Function at 0x401940
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
mov dword [ebp - 0x51], 8
mov dword [ebp - 0x69], 0xe
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x61], 0xb
mov dword [ebp - 0x65], 0xc
mov dword [ebp - 0x1c], 0x5d7c9fa2
mov dword [ebp - 0x55], 0x33
mov byte [ebp - 0x33], 0x65
mov byte [ebp - 0x32], 0x5a
mov byte [ebp - 0x31], 0x41
mov byte [ebp - 0x30], 0x47
mov byte [ebp - 0x2f], 0x46
mov byte [ebp - 0x2e], 0x52
mov byte [ebp - 0x2d], 0x5f
mov byte [ebp - 0x2c], 0x63
mov byte [ebp - 0x2b], 0x41
mov byte [ebp - 0x2a], 0x5c
mov byte [ebp - 0x29], 0x47
mov byte [ebp - 0x28], 0x56
mov byte [ebp - 0x27], 0x50
mov byte [ebp - 0x26], 0x47
mov byte [ebp - 0x25], 0
mov byte [ebp - 0x10], 0x70
mov byte [ebp - 0xf], 0x5c
mov byte [ebp - 0xe], 0x43
mov byte [ebp - 0xd], 0x4a
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 0xb], 0x5a
sub byte [ebp - 4], 0x12
mov byte [ebp - 0xa], 0x5f
mov byte [ebp - 9], 0x56
mov byte [ebp - 8], 0x76
mov byte [ebp - 7], 0x4b
mov byte [ebp - 6], 0x72
mov byte [ebp - 5], 0
cmp dword [ebp - 0x1c], 0x5d7c9fa2
je 0x401a60
add dword [ebp - 4], 0xb2e104a6
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
push eax
lea ecx, [ebp - 0x45]
push ecx
call fcn.00401c16
mov dword [ebp - 0x4d], eax
add esp, 8
mov dword [ebp - 0x71], eax
cmp dword [ebp - 0x71], 0
jne 0x401b5c
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x24], ecx
lea eax, [ebp - 0x33]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
call fcn.00401741
mov dword [ebp - 0x4d], eax
add esp, 8
mov dword [ebp - 0x6d], eax
cmp dword [ebp - 0x1c], 0x5d7c9fa2
je 0x401b01
push edx
cmp dword [ebp - 0x1c], 0x5d7c9fa2
je 0x401b32
mov word [ebp - 0x45], 0x78
mov word [ebp - 0x43], 0x56
mov word [ebp - 0x41], 0x41
mov word [ebp - 0x3f], 0x5d
mov word [ebp - 0x3d], 0x56
mov word [ebp - 0x3b], 0x5f
mov word [ebp - 0x39], 0
mov word [ebp - 0x37], 1
mov word [ebp - 0x35], 0
mov eax, dword fs:[0x30]
mov dword [ebp - 0x59], eax
mov dword [ebp - 0x6d], 0
mov dword [ebp - 0x5d], 0
push dword [ebp - 0x55]
push dword [ebp - 0x51]
lea eax, [ebp - 0x45]
push eax
call fcn.00401b92
push dword [ebp - 0x55]
push dword [ebp - 0x69]
lea eax, [ebp - 0x33]
push eax
call fcn.00403437
add esp, 0xc
mov eax, dword [ebp - 0x59]
mov ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x65]
mov dword [ebp - 0x49], ecx
mov eax, dword [ebp - 0x49]
mov ecx, dword [eax]
mov dword [ebp - 0x18], ecx
push dword [ebp - 0x55]
push dword [ebp - 0x61]
lea eax, [ebp - 0x10]
push eax
call fcn.00403437
add esp, 0xc
cmp dword [ebp - 0x1c], 0x5d7c9fa2
je 0x4019f0
cmp dword [ebp - 0x6d], 0
jne 0x401b09
jmp 0x401b70
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x6d]
add ecx, dword [eax + 0x18]
mov dword [ebp - 0x6d], ecx
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x18]
sub word [ebp - 4], 0x33e9
cmp dword [ebp - 0x1c], 0x5d7c9fa2
je 0x401a52
call fcn.00401741
mov dword [ebp - 0x4d], eax
add esp, 8
sub word [ebp - 4], 0x77e4
mov dword [ebp - 0x5d], eax
cmp dword [ebp - 0x5d], 0
jne 0x401b4e
jmp 0x401b70
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x5d]
add ecx, dword [eax + 0x18]
mov dword [ebp - 0x5d], ecx
jmp 0x401b70
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x49]
jne 0x4019f7
cmp dword [ebp - 0x6d], 0
jne 0x401b7b
or eax, 0xffffffff
jmp 0x401b8e
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x6d]
mov dword [eax], ecx
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x5d]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
mov esp, ebp
pop ebp
ret