Function at 0x4016f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
push edi
and esp, 0xfffffff8
sub esp, 0x68
mov eax, dword [reloc._x89xc9xc4x89Ux08xffx05x84x00x00x00x00x00x00x81xc4x00x00x89xe5x89xc8x01x00x00x00x00x00x00x00x00x89xcex00x00Qxc7x8bxecxecx04x00x00x83xcex01xcdxc3x00x10x8bxcfx00x89xd6x83xc1xebxc1x89x84_xa0xb0x01_9T__x8ax1cx06x00x00x10x8bxbc_x9cxc3x8bG_x89xc9xc4x89Ux08xffx05x84x00x00x00x00x00x00x81xc4x00x00x89xe5x89xc8x01x00x00x00x00x00x00x00x00x89xcex00x00Qxc7x8bxecxecx04x00x00x83xcex01xcdxc3x00x1]
mov cl, byte [esp + 0x5f]
mov dl, cl
add dl, 0xe
mov byte [esp + 0x5f], dl
mov byte [esp + 0x63], 0x1d
mov dword [esp + 0x48], 0x641a0387
mov dl, byte [esp + 0x63]
add dl, 0x89
mov byte [esp + 0x33], dl
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0x71a9b3cc
mov si, word [esp + 0x60]
mov dl, byte [eax]
mov di, si
and di, 0xa1ef
mov word [esp + 0x60], di
movzx eax, dl
mov dl, cl
xor dl, 0xff
mov byte [esp + 0x5f], dl
cmp eax, 0xb8
mov word [esp + 0x2a], si
mov byte [esp + 0x29], cl
mov dword [esp + 0x24], eax
je 0x40177c
jmp 0x401958
mov dword [esp + 0x34], 0
jmp 0x4018a3
mov eax, dword [esp + 0x24]
xor eax, 0x5ea9870
mov dword [esp + 0x4c], eax
mov dword [esp + 0x34], 1
mov eax, dword [esp + 0x24]
mov dword [esp + 0x4c], eax
jmp 0x4018a3
mov byte [esp + 0x5f], 0x30
mov dword [esp + 0x34], 1
jmp 0x4018a3
cmp dword [esp + 0x2c], 0x3ff
jl 0x4018bb
jmp 0x40188e
call fcn.00406b20
cmp eax, 0
je 0x401874
mov dword [esp + 0x34], 0
jmp 0x4018a3
mov al, byte [esp + 0x63]
mov cl, 0x91
sub cl, al
mov dword [esp + 0x3c], 0x2d73652d
mov dword [esp + 0x40], 0x2d70702d
mov dword [esp + 0x44], 0x2d2d2d
mov dl, al
add dl, 0x5b
xor al, 0x7c
mov byte [esp + 0x3c], cl
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov byte [esp + 0x3f], 0x74
mov byte [esp + 0x40], al
mov byte [esp + 0x43], 0x2e
mov byte [esp + 0x44], 0x65
mov byte [esp + 0x45], dl
mov byte [esp + 0x46], 0x65
lea esi, [esp + 0x3c]
mov edi, dword [esp + 0x54]
mov eax, dword [esp + 0x50]
mov ebx, 0x72550c3
mul ebx
imul edi, edi, 0x72550c3
add edx, edi
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], edx
mov eax, esp
mov dword [eax], esi
mov eax, dword [fcn.0040a008]
call eax
sub esp, 4
cmp eax, 0
jne 0x40179e
jmp 0x4017c3
mov eax, dword [esp + 0x48]
add eax, 0x9be5fc79
mov dword [esp + 0x4c], 0x2f93ace4
mov dword [esp + 0x2c], eax
jmp 0x4017b0
mov al, byte [esp + 0x33]
mov cl, byte [esp + 0x63]
xor cl, 0x54
cmp cl, al
jb 0x40176f
jmp 0x40188e
mov al, 0x9d
mov cl, byte [esp + 0x29]
sub al, cl
mov byte [esp + 0x5f], al
mov eax, dword [esp + 0x34]
lea esp, [ebp - 0xc]
pop edi
pop ebx
pop esi
pop ebp
ret
xor eax, eax
mov dword [esp + 0x38], 0x61e
mov ecx, esp
mov dword [ecx], 0
mov ecx, dword [0x40a020]
mov dword [esp + 0x20], eax
call ecx
sub esp, 4
xor ecx, ecx
mov edx, esp
mov dword [edx + 0x10], 0
mov dword [edx + 0xc], 0
mov dword [edx + 8], 0
mov dword [edx + 4], 0
mov dword [edx], 0
mov edx, dword [sym.imp.84x00x00x00x00x00x00x81xc4x00x00x89xe5x89xc8x01x00x00x00x00x00x00x00x00x89xcex00x00Qxc7x8bxe]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ecx
call edx
sub esp, 0x14
mov ecx, dword [esp + 0x24]
sub ecx, 0x722322db
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x4c], ecx
mov si, word [esp + 0x2a]
and si, 0xb123
add edx, 1
mov word [esp + 0x60], si
mov dword [esp + 0x2c], edx
mov dword [esp + 0x14], eax
jmp 0x4017b0
mov eax, dword [esp + 0x48]
xor eax, 0x641a0386
mov dword [esp + 0x34], eax
jmp 0x4018a3
mov al, byte [esp + 0x29]
add al, 0x3d
mov byte [esp + 0x5f], al
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov esi, dword [reloc._x89xc9xc4x89Ux08xffx05x84x00x00x00x00x00x00x81xc4x00x00x89xe5x89xc8x01x00x00x00x00x00x00x00x00x89xcex00x00Qxc7x8bxecxecx04x00x00x83xcex01xcdxc3x00x10x8bxcfx00x89xd6x83xc1xebxc1x89x84_xa0xb0x01_8bxbc_x9cxc3x8bG_x89xc9xc4x89Ux08xffx05x84x00x00x00x00x00x00x81xc4x00x00x89xe5x89xc8x01x00x00x00x00x00x00x00x00x89xcex00x00Qxc7x8bxecxecx04x00x00x83xcex01xcdxc3x00x10x8bxcfx00x89xd6x83xc1_]
mov al, byte [esi]
add ecx, 0xd41b84f2
adc edx, 0xffffffff
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], edx
movzx ecx, al
cmp ecx, 0x6a
je 0x401946
jmp 0x4017de