Function at 0x401640
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push edi
push ebx
push esi
and esp, 0xfffffff8
sub esp, 0x88
mov al, 0x27
mov cl, 0x4a
mov byte [esp + 0x83], 0x81
movzx edx, word [esp + 0x6c]
mov si, dx
imul edi, edx, 0x762d
mov bx, di
mov word [esp + 0x6c], bx
mov dword [esp + 0x68], 0xca1670
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x5c], 0x2d73652d
mov dword [esp + 0x60], 0x2d70702d
mov dword [esp + 0x64], 0x2d2d2d
mov ebx, dword [esp + 0x70]
mov byte [esp + 0x4b], al
mov eax, dword [esp + 0x74]
or edx, 0xfc2e
mov ch, byte [esp + 0x83]
mov word [esp + 0x6c], dx
mov dl, ch
add dl, 0xf3
mov byte [esp + 0x5c], dl
mov byte [esp + 0x5f], 0x74
mov dl, 0xcf
sub dl, ch
mov byte [esp + 0x6f], dl
mov dl, ch
or dl, 0x46
mov byte [esp + 0x6f], dl
mov byte [esp + 0x60], 0x61
mov edx, ebx
imul edx, eax
mov dword [esp + 0x44], eax
mov eax, ebx
mov dword [esp + 0x40], edx
mul ebx
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x40]
add edx, eax
add edx, eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], edx
mov byte [esp + 0x63], 0x2e
mov byte [esp + 0x64], 0x65
sub cl, byte [esp + 0x83]
mov byte [esp + 0x5b], cl
mov al, ch
mul ch
mov byte [esp + 0x6f], al
mov al, byte [esp + 0x5b]
mov cl, byte [esp + 0x83]
add cl, 0xf7
mov byte [esp + 0x65], cl
mov cl, byte [esp + 0x4b]
cmp cl, al
mov byte [esp + 0x3b], ch
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], ebx
mov word [esp + 0x2e], si
jb 0x40186d
jmp 0x4018d7
mov eax, 0xca1670
sub eax, dword [esp + 0x68]
mov dword [esp + 0x50], eax
jmp 0x401836
mov dword [esp + 0x54], 0
jmp 0x40180b
mov dword [esp + 0x50], 1
mov al, byte [esp + 0x3b]
mov byte [esp + 0x6f], al
jmp 0x401836
xor eax, eax
mov ecx, dword [esp + 0x68]
add ecx, 0xff35e990
mov dword [esp + 0x4c], 0x61e
mov dl, byte [esp + 0x3b]
mov byte [esp + 0x6f], dl
mov esi, esp
mov dword [esi], 0
mov esi, dword [sym.imp.x00xc6x8cxc6xbcx00x00xc6xbbx00x00x00x00x00x00xb0x00x00x00x00x00x00x00x00x83xc1xe0x00x00x00x]
mov dword [esp + 0x28], eax
mov dword [esp + 0x24], ecx
call esi
sub esp, 4
xor ecx, ecx
mov esi, esp
mov edi, dword [esp + 0x24]
mov dword [esi + 0x10], edi
mov dword [esi + 0xc], edi
mov dword [esi + 8], edi
mov dword [esi + 4], 0
mov dword [esi], 0
mov esi, dword [sym.imp.c6xbbx00x00x00x00x00x00xb0x00x00x00x00x00x00x00x00x83xc1xe0x00x00x00x00x00x00x00xc1xf1xffxff]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], ecx
call esi
sub esp, 0x14
mov ecx, 0x1cd1e1ff
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x34]
sub ecx, edi
mov dword [esp + 0x7c], ecx
add esi, 1
mov dword [esp + 0x54], esi
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x68]
mov cl, byte [esp + 0x3b]
xor cl, 0xea
mov byte [esp + 0x6f], cl
xor eax, 0xca158f
mov edx, dword [esp + 0x34]
mov dword [esp + 0x7c], edx
cmp dword [esp + 0x54], eax
jl 0x401785
jmp 0x401751
mov ax, 0xde85
mov word [esp + 0x58], 0x26b7
cmp ax, word [esp + 0x58]
jb 0x40186d
jmp 0x4018a0
mov eax, dword [esp + 0x30]
add eax, eax
mov ecx, dword [esp + 0x44]
adc ecx, ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], ecx
mov eax, dword [esp + 0x68]
add eax, 0xff35e991
mov dword [esp + 0x50], eax
jmp 0x401836
lea eax, [esp + 0x5c]
mov cl, byte [esp + 0x3b]
and cl, 0xd7
mov byte [esp + 0x6f], cl
mov byte [esp + 0x66], 0x65
mov edx, esp
mov dword [edx], eax
mov eax, dword [reloc.xffxffxffxffxffxffxffxfffx83xc2x00x00x00x00x00x00x00xc6x8cxc6xbcx00x00xc6xbbx00x00x00x00x00x00xb0x00x00x00x00x00x00x00x00x83xc1xe0x00x00x00x00x00x00x00xc1xf1xffxffx01x00x00xc7x10xcfx02x00x00x_x10xff_x0fx10xffxffxffxffxffxffxffxffxffxffxffxffxffxffxffxfffx83xc2x00x00x00x00x00x00x00xc6x8cxc6xbcx00x00xc6xbbx00x00x00x00x00x00xb0x00x00x00x00x00x00x00x00x83xc1xe0x00x00x00x00x00x00x]
call eax
sub esp, 4
mov cl, byte [esp + 0x3b]
or cl, cl
mov byte [esp + 0x6f], cl
cmp eax, 0
jne 0x4018ca
jmp 0x4018ac
mov eax, dword [esp + 0x50]
lea esp, [ebp - 0xc]
pop esi
pop ebx
pop edi
pop ebp
ret
mov eax, dword [fcn.0040a008]
movzx eax, byte [eax]
cmp eax, 0xb8
je 0x40184a
jmp 0x4018e6
mov dword [esp + 0x50], 0
jmp 0x401836
mov dword [esp + 0x50], 1
jmp 0x401836
call fcn.00406aa0
cmp eax, 0
jne 0x4018bd
jmp 0x401763
mov eax, dword [reloc.xffxffxffxffxffxffxffxfffx83xc2x00x00x00x00x00x00x00xc6x8cxc6xbcx00x00xc6xbbx00x00x00x00x00x00xb0x00x00x00x00x00x00x00x00x83xc1xe0x00x00x00x00x00x00x00xc1xf1xffxffx01x00x00xc7x10xcfx02x00x00x_xffxffxffxffxffxffxffxffxffxffxffxffxfffx83xc2x00x00x00x00x00x00x00xc6x8cxc6xbcx00x00xc6xbbx00x00x00x00x00x00xb0x00x00x00x00x00x00x00x00x83xc1xe0x00x00x00x00x00x00x00xc1xf1xffxffx01x00x00]
mov cx, word [esp + 0x2e]
mov word [esp + 0x6c], cx
movzx eax, byte [eax]
mov edx, dword [esp + 0x30]
mov dword [esp + 0x70], edx
mov esi, dword [esp + 0x44]
mov dword [esp + 0x74], esi
cmp eax, 0x6a
je 0x401770
jmp 0x4018d7