Function at 0x40b370
Capabilities:
Contain obfuscated stackstrings

Disassembly:
inc esp
and al, 0x39
aad 0xc6
inc esp
and al, 0x3a
adc al, 0xc6
inc esp
and al, 0x3b
rol esi, cl
inc esp
and al, 0x3c
add eax, esi
inc esp
and al, 0x3d
rol esi, 1
inc esp
and al, 0x3e
or eax, 0x3f2444c6
ffreep st(6)
inc esp
and al, 0x40
inc ebx
mov byte [esp + 0x41], 0xdd
mov byte [esp + 0x42], 0x46
mov byte [esp + 0x43], 0xdb
mov byte [esp + 0x44], 0x35
mov byte [esp + 0x45], 0xd9
mov byte [esp + 0x46], 0x27
mov byte [esp + 0x47], 0xc7
mov byte [esp + 0x48], 0x51
mov byte [esp + 0x49], 0xc5
mov byte [esp + 0x4a], 0x2d
mov byte [esp + 0x4b], 0xc3
mov byte [esp + 0x4c], 0x53
mov byte [esp + 0x4d], 0xc1
mov byte [esp + 0x4e], 0x5b
mov byte [esp + 0x4f], 0xcf
mov byte [esp + 0x50], 0x59
mov byte [esp + 0x51], 0xcd
and al, 0x51
int 0xc6
inc esp
and al, 0x52
push edi
mov byte [esp + 0x53], 0xcb
mov byte [esp + 0x54], 0x5a
mov byte [esp + 0x55], 0xc9
mov byte [esp + 0x56], 0x1f
mov byte [esp + 0x57], 0xf7
mov byte [esp + 0x58], 0x68
mov byte [esp + 0x59], 0xf5
inc esp
and al, 0x59
cmc
mov byte [esp + 0x5a], 0x6b
mov byte [esp + 0x5b], 0xf3
mov byte [esp + 0x5c], 0x22
mov byte [esp + 0x5d], 0xf1
mov byte [esp + 0x5e], 0x11
mov byte [esp + 0x5f], 0xff
mov byte [esp + 0x60], 0x6f
mov byte [esp + 0x61], 0xfd
mov byte [esp + 0x62], 0x6f
mov byte [esp + 0x63], 0xe
push cs
add al, 0xeb
jnp 0x40b2f9
inc esp
and al, 0x64
sub eax, esi
inc esp
and al, 0x65
stc
mov byte [esp + 0x66], 0x76
mov byte [esp + 0x67], 0xe7
mov byte [esp + 0x68], 0x7a
mov byte [esp + 0x69], 0xe5
mov byte [esp + 0x6a], 0x71
mov byte [esp + 0x68], 0x38
adc ebp, dword [ebp + 0x2444c6e3]
insb byte es:[edi], dx
or al, dh
inc esp
and al, 0x6d
loope 0x40b32e
inc esp
and al, 0x6e
pop es
mov byte [esp + 0x6f], 0xef
out dx, eax
mov byte [esp + 0x70], pe_nt_image_headers32
mov byte [esp + 0x71], 0xed
mov byte [esp + 0x72], 7
mov byte [esp + 0x73], 0xeb
mov byte [esp + 0x74], 0x77
mov byte [esp + 0x75], 0xe9
mov byte [esp + 0x76], 0x45
mov byte [esp + 0x77], 0x97
mov byte [esp + 0x78], 0x4f
mov byte [esp + 0x79], 0x95
mov byte [esp + 0x7a], 0x48
mov byte [esp + 0x7b], 0x93
mov byte [esp + 0x7c], 0x4d
mov byte [esp + 0x7d], 0x91
mov byte [esp + 0x43], 0x81
cmp bl, dh
inc esp
mov byte [esp + 0x70], 0xe0
dec esi
mov bh, 0x9f
mov byte [esp + 0x80], 0x4d
mov byte [esp + 0x81], 0x9d
mov byte [esp + 0x82], 0x4b
mov byte [esp + 0x83], 0x9b
mov byte [esp + 0x84], 0x41
mov byte [esp + 0x85], 0x99
mov byte [esp + 0x86], 0x5f
mov byte [esp + 0x87], 0x87
mov byte [esp + 0x88], 0x5f
mov byte [esp + 0x89], 0x85
mov byte [esp + 0x8a], 0x5c
mov byte [esp + 0x8b], 0x83
mov byte [esp + 0x8c], 0x5c
mov byte [esp + 0x8d], 0x81
mov byte [esp + 0x8e], 0x51
mov byte [esp + 0x8f], 0x8f
mov byte [esp + 0x90], 0x53
mov byte [esp + 0x91], 0x8d
mov byte [esp + 0x92], 0x5b
mov byte [esp + 0x93], 0x8b
mov byte [esp + 0x94], 0x51
mov byte [esp + 0x95], 0x89
mov byte [esp + 0x96], 0x66
mov byte [esp + 0x97], 0xb7
mov byte [esp + 0x98], 0x64
mov byte [esp + 0x99], 0xb5
mov byte [esp + 0x9a], 0xb2
mov byte [esp + 0x9b], 0xb3
mov dword [esp + 0x9c], 0
mov dword [esp + 0x1c], 0
mov eax, dword [esp + 0x1c]
cmp eax, 0x70
jae 0x40b50f
jmp 0x40b4c5
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
sbb al, 0x8b
dec esp
and al, 0x1c
add al, ah
dec esi
mov bh, 0xb6
dec esp
or al, 0x30
mov edx, eax
add edx, 0x3c289e7a
add eax, 0x7a
and eax, ecx
or edx, ecx
sub edx, eax
mov dword [esp + 0x158], edx
mov eax, dword [esp + 0x158]
add al, 0xaa
mov ecx, dword [esp + 0x1c]
mov byte [esp + ecx + 0x30], al
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
cmp eax, 0x70
jb 0x40b4c8
mov eax, 0x448d00eb
and al, 0x30
jmp 0x40b512
lea eax, [esp + 0x30]
lea ecx, [esp + 0xb8]
lea edx, [esp + 0x144]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0040c3dc
jmp 0x40b536
test al, 1
jne 0x40b53f
jmp 0x40ba54
mov byte [esp + 0x17], 0
mov al, byte [esp + 0xac]
mov byte [esp + 0xc8], al
mov byte [esp + 0x100], 0x82
mov byte [esp + 0x101], pe_nt_image_headers32
mov byte [esp + 0x102], 0x74
mov byte [esp + 0x103], 0x6c
mov byte [esp + 0x104], 0x70
mov byte [esp + 0x105], 0xa1
mov byte [esp + 0x106], 0x6d
mov byte [esp + 0x107], 0x7b
mov byte [esp + 0x108], 0x61
mov byte [esp + 0x109], 0x70
mov byte [esp + 0x10a], 0x71
mov byte [esp + 0x10b], 0x88
mov byte [esp + 0x10c], 0xa4
mov byte [esp + 0x10d], 0x66
mov byte [esp + 0x10e], 0x65
mov byte [esp + 0x10f], 0x6b
mov byte [esp + 0x110], 0x6d
mov byte [esp + 0x111], 0x7a
mov byte [esp + 0x112], 0x60
mov byte [esp + 0x113], 0x72
mov byte [esp + 0x114], 0x62
mov byte [esp + 0x115], 0x7a
mov byte [esp + 0x116], 0x6e
mov byte [esp + 0x117], 0x62
mov byte [esp + 0x118], 0x6f
mov byte [esp + 0x119], 0x6f
mov byte [esp + 0x11a], 0x73
mov byte [esp + 0x11b], 0x7a
mov byte [esp + 0x11c], 0x68
mov byte [esp + 0x11d], 0x76
mov byte [esp + 0x11e], 0x6b
mov byte [esp + 0x11f], 0x8c
mov byte [esp + 0x120], 0x48
mov byte [esp + 0x121], 0x67
mov byte [esp + 0x122], 0x24
lea eax, [esp + 0x100]
add eax, 0x23
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.004095fc
mov dword [esp + 0x20], 0
mov eax, dword [esp + 0x20]
cmp eax, 0x2f
jae 0x40b703
jmp 0x40b6a1
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x20]
and al, 0x20
movzx ecx, byte [esp + ecx + 0x100]
add eax, 0xcacfb061
mov edx, eax
and edx, ecx
mov esi, eax
xor esi, ecx
lea edx, [esi + edx*2]
or eax, ecx
xor esi, eax
add esi, esi
sub edx, esi
mov dword [esp + 0x15c], edx
mov eax, dword [esp + 0x15c]
mov ecx, eax
xor ecx, 0x58
cmp byte [eax], 0x13
lodsd eax, dword [esi]
loopne 0x40b73a
lea eax, [ecx + eax*2]
inc al
mov ecx, dword [esp + 0x20]
mov byte [esp + ecx + 0x100], al
mov eax, dword [esp + 0x20]
inc eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
or dword [esi], 4
jmp 0x40b77c
js 0x40b734
jb 0x40b6a7
jmp 0x40b709
mov eax, dword [esp + 0xb8]
jmp 0x40b712
lea ecx, [esp + 0x100]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040cc12
mov dword [esp + 0xb0], eax
jmp 0x40b72e
mov eax, dword [esp + 0xb0]
jmp 0x40b737
add bl, ch
add bl, ch
add byte [ebx - 0x7bf0ff08], al
fild word [edx]
add byte [eax], al
jmp 0x40b739
cmp eax, 0
je 0x40ba21
clc
add byte [edi], cl
test bh, bl
add al, byte [eax]
add al, ch
or eax, dword [eax]
add byte [edx + 0xa82484], cl
add byte [eax], al
call fcn.0040f752
mov al, byte [esp + 0xa8]
mov byte [esp + 0xcc], al
mov byte [esp + 0xf0], 0x42
mov byte [esp + 0xf1], 0x34
mov byte [esp + 0xf2], 0x79
mov byte [esp + 0xf3], 0x73
mov byte [esp + 0xf4], 0x6d
insd dword es:[edi], dx
mov byte [esp + 0xf5], 0x73
mov byte [esp + 0xf6], 0x42
mov byte [esp + 0xf7], 0xf
mov byte [esp + 0xfa], 0
mov word [esp + 0xf8], 0
mov dword [esp + 0x24], 0
mov eax, dword [esp + 0x24]
or dword [esi], 4
jmp 0x40b830
mov esp, 0x13824
add byte [eax], al
setne al
test al, 1
jne 0x40b843
jmp 0x40ba27
mov eax, dword [esp + 0x138]
mov byte [eax], 0
mov eax, dword [esp + 0xb0]
add eax, 0x22
mov dword [esp + 0x134], eax
mov eax, dword [esp + 0x134]
mov dword [esp], eax
call 0xf14096a8
loopne 0x40b8bd
mov bh, 0x89
test byte [eax + esi], ah
add dword [eax], eax
add bh, al
inc esp
and al, 0x28
add byte [eax], al
add byte [eax], al
mov eax, dword [esp + 0x28]
mov bh, 0x83
add byte ds:[ebp + 4], dh
mov eax, ebx
jmp 0x40b9f9
ret
je 0x40b9ac
inc esp
add byte [ecx + 0x4489240c], cl
and al, 0x89
inc esp
and al, 4
call fcn.0040c3bd
mov byte [esp + 0x17], 1
jmp 0x40ba38
jmp 0x40ba3a
jmp 0x40ba3c
mov eax, dword [esp + 0xb8]
shufps xmm0, xmmword [esp + 0xf], 1