax, [esp + 0x18]
push eax
mov ecx, 0x43f288
call edi
lea ecx, [ebx + 0xac]
push eax
mov byte [esp + 0x928], 8
call dword [0x42b614]
lea ecx, [esp + 0x10]
mov byte [esp + 0x924], 7
call dword [0x42b63c]
lea ecx, [esp + 0x60]
push ecx
push 0xd
lea edx, [esp + 0x2c]
push edx
mov ecx, 0x43f288
call edi
lea ecx, [esp + 0x4c]
mov byte [esp + 0x924], 9
call fcn.0042556c
lea eax, [esp + 0x70c]
push eax
push 0x104
call dword [0x42b0dc]
lea ecx, [esp + 0x70c]
add ebx, 0xb4
push ecx
mov ecx, ebx
call dword [0x42b1d8]
push 0x42be68
push 0x42be70
mov ecx, ebx
call dword [0x42b2b4]
lea edx, [esp + 0x10]
push ebx
push edx
mov edi, 0x42c078
call fcn.00405870
add esp, 8
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x928], 0xa
call dword [0x42b614]
lea ecx, [esp + 0x10]
mov byte [esp + 0x924], 9
call dword [0x42b63c]
mov eax, dword [esp + 0x92c]
add eax, 0xb0
push eax
lea eax, [esp + 0x14]
push eax
call fcn.00405870
add esp, 8
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x928], 0xb
call dword [0x42b614]
lea ecx, [esp + 0x10]
mov byte [esp + 0x924], 9
call dword [0x42b63c]
lea ecx, [esp + 0x10]
push ebx
push ecx
mov edi, 0x42bf58
call fcn.00405870
add esp, 8
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x928], 0xc
call dword [0x42b614]
lea ecx, [esp + 0x10]
mov byte [esp + 0x924], 9
call dword [0x42b63c]
lea edx, [esp + 0x10]
push ebx
push edx
mov edi, 0x42bf78
call fcn.00405870
add esp, 8
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x928], 0xd
call dword [0x42b614]
lea ecx, [esp + 0x10]
mov byte [esp + 0x924], 9
call dword [0x42b63c]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0xdc]
push eax
push ecx
mov dword [esp + 0xe4], ebp
mov dword [esp + 0xe8], ebp
mov dword [esp + 0xec], ebp
mov dword [esp + 0xf0], ebp
mov dword [esp + 0xf4], ebp
mov dword [esp + 0xf8], ebp
call fcn.00425572
test eax, eax
je 0x402d6e
mov edx, dword [esp + 0x18]
push edx
call fcn.00425578
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0xdc]
push eax
push ecx
call fcn.00425572
test eax, eax
je 0x402d8e
mov edx, dword [esp + 0x1c]
push edx
call fcn.00425578
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0xdc]
push eax
push ecx
call fcn.00425572
test eax, eax
je 0x402dae
mov edx, dword [esp + 0x14]
push edx
call fcn.00425578
lea ecx, [esp + 0x3c]
call dword [0x42b7c4]
mov eax, dword [esp + 0x92c]
push ecx
mov byte [esp + 0x928], 0xe
add eax, 0xac
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call dword [0x42b1ac]
mov edi, dword [0x42b7bc]
lea ecx, [esp + 0x40]
call edi
cmp eax, ebp
lea ecx, [esp + 0x3c]
je 0x402e6a
mov byte [esp + 0x924], 9
call dword [0x42b7c0]
lea ecx, [esp + 0x24]
call dword [0x42b63c]
lea ecx, [esp + 0x60]
mov byte [esp + 0x924], 5
call fcn.00425536
mov eax, dword [esp + 0x7c]
cmp eax, ebp
je 0x402e26
push eax
call dword [0x42b100]
lea ecx, [esp + 0x14]
call dword [0x42b63c]
lea ecx, [esp + 0x20]
call dword [0x42b63c]
lea ecx, [esp + 0x1c]
call dword [0x42b63c]
lea ecx, [esp + 0x18]
call dword [0x42b63c]
lea ecx, [esp + 0x4c]
mov dword [esp + 0x924], 0xffffffff
call dword [0x42b7d0]
xor eax, eax
jmp 0x4035ed
mov eax, dword [esp + 0x18]
mov ebx, dword [0x42b7b8]
push eax
call ebx
test eax, eax
je 0x402e84
lea ecx, [esp + 0x3c]
jmp 0x402dee
push 0x42c088
push 2
call dword [0x42b6e0]
add esp, 8
lea ecx, [esp + 0x28]
call dword [0x42b7d4]
push ebp
mov byte [esp + 0x928], 0xf
mov ecx, dword [esp + 0x1c]
push 0x40
push ecx
lea ecx, [esp + 0x34]
call fcn.00425566
cmp eax, ebp
jne 0x402ecc
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x42c08c
jmp 0x402af6
mov ecx, 0x43eec8
call fcn.0042557e
mov ecx, 0x43f06c
call fcn.0042557e
mov ecx, 0x43eee4
call fcn.0042557e
mov ecx, 0x43f018
call fcn.0042557e
mov ecx, 0x43ef00
call fcn.0042557e
mov ecx, 0x43ef1c
call fcn.0042557e
mov ecx, 0x43ef38
call fcn.0042557e
mov ecx, 0x43ef54
call fcn.0042557e
mov ecx, 0x43ef70
call fcn.0042557e
mov ecx, 0x43ef8c
call fcn.0042557e
mov ecx, 0x43efa8
call fcn.0042557e
mov ecx, 0x43effc
call fcn.0042557e
mov ecx, 0x43f050
call fcn.0042557e
mov ecx, 0x43f088
call fcn.0042557e
mov ecx, 0x43f0a4
call fcn.0042557e
mov ecx, 0x43f0c0
call fcn.0042557e
mov ecx, 0x43f0dc
call fcn.0042557e
mov ecx, 0x43f0f8
call fcn.0042557e
mov ecx, 0x43f114
call fcn.0042557e
mov ecx, 0x43f130
call fcn.0042557e
mov ecx, 0x43f168
call fcn.0042557e
mov ecx, 0x43f14c
call fcn.0042557e
mov ecx, 0x43f184
call fcn.0042557e
mov ecx, 0x43eeac
call fcn.0042557e
push 0x43eec8
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c0a8
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43f06c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c0bc
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43eee4
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c0d0
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43f018
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42bf6c
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43ef00
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c0dc
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43ef1c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c0e8
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43ef38
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c10c
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43ef54
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c12c
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43ef70
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c14c
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43ef8c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c160
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43efa8
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c174
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43effc
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c190
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43f050
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c1a4
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43f088
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c1c0
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43f0a4
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c1d4
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43f0c0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c1e8
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43f0dc
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c204
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43f0f8
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c218
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43f114
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c23c
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43f130
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c254
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43f168
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c274
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43f14c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c298
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43f184
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c2c0
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
push 0x43eeac
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x42c2dc
call dword [0x42b1b8]
lea ecx, [esp + 0x30]
call esi
lea ecx, [esp + 0x28]
call fcn.0042556c
push ecx
mov esi, dword [0x42b7c8]
mov edx, esp
mov dword [esp + 0x14], esp
push 0x43f018
push 0xd
push edx
mov ecx, 0x43f288
call esi
lea ecx, [esp + 0x40]
call edi
cmp eax, ebp
je 0x403331
mov byte [esp + 0x924], 0xe
mov edi, dword [0x42b7d0]
lea ecx, [esp + 0x28]
call edi
lea ecx, [esp + 0x3c]
mov byte [esp + 0x924], 9
call dword [0x42b7c0]
lea ecx, [esp + 0x24]
call dword [0x42b63c]
lea ecx, [esp + 0x60]
mov byte [esp + 0x924], 5
call fcn.00425536
lea esi, [esp + 0x7c]
call fcn.004095d0
lea ecx, [esp + 0x14]
call dword [0x42b63c]
lea ecx, [esp + 0x20]
call dword [0x42b63c]
lea ecx, [esp + 0x1c]
call dword [0x42b63c]
lea ecx, [esp + 0x18]
call dword [0x42b63c]
lea ecx, [esp + 0x4c]
mov dword [esp + 0x924], 0xffffffff
call edi
xor eax, eax
jmp 0x4035ed
mov eax, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x40]
call ebx
test eax, eax
jne 0x4032a7
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x43f018
push 0xa
push ecx
mov ecx, 0x43f288
call esi
lea ecx, [esp + 0x40]
call edi
cmp eax, ebp
jne 0x4032a7
mov edx, dword [esp + 0x1c]
push edx
lea ecx, [esp + 0x40]
call ebx
test eax, eax
jne 0x4032a7
push 0x1fe
lea eax, [esp + 0x512]
push ebp
push eax
mov word [esp + 0x518], bp
call fcn.004263f0
add esp, 0xc
lea ecx, [esp + 0x50c]
push ecx
call dword [esp + 0xa8]
mov ebx, dword [esp + 0x92c]
lea edx, [esp + 0x50c]
push edx
lea ecx, [ebx + 0xa8]
call dword [0x42b1d8]
lea esi, [ebx + 0xb0]
lea eax, [esp + 0x10]
push esi
push eax
mov edi, 0x42bf58
call fcn.00405870
add esp, 8
lea ecx, [esp + 0xdc]
mov byte [esp + 0x924], 0x10
mov eax, dword [eax]
push ecx
push eax
call fcn.00425572
lea ecx, [esp + 0x10]
mov edi, eax
mov byte [esp + 0x924], 0xf
call dword [0x42b63c]
cmp edi, ebp
je 0x403441
lea edx, [esp + 0x10]
push esi
push edx
mov edi, 0x42bf58
call fcn.00405870
add esp, 8
mov byte [esp + 0x924], 0x11
mov eax, dword [eax]
push eax
call fcn.00425578
lea ecx, [esp + 0x10]
mov byte [esp + 0x924], 0xf
call dword [0x42b63c]
lea eax, [esp + 0x10]
push esi
push eax
mov edi, 0x42bf58
call fcn.00405870
mov eax, dword [eax]
mov ecx, dword [esp + 0x20]
mov esi, dword [0x42b0e4]
add esp, 8
push eax
push ecx
call esi
lea ecx, [esp + 0x10]
call dword [0x42b63c]
mov eax, dword [esp + 0x20]
lea edx, [esp + 0xdc]
push edx
push eax
call fcn.00425572
test eax, eax
je 0x40348e
mov ecx, dword [esp + 0x20]
push ecx
call fcn.00425578
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
push edx
push eax
call esi
push 0x1fe
lea ecx, [esp + 0x312]
push ebp
push ecx
mov word [esp + 0x318], bp
call fcn.004263f0
mov edx, dword [esp + 0x20]
mov esi, dword [0x42b0e0]
add esp, 0xc
push edx
push 0xff
lea eax, [esp + 0x314]
push eax
push 0x42c534
push 0x42bf88
push 0x42bfa0
call esi
lea ecx, [esp + 0x30c]
push ecx
mov ecx, dword [esp + 0x934]
call dword [0x42b1d8]
mov edx, dword [esp + 0x14]
push edx
push 0xff
lea eax, [esp + 0x314]
push eax
push 0x42c534
push 0x42bfb0
push 0x42bfa0
call esi
lea ecx, [esp + 0x30c]
push ecx
mov ecx, dword [esp + 0x938]
call dword [0x42b1d8]
mov edx, dword [esp + 0x14]
push edx
push 0xff
lea eax, [esp + 0x314]
push eax
push 0x42c534
push 0x42c2f4
push 0x42bfa0
call esi
lea ecx, [esp + 0x30c]
push ecx
lea ecx, [ebx + 0xb8]
call dword [0x42b1d8]
mov byte [esp + 0x924], 0xe
mov edi, dword [0x42b7d0]
lea ecx, [esp + 0x28]
call edi
lea ecx, [esp + 0x3c]
mov byte [esp + 0x924], 9
call dword [0x42b7c0]
lea ecx, [esp + 0x24]
call dword [0x42b63c]
lea ecx, [esp + 0x60]
mov byte [esp + 0x924], 5
call fcn.00425536
lea esi, [esp + 0x7c]
call fcn.004095d0
lea ecx, [esp + 0x14]
call dword [0x42b63c]
lea ecx, [esp + 0x20]
call dword [0x42b63c]
lea ecx, [esp + 0x1c]
call dword [0x42b63c]
lea ecx, [esp + 0x18]
call dword [0x42b63c]
lea ecx, [esp + 0x4c]
mov dword [esp + 0x924], 0xffffffff
call edi
mov eax, 1
mov ecx, dword [esp + 0x91c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x918
ret 0xc