Function at 0x40a340
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x174
mov eax, dword [0x4aa018]
xor eax, esp
mov dword [esp + 0x170], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
lea eax, [esp + 0x14c]
mov esi, ecx
mov word [esp + 0x14d], 0x73
push eax
mov ecx, edi
mov dword [esp + 0x144], esi
mov ebx, edx
mov byte [esp + 0x150], 0x71
call fcn.00411d20
cmp byte [ebp + 0xc], 0
lea eax, [esp + 0x14c]
mov ecx, edi
push eax
je 0x40a458
mov word [esp + 0x151], 0x61
mov byte [esp + 0x150], 0x71
call fcn.00411d20
lea edx, [esp + 0x14]
mov dword [esp + 0x14], 0
mov ecx, esi
call fcn.00416f90
test eax, eax
je 0x40a43d
cmp dword [esp + 0x14], 0
je 0x40a43d
lea eax, [esp + 0x14c]
mov dword [esp + 0x14c], 0x746171
push eax
mov ecx, edi
call fcn.00411d20
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x140]
push eax
push 4
push ebx
mov edx, 0x13
mov dword [esp + 0x14c], 0
call fcn.00416ee0
add esp, 0xc
cmp dword [ebx], 0
je 0x40a440
lea eax, [esp + 0x14c]
mov dword [esp + 0x14c], 0x68746171
push eax
mov ecx, edi
mov byte [esp + 0x154], 0
call fcn.00411d20
cmp dword [ebx], 0
setne al
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x170]
xor ecx, esp
call fcn.0041c13e
mov esp, ebp
pop ebp
ret
mov word [esp + 0x150], 0x7571
mov byte [esp + 0x152], 0
call fcn.00411d20
mov byte [esp + 0x13], 0
mov dword [esp + 0x144], 4
mov dword [esp + 0x148], 0
mov dword [esp + 0x18], 0x128
call fcn.00417930
mov dword [esp + 0x14], eax
cmp eax, 0xffffffff
je 0x40a6a8
lea edx, [esp + 0x18]
mov ecx, eax
call fcn.004178b0
cmp eax, 1
jne 0x40a69f
mov word [esp + 0x16c], 0x7865
mov dword [esp + 0x16f], 0x65726f6c
mov dword [esp + 0x174], 0x6578652e
mov byte [esp + 0x16e], 0x70
mov byte [esp + 0x178], 0
mov byte [esp + 0x173], 0x72
lea eax, [esp + 0x3c]
lea ecx, [esp + 0x16c]
nop dword [eax + eax]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x40a520
test dl, dl
je 0x40a51c
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x40a520
add ecx, 2
add eax, 2
test dl, dl
jne 0x40a500
xor eax, eax
jmp 0x40a525
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40a647
mov byte [esp + 0x14f], al
mov ecx, edi
lea eax, [esp + 0x14c]
mov word [esp + 0x14d], 0x6575
push eax
mov byte [esp + 0x150], 0x71
call fcn.00411d20
push dword [esp + 0x20]
call fcn.00418670
mov esi, eax
add esp, 4
test esi, esi
je 0x40a647
lea eax, [esp + 0x15c]
mov dword [esp + 0x15c], 0x70657571
push eax
mov ecx, edi
mov byte [esp + 0x164], 0
call fcn.00411d20
push ebx
mov edx, 0xa
mov ecx, esi
call fcn.004189f0
add esp, 4
test eax, eax
je 0x40a62f
lea eax, [esp + 0x164]
mov dword [esp + 0x164], 0x70657571
push eax
mov ecx, edi
mov word [esp + 0x16c], 0x74
call fcn.00411d20
mov ecx, dword [ebx]
lea eax, [esp + 0x144]
push eax
push dword [esp + 0x148]
lea eax, [esp + 0x150]
mov edx, 0xc
push eax
call fcn.00416ee0
add esp, 0xc
test eax, eax
je 0x40a62f
lea eax, [esp + 0x154]
mov dword [esp + 0x155], 0x74706575
push eax
mov ecx, edi
mov word [esp + 0x15d], 0x69
mov byte [esp + 0x158], 0x71
call fcn.00411d20
mov eax, dword [esp + 0x140]
cmp eax, dword [esp + 0x148]
je 0x40a65f
mov ecx, dword [ebx]
test ecx, ecx
je 0x40a640
call fcn.004199f0
mov dword [ebx], 0
mov ecx, esi
call fcn.004199f0
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x18]
call fcn.00417830
cmp eax, 1
je 0x40a4f0
jmp 0x40a69f
lea eax, [esp + 0x154]
mov word [esp + 0x155], 0x6575
push eax
mov ecx, edi
mov byte [esp + 0x158], 0x71
mov dword [esp + 0x15c], 0x736974
mov byte [esp + 0x15b], 0x70
call fcn.00411d20
mov ecx, esi
mov byte [esp + 0x13], 1
call fcn.004199f0
mov ecx, dword [esp + 0x14]
call fcn.004199f0
mov ecx, dword [esp + 0x17c]
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0041c13e
mov esp, ebp
pop ebp
ret