Function at 0x40215016
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0x30]
sub esp, 0x58
mov eax, dword [eax + 0xc]
push ebx
push esi
push edi
mov ecx, dword [eax + 0x14]
xor ebx, ebx
jmp 0x40215070
movzx esi, word [ecx + 0x24]
mov edx, ebx
shr esi, 1
mov edi, dword [ecx + 0x28]
je 0x4021505c
movzx eax, word [edi]
lea edi, [edi + 2]
cmp eax, 0x61
jb 0x4021504c
add eax, 0xffe0
imul edx, edx, 0x83
movzx eax, ax
add edx, eax
sub esi, 1
jne 0x4021503c
and edx, 0x7fffffff
cmp edx, 0x1cca9ce6
je 0x40215234
mov ecx, dword [ecx]
test ecx, ecx
jne 0x4021502f
mov esi, ebx
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0x10]
cmp dword [eax + 0x68], ebx
je 0x4021522b
push ebx
mov edx, 0x1ab9b854
mov ecx, esi
call fcn.40215a9f
push eax
mov edx, 0x7f201f78
mov dword [ebp - 0x58], eax
mov ecx, esi
call fcn.40215a9f
push dword [ebp - 0x58]
mov edx, 0x5e893462
mov dword [ebp - 0x54], eax
mov ecx, esi
call fcn.40215a9f
push dword [ebp - 0x58]
mov edx, 0x6488073
mov dword [ebp - 0x50], eax
mov ecx, esi
call fcn.40215a9f
push dword [ebp - 0x58]
mov edx, 0x705cf2a5
mov dword [ebp - 0x4c], eax
mov ecx, esi
call fcn.40215a9f
push dword [ebp - 0x58]
mov edx, 0x62c9cfc9
mov dword [ebp - 0x48], eax
mov ecx, esi
call fcn.40215a9f
push dword [ebp - 0x58]
mov edx, 0x9515a5a
mov dword [ebp - 0x44], eax
mov ecx, esi
call fcn.40215a9f
push dword [ebp - 0x58]
mov edx, 0x3f858053
mov dword [ebp - 0x40], eax
mov ecx, esi
call fcn.40215a9f
push dword [ebp - 0x58]
mov edx, 0x2541ded7
mov dword [ebp - 0x3c], eax
mov ecx, esi
call fcn.40215a9f
push dword [ebp - 0x58]
mov edx, 0x64e0689
mov dword [ebp - 0x38], eax
mov ecx, esi
call fcn.40215a9f
push dword [ebp - 0x58]
mov edx, 0x40955b13
mov dword [ebp - 0x34], eax
mov ecx, esi
call fcn.40215a9f
add esp, 0x2c
mov dword [ebp - 0x30], eax
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x6c64746e
mov word [ebp - 4], 0x6c
push eax
call dword [ebp - 0x54]
push dword [ebp - 0x58]
mov esi, eax
mov edx, 0xdb579cb
mov ecx, esi
call fcn.40215a9f
push dword [ebp - 0x58]
mov edx, 0x1518e9c0
mov dword [ebp - 0x2c], eax
mov ecx, esi
call fcn.40215a9f
pop ecx
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x14]
pop ecx
push eax
mov dword [ebp - 0x14], 0x696e6957
mov dword [ebp - 0x10], 0x2e74656e
mov dword [ebp - 0xc], 0x6c6c64
call dword [ebp - 0x54]
mov esi, eax
push dword [ebp - 0x58]
mov edx, 0x8c4b642
mov ecx, esi
call fcn.40215a9f
push dword [ebp - 0x58]
mov edx, 0x317c5599
mov dword [ebp - 0x24], eax
mov ecx, esi
call fcn.40215a9f
push dword [ebp - 0x58]
mov edx, 0x3461af2f
mov dword [ebp - 0x20], eax
mov ecx, esi
call fcn.40215a9f
push dword [ebp - 0x58]
mov edx, 0x35315a4f
mov dword [ebp - 0x1c], eax
mov ecx, esi
call fcn.40215a9f
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x40
push 0x3000
push 0x44
push ebx
call dword [ebp - 0x50]
mov esi, eax
lea eax, [ebp - 0x58]
push 0x44
push eax
push esi
call dword [ebp - 0x28]
mov eax, dword [esp - 0x10]
add eax, 0x31
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebx
push ebx
push esi
push eax
nop
nop
nop
nop
push ebx
push ebx
call dword [ebp - 0x40]
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ecx + 0x10]
jmp 0x40215076