Function at 0x402c50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14c
push edi
lea edi, [ebp - 0x14c]
mov ecx, 0x53
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x5e6468]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 0
jne 0x402c81
jmp 0x403310
push 0
mov eax, dword [ebp + 8]
push eax
call fcn.00416540
add esp, 8
mov byte [ebp - 0x10], 0x49
mov byte [ebp - 0xf], 0x48
mov byte [ebp - 0xe], 0x44
mov byte [ebp - 0xd], 0x52
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x20], 0x49
mov byte [ebp - 0x1f], 0x44
mov byte [ebp - 0x1e], 0x41
mov byte [ebp - 0x1d], 0x54
mov byte [ebp - 0x1c], 0
mov byte [ebp - 0x30], 0x49
mov byte [ebp - 0x2f], 0x45
mov byte [ebp - 0x2e], 0x4e
mov byte [ebp - 0x2d], 0x44
mov byte [ebp - 0x2c], 0
mov byte [ebp - 0x40], 0x50
mov byte [ebp - 0x3f], 0x4c
mov byte [ebp - 0x3e], 0x54
mov byte [ebp - 0x3d], 0x45
mov byte [ebp - 0x3c], 0
mov byte [ebp - 0x50], 0x62
mov byte [ebp - 0x4f], 0x4b
mov byte [ebp - 0x4e], 0x47
mov byte [ebp - 0x4d], 0x44
mov byte [ebp - 0x4c], 0
mov byte [ebp - 0x60], 0x63
mov byte [ebp - 0x5f], 0x48
mov byte [ebp - 0x5e], 0x52
mov byte [ebp - 0x5d], 0x4d
mov byte [ebp - 0x5c], 0
mov byte [ebp - 0x70], 0x67
mov byte [ebp - 0x6f], 0x41
mov byte [ebp - 0x6e], 0x4d
mov byte [ebp - 0x6d], 0x41
mov byte [ebp - 0x6c], 0
mov byte [ebp - 0x80], 0x68
mov byte [ebp - 0x7f], 0x49
mov byte [ebp - 0x7e], 0x53
mov byte [ebp - 0x7d], 0x54
mov byte [ebp - 0x7c], 0
mov byte [ebp - 0x90], 0x69
mov byte [ebp - 0x8f], 0x43
mov byte [ebp - 0x8e], 0x43
mov byte [ebp - 0x8d], 0x50
mov byte [ebp - 0x8c], 0
mov byte [ebp - 0xa0], 0x6f
mov byte [ebp - 0x9f], 0x46
mov byte [ebp - 0x9e], 0x46
mov byte [ebp - 0x9d], 0x73
mov byte [ebp - 0x9c], 0
mov byte [ebp - 0xb0], 0x70
mov byte [ebp - 0xaf], 0x43
mov byte [ebp - 0xae], 0x41
mov byte [ebp - 0xad], 0x4c
mov byte [ebp - 0xac], 0
mov byte [ebp - 0xc0], 0x70
mov byte [ebp - 0xbf], 0x48
mov byte [ebp - 0xbe], 0x59
mov byte [ebp - 0xbd], 0x73
mov byte [ebp - 0xbc], 0
mov byte [ebp - 0xd0], 0x73
mov byte [ebp - 0xcf], 0x42
mov byte [ebp - 0xce], 0x49
mov byte [ebp - 0xcd], 0x54
mov byte [ebp - 0xcc], 0
mov byte [ebp - 0xe0], 0x73
mov byte [ebp - 0xdf], 0x43
mov byte [ebp - 0xde], 0x41
mov byte [ebp - 0xdd], 0x4c
mov byte [ebp - 0xdc], 0
mov byte [ebp - 0xf0], 0x73
mov byte [ebp - 0xef], 0x50
mov byte [ebp - 0xee], 0x4c
mov byte [ebp - 0xed], 0x54
mov byte [ebp - 0xec], 0
mov byte [ebp - 0x100], 0x73
mov byte [ebp - 0xff], 0x52
mov byte [ebp - 0xfe], 0x47
mov byte [ebp - 0xfd], 0x42
mov byte [ebp - 0xfc], 0
mov byte [ebp - 0x110], 0x74
mov byte [ebp - 0x10f], 0x45
mov byte [ebp - 0x10e], 0x58
mov byte [ebp - 0x10d], 0x74
mov byte [ebp - 0x10c], 0
mov byte [ebp - 0x120], 0x74
mov byte [ebp - 0x11f], 0x49
mov byte [ebp - 0x11e], 0x4d
mov byte [ebp - 0x11d], 0x45
mov byte [ebp - 0x11c], 0
mov byte [ebp - 0x130], 0x74
mov byte [ebp - 0x12f], 0x52
mov byte [ebp - 0x12e], 0x4e
mov byte [ebp - 0x12d], 0x53
mov byte [ebp - 0x12c], 0
mov byte [ebp - 0x140], 0x7a
mov byte [ebp - 0x13f], 0x54
mov byte [ebp - 0x13e], 0x58
mov byte [ebp - 0x13d], 0x74
mov byte [ebp - 0x13c], 0
mov ecx, dword [ebp + 8]
push ecx
call fcn.00416420
add esp, 4
mov dword [ebp - 0x148], eax
mov edx, dword [ebp + 8]
add edx, 0x11c
mov dword [ebp - 0x14c], edx
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x10]
jne 0x402f1d
mov edx, dword [ebp - 0x148]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00416cc0
add esp, 0xc
jmp 0x403301
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x30]
jne 0x402f46
mov ecx, dword [ebp - 0x148]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00417200
add esp, 0xc
jmp 0x403301
mov ecx, dword [ebp - 0x14c]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00404b90
add esp, 8
test eax, eax
je 0x402fc9
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x20]
jne 0x402f91
cmp dword [ebp - 0x148], 0
ja 0x402f80
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x68]
and eax, 0x2000
je 0x402f91
push 0x5ea300
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041c770
add esp, 8
mov edx, dword [ebp - 0x148]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041a060
add esp, 0xc
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x40]
jne 0x402fc4
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x68]
or edx, 2
mov eax, dword [ebp + 8]
mov dword [eax + 0x68], edx
jmp 0x403301
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x20]
jne 0x403016
cmp dword [ebp - 0x148], 0
ja 0x402fed
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x68]
and ecx, 0x2000
je 0x402ffe
push str.Too_many_IDATs_found
mov edx, dword [ebp + 8]
push edx
call fcn.0041c770
add esp, 8
mov eax, dword [ebp - 0x148]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00416540
add esp, 8
jmp 0x403301
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x40]
jne 0x40303f
mov ecx, dword [ebp - 0x148]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00416f30
add esp, 0xc
jmp 0x403301
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x50]
jne 0x403068
mov eax, dword [ebp - 0x148]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00418960
add esp, 0xc
jmp 0x403301
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x60]
jne 0x403091
mov edx, dword [ebp - 0x148]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004176c0
add esp, 0xc
jmp 0x403301
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x70]
jne 0x4030ba
mov ecx, dword [ebp - 0x148]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00417270
add esp, 0xc
jmp 0x403301
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x80]
jne 0x4030e3
mov eax, dword [ebp - 0x148]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00418cb0
add esp, 0xc
jmp 0x403301
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0xa0]
jne 0x40310f
mov edx, dword [ebp - 0x148]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00419040
add esp, 0xc
jmp 0x403301
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
cmp eax, dword [ebp - 0xb0]
jne 0x40313b
mov ecx, dword [ebp - 0x148]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004191d0
add esp, 0xc
jmp 0x403301
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0xe0]
jne 0x403167
mov eax, dword [ebp - 0x148]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00419620
add esp, 0xc
jmp 0x403301
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0xc0]
jne 0x403193
mov edx, dword [ebp - 0x148]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00418eb0
add esp, 0xc
jmp 0x403301
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
cmp eax, dword [ebp - 0xd0]
jne 0x4031bf
mov ecx, dword [ebp - 0x148]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00417490
add esp, 0xc
jmp 0x403301
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x100]
jne 0x4031eb
mov eax, dword [ebp - 0x148]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00417b00
add esp, 0xc
jmp 0x403301
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x90]
jne 0x403217
mov edx, dword [ebp - 0x148]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00417e20
add esp, 0xc
jmp 0x403301
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
cmp eax, dword [ebp - 0xf0]
jne 0x403243
mov ecx, dword [ebp - 0x148]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004181c0
add esp, 0xc
jmp 0x403301
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x110]
jne 0x40326f
mov eax, dword [ebp - 0x148]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00419ae0
add esp, 0xc
jmp 0x403301
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x120]
jne 0x403298
mov edx, dword [ebp - 0x148]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00419950
add esp, 0xc
jmp 0x403301
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x130]
jne 0x4032c1
mov ecx, dword [ebp - 0x148]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004185e0
add esp, 0xc
jmp 0x403301
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x140]
jne 0x4032ea
mov eax, dword [ebp - 0x148]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00419d40
add esp, 0xc
jmp 0x403301
mov eax, dword [ebp - 0x148]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0041a060
add esp, 0xc
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x68]
and ecx, 0x10
je 0x402c8f
push edx
mov ecx, ebp
push eax
lea edx, [0x403340]
call fcn.005946cd
pop eax
pop edx
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0055e289
add esp, 0x14c
cmp ebp, esp
call fcn.005946aa
mov esp, ebp
pop ebp
ret