Function at 0x404b00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x154
push edi
lea edi, [ebp - 0x154]
mov ecx, 0x55
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x52278c]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 0
je 0x404b32
cmp dword [ebp + 0xc], 0
jne 0x404b37
jmp 0x40532f
mov eax, dword [ebp + 8]
movzx ecx, byte [eax + 0x12c]
cmp ecx, 8
jge 0x404c02
mov edx, dword [ebp + 8]
movzx eax, byte [edx + 0x12c]
mov dword [ebp - 8], eax
mov ecx, 8
sub ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 8]
mov ecx, dword [ebp + 0xc]
lea edx, [ecx + eax + 0x20]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00407070
add esp, 0xc
mov ecx, dword [ebp + 8]
mov byte [ecx + 0x12c], 8
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x20
push ecx
call fcn.004071f0
add esp, 0xc
test eax, eax
je 0x404bea
cmp dword [ebp - 8], 4
jae 0x404bd9
mov edx, dword [ebp - 0xc]
sub edx, 4
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x20
push ecx
call fcn.004071f0
add esp, 0xc
test eax, eax
je 0x404bd9
push 0x5261c0
mov edx, dword [ebp + 8]
push edx
call fcn.0041fab0
add esp, 8
jmp 0x404bea
push 0x5261d0
mov eax, dword [ebp + 8]
push eax
call fcn.0041fab0
add esp, 8
cmp dword [ebp - 8], 3
jae 0x404c02
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x68]
or edx, 0x1000
mov eax, dword [ebp + 8]
mov dword [eax + 0x68], edx
mov byte [ebp - 0x18], 0x49
mov byte [ebp - 0x17], 0x48
mov byte [ebp - 0x16], 0x44
mov byte [ebp - 0x15], 0x52
mov byte [ebp - 0x14], 0
mov byte [ebp - 0x28], 0x49
mov byte [ebp - 0x27], 0x44
mov byte [ebp - 0x26], 0x41
mov byte [ebp - 0x25], 0x54
mov byte [ebp - 0x24], 0
mov byte [ebp - 0x38], 0x49
mov byte [ebp - 0x37], 0x45
mov byte [ebp - 0x36], 0x4e
mov byte [ebp - 0x35], 0x44
mov byte [ebp - 0x34], 0
mov byte [ebp - 0x48], 0x50
mov byte [ebp - 0x47], 0x4c
mov byte [ebp - 0x46], 0x54
mov byte [ebp - 0x45], 0x45
mov byte [ebp - 0x44], 0
mov byte [ebp - 0x58], 0x62
mov byte [ebp - 0x57], 0x4b
mov byte [ebp - 0x56], 0x47
mov byte [ebp - 0x55], 0x44
mov byte [ebp - 0x54], 0
mov byte [ebp - 0x68], 0x63
mov byte [ebp - 0x67], 0x48
mov byte [ebp - 0x66], 0x52
mov byte [ebp - 0x65], 0x4d
mov byte [ebp - 0x64], 0
mov byte [ebp - 0x78], 0x67
mov byte [ebp - 0x77], 0x41
mov byte [ebp - 0x76], 0x4d
mov byte [ebp - 0x75], 0x41
mov byte [ebp - 0x74], 0
mov byte [ebp - 0x88], 0x68
mov byte [ebp - 0x87], 0x49
mov byte [ebp - 0x86], 0x53
mov byte [ebp - 0x85], 0x54
mov byte [ebp - 0x84], 0
mov byte [ebp - 0x98], 0x69
mov byte [ebp - 0x97], 0x43
mov byte [ebp - 0x96], 0x43
mov byte [ebp - 0x95], 0x50
mov byte [ebp - 0x94], 0
mov byte [ebp - 0xa8], 0x6f
mov byte [ebp - 0xa7], 0x46
mov byte [ebp - 0xa6], 0x46
mov byte [ebp - 0xa5], 0x73
mov byte [ebp - 0xa4], 0
mov byte [ebp - 0xb8], 0x70
mov byte [ebp - 0xb7], 0x43
mov byte [ebp - 0xb6], 0x41
mov byte [ebp - 0xb5], 0x4c
mov byte [ebp - 0xb4], 0
mov byte [ebp - 0xc8], 0x70
mov byte [ebp - 0xc7], 0x48
mov byte [ebp - 0xc6], 0x59
mov byte [ebp - 0xc5], 0x73
mov byte [ebp - 0xc4], 0
mov byte [ebp - 0xd8], 0x73
mov byte [ebp - 0xd7], 0x42
mov byte [ebp - 0xd6], 0x49
mov byte [ebp - 0xd5], 0x54
mov byte [ebp - 0xd4], 0
mov byte [ebp - 0xe8], 0x73
mov byte [ebp - 0xe7], 0x43
mov byte [ebp - 0xe6], 0x41
mov byte [ebp - 0xe5], 0x4c
mov byte [ebp - 0xe4], 0
mov byte [ebp - 0xf8], 0x73
mov byte [ebp - 0xf7], 0x50
mov byte [ebp - 0xf6], 0x4c
mov byte [ebp - 0xf5], 0x54
mov byte [ebp - 0xf4], 0
mov byte [ebp - 0x108], 0x73
mov byte [ebp - 0x107], 0x52
mov byte [ebp - 0x106], 0x47
mov byte [ebp - 0x105], 0x42
mov byte [ebp - 0x104], 0
mov byte [ebp - 0x118], 0x74
mov byte [ebp - 0x117], 0x45
mov byte [ebp - 0x116], 0x58
mov byte [ebp - 0x115], 0x74
mov byte [ebp - 0x114], 0
mov byte [ebp - 0x128], 0x74
mov byte [ebp - 0x127], 0x49
mov byte [ebp - 0x126], 0x4d
mov byte [ebp - 0x125], 0x45
mov byte [ebp - 0x124], 0
mov byte [ebp - 0x138], 0x74
mov byte [ebp - 0x137], 0x52
mov byte [ebp - 0x136], 0x4e
mov byte [ebp - 0x135], 0x53
mov byte [ebp - 0x134], 0
mov byte [ebp - 0x148], 0x7a
mov byte [ebp - 0x147], 0x54
mov byte [ebp - 0x146], 0x58
mov byte [ebp - 0x145], 0x74
mov byte [ebp - 0x144], 0
mov ecx, dword [ebp + 8]
push ecx
call fcn.00419760
add esp, 4
mov dword [ebp - 0x150], eax
mov edx, dword [ebp + 8]
add edx, 0x11c
mov dword [ebp - 0x154], edx
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x28]
jne 0x404ea0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x68]
and eax, 8
je 0x404ea0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x68]
or edx, 0x2000
mov eax, dword [ebp + 8]
mov dword [eax + 0x68], edx
mov ecx, dword [ebp - 0x154]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x18]
jne 0x404ec9
mov eax, dword [ebp - 0x150]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0041a000
add esp, 0xc
jmp 0x40532a
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x38]
jne 0x404ef2
mov edx, dword [ebp - 0x150]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041a540
add esp, 0xc
jmp 0x40532a
mov edx, dword [ebp - 0x154]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00407ed0
add esp, 8
test eax, eax
je 0x404fbe
mov ecx, dword [ebp - 0x154]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x28]
jne 0x404f29
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x68]
or ecx, 4
mov edx, dword [ebp + 8]
mov dword [edx + 0x68], ecx
mov eax, dword [ebp - 0x150]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0041d3a0
add esp, 0xc
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x48]
jne 0x404f5e
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x68]
or eax, 2
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x68], eax
jmp 0x404fb9
mov edx, dword [ebp - 0x154]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x28]
jne 0x404fb9
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x68]
and edx, 1
jne 0x404f89
push 0x5261f8
mov eax, dword [ebp + 8]
push eax
call fcn.0041fab0
add esp, 8
jmp 0x404fb4
mov ecx, dword [ebp + 8]
movzx edx, byte [ecx + 0x126]
cmp edx, 3
jne 0x404fb4
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x68]
and ecx, 2
jne 0x404fb4
push 0x526214
mov edx, dword [ebp + 8]
push edx
call fcn.0041fab0
add esp, 8
jmp 0x40532f
jmp 0x40532a
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x48]
jne 0x404fe7
mov edx, dword [ebp - 0x150]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041a270
add esp, 0xc
jmp 0x40532a
mov edx, dword [ebp - 0x154]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x28]
jne 0x405065
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x68]
and edx, 1
jne 0x405012
push 0x526230
mov eax, dword [ebp + 8]
push eax
call fcn.0041fab0
add esp, 8
jmp 0x40503d
mov ecx, dword [ebp + 8]
movzx edx, byte [ecx + 0x126]
cmp edx, 3
jne 0x40503d
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x68]
and ecx, 2
jne 0x40503d
push 0x52624c
mov edx, dword [ebp + 8]
push edx
call fcn.0041fab0
add esp, 8
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x150]
mov dword [eax + 0x10c], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x68]
or eax, 4
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x68], eax
jmp 0x40532f
mov edx, dword [ebp - 0x154]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x58]
jne 0x40508e
mov ecx, dword [ebp - 0x150]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0041bca0
add esp, 0xc
jmp 0x40532a
mov ecx, dword [ebp - 0x154]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x68]
jne 0x4050b7
mov eax, dword [ebp - 0x150]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0041aa00
add esp, 0xc
jmp 0x40532a
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x78]
jne 0x4050e0
mov edx, dword [ebp - 0x150]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041a5b0
add esp, 0xc
jmp 0x40532a
mov edx, dword [ebp - 0x154]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x88]
jne 0x40510c
mov ecx, dword [ebp - 0x150]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0041bff0
add esp, 0xc
jmp 0x40532a
mov ecx, dword [ebp - 0x154]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0xa8]
jne 0x405138
mov eax, dword [ebp - 0x150]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0041c380
add esp, 0xc
jmp 0x40532a
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0xb8]
jne 0x405164
mov edx, dword [ebp - 0x150]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041c510
add esp, 0xc
jmp 0x40532a
mov edx, dword [ebp - 0x154]
mov eax, dword [edx]
cmp eax, dword [ebp - 0xe8]
jne 0x405190
mov ecx, dword [ebp - 0x150]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0041c960
add esp, 0xc
jmp 0x40532a
mov ecx, dword [ebp - 0x154]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0xc8]
jne 0x4051bc
mov eax, dword [ebp - 0x150]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0041c1f0
add esp, 0xc
jmp 0x40532a
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0xd8]
jne 0x4051e8
mov edx, dword [ebp - 0x150]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041a7d0
add esp, 0xc
jmp 0x40532a
mov edx, dword [ebp - 0x154]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x108]
jne 0x405214
mov ecx, dword [ebp - 0x150]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0041ae40
add esp, 0xc
jmp 0x40532a
mov ecx, dword [ebp - 0x154]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x98]
jne 0x405240
mov eax, dword [ebp - 0x150]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0041b160
add esp, 0xc
jmp 0x40532a
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0xf8]
jne 0x40526c
mov edx, dword [ebp - 0x150]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041b500
add esp, 0xc
jmp 0x40532a
mov edx, dword [ebp - 0x154]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x118]
jne 0x405298
mov ecx, dword [ebp - 0x150]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0041ce20
add esp, 0xc
jmp 0x40532a
mov ecx, dword [ebp - 0x154]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x128]
jne 0x4052c1
mov eax, dword [ebp - 0x150]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0041cc90
add esp, 0xc
jmp 0x40532a
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax]
cmp ecx, dword [ebp - 0x138]
jne 0x4052ea
mov edx, dword [ebp - 0x150]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041b920
add esp, 0xc
jmp 0x40532a
mov edx, dword [ebp - 0x154]
mov eax, dword [edx]
cmp eax, dword [ebp - 0x148]
jne 0x405313
mov ecx, dword [ebp - 0x150]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0041d080
add esp, 0xc
jmp 0x40532a
mov ecx, dword [ebp - 0x150]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0041d3a0
add esp, 0xc
jmp 0x404c02
push edx
mov ecx, ebp
push eax
lea edx, [0x40535c]
call fcn.004ee7d9
pop eax
pop edx
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004bfcf2
add esp, 0x154
cmp ebp, esp
call fcn.004ee7b6
mov esp, ebp
pop ebp
ret