Function at 0x401930
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push esi
push edi
push ebx
and esp, 0xfffffff8
sub esp, 0x78
mov eax, dword [reloc.x00x00x00x8bD_x1cx98xa0xc3x89D_x1cx89t_x10x89D__x89xb4_xcx00x00x80x00x00x88x1cx00x00x00x00x89x01x00x00x00xc7D_x12xd8x89xbc_xe9xc6x01x00x8bD__x89xbc_x90x00x00x00x89_x14x88xd8x00x00x0fxe8xd2xa9xf3x_x8bx14_x0cxccxc4x8fx83xc6D__x89x18x00x00x00x00x89x00x00x00x00x8bD_x1cx98xa0xc3x89D_x1cx89t_x10x89D__x89xb4_xcx00x00x80x00x00x88x1cx00x00x00x00x89x01x00x00x00xc7D_x12xd8x89xbc_xe9xc6x01x00x8]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
mov byte [esp + 0x5f], 0xd9
mov dword [esp + 0x58], 0x211e9b82
mov bl, byte [esp + 0x67]
mov bh, bl
xor bh, 0xc7
mov byte [esp + 0x67], bh
mov word [esp + 0x4a], 0x9c77
mov si, word [esp + 0x72]
mov edi, dword [esp + 0x58]
add edi, 0xdee16536
movzx eax, byte [eax]
mov word [esp + 0x72], si
cmp eax, edi
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x30], edx
mov byte [esp + 0x2f], bl
mov word [esp + 0x2c], si
jne 0x4019be
mov al, byte [esp + 0x2f]
xor al, 0xff
mov byte [esp + 0x67], al
mov dword [esp + 0x3c], 1
mov cx, word [esp + 0x2c]
add cx, cx
mov word [esp + 0x72], cx
jmp 0x401bbc
mov eax, dword [reloc.x00x00x00x8bD_x1cx98xa0xc3x89D_x1cx89t_x10x89D__x89xb4_xcx00x00x80x00x00x88x1cx00x00x00x00x89x01x00x00x00xc7D_x12xd8x89xbc_xe9xc6x01x00x8bD__x89xbc_x90x00x00x00x89_x14x88xd8x00x00x0fxe8xd2xa9xf3x_ccxc4x8fx83xc6D__x89x18x00x00x00x00x89x00x00x00x00x8bD_x1cx98xa0xc3x89D_x1cx89t_x10x89D__x89xb4_xcx00x00x80x00x00x88x1cx00x00x00x00x89x01x00x00x00xc7D_x12xd8x89xbc_xe9xc6x01x00x8bD__x89xbc__]
movzx eax, byte [eax]
cmp eax, 0x6a
je 0x401bf7
jmp 0x401a01
mov dword [esp + 0x3c], 0
jmp 0x401bbc
mov dword [esp + 0x44], 0
mov al, 0x8b
mov cl, byte [esp + 0x2f]
mov byte [esp + 0x2b], al
mov al, cl
mov dl, byte [esp + 0x2b]
mul dl
mov byte [esp + 0x67], al
jmp 0x401bc8
lea eax, [esp + 0x4c]
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x60], ecx
mov dword [esp + 0x4c], 0x20736520
mov dword [esp + 0x50], 0x20707020
mov dword [esp + 0x54], 0x202020
mov byte [esp + 0x4c], 0x74
mov dl, byte [esp + 0x5f]
mov dh, 0x3e
sub dh, dl
mov di, word [esp + 0x2c]
mov si, di
imul esi, esi, 0x16c0
mov bx, si
xor dl, 0xf7
mov word [esp + 0x72], bx
mov byte [esp + 0x4f], 0x74
mov byte [esp + 0x50], 0x61
add ecx, 0x32d2e40e
mov dword [esp + 0x60], ecx
mov byte [esp + 0x53], dl
mov byte [esp + 0x54], dh
mov dl, byte [esp + 0x2f]
xor dl, 0x1f
mov byte [esp + 0x67], dl
mov byte [esp + 0x55], 0x78
mov word [esp + 0x72], di
mov ecx, dword [esp + 0x34]
add ecx, ecx
mov esi, dword [esp + 0x30]
adc esi, esi
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], esi
mov byte [esp + 0x56], 0x65
mov word [esp + 0x72], 0xa828
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [reloc.x00x00x00x8bD_x1cx98xa0xc3x89D_x1cx89t_x10x89D__x89xb4_xcx00x00x80x00x00x88x1cx00x00x00x00x89x01x00x00x00xc7D_x12xd8x89xbc_xe9xc6x01x00x8bD__x89xbc_x90x00x00x00x89_x14x88xd8x00x00x0fxe8xd2xa9xf3x_x89x18x00x00x00x00x89x00x00x00x00x8bD_x1cx98xa0xc3x89D_x1cx89t_x10x89D__x89xb4_xcx00x00x80x00x00x88x1cx00x00x00x00x89x01x00x00x00xc7D_x12xd8x89xbc_xe9xc6x01x00x8bD__x89xbc_x90x00x00x00x89_x]
call eax
sub esp, 4
cmp eax, 0
jne 0x401bd5
jmp 0x401c15
mov eax, dword [esp + 0x58]
add eax, 0xdee1687d
mov word [esp + 0x72], 0xf2d
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x34]
or edx, 0x6745809b
mov esi, dword [esp + 0x30]
mov dword [esp + 0x6c], esi
mov dword [esp + 0x68], edx
cmp ecx, eax
jl 0x401b38
jmp 0x401b2b
mov byte [esp + 0x49], 0x7d
mov al, byte [esp + 0x5f]
add al, 0x89
mov ecx, 0x6712ea25
mov edx, dword [esp + 0x34]
mov byte [esp + 0x2a], al
mov eax, edx
mul ecx
mov ecx, dword [esp + 0x30]
imul esi, ecx, 0x6712ea25
add edx, esi
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], edx
mov bl, byte [esp + 0x2a]
cmp byte [esp + 0x49], bl
jae 0x4019de
jmp 0x401bd5
mov dword [esp + 0x3c], 0
jmp 0x401bbc
xor eax, eax
mov ecx, dword [esp + 0x34]
add ecx, 0x2f822fd
mov edx, dword [esp + 0x30]
adc edx, 0
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], edx
mov dword [esp + 0x40], 0x61e
mov ecx, esp
mov dword [ecx], 0
mov ecx, dword [reloc.xb4_xcx00x00x80x00x00x88x1cx00x00x00x00x89x01x00x00x00xc7D_x12xd8x89xbc_xe9xc6x01x00x8bD__x89xbc_x90x00x00x00x89_x14x88xd8x00x00x0fxe8xd2xa9xf3xcbxcfxccxccxccxccxccxccxccxc2x06xc2xffxffxe9x12x_9t_x10x89D__x89xb4_xcx00x00x80x00x00x88x1cx00x00x00x00x89x01x00x00x00xc7D_x12xd8x89xbc_xe9xc6x01x00x8bD__x89xbc_x90x00x00x00x89_x14x88xd8x00x00x0fxe8xd2xa9xf3xcbxcfxccxccxccxccxccxccxccxc2]
mov dword [esp + 0x24], eax
call ecx
sub esp, 4
xor ecx, ecx
mov edx, esp
mov dword [edx + 0x10], 0
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov edx, dword [sym.imp.x89x8c_x8cx00x00x90x90xc1xbax94x00xb0x00x00x00x89x94_x90x00x00x8bx14_x0cxccxc4x8fx83xc6D__x89]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], ecx
call edx
sub esp, 0x14
mov ecx, dword [esp + 0x44]
add ecx, 1
mov dword [esp + 0x44], ecx
mov dword [esp + 0x18], eax
jmp 0x401bc8
mov eax, dword [esp + 0x3c]
lea esp, [ebp - 0xc]
pop ebx
pop edi
pop esi
pop ebp
ret
cmp word [esp + 0x4a], 0x5117
ja 0x401ab8
mov eax, 0x211e9b83
mov cx, 0x5b06
mov edx, dword [esp + 0x58]
mov si, word [esp + 0x2c]
sub cx, si
sub eax, edx
mov word [esp + 0x72], cx
mov dword [esp + 0x3c], eax
jmp 0x401bbc
mov eax, 0x211e9b83
sub eax, dword [esp + 0x58]
mov dword [esp + 0x3c], eax
mov cx, word [esp + 0x2c]
xor cx, 0xcd71
mov word [esp + 0x72], cx
jmp 0x401bbc
call fcn.00406d40
cmp eax, 0
jne 0x4019d1
jmp 0x401ae8