Function at 0x40b1b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49409e
mov eax, dword fs:[0]
push eax
sub esp, 0x3d4
mov eax, dword [0x4aa018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov bh, dl
mov byte [ebp - 0x3ae], bh
mov bl, byte [ebp + 0x1c]
mov byte [ebp - 0x3a2], bl
mov dword [ebp - 4], 0
push ecx
lea ecx, [ebp - 0xa8]
call fcn.004045d0
call fcn.00412700
mov byte [ebp - 4], 5
lea eax, [ebp - 0x98]
push dword [ebp + 0xc]
mov word [ebp - 0x8d], 0x253d
push dword [ebp + 8]
mov dword [ebp - 0x82], 0x3d646975
push dword [ebp + 0x14]
mov dword [ebp - 0x79], 0x73253d
push dword [ebp + 0x10]
mov dword [ebp - 0x8a], 0x3d632d20
push eax
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x86], 0x2d207325
push eax
mov dword [ebp - 0x98], 0x2073682d
mov dword [ebp - 0x7e], 0x2d207325
mov dword [ebp - 0x92], 0x69632d20
mov byte [ebp - 0x8b], 0x73
mov word [ebp - 0x94], 0x732d
mov byte [ebp - 0x7a], 0x67
mov byte [ebp - 0x8e], 0x64
call fcn.00410d60
add esp, 0x14
lea ecx, [ebp - 0xb8]
call fcn.004045d0
push 0x4a5810
call fcn.00411d40
xor esi, esi
mov dword [ebp - 0x3b8], esi
nop
push 1
call fcn.0042482f
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], 0
call fcn.004045d0
call fcn.00412700
mov byte [ebp - 4], 7
mov dword [ebp - 0x23], 0x3d702673
test bl, bl
je 0x40b389
mov dl, bl
mov dword [ebp - 0x1b], 0x736e6574
lea ecx, [ebp - 0x3c4]
mov word [ebp - 0x37], 0x2f73
mov word [ebp - 0x3d], 0x7370
mov word [ebp - 0x3a], 0x2f2f
mov dword [ebp - 0x1f], 0x78652631
mov dword [ebp - 0x2f], 0x69753f70
mov dword [ebp - 0x2b], 0x73253d64
mov dword [ebp - 0x35], 0x2e676f6c
mov word [ebp - 0x31], 0x6870
mov dword [ebp - 0x27], 0x253d6d26
mov dword [ebp - 0x17], 0x3d6e6f69
mov word [ebp - 0x13], 0x6425
mov byte [ebp - 0x11], 0
mov word [ebp - 0x40], 0x7468
mov byte [ebp - 0x3b], 0x3a
mov byte [ebp - 0x38], 0x25
mov byte [ebp - 0x3e], 0x74
call fcn.00403e70
movzx ecx, bh
push ecx
push str.1b9f7e73316b45b89b17f3e9f8e0a57d
mov byte [ebp - 4], 8
push dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.00410d60
lea ecx, [ebp - 0x3c4]
jmp 0x40b414
xor dl, dl
mov word [ebp - 0x1c], 0x3d78
lea ecx, [ebp - 0x3bc]
mov dword [ebp - 0x17], 0x64253d
mov dword [ebp - 0x2c], 0x68702e6c
mov word [ebp - 0x34], 0x3a73
mov word [ebp - 0x1f], 0x7325
mov word [ebp - 0x37], 0x7474
mov byte [ebp - 0x1d], 0x26
mov dword [ebp - 0x27], 0x253d693f
mov dword [ebp - 0x31], 0x2f73252f
mov word [ebp - 0x19], 0x6526
mov byte [ebp - 0x2d], 0x6c
mov byte [ebp - 0x38], 0x68
mov byte [ebp - 0x32], 0x2f
mov byte [ebp - 0x35], 0x70
mov byte [ebp - 0x28], 0x70
mov byte [ebp - 0x1a], 0x31
call fcn.00403e70
movzx ecx, bh
push ecx
push str.1b9f7e73316b45b89b17f3e9f8e0a57d
mov byte [ebp - 4], 9
push dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.00410d60
lea ecx, [ebp - 0x3bc]
add esp, 0x18
mov byte [ebp - 4], 7
call fcn.00412190
cmp esi, 3
jl 0x40b48b
lea ecx, [ebp - 0xa0]
test bl, bl
je 0x40b457
lea eax, [ebp - 0x48]
mov dword [ebp - 0x68], 0x2e676f6c
push eax
mov dword [ebp - 0x64], 0x706870
lea eax, [ebp - 0x68]
mov word [ebp - 0x48], 0x676c
mov dword [ebp - 0x45], 0x706870
mov byte [ebp - 0x46], 0x2e
jmp 0x40b485
lea eax, [ebp - 0x50]
mov word [ebp - 0x55], 0x6870
push eax
mov word [ebp - 0x58], 0x6c6c
lea eax, [ebp - 0x58]
mov word [ebp - 0x53], 0x70
mov byte [ebp - 0x56], 0x2e
mov dword [ebp - 0x50], 0x702e6767
mov word [ebp - 0x4b], 0x70
mov byte [ebp - 0x4c], 0x68
push eax
call fcn.004104d0
push ecx
lea ecx, [ebp - 0xa4]
call fcn.004045d0
lea eax, [ebp - 0xa0]
push eax
call fcn.00411e60
mov byte [ebp - 4], 0xa
test bl, bl
je 0x40b4c8
mov dword [ebp - 0x70], 0x64253d65
mov dword [ebp - 0x74], 0x6d697426
mov byte [ebp - 0x6c], 0
call fcn.00417d70
push eax
lea eax, [ebp - 0x74]
jmp 0x40b4e2
mov dword [ebp - 0x60], 0x3d6d7226
mov word [ebp - 0x5b], 0x64
mov byte [ebp - 0x5c], 0x25
call fcn.00417d70
push eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.00411900
add esp, 0xc
lea eax, [ebp - 0xa4]
push ecx
mov ecx, esp
push eax
call fcn.00411e60
lea ecx, [ebp - 0x3a0]
call fcn.0040b0c0
lea ecx, [ebp - 0x9c]
mov bl, al
call fcn.004045d0
call fcn.00412700
xor ecx, ecx
mov byte [ebp - 4], 0xb
test bl, bl
lea eax, [ebp - 0x9c]
setne cl
push ecx
push str.itcdr__d
push eax
call fcn.00410d60
add esp, 8
lea eax, [ebp - 0x9c]
mov ecx, esp
mov dword [ebp - 0x3ac], esp
push eax
call fcn.00411e60
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0xc
mov ecx, esp
push eax
call fcn.00411e60
mov byte [ebp - 4], 0xb
call fcn.00404c00
add esp, 8
test bl, bl
je 0x40b946
push dword [ebp - 0x39c]
lea eax, [ebp - 0x9c]
push str.itcdsz__d
push eax
call fcn.00410d60
add esp, 8
lea eax, [ebp - 0x9c]
mov ecx, esp
mov dword [ebp - 0x3ac], esp
push eax
call fcn.00411e60
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0xd
mov ecx, esp
push eax
call fcn.00411e60
mov byte [ebp - 4], 0xb
call fcn.00404c00
add esp, 8
cmp dword [ebp - 0x39c], 0x100000
jb 0x40bae2
lea ecx, [ebp - 0x398]
call fcn.004028c0
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 0x398], 0
mov word [ebp - 0x21], 0x6165
mov dword [ebp - 0x2c], 0x37366233
mov dword [ebp - 0x1f], 0x32366266
mov dword [ebp - 0x28], 0x64626165
mov dword [ebp - 0x34], 0x34326436
mov dword [ebp - 0x1a], 0x66373633
mov word [ebp - 0x15], 0x34
mov dword [ebp - 0x30], 0x39326366
mov byte [ebp - 0x1b], 0x64
mov word [ebp - 0x24], 0x6239
mov byte [ebp - 0x16], 0x33
mov byte [ebp - 0x22], 0x32
call fcn.00402d10
sub esp, 0x18
mov byte [ebp - 4], 0x10
mov ecx, esp
push 0x4a5810
call fcn.00402d10
lea eax, [ebp - 0x3dc]
push eax
lea ecx, [ebp - 0x398]
call fcn.00402980
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0xf
call fcn.00403720
push dword [ebp - 0x39c]
call fcn.0041c809
add esp, 4
mov dword [ebp - 0x3a8], 0
mov edi, eax
lea ecx, [ebp - 0x398]
lea eax, [ebp - 0x3a8]
push eax
push edi
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
call fcn.00402a50
push dword [ebp - 0x3a0]
mov bl, al
call fcn.00420ae0
add esp, 4
test bl, bl
jne 0x40b703
push ecx
mov ecx, esp
mov dword [ebp - 0x3b8], esp
push str.itcdf
call fcn.00411d40
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x11
mov ecx, esp
push eax
call fcn.00411e60
mov byte [ebp - 4], 0xf
call fcn.00404c00
push edi
call fcn.0041c3aa
add esp, 0xc
lea ecx, [ebp - 0x398]
call fcn.0040bb40
jmp 0x40b95e
mov esi, dword [ebp - 0x3a8]
push esi
call fcn.0041c809
add esp, 4
mov dword [ebp - 0x3a8], eax
push esi
push edi
push eax
call fcn.0041d8f0
add esp, 0xc
push edi
call fcn.0041c3aa
lea ecx, [ebp - 0xb0]
call fcn.004045d0
call fcn.0040dbf0
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xac], 0x312e36
call fcn.00410030
movzx ebx, al
neg ebx
mov byte [ebp - 0x3ad], 0
sbb ebx, ebx
and ebx, 0xa
xor esi, esi
mov dword [ebp - 0x3ac], esi
nop dword [eax]
nop word [eax + eax]
push 0x4a5810
lea ecx, [ebp - 0xb8]
call fcn.00411d20
push ecx
lea ecx, [ebp - 0xbc]
call fcn.004045d0
push 0x4a5810
call fcn.00411d40
push 1
cmp esi, 0x14
mov byte [ebp - 4], 0x13
push 0
setge byte [ebp - 0x3c0]
lea ecx, [ebp - 0xa8]
push dword [ebp - 0x3c0]
lea edi, [ebx + 1]
sub esp, 8
push 0x104
call fcn.004120d0
push eax
lea ecx, [ebp + 0x18]
call fcn.0040ff10
mov ecx, dword [ebp - 0x3a8]
mov edx, eax
cmp ebx, 0xa
jge 0x40b7f1
call fcn.0040a6d0
jmp 0x40b7f6
call fcn.0040ab90
add esp, 0x18
mov byte [ebp - 0x3a1], al
xor eax, eax
mov ebx, edi
cmp edi, 0x14
push ecx
lea ecx, [ebp - 0xa8]
cmovge ebx, eax
call fcn.004107e0
cmp byte [ebp - 0x3a1], 0
jne 0x40b82e
mov ecx, 0x1f4
call fcn.00419380
mov byte [ebp - 4], 0x12
jmp 0x40b882
xor esi, esi
lea ecx, [ebp - 0x3b4]
call fcn.00404230
mov ecx, eax
mov byte [ebp - 4], 0x14
call fcn.0040ff10
push eax
call fcn.004180d0
add esp, 4
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x3b4]
mov edi, eax
call fcn.00412190
test edi, edi
jne 0x40b929
mov ecx, 0xc8
call fcn.00419380
inc esi
cmp esi, 0xa
jl 0x40b830
mov byte [ebp - 4], 0x12
mov esi, dword [ebp - 0x3ac]
lea ecx, [ebp - 0xbc]
call fcn.00412190
inc esi
mov dword [ebp - 0x3ac], esi
cmp esi, 0x28
jl 0x40b780
mov bl, byte [ebp - 0x3ad]
push dword [ebp - 0x3a8]
call fcn.0041c3aa
add esp, 4
movzx eax, bl
push eax
lea eax, [ebp - 0x9c]
push str.itcmr__d
push eax
call fcn.00410d60
add esp, 8
lea eax, [ebp - 0x9c]
mov ecx, esp
mov dword [ebp - 0x3ac], esp
push eax
call fcn.00411e60
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x15
mov ecx, esp
push eax
call fcn.00411e60
mov byte [ebp - 4], 0x12
call fcn.00404c00
add esp, 8
lea ecx, [ebp - 0xb0]
call fcn.00412190
lea ecx, [ebp - 0x398]
test bl, bl
jne 0x40b99a
mov byte [ebp - 4], 0xb
call fcn.0040bb40
mov esi, dword [ebp - 0x3b8]
mov bh, byte [ebp - 0x3ae]
jmp 0x40b954
mov ecx, edi
call fcn.004199f0
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x12
mov bl, 1
call fcn.00412190
jmp 0x40b8a3
push dword [ebp - 0x3a0]
call fcn.00420ae0
add esp, 4
mov ecx, 0xc8
call fcn.00419380
lea ecx, [ebp - 0x9c]
call fcn.00412190
lea ecx, [ebp - 0xa4]
call fcn.00412190
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 6
call fcn.00412190
inc esi
mov dword [ebp - 0x3b8], esi
cmp esi, 6
jge 0x40b9c4
mov bl, byte [ebp - 0x3a2]
jmp 0x40b2b0
call fcn.0040bb40
lea ecx, [ebp - 0x9c]
call fcn.00412190
lea ecx, [ebp - 0xa4]
call fcn.00412190
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 6
call fcn.00412190
xor esi, esi
nop word [eax + eax]
lea ecx, [ebp - 0x3b4]
call fcn.00404230
mov ecx, eax
mov byte [ebp - 4], 0x16
call fcn.0040ff10
push eax
call fcn.004180d0
add esp, 4
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3b4]
mov edi, eax
call fcn.00412190
test edi, edi
je 0x40ba1e
mov ecx, edi
call fcn.004199f0
mov ecx, 0xfa
call fcn.00419380
inc esi
cmp esi, 0xf0
jl 0x40b9d0
push ecx
mov ecx, esp
mov dword [ebp - 0x3b4], esp
push str.itcbir
call fcn.00411d40
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x17
mov ecx, esp
push eax
call fcn.00411e60
mov byte [ebp - 4], 6
call fcn.00404c00
mov cl, byte [ebp - 0x3a2]
call fcn.004066f0
call fcn.00417b80
push 4
push 0x4b0e14
mov dword [0x4b0e14], eax
mov edx, 0x4b0e20
lea eax, [ebp - 0xb4]
mov dword [ebp - 0xb4], 0x6d7463
push 4
push eax
call fcn.00417de0
add esp, 0x18
lea ecx, [ebp - 0xb8]
call fcn.00412190
lea ecx, [ebp - 0xa8]
call fcn.00412190
lea ecx, [ebp + 8]
call fcn.00412190
lea ecx, [ebp + 0xc]
call fcn.00412190
lea ecx, [ebp + 0x10]
call fcn.00412190
lea ecx, [ebp + 0x14]
call fcn.00412190
lea ecx, [ebp + 0x18]
call fcn.00412190
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041c13e
mov esp, ebp
pop ebp
ret
push ecx
mov ecx, esp
mov dword [ebp - 0x3b4], esp
push str.itcszf
call fcn.00411d40
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 0xe
mov ecx, esp
push eax
call fcn.00411e60
mov byte [ebp - 4], 0xb
call fcn.00404c00
add esp, 8
lea ecx, [ebp - 0x9c]
call fcn.00412190
lea ecx, [ebp - 0xa4]
call fcn.00412190
lea ecx, [ebp - 0xa0]
call fcn.00412190
jmp 0x40ba86