Function at 0x40bded
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6fc
push ebx
push esi
push edi
xor eax, eax
lea edi, [ebp - 0x27]
xor ebx, ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
lea edi, [ebp - 0xf]
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
lea edi, [ebp - 7]
stosd dword es:[edi], eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x2c], ebx
push eax
mov byte [ebp - 0x28], 0x49
mov byte [ebp - 0x27], 0x6e
mov byte [ebp - 0x26], 0x73
mov byte [ebp - 0x25], 0x74
mov byte [ebp - 0x24], 0x61
mov byte [ebp - 0x23], 0x6c
mov byte [ebp - 0x22], 0x6c
mov byte [ebp - 0x21], 0x65
mov byte [ebp - 0x20], 0x72
mov byte [ebp - 0x1f], 0x5c
mov byte [ebp - 0x1e], 0x43
mov byte [ebp - 0x1d], 0x6f
mov byte [ebp - 0x1c], 0x6d
mov byte [ebp - 0x1b], 0x70
mov byte [ebp - 0x1a], 0x6f
mov byte [ebp - 0x19], 0x6e
mov byte [ebp - 0x18], 0x65
mov byte [ebp - 0x17], 0x6e
mov byte [ebp - 0x16], 0x74
mov byte [ebp - 0x15], 0x73
mov byte [ebp - 0x14], 0x5c
mov byte [ebp - 0x13], bl
mov byte [ebp - 0x12], bl
mov byte [ebp - 8], 0x74
mov byte [ebp - 7], 0x69
mov byte [ebp - 6], 0x6e
mov byte [ebp - 5], bl
mov byte [ebp - 4], bl
mov byte [ebp - 0x10], 0x73
mov byte [ebp - 0xf], 0x65
mov byte [ebp - 0xe], 0x72
mov byte [ebp - 0xd], 0x76
mov byte [ebp - 0xc], 0x64
mov byte [ebp - 0xb], 0x61
mov byte [ebp - 0xa], 0x74
mov byte [ebp - 9], bl
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
je 0x40beb9
push 0x10
jmp 0x40c108
cmp dword [ebp + 8], ebx
jne 0x40bec5
push 1
jmp 0x40c108
mov esi, 0x446484
push esi
push dword [ebp + 8]
call fcn.00403aa0
pop ecx
test eax, eax
pop ecx
je 0x40bebe
cmp dword [ebp + 0xc], ebx
je 0x40bebe
push esi
push dword [ebp + 0xc]
call fcn.00403aa0
pop ecx
test eax, eax
pop ecx
je 0x40bebe
cmp dword [ebp + 0x10], ebx
je 0x40bebe
push str.H6w__h_owUM_0Zto1i5MM
call fcn.0040c181
mov esi, eax
pop ecx
cmp esi, ebx
mov dword [ebp - 0x30], esi
jge 0x40bf0d
push 2
jmp 0x40c108
call fcn.0040f2ff
push dword [ebp + 0x10]
lea eax, [ebp - 0x6fc]
push dword [ebp + 0xc]
push esi
push str._d_s_s
push eax
call fcn.0040421a
lea eax, [ebp - 0x6fc]
push esi
push eax
call fcn.0040dfae
push eax
lea eax, [ebp - 0x208]
push str._08lX
push eax
call fcn.0040421a
push 0x100
call fcn.0040330c
push dword [ebp + 8]
mov edi, eax
push edi
call fcn.00403f50
mov esi, 0x427758
push esi
push edi
call fcn.0041815a
add esp, 0x3c
test eax, eax
je 0x40bf8f
push esi
push ebx
call fcn.0041815a
pop ecx
cmp eax, ebx
pop ecx
je 0x40bf8f
push eax
lea eax, [ebp - 0x208]
push eax
call fcn.00403f60
pop ecx
pop ecx
jmp 0x40bf71
push edi
call fcn.0040320f
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x508]
push eax
call fcn.00403f50
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x508]
push eax
call fcn.00403f60
call fcn.0040db6e
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x508]
push eax
call fcn.0040c43d
add esp, 0x1c
mov dword [ebp + 8], eax
call fcn.0040db6e
cmp dword [ebp + 8], ebx
jne 0x40c0fe
cmp dword [ebp - 0x2c], 2
je 0x40c106
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x408]
push eax
call fcn.00403f50
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x308]
push eax
call fcn.00403f50
lea eax, [ebp - 0x108]
push 0xc8
push eax
push dword [ebp + 0xc]
push dword [ebp - 0x30]
call fcn.0040deff
lea eax, [ebp - 0x408]
push eax
lea eax, [ebp - 0x108]
push dword [ebp + 0x10]
push eax
call fcn.0040e0cf
lea eax, [ebp - 0x308]
push eax
lea eax, [ebp - 0x108]
push dword [ebp + 0x10]
push eax
call fcn.0040e0cf
lea eax, [ebp - 0x308]
push eax
lea eax, [ebp - 0x408]
push eax
call fcn.0040b730
add esp, 0x40
cmp eax, ebx
je 0x40c070
or eax, 0x10000000
mov dword [ebp + 8], eax
call fcn.0040db6e
call fcn.0040d92e
call fcn.0040b5a4
cmp eax, ebx
je 0x40c08b
or eax, 0x20000000
or dword [ebp + 8], eax
call fcn.0040db6e
call fcn.0040d92e
call fcn.0040b4a2
cmp eax, ebx
je 0x40c0a6
or eax, 0x40000000
or dword [ebp + 8], eax
call fcn.0040db6e
call fcn.0040d92e
push dword [ebp - 0x30]
lea esi, [ebp - 0x40]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0040b7ac
add esp, 0x1c
cmp eax, ebx
je 0x40c0d9
or eax, 0x80000000
or dword [ebp + 8], eax
call fcn.0040db6e
call fcn.0040d92e
call fcn.0040bcb8
cmp eax, ebx
je 0x40c0f4
or eax, 0x1000000
or dword [ebp + 8], eax
call fcn.0040db6e
call fcn.0040d92e
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
leave
ret
push 8
pop eax
jmp 0x40c101