Function at 0x440a41
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
and ebx, 0xc12c
pop ebx
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push ebx
sub ebx, 0x103c2
sub ebx, 0x180ac
pop ebx
push eax
push edx
add esp, 4
or eax, 0x134a8
pop eax
push eax
push edi
add esp, 4
jmp 0x440a9b
pop eax
push ecx
push ebx
add esp, 4
add ecx, 0x3008
pop ecx
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push ebx
push ebx
add esp, 4
add ebx, 0x14a10
and ebx, 0xee02
pop ebx
push ecx
push esi
add esp, 4
jmp 0x440b2f
call 0x440b3f
add byte [ebp + 0x47], cl
inc ebx
inc edi
inc ebp
dec eax
aas
inc esp
push eax
inc edi
add esp, 4
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push esi
push esi
add esp, 4
add esi, 0x183fe
or esi, 0x4946
and esi, 0xaec2
or esi, 0x17476
pop esi
push edx
sub edx, 0x12c85
add edx, 0x11d51
or edx, 0x11494
pop edx
cmp dword [ebp - 0x150c], 0
jne 0x440bb4
mov dword [ebp - 0x2a8], 0
jmp 0x440e5b
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push eax
push edx
add esp, 4
and eax, 0xe808
pop eax
push eax
push eax
add esp, 4
or eax, 0x5456
or eax, 0xc85b
and eax, 0x172b8
add eax, 0x1341b
pop eax
push edx
xor edx, 0x46fb
pop edx
cmp dword [ebp - 0xc4c], 0
jne 0x440c10
mov dword [ebp - 0x2a8], 0
jmp 0x440e5b
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push eax
or eax, 0x8c2f
pop eax
push ebx
push eax
add esp, 4
and ebx, 0x14511
or ebx, 0xebe0
pop ebx
push eax
call 0x440c44
add byte [ecx], bh
aaa
aas
xor al, byte [esi + 0x48]
cmp dword [ebx - 0xf7efb3c], eax
mov dword [0x5800000f], eax
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push ebx
or ebx, 0x9d37
add ebx, 0x1448f
sub ebx, 0x6fe6
pop ebx
push eax
push ecx
add esp, 4
or eax, 0x34a4
sub eax, 0xb055
or eax, 0x12ec5
and eax, 0x54bd
pop eax
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push ecx
push ebx
add esp, 4
jmp 0x440d0e
add ecx, 0xfad8
add ecx, 0x8fd7
add ecx, 0x7621
pop ecx
push ecx
push esi
add esp, 4
jmp 0x440d2c
xor ecx, 0x14f30
pop ecx
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x440d50
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1514], ecx
jmp 0x440daa
movzx eax, word [ebp - 0x204]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x440c78
movzx edx, word [ebp - 0x204]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x440c78
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x440d94
mov dword [ebp - 0x1510], 0xffffffff
jmp 0x440d9e
mov dword [ebp - 0x1510], 1
mov eax, dword [ebp - 0x1510]
mov dword [ebp - 0x1514], eax
cmp dword [ebp - 0x1514], 0
jne 0x440df3
push edi
and edi, 0x64fa
and edi, 0xf3d5
xor edi, 0xe792
or edi, 0x26b2
pop edi
push eax
push edx
add esp, 4
call 0x440de1
add byte [edi], dh
aaa
cmp eax, 0x324f4936
add esp, 4
pop eax
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp - 0x2a8], ecx
jmp 0x440e5b
push eax
xor eax, 0xbcfb
and eax, 0x12cdd
and eax, 0x92c0
add eax, 0x8e17
pop eax
push ecx
jmp 0x440e13
or ecx, 0x12686
jmp 0x440e1e
or ecx, 0x14c3d
pop ecx
mov edx, dword [ebp - 0x4e4]
mov eax, dword [edx]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
cmp ecx, dword [ebp - 0xc4c]
je 0x440e51
mov edx, dword [ebp - 0x4e4]
cmp dword [edx + 0x30], 0
jne 0x440c1c
mov dword [ebp - 0x2a8], 0
push esi
or esi, 0x66b9
pop esi
push edi
push ebx
add esp, 4
jmp 0x440e6e
pop edi
push edi
push ecx
add esp, 4
jmp 0x440e7b
jmp 0x440e80
and edi, 0x43a8
and edi, 0xa0a0
pop edi
cmp dword [ebp - 0x2a8], 0
jne 0x441792
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
mov dword [ebp - 0x16d2], edx