Function at 0x440ec0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5bd266
mov eax, dword fs:[0]
push eax
sub esp, 0x7c
mov eax, dword [0x69001c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
call fcn.00435360
push 0x14
call fcn.005904a9
mov esi, eax
add esp, 4
mov dword [ebp - 0x40], esi
mov dword [ebp - 4], 0
mov ecx, dword [edi + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
call edx
mov dword [esi], 0x624eb0
mov dword [esi + 4], eax
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [edi + 0xe0]
mov dword [edi + 0xe0], esi
test ecx, ecx
je 0x440f5e
mov eax, dword [ecx]
push 1
call dword [eax + 4]
push dword [edi + 0x18]
mov ecx, dword [edi + 0xe0]
call fcn.004b2da0
mov ecx, dword [edi + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
lea ecx, [edi + 0x4c]
push ecx
lea ecx, [ebp - 0x30]
push ecx
mov ecx, eax
call edx
mov dword [ebp - 4], 2
lea eax, [ebp - 0x30]
cmp dword [ebp - 0x1c], 8
lea ecx, [ebp - 0x88]
push dword [ebp - 0x20]
cmovae eax, dword [ebp - 0x30]
push eax
call fcn.0043ab50
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x40]
call fcn.00453940
mov esi, eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3c]
mov edx, dword [edi + 0xb4]
call fcn.0044caf0
mov edi, 2
mov dword [ebp - 0x34], 2
mov dword [ebp - 0x34], edi
and edi, 0xfffffffd
mov dword [ebp - 0x34], edi
mov dword [ebp - 4], 4
or edi, 1
mov dword [ebp - 0x34], edi
mov eax, dword [ebp - 0x3c]
push dword [esi]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
test eax, eax
js 0x441676
and edi, 0xfffffffe
mov dword [ebp - 0x34], edi
mov byte [ebp - 4], 3
cmp dword [ebp - 0x3c], 0
je 0x441018
lea ecx, [ebp - 0x3c]
call fcn.0043a500
mov byte [ebp - 4], 2
cmp dword [ebp - 0x40], 0
je 0x44102a
lea ecx, [ebp - 0x40]
call fcn.0043a500
movd xmm0, dword [ebp - 0x18]
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x54], xmm0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x3c]
mov esi, dword [ebp - 0x48]
mov edx, dword [esi + 0xb4]
call fcn.0044caf0
or edi, 0x20
mov dword [ebp - 0x34], edi
and edi, 0xffffffdf
mov dword [ebp - 0x34], edi
mov dword [ebp - 4], 0xb
or edi, 0x10
mov dword [ebp - 0x34], edi
sub esp, 8
mov eax, dword [ebp - 0x3c]
movsd xmm0, qword [ebp - 0x54]
movsd qword [esp], xmm0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
test eax, eax
js 0x44167c
and edi, 0xffffffef
mov dword [ebp - 0x34], edi
mov byte [ebp - 4], 2
cmp dword [ebp - 0x3c], 0
je 0x44109c
lea ecx, [ebp - 0x3c]
call fcn.0043a500
cmp byte [ebp - 0x11], 0
je 0x44110e
call fcn.00453520
mov word [ebp - 0x40], ax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x3c]
mov edx, dword [esi + 0xb4]
call fcn.0044caf0
or edi, 0x200
mov dword [ebp - 0x34], edi
and edi, 0xfffffdff
mov dword [ebp - 0x34], edi
mov dword [ebp - 4], 0xf
or edi, 0x100
mov dword [ebp - 0x34], edi
mov eax, dword [ebp - 0x3c]
push dword [ebp - 0x40]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
test eax, eax
js 0x441682
and edi, 0xfffffeff
mov dword [ebp - 0x34], edi
mov byte [ebp - 4], 2
cmp dword [ebp - 0x3c], 0
je 0x44110e
lea ecx, [ebp - 0x3c]
call fcn.0043a500
cmp byte [ebp - 0x14], 0
je 0x441176
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x3c]
mov edx, dword [esi + 0xb4]
call fcn.0044caf0
or edi, 0x2000
mov dword [ebp - 0x34], edi
and edi, 0xffffdfff
mov dword [ebp - 0x34], edi
mov dword [ebp - 4], 0x13
or edi, 0x1000
mov dword [ebp - 0x34], edi
mov eax, dword [ebp - 0x3c]
push 2
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
test eax, eax
js 0x441688
and edi, 0xffffefff
mov dword [ebp - 0x34], edi
mov byte [ebp - 4], 2
cmp dword [ebp - 0x3c], 0
je 0x441176
lea ecx, [ebp - 0x3c]
call fcn.0043a500
mov ecx, dword [esi + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
lea ecx, [esi + 0x4c]
push ecx
mov ecx, eax
call edx
mov ecx, eax
mov byte [ebp - 0x3b], al
shr eax, 0x10
lea edx, [ebp - 0x4c]
shr ecx, 8
mov byte [ebp - 0x39], al
lea eax, [ebp - 0x3c]
mov byte [ebp - 0x3a], cl
lea ecx, [ebp - 0x40]
mov byte [ebp - 0x3c], 0xff
mov dword [ebp - 0x4c], eax
call fcn.00453280
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0x40]
call fcn.0044c990
or edi, 0x40000
mov dword [ebp - 0x34], edi
and edi, 0xfffbffff
mov dword [ebp - 0x34], edi
mov dword [ebp - 4], 0x19
or edi, 0x20000
mov dword [ebp - 0x34], edi
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x4c]
mov edx, dword [esi + 0xb4]
call fcn.0044caf0
or edi, 0x400000
mov dword [ebp - 0x34], edi
and edi, 0xffbfffff
mov dword [ebp - 0x34], edi
mov dword [ebp - 4], 0x1b
or edi, 0x200000
mov dword [ebp - 0x34], edi
mov eax, dword [ebp - 0x4c]
push dword [ebp - 0x44]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x4c]
test eax, eax
js 0x44168e
and edi, 0xffdfffff
mov dword [ebp - 0x34], edi
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x4c], 0
je 0x441247
lea ecx, [ebp - 0x4c]
call fcn.0043a500
and edi, 0xfffdffff
mov dword [ebp - 0x34], edi
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x44], 0
je 0x441262
lea ecx, [ebp - 0x44]
call fcn.0043a500
mov byte [ebp - 4], 2
cmp dword [ebp - 0x40], 0
je 0x441274
lea ecx, [ebp - 0x40]
call fcn.0043a500
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x64], 0x4441c0
mov dword [ebp - 0x60], 0
mov byte [ebp - 4], 0x25
push 0x20
call fcn.005904a9
mov esi, eax
add esp, 4
mov dword [ebp - 0x40], esi
mov byte [ebp - 4], 0x26
mov ecx, 1
movups xmm0, xmmword [ebp - 0x6c]
mov eax, 0x697934
movups xmmword [esi + 8], xmm0
lock xadd dword [eax], ecx
mov byte [ebp - 4], 0x27
mov dword [esi], 0x61b420
mov dword [esi + 0x18], 1
mov byte [ebp - 4], 0x28
mov dword [esi], 0x61b440
mov byte [ebp - 4], 0x25
mov dword [ebp - 0x4c], esi
mov byte [ebp - 4], 0x25
or edi, 0x2000000
mov dword [ebp - 0x34], edi
mov byte [ebp - 4], 2
and edi, 0xfdffffff
mov dword [ebp - 0x34], edi
mov byte [ebp - 4], 0x2c
xorps xmm0, xmm0
movlpd qword [ebp - 0x54], xmm0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x40]
mov edx, dword [ebp - 0x48]
mov edx, dword [edx + 0xb4]
call fcn.0044d840
or edi, 0x10000000
mov dword [ebp - 0x34], edi
and edi, 0xefffffff
mov dword [ebp - 0x34], edi
mov dword [ebp - 4], 0x2d
or edi, 0x8000000
mov dword [ebp - 0x34], edi
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 0x40]
push edx
push esi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
test eax, eax
js 0x441694
and edi, 0xf7ffffff
mov dword [ebp - 0x34], edi
mov byte [ebp - 4], 0x2c
cmp dword [ebp - 0x40], 0
je 0x441362
lea ecx, [ebp - 0x40]
call fcn.0043a500
mov edi, dword [ebp - 0x54]
mov esi, dword [ebp - 0x50]
mov dword [ebp - 4], 0x33
lea ecx, [ebp - 0x44]
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + 0xb4]
call fcn.0044d840
mov eax, 2
mov dword [ebp - 0x38], 2
mov dword [ebp - 0x38], eax
and eax, 0xfffffffd
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x32
or eax, 1
push esi
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x80]
push edi
lea eax, [ebp - 0x44]
push eax
call fcn.0044e0e0
mov esi, dword [ebp - 0x34]
or esi, 0x80000000
mov dword [ebp - 0x34], esi
mov edi, dword [ebp - 0x38]
and edi, 0xfffffffe
mov dword [ebp - 0x38], edi
mov dword [ebp - 4], 0x31
cmp dword [ebp - 0x44], 0
je 0x4413da
lea ecx, [ebp - 0x44]
call fcn.0043a500
and esi, 0x7fffffff
mov dword [ebp - 0x34], esi
mov dword [ebp - 4], 0x2c
lea eax, [ebp - 0x80]
mov ecx, dword [ebp - 0x48]
or esi, 0x4000000
push eax
mov dword [ebp - 0x34], esi
lea ecx, [ecx + 0xc0]
call fcn.004445b0
and esi, 0xfbffffff
mov dword [ebp - 0x34], esi
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x80]
call fcn.00444510
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c]
call fcn.0043a500
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x54], 0x444100
mov dword [ebp - 0x50], 0
mov byte [ebp - 4], 0x37
push 0x20
call fcn.005904a9
mov esi, eax
add esp, 4
mov dword [ebp - 0x70], esi
mov byte [ebp - 4], 0x38
mov eax, 1
movups xmm0, xmmword [ebp - 0x5c]
mov ecx, 0x697934
movups xmmword [esi + 8], xmm0
lock xadd dword [ecx], eax
mov byte [ebp - 4], 0x39
mov dword [esi], 0x61b430
mov dword [esi + 0x18], 1
mov byte [ebp - 4], 0x3a
mov dword [esi], 0x61b450
mov byte [ebp - 4], 0x37
mov dword [ebp - 0x3c], esi
mov byte [ebp - 4], 0x37
or edi, 0x10
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 2
and edi, 0xffffffef
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x3e
xorps xmm0, xmm0
movlpd qword [ebp - 0x54], xmm0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x40]
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + 0xb4]
call fcn.00437ca0
or edi, 0x80
mov dword [ebp - 0x38], edi
and edi, 0xffffff7f
mov dword [ebp - 0x38], edi
mov dword [ebp - 4], 0x3f
or edi, 0x40
mov dword [ebp - 0x38], edi
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 0x40]
push edx
push esi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x12c]
test eax, eax
js 0x44169a
and edi, 0xffffffbf
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x3e
cmp dword [ebp - 0x40], 0
je 0x44150e
lea ecx, [ebp - 0x40]
call fcn.0043a500
mov esi, dword [ebp - 0x54]
mov edi, dword [ebp - 0x50]
mov dword [ebp - 4], 0x45
lea ecx, [ebp - 0x44]
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + 0xb4]
call fcn.00437ca0
mov eax, dword [ebp - 0x38]
or eax, 0x1000
mov dword [ebp - 0x38], eax
and eax, 0xffffefff
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x44
or eax, 0x800
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x6c]
lea eax, [ebp - 0x44]
push eax
call fcn.004446a0
mov byte [ebp - 4], 0x46
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x60], edi
mov byte [ebp - 4], 0x44
mov esi, dword [ebp - 0x38]
or esi, 0x400
mov dword [ebp - 0x38], esi
and esi, 0xfffff7ff
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], 0x43
cmp dword [ebp - 0x44], 0
je 0x441592
lea ecx, [ebp - 0x44]
call fcn.0043a500
and esi, 0xfffffbff
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], 0x3e
lea eax, [ebp - 0x6c]
mov edi, dword [ebp - 0x48]
or esi, 0x20
push eax
mov dword [ebp - 0x38], esi
lea ecx, [edi + 0xd0]
call fcn.00444470
and esi, 0xffffffdf
mov dword [ebp - 0x38], esi
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x6c]
call fcn.004443d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3c]
call fcn.0043a500
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x40]
mov edx, dword [edi + 0xb4]
call fcn.0044caf0
or esi, 0x10000
mov dword [ebp - 0x38], esi
and esi, 0xfffeffff
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], 0x4a
or esi, 0x8000
mov dword [ebp - 0x38], esi
sub esp, 0x20
mov eax, dword [ebp - 0x40]
movaps xmm0, xmmword [0x638880]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x7c]
mov ecx, esp
push eax
movups xmmword [ecx], xmm0
xorps xmm0, xmm0
movups xmmword [ecx + 0x10], xmm0
call edx
test eax, eax
js 0x4416a0
and esi, 0xffff7fff
mov dword [ebp - 0x38], esi
mov byte [ebp - 4], 2
cmp dword [ebp - 0x40], 0
je 0x44164c
lea ecx, [ebp - 0x40]
call fcn.0043a500
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.004075e0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0059046a
mov esp, ebp
pop ebp
ret
push eax
call fcn.0043c310
push eax
call fcn.0043c310
push eax
call fcn.0043c310
push eax
call fcn.0043c310
push eax
call fcn.0043c310
push eax
call fcn.0043c310
push eax
call fcn.0043c310
push eax
call fcn.0043c310
int3