Function at 0x409b80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x5e1e3c
mov eax, dword fs:[0]
push eax
sub esp, 0x85c
mov eax, dword [0x658aa8]
xor eax, esp
mov dword [esp + 0x858], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x658aa8]
xor eax, esp
push eax
lea eax, [esp + 0x870]
mov dword fs:[0], eax
mov eax, dword [esp + 0x880]
xor ebx, ebx
mov dword [esp + 0x20], eax
mov dword [esp + 0x34], ebx
mov dword [esp + 0x878], 1
mov al, 0x6f
mov dl, 0x63
mov cl, 0x65
push 4
mov byte [esp + 0x844], 0x61
mov byte [esp + 0x845], dl
mov byte [esp + 0x846], dl
mov byte [esp + 0x847], al
mov byte [esp + 0x848], 0x75
mov byte [esp + 0x849], 0x6e
mov byte [esp + 0x84a], 0x74
mov byte [esp + 0x84b], 0x43
mov byte [esp + 0x84c], al
mov byte [esp + 0x84d], 0x64
mov byte [esp + 0x84e], cl
mov byte [esp + 0x84f], bl
mov byte [esp + 0x83c], 0x73
mov byte [esp + 0x83d], al
mov byte [esp + 0x83e], 0x75
mov byte [esp + 0x83f], 0x72
mov byte [esp + 0x840], dl
mov byte [esp + 0x841], cl
mov byte [esp + 0x842], bl
mov byte [esp + 0x834], al
mov byte [esp + 0x835], 0x72
mov byte [esp + 0x836], 0x64
mov byte [esp + 0x837], cl
mov byte [esp + 0x838], 0x72
mov byte [esp + 0x839], bl
mov byte [esp + 0x860], 0x61
mov byte [esp + 0x861], dl
mov byte [esp + 0x862], dl
mov byte [esp + 0x863], al
mov byte [esp + 0x864], 0x75
mov byte [esp + 0x865], 0x6e
mov byte [esp + 0x866], 0x74
mov byte [esp + 0x867], 0x43
mov byte [esp + 0x868], al
mov byte [esp + 0x869], 0x64
mov byte [esp + 0x86a], cl
mov byte [esp + 0x86b], 0x52
mov byte [esp + 0x86c], cl
mov byte [esp + 0x86d], 0x74
mov byte [esp + 0x86e], bl
mov byte [esp + 0x850], 0xc6
mov byte [esp + 0x851], 0xf4
mov byte [esp + 0x852], 0xb6
mov byte [esp + 0x853], 0xaf
mov byte [esp + 0x854], 0xd3
mov byte [esp + 0x855], 0xce
mov byte [esp + 0x856], 0xcf
mov byte [esp + 0x857], 0xb7
mov byte [esp + 0x858], 0xca
mov byte [esp + 0x859], 0xa7
mov byte [esp + 0x85a], 0xb0
mov byte [esp + 0x85b], 0xdc
mov byte [esp + 0x85c], bl
xor ebp, ebp
call fcn.0048fcc0
add esp, 4
cmp eax, ebx
je 0x409d8a
mov edi, eax
mov dword [eax], ebx
mov dword [esp + 0x14], edi
jmp 0x409d90
mov dword [esp + 0x14], ebx
mov edi, ebp
cmp dword [esp + 0x89c], 0x10
mov eax, dword [esp + 0x888]
jae 0x409da8
lea eax, [esp + 0x888]
push eax
mov esi, edi
call fcn.0041ca00
cmp al, bl
je 0x40a3cd
lea ecx, [esp + 0x840]
push ecx
xor ecx, ecx
mov eax, edi
call fcn.0041cab0
mov esi, eax
mov ecx, esi
mov dword [esp + 0xdc], 0xf
mov dword [esp + 0xd8], ebx
mov byte [esp + 0xc8], bl
lea ebp, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
cmp al, bl
jne 0x409df0
sub ecx, ebp
push ecx
push esi
lea ecx, [esp + 0xcc]
call fcn.00414400
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0xcc]
push edx
mov ecx, 0x664a10
mov byte [esp + 0x884], 2
call fcn.00414010
push ebx
lea eax, [esp + 0x83c]
push eax
mov eax, edi
call fcn.0041cb80
lea ecx, [esp + 0x830]
mov dword [0x66499c], eax
push ecx
xor ecx, ecx
mov eax, edi
call fcn.0041cab0
mov esi, eax
mov ecx, esi
lea ebp, [ecx + 1]
mov al, byte [ecx]
inc ecx
cmp al, bl
jne 0x409e51
sub ecx, ebp
push ecx
push esi
mov ecx, 0x6649f4
call fcn.00414400
push 0x100
call fcn.0048fcef
add esp, 4
push 0x100
mov esi, eax
push ebx
push esi
mov dword [esp + 0x28], esi
call fcn.004a0660
mov eax, dword [esp + 0xd4]
mov ebp, 0x10
add esp, 0xc
cmp dword [esp + 0xdc], ebp
jae 0x409ea4
lea eax, [esp + 0xc8]
push eax
mov ecx, esi
mov edx, 0x66bf30
call fcn.0048d920
cmp al, bl
jne 0x40a39d
push 0x635174
lea ecx, [esp + 0x154]
mov byte [esp + 0x82c], 0xbd
mov byte [esp + 0x82d], 0xe2
mov byte [esp + 0x82e], 0xcb
mov byte [esp + 0x82f], 0xf8
mov byte [esp + 0x830], bl
call fcn.00414510
lea edx, [esp + 0x828]
push edx
lea ecx, [esp + 0xe4]
mov byte [esp + 0x87c], 3
call fcn.00414510
push 0xffffffffffffffff
mov byte [esp + 0x87c], 4
push ebx
mov edi, 0xf
push 0x664a64
lea ecx, [esp + 0xb4]
mov dword [esp + 0xcc], edi
mov dword [esp + 0xc8], ebx
mov byte [esp + 0xb8], bl
call fcn.00414010
push 0x635104
lea ecx, [esp + 0x11c]
mov byte [esp + 0x87c], 5
call fcn.00414510
push 0xffffffffffffffff
mov byte [esp + 0x87c], 6
push ebx
push 0x664a10
lea ecx, [esp + 0x98]
mov dword [esp + 0xb0], edi
mov dword [esp + 0xac], ebx
mov byte [esp + 0x9c], bl
call fcn.00414010
push 0x63510c
lea ecx, [esp + 0x138]
mov byte [esp + 0x87c], 7
call fcn.00414510
push esi
lea ecx, [esp + 0x100]
mov byte [esp + 0x87c], 8
call fcn.00414510
push 0xffffffffffffffff
mov byte [esp + 0x87c], 9
push ebx
push 0x664a48
lea ecx, [esp + 0x60]
mov dword [esp + 0x78], edi
mov dword [esp + 0x74], ebx
mov byte [esp + 0x64], bl
call fcn.00414010
push 0xffffffffffffffff
mov byte [esp + 0x87c], 0xa
push ebx
push 0x664a2c
lea ecx, [esp + 0x44]
mov dword [esp + 0x5c], edi
mov dword [esp + 0x58], ebx
mov byte [esp + 0x48], bl
call fcn.00414010
push 0xffffffffffffffff
mov byte [esp + 0x87c], 0xb
push ebx
push 0x6649a0
lea ecx, [esp + 0x7c]
mov dword [esp + 0x94], edi
mov dword [esp + 0x90], ebx
mov byte [esp + 0x80], bl
call fcn.00414010
mov byte [esp + 0x878], 0xc
mov edi, dword [esp + 0x74]
cmp dword [esp + 0x88], ebp
jae 0x40a04c
lea edi, [esp + 0x74]
cmp dword [esp + 0x114], ebp
jb 0x40a062
mov eax, dword [esp + 0x100]
mov dword [esp + 0x2c], eax
jmp 0x40a06d
lea ecx, [esp + 0x100]
mov dword [esp + 0x2c], ecx
cmp dword [esp + 0x14c], ebp
jb 0x40a083
mov edx, dword [esp + 0x138]
mov dword [esp + 0x30], edx
jmp 0x40a08e
lea eax, [esp + 0x138]
mov dword [esp + 0x30], eax
cmp dword [esp + 0xa4], ebp
jb 0x40a0a4
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x28], ecx
jmp 0x40a0af
lea edx, [esp + 0x90]
mov dword [esp + 0x28], edx
cmp dword [esp + 0x50], ebp
jb 0x40a0bf
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x24], eax
jmp 0x40a0c7
lea ecx, [esp + 0x3c]
mov dword [esp + 0x24], ecx
cmp dword [esp + 0x6c], ebp
jb 0x40a0d7
mov edx, dword [esp + 0x58]
mov dword [esp + 0x18], edx
jmp 0x40a0df
lea eax, [esp + 0x58]
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x11c]
cmp dword [esp + 0x130], ebp
jae 0x40a0f6
lea edx, [esp + 0x11c]
mov ecx, dword [esp + 0xac]
cmp dword [esp + 0xc0], ebp
jae 0x40a10d
lea ecx, [esp + 0xac]
mov eax, dword [esp + 0xe4]
cmp dword [esp + 0xf8], ebp
jae 0x40a124
lea eax, [esp + 0xe4]
mov esi, dword [esp + 0x154]
cmp dword [esp + 0x168], ebp
jae 0x40a13b
lea esi, [esp + 0x154]
push edi
mov edi, dword [esp + 0x30]
push edi
mov edi, dword [esp + 0x38]
push edi
mov edi, dword [esp + 0x34]
push edi
mov edi, dword [esp + 0x34]
push edi
mov edi, dword [esp + 0x2c]
push edi
push edx
push ecx
push eax
mov ecx, 0x66be38
call fcn.00428580
cmp dword [esp + 0x88], ebp
jb 0x40a178
mov ecx, dword [esp + 0x74]
push ecx
call fcn.0048fcfa
add esp, 4
mov esi, 0xf
mov dword [esp + 0x88], esi
mov dword [esp + 0x84], ebx
mov byte [esp + 0x74], bl
cmp dword [esp + 0x50], ebp
jb 0x40a1a2
mov edx, dword [esp + 0x3c]
push edx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x50], esi
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
cmp dword [esp + 0x6c], ebp
jb 0x40a1c1
mov eax, dword [esp + 0x58]
push eax
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x6c], esi
mov dword [esp + 0x68], ebx
mov byte [esp + 0x58], bl
cmp dword [esp + 0x114], ebp
jb 0x40a1e6
mov ecx, dword [esp + 0x100]
push ecx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x114], esi
mov dword [esp + 0x110], ebx
mov byte [esp + 0x100], bl
cmp dword [esp + 0x14c], ebp
jb 0x40a214
mov edx, dword [esp + 0x138]
push edx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x14c], esi
mov dword [esp + 0x148], ebx
mov byte [esp + 0x138], bl
cmp dword [esp + 0xa4], ebp
jb 0x40a242
mov eax, dword [esp + 0x90]
push eax
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0xa4], esi
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x90], bl
cmp dword [esp + 0x130], ebp
jb 0x40a270
mov ecx, dword [esp + 0x11c]
push ecx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0x130], esi
mov dword [esp + 0x12c], ebx
mov byte [esp + 0x11c], bl
cmp dword [esp + 0xc0], ebp
jb 0x40a29e
mov edx, dword [esp + 0xac]
push edx
call fcn.0048fcfa
add esp, 4
mov dword [esp + 0xc0], esi
mov dword [esp + 0xbc], ebx
mov byte [esp + 0xac], bl
cmp dword [esp + 0xf8], ebp
jb 0x40a2cc
mov eax, dword [esp + 0xe4]
push eax
call fcn.0048fcfa
add esp, 4
mov byte [esp + 0x878], 2
mov dword [esp + 0xf8], esi
mov dword [esp + 0xf4], ebx
mov byte [esp + 0xe4], bl
cmp dword [esp + 0x168], ebp
jb 0x40a302
mov ecx, dword [esp + 0x154]
push ecx
call fcn.0048fcfa
add esp, 4
lea edi, [esp + 0x16c]
call fcn.004040a0
push ebx
sub esp, 0x44
mov esi, esp
mov dword [esp + 0x60], esp
lea eax, [esi + 4]
push 0xffffffffffffffff
mov byte [esp + 0x8c4], 0xd
push 0x634b08
mov dword [esi], eax
mov byte [eax], bl
call fcn.00428e20
mov edx, dword [esp + 0x64]
sub esp, 0x44
mov esi, esp
mov dword [esp + 0xa4], esp
lea eax, [esi + 4]
push 0xffffffffffffffff
push edx
mov dword [esi], eax
mov byte [eax], bl
call fcn.00428e20
sub esp, 0x44
mov esi, esp
lea eax, [esi + 4]
mov dword [esp + 0xe8], esp
mov dword [esi], eax
mov byte [eax], bl
push 0xffffffffffffffff
lea eax, [esp + 0x920]
push eax
call fcn.00428e20
mov ecx, dword [0x66bdcc]
push ecx
mov ecx, edi
call fcn.004046f0
mov esi, edi
xor ebp, ebp
mov byte [esp + 0x878], 2
call fcn.004041b0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
jmp 0x40a3a2
mov ebp, 1
push esi
call fcn.0048fcfa
add esp, 4
mov byte [esp + 0x878], 1
cmp dword [esp + 0xdc], 0x10
jb 0x40a3cd
mov edx, dword [esp + 0xc8]
push edx
call fcn.0048fcfa
add esp, 4
cmp edi, ebx
je 0x40a3ef
mov eax, dword [edi]
cmp eax, ebx
je 0x40a3e6
mov edi, eax
call fcn.0041c9c0
mov eax, dword [esp + 0x14]
mov dword [eax], ebx
mov edi, eax
push edi
call fcn.0048fcfa
add esp, 4
push 4
call fcn.0048fcc0
add esp, 4
mov dword [esp + 0x1c], eax
mov byte [esp + 0x878], 0xe
cmp eax, ebx
je 0x40a414
mov esi, eax
call fcn.0041cbf0
mov esi, eax
jmp 0x40a416
xor esi, esi
mov eax, ebp
cdq
push edx
push eax
lea ecx, [esp + 0x864]
push ecx
mov ecx, esi
mov byte [esp + 0x884], 1
call fcn.0041d080
mov edi, dword [esp + 0x20]
mov ecx, esi
call fcn.0041cc70
mov dword [esp + 0x34], 1
cmp esi, ebx
je 0x40a45f
mov edi, dword [esi]
cmp edi, ebx
je 0x40a456
call fcn.0041c9c0
mov dword [esi], ebx
push esi
call fcn.0048fcfa
add esp, 4
cmp dword [esp + 0x89c], 0x10
jb 0x40a479
mov edx, dword [esp + 0x888]
push edx
call fcn.0048fcfa
add esp, 4
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x870]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x858]
xor ecx, esp
call fcn.00499a1c
add esp, 0x868
ret