Function at 0x4406c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x529580
mov eax, dword fs:[0]
push eax
push ecx
push ebx
mov eax, dword [0x56b1dc]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
xor eax, eax
test byte [0x57abbc], 1
mov dword [esp + 8], eax
lea ebx, [eax + 2]
jne 0x44092e
or dword [0x57abbc], 1
push 0x57ab50
mov ecx, 0x535ef0
mov dword [esp + 0x18], eax
call fcn.00402550
push 0x57ab54
mov ecx, 0x536efc
mov byte [esp + 0x18], 1
call fcn.00402550
push 0x57ab58
mov ecx, 0x536ea4
mov byte [esp + 0x18], bl
call fcn.00402550
push 0x57ab5c
mov ecx, 0x536eb8
mov byte [esp + 0x18], 3
call fcn.00402550
push 0x57ab60
mov ecx, 0x536eec
mov byte [esp + 0x18], 4
call fcn.00402550
push 0x57ab64
mov ecx, 0x536ef0
mov byte [esp + 0x18], 5
call fcn.00402550
push 0x57ab68
mov ecx, 0x536edc
mov byte [esp + 0x18], 6
call fcn.00402550
push 0x57ab6c
mov ecx, 0x536ed4
mov byte [esp + 0x18], 7
call fcn.00402550
push 0x57ab70
mov ecx, 0x536ed0
mov byte [esp + 0x18], 8
call fcn.00402550
push 0x57ab74
mov ecx, 0x536ed8
mov byte [esp + 0x18], 9
call fcn.00402550
push 0x57ab78
mov ecx, 0x536ee0
mov byte [esp + 0x18], 0xa
call fcn.00402550
push 0x57ab7c
mov ecx, 0x536ef4
mov byte [esp + 0x18], 0xb
call fcn.00402550
push 0x57ab80
mov ecx, 0x536ee4
mov byte [esp + 0x18], 0xc
call fcn.00402550
push 0x57ab84
mov ecx, 0x536ef8
mov byte [esp + 0x18], 0xd
call fcn.00402550
push 0x57ab88
mov ecx, 0x536ecc
mov byte [esp + 0x18], 0xe
call fcn.00402550
push 0x57ab8c
mov ecx, 0x536eac
mov byte [esp + 0x18], 0xf
call fcn.00402550
push 0x57ab90
mov ecx, 0x536ea0
mov byte [esp + 0x18], 0x10
call fcn.00402550
push 0x57ab94
mov ecx, 0x536eb0
mov byte [esp + 0x18], 0x11
call fcn.00402550
push 0x57ab98
mov ecx, 0x536ee8
mov byte [esp + 0x18], 0x12
call fcn.00402550
push 0x57ab9c
mov ecx, 0x536e98
mov byte [esp + 0x18], 0x13
call fcn.00402550
push 0x57aba0
mov ecx, str.xqjhkglntdfmpb
mov byte [esp + 0x18], 0x14
call fcn.00402550
push 0x57aba4
mov ecx, 0x536e9c
mov byte [esp + 0x18], 0x15
call fcn.00402550
push 0x57aba8
mov ecx, 0x536ea8
mov byte [esp + 0x18], 0x16
call fcn.00402550
push 0x57abac
mov ecx, 0x536ec0
mov byte [esp + 0x18], 0x17
call fcn.00402550
push 0x57abb0
mov ecx, 0x535ef0
mov byte [esp + 0x18], 0x18
call fcn.00402550
push 0x57abb4
mov ecx, 0x543960
mov byte [esp + 0x18], 0x19
call fcn.00402550
push 0x57abb8
mov ecx, 0x535ef0
mov byte [esp + 0x18], 0x1a
call fcn.00402550
push 0x530780
call fcn.005000d9
add esp, 4
mov dword [esp + 0x14], 0xffffffff
test byte [0x57abbc], bl
jne 0x440bec
or dword [0x57abbc], ebx
push 0x57aac8
mov ecx, 0x536fc0
mov dword [esp + 0x18], 0x1b
call fcn.00402550
push 0x57aacc
mov ecx, 0x536fb8
mov byte [esp + 0x18], 0x1c
call fcn.00402550
push 0x57aad0
mov ecx, 0x536fb0
mov byte [esp + 0x18], 0x1d
call fcn.00402550
push 0x57aad4
mov ecx, 0x536fa8
mov byte [esp + 0x18], 0x1e
call fcn.00402550
push 0x57aad8
mov ecx, 0x536fa0
mov byte [esp + 0x18], 0x1f
call fcn.00402550
push 0x57aadc
mov ecx, 0x536f9c
mov byte [esp + 0x18], 0x20
call fcn.00402550
push 0x57aae0
mov ecx, 0x536f84
mov byte [esp + 0x18], 0x21
call fcn.00402550
push 0x57aae4
mov ecx, 0x536f94
mov byte [esp + 0x18], 0x22
call fcn.00402550
push 0x57aae8
mov ecx, 0x536f8c
mov byte [esp + 0x18], 0x23
call fcn.00402550
push 0x57aaec
mov ecx, 0x536f7c
mov byte [esp + 0x18], 0x24
call fcn.00402550
push 0x57aaf0
mov ecx, 0x536f78
mov byte [esp + 0x18], 0x25
call fcn.00402550
push 0x57aaf4
mov ecx, 0x536f70
mov byte [esp + 0x18], 0x26
call fcn.00402550
push 0x57aaf8
mov ecx, 0x536f68
mov byte [esp + 0x18], 0x27
call fcn.00402550
push 0x57aafc
mov ecx, 0x536f54
mov byte [esp + 0x18], 0x28
call fcn.00402550
push 0x57ab00
mov ecx, 0x536f60
mov byte [esp + 0x18], 0x29
call fcn.00402550
push 0x57ab04
mov ecx, 0x536f4c
mov byte [esp + 0x18], 0x2a
call fcn.00402550
push 0x57ab08
mov ecx, 0x536f44
mov byte [esp + 0x18], 0x2b
call fcn.00402550
push 0x57ab0c
mov ecx, 0x536f3c
mov byte [esp + 0x18], 0x2c
call fcn.00402550
push 0x57ab10
mov ecx, 0x536f30
mov byte [esp + 0x18], 0x2d
call fcn.00402550
push 0x57ab14
mov ecx, 0x536f28
mov byte [esp + 0x18], 0x2e
call fcn.00402550
push 0x57ab18
mov ecx, 0x536f24
mov byte [esp + 0x18], 0x2f
call fcn.00402550
push 0x57ab1c
mov ecx, 0x536f14
mov byte [esp + 0x18], 0x30
call fcn.00402550
push 0x57ab20
mov ecx, 0x536f1c
mov byte [esp + 0x18], 0x31
call fcn.00402550
push 0x57ab24
mov ecx, 0x536f10
mov byte [esp + 0x18], 0x32
call fcn.00402550
push 0x57ab28
mov ecx, 0x536ff4
mov byte [esp + 0x18], 0x33
call fcn.00402550
push 0x57ab2c
mov ecx, 0x536fc8
mov byte [esp + 0x18], 0x34
call fcn.00402550
push 0x57ab30
mov ecx, 0x536fec
mov byte [esp + 0x18], 0x35
call fcn.00402550
push 0x57ab34
mov ecx, 0x536fe0
mov byte [esp + 0x18], 0x36
call fcn.00402550
push 0x57ab38
mov ecx, 0x536fd8
mov byte [esp + 0x18], 0x37
call fcn.00402550
push 0x57ab3c
mov ecx, 0x536f00
mov byte [esp + 0x18], 0x38
call fcn.00402550
push 0x57ab40
mov ecx, 0x536fd0
mov byte [esp + 0x18], 0x39
call fcn.00402550
push 0x57ab44
mov ecx, 0x536f08
mov byte [esp + 0x18], 0x3a
call fcn.00402550
push 0x57ab48
mov ecx, 0x536fc4
mov byte [esp + 0x18], 0x3b
call fcn.00402550
push 0x530760
call fcn.005000d9
add esp, 4
mov dword [esp + 0x14], 0xffffffff
movzx eax, word [esp + 0x1c]
and eax, 0x800007ff
jns 0x440bff
dec eax
or eax, 0xfffff800
inc eax
movzx eax, ax
movzx eax, ax
mov ecx, eax
and ecx, 0x8000001f
jns 0x440c14
dec ecx
or ecx, 0xffffffe0
inc ecx
sub eax, ecx
cdq
and edx, 0x1f
add eax, edx
sar eax, 5
sub eax, 1
cmp ecx, 0x1a
ja 0x440c59
cmp eax, 0x20
ja 0x440c59
lea edx, [eax*4 + 0x57aac8]
push edx
lea ebx, [ecx*4 + 0x57ab50]
push edi
call fcn.0040d230
add esp, 8
mov eax, edi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop ebx
add esp, 0x10
ret 4
push edi
mov ecx, 0x536e88
call fcn.00402550
mov eax, edi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop ebx
add esp, 0x10
ret 4