Function at 0x407cd6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x46e107
call fcn.0045454c
sub esp, 0x114
push ebx
push esi
push edi
mov edi, ecx
lea ecx, [ebp - 0x120]
call fcn.004486e9
push 0
and dword [ebp - 4], 0
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 1
pop ebx
push ebx
push eax
push 0x48a1ec
call fcn.00402d75
sub esp, 0x28
lea eax, [edi + 0x108]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
mov byte [ebp - 4], bl
call fcn.0040798e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.00448a43
test al, al
jne 0x407d48
xor bl, bl
jmp 0x40841d
push 4
lea eax, [ebp - 0xf]
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x48a550
call fcn.00402d75
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
mov esi, 0x48a360
push eax
push esi
mov byte [ebp - 4], 2
call fcn.00402d75
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.00449628
sub esp, 0x28
mov dword [edi + 0x44], eax
mov ecx, esp
mov dword [ebp - 0x14], esp
lea eax, [ebp - 0xd]
push ebx
push eax
push 0x4947dc
call fcn.00403f1b
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push 0x48a540
mov byte [ebp - 4], 3
call fcn.00402d75
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 4
call fcn.00402d75
and byte [ebp - 4], 0
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x120]
call fcn.0044953b
push eax
lea ecx, [edi + 0x1a8]
mov byte [ebp - 4], 5
call fcn.0040249e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.00402424
cmp dword [edi + 0x44], 4
mov dword [ebp - 0x1c], 0x48a2b0
jne 0x407e1b
mov dword [ebp - 0x1c], 0x48a528
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4947dc
call fcn.00403f1b
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push dword [ebp - 0x1c]
mov byte [ebp - 4], 6
call fcn.00402d75
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 7
call fcn.00402d75
and byte [ebp - 4], 0
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x120]
call fcn.0044953b
push eax
lea ecx, [edi + 0x248]
mov byte [ebp - 4], 8
call fcn.0040249e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.00402424
cmp dword [edi + 0x44], 4
jne 0x40840d
push 0
lea eax, [ebp - 0xe]
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x48a510
call fcn.00402d75
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 9
call fcn.00402d75
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.00449628
push ebx
mov dword [edi + 0x28], eax
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x48a500
call fcn.00402d75
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0xa
call fcn.00402d75
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.00449628
push 5
mov dword [edi + 0x2c], eax
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x48a4e8
call fcn.00402d75
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0xb
call fcn.00402d75
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.00449628
mov dword [edi + 0x24], eax
call fcn.0044c09d
push eax
lea eax, [ebp - 0xe]
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x48a4d4
call fcn.00402d75
mov byte [ebp - 4], 0xc
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push esi
call fcn.00402d75
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.0044979d
push 0
mov byte [edi + 0xe], al
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x48a4b8
call fcn.00402d75
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0xd
call fcn.00402d75
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.0044979d
push 0
mov byte [edi + 8], al
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x48a490
call fcn.00402d75
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0xe
call fcn.00402d75
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.0044979d
push ebx
mov byte [edi + 0xa], al
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x48a47c
call fcn.00402d75
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0xf
call fcn.00402d75
and byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.0044979d
mov byte [edi + 0xb], al
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4947dc
call fcn.00403f1b
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x48a464
mov byte [ebp - 4], 0x10
call fcn.00402d75
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0x11
call fcn.00402d75
and byte [ebp - 4], 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x120]
call fcn.0044953b
push eax
lea ecx, [edi + 0x1d0]
mov byte [ebp - 4], 0x12
call fcn.0040249e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00402424
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4947dc
call fcn.00403f1b
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x48a44c
mov byte [ebp - 4], 0x13
call fcn.00402d75
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0x14
call fcn.00402d75
and byte [ebp - 4], 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x120]
call fcn.0044953b
push eax
lea ecx, [edi + 0x1f8]
mov byte [ebp - 4], 0x15
call fcn.0040249e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00402424
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4947dc
call fcn.00403f1b
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x48a440
mov byte [ebp - 4], 0x16
call fcn.00402d75
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0x17
call fcn.00402d75
and byte [ebp - 4], 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x120]
call fcn.0044953b
push eax
lea ecx, [edi + 0x220]
mov byte [ebp - 4], 0x18
call fcn.0040249e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00402424
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x48a3e4
call fcn.00403f1b
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x48a3c4
mov byte [ebp - 4], 0x19
call fcn.00402d75
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0x1a
call fcn.00402d75
and byte [ebp - 4], 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x120]
call fcn.0044953b
push eax
lea ecx, [edi + 0xe0]
mov byte [ebp - 4], 0x1b
call fcn.0040249e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00402424
sub esp, 0x28
lea eax, [edi + 0x180]
mov dword [ebp - 0x18], esp
mov ecx, esp
push 0
push eax
mov dword [ecx], 0x476628
mov dword [ecx + 0x20], 0x476620
call fcn.00403c6a
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x48a3ac
mov byte [ebp - 4], 0x1c
call fcn.00402d75
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0x1d
call fcn.00402d75
and byte [ebp - 4], 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x120]
call fcn.0044953b
push eax
lea ecx, [edi + 0x180]
mov byte [ebp - 4], 0x1e
call fcn.0040249e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00402424
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x48a3a0
call fcn.00403f1b
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x48a384
mov byte [ebp - 4], 0x1f
call fcn.00402d75
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0x20
call fcn.00402d75
and byte [ebp - 4], 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x120]
call fcn.0044953b
mov byte [ebp - 4], 0x21
push eax
lea ecx, [edi + 0x270]
call fcn.0040249e
and byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00402424
sub esp, 0x28
lea eax, [ebp - 0xe]
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push eax
push 0x4947dc
call fcn.00403f1b
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x48a374
mov byte [ebp - 4], 0x22
call fcn.00402d75
sub esp, 0x28
lea eax, [ebp - 0xf]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push eax
push esi
mov byte [ebp - 4], 0x23
call fcn.00402d75
and byte [ebp - 4], 0
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x120]
call fcn.0044953b
xor esi, esi
mov byte [ebp - 4], 0x24
cmp dword [ebp - 0x60], esi
je 0x408401
lea eax, [ebp - 0x6c]
mov ecx, edi
push eax
call fcn.0040843d
cmp dword [ebp - 0x60], esi
je 0x408401
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x44]
push 0x48a370
push eax
call fcn.0040c631
add esp, 0xc
push dword [0x476630]
mov ecx, eax
add eax, 4
mov byte [ebp - 4], 0x25
neg ecx
sbb ecx, ecx
push esi
and ecx, eax
push ecx
lea ecx, [edi + 0x94]
call fcn.0040b08e
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x24
call fcn.00402424
and byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.00402424
lea eax, [ebp - 0x120]
mov ecx, edi
push eax
call fcn.0040901a
mov bl, al
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x120]
call fcn.004489cf
mov ecx, dword [ebp - 0xc]
pop edi
mov al, bl
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret