Function at 0x409524
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 1
pop eax
test eax, eax
je 0x4095e6
lea eax, [ebp - 0x230]
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x6fc], 0
stc
invalid
inc dword [eax]
jne 0x4090bb
and byte [ebp - 0x77c], 0
and byte [ebp - 0x77b], 0
mov byte [ebp - 0x77a], 4
and byte [ebp - 0x779], 0
mov byte [ebp - 0x778], 0xb8
mov al, bh
invalid
invalid
mov eax, 0xf88985c6
invalid
inc ecx
mov byte [ebp - 0x776], 0xa7
mov byte [ebp - 0x775], 0xab
mov byte [ebp - 0x774], 0x89
mov byte [ebp - 0x773], 0x94
mov byte [ebp - 0x772], 0x9c
mov byte [ebp - 0x771], 0x89
test dword [edi - 0x76000008], ecx
mov byte [ebp - 0x770], 0x9a
mov byte [ebp - 0x76f], 0x96
mov byte [ebp - 0x76e], 0xdb
mov byte [ebp - 0x76d], 0xbd
mov byte [ebp - 0x76c], 0x92
mov byte [ebp - 0x76b], 0x97
mov byte [ebp - 0x76a], 0x9e
mov byte [ebp - 0x769], 0x88
mov byte [ebp - 0x768], 0xa7
mov byte [ebp - 0x767], 0xb8
mov byte [ebp - 0x766], 0x94
invalid
call dword [esi + eax*8 - 0x7647b]
call dword [esi - 0x7637a3a]
invalid
call dword [esi - 0x7627a3a]
invalid
call dword [esi + eax*8 - 0x7617b]
call dword [ebp - 0x7607a3a]
invalid
invalid
fcmovnb st(0), st(6)
test dword [eax - 0x42000008], esp
mov byte [ebp - 0x75f], 0x92
cmp dword [ebp - 0x6fc], 1
jne 0x40916c
and byte [ebp - 0x78c], 0
and byte [ebp - 0x78b], 0
mov byte [ebp - 0x78a], 0xa0
and byte [ebp - 0x789], 0
mov byte [ebp - 0x788], 3
mov byte [ebp - 0x787], 0x3b
mov byte [ebp - 0x786], 0x33
mov byte [ebp - 0x785], 0x3c
mov byte [ebp - 0x784], 0x30
mov byte [ebp - 0x783], 0x3a
mov byte [ebp - 0x782], 0x2d
mov byte [ebp - 0x781], 0x71
mov byte [ebp - 0x780], 0x3b
mov byte [ebp - 0x77f], 0x33
mov byte [ebp - 0x77e], 0x33
mov byte [ebp - 0x77d], 0x5f
push 0xc
lea eax, [ebp - 0x78c]
push eax
call fcn.00407550
pop ecx
push eax
mov eax, dword [ebp - 0x28]
lea eax, [ebp + eax - 0x12c]
push eax
call fcn.004074b1
add esp, 0xc
lea eax, [ebp - 0x12c]
dec dword [ecx - 0x39f7b]
invalid
jmp 0x4094b8
cmp dword [ebp - 0x6fc], 2
jne 0x409229
and byte [ebp - 0x79c], 0
and byte [ebp - 0x79b], 0
mov byte [ebp - 0x79a], 0x10
and byte [ebp - 0x799], 0
mov byte [ebp - 0x798], 0xb3
mov byte [ebp - 0x797], 0x8c
mov byte [ebp - 0x796], 0x80
mov byte [ebp - 0x795], 0x81
mov byte [ebp - 0x794], 0x9d
mov byte [ebp - 0x793], 0x8a
mov byte [ebp - 0x792], 0x9c
mov byte [ebp - 0x791], 0xc1
rol esi, 0x85
jo 0x4091c9
invalid
dec dword [ebx - 0x78e7a3a]
invalid
inc dword [ebx - 0x78d7a3a]
invalid
inc dword [ebx - 0x78c7a3a]
jae 0x4091de
invalid
invalid
out dx, eax
call fcn.00407540
loope 0x409204
dec esp
jno 0x40925d
or al, 0x8d
test dword [eax + edi*8 - 1], esp
invalid
call dword [eax - 0x18]
push eax
jecxz 0x4091fe
invalid
call [ecx + 0x50]
mov eax, dword [ebp - 0x550]
lea eax, [ebp + eax - 0x654]
push eax
call fcn.004074b1
add esp, 0xc
lea eax, [ebp - 0x654]
mov dword [ebp - 0x3a0], eax
jmp 0x4094b8
mov al, 0xfa
invalid
cmp dword [ebp - 0x6fc], 3
jne 0x4092ca
add byte [eax], al
and byte [ebp - 0x7ac], 0
and byte [ebp - 0x7ab], 0
mov byte [ebp - 0x7aa], 0xed
and byte [ebp - 0x7a9], 0
mov byte [ebp - 0x7a8], 0x4e
mov byte [ebp - 0x7a7], 0x55
clc
invalid
call dword [ebp - 0x3a]
test dword [edx - 8], ebx
invalid
call dword [esi - 0x3a]
test dword [ebx - 8], ebx
invalid
invalid
jle 0x409235
test dword [eax + edi*8 - 1], ebx
jmp dword [ecx]
mov byte [ebp - 0x7a3], 0x20
mov byte [ebp - 0x7a2], 0x3c
mov byte [ebp - 0x7a1], 0x76
push dword [esi - 0x3a]
test dword [eax - 8], esp
invalid
invalid
jle 0x409258
test dword [ecx - 8], esp
invalid
invalid
jle 0x40925f
test dword [edx - 8], esp
invalid
call dword [edx]
push 0xb
lea eax, [ebp - 0x7ac]
push eax
call fcn.00407550
pop ecx
push eax
mov eax, dword [ebp - 0x338]
lea eax, [ebp + eax - 0x230]
invalid
cmp dword [ebp - 0x6fc], 4
jne 0x409374
and byte [ebp - 0x7bc], 0
and byte [ebp - 0x7bb], 0
inc ebp
clc
invalid
inc dword [eax]
mov byte [ebp - 0x7ba], 2
and byte [ebp - 0x7b9], 0
mov byte [ebp - 0x7b8], 0xa1
mov byte [ebp - 0x7b7], 0xb2
mov dl, 0xc6
test dword [edx - 8], ecx
invalid
push dword [ecx - 0x7b47a3a]
invalid
invalid
mov eax, 0xf84c85c6
invalid
dec edi
mov byte [ebp - 0x7b3], 0xce
into
mov byte [ebp - 0x7b2], 0xd3
mov byte [ebp - 0x7b1], 0x99
mov byte [ebp - 0x7b0], 0x91
mov byte [ebp - 0x7af], 0x91
mov byte [ebp - 0x7ae], 0xfd
cmp dword [ebp - 0x6fc], 5
jne 0x409415
invalid
and byte [ebp - 0x7cc], 0
and byte [ebp - 0x7cb], 0
mov byte [ebp - 0x7ca], 0x3f
and byte [ebp - 0x7c9], 0
mov byte [ebp - 0x7c8], 0x9c
mov byte [ebp - 0x7c7], 0x90
mov byte [ebp - 0x7c6], 0x93
mov byte [ebp - 0x7c5], 0x81
mov byte [ebp - 0x7c4], 0x90
mov byte [ebp - 0x7c3], 0xac
mov byte [ebp - 0x7c2], 0xee
test dword [esi], edi
clc
invalid
invalid
out dx, al
mov byte [ebp - 0x7c1], 0xa4
mov byte [ebp - 0x7c0], 0xac
mov byte [ebp - 0x7bf], 0xac
mov byte [ebp - 0x7be], 0xc0
inc eax
push 0xb
lea eax, [ebp - 0x7cc]
push eax
call fcn.00407550
pop ecx
push eax
mov eax, dword [ebp - 0x338]
lea eax, [ebp + eax - 0x230]
push eax
call fcn.004074b1
add esp, 0xc
jmp 0x4094b8
cmp dword [ebp - 0x6fc], 6
jne 0x4094b3
and byte [ebp - 0x7dc], 0
and byte [ebp - 0x7db], 0
mov byte [ebp - 0x7da], 0x11
and byte [ebp - 0x7d9], 0
inc dword [eax]
mov byte [ebp - 0x7d8], 0xb2
mov byte [ebp - 0x7d7], 0x8b
mov byte [ebp - 0x7d6], 0x9c
invalid
call [esi + eax*8 - 0x7d47b]
call [esi + eax*8 - 0x7d37b]
inc dword [ecx - 0x7d27a3a]
clc
invalid
call [esi + eax*8 - 0x7d17b]
inc eax
mov byte [ebp - 0x7d1], 0x82
test dword [edi], ebp
clc
invalid
inc dword [edx - 0x7cf7a3a]
invalid
inc dword [ecx - 0x7ce7a3a]
invalid
dec dword [ecx - 0x7cd7a3a]
invalid
invalid
out dx, al
push 0xb
lea eax, [ebp - 0x7dc]
push eax
call fcn.00407550
pop ecx
push eax
mov eax, dword [ebp - 0x338]
test eax, ecx
cld
invalid
dec dword [ebp - 0x22ffa7c]
invalid
call dword [eax - 0x18]
add esp, eax
invalid
inc dword [ebx + 0x5eb0cc4]
jmp 0x4095e6
push dword [ebp + 0x14]
call fcn.00407505
add esp, 0xc
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0
jne 0x409523
jmp 0x408ee2
cmp dword [ebp - 0x37c], 0
je 0x409531
jmp 0x4095e6
push 0
push 0
push 2
push 0
push 2
push 0x40000000
push dword [ebp - 0x3a0]
call dword [ebp - 0x3c8]
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 0xffffffff
je 0x40958a
push 0
lea eax, [ebp - 0x6c4]
push eax
push dword [ebp - 0x38c]
push dword [ebp - 0x748]
push dword [ebp - 0x380]
call dword [ebp - 0x730]
push dword [ebp - 0x380]
call dword [ebp - 0x680]
jmp 0x40958f
jmp 0x408ee2
and dword [ebp - 0x37c], 0
push dword [ebp - 0x3a0]
call dword [ebp - 0x704]
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 0
je 0x4095d6
lea eax, [ebp - 0x714]
push eax
call fcn.00407550
pop ecx
push eax
push dword [ebp - 0x3a4]
push dword [ebp + 0x14]
call fcn.00407505
add esp, 0xc
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0
je 0x4095e1
jmp 0x4095e6
jmp 0x408ee2
cmp dword [ebp - 0x37c], 0
jne 0x409690
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0x7ec], eax
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x7e8], eax
and dword [ebp - 0x7e0], 0
push 0x1000
push 8
push dword [ebp - 0x674]
call dword [ebp - 0x67c]
mov dword [ebp - 0x7e4], eax
push dword [ebp - 0x7e4]
lea eax, [ebp - 0x7ec]
push eax
push dword [ebp - 0x748]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.0040771c
add esp, 0x14
mov dword [ebp - 0x7e0], eax
cmp dword [ebp - 0x7e0], 0
je 0x40967c
lea eax, [ebp - 0x714]
push eax
call fcn.00407550
pop ecx
push eax
push dword [ebp - 0x7e0]
call fcn.004075e5
pop ecx
pop ecx
mov dword [ebp - 0x37c], eax
push dword [ebp - 0x7e4]
push 1
push dword [ebp - 0x674]
call dword [ebp - 0x39c]
push dword [ebp + 0x1c]
push dword [ebp - 0xc]
push dword [ebp - 0x540]
push dword [ebp - 0x684]
push dword [ebp - 0x688]
push dword [ebp - 0x3ac]
push dword [ebp - 0x400]
push dword [ebp - 0x54c]
push dword [ebp - 0x678]
lea eax, [ebp - 0x334]
push eax
push dword [ebp - 4]
push dword [ebp + 8]
call dword [ebp - 0x37c]
pop edi
pop esi
pop ebx
leave
ret