Function at 0x404a90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59a30e
mov eax, dword fs:[0]
push eax
sub esp, 0x90
push ebx
push esi
push edi
mov eax, dword [0x618190]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x34], 0x627a60
mov dword [0x627a60], 0x5ed078
mov dword [ebp - 0x14], 0x627a6c
mov dword [0x627a70], 0
mov dword [0x627a74], 0
call fcn.00419e90
mov dword [0x627a70], eax
mov dword [ebp - 4], 0
mov dword [0x627a78], 0
mov dword [0x627a7c], 0
mov dword [0x627a80], 0
call fcn.00419e90
mov dword [0x627a7c], eax
mov dword [0x627a84], 0
mov dword [0x627a6c], 0
mov dword [ebp - 4], 1
xor eax, eax
mov dword [ebp - 0x14], 0x627a88
mov dword [0x627a9c], 7
mov dword [0x627a98], 0
mov word [0x627a88], ax
mov dword [0x627ab4], 0xf
mov dword [0x627ab0], eax
mov byte [0x627aa0], al
mov dword [0x627acc], 7
mov dword [0x627ac8], eax
mov word [0x627ab8], ax
mov dword [0x627ae4], 0xf
mov dword [0x627ae0], eax
mov byte [0x627ad0], al
push eax
push 0x5ed1d8
mov ecx, 0x627a88
mov byte [ebp - 4], 5
call fcn.0041f200
xor eax, eax
mov dword [ebp - 0x14], 0x627ae8
mov dword [0x627afc], 7
mov dword [0x627af8], 0
mov word [0x627ae8], ax
mov dword [0x627b14], 0xf
mov dword [0x627b10], eax
mov byte [0x627b00], al
mov dword [0x627b2c], 7
mov dword [0x627b28], eax
mov word [0x627b18], ax
mov dword [0x627b44], 0xf
mov dword [0x627b40], eax
mov byte [0x627b30], al
push eax
push 0x5ed1d8
mov ecx, 0x627ae8
mov byte [ebp - 4], 0xa
call fcn.0041f200
xor eax, eax
mov dword [ebp - 0x14], 0x627b48
mov dword [0x627b5c], 7
mov dword [0x627b58], 0
mov word [0x627b48], ax
mov dword [0x627b74], 0xf
mov dword [0x627b70], eax
mov byte [0x627b60], al
mov dword [0x627b8c], 7
mov dword [0x627b88], eax
mov word [0x627b78], ax
mov dword [0x627ba4], 0xf
mov dword [0x627ba0], eax
mov byte [0x627b90], al
push eax
push 0x5ed1d8
mov ecx, 0x627b48
mov byte [ebp - 4], 0xf
call fcn.0041f200
xor eax, eax
mov dword [ebp - 0x14], 0x627ba8
mov dword [0x627bbc], 7
mov dword [0x627bb8], 0
mov word [0x627ba8], ax
mov dword [0x627bd4], 0xf
mov dword [0x627bd0], eax
mov byte [0x627bc0], al
mov dword [0x627bec], 7
mov dword [0x627be8], eax
mov word [0x627bd8], ax
mov dword [0x627c04], 0xf
mov dword [0x627c00], eax
mov byte [0x627bf0], al
push eax
push 0x5ed1d8
mov ecx, 0x627ba8
mov byte [ebp - 4], 0x14
call fcn.0041f200
xor eax, eax
mov dword [ebp - 0x14], 0x627c08
mov dword [0x627c1c], 7
mov dword [0x627c18], 0
mov word [0x627c08], ax
mov dword [0x627c34], 0xf
mov dword [0x627c30], eax
mov byte [0x627c20], al
mov dword [0x627c4c], 7
mov dword [0x627c48], eax
mov word [0x627c38], ax
mov dword [0x627c64], 0xf
mov dword [0x627c60], eax
mov byte [0x627c50], al
push eax
push 0x5ed1d8
mov ecx, 0x627c08
mov byte [ebp - 4], 0x19
call fcn.0041f200
xor eax, eax
mov dword [ebp - 0x14], 0x627c68
mov dword [0x627c7c], 7
mov dword [0x627c78], 0
mov word [0x627c68], ax
mov dword [0x627c94], 0xf
mov dword [0x627c90], eax
mov byte [0x627c80], al
mov dword [0x627cac], 7
mov dword [0x627ca8], eax
mov word [0x627c98], ax
mov dword [0x627cc4], 0xf
mov dword [0x627cc0], eax
mov byte [0x627cb0], al
push eax
push 0x5ed1d8
mov ecx, 0x627c68
mov byte [ebp - 4], 0x1e
call fcn.0041f200
xor eax, eax
mov dword [ebp - 0x14], 0x627cc8
mov dword [0x627cdc], 7
mov dword [0x627cd8], 0
mov word [0x627cc8], ax
mov dword [0x627cf4], 0xf
mov dword [0x627cf0], eax
mov byte [0x627ce0], al
mov dword [0x627d0c], 7
mov dword [0x627d08], eax
mov word [0x627cf8], ax
mov dword [0x627d24], 0xf
mov dword [0x627d20], eax
mov byte [0x627d10], al
push eax
push 0x5ed1d8
mov ecx, 0x627cc8
mov byte [ebp - 4], 0x23
call fcn.0041f200
mov ecx, 0x627d28
mov byte [ebp - 4], 0x24
call fcn.004020c0
mov ecx, 0x627d88
mov byte [ebp - 4], 0x25
call fcn.004020c0
mov dword [0x627dec], 0
mov dword [0x627df0], 0
mov dword [0x627df4], 0
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x27
push eax
push 0
mov ecx, 0x627df8
mov dword [ebp - 0x14], 0
mov dword [0x627df8], 0
mov dword [0x627dfc], 0
mov dword [0x627e00], 0
call fcn.00419bd0
mov dword [0x627e04], 0
mov byte [ebp - 4], 0x28
mov dword [0x627e08], 0
mov dword [0x627e0c], 0
call fcn.00419f50
mov dword [0x627e08], eax
mov ecx, 0x627e10
mov byte [ebp - 4], 0x29
call fcn.00415110
mov ecx, 0x627e24
mov byte [ebp - 4], 0x2a
call fcn.0041ebc0
mov dword [0x627e90], 0xf
mov dword [0x627e8c], 0
mov byte [0x627e7c], 0
mov byte [ebp - 4], 0x2c
mov dword [0x627e98], 0
mov dword [0x627e9c], 0
call fcn.00419f80
mov dword [0x627e98], eax
mov ecx, 0x627ea0
mov byte [ebp - 4], 0x2d
call fcn.0041ebc0
xor eax, eax
mov dword [0x627ed4], 7
mov dword [0x627ed0], 0
mov word [0x627ec0], ax
mov dword [0x627ef0], 0xf
mov dword [0x627eec], eax
mov byte [0x627edc], al
mov dword [0x627ef4], eax
mov dword [0x627ef8], eax
mov dword [0x627efc], eax
mov dword [0x627f14], 0xf
mov dword [0x627f10], eax
mov byte [0x627f00], al
mov byte [ebp - 4], 0x32
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
lea eax, [ebp - 0x2c]
push edi
push eax
call fcn.0040f350
mov ebx, eax
mov esi, 0x627ec0
cmp ebx, esi
je 0x40501c
cmp dword [0x627ed4], 8
jb 0x404ff8
push dword [0x627ec0]
call fcn.0043b833
add esp, 4
xor eax, eax
mov dword [0x627ed4], 7
push ebx
mov ecx, esi
mov dword [0x627ed0], 0
mov word [0x627ec0], ax
call fcn.0041ed10
cmp dword [ebp - 0x18], 8
jb 0x40502d
push dword [ebp - 0x2c]
call fcn.0043b833
add esp, 4
push edi
call fcn.0040f520
mov dword [0x627ed8], eax
call fcn.00412840
test eax, eax
je 0x4050a2
mov ecx, edi
call fcn.004127c0
test eax, eax
jne 0x4050a2
cmp dword [0x627ed4], 8
lea eax, [ebp - 0x9c]
push ecx
cmovae esi, dword [0x627ec0]
push esi
push eax
call fcn.00412fd0
push edi
mov byte [ebp - 4], 0x34
push dword [0x627ed8]
push ecx
mov ecx, eax
call fcn.004024f0
push eax
push str.X64:PU._s:SID._lu:PID._.4d
lea eax, [ebp - 0x2c]
push eax
push 0x6279dc
call fcn.00413590
add esp, 0x18
mov ecx, 0x627edc
push eax
call fcn.004144d0
jmp 0x40512f
cmp dword [0x627ed4], 8
lea eax, [ebp - 0x9c]
push ecx
cmovae esi, dword [0x627ec0]
push esi
push eax
call fcn.00412fd0
push edi
mov byte [ebp - 4], 0x33
push dword [0x627ed8]
push ecx
mov ecx, eax
call fcn.004024f0
push eax
push str.X86:PU._s:SID._lu:PID._.4d
lea eax, [ebp - 0x2c]
push eax
push 0x6279dc
call fcn.00413590
mov esi, eax
add esp, 0x18
cmp esi, 0x627edc
je 0x40512f
cmp dword [0x627ef0], 0x10
jb 0x405109
push dword [0x627edc]
call fcn.0043b833
add esp, 4
push esi
mov ecx, 0x627edc
mov dword [0x627ef0], 0xf
mov dword [0x627eec], 0
mov byte [0x627edc], 0
call fcn.0041ec40
cmp dword [ebp - 0x18], 0x10
jb 0x405140
push dword [ebp - 0x2c]
call fcn.0043b833
add esp, 4
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
mov byte [ebp - 4], 0x32
call fcn.00402150
mov esi, 0xa
push 0
push 0x5ed1da
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
call fcn.0041fab0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x35
push eax
mov ecx, 0x627dec
call fcn.004148f0
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x18], 0x10
jb 0x4051ae
push dword [ebp - 0x2c]
call fcn.0043b833
add esp, 4
dec esi
jne 0x405166
mov byte [ebp - 0xd], 0
lea eax, [ebp - 0xd]
mov ecx, 0x627df8
push eax
cmp esi, 6
je 0x4051c7
mov byte [ebp - 0xd], 1
call fcn.004150a0
inc esi
cmp esi, 0xa
jl 0x4051b1
mov ecx, dword [0x627dec]
push 4
push str.NULL
call fcn.0041fab0
mov ecx, dword [0x627dec]
push 4
push str.INFO
lea ecx, [ecx + 0x18]
call fcn.0041fab0
mov ecx, dword [0x627dec]
push 8
push str.WARNNING
lea ecx, [ecx + 0x30]
call fcn.0041fab0
mov ecx, dword [0x627dec]
push 5
push str.ERROR
lea ecx, [ecx + 0x48]
call fcn.0041fab0
mov ecx, dword [0x627dec]
push 7
push str.PRIVATE
lea ecx, [ecx + 0x60]
call fcn.0041fab0
mov ecx, dword [0x627dec]
push 9
push str.EXCEPTION
lea ecx, [ecx + 0x78]
call fcn.0041fab0
mov ecx, dword [0x627dec]
push 5
push str.DEBUG
lea ecx, [ecx + 0x90]
call fcn.0041fab0
xor esi, esi
mov dword [ebp - 0x14], esi
lea ebx, [ebx]
mov eax, dword [0x627dec]
lea edi, [esi + esi*2]
cmp dword [eax + edi*8 + 0x10], 0
je 0x4052e0
lea ecx, [eax + edi*8]
mov edx, str.NULL
call fcn.0041a030
test al, al
je 0x4052e0
mov edx, dword [0x627dec]
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x30]
lea edx, [edx + edi*8]
call fcn.0041a5e0
add esp, 4
push eax
mov ecx, 0x627e08
mov byte [ebp - 4], 0x36
call fcn.0041ae20
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0x3c]
mov ecx, 0x627e08
push eax
call fcn.0041ae50
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x1c], 0x10
jb 0x4052e0
push dword [ebp - 0x30]
call fcn.0043b833
add esp, 4
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0xa
jl 0x405270
movdqa xmm0, xmmword [0x5f0660]
mov ecx, 0x627e7c
movdqa xmmword [0x627e50], xmm0
xorps xmm0, xmm0
push 4
push str.null
mov dword [0x627a64], 0
mov dword [0x627a68], 0
mov word [0x627e48], 0x101
mov dword [0x627e44], 0x64
mov dword [0x627e4c], 0
movdqa xmmword [0x627e60], xmm0
mov dword [0x627e70], 0
mov dword [0x627e74], 0xa
mov byte [0x627e78], 1
mov dword [0x627e94], 0
call fcn.0041fab0
mov eax, 0x627a60
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret