Function at 0x401720
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x84
mov dword [ebp - 0x54], 6
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x54]
sub ecx, 1
mov dword [ebp - 0x54], ecx
test eax, eax
je 0x40174b
mov edx, dword [ebp - 0x54]
imul edx, edx, 6
mov dword [ebp - 0x58], edx
jmp 0x401730
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x5c], 6
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x5c]
sub ecx, 1
mov dword [ebp - 0x5c], ecx
test eax, eax
je 0x401774
mov edx, dword [ebp - 0x5c]
imul edx, edx, 6
mov dword [ebp - 0x60], edx
jmp 0x401759
mov eax, 0x1c
mov word [ebp - 0x14], ax
mov ecx, 6
mov word [ebp - 0x12], cx
mov edx, 0x16
mov word [ebp - 0x10], dx
mov eax, 0x1e
mov word [ebp - 0xe], ax
mov ecx, 0x1e
mov word [ebp - 0xc], cx
mov edx, 0x7c
mov word [ebp - 0xa], dx
mov eax, 0x16
mov word [ebp - 8], ax
mov ecx, 0x1e
mov word [ebp - 6], cx
mov edx, 0x1e
mov word [ebp - 4], dx
xor eax, eax
mov word [ebp - 2], ax
mov byte [ebp - 0x50], 0x1c
mov byte [ebp - 0x4f], 0x26
mov byte [ebp - 0x4e], 3
mov byte [ebp - 0x4d], 0x27
mov byte [ebp - 0x4c], 0x37
mov byte [ebp - 0x4b], 0x20
mov byte [ebp - 0x4a], 0x2b
mov byte [ebp - 0x49], 0x1b
mov byte [ebp - 0x48], 0x3c
mov byte [ebp - 0x47], 0x34
mov byte [ebp - 0x46], 0x3d
mov byte [ebp - 0x45], 0x20
mov byte [ebp - 0x44], 0x3f
mov byte [ebp - 0x43], 0x33
mov byte [ebp - 0x42], 0x26
mov byte [ebp - 0x41], 0x3b
mov byte [ebp - 0x40], 0x3d
mov byte [ebp - 0x3f], 0x3c
mov byte [ebp - 0x3e], 2
mov byte [ebp - 0x3d], 0x20
mov byte [ebp - 0x3c], 0x3d
mov byte [ebp - 0x3b], 0x31
mov byte [ebp - 0x3a], 0x37
mov byte [ebp - 0x39], 0x21
mov byte [ebp - 0x38], 0x21
mov byte [ebp - 0x37], 0
mov dword [ebp - 0x64], 0
jmp 0x401845
mov ecx, dword [ebp - 0x64]
add ecx, 1
mov dword [ebp - 0x64], ecx
cmp dword [ebp - 0x64], 9
jae 0x401860
mov edx, dword [ebp - 0x64]
movzx eax, word [ebp + edx*2 - 0x14]
xor eax, 0x52
mov ecx, dword [ebp - 0x64]
mov word [ebp + ecx*2 - 0x14], ax
jmp 0x40183c
mov dword [ebp - 0x68], 0
jmp 0x401872
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x68], 0x19
jae 0x40188c
mov eax, dword [ebp - 0x68]
movsx ecx, byte [ebp + eax - 0x50]
xor ecx, 0x52
mov edx, dword [ebp - 0x68]
mov byte [ebp + edx - 0x50], cl
jmp 0x401869
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x6c], 5
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
sub eax, 1
mov dword [ebp - 0x6c], eax
test edx, edx
je 0x4018c6
mov ecx, dword [ebp - 0x6c]
imul ecx, ecx, 5
mov dword [ebp - 0x70], ecx
jmp 0x4018ab
cmp dword [ebp - 0x34], 0
je 0x40193e
mov dword [ebp - 0x74], 0
mov edx, dword [ebp - 0x74]
add edx, 1
mov dword [ebp - 0x74], edx
mov eax, dword [ebp - 0x74]
add eax, 1
mov dword [ebp - 0x74], eax
lea ecx, [ebp - 0x30]
push ecx
push 0x18
lea edx, [ebp - 0x2c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [ebp - 0x34]
test eax, eax
jl 0x401924
cmp dword [ebp - 0x30], 0x18
jne 0x401924
mov dword [ebp - 0x78], 0
jmp 0x401917
mov eax, dword [ebp - 0x78]
add eax, 1
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 7
jge 0x40191f
jmp 0x40190e
mov eax, dword [ebp - 0x18]
jmp 0x401982
mov dword [ebp - 0x7c], 0
jmp 0x401936
mov ecx, dword [ebp - 0x7c]
add ecx, 1
mov dword [ebp - 0x7c], ecx
cmp dword [ebp - 0x7c], 7
jge 0x40193e
jmp 0x40192d
mov dword [ebp - 0x80], 0
mov edx, dword [ebp - 0x80]
add edx, 1
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x80]
add eax, 9
mov dword [ebp - 0x80], eax
or eax, 0xffffffff
jmp 0x401982
mov esp, ebp
pop ebp
ret