Function at 0x40e29b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bfd67
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x19c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xc8], 0x6e0e
mov dword [ebp - 0xd0], 0xab5858
lea eax, [ebp - 0xc8]
push eax
push 1
push 0
push 0x7f88
push 0x53da
call fcn.0041a741
add esp, 0x14
mov eax, dword [0xac167c]
and eax, 1
jne 0x40e31d
mov eax, dword [0xac167c]
or eax, 1
mov dword [0xac167c], eax
mov ecx, 0xac1704
call fcn.0040321a
push 0x4c0e25
call fcn.0049349f
pop ecx
push 0x7ff
lea eax, [ebp - 0xc8]
push eax
push 0x4162
push 0
lea eax, [ebp - 0xd0]
push eax
call fcn.00410619
add esp, 0x14
push dword [ebp + 8]
lea ecx, [ebp - 0x13c]
call fcn.00402f04
mov dword [ebp - 0xc4], 0x60d5
mov dword [ebp - 0x124], 0xab58b4
push 1
push 0x1f69
lea eax, [ebp - 0xc4]
push eax
push 0
call fcn.004216ff
add esp, 0x10
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0040363a
push dword [eax]
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0040364e
push dword [eax]
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0040363a
push dword [eax]
mov edx, 0x406a06
lea ecx, [ebp - 0x15c]
call fcn.004314c6
add esp, 0xc
push 0x6c87
push 0
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0xc4]
push eax
call fcn.0041bc1c
add esp, 0x10
mov dword [ebp - 0xcc], 0x1ee8
mov dword [ebp - 0xf8], 0xab58d0
cmp dword [ebp - 0xcc], 0x22be
jle 0x40e419
push 0x7735
push 0x2163
push 0
call fcn.0041fa01
add esp, 0xc
lea ecx, [ebp - 0x13c]
call fcn.004068da
mov dword [ebp - 0xb4], eax
lea eax, [ebp - 0xcc]
push eax
push 1
push 0x888
push 1
push 0x1357
push 1
push 0x1894
push 0x5c5c
push 1
push 1
push 0x24ef
lea eax, [ebp - 0xf8]
push eax
push 0
call fcn.0040db84
add esp, 0x34
mov dword [ebp - 0xa0], 0x798d
mov dword [ebp - 0xe0], 0xab5918
push 0x1f53
push 0x1b3f
push 0x5c34
push 0x2e57
push 0x1f1a
push 0
push 1
push 1
push 1
lea eax, [ebp - 0xa0]
push eax
call fcn.0040d29d
add esp, 0x28
movzx eax, byte [0xac15c5]
test eax, eax
je 0x40e59f
mov ecx, 0xac1704
call fcn.0042fc63
movzx eax, al
test eax, eax
jne 0x40e59f
mov dword [ebp - 0xc0], 0x3242
mov dword [ebp - 0xd8], 0xab596c
cmp dword [ebp - 0xc0], 0x336d
jle 0x40e525
push 0x2313
push 0
push 1
push 0x24f7
call fcn.0040f200
add esp, 0x10
push 1
push 0
push 0xd6
push 1
push 0x1718
push 0x5ed8
push 0x461e
call fcn.00417b60
add esp, 0x1c
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x70]
push eax
mov ecx, 0xac1704
call fcn.004031f2
lea eax, [ebp - 0xd8]
push eax
push 0
push 0x7ea7
lea eax, [ebp - 0xc0]
push eax
call fcn.00417e16
add esp, 0x10
lea eax, [ebp - 0x158]
push eax
mov ecx, 0xac1704
call fcn.004031e4
push eax
lea ecx, [ebp - 0x70]
call fcn.00403207
movzx eax, al
test eax, eax
je 0x40e59f
lea ecx, [ebp - 0x70]
call fcn.0042fc6c
mov eax, dword [eax + 4]
mov dword [ebp - 0xf4], eax
lea ecx, [ebp - 0x13c]
call fcn.00402f89
mov eax, dword [ebp - 0xf4]
jmp 0x40f15b
push 0x301e
lea eax, [ebp - 0xa0]
push eax
push 0x45b5
lea eax, [ebp - 0xe0]
push eax
push 0
push 0xb4a
call fcn.0041b43e
add esp, 0x18
mov dword [ebp - 0x78], 0x1c61
mov dword [ebp - 0xfc], 0xab5998
push 1
push 0x29ca
push 0x35d9
push 0
lea eax, [ebp - 0x78]
push eax
call fcn.0040f870
add esp, 0x14
and dword [ebp - 0x1c], 0
and dword [ebp - 4], 0
lea eax, [ebp - 0x78]
push eax
push 0x161e
push 0x6ed4
push 0x11b3
push 1
push 0x5b1e
push 0x6774
push 1
lea eax, [ebp - 0xfc]
push eax
push 0x5b12
push 1
push 1
push 1
push 1
push 0x5dde
push 1
call fcn.0040b9d7
add esp, 0x40
jmp 0x40e653
or dword [ebp - 4], 0xffffffff
jmp 0x40e65d
lea eax, [ebp - 0x13c]
push eax
call fcn.00406e51
pop ecx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x40f088
mov dword [ebp - 0xa4], 0x5804
mov dword [ebp - 0xd4], 0xab59f0
push 0x6511
push 1
push 0
lea eax, [ebp - 0xa4]
push eax
push 0x63e3
call fcn.0042c65e
add esp, 0x14
cmp dword [0xac15d8], 0
jne 0x40efb7
mov dword [ebp - 0xb8], 0x35cd
mov dword [ebp - 0xe8], 0xab5a20
push 0x44b9
push 0
push 0
push 0x612f
push 0x5622
push 1
push 1
push 0x8da
lea eax, [ebp - 0xb8]
push eax
push 0x47a5
push 0x73e6
push 0x58d9
call fcn.0041c63d
add esp, 0x30
mov byte [ebp - 0x60], 9
mov byte [ebp - 0x5f], 0x65
mov byte [ebp - 0x5e], 8
mov byte [ebp - 0x5d], 0x31
mov byte [ebp - 0x5c], 7
mov byte [ebp - 0x5b], 0x37
mov byte [ebp - 0x5a], 2
mov byte [ebp - 0x59], 0x79
mov byte [ebp - 0x58], 0xa
mov byte [ebp - 0x57], 0x75
mov byte [ebp - 0x56], 0
mov byte [ebp - 0x55], 0x56
mov byte [ebp - 0x54], 0xb
mov byte [ebp - 0x53], 0x79
mov byte [ebp - 0x52], 1
mov byte [ebp - 0x51], 0x74
mov byte [ebp - 0x50], 4
mov byte [ebp - 0x4f], 0x76
mov byte [ebp - 0x4e], 5
mov byte [ebp - 0x4d], 0x7f
mov byte [ebp - 0x4c], 2
mov byte [ebp - 0x4b], 0x62
mov byte [ebp - 0x4a], 6
mov byte [ebp - 0x49], 0x48
mov byte [ebp - 0x48], 3
mov byte [ebp - 0x47], 0x85
push 0x4e52
lea eax, [ebp - 0xb8]
push eax
push 1
push 0x5167
push 1
push 0x255f
lea eax, [ebp - 0xe8]
push eax
push 0x67f9
push 0x64ae
push 1
push 0
push 0x7f47
call fcn.0042982b
add esp, 0x30
and dword [ebp - 0x18], 0
and dword [ebp - 0x64], 0
jmp 0x40e7b9
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1a
jae 0x40ea6f
mov dword [ebp - 0x88], 0x3354
mov dword [ebp - 0x10c], 0xab5a70
lea eax, [ebp - 0x88]
push eax
push 0x6341
push 0
push 0x62a7
call fcn.0041af5a
add esp, 0x10
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x60]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x40e99f
push 0x5460
push 1
push 0
push 0x72f0
push 0
push 0x5689
push 1
lea eax, [ebp - 0x64]
push eax
push 0x12e8
push 1
push 0x2619
call fcn.00407769
add esp, 0x2c
mov dword [ebp - 0x80], 0x5d1b
mov dword [ebp - 0x104], 0xab5ae0
lea eax, [ebp - 0x80]
push eax
push 0
push 0
push 0x2b7d
push 0x2dce
call fcn.0042c65e
add esp, 0x14
push 0x4e25
push 0x16a3
push 0x2f29
push 0
push 0x1d19
push 0xf2a
push 1
push 1
push 0xd4c
push 1
push 0x4ed2
lea eax, [ebp - 0x18]
push eax
push 0x7010
push 0xd8a
push 0x1cc3
push 0
push 0x1e29
push 0x5057
push 0
push 0x107d
push 1
push 0x212a
call fcn.0042aeb4
add esp, 0x58
push 0x45f1
push 1
lea eax, [ebp - 0x80]
push eax
push 0x864
push 0x17da
push 1
push 0
lea eax, [ebp - 0x104]
push eax
push 0x29b3
push 0x8a4
push 0x3730
push 1
push 1
push 0x1a81
call fcn.0042c73e
add esp, 0x38
mov dword [ebp - 0xa8], 0x19c8
mov dword [ebp - 0xf0], 0xab5b20
lea eax, [ebp - 0xa8]
push eax
push 0x15e2
push 1
push 0x1150
push 1
push 0x1c0b
push 1
push 1
push 0x36aa
push 0x3378
push 0
push 0x4a82
push 0x58e3
push 0x943
push 0x14b5
call fcn.0040dfbe
add esp, 0x3c
jmp 0x40e7b1
lea eax, [ebp - 0x88]
push eax
push 0
lea eax, [ebp - 0x10c]
push eax
call fcn.00417067
add esp, 0xc
mov dword [ebp - 0x90], 0x4010
mov dword [ebp - 0x114], 0xab5b38
push 0x705e
push 0
lea eax, [ebp - 0x90]
push eax
push 0x2ab8
call fcn.00428897
add esp, 0x10
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x5f]
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x64]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0xb0], eax
push 1
push 1
push 1
push 0x10d4
lea eax, [ebp - 0x114]
push eax
push 1
push 0x6bef
push 0
push 1
push 0x41fe
push 0x7469
push 1
lea eax, [ebp - 0x90]
push eax
push 0x69
push 0x679e
call fcn.00409256
add esp, 0x3c
push 0x217a
lea eax, [ebp - 0xb0]
push eax
push 0
call fcn.0041682c
add esp, 0xc
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x60]
mov cx, word [ebp - 0xb0]
mov word [ebp + eax*2 - 0x17c], cx
jmp 0x40e7b1
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x17c], cx
mov dword [ebp - 0x98], 0x7b8f
mov dword [ebp - 0x120], 0xab5ba0
cmp dword [ebp - 0x98], 0x7e1d
jle 0x40eaad
push 0x3352
push 0
call fcn.004193ff
pop ecx
pop ecx
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x1ac]
call fcn.0042fbb0
push eax
call fcn.00406e51
pop ecx
mov dword [ebp - 0x9c], eax
lea ecx, [ebp - 0x1ac]
call fcn.00402f89
mov dword [ebp - 4], 2
lea eax, [ebp - 0x120]
push eax
push 1
push 0x2c2e
push 0x2578
push 1
push 1
push 0x438b
push 1
push 1
push 1
push 0x3026
push 1
push 0xb66
lea eax, [ebp - 0x98]
push eax
push 0x4d3c
push 1
push 0xf5c
push 0x6303
call fcn.0040c6d3
add esp, 0x48
jmp 0x40eb58
or dword [ebp - 4], 0xffffffff
jmp 0x40eb62
and dword [ebp - 0x20], 0
jmp 0x40eb6f
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xd
jae 0x40ebf0
mov dword [ebp - 0x68], 0x41c0
mov dword [ebp - 0x100], 0xab5bf4
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1c8a
push 0x4e7b
call fcn.00429f1b
add esp, 0x10
xor eax, eax
mov ecx, dword [ebp - 0x20]
mov word [ebp + ecx*2 - 0x17c], ax
push 0
push 1
lea eax, [ebp - 0x68]
push eax
push 1
push 0x4bf
push 0x7e82
push 1
push 1
lea eax, [ebp - 0x100]
push eax
push 0x7e04
push 0x428c
push 0x1f49
push 0x2fcc
push 0x56f
call fcn.0041fc74
add esp, 0x38
jmp 0x40eb68
cmp dword [ebp - 0x9c], 0
je 0x40efb7
mov dword [ebp - 0x6c], 0x2385
mov dword [ebp - 0x118], 0xab5c20
cmp dword [ebp - 0x6c], 0x25e5
jle 0x40ec50
push 1
push 0
push 1
push 0x239a
push 1
push 1
push 0x4380
push 0x2588
push 0x2cc4
push 0
push 1
push 0x23a
push 0x1c02
push 0x4286
call fcn.0040c1ad
add esp, 0x38
push 1
push 1
push 1
push 0x4740
push 1
push 1
push 0x365
lea eax, [ebp - 0x6c]
push eax
push 0x3407
push 0
push 1
push 0x321f
lea eax, [ebp - 0x118]
push eax
push 0x4efa
call fcn.0040c1ad
add esp, 0x38
mov dword [ebp - 0x94], 0xfc8
mov dword [ebp - 0x110], 0xab5c68
cmp dword [ebp - 0x94], 0x1324
jle 0x40ecf5
and dword [ebp - 0x28], 0
jmp 0x40ecb7
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x7155
jge 0x40ece1
push 0x727e
push 0xaf0
push 0
lea eax, [ebp - 0x28]
push eax
push 1
push 0x253a
call fcn.00429b81
add esp, 0x18
jmp 0x40ecb0
push 0x1152
push 0
push 0x4365
call fcn.0042d79d
add esp, 0xc
mov byte [ebp - 0x44], 3
mov byte [ebp - 0x43], 0x65
mov byte [ebp - 0x42], 9
mov byte [ebp - 0x41], 0x75
mov byte [ebp - 0x40], 0
mov byte [ebp - 0x3f], 0x51
mov byte [ebp - 0x3e], 6
mov byte [ebp - 0x3d], 0x69
mov byte [ebp - 0x3c], 1
mov byte [ebp - 0x3b], 0xa
mov byte [ebp - 0x3a], 0x82
mov byte [ebp - 0x39], 8
mov byte [ebp - 0x38], 0x6c
mov byte [ebp - 0x37], 5
mov byte [ebp - 0x36], 0x76
mov byte [ebp - 0x35], 7
mov byte [ebp - 0x34], 0x81
mov byte [ebp - 0x33], 0xb
mov byte [ebp - 0x32], 0x68
mov byte [ebp - 0x31], 4
mov byte [ebp - 0x30], 0x5f
mov byte [ebp - 0x2f], 2
mov byte [ebp - 0x2e], 0x76
mov byte [ebp - 0x2d], 1
mov byte [ebp - 0x2c], 0x86
mov dword [ebp - 0x8c], 0x4d35
mov dword [ebp - 0x11c], 0xab5cc0
push 0xb97
push 0x3578
lea eax, [ebp - 0x8c]
push eax
push 0x1872
push 1
push 1
push 1
push 0x1f7e
push 1
push 1
push 0x2fb7
push 0x4f5e
push 0x1378
call fcn.0040cdca
add esp, 0x34
and dword [ebp - 0x14], 0
and dword [ebp - 0x7c], 0
jmp 0x40edbb
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x19
jae 0x40eecd
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x44]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x40ee77
mov dword [ebp - 0x74], 0x62ed
mov dword [ebp - 0x108], 0xab5d28
push 0x4522
lea eax, [ebp - 0x74]
push eax
push 0x70da
push 0x19ab
push 0x2e9f
push 1
push 1
push 1
push 1
push 0x582
call fcn.0040d29d
add esp, 0x28
push 0x108d
push 0x4a44
lea eax, [ebp - 0x7c]
push eax
push 0x5326
push 0
call fcn.0041e31c
add esp, 0x14
push 0
push 1
lea eax, [ebp - 0x108]
push eax
push 1
lea eax, [ebp - 0x74]
push eax
call fcn.0040f831
add esp, 0x14
push 1
push 0x6ee6
push 0x3aa9
push 1
push 0x322f
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.00426756
add esp, 0x1c
jmp 0x40edb3
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x43]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x7c]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x84], eax
push 0x3c31
push 0x3feb
push 1
push 1
push 0
push 0x2ff3
lea eax, [ebp - 0x84]
push eax
call fcn.004193c7
add esp, 0x1c
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x44]
mov cl, byte [ebp - 0x84]
mov byte [ebp + eax - 0x14c], cl
jmp 0x40edb3
mov dword [ebp - 4], 4
push 0x7213
lea eax, [ebp - 0x8c]
push eax
push 0
lea eax, [ebp - 0x11c]
push eax
push 0x418
call fcn.0041da24
add esp, 0x14
jmp 0x40ef1d
or dword [ebp - 4], 0xffffffff
jmp 0x40ef27
xor eax, eax
inc eax
imul eax, eax, 0xc
mov byte [ebp + eax - 0x14c], 0
push 0x3bd
push 0x2aa7
push 0
push 0x5aca
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.00419672
add esp, 0x18
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x194]
call fcn.0042fbe0
and dword [ebp - 0x24], 0
jmp 0x40ef7b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xd
jae 0x40ef8e
mov eax, dword [ebp - 0x24]
mov byte [ebp + eax - 0x14c], 0
jmp 0x40ef74
push 0
push 0
lea eax, [ebp - 0x194]
push eax
push dword [ebp - 0x9c]
call fcn.00413d07
add esp, 0x10
mov dword [0xac15d8], eax
lea ecx, [ebp - 0x194]
call fcn.004030b1
push 0x3a51
push 0x3c9b
push 0x7d7e
push 1
push 0x2758
push 0x1670
push 1
push 1
push 0x666b
push 1
push 0x46e3
push 0x6434
push 0x7819
push 0x6008
push 0x3202
push 0
push 0x5cdb
lea eax, [ebp - 0xa4]
push eax
push 1
lea eax, [ebp - 0xd4]
push eax
push 1
push 0x7774
call fcn.0042aeb4
add esp, 0x58
mov dword [ebp - 0xac], 0x2431
mov dword [ebp - 0xdc], 0xab5d70
cmp dword [ebp - 0xac], 0x2707
jle 0x40f050
push 0
push 0x5e4e
push 0x551
call fcn.0041d257
add esp, 0xc
cmp dword [0xac15d8], 0
je 0x40f06b
mov ecx, dword [ebp + 8]
call fcn.0042fbd5
push eax
call dword [0xac15d8]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0xac]
push eax
push 0
push 0x2205
lea eax, [ebp - 0xdc]
push eax
call fcn.0040f765
add esp, 0x10
mov dword [ebp - 0xbc], 0x170
mov dword [ebp - 0xe4], 0xab5dc0
push 0x1f6a
lea eax, [ebp - 0xbc]
push eax
push 0x418e
push 0
push 1
push 1
push 0xf29
call fcn.00420d6c
add esp, 0x1c
push 0xac1704
push 1
push 1
push 0x4765
push 0x5a8d
push 0x78fb
push 0xac15c5
push 0x5867
push 1
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0
call fcn.00419d12
add esp, 0x30
push 0x72ea
push 0x579b
push 1
push 0x7ae9
push 1
lea eax, [ebp - 0xbc]
push eax
push 1
push 1
push 0x3d1e
lea eax, [ebp - 0xe4]
push eax
push 1
push 0x69c0
push 0x6433
push 0x4666
push 0x348d
call fcn.0040dfbe
add esp, 0x3c
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xec], eax
lea ecx, [ebp - 0x13c]
call fcn.00402f89
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret