Function at 0x40b1a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x492f8e
mov eax, dword fs:[0]
push eax
sub esp, 0x3d4
mov eax, dword [0x4a9018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov bh, dl
mov byte [ebp - 0x3ae], bh
mov bl, byte [ebp + 0x1c]
mov byte [ebp - 0x3a2], bl
mov dword [ebp - 4], 0
push ecx
lea ecx, [ebp - 0xa8]
call fcn.004045d0
call fcn.00412590
mov byte [ebp - 4], 5
lea eax, [ebp - 0x98]
push dword [ebp + 0xc]
mov word [ebp - 0x8d], 0x253d
push dword [ebp + 8]
mov dword [ebp - 0x82], 0x3d646975
push dword [ebp + 0x14]
mov dword [ebp - 0x79], 0x73253d
push dword [ebp + 0x10]
mov dword [ebp - 0x8a], 0x3d632d20
push eax
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x86], 0x2d207325
push eax
mov dword [ebp - 0x98], 0x2073682d
mov dword [ebp - 0x7e], 0x2d207325
mov dword [ebp - 0x92], 0x69632d20
mov byte [ebp - 0x8b], 0x73
mov word [ebp - 0x94], 0x732d
mov byte [ebp - 0x7a], 0x67
mov byte [ebp - 0x8e], 0x64
call fcn.00410dc0
add esp, 0x14
lea ecx, [ebp - 0xb8]
call fcn.004045d0
push 0x4a51d0
call fcn.00411bd0
xor esi, esi
mov dword [ebp - 0x3b8], esi
nop
push 1
call fcn.00424e39
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], 0
call fcn.004045d0
call fcn.00412590
mov byte [ebp - 4], 7
mov dword [ebp - 0x23], 0x3d702673
test bl, bl
je 0x40b379
mov dl, bl
mov dword [ebp - 0x1b], 0x736e6574
lea ecx, [ebp - 0x3c4]
mov word [ebp - 0x37], 0x2f73
mov word [ebp - 0x3d], 0x7370
mov word [ebp - 0x3a], 0x2f2f
mov dword [ebp - 0x1f], 0x78652631
mov dword [ebp - 0x2f], 0x69753f70
mov dword [ebp - 0x2b], 0x73253d64
mov dword [ebp - 0x35], 0x2e676f6c
mov word [ebp - 0x31], 0x6870
mov dword [ebp - 0x27], 0x253d6d26
mov dword [ebp - 0x17], 0x3d6e6f69
mov word [ebp - 0x13], 0x6425
mov byte [ebp - 0x11], 0
mov word [ebp - 0x40], 0x7468
mov byte [ebp - 0x3b], 0x3a
mov byte [ebp - 0x38], 0x25
mov byte [ebp - 0x3e], 0x74
call fcn.00403e70
movzx ecx, bh
push ecx
push str.a5f4b0c12db345269df4ba4cb036c5e5
mov byte [ebp - 4], 8
push dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.00410dc0
lea ecx, [ebp - 0x3c4]
jmp 0x40b404
xor dl, dl
mov word [ebp - 0x1c], 0x3d78
lea ecx, [ebp - 0x3bc]
mov dword [ebp - 0x17], 0x64253d
mov dword [ebp - 0x2c], 0x68702e6c
mov word [ebp - 0x34], 0x3a73
mov word [ebp - 0x1f], 0x7325
mov word [ebp - 0x37], 0x7474
mov byte [ebp - 0x1d], 0x26
mov dword [ebp - 0x27], 0x253d693f
mov dword [ebp - 0x31], 0x2f73252f
mov word [ebp - 0x19], 0x6526
mov byte [ebp - 0x2d], 0x6c
mov byte [ebp - 0x38], 0x68
mov byte [ebp - 0x32], 0x2f
mov byte [ebp - 0x35], 0x70
mov byte [ebp - 0x28], 0x70
mov byte [ebp - 0x1a], 0x31
call fcn.00403e70
movzx ecx, bh
push ecx
push str.a5f4b0c12db345269df4ba4cb036c5e5
mov byte [ebp - 4], 9
push dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.00410dc0
lea ecx, [ebp - 0x3bc]
add esp, 0x18
mov byte [ebp - 4], 7
call fcn.00412020
cmp esi, 3
jb 0x40b47b
lea ecx, [ebp - 0xa0]
test bl, bl
je 0x40b447
lea eax, [ebp - 0x48]
mov dword [ebp - 0x68], 0x2e676f6c
push eax
mov dword [ebp - 0x64], 0x706870
lea eax, [ebp - 0x68]
mov word [ebp - 0x48], 0x676c
mov dword [ebp - 0x45], 0x706870
mov byte [ebp - 0x46], 0x2e
jmp 0x40b475
lea eax, [ebp - 0x50]
mov word [ebp - 0x55], 0x6870
push eax
mov word [ebp - 0x58], 0x6c6c
lea eax, [ebp - 0x58]
mov word [ebp - 0x53], 0x70
mov byte [ebp - 0x56], 0x2e
mov dword [ebp - 0x50], 0x702e6767
mov word [ebp - 0x4b], 0x70
mov byte [ebp - 0x4c], 0x68
push eax
call fcn.004104f0
push ecx
lea ecx, [ebp - 0xa4]
call fcn.004045d0
lea eax, [ebp - 0xa0]
push eax
call fcn.00411cf0
mov byte [ebp - 4], 0xa
test bl, bl
je 0x40b4b8
mov dword [ebp - 0x70], 0x64253d65
mov dword [ebp - 0x74], 0x6d697426
mov byte [ebp - 0x6c], 0
call fcn.00417ba0
push eax
lea eax, [ebp - 0x74]
jmp 0x40b4d2
mov dword [ebp - 0x60], 0x3d6d7226
mov word [ebp - 0x5b], 0x64
mov byte [ebp - 0x5c], 0x25
call fcn.00417ba0
push eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.00411790
add esp, 0xc
lea eax, [ebp - 0xa4]
push ecx
mov ecx, esp
push eax
call fcn.00411cf0
lea ecx, [ebp - 0x3a0]
call fcn.0040b0b0
lea ecx, [ebp - 0x9c]
mov bl, al
call fcn.004045d0
call fcn.00412590
xor ecx, ecx
mov byte [ebp - 4], 0xb
test bl, bl
lea eax, [ebp - 0x9c]
setne cl
push ecx
push str.itcdr__d
push eax
call fcn.00410dc0
add esp, 8
lea eax, [ebp - 0x9c]
mov ecx, esp
mov dword [ebp - 0x3ac], esp
push eax
call fcn.00411cf0
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0xc
mov ecx, esp
push eax
call fcn.00411cf0
mov byte [ebp - 4], 0xb
call fcn.00404bf0
add esp, 8
test bl, bl
je 0x40b936
push dword [ebp - 0x39c]
lea eax, [ebp - 0x9c]
push str.itcdsz__d
push eax
call fcn.00410dc0
add esp, 8
lea eax, [ebp - 0x9c]
mov ecx, esp
mov dword [ebp - 0x3ac], esp
push eax
call fcn.00411cf0
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0xd
mov ecx, esp
push eax
call fcn.00411cf0
mov byte [ebp - 4], 0xb
call fcn.00404bf0
add esp, 8
cmp dword [ebp - 0x39c], 0x100000
jb 0x40bad2
lea ecx, [ebp - 0x398]
call fcn.004028c0
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 0x398], 0
mov word [ebp - 0x21], 0x6165
mov dword [ebp - 0x2c], 0x37366233
mov dword [ebp - 0x1f], 0x32366266
mov dword [ebp - 0x28], 0x64626165
mov dword [ebp - 0x34], 0x34326436
mov dword [ebp - 0x1a], 0x66373633
mov word [ebp - 0x15], 0x34
mov dword [ebp - 0x30], 0x39326366
mov byte [ebp - 0x1b], 0x64
mov word [ebp - 0x24], 0x6239
mov byte [ebp - 0x16], 0x33
mov byte [ebp - 0x22], 0x32
call fcn.00402d10
sub esp, 0x18
mov byte [ebp - 4], 0x10
mov ecx, esp
push 0x4a51d0
call fcn.00402d10
lea eax, [ebp - 0x3dc]
push eax
lea ecx, [ebp - 0x398]
call fcn.00402980
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0xf
call fcn.00403730
push dword [ebp - 0x39c]
call fcn.0041c79e
add esp, 4
mov dword [ebp - 0x3a8], 0
mov edi, eax
lea ecx, [ebp - 0x398]
lea eax, [ebp - 0x3a8]
push eax
push edi
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
call fcn.00402a50
push dword [ebp - 0x3a0]
mov bl, al
call fcn.0042112b
add esp, 4
test bl, bl
jne 0x40b6f3
push ecx
mov ecx, esp
mov dword [ebp - 0x3b8], esp
push str.itcdf
call fcn.00411bd0
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x11
mov ecx, esp
push eax
call fcn.00411cf0
mov byte [ebp - 4], 0xf
call fcn.00404bf0
push edi
call fcn.0041c33f
add esp, 0xc
lea ecx, [ebp - 0x398]
call fcn.0040bb30
jmp 0x40b94e
mov esi, dword [ebp - 0x3a8]
push esi
call fcn.0041c79e
add esp, 4
mov dword [ebp - 0x3a8], eax
push esi
push edi
push eax
call fcn.0041e360
add esp, 0xc
push edi
call fcn.0041c33f
lea ecx, [ebp - 0xb0]
call fcn.004045d0
call fcn.0040dbd0
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xac], 0x312e36
call fcn.00410050
movzx ebx, al
neg ebx
mov byte [ebp - 0x3ad], 0
sbb ebx, ebx
and ebx, 0xa
xor esi, esi
mov dword [ebp - 0x3ac], esi
nop dword [eax]
nop word [eax + eax]
push 0x4a51d0
lea ecx, [ebp - 0xb8]
call fcn.00411bb0
push ecx
lea ecx, [ebp - 0xbc]
call fcn.004045d0
push 0x4a51d0
call fcn.00411bd0
push 1
cmp esi, 0x14
mov byte [ebp - 4], 0x13
push 0
setge byte [ebp - 0x3c0]
lea ecx, [ebp - 0xa8]
push dword [ebp - 0x3c0]
lea edi, [ebx + 1]
sub esp, 8
push 0x104
call fcn.00411f60
push eax
lea ecx, [ebp + 0x18]
call fcn.0040ff20
mov ecx, dword [ebp - 0x3a8]
mov edx, eax
cmp ebx, 0xa
jge 0x40b7e1
call fcn.0040a6c0
jmp 0x40b7e6
call fcn.0040ab80
add esp, 0x18
mov byte [ebp - 0x3a1], al
xor eax, eax
mov ebx, edi
cmp edi, 0x14
push ecx
lea ecx, [ebp - 0xa8]
cmovge ebx, eax
call fcn.00410800
cmp byte [ebp - 0x3a1], 0
jne 0x40b81e
mov ecx, 0x1f4
call fcn.004191a0
mov byte [ebp - 4], 0x12
jmp 0x40b872
xor esi, esi
lea ecx, [ebp - 0x3b4]
call fcn.00404230
mov ecx, eax
mov byte [ebp - 4], 0x14
call fcn.0040ff20
push eax
call fcn.00417f00
add esp, 4
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x3b4]
mov edi, eax
call fcn.00412020
test edi, edi
jne 0x40b919
mov ecx, 0xc8
call fcn.004191a0
inc esi
cmp esi, 0xa
jl 0x40b820
mov byte [ebp - 4], 0x12
mov esi, dword [ebp - 0x3ac]
lea ecx, [ebp - 0xbc]
call fcn.00412020
inc esi
mov dword [ebp - 0x3ac], esi
cmp esi, 0x28
jl 0x40b770
mov bl, byte [ebp - 0x3ad]
push dword [ebp - 0x3a8]
call fcn.0041c33f
add esp, 4
movzx eax, bl
push eax
lea eax, [ebp - 0x9c]
push str.itcmr__d
push eax
call fcn.00410dc0
add esp, 8
lea eax, [ebp - 0x9c]
mov ecx, esp
mov dword [ebp - 0x3ac], esp
push eax
call fcn.00411cf0
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x15
mov ecx, esp
push eax
call fcn.00411cf0
mov byte [ebp - 4], 0x12
call fcn.00404bf0
add esp, 8
lea ecx, [ebp - 0xb0]
call fcn.00412020
lea ecx, [ebp - 0x398]
test bl, bl
jne 0x40b98a
mov byte [ebp - 4], 0xb
call fcn.0040bb30
mov esi, dword [ebp - 0x3b8]
mov bh, byte [ebp - 0x3ae]
jmp 0x40b944
mov ecx, edi
call fcn.00419810
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x12
mov bl, 1
call fcn.00412020
jmp 0x40b893
push dword [ebp - 0x3a0]
call fcn.0042112b
add esp, 4
mov ecx, 0xc8
call fcn.004191a0
lea ecx, [ebp - 0x9c]
call fcn.00412020
lea ecx, [ebp - 0xa4]
call fcn.00412020
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 6
call fcn.00412020
inc esi
mov dword [ebp - 0x3b8], esi
cmp esi, 6
jge 0x40b9b4
mov bl, byte [ebp - 0x3a2]
jmp 0x40b2a0
call fcn.0040bb30
lea ecx, [ebp - 0x9c]
call fcn.00412020
lea ecx, [ebp - 0xa4]
call fcn.00412020
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 6
call fcn.00412020
xor esi, esi
nop word [eax + eax]
lea ecx, [ebp - 0x3b4]
call fcn.00404230
mov ecx, eax
mov byte [ebp - 4], 0x16
call fcn.0040ff20
push eax
call fcn.00417f00
add esp, 4
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3b4]
mov edi, eax
call fcn.00412020
test edi, edi
je 0x40ba0e
mov ecx, edi
call fcn.00419810
mov ecx, 0xfa
call fcn.004191a0
inc esi
cmp esi, 0xf0
jl 0x40b9c0
push ecx
mov ecx, esp
mov dword [ebp - 0x3b4], esp
push str.itcbir
call fcn.00411bd0
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x17
mov ecx, esp
push eax
call fcn.00411cf0
mov byte [ebp - 4], 6
call fcn.00404bf0
mov cl, byte [ebp - 0x3a2]
call fcn.004066e0
call fcn.004179b0
push 4
push 0x4afaec
mov dword [0x4afaec], eax
mov edx, 0x4afaf8
lea eax, [ebp - 0xb4]
mov dword [ebp - 0xb4], 0x6d7463
push 4
push eax
call fcn.00417c10
add esp, 0x18
lea ecx, [ebp - 0xb8]
call fcn.00412020
lea ecx, [ebp - 0xa8]
call fcn.00412020
lea ecx, [ebp + 8]
call fcn.00412020
lea ecx, [ebp + 0xc]
call fcn.00412020
lea ecx, [ebp + 0x10]
call fcn.00412020
lea ecx, [ebp + 0x14]
call fcn.00412020
lea ecx, [ebp + 0x18]
call fcn.00412020
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041c0d2
mov esp, ebp
pop ebp
ret
push ecx
mov ecx, esp
mov dword [ebp - 0x3b4], esp
push str.itcszf
call fcn.00411bd0
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0xe
mov ecx, esp
push eax
call fcn.00411cf0
mov byte [ebp - 4], 0xb
call fcn.00404bf0
add esp, 8
lea ecx, [ebp - 0x9c]
call fcn.00412020
lea ecx, [ebp - 0xa4]
call fcn.00412020
lea ecx, [ebp - 0xa0]
call fcn.00412020
jmp 0x40ba76