Function at 0x404130
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
push ebx
push esi
push edi
nop
bt eax, 0xe0
xor ah, 0x3d
sub al, 0xb5
test ebp, ebx
xor al, al
xadd eax, eax
xadd ah, al
neg eax
imul eax, ebx, 0x78b3bbf9
inc eax
imul eax, edx, 0xf9539b11
and eax, 0xc7e2d3ce
movsx eax, si
bsf eax, ecx
movsx eax, bx
btc eax, 0xb
dec eax
test cl, bl
mov eax, 0x2e383802
mov ah, 0x3d
mov ah, 0x8e
shrd eax, ebp, cl
movzx eax, dh
movsx eax, bl
test ecx, eax
shrd eax, esi, cl
rcl ah, 0x62
test ecx, edi
imul eax, ebp
bsf eax, edx
xadd al, ah
test edi, esi
dec al
bswap eax
dec ah
sub al, cl
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
mov bl, 0x20
mov al, 0x6d
push 0
mov byte [ebp - 0x40], 0x48
mov byte [ebp - 0x3f], 0x65
mov byte [ebp - 0x3e], 0x6c
mov byte [ebp - 0x3d], 0x6c
mov byte [ebp - 0x3c], 0x6f
mov byte [ebp - 0x3b], 0x2c
mov byte [ebp - 0x3a], bl
mov byte [ebp - 0x39], 0x50
mov byte [ebp - 0x38], 0x72
mov byte [ebp - 0x37], 0x6f
mov byte [ebp - 0x36], 0x67
mov byte [ebp - 0x35], 0x72
mov byte [ebp - 0x34], 0x61
mov byte [ebp - 0x33], al
mov byte [ebp - 0x32], al
mov byte [ebp - 0x31], 0x65
mov byte [ebp - 0x30], 0x72
mov byte [ebp - 0x2f], 0x73
mov byte [ebp - 0x2e], 0x21
mov byte [ebp - 0x2d], 0
call esi
push 0
call esi
push 0
call esi
push 0
mov byte [ebp - 8], 0x48
mov byte [ebp - 7], 0x65
mov byte [ebp - 6], 0x6c
mov byte [ebp - 5], 0x6c
mov byte [ebp - 4], 0x6f
mov byte [ebp - 3], 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
mov byte [ebp - 0x18], 0x73
mov byte [ebp - 0x17], 0x31
mov byte [ebp - 0x16], bl
mov byte [ebp - 0x15], 0x6c
mov byte [ebp - 0x14], 0x65
mov byte [ebp - 0x13], 0x73
mov byte [ebp - 0x12], 0x73
mov byte [ebp - 0x11], bl
mov byte [ebp - 0x10], 0x74
mov byte [ebp - 0xf], 0x68
mov byte [ebp - 0xe], 0x61
mov byte [ebp - 0xd], 0x6e
mov byte [ebp - 0xc], bl
mov byte [ebp - 0xb], 0x73
mov byte [ebp - 0xa], 0x32
mov byte [ebp - 9], 0
call esi
push 0
call esi
push 0
call esi
mov byte [ebp - 0x2c], 0x73
mov byte [ebp - 0x2b], 0x31
mov byte [ebp - 0x2a], bl
mov byte [ebp - 0x29], 0x67
mov byte [ebp - 0x28], 0x72
mov byte [ebp - 0x27], 0x65
mov byte [ebp - 0x26], 0x61
mov byte [ebp - 0x25], 0x74
push 0
mov byte [ebp - 0x24], 0x65
mov byte [ebp - 0x23], 0x72
mov byte [ebp - 0x22], bl
mov byte [ebp - 0x21], 0x74
mov byte [ebp - 0x20], 0x68
mov byte [ebp - 0x1f], 0x61
mov byte [ebp - 0x1e], 0x6e
mov byte [ebp - 0x1d], bl
mov byte [ebp - 0x1c], 0x73
mov byte [ebp - 0x1b], 0x32
mov byte [ebp - 0x1a], 0
call esi
push 0
call esi
push 0
call esi
mov cl, 0x64
mov al, 0x69
push 0
mov byte [ebp - 0x58], 0x73
mov byte [ebp - 0x57], 0x31
mov byte [ebp - 0x56], bl
mov byte [ebp - 0x55], 0x61
mov byte [ebp - 0x54], 0x6e
mov byte [ebp - 0x53], cl
mov byte [ebp - 0x52], bl
mov byte [ebp - 0x51], 0x73
mov byte [ebp - 0x50], 0x32
mov byte [ebp - 0x4f], bl
mov byte [ebp - 0x4e], 0x61
mov byte [ebp - 0x4d], 0x72
mov byte [ebp - 0x4c], 0x65
mov byte [ebp - 0x4b], bl
mov byte [ebp - 0x4a], al
mov byte [ebp - 0x49], cl
mov byte [ebp - 0x48], 0x65
mov byte [ebp - 0x47], 0x6e
mov byte [ebp - 0x46], 0x74
mov byte [ebp - 0x45], al
mov byte [ebp - 0x44], 0x63
mov byte [ebp - 0x43], 0x61
mov byte [ebp - 0x42], 0x6c
mov byte [ebp - 0x41], 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
lea eax, [ebp - 8]
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040a390
add esp, 8
test eax, eax
je 0x40437e
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
nop
bt eax, 0xe0
xor ah, 0x3d
sub al, 0xb5
test ebp, ebx
xor al, al
xadd eax, eax
xadd ah, al
neg eax
imul eax, ebx, 0x78b3bbf9
inc eax
imul eax, edx, 0xf9539b11
and eax, 0xc7e2d3ce
movsx eax, si
bsf eax, ecx
movsx eax, bx
btc eax, 0xb
dec eax
test cl, bl
mov eax, 0x2e383802
mov ah, 0x3d
mov ah, 0x8e
shrd eax, ebp, cl
movzx eax, dh
movsx eax, bl
test ecx, eax
shrd eax, esi, cl
rcl ah, 0x62
test ecx, edi
imul eax, ebp
bsf eax, edx
xadd al, ah
test edi, esi
dec al
bswap eax
dec ah
sub al, cl
push 0
call esi
push 0
call esi
push 0
call esi
lea edx, [ebp - 8]
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040a390
add esp, 8
mov edi, eax
push 0
call esi
push 0
call esi
push 0
call esi
test edi, edi
jne 0x404427
lea ecx, [ebp - 0x58]
push ecx
call fcn.00404c74
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
call esi
push 0
call esi
push 0
call esi
test edi, edi
jge 0x40443d
lea edx, [ebp - 0x18]
push edx
jmp 0x404441
lea eax, [ebp - 0x2c]
push eax
call fcn.00404c74
add esp, 4
push 0
call esi
push 0
call esi
push 0
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret