Function at 0x401dab
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd0
push ebx
push esi
push edi
push 0xc8
lea eax, [ebp - 0xd0]
push 0
push eax
call fcn.004802d0
mov word [ebp - 0xd0], 0x43
mov word [ebp - 0xce], 0x6f
mov word [ebp - 0xcc], 0x70
mov word [ebp - 0xca], 0x79
mov word [ebp - 0xc8], 0x72
mov word [ebp - 0xc6], 0x69
mov word [ebp - 0xc4], 0x67
mov word [ebp - 0xc2], 0x68
mov word [ebp - 0xc0], 0x74
mov word [ebp - 0xbe], 0x20
mov word [ebp - 0xbc], 0x40
mov word [ebp - 0xba], 0x20
mov word [ebp - 0xb8], 0x77
mov word [ebp - 0xb6], 0x77
mov word [ebp - 0xb4], 0x77
mov word [ebp - 0xb2], 0x2e
mov word [ebp - 0xb0], 0x76
mov word [ebp - 0xae], 0x65
mov word [ebp - 0xac], 0x72
mov word [ebp - 0xaa], 0x79
mov word [ebp - 0xa8], 0x70
mov word [ebp - 0xa6], 0x64
mov word [ebp - 0xa4], 0x66
mov word [ebp - 0xa2], 0x2e
mov word [ebp - 0xa0], 0x63
mov word [ebp - 0x9e], 0x6f
mov word [ebp - 0x9c], 0x6d
mov word [ebp - 0x9a], 0x20
mov word [ebp - 0x98], 0x49
mov word [ebp - 0x96], 0x6e
mov word [ebp - 0x94], 0x63
mov word [ebp - 0x92], 0x2e
call fcn.0047fd17
lea eax, [ebp - 8]
push eax
call fcn.0047fc0d
lea eax, [ebp - 8]
push eax
call fcn.0047faad
mov esi, dword [eax + 0x14]
mov edi, dword [eax + 0x10]
mov eax, dword [eax + 0xc]
mov ebx, dword [sym.imp.USER32.dll_MessageBoxW]
add esp, 0x14
add esi, 0x76c
inc edi
cmp esi, 0x7d1
mov dword [ebp - 4], eax
jne 0x401f46
cmp edi, 1
jne 0x401f81
cmp eax, edi
jne 0x401fcc
push 0x40
lea eax, [ebp - 0xd0]
push 0
push eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call ebx
cmp esi, 0x7d5
jne 0x401f75
cmp edi, 0xa
jne 0x402067
cmp dword [ebp - 4], 1
jne 0x4020d4
push 0x40
lea eax, [ebp - 0xd0]
push 0
push eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call ebx
cmp esi, 0x7d1
jne 0x402034
cmp edi, 8
jne 0x401fa4
cmp dword [ebp - 4], 1
jne 0x4020d4
push 0x40
lea eax, [ebp - 0xd0]
push 0
push eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call ebx
cmp edi, 7
jne 0x401fc7
cmp dword [ebp - 4], 0x13
jne 0x4020d4
push 0x40
lea eax, [ebp - 0xd0]
push 0
push eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call ebx
cmp edi, 1
jne 0x401fea
cmp dword [ebp - 4], 0xd
jne 0x4020d4
push 0x40
lea eax, [ebp - 0xd0]
push 0
push eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call ebx
cmp edi, 5
jne 0x40200d
cmp dword [ebp - 4], 0xd
jne 0x4020d4
push 0x40
lea eax, [ebp - 0xd0]
push 0
push eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call ebx
cmp edi, 6
jne 0x4020d4
cmp dword [ebp - 4], 0xd
jne 0x4020d4
push 0x40
lea eax, [ebp - 0xd0]
push 0
push eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call ebx
cmp esi, 0x7d4
jne 0x40205f
cmp edi, 2
jne 0x40208e
cmp dword [ebp - 4], 1
jne 0x4020d4
push 0x40
lea eax, [ebp - 0xd0]
push 0
push eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call ebx
cmp esi, 0x7d5
jne 0x402086
cmp edi, 3
jne 0x4020b5
cmp dword [ebp - 4], 1
jne 0x4020d4
push 0x40
lea eax, [ebp - 0xd0]
push 0
push eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call ebx
cmp esi, 0x7d4
jne 0x4020ad
cmp edi, 4
jne 0x4020d4
cmp dword [ebp - 4], 1
jne 0x4020d4
push 0x40
lea eax, [ebp - 0xd0]
push 0
push eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call ebx
cmp esi, 0x7d5
jne 0x4020d4
cmp edi, 5
jne 0x4020d4
cmp dword [ebp - 4], 1
jne 0x4020d4
push 0x40
lea eax, [ebp - 0xd0]
push 0
push eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
call ebx
pop edi
pop esi
pop ebx
leave
ret