Function at 0x401d90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x200
push ebx
push ebp
push esi
push edi
mov edx, 0x880
mov eax, 0xcc0
mov ebp, 0x99
mov ebx, 0xaa
mov esi, 0xcc
mov edi, 5
mov word [esp + 0x10], 0x1700
mov word [esp + 0x12], 0x800
mov word [esp + 0x14], 0x900
mov word [esp + 0x16], 0xa00
mov word [esp + 0x18], 0xc00
mov word [esp + 0x1a], 0xd00
mov word [esp + 0x1c], 0xe00
mov word [esp + 0x1e], 0xf00
mov word [esp + 0x20], 0x661
mov word [esp + 0x22], 0x772
mov word [esp + 0x24], 0x883
mov word [esp + 0x26], 0x994
mov word [esp + 0x28], 0xaa5
mov word [esp + 0x2a], 0xcc7
mov word [esp + 0x2c], 0xee9
mov word [esp + 0x2e], 0xffa
mov word [esp + 0x30], 0x520
mov word [esp + 0x32], 0x740
mov word [esp + 0x34], 0x850
mov word [esp + 0x36], 0x960
mov word [esp + 0x38], 0xa70
mov word [esp + 0x3a], 0xc90
mov word [esp + 0x3c], 0xda0
mov word [esp + 0x3e], 0xfc0
mov word [esp + 0x40], 0x660
mov word [esp + 0x42], 0x770
mov word [esp + 0x44], dx
mov word [esp + 0x46], 0x990
mov word [esp + 0x48], 0xaa0
mov word [esp + 0x4a], ax
mov word [esp + 0x4c], 0xee0
mov word [esp + 0x4e], 0xff0
mov word [esp + 0x50], 0x40
mov word [esp + 0x52], 0x151
mov word [esp + 0x54], 0x262
mov word [esp + 0x56], 0x484
mov word [esp + 0x58], 0x595
mov word [esp + 0x5a], 0x6a6
mov word [esp + 0x5c], 0x8c8
mov word [esp + 0x5e], 0xaea
mov word [esp + 0x60], 0x60
mov word [esp + 0x62], 0x171
mov word [esp + 0x64], 0x282
mov word [esp + 0x66], 0x393
mov word [esp + 0x68], 0x4a4
mov word [esp + 0x6a], 0x6c6
mov word [esp + 0x6c], 0x8e8
mov word [esp + 0x6e], 0x9f9
mov word [esp + 0x70], 0x66
mov word [esp + 0x72], 0x77
mov word [esp + 0x74], 0x88
mov word [esp + 0x76], bp
mov word [esp + 0x78], bx
mov word [esp + 0x7a], si
mov word [esp + 0x7c], 0xee
mov word [esp + 0x7e], 0xff
mov word [esp + 0x80], di
mov word [esp + 0x82], 0x27
mov word [esp + 0x84], 0x49
mov word [esp + 0x86], 0x5a
mov word [esp + 0x88], 0x7c
mov word [esp + 0x8a], 0x8d
mov word [esp + 0x8c], 0x9e
mov word [esp + 0x8e], 0xaf
mov word [esp + 0x90], 0x44
mov word [esp + 0x92], 0x55
mov word [esp + 0x94], 0x66
mov word [esp + 0x96], 0x77
mov word [esp + 0x98], 0x88
mov word [esp + 0x9a], bp
mov word [esp + 0x9c], bx
mov word [esp + 0x9e], si
mov esi, 0x500
mov word [esp + 0xb0], si
mov word [esp + 0xe0], di
mov word [esp + 0xf0], si
mov ebp, 0x888
mov ebx, 0xaaa
mov edi, 0xccc
mov esi, 0xfff
mov word [esp + 0xa0], 0
mov word [esp + 0xa2], 0x202
mov word [esp + 0xa4], 0x404
mov word [esp + 0xa6], 0x606
mov word [esp + 0xa8], 0x808
mov word [esp + 0xaa], 0xa0a
mov word [esp + 0xac], 0xc0c
mov word [esp + 0xae], 0xf0f
mov word [esp + 0xb2], 0x720
mov word [esp + 0xb4], 0x830
mov word [esp + 0xb6], 0x940
mov word [esp + 0xb8], 0xa50
mov word [esp + 0xba], 0xc70
mov word [esp + 0xbc], 0xd80
mov word [esp + 0xbe], 0xe90
mov word [esp + 0xc0], 0x505
mov word [esp + 0xc2], 0x727
mov word [esp + 0xc4], 0x838
mov word [esp + 0xc6], 0x949
mov word [esp + 0xc8], 0xa5a
mov word [esp + 0xca], 0xc7c
mov word [esp + 0xcc], 0xe9e
mov word [esp + 0xce], 0xfaf
mov word [esp + 0xd0], 0x50
mov word [esp + 0xd2], 0x272
mov word [esp + 0xd4], 0x494
mov word [esp + 0xd6], 0x5a5
mov word [esp + 0xd8], 0x7c7
mov word [esp + 0xda], 0x8d8
mov word [esp + 0xdc], 0x9e9
mov word [esp + 0xde], 0xafa
mov word [esp + 0xe2], 0x227
mov word [esp + 0xe4], 0x449
mov word [esp + 0xe6], 0x55a
mov word [esp + 0xe8], 0x77c
mov word [esp + 0xea], 0x88d
mov word [esp + 0xec], 0x99e
mov word [esp + 0xee], 0xaaf
mov word [esp + 0xf2], 0x722
mov word [esp + 0xf4], 0x944
mov word [esp + 0xf6], 0xa55
mov word [esp + 0xf8], 0xc77
mov word [esp + 0xfa], 0xd88
mov word [esp + 0xfc], 0xe99
mov word [esp + 0xfe], 0xfaa
mov word [esp + 0x100], 0x444
mov word [esp + 0x102], 0x666
mov word [esp + 0x104], bp
mov word [esp + 0x106], 0x999
mov word [esp + 0x108], bx
mov word [esp + 0x10a], di
mov word [esp + 0x10c], 0xeee
mov word [esp + 0x10e], si
mov word [esp + 0x110], 0
mov word [esp + 0x112], 0x222
mov word [esp + 0x114], 0x444
mov word [esp + 0x116], 0x666
mov word [esp + 0x118], bp
mov word [esp + 0x11a], bx
mov word [esp + 0x11c], di
mov word [esp + 0x11e], si
mov word [esp + 0x120], 0xfcc
mov word [esp + 0x122], 0xfc8
mov word [esp + 0x124], 0xfc4
mov word [esp + 0x126], 0xfc0
mov word [esp + 0x128], 0xf8c
mov word [esp + 0x12a], 0xf88
mov word [esp + 0x12c], 0xf84
mov word [esp + 0x12e], 0xf80
mov word [esp + 0x130], 0xf4c
mov word [esp + 0x132], 0xf48
mov word [esp + 0x134], 0xf44
mov word [esp + 0x136], 0xf40
mov word [esp + 0x138], 0xf0c
mov word [esp + 0x13a], 0xf08
mov word [esp + 0x13c], 0xf04
mov word [esp + 0x13e], 0xf00
mov word [esp + 0x140], 0xc88
mov word [esp + 0x142], 0xc84
mov word [esp + 0x144], 0xc80
mov word [esp + 0x146], 0xc48
mov word [esp + 0x148], 0xc44
mov word [esp + 0x14a], 0xc40
mov word [esp + 0x14c], 0xc08
mov word [esp + 0x14e], 0xc04
mov word [esp + 0x150], 0xc00
mov word [esp + 0x152], 0x844
mov word [esp + 0x154], 0x840
mov word [esp + 0x156], 0x804
mov word [esp + 0x158], 0x800
mov word [esp + 0x15a], 0x400
mov word [esp + 0x15c], 0xcfc
mov word [esp + 0x15e], 0xcf8
mov word [esp + 0x160], 0xcf4
mov word [esp + 0x162], 0xcf0
mov word [esp + 0x164], 0x8fc
mov word [esp + 0x166], 0x8f8
mov word [esp + 0x168], 0x8f4
mov word [esp + 0x16a], 0x8f0
mov word [esp + 0x16c], 0x4fc
mov word [esp + 0x16e], 0x4f8
mov word [esp + 0x170], 0x4f4
mov word [esp + 0x172], 0x4f0
mov word [esp + 0x174], 0xfc
mov word [esp + 0x176], 0xf8
mov word [esp + 0x178], 0xf4
mov word [esp + 0x17a], pe_nt_image_headers32
mov word [esp + 0x17c], 0x8c8
mov word [esp + 0x17e], 0x8c4
mov word [esp + 0x180], 0x8c0
mov word [esp + 0x182], 0x4c8
mov word [esp + 0x184], 0x4c4
mov word [esp + 0x186], 0x4c0
mov word [esp + 0x188], 0xc8
mov word [esp + 0x18a], 0xc4
mov word [esp + 0x18c], 0xc0
mov word [esp + 0x18e], 0x484
mov word [esp + 0x190], 0x480
mov word [esp + 0x192], 0x84
mov word [esp + 0x194], 0x80
mov word [esp + 0x196], 0x40
mov word [esp + 0x198], 0xccf
mov word [esp + 0x19a], 0xc8f
mov word [esp + 0x19c], 0xc4f
mov word [esp + 0x19e], 0xc0f
mov word [esp + 0x1a0], 0x8cf
mov word [esp + 0x1a2], 0x88f
mov word [esp + 0x1a4], 0x84f
mov word [esp + 0x1a6], 0x80f
mov word [esp + 0x1a8], 0x4cf
mov word [esp + 0x1aa], 0x48f
mov word [esp + 0x1ac], 0x44f
mov word [esp + 0x1ae], 0x40f
mov word [esp + 0x1b0], 0xcf
mov word [esp + 0x1b2], 0x8f
mov word [esp + 0x1b4], 0x4f
mov word [esp + 0x1b6], 0xf
mov word [esp + 0x1b8], 0x88c
mov word [esp + 0x1ba], 0x84c
mov word [esp + 0x1bc], 0x80c
mov word [esp + 0x1be], 0x48c
mov word [esp + 0x1c0], 0x44c
mov word [esp + 0x1c2], 0x40c
mov word [esp + 0x1c4], 0x8c
mov word [esp + 0x1c6], 0x4c
mov word [esp + 0x1c8], 0xc
mov word [esp + 0x1ca], 0x448
mov word [esp + 0x1cc], 0x408
mov word [esp + 0x1ce], 0x48
mov word [esp + 0x1d0], 8
mov word [esp + 0x1d2], 4
mov word [esp + 0x1d4], 0xffc
mov word [esp + 0x1d6], 0xff8
mov ebp, 0xcc4
mov edi, 0x884
mov esi, 0x440
mov ebx, 0xcc8
mov word [esp + 0x1de], bp
mov word [esp + 0x1e2], di
mov word [esp + 0x1e6], si
mov word [esp + 0x206], bp
mov word [esp + 0x20a], di
mov word [esp + 0x20e], si
mov word [esp + 0x1d8], 0xff4
mov word [esp + 0x1da], 0xff0
mov word [esp + 0x1dc], bx
mov word [esp + 0x1e0], ax
mov word [esp + 0x1e4], dx
mov word [esp + 0x1e8], 0xfcf
mov word [esp + 0x1ea], 0xf8f
mov word [esp + 0x1ec], 0xf4f
mov word [esp + 0x1ee], 0xf0f
mov word [esp + 0x1f0], 0xc8c
mov word [esp + 0x1f2], 0xc4c
mov word [esp + 0x1f4], 0xc0c
mov word [esp + 0x1f6], 0x848
mov word [esp + 0x1f8], 0x808
mov word [esp + 0x1fa], 0x404
mov word [esp + 0x1fc], 0xcff
mov word [esp + 0x1fe], 0x8ff
mov word [esp + 0x200], 0x4ff
mov word [esp + 0x202], 0xff
mov word [esp + 0x204], bx
mov word [esp + 0x208], ax
mov word [esp + 0x20c], dx
lea edi, [esp + 0x10]
lea esi, [ecx + 0x6c]
mov ebp, 0x100
mov ax, word [edi]
xor edx, edx
mov cl, al
add esi, 4
shr cl, 4
and cl, 0xf
add edi, 2
shl cl, 4
mov dl, cl
mov cl, al
and cl, 0xf
shl cl, 4
mov dh, cl
xor ecx, ecx
mov cl, ah
and cl, 0xf
shl cl, 4
shl edx, 8
and ecx, 0xff
or edx, ecx
dec ebp
mov dword [esi - 4], edx
jne 0x402709
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x200
ret