Function at 0x401a17
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, dword fs:[0]
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x401836
push eax
mov dword fs:[0], esp
sub esp, 4
mov dword [ebp - 0x10], ecx
push ebx
push esi
push edi
push 0
mov ebx, 1
call fcn.00415f96
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x10]
add ecx, 0xd4
call fcn.00415f7e
mov byte [ebp - 4], bl
mov byte [ebp - 4], 2
mov edi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
add edi, 0x170
add ecx, 0x174
mov esi, 0x419590
mov dword [edi], 0x4196a0
call fcn.00415f90
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x10]
mov byte [ebp - 4], bl
mov byte [ebp - 4], 4
mov edi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
add edi, 0x170
add ecx, 0x188
mov dword [eax + 0x170], esi
call fcn.0040357f
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x10]
mov byte [ebp - 4], bl
mov byte [ebp - 4], 6
mov dword [eax + 0x1a8], 0
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
add eax, 0x170
add edi, 0x1ac
mov byte [ebp - 4], 7
mov dword [edi], 0x4196a0
mov ecx, dword [ebp - 0x10]
add ecx, 0x1b0
call fcn.00415f90
mov byte [ebp - 4], 8
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
mov byte [ebp - 4], 9
add edi, 0x1ac
mov ecx, dword [ebp - 0x10]
mov dword [eax + 0x1ac], esi
add ecx, 0x1c4
call fcn.0040357f
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 6
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
mov byte [ebp - 4], 0xc
add edi, 0x1e8
mov ecx, dword [ebp - 0x10]
add ecx, 0x1ec
mov dword [eax + 0x1e4], ebx
mov eax, dword [ebp - 0x10]
add eax, 0x1ac
mov dword [edi], 0x4196a0
call fcn.00415f90
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
mov byte [ebp - 4], 0xe
add edi, 0x1e8
mov ecx, dword [ebp - 0x10]
add ecx, 0x200
mov dword [eax + 0x1e8], esi
call fcn.0040357f
mov byte [ebp - 4], 0xf
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
mov byte [ebp - 4], 0x11
add edi, 0x224
mov ecx, dword [ebp - 0x10]
mov dword [eax + 0x220], 2
mov eax, dword [ebp - 0x10]
add ecx, 0x228
add eax, 0x1e8
mov dword [edi], 0x4196a0
call fcn.00415f90
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
mov byte [ebp - 4], 0x13
add edi, 0x224
mov ecx, dword [ebp - 0x10]
add ecx, 0x23c
mov dword [eax + 0x224], esi
call fcn.0040357f
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0x10
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
mov byte [ebp - 4], 0x16
mov dword [eax + 0x25c], 2
mov eax, dword [ebp - 0x10]
add edi, 0x260
add eax, 0x224
mov dword [edi], 0x4196a0
mov ecx, dword [ebp - 0x10]
add ecx, 0x264
call fcn.00415f90
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
mov byte [ebp - 4], 0x18
add edi, 0x260
mov ecx, dword [ebp - 0x10]
add ecx, 0x278
mov dword [eax + 0x260], esi
call fcn.0040357f
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
mov byte [ebp - 4], 0x1b
add edi, 0x29c
mov ecx, dword [ebp - 0x10]
mov dword [eax + 0x298], 2
mov eax, dword [ebp - 0x10]
add ecx, 0x2a0
add eax, 0x260
mov dword [edi], 0x4196a0
call fcn.00415f90
mov byte [ebp - 4], 0x1c
mov byte [ebp - 4], 0x1a
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
add ecx, 0x2b4
mov dword [eax + 0x29c], esi
mov esi, dword [ebp - 0x10]
call fcn.0040357f
mov byte [ebp - 4], 0x1e
add esi, 0x29c
mov eax, dword [ebp - 0x10]
mov byte [ebp - 4], 0x1a
mov esi, dword [ebp - 0x10]
push 0xa
mov dword [eax + 0x2d4], 0
mov byte [ebp - 4], 0x1f
add esi, 0x29c
mov ecx, dword [ebp - 0x10]
add ecx, 0x2d8
call fcn.00403831
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x10]
add ecx, 0x2f4
call sub.MFC30.DLL_CDialog::CDialog_1
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x10]
add ecx, 0x338
call fcn.00403f39
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x10]
add ecx, 0x368
call fcn.00403d36
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x338], 0x4195a8
mov byte [ebp - 4], 0x21
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov byte [ebp - 4], 0x20
add ecx, 0x338
mov esi, dword [ebp - 0x10]
mov dword [eax + 0x2f4], 0x4196b8
mov byte [ebp - 4], 0x25
add esi, 0x2f4
mov ecx, dword [ebp - 0x10]
add ecx, 0x380
call sub.MFC30.DLL_CString::CString_2
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x10]
add ecx, 0x38c
call sub.MFC30.DLL_CString::CString_2
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x10]
add ecx, 0x398
call sub.MFC30.DLL_CString::CString_2
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x10]
add ecx, 0x3a4
call sub.MFC30.DLL_CString::CString_2
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x10]
add ecx, 0x3b0
call sub.MFCO30.DLL_Ordinal_285
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x10]
add ecx, 0x3fc
call fcn.00415f7e
mov byte [ebp - 4], 0x2b
mov eax, dword [ebp - 0x10]
push 0x42002c
push 0
mov dword [eax], 0x419620
call dword [sym.imp.MSVCRT20.dll_setlocale]
add esp, 8
mov ecx, dword [ebp - 0x10]
lea edi, [ecx + 0x150]
mov dword [ecx + 0x168], ebx
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 4
sbb eax, eax
mov edx, dword [ebp - 0x10]
add eax, ebx
mov dword [edi], eax
cmp eax, ebx
sbb ecx, ecx
and cl, 0xfb
add ecx, 0x11
cmp eax, ebx
sbb eax, eax
mov dword [edx + 0x120], ecx
and al, 0xfe
add eax, 0xa
mov dword [edx + 0x164], eax
push 0
call dword [sym.imp.USER32.dll_GetDC]
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0xd4
call sub.MFC30.DLL_CDC::Attach
push 0x58
mov eax, dword [ebp - 0x10]
push dword [eax + 0xdc]
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
cmp eax, 0x78
jge 0x401599
xor ebx, ebx
mov eax, dword [ebp - 0x10]
push dword [eax + 0xd8]
mov dword [eax + 0x154], ebx
call dword [sym.imp.GDI32.dll_GetTextCharset]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
pop edi
pop esi
pop ebx
mov dword [ecx + 0x160], 0
mov byte [ecx + 0x124], al
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov esp, ebp
mov dword fs:[0], ecx
pop ebp
ret
mov ecx, 0x418148
jmp 0x401147